# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.2-4
changelog:
  - Update to 3.1.2-4
  - Resolves: Issue 6489 - After log rotation refresh the FD pointer
  - Resolves: Issue 6554 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)
  - Resolves: Issue 6555 - Potential crash when deleting a replicated backend


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Update to 3.1.3-2
  - Resolves: Issue 5120 - Fix compilation error
  - Resolves: Issue 6782 - Improve paged result locking
  - Resolves: Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  - Resolves: Issue 6822 - Backend creation cleanup and Database UI tab error
    handling (#6823)
  - Resolves: Issue 6753 - Add 'add_exclude_subtree' and
    'remove_exclude_subtree' methods to Attribute uniqueness plugin
  - Resolves: Issue 6857 - uiduniq: allow specifying match rules in the
    filter
  - Resolves: Issue 6756 - CLI, UI - Properly handle disabled NDN cache
    (#6757)
  - Resolves: Issue 6854 - Refactor for improved data management (#6855)
  - Resolves: Issue 6850 - AddressSanitizer: memory leak in mdb_init
  - Resolves: Issue 6848 - AddressSanitizer: leak in do_search
  - Resolves: Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  - Resolves: Issue 6868 - UI - schema attribute table expansion break after
    moving to a new page
  - Resolves: Issue 6859 - str2filter is not fully applying matching rules
  - Resolves: Issue 6872 - compressed log rotation creates files with world
    readable permission
  - Resolves: Issue 6888 - Missing access JSON logging for TLS/Client auth
  - Resolves: Issue 6772 - dsconf - Replicas with the "consumer" role allow
    for viewing and modification of their changelog. (#6773)
  - Resolves: Issue 6893 - Log user that is updated during password modify
    extended operation
  - Resolves: Issue 6901 - Update changelog trimming logging
  - Resolves: Issue 6430 - implement read-only bdb (#6431)
  - Resolves: Issue 6663 - Fix NULL subsystem crash in JSON error logging
    (#6883)
  - Resolves: Issue 6895 - Crash if repl keep alive entry can not be created
  - Resolves: Issue 6884 - Mask password hashes in audit logs (#6885)
  - Resolves: Issue 6778 - Memory leak in
    roles_cache_create_object_from_entry part 2
  - Resolves: Issue 6901 - Update changelog trimming logging - fix tests
  - Resolves: Issue 6181 - RFE - Allow system to manage uid/gid at startup
  - Resolves: Issue 6468 - CLI - Fix default error log level
  - Resolves: Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  - Resolves: Issue 6430 - Fix build with bundled libdb


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-2
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7173)
  - Issue 7108 - Fix shutdown crash in entry cache destruction (#7163)
  - Issue - Revise paged result search locking
  - Issue 7096 - During replication online total init the function
    idl_id_is_in_idlist is not scaling with large database (#7145)
  - Issue 7160 - Add lib389 version sync check to configure (#7165)
  - Issue 7166 - db_config_set asserts because of dynamic list (#7167)
  - Sync lib389 version to 3.1.4 (#7161)
  - Issue 7150 - Compressed access log rotations skipped, accesslog-list out
    of sync (#7151)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.4-4
changelog:
  - Fix broken FreeIPA upgrade and replication issues
  - Issue 7172 - Index ordering mismatch after upgrade (#7180)


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Pawel Zmarzly <pzmarzly0@gmail.com> - 0^20260107gitdbb4529-4
changelog:
  - Import README from previous repo
  - Renaming package from gitlab-github-facebook-time to facebook-time


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.0-1
changelog:
  - Update to v3.1.0
  - Drop Patch0 (duplicate definitions in code - backport from this release)
  - Drop Fedora-specific metainfo file (now provided by upstream)


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 3.1.1-1
changelog:
  - Update to v3.1.1
  - Drop Patch2 (C99 issues) - backport from this release
  - Drop Patch3 (missing includes) - merged upstream


author: Than Ngo <than@redhat.com> - 143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
    * High: Under coordination
    * Medium CVE-2025-14372: Use after free in Password Manager
    * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them unreadable


author: Than Ngo <than@redhat.com> - 143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146
    * High CVE-2025-14765: Use after free in WebGPU
    * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged


author: Than Ngo <than@redhat.com> - 143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192
    * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for x86_64/aarch64
  - Enable build for epel10.1


author: Than Ngo <than@redhat.com> - 144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
    * CVE-2026-0899: Out of bounds memory access in V8
    * CVE-2026-0900: Inappropriate implementation in V8
    * CVE-2026-0901: Inappropriate implementation in Blink
    * CVE-2026-0902: Inappropriate implementation in V8
    * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    * CVE-2026-0904: Incorrect security UI in Digital Credentials
    * CVE-2026-0905: Insufficient policy enforcement in Network
    * CVE-2026-0906: Incorrect security UI
    * CVE-2026-0907: Incorrect security UI in Split View
    * CVE-2026-0908: Use after free in ANGLE


author: Jan Macku <jamacku@redhat.com> - 8.11.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-9681 - HSTS subdomain overwrites parent cache entry


author: Jan Macku <jamacku@redhat.com> - 8.11.1-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-11053 - netrc and redirect credential leak


author: Paul Howarth <paul@city-fan.org> - 8.11.1-2
changelog:
  - Fix crash with Unexpected error 9 on netlink descriptor 10 (rhbz#2332350)
    - https://github.com/curl/curl/issues/15725
    - https://github.com/curl/curl/pull/15727


author: Jan Macku <jamacku@redhat.com> - 8.11.1-6
changelog:
  - Fix Out of bounds read for cookie path (CVE-2025-9086)
  - Fix predictable WebSocket mask (CVE-2025-10148)


author: Richard W.M. Jones <rjones@redhat.com> - 3.8.3-5
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Petr Menšík <pemensik@redhat.com> - 10.1.0-1
changelog:
  - Update to 10.1.0 (rhbz#2316744)
  - https://github.com/NetworkConfiguration/dhcpcd/releases/tag/v10.1.0
  - https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-1
changelog:
  - Update to release v2.40.2
  - Resolves: rhbz#2405876
  - Upstream fixes
  - Adopt gocheck2 macro for %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-2
changelog:
  - Resolve CVE-2025-62725
  - v2.40.2 resolves CVE-2025-62725.
  - Associated release-specific rhbz will be manually closed: F41 - #2406691
    and F42 - #2406693


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Mike FABIAN <mfabian@redhat.com> - 2.28.0-1
changelog:
  - Update to 2.28.0
  - Add setup UI for the chat with ollama or ramalama
  - Add a ibus-setup-tb.desktop file (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/807)
  - Suggest suffixed word forms as well (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/799)
  - Update emoji annotations from CLDR
  - itb_ollama.py: better error handling when getting model list
  - itb_ollama.py: Add support for ramalama
  - Support OLLAMA_HOST environment variable
  - Translation update from Weblate (de 100%, fr 95.4%, ja 100%, ka 100%,
    kab 74.8%, ko 100%, ru 100%, sv 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Ignore “Enable suggestions by key” and “Minimum number of chars for
    completion“ options when OSK is used Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/813 Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/814
  - Translation update from Weblate (es 100%, tr 100%, zh_CN 73.1%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.3-1
changelog:
  - Update 2.28.3
  - Fix [Install missing dictionaries] feature in the setup tool (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/821)
  - Prefer hunspell over aspell


author: Mike FABIAN <mfabian@redhat.com> - 2.28.4-1
changelog:
  - Update to 2.28.4
  - Make it possible to download missing dictionaries and update existing
    ones from upstream (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/822)
  - Show in a tooltip from which path a hunspell dictionary and a cldr
    annotation have been loaded
  - Translation update from Weblate (de 100%, es 100%, fi 100%, ja 100%,
    ka 100%, ko 100%, sv 100%, tr 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.5-1
changelog:
  - Update to 2.28.5
  - Set short process names on Linux (prctl PR_SET_NAME) or BSD
    (setproctitle) (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/833)
  - Show the direct input mode menu always
  - Workaround for LibreOffice autocorrection (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/834)
  - Show in a tooltip from which path an m17n input method has been loaded
  - Translation update from Weblate (fr 95%, it 100%, pl 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.6-1
changelog:
  - Update to 2.28.6
  - Improve workaround for LibreOffice autocorrection (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/834)
  - Refactor: Add a ClientInfo class to store the client id (improve
    readability and speed)
  - Code cleanup in setup/main.py
  - Translation update from Weblate (de 100%, es 100%, ja 100%, pl 100%,
    ru 100%, tr 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.29.0-1
changelog:
  - Update to 2.29.0
  - Fix minus sign on buttons in adding autosettings and keybindings
  - Fixes for the Gtk3/Gtk4 port needed for RHEL9 and Ubuntu ≤ 22.04: Fall
    back to Gtk3 on these old systems
  - setup/dictionary_download.py: Fix dictionary download for Ubuntu 24.04.3
    LTS
  - Port setup tool, emoji_picker and everything else except test_0_gtk.py to
    Gtk4. Gtk4 is used by default if available on the system, if not Gtk3 is
    used as a fallback. (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/848)
  - Translation update from Weblate (cz 100%, hu 40.4%, it 99.5%, ka
    100%, ko 100%, sv 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.30.0-1
changelog:
  - Update to 2.30.0
  - Make autosetting `ibuseventsleepseconds` possible (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/878)
  - Use a better estimate of how many `Left` keys are needed to step back
    over the committed string to the caret position (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/874)
  - Finalize commit string also when the preedit cursor is not at the right
    end of the preedit (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/871)
  - Change the look of the selected Gtk.Notebook tab (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/872)
  - Commit key should commit the final form always (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/870)
  - Make the “Options” and “Appearance” tabs in the setup tool scrollable to
    save vertical space (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/865)
  - Add an option to show in the preedit what would be committed on pressing
    space (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/854)
  - Add commands to commit the raw input, with and without forwarding the key
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/855)
  - Add an option to show the raw input in the auxiliary text (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/853)
  - When a candidate is autoselected, the `cancel` command should deselect
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/851)
  - Use self._ollama_aux_wrapper when showing the prompt in the auxiliary
    text (Without that, long prompts may be shown as a very long single line
    auxiliary text partly off-screen.)
  - Translation update from Weblate (ca 100%, de 100%, fi 98%, it 98%, ja
    100%, ka 100%, ko 100%, sv 100%, tr 100%, uk 100%)


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.05.1-2
changelog:
  - CVE-2025-48708 ghostscript: Ghostscript Argument Sanitization Vulnerability (fedora#2368149, fedora#2368134)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.05.1-6
changelog:
  - security fix for CVE-2025-59798, CVE-2025-59799, CVE-2025-59800 (fedora#2431544, fedora#2431548, fedora#2431546)


author: Packit <hello@packit.dev> - 37-1
changelog:
  Changes with 37
  ----------------
    - Support uploading to libvirt (#300)
      - Author: Jakub Kadlčík, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - blueprintload: improve error message in Load (#333)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza
    - doc: mention CentOS (#336)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update to v0.197.0 (#326)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - main: add `--bootc-build-ref` option to set build container (#325)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: add missing test container cleanups (#330)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: check that we get the expected image types (HMS-9426) (#320)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.1-0]
changelog:
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.19 cycle (Justin M. Forbes)
  - add libasan-static and libubsan as BR for selftests (Thorsten Leemhuis)
  - add liburing-devel as BR for selftests (Thorsten Leemhuis)
  - add a few optional BRs for perf (Thorsten Leemhuis)
  - Linux v6.18.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.3-0]
changelog:
  - Config update due to stable patches (Justin M. Forbes)
  - wifi: iwlwifi: Fix firmware version handling (Ville Syrjälä)
  - Linux v6.18.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.5-0]
changelog:
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - Linux v6.18.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Artem Polishchuk <ego.cordatus@gmail.com> - 0.20.34-13
changelog:
  - Update to latest git snapshot
  - https://github.com/derrod/legendary/pull/713
  - Port to forge macro


author: Michel Lind <salimma@fedoraproject.org> - 0.5.4-2
changelog:
  - Revert Packit-related changes as we need to manually audit licenses
  - Account for licensing of dependencies


author: Ondrej Holy <oholy@redhat.com> - 1.1.22-2
changelog:
  - Use 
  %setup        -q



  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-doc-Don-t-document-internal-endian-macros.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


  /usr/lib/rpm/rpmuncompress /builddir/build/SOURCES/0001-disabled-foxconn-487-e111-id.-https-github.com-libmt.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch -f


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.11-3
changelog:
  - Switch from the RPM scriptlet to the sysusers.d configuration
    for 'mysql' user / group creation
  - We no longer enforce the fixed UID/GID 27 !!!


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Pavel Raiskup <praiskup@redhat.com> 41.5-1
changelog:
  - Fedora 39 EOL
  - fix openSUSE-tumbleweed update failure during the second build (duli4868@gmail.com)
  - use non development bootstrap image for CentOS Stream 10 (romain.geissler@amadeus.com)
  - remove ELN ResilientStorage repos (yselkowi@redhat.com)
  - update ELN bootstrap image (yselkowi@redhat.com)
  - Add epel and epel-testing repos to the EPEL 10 config (carlwgeorge@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 42.2-1
changelog:
  - fix: expand Oracle Linux distro_id from ol to oraclelinux
    (avi.miller@oracle.com)
  - Navy Linux 8 configuration fixes (adil@linux.com)
  - EuroLinux end-of-life (praiskup@redhat.com)
  - bugfix: upgrade openeuler chroots to latest release and fix gpg check failed
    in 20.03 (pkwarcraft@gmail.com)
  - Add Azure Linux 3 configuration (negativo17@gmail.com)
  - Add Azure Linux 2 configuration (negativo17@gmail.com)
  - Add Kylin 10 configuration files (negativo17@gmail.com)
  - Add AlmaLinux Kitten 10 + EPEL 10 configs (ngompa@almalinux.org)
  - Add AlmaLinux Kitten 10 configs (ngompa@almalinux.org)
  - Add openSUSE Leap 15.6, move openSUSE Leap 15.5 to eol (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Jens Petersen <petersen@redhat.com> - 2.31.2-33
changelog:
  - ghost /nix/var/nix/* and sockets
  - add builds/ ghost back to daemon (since it creates it)
  - db/ and gcroots/auto/ remain after uninstalling


author: Jens Petersen <petersen@redhat.com> - 2.31.2-36
changelog:
  - trivial spec changes
  - list nix-daemon files without glob
  - commented TEST_ROOT: doesn't actually work


author: Jan Staněk <jstanek@redhat.com> - 1:22.22.0-2
changelog:
  - Fix c-ares unbundling bits
  - gate %check section behind a conditional
  - gate ./configure flag behind a conditional


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - [MIDI] loading files would cause crash (null dereference) if ~/.timidity.cfg not present


author: Charles R. Anderson <cra@alum.wpi.edu> - 3.1.1-2
changelog:
  - [MIDI] Add patch to prefer /etc/timidity++.cfg to /etc/timidity.cfg
  - [MIDI] Add upstream patch to set comment to .pat filename without full path
  - Recommends: fluid-soundfont-gm


author: Packit <hello@packit.dev> - 157-1
changelog:
  Changes with 157
  ----------------
    - Add ability to set grub2 default menu entry (#2156)
      - Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    - Add support for optional fips menu (#2153)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2155)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2157)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - org.osbuild.coreos.live-artifacts.mono: read os name from /usr/lib/os-release (#2148)
      - Author: Bipin B Narayan, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    - stages/ignition: parametrize the path to boot (#2149)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-30


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - New script: update test manifests (#2140)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2162)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2164)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - Update snapshots to 20250730 (#2159)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - stages/tar: add --numeric-owner option [RHEL-102854] (#2144)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-08-13


author: Packit <hello@packit.dev> - 159-1
changelog:
  Changes with 159
  ----------------
    - Update images dependency ref to latest (#2166)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20250815 (#2165)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - osbuild/solver/dnf.py: Add support for DNF variables for osbuild repos (#2064)
      - Author: Josue David Hernandez, Reviewers: Nobody
    - readme/monitor: add development info / fix monitor and add duration (#2154)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - spec: explicitly buildrequire python-setuptools (#2171)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    - stages/bootc.install-to-filesystem: add more knobs (#2152)
      - Author: Jean-Baptiste Trystram, Reviewers: Simon de Vlieger, Tomáš Hozza
    - stages/coreos.live-artifacts: rework volume ID handling (#2169)
      - Author: Jonathan Lebon, Reviewers: Michael Vogt, Simon de Vlieger
    - stages: extend test_bootc_install_to_fs test for new options (#2167)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-08-27


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update images dependency ref to latest (#2194)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - Update images dependency ref to latest (#2199)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20250915 (#2193)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - osbuild: add/use new `api.get_exception_from_msg()` helper (#2201)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild: handle exception from the _message() in BaseAPI() (#2197)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/systemd-repart: introduce systemd-repart (#2189)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt

  — Somewhere on the Internet, 2025-09-24


author: Packit <hello@packit.dev> - 163-1
changelog:
  Changes with 163
  ----------------
    - Run tests in Fedora RPM build (#2116)
      - Author: Karolina Surma, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2217)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: document `--cache` flag (#2213)
      - Author: Florian Schüller, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gitlab: build RPMs for Fedora 43 (#2183)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - monitor: collect metadata alongside the result of a stage (#2215)
      - Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger
    - schutzbot/mockbuild: use the global AWS credentials (#2221)
      - Author: Ondřej Budai, Reviewers: Sanne Raymaekers, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-22


author: Packit <hello@packit.dev> - 164-1
changelog:
  Changes with 164
  ----------------
    - Stages: remove `org.osbuild.dnf*.sbom.spdx` (#2234)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Support building pipelines in a VM (#2228)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2223)
      - Author: SchutzBot, Reviewers: Ondřej Budai, Simon de Vlieger
    - Update images dependency ref to latest (#2231)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2235)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - move container_mount into library; support mpp-resolve for org.osbuild.containers-storage (#2222)
      - Author: Dusty Mabe, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - org.osbuild.treeinfo: new stage to create .treeinfo files (#2200)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - schutzbot: update terraform ID (#2232)
      - Author: Achilleas Koutsou, Reviewers: Florian Schüller, Sanne Raymaekers
    - stages/dracut.conf: `remove_items` (#2225)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stages/dracut: `remove` (#2224)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - stages: add new ln stage (#2226)
      - Author: Jean-Baptiste Trystram, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - test/mod: new test file for the util/containers.py library (#2230)
      - Author: Dusty Mabe, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-05


author: Packit <hello@packit.dev> - 166-1
changelog:
  Changes with 166
  ----------------
    - Refactor Solver API to Support Versioning (HMS-9062) (#2246)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Stage changes to help support bootc PXE images (#2251)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Update images dependency ref to latest (#2255)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2262)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - github: free disk space before running unit tests (#2256)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß, Tomáš Hozza
    - manifest-tests-install-deps: make unzip quiet (#2254)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon Steinbeiß, Simon de Vlieger
    - monitor: add module options to JSON logger (#2244)
      - Author: Albert Esteve, Reviewers: Achilleas Koutsou, Brian C. Lane
    - org.osbuild.kickstart: add bootc support (HMS-9732) (#2242)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - runner: add new `minimal_passwd()` helper and use in linux (#2260)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - sources: add quoting to librepos "path" component (#2253)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane

  — Somewhere on the Internet, 2025-12-03


author: Packit <hello@packit.dev> - 167-1
changelog:
  Changes with 167
  ----------------
    - Fix RHSM podman secrets and rhc configuration (HMS-9811 and HMS-9606) (#2265)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - GHA: update osbuild-ci* container images (#2286)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Move replace and rglob (#2267)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Solver: prepare for V2 API with per-transaction depsolve results (HMS-9062) (#2258)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - Update images dependency ref to latest (#2273)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update images dependency ref to latest (#2285)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Various fixes for --in-vm (#2271)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chroot: If we're unable to mount devtmpfs, bindmount host /dev (#2277)
      - Author: Alexander Larsson, Reviewers: Michael Vogt, Simon de Vlieger
    - osbuild/solver: replace request.RepositoryConfig with model.Repository (HMS-9062) (#2280)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - osbuild/util/rhsm: make Subscriptions.get_secrets() take list of URLs (HMS-9062) (#2278)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - ostree.config: Add some tests (#2268)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - ostree.grub2: ostree requires leading / (#2272)
      - Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - runners: set up sequoia on RHEL (#2288)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - stages/ostree.{aleph,deploy.container}: support more imgref formats; make aleph stage more reliable (#2270)
      - Author: Dusty Mabe, Reviewers: Michael Vogt, Simon de Vlieger
    - stages/xorrisofs: allow setting more fields (#2269)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-17


author: Packit <hello@packit.dev> - 169-1
changelog:
  Changes with 169
  ----------------
    - Update images dependency ref to latest (#2299)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update images dependency ref to latest (#2305)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2296)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260101 (#2297)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20260112 (#2306)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - docs: introduce manifest guide (#2175)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - monitor: deep copy stage options in JSONSeqMonitor (#2293)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai, Simon Steinbeiß, Tomáš Hozza
    - stages/kickstart: support containers-storage transport (#2264)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - stages/rpm: add option to ignore key import errors (HMS-9986) (#2301)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - stages/rpm: add support for setting the rpmkeys binary (#2303)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Brian C. Lane
    - stages: add force option to org.osbuild.groups (#2304)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-14


author: Packit <hello@packit.dev> - 170-1
changelog:
  Changes with 170
  ----------------
    - Add V2 Solver API with complete package metadata, per-transaction results, and RHSM secrets discovery (HMS-10029) (#2287)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    - Add tests for PQC key handling in osbuild [HMS-10057] (#2310)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Makefile: new target: rpm-nocheck (#2309)
      - Author: Achilleas Koutsou, Reviewers: Simon de Vlieger, Tomáš Hozza
    - Update osbuild-ci container images (#2308)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - Update snapshots to 20260118 (#2312)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Add RHEL10 x86 and ARM COPR builds (#2311)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - stages: fix org.osbuild.ostree.grub2 permissions (#2307)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Brian C. Lane
    - test: add a wait to mitigate race condition (#2314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: add one-block tolerance to fscache test (#2316)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - test: increase sendmsg test size (#2315)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 146-1
changelog:
  Changes with 146
  ----------------
    *  go.mod: bump go version to 1.23.9 & update dependencies (#4760)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Preparation to consolidate Koji upload code to `osbuild/images` (HMS-8803) (#4770)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli
    * Use Koji upload implementation from `osbuild/images` (HMS-8803) (#4772)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * cloudapi: Use error 400 for cloudapi delete errors (#4750)
      * Author: Brian C. Lane, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * deps: bump images to 0.164 (#4781)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * go.mod: update osbuild/images to v0.156.0 (#4773)
      * Author: Achilleas Koutsou, Reviewers: Ondřej Budai, Sanne Raymaekers
    * test/ubi-wsl.sh: add backward compatibility for composer < v146 (#4784)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Tomáš Koscielniak
    * tests/CI: Add RHEL 9.6 and 10.0 GA (HMS-8726) (#4767)
      * Author: Tomáš Koscielniak, Reviewers: Florian Schüller, Sanne Raymaekers

  — Somewhere on the Internet, 2025-07-23


author: Packit <hello@packit.dev> - 147-1
changelog:
  Changes with 147
  ----------------
    * GH: remove the PR template (#4787)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * Update snapshots to 20250730 (#4800)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * chore: bump dependencies via gobump (#4803)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * cloudapi: new image type: azure-sapapps-rhui [HMS-8738] (#4790)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * cloudapi: use distrofactory to get rhel-9.3 (#4789)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * deps: update sentry dependency (#4771)
      * Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    * go.mod: update osbuild/images to v0.168.0 (#4799)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    * jobqueue: handle escaped null bytes in postgres (HMS-8885) (#4779)
      * Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * many: fix various linter warnings (#4792)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    * many: switch to osbuild/images/pkg/upload for azure (HMS-8940) (#4798)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    * schutzbot/update_github_status.sh: fix GA pipeline status reporting (#4786)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * templates/packer: avoid errors in worker-executor startup (#4788)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * test/repositories: use CDN repos for 9.5, 9.6 and 10.0 (#4783)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Tomáš Koscielniak
    * workflows: use correct token for gobump (#4795)
      * Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-08-06


author: Packit <hello@packit.dev> - 150-1
changelog:
  Changes with 150
  ----------------
    - Test/regression-old-worker-new-composer: make the test case more robust (#4839)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20250825 (#4840)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - test/cases/rhel-upgrade: increase virt-install memory (#4843)
      - Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-03


author: Packit <hello@packit.dev> - 151-1
changelog:
  Changes with 151
  ----------------
    - Bump distro aliased for RHEL 9 and 10 (HMS-9174) (#4854)
      - Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Sanne Raymaekers
    - Dockerfile-ubi-packer: do not use quay.io/app-sre/packer image (HMS-9246) (#4848)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Many: refactor 'osbuild-depsolve-dnf' mocking in tests to support refactoring in `osbuild/images` (HMS-9355) (#4862)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Packer: install 'rsync' in the ubi-packer container (HMS-9287) (#4850)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Sanne Raymaekers
    - build(deps): bump actions/github-script from 7 to 8 (#4852)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - gha: split gobump and images (#4859)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to 0.190.0 (`dnfjson` -> `depsolvednf` rename) (HMS-9365) (#4865)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update osbuild/images to v0.188.0 (#4849)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - templates/packer: handle vector error (#4866)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - test: run older CIV tag on nightlies (#4861)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - worker & executor: use vector to forward logs from executor to worker (HMS-9304) (#4858)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-17


author: Packit <hello@packit.dev> - 152-1
changelog:
  Changes with 152
  ----------------
    - Remove internal/runner/ (#4874)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Gianluca Zuccarelli, Lukáš Zapletal, Michael Vogt
    - Weldr API endpoints & store: don't use `rpmmd` package structs for serialization (HMS-9376) (#4868)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane, Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4872)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - cloudapi/v2: recover from panics in serializeManifest (HMS-9379) (#4869)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller
    - go.mod: update osbuild/images to v0.198.0 (HMS-9444) (#4877)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update to v0.197.0 (#4873)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - templates/packer/worker: remove unbound variable (#4871)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Tomáš Hozza
    - worker/executor: drop cloudwatch logging from executor (HMS-9304) (#4870)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Sandro Mani <manisandro@gmail.com> - 9.11-2
changelog:
  - Regenerate vendor tarball to pull in newer devalue and svelte, fixes
    CVE-2026-22775 and CVE-2025-15265


author: Remi Collet <remi@remirepo.net> - 0.9.0-2
changelog:
  - update to 0.9.0
  - add notice about dnf in self-update output
  - open https://github.com/php/pie/issues/217 broken bash completion


author: Wim Taymans <wtaymans@redhat.com> - 1.4.8-2
changelog:
  - Add patch for xrun regression when stopping nodes.
  - Add patch for libcamera IPA spawn problem.
  - Add patch to fix UMP event sorting.


author: Jerry James <loganjerry@gmail.com> - 4.0.3-1
changelog:
  - Version 4.0.3
  - Add patch to avoid incompatible version of @types/d3-dispatch
  - Add patch to work around a typescript error


author: Miro Hrončok <miro@hroncok.cz> - 1:0.44.0-2
changelog:
  - CI: Update the list of tests
  - Remove retired Pythons
  - Add Python 3.14
  - Remove virtualenv test for 3.6 as virtualenv in F42+ no longer supports
    3.6


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Packit <hello@packit.dev> - 0.54.0-1
changelog:
  - Support for Forgejo pull requests has been added. (#925)
  - We have added support for Forgejo methods related to permissions. (#918)
  - Resolves: rhbz#2365296


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.57.0-1
changelog:
  - We have fixed an issue with the new Forgejo version preventing ogr from working. (#949)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Packit <hello@packit.dev> - 0.60.0-1
changelog:
  - A new method `get_rate_limit_remaining()` to check rate limit thresholds has been added to the service API. (#970)
  - Resolves: rhbz#2430818


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.12-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: Karolina Surma <ksurma@redhat.com> - 3.15.0~a1-2
changelog:
  - Use bundled wheels on Fedora < 43
  - Properly export CFLAGS+LDFLAGS when invoking make install to fix 3rd-party extension building


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-3
changelog:
  - Add helpers subpackage
  - Add wek deps: conditional recommends on recoll-krunner if
    kf6-krunner is present and corresponding backwards conditional supplements


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Zdenek Pytela <zpytela@redhat.com> - 42.12-1
changelog:
  - Adjust guest and xguest users policy for sshd-session
  - Allow valkey-server create and use netlink_rdma_socket
  - Allow blueman get attributes of filesystems with extended attributes
  - Update files_search_base_file_types()
  - Allow geoclue get attributes of the /dev/shm filesystem
  - Allow apcupsd get attributes of the /dev/shm filesystem
  - Allow sshd-session read cockpit pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.13-1
changelog:
  - Allow sshd-auth read generic proc files
  - Allow sshd-auth read and write user domain ptys
  - Allow logwatch read and write sendmail unix stream sockets
  - Allow logwatch domain transition on rpm execution
  - Allow thumb_t mounton its private tmpfs files
  - Allow thumb_t create permission in the user namespace
  - Allow corenet_unconfined_type name_bind to icmp_socket
  - Allow systemd-networkd to manage systemd_networkd_var_lib_t files
  - Allow sshd-session get attributes of sshd vsock socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.14-1
changelog:
  - Define file equivalency for /var/opt
  - Allow virtnodedev_t the perfmon capability
  - Allow nut_upsdrvctl_t the sys_ptrace capability
  - Label /usr/lib/systemd/user/graphical-session-pre.target with xdm_unit_file_t
  - systemd-sysctl: allow rw on binfm_misc_fs_t to set binfmt_misc status
  - Allow cupsd to manage cupsd_rw_etc_t lnk_files
  - Set temporary no-stub resolv.conf file from NetworkManager as net_conf_t
  - Allow spamc read aliases file
  - Mark configfs_t as mountpoint (bsc#1246080)
  - Allow systemd-machined watch cgroup files


author: Zdenek Pytela <zpytela@redhat.com> - 42.15-1
changelog:
  - Allow insights-client manage /etc symlinks
  - Allow insights-client get attributes of the rpm executable
  - Allow nfsidmapd search virt lib directories
  - Allow iotop stream connect to systemd-userdbd
  - Allow gnome-remote-desktop read sssd public files
  - Allow thumb_t stream connect to systemd-userdbd
  - Allow bluez dbus API passing unix domain sockets
  - Allow bluez dbus api pass sockets over dbus
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  - Allow init watch/watch_reads systemd-machined user ptys
  - Fix syntax error in userdomain.if
  - Allow ras-mc-ctl get attributes of the kmod executable


author: Zdenek Pytela <zpytela@redhat.com> - 42.16-1
changelog:
  - Allow systemd-ssh-issue read kernel sysctls
  - fix: bz2279215 Allow speech-dispatcher access to user home/cache files
  - Allow create kerberos files in postgresql db home
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  - Allow shell comamnds in locate systemd service (bsc#1246559)
  - Introduce initrc_nnp_daemon_domain interface
  - Label /var/lib/cosmic-greeter with xdm_var_lib_t
  - Allow setroubleshoot-fixit get attributes of xattr fs


author: Zdenek Pytela <zpytela@redhat.com> - 42.17-1
changelog:
  - Allow sshd-net read and write to sshd vsock socket
  - Update ktls policy
  - Add comprehensive SELinux policy module for bwrap thumbnail generation
  - Revert "Allow thumb_t create permission in the user namespace"
  - Allow systemd-machined read svirt process state
  - Allow sshd_auth_t getopt/setopt on tcp_socket (bsc#1252992)
  - Allow sysadm access to TPM
  - Allow tlp get the attributes of the pidfs filesystem
  - Allow kmscon to read netlink_kobject_uevent_socket


author: Zdenek Pytela <zpytela@redhat.com> - 42.18-1
changelog:
  - Allow KDE Plasma Login Manager to function as a display manager
  - Allow mdadm search filesystem_type directories
  - Update policy for dhcpc_hook_t
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  - Allow staff role read/write cockpit-session unix stream sockets
  - Allow stap server read virtual memory sysctls
  - Allow system_mail_t read apache system content conditionally
  - Allow login_userdomain read lastlog


author: Zdenek Pytela <zpytela@redhat.com> - 42.19-1
changelog:
  - Allow passwd read and write a sshd-session unnamed pipes
  - Allow sshd-auth capabilities
  - Allow sshd-auth read network sysctls
  - Label /run/insights-client.ppid with insights_client_run_t
  - fix: unbreak thumbnailing for Thunar/tumblerd
  - Add files_mounton_generic_tmp_dirs() interface
  - Add the rpm_signal() interface
  - Allow session_bus_type get the attributes of the pidfs filesystem
  - Allow pcscd get the attributes of the pidfs filesystem
  - Allow sssd get the attributes of the pidfs filesystem


author: Zdenek Pytela <zpytela@redhat.com> - 42.20-1
changelog:
  - Support cockpit privileged access for the staff user
  - Update su_domain_type policy for kerberized su
  - Allow sshd-session inherit limits from its parent process
  - Allow systemd-machined read virtd process state
  - Allow kl2tpd create and use netlink_generic_socket
  - Update policy for redfish-finder
  - Label the greetd login manager framework as a display manager
  - Allow sshd-auth get attributes of sshd vsock socket
  - Confine redfish_finder - host api discovery service
  - Allow iptables read firewalld process state
  - Allow tuned_t use its private tmpfs files
  - The commit addresses the following AVC denials:


author: Zdenek Pytela <zpytela@redhat.com> - 42.21-1
changelog:
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  - Allow sshd-session read, write, and map ica tmpfs files
  - Allow aide get attributes of a filesystem with extended attributes
  - Set correct label for glycin fontconfig (bsc#1253682)
  - Set correct gstreamer directory label for gnome-desktop-thumbnailer (bsc#1253682)
  - Logwatch zz-runtime uses uptime (bsc#1255862)
  - Add auth_login_pgm_signull interface (bsc#1255862)
  - Introduce systemd_cryptsetup_generator_var_run_t file type (bsc#1244459)
  - Allow l2tpd_t access to netlink and sysfs
  - Label miscellaneous /dev/papr-* devices
  - Allow qemu-ga to skip authentication
  - Revert "Allow systemd-coredump signull containers"
  - Allow systemd-coredump signull containers
  - Allow virtqemud setattr dri devices
  - Allow irqbalance create and use netlink generic socket
  - Allow thumb_t connect to XDM over a unix domain stream socket
  - Allow systemd-homework to remove ~/.identity-blob
  - Revert "Allow kl2tpd create and use netlink_generic_socket"


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Maxwell G <maxwell@gtmx.me> - 2025.12.08-2
changelog:
  - Exclude optional yt-dlp-ejs dependency. Users need to handle it manually.
  - https://github.com/yt-dlp/yt-dlp/wiki/EJS
  - Remove python -s shebang flag so users can install yt-dlp-ejs or other
    optional deps or plugins using pip


