# changelog

author: Dominik Wombacher <dominik@wombacher.cc> - 0.9.17-3
changelog:
  - Run cmake tests during package build
  - Include missing file and directories because of version bump


author: Jeff Makey <jeff@makey.net> - 2.17-69
changelog:
  - Add rpmlintrc file to suppress spurious warning.
  - Use printw() format string where needed to satisfy -Werror=format-security.


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 2023.2.60-2
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "Global Chambersign Root"


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-2
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-1.0
changelog:
  - Update to CKBI 2.68_v8.0.302 from NSS 3.101
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.401-1.0
changelog:
  - Update to CKBI 2.69_v8.0.401 from NSS 3.103
  -    Adding:
  -     # Certificate "Sectigo Public Code Signing Root R46"
  -     # Certificate "Sectigo Public Code Signing Root E46"


author: Troy Dawson <tdawson@redhat.com> - 0.8.11-1
changelog:
  - determine_rhel_state: Fix missing phase check
  - Fix detection of releases in Maintenance Phase
  - Handle maintenance releases better


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-3
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Tim Theisen <ttheisen@fedoraproject.org> - 23.0.0-1
changelog:
  - Update to latest upstream 23.0.0 - rhbz#1959462
  - Fix build issues - rhbz#2114520, rhbz#2172630, rhbz#2172684
  - Update to PCRE2 - rhbz#2128284


author: Kamil Dudka <kdudka@redhat.com> - 3.4.1-1
changelog:
  - introduce the csdiff-static subpackage with the csgrep-static executable
  - update to latest upstream release


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Simone Caronni <scaronni@nvidia.com> - 1.1.14-2.20240805gitc439cd5
changelog:
  - Update to latest snapshot with commits required for NVIDIA driver 560+ with
    explicit sync support.


author: Simone Caronni <negativo17@gmail.com> - 1.1.17^20240918git845568c-1
changelog:
  - Update to latest snapshot.
  - Switch to more recent packaging guidelines for snapshot versions.
  - Move egl-gbm ICD to egl-gbm package.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Dan Horák <dan[at]danny.cz> - 3.0.0-1.20230308git7de967c
changelog:
  - updated to ghdl 3.0.0
  - updated to gcc 14.0.1
  - updated to llvm 17
  - Resolves: rhbz#2161618 rhbz#2225826


author: Mike FABIAN <mfabian@redhat.com> - 1.3.15-1
changelog:
  - Update to latest upstream 1.3.15
  - Remove { and } from VALID_INPUT_CHARS in latex.txt
  - Add “Mongol bichig” to README


author: Mike FABIAN <mfabian@redhat.com> - 1.3.16-1
changelog:
  - Update to latest upstream 1.3.16
  - hu-old-hungarian-rovas: several improvements,
    most of them suggested by Viktor Kovács <kov.h.vik@gmail.com>
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/33
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/34
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/30
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/31
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/35
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/32
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/29


author: Mike FABIAN <mfabian@redhat.com> - 1.3.17-1
changelog:
  - Update to latest upstream 1.3.17
  - Rename emoji-table to emoticon-table
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/15
  - Remove useless m4/as-version.m4
    Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/36


author: Mike FABIAN <mfabian@redhat.com> - 1.3.18-1
changelog:
  - Update to 1.3.18
  - Some fixes for the hu-old-hungarian-rovas table
  - Use “autoupdate” to modernize configure.ac and some other files


author: Kevin Fenzi <kevin@scrye.com> - 1.34.0-2
changelog:
  - Carry scm policy plugin for hub, it's already upstream
  - Use dnf5 compatible 'group install' command
  - Allow specifying with a tag value what arches noarch builds happen on.
  - Fix image-build to not pass units to oz (to avoid GB/GiB issues)
  - Fix a typo in scheduler (already upstreamed)
  - Add back index for rpminfo table that was mistakenly dropped.


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2263053 - CUPS/libppd PPD generators didn't check required attrs when deciding which driverless format to use,
    causing PPD generation to fail


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 5.34.0-6
changelog:
  - Use %ldconfig_scriptlets instead of /usr/sbin/ldconfig
    (ref: DNF5 file deps change: bug 2180842)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.6-1
changelog:
  - Update to 1.8.6
  - si-wijesekera.mim: Many updates by Harshula Jayasuriya
    <harshula@hj.id.au>
  - si-wijesekera.mim renamed to MIM/si-wijesekara.mim
  - configure.ac: Add support for zstd-compressed charmaps (by Thomas
    Staudinger <staudi.kaos@gmail.com>)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.7-1
changelog:
  - Updated to 1.8.7
  - mr-gamabhana.mim: Update by Shantanu Oak <shantanu.oak@gmail.com>
  - sa-vedic-itrans.mim: Additions by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>


author: Mike FABIAN <mfabian@redhat.com> - 1.8.8-1
changelog:
  - Update to 1.8.8
  - bn-probhat.mim: Sync with the "in(ben_probhat)" layout in xkeyboard-
    config
  - sa-vedic-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - sa-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - hi-itrans.mim: Improvements by विश्वासो वासुकिजः (Vishvas Vasuki)
    <vishvas.vasuki@gmail.com>
  - hu-rovas-post.mim: Sync with the improvements in hu-old-hungarian-
    rovas.txt in ibus-table-others. Also make it possible to use non-ASCII
    accented characters like ü as input.


author: Pavel Raiskup <praiskup@redhat.com> 4.1-1
changelog:
  - bootstrap: fix certificate copying into the bootstrap chroot
  - don't strictly require any package manager
  - config: properly configure package manager commands
  - unify the fallback-detection for host/bootstrap/bootstrap-image
  - bind_mount plug-in: pre-create dest directory before bind-mounting a file
  - bootstrap: use DNF5 in package manager fallbacks
  - fix --dnf-cmd traceback with the new package_manager logic


author: Pavel Raiskup <praiskup@redhat.com> 5.2-1
changelog:
  - Fix '~' user source expansion for --copyout
  - Compatibility fix with EL 8
  - Log out the command-line arguments
  - Make sure that 'state' is always finished
  - README.md: cleaning up
  - Post-release administrivia


author: Pavel Raiskup <praiskup@redhat.com> 5.3-1
changelog:
  - orphanskill: log command line arguments of the terminated process
  - docs: migrate the community from IRC to Matrix
  - dnf5: don't output to a PTY (mail@evangoo.de)
  - new rpmautospec plugin (sgallagh@redhat.com, nils@redhat.com)
  - fix bash completion with multiple file arguments (orion@nwra.com)
  - only %prep once when running %generate_buildrequires multiple times (miro@hroncok.cz)
  - Dynamic BuildRequires: Prevent generation of unsatisfied dependency (miro@hroncok.cz)
  - Identify buildroot package management earlier (praiskup@redhat.com)
  - Dump also dnf5 info into logs


author: Pavel Raiskup <praiskup@redhat.com> 5.5-1
changelog:
  - allow chroot_scan to create archive instead of directory (tkopecek@redhat.com)
  - handle greedy options in Bash completion
  - fix root_cache invalidation (not) triggered by config changes
  - new '{{ repo_arch }}' Jinja2 template support
  - package_manager: disable %-interpolation in dnf.conf parser
  - only `chown` the in-chroot home files with the --rebuild mode
  - all non-privileged actions performed wiht EGID=135 (mock group)
  - mock newly requires a precise version of mock-filesystem
  - allow shadow-utils to run in buildroot by exception if necessary (martjack@redhat.com)
  - hw_info now reports file system type (vondruch@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 5.6-1
changelog:
  - scm: Open stdout in text mode for Git timestamp subprocesses
    (fedora.dm0@gmail.com)
  - always set ownership of homedir (but not recursively) (msuchy@redhat.com)
  - Do not create temporary Buildroot.tmpdir for disabled nosync
    (praiskup@redhat.com)
  - bash-completion: add mock-parse-buildlog (pastalian46@gmail.com)
  - Rewrites "original_name" method to check if "cls" has a "backmap"
    (nikitych@yandex.ru)
  - Don't use --allowerasing for more DNF commands (frostyx@email.cz)
  - bash-completion: pre-build the list of mock known options
    (praiskup@redhat.com)
  - Avoid Traceback for resultdir ENOSPC (praiskup@redhat.com)
  - Post-release administrivia (praiskup@redhat.com)
  - Fix Version in %changelogs (praiskup@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 39.4-1
changelog:
  - configure system_cachedir for dnf5
  - configs: EOL Fedora 37
  - config: add README.md with maintainers and issue trackers (frostyx@email.cz)


author: Pavel Raiskup <praiskup@redhat.com> 40.1-1
changelog:
  - new '{{ repo_arch }}' template variable used for Mageia
  - Mageia 7 is EOL (wally@mageia.org)
  - OpenMandriva i686 is EOL (frostyx@email.cz)
  - Fedora 40 branched


author: Jakub Kadlcik <frostyx@email.cz> 40.3-1
changelog:
  - Add initial c10s mock configs (Koji BUILDROOT only) (miro@hroncok.cz)
  - configs: use repo_arch, not target_arch with openSUSE (praiskup@redhat.com)
  - configs: Drop modular repositories from Fedora Branched
    (ngompa@fedoraproject.org)
  - configs: Drop modular repositories from Fedora Rawhide
    (ngompa@fedoraproject.org)
  - Configs 40.2 release notes && post-release administrivia
    (praiskup@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 40.4-1
changelog:
  - configs: BuildWithDNF5 for ELN (praiskup@redhat.com)
  - Add Circle Linux 9 configs (bella@cclinux.org)
  - configs: Replace Mageia 10 and Cauldron i586 configs with i686
    (wally@mageia.org)
  - Post-release administrivia (frostyx@email.cz)


author: Pavel Raiskup <praiskup@redhat.com> 41.1-1
changelog:
  - branch F41 from Rawhide (frostyx@email.cz)
  - added centos-stream+epel-10 configs
  - Enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - Rawhide to accept GPG key from future Fedora Rawhide+1
  - openEuler 24.03 LTS (nucleo@fedoraproject.org)
  - drop fedora-eln-i386 (yselkowi@redhat.com)
  - Switch CentOS 7 to vault.centos.org (robert@fedoraproject.org)
  - Fix GPG keys for CentOS Stream 10 repositories (daan.j.demeyer@gmail.com)
  - EOL epel-7 configuration
  - CentOS 7 is EOL
  - Fedora 41+ configuration images are "dnf5 ready"
  - Use metalinks for c10s {baseos,appstream,crb}-{source,debuginfo} (miro@hroncok.cz)


author: Pavel Raiskup <praiskup@redhat.com> 41.3-1
changelog:
  - move anolis-7 to eol directory (msuchy@redhat.com)
  - move opensuse-leap-15.4 to eol directory (msuchy@redhat.com)
  - configs: the stream9 image is "ready" for Mock bootstrap
  - enable bootstrap container for CentOS Stream 10 (carlwgeorge@gmail.com)
  - configs: replace `powerpc64le` with `ppc64le` in the `%_host_cpu` macro
  - fix EOL template locations for CentOS7/EPEL7 (thomas.mendorf@ebf.com)


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Haibo Lin <hlin@redhat.com> - 0.7.0-1
changelog:
  - backend: Add odcs-credential-helper executable
  - backend: Add support for git credentials
  - backend: Set env var with raw config source name
  - backend: Use credential helper for initial config clone
  - backend: pulp: Handle missing product_versions
  - client: Add --arch option to create-build subcommand
  - doc: Document env argument to utils.execute_cmd
  - frontend: Allow admins to request any compose
  - frontend: Delete deprecated conf.auth_ldap_group_base
  - frontend: Merge all metrics into a single thread
  - frontend: Optimize compose count metrics gathering
  - frontend: Support OIDC authentication to CTS
  - server: Fix compatibility with Python 3.12
  - server: Fix flake8 complaints


author: Haibo Lin <hlin@redhat.com> - 0.8.0-1
changelog:
  - client: Add --env option
  - client: Add arg for extending compose's life
  - client: Avoid waiting for finished compose
  - client: Convert client script to entry point
  - client: Enable OpenTelemetry tracing for client
  - client: Fix wait command failed with error: KeyError: 'state_name'
  - client: Improve token expiration checking
  - client: Move server config to a file
  - client: Replace openidc_client with TokenManager
  - client: Support OIDC authentication
  - client: Use NO_OIDC_AUTHZ_CODE to disalbe authz code flow
  - docker: Add healthchecks to docker-compose.yml
  - docker: Install mod_auth_openidc
  - docker: Pass extra args to start_odcs_from_here
  - docker: Update Dockerfile to install opentelemetry
  - docker: Update base image to fedora 38
  - docker: Use post release for container
  - docker: download cacert securely
  - docker: new RH IT Root CA location
  - docs: Update docs configuration
  - server/client: Renew compose with new label
  - server: Add oidc_or_kerberos auth backend
  - server: Add retry to clone_repo
  - server: Add souce and debuginfo configurations
  - server: Enable OpenTelemetry tracing on server side
  - server: Fix compatibility with Python 3.6
  - server: Flask 2.3 compatibility
  - server: Improve raw_config_composes metric
  - server: Load ODCS_CELERY_BROKER_URL in config file
  - server: Make raw_config_composes_total a Gauge
  - server: Rework handling Pulp content sets
  - server: Update example config with OIDC options
  - server: metrics: Avoid decrementing counter
  - tests: Run backend tests with py36
  - tests: Set flask.g._login_user for tests


author: Haibo Lin <hlin@redhat.com> - 0.8.1-1
changelog:
  - client: Make black happy
  - client: Print OIDC exchange info to stderr
  - client: Require browser or TTY for authorization code flow
  - server: Add support for post-compose script
  - server: Allow customizing TTL for raw config composes
  - server: Delete generatelocalhostcert command
  - server: Ensure the dest dir of git clone does not exist
  - server: Gather git checkout/clone error message
  - server: Make sure writing COMPOSE_ID file


author: Packit <hello@packit.dev> - 116-1
changelog:
  Changes with 116
  ----------------
    * curl: test that OSBUILD_SOURCES_CURL_PROXY works correctly (#1710)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Paweł Poławski
    * mounts: implement new `org.osbuild.bind` mount (#1711)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Ondřej Budai
    * osbuild-depsolve-dnf(5): support proxy (#1715)
      * Author: Sanne Raymaekers, Reviewers: Paweł Poławski, Tomáš Hozza
    * osbuild-depsolve-dnf: support loading repositories from a root dir (#1674)
      * Author: Achilleas Koutsou, Reviewers: Nobody
    * osbuild: fix newline issue with final output 👀  (#1723)
      * Author: Gianluca Zuccarelli, Reviewers: Michael Vogt, Paweł Poławski, Simon de Vlieger, Tomáš Hozza
    * test: tiny tweaks for the output handling in the test_depsolve.py  (#1718)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Paweł Poławski
    * tools/osbuild-depsolve-dnf(5): require releasever (#1724)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Paweł Poławski
    * tools: extract make_dnf_scafolding() from config_combos() (#1717)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * tools: fix proxy key error when "proxy" is not set (#1722)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * tools: rename "nothing" to "pkg-with-no-deps" to make it a bit clearer (#1719)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski

  — Somewhere on the Internet, 2024-04-15


author: Packit <hello@packit.dev> - 117-1
changelog:
  Changes with 117
  ----------------
    * Enable osbuild-depsolve-dnf5 testing and fix a bug (#1744)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Enable unit tests for osbuild-depsolve-dnf(5) (#1731)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * Makefile: make sure that `make test-all` really runs all tests (#1734)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * Stages/SELinux: force auto-relabel of full contexts (#1737)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * Stages/cloud-init: support additional datasources (COMPOSER-2060) (#1729)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    * Update snapshots to 20240415 (#1725)
      * Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    * meta: automatically allow `devices` as input in the stages schemas (#1727)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * org.osbuld.systemd: support unit files that start with - (#1749)
      * Author: Achilleas Koutsou, Reviewers: Alexander Larsson, Brian C. Lane, Gianluca Zuccarelli
    * stages(groups): add support for the mounts for `bootc install to-filesystem`  (#1726)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Ondřej Budai
    * stages: add support for `--target-imgref` to bootc install to-filesystem (#1740)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Ondřej Budai
    * stages: allow `bootloader --append` via kickstart (#1742)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * systemd.unit.create: support the After option in the Unit section (HMS-3814) (#1741)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Sanne Raymaekers
    * tools: extract common _test_depsolve_both_dnf_dnf5 helper. (#1716)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * tools: fix error when `releasever` cannot be found (#1739)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * tox,workflow: run all tests in the GH worfklow (#1735)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Ondřej Budai

  — Somewhere on the Internet, 2024-04-24


author: Packit <hello@packit.dev> - 118-1
changelog:
  Changes with 118
  ----------------
    * Fix bug with sslverify and add test (#1758)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Michael Vogt
    * Revert "Disable F40 CI (CVE-2024-3094 response)" (#1762)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Michael Vogt, Tomáš Hozza
    * Start building RPMs on 9.5 nightly (#1770)
      * Author: Alexander Todorov, Reviewers: Jakub Rusz, Tomáš Hozza
    * Update snapshots to 20240502 (#1771)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * osbuild: fix error match in mount test for rawhide (#1754)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * sources/curl: Use our own User-Agent (#1766)
      * Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Michael Vogt, Simon de Vlieger
    * spec: Install osbuild-depsolve-dnf not dnf5 (#1769)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * stages/kickstart: add support for the dir transport (#1764)
      * Author: Ondřej Budai, Reviewers: Michael Vogt, Tomáš Hozza
    * stages/skopeo:  Fix the remove-signatures option (#1763)
      * Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Florian Schüller, Gianluca Zuccarelli, Michael Vogt
    * stages: add support for destination {dir,oci-archive} to the skopeo stage (#1752)
      * Author: Florian Schüller, Reviewers: Achilleas Koutsou, Michael Vogt
    * stages: new bootc.install.config stage (#1747)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Ondřej Budai
    * stages: remove redundant entries of devices/mounts in schemas (#1733)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Tomáš Hozza
    * stages: tweak the skopeo copy test (#1761)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Florian Schüller
    * test_clamp_mtime: avoid clashing with chrony (#1760)
      * Author: Florian Schüller, Reviewers: Brian C. Lane, Michael Vogt
    * testutil: fix `make_container()` cleanup (#1757)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    * workflow: bump osbuild-ci container to include podman, et al. (#1759)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    * workflow: show summary why tests are skipped (#1755)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2024-05-08


author: Packit <hello@packit.dev> - 119-1
changelog:
  Changes with 119
  ----------------
    * Add user force password reset (#1778)
      * Author: andremarianiello, Reviewers: Brian C. Lane, Paweł Poławski
    * Tests: Add unit tests for org.osbuild.mkfs.fat stage (#1677)
      * Author: Paweł Poławski, Reviewers: Brian C. Lane, Michael Vogt
    * Update snapshots to 20240514 (#1784)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Brian C. Lane
    * runners: revert "runners: clean up temp files before exiting the runner" (#1788)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * stage/systemd.unit.create: add Before option (#1782)
      * Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Michael Vogt
    * stages/systemd.unit.create: update schema to support [Mount] (#1748)
      * Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Michael Vogt
    * test/buildroot: fix checking /var/tmp mode (#1787)
      * Author: Tomáš Hozza, Reviewers: Michael Vogt, Ondřej Budai
    * tests: update stage tests readme (#1738)
      * Author: Paweł Poławski, Reviewers: Michael Vogt, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2024-05-22


author: Packit <hello@packit.dev> - 122-1
changelog:
  Changes with 122
  ----------------
    * CI: Add testing based on Centos containers (COMPOSER-2125) (#1585)
      * Author: Paweł Poławski, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Test/assemblers: update manifest to use Fedora 40 + update manifests testing (#1808)
      * Author: Tomáš Hozza, Reviewers: Alexander Todorov, Michael Vogt
    * Update snapshots for rhel-9.5 to make them in sync with osbuild-composer (#1807)
      * Author: Alexander Todorov, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * sources/curl: use `--user-agent` option to set the user-agent (#1809)
      * Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2024-07-03


author: Packit <hello@packit.dev> - 123-1
changelog:
  Changes with 123
  ----------------
    * Start building RPMs on CentOS Stream 10 for testing (#1799)
      * Author: Alexander Todorov, Reviewers: Florian Schüller, Tomáš Hozza
    * Tests: force checkout manifest-db (#1820)
      * Author: Tomáš Hozza, Reviewers: Florian Schüller, Gianluca Zuccarelli
    * sources(curl): disable `curl --parallel` by default (#1811)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    * sources(curl): download multiple URLs with the same curl command (#1573)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    * stages/oscap.remediation: small import adjustment (#1814)
      * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou, Michael Vogt
    * stages: add stage for creating dm-verity partitions (#1806)
      * Author: Nikita Dubrovski, Reviewers: Achilleas Koutsou, Michael Vogt, Paweł Poławski

  — Somewhere on the Internet, 2024-07-17


author: Packit <hello@packit.dev> - 124-1
changelog:
  Changes with 124
  ----------------
    * CI: build RPMs for RHEL-10.0-nightly (COMPOSER-2161) (#1822)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Florian Schüller
    * Fix dnf4 mark stage test (#1825)
      * Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    * Make `tailored_profile_id` required for `json` autotailoring (#1794)
      * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * Test/manifests: start testing on c10s and el10.0-nightly (COMPOSER-2161) (#1821)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Alexander Todorov
    * Test: fix dnf4.mark stage test with DNF5 (#1824)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * mpp: Allow container-storage image resolution (#1792)
      * Author: Roberto Majadas, Reviewers: Achilleas Koutsou, Ondřej Budai
    * sources(curl): error if curl exists 0 but there are downloads left (#1816)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * sources(curl): use json like output inside of custom record (#1817)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * stages/autotailor: fix stage schema (#1823)
      * Author: Gianluca Zuccarelli, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * test: add new `https_serve_directory()` and test certs (#1815)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski

  — Somewhere on the Internet, 2024-07-31


author: Packit <hello@packit.dev> - 125-1
changelog:
  Changes with 125
  ----------------
    * Makefile: run `tox parallel` without the spinner (#1835)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Tomáš Hozza
    * Test/dnf4.mark: adjust the test for markings used by DNF5 (#1827)
      * Author: Tomáš Hozza, Reviewers: Michael Vogt, Paweł Poławski
    * Tests: Add unit tests for org.osbuild.gunzip stage (#1689)
      * Author: Paweł Poławski, Reviewers: Brian C. Lane, Michael Vogt
    * jsoncom: gracefully report EMSGSIZE errors (#1840)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * main,monitor: fix total steps in progress reporting (#1826)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * osbuild-depsolve-dnf: fix some bugs and extend test coverage (#1834)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * osbuild-depsolve-dnf: refactor into osbuild.solver module (#1776)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * osbuild: make `inputs` `map()` function use fd for reply as well (#1836)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * solver: include "solver" key in the dnfjson reply (#1829)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Paweł Poławski
    * test_dnf4_mark(): disable all plugins when inspecting markings (#1837)
      * Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Paweł Poławski

  — Somewhere on the Internet, 2024-08-14


author: Packit <hello@packit.dev> - 126-1
changelog:
  Changes with 126
  ----------------
    * CI: update terraform hash (#1859)
      * Author: Achilleas Koutsou, Reviewers: Florian Schüller, Michael Vogt, Ondřej Budai, Sanne Raymaekers, Tomáš Hozza
    * New utility module: chroot (#1860)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * Stages/`org.osbuild.dracut`: fix runtime environment for dracut (COMPOSER-2193) (#1846)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    * Update snapshots to 20240819 (#1856)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Michael Vogt
    * osbuild: add "Conflicts"/"Provides" to avoid breaking composer (#1849)
      * Author: Michael Vogt, Reviewers: Brian C. Lane, Tomáš Hozza
    * schutzbot: add Achilleas' SSH keys (#1858)
      * Author: Achilleas Koutsou, Reviewers: Tomáš Hozza
    * test/depsolve: use strings for pytest.skip() (#1852)
      * Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Michael Vogt, Paweł Poławski

  — Somewhere on the Internet, 2024-08-21


author: Packit <hello@packit.dev> - 129-1
changelog:
  Changes with 129
  ----------------
    * Add initial support for generating SPDX SBOM documents (COMPOSER-2274) (#1818)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Simon de Vlieger
    * devices/loopback: add read-only option (#1842)
      * Author: Jonathan Lebon, Reviewers: Michael Vogt, Simon de Vlieger
    * jsoncomm: transparently handle huge messages via fds (#1838)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * stages/coreos.platform: use shutil.copy (#1888)
      * Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    * stages: fix btrfs subvolume creation under subdirectories (#1883)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Paweł Poławski
    * test: add test that ensures return value of `chroot.run()` (#1880)
      * Author: Michael Vogt, Reviewers: Paweł Poławski, Simon de Vlieger

  — Somewhere on the Internet, 2024-09-18


author: Packit <hello@packit.dev> - 0.97.3-1
changelog:
  - We have fixed a bug that caused inconsistency between the promised environment variables (from the docs) and the environment that has been actually provided. Now you should have access to `PACKIT_UPSTREAM_REPO` and `PACKIT_DOWNSTREAM_REPO`, if they have been cloned already, in the `post-upstream-clone` action. (#2327)
  - Resolves: rhbz#2293661


author: Packit <hello@packit.dev> - 0.98.0-1
changelog:
  - Packit now updates its own, not yet merged, pull requests instead of creating new ones for new releases. (#2204)
  - Resolves: rhbz#2295821


author: Packit <hello@packit.dev> - 0.100.0-1
changelog:
  - `packit pull-from-upstream` now allows omitting `upstream_project_url` in the configuration in which case the interaction with the upstream repository is skipped during release syncing. (#2354)
  - We have implemented a CLI support for Koji builds against CBS Koji instance. (#2267)


author: Packit <hello@packit.dev> - 0.100.3-1
changelog:
  - `dist-git init` command now allows `upstream-git-url` not to be specified. (#2387)
  - Resolves: rhbz#2306481


author: Packit <hello@packit.dev> - 0.101.0-1
changelog:
  - Packit now supports passing custom arguments to various static analyzers through `--csmock-args` CLI option and `csmock_args` configuration. (#2402)
  - When synching a new release Packit is now able to fast forward a specified merge to a configured list of branches.
    Use the `dist_git_branches` new syntax as in this example:
    `{"rawhide": {"fast_forward_merge_into": ["f40"]}, "fedora-stable": {}}` (#2363)
  - Resolves: rhbz#2310376


author: Packit <hello@packit.dev> - 0.101.1-1
changelog:
  - In the user configuration file, it's possible to set `default_parse_time_macros`, e.g. might be helpful in situations like [packit/packit-service#2514](https://github.com/packit/packit-service/issues/2514). (#2408)
  - Packit now allows to configure mock bootstrap feature setup of Copr projects with a new `bootstrap` configuration option. (#2411)
  - Resolves: rhbz#2313250


author: Paul Howarth <paul@city-fan.org> - 1.5800-1
changelog:
  - Update to 1.58
    - New module Consorsbank.pm (GH#329)
    - New module Stooq.pm (GH#203)
    - Bloomberg.pm - Changed modules to utilize cookie jar (GH#324, GH#331)
    - AlphaVantage.pm:
      - Apply currency scaling (GBp -> GBP) when symbol had additional ".X"
        suffix (GH#281)
      - Fixed check for "Information" JSON usually returned when daily API limit
        has been reached
    - YahooWeb.pm - Fixed incorrect pricing for single character symbols and
      changed URL to get trade date (GH#314, GH#319)
    - Another fix to the URL in YahooJSON and CurrencyRates/YahooJSON (GH#318)


author: Paul Howarth <paul@city-fan.org> - 1.5900-1
changelog:
  - Update to 1.59
    - Fixed XETRA, Tradegate and SInvestor after webpage was restructured (GH#350)
    - Fidelity.pm temporarily disabled (GH#346)
    - Finanzpartner.pm - Fix scraper, did not work if quote was higher than the
      previous day's quote
    - GoogleWeb.pm - Updated to retrieve mutual fund and BATS prices (GH#355)
    - BSEIndia.pm:
      - Updated to use standardized data file at URL
        https://www.bseindia.com/download/BhavCopy/Equity/BSE_EQ_BHAVCOPY_{DDMMYYYY}.ZIP
      - Eliminated need to use temp folders by storing standardized file data
        from URL into a variable
      - Updated names of source fields to conform to those in the standardized
        data file
      - Removed print when symbol not found (GH#335)
    - IndiaMutual.pm - Eliminated need to use temp folders by storing NAV file
      data from URL into a variable
    - TMX.pm - Correct a self-reference in documentation (GH#345)
    - Stooq.pm - Added new currencies and a fix for commodities' prices
    - YahooWeb.pm - Skip rows in the price table where the prices are "-"; this
      seems to happen sometimes with TIAA (and perhaps other) securities
      including TILIX and QCILIX
    - TSP.pm - Was not returning hash when the HTTP GET failed completely or the
      content did not contain the expected CSV file (GH#338)


author: Paul Howarth <paul@city-fan.org> - 1.6000-1
changelog:
  - Update to 1.60
    - Removed not working modules Fidelity.pm, Cdbfundlibrary.pm, Fundata.pm and
      Fool.pm (GH#346, GH#366, GH#368)
    - YahooJSON.pm - Added code to retrieve cookies and a "crumb" required to
      continue to utilize the v11 API (GH#369)
    - The YahooJSON.pm currency module was changed to use the v8 chart API
    - Added initial version of CONTRIBUTING.pod that metacpan.org utilizes; it
      will completely replace the Hacker's Guide in the future
    - Bloomberg.pm - Changed module to extract data from JSON structure embedded
      within the HTML (GH#360)
    - NSEIndia.pm - Eliminated need to use temp folders by storing file data from
      URL into a variable
  - Exclude Finance::CONTRIBUTING manpage, CONTRIBUTING.pod added as %doc


author: Paul Howarth <paul@city-fan.org> - 1.6100-1
changelog:
  - Update to 1.61
    - SIX.pm - Changed lookup for currency, added lookups for symbol and last
      (GH#380)
    - YahooJSON.pm - URLs to retrieve required cookies and crumbs were changed to
      allow EU-based users to use the module (GH#373)


author: Paul Howarth <paul@city-fan.org> - 1.6200-1
changelog:
  - Update to 1.62
    - Fixed AEX.pm
    - Removed throttling from AlphaVantage.pm (GH#363)
    - Added CurrencyFreaks.pm - new currency module
    - YahooJSON.pm - added more error handling (GH#390)
    - Fixed MarketWatch.pm module (GH#389)
    - Rewrote Fool.pm and added back to F::Q (GH#379)
    - Added StockData.pm - methods stockdata, nyse, nasdaq
    - Modified YahooJSON.pm module in order handle EU consent redirects better
    - TwelveData.pm - Added "last" to data being returned
    - Added BorsaItaliana.pm - module for Borsa Italiana, Italian traded bonds
      using ISIN
    - YahooWeb.pm - modified YahooWeb to account for changes from Yahoo (GH#377)
  - Upstream dropped CONTRIBUTING.pod


author: Michal Josef Špaček <mspacek@redhat.com> - 1.6200-3
changelog:
  - Fix version handling for build with different locales set
    `printf "%.4f" 1.62` has different results e.g. for cs_CZ.UTF-8 vs C
  - Rename variable to cpan_version which is common in Fedora


author: Paul Howarth <paul@city-fan.org> - 1.6300-1
changelog:
  - Update to 1.63
    - Fixed TesouroDireto.pm - using different source URL (GH#424)
    - Added FinanceAPI.pm - requires API key from https://financeapi.net/
      - US and other exchange data available
    - Fixed BVB.pm (GH#409)
    - Fixed BSEIndia.pm (GH#410); removed Unzip as quotes file is now a CSV file
    - Fixed NSEIndia.pm (GH#410)
    - Fixed NZX.pm (GH#401)


author: Remi Collet <remi@remirepo.net> - 1.16.0-1
changelog:
  - update to 1.16.0
  - raise dependency on mongodb extension version 1.16
  - raise dependency on symfony/polyfill 1.27


author: Remi Collet <remi@remirepo.net> - 1.17.0-1
changelog:
  - update to 1.17.0
  - raise dependency on PHP 7.2
  - raise dependency on mongodb extension version 1.17
  - add dependency on psr/log


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - drop docs
  - raise dependency on mongodb extension version 1.20
  - drop dependency on symfony/polyfill


author: Remi Collet <remi@remirepo.net> - 1.17.0-1
changelog:
  - update to 1.17.0
  - raise dependency on PHP 7.4
  - raise dependency on libmongoc 1.25.1
  - raise dependency on libmongocrypt 1.8.2
  - open https://github.com/mongodb/mongo-php-driver/pull/1490 drop ICU information


author: Remi Collet <remi@remirepo.net> - 1.19.0-1
changelog:
  - update to 1.19.0
  - raise dependency on libbson and libmongc 1.27.0
  - raise dependency on libmongocrypt 1.10.0


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - raise dependency on libbson and libmongc 1.28.0
  - raise dependency on libmongocrypt 1.11.0


author: Remi Collet <remi@remirepo.net> - 8.5.30-1
changelog:
  - update to 8.5.30
  - raise dependency on sebastian/comparator 3.0.2
  - raise dependency on sebastian/exporter 3.1.5


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.00-5
changelog:
  - Add dependency on liburing-devel to root-io
  - Exclude failing tutorial-tmva-RBatchGenerator_filters_vectors-py test
    on aarch64 (Fedora 40+)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.02-2
changelog:
  - Add openssl-devel-engine build requirement on Fedora 41+
  - Fixes for TUri class (PCRE2 compatibility)
  - Fix test failure with tbb 2021.13.0


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.04-1
changelog:
  - Update to 6.32.04
  - Drop patches accepted upstream
  - Disable Qt5 Web display for Fedora 41+ (broken qt5-qtwebengine package)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.06-1
changelog:
  - Update to 6.32.06
  - Split out ROOT 7 dependent parts of root-browsable to a separate package
  - Split out ROOT 7 dependent parts of root-browserv7 to a separate package


author: Packit <hello@packit.dev> - 0.46.0-1
changelog:
  - We have fixed a bug in `get_fork` method for Pagure about checking the usernames for a match when going through existing forks. (#800)


author: Packit <hello@packit.dev> - 0.47.0-1
changelog:
  - Added support for removing users/groups from a project and possibility to check for groups with permissions to modify a PR. (#815)
  - Resolves rhbz#2125279


author: Packit <hello@packit.dev> - 0.47.1-1
changelog:
  - Fixed an issue where getting a list of GitLab merge requests using `.list()` would return only 20 items. (#819)
  - Resolves rhbz#2246994


author: Packit <hello@packit.dev> - 0.48.0-1
changelog:
  - There is a new get_pr_files_diff method supported for Pagure. (#826)
  - We have fixed a bug that GithubRelease.url returned an API URL. (#824)
  - Resolves rhbz#2255524


author: Packit <hello@packit.dev> - 0.48.1-1
changelog:
  - Fix log level and wording when Pagure returns an error while retrieving Pagure PR diffstats.
  - Resolves rhbz#2257242


author: Packit <hello@packit.dev> - 0.49.0-1
changelog:
  - For Pagure there are 2 new methods available: one for getting users with specified access rights and one for getting members of a group. (#834)


author: Packit <hello@packit.dev> - 0.49.2-1
changelog:
  - `GitLabProject.get_file_content` can now correctly handle file paths starting with `./`. (#844)
  - Resolves rhbz#2268584


author: Packit <hello@packit.dev> - 0.50.0-1
changelog:
  - A new` get_commits` method was implemented for GitHub and Gitlab projects. (#857)
  - An issue with silently ignoring error (#760) was fixed. (#855)
  - Resolves: rhbz#2312527


author: Packit <hello@packit.dev> - 0.28.1-1
changelog:
  - We have fixed an issue in `%prep` section processing. For instance, if the `%patches` macro appeared there, it would have been converted to `%patch es`, causing failure when executing `%prep` later. (#356)


author: Packit <hello@packit.dev> - 0.28.2-1
changelog:
  - Handling of trailing newlines in the macro defintions has been improved. (#361)
  - Resolves: rhbz#2271583


author: Packit <hello@packit.dev> - 0.28.3-1
changelog:
  - Fixed several minor issues such as processing seemingly commented-out macro definitions (e.g. `#%global prerel rc1`) and treating `SourceLicense` tag as a source. (#374, #376)
  - Made `EVR`, `NEVR` and `NEVRA` objects comparable. (#379)


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.31.0-1
changelog:
  - Value of a `Tag` no longer includes trailing whitespace (if any). (#393)
  - specfile now tries to expand macros before processing conditions to be able to resolve conditional expressions defined by macros, for example OpenSUSE Tumbleweed defines `%ifpython3` macro as `%if "%{python_flavor}" == "python3"`. (#394)
  - Resolves: rhbz#2294393


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.10-1
changelog:
  - configuration abstraction (domain/apiv2 by lbrabec)
  - Add workaround for Ubuntu
  - Remove compatibility code for tmt < 1.22
  - Drop long deprecated find_vm_ip from cli
  - Always try to run dhclient in cloud-init
  - Clarify that testcloud runs VMs and no containers (Anatoli Babenia)
  - Support Fedora OpenStack images handling
  - [Domain API] Cleanups, fixes, refactors, Part 1/n
  - [Domain API] Cleanups, fixes, refactors, Part 2/n
  - Downloader: support unknown file sizes, add retry mechanism
  - domain/apiv2: Fix CoreOS
  - Instance: inherit coreos param too for DomainConfiguration
  - Storage: provide domain/apiv2 facilities for storage sizing, refactor


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.11-1
changelog:
  - virtiofs integration
  - add serial param (lnie)
  - add nic_number param (lnie)
  - cli: Add StrictHostKeyChecking=no and UserKnownHostsFile=/dev/null to the suggested cmdline
  - tpm: Support version 1.2 too in the api
  - cli: Convert to domain_api/v2, drop v1 codepaths


author: Frantisek Zatloukal <fzatlouk@redhat.com> - 0.9.13-1
changelog:
  - _get_default_domain_conf polishing (lbrabec)
  - fixing typing errors (lbrabec)
  - add host_device_path to StorageDevice (lbrabec)
  - Allow skipping downloads
  - Adjust verification around image resolve caching
  - Fedora image finder: look for subvariant instead of variant
  - cli: Identify rhcos as coreos too
  - cli: Refactor url checking a bit
  - Band aid tests fixup
  - cli: Add dry option
  - Fix the issue of indentation for the docs of --virtiofs (hhan)
  - image: Use reflinks if available (walters)
  - add virtual iommu device (hhan)
  - Workarounds API (lbrabec, fzatlouk)
  - CentOS 7: Workaround to point repositories to the vault
  - CentOS Stream: Support preliminary CentOS Stream 10 images
  - Refresh baked in fallback image urls
  - Ubuntu: Fixup image finder
  - Debian: Support bookworm release
  - Purge domain-template.jinja


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240806git39e2663-1
changelog:
  - Update to 0^20240806git39e2663
  - Add `static inline` to `PyUnicodeWriter_WriteStr()` and
    `PyUnicodeWriter_WriteRepr()`.


author: blinxen <h-k-81@hotmail.com> - 0.4.6-4
changelog:
  - [skip changelog] Don't use macro in name and url tag This makes it easier
    to build scripts which help with maintaining this package


author: Kalev Lember <klember@redhat.com> - 0.5.2-1
changelog:
  - Update to 0.5.2 (rhbz#2235902)
  - Drop test-data exclusion now that upstream has clarified the licensing
  - Re-enable tests on s390x


author: Kalev Lember <klember@redhat.com> - 0.1.9-1
changelog:
  - Update to 0.1.9 (rhbz#2235903)
  - Drop test-data exclusion now that upstream has clarified the licensing


author: Martin Gansser <martinkg@fedoraproject.org> - 24.06.02-3
changelog:
  - License update
  - Drope unused patch
  - Remove duplicate files and create hardlinks
  - Add RUNPATH pointing to %{_libdir}/shotcut


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.8-1
changelog:
  - Version 254.8
  - A bunch of fixes for various components: systemd, systemctl, systemd-
    firstboot, systemd-repart, bootctl, systemd-networkd, systemd-network-
    generator, systemd-analyze, systemd-dissect, ukify, man pages.
  - Also has a patch for CVE-2023-7008 (rhbz#2222260)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.9-1
changelog:
  - Version 254.9
  - Fixes kernel-install on /boot on btrfs (rhbz#2251262)
  - Various small fixes for systemd itself, systemd-resolved, bootctl,
    systemd-networkd, udev, systemd-repart, systemd-homed, libsystemd,
    virtualization detection, systemd-analyze, systemd-dissect, systemd-
    journal-remote, documentation.
  - Hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.12-1
changelog:
  - Version 254.12
  - Too many small bugfixes too list.
  - Updates to hwdb from 2024-04-08 in upstream.
  - Resolves rhbz#2269506.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.16-1
changelog:
  - Version 254.16
  - Fixes for systemd, systemd-resolved, man pages and other documentation,
    unit installation
  - Hardware db update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 254.18-1
changelog:
  - Version 254.18
  - Various small fixes in man components, incl. systemd-resolved, systemd-
    boot, virtualization detection, kernel-install.
  - Includes a hardward database update.


author: Michel Lind <salimma@fedoraproject.org> - 0.0.27-2
changelog:
  - Use script to generate list of coreutils commands
  - On EPEL 9, reduce the list of obsoletes to packages actually built


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Arun Babu Neelicattu <arun.neelicattu@gmail.com> 2.4.0-1
changelog:
  - update to v2.4.0 release (arun.neelicattu@gmail.com)
  - Fix another typo (me@treier.xyz)
  - readme: add firefox instruction for extension (arun.neelicattu@gmail.com)
  - Fix typo in install command (me@treier.xyz)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
changelog:
  - xenstored: A transaction conflict can crash C Xenstored [XSA-440,
  	CVE-2023-34323]
  - x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
  - Multiple vulnerabilities in libfsimage disk handling [XSA-443,
  	CVE-2023-34325]
  - x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
  	CVE-2023-34328]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
changelog:
  - x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
  	CVE-2023-46835]
  - x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
changelog:
  - arm32: The cache may not be properly cleaned/invalidated (take two)
  	[XSA-447, CVE-2023-46837]
  - pci: phantom functions assigned to incorrect contexts [XSA-449,
  	CVE-2023-46839]
  - VT-d: Failure to quarantine devices in !HVM build [XSA-450,
  	CVE-2023-46840]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
changelog:
  - x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
          CVE-2023-46841] (#2266326)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
changelog:
  - x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
  - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
  - additional patches so above applies cleanly


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
changelog:
  - x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
  - update to xen 4.17.4, remove patches now included upstream
    rebase xen.gcc12.fixes.patch
  - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
  - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
changelog:
  - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
  - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
  	(#2298690)


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
changelog:
  - error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
  - PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]


author: Michael Young <m.a.young@durham.ac.uk> - 4.17.5-1
changelog:
  - update to xen-4.17.5
    remove or adjust patches now included or superceded upstream
    now need to enable systemd explicitly


