# changelog

author: Fabio Valentini <decathorpe@gmail.com> - 0.20.3-1
changelog:
  - Update to version 0.20.3.
  - Enable all available features on appropriate architectures.
  - Fixes RHBZ#1951801


author: Sergio Lopez <slp@redhat.com> - 0.6.0-1
changelog:
  - Regenerate with rust2rpm 23
  - Update to version 0.6.0
  - Add license files, since crate has moved into a workspace


author: Sergio Lopez <slp@redhat.com> - 0.3.0-1
changelog:
  - Update to crate version 0.3.0
  - Enable all rust_arches except i686 (32 bits targets are not supported)
  - Add a patch fixing a new test broken on s390x


author: Sergio Lopez <slp@redhat.com> - 0.4.0-1
changelog:
  - Update to crate version 0.4.0
  - Switch to rust-packaging 21
  - Drop patch for s390x, as fix has been merged upstream


author: Sergio Lopez <slp@redhat.com> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Enable tests now that BZ#1902663 is fixed
  - Enable all rust_arches except i686 (32 bits targets are not supported)


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.24-6
changelog:
  - Add explicit service unit ordering, after multi-user.target
    Backports: https://github.com/coreos/zincati/pull/831


author: Jerry James <loganjerry@gmail.com> - 9.5-2
changelog:
  - Remove all support for 32-bit platforms
  - Remove the interactive shell argument from /usr/bin/sage (rhbz#2028403)


author: Jerry James <loganjerry@gmail.com> - 9.6-1
changelog:
  - Version 9.6
  - Fix path to libSingular.so (bz 2073208)
  - Fix threejs install location (bz 2081720)
  - Drop upstreamed -rubiks and -intersphinx-disabled-reftypes patches
  - Drop no longer used ratpoints BR
  - Thebe is no longer bundled


author: Jerry James <loganjerry@gmail.com> - 9.6-3
changelog:
  - Add patch for python 3.11 compatibility (bz 2099168)
  - Add workaround for symlink/directory conflict (bz 2097773)
  - Modify the jmol patch to timeout after 5 minutes.  This is a workaround for
    recently observed jmol hangs, but is not a proper fix.


author: Jerry James <loganjerry@gmail.com> - 9.6-7
changelog:
  - Fix failure to install (bz 2154932)
  - Fix failure to find nauty binaries (bz 2125737)
  - Convert License tags to SPDX


author: SaltStack Packaging Team <saltproject-packaging@vmware.com> - 3003.3-1
changelog:
  - Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - Update to version 4.17.2
  - Fix CVE-2022-3592: A malicious client can use a symlink to escape the
    exported


author: Guenther Deschner <gdeschner@redhat.com> - 4.17.3-0
changelog:
  - resolves: #2142959 - Update to version 4.17.3
  - resolves: #2140960, #2143117 - Security fixes for CVE-2022-42898


author: Guenther Deschner <gdeschner@redhat.com> - 4.17.4-0
changelog:
  - resolves: #2153906 - Update to version 4.17.4
  - resolves: #2154362, #2154363 - Security fixes for CVE-2022-38023
  - resolves: #2154303, #2154304 - Security fixes for CVE-2022-37966
  - resolves: #2154320, #2154322 - Security fixes for CVE-2022-37967


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.4-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - Create package dc-libs also for 'non-dc build'


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.1.1-6
changelog:
  - 2106390 - [RFE] sane-backends use systems-sysusers, the patch written by Pat Riehecky <riehecky@fnal.gov>


author: Watson Sato <wsato@redhat.com> - 0.1.60-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.60 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.60


author: Watson Sato <wsato@redhat.com> - 0.1.61-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.61 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.61


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.62-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.62 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.62


author: Watson Sato <wsato@redhat.com> - 0.1.63-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.63 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.63


author: Watson Sato <wsato@redhat.com> - 0.1.64-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.64 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.64


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.65-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.65 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.65


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.66-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.66 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.66


author: Derek Weitzel <dweitzel@unl.edu> - 0.7.0-1
changelog:
  - Changes from static analysis
  - If only one key is available, do not error on no kid
  - Support at+jwt profile


author: Christian Krause <chkr@fedoraproject.org> - 2.2.0-4
changelog:
  - Rebuilt for fluidsynth soname bump (#1976457)
  - Add upstream patches to support fluidsynth 2.2
  - Add upstream patch to fix compile issue on non-x86 architectures
  - Correct LGPLv2+ license tag


author: Christian Krause <chkr@fedoraproject.org> - 2.5.0-1
changelog:
  - Update to 2.5.0 (#2009713)
  - Remove patches already included upstream
  - Add upstream patch to allow building without tinygl
  - Flag bundled mt32emu library (#1991802)
  - Flag bundled lua (#1077764)
  - Update License tag and add more %license files
  - Add BR: giflib-devel and glew-devel


author: Neal Gompa <ngompa@fedoraproject.org> - 0.19.0^git20221123.3e48649-1
changelog:
  - Update to new snapshot
  - Add patch to support non-default wayland socket names for sway/weston/etc.
  - Refreshed patch for waiting on logind seat0 initialization


author: Vit Mojzis <vmojzis@redhat.com> - 1.3.0-1
changelog:
  - v 1.3.0
  - Silence warning in bison generated code
  - Drop dead stores
  - Declare file local variable static
  - Drop duplicate semicolons
  - Add missing fall through comment
  - Drop duplicate include
  - Update URLs after repository move
  - Add check example for W-012
  - Add new check to warn about incorrect usage of audit_access permission
  - Warn on duplicate policy configuration files
  - Reduce recursion in free_policy_node
  - Support disable commands for tunable conditions
  - Support ifn?def in .if files


author: Zdenek Pytela <zpytela@redhat.com> - 37.11-1
changelog:
  - Allow tor get filesystem attributes
  - Allow utempter append to login_userdomain stream
  - Allow login_userdomain accept a stream connection to XDM
  - Allow login_userdomain write to boltd named pipes
  - Allow staff_u and user_u users write to bolt pipe
  - Allow login_userdomain watch various directories
  - Update rhcd policy for executing additional commands 5
  - Update rhcd policy for executing additional commands 4
  - Allow rhcd create rpm hawkey logs with correct label
  - Allow systemd-gpt-auto-generator to check for empty dirs
  - Update rhcd policy for executing additional commands 3
  - Allow journalctl read rhcd fifo files
  - Update insights-client policy for additional commands execution 5
  - Allow init remount all file_type filesystems
  - Confine insights-client systemd unit
  - Update insights-client policy for additional commands execution 4
  - Allow pcp pmcd search tracefs and acct_data dirs
  - Allow httpd read network sysctls
  - Dontaudit domain map permission on directories
  - Revert "Allow X userdomains to mmap user_fonts_cache_t dirs"
  - Revert "Allow xdm_t domain to mmap /var/lib/gdm/.cache/fontconfig BZ(1725509)"
  - Update insights-client policy for additional commands execution 3
  - Allow systemd permissions needed for sandboxed services
  - Add rhcd module
  - Make dependency on rpm-plugin-selinux unordered


author: Zdenek Pytela <zpytela@redhat.com> - 37.12-1
changelog:
  - nut-upsd: kernel_read_system_state, fs_getattr_cgroup
  - Add numad the ipc_owner capability
  - Allow gst-plugin-scanner read virtual memory sysctls
  - Allow init read/write inherited user fifo files
  - Update dnssec-trigger policy: setsched, module_request
  - added policy for systemd-socket-proxyd
  - Add the new 'cmd' permission to the 'io_uring' class
  - Allow winbind-rpcd read and write its key ring
  - Label /run/NetworkManager/no-stub-resolv.conf net_conf_t
  - blueman-mechanism can read ~/.local/lib/python*/site-packages directory
  - pidof executed by abrt can readlink /proc/*/exe
  - Fix typo in comment
  - Do not run restorecon /etc/NetworkManager/dispatcher.d in mls and minimum


author: Zdenek Pytela <zpytela@redhat.com> - 37.13-1
changelog:
  - Remove the ipa module
  - Allow sss daemons read/write unnamed pipes of cloud-init
  - Allow postfix_mailqueue create and use unix dgram sockets
  - Allow xdm watch user home directories
  - Allow nm-dispatcher ddclient plugin load a kernel module
  - Stop ignoring standalone interface files
  - Drop cockpit module
  - Allow init map its private tmp files
  - Allow xenstored change its hard resource limits
  - Allow system_mail-t read network sysctls
  - Add bgpd sys_chroot capability


author: Zdenek Pytela <zpytela@redhat.com> - 37.14-1
changelog:
  - Allow systemd-gpt-generator raw write to a fixed disk
  - Allow rotatelogs read httpd_log_t symlinks
  - Add winbind-rpcd to samba_enable_home_dirs boolean
  - Allow system cronjobs dbus chat with setroubleshoot
  - Allow setroubleshootd read device sysctls
  - Allow virt_domain read device sysctls
  - Allow rhcd compute selinux access vector
  - Allow insights-client manage samba var dirs
  - Label ports 10161-10162 tcp/udp with snmp
  - Allow aide to connect to systemd_machined with a unix socket.
  - Allow samba-dcerpcd use NSCD services over a unix stream socket
  - Allow vlock search the contents of the /dev/pts directory
  - Allow insights-client send null signal to rpm and system cronjob
  - Label port 15354/tcp and 15354/udp with opendnssec
  - Allow ftpd map ftpd_var_run files
  - Allow targetclid to manage tmp files
  - Allow insights-client connect to postgresql with a unix socket
  - Allow insights-client domtrans on unix_chkpwd execution
  - Add file context entries for insights-client and rhc
  - Allow pulseaudio create gnome content (~/.config)
  - Allow login_userdomain dbus chat with rhsmcertd
  - Allow sbd the sys_ptrace capability
  - Allow ptp4l_t name_bind ptp_event_port_t


author: Zdenek Pytela <zpytela@redhat.com> - 37.15-1
changelog:
  - Revert "Allow sysadm_t read raw memory devices"
  - Allow systemd-socket-proxyd get attributes of cgroup filesystems
  - Allow rpc.gssd read network sysctls
  - Allow winbind-rpcd get attributes of device and pty filesystems
  - Allow insights-client domain transition on semanage execution
  - Allow insights-client create gluster log dir with a transition
  - Allow insights-client manage generic locks
  - Allow insights-client unix_read all domain semaphores
  - Add domain_unix_read_all_semaphores() interface
  - Allow winbind-rpcd use the terminal multiplexor
  - Allow mrtg send mails
  - Allow systemd-hostnamed dbus chat with init scripts
  - Allow sssd dbus chat with system cronjobs
  - Add interface to watch all filesystems
  - Add watch_sb interfaces
  - Add watch interfaces
  - Allow dhcpd bpf capability to run bpf programs
  - Allow netutils and traceroute bpf capability to run bpf programs
  - Allow pkcs_slotd_t bpf capability to run bpf programs
  - Allow xdm bpf capability to run bpf programs
  - Allow pcscd bpf capability to run bpf programs
  - Allow lldpad bpf capability to run bpf programs
  - Allow keepalived bpf capability to run bpf programs
  - Allow ipsec bpf capability to run bpf programs
  - Allow fprintd bpf capability to run bpf programs
  - Allow systemd-socket-proxyd get filesystems attributes
  - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files


author: Zdenek Pytela <zpytela@redhat.com> - 37.16-1
changelog:
  - Reuse tmpfs_t also for the ramfs filesystem
  - Allow spamc read hardware state information files
  - Dontaudit systemd-gpt-generator the sys_admin capability
  - Allow syslogd read network sysctls


author: Zdenek Pytela <zpytela@redhat.com> - 37.17-1
changelog:
  - Allow gpsd the sys_ptrace userns capability
  - Introduce gpsd_tmp_t for sockfiles managed by gpsd_t
  - Allow ndc read hardware state information
  - Allow journalctl relabel with var_log_t and syslogd_var_run_t files
  - Allow systemd-resolved watch tmpfs directories
  - Allow systemd-timedated watch init runtime dir
  - donaudit virtlogd and dnsmasq execmem
  - Do not run restorecon /etc/NetworkManager/dispatcher.d in targeted
  - Trim changelog so that it starts at F35 time


author: Zdenek Pytela <zpytela@redhat.com> - 37.18-1
changelog:
  - Allow apcupsd dbus chat with systemd-logind
  - Allow nut_domain manage also files and sock_files in /var/run
  - Label /usr/lib/rpm/rpmdb_migrate with rpmdb_exec_t
  - Allow tlp read generic SSL certificates
  - Allow systemd-resolved watch tmpfs directories
  - Revert "Allow systemd-resolved watch tmpfs directories"
  - Allow stalld to read /sys/kernel/security/lockdown file


author: Zdenek Pytela <zpytela@redhat.com> - 37.19-1
changelog:
  - Allow systemd-userdbd the sys_resource capability
  - Additional support for rpmdb_migrate
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  - Dontaudit ftpd the execmem permission
  - Allow icecast rename its log files
  - Allow systemd-rfkill the bpf capability


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
changelog:
  - Miscellaneous python and build system changes
   - Fix couple of typos
   - Drop Python2 support
   - Use inspect.signature() instead of instead.getargspec()
   - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
changelog:
  - Add a screen reader label to the icon
  - seapplet: avoid ValueError when parsing sealert.conf
  - doc: Document performance related changes
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB
  - Use setup from setuptools
  - Use `pip install` instead of `setup.py install`


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-9
changelog:
  - nss: get shadow_logfd with log_get_logfd() (#2038811)
  - lib: make shadow_logfd and Prog not extern
  - lib: rename Prog to shadow_progname
  - lib: provide default values for shadow_progname
  - libsubid: use log_set_progname in subid_init


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.11.1-1
changelog:
  - Rebase to version 4.11.1 (#2034038)
  - Fix release sources
  - Add explicit subid requirement for subid-devel


author: Thomas Moschny <thomas.moschny@gmx.de> - 0.31.3-8
changelog:
  - Cherry-pick upstream patches to fix broken image import (bz#2010178).
  - Cherry-pick upstream patches to fix FTBFS with vala 0.55.


author: Marcus Müller <marcus@hostalia.de> - 30-1
changelog:
  - Bump upstream version
  - Include the upstreamed license file
  - Add newlines to changelog
  - set LD explicitly (thanks sagitter)


author: Robert Scheck <robert@fedoraproject.org> - 30-6
changelog:
  - Spec file improvements by Robert-André Mauchin
    - Add tarball signature verification
    - Add patch to keep files timestamps
    - Rewrite summary (no encrypt)
    - Add Public Domain License
  - Switch to upstream commit for keeping file timestamps


author: Parag Nemade <pnemade AT redhat DOT com> - 3.300-1
changelog:
  - Convert spec to new fonts packaging guidelines
  - Update to new upstream release 3.300
  - Upstream renamed font family to "Scheherazade New"


author: Carl George <carl@george.computer> - 21.08.8-1
changelog:
  - Update to 21.08.8, resolves: rhbz#2082276
  - Fix CVE-2022-29500, resolves: rhbz#2082286
  - Fix CVE-2022-29501, resolves: rhbz#2082289
  - Fix CVE-2022-29502, resolves: rhbz#2082293


author: Philip Kovacs <pkfed@fedoraproject.org> - 22.05.3-2
changelog:
  - Add slurm to epel9 (#2072632); update spec for epel 7/8/9
  - Use * Sat Dec 17 2022 Fedora Project - 22.05.6-3.fc37
  - local build macro; add changelog file


author: Sérgio Basto <sergio@serjux.com> - 3.1.1-1
changelog:
  - Update smb4k to 3.1.1 (#2008370)
  - KF5PlasmaMacros: Only try to install desktop files if they exist
    The mechanism was used to make those files accessible to
    KServiceTypeTrader, but that is not used anymore by KPackage.
    KPackage can already handle JSON files for all its functionality,
    consequently there is no reason to enforce having desktop files.
    https://invent.kde.org/frameworks/plasma-framework/-/commit/6e53dcc2d25089f35988eacbbfe6e3e189690db4


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.5
   - image: clean snapd mount after preseeding
   - wrappers,snap/quota: clear LogsDirectory= in the service unit
     for journal namespaces
   - cmd/snap,daemon: allow zero values from client to daemon for
     journal rate-limit
   - interfaces: steam-support allow pivot /run/media and /etc/nvidia
     mount
   - o/ifacestate: introduce DebugAutoConnectCheck hook
   - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2
   - autopkgtests: fix running autopkgtest on kinetic
   - interfaces: add microceph interface
   - interfaces: steam-support allow additional mounts
   - many: add stub services
   - interfaces: add kconfig paths to system-observe
   - i/b/system_observe: honour root dir when checking for
     /boot/config-*
   - interfaces: grant access to speech-dispatcher socket
   - interfaces: rework logic of unclashMountEntries


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.57.6
    - SECURITY UPDATE: Local privilege escalation
      - snap-confine: Fix race condition in snap-confine when preparing a
        private tmp mount namespace for a snap
      - CVE-2022-3328


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.58
   - many: Use /tmp/snap-private-tmp for per-snap private tmps
   - data: Add systemd-tmpfiles configuration to create private tmp dir
   - cmd/snap: test allowed and forbidden refresh hold values
   - cmd/snap: be more consistent in --hold help and err messages
   - cmd/snap: error on refresh holds that are negative or too short
   - o/homedirs: make sure we do not write to /var on build time
   - image: make sure file customizations happen also when we have
     defaultscause
   - tests/fde-on-classic: set ubuntu-seed label in seed partitions
   - gadget: system-seed-null should also have fs label ubuntu-seed
   - many: gadget.HasRole, ubuntu-seed can come also from system-seed-
     null
   - o/devicestate: fix paths for retrieving recovery key on classic
   - cmd/snap-confine: do not discard const qualifier
   - interfaces: allow python3.10+ in the default template
   - o/restart: fix PendingForSystemRestart
   - interfaces: allow wayland slot snaps to access shm files created
     by Firefox
   - o/assertstate: add Sequence() to val set tracking
   - o/assertstate: set val set 'Current' to pinned sequence
   - tests: tweak the libvirt interface test to work on 22.10
   - tests: use system-seed-null role on classic with modes tests
   - boot: add directory for data on install
   - o/devicestate: change some names from esp to seed/seed-null
   - gadget: add system-seed-null role
   - o/devicestate: really add error to new error message
   - restart,snapstate: implement reboot-required notifications on
     classic
   - many: avoid automatic system restarts on classic through new
     overlord/restart logic
   - release: Fix WSL detection in LXD
   - o/state: introduce WaitStatus
   - interfaces: Fix desktop interface rules for document portal
   - client: remove classic check for `snap recovery --show-
     keys`
   - many: create snapd.mounts targets to schedule mount units
   - image: enable sysfs overlay for UC preseeding
   - i/b/network-control: add permissions for using AF_XDP
   - i/apparmor: move mocking of home and overlay conditions to osutil
   - tests/main/degraded: ignore man-db update failures in CentOS
   - cmd/snap: fix panic when running snap w/ flag but w/o subcommand
   - tests: save snaps generated during image preaparation
   - tests: skip building snapd based on new env var
   - client: remove misleading comments in ValidateApplyOptions
   - boot/seal: add debug traces for bootchains
   - bootloader/assets: fix grub.cfg when there are no labels
   - cmd/snap: improve refresh hold's output
   - packaging: enable BPF in RHEL9
   - packaging: do not traverse filesystems in postrm script
   - tests: get microk8s from another branch
   - bootloader: do not specify Core version in grub entry
   - many: refresh --hold follow-up
   - many: support refresh hold/unhold to API and CLI
   - many: expand fully handling links mapping in all components, in
     the API and in snap info
   - snap/system_usernames,tests: Azure IoT Edge system usernames
   - interface: Allow access to
     org.freedesktop.DBus.ListActivatableNames via system-observe
     interface
   - o/devicestate,daemon: use the expiration date from the assertion
     in user-state and REST api (user-removal 4/n)
   - gadget: add unit tests for new install functions for FDE on
     classic
   - cmd/snap-seccomp: fix typo in AF_XDP value
   - tests/connected-after-reboot-revert: run also on UC16
   - kvm: allow read of AMD-SEV parameters
   - data: tweak apt integration config var
   - o/c/configcore: add faillock configuration
   - tests: use dbus-daemon instead of dbus-launch
   - packaging: remove unclean debian-sid patch
   - asserts: add keyword 'user-presence' keyword in system-user
     assertion (auto-removal 3/n)
   - interfaces: steam-support allow pivot /run/media and /etc/nvidia
     mount
   - aspects: initial code
   - overlord: process auto-import assertion at first boot
   - release, snapd-apparmor, syscheck: distinguish WSL1 and WSL2
   - tests: fix lxd-mount-units in ubuntu kinetic
   - tests: new variable used to configure the kernel command line in
     nested tests
   - go.mod: update to newer secboot/uc22 branch
   - autopkgtests: fix running autopkgtest on kinetic
   - tests: remove squashfs leftovers in fakeinstaller
   - tests: create partition table in fakeinstaller
   - o/ifacestate: introduce DebugAutoConnectCheck hook
   - tests: use test-snapd-swtpm instead of swtpm-mvo snap in nested
     helper
   - interfaces/polkit: do not require polkit directory if no file is
     needed
   - o/snapstate: be consistent not creating per-snap save dirs for
     classic models
   - inhibit: use hintFile()
   - tests: use `snap prepare-image` in fde-on-classic mk-image.sh
   - interfaces: add microceph interface
   - seccomp: allow opening XDP sockets
   - interfaces: allow access to icon subdirectories
   - tests: add minimal-smoke test for UC22 and increase minimal RAM
   - overlord: introduce hold levels in the snapstate.Hold* API
   - o/devicestate: support mounting ubuntu-save also on classic with
     modes
   - interfaces: steam-support allow additional mounts
   - fakeinstaller: format SystemDetails result with %+v
   - cmd/libsnap-confine-private: do not panic on chmod failure
   - tests: ensure that fakeinstaller put the seed into the right place
   - many: add stub services for prompting
   - tests: add libfwupd and libfwupdplugin5 to openSUSE dependencies
   - o/snapstate: fix snaps-hold pruning/reset in the presence of
     system holding
   - many: add support for setting up encryption from installer
   - many: support classic snaps in the context of classic and extended
     models
   - cmd/snap,daemon: allow zero values from client to daemon for
     journal rate limit
   - boot,o/devicestate: extend HasFDESetupHook to consider unrelated
     kernels
   - cmd/snap: validation set refresh-enforce CLI support + spread test
   - many: fix filenames written in modeenv for base/gadget plus drive-
     by TODO
   - seed: fix seed test to use a pseudo-random byte sequence
   - cmd/snap-confine: remove setuid calls from cgroup init code
   - boot,o/devicestate: introduce and use MakeRunnableStandaloneSystem
   - devicestate,boot,tests: make `fakeinstaller` test work
   - store: send Snap-Device-Location header with cloud information
   - overlord: fix unit tests after merging master in
   - o/auth: move HasUserExpired into UserState and name it HasExpired,
     and add unit tests for this
   - o/auth: rename NewUserData to NewUserParams
   - many: implementation of finish install step handlers
   - overlord: auto-resolve validation set enforcement constraints
   - i/backends,o/ifacestate: cleanup backends.All
   - cmd/snap-confine: move bind-mount setup into separate function
   - tests/main/mount-ns: update namespace for 18.04
   - o/state: Hold pseudo-error for explicit holding, concept of
     pending changes in prune logic
   - many: support extended classic models that omit kernel/gadget
   - data/selinux: allow snapd to detect WSL
   - overlord: add code to remove users that has an expiration date set
   - wrappers,snap/quota: clear LogsDirectory= in the service unit for
     journal namespaces
   - daemon: move user add, remove operations to overlord device state
   - gadget: implement write content from gadget information
   - {device,snap}state: fix ineffectual assignments
   - daemon: support validation set refresh+enforce in API
   - many: rename AddAffected* to RegisterAffected*, add
     Change|State.Has, fix a comment
   - many: reset store session when setting proxy.store
   - overlord/ifacestate: fix conflict detection of auto-connection
   - interfaces: added read/write access to /proc/self/coredump_filter
     for process-control
   - interfaces: add read access to /proc/cgroups and
     /proc/sys/vm/swappiness to system-observe
   - fde: run fde-reveal-key with `DefaultDependencies=no`
   - many: don't concatenate non-constant format strings
   - o/devicestate: fix non-compiling test
   - release, snapd-apparmor: fixed outdated WSL detection
   - many: add todos discussed in the review in
     tests/nested/manual/fde-on-classic, snapstate cleanups
   - overlord: run install-device hook during factory reset
   - i/b/mount-control: add optional `/` to umount rules
   - gadget/install: split Run in several functions
   - o/devicestate: refactor some methods as preparation for install
     steps implementation
   - tests: fix how snaps are cached in uc22
   - tests/main/cgroup-tracking-failure: fix rare failure in Xenial and
     Bionic
   - many: make {Install,Initramfs}{{,Host},Writable}Dir a  function
   - tests/nested/manual/core20: fix manual test after changes to
     'tests.nested exec'
   - tests: move the unit tests system to 22.04 in github actions
     workflow
   - tests: fix nested errors uc20
   - boot: rewrite switch in SnapTypeParticipatesInBoot()
   - gadget: refactor to allow usage from the installer
   - overlord/devicestate: support for mounting ubuntu-save before the
     install-device hook
   - many: allow to install/update kernels/gadgets on classic with
     modes
   - tests: fix issues related to dbus session and localtime in uc18
   - many: support home dirs located deeper under /home
   - many: refactor tests to use explicit strings instead of
     boot.Install{Initramfs,Host}{Writable,FDEData}Dir
   - boot: add factory-reset cases for boot-flags
   - tests: disable quota tests on arm devices using ubuntu core
   - tests: fix unbound SPREAD_PATH variable on nested debug session
   - overlord: start turning restart into a full state manager
   - boot: apply boot logic also for classic with modes boot snaps
   - tests: fix snap-env test on debug section when no var files were
     created
   - overlord,daemon: allow returning errors when requesting a restart
   - interfaces: login-session-control: add further D-Bus interfaces
   - snapdenv: added wsl to userAgent
   - o/snapstate: support running multiple ops transactionally
   - store: use typed valset keys in store package
   - daemon: add `ensureStateSoon()` when calling systems POST api
   - gadget: add rules for validating classic with modes gadget.yaml
     files
   - wrappers: journal namespaces did not honor journal.persistent
   - many: stub devicestate.Install{Finish,SetupStorageEncryption}()
   - sandbox/cgroup: don't check V1 cgroup if V2 is active
   - seed: add support to load auto import assertion
   - tests: fix preseed tests for arm systems
   - include/lk: update LK recovery environment definition to include
     device lock state used by bootloader
   - daemon: return `storage-encryption` in /systems/<label> reply
   - tests: start using remote tools from snapd-testing-tools project
     in nested tests
   - tests: fix non mountable filesystem error in interfaces-udisks2
   - client: clarify what InstallStep{SetupStorageEncryption,Finish} do
   - client: prepare InstallSystemOptions for real use
   - usersession: Remove duplicated struct
   - o/snapstate: support specific revisions in UpdateMany/InstallMany
   - i/b/system_packages_doc: restore access to Libreoffice
     documentation
   - snap/quota,wrappers: allow using 0 values for the journal rate
     limit
   - tests: add kinetic images to the gce bucket for preseed test
   - multiple: clear up naming convention for thread quota
   - daemon: implement stub `"action": "install"`
   - tests/main/snap-quota-{install/journal}: fix unstable spread tests
   - tests: remove code for old systems not supported anymore
   - tests: third part of the nested helper cleanup
   - image: clean snapd mount after preseeding
   - tests: use the new ubuntu kinetic image
   - i/b/system_observe: honour root dir when checking for
     /boot/config-*
   - tests: restore microk8s test on 16.04
   - tests: run spread tests on arm64 instances in google cloud
   - tests: skip interfaces-udisks2 in fedora
   - asserts,boot,secboot: switch to a secboot version measuring
     classic
   - client: add API for GET /systems/<label>
   - overlord: frontend for --quota-group support (2/2)
   - daemon: add GET support for `/systems/<seed-label>`
   - i/b/system-observe: allow reading processes security label
   - many: support '--purge' when removing multiple snaps
   - snap-confine: remove obsolete code
   - interfaces: rework logic of unclashMountEntries
   - data/systemd/Makefile: add comment warning about "snapd." prefix
   - interfaces: grant access to speech-dispatcher socket (bug 1787245)
   - overlord/servicestate: disallow removal of quota group with any
     limits set
   - data: include snapd/mounts in preseeded blob
   - many: Set SNAPD_APPARMOR_REEXEC=1
   - store/tooling,tests: support UBUNTU_STORE_URL override env var
   - multiple: clear up naming convention for cpu-set quota
   - tests: improve and standardize debug section on tests
   - device: add new DeviceManager.encryptionSupportInfo()
   - tests: check snap download with snapcraft v7+ export-login auth
     data
   - cmd/snap-bootstrap: changes to be able to boot classic rootfs
   - tests: fix debug section for test uc20-create-partitions
   - overlord: --quota-group support (1/2)
   - asserts,cmd/snap-repair: drop not pursued
     AuthorityDelegation/signatory-id
   - snap-bootstrap: add CVM mode* snap-bootstrap: add classic runmode
   - interfaces: make polkit implicit on core if /usr/libexec/polkitd
     exists
   - multiple: move arguments for auth.NewUser into a struct (auto-
     removal 1/n)
   - overlord: track security profiles for non-active snaps
   - tests: remove NESTED_IMAGE_ID from nested manual tests
   - tests: add extra space to ubuntu bionic
   - store/tooling: support using snapcraft v7+ base64-encoded auth
     data
   - overlord: allow seeding in the case of classic with modes system
   - packaging/*/tests/integrationtests: reload ssh.service, not
     sshd.service
   - tests: rework snap-logs-journal test and add missing cleanup
   - tests: add spread test for journal quotas
   - tests: run spread tests in ubuntu kinetic
   - o/snapstate: extend support for holding refreshes
   - devicestate: return an error in checkEncryption() if KernelInfo
     fails
   - tests: fix sbuild test on debian sid
   - o/devicestate: do not run tests in this folder twice
   - sandbox/apparmor: remove duplicate hook into testing package
   - many: refactor store code to be able to use simpler form of auth
     creds
   - snap,store: drop support/consideration for anonymous download urls
   - data/selinux: allow snaps to read certificates
   - many: add Is{Core,Classic}Boot() to DeviceContext
   - o/assertstate: don't refresh enforced validation sets during check
   - go.mod: replace maze.io/x/crypto with local repo
   - many: fix unnecessary use of fmt.Sprintf
   - bootloader,systemd: fix `don't use Yoda conditions (ST1017)`
   - HACKING.md: extend guidelines with common review comments
   - many: progress bars should use the overridable stdouts
   - tests: remove ubuntu 21.10 from sru validation
   - tests: import remote tools
   - daemon,usersession: switch from HeaderMap to Header in tests
   - asserts: add some missing `c.Check()` in the asserts test
   - strutil: fix VersionCompare() to allow multiple `-` in the version
   - testutil: remove unneeded `fmt.Sprintf`
   - boot: remove some unneeded `fmt.Sprintf()` calls
   - tests: implement prepare_gadget and prepare_base and unify all the
     version
   - o/snapstate: refactor managed refresh schedule logic
   - o/assertstate, snapasserts: implementation of
     assertstate.TryEnforceValidationSets function
   - interfaces: add kconfig paths to system-observe
   - dbusutil: move debian patch into dbustest
   - many: change name and input of CheckProvenance to clarify usage
   - tests: Fix a missing parameter in command to wait for device
   - tests: Work-around non-functional --wait on systemctl
   - tests: unify the way the snapd/core and kernel are repacked in
     nested helper
   - tests: skip interfaces-ufisks2 on centos-9
   - i/b/mount-control: allow custom filesystem types
   - interfaces,metautil: make error handling in getPaths() more
     targeted
   - cmd/snap-update-ns: handle mountpoint removal failures with EBUSY
   - tests: fix pc-kernel repacking
   - systemd: add `WantedBy=default.target` to snap mount units
   - tests: disable microk8s test on 16.04


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.58.1
   - secboot: detect lockout mode in CheckTPMKeySealingSupported
   - cmd/snap-update-ns: prevent keeping unneeded mountpoints
   - o/snapstate: do not infinitely retry when an update fails during
     seeding
   - interfaces/modem-manager: add permissions for NETLINK_ROUTE
   - systemd/emulation.go: use `systemctl --root` to enable/disable
   - snap: provide more error context in `NotSnapError`
   - interfaces: add read access to /run for cryptsetup
   - boot: avoid reboot loop if there is a bad try kernel
   - devicestate: retry serial acquire on time based certificate
     errors
   - o/devicestate: run systemctl daemon-reload after install-device
     hook
   - cmd/snap,daemon: add 'held' to notes in 'snap list'
   - o/snapshotstate: check snapshots are self-contained on import
   - cmd/snap: show user+gating hold info in 'snap info'
   - daemon: expose user and gating holds at /v2/snaps/{name}


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.58.3
   - interfaces/screen-inhibit-control: Add support for xfce-power-
     manager
   - interfaces/network-manager: do not show ptrace read
     denials
   - interfaces: relax rules for mount-control `what` for functionfs
   - cmd/snap-bootstrap: add support for snapd_system_disk
   - interfaces/modem-manager: add net_admin capability
   - interfaces/network-manager: add permission for OpenVPN
   - httputil: fix checking x509 certification error on go 1.20
   - i/b/fwupd: allow reading host os-release
   - boot: on classic+modes `MarkBootSuccessfull` does not need a base
   - boot: do not include `base=` in modeenv for classic+modes installs
   - tests: add spread test that validates revert on boot for core does
     not happen on classic+modes
   - snapstate: only take boot participants into account in
     UpdateBootRevisions
   - snapstate: refactor UpdateBootRevisions() to make it easier to
     check for boot.SnapTypeParticipatesInBoot()


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Dominik Mierzejewski <rpm@greysector.net> - 1.1.2-1
changelog:
  - update to 1.1.2 (#2068769)
  - patch to lower evdev version requirement
  - add explicit build dependency on setuptools
  - sort build dependencies


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.8-1
changelog:
  - update to 1.1.8 (#2152380)
  - add weak dependency on hid-parser, required to recognize some devices


author: Jeff Layton <jlayton@redhat.com> - 0.6.4-4.gce1a6720f69e
changelog:
  - Update to latest sparse git (commit ce1a6720f69e)
  - Fix bogus snprintf length argument in linearize.c (bz2171731)


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.38.3-2
changelog:
  - add flag -mbranch-protection=standard for aarch64
  - remove configure flag --enable-json1, as this is default from 3.38.0
  - run autoupdate before autoconf in %prep


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20220908git8b5f1f3-0.1
changelog:
  - Update to 8b5f1f3
  - The stb_perlin-devel subpackage has been restored, as upstream believes
    all relevant patents are now expired.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20220908git8b5f1f3-0.4
changelog:
  - Patch in a candidate fix for ossfuzz issue 24232
  - Improves handling of certain invalid PNGs by stb_image


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20230129git6199bf7-0.1
changelog:
  - Update to 6199bf7 (stb_image 2.28)
  - Security-related patches for stb_image have been merged upstream, and
    there are other bugfixes.


author: Ondrej Mosnacek <omosnace@redhat.com> - 14.1-1
changelog:
  - Adapt spec file for NNUE support
  - Use upstream buildsystem
  - Bump to version 14.1
  - Resolves: rhbz#1875192
  - Resolves: rhbz#1988004


author: Arne Reiter <redhat@arnereiter.de> - 5.9.5-3
changelog:
  - Resolves: rhbz#2048108 - segfault at 18 ip 00007f4c7c0d841c sp 00007ffe49f61b70 error 4 in libc.so.6


author: Arne Reiter <redhat@arnereiter.de> - 5.9.6-1
changelog:
  - Resolves rhbz#2080070 strongswan-5.9.6 is available
  - Fixed missing format string in enum_flags_to_string()


author: Arne Reiter <redhat@arnereiter.de> - 5.9.8-1
changelog:
  - Resolves rhbz#2112274 strongswan-5.9.8 is available
  - Patch1 removes CFLAGS -Wno-format which interferes with -Werror=format-security
  - Add BuildRequire for autoconf and automake, now required for release
  - Remove obsolete patches


author: Petr Menšík <pemensik@redhat.com> - 0.4.2-2
changelog:
  - Private users do not work with dynamic users
  - Provide path to unbound-anchor key, but keep it commented out


author: Clemens Lang <cllang@redhat.com> - 5.62-3
changelog:
  - Fix stunnel in FIPS mode (with upcoming OpenSSL changes)
    Related: rhbz#2050617
  - Fail build if tests fail
    Related: rhbz#2051083


author: Jerry James <loganjerry@gmail.com> - 1.4.1-1
changelog:
  - Version 1.4.1
  - Upstream no longer provides GPG signatures
  - Convert License tag to SPDX
  - Python 2 is no longer supported


author: Radovan Sroka <rsroka@redhat.com> - 1.9.12-1.p2
changelog:
  - Rebase to sudo 1.9.12p2
  - sudo-1.9.12p2 is available Resolves: rhbz#2137775
  - sudo: arbitrary file write with privileges of the RunAs user
    CVE-2023-22809 Resolves: rhbz#2162042


author: Radovan Sroka <rsroka@redhat.com> - 1.9.13-1.p2
changelog:
  - Rebase to sudo 1.9.13p2
  - sudo-1.9.13p2 is available Resolves: rhbz#2169840
  - sudo: double free with per-command chroot sudoers rules Resolves:
    CVE-2023-27320


author: Richard W.M. Jones <rjones@redhat.com> - 5.3.2-5
changelog:
  - Include all upstream patches since 5.3.2
  - Add debugging and accurate exception backtraces (RHBZ#2124571).


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 1.6.1-1
changelog:
  - Update to 1.6.1
  - Add Recommends: swayidle, swaylock
  - Add upstream patch to fix pixman renderer init.


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 1.7~rc3-1
changelog:
  - Update to 1.7-rc3
  - Change default terminal dependency to foot
  - Disable `werror` to work around a couple of new warnings in GCC 12


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 1.7-2
changelog:
  - Drop patches for wayland 1.19/meson 0.59 compatibility
  - Split package with the default wallpapers
  - Add upstream patch to fix crash in layer-shell code


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 1.7.1-1
changelog:
  - Update to 1.7.1 (#2041188)
  - Add source verification
  - Apply upstream patch to fix build on 32-bit architectures


author: Jan Staněk <jstanek@redhat.com> - 1.6-1
changelog:
  - Update to version 1.6
  - Remove patches already included upstream
  - Verify source signature on build


author: Xavier Bachelot <xavier@bachelot.org> 6.2.62-1
changelog:
  - Update to 6.2.62
    - Fixes CVE-2020-26880 (RHBZ#1886232 - RHBZ#1886233)
  - Unbundle jquery-ui
  - Unbundle jquery on EL8


author: Xavier Bachelot <xavier@bachelot.org> 6.2.68-1
changelog:
  - Update to 6.2.68
  - Dont unbundle jquery-ui on EL9
  - Use Archive::Zip::SimpleZip instead of Archive::Zip where available


author: Xavier Bachelot <xavier@bachelot.org> 6.2.70-2
changelog:
  - Fix sympasoap socket ownership for httpd (RHBZ#2152381)
  - Fix both wwwsympa and sympasoap socket ownership for nginx


author: Jerry James <loganjerry@gmail.com> - 1.9-1
changelog:
  - Version 1.9
  - Drop theano support due to incompatibility with the Fedora version
  - Add -tests, -distutils, -gmpy2-mpq, and -rational-exponent patches to
    work around test failures


author: Jerry James <loganjerry@gmail.com> - 1.10-1
changelog:
  - Version 1.10
  - Drop upstreamed patches: -python3, -png-decoder, -gmpy2-mpq,
    and -rational-exponent


author: Jerry James <loganjerry@gmail.com> - 1.11.1-1
changelog:
  - Version 1.11.1
  - Convert License tag to SPDX
  - Drop upstreamed patches: -tests, -distutils, -signature
  - Drop fastcache dependency
  - Regenerate ANTLR4 files


author: Jerry James <loganjerry@gmail.com> - 1.11.1-2
changelog:
  - Do not run antlr on i386 where it doesn't exist
  - Be archful so we don't BR a package that doesn't exist on i386


author: Jerry James <loganjerry@gmail.com> - 1.11.1-4
changelog:
  - Fix the antlr4 Recommends (bz 2172030)
  - Dynamically generate BuildRequires (to the extent possible)


author: Milan Crha <mcrha@redhat.com> - 1:2.0.0-4
changelog:
  - Rebuilt for evolution-data-server soname version bump
  - Switch from libsoup to libcurl for transport


author: Ding-Yi Chen <dchen@redhat.com> - 1:1.14.3.5-1
changelog:
  - Upstream update to v1.14.3.5-stable
  - Add BuildRequires: libnotify-devel, libxkbfile-devel, pugixml-devel


author: Jakub Ružička <jakub.ruzicka@nic.cz> - 2.1.64-1
changelog:
  - New version (Closes: rhbz#2042998)
  - Improve *.so file pattern
  - Create /etc/sysrepo in install, not post
  - Sync small upstream improvements


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.6-1
changelog:
  - Update to v12.5.6 (#2059133)
  - Build position independent executables
  - Use systemd-rpm-macros
     - See https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.10-1
changelog:
  - Version 251.10
  - CVE-2022-4415: systemd: coredump not respecting fs.suid_dumpable kernel
    setting


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.11-1
changelog:
  - Version 251.11
  - Various small issues (detection of container environments, support for
    -D_FORTIFY_SOURCE=3, newer libcurl, newer objcopy, latest kernel headers,
    and other small fixes).


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.13-5
changelog:
  - Make systemd-udev require systemd-boot again so that both subpackages are
    installed on upgrades (rhbz#2176263)


author: Serhei Makarov <me@serhei.io> - 4.6-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Šabata <contyk@redhat.com> - 0.7-1
changelog:
  - 0.7 bump
  - Now includes the xembed utility; as xembed has no implicit support for
    config.def, this release doesn't include xembed customization via the user
    subpackage; however, this could be improved in the future
  - Adding a temporary workaround for F36 builds
  - SPDX migration


author: Sergio Correia <scorreia@redhat.com> - 10-2
changelog:
  - Fix issues reported by shellcheck and a possible NULL pointer
    dereference reported by gcc static analyzer (3d770c6, 262d98f)


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Dmitrij S. Kryzhevich <kryzhev@ispms.ru> - 1.20-1
changelog:
  - Update to new 1.20.
  - Fixed version in log for 1.19-1.
  - Fix filename in doc: README -> README.md.


author: Bojan Smojver <bojan@rexursive com> - 4.4.2-1
changelog:
  - bump up to 4.4.2
  - CVE-2022-27939, CVE-2022-27940, CVE-2022-27941, CVE-2022-27942,
  - CVE-2022-28487, CVE-2022-37047, CVE-2022-37048, CVE-2022-37049


author: Jan Macku <jamacku@redhat.com> - 6.23.00-1
changelog:
  - Update to tcsh-6.23.00 (#2022337)
  - Drop tcsh-6.22.04-expose-HIST_PURGE.patch                   - applied by upstream
  - Drop tcsh-6.22.04-modifiers-no-longer-breaks-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-11
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: David King <amigadave@amigadave.com> - 2.1.1-4
changelog:
  - Own more directories
  - Be consistent with use of %{buildroot}
  - Tighten globs in files list
  - Avoid unnecessary gtk-update-icon-cache
  - Use %find_lang for locales
  - Add license and documentation
  - Import the module during %check
  - Verify GPG signature of sources


author: Ding-Yi Chen <dchen@redhat.com> - 1.10.0-1
changelog:
  - Upstream update to 1.10.0
  - Fixes RHBZ #1917603 - terminology-1.10.0 is available
  - Remove BuildRequired elementary-devel because it is merged into efl-devel


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.6.3-1
changelog:
  - Drop Atomic Host
  - Simplify cli codepath, use cloud-user by default
  - cli: allow to spearate OS version by "-"
  - CentOS misc: improve error output on missing version
  - Disable UseDNS, GSSAPI for faster SSH, allow ssh for root
  - CentOS: Fix el7 based systems
  - CentOS: update 7 build, add CentOS Stream 9


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.6.4-1
changelog:
  - fix selinux detection for image context (olichtne)
  - Drop dependency on python-mock
  - Drop coverage testing in rpm build


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.7.0-1
changelog:
  - non-x86 support
  - cli: Fixup crash on vm start in connection tip
  - Handle missing testcloud group also while creating instances from local image


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.8.0-1
changelog:
  - Bump CentOS Stream versions
  - Build seed image with genisoimage (mpitt)
  - Reduce libvirt dependencies (mpitt)
  - Drop libguestfs from Requires to Suggests (mpitt)
  - util: except also requests.exceptions.JSONDecodeError
  - _needs_legacy_net: try to guess based on image name with missing guestfs
  - add coreos aarch64 support (lnie)
  - Allow to configure download progress verbosity


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.8.2-1
changelog:
  - CentOS Stream {8,9}: bump image version
  - Leave boot drive address guessing to libvirt
  - Workaround libvirt/qemu PCI auto-assign issue


author: Tom Callaway <spot@fedoraproject.org> - 9:2021-53
changelog:
  -
   ____  __  __  __  __  ____
  (  _ \(  )(  )(  \/  )(  _ \
   ) _ < )(__)(  )    (  )___/
  (____/(______)(_/\/\_)(__)


author: Parag Nemade <pnemade AT redhat DOT com> - 0.6.6-5
changelog:
  - Update hunspell directory path
    F36 Change https://fedoraproject.org/wiki/Changes/Hunspell_dictionary_dir_change


author: Karolina Surma <ksurma@redhat.com> - 3.3.14-1
changelog:
  - New upstream version 3.3.14
  Resolves: rhbz#1985771
  - Compile language files during the build instead of using the ones from upstream


author: Jakub Kadlcik <frostyx@email.cz> 0.6.16-1
changelog:
  - Fix manpage generation on Fedora Rawhide (F34)
  - Ignore spectool warnings
  - Skip nonexisting extra sources
  - Fix copy_extra_sources for remote URLs
  - Use --no-rebuild-srpm for scratch builds in KojiReleaser


author: Jakub Kadlcik <frostyx@email.cz> 0.6.17-1
changelog:
  - Update releasers.conf (frostyx@email.cz)
  - Make build --verbose autocompletable (nmoumoul@redhat.com)
  - Add support for centpkg (wpoteat@redhat.com)
  - Remove extraneous extra newline (areese@users.noreply.github.com)
  - Add some documentation for tito.builder.SubmoduleAwareBuilder
    (areese999@apple.com)
  - Update based on feedback: 1. Remove PushDir, tito.common.chdir has the same
    functionality so use that instead. 2. Remove useless override of constructor,
    it's just extra noise. (areese999@apple.com)
  - 150 Add support for repos that use submodules. Allow though submodules are a
    contentious topic, this adds a submodule_aware_builder (areese999@apple.com)
  - doc: fix typo tito.props (subpop@users.noreply.github.com)
  - Update fedora releaser in .tito/releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.18-1
changelog:
  - Document fetch_sources option in tito.props (frostyx@email.cz)
  - Rename fetch-sources to fetch_sources in the tito.props config
    (frostyx@email.cz)
  - Adding option to fetch sources (sisi.chlupova@gmail.com)
  - Change the master branch in releasers.conf to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.20-1
changelog:
  - Sync repo (in addition to tag) during mead build (nmoumoul@redhat.com)
  - Add 'Building RHEL packages with Tito' as external doc (frostyx@email.cz)
  - Consider the current project git config when releasing to DistGit
    (frostyx@email.cz)
  - Print the problematic binary files (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.21-1
changelog:
  - Properly catch TitoException (frostyx@email.cz)
  - Add documentation for the MockBuilder (frostyx@email.cz)
  - Allow to define mock chroot in tito.props (frostyx@email.cz)
  - Fix recursion error in MockBuilder (frostyx@email.cz)
  - DistGitReleasers: don't nuke external sources with fetch_sources (praiskup@redhat.com)
  - Add installation instructions from PyPI (frostyx@email.cz)
  - Add long_description to setup.py (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.22-1
changelog:
  - Fix python2 urlretrieve import (frostyx@email.cz)
  - Fixed submodule archives concatenation (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #414 (jerzy.drozdz@jdsieci.pl)
  - Fixed issue #413 (jerzy.drozdz@jdsieci.pl)
  - Revert 45d431ad149cb33e2462a990c4c4f29e6bb2bb7e (nmoumoul@redhat.com)


author: Petr Šplíchal <psplicha@redhat.com> - 1.12.0-1
changelog:
  - Add a command to setup shell completions
  - Use /tmp instead of /run/user/ if not available
  - Use separate examples in the test specification
  - Add more story examples, simplify examples export
  - Story.example can hold list of strings
  - Fix traceback when connect plugin is used without hostname.
  - Adjust disabled shell expansion in Common.run()
  - Disable shell expansion in Common.run() by default
  - Build `epel9` packages, update install docs
  - Adjust the full test wrapper and document it
  - Test which compiles tmt and runs its testsuite
  - Add --exclude search option
  - Correct regex for require read from metadata file
  - Update document for creating virtual environment
  - Option to export fmf-id from run discover -h fmf
  - Allow import from restraint's metadata file (#1043)
  - Do not disable building for power arch on Fedora
  - Update documentation for plan parametrization
  - Make .vscode ignored by git
  - Drops basestring and unicode built-ins from utils
  - Fix timeout behaviour in testcloud plugin
  - Fixes possible test of None-ish CWD when running a command
  - Remove workdir only when its defined
  - Adjust the new `tmt plan export` feature
  - New feature: tmt plan export


author: Petr Šplíchal <psplicha@redhat.com> - 1.13.0-1
changelog:
  - Add multiarch support to testcloud provision
  - Consistent summary for test export --nitrate
  - Allow dry mode for tests export --nitrate
  - Add a nice provisioning progress to Artemis plugin
  - Add support for the `where` keyword to `execute`
  - Adjust support for export of multiple tests
  - Add support for exporting multiple tests
  - Basic multihost test for the httpd web server
  - Update multihost specification with guest groups
  - Add a provision plugin for Artemis
  - Fix exclude option in fmf discover
  - Reduce the number of execute calls for reboot
  - Add support for reboot in interactive mode


author: Petr Šplíchal <psplicha@redhat.com> - 1.14.0-1
changelog:
  - Command 'tmt clean' should not run rsync at all
  - Dist-git-source for Discover (fmf, shell)
  - Adjust the new `id` key implementation
  - Add a new core key `id` for unique identifiers
  - Recommend qemu emulators for other architectures
  - Copy the whole git repo only if necessary
  - Reveal hidden errors during `testcloud` booting
  - Use time for timeout handling in Guest.reconnect()
  - Split `Guest` class to separate SSH-capable guests
  - Explicitly set the docs language in the config
  - Kill the running test when rebooting
  - Extend the reboot timeout to allow system upgrades
  - Allow selecting tasks directly from upgrade config
  - Adjust the new `upgrade` execute plugin
  - Allow specifying command for reboot
  - Implement upgrade execute plugin
  - Buildrequire python3-docutils, append plan adjust
  - Implement `tmt tests export --nitrate --link-runs`
  - Detect component from general plan during import
  - Adjust the support for steps in standalone mode
  - Add results method to ExecutePlugin
  - Implement a common ancestor for Action and Plugin
  - Allow abstractly excluding steps from runs
  - Correctly handle tests --name '.' shortcut
  - Rename WorkdirType to WorkdirArgumentType
  - Fix workdir parameter type for tmt.utils.Common
  - Allows importing jira issues as link-relates
  - Enables mypy coverage for empty-ish Python files
  - Adds type annotations to tmt.templates
  - Prevent infinite recursion if --id is set
  - Enable mypy check for Artemis provision plugin
  - Adjust provision dry mode propagation, add a test
  - Introduce new _options attribute to Common class
  - Add specification for remote plans referencing
  - Bootstrap type annotations
  - Execute script should not be used with discover
  - Add the `arch` key to the hardware specification
  - Fix pip install instructions
  - Disable network access when building in copr
  - Ignore list for dist-git-source
  - Remove the obsoleted `detach` execute method
  - Fix login during `execute` and `prepare` step
  - Import from Makefile with missing build target


author: Lukáš Zachar <lzachar@redhat.com> - 1.15.0-1
changelog:
  - Require fresh testcloud with coreos support
  - Bad substitution in tmt-reboot
  - Ignore "certificate verify failed" error when handling retries
  - Cache content of each loaded environment file
  - Initial polarion support for test export
  - Fixes names of Artemis API versions
  - Convert FmfIdType from TypedDict to a dataclass
  - Add CoreOS support to the testcloud provision
  - Run containers with root user
  - Retry getting environment file
  - Test import --general is default now
  - Add typing for steps/finish/shell.py
  - Enhance tmt.utils.retry_session with timeout support
  - Adjust the `rpm-ostree` install implementation
  - Add support for the `rpm-ostree` package manager
  - Add `environment-file` to possible Plan keys
  - Avoid Library url conflict if repo doesn't exist
  - Check changes are pushed before export nitrate
  - Add typing for beakerlib.py
  - Unbundle template from the report.html plugin
  - Rename `uuid` to `identifier` to prevent conflicts
  - Use `must` for all mandatory spec requirements
  - Fail import for packages starting with minus sign
  - Adds support for newer Artemis API versions
  - Disable the extra verbose progress in testcloud
  - Refactor internal executor scripts
  - Adds "missing" imports to help IDEs follow objects
  - Add typing for steps/__init__.py
  - Implement the test `result` attribute
  - Add typing for plugins/__init__.py
  - Detect legacy relevancy during import as well
  - Implement the new user story key `priority`
  - Implement new class `SerializableContainer`
  - Add schema for stories
  - Add typing for steps/prepare/shell.py
  - Add typing for steps/prepare/ansible.py
  - Require fmf >= 1.1.0 (we need validation support)
  - Package fmf root into the source tarball as well
  - Add JSON Schema for tests
  - Exclude namespaced backup in beakerlib
  - Use --depth=1 when cloning git repos by default
  - Handle missing nitrate user during export
  - Removes unused GuestContainer.container_id attribute
  - Every subpackage must require the main tmt package
  - Introduce dataclasses as a requirement
  - Avoid re-using image/instance for different values by testcloud plugin
  - Add typing for multihost.py
  - Except nitrate xmlrpc issues during import
  - Exclude beakerlib's backup dir from guest.pull()
  - Increase `duration` for the reboot-related tests
  - Several release-related tests and docs adjustments


author: Lukáš Zachar <lzachar@redhat.com> - 1.16.0-1
changelog:
  - Reboot has to check for boot time
  - Fix path inside pre-commit test
  - Cut circular dependency of libraries
  - Update 'Develop' section of contribution docs
  - Precommit hooks to call tmt * lint
  - Schema loading helpers
  - Package schemas in subdirectories too
  - Implement reboot reconnect timeout configuration
  - Add missing report specifications/docs
  - Print result for execute -v
  - Correct import assumption about script
  - Ask mypy to check whole tmt.steps.report package
  - Fixing the directory name escaping in 'cd' command
  - Add polarion report plugin
  - Add schemas for plans
  - Write extra-nitrate as soon as possible
  - Retry git clone without --depth=1 if it failed
  - Support to lint attribute 'id'
  - Do not apply test command filter in upgrade
  - Fix export.py typing issues
  - Refactor location and signature of Phase's go() method
  - Simplify abort handling
  - Backwards compatibility for rstrnt-abort
  - Add type annotations for tmt/cli.py
  - Add typing for tmt/export.py
  - add typing for steps/discover/__init__.py
  - Convert guest implementations to use serializable container for load/save
  - Detect plugins by entry_point as well
  - Add typing for `steps/execute/__init__.py`
  - Add typing for `tmt/convert.py`
  - Remove duplicated dist-git-source/dist-git-type
  - Add typing for `steps/report/junit.py`
  - Add typing for `steps/report/html.py`
  - add typing for steps/report/display.py
  - Add typing for steps/report/__init__.py
  - tmt-file-submit is a bash script
  - Add type annotations for tmt/options.py
  - Backwards compatibility for `rstrnt-report-log`
  - Support conditional requires with `pip` as well
  - Remove duplicated short option in tmt lint
  - Adjust the `rstrnt-report-result` implementation
  - Backwards compatibility for `rstrnt-report-result`
  - Set the `1777` permision for `/var/tmp/tmt`
  - Adjust the fix for the `rpm-ostree` intallation
  - Fix package installation using `rpm-ostree`
  - Handle empty fmf file as an empty dictionary
  - Fix distgit testsuite after tmt packaging change


author: Lukáš Zachar <lzachar@redhat.com> - 1.17.0-1
changelog:
  - Unify Polarion case searching
  - Error out if reboot timeout is exceeded
  - Initialize workdir thread-safe
  - Add support for remote playbooks in prepare
  - Add plan schema for errata and minute plugins
  - Correct rhts command names in stories file
  - Print escaped command suitable for manual debugging
  - Fix report plugin not getting arguments from fmf file
  - Less eager to disable nitrate case during export
  - Move `tag` and `tier` to common core attributes
  - Use `/bin/bash` instead of `/bin/sh` for execute
  - Reorder step and their base plugin classes
  - Fix prepare/multihost docs to match implementation
  - Teach schema validation tests to peek into other trees
  - Clarify motivation for creating `id` during export
  - Add link-polarion option and fix link searching bug
  - Ignore race in last-run symlink creation
  - Fix polarion tcmscaseid search
  - Force order of clean operations
  - Convert status/clean argument to option
  - Report enabled plans/tests/stories via option
  - Hint user if 'tmt init' creates nested root
  - Require `libvirt-daemon-config-network` as well
  - Add type annotation for /steps/prepare/install.py
  - Encapsulate created file within script's dataclass
  - Adds normalization layer to base classes based on fmf
  - Fixes data class used for local guest creation
  - Fixes Artemis guest data class link
  - Making tests/full more usable
  - Add typing for tmt/steps/provision/podman.py
  - Add typing for tmt/steps/provision/testcloud.py
  - Add typing for tmt/steps/provision/local.py
  - Remove unused keys parameter from wake() methods
  - Adds types describing tmt constructs when as stored in raw fmf data
  - Typing /steps/provision/connect.py
  - Allow raising an exception on validation errors
  - Inject logger object to base node classes inheritance
  - Fixes use of SSH keys in testcloud and connect plugins
  - Annotate tmt.steps.provision
  - Ask mypy to show error codes in its messages
  - Testcloud expects disk and memory to be int
  - Do not inherit classes from object
  - Use keyword-only init in base fmf-backed classes
  - Use decorator to register plugin methods
  - Demonstrate inheritance on a virtual test example
  - Add a simple hint how to write user messages
  - Add typing for `steps/finish/ansible.py`
  - Remove unneeded parameters for step load/save (#1428)
  - Normalize step data to be always stored a list internally
  - Display test/plan/story name in parametrized schema tests
  - Allow numbers and booleans to be values of environment
  - Give a reasonable error for old data format
  - Add typing for tmt/steps/finish/__init__.py
  - add typing for steps/discover/shell.py
  - Adds a fmf node validation layer to core classes (Test/Plan/Story)
  - Add missing keys `role` and `where` to schemas
  - Extend plan schema with all known step plugin schemas
  - Correcting rhts aliases & adding rhts opt.
  - Adds a generic "wait for condition" primitive
  - Disallow push/pull/execute if guest is unavailable
  - Rename "default how" step attribute to enhance its visibility
  - Use textwrap.dedent() to unindent docstrings


author: Petr Šplíchal <psplicha@redhat.com> - 1.18.0-1
changelog:
  - Fix recommended packages handling for rpm-ostree
  - Add EFI configuration to the `tmt-reboot` script
  - Fix adjust for precommit test
  - Fix provision for coreos image
  - Emit only non-default keys when constructing a test from `execute`
  - Add flake8 config file for easier integration with IDEs
  - Multiple scripts for CLI prepare -h shell
  - Allow mypy to cover the whole tmt.plugins and tmt.steps
  - Add typing for `steps/execute/upgrade.py`
  - Fix name & default value of polarion's upload field
  - Fixes enhancing of environment by local's guest implementation
  - Ignore plan -n when searching for upgrade path
  - Document & correct use of class conversion methods
  - Print fmf tree location when schema unit test fails
  - Custom results implementation
  - Refactors internal link handling and storage
  - Allow mypy to cover whole tmt.steps.prepare
  - Add typing for `steps/execute/internal.py`
  - Use workdir with safe names without special chars
  - Adjust support for installing remote packages
  - Support to install package from URL
  - Make sure short option '-x' is covered
  - Add Polarion as a source for test case import
  - Print path to the used ssh identity
  - Add typing for `steps/prepare/__init__.py`
  - Use generator instead of list comprehension with any/all
  - Fixes handling of default of --key in connect plugin
  - Update test data for the debuginfo install test
  - Add a helper for importing a member from a module
  - Fix plan schema to allow custom context dimensions
  - Allow mypy to cover whole tmt.steps.discover
  - Remove support for the obsoleted `detach` executor
  - Add typing for `steps/discover/fmf.py`
  - Fix importing for pylero
  - Allow mypy to cover whole tmt.steps.provision
  - Replace blank "type: ignore" with more specific waivers
  - Use the `SerializableContainer` for plugins' data
  - Enhance SerializableContainer with default key value inspection
  - Moves validation and normalization mixins to utils


author: Lukáš Zachar <lzachar@redhat.com> - 1.19.0-1
changelog:
  - Protect args in rsync call
  - Set tree root for the default plan tree as well
  - Properly set the `tmt` script shebang on `rhel-8`
  - Use image exists to check for container image
  - Updates docs with example on `adjust` & `prepare+`
  - Fix test duration enforcement
  - Skip missing debuginfo packages in `recommend`
  - Explicitly document extending the plan environment
  - Fix ownership of a tmp directory propagated to container
  - Support fetching remote repo for `shell` discover
  - Fix default `framework`, remove old execution methods
  - Add support for Artemis v0.0.46 upcoming release
  - Handle an fmf fetch error in remote plan clone
  - Do not truncate `RunError` output in verbose mode
  - Warn user about data erasing after prepare step
  - Formalize `data` package passed to the `Result` class
  - Change order of plugin and guest classes in files
  - Add `compatible` as a new hardware specification key
  - Add `tpm` as a new hardware specification key
  - Move the hardware specification into a separate page
  - Improve fmf-id processing
  - Add test for TTY state in test environment
  - Login after each test using the `--test` parameter
  - Mention version where important features were added
  - Handle dist-git-sources for gitlab
  - Fix getting CentOS via --how virtual
  - Capture uncaught exceptions when using testcloud
  - Update the overview of essential classes
  - When following command line --how, do not iterate over step data
  - Convert utils' Run unit tests to class-less tests
  - Enable variable expansion for dynamic references
  - Support beaker libraries as recommended packages
  - Add `SpecBasedContainer.to_minimal_spec()` method (#1637)
  - Enable context based plan parametrization
  - Coverage for tests defined under `discover.shell`
  - Fix `/tests/run/shell` access permission problem
  - Add step data classes for provisioning and report
  - Adjust support for the dynamic `ref` evaluation
  - Add support for dynamic `ref` evaluation
  - Add a test for fmf id parsing and normalization
  - Fix NO_COLOR not being honored by executed command output
  - Moves common command options into one place
  - Log full chain of exceptions, not just the first cause
  - Drop deprecated PluginIndex
  - Add message to failure tags in junit report
  - Update the pip installation plan
  - Remove pointless reimport of tmt.base in discover steps
  - Do not use f-string as a docstring
  - Fix use of variable before assignment in `Plan.go`
  - Fix variable redefinition in `discover/shell.py`
  - Fix guest distro detection, do not throw results away
  - Fix a typo in `cpu.sockets` hardware requirement
  - Make links relative for report html
  - Review all uses of `type: ignore` and link relevant issues
  - Enhance ClickOptionDecorator type to announce identity
  - Update `/tests/execute/upgrade/override` duration
  - Review all uses of `Any` and link relevant issues
  - Annotate all `cast()` calls with respective issues
  - Move the `Result` class into a separate file
  - Unblock mypy's follow-import setting
  - Use set comprehension instead of list-in-set sequence
  - Use `enumerate()` instead of `range(len())`
  - Use dict comprehension instead of tuple-in-list-in-dict
  - Replace two more list comprehensions with generators
  - Replace GeneralError's "origin" with Python's "raise from"
  - Fix normalization of the `Plan.context` key
  - Adds a missing import to polarion plugin
  - Update all linters to their most recent versions
  - Define CPU HW components with more granularity
  - Adjust the support for importing remote plans
  - Add import plan feature and tests
  - Add type annotations to `base.py`
  - Fix test depending on ordering of elements in junit XML
  - Adds type annotations to `tmt` itself
  - Remove custom yet same implementation of step's show()
  - Make sure `repo_copy` is gone before `make srpm`


author: Lukáš Zachar <lzachar@redhat.com> - 1.20.0-1
changelog:
  - Do not prune `html` and `junit` reports
  - Skip extending fmf context if cli context missing
  - Connect needs is_ready property as well
  - Cover setup.py with pre-commit Python checks
  - Do not leak "private" fields into export
  - Set guest hostname in testcloud provision
  - Capture provision error when login is used
  - Support `TMT_WORKDIR_ROOT` environment variable
  - Support step data definitions carrying CLI options
  - Adds flake8 coverage for bin/ directory
  - Prune irrelevant files during the `finish` step
  - Add junit plugin schema
  - Support to import empty key from Makefile
  - Deleting unsed and duplicite part of finish step
  - Support absolute paths in HTML reports
  - Capture exceptions when getting `image_url`
  - Enable verbose output for `provision` & `prepare`
  - Add support for Artemis v0.0.47 upcoming release
  - Remove unused variables
  - Initial support for passing ssh options from cli
  - Update specification of the `where` multihost key
  - Add a simple test demonstrating the upgrade testing
  - Use custom subclass of click.Context for better annotations
  - Extend the `duration` for tests using containers
  - Change common class constructors to use keyword arguments only
  - Make packit build with the next release.dev version
  - Add basic test coverage for `tmt story export`
  - Fix export of the story `priority` field
  - Read source from correct directory if ref is used


author: Lukáš Zachar <lzachar@redhat.com> - 1.21.0-1
changelog:
  - Fix tmt-reboot without custom command
  - Fix test /discover/libraries
  - Add serialization callbacks to data class fields
  - Use own private key for `provision.virtual`
  - Adds a template-backed export plugin
  - Polarion export fix component upload bug and upload id first
  - Convert story ReST export to use a Jinja2 template
  - Convert export-related code to plugins per format
  - Do not clone the whole remote plan in dry mode
  - Hardcode tmt git URL so test won't fail for PRs
  - Add py.typed marker for 3rd party type annotations
  - Fixes isort 5.10.1 installation issue
  - Improve logging by `tmt.utils.wait()`
  - Check packages are installed via debuginfo-install
  - Always ignore failures for recommended packages
  - Merge report plugins options into step data fields
  - Dynamically find the current Fedora release
  - Suggest using a pull request checklist template
  - Include a simple Python code among the examples
  - Apply normalization callback when updating data with CLI input
  - Bump pre-commit linters - Flake8, Mypy, JSON schema, YAML lint & pygrep
  - Use base implementation of provision plugin requirements
  - Relay 'interactive' value for podman call
  - Update Fedora versions in `upgrade` tests
  - Apply `ShellScript` for the custom reboot command
  - Update the `shell` discover specification
  - Enable to sync git repo to SUT in `shell` discover
  - Increase the default `utils.format()` indent a bit
  - Define pull request Copr build job in Packit config
  - Decouple logging from objects and base classes
  - Enable `url` and `ref` as `shell` discover options
  - Export `TMT_TREE` in other steps as well
  - Add a new key `system` to the `hardware` spec
  - Remove default for the dynamic `ref` evaluation
  - Schema update and test for order in discover step
  - Merge report plugins options into step data fields
  - Add a test for hardware schema coverage
  - Better type annotations of prepare/install scripts
  - Move `jinja2` require to the main `tmt` package
  - Define the new context dimension `initiator`
  - Respect `TMT_WORKDIR_ROOT` variable in `testcloud`
  - Annotate commands, command line elements and shell scripts
  - Adjust the `reportportal` plugin implementation
  - Implement the `reportportal` report plugin
  - Require the latest `testcloud` package
  - Define `srpm_build_deps` in the packit config
  - Include the new web link in verbose `show` mode
  - Add a clickable web link to test to polarion export
  - Enhance `Links` to allow checking for any links at all
  - Drop various guest `wake()` methods in favor of parent class
  - Catch `SystemExit` during module discovery


author: Sonia Xu <sonix@amazon.com> - 1:9.0.59-1
changelog:
  - Update to 9.0.59
  - Resolves: rhbz#2047419 - CVE-2022-23181 tomcat: local privilege escalation vulnerability


author: Hui Wang <huwang@redhat.com> - 1:9.0.71-1
changelog:
  - Update to 9.0.71
  - Remove osgi-annotations patch
  - Add bnd-annotation dependency which is in bndlib package


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.2.0-1
changelog:
  - Update to 1.2.0
  - Don't build static libraries
  - Minor glob changes to follow the spirit of recent packaging guidelines
  - SPDX License


author: Jered Floyd <jered@redhat.com> 9.1.2-5
changelog:
  - Changes based on spec review; change "RedHat" capitalization,
    and add link to upstream file layout discussion


author: Jered Floyd <jered@redhat.com> 9.1.2-8
changelog:
  - Cherry-pick OpenSSL 3 compatibility required for RHEL 9
  - Switch to OpenSSL 3 on f36+
  - Include automake in BuildRequires


author: Jered Floyd <jered@redhat.com> 9.1.3-1
changelog:
  - Update to 9.1.3, resolves CVE-2022-25763, CVE-2022-31779, CVE-2021-37150,
    CVE-2022-28129, CVE-2022-31780
  - Resolve glibc 2.36 (f37) header incompatibility that caused FTBFS RHBZ#2112282


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.7.0.1-0.10.20191104git36b0587
changelog:
  - drop obsolete and no longer available BR kf5-gpgmepp-devel, CMakeLists.txt
    prefers already BRed gpgmepp-devel and qgpgme-devel, fixes FTBFS (#1988027)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.7.0.1-0.12.20220117git266c757
changelog:
  - New git snapshot, hopefully fixes longstanding FTBFS (#1923550, #1988027)
  - F34 only: Use -Wl,--copy-dt-needed-entries to work around F34 FTBFS (#1923550)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.7.0.1-0.13.20220117git266c757
changelog:
  - Add BuildRequires: kf5-kio-devel (workaround for #2046299)
  - Add BuildRequires: kf5-ki18n-devel (workaround for #2046310)
  - Add BuildRequires: grantlee-qt5-devel (workaround for #2046574)


author: Jiri Kucera <jkucera@redhat.com> - 0.7.0.1-0.15.20220904git5295175
changelog:
  - New git snapshot, up to gpgme[>=1.18.0] fix (gpgme is not rebased yet)
    Note that no new strings have been added from commit 5295175 to now so it is save
    to fetch the latest ./po revision from SVN
  - Fixes FTBFS with akonadi-contact>=22.04.x
  - Add support for ragel 7
  - Use SPDX license identifier
  - Spec file cleanup


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.19.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2057609
    - fixed parsing of inline comments
      resolves: rhbz#2060138
    - added support for quotes in isolated_cores specification
      resolves: rhbz#1891036
    - spec: reduced weak dependencies
      resolves: rhbz#2093841
    - recommend: do not ignore syspurpose_role if there is no syspurpose
      resolves: rhbz#2030580
    - added support for initial autosetup of isolated_cores
      resolves: rhbz#2093847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2133815
    - systemd: relax polkit requirement
      resolves: rhbz#2065591
    - sysvinit: fixed path
      resolves: rhbz#2118301
    - plugin_cpu: added support for pm_qos_resume_latency_us
      resolves: rhbz#2118786
    - do not exit on duplicate config lines
      resolves: rhbz#2071418
    - profiles: new cpu-partitioning-powersave profile
    - profiles: new profile for AWS EC2
      resolves: rhbz#1935848
    - API: add support for moving devices between instances
      resolves: rhbz#2113925
    - D-Bus: send tracebacks through D-Bus only in debug mode
      resolves: rhbz#2159680
    - Makefile: added fix for python-3.12
      resolves: rhbz#2154801
    - throughput-performance: set net.core.somaxconn to at least 2048
      resolves: rhbz#1998310
    - plugin_scheduler: do not leak FDs from the perf
      resolves: rhbz#2080227
    - plugin_cpu: added support for intel_pstate scaling driver
      resolves: rhbz#2095829
    - added support for the API access through the Unix Domain Socket
      resolves: rhbz#2113900


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2133815
    - fixed possible traceback on SIGHUP
      resolves: rhbz#2169712
    - updated manual pages to be consistent
    - tuned-adm: better error message for unauthorized switch_profile
    - plugin_sysctl: report reapplied sysctls only on different values


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not 2022-03-26.
    - zdump -v now outputs better failure information.
    - bug fixes for code that reads corrupted TZif data.


author: Patsy Griffin <patsy@redhat.com> - 2022b-1
changelog:
  - Rebase to tzdata-2022b
    - Chile transitions to DST on 2022-09-11, not 2022-09-04
    - 'make install' now defaults LOCALTIME to Factory rather than GMT
    - More zones that are the same since 1970 have been moved to backzone.
    - Include patch for awk workaround.


author: Patsy Griffin <patsy@redhat.com> - 2022c-1
changelog:
  - Rebase to tzdata-2022c - supersedes tzdata-2022b
    - Add a work-around for an awk bug in FreeBSD, macOS, etc.
    - Improve tzselect with respect to intercontinental Zones.


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Andreas Schneider <asn@redhat.com> - 1.2.8-1
changelog:
  - Update to version 1.2.8
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.2.8/ChangeLog


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.6-1
changelog:
  - Increase uevent buffer size (#167)
  - Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
    builds for the time being, as it is brittle on several architectures (#169)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.17.8-1
changelog:
  - Fix some potential crashes spotted by Coverity
  - Enable Fedora builds and bodhi updates via packit


author: Packit <hello@packit.dev> - 0.17.10-1
changelog:
  - Adjust to systemd 251-rc2: Set $SYSTEMD_DEVICE_VERIFY_SYSFS, parse new udevadm format, update tests


author: Packit <hello@packit.dev> - 0.17.13-1
changelog:
  - preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
  - Fix tests in Gentoo sandbox build


author: Packit <hello@packit.dev> - 0.17.15-1
changelog:
  <!-- generated by eloquent/github-release-action -->
  <!-- original source:
  - test fixes
  -->

  <ul>
  <li>test fixes</li>
  </ul>


author: Packit <hello@packit.dev> - 0.17.16-1
changelog:
  <!-- generated by eloquent/github-release-action -->
  <!-- original source:
  - preload: Wrap __getcwd_chk()
  - uevent_sender: Fix fd leak in sendmsg_one
  - Fix gcc -fanalyzer complaints
  -->

  <ul>
  <li>preload: Wrap __getcwd_chk()</li>
  <li>uevent_sender: Fix fd leak in sendmsg_one</li>
  <li>Fix gcc -fanalyzer complaints</li>
  </ul>


author: Petr Menšík <pemensik@redhat.com> - 1.17.0-2
changelog:
  - Move unbound user creation to libs (#2149036)
  - Use systemd-sysusers for user creation (#2105416)
  - Keep original DNSSEC root key as config (#2132103)


author: Paul Wouters <paul.wouters@aiven.io - 1.17.1-1
changelog:
  - Resolved rhbz#2160397 unbound-1.17.1 is available (bugfix release)
  - Add support for building with redis


author: Mike FABIAN <mfabian@redhat.com> - 15.0-1
changelog:
  - Update to Unicode Emoji Data 15.0 (was released on September 13, 2022)
  - Migrate license tag to SPDX


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Benjamin A. Beasley <code@musicinmybrain.net> - 22.08-1
changelog:
  - Update to 22.08 (.so version bump); close RHBZ#2110024
  - The monolithic library is also renamed from libusd_usd_ms.so to
    libusd_ms.so.


author: Mark Wielaard <mjw@fedoraproject.org>
changelog:
  - Add valgrind-3.18.1-ppc64-cmov.patch
  - Add valgrind-3.18.1-arm64-atomics-rdm.patch
  - Add valgrind-3.18.1-rust-demangle-suffix.patch


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.0.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2022-23959 aka VSV00008, rhbz#2045033


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.20.0-1
changelog:
  - Built for varnish-7.1.0
  - Now provides vmod(name) instead of vmod-name, matching varnish' provides


author: Jeremy Sanders <jeremy@jeremysanders.net> - 3.5.3-2
changelog:
  - Use explicit files, rather than glob all
  - Update licence to new rules
  - Update provide filtering to new method for internal libraries


author: Troy Curtis, Jr. <troy@troycurtisjr.com> - 1.10-1
changelog:
  - Update to 1.10
  - Update description to be more accurate to the latest version
  - Use SPDX for the license field


author: Sérgio Basto <sergio@serjux.com> - 7.0.2-1
changelog:
  - Update to 7.0.2
  - Add mount.vboxsf script wrapper
  - (#2049736) Add a note into the description informing this packages replaces
    Virtualbox's own method to install Guest Additions.


author: Akira TAGOH <tagoh@redhat.com> - 20220612-1
changelog:
  - New upstream release.
    Resolves: rhbz#1858617
  - Revise the spec file for new packaging guidelines.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.19.rc1
changelog:
  - Update to version 2.1.0-rc1
  - Drop patches accepted upstream:
    voms-nid-defined.patch, voms-gssapi-header.patch and voms-wsdl2h.patch
  - Use systemd unit file from source distribution


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.25-1
changelog:
  - update to 1.0.25 (#2047107)
  - skip some new failing tests on 32-bit
  - skip two more failing tests on i686


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.28-1
changelog:
  - update to 1.0.28 (#2065997)
  - run fixed tests on 32-bit again
  - work around test failures due to new gcc-12 warnings


author: Dominik Mierzejewski <dominik@greysector.net> 1.0.30-1
changelog:
  - update to 1.0.30 (#2132095)
  - increase timeout to fix tests on ARM
  - skip some new failing tests on i686 and s390x for now


author: Alessandro Astone <ales.astone@gmail.com> - 1.3.3-3
changelog:
  - Override selinux context of the android rootfs
  - Fixes https://github.com/casualsnek/waydroid_script


author: Alessandro Astone <ales.astone@gmail.com> - 1.3.4-3
changelog:
  - Fix description typos etc.
  - Validate desktop and metainfo files
  - Reorder post install scriptlets


author: Michel Alexandre Salim <salimma@fedoraproject.org> 3.4-6
changelog:
  - Fix test compilation
  - build tests with -fPIC
  - install test dependency on locale data
  - disable failing tests


author: Bob Hepple <bob.hepple@gmail.com> - 0.3.1-0.1.20221222git3933ab2
changelog:
  - moving to rawhide/f38 - retire from fusion now that ffmpeg-free is available
  - merge https://github.com/ammen99/wf-recorder/pull/198:
  - change the default for wf-recorder to use only royalty-free codecs (libvpx-vp9) by default.
  - merge https://github.com/ammen99/wf-recorder/pull/197:
  - a minimal set of options to enable realtime encoding.


author: Michal Ambroz <rebus at, seznam.cz> - 0.5.5-2
changelog:
  - removed alias bundle - needs to be solved by
  - added conditional for the (network) tests
  - license is GPLv2+
  - empty the plugin/IpToCountry.csv with problematic 
  - move addons and plugin-development to doc folder


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.2-1
changelog:
  - New version 3.6.2
  - Fix for CVE-2022-0581, CVE-2022-0582, CVE-2022-0583, CVE-2022-0585, CVE-2022-0586


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.16.0-1
changelog:
  - Update to 0.16.0 (#2142159)
  - Add patch for compatibility with older libdrm
  - Sync examples.meson.build with upstream, include all available examples


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-27
changelog:
  - Clarify URL/Source situation, and do not claim to have a working source
    archive URL
  - General tidying of spec file; use modern macros and install HTML format
    description as documentation
  - Add hand-written man pages


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.10.50-1
changelog:
  - Update to 1.10.50
  - Enable GNOME Flashback applet
  - Support GNOME Shell 42 (#2132504) and 43 (#2132507)


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.2.0-1
changelog:
  - Update to 0.2.0
  - Drop versioned pipewire dependency: all supported Fedora releases have required version.


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.6.0-3
changelog:
  - Recommend only one chooser of 3 supported, prefer slurp.
  - Add missing BR: pkgconfig(systemd)
  - Add upstream patch for screenshot portal version
  - Convert License tag to SPDX


author: Michael Young <m.a.young@durham.ac.uk> - 4.16.1-6
changelog:
  - Retbleed - arbitrary speculative code execution with return instructions
  	[XSA-407, CVE-2022-23816, CVE-2022-23825, CVE-2022-29900]


author: Michael Young <m.a.young@durham.ac.uk> - 4.16.2-2
changelog:
  - Arm: unbounded memory consumption for 2nd-level page tables [XSA-409,
  	CVE-2022-33747] (#2135268)
  - P2M pool freeing may take excessively long [XSA-410, CVE-2022-33746]
  	(#2135641)
  - lock order inversion in transitive grant copy handling [XSA-411,
  	CVE-2022-33748] (#2135263)


author: Michael Young <m.a.young@durham.ac.uk> - 4.16.2-3
changelog:
  - x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327]
  - Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309]
  - Xenstore: Guests can create orphaned Xenstore nodes [XSA-415,
  	CVE-2022-42310]
  - Xenstore: guests can let run xenstored out of memory [XSA-326,
  	CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314,
  	CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318]
  - Xenstore: Guests can cause Xenstore to not free temporary memory
  	[XSA-416, CVE-2022-42319]
  - Xenstore: Guests can get access to Xenstore nodes of deleted domains
  	[XSA-417, CVE-2022-42320]
  - Xenstore: Guests can crash xenstored via exhausting the stack
  	[XSA-418, CVE-2022-42321]
  - Xenstore: Cooperating guests can create arbitrary numbers of nodes
  	[XSA-419, CVE-2022-42322, CVE-2022-42323]
  - Oxenstored 32->31 bit integer truncation issues [XSA-420, CVE-2022-42324]
  - Xenstore: Guests can create arbitrary number of nodes via transactions
  	[XSA-421, CVE-2022-42325, CVE-2022-42326]


author: Michael Young <m.a.young@durham.ac.uk> - 4.16.3-3
changelog:
  - use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file
  	built from edk2-ovmf package no longer supports xen (#2170930)


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 1.0.3-1
changelog:
  - Update to latest version (#1965198)
  - Fix build with Sphinx 4 (#1977665)
  - Remove unnecessary RPATH directories


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Jonathan Wright <jonathan@almalinux.org> - 1.51.08-1
changelog:
  - update to 1.51.08
  - Remove meson build code, follow upstream build methods
  - rhbz#2009098
  - rhbz#2010890


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.14-10
changelog:
  - Drop dependency on xorg-x11-font-utils, it was only there for on
    build-time variable that's always the same value anyway (#2145088)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.20.14-11
changelog:
  - CVE fix for: CVE-2022-4283, CVE-2022-46340, CVE-2022-46341,
    CVE-2022-46342, CVE-2022-46343, CVE-2022-46344


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.14-13
changelog:
  - Rename boolean config value field from bool to boolean to fix drivers
    build failures due to a conflict with C++ and stdbool.h


author: Leif Liddy <leifliddy@fedoraproject.org> 1.20.14-15
changelog:
  - Xorg server does not correctly select the DCP for the display
    without a quirk on Apple silicon machines (#2152414)


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.14-16
changelog:
  - Use the recommended way to apply conditional patches without
    conditionalizing the sources (for byte-swapped clients).


author: Peter Hutterer <peter.hutterer@redhat.com> - 22.1.6-1
changelog:
  - xwayland 22.1.6
    Fixes CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343,
    CVE-2022-46344, CVE-2022-4283


author: Bojan Smojver <bojan@rexursive.com> - 0.9.19-5
changelog:
  - Insert glamoregl module into xorg.conf for glamor package
  - Add missed Xorg server dependencies into glamor package


author: Sérgio Basto <sergio@serjux.com> - 4.4.3-2
changelog:
  - Add unitdir, we may have unitdir but by default disabled, preset just enable service by default which understandably was not approved.
    to check presets run `systemctl status xpra | grep preset`
  - Un-split xpra-udev and other improvements
  - Add support to procps, avif, qrencode, libdrm and libwebp


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.4.3-1
changelog:
  - Update to version 5.4.3
  - Drop patches accepted upstream or previously backported
  - Add BR python3-pip and python3-wheel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.0-1
changelog:
  - Update to version 5.5.0
  - Drop patches accepted upstream
  - Address some warnings from Doxygen
  - Build using devtoolset 7 on EPEL 7


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.1-1
changelog:
  - Update to version 5.5.1
  - Drop doxygen patch accepted upstream
  - Check all sizes (8, 16, 32, 64) in <atomic> check
  - Check operator++ in <atomic> check


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.5.1-2
changelog:
  - Add missing include - fixes build failure with gcc 13
  - Fix build failure due to possible large memory allocation


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.05-3
changelog:
  - Kill no longer needed workaround stuff
  - hacks/fonts: fix installation on out-of-source build
  - driver/Makefile.in: fix GLIB_COMPILE_RESOURCES source
  - hacks/Makefile.in: fix driver/prefs.o output location


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.06-2
changelog:
  - Make -base subpackage require -gl-base (debian bug 1030659)
  - switch_page_cb: backport debian fix for DPMS settings issue


author: Tomas Korbar <tkorbar@redhat.com> - 377-1
changelog:
  - Rebase to version 377
  - Remove unnecessary dependency on xterm-resize
  - Resolves: rhbz#2143618
  - Resolves: rhbz#2142751


author: Todd Zullinger <tmz@pobox.com> - 5.2.5-9
changelog:
  - verify upstream GPG signature
  - xzgrep: arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)


author: Artem Polishchuk <ego.cordatus@gmail.com> - 9.8.2-1
changelog:
  - chore(update): 9.8.2 | Co-authored-by: Jack Xu <jackyzy823@gmail.com>
  - build(add BR): libqrencode
  - build(add BR): Qt5Svg


author: Neal Gompa <ngompa@fedoraproject.org> - 1.22.10-4
changelog:
  - Work around broken brp-mangle-shebangs behavior (see RHBZ#1998924)
  - Fix broken macro variable for legacy "nodejs-yarn" binary name (RHBZ#1904279)


author: zsvetlik@redhat.com - 1.22.17-1
changelog:
  - Update to latest upstream release
  - use --force in yarnpkg-tarball.sh to workaround dependency conflincts


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.3.0-1
changelog:
  - New upstream release (#2059540)
  - Initialize maybe-uninitialized variables
  - Fix usage of pointer after free
  - Build against OpenSSL 3.0


author: Jerry James <loganjerry@gmail.com> - 4.11.2-2
changelog:
  - Add -data-race patch to fix segfault (bz 2157972)
  - Add -uninit patch to fix use of an uninitialized value


author: Orion Poplawski <orion@nwra.com> - 1:6.0.13-1
changelog:
  - Update to 6.0.13
  - Add policy to allow zabbix scripts to run chronyc as chronyc_t (bz#2160180)
  - Add policy to allow zabbix agent to run rpm read-only


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.0-1
changelog:
  - Add `--uncompressed` option to zck, allowing for embedding of uncompressed
    digests in the header
  - Various small bug fixes


author: Jonathan Dieter <jdieter@gmail.com> - 1.2.1-1
changelog:
  - Fixed bug that limited size of file that could be compressed using zchunk to 2GB
  - Fixed memory leak


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-5
changelog:
  - Make make check error fatal
  - Disable tests currently hard to get passed
  - Make main package EVR aware for -libs subpackage


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.0.4-6
changelog:
  - Upstream patch: datahub: Fix wrong parameter for Event.full() ctor
    (Upstream bug 19, RH bug 1779103)


