# changelog

author: Chris Caron <lead2gold@gmail.com> - 1.9.4-3
changelog:
  - Spec file modernization BZ2377453
  - Translation files patch added to allow v1.9.4 to build corectly


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
  - * CVE-2026-2648: Heap buffer overflow in PDFium
  - * CVE-2026-2649: Integer overflow in V8
  - * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
  - * CVE-2026-3061: Out of bounds read in Media
  - * CVE-2026-3062: Out of bounds read and write in Tint
  - * CVE-2026-3063: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.159-1
changelog:
  - Update to 145.0.7632.159
  - * CVE-2026-3536: Integer overflow in ANGLE
  - * CVE-2026-3537: Object lifecycle issue in PowerVR
  - * CVE-2026-3538: Integer overflow in Skia
  - * CVE-2026-3539: Object lifecycle issue in DevTools
  - * CVE-2026-3540: Inappropriate implementation in WebAudio
  - * CVE-2026-3541: Inappropriate implementation in CSS
  - * CVE-2026-3542: Inappropriate implementation in WebAssembly
  - * CVE-2026-3543: Inappropriate implementation in V8
  - * CVE-2026-3544: Heap buffer overflow in WebCodecs
  - * CVE-2026-3545: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
  - * CVE-2026-3913: Heap buffer overflow in WebML
  - * CVE-2026-3914: Integer overflow in WebML
  - * CVE-2026-3915: Heap buffer overflow in WebML
  - * CVE-2026-3916: Out of bounds read in Web Speech
  - * CVE-2026-3917: Use after free in Agents
  - * CVE-2026-3918: Use after free in WebMCP
  - * CVE-2026-3919: Use after free in Extensions
  - * CVE-2026-3920: Out of bounds memory access in WebML
  - * CVE-2026-3921: Use after free in TextEncoding
  - * CVE-2026-3922: Use after free in MediaStream
  - * CVE-2026-3923: Use after free in WebMIDI
  - * CVE-2026-3924: Use after free in WindowDialog
  - * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  - * CVE-2026-3926: Out of bounds read in V8
  - * CVE-2026-3927: Incorrect security UI in PictureInPicture
  - * CVE-2026-3928: Insufficient policy enforcement in Extensions
  - * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  - * CVE-2026-3930: Unsafe navigation in Navigation
  - * CVE-2026-3931: Heap buffer overflow in Skia
  - * CVE-2026-3932: Insufficient policy enforcement in PDF
  - * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  - * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  - * CVE-2026-3936: Use after free in WebView
  - * CVE-2026-3937: Incorrect security UI in Downloads
  - * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  - * CVE-2026-3939: Insufficient policy enforcement in PDF
  - * CVE-2026-3940: Insufficient policy enforcement in DevTools
  - * CVE-2026-3941: Insufficient policy enforcement in DevTools
  - * CVE-2026-3942: Incorrect security UI in PictureInPicture
  - Fix build errors
  - Refresh patches for new upstream changes
  - Remove patches merged by upstream
  - Hoshino Lina: Update to cef-146.0.6+g68649e2 (rhbz#2450085)


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.75-1
changelog:
  - Update to 146.0.7680.75
  - * CVE-2026-3909: Out of bounds write in Skia
  - * CVE-2026-3910: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
  - * CVE-2026-4439: Out of bounds memory access in WebGL
  - * CVE-2026-4440: Out of bounds read and write in WebGL
  - * CVE-2026-4441: Use after free in Base
  - * CVE-2026-4442: Heap buffer overflow in CSS
  - * CVE-2026-4443: Heap buffer overflow in WebAudio
  - * CVE-2026-4444: Stack buffer overflow in WebRTC
  - * CVE-2026-4445: Use after free in WebRTC
  - * CVE-2026-4446: Use after free in WebRTC
  - * CVE-2026-4447: Inappropriate implementation in V8
  - * CVE-2026-4448: Heap buffer overflow in ANGLE
  - * CVE-2026-4449: Use after free in Blink
  - * CVE-2026-4450: Out of bounds write in V8
  - * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  - * CVE-2026-4452: Integer overflow in ANGLE
  - * CVE-2026-4453: Integer overflow in Dawn
  - * CVE-2026-4454: Use after free in Network
  - * CVE-2026-4455: Heap buffer overflow in PDFium
  - * CVE-2026-4456: Use after free in Digital Credentials API
  - * CVE-2026-4457: Type Confusion in V8
  - * CVE-2026-4458: Use after free in Extensions
  - * CVE-2026-4459: Out of bounds read and write in WebAudio
  - * CVE-2026-4460: Out of bounds read in Skia
  - * CVE-2026-4461: Inappropriate implementation in V8
  - * CVE-2026-4462: Out of bounds read in Blink
  - * CVE-2026-4463: Heap buffer overflow in WebRTC
  - * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
  - * High CVE-2026-4673: Heap buffer overflow in WebAudio
  - * High CVE-2026-4674: Out of bounds read in CSS
  - * High CVE-2026-4675: Heap buffer overflow in WebGL
  - * High CVE-2026-4676: Use after free in Dawn
  - * High CVE-2026-4677: Out of bounds read in WebAudio
  - * High CVE-2026-4678: Use after free in WebGPU
  - * High CVE-2026-4679: Integer overflow in Fonts
  - * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
    * CVE-2026-2648: Heap buffer overflow in PDFium
    * CVE-2026-2649: Integer overflow in V8
    * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
    * CVE-2026-3061: Out of bounds read in Media
    * CVE-2026-3062: Out of bounds read and write in Tint
    * CVE-2026-3063: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 145.0.7632.159-1
changelog:
  - Update to 145.0.7632.159
    * CVE-2026-3536: Integer overflow in ANGLE
    * CVE-2026-3537: Object lifecycle issue in PowerVR
    * CVE-2026-3538: Integer overflow in Skia
    * CVE-2026-3539: Object lifecycle issue in DevTools
    * CVE-2026-3540: Inappropriate implementation in WebAudio
    * CVE-2026-3541: Inappropriate implementation in CSS
    * CVE-2026-3542: Inappropriate implementation in WebAssembly
    * CVE-2026-3543: Inappropriate implementation in V8
    * CVE-2026-3544: Heap buffer overflow in WebCodecs
    * CVE-2026-3545: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
    * CVE-2026-3913: Heap buffer overflow in WebML
    * CVE-2026-3914: Integer overflow in WebML
    * CVE-2026-3915: Heap buffer overflow in WebML
    * CVE-2026-3916: Out of bounds read in Web Speech
    * CVE-2026-3917: Use after free in Agents
    * CVE-2026-3918: Use after free in WebMCP
    * CVE-2026-3919: Use after free in Extensions
    * CVE-2026-3920: Out of bounds memory access in WebML
    * CVE-2026-3921: Use after free in TextEncoding
    * CVE-2026-3922: Use after free in MediaStream
    * CVE-2026-3923: Use after free in WebMIDI
    * CVE-2026-3924: Use after free in WindowDialog
    * CVE-2026-3925: Incorrect security UI in LookalikeChecks
    * CVE-2026-3926: Out of bounds read in V8
    * CVE-2026-3927: Incorrect security UI in PictureInPicture
    * CVE-2026-3928: Insufficient policy enforcement in Extensions
    * CVE-2026-3929: Side-channel information leakage in ResourceTiming
    * CVE-2026-3930: Unsafe navigation in Navigation
    * CVE-2026-3931: Heap buffer overflow in Skia
    * CVE-2026-3932: Insufficient policy enforcement in PDF
    * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
    * CVE-2026-3935: Incorrect security UI in WebAppInstalls
    * CVE-2026-3936: Use after free in WebView
    * CVE-2026-3937: Incorrect security UI in Downloads
    * CVE-2026-3938: Insufficient policy enforcement in Clipboard
    * CVE-2026-3939: Insufficient policy enforcement in PDF
    * CVE-2026-3940: Insufficient policy enforcement in DevTools
    * CVE-2026-3941: Insufficient policy enforcement in DevTools
    * CVE-2026-3942: Incorrect security UI in PictureInPicture


author: Than Ngo <than@redhat.com> - 146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
    * CVE-2026-4439: Out of bounds memory access in WebGL
    * CVE-2026-4440: Out of bounds read and write in WebGL
    * CVE-2026-4441: Use after free in Base
    * CVE-2026-4442: Heap buffer overflow in CSS
    * CVE-2026-4443: Heap buffer overflow in WebAudio
    * CVE-2026-4444: Stack buffer overflow in WebRTC
    * CVE-2026-4445: Use after free in WebRTC
    * CVE-2026-4446: Use after free in WebRTC
    * CVE-2026-4447: Inappropriate implementation in V8
    * CVE-2026-4448: Heap buffer overflow in ANGLE
    * CVE-2026-4449: Use after free in Blink
    * CVE-2026-4450: Out of bounds write in V8
    * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
    * CVE-2026-4452: Integer overflow in ANGLE
    * CVE-2026-4453: Integer overflow in Dawn
    * CVE-2026-4454: Use after free in Network
    * CVE-2026-4455: Heap buffer overflow in PDFium
    * CVE-2026-4456: Use after free in Digital Credentials API
    * CVE-2026-4457: Type Confusion in V8
    * CVE-2026-4458: Use after free in Extensions
    * CVE-2026-4459: Out of bounds read and write in WebAudio
    * CVE-2026-4460: Out of bounds read in Skia
    * CVE-2026-4461: Inappropriate implementation in V8
    * CVE-2026-4462: Out of bounds read in Blink
    * CVE-2026-4463: Heap buffer overflow in WebRTC
    * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
    * High CVE-2026-4673: Heap buffer overflow in WebAudio
    * High CVE-2026-4674: Out of bounds read in CSS
    * High CVE-2026-4675: Heap buffer overflow in WebGL
    * High CVE-2026-4676: Use after free in Dawn
    * High CVE-2026-4677: Out of bounds read in WebAudio
    * High CVE-2026-4678: Use after free in WebGPU
    * High CVE-2026-4679: Integer overflow in Fonts
    * High CVE-2026-4680: Use after free in FedCM


author: Than Ngo <than@redhat.com> - 146.0.7680.177-1
changelog:
  - Update to 146.0.7680.177
    * High CVE-2026-5273: Use after free in CSS
    * High CVE-2026-5272: Heap buffer overflow in GPU
    * High CVE-2026-5274: Integer overflow in Codecs
    * High CVE-2026-5275: Heap buffer overflow in ANGLE
    * High CVE-2026-5276: Insufficient policy enforcement in WebUSB
    * High CVE-2026-5277: Integer overflow in ANGLE
    * High CVE-2026-5278: Use after free in Web MIDI
    * High CVE-2026-5279: Object corruption in V8
    * High CVE-2026-5280: Use after free in WebCodecs
    * High CVE-2026-5281: Use after free in Dawn
    * High CVE-2026-5282: Out of bounds read in WebCodecs
    * High CVE-2026-5283: Inappropriate implementation in ANGLE
    * High CVE-2026-5284: Use after free in Dawn
    * High CVE-2026-5285: Use after free in WebGL
    * High CVE-2026-5286: Use after free in Dawn
    * High CVE-2026-5287: Use after free in PDF
    * High CVE-2026-5288: Use after free in WebView
    * High CVE-2026-5289: Use after free in Navigation
    * High CVE-2026-5290: Use after free in Compositing
    * Medium CVE-2026-5291: Inappropriate implementation in WebGL
    * Medium CVE-2026-5292: Out of bounds read in WebCodecs


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-4
changelog:
  - totemsrp: Return error if sanity check fails
    (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity
    (fixes CVE-2026-35092)


author: Petr Šplíchal <psplicha@redhat.com> - 0.22-1
changelog:
  - Implement `transition` stats for the `jira` plugin (#352)
  - Fix issue with wrong `until` in GitHub search (#376)
  - List resolved jira by tester and contributor field
  - Fix `zammad` token bug, some minor adjustments
  - Better handling auth max retry in jira plugin
  - Handle JSON decode errors in pagure plugin
  - Reuse bodhi connection instead of opening new ones
  - Properly handle timeout in pagure plugin
  - Complete report even on plugin error
  - Better handling on server errors for pagure plugin
  - Better handling of wrong url in confluence plugin
  - Handle timeout fetching batches in jira plugin
  - Fixed Jira updated issues and support timeout
  - Collect stats in parallel
  - Add stats for updated jira tickets
  - Handle rate limiting in Jira plugin
  - Allow to filter out orgs in GitHub plugin
  - Properly collect comments in GitHub
  - Improve items plugin
  - Enable pagure closed PRs stats collection
  - Add hyperkitty support
  - Handle better the GitLab expired token case
  - Increased test coverage
  - Use pytest-xdist for parallelizing test execution
  - Add collection of comments for Pagure
  - Cover markdown format while testing Koji
  - Use tenacity handling retry connection to GitHub
  - Added stats for modified pages in Confluence
  - Allow to skip SSL verification in bugzilla plugin
  - Added markdown support to google plugin
  - Add token authentication to confluence plugin
  - Add markdown support to koji plugin
  - Fetch all created issues correctly in `pagure` (#379)
  - Use custom `user-agent` in the `public_inbox` plugin (#392)
  - Fix dockerfile executable path, add git to container (#354)
  - Support `user`, `org`, `repo` in the `github` plugin (#373)
  - Handle the GitHub rate limit in a better way (#374)
  - Create a Public Inbox Plugin
  - Implement `did last [monday..sunday]`
  - Correctly handle merge commits in verbose mode
  - Prevent duplicates in github issue stats
  - Retry connecting to GitLab API on error
  - Add a `Toolbelt Catalog` entry for `did`
  - Allow skipping events that are not reportable
  - Add a team report example using login aliases
  - Migrate to the `SPDX` identifier


author: Petr Šplíchal <psplicha@redhat.com> - 0.23-1
changelog:
  - Enable `epel-10` building and testing (#454)
  - Implement initial support for `forgejo` stats (#452)
  - Support `merged` pull requests for `github` and `gitlab` (#311)
  - Improve the Jira Cloud implementation (#453)
  - Support Jira Cloud instance (#448)
  - Fix issues reported by CodeQL security scan
  - Add --full-message flag to show complete commit/PR/MR bodies (#446)
  - Avoid fetching thousands of pages from GitLab API (#377)
  - Upgrade to CodeQL Action v4 (#445)
  - Fix parsing of --config argument with whitespace (#437)
  - Fix `GitHub.commented_in_range` (#444)
  - Add type hints to items plugin (#443)
  - Add type hints to Confluence plugin (#442)
  - Add type hints to Jira plugin (#441)
  - Jira issues with worklogs (#429)
  - Enable Python 3.14 support (#440)
  - Add type hints and error handling to Bugzilla plugin (#433)
  - Add type hints and error handling to Bodhi plugin (#432)
  - Fix error handling in config parsing and CLI (#431)
  - Add typing hints to conftest.py (#430)
  - Add type hints to CLI module (#424)
  - Add type annotations on base.py (#423)
  - Fix typing issues reported by mypy (#422)
  - Fix GitLab plugin 60s default timeout (#421)
  - Add unit tests for utils module (#417)
  - Add unit tests for stats module (#414)
  - Fix missing Optional typing (#411)
  - Fix return type for `get_token` in `base.py` (#412)
  - Avoid using variable names used in exceptions (#413)
  - Handle error responses querying GitHub (#408)
  - Fix Zammad plugin by filtering tickets after search (#328)
  - Add `pyproject.toml` (#409)
  - Support retry while fetching `public-inbox` stats
  - Retry bugzilla search query on connection errors
  - Deal with conflicting period options
  - Fix PageModified stat in Confluence plugin
  - Fix Jira transition to state with multiple projects


author: Sander Hoentjen <shoentjen@antagonist.nl> - 1.9.12-1
changelog:
  - Update to 1.9.12
  - Fixes CVE-2026-0396, CVE-2026-0397, CVE-2026-24028, CVE-2026-24029,
    CVE-2026-24030, CVE-2026-27853, CVE-2026-27854


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.30.0-1
changelog:
  - Update to release v0.30.0
  - Resolves: rhbz#2413270
  - Resolves: rhbz#2407614, rhbz#2407881, rhbz#2408158, rhbz#2409066
  - Resolves: rhbz#2409350, rhbz#2409628, rhbz#2410014, rhbz#2410300
  - Resolves: rhbz#2410579, rhbz#2410946, rhbz#2411477, rhbz#2412381
  - Resolves: rhbz#2412530, rhbz#2412682, rhbz#2412762
  - Upstream new features and fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.31.0~rc2-1
changelog:
  - Replace makefile/script build with gobuild macro
  - Upstream moved to a container based build environment which is not
    currently feasible in Fedora
  - Shift to gobuild macro


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Jens Petersen <petersen@redhat.com> - 2.9.2-1
changelog:
  - place .p_dyn_hi files in prof subpkg
  - drop duplicate ghc_merge_filelist definition (mimi1vx)
  - ghc_set_gcc_flags: also silence C backend for riscv64


author: Jens Petersen <petersen@redhat.com> - 2.9.4-1
changelog:
  - ghc-dep.sh: unbreak prof for ghc9.10+
  - ghc_executable_profiling: to configure having detailed backtraces


author: Jens Petersen <petersen@redhat.com> - 2.10.1-1
changelog:
  - allow stderr from ghc_version
  - ghcplatform: use ppc64le for now (#2435862, needed for F44 Cabal-3.12+ hadrian)


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.3-15
changelog:
  - rebuild with ghc-rpm-macros-2.11
  - add ppc64le arch patches for ghc-platform and rts.cabal (#26870)
  - ppc64le NCG: add an upstream patch for the clrrxi instruction


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.2-1
changelog:
  - Update to 1.4.2, support for DNS-persist challenge
  - Resolves: rhbz#2434366 FTBFS in Fedora rawhide/f4
  - Resolves: rhbz#2438330 1.4.2 is available


author: Pavol Sloboda <pavol.sloboda02@gmail.com> - 2.6.2-3
changelog:
  - fix: fixed the BuildRequires of mariadb-devel package the mariadb-
    connector-c-devel package is available for all RHEL versions from version
    8 and above, as version 7 is quite old this condition is not necessary
    and all packages should use the BuildRequires of mariadb-connector-c-
    devel instead of mariadb-devel if possible


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.4-0]
changelog:
  - media: ipu-bridge: Add upside-down sensor DMI quirk for Dell XPS 13 9340 and XPS 14 9440 (Hans de Goede)
  - Linux v6.19.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.6-0]
changelog:
  - net: macb: Fix tx/rx malfunction after phy link down and up (Kevin Hao)
  - net: macb: Replace open-coded device config retrieval with of_device_get_match_data() (Kevin Hao)
  - net: macb: convert to use .get_rx_ring_count (Breno Leitao)
  - net: cadence: macb: Discard pm_runtime_put() return value (Rafael J. Wysocki)
  - arm64: dts: broadcom: bcm2712: Add watchdog DT node (Stanimir Varbanov)
  - arm64: dts: broadcom: bcm2712: Enable RNG (Peter Robinson)
  - fedora: minor beeper cleanups (Peter Robinson)
  - Add config introduced in 6.19.4 (Justin M. Forbes)
  - Linux v6.19.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.7-0]
changelog:
  - Add some BugsFixed by 6.19.7 (Justin M. Forbes)
  - drm/i915/psr: Compute psr_entry_setup_frames into intel_crtc_state (Jouni Högander)
  - drm/i915/psr: Disable PSR on update_m_n and update_lrr (Jouni Högander)
  - Turn on GPIB for Fedora (Justin M. Forbes)
  - drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling (Jouni Högander)
  - drm/dp: Add definition for Panel Replay full-line granularity (Jouni Högander)
  - drm/i915/display: Allow async flip when Selective Fetch is enabled (Jouni Högander)
  - drm/i915/psr: Perform full frame update on async flip (Jouni Högander)
  - drm/i915/psr: Set plane id bit in crtc_state->async_flip_planes for PSR (Jouni Högander)
  - drm/i915/psr: Move sink_sync_latency to intel_connector (Jouni Högander)
  - drm/i915/psr: Move sink PSR and Panel Replay booleans to intel_connector (Jouni Högander)
  - drm/i915/psr: Move Panel Replay DSC sink support data to intel_connector (Jouni Högander)
  - drm/i915/psr: Clear pr_dpcd as well on disconnect (Jouni Högander)
  - drm/i915/psr: Move pr_dpcd and psr_dpcd to intel_connector (Jouni Högander)
  - drm/i915/psr: Compute Panel Replay/Adaptive Sync coexistence behavior (Jouni Högander)
  - drm/i915/psr: Use SU granularity information available in intel_connector (Jouni Högander)
  - drm/i915/psr: Add panel granularity information into intel_connector (Jouni Högander)
  - Work around binutils update in s390x perf (Justin M. Forbes)
  - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Antheas Kapenekakis)
  - Revert the UKI dtbloader for F42 (Justin M. Forbes)
  - Turn on release_targets for F43/F42 (Justin M. Forbes)
  - Linux v6.19.7


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.19.8-0]
changelog:
  - Fix mute LED on HP OmniBook 7 Laptop 16 (Justin M. Forbes)
  - Add Lenovo bug to BugsFixed for 6.19.8 (Justin M. Forbes)
  - Turn on Uniwill x86 platform driver (Justin M. Forbes)
  - ASoC: SDCA: Add ASoC jack hookup in class driver (Charles Keepax)
  - Linux v6.19.8


author: Augusto Caringi <acaringi@redhat.com> [6.19.9-0]
changelog:
  - arm64: dts: broadcom: bcm2712-rpi: Move the firmware node down 1 level (Rob Herring (Arm))
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: update uart10 interrupt (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-d-rpi-5-b: add fixes for pinctrl/pinctrl_aon (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712-rpi-5-b: add pinctrl properties for csi i2cs (Gregor Herburger)
  - arm64: dts: broadcom: bcm2712: add camera backend node pispbe (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add csi nodes (Gregor Herburger)
  - arm64: dts: broadcom: rp1: add i2c controller (Gregor Herburger)
  - mfd: bcm2835-pm: Add BCM2712 PM device support (Phil Elwell)
  - mfd: bcm2835-pm: Introduce SoC-specific type identifier (Phil Elwell)
  - arm64: dts: broadcom: bcm2712: Add V3D device node (Maíra Canal)
  - pmdomain: bcm: bcm2835-power: Fix broken reset status read (Maíra Canal)
  - arm64: dts: imx93-11x11-frdm: enable additional devices (Francesco Valla)
  - arm64: dts: imx93-11x11-frdm: Add MQS audio support (Daniel Baluta)
  - arm64: dts: freescale: add support for NXP i.MX93 FRDM (Fabian Pflug)
  - Revert "Fix mute LED on HP OmniBook 7 Laptop 16" (Justin M. Forbes)
  - Linux v6.19.9


author: Augusto Caringi <acaringi@redhat.com> [6.19.10-0]
changelog:
  - Add entries for 6.19.10 to BugsFixed (Justin M. Forbes)
  - Documentation: hid: intel-ish-hid: Document PRODUCT_FAMILY firmware matching (Vishnu Sankar)
  - HID: intel-ish-hid: loader: Add PRODUCT_FAMILY-based firmware matching (Vishnu Sankar)
  - Add BugsFixed for 6.19.10 (Justin M. Forbes)
  - drm/amdgpu: rework how we handle TLB fences (Alex Deucher)
  - Linux v6.19.10


author: Augusto Caringi <acaringi@redhat.com> [6.19.11-0]
changelog:
  - Add to BugsFixed for 6.19.11 (Justin M. Forbes)
  - Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" (Justin M. Forbes)
  - fedora: arm64: Make qcom geni i2c-adapter and i2c-hid-of drivers builtin (Hans de Goede)
  - redhat/kernel.spec: add aarch64 to fedora secure boot list (Jeremy Cline)
  - Linux v6.19.11


author: Augusto Caringi <acaringi@redhat.com> [6.19.11-100]
changelog:
  - Revert "redhat/kernel.spec.template: Fix indentation of uki-virt generation code" (Justin M. Forbes)
  - Revert "redhat/kernel.spec.template: Simplify uki-virt signing" (Justin M. Forbes)
  - Revert "redhat/kernel.spec.template: Add kernel-uki-dtbloader sub-package" (Justin M. Forbes)
  - Revert "redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r" (Justin M. Forbes)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.287-3
changelog:
  - Add explicit folder definitions for cases where XDG Base Directory spec
    variables are not defined


author: Sandro Mani <manisandro@gmail.com> - 2.43.1-6
changelog:
  - Backport fixes for CVE-2025-11081, CVE-2025-11839, CVE-2025-11840,
    CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647,
    CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651,
    CVE-2025-69652, CVE-2026-4647


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.0-1
changelog:
  - 64a84db feat: Add support for translanting job-owner of kickstart (David Pascual)
  - 868523c feat: Add translantion for kernel_options and kernel_options_post (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - cee2f5b fix : Not try to login beaker hub unless needed (David Pascual)
  - 75eb8ea chore: Release version 1.23.3 (github-actions)
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.4-1
changelog:
  - 75d8c3b chore: Enable epel-10 builds in Packit (David Pascual)
  - 4a98123 fix: Support pass fetch_url to task (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.5-1
changelog:
  - b46c7c4 chore: Bump python-semantic-release to fix release issue (David Pascual)
  - 033e1f7 chore(packit): Update epel spec for fedora propose upstream (David Pascual)
  - aeb12fe fix: Enforce beaker-client 29.2 to fix fetch_url error (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.24.0-1
changelog:
  - 39e9d79 feat: Add support to pass watchdog panic="ignore" in Beaker recipe (David Pascual)
  - 801ef4b fix: Fix nested and/or issue (David Pascual)
  - fad14c2 test: Add _translate_constraint test (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.25.0-1
changelog:
  - 8ed12e7 feat: Add support for Beaker group key (David Pascual)
  - 8e6ab07 fix: Revert commit 0cabc75 (David Pascual)


author: - 1.26.0-1
changelog:
  - a702da2 fix: Pin setuptools<82 to restore pkg_resources for beaker-client (Rizwan Shaikh)
  - cf48126 feat: add EC2 UserData support for AWS provider (Rizwan Shaikh)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-3
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.1-1
changelog:
  - rebase to 1.26.1 (rhbz#2352660)
  - various bugfixes
  - build with brotli compression
  - build with barcode support on Fedora
  - new CSV output format


author: Michael J Gruber <mjg@fedoraproject.org> - 1.26.3-1
changelog:
  - rebase to 1.26.3 (rhbz#2352660)
  - various bugfixes
  - build with brotli compression
  - build with barcode support on Fedora
  - new CSV output format


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Update images dependency ref to latest (#2299)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2305)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2296)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260101 (#2297)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260112 (#2306)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: introduce manifest guide (#2175)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - monitor: deep copy stage options in JSONSeqMonitor (#2293)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai, Simon Steinbeiß, Tomáš Hozza
    - stages/kickstart: support containers-storage transport (#2264)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/rpm: add option to ignore key import errors (HMS-9986) (#2301)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - stages/rpm: add support for setting the rpmkeys binary (#2303)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    - stages: add force option to org.osbuild.groups (#2304)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-14


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add V2 Solver API with complete package metadata, per-transaction results, and RHSM secrets discovery (HMS-10029) (#2287)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    - Add tests for PQC key handling in osbuild [HMS-10057] (#2310)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Makefile: new target: rpm-nocheck (#2309)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2308)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260118 (#2312)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Add RHEL10 x86 and ARM COPR builds (#2311)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - stages: fix org.osbuild.ostree.grub2 permissions (#2307)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Brian C. Lane
    - test: add a wait to mitigate race condition (#2314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: add one-block tolerance to fscache test (#2316)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: increase sendmsg test size (#2315)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 171-1
changelog:
  Changes with 171
  ----------------
    - Improve robustness of --in-vm support (#2292)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support running bootc-image-builder with --in-vm (#2328)
      - Author: Alexander Larsson, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bootc.install.config: add ostree.bls-append-except-default option (#2319)
      - Author: Joel Capitao, Reviewers: Brian C. Lane, Simon de Vlieger
    - grub2.iso: configurable entries (HMS-10018, HMS-10015) (#2317)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Ondřej Budai
    - mockbuild: fix PQC builds on RHEL 10 (#2327)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - monitor: Report if the runner is running in a vm (#2320)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-27


author: Packit <hello@packit.dev> - 172-1
changelog:
  Changes with 172
  ----------------
    - SPEC: initrd sub-package fixups and exclude i686 arch on el (#2334)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2333)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260201 (#2330)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild-mpp: Refactor to use osbuild.solver module (#2331)
      - Author: Mark Kemel, Reviewers: Nobody
    - test_objectstore: add time.sleep(0.1) to solve flaky tests (#2318)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-02-06


author: Packit <hello@packit.dev> - 173-1
changelog:
  Changes with 173
  ----------------
    - Revert "test_objectstore: add time.sleep(0.1) to solve flaky tests" (#2340)
      - Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: disable tests that tend to fail during rpmbuild in Koji (HMS-9796) (#2338)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2341)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260208 (#2335)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - stages/module-config: postfix with `.module` (#2344)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-11


author: Packit <hello@packit.dev> - 174-1
changelog:
  * Fix packaging conflict in initrd directory causing downgrade failures by @thozza in https://github.com/osbuild/osbuild/pull/2347
   * stages/bootc.install-to-fs: add bootupd-skip-boot-uuid option by @jbtrystram in https://github.com/osbuild/osbuild/pull/2345
   * qemu: Don't always pass -cpu host by @alexlarsson in https://github.com/osbuild/osbuild/pull/2356
   * spec: drop typer-slim dependency and use only python3-typer by @achilleas-k in https://github.com/osbuild/osbuild/pull/2358
   * qemu: Handle container storage.conf not listing graphroot by @alexlarsson in https://github.com/osbuild/osbuild/pull/2357
   * stages/erofs: quiet stdout by @supakeen in https://github.com/osbuild/osbuild/pull/2359
   * qemu: Default to 3GB vm instead of 4GB by @alexlarsson in https://github.com/osbuild/osbuild/pull/2361


   **Full Changelog**: https://github.com/osbuild/osbuild/compare/v173...v174


author: Packit <hello@packit.dev> - 176-1
changelog:
  Changes with 176
  ----------------
    - CI: run tests on 9.7+10.1 GA and 9.8+10.2 nightly (HMS-9794) (#2351)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Revert "schutzbot: update libsemanage before installing osbuild" (#2378)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Solver: fix `repo_ids` to restrict all dependency resolution, not just top-level packages (HMS-10314) (#2379)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - Solver: implement per-transaction package excludes in the DNF5 solver (HMS-10318) (#2381)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2383)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Tomáš Hozza
    - Update osbuild-ci container images (#2367)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - Update snapshots to 20260308 (#2382)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: shift manifest guide headings one level down (#2385)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - solver: add cost field to Repository model (#2380)
      - Author: Mark Kemel, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/rpm: add nodeps option for `rpm install --nodeps` (#2387)
      - Author: Dusty Mabe, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages: add coreos.bfb for NVIDIA BlueField DPUs (#2349)
      - Author: Sagi Zigmon, Reviewers: Nobody

  — Somewhere on the Internet, 2026-03-11


author: Packit <hello@packit.dev> - 177-1
changelog:
  Changes with 177
  ----------------
    - Add stages used for building s390x isos (HMS-9967) (#2390)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - SPEC: default to using DNF5 depsolver on Fedora 45+ (current Rawhide) (HMS-10343) (#2389)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to support building ppc64le isos (HMS-9968) (#2377)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2394)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2392)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260315 (#2393)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20260322 (#2397)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Anna Vítová
    - buildroot: Use bwrap's --drop-cap ALL (#2395)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Alexander Larsson
    - chore: clean up team ssh keys (#2391)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Anna Vítová, Tomáš Hozza
    - cli: Print checkpoint cache status (#2388)
      - Author: Lars Karlitski, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - stages/aleph: make path parametrizable (#2384)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - tools/osbuild-store: do stuff with sources and store (HMS-10238) (#2364)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-03-26


author: Packit <hello@packit.dev> - 178-1
changelog:
  Changes with 178
  ----------------
    - Packit: disable s390x builds in COPR (#2406)
      - Author: Tomáš Hozza, Reviewers: Anna Vítová, Simon de Vlieger
    - Support uri encoded urls (#2405)
      - Author: Justin Sherrill, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update osbuild-ci container images (#2408)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update snapshots to 20260329 (#2403)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stage: flatpak.build-import-bundle.oci (HMS-10170) (#2400)
      - Author: Simon de Vlieger, Reviewers: Dusty Mabe, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2026-04-02


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Remi Collet <remi@remirepo.net> - 12.5.9-1
changelog:
  - update to 12.5.9
  - raise dependency on phpunit/php-file-iterator 6.0.1
  - re-add dependency on sebastian/recursion-context 7.0.1


author: Jan Rybar <jrybar@redhat.com> - 124-4
changelog:
  - pkla-compat is now recommends: pkla is obsolete and binaries are run every time
  - polkitbackend watches only session changes to reduce cpu usage
  - PolkitPermission: only sessions that really changed state send CheckAuthorization


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.2-4
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-4
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


