# changelog

author: Than Ngo <than@redhat.com> - 126.0.6478.114-1
changelog:
  - update to 126.0.6478.114
    * High CVE-2024-6100: Type Confusion in V8
    * High CVE-2024-6101: Inappropriate implementation in WebAssembly
    * High CVE-2024-6102: Out of bounds memory access in Dawn
    * High CVE-2024-6103: Use after free in Dawn


author: Than Ngo <than@redhat.com> - 126.0.6478.126-1
changelog:
  - update to 126.0.6478.126
    * High CVE-2024-6290: Use after free in Dawn
    * High CVE-2024-6291: Use after free in Swiftshader
    * High CVE-2024-6292: Use after free in Dawn
    * High CVE-2024-6293: Use after free in Dawn


author: Than Ngo <than@redhat.com> - 126.0.6478.182-1
changelog:
  - update to 126.0.6478.182
    * High CVE-2024-6772: Inappropriate implementation in V8
    * High CVE-2024-6773: Type Confusion in V8
    * High CVE-2024-6774: Use after free in Screen Capture
    * High CVE-2024-6775: Use after free in Media Stream
    * High CVE-2024-6776: Use after free in Audio
    * High CVE-2024-6777: Use after free in Navigation
    * High CVE-2024-6778: Race in DevTools
    * High CVE-2024-6779: Out of bounds memory access in V8


author: Than Ngo <than@redhat.com> - 127.0.6533.72-1
changelog:
  - update to 127.0.6533.72
  	* CVE-2024-6988: Use after free in Downloads
  	* CVE-2024-6989: Use after free in Loader
  	* CVE-2024-6991: Use after free in Dawn
  	* CVE-2024-6992: Out of bounds memory access in ANGLE
  	* CVE-2024-6993: Inappropriate implementation in Canvas
  	* CVE-2024-6994: Heap buffer overflow in Layout
  	* CVE-2024-6995: Inappropriate implementation in Fullscreen
  	* CVE-2024-6996: Race in Frames
  	* CVE-2024-6997: Use after free in Tabs
  	* CVE-2024-6998: Use after free in User Education
  	* CVE-2024-6999: Inappropriate implementation in FedCM
  	* CVE-2024-7000: Use after free in CSS. Reported by Anonymous
  	* CVE-2024-7001: Inappropriate implementation in HTML
  	* CVE-2024-7003: Inappropriate implementation in FedCM
  	* CVE-2024-7004: Insufficient validation of untrusted input in Safe Browsing
  	* CVE-2024-7005: Insufficient validation of untrusted input in Safe


author: Than Ngo <than@redhat.com> - 127.0.6533.88-2
changelog:
  - remove old patch that seems to be the cause of a crash
    when the user set user.max_user_namespaces to 0


author: Than Ngo <than@redhat.com> - 127.0.6533.88-3
changelog:
  - fix rhbz#2294773 - Allow enabling vulkan on ozone wayland for AMD vaapi
  - add ppc64le patch to fix runtime assertion trap on ppc64el systems
  - refresh ppc64le patch to work around broken 64k allocator code on arm64


author: Than Ngo <than@redhat.com> - 127.0.6533.99-1
changelog:
  - update to 127.0.6533.99
    * Critical CVE-2024-7532: Out of bounds memory access in ANGLE
    * High CVE-2024-7533: Use after free in Sharing
    * High CVE-2024-7550: Type Confusion in V8
    * High CVE-2024-7534: Heap buffer overflow in Layout
    * High CVE-2024-7535: Inappropriate implementation in V8
    * High CVE-2024-7536: Use after free in WebAudio


author: Ken Dreyer <kdreyer@ibm.com> - 2.9.1-3
changelog:
  - enable general dynamic tls on s390x (Thanks Tom Callaway
    <spot@fedoraproject.org>) (rhbz#2290376)


author: Petr Pisar <ppisar@redhat.com> - 2.13.2-3
changelog:
  - Adapt tests to ImageMagick-7.1.1.5 (upstream bug #417)
  - Ignore options of scanners which report a range minimum greater than a range maximum


author: Remi Collet <remi@remirepo.net> - 1.27.0-1
changelog:
  - update to 1.27.0
  - raise dependency to libmongocrypt 1.10.0
  - drop dependency on libicu
  - add dependency on libutf8proc


author: Packit <hello@packit.dev> - 0.90.0-1
changelog:
  - `pull-from-upstream` and `propose-downstream` commands now have the `--sync-acls` option that enables syncing the ACLs between dits-git repo and fork. The default behaviour was, however, changed to not sync the ACLs. (#2214)
  - Packit now properly handles exceptions when syncing ACLs during release syncing. (#2213)


author: Packit <hello@packit.dev> - 0.93.0-1
changelog:
  - Packit now checks the version to propose against the version in specfile and doesn't create downgrade PRs. (#2239)


author: Packit <hello@packit.dev> - 0.94.0-1
changelog:
  - Added new configuration options `status_name_template` and `allowed_builders`.
  - Resolves rhbz#2266037


author: Packit <hello@packit.dev> - 0.94.2-1
changelog:
  - Packit previously put the "[packit]" string as a prefix in the subject of pull-from-upstream commits. Now the prefix is no longer there - this is made unnecessary noise in autochangelog. This affects the default. Custom action can still override this behavior. (#2263)
  - We have fixed a race condition that could occur when multiple `copr_build` jobs sharing a Copr project but having different targets were running at the same time. (#2274)
  - Resolves: rhbz#2273977


author: Packit <hello@packit.dev> - 0.95.0-1
changelog:
  - `packit dist-git init` now allows specifying `--version-update-mask` option and also any arbitrary top-level configuration options. (#2288)
  - We have fixed Packit auto-referencing Upstream Release Monitoring bug for release syncing to CentOS Stream. (#2284)
  - Resolves: rhbz#2276194


author: Packit <hello@packit.dev> - 0.97.0-1
changelog:
  - Add a `scan-in-osh` subcommand in the CLI to perform a scan through OpenScanHub. By default, it performs a full scan of the packages and a differential scan can be performed through `--base-srpm` option. (#2301)
  - When running `dist-git init` command from CLI, you can pass a command to specify a git URL of the project. (#2308)


author: Packit <hello@packit.dev> - 0.97.1-1
changelog:
  - We have fixed the behaviour for `dist-git init` command when `upstream-git-url` argument is specified.
  - Resolves: rhbz#2278839


author: Packit <hello@packit.dev> - 0.97.2-1
changelog:
  - We have fixed the syncing of ACLs for `propose-downtream` for CentOS Stream. (#2318)
  - Resolves: rhbz#2290733


author: Packit <hello@packit.dev> - 0.97.3-1
changelog:
  - We have fixed a bug that caused inconsistency between the promised environment variables (from the docs) and the environment that has been actually provided. Now you should have access to `PACKIT_UPSTREAM_REPO` and `PACKIT_DOWNSTREAM_REPO`, if they have been cloned already, in the `post-upstream-clone` action. (#2327)
  - Resolves: rhbz#2293661


author: Packit <hello@packit.dev> - 0.100.0-1
changelog:
  - `packit pull-from-upstream` now allows omitting `upstream_project_url` in the configuration in which case the interaction with the upstream repository is skipped during release syncing. (#2354)
  - We have implemented a CLI support for Koji builds against CBS Koji instance. (#2267)


author: Devrim Gündüz <devrim@gunduz.org> - 1.20.1-1
changelog:
  - Update to 1.20.1, per changes described at:
    https://www.pgbouncer.org/changelog.html#pgbouncer-120x


author: Devrim Gündüz <devrim@gunduz.org> - 1.21.0-1
changelog:
  - Update to 1.21.0, per changes described at:
    https://www.pgbouncer.org/changelog.html#pgbouncer-121x


author: Jakub Kadlcik <frostyx@email.cz> - 0.16.2.dev-1
changelog:
  - Add background_worker.py from backend
  - Add get_redis_connection function
  - Add Dispatcher, WorkerManager, and QueueTask classes
  - Add WorkerLimit, PredicateWorkerLimit, and GroupWorkerLimit classes


author: Jakub Kadlcik <frostyx@email.cz> 0.17-1
changelog:
  - move to GitHub home page
  - logging shouldn't affect stdout
  - move dispatcher and background workers to copr-common
  - scripts should log also timestamps etc when logging into file
  - move setup_script_logger to copr-common


author: Pavel Raiskup <praiskup@redhat.com> 0.22-1
changelog:
  - fix misleading warning for non-copr library consumers
  - add `contextlib.nullcontext` function as EL8 compat
  - limit stdout/stderr of ssh.run_expensive() commands
  - use 'copr-common/<version>' as http user agent identifier
  - changes needed to allow user SSH to builders


author: Packit <hello@packit.dev> - 0.23.0-1
changelog:
  - Sources now have a `valid` property that indicates whether a source is valid in the current context, meaning it is not present in a false branch of any condition. (#295)


author: Packit <hello@packit.dev> - 0.24.0-1
changelog:
  - Improved type annotations for `UserList` subclasses. (#299)
  - Macro definitions gained a new `commented_out` property indicating that a macro definition is commented out. Another new property, `comment_out_style`, determines if it is achieved by using a `%dnl` (discard next line) directive (e.g. `%dnl %global prerelease beta2`) or by replacing the starting `%` with `#` (e.g. `#global prerelease beta2`). (#298)


author: Packit <hello@packit.dev> - 0.25.0-1
changelog:
  - There is a new method, `Specfile.update_version()`, that allows updating spec file version even if it is a pre-release. (#317)


author: Packit <hello@packit.dev> - 0.27.0-1
changelog:
  - Improved handling of commented-out macro definitions and fixed related logic in `Specfile.update_value()`. (#338)


author: Packit <hello@packit.dev> - 0.28.3-1
changelog:
  - Fixed several minor issues such as processing seemingly commented-out macro definitions (e.g. `#%global prerel rc1`) and treating `SourceLicense` tag as a source. (#374, #376)
  - Made `EVR`, `NEVR` and `NEVRA` objects comparable. (#379)


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240806git39e2663-1
changelog:
  - Update to 0^20240806git39e2663
  - Add `static inline` to `PyUnicodeWriter_WriteStr()` and
    `PyUnicodeWriter_WriteRepr()`.


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-12/13060
  - Security fixes: bz#2248564, bz#2281499, bz#2281500, bz#2281502, bz#2281503
  - switch to sysusers based user provisioning approach - fixes bz#2252618
  - Add legacy openssl build dependency from F41 on - fixes FTBS / bz#2301334
  - since we can now drop EL7 support we can also cleanup systemd handling


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-2
changelog:
  - Re-add systemd-devel as build dependency so the daemon knows how to notify systemd that it was started - fixes bz#2302910


author: Jonathan Wright <jonathan@almalinux.org> - 7.2.5-8
changelog:
  - Enable tests by default
    selectively disable tests that fail in mock for redis
    disable redis-sentinel tests, they always fail in mock


