# changelog

author: David Trudgian <dtrudg@sylabs.io> - 4.0.2-1
changelog:
  - Upgrade to 4.0.2 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: David Trudgian <dtrudg@sylabs.io> - 4.0.3-1
changelog:
  - Upgrade to 4.0.3 upstream version.
  - This is a compatible upgrade to a new upstream patch version.


author: Philip Meulengracht <philip.meulengracht@canonical.com>
changelog:
  - New upstream release 2.61
   - Fix control of activated services in 'snap start' and 'snap stop'
   - Correctly reflect activated services in 'snap services'
   - Disabled services are no longer enabled again when snap is
     refreshed
   - interfaces/builtin: added support for Token2 U2F keys
   - interfaces/u2f-devices: add Swissbit iShield Key
   - interfaces/builtin: update gpio apparmor to match pattern that
     contains multiple subdirectories under /sys/devices/platform
   - interfaces: add a polkit-agent interface
   - interfaces: add pcscd interface
   - Kernel command-line can now be edited in the gadget.yaml
   - Only track validation-sets in run-mode, fixes validation-set
     issues on first boot.
   - Added support for using store.access to disable access to snap
     store
   - Support for fat16 partition in gadget
   - Pre-seed authority delegation is now possible
   - Support new system-user name  daemon
   - Several bug fixes and improvements around remodelling
   - Offline remodelling support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.1
   - Stop requiring default provider snaps on image building and first
     boot if alternative providers are included and available
   - Fix auth.json access for login as non-root group ID
   - Fix incorrect remodelling conflict when changing track to older
     snapd version
   - Improved check-rerefresh message
   - Fix UC16/18 kernel/gadget update failure due volume mismatch with
     installed disk
   - Stop auto-import of assertions during install modes
   - Desktop interface exposes GetIdletime
   - Polkit interface support for new polkit versions
   - Fix not applying snapd snap changes in tracked channel when remodelling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.61.2
   - Fix to enable plug/slot sanitization for prepare-image
   - Fix panic when device-service.access=offline
   - Support offline remodeling
   - Allow offline update only remodels without serial
   - Fail early when remodeling to old model revision
   - Fix to enable plug/slot sanitization for validate-seed
   - Allow removal of core snap on classic systems
   - Fix network-control interface denial for file lock on /run/netns
   - Add well-known core24 snap-id
   - Fix remodel snap installation order
   - Prevent remodeling from UC18+ to UC16
   - Fix cups auto-connect on classic with cups snap installed
   - u2f-devices interface support for GoTrust Idem Key with USB-C
   - Fix to restore services after unlink failure
   - Add libcudnn.so to Nvidia libraries
   - Fix skipping base snap download due to false snapd downgrade
     conflict


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.62
   - Aspects based configuration schema support (experimental)
   - Refresh app awareness support for UI (experimental)
   - Support for user daemons by introducing new control switches
     --user/--system/--users for service start/stop/restart
     (experimental)
   - Add AppArmor prompting experimental flag (feature currently
     unsupported)
   - Installation of local snap components of type test
   - Packaging of components with snap pack
   - Expose experimental features supported/enabled in snapd REST API
     endpoint /v2/system-info
   - Support creating and removing recovery systems for use by factory
     reset
   - Enable API route for creating and removing recovery systems using
     /v2/systems with action create and /v2/systems/{label} with action
     remove
   - Lift requirements for fde-setup hook for single boot install
   - Enable single reboot gadget update for UC20+
   - Allow core to be removed on classic systems
   - Support for remodeling on hybrid systems
   - Install desktop files on Ubuntu Core and update after snapd
     upgrade
   - Upgrade sandbox features to account for cgroup v2 device filtering
   - Support snaps to manage their own cgroups
   - Add support for AppArmor 4.0 unconfined profile mode
   - Add AppArmor based read access to /etc/default/keyboard
   - Upgrade to squashfuse 0.5.0
   - Support useradd utility to enable removing Perl dependency for
     UC24+
   - Support for recovery-chooser to use console-conf snap
   - Add support for --uid/--gid using strace-static
   - Add support for notices (from pebble) and expose via the snapd
     REST API endpoints /v2/notices and /v2/notice
   - Add polkit authentication for snapd REST API endpoints
     /v2/snaps/{snap}/conf and /v2/apps
   - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
   - Add refresh-inhibited select query to REST API endpoint /v2/snaps
   - Take into account validation sets during remodeling
   - Improve offline remodeling to use installed revisions of snaps to
     fulfill the remodel revision requirement
   - Add rpi configuration option sdtv_mode
   - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
     present on host
   - Fix gadget zero-sized disk mapping caused by not ignoring zero
     sized storage traits
   - Fix gadget install case where size of existing partition was not
     correctly taken into account
   - Fix trying to unmount early kernel mount if it does not exist
   - Fix restarting mount units on snapd start
   - Fix call to udev in preseed mode
   - Fix to ensure always setting up the device cgroup for base bare
     and core24+
   - Fix not copying data from newly set homedirs on revision change
   - Fix leaving behind empty snap home directories after snap is
     removed (resulting in broken symlink)
   - Fix to avoid using libzstd from host by adding to snapd snap
   - Fix autorefresh to correctly handle forever refresh hold
   - Fix username regex allowed for system-user assertion to not allow
     '+'
   - Fix incorrect application icon for notification after autorefresh
     completion
   - Fix to restart mount units when changed
   - Fix to support AppArmor running under incus
   - Fix case of snap-update-ns dropping synthetic mounts due to
     failure to match  desired mount dependencies
   - Fix parsing of base snap version to enable pre-seeding of Ubuntu
     Core Desktop
   - Fix packaging and tests for various distributions
   - Add remoteproc interface to allow developers to interact with
     Remote Processor Framework which enables snaps to load firmware to
     ARM Cortex microcontrollers
   - Add kernel-control interface to enable controlling the kernel
     firmware search path
   - Add nfs-mount interface to allow mounting of NFS shares
   - Add ros-opt-data interface to allow snaps to access the host
     /opt/ros/ paths
   - Add snap-refresh-observe interface that provides refresh-app-
     awareness clients access to relevant snapd API endpoints
   - steam-support interface: generalize Pressure Vessel root paths and
     allow access to driver information, features and container
     versions
   - steam-support interface: make implicit on Ubuntu Core Desktop
   - desktop interface: improved support for Ubuntu Core Desktop and
     limit autoconnection to implicit slots
   - cups-control interface: make autoconnect depend on presence of
     cupsd on host to ensure it works on classic systems
   - opengl interface: allow read access to /usr/share/nvidia
   - personal-files interface: extend to support automatic creation of
     missing parent directories in write paths
   - network-control interface: allow creating /run/resolveconf
   - network-setup-control and network-setup-observe interfaces: allow
     busctl bind as required for systemd 254+
   - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
     ro and read access to /var/lib/libvirt/dnsmasq/**
   - fwupd interface: allow access to IMPI devices (including locking
     of device nodes), sysfs attributes needed by amdgpu and the COD
     capsule update directory
   - uio interface: allow configuring UIO drivers from userspace
     libraries
   - serial-port interface: add support for NXP Layerscape SoC
   - lxd-support interface: add attribute enable-unconfined-mode to
     require LXD to opt-in to run unconfined
   - block-devices interface: add support for ZFS volumes
   - system-packages-doc interface: add support for reading jquery and
     sphinx documentation
   - system-packages-doc interface: workaround to prevent autoconnect
     failure for snaps using base bare
   - microceph-support interface: allow more types of block devices to
     be added as an OSD
   - mount-observe interface: allow read access to
     /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo
   - polkit interface: changed to not be implicit on core because
     installing policy files is not possible
   - upower-observe interface: allow stats refresh
   - gpg-public-keys interface: allow creating lock file for certain
     gpg operations
   - shutdown interface: allow access to SetRebootParameter method
   - media-control interface: allow device file locking
   - u2f-devices interface: support for Trustkey G310H, JaCarta U2F,
     Kensington VeriMark Guard, RSA DS100, Google Titan v2


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.63
   - Support for snap services to show the current status of user
     services (experimental)
   - Refresh app awareness: record snap-run-inhibit notice when
     starting app from snap that is busy with refresh (experimental)
   - Refresh app awareness: use warnings as fallback for desktop
     notifications (experimental)
   - Aspect based configuration: make request fields in the aspect-
     bundle's rules optional (experimental)
   - Aspect based configuration: make map keys conform to the same
     format as path sub-keys (experimental)
   - Aspect based configuration: make unset and set behaviour similar
     to configuration options (experimental)
   - Aspect based configuration: limit nesting level for setting value
     (experimental)
   - Components: use symlinks to point active snap component revisions
   - Components: add model assertion support for components
   - Components: fix to ensure local component installation always gets
     a new revision number
   - Add basic support for a CIFS remote filesystem-based home
     directory
   - Add support for AppArmor profile kill mode to avoid snap-confine
     error
   - Allow more than one interface to grant access to the same API
     endpoint or notice type
   - Allow all snapd service's control group processes to send systemd
     notifications to prevent warnings flooding the log
   - Enable not preseeded single boot install
   - Update secboot to handle new sbatlevel
   - Fix to not use cgroup for non-strict confined snaps (devmode,
     classic)
   - Fix two race conditions relating to freedesktop notifications
   - Fix missing tunables in snap-update-ns AppArmor template
   - Fix rejection of snapd snap udev command line by older host snap-
     device-helper
   - Rework seccomp allow/deny list
   - Clean up files removed by gadgets
   - Remove non-viable boot chains to avoid secboot failure
   - posix_mq interface: add support for missing time64 mqueue syscalls
     mq_timedreceive_time64 and mq_timedsend_time64
   - password-manager-service interface: allow kwalletd version 6
   - kubernetes-support interface: allow SOCK_SEQPACKET sockets
   - system-observe interface: allow listing systemd units and their
     properties
   - opengl interface: enable use of nvidia container toolkit CDI
     config generation


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.9-1
changelog:
  - update to 1.1.9 (#2184776)
  - add weak dependency on libappindicator-gtk3, required to show tray icon (#2181248)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.1.11-1
changelog:
  - update to 1.1.11 (#2263677)
  - drop obsolete patch
  - use SPDX license identifier
  - drop ancient Obsoletes/Provides


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 16.0.0-2
changelog:
  - Rebase downstream patch Fix-standalone-builds-with-LLVM_LINK_LLVM_DYLIB-ON to the version that got merged upstream
  - Rebase to a later commit while at it


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: #2294354 - CVE-2024-37894 squid: Out-of-bounds write error may
    lead to Denial of Service


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.2
changelog:
  - Make fill_process_comm() open comm file as READ_ONLY
  - throttlectl.sh: use legal value for exit on fail
  - stalld: free malloc'd buffer on function exit
  - throttling.c:  null terminate input buffer
  - stalld.conf: Fix stalld service start fail
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Clark Williams <williams@redhat.com> - 1.19.3
changelog:
  - src/utils.c: fix off-by-one error in buffer allocation
  - Makefile:  change build to use FORTIFY_SOURCE=3


author: Clark Williams <williams@redhat.com> - 1.19.5
changelog:
  - Makefile:  refactor CFLAGS/LDFLAGS for local and koji builds
  - doc/Releases.md:  Add a note about tagging


author: Clark Williams <williams@redhat.com> - 1.19.6
changelog:
  - systemd: add BE environment variable to select backend
  - Makefile: add uninstall target
  - version bump to 1.19.6


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240208gitb7cf124-1
changelog:
  - Update to 0^20240208gitb7cf124
  - stb_image-devel is updated to 2.29
  - stb_image_resize2-devel is updated to 2.05


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.0-1
changelog:
  - Initial release for SyncStar project
  - More information can be found on https://github.com/gridhead/syncstar/releases/tag/0.1.0


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.6-1
changelog:
  - Version 256.6
  - Fixes for systemd, systmed-resolved, systemd-journald, systemd-journal-
    remote, systemd-cryptsetup, systemd-portabled, systemd-networkd, systemd-
    boot, varlink implementation, shell completions, build reproducibility,
    and various smaller fixes in other tools.


author: Frank Ch. Eigler <fche@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases
  - migrated to SPDX license


author: Bojan Smojver <bojan@rexursive com> - 4.4.3-3
changelog:
  - CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786
    CVE-2023-27787 CVE-2023-27788 CVE-2023-27789


author: Tom Callaway <spot@fedoraproject.org> - 11:20230311-73
changelog:
  - update to svn66984 source tree to fix CVE-2023-32700
  - fix mtxrun stub
  - patch texmfcnf.lua
  - fix mptopdf.pl and thumbpdf.pl to have proper interpreter lines


author: Tom Callaway <spot@fedoraproject.org> - 11:20230311-75
changelog:
  - move texmfcnf.lua to /etc/texlive/web2c with a symlink back to its original home in /usr/share/texlive/texmf-dist/web2c
  - properly handle mkii files that should only be in texlive-mptopdf


author: Kalev Lember <klember@redhat.com> - 1.13.1-5
changelog:
  - Drop unrecognized configure options
  - Add buildrequires to get correct font and xkb directories from pkg-config
  - Re-enable server in flatpak builds and fix the build


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-11
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-13
changelog:
  - Rebuild (xorg-x11-server)
    CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and CVE-2024-31083


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.10.1-1
changelog:
  - Update to v1.10.1
  - Drop Patch0 (change the default plugin dir - now supported upstream)
  - Migrate license tag to SPDX


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Lukáš Zachar <lzachar@redhat.com> - 1.29.0
changelog:
  - Add page `Releases` to highlight important changes
  - Update and polish hardware requirement docs
  - Refactor generating of stories and lint check docs
  - Add support for pruning test directories
  - Download all sources for `dist-git-source`
  - Source plan environment variables after `prepare` and `execute` steps
  - Framework is not consulted on results provided by tmt-report-result
  - Run scripts with `sudo` when `become` is on
  - Add `retry` for pulling images in the `podman` plugin
  - Add hardware schema for GPU
  - Change the default test pidfile directory to `/var/tmp`
  - Add `device` key into the `hardware` specification
  - Update code and test coverage for the `check` key
  - Document case-insensitive context dimension values
  - Fix use of the `-name` suffix in system HW requirement
  - Correct parsing when called as `rhts`
  - Reconcile HW requirements with virtual's own options
  - Move the `README` content into `docs/overview`
  - Make `BasePlugin` generic over step data class
  - Use `UpdatableMessage` for execute/internal progress bar
  - Drop an empty line from the pull request template
  - Add `runner` property to run with test runner facts
  - Export sources of an `fmf` node
  - Bump pre-commit linters to newer versions
  - Append the checklist template to new pull requests
  - Extend tmt-reboot to allow reboot from outside of the test process
  - Allow optional doc themes
  - Use consistent style for multiword test names
  - Show `check` results in the `html` report
  - Update `where` implementation, docs & test coverage (#2411)
  - Document difference between key, field and option
  - Rename multiword keys to use dashes in export and serialization
  - Allow Path instance to be used when constructing commands
  - Switch `Logger.print()` to output to stdout
  - Replace Generator type annotation with Iterator (#2405)
  - Refactor data container helpers
  - When merging fmf and CLI, use shared base step data
  - Fix installing package from the command line
  - Add support for checks to have their data packages
  - Switch `tmt.identifier` from using `fmf.log`
  - Hide test/plan/story internal fields from export
  - Fix full test suite after recent packaging changes
  - Update the list of code owners
  - Include the `fmf` root in the tarball as well


author: Petr Šplíchal <psplicha@redhat.com> - 1.30.0
changelog:
  - Make `arch` field unsupported in the spec
  - Introduce `tty` test attribute to control terminal environment
  - Ensure the imported plan's `enabled` key is respected
  - Add support for user defined templates (#2519)
  - Update the common schema for the `check` key
  - Create a `checks` directory to store avc/dmesg checks
  - Correctly update environment from importing plan
  - Implement `tmt try` for interactive sessions
  - Use a shorter time for `podman stop` (#2480)
  - Add the `redis` server as a multihost sync example
  - Improve documentation of test checks
  - Adjust the format of Polarion test run title
  - Run all available tests only upon a user request
  - Rename `name` to `how` in test check specification (#2527)
  - Link `inheritance` and `elasticity` from the guide
  - Add the `fips` field for the `polarion` report
  - Cover `tmt.cli` with `pyright` (#2520)
  - Custom soft/hard reboot commands for the connect provision plugin
  - Add `--feeling-safe` for allowing possibly dangerous actions
  - Update docs for the `polarion` report plugin
  - Move test-requested reboot handling into test invocation class
  - Add `-i` to select an image in beaker and artemis
  - Document how to use `yaml` anchors and aliases
  - Simplify log decolorizers to support pickleable trees
  - Add description field to polarion report plugin
  - Make check plugin class generic over check class (#2502)
  - Increase verbosity of Artemis provisioning errors
  - Add more distros to the `mrack` config
  - Move the `contact` key to the `Core` class
  - Bump tmt in lint pre-commit check to 1.29.0
  - Add Python 3.12 to the test matrix
  - Move `mrack` configs into `tmt+provision-beaker`
  - Allow running upgrade from the current repository
  - Fix remote nested library fetch and add test
  - Cover tmt.options with pyright
  - Cover tmt.checks, tmt.frameworks and tmt.log with pyright
  - Cover tmt.result with pyright checks
  - Store fmf `context` in results for each test
  - Add networks to the podman provision plugin (#2419)
  - Add a dedicated exit code when all tests reported `skip` result
  - Move invocation-related fields out of `Test` class
  - Remove expected fail from `/tests/pip/install/full`
  - Convert test execution internals to use "invocation" bundle (#2469)
  - Introduce a separate page `Code` for code docs
  - Add code documentation generated from docstrings
  - Fix possible unbound variable after import-under-try
  - Add `pyright` as a `pre-commit` check
  - Add a helper for nonconflicting, multihost-safe filenames
  - Add the `whiteboard` option for `beaker` provision
  - Support timestamped logging even on the terminal
  - Enable pyupgrade `UP` ruff rule
  - Fix `UP035` deprecated-import violations
  - Fix `UP034` extraneous-parentheses violation
  - Fix `UP033` lru-cache-with-maxsize-none violations
  - Fix `UP032` f-string violations
  - Fix `UP013` convert-typed-dict-functional-to-class
  - Fix `UP009` utf8-encoding-declaration violations
  - Fix `UP006` non-pep585-annotation violations
  - Try several times to build the `become` container (#2467)
  - Add .py file extension to docs scripts (#2476)
  - Add a link to the Testing Farm documentation
  - Use `renku` as the default theme for building docs
  - Properly normalize the test `path` key
  - Add an `adjust` example for enabling custom repo
  - Drop special normalization methods
  - Disable `dist-git-init` in the `distgit` test (#2463)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.31.0
changelog:
  - Simple ReST renderer for CLI help texts (#2574)
  - Generate plugin documentation from their sources (#2549)
  - Fix environment from command line updated twice (#2614)
  - Introduce a new prepare plugin for common features (#2198)
  - Remove `xfail` for the `multidict` issue on `rawhide`
  - Prevent catching avc denials from previous tests
  - Remove an obsolete workaround for `centos-stream-8`
  - Enable the `/tests/discover/libraries` test (#2222)
  - Add documentation on tmt & regular expressions
  - Fix expansion of envvar starting with `@` in fmf nodes
  - Add the `zcrypt` adapter specification
  - Allow urllib3 2.x
  - Enable `/plans/provision/virtual` for pull requests (#2558)
  - Remove the dns failures workaround
  - Fix reporting of schema errors without the `$id` key
  - AVC check now saves a timestamp on guest instead of using runner's time
  - Add check to prevent `tmt try` deleting imported libraries
  - Reduce usage of locks in the `testcloud` plugin
  - Add support for envvars import and export to Polarion
  - Use enumeration to implement action handling
  - Handle the `ctrl-d` shortcut in `tmt try`
  - Run tests with `interactive` mode during `tmt try`
  - Fix `tmt import --dry` and Polarion import file name
  - Document that `name` is supported in `--filter` search (#2637)
  - Refactor running of interactive commands (#2554)
  - Create container images from the latest non-dev copr build
  - Fail `dmesg` check if it contains `Call Trace` or `segfault`
  - Mention the reboot timeout variable in the release notes
  - Bump the default reboot timeout to 10 minutes
  - Allow change of the default reboot timeout via environment variable
  - Introduce essential requirements
  - Allow `--update-missing` to change the default `how` value
  - Document the new `become` feature
  - Raise an error when loading pre-1.24 `tests.yaml`
  - Support terminating process running test via its test invocation (#2589)
  - Fix `egrep` warning in `/plans/install/docs`
  - Test framework may provide additional test requirements
  - Improve logging of AVC check plugin and its test
  - Cleanup logging in `tmt.utils.create_file()`
  - Drop connection closed messages from test output
  - Recommend `qemu-kvm-core` for `provision-virtual`
  - Fix `/tests/plan/import` to not use special ref (#2627)
  - Improve imported plan modification test to verify the order as well (#2618)
  - Retry the `git clone` action multiple times
  - Simplify the debuginfo installation test
  - Support `virtualization.is-virtualized` in `mrack` plugin
  - Support running all or selected steps `--again`
  - Allow hardware requirements limit acceptable operators
  - Fix inheritance of some keys in provision step data
  - Run a callback when command process starts
  - Add support for hard reboot to Beaker provision plugin
  - Make collected requires/recommends guest-aware
  - Copy top level `main.fmf` during testdir pruning
  - Add support for Artemis API v0.0.67
  - Add support for `cpu.flag` hardware requirement
  - Use a different pidfile location for the full test
  - Clear test invocation data path use and derived paths
  - Add support for disallowing plugins via command line
  - Use constraint classes specific for particular value type
  - Making rhts metric value optional.
  - Ignore tarballs and generated man page
  - Cover `tmt.libraries` with `pyright` checks
  - Parallelize the `provision` step
  - Let `click` know about the maximal output width
  - Cover `tmt.identifier` with `pyright` checks
  - Extend `duration` of `/tests/core/escaping` a bit
  - Move docs templates into their own directory
  - Drop no longer needed `tmt.utils.copytree()`
  - Drop no longer used `tmt.utils.listify()`
  - Provision plugins use `self.data` instead of `self.get()`
  - Prepare and finish plugins use self.data instead of self.get()
  - Fix tmt.utils.format to allow int and float values
  - Move code-related pages under new `code` directory
  - Warn on test case not found in Polarion during report
  - Bump pre-commit linters
  - When cloning a logger, give it its own copy of labels
  - Add a `Toolbelt Catalog` entry for `tmt`
  - Enable the `avc` check for all `tmt` tests
  - Fix dmesg check test on Fedora rawhide & newer


author: Martin Hoyer <mhoyer@redhat.com> - 1.32.0
changelog:
  - Support Alpine Linux `apk` package manager
  - Update the `reportportal` plugin
  - Allow `keep-git-metadata` to be used without url
  - Use `TMT_REPORT_ARTIFACTS_URL` in Polarion report plugin
  - Prepare dist-git sources using `rpmbuild -bp`
  - Add support for `zcrypt` to Beaker plugin
  - Introduce ansible-lint to format ansible files
  - Add support for linking artifacts from the report
  - Document test tags and mark beakerlib integration
  - Clarify that plan context is not applied to plan
  - Increase the default test `duration` a bit
  - Update pre-commit checks
  - Fix typos in the `tmt try` help message examples
  - Add new environment variable for test iteration identifier
  - Select no tests if `modified-only` returns nothing (#2761)
  - Debug output for `discover -h fmf --modified-only`
  - Finish unit testing of HW transformations in mrack plugin
  - Run `/plans/install/docs` in core `packit` jobs
  - Extract "package manager" functionality into plugins (#2557)
  - Allow commands whose output is not logged unless they fail
  - Move `/tests/run/shell` to `/plans/provision/local`
  - Include a simple config for the `polarion` plugin
  - Cover `report/junit` with `pyright`
  - Implement the new test check `watchdog`
  - Support `disk.driver` hw requirement for `mrack`
  - Cover `tmt.hardware` with `pyright` check
  - Bootstrap unit tests for Beaker XML transformation of HW requirements
  - Add support for emulated TPM into virtual provision plugin
  - Set default formatting of Pint units to use symbols, not names (#2736)
  - Disable IPv6 for /plans/provision/virtual in CI
  - Add support for `disk.driver` hardware requirement
  - Remove now unnecessary `NON_KVM_ADDITIONAL_WAIT` from testcloud
  - Support `disk.model-name` hw requirement for `mrack`
  - Include `context` in the test `metadata.yaml` file
  - Pass `domain_configuration` to testcloud's `wake()`
  - Document how to enable verbose/debug logging
  - Disable password authentication when using keys
  - Fix /plans/provision/virtual to set correct PROVISION_* variable
  - Log the beaker job whiteboard
  - /usr/sbin/sestatus instead of /usr/bin/sestatus (#2720)
  - Set acl permissions on the `workdir` root
  - Extend the `duration` for time-demanding tests
  - Add support for `disk.model-name` hardware requirement
  - Move deferred user stories into a separate section
  - Mark test check tests with more fitting provision tags
  - Add `Environment` and `FmfContext` among loggable types
  - Bump supported Artemis API versions to 0.0.69
  - "Show default" flag was dropped from CLI option initialization
  - Convert environment handling into a dict-like class (#2612)
  - Enable `additional_coverage` tests for pull requests (#2700)
  - Add essential requirements to checks
  - Remove mention about the full test suite from docs
  - Use the `PROVISION_HOW` variable in `provision` plans (#2688)
  - Properly detect if test is enabled somewhere
  - Check for files in `rpm-ostree install` script
  - Collect test/test check results in test invocation (#2608)
  - Test the `become` key under `virtual` provision
  - Introduce "topology" addresses for guests (#2670)
  - Make checks smarter about environments in which they should not run (#2686)
  - Cover report/display and report/html with pyright (#2682)
  - Cover `tmt.templates` with `pyright`
  - Allow custom boot/connect timeouts for testcloud VMs
  - Underline `try` menu keys
  - Drop two no longer used methods from prepare step
  - Enable the full test execution using a label (#2683)
  - Support URL as post-install-script for Artemis plugin
  - Fix dmesg check test for recent Fedoras


author: Lukáš Zachar <lzachar@redhat.com> - 1.32.2
changelog:
  - Remove /var/tmp workdir from rpm packaging
  - Refactor package manager discovery to allow priorities
  - Add unit test for package manager installing a file system path
  - Update pre-commit checks and add a couple of new ones
  - Removing c9s workaround for pytest-container
  - Clarify the `--last` symlink creation race a bit
  - Remove the `.travis.yml` config file
  - Correctly show the `--provision-timeout` default
  - Refresh Beaker API client in mrack to use up-to-date Kerberos ticket


author: Tomáš Bajer <tbajer@redhat.com> - 1.33.0
changelog:
  - Fix installation of packages from files (#2914)
  - Simplify the documentation building (#2483)
  - Install dependencies of upgrade tasks
  - Improve fail message when library doesn't exist
  - Parse the `system` hardware requirement (#2795)
  - Define `location.lab-controller` hardware requirement (#2794)
  - Test restart on crash (#2870)
  - Add `codespell` pre-commit and fix revealed errors
  - Add test restart counter, similar to `TMT_REBOOT_COUNT`
  - Fix error message if no supported package manager found
  - Fix copy/paste issue for `combine_hw_disk_size()`
  - Slightly improve rendering of ReST for command like
  - Allow `duration` in the `execute` schema
  - Log hash of the beakerlib library repo
  - Fix inability of rpm-ostree to install multiple packages (#2887)
  - Fix Alpine Linux support (#2828)
  - Allow custom failure patterns in `dmesg` test check
  - Make `junit_xml` more visible to linters
  - Add support for `virtualization.hypervisor` hardware requirement (#2733)
  - Add a new section `Review` to contributor docs
  - Accept SSH options from environment variable (#2783)
  - Fix AVC denial detection on Fedora rawhide (#2881)
  - Reuse "become" image to fix sudo-related trouble in /tests/provision/user (#2892)
  - Polish prepare/ansible documentation
  - Support `cpu.cores` hardware requirement for mrack (#2728)
  - Allow pip install from git-archive
  - Add the `cpu.vendor` hardware requirement
  - Fix incorrect translation of `cpu.processors` to Beaker
  - Document custom Jinja template filters (#2769)
  - Update logger-name for clean


author: Martin Hoyer <mhoyer@redhat.com> - 1.34.0
changelog:
  - Fix normalization of `hardware` key/option (#3015)
  - Keep patched sources directly in TMT_SOURCE_DIR (#2999)
  - Copy launch description to suite description (#2992)
  - Add support for multiple disks to testcloud plugin (#2767)
  - Improve rendering of story links in our docs (#3001)
  - Simplify parsing of HW requirements and add missing ones (#2928)
  - Make test shell wrapper filename even more unique (#2998)
  - Add support for basic rerun of tests (#2521)
  - Split provision/virtual plans to subgroups per step (#2938)
  - Document custom container images built for tmt tests (#2930)
  - Require python3.9 in 'develop' target
  - Fix multiple rules `adjust` example in `duration` spec (#2971)
  - Fix "skip missing" behavior when installig debuginfo packages with dnf (#2956)
  - Extend results schema to allow test phases (#2933)
  - Fix path to watchdog log (#2901)
  - Display locals in traceback when requested (#2900)
  - Polish test-check/dmesg documentation (#2897)
  - docs: tweak docs to include how to see details about test failures (#2541)
  - Allow multiplication in duration input value (#2845)
  - Fix validation of fmf id URL, it must be cloneable first (#2957)
  - Cover `tmt.trying` with `pyright` check (#2942)
  - Clarify the `trigger` context dimension values (#2961)
  - Add konflux as possible initiator (#2947)
  - Fix some invalid links in documentation (#2940)
  - Define "block-device" key for guest topology HW exposition
  - Cover tmt.steps.prepare.shell with pyright checks
  - Ignore report files created by pytest-html
  - Fix pre-commit typing python version (#2959)
  - Cover tmt.steps.prepare.distgit with pyright
  - Pass correct spec to _parse_system and _parse_location (#2924)
  - Support `cpu.model-name` hardware requirement for mrack (#2921)
  - Enforce "one blank line after class docstring" rule (#2934)
  - Enable pydocstyle checks in ruff (#2906)
  - Update distros in the `mrack` provisioning config (#2932)
  - Drop duplicate list of supported HW requirements in beaker plugin (#2902)
  - Update interaction with Fedora rawhide (#2931)
  - Run the `no-commit-to-branch` check only locally


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.9-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-9/10155
  - security fixes for bz#2248562 & bz#2248563
  - add --enable-gpl build options to enable PoW as DDoS protection bz#2247828


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Jered Floyd <jered@redhat.com> 9.2.4-2
changelog:
  - Enable build with deprecated OpenSSL Engine
    https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.6.0-4
changelog:
  - Modernize spec
  - Use libayatana-appindicator instead of libappindicator
  - Convert dependencies to pkgconfig syntax
  - Fix dependencies wrt git and pod2man
  - Convert license to SPDX
  - Implement desktop-file and appstream validations


author: Gustavo Costa <xfgusta@gmail.com> - 0.5-1
changelog:
  - Update to 0.5 (rhbz#2187771)
  - Use python to run tests
  - Set CFLAGS
  - Add patch to update the version


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.23.0-1
changelog:
  - new release
    - migrated profiles to /etc/tuned/profiles/ and /usr/lib/tuned/profiles/
    - added an option to configure profile directories
      resolves: RHEL-26157
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - plugins: added plugin_irq
    - plugin_net: do not read monitors if dynamic tuning is disabled
      resolves: RHEL-28757
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - tuned-ppd: Detect battery change events


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - hotplug: wait for device initialization
      resolves: RHEL-39468
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.16-1
changelog:
  <!-- generated by eloquent/github-release-action -->
  <!-- original source:
  - preload: Wrap __getcwd_chk()
  - uevent_sender: Fix fd leak in sendmsg_one
  - Fix gcc -fanalyzer complaints
  -->

  <ul>
  <li>preload: Wrap __getcwd_chk()</li>
  <li>uevent_sender: Fix fd leak in sendmsg_one</li>
  <li>Fix gcc -fanalyzer complaints</li>
  </ul>


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Richard Lescak <rlescak@redhat.com> 20200910-11
changelog:
  - Substituted badly monospaced Nimbus Mono PS with Dejavu Sans Mono (#2021366)
  - added substitution for Century


author: Michel Lind <salimma@fedoraproject.org> - 0.0.27-2
changelog:
  - Use script to generate list of coreutils commands
  - On EPEL 9, reduce the list of obsoletes to packages actually built


author: Mark Wielaard <mjw@fedoraproject.org> - 3.22.0-8
changelog:
  - Add BuildRequires: python3-devel for running testsuite.
  - Add valgrind-3.22.0-gdb-thread-exited.patch
  - Add valgrind-3.22.0-set_vma_name-supp.patch
  - Add valgrind-3.22.0-pth_mempcpy_false_races.patch
  - Add valgrind-3.22.0-amd64-VFMADD213.patch
  - Add valgrind-3.22.0-amd64-redir-strcmp.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.23.0-3
changelog:
  - Add more upstream VALGRIND_3_23_BRANCH patches
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.23.0-4
changelog:
  - Add more upstream VALGRIND_3_23_BRANCH patches
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Jonathan Wright <jonathan@almalinux.org> - 7.2.5-8
changelog:
  - Enable tests by default
    selectively disable tests that fail in mock for redis
    disable redis-sentinel tests, they always fail in mock


author: Martin Gansser <martinkg@fedoraproject.org> - 2.6.5-1
changelog:
  - Update to 2.6.5
  - vdr-devel does not require any translation management tools (BZ#2119032)
    use RR gettext-runtime


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.27.rc3
changelog:
  - Update to version 2.1.0-rc3
  - Drop patches accepted upstream
  - Add new patches (the PRs have been accepted upstream)


author: Tomas Korbar <tkorbar@redhat.com> - 5.7.0-3
changelog:
  - Disable asm code parts
  - ASM code parts break support for cf-protection on x86_64,
    since they do not contain such feature. This situation is
    likely to repeat in the future and thus all code parts
    should be compiled by compiler which knows distribution
    settings.


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.0-1
changelog:
  - Update to 0.9.0
  - fix fd leak (probably #2290715)
  - enable lz4 compression by default
  - add supprt for av1 software encoding/decoding
  - add support for vsock transport
  - fix build with gcc-14


author: Dominique Martinet <asmadeus@codewreck.org> - 0.9.1-1
changelog:
  - Update to 0.9.1
  - don't abort on double-^C (#2262447)
  - fix for compositors using drm_syncobj protocol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.4-12
changelog:
  - Explicitly set most Makefile variables
  - Moves the documentation into the standard location
  - Enables rebuilding localized man pages etc.


author: Brian C. Lane <bcl@redhat.com> - 35.13-1
changelog:
  - New release: 35.13 (bcl)
  - HACKING.md: Reformat code blocks for docusaurus (simon.steinbeiss)
  - README: Update code block formatting and drop subtitle (simon.steinbeiss)
  - info: Add upload status to the output (bcl)
  - info: Fix display of blueprint packages with no version (bcl)
  - weldr: Add Stringer interface to Package (bcl)
  - compose: Add --wait options to start-ostree (bcl)
  - compose: Add --wait options to start command (bcl)
  - compose: Add compose wait command (bcl)
  - weldr: Add ComposeWait to wait for a compose to finish (bcl)
  - build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (49699333+dependabot[bot])
  - CI: Drop SonarQube in favor of Snyk (jrusz)


author: Bob Hepple <bob.hepple@gmail.com> - 0.3.1-0.1.20221222git3933ab2
changelog:
  - moving to rawhide/f38 - retire from fusion now that ffmpeg-free is available
  - merge https://github.com/ammen99/wf-recorder/pull/198:
  - change the default for wf-recorder to use only royalty-free codecs (libvpx-vp9) by default.
  - merge https://github.com/ammen99/wf-recorder/pull/197:
  - a minimal set of options to enable realtime encoding.


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Gustavo Costa <xfgusta@gmail.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 (rhbz#2186215)
  - Change gtk3, libhandy and webkit2gtk4.1 to gtk4, libadwaita and webkitgtk6.1


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.17.0-1
changelog:
  - Update to 0.17.0 (#2250885)
  - Use xcb-errors util library
  - Apply patches from 0.17.x bugfix branch


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1:2.10-8
changelog:
  - Backport WPA3 support for Broadcom devices. Fixes: rhbz#2226569
  - Enable parsing of IPv6 addresses in RADIUS configuration (#2095296)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.5.24-4
changelog:
  - spec cleanup for Fedora inclusion
  - use upstream patches with fixes for autoconf-2.71 and gcc-13
  - use SPDX License expression
  - use pkgconfig-style build dependencies for FFmpeg, cairo and pangocairo
  - drop unused build dependencies


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-1
changelog:
  - New upstream release.
  - Build using cmake.
  - Doc file "README.IMPORTANT" for needed passord reset.
    https://github.com/chris2511/xca/issues/458#issuecomment-1740106691


author: Patrick Monnerat <patrick@monnerat.net> 2.5.0-3
changelog:
  - Patch "pastekey" fixes a crash pasting an encrypted private key.
    https://github.com/chris2511/xca/commit/d29d55a
  - Patch "revokedel" fixes a freeze when deleting a certificate.
    https://github.com/chris2511/xca/commit/43e1b33
  - Patch "delete_after_revoke" fixes a crash deleting+revoking a certificate.
    https://bugzilla.redhat.com/show_bug.cgi?id=2259477


author: Michael Young <m.a.young@durham.ac.uk> - 4.18.0-5
changelog:
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
          CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
          CVE-2023-46840]
  - the glibc32 doesn't seem to add anything to the build so drop it


author: Michael Young <m.a.young@durham.ac.uk> - 4.18.0-7
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.18.1-1
changelog:
  - update to xen-4.18.1
    rebase xen.gcc12.fixes.patch
    remove patches now included or superceded upstream


author: Michael Young <m.a.young@durham.ac.uk> - 4.18.1-2
changelog:
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.18.2-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.18.2, remove patches now included upstream


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Jonathan Wright <jonathan@almalinux.org> - 1.51.08-1
changelog:
  - update to 1.51.08
  - Remove meson build code, follow upstream build methods
  - rhbz#2009098
  - rhbz#2010890


author: José Expósito <jexposit@redhat.com> - 2024.1-2
changelog:
  - Own the /usr/share/doc/xorgproto directory
    Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2283223


author: José Expósito <jexposit@redhat.com> - 1.20.14-29
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.06-2
changelog:
  - Make -base subpackage require -gl-base (debian bug 1030659)
  - switch_page_cb: backport debian fix for DPMS settings issue


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.07-2
changelog:
  - Update to 6.07
  - make_ximage: avoid integer overflow on left shift
  - convert_ximage_to_rgba32: likewise


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Require and use mutter as default compositor in RHEL
  - Make other compositors very weak dependencies in RHEL


author: Jerry James <loganjerry@gmail.com> - 2.6.4-8
changelog:
  - Rebuild for cadical 1.9.4
  - Update font licenses from LPPL-1.0 to LPPL-1.3a
  - Stop building for 32-bit x86


author: Otto Liljalaakso <otto.liljalaakso@iki.fi> - 20230611-4
changelog:
  - Update to 20231120 (rhbz#2250719)
  - Upstream moved some features to Python extra called 'extra', add a
    subpackage for it and Recommend it from the main package.


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.9.1-6
changelog:
  - Fix build with `--without macro`
  - Skip %check and test dependencies when tests are disabled
  - Drop %_zig_version macro


