# changelog

author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    - Change minimum Ansible version to 2.14


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-2
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    - ipareplica: Pass ipareplica_ip_addresses to client deployment part
    - ipagroup: Correctly handle externalmember in member actions
    - ipasudorule: Evaluate all members related to hosts and users
    - ipacert: Correctly handle removFromCRL revocation
    - Collection: No more role module duplication
    - Enabled CentOS 10 Stream tests


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.3
    - Fix management of AD objects for ipagroup


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.4
    - Fix management of AD objects for ipagroup


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.5
    - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.6-1
changelog:
  - Update to version 1.14.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.6
    - Fix CA certificates iteration in ipaclient role


author: Thomas Woerner <twoerner@redhat.com> - 1.14.7-1
changelog:
  - Update to version 1.14.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.7
    - ipaclient: Second hotfix for dns_over_tls


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - DNS over TLS support for ipaserver, ipareplica and ipaclient deployment
      roles
    - ipaidrange: Enforce requirement of baserid and secondarybaserid for ID
      ranges
    - Fix ipaserver and ipareplica deployment roles for use in Mitogen


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - ipaclient: client_dns has new statestore arg with IPA change e6445b8


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.0.1-1
changelog:
  - Update to release v2.0.1
  - Resolves rhbz#2332367
  - Drops 0001-fsverity.IsEnabled-big-endian-fix.patch. Upstream incorporated
    a change that obviates this patch.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.0.2-1
changelog:
  - Update to release v2.0.2
  - Resolves rhbz#2337577
  - Upstream release note summary: "The second patch release for containerd
    2.0 includes a number of bug fixes and improvements."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.23.0-3
changelog:
  - Ignore fedpkg mockbuild generated artifacts
  - Ignore generated rpms and results_ sub-directory generated by fedpkg
    during mockbuild


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.24.0-1
changelog:
  - Update package to release v0.24.0
  - Resolve: rhbz#2366388, rhbz#2360632
  - Upstream fixes and changes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.1-1
changelog:
  - Update to release v0.26.1
  - Resolves: rhbz#2382656
  - Upstream fix
  - Includes temporary nodwarf5 flag for go


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.2.1-1
changelog:
  - Update to release v28.2.1
  - Resolves: rhbz#2369024, rhbz#2354429, rhbz#2353100
  - V28.2.1 contains regression fix
  - V28.2.0 has new features and fixes
  - Reconcile all branches for possible packit integration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.3.3-1
changelog:
  - Update to release v28.3.3
  - Resolves: rhbz#2384219
  - Resolves: CVE-2025-54388 / GHSA-x4rx-4gw3-53p4
  - Upstream fixes


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-3
changelog:
  - Add calling a little python script in the install stage to revert
    the (upstream) replacing of directories by a symlinks 
    which causes upgrade problems with rpm for the data package.


author: Owen Taylor <otaylor@redhat.com> - 1.0-1
changelog:
  - Version 1.0
  - Add 'flatpak-module init'
  - Support zstd compressed repository metadata
  - Disable min-free-space check for ostree repositories
  - Handle RPMs with different versions for different subpackages
  - Provide a better error message during dependency resolution when
    the runtime is out of date.


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.9-1
changelog:
  - Version 0.1.9 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-9-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.10-1
changelog:
  - Version 0.1.10 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-10-released/


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.5.11-1
changelog:
  - Update to 0.5.11
  - Fix compatibility with Mercurial 6.4 (rhbz#2259038)
  - Fix access to ssh remotes with absolute path in no-mercurial mode
  - Fix missing `distutils` error messages with Python 3.12


author: Packit <hello@packit.dev> - 20-1
changelog:
  Changes with 20
  ----------------
    * deps: update (#219)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-05-30


author: Packit <hello@packit.dev> - 21-1
changelog:
  Changes with 21
  ----------------
    * image-builder: fix cross-arch uploading (#218)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * packit: rename epel9-next (#224)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 22-1
changelog:
  Changes with 22
  ----------------
    * GHA: add the common-stale-action (#225)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * chore: bump `images` (#228)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-06-22


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 25-1
changelog:
  Changes with 25
  ----------------
    * deps: update images to 0.162.0 (#247)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai
    * main: `--version` includes git commit (#230)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    * packit: enable RHEL 10 builds (HMS-8829) (#246)
      * Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-16


author: Packit <hello@packit.dev> - 26-1
changelog:
  Changes with 26
  ----------------
    * deps: bump images to 0.164 (#252)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
    * main: add `--ignore-warnings` cmdline option (#250)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Simon de Vlieger
    * testutil: trivial cleanup/rename (#249)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-21


author: Packit <hello@packit.dev> - 27-1
changelog:
  Changes with 27
  ----------------
    * chore: set specfile version at build (#253)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2025-07-23


author: Packit <hello@packit.dev> - 28-1
changelog:
  Changes with 28
  ----------------
    * README.md: document `--ignore-warnings` (#254)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * ci/packit: remove EPEL release automation (#258)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * ci: upgrade golangci-lint to 2.3.0 (#257)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    * deps: update `images` to 0.168 (HMS-8949, HMS-8922) (#262)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt, Tomáš Hozza
    * spec: fix up version number (#259)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2025-07-31


author: Packit <hello@packit.dev> - 29-1
changelog:
  Changes with 29
  ----------------
    * deps: fix images 0.168 (#266)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2025-08-01


author: David Cantrell <dcantrell@redhat.com> - 4.2.2-1
changelog:
  - Upgrade to iniparser-4.2.2 (#2277613)
  - Switch to building with cmake (include in a subpackage)
  - Enable static library in addition to shared library
  - De-conditionalize the test suite and run that via %check
  - Build and include the API documentation in the devel package


author: Pavol Sloboda <pavol.sloboda02@gmail.com> - 2.6.2-3
changelog:
  - fix: fixed the BuildRequires of mariadb-devel package the mariadb-
    connector-c-devel package is available for all RHEL versions from version
    8 and above, as version 7 is quite old this condition is not necessary
    and all packages should use the BuildRequires of mariadb-connector-c-
    devel instead of mariadb-devel if possible


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Ben Boeckel <fedora@me.benboeckel.net> - 0.19.1-7
changelog:
  - Modernize RPM macros (rhbz#2377298)
  - Remove atomicwrites dependency (https://github.com/lucc/khard/pull/343)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.2-2
changelog:
  - Add a patch to fix Qt6Pas breaking with Qt 6.7
  - Add a patch to fix segmentation fault in Gtk2 widget set


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.4-1
changelog:
  - Update to v3.4
  - Drop Patch2 (qt6pas build failure - backport from this release)
  - Drop Patch3 (segfault in GTK2 widgetset - backport from this release)
  - Move GTK+ widgetset support to separate subpackage


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 4.0-1
changelog:
  - Update to v4.0
  - Drop Patch1 (crash in lazbuild) - issue fixed upstream
  - Drop Patch2 (Qt5 segfault) - backport from this release
  - Fix license tag ("LGPL-2.0 WITH Classpath-exception-2.0" -> "LGPL-2.0-only WITH Independent-modules-exception")


author: Tom Callaway <spot@fedoraproject.org> - 1.1.0-0.11.rc1
changelog:
  - apply lots of fixes from the LibreCAD git tree
  - conditionalize the dwg2dxf binary (still works but maybe won't forever)


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.6-1
changelog:
  - New upstream stable branch version 1.42.6
  - Contains data integrity fix: "server: Fix .zero fallback path"


author: Michel Lind <salimma@fedoraproject.org> - 5.4.1-3
changelog:
  - Correctly set the soversion based on SemVer properties
    Backport of upstream PR#4319 from Neal Gompa (ngompa)
  - Split shared libraries into their own -libs subpackage


author: Chapien <inquiries@chapien.net> - 3.4.3-1
changelog:
  - Unretiring mygui. Changed specfile to reflect modern mygui. - Source now
    points to new upstream repo - Desktop files created for other tools -
    Built using openGL instead of OGRE now - No longer build demos. Might
    build demos again later.


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.4.3-5
changelog:
  - move two shared libraries from -devel to main package
  - add missing SONAME to libMyGUI.OpenGLPlatform.so


author: Remi Collet <remi@fedoraproject.org> - 1.0.7-1
changelog:
  - update to 1.0.7
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - fix build with PHP 8.4 using patch from
    https://github.com/php/pecl-encryption-mcrypt/pull/19


author: Remi Collet <remi@fedoraproject.org> - 1.0.9-1
changelog:
  - update to 1.0.9
  - re-license spec file to CECILL-2.1
  - modernize the spec file
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 12.2.0-1
changelog:
  - update to 12.2.0
  - raise dependency on phpunit/php-code-coverage 12.3.0
  - raise dependency on sebastian/environment 8.0.2


author: Remi Collet <remi@remirepo.net> - 12.2.3-1
changelog:
  - update to 12.2.3
  - raise dependency on phpunit/php-code-coverage 12.3.0
  - raise dependency on sebastian/comparator 7.1.0


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.0-1
changelog:
  - buildinstall: Add support for rootfs-type lorax option (lsedlar)
  - scm: Stop trying to download src arch (lsedlar)
  - extra_isos: Provide arch to extra files getter (lsedlar)
  - Move temporary buildinstall download to work/ (lsedlar)
  - Download extra files from container registry (lsedlar)
  - Remove python 2.7 dependencies from setup.py (lsedlar)
  - util: Drop dead code (lsedlar)
  - Directly import mock from unittest (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.1-1
changelog:
  - util: Fix typo in regex for container digests (lsedlar)
  - Resolve container tags to digests (lsedlar)
  - kojiwrapper: Remove unused code (lsedlar)
  - Add basic telemetry support (lsedlar)
  - Reorder ostree and ostree_installer phases (hlin)
  - Fix test data generation script (lsedlar)
  - extra_isos: Mention all extra files in the manifest (lsedlar)
  - scm: Add retries to container-image download (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.2-1
changelog:
  - Drop compatibility with Koji < 1.32 (lsedlar)
  - kiwibuild: Add support for use_buildroot_repo option (lsedlar)
  - gather: Resolve symlinks before linking packages (lsedlar)
  - Make requests instrumentation optional (lsedlar)
  - Fix incorrect log line (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.0.1-2
changelog:
  - Use pytest instead of deprecated pytest-runner
  - Actually run the tests
  - Port to pyproject-rpm-macros and add extras metapackages
  - Omit unwanted coverage-analysis dependencies


author: Miro Hrončok <miro@hroncok.cz> - 2024.08.30-4
changelog:
  - Use /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
  - https://fedoraproject.org/wiki/Changes/dropingOfCertPemFile
  - Fixes: rhbz#2337319


author: Karolina Surma <ksurma@redhat.com> - 1.3.0-2
changelog:
  - Read the runtime depedencies from pyproject.toml
  - w gets the dependencies by building the wheel which is time- and
    resource-consuming, and done twice during one package build (again in the
    %build phase). Instead, -p reads the dependencies from the [project]
    table in pyproject.toml which is a part of the sdist.


author: Packit <hello@packit.dev> - 0.32.1-1
changelog:
  - ModemManager: Add initial mock (thanks Guido Günther)
  - bluez5: Add advertising API (thanks Frederik Leonhardt)
  - Fix loading of libglib on macOS (thanks peturingi)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.2.0-7
changelog:
  - Completely modernize (and greatly simplify) the packaging
  - Use pyproject-rpm-macros (fix RHBZ#2377674)
  - Package from the GitHub archive instead of the PyPI sdist
  - Run the tests
  - Use the provisional pyproject declarative buildsystem


author: Jos de Kloe <josdekloe@gmail.com> 2.38.1-1
changelog:
  - move to upstream release 2.38.1
    Note that upstream numbering scheme has changed so 1.7.1 jumped to 2.37.0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Michel Lind <salimma@fedoraproject.org> - 0.2.6-1
changelog:
  - Update to 0.2.6 upstream release
  - Drop unneeded extra sources and backported patches
  - Resolves: rhbz#2386020


author: Christian Krause <chkr@fedoraproject.org> - 3.6.9-1
changelog:
  - Update to 3.6.9 (#2267692)
  - Remove example client and server (upstream split the source package)
  - Remove according weak requirements for example tools


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.1-3
changelog:
  - Disable tests in EPEL
  - Avoid bringing in large dependency trees via the axum and tower-http dev-
    dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-4
changelog:
  - Allow procfs 0.17, which 7, and roxmltree 0.20
  - https://github.com/nushell/nushell/pull/14489
  - https://github.com/nushell/nushell/pull/14513


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.0-5
changelog:
  - Port to rust2rpm.toml
  - Actually hide features for testing particular hardware
  - Hide the crypto_nossl feature, which would require the x509-cert crate;
    fixes RHBZ#2310742


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.4-2
changelog:
  - On i686, skip a test that is designed for 64-bit
  - Send a PR upstream to conditionalize the test by architecture.


author: Zdenek Pytela <zpytela@redhat.com> - 41.40-1
changelog:
  - Add missing permissions for ftpd_anon_write to manage NFS directories
  - Add missing permissions for ftpd_anon_write to manage CIFS directories
  - Allow nut-upsmon write systemd inhibit pipes
  - Allow systemd-user-runtime-dir connect to systemd-userdbd over a unix socket
  - Remove permissive domain for systemd_vsftpd_generator_t
  - Change generator-specific rules to apply to systemd_generator
  - Define file equivalency for /var/etc
  - Allow tuned-ppd create ppd_base_profile with a file transition
  - Allow lldpd connect to systemd-homed over a unix socket
  - Allow sysadm_sudo_t signal rpm script
  - Fix the "/var/cache/systemd/home(/.*)?" regex


author: Zdenek Pytela <zpytela@redhat.com> - 41.41-1
changelog:
  - Allow mdadm nosuid_transition
  - Label plasma user service files as xdm_unit_file_t.
  - Revert "Allow systemd-homed to start services."
  - Allow virtstoraged write qemu runtime files
  - Allow virtqemud read/write/setattr input event devices
  - Allow systemd create journal pid files
  - Allow networkmanager send a general signal to iptables
  - Allow syslogd watch syslog_conf_t directories
  - Allow systemd-machined work with its private tmp and tmpfs files
  - Allow geoclue read virt lib files
  - Fix files_dontaudit_delete_all_files()
  - Label /run/polkit-1 with policykit_var_run_t
  - Label /dev/diag as diagnostic_device_t
  - Allow systemd-homed to start services.
  - Allow named_t to read NetworkManager's runtime files
  - Improve README* documentation


author: Zdenek Pytela <zpytela@redhat.com> - 41.42-1
changelog:
  - Drop config for /run/random-seed
  - Update file location for systemd random-seed file
  - Allow tomcat execute cracklib-check with a domain transition
  - Allow sssd watch lib dirs
  - Confine systemd-hibernate-resume
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  - Allow login_pgm read filesystem sysctls
  - Allow gconfd connect to system dbus
  - Allow NetworkManager manage NetworkManager_etc_rw_t symlinks
  - Add %verify(not md5 size mtime) for customizable_types


author: Zdenek Pytela <zpytela@redhat.com> - 41.43-1
changelog:
  - Allow nmbd read network sysctls
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Allow logrotate stop all systemd services
  - systemd: rework systemd_manage_random_seed
  - Allow tuned-ppd connect to sssd over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.44-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  - qgs: add contrib module for TDX "qgs" daemon
  - kernel: add interfaces for using SGX enclaves
  - Define file equivalency for /usr/etc
  - Allow mongod to receive pressure stall information
  - Dontaudit systemd_generator read sssd public files
  - Allow plymouthd read/write input event devices
  - Label 99-nvme-nbft-connect.sh with NetworkManager_dispatcher_nvme_script_t
  - Allow systemd-user-runtime-dir sendto to syslogd
  - Remove pcp module
  - Update irqbalance policy for using unconfined scripts
  - Allow utempter use terminal multiplexor
  - Allow virtqemud execute ovs-vsctl with a domain transition
  - Update the files_search_mnt() interface


author: Zdenek Pytela <zpytela@redhat.com> - 41.45-1
changelog:
  - Add fs_write_cgroup_dirs() and fs_setattr_cgroup_dirs() interfaces
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Allow openvswitch ioctl vduse devices
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  - Allow virtstoraged the sys_rawio capability
  - Allow virtqemud read insights-core state files
  - Allow virtnodedev create mdevctl config dirs
  - Allow virtqemud additional permissions on scsi generic chr files
  - Allow local login execute gnome keyring daemon
  - Allow virtqemud send a generic signal to passt
  - Allow svirt-tcg read init state
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Label /run/opendkim with dkim_milter_data_t
  - Allow sa-update status systemd services
  - Allow updpwd logging send audit messages
  - Temporary dontaudit iio-sensor-proxy sys_admin.
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Revert "Allow iio-sensor-proxy sendto to journald over a unix datagram socket"


author: Zdenek Pytela <zpytela@redhat.com> - 42.1-1
changelog:
  - Update systemd-generators policy
  - Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470)
  - Allow insights-client file transition for files in /var/tmp
  - Allow tuned-ppd manage tuned log files
  - Allow systemd-coredump mount on tmpfs filesystems
  - Update sssd_dontaudit_read_public_files()
  - Allow zram-generator raw read fixed disk device


author: Zdenek Pytela <zpytela@redhat.com> - 42.2-1
changelog:
  - Allow virtqemud_t use its private tmpfs files (bsc#1242998)
  - Allow virtqemud_t setattr to /dev/userfaultfd (bsc#1242998)
  - Allow virtqemud_t read and write /dev/ptmx (bsc#1242998)
  - Extend virtqemud_t tcp_socket permissions (bsc#1242998)
  - Allow virtqemud_t to read and write generic pty (bsc#1242998)
  - Allow systemd-importd create and unlink init pid socket
  - Allow virtqemud handle virt_content_t chr files
  - Allow svirt read virtqemud fifo files
  - All sblim-sfcbd the dac_read_search capability
  - Allow sblim domain read systemd session files
  - Allow sblim-sfcbd execute dnsdomainname
  - Confine nfs-server generator
  - Allow systemd-timedated start/stop timemaster services
  - Allow "hostapd_cli ping" run as a systemd service
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  - Allow 'oomctl dump' to interact with systemd-oomd
  - Basic functionality for systemd-oomd
  - Basic enablement for systemd-oomd
  - Allow samba-bgqd send to smbd over a unix datagram socket
  - Update kernel_secretmem_use()
  - Add the file/watch_mountns permission


author: Zdenek Pytela <zpytela@redhat.com> - 42.3-1
changelog:
  - Allow virtqemud write to sysfs files
  - Allow irqbalance search sssd lib directories
  - Allow samba-dcerpcd send sigkills to passwd
  - Allow systemd-oomd watch dbus pid sock files
  - Allow some confined users read and map generic log files
  - Allow login_userdomain watch the /run/log/journal directory
  - Allow login_userdomain dbus chat with tuned-ppd
  - Allow login_userdomain dbus chat with switcheroo-control
  - Allow userdomain to connect to systemd-oomd over a unix socket
  - Add insights_client_delete_lib_dirs() interface


author: Zdenek Pytela <zpytela@redhat.com> - 42.4-1
changelog:
  - Allow unconfined user a file transition for creating sudo log directory
  - Allow virtqemud read/write inherited dri devices
  - Allow xdm_t create user namespaces
  - Update policy for login_userdomain
  - Add ppd_base_profile to file transition to get tuned_rw_etc_t type
  - Update policy for bootupd
  - Allow logwatch work with opensmtpd
  - Update dovecot policy for dovecot 2.4.1
  - Allow ras-mc-ctl write to sysfs files
  - Allow anaconda-generator get attributes of all filesystems
  - Add the rhcd_rw_fifo_files() interface
  - Allow systemd-coredump the sys_chroot capability
  - Allow hostapd write to socket files in /tmp
  - Recognize /var/home as an alternate path for /home
  - Label /var/lib/lastlog with lastlog_t


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.5.0-1
changelog:
  - New upstream release
  - Moved somethings around to make the diff from the upstream spec less
  - Upped some memory requirements in some of the tests. Necessary on aarch64 and ppc64le (and ppc32)
  - Reduced number of parallel jobs on s390x builders as builds tend to fail when stressed
  - Retired armv7hl


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


