# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.2-4
changelog:
  - Update to 3.1.2-4
  - Resolves: Issue 6489 - After log rotation refresh the FD pointer
  - Resolves: Issue 6554 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)
  - Resolves: Issue 6555 - Potential crash when deleting a replicated backend


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Update to 3.1.3-2
  - Resolves: Issue 5120 - Fix compilation error
  - Resolves: Issue 6782 - Improve paged result locking
  - Resolves: Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  - Resolves: Issue 6822 - Backend creation cleanup and Database UI tab error
    handling (#6823)
  - Resolves: Issue 6753 - Add 'add_exclude_subtree' and
    'remove_exclude_subtree' methods to Attribute uniqueness plugin
  - Resolves: Issue 6857 - uiduniq: allow specifying match rules in the
    filter
  - Resolves: Issue 6756 - CLI, UI - Properly handle disabled NDN cache
    (#6757)
  - Resolves: Issue 6854 - Refactor for improved data management (#6855)
  - Resolves: Issue 6850 - AddressSanitizer: memory leak in mdb_init
  - Resolves: Issue 6848 - AddressSanitizer: leak in do_search
  - Resolves: Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  - Resolves: Issue 6868 - UI - schema attribute table expansion break after
    moving to a new page
  - Resolves: Issue 6859 - str2filter is not fully applying matching rules
  - Resolves: Issue 6872 - compressed log rotation creates files with world
    readable permission
  - Resolves: Issue 6888 - Missing access JSON logging for TLS/Client auth
  - Resolves: Issue 6772 - dsconf - Replicas with the "consumer" role allow
    for viewing and modification of their changelog. (#6773)
  - Resolves: Issue 6893 - Log user that is updated during password modify
    extended operation
  - Resolves: Issue 6901 - Update changelog trimming logging
  - Resolves: Issue 6430 - implement read-only bdb (#6431)
  - Resolves: Issue 6663 - Fix NULL subsystem crash in JSON error logging
    (#6883)
  - Resolves: Issue 6895 - Crash if repl keep alive entry can not be created
  - Resolves: Issue 6884 - Mask password hashes in audit logs (#6885)
  - Resolves: Issue 6778 - Memory leak in
    roles_cache_create_object_from_entry part 2
  - Resolves: Issue 6901 - Update changelog trimming logging - fix tests
  - Resolves: Issue 6181 - RFE - Allow system to manage uid/gid at startup
  - Resolves: Issue 6468 - CLI - Fix default error log level
  - Resolves: Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  - Resolves: Issue 6430 - Fix build with bundled libdb


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Dominik Mierzejewski <dominik@greysector.net> - 3.6.2.7-1
changelog:
  - update to 3.6.2.7
  - switch build system to cmake
  - unbundle miniz
  - update SPDX expression in License: field after review


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-2
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    - ipareplica: Pass ipareplica_ip_addresses to client deployment part
    - ipagroup: Correctly handle externalmember in member actions
    - ipasudorule: Evaluate all members related to hosts and users
    - ipacert: Correctly handle removFromCRL revocation
    - Collection: No more role module duplication
    - Enabled CentOS 10 Stream tests


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.3
    - Fix management of AD objects for ipagroup


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.4
    - Fix management of AD objects for ipagroup


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.5
    - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)


author: Thomas Woerner <twoerner@redhat.com> - 1.14.6-1
changelog:
  - Update to version 1.14.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.6
    - Fix CA certificates iteration in ipaclient role


author: Thomas Woerner <twoerner@redhat.com> - 1.14.7-1
changelog:
  - Update to version 1.14.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.7
    - ipaclient: Second hotfix for dns_over_tls


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - DNS over TLS support for ipaserver, ipareplica and ipaclient deployment
      roles
    - ipaidrange: Enforce requirement of baserid and secondarybaserid for ID
      ranges
    - Fix ipaserver and ipareplica deployment roles for use in Mitogen


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.15.0
    - ipaclient: client_dns has new statestore arg with IPA change e6445b8


author: Thomas Woerner <twoerner@redhat.com> - 1.16.0-1
changelog:
  - Update to version 1.16.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0
    - Add support for passkey management
    - Add support for sysaccount management
    - ipadnsrecord: Allow to set any IP address if create_reverse is false
    - Add support for ansible-core 2.19


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Simone Caronni <negativo17@gmail.com> - 30.0-1
changelog:
  - Update to 30.0
  - Drop version for bundles, it contains snapshots for most libraries.
  - Drop removed BDB bits, adjust docs and information.
  - Add new metapackage with multiprocess bitcoin programs and new meta
    command "bitcoin".
  - Package a standalone libbitcoinkernel, which is used by the new IPC
    programs.
  - Set a shared object version on libbitcoinkernel that matches with the
    major release.


author: Than Ngo <than@redhat.com> - 143.0.9^chromium143.0.7499.40-1
changelog:
  - Update to 143.0.7499.40
  - Hoshino Lina: Update to cef-143.0.9+ge88e818 (rhbz#2420939)
  - * High CVE-2025-13630: Type Confusion in V8
  - * High CVE-2025-13631: Inappropriate implementation in Google Updater
  - * High CVE-2025-13632: Inappropriate implementation in DevTools
  - * High CVE-2025-13633: Use after free in Digital Credentials
  - * Medium CVE-2025-13634: Inappropriate implementation in Downloads
  - * Medium CVE-2025-13720: Bad cast in Loader
  - * Medium CVE-2025-13721: Race in v8
  - * Low CVE-2025-13635: Inappropriate implementation in Downloads
  - * Low CVE-2025-13636: Inappropriate implementation in Split View
  - * Low CVE-2025-13637: Inappropriate implementation in Downloads
  - * Low CVE-2025-13638: Use after free in Media Stream
  - * Low CVE-2025-13639: Inappropriate implementation in WebRTC
  - * Low CVE-2025-13640: Inappropriate implementation in Passwords
  - Drop workaround darkmode-image-policy.patch
  - Fix build error due to Unresolved dependencies
  - Fix swiftshader to compile with llvm-16.0
  - Refresh python-3.9-ftbfs patch for el9
  - Refresh ppc64le patches
  - Refresh chromium.conf


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
  - * High: Under coordination
  - * Medium CVE-2025-14372: Use after free in Password Manager
  - * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them
    unreadable
  - Hoshino Lina: Update to cef-143.0.10+g8aed01b (rhbz#2421703)


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146 [rhbz#2423482]
  - * High CVE-2025-14765: Use after free in WebGPU
  - * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as
    it's merged


author: Than Ngo <than@redhat.com> - 143.0.13^chromium143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192 [rhbz#2427842]
  - * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for
    x86_64/aarch64
  - Enable build for epel10.1


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - backend: add script to migrate pulp.json to Pulp labels
  - backend: add function to get pulp object based on its href
  - backend: pass build ID to upload_build_results
  - backend: more log "checkpoints" for build worker


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Set pulp_labels at RPM upload time.
  - Wait on add_and_remove task to finish
  - Switches PulpStorage to using the synchronous RPM upload API
  - Specify charset in lighttpd mimetypes
  - Fix waiting for Pulp copr_base repository
  - Create one repository version and publication per chroot
  - Optimize copr_log_hitcounter for memory


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Improve robustness and cooperation with rpmbuild
  - Don't run createrepo_c for migrated projects
  - Implement Pulp forking
  - Fix Pulp builds for CoprDirs
  - Adds batching to add_content() and delete_content() in Pulp client.
  - Explicitly set home directory and shell for the user
  - Make sure every PULP api call is logged
  - Set retain_package_versions and retain_repo_versions on repositories
  - Fix race condition in BatchedCreaterepo
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove el7 condition
  - Drop the 'Z' suffix from timestamp
  - Switch RPM upload to the synchronous API from pulp_rpm
  - Fix false-positive failures for build deletion
  - Fix ftbfs for deepcopy not able to handle itertools.count


author: Jakub Kadlcik <frostyx@email.cz> 2.8-1
changelog:
  - Don't traceback when trying to run branch action for second time
  - Implement branch-fedora support for Pulp projects
  - Add a helper script to query Pulp results
  - Handle unsuccessful Pulp requests
  - Don't upload results to Pulp in parallel


author: Jakub Kadlcik <frostyx@email.cz> 2.9-1
changelog:
  - Log the error message that we got from Pulp
  - Fix duplicate NEVRA error when migrating projects to Pulp
  - Fix sub-project handling in the copr-change-storage script


author: Jakub Kadlcik <frostyx@email.cz> 2.10-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Log conflicting NEVRAs when uploading
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.11-1
changelog:
  - timeout= for requests was missing, use SafeRequest
  - copr_prune_results: bigger file limit
  - Move pulp-redirect.txt to persistent storage
  - Wait until both copr_base and copr_coprdir exist
  - Set user agent for Pulp requests to crc-pulp-client
  - Set longer timeout for Pulp file uploads
  - Fix deleting project from pulp
  - Drop requirement on pytz
  - Add Pagination for PulpClient.get_content
  - Implement chunked uploads to Pulp
  - Add option to migrate all projects for an owner


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.6-1
changelog:
  - rebase to latest upstream version (rhbz#2338620)
  - sync i18n patch with SUSE (Kudos to Berny Völker!)


author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Petr Lautrbach <lautrbach@redhat.com> - 1.3.5-2
changelog:
  - Modify queue to use ring buffer
  - Fix memory leaks in the AVL tests
  - Do not exit in do_database_reload when stop in progress
  - Add /var/lib/fapolicyd to tmpfiles
  - Fix owner:group of /etc/fapolicyd on boot
  - Change /usr/share/fapolicyd to root:root


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.9-1
changelog:
  - Version 0.1.9 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-9-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.10-1
changelog:
  - Version 0.1.10 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-10-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.11-1
changelog:
  - Version 0.1.11 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-11-released/


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.12-1
changelog:
  - Version 0.1.12 release of Loadouts for Genshin Impact
  - Announcement - https://gridhead.net/loadouts-for-genshin-impact-v0-1-12-released/


author: Florian Weimer <fweimer@redhat.com> - 2.41-7
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 6e489c17f827317bcf8544efefa65f13b5a079dc:
  - ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
  - ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc: Optimized strncmp for power10" (CVE-2025-5745)
  - elf: Keep using minimal malloc after early DTV resize (bug 32412)
  - nptl: Fix pthread_getattr_np when modules with execstack are allowed (BZ 32897)


author: Florian Weimer <fweimer@redhat.com> - 2.41-9
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit e7c419a2957590fb657900fc92a89708f41abd9d:
  - iconv: iconv -o should not create executable files (bug 33164)
  - CVE-2025-8058: Fix double-free after allocation failure in regcomp (#2383154)


author: Florian Weimer <fweimer@redhat.com> - 2.41-10
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 513629b14d43bffd83985ffb9cf10e5599e649d2:
  - elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
  - elf: Extract rtld_setup_phdr function from dl_main
  - elf: Do not add a copy of _dl_find_object to libc.so
  - stdlib: resolve a double lock init issue after fork [BZ #32994]


author: Florian Weimer <fweimer@redhat.com> - 2.41-11
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit a52c9b75c70124fe4f69e6b0ed288e2c14bd7ce9:
  - Optimize __libc_tsd_* thread variable access
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Update ___tls_get_addr to preserve vector registers
  - elf: Preserve _rtld_global layout for the release branch
  - elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
  - elf: Fix handling of symbol versions which hash to zero (bug 29190)
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - elf: Compile _dl_debug_state separately (bug 33224)
  - elf: Restore support for _r_debug interpositions and copy relocations
  - elf: Introduce _dl_debug_change_state
  - elf: Introduce separate _r_debug_array variable
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
  - Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
  - Remove <libc-tsd.h>
  - AArch64: Improve codegen SVE log1p helper
  - AArch64: Optimise SVE FP64 Hyperbolics
  - AArch64: Optimize SVE exp functions
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Optimize algorithm in users of SVE expf helper
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-12
changelog:
  - Auto-sync with upstream branch master,
    commit 6a0b8e366520a09722aef6c17ec1b103e82f3c28:
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601) (Florian Weimer)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: update tests for SME (Yury Khrustalev)
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-13
changelog:
  - Auto-sync with upstream branch master,
    commit c96b4ed1e26f06ebc56c17ba2c29d1647be68c1e:
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704) (Sunil K Pandey)
  - support: Exit on consistency check failure in resolv_response_add_name (Florian Weimer)
  - support: Fix FILE * leak in check_for_unshare_hints in test-container (Florian Weimer)
  - sprof: fix -Wformat warnings on 32-bit hosts (Collin Funk)
  - sprof: check pread size and offset for overflow (DJ Delorie)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-17
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.2-3
changelog:
  - hp-plugin failed checksum due usage of different hashes (fedora#2361230)
  - output is not seen after installing plugin (fedora#2361230)


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.25.6-1
changelog:
  - hp-scan command failed to run and gives an error (fedora#2395809)
  - use new GPG key from HP - new key was used as fix for CVE-2025-43023


author: Packit <hello@packit.dev> - 37-1
changelog:
  Changes with 37
  ----------------
    - Support uploading to libvirt (#300)
      - Author: Jakub Kadlčík, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - blueprintload: improve error message in Load (#333)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza
    - doc: mention CentOS (#336)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update to v0.197.0 (#326)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - main: add `--bootc-build-ref` option to set build container (#325)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: add missing test container cleanups (#330)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: check that we get the expected image types (HMS-9426) (#320)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Ondrej Holy <oholy@redhat.com> - 1.1.22-2
changelog:
  - Use 
  %setup        -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-doc-Don-t-document-internal-endian-macros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-disabled-foxconn-487-e111-id.-https-github.com-libmt.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.1-1
changelog:
  - Update to v7.10.1
    Fixes rhbz#2357284
  - Add patch to fix deprecation of the <ciso646> header for C++17


author: Björn Esser <besser82@fedoraproject.org> - 1:7.10.3-1
changelog:
  - Update to v7.10.3
    Fixes rhbz#2401105
  - Drop patch to fix deprecation of the <ciso646> header for C++17,
    solved upstream


author: Terje Rosten <terjeros@gmail.com> - B.02.20-10
changelog:
  - Improve cmake patch to get all required flags added
  - Increase required cmake version
  - Update to latest commit 209f83


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.2-1
changelog:
  - Update to release v28.5.2
  - Resolves: rhbz#2412743
  - Incorporates runc v1.3.3
  - Upstream bug fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-1
changelog:
  - Update to release v29.0.0
  - Upstream note: "This release includes several breaking changes and
    deprecations. Review the release notes carefully before upgrading."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-2
changelog:
  - Amend tests in %check
  - Expand tests found in submodules using -F parameter to gocheck2
  - v29.0.0 changes  Co-authored-by: Maxwell G <maxwell@gtmx.me>


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.2-2
changelog:
  - Remove flaky tests from %check
  - TestSCTP6Proxy is flaky on x86_64 arch - usually working but sometimes
    not
  - TestSCTP6ProxyNoListener often fails on ppc64le (rawhide)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.3-1
changelog:
  - Update to release v29.1.3
  - Resolves: rhbz#2417969
  - Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
  - Upstream new features and fixes


author: Pavel Raiskup <praiskup@redhat.com> 41.5-1
changelog:
  - Fedora 39 EOL
  - fix openSUSE-tumbleweed update failure during the second build (duli4868@gmail.com)
  - use non development bootstrap image for CentOS Stream 10 (romain.geissler@amadeus.com)
  - remove ELN ResilientStorage repos (yselkowi@redhat.com)
  - update ELN bootstrap image (yselkowi@redhat.com)
  - Add epel and epel-testing repos to the EPEL 10 config (carlwgeorge@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 42.2-1
changelog:
  - fix: expand Oracle Linux distro_id from ol to oraclelinux
    (avi.miller@oracle.com)
  - Navy Linux 8 configuration fixes (adil@linux.com)
  - EuroLinux end-of-life (praiskup@redhat.com)
  - bugfix: upgrade openeuler chroots to latest release and fix gpg check failed
    in 20.03 (pkwarcraft@gmail.com)
  - Add Azure Linux 3 configuration (negativo17@gmail.com)
  - Add Azure Linux 2 configuration (negativo17@gmail.com)
  - Add Kylin 10 configuration files (negativo17@gmail.com)
  - Add AlmaLinux Kitten 10 + EPEL 10 configs (ngompa@almalinux.org)
  - Add AlmaLinux Kitten 10 configs (ngompa@almalinux.org)
  - Add openSUSE Leap 15.6, move openSUSE Leap 15.5 to eol (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Michal Schorm <mschorm@redhat.com> - 8.0.41-2
changelog:
  - Switch from the RPM scriptlet to the sysusers.d configuration
    for 'mysql' user / group creation
  - We no longer enforce the fixed UID/GID 27 !!!


author: David Abdurachmanov <davidlt@rivosinc.com> - 8.4.7-5
changelog:
  - Disable numactrl and libquadmath on risc-v
  - Disable ld.gold on risc-v
  - Add list of skipped tests for risc-v


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.0.1-1
changelog:
  - Update to 3.0.1
  - Bugfix release, with the exception of adplug adding support for "Palladix" files.


author: Packit <hello@packit.dev> - 156-1
changelog:
  Changes with 156
  ----------------
    - stages/vagrant: allow configuring synced folders (HMS-6116) (#2143)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-15


author: Packit <hello@packit.dev> - 157-1
changelog:
  Changes with 157
  ----------------
    - Add ability to set grub2 default menu entry (#2156)
      - Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    - Add support for optional fips menu (#2153)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2155)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2157)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - org.osbuild.coreos.live-artifacts.mono: read os name from /usr/lib/os-release (#2148)
      - Author: Bipin B Narayan, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    - stages/ignition: parametrize the path to boot (#2149)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-30


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - New script: update test manifests (#2140)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2162)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2164)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20250730 (#2159)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - stages/tar: add --numeric-owner option [RHEL-102854] (#2144)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-08-13


author: Packit <hello@packit.dev> - 159-1
changelog:
  Changes with 159
  ----------------
    - Update images dependency ref to latest (#2166)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20250815 (#2165)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild/solver/dnf.py: Add support for DNF variables for osbuild repos (#2064)
      - Author: Josue David Hernandez, Reviewers: Nobody
    - readme/monitor: add development info / fix monitor and add duration (#2154)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - spec: explicitly buildrequire python-setuptools (#2171)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    - stages/bootc.install-to-filesystem: add more knobs (#2152)
      - Author: Jean-Baptiste Trystram, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/coreos.live-artifacts: rework volume ID handling (#2169)
      - Author: Jonathan Lebon, Reviewers: Michael Vogt, Simon de Vlieger
    - stages: extend test_bootc_install_to_fs test for new options (#2167)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-08-27


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update images dependency ref to latest (#2194)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update images dependency ref to latest (#2199)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20250915 (#2193)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - osbuild: add/use new `api.get_exception_from_msg()` helper (#2201)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild: handle exception from the _message() in BaseAPI() (#2197)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/systemd-repart: introduce systemd-repart (#2189)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt

  — Somewhere on the Internet, 2025-09-24


author: Packit <hello@packit.dev> - 163-1
changelog:
  Changes with 163
  ----------------
    - Run tests in Fedora RPM build (#2116)
      - Author: Karolina Surma, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2217)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: document `--cache` flag (#2213)
      - Author: Florian Schüller, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gitlab: build RPMs for Fedora 43 (#2183)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - monitor: collect metadata alongside the result of a stage (#2215)
      - Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    - schutzbot/mockbuild: use the global AWS credentials (#2221)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-22


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - Stages: remove `org.osbuild.dnf*.sbom.spdx` (#2234)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support building pipelines in a VM (#2228)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2223)
      - Author: SchutzBot, Reviewers: Ondřej Budai, Simon de Vlieger
    - Update images dependency ref to latest (#2231)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2235)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - move container_mount into library; support mpp-resolve for org.osbuild.containers-storage (#2222)
      - Author: Dusty Mabe, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - org.osbuild.treeinfo: new stage to create .treeinfo files (#2200)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - schutzbot: update terraform ID (#2232)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Sanne Raymaekers
    - stages/dracut.conf: `remove_items` (#2225)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stages/dracut: `remove` (#2224)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stages: add new ln stage (#2226)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/mod: new test file for the util/containers.py library (#2230)
      - Author: Dusty Mabe, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-05


author: Packit <hello@packit.dev> - 166-1
changelog:
  Changes with 166
  ----------------
    - Refactor Solver API to Support Versioning (HMS-9062) (#2246)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to help support bootc PXE images (#2251)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2255)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2262)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - github: free disk space before running unit tests (#2256)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - manifest-tests-install-deps: make unzip quiet (#2254)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß, Simon de Vlieger
    - monitor: add module options to JSON logger (#2244)
      - Author: Albert Esteve, Reviewers: Achilleas Koutsou, Brian C. Lane
    - org.osbuild.kickstart: add bootc support (HMS-9732) (#2242)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - runner: add new `minimal_passwd()` helper and use in linux (#2260)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - sources: add quoting to librepos "path" component (#2253)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-12-03


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Update images dependency ref to latest (#2299)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2305)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2296)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260101 (#2297)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260112 (#2306)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: introduce manifest guide (#2175)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - monitor: deep copy stage options in JSONSeqMonitor (#2293)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai, Simon Steinbeiß, Tomáš Hozza
    - stages/kickstart: support containers-storage transport (#2264)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/rpm: add option to ignore key import errors (HMS-9986) (#2301)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - stages/rpm: add support for setting the rpmkeys binary (#2303)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    - stages: add force option to org.osbuild.groups (#2304)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-14


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Remi Collet <remi@remirepo.net> - 8.4.15-2
changelog:
  - Fix GH-20528 regression breaks mysql connexion using an IPv6 address enclosed
    in square brackets (upstream patch)


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 42 >= and RHEL >= 11


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Jerry James <loganjerry@gmail.com> - 4.0.3-1
changelog:
  - Version 4.0.3
  - Add patch to avoid incompatible version of @types/d3-dispatch
  - Add patch to work around a typescript error


author: Miro Hrončok <miro@hroncok.cz> - 20.26.6-1
changelog:
  - Update to 20.26.6
  - Fixes: rhbz#2188155
  - Removes support for Python 2.7 virtual environments
  - Removes support for Python 3.6 virtual environments


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.12-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.22-2
changelog:
  - Add RPM Provides for python3.9-libs, python3.9-devel, python3.9-idle, python3.9-tkinter, python3.9-test


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.8-1
changelog:
  - Update to version 0.8.8; Fixes RHBZ#2311783
  - Add upstream link for fixing mixture of newline styles
  - Backport commit from upstream to fix s390x issues
  - Where possible, patch out "support for common crates" features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Zdenek Pytela <zpytela@redhat.com> - 42.12-1
changelog:
  - Adjust guest and xguest users policy for sshd-session
  - Allow valkey-server create and use netlink_rdma_socket
  - Allow blueman get attributes of filesystems with extended attributes
  - Update files_search_base_file_types()
  - Allow geoclue get attributes of the /dev/shm filesystem
  - Allow apcupsd get attributes of the /dev/shm filesystem
  - Allow sshd-session read cockpit pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.13-1
changelog:
  - Allow sshd-auth read generic proc files
  - Allow sshd-auth read and write user domain ptys
  - Allow logwatch read and write sendmail unix stream sockets
  - Allow logwatch domain transition on rpm execution
  - Allow thumb_t mounton its private tmpfs files
  - Allow thumb_t create permission in the user namespace
  - Allow corenet_unconfined_type name_bind to icmp_socket
  - Allow systemd-networkd to manage systemd_networkd_var_lib_t files
  - Allow sshd-session get attributes of sshd vsock socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.14-1
changelog:
  - Define file equivalency for /var/opt
  - Allow virtnodedev_t the perfmon capability
  - Allow nut_upsdrvctl_t the sys_ptrace capability
  - Label /usr/lib/systemd/user/graphical-session-pre.target with xdm_unit_file_t
  - systemd-sysctl: allow rw on binfm_misc_fs_t to set binfmt_misc status
  - Allow cupsd to manage cupsd_rw_etc_t lnk_files
  - Set temporary no-stub resolv.conf file from NetworkManager as net_conf_t
  - Allow spamc read aliases file
  - Mark configfs_t as mountpoint (bsc#1246080)
  - Allow systemd-machined watch cgroup files


author: Zdenek Pytela <zpytela@redhat.com> - 42.15-1
changelog:
  - Allow insights-client manage /etc symlinks
  - Allow insights-client get attributes of the rpm executable
  - Allow nfsidmapd search virt lib directories
  - Allow iotop stream connect to systemd-userdbd
  - Allow gnome-remote-desktop read sssd public files
  - Allow thumb_t stream connect to systemd-userdbd
  - Allow bluez dbus API passing unix domain sockets
  - Allow bluez dbus api pass sockets over dbus
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  - Allow init watch/watch_reads systemd-machined user ptys
  - Fix syntax error in userdomain.if
  - Allow ras-mc-ctl get attributes of the kmod executable


author: Zdenek Pytela <zpytela@redhat.com> - 42.16-1
changelog:
  - Allow systemd-ssh-issue read kernel sysctls
  - fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  - Allow create kerberos files in postgresql db home
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  - Allow shell comamnds in locate systemd service (bsc#1246559)
  - Introduce initrc_nnp_daemon_domain interface
  - Label /var/lib/cosmic-greeter with xdm_var_lib_t
  - Allow setroubleshoot-fixit get attributes of xattr fs


author: Zdenek Pytela <zpytela@redhat.com> - 42.17-1
changelog:
  - Allow sshd-net read and write to sshd vsock socket
  - Update ktls policy
  - Add comprehensive SELinux policy module for bwrap thumbnail generation
  - Revert "Allow thumb_t create permission in the user namespace"
  - Allow systemd-machined read svirt process state
  - Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  - Allow sysadm access to TPM
  - Allow tlp get the attributes of the pidfs filesystem
  - Allow kmscon to read netlink_kobject_uevent_socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.18-1
changelog:
  - Allow KDE Plasma Login Manager to function as a display manager
  - Allow mdadm search filesystem_type directories
  - Update policy for dhcpc_hook_t
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  - Allow staff role read/write cockpit-session unix stream sockets
  - Allow stap server read virtual memory sysctls
  - Allow system_mail_t read apache system content conditionally
  - Allow login_userdomain read lastlog


author: Zdenek Pytela <zpytela@redhat.com> - 42.19-1
changelog:
  - Allow passwd read and write a sshd-session unnamed pipes
  - Allow sshd-auth capabilities
  - Allow sshd-auth read network sysctls
  - Label /run/insights-client.ppid with insights_client_run_t
  - fix: unbreak thumbnailing for Thunar/tumblerd
  - Add files_mounton_generic_tmp_dirs() interface
  - Add the rpm_signal() interface
  - Allow session_bus_type get the attributes of the pidfs filesystem
  - Allow pcscd get the attributes of the pidfs filesystem
  - Allow sssd get the attributes of the pidfs filesystem


author: Zdenek Pytela <zpytela@redhat.com> - 42.20-1
changelog:
  - Support cockpit privileged access for the staff user
  - Update su_domain_type policy for kerberized su
  - Allow sshd-session inherit limits from its parent process
  - Allow systemd-machined read virtd process state
  - Allow kl2tpd create and use netlink_generic_socket
  - Update policy for redfish-finder
  - Label the greetd login manager framework as a display manager
  - Allow sshd-auth get attributes of sshd vsock socket
  - Confine redfish_finder - host api discovery service
  - Allow iptables read firewalld process state
  - Allow tuned_t use its private tmpfs files
  - The commit addresses the following AVC denials:


author: Zdenek Pytela <zpytela@redhat.com> - 42.21-1
changelog:
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  - Allow sshd-session read, write, and map ica tmpfs files
  - Allow aide get attributes of a filesystem with extended attributes
  - Set correct label for glycin fontconfig (bsc#1253682)
  - Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  - Logwatch zz-runtime uses uptime (bsc#1255862)
  - Add auth_login_pgm_signull interface (bsc#1255862)
  - Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  - Allow l2tpd_t access to netlink and sysfs
  - Label miscellaneous /dev/papr-* devices
  - Allow qemu-ga to skip authentication
  - Revert "Allow systemd-coredump signull containers"
  - Allow systemd-coredump signull containers
  - Allow virtqemud setattr dri devices
  - Allow irqbalance create and use netlink generic socket
  - Allow thumb_t connect to XDM over a unix domain stream socket
  - Allow systemd-homework to remove ~/.identity-blob
  - Revert "Allow kl2tpd create and use netlink_generic_socket"


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - refactor: Remove unused 'exiting' variable
  - bpf: Introduce task_is_rt() helper
  - bpf: Correctly update nr_rt_running on sched_switch
  - Simplify __die() function to use abort()
  - Refactor: Use path length macros in check_dl_server_dir_exists
  - Refactor: Remove duplicated find_debugfs function
  - utils: Remove unused find_mount() function
  - bpf: Reorder functions to prepare for future changes
  - bpf: Pass stalld_cpu_data pointer to queuing functions
  - bpf: Make update_or_add_task() return void
  - bpf: Reuse enqueue_task() in update_or_add_task()
  - bpf: Use tracepoints to avoid fentry startup stall
  - bpf: Centralize monitoring check in get_cpu_data()
  - bpf: Remove unused 'task' variable
  - bpf: Use task_cpu() to get the correct CPU data
  - bpf: Handle wakeup of new tasks with sched_wakeup_new
  - daemon: Refactor cleanup logic into a helper function
  - daemon: Clean up stale tasks during the boost phase
  - bpf: Document and enhance dequeue_task return value
  - bpf: Handle task migrations with sched_migrate_task
  - bpf: a task is dequeued just by setting its pid to 0
  - bpf: Improve logging in stalld.bpf.c
  - bpf: Use BPF CO-RE for task CPU field access
  - bpf: Add const qualifier to task_struct pointers
  - bpf: Add task iterator for initial state snapshot
  - bpf: Simplify task queue management by removing redundant rt parameter
  - bpf: Add cpu to log_task_prefix
  - stalld: Refactor tgid_field handling to use sizeof
  - refactor: Move helper functions to utils.c
  - stalld: Simplify get_cpu_idle_time() function using sscanf
  - refactor: Simplify update_cpu_starving_vector()
  - refactor: Remove unused headers from stalld.c
  - stalld: Extract repeated buffer reallocation pattern
  - stalld: Flatten nested conditionals using early returns
  - refactor: Extract common idle detection pattern into helper function
  - refactor: Standardize memory allocation with calloc-compatible helper
  - bpf: Use CO-RE to check for running tasks
  - systemd:  change systemd service startup to use RuntimeDirectory
  - Makefile: version bump to v1.21.1


author: Clark Williams <williams@redhat.com> - 1.22.1-1
changelog:
  - bpf: Reduce arguments to log() to fix verifier error
  - stalld: Always reset starving vector in merge_taks_info
  - stalld: Remove forced log-only mode with DL-server
  - Makefile: version bump to v1.22.1


author: Clark Williams <williams@redhat.com> - 1.24.1-1
changelog:
  - sched_debug: Unify parsing methods for task_info
  - sched_debug: Fix runqueue task parsing logic and state filtering
  - sched_debug: Fix double-free crash in fill_waiting_task()
  - stalld.c: remove noisy idle report and added report to should_skip_idle_cpus()
  - stalld.c: initialize cpu_info->idle_time to be -1
  - stalld.c: get rid of misleading print about DL-Server
  - stalld.c: Add starvation logging in single-threaded log-only mode
  - stalld: Add -N/--no_idle_detect flag to disable idle detection
  - stalld: Add defensive checks in print_boosted_info
  - Makefile: Add support for legacy kernels
  - scripts: fix run-local if bashism
  - sched_debug: Fix segfault in adaptive/aggressive modes
  - Makefile: Remove redhat-specific checks
  - Makefile: Add a help target
  - Makefile: Check compatible compiler versions
  - stalld.c: Ensure queue_track backend is not referenced when USE_BPF=0
  - Makefile: version bump to v1.24.1


author: Clark Williams <williams@redhat.com> - 1.25.1-1
changelog:
  - docs: add CLAUDE.md, .claude agents, and update .gitignore
  - tests: Add comprehensive test suite with infrastructure and functional tests
  - tests: Add Phase 2 command-line option tests (8 new tests)
  - docs: Add project rules and agent usage guidelines
  - docs: Update context snapshot with Phase 2 completion
  - tests: Add Phase 3.1 core logic tests (starvation detection and parsing)
  - tests: Add Phase 3.2 boosting mechanism tests (DEADLINE, FIFO, restoration)
  - tests: Add Phase 3.3 task merging and idle detection tests - Phase 3 COMPLETE
  - tests: Add RT throttling save/restore helpers
  - tests: Automatically save and restore RT throttling state
  - tests: Fix test_task_merging empty variable errors and add DL-server check
  - tests: Add DL-server save/disable/restore support
  - docs: Update TODO.md with DL-server management and recent improvements
  - docs: Update context snapshot with Phase 3 completion and state management
  - tests: Add legacy test integration and backend selection support
  - test01: add ability to specify backend
  - tests: remove binary accidentally committed
  - tests: Fix cleanup EXIT trap to preserve test exit codes
  - tests: Fix test_log_only.sh timing and starvation reliability
  - tests: Add backend selection support to individual tests
  - saved claude context snapshot and moved CLAUDE.md to .claude dir
  - .claude: Add context-snapshot.json and update CLAUDE.md
  - tests: Fix starvation_gen to create actual RT starvation
  - tests: Fix test_starvation_detection.sh to respect backend selection
  - tests: Fix test_starvation_detection.sh timing and idle detection issues
  - tests: Fix EPERM errors in cleanup by improving process termination handling
  - docs: Update CLAUDE.md with backend selection and debugfs/procfs clarification
  - tests: Fix infinite hang in test_starvation_detection.sh Test 5
  - tests: Rewrite test_cpu_selection.sh to use modern test framework
  - tests: Rewrite test_boost_period.sh to fix hanging issues
  - tests: Fix PID tracking and backgrounding issues in test suite
  - tests: Rewrite test_starvation_threshold.sh to fix undefined variables
  - tests: Fix test_starvation_threshold.sh log file collision issue
  - tests: Update TODO.md with 2025-10-09 progress and old-style test issues
  - tests: Update context snapshot for 2025-10-09 test framework hardening session
  - tests: Rewrite all remaining old-style Phase 2 tests using modern framework
  - tests: Fix EPERM errors in test cleanup by replacing wait with polling
  - tests: Fix Phase 1 test issues (affinity, backend_selection, fifo_boosting)
  - tests: Add -N flag to disable idle detection in starvation/FIFO tests
  - tests: Fix argument ordering in backend selection tests
  - tests: Fix hanging issues in test_boost_duration.sh
  - tests: Fix test_boost_runtime.sh hanging and improve reliability
  - save LLM context
  - add helpers for git-scm-master AI agent
  - tests: Fix output redirection issues in test_affinity.sh
  - test: Fix test_pidfile.sh output handling and CLI options
  - tests: Fix test_boost_period.sh helper integration and reliability
  - test: Fix test_boost_restoration.sh for stability and standard infrastructure
  - docs: Document mass test suite fixes session with 7 tests and 4 critical discoveries
  - tests: Fix grep pattern in test_starvation_threshold.sh for actual log format
  - docs: Update context snapshot for queue_track backend test fixes
  - tests: Implement matrix testing for backends and threading modes
  - docs: Update CLAUDE.md with correct threading mode flags and matrix testing
  - context: Document matrix testing infrastructure implementation
  - tests: Add timeout protection to test01_wrapper.sh
  - Document queue_track backend limitation in test_starvation_threshold.sh
  - docs: Update documentation with segfault fix and queue_track limitation
  - tests: Add FIFO-on-FIFO priority starvation test
  - tests: Enhance starvation_gen and fix test infrastructure
  - .claude: Update context snapshot
  - .claude: Update context snapshot - BPF RT task tracking fix completed
  - tests: Change starvation_gen default work_target to 1
  - .claude: Update context snapshot - 14/16 tests passing with queue_track
  - tests: Improve starvation_gen thread coordination and shutdown
  - .claude: Update context snapshot - starvation_gen improvements and test progress
  - tests: Add --test option to run individual tests by name
  - .claude: Update context snapshot - test infrastructure improvements complete
  - tests: Fix test_boost_restoration to properly test SCHED_FIFO restoration
  - tests: Add SCHED_OTHER option to starvation_gen
  - tests: Update test_boost_restoration Test 3 to use SCHED_OTHER
  - context snapshot
  - tests: Add kworker denylist to test_boost_restoration
  - tests: Fix Test 5 timing and parameter validation
  - tests: Add journal logging for test activity correlation
  - context snapshot
  - tests: Increase test01 timeout and document kworker competition
  - context snapshot
  - tests: Add unified test environment management framework
  - context snapshot
  - tests: Fix timing race conditions in starvation detection tests
  - docs: Update TODO.md with test suite timing race condition fixes
  - docs: Add context snapshot for test suite timing race fixes
  - tests: Fix timing race conditions in starvation detection tests
  - tests: Fix timing race conditions in test_deadline_boosting
  - tests: Fix timing race conditions in 4 remaining functional tests
  - tests: Fix output buffering and kernel worker interference
  - tests: Fix output buffering in test_starvation_detection Test 3
  - docs: Context snapshot for Nov 3 evening session - timing fixes and buffering issues
  - tests: Fix test_starvation_detection Test 3 flawed counting logic
  - tests: Consolidate duplicate helper functions (Part 1 complete)
  - context snapshot
  - bpf: Add BPF CO-RE compatibility for older kernels
  - Makefile: Make BPF compilation verbose
  - Makefile: Append -std=c99 to CFLAGS
  - doc: update Releases.md for repository instructions
  - tests: Fix start_stalld() PID detection for daemon and slow architectures
  - doc: Release notes for v1.25.1 release
  - Makefile: version bump to v1.25.1


author: Clark Williams <williams@redhat.com> - 1.26.3-1
changelog:
  - tests: Add pre-test and post-test cleanup of stalld processes
  - Makefile: version bump to v1.26.3
  - Makefile: Remove unnecessary -m64 compiler flag
  - Makefile: version bump to v1.26.2
  - Makefile: Remove LTO flags from build options
  - Makefile: switch to using gzip for tarball compression
  - Makefile: version bump to v1.26.1
  - Makefile: Add support for riscv64
  - Fix typo: rename 'merge_taks_info' to 'merge_tasks_info'
  - gitignore: Exclude Serena and Claude Code metadata
  - Makefile: Print BPF tool versions for debugging
  - Makefile: Remove redundant GCC version check
  - Makefile: Explicitly run the 'test' target in the tests directory
  - Makefile: Improve compiler flag detection for -fcf-protection
  - Makefile: Conditionally add -mno-omit-leaf-frame-pointer


author: Mark Wielaard <mjw@fedoraproject.org> - 3.25.1-3
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-0.1.RC1
changelog:
  - Upstream 3.26.0-RC1
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later


author: Mark Wielaard <mjw@fedoraproject.org> - 3.26.0-2
changelog:
  - Add VALGRIND_3_26_BRANCH patches
      - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch
      - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch
      - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch
      - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch
      - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch
      - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


