# changelog

author: pgajdos@suse.com
changelog:
  - arabic-fonts splitted into subpackages [bnc#825954]
  - new font: KacstOne 5.0 [bnc#825955]
  - %if-0-out Haydar and Nesf2 family because of missing license
    specification


author: pgajdos@suse.com
changelog:
  - Amiri font updated to 0.107
    * New glyphs:
    - Arabic math letters from Arabic Mathematical Alphabetic Symbols block
      (U+1EE00?U+1EEFF).
    - Optional support for placing the kasra below the shadda, with ?ss05?
      feature.
    - Missing proportional LTR digits in the slanted font.
    * Fixes:
    - Reverted the lowering of marks above wide isolated glyphs, it made the marks
      look weird relative to other ones.
    - Fixed the position of marks above qaf of ??.
    - Dropped the special combination in ???<200d> when it is follow vowelled as
      it was too crowded.
    - Fixed the position of sukun over shadda.
    - Fixed the side bearings of ??, ?? and sisters so that the dots do not clash
      with preceding glyphs.
    - Positive kerning between ???? and likes.
    - Slight kerning between the period and closing quotes.
    - Made sure the italic European digits are really tabular.
  - package regular font instead of webfonts


author: pgajdos@suse.com
changelog:
  - updated to 0.108
    * New glyphs:
    - New design of ? in <200d>?? combination.
    - Alternate numbers for use in fractions, accessible with the OpenType
      features `numr` and `dnom`.
    - The new Arabic Extended-A vowel marks, in the range U+08E4?08FE.
    - Redesign the U+06C1 forms to make it distinctive from U+06BE.
    - Add ??? ????? symbol, U+FDFB.
    * Fixes:
    - No longer replace two successive *fatha*, *damma* or *kasra* with a
      sequential *tanween* form, the characters U+08F0, U+08F1 and U+08F2
      should be used instead.
    - Many kerning improvements.
    - Workaround a bug in Core Text (Mac OS X text layout engine) that break
      the ??? ligature.
    - All forms of U+06BA are now dotless, per Unicode standard.
    - Initial and medial forms of U+063E, U+063F, U+077A and U+077B were
      missing.
    - The dots in initial and medial forms of U+06BD should be inverted.
    * New fonts:
    - A coloured version of the Amiri Quran font that gives the vowels and
      Quranic annotation marks distinctive colours. This font uses the new
      `COLR`/`CPAL` font tables which are currently supported only by Firefox
      (all platforms) and MS Internet Explorer/Edge (Windows 8.1 and above).
    - The webfonts now include WOFF 2.0 files as well.


author: jengelh@inai.de
changelog:
  - Update amiri subpackage to 0.109
    * New glyphs:
    * A new stylistic set (ss06) to avoid automatically
      adding ??? above ???.
    * A localised &.
    * U+1EEF0 ARABIC MATHEMATICAL OPERATOR MEEM WITH HAH WITH
      TATWEEL (?).
    * U+1EEF1 ARABIC MATHEMATICAL OPERATOR HAH WITH DAL (?).
    * Adding missing forms of U+06C2.


author: lnussel@suse.de
changelog:
  - Update to version 0.0+git20171227.670229c:
    * Added ABI version number
    * AVX2/AVX-512F optimizations of BLAMKA
    * Set Argon2 version number from the command line
    * New bindings
    * Minor bug and warning fixes (no security issue)
  - use _service file


author: Wolfgang Frisch <wolfgang.frisch@suse.com>
changelog:
  - Update to version 0.0+git20190520.62358ba (boo#1170512):
    * Fix the Makefile to install libargon2.pc.
    * Wait for already running threads if a thread creation failed.
    * Added Argon2 Erlang binding.
    * Additional JVM bindings (Jargon2).


author: Ferdinand Thiessen <rpm@fthiessen.de>
changelog:
  - Fix version of package: 20190702 is the upstream version number
    of the package
  - Replaced optflags.patch with adjust-makefile.patch, the
    patch will now also allow to set the file permissions of installed
    libraries. This fixes the rpmlint error: shared-library-not-executable


author: Stanislav Brabec <sbrabec@suse.com>
changelog:
  - Update to version 2.2.0:
    * Added native i1Pro3 and i1Pro3 Plus driver.
    * Fix bug in applycal.c where it gets an "Error - Write file: 1,
      icmTextDescription_write: ascii string is shorter" error on
      replacing one calibration with another.
    * Improved i1pro & Munki patch recognition to work much more
      reliably with a slow swipe speed.
    * Fixed oeminst to work with spyder V5.5. setup.exe
    * Fixed bug in oemdld that prevented HTML encoded characters in
      download file decoding properly, which prevented certain
      filenames from working.
    * Fixed bug in ccxxmake -S -f where save error wasn't being fully
      reported, and display technology presence check was faulty.
    * Fixed typo in display technology, VPA -> PVA.
    * Made Klein K10A "Lights Off" command timeout a soft error. For
      some reason this command doesn't seem to be implemented on some
      K10A's.
    * Added CIE dE2000 to spotread output.
    * Fixed accidental global "wrl" in gamut/gamut.h that cases
      compile warnings.
    * For more see http://www.argyllcms.com/doc/ChangesSummary.html
  - Drop argyllcms--gcc--fno-common.patch (upstreamed with exception
    of static declaration of struct huft, which is not required).


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to version 2.3.0:
    * Fixed spotread -YL (i1Pro1/2 lamp remediation) to function even
    if calibration is impossible due to the white reference being out of tolerance.
    * Fix SpyderX faulty initial black calibration
    * Added icomuf_reset_before_close flag for SpyderX, as some versions
    of the instrument have been reported to lock up after use.
    * Modified the ArgyllCMS CIECAM02 implementation to include a blue
    hue linearization tweak, to improve the "blue goes purple" effect
    when gamut mapping or clipping highly saturated blues to smaller gamuts.
    * Added spotread -Y y option that forces the listing of instrument
    specific display calibrations in the usage, even for serial instruments.
    * Removed native i1d3 C6 instrument support as a favor to X-Rite.
    * Improved cxf2ti3 so that it should cope with XML that uses "Colour"
    spelling rather than "Color".
    * Added I1D3_ESCAPE environment variable to allow a user to potentialy
    use any current or future OEM coded i1d3 instrument.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 2.3.1:
    * Added value sanity check & warning to chartread patch by patch mode.
    * Fixed crash on 64 bit MSWin in spectro/aglob due to changing SDK
      declarations for _findfirst().
    * Fixed one remaining problem with not coping with "Colour" spelling rather
      than "Color" in cxf2ti3.
    * Add code in cgats write to check for float format problems when faced with
    - inf or +inf value.
    * Fix i1Pro3 highres in ccxxmake, dispcal & dispread.
    * Changed OS X usb reset to re-enumerate instead, as reset does nothing on OS
      X >= 10.8.
    * Added spectro/instlib.api.txt file to public distribution.
    * Fixed possible crashes in xicc/ccss.c and spectro/oeminst.c


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Do not set everything inside doc/ mode 644; otherwise the
    directories are set 644 as well, which means no files inside are
    accessible. This resulted in the past in doc/ actually not being
    added to the devel package.


author: Antonio Teixeira <antonio.teixeira@suse.com>
changelog:
  - Update to 3.0.0:
    * Updated ccast/axTLS to get ChromCast working again with latest Google CC
      operating software.
    * Extensive re-write/re-factor of icclib to make it more future-proof.
      See https://www.argyllcms.com/doc/ChangesSummary.html for details.
    * Added ref/ColorCheckerPassport.ti2 and ref/ColorCheckerHalfPassport.ti2
      to allow measuring ColorCheckerPassport with instrument.
    * Fixed bug in Munki spectro hi-res mode with some instruments. Luminance
      matching between normal and hi-res was sometimes quite poor.
    * Added ARGYLL_CREATE_DISPLAY_PROFILE_WITHOUT_CHAD environment variable.
    * Changed colprof -U flag to -u. Changed dispcal -J flag to -K to accommodate
      a potential new flag for colprof and dispcal.
    * Added workaround for bug in madHcNet64.dll32/64.dll which sometimes causes
      failure.
    * Added delay after USB set_config on OS X to help Spyder 3/4 on Ventura OS.
    * Added -Y parameter to dispwin to override automatic patch delay.
    * Changed i1d3 driver to cope with Rev. B "0x83" error robustly. This should
      fix any issues measuring low level Red only patch values on OLED displays,
      but with slower measurements when this occurs.
    * Added spotread -Y S option to save spectral sensitivity curves and added
      corresponding support in i1d3 driver. This allows for comparison of different
      instruments factory calibrations.
    * Added a -h scale parameter to dispread, to allow the automatic instrument
      calibration test patch values to be scaled down from their default 100%
      value. This is useful with HDR displays.
    * Added manifest to MSWindows executables to use UTF-8 code pages on Windows
      1903 and later. This should improve non-ASCII filename and path handling.
    * Added a Violet colorant to the targen colorant list.
    * Fixed problem with OS X 64 bit backwards compatibility where it failed to
      locate serial instruments when the binaries are run on OS X V12 or latter
      machines.
    * Fixed bug in i1Pro3 driver where it was not returning the correct
      measurement conditions enum.
    * Fixed spotread so that ambient measure for monochrome sources doesn't error
      out due to bad CCT/VCT/VDT. Also change -T so that it suppresses CCT etc. if
      ambient mode is used.
    * Added hacky workaround to strange Mac M2/rosetta bug in del_i1proimp().
  - Make the argyllcms-doc package noarch.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 3.0.2:
    * Fix #include <ctype.h> in spectro/conv.c
    * Fix typo introduced into spectro/i1d3.c that prevents
      retail i1d3 from working.
    * Fixed accuracy problem with xicclu -fb when using cLut type
      profiles that use a matrix in their B2A table.
    * Fixed crash in xicclu with device link profiles.
    * Fixed error when creating profiles with
      ARGYLL_CREATE_DISPLAY_PROFILE_WITH_CHAD or
      ARGYLL_CREATE_OUTPUT_PROFILE_WITH_CHAD.
    * Make re-writing an ICC profile more forgiving of
      tags that are incorrect for the profile version.
    * Fixed problem with writing textDescriptionType
      ScriptCode that was not being padded to 67 characters.
    * Fixed bug in CGATS output. This showed up in oeminst.


author: Antonio Teixeira <antonio.teixeira@suse.com>
changelog:
  - update to 3.1.0:
    * Fixed bug in CMYK profile B2A table creation that sometimes resulted in
      bumpy black generation. (Only occurred when compiled using recent gcc with
      code optimization.)
    * Changed ICC profile serialization of pure ASCII text tags emit a warning
      rather than error if they are fed non-ASCII utf8 input.
    * Made ICC code a little more robust against bad profiles. (Thanks to David Hoyt).
    * Fixed latent bug in X11 plot code that caused window not to be created or
      updated when dowait == 0. This shows up on Linux as failure of spotread -S
      to show spectral plot.
    * Fixed problem with colorhug not noticing errors from the instrument.
    * Updated scanin/it8Wolf.cht to improve accuracy of grey wedge patch recognition.
    * Merged some Debian patches, including spelling fixes.


author: Antonio Teixeira <antonio.teixeira@suse.com>
changelog:
  - Fix build with gcc14 (bsc#1221304)
    * Add ajam-gcc14.patch
  - Reformat ajam-include.patch with a/b prefixes
  - Use %autosetup


author: Antonio Teixeira <antonio.teixeira@suse.com>
changelog:
  - Update to 3.2.0:
    * Added extra diagnostics to printcal.
    * Added colprof -nI option, that adds inverse gamut mapping to Perceptual and
      Saturation A2B tables, if they are being created. This is not recommended for
      source profiles, since it handicaps true gamut mapping, but may be a workaround
      to faulty Adobe Lightroom BPC for Perceptual intent in output profiles.
    * Added error message for ColorMunki spectro sensor internal cable being
      disconnected.
    * Fixed bug in Appearance B2A conversion that appeared in V3.0 release.
    * Fixed crash in chartread strip reading when given faulty .ti2 file.
    * Tweaked i1d3 AIO adaptive integration time to reduce measure time to be more
      comparable to just using Rev A commands.
    * Re-worked ARGYLL_NOT_INTERACTIVE stdin to work much better on MSWin when
      connected to a pipe. Removed code that empties stdin before expecting use input
      when ARGYLL_NOT_INTERACTIVE.
    * Fixed OS X dispwin -c etc.
    * Fixed colprof IGNORE_DISP_ZEROS heuristic so that it doesn't reject OLED red
      measurements that have a Z value of 0.0.
    * Added -H option to colprof to allow setting the charTargetTag to given string,
      rather than automatically filling with .ti3 data.
    * Changed instrument monitoring thread debug messages to only be shown on -D9, so
      they don't interfere with messages shown at -D8.


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.02.0
    * New feature release
  - Changes since 24.01.95:
    * Specify umask for permission tests
    * cli7zplugin: improve compatibility with original 7-Zip


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.02.1
    * New bugfix release
    * For more details please see:
    * https://kde.org/announcements/gear/24.02.1/
  - Changes since 24.02.0:
    * Don't rely on qtpaths for kconf_update scripts
    * Specify umask for permission tests


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.02.2
    * New bugfix release
    * For more details please see:
    * https://kde.org/announcements/gear/24.02.2/
  - Changes since 24.02.1:
    * clirartest: drop addArgs test for RAR4
    * clirarplugin: disable RAR4 compression method (kde#483748)
    * Make clang-format happy
    * Remove documentation that doesn't compile


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.04.80
    * New feature release
  - Too many changes since 24.02.2, only listing bugfixes:
    * clirarplugin: disable RAR4 compression method (kde#483748)


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.05.1
    * New bugfix release
    * For more details please see:
    * https://kde.org/announcements/gear/24.05.1/
  - Changes since 24.05.0:
    * Explicitly link against Qt::DBus


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.05.2
    * New bugfix release
    * For more details please see:
    * https://kde.org/announcements/gear/24.05.2/
  - Changes since 24.05.1:
    * Tests: Comment out test that fails to pass


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Add patch to fix tmp folder cleanup (kde#487229):
    * 0001-cliinterface-adapt-to-behavior-change-in-QTemporaryD.patch


author: tiwai@suse.de
changelog:
  - Renamed ttf-arphic-uming -> arphic-uming-fonts according to
    openSUSE packaging guidelines and FATE#313035
    Adjusted Obsoletes and Provides accordingly


author: pgajdos@suse.com
changelog:
  - updated to 0.2.20080216:
    * This release comes as TrueType Collection with 4 font flavors:
    * AR PL UMing CN: glyph shapes according to GB18030-2000
    * AR PL UMing HK: glyph shapes according to the Ming-Uni reference font
      and HKSCS printed material published by the HKSAR government
    * AR PL UMing TW: glyph styles according to CNS11643
    * AR PL UMing TW MBE: like "AR PL UMing TW" plus MBE glyph shapes in the
      Bopomofo Extended block used for Minnan and Hakka
    * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
    concept. All other glyphs have the same style throughout all flavors.


author: Ismail Dönmez <idonmez@suse.com>
changelog:
  - Update to version 9.0.3
    * Fix extra newline characters inserted into generated source
    * Validate line endings as part of test suite


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 9.0.5:
    - Use config newline setting in system attribute evaulation
    - Update to deadsnakes/python@v2.0.2


author: Matthias Eliasson <elimat@opensuse.org>
changelog:
  - update to version 9.1.0
    * Can specify a line range when using the include macro.
    * Setting the SGML_CATALOG_FILES environment variable will set --catalogs
      on xmllint within a2x.


author: Ferdinand Thiessen <rpm@fthiessen.de>
changelog:
  - Update to version 10.1.4
    * Add top-level __version__ and VERSION module exports
    * Fix self reference errors in AsciiDocApi
    * Add back asciidoc execute print in a2x verbose
  - Update to version 10.0.0
    * AsciiDoc.py has been rewritten to be a proper Python package
    * Support for overriding the bundled *.conf files is done through
      CLI flags, environment variables, etc., and not through directly
      editing the files within the installation.
    * Importing asciidoc should no longer require the asciidocapi.py script
      and can be done through regular python import
    * The APIs of the asciidoc and a2x scripts are now considered
      "provisional" with no guarantee of BC between releases with the
      exception of the asciidoc.execute method.
  - Update to version 9.1.1
    * Cleanup outfile on system-exiting exceptions
  - Rebased asciidoc.version.patch


author: Stephan Kulow <coolo@suse.com>
changelog:
  - Add a subpackage that brings in the requirements for building pdf (too much
    for default, recommends won't help in building OBS packages)
  - Adding multibuild flavor to verify the latex dependencies are complete
  - Motivated by nut failing to build pdf in SP4


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Do not recommend asciidoc-latex-backend: Do not pull in the LaTeX
    stack on all systems using asciidoc.
  - Supplement asciidoc and dblatext with the -latex-backend sub
    package: users that have both, asciidoc and dblatex installed,
    and thus already opted-in to LaTeX, will also get the backend
    installed.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Update to version 10.2.0:
    + Future feature:
    - As part of the intended 10.3.0 release, the following
      document attribute flags will be reserved for modifying
      asciidoc-py runtime behavior:
      . future-compat
      . legacy-compat
      . compat-mode
    - Please see GH issue #254 for more information.
    + Bug fixes: Fix verbose output not working when using a2x or
      asciidoc entry points.
    + Miscellaneous: Automate publishing asciidoc-py website as part
      of release process.


author: pgajdos@suse.com
changelog:
  - baselibs.conf: libaspell15
    obsoletes "aspell-<targettype> <= <version>"
    provides "aspell-<targettype> = <version>"


author: pgajdos@suse.com
changelog:
  - version update to 0.60.8
    * Prevent a potentially unbounded buffer over-read by no longer
    supporting null-terminated UCS-2 and UCS-4 encoded strings with the
    original C API. @xref{Upgrading from Aspell 0.60.7}.
    * Ensure that possible typos are listed before other suggestions when
    typo analysis is used.  Also fix a bug so that suggestions that split
    a word using a space or hyphen are not always first.
    * Add Markdown filter.
    * Add new @option{wordlists} option, which is a list of UTF-8 files that
    contain additional words to accept.
    * Add new @option{camel-case} option, which enables support for checking
    camelCase words.
    * Sort personal and replacement dictionaries.
    * Change @code{ultra} suggestion mode to only find words that are within
    one-edit distance or have the same soundslike.
    * Implement the @code{aspell filter} command.
    * Fix a bug in @code{AspellDocumentChecker} that prevented it from
    working with UCS-2 and UCS-4 encoded strings.
    * Remove unused @option{sug-edit-dist} option.
    * @code{AspellDocumentChecker} now expects the document a line at a time
    in order to work with the new Markdown filter.  If the document is
    split on white space characters instead, nothing will break, but new
    filters such as the Markdown filter may give incorrect results.
    * The @option{clean} option and command will no longer split a word.
    * Various documentation improvements.
    * Removal of several outdated appendices that don't really belong in the
    main manual.  Parts that are still relevent may eventually be moved
    elsewhere, but for now they are available online at
    @uref{http://aspell.net/0.60.7/man-html/}.
    * Fix various crashes and other problems found by Google's OSS-Fuzz.
    * Add partial support for recognizing the Unicode apostrophe (') in
    words.  In particular Aspell will accept the Unicode apostrophe when
    the language uses an ISO Latin charset that doesn't already have a
    Unicode apostrophe.  For now, Aspell will still use the ASCII version
    in suggestions.
    * Detect when a dictionary compiled on a 32-bit machine is used on a
    64-bit one (and vise versa), as due to an oversight, compiled
    dictionaries depend on more than the endianness.  Also added a compile
    time option to remove this dependency, but at the cost of breaking
    compatibility with already compiled dictionaries on 64-bit systems.
    * Fix a bug which caused Aspell to crash when passing in a null string
    to almost any of the C API functions.  This should not happen if the
    size is also zero as the pointer should never be derefrenced.
    * Fix a bug that caused Aspell to crash with a SEGFAULT when built with
    mingw-w64.
    * In addition to outputting a warning when building with NDEBUG defined,
    also include NDEBUG in the version string.
    * Various compile fixes for newer version of Gcc and Clang.
    * Fix VPATH builds.
    * Use utf-8 encoding for manual instead of iso-8859-1.
    * Other minor updates and bug fixes.
  - deleted patches
    - aspell-automake-1.13.patch (upstreamed)
    - aspell-epmty_file.patch (upstreamed, bsc#266130 does not exhibit)
    - gcc7-fix-warnings.patch (upstreamed)


author: pgajdos@suse.com
changelog:
  - security update
  - modified patches
    % aspell-quotes.patch (p1)
    % aspell-strict-aliasing.patch (p1)
  - added patches
    fix CVE-2019-25051 [bsc#1188576], heap-buffer-overflow in acommon:ObjStack:dup_top
    + aspell-CVE-2019-25051.patch


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 0.60.8.1:
    * Fix memory leak in suggestion code introduced in 0.60.8.
    * Various documentation fixes.
    * Fix various warnings when compiling with -Wall.
    * Fix two buffer overflows found by Google?s OSS-Fuzz.
    * Other minor updates.
  - drop aspell-CVE-2019-25051.patch (upstream)


author: pgajdos@suse.com
changelog:
  - updated to 2015.03.24:
    * Updated to SCOWL 2015.02.15 which added a large number of new words
      such as "inbox", "smartphone", and "selfie" and removed some
      problematic words.


author: rpm@fthiessen.de
changelog:
  - Use SourceURL
  - Use GPG signed source
  - updated to 2018.04.16
    * various new words (see SCOWL-README for other changes)


author: amajer@suse.com
changelog:
  - run fdupes only on dictionary data
  - update keyring to include all upstream signatures
  - update URL


author: pgajdos@suse.com
changelog:
  - removing Novell residues
  - deleted patches
    - aspell-en-Novellwords_extra_dict.patch (not needed)
  - deleted sources
    - Nwordlist.tgz (abandoned)


author: pgajdos@suse.com
changelog:
  - version update to 2020.12.07
    * Various new words.
    * Variant cleanups.
    * Bump irregardless, froward (+ derivatives) and perpend to level 70.


author: Christophe Giboudeaux <christophe@krop.fr>
changelog:
  - Update to 5.2.4
    * Use static runtime only when the option is selected
    * Fix compile error: When enabling macro ASSIMP_DOUBLE_PRECISION
    * Detect Roughness factor exported by Blender
    * Updated Android build script
    * Prevent nullptr access to normals-array in bitangent computation
    * Avoid setting PBR properties when they are not found on mtl file
    * Fix ogre xml serializer
    * Fix draco building error when import assimp with cmake add_subdirectory
    * FbxConverter: update bone mOffsetMatrix
    * Some Windows/MSYS2-specific fixes
    * Document fuzz folder
    * Fix out-of-range access in ASE-Parser
    * Disable assertion tests floating point against inf for Intel oneAPI
    * Delete README
    * Rename TextureTypeToString() to aiTextureTypeToString()
    * Fixed library names for MinGW/MSYS2
    * Update pugixml dependency to v1.12.1
    * Add an option to treat warnings as errors
    * Minor updates to ASSIMP Viewer
    * Add badge to show open issue in percentage
    * Clang-Tidy performance fixes (make values const-ref where needed)
    * MMD (pmx) fixes
    * Resource script updates
    * Accelerate the Merge vertex post processing step


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 5.2.5:
    * Add unittest to reproduce undefined behavior
    * Cleanups
    * Link static linkage for std_image.
    * fix msvc warnings-as-errors
    * Remove dll-export tags from static library builds.
    * Fix Import a specific FBX model will freeze the app
    * Create SECURITY.md
    * Pragma warnings cause build fail with MinGW
    * Fixed FBXConverter build error when using double precision
    * Fix possible nullptr exception
    * [Experimental] New skeleton container for bones
    * Add support for GCC v12
    * Remove unused variable.
    * Infinite loop on bad import files
    * Utilize AI_CONFIG_IMPORT_REMOVE_EMPTY_BONES flag for Collada meshes.
    * Fix Windows 32-bit builds
    * Fix GNUC check on Windows
    * Update the name of the package
    * Kimkulling/fix invalid opengex token match
    * Disable build for tools per default
    * Use mingw.include
    * Fix a memory leak
    * Fix nested animation name being lost in Collada
    * Fix possible bad_alloc exception for an invalid file
    * Bump JesseTG/rm from 1.0.2 to 1.0.3
    * Bump actions/cache from 2 to 3
    * Kimkulling/fix texture loading 3MF, reladed issue-4568
    * Bump actions/upload-artifact from 2 to 3
    * Bump actions/checkout from 2 to 3
    * Remove assertion test
    * Fix memory leak in D3MFOpcPackage
    * Fix typo in installation instructions for ubuntu.
    * Build fix for compiling against minizip.
    * Fix stl for over 4 GB
    * Fix uninitialized variable.
    * Fixes Crash in Assimp::ObjFileMtlImporter::getFloatValue
    * Fixes Heap-buffer-overflow in Assimp::ObjFileParser::getFace
    * Fixes Heap-buffer-overflow in std::__1::basic_string<char, std::__1::?
    * Fixes Heap-use-after-free in Assimp::DXFImporter::ExpandBlockReferences
    * Fixes Heap-buffer-overflow in SuperFastHash
    * ColladaParser - Store sid in mSID field
    * Fix mingw include in assimp_cmd.rc
    * Fix warnings that are causing build fails with specific build flags
    * Update version tag
    * Improvements and optimizations for the obj-parsers.
    * Experiment: try to enable parallel build
    * Fixed typo
    * Use [[fallthrough]]; to mark whished fallthroughs
    * Kimkulling/do not add dot when the extension is empty
    * Fixes Heap-buffer-overflow READ in Assimp::ASE::Parser::ParseLV1SoftSkinBlock
    * Use unqualified uint32_t everywhere in FBXBinaryTokenizer
    * Fix problems setting DirectX_LIBRARY
    * Added support for more bone weights in GLTF2
    * (Mostly) Blender fixes
    * [WIP] Use ai_Real to write correct accuracy
    * SMD fixes
    * Remove exception on glTF 2.0 loading
    * Fix out-of-bounds reads in X3D importer
    * Apply the modernize-use-emplace clang-tidy rule
    * The Wrong object is created here!
    * [WIP] Code cleanup and some new unittests for edge-cases.
    * clang-tidy: explicitly default all empty ctors and dtors
    * fix vertices being joined duplicating weights
    * add missing light data to assbin import/export
    * Fix aiBone.mOffsetMatrix documentation
    * Minor obj export bugfix
    * Kimkulling/cleanup after reviewing
  - drop 0001-Fix-build-with-zlib.patch (upstream)


author: Ferdinand Thiessen <rpm@fthiessen.de>
changelog:
  - Update to 5.3.1
    * Fixes CVE-2022-38528 (boo#1203187)
    * Mainly bug fixes
    * Fix: Use ASCII treeview in assimp-cmd.
    * Fix: Fix head overflow in MD5-parser.
    * Fix: C++ std::tuple constexpr initial list on old compiler
    * Make FBX parser resilient to missing data streams
    * Fix incorrect documentation of defaults
    * Fixed issue with clang complaining about sprintf and vsprintf being depreciated
    * Fix build error: ?temp? may be used uninitialized in this function
    * Fix: Use correct epsilon
    * Fix: Add missing handling for double export in json
    * Full change log https://github.com/assimp/assimp/releases/tag/v5.3.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Disable the collada importer/exporter due to a long standing
    security issue (boo#1207377, CVE-2022-45748, gh#assimp/assimp#4286)
  - Add patch:
    * 0001-Don-t-build-the-collada-importer-exporter-tests.patch


author: Adam Mizerski <adam@mizerski.pl>
changelog:
  - Reenable the Collada parser.
  - Removed patch 0001-Don-t-build-the-collada-importer-exporter-tests.patch
  - Add patch (boo#1207377, CVE-2022-45748)
    * 0001-ColladaParser-check-values-length-5462.patch
  - Improved tests filtering


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.4.0
    * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
    * Fix: Add check for invalid input argument
    * Replace an assert
    * Extension of skinning data export to GLB/GLTF format
    * Fix output floating-point values to fbx
    * Update ImproveCacheLocality.cpp
    * Deep arsdk bone double free
    * Fix Spelling error
    * use size to be compatible with float and double
    * Fix: Add missing transformation for normalized normals.
    * Fix: Implicit Conversion Error
    * Fix add checks for indices
    * Update FBXBinaryTokenizer.cpp
    * link to external minizip with full path
    * utf8 header not found
    * Rm unnecessary deg->radian conversion in FBX exporter
    * Fix empty mesh handling
    * Refactoring: Some cleanups
    * Fix invalid read of uint from uvwsrc
    * Remove double delete
    * fix the mesh-name error.
    * COLLADA fixes for textures in C4D input
    * Use the correct allocator for deleting objects in case of
      duplicate animation Ids
    * Fix container overflow in MMD parser
    * Fix: PLY heap buffer overflow
    * Fix: Check if index for mesh access is out of range
    * Update FBXConverter.cpp
    * FBX: Use correct time scaling
    * Drop explicit inclusion of contrib/ headers
    * Update Build.md
    * Fix buffer overflow in FBX::Util::DecodeBase64()
    * Readme.md: correct 2 errors in section headers
    * Fix double free in Video::~Video()
    * FBXMeshGeometry: solve issue #5116 using patch provided
    * Fix target names not being imported on some gLTF2 models
    * correct grammar/typographic errors in comments (8 files)
    * KHR_materials_specular fixes
    * Disable Hunter
    * fixed several issues
    * Fix leak
    * Check the validity of the archive without parsing
    * Fix integer overflow
    * Add a test before generating the texture folder
    * Build: Disable building zlib for non-windows
    * null check.
    * Bump actions/upload-artifact from 3 to 4
    * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
      to pbrMetallicRoughness/baseColorFactor
    * dynamic_cast error.
    * Add missing IRR textures
    * Fix handling of X3D IndexedLineSet nodes
    * Improve acc file loading
    * Readme.md: present hyperlinks in a more uniform style
    * FBX Blendshape FullWeight: Vec<Float> -> FullWeight: Vec<Double>
    * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling fix
      and colour fix
    * Update StbCommon.h to stay up-to-date with stb_image.h.
    * Introduce aiBuffer
    * Add bounds checks to the parsing utilities.
    * Fix crash in viewer
    * Static code analysis fixes
    * Kimkulling/fix behavior of remove redundant mats issue 5438
    * Fix X importer breakage introduced in commit f844c33
    * Fileformats.md: clarify that import of .blend files is deprecated
    * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
    * More GLTF loading hardening
    * Bump actions/cache from 3 to 4
    * Blendshape->Geometry in FBX Export
    * Fix identity matrix check
    * Fix PyAssimp under Python >= 3.12 and macOS library search support
    * Add ISC LICENSE file
    * ColladaParser: check values length
    * Include defs in not cpp-section
    * Add correct double zero check
    * Add zlib-header to ZipArchiveIOSystem.h
    * Add 2024 to copyright infos
    * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
    * Eliminate non-ascii comments in clipper
    * Fix compilation for MSVC14.
    * Add correction of fbx model rotation
    * Delete tools/make directory
    * Delete packaging/windows-mkzip directory
    * Fix #5420 duplicate degrees to radians conversion in fbx importer
    * Respect merge identical vertices in ObjExporter
    * Fix utDefaultIOStream test under MinGW
    * Fix typos
    * Add initial macOS support to C4D importer
    * Update hunter into CMakeLists.txt
    * Fix: add a missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
    * updated json
    * Cleanup: Fix review findings
    * Update CMakeLists.txt
  - Drop patch, merged upstream:
    * 0001-ColladaParser-check-values-length-5462.patch


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.4.1
    * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
    * Deps: updated minizip to last version
    * Deps: updated STBIMAGElib
    * Fix issue #5461 (segfault after removing redundant materials)
    * Update ComputeUVMappingProcess.cpp
    * Add some ASSIMP_INSTALL checks
    * Fix SplitByBoneCount typo that prevented node updates
    * Q3DLoader: Fix possible material string overflow
    * Reverts the changes introduced by commit ad766cb in February 2022
    * Fix a collada import bug
    * Mention IQM loader in Fileformats.md
    * Fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
      or is 0
    * Add checks for invalid buffer and size
    * Make sure for releases revision will be zero
    * glTF2Importer: Support .vrm extension


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.4.2
    * Fix building on Haiku
    * Reduce memory consumption in JoinVerticesProcess::ProcessMesh()
      significantly
    * Fix: Add check for invalid input argument
    * Replace an assert
    * Extension of skinning data export to GLB/GLTF format
    * Fix output floating-point values to fbx
    * Update ImproveCacheLocality.cpp
    * Update Readme.md
    * Deep arsdk bone double free
    * Fix Spelling error
    * use size in order to be compatible with float and double
    * Fix: Add missing transformation for normalized normals.
    * Fix: Implicit Conversion Error
    * Fix add checks for indices
    * Update FBXBinaryTokenizer.cpp
    * link to external minizip with full path
    * utf8 header not found
    * Rm unnecessary deg->radian conversion in FBX exporter
    * Fix empty mesh handling
    * Refactoring: Some cleanups
    * Fix invalid read of uint from uvwsrc
    * Remove double delete
    * fix mesh-name error.
    * COLLADA fixes for textures in C4D input
    * Use the correct allocator for deleting objects in case of
      duplicate animation Ids
    * Fix container overflow in MMD parser
    * Fix: PLY heap buffer overflow
    * Fix: Check if index for mesh access is out of range
    * Update FBXConverter.cpp
    * FBX: Use correct time scaling
    * Drop explicit inclusion of contrib/ headers
    * Update Build.md
    * Fix buffer overflow in FBX::Util::DecodeBase64()
    * Readme.md: correct 2 errors in section headers
    * Fix double free in Video::~Video()
    * FBXMeshGeometry: solve issue #5116 using patch provided
    * Fix target names not being imported on some gLTF2 models
    * correct grammar/typographic errors in comments (8 files)
    * KHR_materials_specular fixes
    * Disable Hunter
    * fixed several issues
    * Fix leak
    * Check validity of archive without parsing
    * Fix integer overflow
    * Add a test before generating the txture folder
    * Build: Disable building zlib for non-windows
    * null check.
    * Bump actions/upload-artifact from 3 to 4
    * fix: KHR_materials_pbrSpecularGlossiness/diffuseFactor convert
      to pbrMetallicRoughness/baseColorFactor
    * fix building errors for MinGW
    * dynamic_cast error.
    * Add missing IRR textures
    * Update Dockerfile
    * Fix handling of X3D IndexedLineSet nodes
    * Improve acc file loading
    * Readme.md: present hyperlinks in a more uniform style
    * FBX Blendshape FullWeight: Vec<Float> -> FullWeight: Vec<Double>
    * Fix for issues #5422, #3411, and #5443 -- DXF insert scaling
      fix and colour fix
    * Update StbCommon.h to stay up-to-date with stb_image.h.
    * Introduce aiBuffer
    * Add bounds checks to the parsing utilities.
    * Fix crash in viewer
    * Static code analysis fixes
    * Kimkulling/fix bahavior of remove redundat mats issue 5438
    * Fix X importer breakage introduced in commit f844c33
    * Fileformats.md: clarify that import of .blend files is deprecated
    * feat:1.add 3mf vertex color read 2.fix 3mf read texture bug
    * More GLTF loading hardening
    * Bump actions/cache from 3 to 4
    * Update CMakeLists.txt
    * Blendshape->Geometry in FBX Export
    * Fix identity matrix check
    * Fix PyAssimp under Python >= 3.12 and macOS library search support
    * Add ISC LICENSE file
    * ColladaParser: check values length
    * Include defs in not cpp-section
    * Add correct double zero check
    * Add zlib-header to ZipArchiveIOSystem.h
    * Add 2024 to copyright infos
    * Append a new setting "AI_CONFIG_EXPORT_FBX_TRANSPARENCY_FACTOR_REFER_TO_OPACITY"
    * Eliminate non-ascii comments in clipper
    * Fix compilation for MSVC14.
    * Add correction of fbx model rotation
    * Delete tools/make directory
    * Delete packaging/windows-mkzip directory
    * Fix #5420 duplicate degrees to radians conversion in fbx importer
    * Respect merge identical vertices in ObjExporter
    * Fix utDefaultIOStream test under MinGW
    * Fix typos
    * Add initial macOS support to C4D importer
    * Update hunter into CMakeLists.txt
    * Fix: add missing import for AI_CONFIG_CHECK_IDENTITY_MATRIX_EPSILON_DEFAULT
    * updated json
    * Cleanup: Fix review findings
    * CMake: Allow linking draco statically if ASSIMP_BUILD_DRACO_STATIC is set.
    * updated minizip to last version
    * updated STBIMAGElib
    * fix issue #5461 (segfault after removing redundant materials)
    * Update ComputeUVMappingProcess.cpp
    * add some ASSIMP_INSTALL checks
    * Fix SplitByBoneCount typo that prevented node updates
    * Q3DLoader: Fix possible material string overflow
    * Reverts the changes introduced
    * fix a collada import bug
    * mention IQM loader in Fileformats.md
    * Kimkulling/fix pyassimp compatibility
    * fix ASE loader crash when *MATERIAL_COUNT or *NUMSUBMTLS is not specified
      or is 0
    * Add checks for invalid buffer and size
    * Make sure for releases revision will be zero
    * glTF2Importer: Support .vrm extension
    * Prepare v5.4.1
    * Remove deprecated c++11 warnings
    * fix ci
    * Fix integer overflow
    * Assimp viewer fixes
    * Optimize readability
    * Temporary fix for #5557 GCC 13+ build issue -Warray-bounds
    * Fix a bug that could cause assertion failure.
    * Fix possible nullptr dereferencing.
    * Update ObjFileParser.cpp
    * Fix for #5592 Disabled maybe-uninitialized error for
      AssetLib/Obj/ObjFileParser.cpp
    * updated zip
    * Postprocessing: Fix endless loop
    * Build: Fix compilation for VS-2022 debug mode - warning
    * Converted a size_t to mz_uint that was being treated as an error
    * Add trim to xml string parsing
    * Replace duplicated trim
    * Move aiScene constructor
    * Move revision.h and revision.h.in to include folder
    * Update MDLMaterialLoader.cpp
    * Create inno_setup
    * clean HunterGate.cmake
    * Draft: Update init of aiString
    * Fix init aistring issue 5622 inpython module
    * update dotnet example
    * Make stepfile schema validation more robust.
    * fix PLY binary export color from float to uchar
    * Some FBXs do not have "Materials" information, which can cause
      parsing errors
    * Fix collada uv channels - temporary was stored and then updated.
    * remove ASE parsing break
    * FBX-Exporter: Fix nullptr dereferencing
    * Fix FBX exporting incorrect bone order
    * fixes potential memory leak on malformed obj file
    * Update zip.c
    * Fixes some uninit bool loads
    * Fix names of enum values in docstring of aiProcess_FindDegenerates
    * Fix: StackAllocator Undefined Reference fix
    * Plx: Fix out of bound access


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Update to 3.2.2:
    * Add script batch-job
  - Refresh patch at-3.1.14.patch into at-3.2.2.patch
  - Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8


author: Johannes Segitz <jsegitz@suse.com>
changelog:
  - Added hardening to systemd service(s). Added patch(es):
    * harden_atd.service.patch
    Modified:
    * atd.service


author: Johannes Segitz <jsegitz@suse.com>
changelog:
  - Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
    breaking at jobs (boo#1192294)


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Update to version 3.2.4:
    * Upstream SUSE patches
  - Update to version 3.2.3:
    * Fix two typos on documentation
    * Upstream SUSE patches
    * Various improvements to the code and the build system
  - Refresh patches:
    * at-3.1.16-handle_malformed_jobs.patch
    * at-3.2.2.patch
    * at-backport-old-privs.patch
    * harden_atd.service.patch
  - Drop upstreamed patches:
    * at-3.1.13-leak-fix.patch
    * at-3.1.13-massive_batch.patch
    * at-3.1.14-joblist.patch
    * at-3.1.14-usePOSIXtimers.patch
    * at-3.1.8-jobdir-mtime.patch
    * at-atq-timeformat.patch
    * at-secure_getenv.patch


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
    * Remove harden_atd.service.patch


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 2.49.90:
    + Fix a test failure/timeout.
    + Add atspi_get_version() to return the runtime version of the
      library.
    + Collection: fix match testing for attributes.
    + Fix a NULL pointer dereference when deregistering an event
      listener that doesn't include a detail.
    + Fix the documentation for interfaces in collection match rules.
    + Add an AtspiLive enum to specify the politeness level for live
      regions, and document that this should be used for Announcement
      signals. Also add a notification signal in atk to replace the
      announcement signal that lacks the politeness information.
    + Add an asynchronous version of atspi_generate_mouse_event.


author: Luciano Santos <luc14n0@opensuse.org>
changelog:
  - Update to version 2.49.91:
    + collection: Avoid locking up if an object has a very large
      child count.
    + Fix possible NULL pointer dereference when deregistering an
      event listener.
    + Various fixes for the new key grabbing API.
    + Don't wait for a reply when registering or deregistering
      keystroke listeners.


author: Luciano Santos <luc14n0@opensuse.org>
changelog:
  - Adjust %fdupes parameter value to %{buildroot}%{_datadir}, one of
    the parent directories of the former parameter, to symlink other
    duplicate files under the datadir.


author: Yifan Jiang <yfjiang@suse.com>
changelog:
  - Provide and obsolete more packages from old atk and at-spi2-atk:
    atk-devel, at-spi2-atk-devel and at-spi2-atk-common.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Update to version 2.51.0:
    + atk-adaptor: Fix critical when no table cell array is returned.
    + accessible: Do not rename deprecated methods to the new names.
    + Add HelpText property and corresponding functions in atk and
      libatspi.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Update to version 2.51.90:
    + Add an attribute-changed signal in atk, and update libatspi
      attribute cache.
    + Add GetTextSelection and SetTextSelection to Document
      interface.
    + Add atspi_device_generate_mouse_event, and implement for
      mutter.
    + Have atspi_device_add_key_grab return 0 if XIGrabKeycode fails.
    + xml: Add Embedded to the Socket interface.
    + Don't return uninitialized values if
      atspi_component_get_size/position fail.
  - Add pkgconfig(libei-1.0) BuildRequires: new dependency.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Update to version 2.51.91:
    + Back out code to generate mouse events on mutter. It had a
      couple of unwanted side effects. Also remove dependencies on
      libei and xkbcommon.
    + atk-adaptor: Fix collection role matching.
    + Have atspi_text_get_string_at_offset fall back to calling
      GetTextAtOffset if GetStringAtOffset is unimplemented.
    + Don't use g_assert in the unit tests.


author: matthias.gerstner@suse.com
changelog:
  - removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
    firewalld, see [1].
    [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html


author: chris@computersalat.de
changelog:
  - fix logrotate
    * change command to '/sbin/service atftpd restart' since there is no
      init script and we are using systemd
  - fix service file
    * atftpd does not create logfile when there is none, hence we create
      in ExecStartPre
  - Update sysconfig file
    * add ATFTPD_LOGFILE if we want to use our own logfile
    * add comment to ATFTPD_BIND_ADDRESSES that it is obsolete since
      systemd (binds to 0.0.0.0)


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Security fix: [bsc#1176437, CVE-2020-6097]
    * A specially crafted sequence of RRQ-Multicast requests can
      trigger an assert() call resulting denial-of-service.
  - Add atftp-CVE-2020-6097.patch


author: Ferdinand Thiessen <rpm@fthiessen.de>
changelog:
  - Update to version 0.7.4
    * fix compile, missing include
    * fix compile, add missing defines
    * link against libpthread for atftp
    * fixed atftp fails to write to /proc/self/fd/1
    * Fix for DoS issue CVE-2020-6097
    * remove inline keyword from definitions
    * remove extern inlines
    * sys/cdefs usage
  - Drop fixed atftp-CVE-2020-6097.patch


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 0.7.5 [bsc#1190522, CVE-2021-41054]
    * text files: mark/convert all textfiles to UTF-8
    * fix some compiler warnings
    * fix buffer overflow in atftpd (CVE-2021-41054)
    * test.sh: check for root no longer necessary
    * tftpd.c: Only drop privs if requested or running as root + check for failure
    * fix invalid read of 1 byte in tftp_send_request.
    * Check return value of fseek(), abort if != 0
    * options.c: Proper fix for the read-past-end-of-array
    * configure.ac: Add -std=gnu89 if gcc/clang is detected
    * tftpd.c: Fix memleak if thread spawning fails
    * atftp: Check return value of fgets, buffer might be uninitialized on NULL
    * Fix check for argz support (HAVE_ARGZ -> HAVE_ARGZ_H)
    * replace LICENSE with current version
    * Remove patches fixed upstream:
    - atftp-0.7-sorcerers_apprentice.patch
    - atftp-0.7-server_receive_race.patch
    - atftp-0.7-ack_heuristic.patch
    * Rebase patches:
    - atftp-drop_privileges_non-daemon.patch
    - atftp-0.7-default_dir_man.patch
    - atftp-0.7-default_user_man.patch


author: Stefan Schubert <schubi@intern>
changelog:
  - Moved logrotate files from user specific directory /etc/logrotate.d
    to vendor specific directory /usr/etc/logrotate.d.


author: Stefan Schubert <schubi@suse.com>
changelog:
  - Migration to /usr/etc: Saving user changed configuration files
    in /etc and restoring them while an RPM update.


author: David Anes <david.anes@suse.com>
changelog:
  - Update to version 0.8.0
    * test.sh: add MTFTP tests
    * Fix MTFTP support for atftp
    * Fix multicast download.
    * Fix algorithm in case of packet loss in the last window.
    * Improve the robustness of the atftp-client in case of package loss or duplication
    * Implement PCRE tests.
    * Improve upstream test script. Include tests for windowsize option.
    * Fix/update minor issues in upstream
    * Fix the 'windowsize' option for write requests
    * FAQ INSTALL README.CVS README.PCRE: cosmetic and spelling fixes
    * *.h: cosmetic and spelling fixes
    * configure.ac: more fixes, also for libpcre2 detection
    * Port to maintained PCRE2 API
    * Changelog: update the recent changes
    * autoconf: modify autogen.sh
    * atftp.1: add more examples for options
    * Add a simple congestion control
    * Do some cosmetic changes
    * Add windowsize option as described in RFC7440


author: bjorn.lie@gmail.com
changelog:
  - Update to version 2.28.0:
    + No changes, version bump only.
  - Changes from version 2.24.3:
    + Fix silent builds.
    + Text: Plug memory leaks in get_text_vfunc() and
      get_selection_vfunc(). These vfuncs shall delete the returned
      character array after it has been copied to a Glib::ustring.
    + Replace the Visual Studio project files with MSVC NMake project
      files.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 2.28.1:
    + Build:
    - Improve NMake support
    - Use __declspec(dllexport) when building with Visual Studio
    - Add Meson support
    - doc/reference/: Update for Doxygen >= 1.8.16
  - Add meson BuildRequires and macros following upstreams port.
  - Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
    building documentation.
  - Replace gcc-c++ with generic c++_compiler BuildRequires.
  - Tweak setup macro and fdupes call.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 2.28.3:
    + Support building with Visual Studio 2022.
    + Meson build:
    - Specify 'check' option in run_command(). Will be necessary
      with future versions of Meson.
    - Perl is not required by new versions of mm-common.
    - Avoid unnecessary configuration warnings.
    - Require meson >= 0.55.0.
    + Require atk >= 2.12.0. Not a new requirement, but previously it
      was not specified in configure.ac and meson.build.
  - Changes from version 2.28.2:
    + Meson build:
    - Use relative paths to untracked/.
    - Make it possible to use atkmm as a subproject.
    - No implicit_include_directories.
    + atkmmconfig.h.*: Don't dllimport on MinGW.
  - Use ldconfig_scriptlets for post(un) handling.


author: qzhao@suse.com
changelog:
  - Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
    cancel executable permission for file
    /usr/share/doc/packages/libatkmm-1_6-1/NEWS
    (bsc#1209094, bsc#1209139).


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.107.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.107.0
  - No code change since 5.106.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.108.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.108.0
  - Changes since 5.107.0:
    * Remove qt6 CI builds


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.109.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.109.0
  - Changes since 5.108.0:
    * Add explicit moc includes to sources for moc-covered headers


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.110.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.110.0
  - No code change since 5.109.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.111.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.111.0
  - No code change since 5.110.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.112.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.112.0
  - No code change since 5.111.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.113.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.113.0
  - No code change since 5.112.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.114.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.114.0
  - No code change since 5.113.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.115.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.115.0
  - No code change since 5.114.0


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.116.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.116.0
  - No code change since 5.115.0


author: reddwarf@opensuse.org
changelog:
  - Update to version 0.3.6:
    + Implement FLAC and ALAC encoding and decoding.
    + Update license to LGPL 2.1.
  - Remove audiofile-0.3.5-without_examples.patch
  - Add pkgconfig(flac) BuildRequires


author: avvissu@yandex.ru
changelog:
  - Fix unresolvable dependencies for SLE11:
    + add RPM conditional tests for sles_version
  - Fix compilation error on SLE11: permission denied:
    + add $DESTDIR to make install


author: sbrabec@suse.com
changelog:
  - Fix overflow when changing both number of channels and sample
    format (bsc#949399, CVE-2015-7747,
    audiofile-CVE-2015-7747.patch).


author: alarrosa@suse.com
changelog:
  - Add 0001-Always-check-the-number-of-coefficients.patch to put in code
    an assert that was removed when building the code for a release
    which checks the number of coeficients in WAVE.cpp .
  - Add 0002-Check-for-multiplication-overflow-in-MSADPCM-decodeS.patch
    to check for a multiplication overflow in MSADPCM.cpp .
  - Add 0003-Check-for-multiplication-overflow-in-sfconvert.patch to
    check that a multiplication doesn't overflow when calculating a
    buffer size and reduce it if necessary.
  - Add 0004-clamp-index-values-to-fix-index-overflow-in-IMA.cpp.patch
    to clamp index values to fix an index overflow in IMA.cpp .
  - Add 0005-Actually-fail-when-error-occurs-in-parseFormat.patch
    so when there's an unsupported number of bits per sample or an invalid
    number of samples per block, don't only print an error message using
    the error handler, but actually stop parsing the file.
  - Add 0006-Check-for-division-by-zero-in-BlockCodec-runPull.patch to
    check for division by zero in BlockCodec::runPull
  - These patches fix boo#1026978 (CVE-2017-6837, CVE-2017-6838,
    CVE-2017-6839), boo#1026979 (CVE-2017-6827),
    boo#1026980 (CVE-2017-6828), boo#1026981 (CVE-2017-6829),
    boo#1026982 (CVE-2017-6830), boo#1026983 (CVE-2017-6831),
    boo#1026984 (CVE-2017-6832), boo#1026985 (CVE-2017-6833),
    boo#1026986 (CVE-2017-6834), boo#1026987 (CVE-2017-6836),
    boo#1026988 (CVE-2017-6835).


author: qzheng@suse.com
changelog:
  - Add 0007-set-the-output-chunk-to-the-amount-of-frames.patch to
    set the output chunk to the amount of frames we pulled so that
    the next module in the chain has the correct frame count (
    boo#1111586, CVE-2018-17095 ).


author: Takashi Iwai <tiwai@suse.com>
changelog:
  - Fix the incorrect argument passed to createTemporaryFile() (bsc#1221308):
    createTemporaryFile-argument-fix.patch
  - Refresh patch to be applied with -p1, use autosetup macro for cleanup
  - Put COPYING* to licenses


author: Enzo Matsumiya <ematsumiya@suse.com>
changelog:
  - Adjust audit.spec and audit-secondary.spec to support new version
  - Include fix for libev
    * add libev-werror.patch
  - Update to version 3.0.2
  - In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
  - Optionally interpret auid in auditctl -l
  - Update some syscall argument interpretations
  - In auditd, do not allow spaces in the hostname name format
  - Big documentation cleanup (MIZUTA Takeshi)
  - Update syscall table to the 5.12 kernel
  - Update the auparse normalizer for new event types
  - Fix compiler warnings in ids subsystem
  - Block a couple signals from flush & reconfigure threads
  - In auditd, don't wait on flush thread when exiting
  - Output error message if the path of input files are too long ausearch/report
    Included fixes from 3.0.1
  - Update syscall table to the 5.11 kernel
  - Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
  - Only enable periodic timers when listening on the network
  - Upgrade libev to 4.33
  - Add auparse_new_buffer function to auparse library
  - Use the select libev backend unless aggregating events
  - Add sudoers to some base audit rules
  - Update the auparse normalizer for some new syscalls and event types
    Included fixes from 3.0
  - Generate checkpoint file even when no results are returned (Burn Alting)
  - Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
  - Convert auparse_test to run with python3 (Tomá? Chvátal)
  - Drop support for prelude
  - Adjust backlog_wait_time in rules to the kernel default (#1482848)
  - Remove ids key syntax checking of rules in auditctl
  - Use SIGCONT to dump auditd internal state (#1504251)
  - Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
  - Fix parsing of uid & success for ausearch
  - Add support for not equal operator in audit by executable (Ondrej Mosnacek)
  - Hide lru symbols in auparse
  - Add systemd process protections
  - Fix aureport summary time range reporting
  - Allow unlimited retries on startup for remote logging
  - Add queue_depth to remote logging stats and increase default queue_depth size
  - Fix segfault on shutdown
  - Merge auditd and audispd code
  - Close on execute init_pipe fd (#1587995)
  - Breakout audisp syslog plugin to be standalone program
  - Create a common internal library to reduce code
  - Move all audispd config files under /etc/audit/
  - Move audispd.conf settings into auditd.conf
  - Add queue depth statistics to internal state dump report
  - Add network statistics to internal state dump report
  - SIGUSR now also restarts queue processing if its suspended
  - Update lookup tables for the 4.18 kernel
  - Add auparse_normalizer support for SOFTWARE_UPDATE event
  - Add 30-ospp-v42.rules to meet new Common Criteria requirements
  - Deprecate enable_krb and replace with transport config opt for remote logging
  - Mark netlabel events as simple events so that get processed quicker
  - When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  - In aureport, fix segfault in file report
  - Add auparse_normalizer support for labeled networking events
  - Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  - In ausearch/auparse, event aging is off by a second
  - In ausearch/auparse, correct event ordering to process oldest first
  - Migrate auparse python test to python3
  - auparse_reset was not clearing everything it should
  - Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  - In ausearch/report, lightly parse selinux portion of USER_AVC events
  - Add bpf syscall command argument interpretation to auparse
  - In ausearch/report, limit record size when malformed
  - Port af_unix plugin to libev
  - In auditd, fix extract_type function for network originating events
  - In auditd, calculate right size and location for network originating events
  - Make legacy script wait for auditd to terminate (#1643567)
  - Treat all network originating events as VER2 so dispatcher doesn't format it
  - If an event has a node name make it VER2 so dispatcher doesnt format it
  - In audisp-remote do an initial connection attempt (#1625156)
  - In auditd, allow expression of space left as a percentage (#1650670)
  - On PPC64LE systems, only allow 64 bit rules (#1462178)
  - Make some parts of auditd state report optional based on config
  - Update to libev-4.25
  - Fix ausearch when checkpointing a single file (Burn Alting)
  - Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  - In ausearch, do not checkpt if stdin is input source
  - In libev, remove __cold__ attribute for functions to allow proper hardening
  - Add tests to configure.ac for openldap support
  - Make systemd support files use /run rather than /var/run (Christian Hesse)
  - Fix minor memory leak in auditd kerberos credentials code
  - Allow exclude and user filter by executable name (Ondrej Mosnacek)
  - Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  - In ausearch/report fix --end to use midnight time instead of now (#1671338)
  - Add substitue functions for strndupa & rawmemchr
  - Fix memleak in auparse caused by corrected event ordering
  - Fix legacy reload script to reload audit rules when daemon is reloaded
  - Support for unescaping in trusted messages (Dmitry Voronin)
  - In auditd, use standard template for DEAMON events (Richard Guy Briggs)
  - In aureport, fix segfault for malformed USER_CMD events
  - Add exe field to audit_log_user_command in libaudit
  - In auditctl support filter on socket address families (Richard Guy Briggs)
  - Deprecate support for Alpha & IA64 processors
  - If space_left_action is rotate, allow it every time (#1718444)
  - In auparse, drop standalone EOE events
  - Add milliseconds column for ausearch extra time csv format
  - Fix aureport first event reporting when no start given
  - In audisp-remote, add new config item for startup connection errors
  - Remove dependency on chkconfig
  - Install rules to /usr/share/audit/sample-rules/
  - Split up ospp rules to make SCAP scanning easier (#1746018)
  - In audisp-syslog, support interpreting records (#1497279)
  - Audit USER events now sends msg as name value pair
  - Add support for AUDIT_BPF event
  - Auditd should not process AUDIT_REPLACE events
  - Update syscall tables to the 5.5 kernel
  - Improve personality interpretation by using PERS_MASK
  - Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
  - Change auparse python bindings to shared object (Issue #121)
  - Add error messages for watch permissions
  - If audit rules file doesn't exist log error message instead of info message
  - Revise error message for unmatched options in auditctl
  - In audisp-remote, fixup remote endpoint disappearin in ascii format
  - Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
  - In auditctl, add support for sending a signal to auditd
  - Remove audit-fno-common.patch: fixed in upstream
  - Remove audit-python3.patch: fixed in upstream


author: Enzo Matsumiya <ematsumiya@suse.com>
changelog:
  - Update to version 3.0.3:
    * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
    * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
    * Change auparse_feed_has_data in auparse to include incomplete events
    * Auditd, stop linking against -lrt
    * Add ProtectHome and RestrictRealtime to auditd.service
    * In auditd, read up to 3 netlink packets in a row
    * In auditd, do not validate path to plugin unless active
    * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
  - use https source urls


author: Enzo Matsumiya <ematsumiya@suse.com>
changelog:
  - Update to version 3.0.5:
    * In auditd, flush uid/gid caches when user/group added/deleted/modified
    * Fixed various issues when dealing with corrupted logs
    * In auditd, check if log_file is valid before closing handle
  - Include fixed from 3.0.4:
    * Apply performance speedups to auparse library
    * Optimize rule loading in auditctl
    * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
    * Update syscall table to the 5.14 kernel
    * Fixed various issues when dealing with corrupted logs


author: Callum Farmer <gmbr3@opensuse.org>
changelog:
  - Update to version 3.0.6:
    * fixes a segfault on some SELINUX_ERR records
    * makes IPX packet interpretation dependent on the ipx header
      file existing
    * adds b32/b64 support to ausyscall
    * adds support for armv8l
    * fixes auditctl list of syscalls on PPC
    * auditd.service now restarts auditd under some conditions


author: Enzo Matsumiya <ematsumiya@suse.de>
changelog:
  - Enable build for ARM (32-bit)
  - Update to version 3.0.9:
    * In auditd, release the async flush lock on stop
    * Don't allow auditd to log directly into /var/log when log_group is non-zero
    * Cleanup krb5 memory leaks on error paths
    * Update auditd.cron to use auditctl --signal
    * In auparse, if too many fields, realloc array bigger (Paul Wolneykien)
    * In auparse, special case kernel module name interpretation
    * If overflow_action is ignore, don't treat as an error
    (3.0.8)
    * Add gcc function attributes for access and allocation
    * Add some more man pages (MIZUTA Takeshi)
    * In auditd, change the reinitializing of the plugin queue
    * Fix path normalization in auparse (Sergio Correia)
    * In libaudit, handle ECONNREFUSED for network uid/gid lookups (Enzo Matsumiya)
    * In audisp-remote, fix hang with disk_low_action=suspend (Enzo Matsumiya)
    * Drop ProtectHome from auditd.service as it interferes with rules
    (3.0.7)
    * Add support for the OPENAT2 record type (Richard Guy Briggs)
    * In auditd, close the logging file descriptor when logging is suspended
    * Update the capabilities lookup table to match 5.16 kernel
    * Improve interpretation of renamat & faccessat family of syscalls
    * Update syscall table for the 5.16 kernel
    * Reduce dependency from initscripts to initscripts-service
  - Refresh patches (context adjusment):
    * audit-allow-manual-stop.patch
    * audit-ausearch-do-not-require-tclass.patch
    * audit-no-gss.patch
    * enable-stop-rules.patch
    * fix-hardened-service.patch
    * harden_auditd.service.patch
  - Remove patches (fixed by version update):
    * libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
    * audisp-remote-fix-hang-with-disk_low_action-suspend-.patch


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to 3.1:
    * Disable ProtectControlGroups in auditd.service by default
    * Fix rule checking for exclude filter
    * Make audit_rule_syscallbyname_data work correctly outside of auditctl
    * Add new record types
    * Add io_uring support
    * Add support for new FANOTIFY record fields
    * Add keyword, this-hour, to ausearch/report start/end options
    * Add Requires.private to audit.pc file
    * Try to interpret OPENAT2 fields correctly


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to 3.1.1:
    * Add user friendly keywords for signals to auditctl
    * In ausearch, parse up URINGOP and DM_CTRL records
    * Harden auparse to better handle corrupt logs
    * Fix a CFLAGS propogation problem in the common directory
    * Move the audispd af_unix plugin to a standalone program


author: Fabian Vogt <fvogt@suse.com>
changelog:
  - Use %autosetup
  - Don't include sample rules as %doc, they're already installed
    as normal files
  - Fix create-augenrules-service.patch:
    * auditd.service needs to require augenrules.service,
      not the other way around
  - Fix documentation for enable-stop-rules.patch


author: Enzo Matsumiya <ematsumiya@suse.com>
changelog:
  - Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
    * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
  - Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
    * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch


author: Stephan Kulow <coolo@suse.com>
changelog:
  - Fix buildrequire for openldap2-devel - audit doesn't require the
    (outdated) C++ binding, but the C headers that happen to be pulled
    in by buildrequiring the C++ devel package


author: Jason Sikes <jsikes@suse.com>
changelog:
  - Allow all printable ASCII characters in WPA-PSK definition
    * augeas-allow_printable_ASCII.patch
    * bsc#1185524
    * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
    * Credit to Michal Filka <mfilka@suse.com>


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Employ shared library packaging guideline and resolve this
    rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
    SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]


author: Jason Sikes <jsikes@suse.com>
changelog:
  - Update to 1.13.0
    * Fixes bsc#1204554
    * Added augeas-1.13.0-replace_security_context_t-patch to fix a
      syntax error.
    * Rebased gcc9-disable-broken-test.patch
    * Dropped the following patches since they are now upstreamed:
    - augeas-new_options_for_chrony.patch
    - augeas-allow_printable_ASCII.patch
    - remove-unportable-tests.patch
    * General changes/additions
    - Add Dockerfile (Nicolas Gif) (Issue #650)
    - augtool: Improved readline integration to handle quoting
      issues (Pino Toscano)
    - typechecker: Allow including '/' in keys and labels. Thanks
      to felixdoerre for pointing out that this restriction was
      unnecessary. See issue #668 for the discussion.
    - Add function modified() to select nodes which are marked as
      dirty (George Hansper) (Issue #691)
    - Add CLI command 'preview' and API 'aug_preview' to preview
      file contents (George Hansper) (#690)
    - Add "else" operator to augeas path-filter expressions
      (priority selector) (George Hansper) (#692)
    - Add new axis 'seq' to allow /path/seq::*[expr] to match and
      create numeric nodes, as idempotent alternative to
      /path/*[expr] (George Hansper) (#706)
    * Lens changes/additions
    - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
      (Issue #649)
    - Chrony: add new options (Miroslav Lichvar) (Issue #698)
    - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
    - Crypttab: support UUID in device and / in opt (Raphaël
      Pinson) (#713)
    - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
      (Issue #651)
    - Grub: support '+' in kernel command line option names (Pino
      Toscano) (Issue #647)
    - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
    - Limits: support colons in the domain pattern of the limits
      lens (Xavier Mol) (Issue #645)
    - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
    - Mke2fs: parse more common entries between [defaults] and the
      tags in [fs_types], fix the type of few entries, handle the
      [options] stanza (Pino Toscano) (Issue #642)
    - support quoted values (Pino Toscano) (Issue #661)
    - NetworkManager: allow # in values (mfilka) (#723)
    - Opendkim: update to match current conffile format (Issue #644)
    - Postfix_Master: Allow unix-dgram as type (Issue #635)
    - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
    - Postgresql: Allow hyphen '-' in values that don't require quotes
      (Marcin Barczy?ski) (Issues #700 #701)
    - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
    - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
    - support "replicaof" (Raphaël Pinson) (#727)
    - fix support for "sentinel" (Raphaël Pinson) (#728)
    - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
    - Rsyslog: support multiple actions in filters and selectors (Issue
      [#653])
    - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
      [#627])
    - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
    - Sudoers: support new @include/@includedir directives (Pino
      Toscano) (Issue #693)
    - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
    - Support negative integers (Ando David Roots) (#724)
    - Ssh: add Match keyword support (granquet) (Issue #695)
    - Sshd: support quotes in Match conditions (Issue #739)
    - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
    - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
    - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
      (#718)
    - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
      (#703)
    - Tmpfiles: improvements to the types specification (Pino Toscano)
      (Issue #694)


author: Otto Hollmann <otto.hollmann@suse.com>
changelog:
  - Update to 1.14.0
    * General changes/additions
    - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
      (#781)
    - Add bash-completion for augtool, augmatch, augprint (#783) George
      Hansper
    - Fix: Allow values to contain arbitrary unbalanced square brackets
      (#782) George Hansper
    - Add package bash to build stage in Dockerfile (#776) George Hansper
    - Add augprint tool for creating idempotent augtool scripts (#752) George
      Hansper
    - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
    - src/syntax.c: Fix whitespace which confuses static checkers
      (#725) rwmjones
    - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
    - Package augmatch, too (#688) oleksandriegorov
    - Add Github workflow to create releases with complete source tarballs
      (#744) Hilko Bengen
    * Lens changes/additions
    - Resolv: add option trust-ad (#784) George Hansper
    - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
      Hansper
    - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
    - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
    - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
    - Systemd: allow empty quoted environment variable values (#757) Michal
      Vasko
    - Systemd: allow values starting with whitespaces for Exec* and
      Environment service entries. (#757) Michal Vasko
    - Toml: workaround to allow writing toml files (#742) Richard
    - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
    - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
      Bambuch
    - Chrony: add new directives and options (#745) Miroslav Lichvar
    - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
      Hagstrand
    - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
      (#748) Guillaume Ross
    - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
      and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
    - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
      CASignatureAlgorithms as comma-seperated lists instead of simple
      strings (#721) Edward Garbade
    - Yum: Add additional unit tests (#677) Pat Riehecky
    - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
    * Rebased patch gcc9-disable-broken-test.patch
    * Deleted patches:
    - sysctl_parsing.patch
    - augeas-1.13.0-replace_security_context_t-patch


author: Otto Hollmann <otto.hollmann@suse.com>
changelog:
  - Update to 1.14.1
    * General changes/additions
    - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
      is defined (#791) Dimitry Andric
    - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
      are lost upon a subsequent load operation (#810) George Hansper
    - HACKING.md: describe testing (#796) Laszlo Ersek
    - Add GitHub Actions (#714) Raphaël Pinson
    - augprint.c: remove #include <malloc.h> , add #include <libgen.h>
      (#792) Ruoyu Zhong
    * Lens changes/additions
    - TOML: support trailing commas in arrays (#809) Bao
    - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
      the mode (#805) Pino Toscano
    - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
      items (#806) Dave Re
    - Cmdline: Allow whitespace at the end of kernel commnd line
      (#798) rwmjones


author: dimstar@opensuse.org
changelog:
  - Move %install_info_delete from postun to preun: we need to handle
    the case while the file is still present.
  - Fix filename of info files for post/preun: autoconf213.info.gz.


author: Stefan Schubert <schubi@suse.de>
changelog:
  - Moved -autofs- file from user specif directory
    /etc/NetworkManager/dispatcher.d to vendor specific directory
    /usr/lib/NetworkManager/dispatcher.d. So, users changes can
    still be done in /etc and will not be overwritten by an update.


author: Goldwyn Rodrigues <rgoldwyn@suse.com>
changelog:
  - Add autofs-suse-manpage-remove-initdir.patch
    Removes references of initdir from man pages (bsc#1207881)


author: David Disseldorp <ddiss@suse.com>
changelog:
  - autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
    Fix off-by-one error in recursive map handling. (bsc#1209653)


author: Goldwyn Rodrigues <rgoldwyn@suse.com>
changelog:
  - Removed following upstreamed patches because of upgrade:
    * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
    * 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
    * 0002-Fix-monotonic_elapsed.patch Deleted
    * 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch Deleted
    * 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
    * 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
    * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
    * autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
    * autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
    * autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
    * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
    * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch


author: David Disseldorp <ddiss@suse.com>
changelog:
  - update to 5.1.9 (bsc#1219508)
    * fix kernel mount status notification.
    * fix fedfs build flags.
    * fix set open file limit.
    * improve descriptor open error reporting.
    * fix root offset error handling.
    * fix fix root offset error handling.
    * fix nonstrict fail handling of last offset mount.
    * dont fail on duplicate offset entry tree add.
    * fix loop under run in cache_get_offset_parent().
    * bailout on rpc systemerror.
    * fix nfsv4 only mounts should not use rpcbind.
    * simplify cache_add() a little.
    * fix use after free in tree_mapent_delete_offset_tree().
    * fix memory leak in xdr_exports().
    * avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    * fix sysconf(3) return handling.
    * remove nonstrict parameter from tree_mapent_umount_offsets().
    * fix handling of incorrect return from umount_ent().
    * dont use initgroups() at spawn.
    * fix bashism in configure.
    * musl: fix missing include in hash.h.
    * musl: define fallback dummy NSS config path
    * musl: avoid internal stat.h definitions.
    * musl: add missing include to hash.h for _WORDSIZE.
    * musl: add missing include to log.h for pid_t.
    * musl: define _SWORD_TYPE.
    * add autofs_strerror_r() helper for musl.
    * update configure.
    * handle innetgr() not present in musl.
    * fix missing unlock in sasl_do_kinit_ext_cc().
    * fix a couple of null cache locking problems.
    * restore gcc flags after autoconf Kerberos 5 check.
    * prepare for OpenLDAP SASL binding.
    * let OpenLDAP handle SASL binding.
    * configure: LDAP function checks ignore implicit declarations.
    * improve debug logging of LDAP binds.
    * improve debug logging of SASL binds.
    * internal SASL logging only in debug log mode.
    * more comprehensive verbose logging for LDAP maps.
    * fix invalid tsv access.
    * support SCRAM for SASL binding.
    * ldap_sasl_interactive_bind() needs credentials for auto-detection.
    * fix autofs regression due to positive_timeout.
    * fix parse module instance mutex naming.
    * serialise lookup module open and reinit.
    * coverity fix for invalid access.
    * fix hosts map deadlock on restart.
    * fix deadlock with hosts map reload.
    * fix memory leak in update_hosts_mounts().
    * fix minus only option handling in concat_options().
    * fix incorrect path for is_mounted() in try_remount().
    * fix additional tsv invalid access.
    * fix use_ignore_mount_option description.
    * include addtional log info for mounts.
    * fail on empty replicated host name.
    * improve handling of ENOENT in sss setautomntent().
    * don't immediately call function when waiting.
    * define LDAP_DEPRECATED during LDAP configure check.
    * fix return status of mount_autofs().
    * don't close lookup at umount.
    * fix deadlock in lookups.
    * dont delay expire.
    * make amd mapent search function name clear.
    * rename statemachine() to signal_handler().
    * make signal handling consistent.
    * eliminate last remaining state_pipe usage.
    * add function master_find_mapent_by_devid().
    * use device id to locate autofs_point when setting log priotity.
    * add command pipe handling functions.
    * switch to application wide command pipe.
    * get rid of unused field submnt_count.
    * fix mount tree startup reconnect.
    * fix unterminated read in handle_cmd_pipe_fifo_message().
    * fix memory leak in sasl_do_kinit()
    * fix fix mount tree startup reconnect.
    * fix amd selector function matching.
    * get rid entry thid field.
    * continue expire immediately after submount check.
    * eliminate realpath from mount of submount.
    * eliminate root param from autofs mount and umount.
    * remove redundant fstat from do_mount_direct().
    * get rid of strlen call in handle_packet_missing_direct().
    * remove redundant stat call in lookup_ghost().
    * set mapent dev and ino before adding to index.
    * change to use printf functions in amd parser.
    * dont call umount_subtree_mounts() on parent at umount.
    * dont take parent source lock at mount shutdown.
    * fix possible use after free in handle_mounts_exit().
    * make submount cleanup the same as top level mounts.
    * add soucre parameter to module functions.
    * add ioctlfd open helper.
    * make open files limit configurable.
    * use correct reference for IN6 macro call.
    * dont probe interface that cant send packet.
    * fix some sss error return cases.
    * fix incorrect matching of cached wildcard key.
    * fix expire retry looping.
    * allow -null map in indirect maps.
    * fix multi-mount check.
    * fix let OpenLDAP handle SASL binding.
    * always recreate credential cache.
    * fix ldap_parse_page_control() check.
    * fix typo in create_cmd_pipe_fifo().
    * add null check in master_kill().
    * be more careful with cmd pipe at exit.
    * rename configure.in to configure.ac.
    * update autoconf macros.
    * update autoconf release.
    * update autofs release.
  - drop autofs-5-1-3-fix-unset-tsd-group-name-handling.patch, upstream
    as ab8ca82 ("autofs-5.1.3 - fix unset tsd group name handling")
  - drop autofs-Test-TCP-request-correctly-in-nfs_get_info.patch,
    superseded by 80845bb ("autofs-5.1.8 - fix nfsv4 only mounts should
    not use rpcbind")
  - rebase autofs-5.1.1-dbus-udisks-monitor.patch atop 37fda2c
    ("autofs-5.1.8 - add soucre parameter to module functions")


author: David Disseldorp <ddiss@suse.com>
changelog:
  - Fix -Werror=incompatible-pointer-types issues (bsc#1221682)
    * Add autofs-5.1.9-fix-ldap_parse_page_control-check.patch
    * Add autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch


author: David Disseldorp <ddiss@suse.com>
changelog:
  - Fix xmlStructuredErrorFunc callback parameter type (bsc#1221682)
    * Refresh autofs-5.1.1-dbus-udisks-monitor.patch
  - Use upstream sasl_callback_t patch
    * Remove autofs-5.1.9-cast-sasl_callback_t-function-pointers.patch
    * Add autofs-5.1.9-Fix-incompatible-function-pointer-types.patch


author: schwab@suse.de
changelog:
  - Don't require libopts-devel from autogen
  - Rename libopts-devel to autoopts
  - Move all autoopts related files to autoopts
  - Don't run autoreconf
  - Don't remove -Werror
  - sprintf-overflow.patch: Fix sprintf overflow
  - autogen-guile-2.2.patch: properly add support for guile 2.2
  - autogen-constant-timeout.patch: remove, use --enable-timeout
    instead


author: schwab@suse.de
changelog:
  - Update to version 5.8.16
    - Enable compiling with Guile 2.2
  - autogen-guile-2.2.patch: removed
  - installable-programs.patch: don't make programs uninstallable
  - Rediff remaining patches


author: Martin Li?ka <mliska@suse.cz>
changelog:
  - Add upstream patch autogen-avoid-GCC-code-analysis-bug.patch
    in order to support -D_FORTIFY_SOURCE=3 with GCC 12.
  - Use autosetup.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.16.3:
    - In the testsuite summary, the "for $(PACKAGE_STRING)" suffix
      can be overridden with the AM_TESTSUITE_SUMMARY_HEADER variable.
    - Python 3.10 version number no longer considered to be 3.1.
    - Broken links in manual fixed or removed, and new script
      contrib/checklinkx (a small modification of W3C checklink) added,
      with accompany target checklinkx to recheck urls.
    - install-exec target depends on $(BUILT_SOURCES).
    - valac argument matching more precise, to avoid garbage in DIST_COMMON.
    - Support for Vala in VPATH builds fixed so that both freshly-generated and
      distributed C files work, and operation is more reliable with or without
      an installed valac.
    - Dejagnu doesn't break on directories containing spaces.
    - new variable AM_DISTCHECK_DVI_TARGET, to allow overriding the
      "make dvi" that is done as part of distcheck.
    - install-sh tweaks:
      . new option -p to preserve mtime, i.e., invoke cp -p.
      . new option -S SUFFIX to attempt backup files using SUFFIX.
      . no longer unconditionally uses -f when rm is overridden by RMPROG.
      . does not chown existing directories.
    - Removed function up_to_date_p in lib/Automake/FileUtils.pm.
      We believe this function is completely unused.
    - Support for in-tree Vala libraries improved.
  - rename automake-SuSE.patch to automake-suse-vendor.patch and refresh
  - remove automake-testsuite-vala-gcc10.patch (upstream)


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.16.5:
    - PYTHON_PREFIX and PYTHON_EXEC_PREFIX are now set according to
      Python's sys.* values only if the new configure option
    - -with-python-sys-prefix is specified. Otherwise, GNU default values
      are used, as in the past. (The change in 1.16.3 was too incompatible.)
    - consistently depend on install-libLTLIBRARIES.
    - use const for yyerror declaration in bison/yacc tests.
    - Common top-level files can be provided as .md; the non-md version is
      used if both are present:
      AUTHORS ChangeLog INSTALL NEWS README README-alpha THANKS
    - CTAGS, ETAGS, SCOPE variables can be set via configure.
    - Silent make output for custom link commands.
    - New option "no-dist-built-sources" skips generating $(BUILT_SOURCES)
      before building the tarball as part of "make dist", that is,
      omits the dependency of $(distdir): $(BUILT_SOURCES).
    - automake output more reproducible.
    - test-driver less likely to clash with tests writing to the same file.
    - DejaGnu tests always use the directory name, testsuite/, for
      compatibility with the newer dejagnu-1.6.3 and with prior versions.
    - config.sub and config.guess updates include restoration of `...`
      for maximum portability.
  - refresh automake-suse-vendor.patch
  - drop fix-testsuite-failures-with-autoconf270.patch (upstream)
  - drop automake-reproducible.patch (upstream)


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update automake.keyring: use release-team keyring
  - don't reference source URL when the linked sources change over time


author: Valentin Lefebvre <valentin.lefebvre@suse.com>
changelog:
  - Fix testsuite with gcc 14
    + tests-Fix-type-defaults-error-in-link_cond.patch
    + tests-avoid-implicit-function-declaration-in-depcomp.patch
    + tests-avoid-implicit-function-declarations.patch
    + tests-don-t-try-to-prevent-flex-from-including-unist.patch


author: Christoph G <foss@grueninger.de>
changelog:
  - update to 1.17
    - AM_PATH_PYTHON will, after checking "python", prefer any Python 3
      version (latest versions checked first) over any Python 2
      version. If a specific version of Python 2 is still needed, the
      $PYTHON variable should be set beforehand.
    - AM_PATH_PYTHON will also search for Python versions 3.20 through 3.10.
      It previously searched for 3.9 through 3.0.
    - RANLIB may be overridden on a per-target basis.
    - AM_TEXI2FLAGS may be defined to pass extra flags to TEXI2DVI & TEXI2PDF.
    - New option "posix" to emit the special target .POSIX for make.
    - Systems with non-POSIX "rm -f" behavior are now supported, and the
      prior intent to drop support for them has been reversed.
      The ACCEPT_INFERIOR_RM_PROGRAM setting no longer exists.
    - Variables using escaped \# will trigger portability warnings, but be
      retained when appended.  GNU Make & BSD Makes are known to support it.
    - GNU Make's default pattern rules are disabled, for speed and debugging.
      (.SUFFIXES was already cleared.)
    - For Texinfo documents, if a .texi.in file exists, but no .texi, the
      .texi.in will be read. Texinfo source files need not be present at
      all, and if present, need not contain @setfilename. Then the file name
      as given in the Makefile.am will be used.  If @setfilename is present,
      it should be the basename of the Texinfo file, extended with .info.
    - aclocal has a new option --aclocal-path to override $ACLOCAL_PATH.
    - The missing script also supports autoreconf, autogen, and perl.
    - test-suite.log now contains basic system information, and the
      console message about bug reporting on failure has a bit more detail.
    - When using the (default) "parallel" test driver, you can now omit the
      output of skipped tests from test-suite.log by defining the
      variable IGNORE_SKIPPED_LOGS to a non-empty value. (bug#71422)
  - Drop patches now included in 1.17
    * tests-Fix-type-defaults-error-in-link_cond.patch
    * tests-avoid-implicit-function-declaration-in-depcomp.patch
    * tests-don-t-try-to-prevent-flex-from-including-unist.patch
    * tests-avoid-implicit-function-declarations.patch
  - Drop patch automake-require_file.patch with different upstream fix
  - Drop no longer necessary patch
    automake-1.13.4-fix-primary-prefix-invalid-couples-test.patch
  - Ajust patches automake-suse-vendor.patch and
    0001-correct-parameter-parsing-in-test-driver-script.patch


author: Ladislav Slezák <lslezak@suse.com>
changelog:
  - Added XSLT transformation for easy conversion of the data types in the
    AutoYaST XML profiles between the old and the new format. This allows to
    convert a new profile to the format accepted in SLE15-SP2 or older
    (bsc#1206597)
  - 4.5.12


author: Ladislav Slezák <lslezak@suse.com>
changelog:
  - Properly install the selected products, do not lose them after
    resetting the package manager internally (bsc#1202234)
  - 4.6.2


author: Ancor Gonzalez Sosa <ancor@suse.com>
changelog:
  - Added several LUKS-related elements to the partitioning schema
    (jsc#PED-3878, jsc#PED-5518).
  - 5.0.1


author: Ladislav Slezák <lslezak@suse.com>
changelog:
  - Install standard SLES when the AY XML profile selects SLE_HPC,
    it has been dropped in SP6 (jsc#PED-7841)
  - 5.0.2


author: Alynx Zhou <alynx.zhou@suse.com>
changelog:
  - Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
    byte long (bsc#1215947, CVE-2023-38470).


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - avahi-autoipd: only migrate files owned by avahi user if said
    user exists: if the user does not exist (fresh installs), then
    there is no chance any file is owned by the user (boo#1216730).


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - avahi-autoipd: drop the post script part migrating the user
    owning files in /var/lib/avahi-autoipd: the code was aiding
    migrations from SLE<=11/openSUSE<=12.3, which are no longer in
    scope for upgrades nowadays.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Reformat avahi-gacdir.patch to apply as patch -p1.
  - Use %autopatch instead of deprecated %patchN format.


author: Alynx Zhou <alynx.zhou@suse.com>
changelog:
  - Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
    avahi_rdata_parse (bsc#1216853, CVE-2023-38472).


author: Xiaoguang Wang <xiaoguang.wang@suse.com>
changelog:
  - Add avahi-CVE-2023-38471.patch: Extract host name using
    avahi_unescape_label (bsc#1216594, CVE-2023-38471).
  - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
    records (bsc#1216598, CVE-2023-38469).


author: Michael Gorse <mgorse@suse.com>
changelog:
  - Add avahi-filter-bogus-services.patch: no longer supply bogus
    services to callbacks (bsc#1226586).


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 0.10.1:
    * tests/docker/build.sh: Build SVT-AV1 using cmake and ninja directly
    * Fix a Visual Studio 2017 compiler warning in src\reformat.c: warning C4204:
      nonstandard extension used: non-constant aggregate initializer
    * Fix the help message of avifdec: --index takes a value


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.11.0:
    * There are incompatible ABI changes in this release. The
      alphaRange member was removed from the avifImage struct. The
      chromaDownsampling and avoidLibYUV members were added to the
      avifRGBImage struct. The imageDimensionLimit member was added
      to the avifDecoder struct. avifImageCopy() and
      avifImageAllocatePlanes() signatures changed. It is necessary
      to recompile your code. Also check the return values of
      avifImageCopy() and avifImageAllocatePlanes().
    * Added:
    - Add man pages for avifenc and avifdec
    - Add the avifChannelIndex type alias for enum avifChannelIndex
    - Add avifChromaDownsampling enum
    - Add chromaDownsampling field to avifRGBImage struct
    - Add support for AVIF_RGB_FORMAT_RGB_565
    - Add imageDimensionLimit field to avifDecoder struct
    - Add autoTiling field to avifEncoder struct
    - Add new avifResult codes AVIF_RESULT_CANNOT_CHANGE_SETTING
      and AVIF_RESULT_INCOMPATIBLE_IMAGE
    - Add new enum constants AVIF_PIXEL_FORMAT_COUNT and
      AVIF_RGB_FORMAT_COUNT
    - avifdec: Add --dimension-limit, which specifies the image
      dimension limit (width or height) that should be tolerated
    - avifenc: Add --sharpyuv, which enables "sharp" RGB to YUV420
      conversion, which reduces artifacts caused by 420 chroma
      downsampling. Needs libsharpyuv (part of the libwebp
      repository) at compile time.
    - avifenc: Add --ignore-exif and --ignore-xmp flags.
    - avifenc: Add --autotiling, which sets --tilerowslog2 and
    - -tilecolslog2 automatically.
    - avifenc: Input Exif orientation is converted to irot/imir by
      default.
    * Changed:
    - Fix memory leaks of metadata on avifenc exit
    - Update the handling of 'lsel' and progressive decoding to
      AVIF spec v1.1.0
    - Treat an absent lsel and layer_id == 0xFFFF equivalently for
      backward compatibility with earlier drafts of AVIF spec
      v1.1.0
    - Set libavif's own default value of cfg.rc_end_usage for
      libaom
    - Set the libaom-specific option -a tune=ssim by default
    - Bump cmake_minimum_required from 3.5 to 3.13
    - Fix https://crbug.com/oss-fuzz/48135
    - Use several new libyuv functions in reformat_libyuv.c
    - Fix SVT-AV1's issue 1957 related to uninitialized variables
      crashing the encoder
    - Update aom.cmd: v3.5.0
    - Update rav1e.cmd: v0.5.1
    - Update svt.cmd/svt.sh: v1.2.1
    - Update libgav1.cmd: v0.18.0
    - Update libyuv.cmd: f9fda6e7 (version 1844)
    - avifImageCopy() and avifImageAllocatePlanes() now return
      avifResult instead of void to report invalid parameters or
      memory allocation failures.
    - avifImageRGBToYUV() now uses libyuv fast paths by default. It
      may slightly change conversion results. The old behavior can
      be restored by setting avifRGBImage::chromaDownsampling to
      AVIF_CHROMA_DOWNSAMPLING_BEST_QUALITY and
      avifRGBImage::avoidLibYUV to AVIF_TRUE.
    - avifRGBImage::chromaUpsampling now only applies to
      conversions that need upsampling chroma from 4:2:0 or 4:2:2
      and has no impact on the use of libyuv.
    - Set avifRGBImage::avoidLibYUV accordingly to control the use
      of libyuv.
    - avifenc: Set the YUV format to 4:0:0 for grayscale PNGs
    - Support updating encoder settings and codec-specific options
      during encoding
    - Disable AVIF_STRICT_CLAP_VALID and AVIF_STRICT_PIXI_REQUIRED
      in the JNI wrapper
    - avifdec: Return proper exit code in "info" mode
    - In avifenc and avifdec, treat all arguments that start with
      '-' as options
    - Exif and XMP metadata is imported from PNG and JPEG files.
    - avifImageSetMetadataExif() parses the Exif metadata and
      converts any Exif orientation found into transformFlags, irot
      and imir values.
    - Write 'auxi' box for animated images with alpha channel
    - Write 'auxv' as handler_type for alpha channel track
    - Use PNG_COLOR_TYPE_GRAY for 8-bit grayscale output
    - Replace repeated subtraction by modulo in calcGCD
    - Change avifImageCreate to take uint32_t instead of int
      parameters
    - When writing an image sequence, check if it's safe to cast
      width and height to uint16_t
    - Allow clamped grid cells in avifEncoderAddImageGrid()
    * Removed:
    - alphaRange field was removed from the avifImage struct. It it
      presumed that alpha plane is always full range.
    - The avifCodecConfigurationBox struct becomes a private type
      for libavif internal use
  - Bump lib_soversion global (also in baselibs.conf) to 15 following
    upstream change.
  - Use ldconfig_scriptlets for post(un) handling.


author: Cristian Rodríguez <crrodriguez@opensuse.org>
changelog:
  - Remove unused BuildRequires on nasm
  - Remove indirect/incorrect Buildrequires on zlib
  - add direct glib Buildrequires


author: ecsos <ecsos@opensuse.org>
changelog:
  - Update to version 0.11.1:
    * Changed:
    - avifincrtest_helpers: Cast 64-bit offset to size_t
    - avifmetadatatest: don't include avif/internal.h
    - avifrgbtoyuvtest: skip if no libsharpyuv
    - Disable tests that may fail if the codec is not aom (#1176)


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to 1.0.0:
    * Incompatible changes:
      + The clli member was added to the avifImage struct.
      + The repetitionCount member was added to the avifEncoder and avifDecoder
      structs.
      + The quality and qualityAlpha members were added to the avifEncoder struct.
      + Check that functions returning pointers do not return NULL before accessing
      those pointers.
      + Check the return value of avifEncoderSetCodecSpecificOption().
      + The maxThreads member was added to the avifRGBImage struct.
      + Check the return value of avifRGBImageAllocatePixels(), avifRWDataRealloc(),
      avifRWDataSet(), avifImageSetProfileICC(), avifImageSetMetadataExif() and
      avifImageSetMetadataXMP().
      + The meaning of the keyframeInterval member of avifEncoder struct has changed
      slightly. When set to a value of "n",
      Before: It forces a keyframe on every nth frame.
      After: Any set of "n" consecutive frame will have at least one keyframe
      (every nth frame may or may not be a keyframe).
    * Added:
      + Add clli metadata read and write support
      + Add repetitionCount member to avifEncoder and avifDecoder structs to specify
      the number of repetitions for animated image sequences.
      + Add quality and qualityAlpha to avifEncoder. Note: minQuantizer,
      maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha are deprecated. Code
      should be updated to set quality (and qualityAlpha if applicable) and leave
      minQuantizer, maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha
      initialized to the default values.
      + The --target-size flag in avifenc was added to adapt the quality so that the
      output file size is as close to the given number of bytes as possible.
      + Add the public API function avifImageIsOpaque() in avif.h.
      + Add the public API functions avifImagePlane(), avifImagePlaneRowBytes(),
      avifImagePlaneWidth(), and avifImagePlaneHeight() in avif.h.
      + Add API for multi-threaded YUV to RGB color conversion.
      + Allow lossless 4:0:0 on grayscale input.
      + Add avifenc --no-overwrite flag to avoid overwriting output file.
      + Add avifenc --clli flag to set clli.
      + Add support for all transfer functions when using libsharpyuv.
    * Changed:
      + Exif and XMP metadata is exported to PNG and JPEG files by default,
      except XMP payloads larger than 65502 bytes in JPEG.
      + The --grid flag in avifenc can be used for images that are not evenly divided
      into cells.
      + Change the encoder to write the boxes within the "stbl" box in the order of
      stsd, stts, stsc, stsz, stco, stss.
      + avifImageRGBToYUV() and avifImageYUVToRGB() handle avifImage bit depths 8, 10,
      12 and now also 16. Files read by apps/shared/ can output 16-bit avifImage
      instances.
      + avifImageCreate(), avifImageCreateEmpty(), avifEncoderCreate() and other
      internal functions now return NULL if a memory allocation failed.
      + avifEncoderSetCodecSpecificOption() now returns avifResult instead of void to
      report memory allocation failures.
  - Add fix-gdkpixbuf.patch.


author: Andreas Stieger <andreas.stieger@gmx.de>
changelog:
  - update to 1.0.2:
    * Update avifCropRectConvertCleanApertureBox() to the revised
      requirements in ISO/IEC 23000-22:2019/Amd. 2:2021 Section
      7.3.6.7.
    * CVE-2023-6350: Out of bounds memory to alphaItemIndices (boo#1217614)
    * CVE-2023-6351: use-after-free in colorProperties (boo#1217615)
  - drop fix-gdkpixbuf.patch


author: Andreas Stieger <andreas.stieger@gmx.de>
changelog:
  - update to 1.0.3:
    * Rewrite the fix for memory errors fixed in 1.0.2
    * CVE-2023-6704: Fix use-after-free errors (boo#1218303)
    * src/reformat.c: Allocate the threadData array directly


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.0.4:
    * AVIF_ENABLE_WERROR is set to OFF by default.
    * Fix wrong alpha plane deallocation when decoded tile pixel
      format does not match reconstructed output image pixel format
    * Fix identical chunk skipping optimization when writing
      animation data
    * Fix ID selection for artificial grid alpha item when decoding
      a grid of tiles which each have an associated auxiliary alpha
      image item (https://crbug.com/oss-fuzz/65657).


author: sor.alexei@meowr.ru
changelog:
  - Disable static library build.
  - Enable Python 3 bindings build.
  - Remove explicit glib2-devel requirement for the devel package: is
    autodetected already.
  - Spec cleanup.


author: sor.alexei@meowr.ru
changelog:
  - Update to version 1.5.4:
    * Use signed accessors for clock offsets.
    * Fix a signedness error in python complements.
    * Handle packet_seek errors.
    * Prevent calling adding the same trace recursively.
    * Make sure we have all the metadata streams before adding new
      traces.
    * Add missing debugging information in the live plugin.
    * Set stream id in HUP case.
    * Use list rather than ptr array for trace streams.
    * Fix a leak of streams.
    * Handle 0 session case in ask new streams.
    * Break loop on getting metadata error.
    * Return error on ask_new_stream when should quit.
    * Don't access missing ctf trace when getting metadata.
    * Fix lttng-live discarded event count after inactivity.
    * Fix timegm compat on Solaris.
    * Fix Python bindings when building with PIE hardening.
    * lttng-live: Print discarded event and packet lost warnings on
      stderr.


author: sor.alexei@meowr.ru
changelog:
  - Update to version 1.5.5:
    * Propagate error from packet_seek in case of truncated packet.
    * Fix: report truncated files while reading.
  - Use tarball signing.


author: sor.alexei@meowr.ru
changelog:
  - Update to version 1.5.6:
    * Fix: remove left-over debug logging statement.
    * Use trace->trace_id in check to remove trace from bt_ctx.
    * Fix: missing initializer braces warning.
    * Fix: zero out URL parsing array before use and ensure proper
      error reporting.


author: Alexei Sorokin <sor.alexei@meowr.ru>
changelog:
  - Update to version 1.5.8 (changes since 1.5.6):
    * Cleanup: bitfields: streamline use of underscores.
    * Fix: bitfield: shift undefined/implementation defined
      behaviours.
    * Fix: array and sequence field's 'elems' members can be left NULL.
    * Fix: invalid alignment of enumeration fields.
    * Fix: lttng-live format: do not error out on empty streams
      hang up.
    * Fix: lttng-live: ctf_live_packet_seek stream hang up handling.
    * Fix: lib/iterator.c: unbalanced ctx put (leak).
    * Fix: lttng-live: lttng_live_open_trace_read memory leak.
    * Fix: trace-collection: trace clock use after free.
    * Fix: lttng-live: use-after-free in get_next_index().
    * Do not use diagnostic pragma when GCC version is lower than
      4.6.0.
    * Missing define when not building with gcc.
  - Drop support for old openSUSE versions.


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to version 0.1.90:
    * Automatic LUT creation for conversions from &lt;24bpp of colorant
      componants, SIMD builds for x86_64 micro-architecture levels and
      ARM neon, pre-defined CIE Lab u8 and CIE Lab u16 formats.
    * Fix bug of an unlocked non-locked mutex, which started failing
      on some platforms.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Add patches, backported from git, to fix build with meson 0.62:
    + 2dc7fc40.patch
    + b05b2826.patch


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 0.1.96:
    * Minor changes from 0.1.94, fixing build.
    * Fix of crash on non-aligned data for SIMD, add commandline tool, improve vala
      compatibility of introspection info.
  - drop patches 2dc7fc40.patch, b05b2826.patch (upstream)


author: Petr Vorel <pvorel@suse.cz>
changelog:
  - update to 0.1.98:
    * More robust bounds protection in ICC handling, avoid garbage collecting
      lookup tables in-line with processing.


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - update to 0.1.102:
    * LUT code-paths now disabled by default.
    * Stop double processing with LUT+normal fishes.
    * Support for non-ASCII characters in file paths on windows.
      Improved wrap build support.


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to 0.1.106:
    * Disable LUTs on big-endian, fix to 1bpp->4bpp LUTs, faster startup by caching
      balanced RGB to XYZ matrices.
    * LUT code-paths re-enabled, some array overflow proofing.


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.04.80
    * New feature release
  - Changes since 24.02.2:
    * FileMetaDataProvider: Use QSize for `dimensions`
    * KEditTagsDialog: refactor using QStandardItemModel/QTreeView instead of QTreeWidget


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.05.1
    * New bugfix release
    * For more details please see:
    * https://kde.org/announcements/gear/24.05.1/
  - Changes since 24.05.0:
    * Fix FileMetadataItemCountTest::testItemCount


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.05.2
    * New bugfix release
    * For more details please see:
    * https://kde.org/announcements/gear/24.05.2/
  - Changes since 24.05.1:
    * Fix FileMetadataItemCountTest::testItemCount


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 44.beta:
    + Change "Open Folder" to "Open Externally".
    + Allow activating the menu by pressing the F10 key.
    + Misc string changes.
    + Updated translations.
  - Add desktop-file-utils BuildRequires: New dependency.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 44.0:
    + Change "Open Folder" to "Open Externally".
    + Allow activating the menu by pressing the F10 key.
    + Misc string changes.
    + Updated translations.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 45.alpha:
    + Use new libadwaita widgets and design patterns.
    + Updated translations.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 45.0:
    + Use new libadwaita widgets and design patterns.
    + Updated translations.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Update to version 46.0:
    + Improved App metainfo.
    + Use enter instead of leave to update highlightitem.
    + Updated translations.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Convert to _multibuild. The pre_checkin.sh script was quite
    broken anyway and it was less effort to convert than to try to
    fix that one.


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Add patch boo1190929-9af4afd0.patch for boo#1190929
    add support for compeletion modinfo completion recognize .ko.zst
    as well as .ko.bz2


author: Dirk Müller <dmueller@suse.com>
changelog:
  - remove PS1-completion-boo903362.patch as it breaks on non-bash
    shells and the original problem in
    bsc#903362#c9 does not occur anymore
  - add versioned dependency to bash versions that have the fix


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Add patch bsc1199724-modules.patch (bsc#1199724)
    * Enable upstream commit to list ko.zst modules as well


author: Otto Hollmann <otto.hollmann@suse.com>
changelog:
  - Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
    * List all options for `curl --<TAB>`


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Modify patches
    * ls-completion-boo889319.patch
    * rm-completion-smart-boo958462.patch
    to avoid skipping spaces after last word on command line (boo#1210974)
  - Add patch fix_quote_readline_by_ref.patch
    * Do not escape leading ~ nor backslash and avoid empty quoting


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Update to version 2.12.0:
    Features
    * _comp_backup_glob: add ucf generated backup files (351be1c)
    * _comp_backup_glob: require dash in dpkg backup files (59a57f9)
    * comp_compgen{filedir,set}: define exit status (7920c9d)
    * _comp_compgen_commands: align return value with other compgens (9d3362e)
    * _comp_compgen_commands: auto set -o filenames when appropriate (4d4839e)
    * _comp_compgen_commands: include dirs (b9c7b5d)
    * _comp_compgen_known_hosts: return 2 on usage error (43bb8f0)
    * _comp_compgen: support -i cmd and -x cmd (39cc200)
    * _comp_compgen: support -U var to unlocal var (b603535)
    * _comp_compgen: support option -C (6b3dfa5)
    * _comp_expand_glob: fail when no paths are generated (6b0a466)
    * _comp_get_fist_arg: support "-o GLOB" to skip optargs (0f14cc0)
    * _ip_addresses: auto ltrim colon completions when appropriate (ccdf953)
    * add _comp_compgen_split (542bf73)
    * add _comp_locate_first_arg (0384bd5)
    * airflow: add fallback 3rd party completion loader (bf5550b)
    * ansible:* add fallback 3rd party completion loader (5f8384e)
    * apt-get: prefer apt-cache in same dir as command (a731bfd)
    * b2sum: new completion (cd985df)
    * bash_completion: add function _comp_compgen_ltrim_colon (ce5889b)
    * black,blackd: add fallback 3rd party completion loader (47a1f05)
    * carton: support exec command completions (0eb3a21)
    * chezmoi: add 3rd-party completion loader (cobra) (31baa69)
    * conda: add 3rd-party completion loader (argcomplete) (c0f5ba2)
    * crc: add 3rd-party completion loader (cobra) (f10866e)
    * cz: add fallback 3rd party completion loader (b7ba70e)
    * dot: support filename extension .gv (be0010e)
    * dprint: add fallback 3rd party completion loader (e201e0e)
    * eog: add missing extension .heif (9e4a48f)
    * eog: associate with *.avif and *.webp (#1005) (f1c04b8)
    * eog: associate with *.heic and *.jxl (20c9cea)
    * eog: associate with *.pbm (#1006) (5472cc1)
    * feh: associate with y4m and heic/heif/avif (e252c73)
    * feh: deassociate with avci/avcs (af46f34)
    * flask: add fallback 3rd party completion loader (3e0d00d)
    * hash: new completion (#1013) (4d0bffb)
    * httpx: add fallback 3rd party completion loader (3f4861c)
    * ip: Add completion for monitor subcommand (fa696e6)
    * jungle: add fallback 3rd-party completion loader (c69845a)
    * keyring: add fallback 3rd party completion loader (8082602)
    * kontena: add fallback 3rd-party completion loader (5eef0ce)
    * lefthook: add fallback 3rd party completion loader (dc9650e)
    * mailman: prefer list_lists in same dir as command (a46ccf1)
    * mysql: prefer mysqlshow from same dir (643886c)
    * no empty command completion if no_empty_cmd_completion is on (faab292)
    * npm: add fallback 3rd-party completion loader (f1c085c)
    * nvm: add fallback 3rd-party completion loader (dea7e1d)
    * oc: add 3rd-party completion loader (cobra) (26b5f09)
    * pip{,3}: add fallback 3rd-party completion loader (e3cbfba)
    * pipenv: add fallback 3rd party completion loader (#1020) (6ecf5bd)
    * pytest: complete new --import-mode value (#1021) (2d636a3)
    * rtx: add fallback 3rd party completion loader (0628e22)
    * scp,sftp: prefer ssh from same dir to resolve options etc (d55f5e6)
    * ssh-copy-id,ssh-keygen: prefer ssh from same dir (5c1d270)
    * ssh-inscribe: add fallback 3rd party completion loader (7f2c197)
    * ssh: complete RequiredRSASize (#1064) (de15205)
    * tkn-pac: add 3rd-party completion loader (cobra) (d0f2604)
    * tkn: add 3rd-party completion loader (cobra) (161fc5d)
    * xrandr: comma separated --setmonitor third argument (8a76f3d)
    Bug Fixes
    * __load_completion: quoted compspec for variants (#1008) (0a2443e)
    * _cd_devices: /dev/cdc-* CDC device false positives (5250728)
    * _comp__init_set_up_service_completions: work around failglob (2529d40)
    * comp{first_arg,count_args}: count - as argument (e23a79e)
    * comp{first_arg,count_args}: count any arguments after -- (9bfd760)
    * _comp_command_offset: Support complete -C (80450ca)
    * _comp_compgen_fstypes: avoid unexpected expansions (a856d81)
    * _comp_compgen_help: allow dots to connect names in longopt (79dadfc)
    * _comp_compgen_known_hosts: work around bash-4.2 nounset (d2860cb)
    * _comp_compgen_split: work around nounset (f488f96)
    * _comp_compgen_term: replace completions by default (d3696a3)
    * _comp_compgen_usergroup: avoid directly overwriting COMPREPLY (d380498)
    * _comp_compgen: do not inherit -a for explicitly specified var (3c20766)
    * _comp_compgen: explicitly exclude cur from the target variable (5fe98f3)
    * _comp_count_args: check optarg correctly (874c503)
    * _comp_count_args: exclude <>& from wordbreaks as _comp_initialize (521d2bb)
    * _comp_count_args: ignore empty $3 (76eea74)
    * _comp_count_args: perform optarg check also on $3 (21d3122)
    * _comp_count_args: skip reassembling cword and words (3127703)
    * _comp_delimited: treat delimiter as a fixed string (571a0f7)
    * _comp_deprecate_func: argument order in usage error message (597f62f)
    * _comp_get_words: empty prev if unavailable (localvar_inherit) (d8b8eef)
    * _comp_initialize: fix completions of redirections without space (da16bf6)
    * _comp_initialize: protect against "localvar_inherit" (0cc8d83)
    * _comp_split,_comp_compgen: strip periods from error message (b3b6a7c)
    * _comp_split: update error message for the correct options (3c4a89c)
    * _comp_sysvdirs: work around nounset (da26178)
    * _filedir_xspec: clean up unused variable tmp (67f1189)
    * _get_cword_at_cursor,cvs: quote array length (201239c)
    * _get_first_arg: remove invalid doccomment (eb40f56)
    * _known_hosts: use array for options (work around SC2178,SC2179) (743d0a9)
    * _mock,rpm: avoid icase flag s/reg/rep/i of GNU sed (33c18ce)
    * _service: quote word (c2d7fb7)
    * _slackpkg: do not scan after cword (ecd1384)
    * 7z: remove redundant printf '%s\n' "..." (20c2e32)
    * ant: work around custom IFS (584e567)
    * apt-cache: check all the words (84cfeda)
    * aptitude: do not use non-POSIX BRE \w (cd8c870)
    * aspell: use _comp_expand_glob against unexpected splitting (58d5176)
    * bash_completion: remove some unnecessary -a to _comp_compgen (636bb7c)
    * bts: update functions to generators and fix variable conflicts (7d2867c)
    * carton: remove a branch never happening (cd063f9)
    * chgrp: fix typo _comp_compgen{d  =&gt; _}filedir (#1063) (4c98ce5)
    * compat: find compat dir for prefix-install (b6d06bc)
    * completions/*: quote array assignments properly (848aa41)
    * completions/*: scan until cword instead of ${#words[@]}-1 (17e0cc3)
    * completions/*: work around localvar_inherit (e3a871d)
    * curl,koji: use _comp_compgen_help (f37f221)
    * curl,qemu: avoid using POSIX character classes for mawk (d60c530)
    * curl: colon handling for IPv6 address completions (8508d1d)
    * cvs,mutt,pkg_delete: quote prefix to remove for literal matching (533903e)
    * cvs: avoid variable conflicts (0d145c9)
    * dict: nounset error when host/port not set (57191e2)
    * dict: protect splitting from custom IFS (b31fe1e)
    * dict: work around bash-4.2 array nounset (d76dd9e)
    * dict: work around bash-4.3 ${v+"$@"} with custom IFS
    Unable to render expression.
    * ${v+"$@"} with custom IFS (cc21298)
    * dmypy: protect against "localvar_inherit" (768ce65)
    * dpkg-source: filter completions by cur (dbcef6e)
    * filedir: work around bash-4.2 compgen -f -- "''" (c8bb123)
    * fix problems with set -o nounset (9c3e196)
    * gdb: fix regression that fails to generate command names (ca8e240)
    * gdb: remove duplicate candidates (532fc05)
    * gdb: use POSIX-compatible find expression (73938cd)
    * gdb: work around bash 4.4 ${v+"$@"}
    * get_words: work around bash-4.3 connected ${v+"$@"}
    * getent: check noargopts (6143f25)
    * getent: work around localvar_inherit (a12f438)
    * gzip,isort: fix typo _comp_com{gp =&gt; pg}en (462feb3)
    * iperf,puppet: use {m,n} instead of ? and + for POSIX sed (3f0322b)
    * iperf: work around failglob with backslash in bash-5.0 (979f04f)
    * ip: Remove non-existent route completion (3b9ce4d)
    * isql: work around nounset (cb7007a)
    * java,kldload: use _comp_compgen for filename-based mod names (81adc6c)
    * java: localize cur (ec0068d)
    * kcov,povray: quote array expansions to avoid extra processing (215edab)
    * kldload,mplayer,mutt: work around nounset (5330fbe)
    * kldunload: remove unused -X option (35017d2)
    * known_hosts_real: match *.pub instead of *pub (470a644)
    * known_hosts_real: use _comp_expand_glob to avoid failglob (672215e)
    * known_hosts_real: work around nounset (07c619a)
    * lilo,rpcdebug,slapt-{get,src}: work around nounset (cfc3eda)
    * lvm: replace array slices with existing utility (ea49840)
    * lvm: update call to sub-command (30494f7)
    * make: handle multiple short options in skipping arguments (24c80c9)
    * make: typo fix in a code comment (e72cc82)
    * mdadm,update-alternatives: fix leak variable (14cd53b)
    * medusa: filter completions by the current word cur (f3ae706)
    * mr: avoid ${var/pat/$'...'} for compat42 in bash >= 4.3 (b5ae5fa)
    * mr: exactly match command names (800b103)
    * mutt: avoid unexpected word splitting (3183e67)
    * mutt: fix use of regex in the glob context (63924e6)
    * mutt: rewrite ${cur/#!/X} to X${cur:1} against patsub_replacement (6b8f82b)
    * mutt: use _comp_dequote for safe eval (f98379d)
    * openssl: avoid variable conflicts (a31906c)
    * openssl: fix variable i leak (83844b7)
    * perl: fix ineffective condition in an awk script (302dc52)
    * perl: helper call regression from 01611dd (b85263a)
    * pgrep: do not rely on uncontrolled IFS (99e38b2)
    * portinstall: use awk and _comp_compgen to filter completions (791f56c)
    * povray,sbopkg: check filetype (434eb08)
    * povray: process each element against patsub_replacement (0afc2e4)
    * povray: quote an argument properly (0a240bd)
    * ps,ss: avoid extra expansions by -W "$(...)" in _comp_delimited (cb347cb)
    * pydoc: specify -a to _comp_compgen_filedir (34a91e9)
    * pytest: do not filter underscores from parsed option arg choices (ea13241)
    * python: avoid variable conflicts (bef94c3)
    * python: complete filenames for script arguments (#1018) (397a49d)
    * python: complete micropython and pyston script args consistently (5b60ccc)
    * qdbus: remove cur and all the rest arguments (531b751)
    * replace \s with [[:space:]] for POSIX sed/awk (1989ba9)
    * ri: avoid interference on existing COMPREPLY (0a9d931)
    * ri: fix wrongly quoted options to compgen (5248bbf)
    * ri: properly split methods (910a5a0)
    * ri: split classes using _comp_split (c95baa1)
    * ri: work around localvar_inherit (9d6ff68)
    * sbopkg: add ; mandatory before } in POSIX sed (b286d53)
    * sbopkg: work around nounset (9709bdf)
    * scp: nounset mode error on unknown suboption, bash 4.2 (82ca8d9)
    * ssh-copy-id: call ssh, not -copy-id for suboption completion check (473278f)
    * ssh-keygen: call ssh, not -keygen to resolve supported protocols (d569ea2)
    * ssh-keygen: first arg to ssh query for protocol versions (8a0a71e)
    * ssh: avoid variable conflicts (f2df91d)
    * ssh: fix wrong quoting inside compgen -W (febb3b3)
    * ssh: remove -a of generators (55c5c45)
    * ssh: remove unnecessary -a to _comp_compgen (992f28e)
    * ssh: resolve relative ssh_config Include correctly (4ac86e8)
    * ssh: use _comp_compgen for _comp_xfunc_ssh_identityfile (05e70ed)
    * ssh: work around bash-4.2 nounset (4447f83)
    * ssh: work around bash-4.2 nounset (d0695d0)
    * sudo: use $1 (sudo) as $root_command (329ca0e)
    * svcadm: fix ineffective IFS for splitting (1fd456e)
    * svcadm: use the first matching name as command (1870d5e)
    * sysbench: fix extraction of test-name option (cc246a1)
    * timeout: always treat word after duration as command (0d0531b)
    * tipc: remove filtered-out elements (75b36b2)
    * update-alternatives: quote dirname (1205ed1)
    * update-alternatives: suppress error for non-existent directory (adbdab8)
    * update-alternatives: work around localvar_inherit (1d9e19c)
    * upgradepkg: use _comp_compgen for _comp_cmd_upgradepkg (a0973d7)
    * use _comp_compgen_split to avoid extra expansions by -W "$(...)" (49997d0)
    * use _comp_compgen_split to split and filter words (158b8ba)
    * use _comp_compgen_split while keeping filtering by $cur (a00ee19)
    * use _comp_compgen for word list (83f033f)
    * use _comp_split while keeping filtering by $cur (509e642)
    * use compgen -P prefix -W '"${arr[@]}"' against patsub_replacement (45d036a)
    * use XPG4 awk in Solaris (cdd6da9)
    * wol: filter IP addresses by cur (c3505c5)
    * wtf: quote array assignment (44c1d12)
    * xfreerdp: support the new form of the option /list:kbd (d8cadfe)
    * xfunc ssh identityfile: localize change to cur (76b5726)
    Performance Improvements
    * _comp_count_args: skip reinitializing cword and words (29398ef)
    * mutt: return earlier on empty cur (a244587)
    * portinstall: return earlier for -lLo and non-existent file (395e463)
    * vncviewer: set nocasematch inside subshell (5ed0020)
  - Delete patches as fixed upstream
    * fix-curl-help-completion-bsc1200791.patch
    * fix_quote_readline_by_ref.patch
  - Port patches
    * FOO-dir-completion-boo905348.patch
    * LVM-completion-bsc946875.patch
    * backtick-completion-boo940835.patch
    * backticks-bsc963140.patch
    * bash-completion-2.4.patch
    * bash-completion-2.7-unRAR-remove.patch
    * bash-completion.changes
    * bash-completion.spec
    * boo1190929-9af4afd0.patch
    * bsc1199724-modules.patch
    * ls-completion-boo889319.patch
    * qdbus-qt5.patch
    * respect-variables-boo940837.patch
    * rm-completion-smart-boo958462.patch
    * tar-completion.patch
  - Do not apply patch
    bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
    as not known how to port and if this is required


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Remove also patch
    bash-completion-fix-missing-directory-completion-with-filename-pattern.patch
    as the problem is fixed upstream


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Add patch boo1221414-scp.patch
    * Do not replace the asignment of the array COMPREPLY with
      the shell function _comp_compgen_split (boo#1221414)


author: colyli@suse.com
changelog:
  - Update bcache-tools to 1.0.9, this is required by yast2 bcache module
    development. In this version a new program named "bcache" is added,
    by this program people may avoid many operations on sysfs entries.
    (bsc#1109460)
  - Remove the following patche since it is in upstream,
    - 0001-build-remove-inline-keyword-from-crc64.patch
  - Rename prefix of
    0001-udev-do-not-rely-on-DRIVER-variable.patch
    to a SUSE specific patch prefix
    1001-udev-do-not-rely-on-DRIVER-variable.patch


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Add a _service file for the tarball from outer space.
  - Shift the version number to 1.0.8+suse5 because there has never
    been a 1.0.9 release.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to tag 1.1
    * add blkdiscard for cache dev
    * add 'label' field
    * allow users to set label for device


author: Coly Li <colyli@suse.com>
changelog:
  - Remove dependence of smartcols bcache-tools.spec, bcache-tools
    code doesn't need it now. (jsc#SLE-9807)
  - Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
    we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
    to provide static UUIDs. (jsc#SLE-9807)
  - bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
    0017-bcache-tools-add-man-page-bcache-status.8.patch
  - bcache-tools: add bcache-status (jsc#SLE-9807)
    0016-bcache-tools-add-bcache-status.patch
  - bcache-tools: make: permit only one cache device to be
    specified (jsc#SLE-9807)
    0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
  - bcache-tools: Remove the dependency on libsmartcols
    (jsc#SLE-9807)
    0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
  - bcache-tools: Export CACHED_UUID and CACHED_LABEL
    (jsc#SLE-9807)
    0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  - bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
    0012-bcache-tools-Fix-potential-coredump-issues.patch
  - bcache-tools: add print_cache_set_supported_feature_sets()
    in lib.c (jsc#SLE-9807)
    0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
  - bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
    0010-bcache-tools-add-large_bucket-incompat-feature.patch
  - bcache-tools: upgrade super block versions for feature sets
    (jsc#SLE-9807)
    0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
  - bcache-tools: define separated super block for in-memory and
    on-disk format (jsc#SLE-9807)
    0008-bcache-tools-define-separated-super-block-for-in-mem.patch
  - bcache-tools: add to_cache_sb() and to_cache_sb_disk()
    (jsc#SLE-9807)
    0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
  - bcache-tools: list.h: only define offsetof() when it is
    undefined (jsc#SLE-9807)
    0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
  - bcache-tools: bitwise.h: more swap bitwise for different
    CPU endians (jsc#SLE-9807)
    0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
  - bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
    0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
  - bcache-tools: convert writeback to writethrough mode for zoned
    backing device (jsc#SLE-9807)
    0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
  - bcache-tools: add is_zoned_device() (jsc#SLE-9807)
    0002-bcache-tools-add-is_zoned_device.patch
  - bcache-tools: set zoned size aligned data_offset on backing device
    for zoned devive (jsc#SLE-9807)
    0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch


author: Coly Li <colyli@suse.com>
changelog:
  - Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
    0018-Makefile-install-bcache-status.patch
  - bcache-tools.spec: add '_sbindir/bcache-status' for the new added
    bcache-status python script (jsc#SLE-9807, bsc#1178725)


author: Coly Li <colyli@suse.com>
changelog:
  - bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
    0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
  - bcache-tools: only call set_bucket_size() for cache device
    (jsc#SLE-9807)
    0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
  - bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
    BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
    0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
  - bcache-tools: check incompatible feature set (jsc#SLE-9807)
    0022-bcache-tools-check-incompatible-feature-set.patch
  - bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
    for large bucket (jsc#SLE-9807)
    0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
  - bcache-tools: display obsoleted bucket size configuration
    (jsc#SLE-9807)
    0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
  - bcache-tools: recover the missing sb.csum for showing bcache device
    super block (jsc#SLE-9807)
    0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
  - bcache-tools: only call to_cache_sb() for bcache device
    in may_add_item() (jsc#SLE-9807)
    0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
  - bcache-tools: improve column alignment for "bcache show
    - m" output (jsc#SLE-9807)
    0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch


author: Coly Li <colyli@suse.com>
changelog:
  - bcache-tools: Update super block version in bch_set_feature_*
    routines (jsc#SLE-9807)
    0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch


author: Coly Li <colyli@suse.com>
changelog:
  - bcache-tools: improve is_zoned_device() (bsc#1208425)
    0029-bcache-tools-improve-is_zoned_device.patch


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to snapshot 1.1+git37.a5e3753
    * support ``bcache show -d`` for nvdimm-meta device
  - Abolish /usr/bin/env [boo#1216370]
  - Delete (merged):
    0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch
    0002-bcache-tools-add-is_zoned_device.patch
    0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
    0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
    0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
    0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
    0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
    0008-bcache-tools-define-separated-super-block-for-in-mem.patch
    0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
    0010-bcache-tools-add-large_bucket-incompat-feature.patch
    0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
    0012-bcache-tools-Fix-potential-coredump-issues.patch
    0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
    0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
    0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
    0016-bcache-tools-add-bcache-status.patch
    0017-bcache-tools-add-man-page-bcache-status.8.patch
    0018-Makefile-install-bcache-status.patch
    0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
    0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
    0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
    0022-bcache-tools-check-incompatible-feature-set.patch
    0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
    0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
    0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
    0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
    0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch
    0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch
    0029-bcache-tools-improve-is_zoned_device.patch


author: fstrba@suse.com
changelog:
  - Allow building with any java-devel provider
  - Specify java source and target level 1.6 to fix build with jdk9
  - Added patch:
    * bcel-5.2-encoding.patch
      + specify the correct encoding of the files


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Build against the generic xml-apis provider which allows
    building against bootstrap and non-bootstrap packages according
    of their availability.


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - BuildIgnore xalan-j2, xml-apis, xml-resolver, xerces-j2, since
    those packages are not necessary for the build.


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Security fix: [bsc#1205125, CVE-2022-42920]
    * Apache Commons BCEL prior to 6.6.0 allows producing
      arbitrary bytecode via out-of-bounds writing
    * Add bcel-CVE-2022-42920.patch


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Update to version 6.7.0
    * 6.7.0 (2022-11-28) Maintenance and bug fix release.
    * 6.6.1 (2022-10-29) Maintenance and bug fix release.
    * 6.6.0 (2022-10-08) Minor feature and bug fix release.
    * 6.5.0 (2020-06-05) Minor feature and bug fix release.
    * 6.4.1 (2019-09-26) Bug fix release.
    * 6.4.0 (2019-09-20) Feature and bug fix release.
    * 6.3.1 (2019-03-20) Bug fix release
    * 6.3 (2019-01-23) Experimental Java 9, 10, 11, 12-EA, and 13-EA
      Support
    * 6.2 (2017-12-08) Experimental Java 9 Support
    * 6.1 (2017-09-14) Experimental Java 9 Support
    * 6.0 (2016-07-10) Apache Commons BCEL 6.0 is a major release
      supporting the new features introduced in Java 6, 7 and 8. It
      requires Java 7 or higher to run.
      COMPATIBILITY with 5.2
      + Binary compatible
    - not strictly compatible
    - The constant interface org.apache.bcel.Constants has been
      deprecated. Classes which implemented this interface in 5.2
      now use the constants defined in the org.apache.bcel.Const
      class.
    - The constant interface
      org.apache.bcel.generic.InstructionConstants has been
      deprecated. Classes which implemented this interface in 5.2
      now use the constants defined in the
      org.apache.bcel.generic.InstructionConsts class.
    - Return type of method 'public java.lang.Object
      getElementAt(int)' in org.apache.bcel.verifier
      .VerifierFactoryListModel has been changed to
      java.lang.String.
    - The BCEL classes do no longer implement java.io.Serializable.
      + Source compatible
    - Yes, sort of;
    - The org.apache.bcel.classfile.Visitor interface has been
      enhanced with additional methods. If you implemented it
      directly instead of extending the EmptyVisitor class you'll
      have to implement the new methods.
    - The org.apache.bcel.generic.Visitor interface has been
      enhanced with an additional method. If you implemented it
      directly instead of extending the EmptyVisitor class you'll
      have to implement the new methods.
      + Semantic compatible
    - Yes, except:
    - BCEL 6.0 handles new attributes such as code annotations
      that could only be processed by implementing a custom
      AttributeReader in the previous versions. Code relying on
      this behavior will have to be adjusted since the
      AttributeReader will no longer be called in these cases.
      + For full information about API changes please see the extended
      Clirr report: https://commons.apache.org/bcel/clirr-report.html
  - Removed patches:
    * bcel-5.2-encoding.patch
      + part of our own build.xml file generated to build with ant
    * bcel-CVE-2022-42920.patch
      + integrated upstrea


author: Anton Shvetz <shvetz.anton@gmail.com>
changelog:
  - Update to version 6.8.0
    * 6.8.0 (2023-12-08) Maintenance and bug fix release.
      + New features:
      ~ Add and use InvalidMethodSignatureException extending
      ClassFormatException.
      ~ Increase code coverage in Class2HTMLTestCase with new test
      input Java4Example #186.
      ~ Add verifier tests on some opcodes #180.
      ~ Added signature test cases for class/method, and bad
      signatures #182.
      ~ Add Const.MAJOR_20.
      ~ Add Const.MINOR_20.
      ~ Add Const.MAJOR_21.
      ~ Add Const.MINOR_21.
      ~ [Bcelifier] stackmap support to pass JDK verifier #177.
      ~ Fix SpotBugs [ERROR] Class org.apache.bcel.util.ClassVector
      defines non-transient non-serializable instance field vec
      [org.apache.bcel.util.ClassVector] In ClassVector.java
      SE_BAD_FIELD.
      ~ Fix SpotBugs [ERROR] Switch statement found in
      org.apache.bcel.util.BCELFactory.visitAllocationInstruction(AllocationInstruction)
      where one case falls through to the next case
      [org.apache.bcel.util.BCELFactory,
      org.apache.bcel.util.BCELFactory] At
      BCELFactory.java:[lines 188-191]Another occurrence at
      BCELFactory.java:[lines 192-196] SF_SWITCH_FALLTHROUGH.
      + Fixed bugs:
      ~ When parsing an class with an invalid constant reference,
      ensure ClassParser.parse() throws ClassFormatException, not
      NullPointerException.
      ~ Ensure that references to a constant pool entry with index
      zero trigger a ClassFormatException, not a
      NullPointerException.
      ~ Ensure that references to the unused constant pool entry
      after a long/double entry triggers a ClassFormatException,
      not a NullPointerException.
      ~ Test and coverage of InstructionFactory #190.
      ~ Verifier: test and coverage for SWAP instruction #188.
      ~ Exception parsing Kotlin class with 'fun `method name with
      () in it`()' #205.
      ~ Fix null pointers in AnnotationEntry #213.
      ~ Field not found, search field in both super class and
      implemented interfaces (5x duplicated code to find field by
      name and type is refactored to a new method and now
      supports package-private) #181.
      ~ BCEL-366: Use alternative name for broken classes under
      test #220.
      ~ BCEL-367: Fixes java.lang.IndexOutOfBoundsException for
      ATHROW on empty stack #223.
      ~ BCEL-368: Fixes java.lang.StackOverflowError in
      Select#toString(boolean) #229.
      ~ Fix for type.getType(...) use on non-signature type names
      [#221].
      ~ Fix EmptyVisitorTestCase on Java 21.
      + Changes:
      ~ Bump commons-parent from 54 to 65 #189, #198, #222.
      ~ Bump jna.version from 5.12.1 to 5.13.0 #203.
      ~ Bump kotlin-stdlib from 1.8.10 to 1.9.21 #217, #219, #227,
      [#231], #235, #245, #247.
      ~ Bump commons-io from 2.11.0 to 2.15.1.
      ~ Bump commons-lang3 from 3.12.0 to 3.14.0.
      ~ Bump org.codehaus.mojo:exec-maven-plugin from 3.1.0 to
      3.1.1 #246.


author: sor.alexei@meowr.ru
changelog:
  - Update to version 1.0.4:
    * Build system fixes.
  - Remove bcg729-1.0.3-fix-includedir.patch: fixed upstream.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.1.1:
    * compatibility with old compilers
    * Fixed infinite loop in VAD module and overflow in encoder
    * build scripts fixes


author: Fabian Vogt <fvogt@suse.com>
changelog:
  - Update bluetooth firmware to address Sweyntooth and Spectra issues (bsc#1176631):
    * BCM43430A1.hcd
    * BCM4345C0.hcd


author: Nicolas Patricio Saenz Julienne <nsaenzjulienne@suse.com>
changelog:
  -  Introduce firmware files for RPi400:
    * brcmfmac43456-sdio.bin
    * brcmfmac43456-sdio.clm_blob
    * brcmfmac43456-sdio.txt


author: Nicolas Patricio Saenz Julienne <nsaenzjulienne@suse.com>
changelog:
  - Introduce firmware file for RPi Compute Module 4
  - Update BCM4345C0.hcd
  - Update brcmfmac43456-sdio.clm_blob


author: Nicolas Patricio Saenz Julienne <nsaenzjulienne@suse.com>
changelog:
  - Cater for old and new ways of configuring bluetooth on RPi. Users of
    'hciattach' expect the firmware in '/lib/firmware' while users of the serdev
    configured bluetooth setups will expect it in '/lib/firmware/brcm'
    (bsc#1177189).


author: Matthias Brugger <mbrugger@suse.com>
changelog:
  - Introduce firmware files for Raspberry Pi Zero 2 W support (jsc#SLE-23064).
  - Update BCM4345C0.hcd to fix Spectra for CYW43455 (CVE-2020-10370)
  - Change source file links from branch master to branch buster.


author: sndirsch@suse.com
changelog:
  - removed unneeded requires to kbd in order to resolve build cycle
    kbd <-> console-setup (bnc#963942)


author: Fabian Vogt <fvogt@suse.com>
changelog:
  - Add patch to fix Caps_Lock mapping for us.map and others (bsc#1202853):
    * 0001-ckbcomp-Fix-check-for-non-ascii.patch


author: Alexei Sorokin <sor.alexei@meowr.ru>
changelog:
  - Update to version 1.215:
    * See https://salsa.debian.org/installer-team/console-setup/-/blob/debian/1.215/debian/changelog
  - Make a bdf2psf package like in Fedora.
  - Suggest xkeyboard-config.
  - Replace console-setup-1.76-paths.patch with
    console-setup-paths.patch.
  - Move the fonts to /usr/share/kbd/ to be discoverable by vconsole.
  - Drop console-setup-1.134-perl526.patch,
    console-setup-1.134-reproducible.patch, u_fix-iso-left-tab.patch,
    0001-ckbcomp-Fix-check-for-non-ascii.patch: fixed upstream.
  - Fix the RPM Group.


author: Martin Jambor <mjambor@suse.com>
changelog:
  - Added bdfresize-gcc14.patch which adds a missing return type to main
    function in the configure script so that the configure script works
    with C99 standard enforcing compilers like GCC 14. [boo#1225772]


author: zaitor@opensuse.org
changelog:
  - Update to version 1.0.4:
    + Use remove() instead of unlink() to remove files.
    + Use symbolic names instead of raw integers for stdin & stdout
      fd's.
    + Add -v flag to print version info.
    + Combine usage message strings.
    + Initialize font to 0 values directly instead of via bzero.
    + Adopt X.Org standard coding style (via x-indent.sh).
    + man: remove trailing spaces and tabs.
    + config:
    - Move man pages into their own directory.
    - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
    - Use AC_PROG_INSTALL now supplied by XORG_DEFAULT_OPTIONS.


author: tobias.johannes.klausmann@mni.thm.de
changelog:
  - Update to version 1.0.5:
    This minor maintenance release fixes a couple of issues with the
    usage messages printed for incorrect options, and updates the
    configure scripts to the latest X.Org standards.


author: sndirsch@suse.com
changelog:
  - Update to version 1.1
    * This release imports the libXfont 1.x BDF-reading and PCF-writing
      code, as this program is the only known user of that code and
      libXfont 1.x is otherwise unmaintained. No functional difference
      should be apparent, this is just another step towards eliminating
      the old version of libXfont from the world.


author: Stefan Dirsch <sndirsch@suse.com>
changelog:
  - Update to version 1.1.1
    * Update README for gitlab migration
    * Update configure.ac bug URL for gitlab migration
    * Fix spelling/wording issues
    * gitlab CI: add a basic build test
    * Adopt X.Org standard coding style (via x-indent-all.sh)
    * Add .git-blame-ignore-revs to hide whitespace commits from git blame
    * Variable scope reductions as recommended by cppcheck
    * Delete functions identified as unused by cppcheck
    * Make some functions static that aren't called from other files
    * Remove redundant assignment
    * Remove redundant null-pointer check
    * Fix -Wsign-compare warnings
    * Remove unnecessary cast of strlen result in malloc argument
    * Remove weak symbol setup from Atom code
    * Depend on xproto and fsproto that are now used.


author: Martin Pluskal <mpluskal@suse.com>
changelog:
  - Update to version 1.5.2:
    * Timestamps in output are now rfc3339-formatted #965
    * overflow warnings with timers fixed #980
    * Python dependencies are now covered by a requirements.txt #994
    * JSON output cleaned up when no CPU scaling is present (#1008)
    * CartesianProduct added for easier settings of multiple ranges (#1029)
    * Python bindings improvements:
      + Custom main functions (#993)
      + A rename to google_benchmark (#199
      + More state methods bound (#1037) with a builder interface (#1040)
    * Workflow additions in github include pylint (#1039) and bindings runs (#1041)


author: Christophe Giboudeaux <christophe@krop.fr>
changelog:
  - Add upstream patch to fix build with GCC 11 (boo#1181865):
    * 0001-src-benchmark_register.h-add-missing-limits-inclusio.patch


author: mpluskal@suse.com
changelog:
  - Update to version 1.5.3:
    * Be compliant and return 0 from main.
    * Fix windows warning on type conversion (#1121)
    * Add verbosity to CI logs (#1122)
    * fix cmake issue with referencing a non-existing function argument (#1118)
    * [tools] Fix dumb mistake in previous commit - print aggregates only means aggregates, not non-aggregates
    * [tools] Don't forget to print UTest when printing aggregates only
    * [sysinfo] Fix CPU Frequency reading on AMD Ryzen CPU's (#1117)
    * Use fewer ramp up repetitions when KeepRunningBatch is used (#1113)
    * Add bazel status to README
    * Re-enable bazel without bazelisk and with scoped build/test targets (#1109)
  - Drop no longer needed 0001-src-benchmark_register.h-add-missing-limits-inclusio.patch


author: Martin Pluskal <mpluskal@suse.com>
changelog:
  - Update to version 1.5.5:
    * [NFCI] Drop warning to satisfy clang's -Wunused-but-set-variable diag (#1174)
    * Add support for new architecture loongarch (#1173)
    * Use modern clang/libc++ for sanitizers (#1171)
    * Enable various sanitizer builds in github actions (#1167)
    * Random interleaving of benchmark repetitions - the sequel (fixes #1051) (#1163)
    * Fix leak in test, and provide path to remove leak from library (#1169)
    * [NFCI] Make BenchmarkRunner non-internal to it's .cpp file
    * [NFCI] RunBenchmarks(): extract FlushStreams()/Report() functions
    * compare.py: sort the results (#1168)
    * Make 'complexity reports' cache per-family, not global (#1166)
    * Introduce per-family instance index (#1165)
    * Introduce "family index" field into JSON output (#1164)
    * BenchmarkFamilies::FindBenchmarks(): correctly use std::vector<>::reserve()
    * Ensure that we print repetition count even when it was specified via flag `--benchmark_repetitions=`
    * Revert "Implementation of random interleaving.  (#1105)" (#1161)
    * Fix perf counter argument parsing (#1160)
    * Run build-and-test on all branches
    * Un-disable github actions :]
    * Run build-and-test on all branches
    * Set theme jekyll-theme-hacker
    * bump version to v1.5.4
    * Removing freenode from README
    * Fix pedantic compilation flag violation (#1156)
    * fix version recorded in releases (#1047)
    * Implementation of random interleaving.  (#1105)
    * remove appveyor and add libera.chat as IRC resource
    * [PFM] Extend perf counter support to multi-threaded cases. (#1153)
    * Support -Wsuggest-override (#1059)
    * Refactor `BenchmarkInstance` (#1148)
    * Remove travis configs that are covered by actions (#1145)
    * remove done TODOs
    * add g++-6 to ubuntu-14.04 (#1144)
    * Add MSVC ARM64 support to cmake (#1090)
    * Add ubuntu-14.04 build and test workflow (#1131)
    * Clean -Wreserved-identifier instances (#1143)
    * Fix StrSplit empty string case (#1142)
    * cmake: Add explicit BENCHMARK_ENABLE_LIBPFM option (#1141)
    * Add API to benchmark allowing for custom context to be added (#1137)
    * Add `benchmark_context` flag that allows per-run custom context. (#1127)
    * Add multiple compiler support to build-and-test workflow (#1128)
    * enable markdown rendering on github pages
    * Support optional, user-directed collection of performance counters (#1114)


author: Martin Pluskal <mpluskal@suse.com>
changelog:
  - Update to version 1.6.1:
    * Creating release commit for v1.6.1
    * Destructor not returning is expected in some cases (#1316)
    * Address c4267 warning on MSVC (#1315)
    * Fix `-DBENCHMARK_ENABLE_INSTALL=OFF` (Fixes #1275) (#1305)
    * Avoid errors due to "default label in switch which covers all enumeration values" in Windows codepath (#1302)
    * update googletest to latest release tag 1.11.0 (#1301)
    * clang-tidy: readability-redundant and performance (#1298)
    * Update user_guide.md (#1296)
    * Fix broken link to Setup/Teardown section (#1291)
    * Add clang-tidy check (#1290)
    * compare.py: compute and print 'OVERALL GEOMEAN' aggregate (#1289)
    * remove long-defunct cli parameter
    * lose some build warnings
    * Disable clang-tidy (unused-using-decls) (#1287)
    * disable lint check where we know it'd fail (#1286)
    * Add Setup/Teardown option on Benchmark. (#1269)
    * Googletest renamed master to main today. (#1285)
    * Remove bazelbuild/rules_cc dependency (#1283)
    * Support for building with LLVM clang-10/clang-11 on Windows. (#1227)
    * Fix dependency typo and unpin cibuildwheel version in wheel building ? (#1263)
    * check clang format on pull requests and merges (#1281)
    * format tests with clang-format (#1282)
    * clang-format Google on {src/,include/} (#1280)
    * Fix warning with MacOS (#1276)
    * Fixed typo in doc:  s/marcro/macro (#1274)
    * Fix error with Fix Werror=old-style-cast  (#1272)
    * Fix error Wshorten-64-to-32 (#1273)
    * [cleanup] Change `== ""` to `.empty()` on string to avoid clang-tidy warnings (#1271)
    * Fix un-initted error in test and fix change the API previously proposed to use std::string instead of raw char* (#1266)
    * use docker container for ubuntu-16.04 builds (#1265)
    * [RFC] Adding API for setting/getting benchmark_filter flag? (#1254)
    * Allow template arguments to be specified directly on the BENCHMARK macro (#1262)
    * Added Doxygen support. (#1228)
    * Fix -Wdeprecated-declarations warning once more. (#1256)
    * cmake: allow to use package config from build directory
    * cmake: make package config relocatable
    * GoogleTest.cmake.in: mention BENCHMARK_USE_BUNDLED_GTEST
    * GoogleTest.cmake.in: immediately error-out after failure message, Closes #1255
    * Introduce additional memory metrics (#1238)
    * Fix -Wdeprecated-declarations warning triggered by clang-cl. (#1245)
    * Cmake: options for controlling werror, disable werror for PGI compilers (#1246)
    * cmake: eliminate redundant `target_include_directories` (#1242)
    * Update policy to match reality
    * Fix mention of --benchmarks in comment (#1229)
    * Added support of packaged GTest for running unit tests. (#1226)
    * Optimized docs installation (#1225)
    * Remove unused parameter from lambda. (#1223)
    * add  to final releasing step
    * bump version to 1.6 in preparation for release
    * COnsole reporter: if statistic produces percents, format it as such (#1221)
    * Introduce Coefficient of variation aggregate (#1220)
    * Statistics: add support for percentage unit in addition to time (#1219)
    * report.py: adjust expected u-test values for tests
    * CMake: add forgotten include(FeatureSummary) into FindPFM.cmake to fix build
    * replace #warning with #pragma message  (#1216)
    * force cmake version to 3.5.1
    * [NFC] PFM: actually report package as found, and advertise description
    * Fix links to further doc in user_guide.md (#1215)
    * Introduce accessors for currently public data members (threads and thread_index) (#1208)
    * Fix a -Wunreachable-code-aggressive warning (#1214)
    * Set theme jekyll-theme-minimal
    * wrap things that look like tags but aren't with `{% raw %}`
    * install docs folder when installing library (#1212)
    * add .DS_Store to .gitignore
    * refactor the documentation to minimise `README.md` (#1211)
    * preparing v1.5.6 release
    * Set theme jekyll-theme-modernist
    * so much for googletest not failing any more
    * turn back on strict mode for googletest as it no longer breaks
    * Change the default value of `--benchmark_filter` from "." to <empty> (#1207)
    * Remove dead code from PredictNumItersNeeded (#1206)
    * downgrade warnings for googletest (#1203)
    * Add wheel and sdist building action to GH Workflow (#1180)
    * add g++ to sanitizer buildbots (#1197)
    * Don't return a reference when the callers all expect pointers.
    * fix clang-tidy warnings (#1195)
    * Fix typos (#1194)
    * Fix type warning on certain compilers (#1193)
    * Use C++11 atomic_signal_fence for ClobberMemory (#1190)
    * Bazel qnx (#1192)
    * Deduplicate test function name in python bindings example (#1189)
    * prefix VLOG (#1187)
    * prefix macros to avoid clashes (#1186)
    * Move flags inside the `benchmark` namespace (#1185)
    * Add missing trailing commas (#1182)
    * Provide helpers to create integer lists for the given ranges. (#1179)
    * benchmark_runner.h: Remove superfluous semi colon (#1178)


author: dmueller@suse.com
changelog:
  - Update to version 1.7.0:
    * version bump
    * simplified code (#1439)
    * use target_compile_definitions (#1440)
    * Stop generating the export header and just check it in (#1435)
    * Also fix the SOVERSION for benchmark_main
    * Fix SOVERSION of shared library
    * v1.6.2 bump
    * Expose google_benchmark.State for python bindings. (#1430)
    * Suppress nvcc `offsetof` warning (#1429)
    * Correct typo in Passing Arguments section
    * cleanup comments
    * fix sanitizer builds by using clang 13 (#1426)
    * fix dependabot numpy version warning
    * fix cmake warning for libcxx setup
    * Expose default help printer function (#1425)
    * Fix DoNotOptimize() GCC compile error with some types (#1340) (#1424)
    * Remove redundant formatting tags (#1420)
    * Revert "Add possibility to ask for libbenchmark version number (#1004) (#1403)" (#1417)
    * Clarify that the cpu frequency is not used for benchmark timings. (#1414)
    * Fix DoNotOptimize() GCC copy overhead (#1340) (#1410)
    * Add possibility to ask for libbenchmark version number (#1004) (#1403)
    * add multiple OSes to bazel workflow (#1412)
    * fix some build warnings on type conversions
    * fix typo in comment
    * Report large numbers in scientific notation in console reporter (#1303) (#1402)
    * Introduce warmup phase to BenchmarkRunner (#1130) (#1399)
    * Add support to get clock for new architecture CSKY (#1400)
    * Add option to get the verbosity provided by commandline flag -v (#1330) (#1397)
    * fix some typos (#1393)
    * Add installation and build instructions for Python bindings (#1392)
    * Enable -Wconversion (#1390)
    * Add benchmark labels to the output of the comparison tool (#1388)
    * Filter out benchmarks that start with "DISABLED_" (#1387)
    * Fix wheel job name for PyPI uploads (#1384)
    * Shut down Bazel gracefully and revert wheel build strategy to job matrix (#1383)
    * Small optimization to counter map management (#1382)
    * getting sysinfo in line with Google style (#1381)
    * Promote inclusive language. (#1360)
    * [nfc] Reformat doc-string in generate_export_header (#1376)
    * Fix Bazel build breakage caused by commit 6a894bd. (#1374)
    * Build `//:benchmark` as a static library only. (#1373)
    * add note about wheels action to releasing docs
    * Change artifact download name to dist to match upload name (#1371)
    * Remove conditional trigger from PyPI upload job (#1370)
    * Add BENCHMARK_STATIC_DEFINE to the Python bindings' `cc_binary` local defines. (#1369)
    * Update LICENSE file to clearly state which file needs BSD 3 (#1366)
    * Fix float comparaison and add float comparison warning (#1368)
    * Add PyPI upload job to wheel building workflow (#1359)
    * Appended additional BSD 3-Clause to LICENSE (#1363)
    * Add SetBenchmarkFilter() to set --benchmark_filter flag value in user code (#1362)
    * Add long description and content type for proper PyPI presentation (#1361)
    * Allow setting the default time unit globally (#1337)
    * restore BENCHMARK_MAIN() (#1357)
    * @platforms is magical; remove it from WORKSPACE. (#1356)
    * Make generate_export_header.bzl work for Windows. (#1355)
    * avoid case sensitive issues with duplicated names (#1354)
    * move bzl file out of tools (#1352)
    * Introduce the possibility to customize the help printer function (#1342)
    * simplify reference to internal path (#1349)
    * Check for macro existence before using (#1347)
    * annotate and export public symbols (#1321)
    * Expose default display reporter creation in public API (#1344)
    * Avoid potential truncation issues for the integral type parameterized tests. (#1341)
    * Add mutex when reading counters_ (Fixes #1335) (#1338)
    * Use Win32 API only for Win32 apps (#1333)
    * bump numby, as per dependabot (#1336)
    * Fix cross compilation for macOS ARM builds in `cibuildwheel` (#1334)
    * Cache PerfCounters instance in PerfCountersMeasurement (#1308)
    * Fix some errors in Custom Statistics demo code. (#1332)
    * Refine the User Guide CPU Frequency Scaling section (#1331)
    * Refine docs on changing cpufreq governor (#1325)
    * Expand documentation for unpacking arbitrary arguments. (#1324)
    * Suppress GoogleTest warnings on windows (MSVC) too. (#1320)
    * Add docs on Memory profiling (#1217). (#1319)
    * Add docs for `ThreadRange`. (#1318)


author: dmueller@suse.com
changelog:
  - Update to version 1.7.1:
    * version bump for release
    * [bazel] Build libpfm as a dependency to allow collection of perf counters (#1408)
    * Add information for supported Python versions to setup.py (#1502)
    * Partially revert "Do not depend on unversioned python binary (#1496)" (#1501)
    * Do not depend on unversioned python binary (#1496)
    * Fix Solaris compilation (#1499) (#1500)
    * Support for QuRT OS (Hexagon RTOS) (#1497)
    * bump cmake dep and docs (#1468)
    * Bump pybind11 version to enable Python 3.11 wheel builds (#1489)
    * Discuss sources of variance in the user guide (#1481)
    * Stop using pandas.Timedelta (fixes #1482) (#1483)
    * Eliminate usage of deprecated  API in sysinfo.cc (#1474)
    * Enable aarch64 Linux wheel builds, use cibuildwheel action directly (#1472)
    * Clean up test documentation formatting (#1475)
    * use CMAKE_INSTALL_FULL in pkg-config file (#1473)
    * Link error when use as static library on windows. (#1470)
    * add debug option for enabling more output for failed cxxfeaturechecks (#1467)
    * FIx typo in benchmark.h (#1465)
    * run ClearRegisteredBenchmarks at exit (#1463)
    * Avoid deprecation warning in NVHPC (#1459)
    * Ensure we don't need benchmark installed to pass c++ feature checks (#1456)
    * Explicitly cast int literals to int8_t in tests to silence implicit-conversion warnings (#1455)
    * Fixed build issues on window (#1449)
    * remove unnecessary generated include directory (#1451)
    * Initialize help hook before actually parsing the command line (#1447)
    * Remove stray comment and added missing header (#1444)


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.19
    Security Fixes:
    * Previously, sending a specially crafted message over the
      control channel could cause the packet-parsing code to run out
      of available stack memory, causing named to terminate
      unexpectedly. This has been fixed. (CVE-2023-3341)
      [bsc#1215472]
    * A flaw in the networking code handling DNS-over-TLS queries
      could cause named to terminate unexpectedly due to an assertion
      failure under significant DNS-over-TLS query load. This has
      been fixed. (CVE-2023-4236)
      [bsc#1215471]
    Removed Features:
    * The dnssec-must-be-secure option has been deprecated and will
      be removed in a future release.
    Feature Changes:
    * If the server command is specified, nsupdate now honors the
      nsupdate -v option for SOA queries by sending both the UPDATE
      request and the initial query over TCP.
    Bug Fixes:
    * The value of the If-Modified-Since header in the statistics
      channel was not being correctly validated for its length,
      potentially allowing an authorized user to trigger a buffer
      overflow. Ensuring the statistics channel is configured
      correctly to grant access exclusively to authorized users is
      essential (see the statistics-channels block definition and
      usage section).
    * The Content-Length header in the statistics channel was lacking
      proper bounds checking. A negative or excessively large value
      could potentially trigger an integer overflow and result in an
      assertion failure.
    * Several memory leaks caused by not clearing the OpenSSL error
      stack were fixed.
    * The introduction of krb5-subdomain-self-rhs and
      ms-subdomain-self-rhs UPDATE policies accidentally caused named
      to return SERVFAIL responses to deletion requests for
      non-existent PTR and SRV records. This has been fixed.
    * The stale-refresh-time feature was mistakenly disabled when the
      server cache was flushed by rndc flush. This has been fixed.
    * BIND?s memory consumption has been improved by implementing
      dedicated jemalloc memory arenas for sending buffers. This
      optimization ensures that memory usage is more efficient and
      better manages the return of memory pages to the operating
      system.
    * Previously, partial writes in the TLS DNS code were not
      accounted for correctly, which could have led to DNS message
      corruption. This has been fixed.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.20
    Feature Changes:
    * The IP addresses for B.ROOT-SERVERS.NET have been updated to
      170.247.170.2 and 2801:1b8:10::b.
    Bug Fixes:
    * If the unsigned version of an inline-signed zone contained
      DNSSEC records, it was incorrectly scheduled for resigning.
      This has been fixed.
    * Looking up stale data from the cache did not take local
      authoritative data into account. This has been fixed.
    * An assertion failure was triggered when lock-file was used at
      the same time as the named -X command-line option. This has
      been fixed.
    * The lock-file file was being removed when it should not have
      been, making the statement ineffective when named was started
      three or more times. This has been fixed.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.21
    Removed Features:
    * Support for using AES as the DNS COOKIE algorithm
      (cookie-algorithm aes;) has been deprecated and will be removed
      in a future release. Please use the current default,
      SipHash-2-4, instead.
    * The resolver-nonbackoff-tries and resolver-retry-interval
      statements have been deprecated. Using them now causes a
      warning to be logged.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.24
    Security Fixes:
    * Validating DNS messages containing a lot of DNSSEC signatures
      could cause excessive CPU load, leading to a denial-of-service
      condition. This has been fixed. (CVE-2023-50387)
      [bsc#1219823]
    * Preparing an NSEC3 closest encloser proof could cause excessiv
      CPU load, leading to a denial-of-service condition. This has
      been fixed. (CVE-2023-50868)
      [bsc#1219826]
    * Parsing DNS messages with many different names could cause
      excessive CPU load. This has been fixed. (CVE-2023-4408)
      [bsc#1219851]
    * Specific queries could cause named to crash with an assertion
      failure when nxdomain-redirect was enabled. This has been
      fixed. (CVE-2023-5517)
      [bsc#1219852]
    * A bad interaction between DNS64 and serve-stale could cause
      named to crash with an assertion failure, when both of these
      features were enabled. This has been fixed. (CVE-2023-5679)
      [bsc#1219853]
    * Query patterns that continuously triggered cache database
      maintenance could cause an excessive amount of memory to be
      allocated, exceeding max-cache-size and potentially leading to
      all available memory on the host running named being exhausted
      This has been fixed. (CVE-2023-6516)
      [bsc#1219854]
    * Under certain circumstances, the DNS-over-TLS client code
      incorrectly attempted to process more than one DNS message at a
      time, which could cause named to crash with an assertion
      failure. This has been fixed.
    Bug Fixes:
    * The counters exported via the statistics channel were changed
      back to 64-bit signed values; they were being inadvertently
      truncated to unsigned 32-bit values since BIND 9.15.0.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.25
    Bug Fixes:
    * A regression in cache-cleaning code enabled memory use to grow
      significantly more quickly than before, until the configured
      max-cache-size limit was reached. This has been fixed.
    * Using rndc flush inadvertently caused cache cleaning to become
      less effective. This could ultimately lead to the configured
      max-cache-size limit being exceeded and has now been fixed.
    * The logic for cleaning up expired cached DNS records was
      tweaked to be more aggressive. This change helps with enforcing
      max-cache-ttl and max-ncache-ttl in a timely manner. [GL #4591]
    * It was possible to trigger a use-after-free assertion when the
      overmem cache cleaning was initiated. This has been fixed.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.26
    New Features:
    * The statistics channel now includes counters that indicate the
      number of currently connected TCP IPv4/IPv6 clients.
    * Added RESOLVER.ARPA to the built in empty zones.
    Bug Fixes:
    * Changes to listen-on statements were ignored on reconfiguration
      unless the port or interface address was changed, making it
      impossible to change a related listener transport type. That
      issue has been fixed.
    * A bug in the keymgr code unintentionally slowed down some
      DNSSEC key rollovers. This has been fixed.
    * Some ISO 8601 durations were accepted erroneously, leading to
      shorter durations than expected. This has been fixed.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to release 9.18.27
    New Features:
    * A new option signatures-jitter has been added to dnssec-policy
      to allow signature expirations to be spread out over a period
      of time.
    Feature Changes:
    * DNSSEC signatures that are not valid because the current time
      falls outside the signature inception and expiration dates are
      skipped instead of causing an immediate validation failure.


author: Jorik Cronenberg <jorik.cronenberg@suse.com>
changelog:
  - Update to new major version 9.20.0
    For a complete list of all changes see:
    * https://bind9.readthedocs.io/en/v9.20.0/notes.html
    * The CHANGES file in the source RPM
    Some noteworthy changes:
    * Added new BuildRequires liburcu for lock free data structures.
    * A new DNSSEC tool dnssec-ksr has been added to create Key
      Signing Request (KSR) and Signed Key Response (SKR) files.
    * /etc/bind.keys and /var/lib/named/named.root.key have been
      removed as the correct defaults are pre-compiled and there is
      no need to configure bind.keys manually.
    * The functions that were in the libbind9 shared library have
      been moved to the libisc and libisccfg libraries. The now-empty
      libbind9 has been removed and is no longer installed.
    * The irs_resconf module has been moved to the libdns shared
      library. The now-empty libirs library has been removed and is
      no longer installed.
    Security Fixes:
    * A malicious DNS client that sent many queries over TCP but
      never read the responses could cause a server to respond slowly
      or not at all for other clients. This has been fixed.
      (CVE-2024-0760)
      [bsc#1228255]
    * It is possible to craft excessively large resource records
      sets, which have the effect of slowing down database
      processing. This has been addressed by adding a configurable
      limit to the number of records that can be stored per name and
      type in a cache or zone database. The default is 100, which can
      be tuned with the new max-records-per-type option.
    * It is possible to craft excessively large numbers of resource
      record types for a given owner name, which has the effect of
      slowing down database processing. This has been addressed by
      adding a configurable limit to the number of records that can
      be stored per name and type in a cache or zone database. The
      default is 100, which can be tuned with the new
      max-types-per-name option. (CVE-2024-1737)
      [bsc#1228256]
    * Validating DNS messages signed using the SIG(0) protocol (RFC
      2931) could cause excessive CPU load, leading to a
      denial-of-service condition. Support for SIG(0) message
      validation was removed from this version of named.
      (CVE-2024-1975)
      [bsc#1228257]
    * Due to a logic error, lookups that triggered serving stale data
      and required lookups in local authoritative zone data could
      have resulted in an assertion failure. This has been fixed.
    * Potential data races were found in our DoH implementation,
      related to HTTP/2 session object management and endpoints set
      object management after reconfiguration. These issues have been
      fixed.
    * When looking up the NS records of parent zones as part of
      looking up DS records, it was possible for named to trigger an
      assertion failure if serve-stale was enabled. This has been
      fixed. (CVE-2024-4076)
      [bsc#1228258]


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.15.1
    * Support for libfuse3.
    * Fixed non-zero exit code when unable to chdir into source dir.
    * Pass through "-o fsname" to FUSE.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.17.1:
    * Fixed --resolve-symlinks when mountpoint name starts
      with source dir name


author: josef.moellers@suse.com
changelog:
  - Update to version 0.7.3
    * Shipping and future Dell EMC systems support consistent network
      device naming feature.
    [fate#332490]


author: josef.moellers@suse.com
changelog:
  - Prevent infinite recursion in dmidecode.c::smbios_setslot by
    checking that subordinate bus has a number greater than the
    current bus.
    [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
    OBS to shortcut through the -mini flavors.


author: Michal Suchanek <msuchanek@suse.com>
changelog:
  - Read DMI info rom sysfs (bsc#1174491).
    * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
    * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch


author: Michal Suchanek <msuchanek@suse.com>
changelog:
  - Add support for SMBIOS 3.
    * biosdevname-Add-SMBIOS-3.x-support.patch
  - Fix URL in specfile. It should be readable to developers.


author: Thomas Renninger <trenn@suse.de>
changelog:
  - Enhance _service file
  - Update to version 0.7.3:
    * Add SMBIOS 3.x support
    * Read DMI entries from /sys/firmware/dmi/tables/DMI
    * Add buffer read helper using read explicitly
    * man: fix all_ethN indentation
    * Netronome biosdevname support (#8)
    * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
    * Add support for ExaNIC network cards (#5)
    This are now all mainline and got reverted:
    D    biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
    D    biosdevname-Add-SMBIOS-3.x-support.patch
    D    biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch
    D    dmidecode-prevent-infinite-recursion.patch


author: Thomas Renninger <trenn@suse.de>
changelog:
  - Binary is in /usr/sbin not /sbin
    (cmp with install to /usr below) (bsc#1220125)
    M udev-rule-path.patch


author: toms@suse.de
changelog:
  - Renamed bitstream-vera -> bitstream-vera-fonts according to
    openSUSE packaging guidelines and FATE#313035
    Adjusted Obsoletes and Provides accordingly


author: Egbert Eich <eich@suse.com>
changelog:
  - Remove unneeded links. These will be taken care of by the
    update-alternatives. This will bring this package in sync
    with openblas.


author: Stefan Brüns <stefan.bruens@rwth-aachen.de>
changelog:
  - Fix missing symbols for deprecated functions in LAPACK, add
    Restore_missing_deprecated_prototypes.patch
  - Add -Wl,--no-undefined when creating shared libraries,
    to catch missing symbols during build
  - Test fixes:
    * Build test binaries during %build, run in %check
    * Fix incorrect path for test output, to actually catch
      any test failures
  - Spec file cleanup:
    * Do not rename blaslib, it is used for test binaries
    * Use same commands for building lapacke as for other libs
    * Remove unused FFLAGS_NOOP for test binaries


author: Egbert Eich <eich@suse.com>
changelog:
  - As a configurable option add tmglib code to the LAPACK librarly
    and enable TMG in LAPACKE as the header files provide its API
    (boo#1207989 & bsc#1087426).
  - Fix update-alternatives for lapacke (bsc#1207358).
  - Restore generic link for update-alternatives. This is usually
    set by the update-alternatives and it is '%ghost'ed but rpmlint
    complains.
  - Move update-alternatives --remove to %%postun to stop rpmlint
    from complaining.
  - Removed useless - because never executed - %%postrans scriptlets.
  - Added missing _%%{_arch} to update-alternative names.
  - rpmlint complains anyway - this time about alternative-link-missing
    - as it does not understand the _%%{_arch} endings: muffle with
    rpmlintrc.
  - Make arch-dependent generic names conditional.


author: Egbert Eich <eich@suse.com>
changelog:
  - Set -mfpmath=sse for the entire build for ix86 platforms
    on SLE/Leap. Since we build for x86_64, we know that sse
    is available.
    This helps to avoid effects from excess precision that
    can be seen in the test suite.
    On Factory we leave -ffloat-store for the test suite
    only as this option comes at a performance penalty.
    We may see precision related issues in the test suite
    with future compilers regardless.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Add _multibuild to define 2nd spec file as additional flavor.
    Eliminates the need for source package links in OBS.


author: Richard Biener <rguenther@suse.com>
changelog:
  - Add Fix-testing-input.patch to remove stray ';' in the input data
    for TESTING/dgebal.in now rejected with the GFortran 14 runtime.


author: Atri Bhattacharya <badshah400@gmail.com>
changelog:
  - Update to version 3.12.0 (boo#1223783):
    * Long list of changes, see
      <https://netlib.org/lapack/lapack-3.12.0.html>.
  - Drop all upstreamed or otherwise fixed patches:
    * lapack-3.2.2.patch
    * Fix-MinGW-build-error.patch
    * Fix-some-minor-inconsistencies-in-LAPACKE_czgesvdq.patch
    * Avoid-out-of-bounds-accesses-in-complex-EIG-tests.patch
    * Fix-out-of-bounds-read.patch
    * Restore_missing_deprecated_prototypes.patch
    * Fix-testing-input.patch
  - Use cmake for configure and ninja for build.
  - Package pkgconf and cmake scripts for -devel pkgs.
  - Drop multibuild flavour for man files.
  - Add multibuild flavour for static libs (also used to build man
    files).
  - Build man files using doxygen instead of using pre-built files.
  - Explicitly symlink library to relocated shared libs in
    baselibs.conf (boo#1207563).
  - Recommend lapack-man package from
    {blas,lapack,lapacke,cblas}-devel packages.


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Update to version 2.21
    * Merge pull request #4 from samueldr/fix/makefile
      Fixup Makefile for better build system support
    * Silent new gcc compiler


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Update to version 2.22
    * Avoid KillMode=none for newer systemd version as well as rework
      the systemd unit files of blog (boo#1186506)


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Update to version 2.26
    * On s390/x and PPC64 gcc misses unused arg0
  - Remove patch fcb9e0c2.patch as now part of tar ball


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)


author: Dr. Werner Fink <werner@suse.de>
changelog:
  - Update to version 2.28
    * UTMP support is gone, remove dependency also add support for
      initramfs at shutdown.


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.1:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.1
  - Changes since 6.0.0:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.2:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.2
  - Changes since 6.0.1:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.3:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.3
  - Changes since 6.0.2:
    * Remove sl documentation
    * update version for new release
    * fix pairing bug


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.4:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.4
  - Changes since 6.0.3:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.5.1:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.5
  - Changes since 6.0.4:
    * update version for new release
    * kded: Fix `launchState` setting not working (kde#469119)


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.90:
    * New feature release
    * For more details see https://kde.org/announcements/plasma/6/6.0.90
  - Changes since 6.0.5.1:
    * update version for new release
    * kded: Fix `launchState` setting not working (kde#469119)
    * Rename "Joypad" to "Game controller"
    * Add missing KService dependency
    * applet: Set a duration for the ExpandableListItem's transitions
    * fix pairing bug
    * applet: Indicate connnection failure in the applet (kde#449517)
    * find_package(KF6Kirigami2) is deprecated, use find_package(KF6Kirigami)
    * [wizard] Disable quitlock (kde#481585)
    * kcm/bluetooth: Use non symbolic icons for placeholders and add explanations
    * add a version for dependencies so it does not break CI https://invent.kde.org/plasma/bluedevil/-/merge_requests/156
    * add a separate version for dependencies so it does not break CI on bumping version
    * Remove extraFooterTopPadding usage
    * kcm_bluetooth: show device type and battery in list subtitle
    * kcm_bluetooth: show battery percentace on device page


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.1.0:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.1.0
  - Changes since 6.0.90:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.1.1:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.1.1
  - Changes since 6.1.0:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.1.2:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.1.2
  - Changes since 6.1.1:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.1.3:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.1.3
  - Changes since 6.1.2:
    * update version for new release


author: Joey Lee <jlee@suse.com>
changelog:
  - For pushing bluez 5.68 to 15-SP6 (bluez-5.65), sync change log:
    (jsc#PED-5599)
    - RPi-Move-the-43xx-firmware-into-lib-firmware.patch be removed
      by Stefan Seyfried since updating to bluez-5.66. (bsc#995059)(bsc#1094902)
      Because the header file has "#ifndef FIRMWARE_DIR...#define FIRMWARE_DIR /etc/firmare"
      instead of patching. So we just supply FIRMWARE_DIR on compiler's
      command line in bluez.spec:
      export CPPFLAGS="$CPPFLAGS -DFIRMWARE_DIR='\"/lib/firmware\"'


author: Timo Jyrinki <tjyrinki@suse.com>
changelog:
  - update to 5.69
    * Fix issue with BAP enabling state correctly when resuming.
    * Fix issue with detaching source ASEs only after Stop Ready.
    * Fix issue with handling VCP audio location and descriptor.
    * Fix issue with generating IRK for adapter with privacy enabled.
    * Add support for BAP broadcast sink.
  - Add three new man pages


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 5.70:
    * Fix issue with not sending GATT confirmations.
    * Fix issue with not handling initiator properly.
    * Fix issue with not checking PBAP counter length.
    * Add support for MICP profile and MICS service.
  - add Fix-.device_probe-failing-if-SDP-record-is-not.patch to fix
    regression when pairing game controllers


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 5.71:
    * Fix issue with not registering CSIS service.
    * Fix issue with registering pairing callbacks.
    * Fix issue with corruption during discovery filter parsing.
  - drop CVE-2023-45866.patch,
    Fix-.device_probe-failing-if-SDP-record-is-not.patch: upstream
  - update bluez-disable-broken-tests.diff: disable failing vcp test


author: Dirk Müller <dmueller@suse.com>
changelog:
  - add fix-link-key-address-type.patch - thanks to
    pallaswept for identifying the right patch for the pairing
    regression


author: Yifan Jiang <yfjiang@suse.com>
changelog:
  - Add necessary Supplements (gnome-bluetooth, blueman, bluedevil5)
    to bluez-obexd, so that file transfer features of the applications
    can be used by default (bsc#1209153).
  - Update the description of bluez-obexd.


author: seife@suse.de
changelog:
  - update to v1.2:
    * ver 1.2:
      Add ST Microelectronics firmware files.
    * ver 1.1:
      Add old Broadcom firmware files.


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 5.109.0
    * New feature release
    * For more details please see:
    * https://kde.org/announcements/frameworks/5/5.109.0
  - Changes since 5.108.0:
    * Remove code variants for building with Qt 6
    * Add explicit moc includes to sources for moc-covered headers


author: lmuelle@suse.com
changelog:
  - Provide and obsolete bogofilter from the db subpackage to ensure we stay
    with the same back-end in the update case.
  - Require a backend package from the common package.
  - Split of the documentation into an independent package.
  - Tag the common and doc package as noarch post-11.1.


author: p.drouand@gmail.com
changelog:
  - Replace tokyocabinet with kyotocabinet following kyotocabinet
    upstream recommendations
    * Replace libtokyocabinet-devel with libkyotocabinet-devel
    * Add bogofilter-kyotocabinet.patch
    * Rename tokyocabinet with kyotocabinet
  - Add autoconf and automake build dependencies; needed because of
    bogofilter-kyotocabinet.patch


author: olaf@aepfle.de
changelog:
  - Swallow old bogofilter pkgs in the db subpkg (bsc#1128219)
    fix change from April 2015
  - Require subpkgs from the very same build


author: olaf@aepfle.de
changelog:
  - The previous change added strict versioned Requires from and to a
    noarch subpkg. The release part can not be used in this case
    because the noarch packages will most likely be shared across
    architectures, and different architectures may have different
    release numbers.
    Relax the Requires again


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Convert to _multibuild: with RPM 4.16, we can no longer use
    make_install in the build phase, as %install will always empty
    DESTDIR.


author: Ferdinand Thiessen <rpm@fthiessen.de>
changelog:
  - Update to 0.9.1
    * Support Ice Lake Thunderbolt 3 i/o subsystem
    * Don't store domains where uuids change across reboots
    * Fixes for the journal and the domain's acl-log
    * Version the store and use that to clean up stale domains once
    * Host identification for embedded thunderbolt controllers [!233]
    * Various other small bug fixes and memory leak fixes.


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to 0.9.2
    * This release is compatible with umockdev >= 0.16.3; there was a change in
      umockdev that made our test fail with it, since both our test and umockev
      were trying to create the same directorires. bolt now allows for the dir
      to already exist.
    * The license for `90-bolt.rules` has changed from `GPL-2.1+`, which does
      not exist and was probably was confused with `LGPL-2.1+`, to `GPL 2.0+`.
    * Documentation has been updated and spelling mistakes fixed.
    * Various improvements for continuous integration.
    * The minimum required version of meson has been bumped to 0.46.0.


author: Paolo Stivanin <info@paolostivanin.com>
changelog:
  - Update to 0.9.3:
    * Work around a glib fix that changed behavior of the log API where now
      calling `g_log_set_writer_func` results in an hard error, which broke
      the test suite since aforementioned function was indeed called more
      than once. Nothing a level of indirection couldn't fix.


author: Robert Frohl <rfrohl@suse.com>
changelog:
  - update to 0.9.5:
    * Fixed several test and build setting issues.
    * Introduced packit. Packit was used to package rpm to downstream Fedora
      automatically. Moreover, Koji and bodhi could be triggered by packit
      automatically.


author: Robert Frohl <rfrohl@suse.com>
changelog:
  - update to 0.9.7:
    * Add a 'nopcie' security level since some devices report nopcie when Thunderbolt
      is disabled through BIOS setting.
    * Markdown lint styling is used for documents.


author: Robert Frohl <rfrohl@suse.com>
changelog:
  - update to 0.9.8:
    * A new NHI for REMBRANDT.
    * CI fixes.
    * Don't install an empty DB directory.
    * Fixed: Determine the string length before writing file.
    * Fixed: Free on error to prevent resource leak.


author: Enrico Belleri <kilgore.trout@idesmi.eu>
changelog:
  - Edit license: LGPL-2.1-or-later
  - Add BuildRequires: asciidoc to produce manpages:
    * boltd.8 boltctl.1
  - Switch dependencies to provided pkgconfig
  - Update meson required version 0.60
  - Use autosetup


author: aschnell@suse.com
changelog:
  - update to 1.82.0
    * new libraries:
      + MySQL - MySQL Header-only Library.
    * for details on all changes see,
      https://www.boost.org/users/history/version_1_82_0.html


author: aschnell@suse.com
changelog:
  - update to 1.83.0
    * new libraries:
      + Compat - Header-only Library.
    * for details on all changes see,
      https://www.boost.org/users/history/version_1_83_0.html
  - dynamic_linking.patch: updated
  - boost-mpi-noreturn.patch: added


author: aschnell@suse.com
changelog:
  - update to 1.84.0
    * new libraries:
      + Cobalt (single-threaded asynchronicity framework)
      + Redis (implements protocol RESP3)
    * for details on all changes see,
      https://www.boost.org/users/history/version_1_84_0.html
  - drop boost-phoenix-revert-std-tuple-support.patch (upstream)
  - drop boost-mpi-noreturn.patch (upstream)


author: Richard Biener <rguenther@suse.com>
changelog:
  - Avoid BuildRequire of 'gcc-c++ > 5' which is only a redundant
    check.  This interferes with Substitute.


author: aschnell@suse.com
changelog:
  - update to 1.85.0
    * new libraries:
      + charconv (implementation of <charconv>)
      + scope (collection of scope guard utilities)
    * for details on all changes see,
      https://www.boost.org/users/history/version_1_85_0.html
  - dynamic_linking.patch: updated
  - boost-charconv-quadmath.patch: added


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2021.05.19
    * Bourne Shell: The "ERR" trap is now also triggered in case that
      the error is of type "command not found" or "cannot execute".
    * Bourne Shell: the fc(1) builtin now handles "fc -l -0" the same
      way as ksh does and refers to the current command. Before, only
      "fc -l -1" did work to select the previous command.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2021.07.29
    * Bourne Shell: "cd -" now prints the new directory,
      required by POSIX.
    * star: A single Linux xattr entry with a zero length value did
      disable all Linux xattrs for the related file. This is now
      handled correctly.
    * ved: ved maxll=79 now checks whether the cursor is > column 79
      before entering a new line character.
    * ved: ved now aborts the startup if it turns out to be connected to
      a hardcopy terminal.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2021.08.14
    * A new test was added to check whether SIGSTKSZ is a constant.
    * smake: While expanding the right side of a macro assignment with
      the operators :::= and +:=, smake no longer expands $$ to $, but
      rather leaves $$ untouched.
    * smake: The dynamic macros $? and $^ now work for implicit rules
      as well.
  - Add schily-stksz.diff


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2021.09.01
    * smake: The man page now better describes pattern macro
      replacement.
  - Drop schily-stksz.diff (resolved upstream)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2022.10.16
    * bsh: Implement ^L support
    * libmdigest: Add support for BLAKE2 digests
    * mkisofs: No longer warn about Joliet being nonstandard. With
      the 2019 revision of ECMA 119, Joliet has been added as an
      annex to the standard.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 2023.09.26
    * smake: add new -V option to print the expanded value of macros
    * Bourne Shell: Fix bug where set -o notify or set -b would cause
      the shell to exit when ^C was pressed


author: Anton Shvetz <shvetz.anton@gmail.com>
changelog:
  - Version update to 1.71
    * Defects Fixed
    - In line with GPG the PGP API now attempts to preserve
      comments containing non-ascii UTF8 characters.
    - An accidental partial dependency on Java 1.7 has been removed
      from the TLS API.
    - JcaPKIXIdentityBuilder would fail to process File objects
      correctly. This is now fixed.
    - Some byte[] parameters to the CMP API were not being
      defensively cloned to prevent accidental changes. Extra
      defensive cloning has been added.
    - CMS primitives would sometimes convert ASN.1 definite-length
      encodings into indefinite-length encodings. The primitives
      will now try and preserve the original encoding where possible.
    - CMSSignedData.getAttributeCertificates() now properly
      restricts the tag values checked to just 1 (the obsolete
      v1 tag) and 2 (for the more current v2 certificates).
    - BCJSSE now tries to validate a custom KeyManager selection
      in order to catch errors around a key manager ignoring
      key type early.
    - Compressed streams in PGP ending with zero length partial
      packets could cause failure on parsing the OpenPGP API.
      This has been fixed.
    - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
      would lose track of any algorithm parameters generated
      in the initial attempt. The algorithm parameters are now
      propagated.
    - An accidental regression introduced by a fix for another
      issue in PKIXCertPathReviewer around use of the
      AuthorityKeyIdentifier extension and it failing to match
      a certificate uniquely when the serial number field
      is missing has been fixed.
    - An error was found in the creation of TLS 1.3 Export Keying
      Material which could cause compatibility issues. This has
      been fixed.
    * Additional Features and Functionality
    - Support has been added for OpenPGP regular expression
      signature packets.
    - Support has been added for OpenPGP PolicyURI signature
      packets.
    - A utility method has been added to PGPSecretKeyRing to allow
      for inserting or replacing a PGPPublicKey.
    - The NIST PQC Finalist, Classic McEliece has been added to the
      low level API and the BCPQC provider.
    - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
      the BCPQC provider.
    - The NIST PQC Alternate Candidate, FrodoKEM has been added to
      the low level API and the BCPQC provider.
    - The NIST PQC Finalist, SABER has been added to the low level
      API and the BCPQC provider.
    - KMAC128, KMAC256 has been added to the BC provider (empty
      customization string).
    - TupleHash128, TupleHash256 has been added to the BC provider
      (empty customization string).
    - ParallelHash128, ParallelHash256 has been added to the BC
      provider (empty customization string, block size 1024 bits).
    - Two new properties: "org.bouncycastle.rsa.max_size" (default
      15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
      have been added to cap the maximum size of RSA and EC keys.
    - RSA modulus are now checked to be provably composite using
      the enhanced MR probable prime test.
    - Imported EC Fp basis values are now validated against the MR
      prime number test before use. The certainty level of the
      prime test can be determined by
      "org.bouncycastle.ec.fp_certainty" (default 100).
    - The BC entropy thread now has a specific name:
      "BC-ENTROPY-GATHERER".
    - Utility methods have been added for joining/merging PGP
      public keys and signatures.
    - Blake3-256 has been added to the BC provider.
    - DTLS: optimisation to delayed handshake hash.
    - Further additions to the ETSI 102 941 support in the ETSI/ITS
      package: certification request, signed message generation and
      verification now supported.
    - CMSSignedDataGenerator now supports the direct generation of
      definite-length data.
    - The NetscapeCertType class now has a hasUsages() method on it
      for querying usage settings on its bit string.
    - Support for additional input has been added for deterministic
      (EC)DSA.
    - The OpenPGP API provides better support for subkey
      generation.
    - BCJSSE: Added boolean system properties
      "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
      "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
      Default "false". Set to "true" to disable inclusion of DH
      cipher suites in the default cipher suites for client/server
      respectively.
    * Notes
    - The deprecated QTESLA implementation has been removed from
      the BCPQC provider.
    - The submission update to SPHINCS+ has been added. This
      changes the generation of signatures - particularly
      deterministic ones.
  - Version update to 1.70
    * Defects Fixed
    - Blake 3 output limit is enforced.
    - The PKCS12 KeyStore was relying on default precedence for its
      key Cipher implementation so was sometimes failing if used
      from the keytool. The KeyStore class now makes sure it uses
      the correct Cipher implementation.
    - Fixed bzip2 compression for empty contents (GH #993).
    - ASN.1: More robust handling of high tag numbers and
      definite-length forms.
    - BCJSSE: Fix a concurrent modification issue in session
      contexts (GH#968).
    - BCJSSE: Don't log sensitive system property values (GH#976).
    - BCJSSE: Fixed a priority issue amongst imperfect-match
      credentials in KeyManager classes.
    - The IES AlgorithmParameters object has been re-written to
      properly support all the variations of IESParameterSpec.
    - getOutputSize() for ECIES has been corrected to avoid
      occassional underestimates.
    - The lack of close() in the ASN.1 Dump command line utility
      was triggering false positives in some code analysis tools. A
      close() call has been added.
    - PGPPublicKey.getBitStrength() now properly recognises EdDSA
      keys.
    * Additional Features and Functionality
    - Missing PGP CRC checksums can now be optionally ignored using
      setDetectMissingCRC() (default false) on ArmoredInputStream.
    - PGPSecretKey.copyWithNewPassword() now has a variant which
      uses USAGE_SHA1 for key protection if a PGPDigestCalculator
      is passed in.
    - PGP ASCII armored data now skips "\t", "\v", and "\f".
    - PKCS12 files with duplicate localKeyId attributes on
      certificates will now have the incorrect attributes filtered
      out, rather than the duplicate causing an exception.
    - PGPObjectFactory will now ignore packets representing
      unrecognised signature versions in the input stream.
    - The X.509 extension generator will now accumulate some
      duplicate X.509 extensions into a single extension where it
      is possible to do so.
    - Removed support for maxXofLen in Kangaroo digest.
    - Ignore marker packets in PGP Public and Secret key ring
      collection.
    - An implementation of LEA has been added to the low-level API.
    - Access, recovery, and direct use for PGP session keys has
      been added to the OpenPGP API for processing encrypted data.
    - A PGPCanonicalizedDataGenerator has been added which converts
      input into canonicalized literal data for text and UTF-8
      mode.
    - A getUserKeyingMaterial() method has been added to the
      KeyAgreeRecipientInformation class.
    - ASN.1: Tagged objects (and parsers) now support all tag
      classes. Special code for ApplicationSpecific has been
      deprecated and re-implemented in terms of TaggedObject.
    - ASN.1: Improved support for nested tagging.
    - ASN.1: Added support for GraphicString, ObjectDescriptor,
      RelativeOID.
    - ASN.1: Added support for constructed BitString encodings,
      including efficient parsing for large values.
    - TLS: Added support for external PSK handshakes.
    - TLS: Check policy restrictions on key size when determining
      cipher suite support.
    - A performance issue in KeccakDigest due to left over debug
      code has been identified and dealt with.
    - BKS key stores can now be used for collecting protected keys
      (note: any attempt to store such a store will cause an
      exception).
    - A method for recovering user keying material has been added
      to KeyAgreeRecipientInformation.
    - Support has been added to the CMS API for SHA-3 based
      PLAIN-ECDSA.
    - The low level BcDefaultDigestProvider now supports the SHAKE
      family of algorithms and the SM3 alogirthm.
    - PGPKeyRingGenerator now supports creation of key-rings with
      direct-key identified keys.
    - The PQC NIST candidate, signature algorithm SPHINCS+ has been
      added to the low-level API.
    - ArmoredInputStream now explicitly checks for a '\n' if in
      crLF mode.
    - Direct support for NotationDataOccurances, Exportable,
      Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
      preferences has been added to PGPSignatureSubpacketVector.
    - Further support has been added for keys described using
      S-Expressions in GPG 2.2.X.
    - Support for OpenPGP Session Keys from the (draft) Stateless
      OpenPGP CLI has been added.
    - Additional checks have been added for PGP marker packets in
      the parsing of PGP objects.
    - A CMSSignedData.addDigestAlgorithm() has been added to allow
      for adding additional digest algorithm identifiers to CMS
      SignedData structures when required.
    - Support has been added to CMS for the LMS/HSS signature
      algorithm.
    - The system property
      "org.bouncycastle.jsse.client.assumeOriginalHostName"
      (default false) has been added for dealing with SNI problems
      related to the host name not being propagate by the JVM.
    - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
      ciphers that do not have algorithm parameters (e.g. AESKWP).
    - Support is now added for certificates using ETSI TS 103 097,
      "Intelligent Transport Systems (ITS)" in the bcpkix package.
    * Notes.
    - While this release should maintain source code compatibility,
      developers making use of some parts of the ASN.1 library will
      find that some classes need recompiling. Apologies for the
      inconvenience.
  - Version update to 1.69
    * Defects Fixed
    - Lightweight and JCA conversion of Ed25519 keys in the PGP API
      could drop the leading byte as it was zero. This has been
      fixed.
    - Marker packets appearing at the start of PGP public key rings
      could cause parsing failure. This has been fixed.
    - ESTService could fail for some valid Content-Type headers.
      This has been fixed.
    - Originator key algorithm parameters were being passed as NULL
      in key agreement recipients. The parameters now reflect the
      value of the parameters in the key's SubjectPublicKeyInfo.
    - ContentType on encapsulated data was not been passed through
      correctly for authenticated and enveloped data. This has been
      fixed.
    - NTRUEncryptionParameters and
      NTRUEncryptionKeyGenerationParameters were not correctly
      cloning the contained message digest. This has been fixed.
    - CertificateFactory.generateCertificates()/generateCRLs()
      would throw an exception if extra data was found at the end
      of a PEM file even if valid objects had been found. Extra
      data is now ignored providing at least one object found.
    - Internal class PKIXCRLUtil could throw a NullPointerException
      for CRLs with an absent nextUpdate field. This has been
      fixed.
    - PGP ArmoredInputStream now fails earlier on malformed
      headers.
    - The McElieceKobaraImaiCipher was randomly throwing "Bad
      Padding: invalid ciphertext" exception while decrypting due
      to leading zeroes been missed during processing of the cipher
      text. This has been fixed.
    - Ed25519 keys being passed in via OpenSSH key spec are now
      validated in the KeyFactory.
    - Blowfish keys are now range checked on cipher construction.
    - In some cases PGPSecretKeyRing was failing to search its
      extraPubKeys list when searching for public keys.
    - The BasicConstraintsValidation class in the BC cert path
      validation tools has improved conformance to RFC 5280.
    - AlgorithmIdentifiers involving message digests now attempt to
      follow the latest conventions for the parameters field
      (basically DER NULL appears less).
    - Fix various conversions and interoperability for XDH and
      EdDSA between BC and SunEC providers.
    - TLS: Prevent attempts to use KeyUpdate mechanism in versions
      before TLS 1.3.
    * Additional Features and Functionality
    - GCM-SIV has been added to the lightweight API and the
      provider.
    - Blake3 has been added to the lightweight API.
    - The OpenSSL PEMParser can now be extended to add specialised
      parsers.
    - Base32 encoding has now been added, the default alphabet is
      from RFC 4648.
    - The KangarooTwelve message digest has been added to the
      lightweight API.
    - An implementation of the two FPE algorithms, FF1 and FF3-1 in
      SP 800-38G has been added to the lightweight API and the JCE
      provider.
    - An implementation of ParallelHash has been added to the
      lightweight API.
    - An implementation of TupleHash has been added to the
      lightweight API.
    - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
      mask generation function and digest.
    - ECDSA now supports the use of SHAKE128 and SHAKE256.
    - PGPPBEEncryptedData will now reset the stream if the initial
      checksum fails so another password can be tried.
    - Iterators on public and secret key ring collections in PGP
      now reflect the original order of the public/secret key rings
      they contain.
    - KeyAgreeRecipientInformation now has a getOriginator() method
      for retrieving the underlying orginator information.
    - PGPSignature now has a getDigestPrefix() method for people
      wanting exposure to the signature finger print details.
    - The old BKS-V1 format keystore is now disabled by default. If
      you need to use BKS-V1 for legacy reasons, it can be
      re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
      the java.security file. We would be interested in hearing
      from anyone that needs to do this.
    - PLAIN-ECDSA now supports the SHA3 digests.
    - Some highlevel support for RFC 4998 ERS has been added for
      ArchiveTimeStamp and EvidenceRecord. The new classes are in
      the org.bouncycastle.tsp.ers package.
    - ECIES has now also support SHA256, SHA384, and SHA512.
    - digestAlgorithms filed in CMS SignedData now includes counter
      signature digest algorithms where possible.
    - A new property "org.bouncycastle.jsse.config" has been added
      which can be used to configure the BCJSSE provider when it is
      created using the no-args constructor.
    - In line with changes in OpenSSL 1.1.0,
      OpenSSLPBEParametersGenerator can now be configured with a
      digest.
    - PGPKeyRingGenerator now includes a method for adding a subkey
      with a primary key binding signature.
    - Support for ASN.1 PRIVATE tags has been added.
    - Performance enhancements to Nokeon, AES, GCM, and
      SICBlockCipher.
    - Support for ecoding/decoding McElieceCCA2 keys has been added
      to the PQC API
    - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
      system property (default is 10).
    - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
      system property (default is 32768).
    - BCJSSE: Added support for jdk.tls.client.enableCAExtension
      (default is 'false').
    - BCJSSE: Added support for jdk.tls.client.cipherSuites system
      property.
    - BCJSSE: Added support for jdk.tls.server.cipherSuites system
      property.
    - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
      versions after u251/u252.
    - BCJSSE: Key managers now support EC credentials for use with
      TLS 1.3 ECDSA signature schemes (including brainpool).
    - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
    * Notes
    - There is a small API change in the PKIX package to the
      DigestAlgorithmIdentifierFinder interface as a find() method
      that takes an ASN1ObjectIdentifier has been added to it. For
      people wishing to extend their own implementations, see
      DefaultDigestAlgorithmIdentifierFinder for a sample
      implementation.
    - A version of the bcmail API supporting Jakarta Mail has now
      been added (see bcjmail jar).
    - Some work has been done on moving out code that does not need
      to be in the provider jar. This has reduced the size of the
      provider jar and should also make it easier for developers to
      patch the classes involved as they no longer need to be
      signed. bcpkix and bctls are both dependent on the new bcutil
      jar.
  - Add build dependencies on
    mvn(jakarta.activation:jakarta.activation-api) and
    mvn(jakarta.mail:jakarta.mail-api)
  - Remove unneeded script bouncycastle_getpoms.sh from sources


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 1.72:
    * Defects Fixed:
    - There were parameter errors in XMSS^MT OIDs for
      XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
      been fixed.
    - There was an error in Merkle tree construction for the
      Evidence Records (ERS) implementation which could result in
      invalid roots been timestamped. ERS now produces an
      ArchiveTimeStamp for each data object/group with an associated
      reduced hash tree. The reduced hash tree is now calculated as
      a simple path to the root of the tree for each record.
    - OpenPGP will now ignore signatures marked as non-exportable
      on encoding.
    - A tagging calculation error in GCMSIV which could result in
      incorrect tags has been fixed.
    - Issues around Java 17 which could result in failing tests
      have been addressed.
    * Additional Features and Functionality:
    - BCJSSE: TLS 1.3 is now enabled by default where no explicit
      protocols are supplied (e.g. "TLS" or "Default" SSLContext
      algorithms, or SSLContext.getDefault() method).
    - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
      with SunJSSE.
    - BCJSSE: Support export of keying material via extension API.
    - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
    - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
      offered now. Earlier versions are still supported if explicitly
      enabled. Users may need to check they are offering suitable
      cipher suites for TLS 1.3.
    - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
    - CryptoServicesRegistrar now has a setServicesConstraints() method
      on it which can be used to selectively turn off algorithms.
    - The NIST PQC Alternate Candidate, Picnic, has been added to the low
      level API and the BCPQC provider.
    - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
      and support for Haraka has been added.
    - Evidence records now support timestamp renewal and hash renewal.
    - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
      been added to the low-level PQC API.
    - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
      has been added to the low-level API and the BCPQC provider.
    - The Falcon Finalist NIST Post Quantum Algorithm has been added to
      the low-level API and the BCPQC provider.
    - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
      added to the low-level API and the BCPQC provider.
    - Argon2 Support has been added to the OpenPGP API.
    - XDH IES has now been added to the BC provider.
    - The OpenPGP API now supports AEAD encryption and decryption.
    - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
      have been added to the low-level API and the BCPQC provider.
    - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
      been added to the low-level API and the BCPQC provider.
    - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
      added to the low-level API and the BCPQC provider.
    - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
      added to the low-level API and the BCPQC provider.
    - Grain128AEAD has been added to the lightweight API.
    - A fast version of CRC24 has been added for use with the PGP API.
    - Some additional methods and fields have been exposed in the
      PGPOnePassSignature class to (hopefully) make it easier to
      deal with nested signatures.
    - CMP support classes have been updated to reflect the latest
      editions to the the draft RFC "Lightweight Certificate Management
      Protocol (CMP) Profile".
    - Support has been added to the PKCS#12 implementation for the
      Oracle trusted certificate attribute.
    - Performance of our BZIP2 classes has been improved.
    * Notes:
    - Keep in mind the PQC algorithms are still under development and
      we are still at least a year and a half away from published standards.
      This means the algorithms may still change so by all means experiment,
      but do not use the PQC algoritms for anything long term.
    - The legacy "Rainbow" and "McEliece" implementations have been
      removed from the BCPQC provider. The underlying classes are
      still present if required. Other legacy algorithm implementations
      can be found under the org.bouncycastle.pqc.legacy package.
    * Security Notes:
    - The PQC SIKE algorithm is provided for research purposes only.
      It should now be regarded as broken. The SIKE implementation
      will be withdrawn in BC 1.73.
    * Rebase bouncycastle-javadoc.patch


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 1.73: [jsc#PED-3756]
    * Defects Fixed:
    - BCJSSE: Instantiating a JSSE provider in some contexts could
      cause an AccessControl exception.
    - The EC key pair generator can generate out of range private
      keys when used with SM2. A specific SM2KeyPairGenerator has
      been added to the low-level API and is used by
      KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
      been updated to check for out of range keys as well..
    - The attached signature type byte was still present in Falcon
      signatures as well as the detached signature byte.
    - There was an off-by-one error in engineGetOutputSize() for ECIES.
    - The method for invoking read() internally in BCPGInputStream
      could result in inconsistent behaviour if the class was extended.
    - Fixed a rounding issue with FF1 Format Preserving Encryption
      algorithm for certain radices.
    - Fixed RFC3394WrapEngine handling of 64 bit keys.
    - Internal buffer for blake2sp was too small and could result in
      an ArrayIndexOutOfBoundsException.
    - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
      encoding of algorithm parameters.
    - PKCS10CertificationRequest now checks for empty extension
      parameters.
    - Parsing errors in the processing of PGP Armored Data now throw
      an explicit exception ArmoredInputException.
    - PGP AEAD streams could occassionally be truncated.
    - The ESTService class now supports processing of chunked HTTP data.
    - A constructed ASN.1 OCTET STRING with a single member would
      sometimes be re-encoded as a definite-length OCTET STRING. The
      encoding has been adjusted to preserve the BER status of the object.
    - PKIXCertPathReviewer could fail if the trust anchor was also
      included in the certificate store being used for path analysis.
    - UTF-8 parsing of an array range ignored the provided length.
    - IPAddress has been written to provide stricter checking and
      avoid the use of Integer.parseInt().
    - A Java 7 class snuck into the Java 5 to Java 8 build.
    * Additional Features and Functionality:
    - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
      the low-level API and the BCPQC provider (level 3 and level 5
      parameter sets only).
    - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
      the low-level API.
    - The org.bouncycastle.rsa.max_mr_tests property check has been
      added to allow capping of MR tests done on RSA moduli.
    - Significant performance improvements in PQC algorithms,
      especially BIKE, CMCE, Frodo, HQC, Picnic.
    - EdDSA verification now conforms to the recommendations of Taming
      the many EdDSAs, in particular cofactored verification. As a side
      benefit, Pornin's basis reduction is now used for EdDSA
      verification, giving a significant performance boost.
    - Major performance improvements for Anomalous Binary (Koblitz) Curves.
    - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
      PhotonBeetle, Sparkle, and Xoodyak have been added to the
      light-weight cryptography API.
    - BLAKE2bp and BLAKE2sp have been added to the light-weight
      cryptography API.
    - Support has been added for X.509, Section 9.8, hybrid certificates
      and CRLs using alternate public keys and alternate signatures.
    - The property "org.bouncycastle.emulate.oracle" has been added to
      signal the provider should return algorithm names on some algorithms
      in the same manner as the Oracle JCE provider.
    - An extra replaceSigners method has been added to CMSSignedData
      which allows for specifying the digest algorithm IDs to be used
      in the new CMSSignedData object.
    - Parsing and re-encoding of ASN.1 PEM data has been further
      optimized to prevent unecessary conversions between basic encoding,
      definite length, and DER.
    - Support has been added for KEM ciphers in CMS in accordance with
      draft-ietf-lamps-cms-kemri
    - Support has been added for certEncr in CRMF to allow issuing of
      certificates for KEM public keys.
    - Further speedups have been made to CRC24.
    - GCMParameterSpec constructor caching has been added to improve
      performance for JVMs that have the class available.
    - The PGPEncrytedDataGenerator now supports injecting the session
      key to be used for PGP PBE encrypted data.
    - The CRMF CertificateRequestMessageBuilder now supports optional
      attributes.
    - Improvements to the s calculation in JPAKE.
    - A general purpose PQCOtherInfoGenerator has been added which
      supports all Kyber and NTRU.
    - An implementation of HPKE (RFC 9180 - Hybrid Public Key
      Encryption) has been added to the light-weight cryptography API.
    * Security Advisories:
    - The PQC implementations have now been subject to formal review for
      secret leakage and side channels, there were issues in BIKE, Falcon,
      Frodo, HQC which have now been fixed. Some weak positives also
      showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
      set has been ignored as the algorithms will either be updated if
      they reappear in the Signature Round, or deleted, as is already the
      case for SIKE (it is now in the legacy package). Details on the
      group responsible for the testing can be found in the CONTRIBUTORS
      file.
    - For at least some ECIES variants (e.g. when using CBC) there is
      an issue with potential malleability of a nonce (implying silent
      malleability of the plaintext) that must be sent alongside the
      ciphertext but is outside the IES integrity check. For this reason
      the automatic generation of nonces with IED is now disabled and
      they have to be passed in using an IESParameterSpec. The current
      advice is to agree on a nonce between parties and then rely on the
      use of the ephemeral key component to allow the nonce (rather the
      so called nonce) usage to be extended.


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 1.74: [bsc#1212508, CVE-2023-33201]
    * Defects Fixed:
    - AsconEngine: Fixed a buffering bug when decrypting across
      multiple processBytes calls (ascon128a unaffected).
    - Context based sanity checking on PGP signatures has been added.
    - The ParallelHash clone constructor was not copying all fields.
    - The maximimum number of blocks for CTR/SIC modes was 1 block
      less than it should have been.
    * Additional Features and Functionality:
    - The PGP API now supports wildcard key IDs for public key
      based data encryption.
    - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
      (the additional SP 8000-208 parameter sets).
    - The PGP API now supports V5 and V6 AEAD encryption for
      encrypted data packets.
    - The PGP examples have been updated to reflect key size and algorithm
      changes that have occurred since they were first written (10+ years...).
    - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
      when the connection is closed (including by failure).
    - BCJSSE: Improved logging of connection events and include unique IDs
      in connection-specific log messages.
    - BCJSSE: Server now logs the offered cipher suites when it fails to
      select one.
    - BCJSSE: Added support for SSLParameters namedGroups and
      signatureSchemes properties (can also be used via BCJSSE
      extension API in earlier Java versions).
    - DTLS: The initial handshake re-send time is now configurable by
      overriding 'TlsPeer.getHandshakeResendTimeMillis'.
    - DTLS: Added support for connection IDs per RFC 9146.
    - DTLS: Performance of DTLSVerifier has been improved so that it can
      reasonably be used for all incoming packets.
    - Initial support has been added for A Mechanism for Encoding
      Differences in Paired Certificates.
    - The PGP API now supports parsing, encoding, and fingerprinting
      of V6 EC/EdEC keys.
    - A thread safe verifier API has been added to the PGP API to support
      multi-threaded verification of certifications on keys and user IDs.
    - The number of keys/sub-keys in a PGPKeyRing can now be found by
      calling PGPKeyRing.size().
    - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
      are now supported directly by the BC provider.
    * Notes:
    - The now defunct PQC SIKE algorithm has been removed, this has also
      meant the removal of its resource files so the provider is now quite
      a bit smaller.
    - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
      for shorter IVs can be supported where required by padding the IV to
      the 128 bits with zero.
    - PGP encrypted data generation now uses integrity protection by default.
      Previous behaviour for encrypted data can be supported where required
      by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
      data encryption is set up.
    - There are now additional sanity checks in place to prevent accidental
      mis-use of PGPSignature objects. If this change causes any issues, you
      might want to check what your code is up to as there is probably a bug.
    * Security Advisories:
    - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
      where a specially crafted certificate subject could be used to try and
      extract extra information out of an LDAP server with wild-card matthing
      enabled.
    * Rebase bouncycastle-javadoc.patch
    * Add bouncycastle-notests.patch


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 1.76:
    * Defects Fixed:
    - Service allocation in the provider could fail due to the lack
      of a permission block. This has been fixed.
    - JceKeyFingerPrintCalculator has been generalised for different
      providers by using "SHA-256" for the algorithm string.
    - BCJSSE: Fixed a regression in 1.74 (NullPointerException) that
      prevents a BCJSSE server from negotiating TLSv1.1 or earlier.
    - DTLS: Fixed server support for client_certificate_type extension.
    - Cipher.unwrap() for HQC could fail due to a miscalculation of
      the length of the KEM packet. This has been fixed.
    - There was exposure to a Java 7 method in the Java 5 to Java 8
      BCTLS jar which could cause issues with some TLS 1.2 cipher
      suites running on older JVMs. This is now fixed.
    * Additional Features and Functionality:
    - BCJSSE: Following OpenJDK, finalizers have been removed from
      SSLSocket subclasses. Applications should close sockets and
      not rely on garbage collection.
    - BCJSSE: Added support for boolean system property
      "jdk.tls.client.useCompatibilityMode" (default "true").
    - DTLS: Added server support for session resumption.
    - JcaPKCS10CertificationRequest will now work with EC on the
      OpenJDK provider.
    - TimeStamp generation now supports the SHA3 algorithm set.
    - The SPHINCS+ simple parameters are now fully supported in the
      BCPQC provider.
    - Kyber, Classic McEliece, HQC, and Bike now supported by the
      CRMF/CMS/CMP APIs.
    - Builder classes have been add for PGP ASCII Armored streams
      allowing CRCs and versions to now be optional.
    - An UnknownPacket type has been added to the PGP APIs to allow
      for forwards compatibility with upcoming revisions to the standard.
    * Rebase patch bouncycastle-notests.patch
  - Update to version 1.75:
    * Defects Fixed:
    - Several Java 8 method calls were accidentally introduced in
      the Java 5 to Java 8 build. The affected classes have been
      refactored to remove this.
    - (D)TLS: renegotiation after resumption now fixed to avoid
      breaking connection.
    * Notes:
    - The ASN.1 core package has had some dead and retired methods
      cleaned up and removed.


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 1.77:
    * Defects Fixed:
    - Using an unescaped '=' in an X.500 RDN would result in the
      RDN being truncated silently. The issue is now detected and
      an exception is thrown.
    - asn1.eac.CertificateBody was returning certificateEffectiveDate
      from getCertificateExpirationDate(). This has been fixed to
      return certificateExpirationDate.
    - DTLS: Fixed retransmission in response to re-receipt of an
      aggregated ChangeCipherSpec.
    - (D)TLS: Fixed compliance for supported_groups extension.
      Server will no longer negotiate an EC cipher suite using a
      default curve when the ClientHello includes the supported_groups
      extension but it contains no curves in common with the server.
      Similarly, a DH cipher suite will not be negotiated when the
      ClientHello includes supported_groups, containing at least one
      FFDHE group, but none in common with the server.
    - IllegalStateException was being thrown by Ed25519/Ed448 SignatureSpi.
    - TLS: class annotation issues that could occur between the BC
      provider and the TLS API for the GCMParameterSpec class when
      the jars were loaded on the boot class path have been addressed.
    - Attempt to create an ASN.1 OID from a zero length byte array
      is now caught at construction time.
    - Attempt to create an X.509 extension block which is empty will
      now be blocked cause an exception.
    - IES implementation will now accept a null ParameterSpec if no
      nonce is needed.
    - An internal method in Arrays was failing to construct its
      failure message correctly on an error.
    - HSSKeyPublicParameters.generateLMSContext() would fail for a
      unit depth key.
    * Additional Features and Functionality:
    - BCJSSE: Added org.bouncycastle.jsse.client.omitSigAlgsCertExtension
      and org.bouncycastle.jsse.server.omitSigAlgsCertExtension boolean
      system properties to control (for client and server resp.) whether
      the signature_algorithms_cert extension should be omitted if it
      would be identical to signature_algorithms. Defaults to true, the
      historical behaviour.
    - The low-level HPKE API now allows the sender to specify an
      ephemeral key pair.
    - Support has been added for the delta-certificate requests in line
      with the current Chameleon Cert draft from the IETF.
    - Some accommodation has been added for historical systems to
      accommodate variations in the SHA-1 digest OID for CMS SignedData.
    - TLS: the TLS API will now try "RSAwithDigestAndMFG1" as well as
      the newer RSAPSS algorithm names when used with the JCA.
    - TLS: RSA key exchange cipher suites are now disabled by default.
    - Support has been added for PKCS#10 requests to allow certificates
      using the altSignature/altPublicKey extensions.
    * Notes:
    - Kyber and Dilithium have been updated according to the latest
      draft of the standard. Dilithium-AES and Kyber-AES have now been
      removed. Kyber now produces 256 bit secrets for all parameter sets
      (in line with the draft standard).
    - NTRU has been updated to produce 256 bit secrets in line with Kyber.
    - SPHINCS+ can now be used to generate certificates in line with
      those used by (Open Quantum Safe) OQS.
    - Falcon object idenitifiers are now in line with OQS as well.
    - PQC CMS SignedData now defaults to SHA-256 for signed attributes
      rather than SHAKE-256. This is also a compatibility change, but may
      change further again as the IETF standard for CMS is updated.


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to version 1.78: [bsc#1223252, CVE-2024-30171]
    * Security Advisories.
    - CVE-2024-29857: Importing an EC certificate with specially crafted
      F2m parameters can cause high CPU usage during parameter evaluation.
    - CVE-2024-30171: Possible timing based leakage in RSA based handshakes
      due to exception processing eliminated.
    - CVE-2024-30172: Crafted signature and public key can be used to
      trigger an infinite loop in the Ed25519 verification code.
    - CVE-2024-301XX: When endpoint identification is enabled in the BCJSSE
      and an SSL socket is not created with an explicit hostname (as happens
      with HttpsURLConnection), hostname verification could be performed
      against a DNS-resolved IP address. This has been fixed.
    * Defects Fixed:
    - Issues with a dangling weak reference causing intermittent
      NullPointerExceptions in the OcspCache have been fixed.
    - Issues with non-constant time RSA operations in TLS handshakes.
    - Issue with Ed25519, Ed448 signature verification causing intermittent
      infinite loop have been fixed.
    - Issues with non-constant time ML-KEM implementation ("Kyber Slash").
    - Align ML-KEM input validation with FIPS 203 IPD requirements.
    - Make PEM parsing more forgiving of whitespace to align with RFC 7468.
    - Fix CCM length checks with large nonce sizes (n=12, n=13).
    - EAC: Fixed the CertificateBody ASN.1 type to support an optional
      Certification Authority Reference in a Certificate Request.
    - ASN.1: ObjectIdentifier (also Relative OID) parsing has been optimized
      and the contents octets for both types are now limited to 4096 bytes.
    - BCJSSE: Fixed a missing null check on the result of PrivateKey.getEncoded(),
      which could cause issues for HSM RSA keys.
    - BCJSSE: When endpoint identification is enabled and an SSL socket is not
      created with an explicit hostname (as happens with HttpsURLConnection),
      hostname verification could be performed against a DNS-resolved IP address.
    - The missing module import of java.logging to the provider module has been added.
    - GOST ASN.1 public key alg parameters are now compliant with RFC 9215.
    - An off-by-one error in the encoding for EccP256CurvePoint for ITS.
    - PEM Parser now enforces PEM headers to start at the beginning of the line
      to be meaningful.
    * Additional Features and Functionality.
    - An implementation of MLS (RFC 9420 - The Messaging Layer Security Protocol)
      has been added as a new module.
    - NTRU now supports NTRU-HPS4096-1229 and NTRU-HRSS-1373.
    - Improvements to PGP support, including Camellia key wrapping and Curve25519,
      Curve448 key types (including XDH with HKDF).
    - Added initial support for ML-KEM in TLS.
    - Added XWing hybrid KEM construction (X25519 + ML-KEM-768).
    - Introduced initial KEMSpi support (NTRU, SNTRU Prime) for JDK 21+.
    - Introduced initial composite signature support for X509 Certificates.
    - PKCS#12 now supports PKCS12-AES256-AES128, PKCS12-AES256-AES128-GCM,
      PKCS12-DEF-AES256-AES128, and PKCS12-DEF-AES256-AES128-GCM.
    - The default type for the KeyStore.getInstance("PKCS12", "BC") can now be set
      using the org.bouncycastle.pkcs12.default system/security property.
    - The PGP SExpParser will now handle Ed25519 and Ed448 keys.
    - Dilithium and Kyber key encoding updated to latest Draft RFCs
      (draft-ietf-lamps-dilithium-certificates and draft-ietf-lamps-kyber-certificates)
    - Support has been added for encryption key derivation using HKDF in CMS, see
      draft-housley-lamps-cms-cek-hkdf-sha256.
    - X500Name now recognises jurisdiction{C,ST,L} DNs.
    - CertPathValidationContext and CertificatePoliciesValidation now include
      implementations of Memoable.
    - The Composite post-quantum signatures implementation has been updated to the
      latest draft draft-ounsworth-pq-composite-sigs.
    * Full release notes: bouncycastle.org/releasenotes.html#r1rv78
    * Rebase bouncycastle-notests.patch


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Update to version 1.78.1
    * Defects Fixed:
    - The new dependency of the the PGP API on the bcutil jar was
      missing from the module jar, the OSGi manifest, and the Maven
      POM. This has been fixed.
    - Missing exports and duplicate imports have been added/removed
      from the OSGi manifests.
    - The OSGi manifests now have the same bundle IDs as 1.77 and
      lock down dependencies to the equivalent variations
    - A check in the X.509 Extensions class preventing the parsing
      of empty extensions has been removed.


author: Martin Li?ka <mliska@suse.cz>
changelog:
  - Add binutils-2.40.patch where we need to explicitly link against
    - lsframe. It's a workaround for an existing issue:
    https://github.com/libbpf/bpftool/issues/73.


author: Michal Suchanek <msuchanek@suse.com>
changelog:
  - Update to out-of-tree version 7.2.0
  - Use release tarball that includes the specific copy of libbpf that is needed
    to build bpftool
  - Fix build on Linux 5.14
    + 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
    + 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
    + 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
    + 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch


author: Shung-Hsi Yu <shung-hsi.yu@suse.com>
changelog:
  - Update to version 7.3.0
    * deprecate keyword "dev" for specifying interface name, use
      offload_dev instead
    * support passing an interface name with xdpmeta_dev <ifname>
      with "prog load"
    * show more details information when displaying BPF links
    * show netfilter, tcx, and netkit information in the "net list"
    * support cgroup UNIX socket attach points
    * show inner map IDs (instead of raw values) with "map dump"
    * support LLVM's v4 instructions in the disassembler
    * fix JIT compiler global memory limit report for unprivileged
      users on aarch64
  - Remove backported patches that have been included in v7.3.0
    * drop 0001-bpftool-use-a-local-copy-of-perf_event-to-fix-access.patch
    * drop 0002-bpftool-define-a-local-bpf_perf_link-to-fix-accessin.patch
    * drop 0003-bpftool-use-a-local-bpf_perf_event_value-to-fix-acce.patch
    * drop 0004-bpftool-Use-a-local-copy-of-BPF_LINK_TYPE_PERF_EVENT.patch


author: Fredrik Lönnegren <fredrik.lonnegren@suse.com>
changelog:
  - Update to version 7.4.0
    * Kernel configuration options related to bpfilter (namely: CONFIG_BPFILTER
    * and CONFIG_BPFILTER_UMH) are no longer checked with bpftool feature probe
    * More information displayed for BPF links
    * Generate shadow variables for struct_ops maps in program skeletons
    * Mark orphaned programs as such when listing programs
    * Recognize arena map types (a09e203) and global variables
    * Support the addr_space_cast instruction in the disassembler for translated
      programs
    * In the mirror repository, fix the detection of clang-bpf-co-re (for
      skeletons support) for some clang versions
    * Displaying PIDs for processes holding references to BPF links when listing
      links with bpftool link list on older kernels broke in v7.3.0, because the
      internal program pid_iter would fail to load


author: Shung-Hsi Yu <shung-hsi.yu@suse.com>
changelog:
  - Update LLVM version selection logic to align with bcc and bpftrace
    * narrow down the dependency to clang and llvm


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Also skip *.tr as config files in
    /etc/bootsplash/themes/openSUSE/bootloader (in addition to
    /etc/bootsplash/themes/openSUSE/cdrom)


author: Sasi Olin <hel@lcp.world>
changelog:
  - Drop systemd icons, since distribution-logos took that over
  - Change the name of the font used in the installer


author: Cliff Zhao <qzhao@suse.com>
changelog:
  - Update branding-tumbleweed.zip from https://github.com/openSUSE/branding.git
    Drop plymouth-branding-openSUSE's watermark link add a
    configuration function to plymouth theme configuration to avoid
    logo lost which cause plymouth to fail.
  - Update branding-openSUSE.spec: resort plymouth-branding-openSUSE
    install and build dependence to avoid plymouth fall to terminal
    mode in some scenario(bsc#1189613).


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Enable grub2-branding on ppc64le. patterns-microos-base has
    Requires (grub2-branding-openSUSE if grub2). So we need the
    branding.


author: Frederic Crozat <fcrozat@suse.com>
changelog:
  - Remove update-alternatives usage, we don't have dynamic
    wallpapers anymore which were using that (bsc#1219919).


author: Lubos Kocman <lubos.kocman@suse.com>
changelog:
  - Use png for wallpapers for Tumbleweed
  - SLES seems to be using png
  - Using a compat symlink wallpapers/openSUSEdefault-> wallpapers/SLEdefault
    allows running certain apps without rebuild. Such as cockpit.
  - Use optipng -o5 to compress files (has to be reflected in spec)
  - Bump date


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.1:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.1
  - Changes since 6.0.0:
    * update version for new release
    * kdecoration: Fix topright corner click when using fractional scaling hack (kde#481857)
    * Move additions to left and right int to fix KWin tests
    * Expand border on bottom and right, set decoration name to "breeze"


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.2:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.2
  - Changes since 6.0.1:
    * Remove scrollbar groove completely
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.3:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.3
  - Changes since 6.0.2:
    * update version for new release
    * kstyle/animations: Call QWidget::update in BusyIndicatorEngine
    * Use QEvent::ApplicationPaletteChanged instead of QEvent::PaletteChanged
    * kstyle: Don't send event to disabled scroll bar (kde#483487)


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.5:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.5
  - Changes since 6.0.4:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.90:
    * New feature release
    * For more details see https://kde.org/announcements/plasma/6/6.0.90
  - Too many changes to list here


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.1.0:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.1.0
  - Changes since 6.0.90:
    * update version for new release
    * breezedecoration.cpp: remove hack that is not needed
    * Fractional scaling hack: Expand border on bottom and right, set decoration name to "breeze"
    * Allow building with QtDBus again


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.1:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.1
  - Changes since 6.0.0:
    * update version for new release
  - Add patch to fix build:
    * 0001-Don-t-require-a-non-existent-ECM-version.patch


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.2:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.2
  - Changes since 6.0.1:
    * fix ecm dep version
    * update version for new release
    * bump version ahead of next release
    * respin 6.0.1 tar
    * Don't require a non-existent ECM version
    * update version for new release
  - Drop patches, now upstream:
    * 0001-Don-t-require-a-non-existent-ECM-version.patch


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.3:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.3
  - Changes since 6.0.2:
    * fix ecm version number
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.4.1:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.4.1
  - Changes since 6.0.3:
    * fix ecm version
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.5:
    * New bugfix release
    * For more details see https://kde.org/announcements/plasma/6/6.0.5
  - Changes since 6.0.4.1:
    * update version for new release


author: Fabian Vogt <fabian@ritter-vogt.de>
changelog:
  - Update to 6.0.90:
    * New feature release
    * For more details see https://kde.org/announcements/plasma/6/6.0.90
  - Changes since 6.0.5:
    * ecm set to framewrosk 6.2
    * update version for new release
    * Change radius from 0.75 (3px) to 1.25 (5px)
    * Set radiobutton and checkbox use button bg color
    * fix ecm version number
    * gtk3,gtk4: Remove visible scrollbar trough (aka groove)
    * Use 0.2 instead of varied values for outline contrasts


author: Michael Gorse <mgorse@suse.com>
changelog:
  - Update to version 6.5
  - Update api_version.
  - Add brltty-udev-dir.patch: install udev rules into /usr/lib.
  - Remove the custom disabling of rules for generic USB serial
    devices, since upstream now has these separated out. Instead,
    provide these rules in a udev-generic package.


author: Franck Bui <fbui@suse.com>
changelog:
  - Don't use %tmpfiles_create_package anymore.
    This macro cannot work on transactional systems. However this macro was
    supposed to be used only when the tmpfiles stuff was needed in advance, which
    doesn't seem to be the case for brltty.


author: olaf@aepfle.de
changelog:
  - Use conditionals for sysusers_requires to allow quilt setup
  - Remove workarounds for old TCL
  - Enable parallel build again


author: Michael Gorse <mgorse@suse.com>
changelog:
  - Update to version 6.6:
    + Too many changes; please read ChangeLog
  - Update api_version.
  - Rebase brltty-udev-dir.patch.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Add e6707d5e.patch: brlapi: Fix python crash on connection error.
    Cython 3.0 started using the new Python object finalization APIs
    from PEP 442.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Avoid bashisms, install manpages without +x bit, get rid of
    wrap descriptions, feed through cleaner.


author: bjorn.lie@gmail.com
changelog:
  - Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
    pulling "Shared-Brotli".
    * verbose CLI output; fix gh#google/brotlie#666.
    * pull `SHIFT` transforms; currently this is semantically dead
      code; later it will be used by "Shared-Brotli".
  - Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
    decompression consumes all input. If not, it's a corrupt stream.
  - Tweak spec slightly.


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to 1.0.9
    * Fix integer overflow when input chunk is longer than
      2GiB [boo#1175825]
    * `brotli -v` now reports raw / compressed size
    * decoder: minor speed / memory usage improvements
    * encoder: fix rare access to uninitialized data in ring-buffer
  - Drop brotli_Ensure-decompression-consumes-all-input.patch,
    brotli_Verbose-CLI+Shared-Brotli.patch (merged)


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Update to release 1.1
    * CLI: added a --dictionary option
  - Reomve 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch


author: fvogt@suse.com
changelog:
  - Replace brp-trim-desktopfiles with brp-trim-translations:
    * Supports various kinds of source files, not only desktop files
    * Generates various tar archives instead of monolithic .desktopfiles file
  - Currently trims desktop file translations only, as polkit/mime/appstream
      do not support gettext translations yet


author: fvogt@suse.com
changelog:
  - Remove translations for Name,GenericName and Comment only in the
    [Desktop Entry] section to avoid breaking desktop action translations


author: lnussel@suse.de
changelog:
  - create separate subpackage that extracts translations from desktop
    files but does not actually strip them. Needed for SLE.


author: fvogt@suse.com
changelog:
  - Update map-desktop-category.sh to include updated Education, Science
    and Graphics categories (boo#1074711)


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Do not ever use "%setup -n .": rpm 4.18 tries to be cleaner and
    remove stuff it extraced, which would lead to 'rm -rf .', which
    rm does not like. Use "%setup -c" instead, which creates the
    appropriate %{name}-%{version} directory expected.


author: Jonas Kvinge <jonaski@opensuse.org>
changelog:
  - Add libbs2b-clipping.patch to remove clipping of overloaded
    samples.
    Patch is taken from: https://github.com/alexmarsev/libbs2b
    For more details see:
    https://github.com/strawberrymusicplayer/strawberry/issues/1320


author: Dirk Mueller <dmueller@suse.com>
changelog:
  - update to 2.4:
    * remove msgcat dependency
    * Translated using Weblate (Bengali (India))
    * Add Travis build status badge
    * Update translation files
    * add translation platform widget
    * Translated using Weblate (Turkish)
    * Fix memory leak in bs_size_new_from_str
    * Update translation files
    * src/gettext: fix warning if gettext is already present
    * fix build on shells where test == fails
    * Require the same version of python3-bytesize in libbytesize-tools
    * New minor release of the libbytesize library. There are only two bugfixes in this release.
    * Full list of changes
    * fix out of tree build failure
    * Fix return value for round_to_nearest when using Size
    * New bytesize calculator bssize has been added.
    * Code has been ported from PCRE to PCRE2.
    * Python 2 support has been removed.
    * Run all libbytesize tests from one script
    * Add all "public" python API symbols to __init__.py
    * Allow running tests using installed library
    * Remove Python 2 support
    * Port to pcre2
    * Add support for floor division by a non-integer number in Python
    * Add a simple bytesize calculator tool
    * Add tools to autotools and packaging
    * Exit with 1 from configure if there were failures
    * Add a summary to the end of ./configure output
    * Only support modulo between two Size instances
    * Fix parsing of exponential representations of real numbers
    * Add the '--version' option to bs_calc.py
    * Add a man page for the bscalc tool
    * Assume the given expression is in bytes if no unit is given


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 2.5:
    * translation updates
    * tools: Read input from stdin when not running in a tty
    * Add support to ppc64le for debian build
    * testsuite fixes


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 2.6:
    * Make sure Size can be interpreted as integer in Python 3.10
    * Translation updates


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 2.7:
    * Fix skipping tests when required locale is missing
    * Remove Travis CI configuration
    * Fix some warnings and typos in docstrings and comments
    * Fix warnings dicovered by the GCC analyzer
    * build: avoid bashisms in configure
    * Update translation files
    * Do not use distutils to get Python library path


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 2.8:
    * Added translation using Weblate
    * configure.ac: Remove invalid email address for bug reports
    * spec: Bump release to 21 for Packit daily builds
    * spec: Fix source archive URL
    * Make use of error optional
    * Replace C++ style comments with C style
    * Various docstring fixes
    * docs: Remove information about Python 2 support
    * Remove unused test dependencies variables from Makefile
    * Do not hardcode pylint executable name in Makefile


author: Luciano Santos <luc14n0@opensuse.org>
changelog:
  - Drop lang sub-package recommendation. It's not needed anymore now
    that lang packages provide package supplementation instead.
  - Make bscalc sub-package 'noarch', since it doesn't contain any
    binaries, only a Python script and its manpage.


author: Luciano Santos <luc14n0@opensuse.org>
changelog:
  - Update to version 2.9:
    * This release contains fixes for some small issues.
    * Updated translations.


author: Luciano Santos <luc14n0@opensuse.org>
changelog:
  - Rename python3-libbytesize sub-package to python3-bytesize. This
    is the expected name by its consumers.


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
    (CVE-2022-26280, bsc#1197634)
    * fix-CVE-2022-26280.patch


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 3.6.1:
    * 7zip reader: fix PPMD read beyond boundary (#1671)
    * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
    * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
    * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
    * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
    * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
    * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
  - Drop upstream merged fix-CVE-2022-26280.patch


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Fix CVE-2022-36227, Handle a calloc returning NULL
    (CVE-2022-36227, bsc#1205629)
    * CVE-2022-36227.patch


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 3.6.2 (bsc#1205629, CVE-2022-36227)
    * NULL pointer dereference vulnerability in archive_write.c
    * include ZSTD in Windows builds (#1688)
    * SSL fixes on Windows (#1714, #1723, #1724)
    * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
    * mtree reader: support reading mtree files with tabs (#1783)
    * various small fixes for issues found by CodeQL
  - Drop upstream merged CVE-2022-36227.patch


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 3.7.2:
    * Multiple vulnerabilities have been fixed in the PAX writer
    * bsdunzip(1) now correctly handles arguments following an
    - x after the zipfile
    * zstd filter now supports the "long" write option
    * SEGV and stack buffer overflow in verbose mode of cpio
    * bsdunzip updated to match latest upstream code
    * miscellaneous functional bugfixes


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Update to 3.7.4:
    * rar: Fix OOB in rar e8 filter (CVE-2024-26256, bsc#1222911)
    * zip: Fix out of boundary access
    * 7zip: Limit amount of properties
    * bsdtar: Fix error handling around strtol() usages
    * passphrase: Improve newline handling on Windows
    * passphrase: Never allow empty passwords
    * rar: Fix "File CRC Error" when extracting specific rar4 archives
    * xar: Avoid infinite link loop
    * zip: Update AppleDouble support for directories
    * zstd: Implement core detection
  - Update to 3.7.3:
    * PCRE2 support
    * add trailing letter b to bsdtar(1) substitute pattern
    * add support for long options "--group" and "--owner" to tar(1)
    * Fix possible vulnerability in tar error reporting introduced in f27c173
    * ISO9660: preserve the natural order of links
    * rar5: fix decoding unicode filenames on Windows
    * rar5: fix infinite loop if during rar5 decompression the last block produced no data
    * xz filter: fix incorrect eof at the end of an lzip member
    * zip: fix end-of-data marker processing when decompressing zip archives
    * multiple bsdunzip(1) fixes
    * filetime truncation fix on Windows
  - Fix rpmlint warning about summary being too long


author: fstrba@suse.com
changelog:
  - Force java source and target levels to 1.6 in order to allow
    building with jdk9
  - Force using of java-1_8_0-openjdk-devel, since javadoc errors are
    fatal in jdk9


author: fstrba@suse.com
changelog:
  - Fix javadoc errors with jdk9: use build-jar-repository instead
    of system-wide CLASSPATH environmental variable
  - Clean spec file and run fdupes on documentation


author: fstrba@suse.com
changelog:
  - Build with source and target 8 to anticipate a possible removal
    of 1.6 compatibility
  - Modified patch:
    * build.properties.patch
      + specify source level 8


author: fstrba@suse.com
changelog:
  - Added patch:
    * beanshell-2.0b6-target.patch
    - Force java target level to 1.6
  - Force java source and target levels to 1.6 in order to allow
    building with jdk9
  - Force building with java-1_8_0-openjdk-devel since javadoc errors
    are fatal in jdk9


author: fstrba@suse.com
changelog:
  - Build with whatever is the default java-devel provider
  - Modified patch:
    * beanshell-2.0b6-target.patch
      + specify target and source consistently
      + fix classpath issue with javadoc generation
  - Added patch:
    * beanshell-2.0b6-getpeer.patch
      + fix build with jdk9
    + access the inacessible APIs by reflection


author: fstrba@suse.com
changelog:
  - Modified patch:
    * beanshell-2.0b6-target.patch
      + Build with source and target 8 to prepare for a possible
      removal of 1.6 compatibility


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Do not build against an old system asm, but use the few shaded
    files source files distributed in the tarball.
  - Removed patches:
    * bsh2-ClassGeneratorUtil.patch
    * bsh2-asm.patch
    - not needed after the above change
  - Modified patch:
    * beanshell-2.0b6-target.patch
    - fix source level to correspond to the target


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Replace find -exec rm by just -delete.
  - Trim BSH 2.x changelog from description, and trim "In other
    words" description repetition. Trim leftover filler wording
    from description.


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Update to version 2.1.1
    * Changes of 2.1.1
      + Fix src/bsh/util/AWTConsole.java breakage with newer Java
      versions
    * Changes of 2.1.0
      + This release formalizes the merge of 2.0b6 with suitable
      backports from the development version of BeanShell. Also
      included are are some ALv2 contributions to the BeanShell2
      fork that had not been folded into BeanShell but are still
      applicable to this version. For backwards compatibility
      purposes, the 2.x branch of BeanShell still supports a minimum
      Java version of 1.6.
  - Modified patch:
    * beanshell-2.0b6-target.patch -> 0000-source-target-1.8.patch
      + rediff to changed context and clean up
  - Added patches:
    * beanshell-2.0b6-getpeer.patch
      + fixed in 2.1.1
    * bsh2-fix-tests.patch
      + not needed any more


author: dsterba@suse.cz
changelog:
  - update to version 0.4.2
    - CVE-2018-14722: expand auto mountpoints in a safe way
    - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
    - btrfs-trim: more verbose fstrim output (#60)
    - dist-install: print information about timer unit installation (#58)


author: jeffm@suse.com
changelog:
  - Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
    * README: document impact of balance + quota groups
    * sysconfig: reduce default balance usage thresholds
    * sysconfig: document using systemd.time(7) for frequency of operations
    * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
  - Remove python dependency (FATE#326736 jsc#SLE-4130).
    * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
  - Added patches:
    * 0001-README-document-impact-of-balance-quota-groups.patch
    * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
    * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
    * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
    * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
  - Added source:
    * btrfs-defrag-plugin.sh
  - Removed patch:
    * python3-support-bsc1070322.diff


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
    shortcut the build queues by allowing usage of systemd-mini


author: dsterba@suse.cz
changelog:
  - update to version 0.5
    - sysconfig:
    - change defaults of MUSAGE and DUSAGE for balance task to do less work,
      with a script to switch from existing unmodified defaults to new ones
    - document systemd.timer syntax
    - make balance, scrub, and trim mutually exclusive tasks
    - service file updates:
    - delete Install section
    - defrag-plugin:
    - switch to python3
    - add alternative shell implementation of the plugin
    - installation docs update
  - Removed patches (upstream):
    - 0001-README-document-impact-of-balance-quota-groups.patch
    - 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
    - 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
    - 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
    - 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch


author: dsterba@suse.cz
changelog:
  - update to version 0.5.1
    - fix handling of OnCalendar timer directive in the drop-in configuration file
      that reads the periods from the sysconfig
    - fix use of --verbose option of fstrim, not available on util-linux < 2.27
    - ship manual page of README, also available as 'systemctl help servicename'


author: dsterba@suse.cz
changelog:
  - update to version 0.5.2
    - fix syntax error in run_task, preventing jobs to start
    - start scrub jobs sequentially if RAID5 or RAID6 data profile is found
    - fix btrfsmaintenance-refresh.service description
  - fix bsc#1224364


author: dsterba@suse.cz
changelog:
  - update to 6.5.3
    * mkfs:
    * add short aliases for -O specification, block-group-tree (bgt),
      free-space-tree (fst), raid-stripe-tree (rst)
    * don't try to resize the image (namely when backed by file) when --rootdir
      contains sparse file larger than the image
    * also copy xattr/permissions/ugid/timestamps of the top --rootdir directory
    * add new option --device-uuid to let user specify exact uuid of the
      device item (only for single device filesystems)
    * check:
    * on zoned devices, use correct super block offsets when repairing
    * check inline extent refs order
    * subvolume create: add new option --parent to create missing path
      components of the given path (like mkdir -p)
    * rescue clear-ino-cache: new command moved from 'btrfs check' implementing
      the same as option --clear-ino-cache (to be deprecated and removed in the
      future)
    * dump-tree: allow '-' in tree identifier names for option -t
    * btrfstune:
    * drop short option and add long option to enable squota
    * tune space reservation and batch size for block-group-tree conversion
    * scrub status: print correct value of "Bytes scrubbed" for unfinished runs
    * qgroup show: fix crash when attempting to print path of stale qgroups
    * experimental features:
    * move build of raid-stripe-tree out for testing but it's still considered
      experimental
    * other:
    * shell completion updates
    * sync raid-stripe-tree code with kernel
    * build fixes
    * new and updated tests
  - update to 6.5.2
    * new feature support:
    * raid-stripe-tree, new tree to track extent mapping for raid profiles,
      allows raid1*, raid0 and raid10 on zoned devices (kernel 6.7)
    * simple quotas, simplified accounting that does not track exclusive and
      shared extents (kernel 6.7)
    * mkfs with duplicate UUID on a single device, temp-fsid (kernel 6.7)
    * metadata_uuid: enhanced capabilities to repair partially updated fsid on
      multiple devices
    * other:
    * updated tests and CI
    * sync sources with kernel


author: dsterba@suse.cz
changelog:
  - update to 6.6.2
    * squota: change key number of EXTENT_OWNER_REF_KEY, sync with kernel 6.7-rc1
    * property set/get: completely skip char devices, trying to set properties
      and open /dev/watchdog* causes a reboot
    * other: build warnings, test updates, documentation updates
  - update to 6.6.1
    * fix device scanning ioctl definition, accidental change to the 'forget' ioctl
      that breaks mounting multi-device filesystems
  - update to 6.6
    * new global option --dry-run, now implemented for 'subvolume delete'
    * fi defrag: new option --step to defragment files in steps, report progress
    * balance: removed support for obsolete short syntax 'btrfs balance /path'
    * mkfs: print zone count for each device in the overview
    * check:
    * verify inline ref ordering
    * deprecate --clear-space-cache, moved to the 'rescue' group
    * rescue clear-space-cache: new command moved from 'btrfs check' implementing
      the same as option --clear-space-cache (to be deprecated and removed in the
      future)
    * dump-tree: output sequence number for inline refs
    * fixes:
    * fi resize: fallback to lowest devid when 1 does not exist, previously the
      command would fail with "No such device"
    * fi usage: fix "devices 0 != 1" message and broken output on multi-device
      filesystem
    * open files in non-blocking mode when reading fsid, this could hang when
      trying to open fifo files or some special character devices, was observed
      with 'prop set/get'
    * experimental:
    * mkfs: parametric zone size for emulated zoned mode
    * other:
    * cleanups refactoring
    * new and updated tests
    * CI updates
    * documentation updates


author: dsterba@suse.cz
changelog:
  - update to 6.7
    * mkfs: make 4k sectorsize default, recommended minimum kernel for that is
      6.1 and requires subpage support on architectures with page size > 4k
    * subvolume create: return correct error code when a target already exists
    * tree-checker: dump tree block on error (btrfs-convert, ...)
    * scrub limit: fix reporting of a limit set while there's none
    * fi usage: fix reporting of unallocated data or raid56 profile without root
      privs due to lack of that information
    * convert:
    * align data block group lengths to 64K
    * fix conversion of a large filesystem when there are partial inode items
      present due to caching
    * other:
    * build fixes
    * updated documentation
    * new and updated tests
  - update to 6.6.3
    * subvol create: accept multiple arguments
    * subvol delete: print the subvolume id in the output
    * subvol sync: check if the filesystems is still writeable so it does not
      wait indefinitely
    * device delete: add a timeout and warning when deleting multiple devices
    * scrub status: report limit if set in sysfs/../scrub_speed_max
    * scrub limit: new command to show or set the per-device scrub limits
    * scrub start: report the limit if set
    * build:
    * fix CPU feature detection on aarch64
    * support Botan and OpenSSL (3.2+) as crypto backends
    * other:
    * documentation updates, RTD config update
    * new and updated tests
    * CI updates


author: dsterba@suse.cz
changelog:
  - update to 6.7.1
    * convert: raid-stripe-tree can be now enabled for the target filesystem
    * mkfs:
    * handle lifetime of open file descriptors so it does not trigger udev
      that could miss to create the UUID symlinks in /dev
    * update warning when CPU page size does not match sector size
    * merge features in summary, no more distinction of incompat and runtime
      to match the semantics of option -O
    * fi show: fix recognizing raw device mapper paths
    * other:
    * documentation updates, fix links to labels in included directories


author: dsterba@suse.cz
changelog:
  - update to 6.8
    * fix --enqueue option timeout handling
    * subvolume: remove support for undocumented options -c and -x,
      functionality disabled in kernel
    * libbtrfsutil:
    * version 0.1.3, backward compabile
    * add aliases for all existing functions with unified naming scheme
    * updated header defintions for recently added kernel features
    * send: v3 supported in experimental mode
    * other:
    * docs: manual page references, graphs, enhancements, clarifications
    * error handling fixes
    * cleanups and refactoring


author: dsterba@suse.cz
changelog:
  - update to 6.8.1
    * mkfs: fix writing on zoned device when block-group-tree is selected
    * tune: fix writing on zoned device with option --convert-to-block-group-tree
    * check:
    * more progress and error messages
    * unify handling of unknown command line options with other commands
    * subvolume delete: remove options --delete-qgroup and --no-delete-qgroup
      (added in 6.6.3), qgroup deletion does not always work due to delayed
      background processing of subvolume or set value in
      sysfs:ggroup/drop_subtree_threshold
    * other:
    * misc refactoring
    * error handling fixes reported by gcc -fanalyzer
    * documentation updates
    * new and updated tests


author: dsterba@suse.cz
changelog:
  - update to 6.9
    * mkfs:
    * if --force used, don't continue if the mount status cannot be
      determined (e.g. due to permissions)
    * fix minimum size calculation on zoned devices, make it work with option -b
    * check:
    * option --clear-ino-cache removed (functionality still provided in
      'rescue' command group)
    * detect and repair wrong file extent item ram_bytes value
    * qgroup clear-stale:
    * sync the filesystem before search to read the up to date state
    * handle cases where qgroup cannot be deleted due to uncleaned subvolume
      or when squota is enabled
    * qgroup show: display status of qgroup regarding the cleaning of the
      subvolume or if it's squota
    * receive: fix stream parsing on strict alignment hosts (e.g. ARM v5 or v6)
    * tune change-csum: fix check of dev-replace status item, continue if no
      dev-replace in progress
    * dump-tree: print contents of dev-replace status item
    * convert: fix extent iteration to handle prealloc/unwritten extents
    * libbtrfsutil:
    * patchlevel version update 1.3.1
    * fix potentially unaligned access to send stream
    * create library links to all version levels
    * libbtrfs:
    * patchlevel version update 0.1.3
    * fix potentially unaligned access to send stream
    * create library links to all version levels
    * build:
    * fix compatibility with e2fsprogs 1.47.1
    * fix header file dependency tracking
    * other:
    * documentation updates


author: Dominik Heidler <dheidler@suse.de>
changelog:
  - Let btrfsprogs-bash-completion require btrfsprogs with same version
    as there is a file conflict with the bash completion scripts
    still being bundled with btrfsprogs in older versions shipped with 15.6


author: dsterba@suse.cz
changelog:
  - update to 6.9.2
    * subvol list: fix accidental trimming of subvolume name
    * check: revert checking file extent item 'ram_bytes'
    * libbtrfsutil:
    * patchlevel version update 1.3.2
    * fix accidentally closing fd passed to subvolume iterator
  - update to 6.9.1
    * fix detection of intermediate super block flags (e.g. csum change and
      other conversions)
    * raid-stripe-tree support (still experimental):
    * moved under experimental build flags (mkfs, convert)
    * format change, removed encoding type; backward incompatible
    * receive dump: escape special chars in xattr names and values, and clone
      source path
    * tune change csum: fix reservation size when starting a transaction
    * other:
    * new and updated tests
    * updated CI images, new reference build targets
    * cleanups and refactoring


author: Sebastian Wagner <sebix+novell.com@sebix.at>
changelog:
  - Update to version 0.3.3:
    - This release is the same as 0.3.2 but the version number in configure.ac
    was accidentally still set to 0.3.1
  - Update to version 0.3.2:
    - fixes boo#1136958 / CVE-2019-12439
    This release fixes a mostly theoretical security issue in unusual/broken
    setups where `$XDG_RUNTIME_DIR` is unset.
    There are some other smaller fixes, as well as an addition to the JSON
    API that allows reading the inner process exit code, separately from
    the `bwrap` exit code.
    - Print "Out of memory" on stderr, not stdout
    - bwrap: add option json-status-fd to show child exit code
    - bwrap: Report COMMAND exit code in json-status-fd
    - man page: Describe --chdir, not nonexistent --cwd
    - Don't create our own temporary mount point for pivot_root
    - Make lockdata long enough on 32-bit with 64-bit file pointers.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.4.0:
    + The biggest feature in this release is the support for joining
      existing user and pid namespaces. This doesn't work in the
      setuid mode (at the moment).
    + Other changes:
    - Stores namespace info in status json.
    - In setuid mode pid 1 is now marked dumpable.
    - Now builds with musl libc.


author: Sebastian Wagner <sebix+novell.com@sebix.at>
changelog:
  - Update to version 0.4.1:
    * retcode: fix return code with syncfd and no event_fd
    * Ensure we're always clearing the cap bounding set
    * tests: Update output patterns for libcap >= 2.29
    * Don't rely on geteuid() to know when to switch back from setuid root
    * Don't support --userns2 in setuid mode
    * fixes CVE-2020-5291
    * fixes bsc#1168291


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.5.0:
    + New features:
    - --chmod changes permissions
    - --clearenv unsets every environment variable (except PWD)
    - --perms sets permissions for one subsequent --bind-data,
    - -dir, --file, --ro-bind-data or --tmpfs
    + Other enhancements:
    - Better diagnostics when a --bind or other bind-mount fails
    - zsh tab-completion
    - Better test coverage
    + Bug fixes:
    - Use Python 3 for tests and examples
    - Mount points for non-directories are created with permissions
    - r--r--r-- instead of -rw-rw-rw-
    - Don't remount items in /proc read-only if already EROFS,
      required to run under Docker
    - Allow mounting an non-directory over an existing
      non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
      /dev/log
    - Silence kernel messages for our bind-mounts
    - Make sure pkg-config is checked for, regardless of build
      options
    - Improve ability to bind-mount directories on case-insensitive
      filesystems
    - Fix -Wshadow warnings
    - Fix deprecation warnings with newer SELinux
  - Add new subpackage bubblewrap-zsh-completion


author: Sebastian Wagner <sebix+novell.com@sebix.at>
changelog:
  - Update to 0.6.1:
    - Add a release checklist
    - completions: Make zsh completion non-executable
    The Autotools build system installed it with 0644 permissions because
    it's listed as DATA, but the Meson build system installs executable
    files as executable by default.
    zsh completions don't need to be executable to work, and this one doesn't
    have the `#!` marker that should start an executable script.
  - update to 0.6.0:
    - meson: Improve compatibility with Meson 0.49
    That version doesn't allow more than two arguments for define_variable.
    - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
    This test is hanging when run under 'meson dist' for some reason, but
    not when run under 'meson test', and not locally, only in the Github
    Workflow-based CI. Disable it for now.
    - meson: Actually build and run the tests
    - tests: Fix compiler warnings for unused arguments
    - meson: Run test scripts from $srcdir
    - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
    - meson: Run the Python test script with Python, not bash
    The python build option can be used to swap to a different interpreter,
    for environments like the Steam Runtime where the python3 executable in
    the PATH is extremely old but there is a better interpreter available.
    This is treated as non-optional, because Meson is written in Python,
    so the situation where there is no Python interpreter at build-time
    shouldn't arise.
    - meson: Build the try-syscall helper
    - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
    - meson.build: Remove unnecessary check for sh
    - Add a Meson build system
    This allows bwrap to be built as a subproject in larger Meson projects.
    When built as a subproject, we install into the --libexecdir and
    require a program prefix to be specified: for example, Flatpak would use
    program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
    be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
    Loosely based on previous work by Jussi Pakkanen (see #133).
    Differences between the Autotools and Meson builds:
    The Meson build requires a version of libcap that has pkg-config
    metadata (introduced in libcap 2.23, in 2013).
    The Meson build has no equivalent of --with-priv-mode=setuid. On
    distributions like Debian <= 10 and RHEL <= 7 that require a setuid bwrap
    executable, the sysadmin or distribution packaging will need to set the
    correct permissions on the bwrap executable; Debian already did this via
    packaging rather than the upstream build system.
    The Meson build supports being used as a subproject, and there is CI
    for this. It automatically disables shell completions and man pages,
    moves the bubblewrap executable to ${libexecdir}, and renames the
    bubblewrap executable according to a program_prefix option that the
    caller must specify (for example, Flatpak would use
    - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
    tests/use-as-subproject/ directory for an example.
    - Use HEAD to refer to other projects' default branches in documentation
    This makes the URL independent of the name they have chosen for their
    default branches.
    - workflows: Update for rename of default branch to main
    - tests: Exercise seccomp filters
    - Allow loading more than one seccomp program
    This will allow Flatpak to combine an allow-list (default-deny) of
    known system calls with a deny-list (default-allow) of system calls
    that are undesired.
    Resolves: https://github.com/containers/bubblewrap/issues/453
    - Generalize linked lists of LockFile and SetupOp
    I'm about to add a third linked list, for seccomp programs, which would
    seem like too much duplication.
    - Handle argc == 0 better
    Unfortunately it's possible for argc to be 0, so error out pretty early
    on in that case. I don't think this is a security issue in this case.
    - Fix typo
    - Remove trailing whitespace
    - Fix spelling
    - bash: Fix shellcheck warnings
    - bash: Invoke bash using /usr/bin/env
    - bubblewrap: Avoid a -Wjump-misses-init false-positive
    When building with -Wjump-misses-init as part of a larger project, gcc
    reports that we jump past initialization of cover_proc_dirs. This is
    technically true, but we only use this variable in the case where it's
    initialized, so that's harmless.
    However, we can avoid this altogether by making the array static and
    constant, which allows it to be moved from initialized data to read-only
    data.
    - bind-mount: Be more const-correct
    When compiled with -Wwrite-strings as part of a larger project, gcc and
    clang both warn that we're assigning a string constant to a mutable
    struct member. There's actually no reason why it should be mutable, so
    make it const.
    - die_with_error: Save errno sooner
    We need to save errno immediately, otherwise it could be overwritten
    by a failing library call somewhere in the implementation of fprintf.
    - main: Warn when non-repeatable options are repeated
    A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
    would load seccomp programs from both fds 3 and 4, but in fact it only
    loads the program from fd 4.
    Helps: https://github.com/containers/bubblewrap/issues/453
    Resolves: https://github.com/containers/bubblewrap/issues/454
    - utils: Add warn()
    - Add SPDX-License-Identifier for files that already specify license
    This is a step towards REUSE compliance. Third-party files that we do
    not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
    - tests: Use preferred spelling for SPDX license identifiers
    - Remove obsolete .travis.yml
    We no longer use Travis-CI.
    - Remove obsolete papr CI
    We no longer use this.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Update to version 0.6.2:
    + New features in Meson build:
    - Auto-detect whether the man page can be generated.
    - -Dbwrapdir=... changes the installation directory (useful
      when being used as a subproject).
    - -Dtests=false disables unit tests.
    + Bug fixes:
    - Add --add-seccomp-fd to shell completions
    - Document --add-seccomp-fd, --json-status-fd and --share-net
      in the man page
    - Add attributes to silence various compiler warnings
    - Allow compilation of tests with musl on mips architectures
    - Allow compilation with older glibc
    - Disable sanitizers for a test helper whose seccomp profile
      breaks the instrumentation
    - Disable AddressSanitizer leak detection where it interferes
      with unit testing


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to v0.7.0:
    * --size option controls the size of a subsequent --tmpfs (#509)
    * Better error messages if a mount operation fails (#472)
    * Better error message if creating the new user namespace fails with
      ENOSPC (#487)
    * When building as a Meson subproject, a RUNPATH can be set on the
      executable to make it easier to bundle its libcap dependency
    * Fix test failures when running as uid 0 but with limited capabilities
      (#510)
    * Use POSIX command -v in preference to non-standard which (#527)
    * Fix a copy/paste error in --help (#531)


author: Andreas Stieger <andreas.stieger@gmx.de>
changelog:
  - update to v0.8.0:
    * Add --disable-userns option to prevent the sandbox from
      creating its own nested user namespace
    * Add --assert-userns-disabled option to check that an existing
      userns was created with --disable-userns
    * Give a clearer error message if the kernel doesn't have
      CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER


author: Wolfgang Frisch <wolfgang.frisch@suse.com>
changelog:
  - update to v0.9.0:
    * Build system changed to Meson from Autotools
    * Add --argv0
      https://github.com/containers/bubblewrap/issues/91
    * --symlink is now idempotent, meaning it succeeds if the symlink already
      exists and already has the desired target
    * Clarify security considerations in documentation
    * Clarify documentation for --cap-add
    * Report a better error message if mount(2) fails with ENOSPC
    * Fix a double-close on error reading from --args, --seccomp or
    - -add-seccomp-fd argument
    * Improve memory allocation behaviour


author: Adrian Schröter <adrian@suse.de>
changelog:
  - ProductCompose: multiple improvements
  - Add buildflags:define_specfile support
  - Fix copy-in of git subdirectory sources
  - pbuild: Speed up XML parsing
  - pubild: product compose support
  - generate_sbom: add help option
  - podman: enforce runtime=runc
  - Implement direct conflicts from the distro config
  - changelog2spec: fix time zone handling
  - Do not unmount /proc/sys/fs/binfmt_misc before runnint the check scripts
  - spec file cleanup
  - documentation updates


author: Adrian Schröter <adrian@suse.de>
changelog:
  - Add a hack for systemd 255.3, creating an empty /etc/os-release
    if missing after preinstall.
  - docker: Fix HEAD request in dummyhttpserver
  - pbuild: Make docker-nobasepackages expand flag the default
  - rpm: Support a couple of builtin rpm macros
  - rpm: Implement argument expansion for define/with/bcond...
  - Fix multiline macro handling
  - Accept -N parameter of %autosetup
  - documentation updates
  - various code cleanup and speedup work.


author: Adrian Schröter <adrian@suse.de>
changelog:
  - tumbleweed build config update
  - 15.6 build config fixes
  - sourcerpm & sourcedep handling fixes
  - productcompose:
    - Fix milestone handling
    - Support bcntsynctag
  - Adding debian support to generate_sbom
  - Add syscall for personality switch on loongarch64 kernel
  - vm-build: ext3 & ext4: fix disk space allocation
  - mkosi format updates, not fully working yet
  - pbuild exception fixes
  - Fixes for current fedora and centos distros
  - Don't copy original dsc sources if OBS-DCH-RELEASE set
  - Unbreak parsing of sources/patches
  - Support ForceMultiVersion in the dockerfile parser
  - Support %bcond of rpm 4.17.1


author: mls@suse.de
changelog:
  - tumbleweed build config update
  - support the %load macro
  - improve container filename generation (docker)
  - fix hanging curl calls during build (docker)
  - productcompose: fix milestone query


author: Adrian Schröter <adrian@suse.de>
changelog:
  - productcompose: support __all__ option
  - config update: tumbleweed using preinstallexpand
  - minor improvements


author: Adrian Schröter <adrian@suse.de>
changelog:
  - SBOM generation:
    - Adding golang introspection support
    - Adding rust binary introspection support
    - Keep track of unknwon licenses and add a "hasExtractedLicensingInfos"
      section
    - Also normalize licenses for cyclonedx
    - Make generate_sbom errors fatal
    - general improvements
  - Fix noprep building not working because the buildir is removed
  - kiwi image: also detect a debian build if /var/lib/dpkg/status is present
  - Do not use the Encode module to convert a code point to utf8
  - Fix personality syscall number for riscv
  - add more required recommendations for KVM builds
  - set PACKAGER field in build-recipe-arch
  - fix writing _modulemd.yaml
  - pbuild: support --release and --baselibs option
  - container:
    - copy base container information from the annotation into the
      containerinfo
    - track base containers over multiple stages
    - always put the base container last in the dependencies


author: Adrian Schröter <adrian@suse.de>
changelog:
  - container related:
    * Implement support for the new <containers> element in kiwi recipes
    * Fixes for SBOM and dependencies of multi stage container builds
    * obs-docker-support: enable dnf and yum substitutions
  - Arch Linux:
    * fix file path for Arch repo
    * exclude unsupported arch
    * Use root as download user
  - build-vm-qemu: force sv48 satp mode on riscv64
  - mkosi:
    * Create .sha256 files after mkosi builds
    * Always pass --image-version to mkosi
  - General improvements and bugfixes (mkosi, pbuild, appimage/livebuild,
      obs work detection, documention, SBOM)
  - Support slsa v1 in unpack_slsa_provenance
  - generate_sbom: do not clobber spdx supplier
  - Harden export_debian_orig_from_git (boo#1230469)


author: Ludwig Nussel <lnussel@suse.de>
changelog:
  - prepare spec file for rpmbuild --build-in-place --noprep
  - use bcond for static and ww3 subpackages
  - fix verbose flag


author: Radoslav Kolev <radoslav.kolev@suse.com>
changelog:
  - Annotate CVEs already fixed in upstream, but not mentioned in .changes:
    * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules


author: Radoslav Kolev <radoslav.kolev@suse.com>
changelog:
  - Update to version 1.36.0
    - awk: fix use after free (CVE-2022-30065)
    - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
      mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
    - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
    - new applets added: seedrng, tree, tsort
  - Adjust busybox.config for new features
    - ash: enable sleep built-in
    - enable new applets: seedrng, tree, tsort
    - enable SHA hardware acceleration
    - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
      LOOP_SET_FD + LOOP_SET_STATUS if not supported
  - drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.36.1:
    * fixes for line editing, detection of hardware sha1/sha256
      support, unzip
    (do not create suid/sgid files unless -K),
      shell (printf and sleep with no args, handing of SIGINT
      in sleep), ed.


author: Radoslav Kolev <radoslav.kolev@suse.com>
changelog:
  -  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
    in ash (CVE-2022-48174, bsc#1214538)


author: Thorsten Kukuk <kukuk@suse.com>
changelog:
  - Install udhcpc and udhcpc6 into the same directory
    (udhcp6-install-path.patch)
  - Fully enable udhcpc and document that this tool needs special
    configuration and does not work out of the box [bsc#1217883]


author: Thorsten Kukuk <kukuk@suse.com>
changelog:
  - Make sure last stays in busybox-util-linux, even if we moved
    the original binary from util-linux to wtmpdb


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20210328:
    * reader.c: ignore bison's "%empty" extension
    * reader.c, defs.h:
      %debug was a trivial bison "extension", mark it as such
    * yacc.1: use italics in a few places where bold was inappropriate
    * reader.c:
      add union tag to YYSTYPE structure for compatibility with a feature which
      bison copied from Solaris yacc (request by Ella Stanforth)
    * closure.c, warshall.c:
      fix undefined-behavior diagnosed with gcc -fsanitize=undefined (report by
      Alexander Richardson)


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20210619:
    * btyaccpar.skel, yaccpar.skel: cancel unused assignments
    * output.c: fix gcc warning
    * test/run_test.sh, test/run_lint.sh, test/run_make.sh:
      shellcheck-warnings
    * test/run_test.sh: changes suggested at
      https://github.com/jannick0/byacc-snapshots/tree/YYINT-fix-20210520
    * autotools update


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20210808:
    * main.c: account for a memory-leak
    * fix memory-leak when replacing $$'s in destructor code
    * main.c, yacc.1: add "-h" option
    * line number reporting fixes


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20220128:
    * change a few malloc's to calloc's so clang analyzer can see initialized data
    * modify address computation in closure.c to avoid undefined behavior on
      machines which do not support large offsets (analysis/patch by Jessica Clarke,
      cf: 2014-09-17)
    * testsuite and autotools/build script fixes


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20221106:
    * test/run_test.sh: use context diff, to work with AIX
    * defs.h:
      fprintf_lineno might be passed a null, when reading from stdin - show "(null)"
    * makefile.in, test/run_make.sh, test/run_test.sh, test/run_lint.sh:
      fgrep-fixes
    * yacc.1: mention use of stderr/stdout for usage/debugging
    * yacc.1: document %empty
    * yacc.1: document %debug
    * yacc.1: minor fixes with check-manpage


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20221229:
    * autoconf update
    * configure.in:
      correct help-message for --disable-btyacc option, and fix the reporting of
      the selected option value in the configure script's output


author: Avinesh Kumar <avinesh.kumar@suse.com>
changelog:
  - update to 20230201:
    * configure.in: initialize $ac_includes_default
    * aclocal.m4: resync with my-autoconf


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 20230521:
    * error.c, defs.h, reader.c:
      allow @1 or $@ with a warning if no %locations was given
    * reader.c: clear pointer in end_ainfo() after freeing it.
    * reader.c: report errors in %define as "unexpected value"
      add/use macros begin_ainfo() and end_ainfo() to reduce clutter
    * defs.h, error.c: add function unexpected_value()
    * add %nterm as an alias for %type, since bison made that confusion.
    * reader.c:
      ensure that filler_buf and prefix_buf are initialized for the special case
      where they are empty (report by Martin Jansa, cf: 20230219)
    * output.c:
      make test-differences smaller when compiling with YY_NO_LEAKS by replacing
      a blank line with the generated #define rather than adding 3 lines.
    * reader.c:
      correct a use-after-free in more_curly, which could occur if a %lex-param
      or %parse-param was multi-line (Redhat #2183006).
    * main.c: rename no_space() to on_error()
    * error.c: rename no_space() to no_error(), handling any errno
    * defs.h: rename no_space() to on_error()


author: Pedro Monreal <pmonreal@suse.com>
changelog:
  - Update to 1.15
    * Fix: stack corruption when generating a java parser
    * Fix: Targets with empty right-hand side problematic in Java mode


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Added patch:
    * byaccj-gcc14.patch
      + add missing include to fix build with gcc 14 (bsc#1221696)


author: Andreas Stieger <andreas.stieger@gmx.de>
changelog:
  - update to 1.21.0:
    * Replace multiple DNS hand-made parsers with new memory-safe DNS
      message parser
    * developer visible changes and bug fixes


author: Adam Majer <adam.majer@suse.de> - 1.23
changelog:
  - Update to version 1.23
    Features:
      Introduce optional (but on by default) thread-safety for the c-ares library. This has no API nor ABI implications.
      resolv.conf in modern systems uses attempts and timeouts options instead of the old retrans and retry options.
      Query caching support based on TTL of responses. Can be enabled via ares_init_options() with ARES_OPT_QUERY_CACHE.
    Bugfixes:
      ares_init_options() for ARES_OPT_UDP_PORT and ARES_OPT_TCP_PORT accept theport in host byte order, but it was reading it as network byte order. Regression introduced in 1.20.0.
      ares_init_options() for ARES_FLAG_NOSEARCH was not being honored forares_getaddrinfo() or ares_gethostbyname(). Regression introduced in 1.16.0.
      Autotools MacOS and iOS version check was failing
      Environment variables passed to c-ares are meant to be an override for system configuration. Regression introduced in 1.22.0.
      Spelling fixes as detected by codespell.
      The timeout returned by ares_timeout() was truncated to milliseconds butvalidated to microseconds which could cause a user to attempt to process timeouts prior to the timeout actually expiring.
      CMake was not honoring CXXFLAGS passed in via the environment which couldcause compile and link errors with distribution hardening flags during packaging.
      Fix Windows UWP and Cygwin compilation.
      ares_set_servers_*() for legacy reasons needs to accept an empty server listand zero out all servers. This results in an inoperable channel and thus is only used in simulation testing, but we don't want to break users. Regression introduced in 1.21.0.
    Changes in version 1.22.1
    Bugfixes:
      Fix /etc/hosts processing performance with all entries using same IPaddress. Large hosts files using the same IP address for all entries could use exponential time.
      Fix typos in manpages
      Fix OpenWatcom building
    Changes in version 1.22.0
    Features:
      ares_reinit() is now implemented to re-read any system configuration and immediately apply to an existing ares channel
      The adig command line program has been rewritten and its format now more closely matches that of BIND's dig utility
      The new DNS message parser and writer functions have now been made public
      RFC9460 HTTPS and SVCB records are now supported
      RFC6698 TLSA records are now supported
      The server list is now internally dynamic and can be changed without impacting existing queries
      Hosts file processing is now cached until the file is detected to be changed to speed up repetitive lookups of large hosts files
    Changes:
      Internally all DNS messages are now written using the new DNS writing functions
      EDNS is now enabled by default
      Internal cleanups in function prototypes
    Bugfixes:
      Randomize retry penalties to prevent thundering herd issues when dns servers throttle requests
      Fix Windows build error for missing if_indextoname()


author: Adam Majer <adam.majer@suse.de> - 1.24
changelog:
  - Update to version 1.24
    Features:
    * Add support for IPv6 link-local DNS servers. Nameserver formats
      can now accept the 0face suffix, and a new ares_get_servers_csv()
      function was added to return servers that can contain the link-local
      interface name.
    Changes:
    * Unbundle GoogleTest for test cases. Package maintainers will now
      need torequire GoogleTest (GMock) as a build dependency if
      building tests. New GoogleTest versions require C++14 or later.
    * Replace nameserver parsing code to use new memory-safe functions.
    * Replace the sortlist parser with new memory-safe functions.
    * Various warning fixes and dead code removal.
    Bugfixes:
    * Old Linux versions require POSIX_C_SOURCE or _GNU_SOURCE to
    compile with thread safety support
    * A non-responsive DNS server that caused timeouts wouldn't
    increment thefailure count, this would lead to other servers
    not being tried. Regression introduced in 1.22.0
    * Some projects that depend on c-ares expect invalid parameter
    option valuespassed into ares_init_options() to simply be
    ignored. This behavior has been restored
    * getrandom() can fail if the kernel doesn't support
    the syscall, fall back to another random source
    * ares_cancel() when performing ares_gethostbyname() or
    ares_getaddrinfo()with AF_UNSPEC, if called after one address
    class was returned but before the other address class, it
    would return ARES_SUCCESS rather than ARES_ECANCELLED
  - disable-live-tests.patch: dropped, not needed


author: Adam Majer <adam.majer@suse.de> - 1.25
changelog:
  - Update to version 1.25
    Changes:
    o Rewrite ares_strsplit() as a wrapper for ares__buf_split() for memory
    safety reasons.
    o The ahost utility now uses ares_getaddrinfo() and returns both IPv4 and
    IPv6 addresses by default.
    Bug Fixes:
    o Tests: Live reverse lookups for Google's public DNS servers no longer
    return results, replace with CloudFlare pubic DNS servers.
    o Connection failures should increment the server failure count first or a
    retry might be enqueued to the same server
    o On systems that don't implement the ability to enumerate network interfaces
    the stubs used the wrong prototype.
    o Fix minor warnings and documentation typos
    o Fix support for older GoogleTest versions
    o getrandom() may require sys/random.h on some systems.
    o Fix building tests with symbol hiding enabled.
  - 0001-Use-RPM-compiler-options.patch: dropped, obsolete


author: Andreas Stieger <andreas.stieger@gmx.de>
changelog:
  - c-ares 1.26.0:
    * Event Thread support. Integrators are no longer required to
      monitor the file descriptors registered by c-ares for events
      and call ares_process() when enabling the event thread feature
      via ARES_OPT_EVENT_THREAD passed to ares_init_options().
    * Added flags to are_dns_parse() to force RAW packet parsing
    * Mark ares_fds() as deprecated
    * Bug fixes
  - move tests into a build flavor to avoid gtest/gmock build loop


author: Adam Majer <adam.majer@suse.de>
changelog:
  - c-ares 1.27.0
    Security:
    * Moderate. CVE-2024-25629. Reading malformatted /etc/resolv.conf,
      /etc/nsswitch.conf or the HOSTALIASES file could result in a crash.
      GHSA-mg26-v6qh-x48q (CVE-2024-25629, bsc#1220279)
    Features:
    * New function ares_queue_active_queries() to retrieve number of in-flight
      queries. PR #712
    * New function ares_queue_wait_empty() to wait for the number of in-flight
      queries to reach zero. PR #710
    * New ARES_FLAG_NO_DEFLT_SVR for ares_init_options() to return a failure if
      no DNS servers can be found rather than attempting to use 127.0.0.1. This
      also introduces a new ares status code of ARES_ENOSERVER. PR #713
    Changes:
    * EDNS Packet size should be 1232 as per DNS Flag Day. PR #705
    Bugfixes:
    * Fix warning due to ignoring return code of write(). PR #709
    * CMake: don't override target output locations if not top-level. Issue #708
    * Fix building c-ares without thread support. PR #700


author: Adam Majer <adam.majer@suse.de>
changelog:
  - c-ares 1.28.1
    Features:
    * Emit warnings when deprecated c-ares functions are used.
      This can be disabled by passing a compiler definition of
      `CARES_NO_DEPRECATED`. [PR #732]
    * Add function `ares_search_dnsrec()` to search for records
      using the new DNS record data structures. [PR #719]
    * Rework internals to pass around `ares_dns_record_t` instead of
      binary data, this introduces new public functions of
      `ares_query_dnsrec()` and `ares_send_dnsrec()`. [PR #730]
    Changes:
    * tests: when performing simulated queries, reduce timeouts
      to make tests run faster
    * Replace configuration file parsers with memory-safe parser. [PR #725]
    * Remove `acountry` completely, the manpage might still get
      installed otherwise. [Issue #718]
    Bugfixes:
    * CMake: don't overwrite global required libraries/definitions/includes
      which could cause build errors for projects chain building c-ares.
      [Issue #729]
    * On some platforms, `netinet6/in6.h` is not included by `netinet/in.h`
      and needs to be included separately. [PR #728]
    * Fix a potential memory leak in `ares_init()`. [Issue #724]
    * Some platforms don't have the `isascii()` function.
      Implement as a macro. [PR #721]
    * CMake: Fix Chain building if CMAKE runtime paths not set
    * NDots configuration should allow a value of zero. [PR #735]


author: jun wang <jgwang@suse.com>
changelog:
  - c-ares 1.29.0
    Features:
    * When using ARES_OPT_EVENT_THREAD, automatically reload
      system configuration when network conditions change.
      [PR #759]
    * Apple: reimplement DNS configuration reading to more
      accurately pull DNS settings. [PR #750]
    * Add observability into DNS server health via a server state
      callback, invoked whenever a query finishes. [PR #744]
    * Add server failover retry behavior, where failed servers are
      retried with small probability after a minimum delay.
      [PR #731]
    Changes:
    * Mark ares_channel_t * as const in more places in the public
      API. [PR #758]
    Bugfixes:
    * Due to a logic flaw dns name compression writing was not
      properly implemented which would result in the name prefix not
      being written for a partial match. This could cause issues in
      various record types such as MX records when using the
      deprecated API. Regression introduced in 1.28.0. [Issue #757]
    * Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say
      it does and causes c-ares to become non-functional. [PR #754]
    * ares_getnameinfo(): loosen validation on salen parameter.
      [Issue #752]
    * cmake: Android requires C99. [PR #748]
    * ares_queue_wait_empty() does not honor timeout_ms >= 0.
      [Issue #742]


author: Adam Majer <adam.majer@suse.de>
changelog:
  - c-ares 1.30.0
    Features:
    * Basic support for SIG RR record (RFC 2931 / RFC 2535) [PR #773]
    Changes:
    * Validation that DNS strings can only consist of printable ascii characters
    otherwise will trigger a parse failure. [75de16c] and [40fb125]
    Bugfixes:
    * QueryCache: Fix issue where purging on server changes wasn't working. [a6c8fe6]
  - updated dowload URLs to point to github
  - updated keyring to include Brad House DA7D64E4C82C6294CB73A20E22E3D13B5411B7CA


author: Thorsten Kukuk <kukuk@suse.com>
changelog:
  - Remove old migration code, we don't support migration from such
    old products anymore.
  - Use file requires to support busybox container if possible


author: lnussel@suse.de
changelog:
  - Update to version 2+git20201002.34daf7f:
    * Use relative symlink for /etc/ssl/certs (boo#1175340)


author: lnussel@suse.de
changelog:
  - Update to version 2+git20210309.8214505:
    * Make sure to trigger in transactional mode (boo#1179884)


author: lnussel@suse.de
changelog:
  - Update to version 2+git20210609.a4969d7:
    * Restore /etc/ssl/ca-bundle.pem if it doesn't exist
    * Get rid of ls
    * Fix indent inconsistencies
    * Create /var/lib/ca-certificates if needed
    * Install hooks with correct number
    * Remove legacy files
    * Remove find from update-ca-certificates


author: lnussel@suse.de
changelog:
  - Update to version 2+git20210723.27a0476:
    * Don't trigger path unit on /usr/share
    * Use flock to serialize calls (boo#1188500)
    * Add --root <directory> option


author: lnussel@suse.de
changelog:
  - Update to version 2+git20211004.3efbea9:
    * Ensure --root option propagates prefix properly to other scripts


author: lnussel@suse.de
changelog:
  - Update to version 2+git20230406.2dae8b7:
    * Build in place support
    * Fix up argument parsing
    * merge spec file into git


author: kukuk@suse.com
changelog:
  - Update to version 2+git20240415.3fe9324:
    * Add ca-certificates-setup.service
    * typo: differnt/different


author: Marcus Meissner <meissner@suse.com>
changelog:
  - Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
    Added:
    - Autoridad de Certificacion Firmaprofesional CIF A62634068
    - D-TRUST BR Root CA 1 2020
    - D-TRUST EV Root CA 1 2020
    - GlobalSign ECC Root CA R4
    - GTS Root R1
    - GTS Root R2
    - GTS Root R3
    - GTS Root R4
    - HiPKI Root CA - G1
    - ISRG Root X2
    - Telia Root CA v2
    - vTrus ECC Root CA
    - vTrus Root CA
    Removed:
    - Cybertrust Global Root
    - DST Root CA X3
    - DigiNotar PKIoverheid CA Organisatie - G2
    - GlobalSign ECC Root CA R4
    - GlobalSign Root CA R2
    - GTS Root R1
    - GTS Root R2
    - GTS Root R3
    - GTS Root R4


author: Marcus Meissner <meissner@suse.com>
changelog:
  - Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
    Added:
    - Certainly Root E1
    - Certainly Root R1
    - DigiCert SMIME ECC P384 Root G5
    - DigiCert SMIME RSA4096 Root G5
    - DigiCert TLS ECC P384 Root G5
    - DigiCert TLS RSA4096 Root G5
    - E-Tugra Global Root CA ECC v3
    - E-Tugra Global Root CA RSA v3
    Removed:
    - Hellenic Academic and Research Institutions RootCA 2011


author: Marcus Meissner <meissner@suse.com>
changelog:
  - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
    Removed CAs:
    - Global Chambersign Root
    - EC-ACC
    - Network Solutions Certificate Authority
    - Staat der Nederlanden EV Root CA
    - SwissSign Platinum CA - G2
    Added CAs:
    - DIGITALSIGN GLOBAL ROOT ECDSA CA
    - DIGITALSIGN GLOBAL ROOT RSA CA
    - Security Communication ECC RootCA1
    - Security Communication RootCA3
    Changed trust:
    - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
  - Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
    and it is not clear how many certs were issued for SSL middleware by TrustCor:
    - TrustCor RootCert CA-1
    - TrustCor RootCert CA-2
    - TrustCor ECA-1
    Patch: remove-trustcor.patch


author: Marcus Meissner <meissner@suse.com>
changelog:
  - Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
    Added:
    - Atos TrustedRoot Root CA ECC G2 2020
    - Atos TrustedRoot Root CA ECC TLS 2021
    - Atos TrustedRoot Root CA RSA G2 2020
    - Atos TrustedRoot Root CA RSA TLS 2021
    - BJCA Global Root CA1
    - BJCA Global Root CA2
    - LAWtrust Root CA2 (4096)
    - Sectigo Public Email Protection Root E46
    - Sectigo Public Email Protection Root R46
    - Sectigo Public Server Authentication Root E46
    - Sectigo Public Server Authentication Root R46
    - SSL.com Client ECC Root CA 2022
    - SSL.com Client RSA Root CA 2022
    - SSL.com TLS ECC Root CA 2022
    - SSL.com TLS RSA Root CA 2022
    Removed CAs:
    - Chambers of Commerce Root
    - E-Tugra Certification Authority
    - E-Tugra Global Root CA ECC v3
    - E-Tugra Global Root CA RSA v3
    - Hongkong Post Root CA 1


author: Marcus Meissner <meissner@suse.com>
changelog:
  - Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
    Added:
    - CommScope Public Trust ECC Root-01
    - CommScope Public Trust ECC Root-02
    - CommScope Public Trust RSA Root-01
    - CommScope Public Trust RSA Root-02
    - D-Trust SBR Root CA 1 2022
    - D-Trust SBR Root CA 2 2022
    - Telekom Security SMIME ECC Root 2021
    - Telekom Security SMIME RSA Root 2023
    - Telekom Security TLS ECC Root 2020
    - Telekom Security TLS RSA Root 2023
    - TrustAsia Global Root CA G3
    - TrustAsia Global Root CA G4
    Removed:
    - Autoridad de Certificacion Firmaprofesional CIF A62634068
    - Chambers of Commerce Root - 2008
    - Global Chambersign Root - 2008
    - Security Communication Root CA
    - Symantec Class 1 Public Primary Certification Authority - G6
    - Symantec Class 2 Public Primary Certification Authority - G6
    - TrustCor ECA-1
    - TrustCor RootCert CA-1
    - TrustCor RootCert CA-2
    - VeriSign Class 1 Public Primary Certification Authority - G3
    - VeriSign Class 2 Public Primary Certification Authority - G3
  - remove-trustcor.patch: removed, now upstream
  - do a versioned obsoletes of "openssl-certs".


author: Marcus Meissner <meissner@suse.com>
changelog:
  - Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
    - Added: FIRMAPROFESIONAL CA ROOT-A WEB
    - Distrust: GLOBALTRUST 2020


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Create /var/lib/ca-certificates during build to ensure rpm gives
    the %ghost'ed directory proper mode attributes.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Also mark /usr/share/factory/var/lib/ca-certificates/ as writable
    by the user during install: allow rpm to properly execute %clean
    when completed.


author: ???? ?????? <ilya@ilya.top>
changelog:
  - Refreshed spec-file via spec-cleaner.
  - Added Requires:toilet for caca-utils, because need for cacaclock.


author: Josef Möllers <josef.moellers@suse.com>
changelog:
  - The contents of libcaca-prevent-overflow.patch
    have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
    and libcaca-variable-type.patch
    [libcaca-prevent-overflow.patch]


author: Josef Möllers <josef.moellers@suse.com>
changelog:
  - More overflow prevention of multiplying large ints
    [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]


author: Josef Möllers <josef.moellers@suse.com>
changelog:
  - The problem is due to the fact that the images in the POC have
    a size of 0x0 and thus, when exporting, no data is written for
    the image bits.
    However, space is allocated for the header only, not taking
    into account that sprintf appends a NUL byte.
    [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
    bsc1184751-add-space-for-NUL-byte.patch]


author: Josef Möllers <josef.moellers@suse.com>
changelog:
  - When a zero-width or zero-height image is given, a divide-by-zero
    occurs. This patch checks for this and produces a zero-sized
    output.
    [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
    CVE-2022-0856, bsc#1197028]


author: Valentin Lefebvre <valentin.lefebvre@suse.com>
changelog:
  - Upgrade to 0.99.beta20
    * IPv6 support in cacaserver
    * fixed a bug from 2004 that caused PDF documentation generation to fail
    * memory allocation functions are now more robust
    * numerous fixes for memory leaks and invalid memory accesses:
    * CVE-2021-30498
    * CVE-2021-30499
    * CVE-2021-3410
    * CVE-2018-20546
    * CVE-2018-20547
    * CVE-2018-20545
    * CVE-2018-20548
    * CVE-2018-20549
  - Dropped upstream fixed patches
    * libcaca-bsc1182731-prevent-overflow.patch
    * libcaca-variable-type.patch
    * Bug1120502-add_cast_to_prevent_overflow.patch


author: Valentin Lefebvre <valentin.lefebvre@suse.com>
changelog:
  - Use %autosetup, prepare for RPM 4.20.
    * Rewrote patches so that they are applied uniformly via %autosetup.
    * Correctly reorder the patches in specfile declaration.


author: bjorn.lie@gmail.com
changelog:
  - Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
    assertion failure in the freetype backend (fdo#105746).


author: qzheng@suse.com
changelog:
  - Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
    and check cmap size before allocating (boo#1049092,
    CVE-2017-9814, fdo#101547).


author: bjorn.lie@gmail.com
changelog:
  - Update to version 1.15.14:
    + Features and Enhancements:
    - Add more FreeeType font color conversions to support
      COLR/CPAL.
    - Update test reference images against current pixman.
    + Bugs fixed:
    - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
      font.
    - Fix build breakage with glesv3 enabled due to non-existant
      glesv3.pc.
    - Fix memory leaks found by Coverity.
    - Fix incorrect null ptr handling found by Coverity.
    - Fix test compilation when font-config is disabled.
    - Use _cairo_malloc instead of malloc
      (fdo#101547, CVE-2017-9814).
    - Fix assertion failure in the freetype backend (fdo#105746).
  - Drop upstream fixed patches:
    + cairo-fix-assertion-failure-in-freetype-backend.patch.
    + cairo-CVE-2017-9814.patch.


author: bjorn.lie@gmail.com
changelog:
  - Update to version 1.16.0:
    + test: Free resources in pdf2png.
    + Drop skia backend.
    + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Add 2 upstream bug fix patches:
    + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
      ft: Use FT_Done_MM_Var instead of free when available in
      cairo_ft_apply_variations. Fixes a crash when using freetype
      >= 2.9
    + cairo-composite_color_glyphs.patch: Fix a thinko in
      composite_color_glyphs. We can't just move around the contents
      of the passed-in string, we need to make a copy. This was
      showing up as memory corruption in pango.


author: Martin Wilck <mwilck@suse.com>
changelog:
  - Add an upstream bug fix
    + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
      see https://gitlab.freedesktop.org/cairo/cairo/issues/342


author: Ferdinand Thiessen <rpm@fthiessen.de>
changelog:
  - Add upstream patch
    + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
      Do not replace explicitly set applications settings by user
      settings for font antialiasing.
      See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 1.17.6:
    + This snapshot sees the removal of the following backends and
      platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
    + Thanks to all past contributors for their work on them. If you
      were using any of these backends then you will need to stick to
      Cairo 1.16.
    + This snapshot is going to be the **last** release of Cairo with
      the Autotools build system. The Meson build has seen many
      improvements and it is considerably easier to maintain and
      faster to build.
  - Changes from version 1.17.4:
    + A particularly noteworthy improvement in this release is the
      addition of the meson build system as an alternative to
      autotools.
    + The cogl Cairo backend underwent significant development this
      cycle.
    + Subpixel positioning support allows improved glyph outlines
      with the Freetype font backend.
    + For a complete log of changes, please see
      https://cairographics.org/releases/ChangeLog.1.17.4
  - Changes from version 1.17.2:
    + This snapshot provides the new support for writing floating
      point formats as 16 bpc PNGs, with support for RGBA128F and
      RGB96F formats. This new feature increases Cairo's pixman
      version requirement to 0.36.0.
    + Beyond this are a range of bugfixes.
      For a complete log of changes, please see
      https://cairographics.org/releases/ChangeLog.1.17.2
  - Drop patches fixed upstream:
    + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
    + cairo-composite_color_glyphs.patch
    + cairo-pdf-add-missing-flush.patch
    + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
  - Rebase remaining patches with quilt.
  - Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
    default LCD filter to FreeType's default (patch merged upstream).
  - Use ldconfig_scriptlets macro for post(un) handling.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 1.17.8:
    + In a continuing effort to reduce the amount of legacy code, and
      increase the long-term maintainability of cairo, the following
      backends have been removed:
    - GL and GLES drawing
    + Additionally, cairo's Autotools build system has been removed;
      from now on, cairo will only support the Meson build system.
      While the end result should be identical, further testing is
      appreciated.
    + In this snapshot, cairo gained support for rendering COLRv1
      fonts, and rendering SVG and COLRv1 fonts with custom palettes.
    + Support for macOS and Windows has been improved, with lots of
      build and bug fixes.
    + Lots of safety issues have been fixed, with array bounds
      checking and plugging memory leaks, as well as fixes for bugs
      identified via fuzzying.
    + This is going to be the last snapshot of the 1.17 development
      cycle; we only expect minor bug fixing and improvements until
      the 1.18.0 release.
  - Switch to meson buildsystem: Add meson BuildRequires and macros.
  - Update Source Url to new home.
  - Drop build_gl_backend define and conditional pkgconfig(egl) and
    pkgconfig(gl) BuildRequires: No longer supported.
  - Add generic c++_compiler and c_compiler BuildRequires: New
    dependencies.
  - Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
    Fixed upstream.
  - Add upstream bug fix patches:
    + cairo-1.17.8-fix-tee-compilation.patch
    + cairo-1.17.8-ft-font-missing-glyph.patch


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 1.18.0:
    + The first stable cairo release in five years should be cause
      for celebration.
    + All the API added in the 1.17 development cycle is now
      considered stable, and will not change.
    + Many thanks to all the contributors for this release.
    + The cairo-sphinx tool has been removed; we could not find any
      instruction on how to use it, and no user answered our call for
      help. If you were using cairo-sphinx, please reach out to the
      cairo maintainers.
    + Cairo now implements Type 3 color fonts for PDF.
    + Multiple documentation fixes, to ensure that the cairo API
      reference is up to date. Also fixed multiple compiler warnings
      generated when building cairo.
    + The XML surface has been removed; it was disabled by default
      when building cairo, and we could not find any downstream
      distributor that would enable it.
    + The Tee surface is now automatically enabled. Downstream
      distributors of cairo have been enabling for years it in order
      to build Firefox.
    + Fixed multiple issues with the DWrite font backend.
    + Improved the Quartz surface; mainly, Quartz surfaces now use
      the main display ColorSpace, speeding up rendering operations.
    + Cairo now hides all private symbols by default on every
      platform; the old "slim" symbols hack to alias internally used
      symbols has been dropped, in favor of using
      `-Bsymbolic-functions` with toolchains that support it.
    + Fixed multiple memory leaks in the code base and test suite,
      and general maintenance.
    + Added new API to expose the Pixman dithering filter to cairo
      patterns; this is currently implemented only for image
      surfaces.
  - Drop patches fixed upstream:
    + cairo-1.17.8-fix-tee-compilation.patch
    + cairo-1.17.8-ft-font-missing-glyph.patch
  - Rebase patches with quilt.
  - Stop passing xml=disabled to meson setup, xml backend is dropped.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.15.2:
    + Remove deprecated API.
    + Remove old API that takes cairo_matrix_t*.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.15.3:
    + RefPtr: This is now an alias for std::shared_ptr<>. These
      should be instatiated via Cairo::make_refptr_for_instance(),
      though that should never be necessary anyway outside of the
      cairomm implementation itself.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.15.4:
    + Use C++11 enum classes instead of old-style enums, and put some
      enums inside relevant class declarations:
    - Change Cairo::RegionOverlap enum to Cairo::Region::Overlap.
    - Change Cairo::PatternType enum to Cairo::Pattern::Type.
    - Change Cairo::FontWeight enum to Cairo::ToyFontFace::Weight.
    - Change Cairo::FontSlant enum to Cairo::ToyFontFace::Slant.
    - Change Cairo::SurfaceType enum to Cairo::Surface::Type.
    - Change Cairo::HintMetrics enum to
      Cairo::FontOptions::HintMetrics.
    - Change Cairo::HintStyle enum to
      Cairo::FontOptions::HintStyle.
    - Change Cairo::Filter enum to Cairo::SurfacePattern::Filter.
    - Change Cairo::Extend enum to Cairo::Pattern::Extend.
    - Change Cairo::Format enum to Cairo::Surface::Format.
    - Change Cairo::DeviceType enum to Cairo::Device::DeviceType.
    - Change Cairo::LineJoin enum to Cairo::Context::LineJoin.
    - Change Cairo::LineCap enum to Cairo::Context::LineCap.
    - Change Cairo::FillRule enum to Cairo::Context::FillRule.
    - Change Cairo::Operator enum to Cairo::Context::Operator.
    + Build: Win32 / Visual Studio builds:
    - Require Visual Studio 2017.
    - Remove leftovers from removing deprecated Win32::create().
  - Stop using service for tarball, upstream releasing again.
  - Following the above: Drop libtool BuildRequires, and stop passing
    NOCONFIGURE=1 ./autogen.sh.


author: luc14n0@linuxmail.org
changelog:
  - Update to version 1.15.5:
    + enums.h: Guard the FT-specific include and the enum with an
      ifdef (fdo#100894).
    + Build: configure.ac: Require C++14, because libsigc++-3.0 does
      (fdo#100884).


author: dimstar@opensuse.org
changelog:
  - Export CXXFLAGS="-std=c++17" until upstream fixes this. Requires,
    as libsigc++-3.0 moved to C++17.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 1.16.0:
    + This is the first stable release in the cairomm-1.16 ABI
      series. It is parallel-installable with the cairomm-1.0 ABI.
    + Cairo:
    - Add Context::get_source_for_surface()
    - Fix a memory leak in RefPtr
    + Build:
    - Require C++17
    - Add NMake Makefiles. Remove the Visual Studio projects
    - Add support for building with Meson
    - Use __declspec(dllexport) when building cairomm on Visual
      Studio. Stop using gendef.exe
    - docs/reference/: Update for Doxygen >= 1.8.16
    + Tests:
    - Update the source code
    - Don't include deprecated Boost header files. Fix tests in
      Autotools builds
    + Documentation: README: Update with instructions for building
      cairomm.
  - Add meson BuildRequires and macros following upstreams port.
  - Add graphviz BuildRequires, needed now for building
    documentation.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.11.4:
    + Use (and require) C++11.
    + Add Script and ScriptSurface.
    + Context: get_surface_wrapper(): Handle
      CAIRO_SURFACE_TYPE_SCRIPT, returning a ScriptSurface.
    + Surface: get_device(): Handle CAIRO_SURFACE_TYPE_SCRIPT,
      returning a Script.
    + Wrap cairo script device and script surface APIs.
    + FtFontFace: Add get/set/unset_synthesize().
    + Update MSVC.Net 2010 project files.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.12.0:
    + Cairo::RefPtr: Add move constructors and move operator=().
    + MSVC build fixes.


author: zaitor@opensuse.org
changelog:
  - Update to version 1.12.2:
    + Remove new API that was not meant to be added in 1.12.1.
  - Changes from version 1.12.1:
    + C++11:
    - Use nullptr instead of 0.
    - Use override keyword on destructors.
    - Make operator bool() explicit.


author: dimstar@opensuse.org
changelog:
  - Rename to cairomm1_0: legacy package with the 1.0 API. The
    existing package 'cairomm' will remain to be the 'latest'
    version.


author: p.drouand@gmail.com
changelog:
  - Update to version 0.7.7
    + Correctly read escaped ':', '#', '!', '=' characters. The behavior
    is documented in the Properties javadocs (http://tinyurl.com/bprdgnk).
    This fixes CAL-37 (http://jira.qos.ch/browse/CAL-37)
  - Update build.xml.tar.bz2, rename it to build.xml-$VERSION and
    recompress it in xz format
  - Add a requirement to xz


author: fstrba@suse.com
changelog:
  - Added patch:
    * cal10n-0.7.7-sourcetarget.patch
    - Force java source and target levels to 1.6 in order to allow
      building with jdk9


author: fstrba@suse.com
changelog:
  - Modified patch:
    * cal10n-0.7.7-sourcetarget.patch
      + Build with source and target 8 to prepare for a possible
      removal of 1.6 compatibility
  - Run fdupes on documentation


author: David Anes <david.anes@suse.com>
changelog:
  - Update to 0.8.1:
    * This release adds JSR-269 support. In other words, verification
      of bundles can be performed at compilation time. See the related
      documentation for more details.
    * Fix issue with Eclipse not finding existing resources. With
      release 0.8.1, Eclipse will find bundles located under
      "src/main/resources" but still fail to find bundles located
      under "src/test/resources/".
    * When reading in bundles, the verify method in MessageKeyVerifier
      now uses the locale passed as parameter instead of always
      Locale.FR. This bug was reported by Dale Wijnand who also
      provided the releavant patch.
  - Update build.xml-0.7.7.tar.xz to build.xml-0.8.1.tar.xz with
    references to version 0.8.1 to build correctly versioned jar
    files.


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Fetch sources using source service from ch.qos git
  - Upgrade to the 10th commit after 0.8.1 calling it 0.8.1.10
  - Redo completely the packaging including the possibility to run
    tests if --with tests is specified
  - Add the cal10n-ant-task to built artifacts
  - Removed patch:
    * cal10n-0.7.7-sourcetarget.patch
      + changes factored into the build system


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Fetch the latest git revision: 12th commit after 0.8.1 calling
    it 0.8.1.12
  - Add a multibuild flavour to build the maven plugins
  - Added patch:
    * Fix-SupportedSourceVersion-warning.patch
      + fix the following: [WARNING] Supported source version
      'RELEASE_5' from annotation processor
      'ch.qos.cal10n.verifier.processor.CAL10NAnnotationProcessor'
      less than -source '1.7'
      + uncommitted change from the following pull request:
      https://github.com/qos-ch/cal10n/pull/10


author: Christophe Marin <christophe@krop.fr>
changelog:
  - Update to 24.04.80
    * New feature release
  - Changes since 24.02.2:
    * Use _L1
    * Remove 'ActiveDesignerFields' configuration from kcfg
    * Use missing [[nodiscard]]
    * Use isEmpty()


author: zaitor@opensuse.org
changelog:
  - Split out a new sub-package canberra-gtk-play-gnome: Currently
    there are no desktop-login, desktop-logout or session-ready
    sounds in the freedesktop sound theme, so installing this will
    require a different sound-theme for it to be operational. Having
    this in a own sub-package will avoid logspam about missing files.
    Fixes boo#953862.


author: zaitor@opensuse.org
changelog:
  - Split out libcanberra-gtk-devel and libcanberra-gtk3-devel
    sub-packages, this will make it possible for us to build
    dependant packages without having to pull in both gtk2 and gtk3.


author: dimstar@opensuse.org
changelog:
  - Do not require sound-theme-freedesktop by libcanberra0: if this
    is wanted on a default install, it is up to the DE pattern to
    recommend/require this - it is not needed for the libraries
    proper functioning.


author: sor.alexei@meowr.ru
changelog:
  - Remove the lynx build dependency: of questionable need.
  - Build for Gtk3 unconditionally.
  - Spec cleanup.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Stabilize build:
    + Pass --disable-oss to configure: alsa is enabled and used
      already.
    + Pass --enable-udev to configure: ensure it is not accidentally
      being disabled.
    + Add pkgconfig(libudev) BuildRequires: used to be pulled in
      indirectly.


author: Fabian Vogt <fvogt@suse.com>
changelog:
  - Don't recommend the gtk modules unconditionally. They already have
    conditional supplements.
  - Switch from packageand(x:y) to boolean dependencies
  - Use %license


author: Stefan Brüns <stefan.bruens@rwth-aachen.de>
changelog:
  - Ignore underlinking errors/warnings, libcanokey-qemu directly
    calls functions provided by qemu (without linking to it),
    (boo#1218620).
  - Move unversioned libcanokey-qemu.so to devel package
  - Add missing ldconfig post/postun calls


author: zaitor@opensuse.org
changelog:
  - Update to version 0.0.25:
    + Outline and spacing on C,G.
    + Improved terminals on numerous glyphs.
    + Weight/stem width fixes (k,G).
    + Port imrpovements from regular to bold.
    + Improved metrics.
    + Fixes to f-ligatures.
    + Shape fixes to some numerals.
    + Fixes to anchors > composited glyphs.


author: luc14n0@linuxmail.org
changelog:
  - Update to version 0.100:
    + Redesigned from scratch to interpolate cleanly from thin to
      extra bold. Currently targets the Google Fonts Latin Core and
      Pro glyph sets.
  - Update Url tag to https://wiki.gnome.org/Projects/CantarellFonts:
    current Cantarell Fonts' web page.
  - Add meson BuildRequires, replace configure/make/make_install
    macros with meson/meson_build/meson_install and remove call for
    gnome-autogen.sh. All of these changes reflect the upstream port
    to Meson build system.
  - Drop dos2unix BuildRequires: it's no longer required.


author: bjorn.lie@gmail.com
changelog:
  - Update to version 0.111:
    + Fix the wrongly assigned OS/2 weight class values that e.g. led
      to Extra Bold being selected when Bold was requested.
  - Changes from version 0.110:
    + Space everything a little bit tighter.
    + Scale down whiteCircle and blackCircle by 50%, makes password
      dots smaller.
    + Tweak feet of one.lf slightly for a more even appearance.
    + Revise lcaron, dcaron and tcaron for collision-free rendering
      even at bold weight. Will need kerning later.
    + Add draft of Cyrillic (GF Cyrillic Plus set), to be improved.
    + Equalize advance width of period, comma, colon, semicolon.
    + Build packages with prebuilt fonts baked in.
    + New contributed AppStream metadata translations for Slovak.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.200:
    + Respacing of uppercase letters in the regular master and
      complete thin and extra bold masters. Uppercase letters space
      better next to lowercase letters now. Cyrillics are more
      consistently spaced.
    + Tweak numerals some. Especially the "one" and fractions.
    + Various tweaks to various shapes across the board, especially
      symbols. Braces are curlier now. Detail tweaks to Cyrillics.
    + Basic mathy symbols and currency symbols now have tabular
      number width. I found no advantage to having proportional
      variants.
    + Removed .tosf numerals. Fiddly work without clear purpose.
    + Experimental alternative form of "l" without the tail.
      Accessible via the ss01 feature.
    + Added variable font, CFF2 flavor. postscriptBlueFuzz is set to
      1 explicitly to avoid rounding issues with blue zone coverage
      in FreeType.
    + Removed f-ligatures without their own Unicode code points, as
      the design doesn't currently need them. They were mainly added
      to fill up the Google glyph set.
    + The following glyphs now represent more than one Unicode code
      point to keep the glyph view tidier:
    - emdash: U+2014, U+2015
    - emspace: U+2001, U+2003
    - enspace: U+2000, U+2002
    - hyphen: U+002D, U+00AD, U+2010, U+2011
    - space: U+0020, U+00A0
    + In PDFs where the generator removed the text stream, copy-paste
      may lead to the others turning into the first.
    + Filled in hryvnia (U+20B4), tugrik (U+20AE) and tenge (U+20B8).
    + Static fonts use same rounding method as varLib uses for the
      variable font.
    + Fixed Ustraight-cy (U+04AE), ustraight-cy (U+04AF),
      Ustraightstroke-cy (U+04B0), ustraightstroke-cy (U+04B1), they
      didn't have a proper production name before and may not have
      been properly accessible.
    + Removed some building components that made it into the final
      font.
    + Limited anchor propagation to letters, excluding ligatures.
      Generate GDEF table properly.
    + Set one simple `gasp` table for hinted display for e.g.
      Windows.
    + Removed `ccmp` from the `aalt` lookup.
    + The OS/2 table fsType now says that no Digital Rights
      Management is applied to the fonts, the name table now says the
      fonts are OFL 1.1 licensed.
    + Internal housekeeping: Sources are stored in the open UFO and
      Designspace format now, with various cleanups like removed
      unused layers.
    + Internal housekeeping: Removed composite diacritics that served
      no design purpose.
  - Stop passing -Dconfigdir=%%{_fontsconfavaildir} to meson, no
    longer recognized.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.201:
    + Oopsie-release: The last one was missing pre-built binaries in
      the release tarball.
    + Use AFDKO's tx to compress the variable font in roughly half.
    + Updated translations.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.300:
    + Import Greek glyph set designed by Florian Fecher for GSoC
      2018. No kerning, might need a slight respacing. Imported
      anyway because someting is better than nothing.
    + Correct positioning of dotaccentcomb.case.
    + Correct mark positioning in caroncomb.case.
    + Correct appearance of ustraightstroke in variable font, the
      overlap became visible at smaller, autohinted sizes.
    + Correct bar positioning in Ustraightstroke and
      ustraightstroke.
    + Correct anchor positioning in Y.
    + Internal: Consolidate various anchors in composites into the
      base outline glyphs, to reduce the chance they get out sync.
    + Updated translations.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.301:
    + Oopsie-release: The last one was missing PostScript names for
      the new glyphs. Only relevant for when extracting text from
      PDFs where the generator omitted the text stream.
    + Rounded coordinates of macronbelowcomb.narrow and
      macroncomb.narrow.case. Leftovers from when they were scaled
      components.
    + Internal: Removed stale layers and data, added normalization
      script to prune unnecessary data. import-glyphs.py also imports
      PostScript names now.


author: Bjørn Lie <bjorn.lie@gmail.com>
changelog:
  - Update to version 0.303.1:
    + Add missing font.
  - Changes from version 0.303:
    + Actually update the version number in the fonts.
  - Changes from version 0.302:
    + Maintenance release: Make the variable font the default, only
      build statics on demand. Also build two packages with variable
      and static fonts. Packagers can chose the statics package if
      they run into problems with the variable font, but you should
      probably not install both at the same time.
    + Amended OS/2 super- and subscript values so that new Pango can
      use them properly.
    + Update production names for Jacute, bulletoperator,
      commercialMinusSign, divisionslash, notidentical,
      ringcomb_acutecomb and ringcomb_acutecomb.case.
    + Updated appstream translations.


author: stefan.bruens@rwth-aachen.de
changelog:
  - Correct the license tag, Capstone is BSD-3-Clause
  - Provide python3 bindings
  - Rename bindings subpackage to docs, it does not contain any
    bindings but documentation
  - Package some more documentation
  - Build with %{optflags}


author: brogers@suse.com
changelog:
  - Update to 3.0.5
    * build static library (but still don't install), since build
    explicitly links cstool against it


author: Luigi Baldoni <aloisio@gmx.com>
changelog:
  - Update to version 4.0.1
    [ Core ]
    * Fix some issues for packaging (Debian, Gentoo).
    * Better support for building with Mingw.
    * cstool has new option -s to turn on skipdata mode.
    * cstool -v now report build settings of the core.
    * Add suite/capstone_get_setup.c so users can integrate with
      their own code
    * to retrieve Capstone settings at build time.
    [ Arm ]
    * Fix 4.0 regression: the tbh [r0, r1, lsl #1] instruction
      sets the operand.shift.value back again.
    * Remove ARM_REG_PC group for BX instruction.
    [ X86 ]
    * Fix: endbr32 and endbr64 instructions are now properly
      decoded in both CS_MODE_32 and CS_MODE_64.
    [ M680X ]
    * Fix some issues reported by clang-analyzer.
    [ Python ]
    * Fix skipdata setup.
    * Add getter/setter for skipdata_mnem, skipdata_callback.
    version 4.0:
    [ Core ]
    * New APIs: cs_regs_access()
    * Add new options for cs_option(): CS_OPT_MNEMONIC &
      CS_OPT_UNSIGNED & CS_OPT_SYNTAX_MASM.
    * Various updates & bugfixes for all architectures.
    * Add 4 new architectures: EVM, M68K, M680X & TMS320C64x.
    * Add new group types: CS_GRP_PRIVILEGE &
      CS_GRP_BRANCH_RELATIVE.
    * Add new error types: CS_ERR_X86_MASM.
    [ X86 ]
    * Add XOP code condition type in x86_xop_cc.
    * Add some info on encoding to cs_x86 in cs_x86_encoding.
    * Add register flags update in cs_x86.{eflags, fpu_flags}
    * Change cs_x86.disp type from int32_t to int64_t.
    * Add new groups: X86_GRP_VM & X86_GRP_FPU.
    * Lots of new instructions (AVX)
    [ ARM64 ]
    * Add instruction ARM64_INS_NEGS & ARM64_INS_NGCS.
    [ Mips ]
    * Add mode CS_MODE_MIPS2.
    [ PPC ]
    * Change cs_ppc_op.imm type from int32_t to int64_t.
    * Add new groups: PPC_GRP_ICBT, PPC_GRP_P8ALTIVEC,
      PPC_GRP_P8VECTOR & PPC_GRP_QPX.
    * Lots of new instructions (QPX among them)
    [ Sparc ]
    * Change cs_sparc_op.imm type from int32_t to int64_t.
    [ Binding ]
    * New bindings: PowerShell & VB6
  - Bumped sover to 4
  - Spec cleanup


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Rename -docs subpackage to -doc to follow openSUSE practices.
  - Descriptions: say what the package is, not what it wants to be.


author: Dirk Mueller <dmueller@suse.com>
changelog:
  - update to 4.0.2
    Windows kernel-mode driver support
    - Add armv8, ppc32 & thumbv8 modes
    - Print instruction ID
    - Support CS_OPT_UNSIGNED for ATT syntax
    - Fix operand size for some instructions
    - Fix LOCK prefixes
    - Recognize xacquire/xrelease prefix
    - Fix call/jmp access mode of mem operand
    - Add ENDBR32, ENDBR64 to reduce mode
    - Other minor fixes
    - Support CS_OPT_UNSIGNED
    - Fix register access flags for memory instructions
    - Fix UMOV vess
    - Update writeback for STR_POST_REG
    - Store correct register value in op.reg_pair
    - BDZLA is absolute branch
    - Fix truncated 64bit imm operand
    - Fix base/index printing
    - Fix skipdata struct being destroyed
    - Add __repr__ for capstone.CsInsn
    - Fix Java bindings to use pointers instead of longs
    - Fix x86_op record


author: Martin Wilck <mwilck@suse.com>
changelog:
  - Enable static library, and add libcapstone-devel-static subpackage
    (this is helpful for qemu-linux-user)


author: Andrea Manzini <andrea.manzini@suse.com>
changelog:
  - Update to version 0.6.0~0:
    * README and documentation improvements
    * Read the rustc path passed by Cargo; fixes #90
    * Read location of Cargo from the environment variable Cargo sets for third-party subcommands
    * Add a note on sccache version compatibility to CHANGELOG.md
    * Panic on compilation commands where we fail to parse the arguments instead of silently ignoring the error
    * Specifying the binary-scanning feature is no longer needed
    * Pass options such as --offline to `cargo metadata`
    * Pass on arguments from `cargo auditable` invocation to the rustc wrapper; prep work towards fixing #83
    * Bump rust-audit-info to 0.5.2
    * Bump auditable-serde version to 0.5.2
    * Correctly fill in the source even in dependency entries when converting to cargo-lock data format
    * Drop the roundtrip through &str in semver::Version; now that semver 1.0 has shipped the versions are API-compatible and this is no longer necessary
    * Release auditable-info 0.6.1
    * Bump all the version requirements for things depending on auditable-info
    * Fix audit_info_from_slice function signature


author: Soc Virnyl Estela <uncomfy+openbuildservice@uncomfyhalomacro.pl>
changelog:
  - Update specfile:
    * remove cargo_config file
  - Update service file:
    * replace obsoleted "disabled" mode with "manual"
  - Update to version 0.6.2~0:
    * Update the lockfile
    * New releases of cargo-auditable and auditable-serde
    * Use a separate project for the custom rustc path tests. Fixes intermittent test failures due to race conditions
    * Revert "add commit hashes to git sources"
    * Fix cyclic dependency graph being encoded
    * Revert "An unsuccessful attempt to fix cycles caused by dev-dependencies"
    * An unsuccessful attempt to fix cycles caused by dev-dependencies
    * Fix typo
    * Add comment
    * Add a test for an issue with cyclic dependencies reported at https://github.com/rustsec/rustsec/issues/1043
    * Fix auditable-serde example not building
    * upgrade dependency miniz_oxide to 0.6.0
    * fix formatting errors
    * apply clippy lints for --all-features
    * improve the internal docs and comments
    * apply clippy lints
    * add missing sources for one of test fixtures
    * add commit hashes to git sources
    * Run all tests on CI
    * cargo fmt
    * Run `cargo clean` in tests to get rid of stale binaries
    * Fix date in changelog
    * Populate changelog
    * Bump auditable-info version in rust-audit-info
    * Add auditable-info changelog
    * Bump versions following cargo-lock bump
    * auditable-serde: bump `cargo-lock` to v9
    * switch to UNRELEASED
    * Update CHANGELOG.md
    * Print a better error if calling rustc fails
    * Drop unused import
    * placate Clippy
    * Don't inject audit info if --print argument is passed to rustc
    * Reflect the version change in Cargo.lock
    * Remove space from keywords
    * bump version to 0.6.1
    * Fix date in changelog
    * Update CHANGELOG.md
    * Add publish=false
    * Commit the generated manpage
    * Add the code for generating a manpage; rather rudimentary so far, but it's a starting point
    * Explain relation to supply chain attacks
    * Add keywords to the Cargo manifest
    * Revert "generate a man page for cargo auditable"
    * fix formatting
    * fix review feedback, relocate file to under OUT_DIR, don't use anyhow and also commit the lock file
    * generate a man page for cargo auditable
    * Add Clippy suppression
    * placate clippy
    * commit Cargo.lock
    * Sync to latest object file writing code from rustc
    * Fix examples in docs
    * Allow redundant field names
    * Apply clippy suggestion: match -> if let
    * Check for clippy and format in CI
    * Apply clippy suggestions
    * Run CI with --locked


author: william.brown@suse.com
changelog:
  - Update to version 0.6.4~0:
    * Release cargo-auditable v0.6.4
    * Correctly attribute changelog file addition in changelog
    * Add changelog for auditable-extract
    * Verify various feature combinations in CI
    * Upgrade wasmparser to remove dependencies with `unsafe`
    * Add LoongArch support
    * cargo fmt
    * Move doc headers to README.md and point rustdoc to them, so that we have nice crates.io pages
    * Expand on the note about WebAssembly parsing
    * Populate changelogs
    * Resume bragging about all dependencies being safe, now that there is a caveat below
    * drop fuzz Cargo.lock to always fuzz against latest versions
    * Bump `cargo auditable` version
    * Mention WASM support in README
    * Revert "Be super duper extra sure both MinGW and MSVC are tested on CI"
    * Be super duper extra sure both MinGW and MSVC are tested on CI
    * Add wasm32 targets to CI for more platforms
    * Don't pass --target twice in tests
    * Install WASM toolchain in CI
    * cargo fmt
    * Add WASM end-to-end test
    * cargo fmt
    * Update documentation to mention the WASM feature
    * cargo fmt
    * Plumb WASM parsing feature through the whole stack
    * Make WASM parsing an optional, non-default feature
    * Add a fuzzing harness for WASM parsing
    * Rewritten WASM parsing to avoid heap allocations
    * Initial WASM extraction support
    * Nicer assertion
    * Drop obsolete comment
    * Clarify that embedding the compiler version has shipped.
    * Fixed section name for WASM
    * Unified and more robust platform detection. Fixed wasm build process
    * Initial WASM support
    * More robust platform detection for picking the binary format
    * Fix Windows CI to run both -msvc and -gnu
    * Use the correct link.exe flag for preserving the specified symbol even if it is unused
    * Fix Windows
    * Fix tests on Rust 1.77
    * Placate clippy
    * Oopps, I meant components field
    * Also remove the dependencies field if empty
    * Use serde_json with order preservation feature to get a more compressible JSON after workarounds
    * Work around cyclonedx-bom limitations to produce minified JSON
    * Also record the dependency kind
    * cyclonedx-bom: also record PURL
    * Also write the dependency tree
    * Clear the serial number in the minimal CycloneDX variant
    * Prototype impl of auditable2cdx
    * Fill in auditable2cdx dependencies
    * Initial auditable2cdx boilerplace
    * add #![forbid(unsafe_code)]
    * Initial implementation of auditable-to-cyclonedx conversion
    * Add the necessary dependencies to auditable-cyclonedx
    * Initial dummy package for auditable-cyclonedx


author: asn@cryptomilk.org
changelog:
  - Update to version 0.9.6~git0.68e65ad:
    * Prepare for release
    * Bump cargo
    * Support custom paths for data files as it is available for includes
    * Fix the datadir description
    * Change the configuration paths for datadir
    * Add datadir destination path customization
    * Suppress warning about dead code for Common
    * Add datadir support
    * Make sure the right rust is used on deploy
    * Bump the edition in the examples


author: asn@cryptomilk.org
changelog:
  - Update to version 0.9.11~git0.41f5562:
    * Prepare for release
    * Fix clippy warnings
    * Versions bump
    * Add back the deps.rs badge
    * Increase the regex requirement
    * Prepare for release
    * Bump cargo
    * Add support for Haiku Operating System
    * Add udbserver to users
    * Extend the coverage further
    * Fix the code coverage script
    * Fix subcommand fallback support
    * Print the issued commands
    * Fix testing cross compilation
    * Bump cargo-metadata
    * Bump cbindgen
    * Support rustc-1.60 and following
    * Update to clap-3.1 and cargo-0.61
    * Prepare for release
    * Do not use the patch version in macOS -install_name
    * Add Android to the build targets supported by LibType
    * Make nightly clippy happy
    * Simplify a writln
    * Prepare for release
    * Bump cargo version
    * Remove newlines from the description
    * Make the default destdir None
    * CI: use MSYS2 cargo package for example project
    * Print the PKG_CONFIG_PATH in verbose mode


author: asn@cryptomilk.org
changelog:
  - Update to version 0.9.15~git0.2d3044b:
    * Prepare for release
    * Update to cargo-0.67 and clap-4
    * macos: Allow larger install_name entries
    * Fix the new clippy lints
    * Don't include version in soname ELF header if versioning is disabled
    * Use get_many instead of values_of_lossy
    * Use macos-12 for the macos runner
    * Add job deps
    * Generate paths relative to ${prefix} in the pkg-config file even if --libdir or --includedir are given
    * Compact the main CI
    * Fix more warnings in the main CI
    * Use a custom release profile to strip binaries
    * ci(deploy): Use musl abi for aarch64 linux binary, add i686 linux
    * Remove msys2 test
    * Update the example-project CI
    * Make sure the supported rustc version is evident
    * Use the default compiler to build a static binary for musl
    * Save all the linux binaries
    * Prepare for release
    * Add pre-built ppc64le and aarch64 linux binaries
    * Simplify the deploy script
    * Fix new clippy lints
    * Update to cargo-0.66
    * Use dtolnay/rust-toolchain
    * Remove actions-rs/cargo
    * Prepare for release
    * add support for illumos
    * Bump cargo version
    * Prepare for release
    * Bump cargo to 0.64
    * Install the windows DLL in the libdir if it is custom
    * Fix typo on readme
    * Bump the codecov action
    * Add sonames on musl


author: bjorn.lie@gmail.com
changelog:
  - Update to version 0.9.27~git0.54774e0:
    * Complete the soversion granularity
    * Bump cbindgen
    * Make sure the version variables are consistent
    * Fix sover detection for 0-based versioning
    * Bump cargo version
    * Bump cbindgen
    * Do not pass the token to clippy-check
  - Switch _service to manual.


author: david.mulder@suse.com
changelog:
  - Update to version 0.9.32~git0.56dfe34:
    * Prepare for release
    * Bump cargo version
    * Use clone_from/clone_into
    * Do not install the versioned links and lib on Android
    * docs: add rustls-ffi to README users list
    * Bump the msrv again
    * Bump msrv
    * Bump cargo version
    * Match the beaviour of meson regarding relative paths in the install directories
    * Bump cargo version


author: Enrico Belleri <kilgore.trout@idesmi.eu>
changelog:
  - Update to version 0.10.3~git0.ee7d7ef:
    * Wire in the heuristics
    * Implement heuristics for target-specific install paths
    * Fix the generated header fingerprinting logic
    * Make notice about missing windows debug files verbose-only
    * Update dependencies
    * Require cargo 0.80.0
  - Use macros from cargo-packaging
  - Remove cargo_config: contained in vendor.tar
  - Remove cargo_audit service: now part of cargo_vendor
  - Remove custom rustflags and let the macros set them instead


author: William Brown <william.brown@suse.com>
changelog:
  - Update vendored dependencies
  - Add supporting sources for cargo metadata extraction
    * cargo-packaging-1.2.0+0.tar.xz
    * cargo_config
    * vendor.tar.xz


author: william.brown@suse.com
changelog:
  - bsc#1212226 - add rust-packaging compat
  - Update to version 1.2.0+2:
    * Default flags
    * Add buildflags


author: william.brown@suse.com
changelog:
  - bsc#1222175 - prevent stripping debug info
  - Update to version 1.2.0+5:
    * Prevent stripping debuginfo in release by default (#7)


author: William Brown <william.brown@suse.com>
changelog:
  Version 1.78.0 (2024-05-02)
    Language
  --------
  - [Stabilize `#[cfg(target_abi = ...)]`](https://github.com/rust-lang/rust/pull/119590/)
  - [Stabilize the `#[diagnostic]` namespace and `#[diagnostic::on_unimplemented]` attribute](https://github.com/rust-lang/rust/pull/119888/)
  - [Make async-fn-in-trait implementable with concrete signatures](https://github.com/rust-lang/rust/pull/120103/)
  - [Make matching on NaN a hard error, and remove the rest of `illegal_floating_point_literal_pattern`](https://github.com/rust-lang/rust/pull/116284/)
  - [static mut: allow mutable reference to arbitrary types, not just slices and arrays](https://github.com/rust-lang/rust/pull/117614/)
  - [Extend `invalid_reference_casting` to include references casting to bigger memory layout](https://github.com/rust-lang/rust/pull/118983/)
  - [Add `non_contiguous_range_endpoints` lint for singleton gaps after exclusive ranges](https://github.com/rust-lang/rust/pull/118879/)
  - [Add `wasm_c_abi` lint for use of older wasm-bindgen versions](https://github.com/rust-lang/rust/pull/117918/)
    This lint currently only works when using Cargo.
  - [Update `indirect_structural_match` and `pointer_structural_match` lints to match RFC](https://github.com/rust-lang/rust/pull/120423/)
  - [Make non-`PartialEq`-typed consts as patterns a hard error](https://github.com/rust-lang/rust/pull/120805/)
  - [Split `refining_impl_trait` lint into `_reachable`, `_internal` variants](https://github.com/rust-lang/rust/pull/121720/)
  - [Remove unnecessary type inference when using associated types inside of higher ranked `where`-bounds](https://github.com/rust-lang/rust/pull/119849)
  - [Weaken eager detection of cyclic types during type inference](https://github.com/rust-lang/rust/pull/119989)
  - [`trait Trait: Auto {}`: allow upcasting from `dyn Trait` to `dyn Auto`](https://github.com/rust-lang/rust/pull/119338)
    Compiler
  --------
  - [Made `INVALID_DOC_ATTRIBUTES` lint deny by default](https://github.com/rust-lang/rust/pull/111505/)
  - [Increase accuracy of redundant `use` checking](https://github.com/rust-lang/rust/pull/117772/)
  - [Suggest moving definition if non-found macro_rules! is defined later](https://github.com/rust-lang/rust/pull/121130/)
  - [Lower transmutes from int to pointer type as gep on null](https://github.com/rust-lang/rust/pull/121282/)
    Target changes:
  - [Windows tier 1 targets now require at least Windows 10](https://github.com/rust-lang/rust/pull/115141/)
    - [Enable CMPXCHG16B, SSE3, SAHF/LAHF and 128-bit Atomics in tier 1 Windows](https://github.com/rust-lang/rust/pull/120820/)
  - [Add `wasm32-wasip1` tier 2 (without host tools) target](https://github.com/rust-lang/rust/pull/120468/)
  - [Add `wasm32-wasip2` tier 3 target](https://github.com/rust-lang/rust/pull/119616/)
  - [Rename `wasm32-wasi-preview1-threads` to `wasm32-wasip1-threads`](https://github.com/rust-lang/rust/pull/122170/)
  - [Add `arm64ec-pc-windows-msvc` tier 3 target](https://github.com/rust-lang/rust/pull/119199/)
  - [Add `armv8r-none-eabihf` tier 3 target for the Cortex-R52](https://github.com/rust-lang/rust/pull/110482/)
  - [Add `loongarch64-unknown-linux-musl` tier 3 target](https://github.com/rust-lang/rust/pull/121832/)
    Refer to Rust's [platform support page][platform-support-doc]
    for more information on Rust's tiered platform support.
    Libraries
  ---------
  - [Bump Unicode to version 15.1.0, regenerate tables](https://github.com/rust-lang/rust/pull/120777/)
  - [Make align_offset, align_to well-behaved in all cases](https://github.com/rust-lang/rust/pull/121201/)
  - [PartialEq, PartialOrd: document expectations for transitive chains](https://github.com/rust-lang/rust/pull/115386/)
  - [Optimize away poison guards when std is built with panic=abort](https://github.com/rust-lang/rust/pull/100603/)
  - [Replace pthread `RwLock` with custom implementation](https://github.com/rust-lang/rust/pull/110211/)
  - [Implement unwind safety for Condvar on all platforms](https://github.com/rust-lang/rust/pull/121768/)
  - [Add ASCII fast-path for `char::is_grapheme_extended`](https://github.com/rust-lang/rust/pull/121138/)
    Stabilized APIs
  - [`impl Read for &Stdin`](https://doc.rust-lang.org/stable/std/io/struct.Stdin.html#impl-Read-for-%26Stdin)
  - [Accept non `'static` lifetimes for several `std::error::Error` related implementations](https://github.com/rust-lang/rust/pull/113833/)
  - [Make `impl<Fd: AsFd>` impl take `?Sized`](https://github.com/rust-lang/rust/pull/114655/)
  - [`impl From<TryReserveError> for io::Error`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#impl-From%3CTryReserveError%3E-for-Error)
    These APIs are now stable in const contexts:
  - [`Barrier::new()`](https://doc.rust-lang.org/stable/std/sync/struct.Barrier.html#method.new)
    Cargo
  -----
  - [Stabilize lockfile v4](https://github.com/rust-lang/cargo/pull/12852/)
  - [Respect `rust-version` when generating lockfile](https://github.com/rust-lang/cargo/pull/12861/)
  - [Control `--charset` via auto-detecting config value](https://github.com/rust-lang/cargo/pull/13337/)
  - [Support `target.<triple>.rustdocflags` officially](https://github.com/rust-lang/cargo/pull/13197/)
  - [Stabilize global cache data tracking](https://github.com/rust-lang/cargo/pull/13492/)
    Misc
  ----
  - [rustdoc: add `--test-builder-wrapper` arg to support wrappers such as RUSTC_WRAPPER when building doctests](https://github.com/rust-lang/rust/pull/114651/)
    Compatibility Notes
  - [Many unsafe precondition checks now run for user code with debug assertions enabled](https://github.com/rust-lang/rust/pull/120594/)
    This change helps users catch undefined behavior in their code, though the details of how much is checked are generally not stable.
  - [riscv only supports split_debuginfo=off for now](https://github.com/rust-lang/rust/pull/120518/)
  - [Consistently check bounds on hidden types of `impl Trait`](https://github.com/rust-lang/rust/pull/121679)
  - [Change equality of higher ranked types to not rely on subtyping](https://github.com/rust-lang/rust/pull/118247)
  - [When called, additionally check bounds on normalized function return type](https://github.com/rust-lang/rust/pull/118882)
  - [Expand coverage for `arithmetic_overflow` lint](https://github.com/rust-lang/rust/pull/119432/)
  - [Fix detection of potential interior mutability in `const` initializers](https://github.com/rust-lang/rust/issues/121250)
    This code was accidentally accepted. The fix can break generic code that borrows a value of unknown type,
    as there is currently no way to declare "this type has no interior mutability". In the future, stabilizing
    the [`Freeze` trait](https://github.com/rust-lang/rust/issues/121675) will allow proper support for such code.


author: Xiaoguang Wang <xiaoguang.wang@suse.com>
changelog:
  Version 1.79.0 (2024-06-13)
    Language
  --------
  - [Stabilize inline `const {}` expressions.](https://github.com/rust-lang/rust/pull/104087/)
  - [Prevent opaque types being instantiated twice with different regions within the same function.](https://github.com/rust-lang/rust/pull/116935/)
  - [Stabilize WebAssembly target features that are in phase 4 and 5.](https://github.com/rust-lang/rust/pull/117457/)
  - [Add the `redundant_lifetimes` lint to detect lifetimes which are semantically redundant.](https://github.com/rust-lang/rust/pull/118391/)
  - [Stabilize the `unnameable_types` lint for public types that can't be named.](https://github.com/rust-lang/rust/pull/120144/)
  - [Enable debuginfo in macros, and stabilize `-C collapse-macro-debuginfo` and `#[collapse_debuginfo]`.](https://github.com/rust-lang/rust/pull/120845/)
  - [Propagate temporary lifetime extension into `if` and `match` expressions.](https://github.com/rust-lang/rust/pull/121346/)
  - [Restrict promotion of `const fn` calls.](https://github.com/rust-lang/rust/pull/121557/)
  - [Warn against refining impls of crate-private traits with `refining_impl_trait` lint.](https://github.com/rust-lang/rust/pull/121720/)
  - [Stabilize associated type bounds (RFC 2289).](https://github.com/rust-lang/rust/pull/122055/)
  - [Stabilize importing `main` from other modules or crates.](https://github.com/rust-lang/rust/pull/122060/)
  - [Check return types of function types for well-formedness](https://github.com/rust-lang/rust/pull/115538)
  - [Rework `impl Trait` lifetime inference](https://github.com/rust-lang/rust/pull/116891/)
  - [Change inductive trait solver cycles to be ambiguous](https://github.com/rust-lang/rust/pull/122791)
    Compiler
  --------
  - [Define `-C strip` to only affect binaries, not artifacts like `.pdb`.](https://github.com/rust-lang/rust/pull/115120/)
  - [Stabilize `-Crelro-level` for controlling runtime link hardening.](https://github.com/rust-lang/rust/pull/121694/)
  - [Stabilize checking of `cfg` names and values at compile-time with `--check-cfg`.](https://github.com/rust-lang/rust/pull/123501/)
    * Note that this only stabilizes the compiler part, the Cargo part is still unstable in this release.*
  - [Add `aarch64-apple-visionos` and `aarch64-apple-visionos-sim` tier 3 targets.](https://github.com/rust-lang/rust/pull/121419/)
  - [Add `riscv32ima-unknown-none-elf` tier 3 target.](https://github.com/rust-lang/rust/pull/122696/)
  - [Promote several Windows targets to tier 2](https://github.com/rust-lang/rust/pull/121712): `aarch64-pc-windows-gnullvm`, `i686-pc-windows-gnullvm`, and `x86_64-pc-windows-gnullvm`.
    Refer to Rust's [platform support page][platform-support-doc]
    for more information on Rust's tiered platform support.
    Libraries
  ---------
  - [Implement `FromIterator` for `(impl Default + Extend, impl Default + Extend)`.](https://github.com/rust-lang/rust/pull/107462/)
  - [Implement `{Div,Rem}Assign<NonZero<X>>` on `X`.](https://github.com/rust-lang/rust/pull/121952/)
  - [Document overrides of `clone_from()` in core/std.](https://github.com/rust-lang/rust/pull/122201/)
  - [Link MSVC default lib in core.](https://github.com/rust-lang/rust/pull/122268/)
  - [Caution against using `transmute` between pointers and integers.](https://github.com/rust-lang/rust/pull/122379/)
  - [Enable frame pointers for the standard library.](https://github.com/rust-lang/rust/pull/122646/)
    Stabilized APIs
  - [`{integer}::unchecked_add`](https://doc.rust-lang.org/stable/core/primitive.i32.html#method.unchecked_add)
  - [`{integer}::unchecked_mul`](https://doc.rust-lang.org/stable/core/primitive.i32.html#method.unchecked_mul)
  - [`{integer}::unchecked_sub`](https://doc.rust-lang.org/stable/core/primitive.i32.html#method.unchecked_sub)
  - [`<[T]>::split_at_unchecked`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_at_unchecked)
  - [`<[T]>::split_at_mut_unchecked`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.split_at_mut_unchecked)
  - [`<[u8]>::utf8_chunks`](https://doc.rust-lang.org/stable/core/primitive.slice.html#method.utf8_chunks)
  - [`str::Utf8Chunks`](https://doc.rust-lang.org/stable/core/str/struct.Utf8Chunks.html)
  - [`str::Utf8Chunk`](https://doc.rust-lang.org/stable/core/str/struct.Utf8Chunk.html)
  - [`<*const T>::is_aligned`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.is_aligned)
  - [`<*mut T>::is_aligned`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.is_aligned-1)
  - [`NonNull::is_aligned`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.is_aligned)
  - [`<*const [T]>::len`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.len)
  - [`<*mut [T]>::len`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.len-1)
  - [`<*const [T]>::is_empty`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.is_empty)
  - [`<*mut [T]>::is_empty`](https://doc.rust-lang.org/stable/core/primitive.pointer.html#method.is_empty-1)
  - [`NonNull::<[T]>::is_empty`](https://doc.rust-lang.org/stable/core/ptr/struct.NonNull.html#method.is_empty)
  - [`CStr::count_bytes`](https://doc.rust-lang.org/stable/core/ffi/c_str/struct.CStr.html#method.count_bytes)
  - [`io::Error::downcast`](https://doc.rust-lang.org/stable/std/io/struct.Error.html#method.downcast)
  - [`num::NonZero<T>`](https://doc.rust-lang.org/stable/core/num/struct.NonZero.html)
  - [`path::absolute`](https://doc.rust-lang.org/stable/std/path/fn.absolute.html)
  - [`proc_macro::Literal::byte_character`](https://doc.rust-lang.org/stable/proc_macro/struct.Literal.html#method.byte_character)
  - [`proc_macro::Literal::c_string`](https://doc.rust-lang.org/stable/proc_macro/struct.Literal.html#method.c_string)
    These APIs are now stable in const contexts:
  - [`Atomic*::into_inner`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicUsize.html#method.into_inner)
  - [`io::Cursor::new`](https://doc.rust-lang.org/stable/std/io/struct.Cursor.html#method.new)
  - [`io::Cursor::get_ref`](https://doc.rust-lang.org/stable/std/io/struct.Cursor.html#method.get_ref)
  - [`io::Cursor::position`](https://doc.rust-lang.org/stable/std/io/struct.Cursor.html#method.position)
  - [`io::empty`](https://doc.rust-lang.org/stable/std/io/fn.empty.html)
  - [`io::repeat`](https://doc.rust-lang.org/stable/std/io/fn.repeat.html)
  - [`io::sink`](https://doc.rust-lang.org/stable/std/io/fn.sink.html)
  - [`panic::Location::caller`](https://doc.rust-lang.org/stable/std/panic/struct.Location.html#method.caller)
  - [`panic::Location::file`](https://doc.rust-lang.org/stable/std/panic/struct.Location.html#method.file)
  - [`panic::Location::line`](https://doc.rust-lang.org/stable/std/panic/struct.Location.html#method.line)
  - [`panic::Location::column`](https://doc.rust-lang.org/stable/std/panic/struct.Location.html#method.column)
    Cargo
  -----
  - [Prevent dashes in `lib.name`, always normalizing to `_`.](https://github.com/rust-lang/cargo/pull/12783/)
  - [Stabilize MSRV-aware version requirement selection in `cargo add`.](https://github.com/rust-lang/cargo/pull/13608/)
  - [Switch to using `gitoxide` by default for listing files.](https://github.com/rust-lang/cargo/pull/13696/)
  - [Error on `[project]` in Edition 2024; `cargo fix --edition` will change it to `[package]`.](https://github.com/rust-lang/cargo/pull/13747/)
    Rustdoc
  -----
  - [Always display stability version even if it's the same as the containing item.](https://github.com/rust-lang/rust/pull/118441/)
  - [Show a single search result for items with multiple paths.](https://github.com/rust-lang/rust/pull/119912/)
  - [Support typing `/` in docs to begin a search.](https://github.com/rust-lang/rust/pull/123355/)
    Misc
  ----
    Compatibility Notes
  - [Update the minimum external LLVM to 17.](https://github.com/rust-lang/rust/pull/122649/)
  - [`RustcEncodable` and `RustcDecodable` are soft-destabilized, to be removed
    from the prelude in next edition.](https://github.com/rust-lang/rust/pull/116016/)
  - [The `wasm_c_abi` future-incompatibility lint will warn about use of the
    non-spec-compliant C ABI.](https://github.com/rust-lang/rust/pull/117918/)
    Use `wasm-bindgen v0.2.88` to generate forward-compatible bindings.
  - [Check return types of function types for well-formedness](https://github.com/rust-lang/rust/pull/115538)


author: Xiaoguang Wang <xiaoguang.wang@suse.com>
changelog:
  Version 1.81.0 (2024-09-05)
    Language
  --------
  - [Abort on uncaught panics in `extern "C"` functions.](https://github.com/rust-lang/rust/pull/116088/)
  - [Fix ambiguous cases of multiple `&` in elided self lifetimes.](https://github.com/rust-lang/rust/pull/117967/)
  - [Stabilize `#[expect]` for lints (RFC 2383),](https://github.com/rust-lang/rust/pull/120924/) like `#[allow]` with a warning if the lint is _not_ fulfilled.
  - [Change method resolution to constrain hidden types instead of rejecting method candidates.](https://github.com/rust-lang/rust/pull/123962/)
  - [Bump `elided_lifetimes_in_associated_constant` to deny.](https://github.com/rust-lang/rust/pull/124211/)
  - [`offset_from`: always allow pointers to point to the same address.](https://github.com/rust-lang/rust/pull/124921/)
  - [Allow constraining opaque types during subtyping in the trait system.](https://github.com/rust-lang/rust/pull/125447/)
  - [Allow constraining opaque types during various unsizing casts.](https://github.com/rust-lang/rust/pull/125610/)
  - [Deny keyword lifetimes pre-expansion.](https://github.com/rust-lang/rust/pull/126762/)
    Compiler
  --------
  - [Make casts of pointers to trait objects stricter.](https://github.com/rust-lang/rust/pull/120248/)
  - [Check alias args for well-formedness even if they have escaping bound vars.](https://github.com/rust-lang/rust/pull/123737/)
  - [Deprecate no-op codegen option `-Cinline-threshold=...`.](https://github.com/rust-lang/rust/pull/124712/)
  - [Re-implement a type-size based limit.](https://github.com/rust-lang/rust/pull/125507/)
  - [Properly account for alignment in `transmute` size checks.](https://github.com/rust-lang/rust/pull/125740/)
  - [Remove the `box_pointers` lint.](https://github.com/rust-lang/rust/pull/126018/)
  - [Ensure the interpreter checks bool/char for validity when they are used in a cast.](https://github.com/rust-lang/rust/pull/126265/)
  - [Improve coverage instrumentation for functions containing nested items.](https://github.com/rust-lang/rust/pull/127199/)
  - Target changes:
    - [Add Tier 3 `no_std` Xtensa targets:](https://github.com/rust-lang/rust/pull/125141/) `xtensa-esp32-none-elf`, `xtensa-esp32s2-none-elf`, `xtensa-esp32s3-none-elf`
    - [Add Tier 3 `std` Xtensa targets:](https://github.com/rust-lang/rust/pull/126380/) `xtensa-esp32-espidf`, `xtensa-esp32s2-espidf`, `xtensa-esp32s3-espidf`
    - [Add Tier 3 i686 Redox OS target:](https://github.com/rust-lang/rust/pull/126192/) `i686-unknown-redox`
    - [Promote `arm64ec-pc-windows-msvc` to Tier 2.](https://github.com/rust-lang/rust/pull/126039/)
    - [Promote `loongarch64-unknown-linux-musl` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/126298/)
    - [Enable full tools and profiler for LoongArch Linux targets.](https://github.com/rust-lang/rust/pull/127078/)
    - [Unconditionally warn on usage of `wasm32-wasi`.](https://github.com/rust-lang/rust/pull/126662/) (see compatibility note below)
    - Refer to Rust's [platform support page][platform-support-doc] for more information on Rust's tiered platform support.
    Libraries
  ---------
  - [Split core's `PanicInfo` and std's `PanicInfo`.](https://github.com/rust-lang/rust/pull/115974/) (see compatibility note below)
  - [Generalize `{Rc,Arc}::make_mut()` to unsized types.](https://github.com/rust-lang/rust/pull/116113/)
  - [Replace sort implementations with stable `driftsort` and unstable `ipnsort`.](https://github.com/rust-lang/rust/pull/124032/) All `slice::sort*` and `slice::select_nth*` methods are expected to see significant performance improvements. See the [research project](https://github.com/Voultapher/sort-research-rs) for more details.
  - [Document behavior of `create_dir_all` with respect to empty paths.](https://github.com/rust-lang/rust/pull/125112/)
  - [Fix interleaved output in the default panic hook when multiple threads panic simultaneously.](https://github.com/rust-lang/rust/pull/127397/)
    Stabilized APIs
  - [`core::error`](https://doc.rust-lang.org/stable/core/error/index.html)
  - [`hint::assert_unchecked`](https://doc.rust-lang.org/stable/core/hint/fn.assert_unchecked.html)
  - [`fs::exists`](https://doc.rust-lang.org/stable/std/fs/fn.exists.html)
  - [`AtomicBool::fetch_not`](https://doc.rust-lang.org/stable/core/sync/atomic/struct.AtomicBool.html#method.fetch_not)
  - [`Duration::abs_diff`](https://doc.rust-lang.org/stable/core/time/struct.Duration.html#method.abs_diff)
  - [`IoSlice::advance`](https://doc.rust-lang.org/stable/std/io/struct.IoSlice.html#method.advance)
  - [`IoSlice::advance_slices`](https://doc.rust-lang.org/stable/std/io/struct.IoSlice.html#method.advance_slices)
  - [`IoSliceMut::advance`](https://doc.rust-lang.org/stable/std/io/struct.IoSliceMut.html#method.advance)
  - [`IoSliceMut::advance_slices`](https://doc.rust-lang.org/stable/std/io/struct.IoSliceMut.html#method.advance_slices)
  - [`PanicHookInfo`](https://doc.rust-lang.org/stable/std/panic/struct.PanicHookInfo.html)
  - [`PanicInfo::message`](https://doc.rust-lang.org/stable/core/panic/struct.PanicInfo.html#method.message)
  - [`PanicMessage`](https://doc.rust-lang.org/stable/core/panic/struct.PanicMessage.html)
    These APIs are now stable in const contexts:
  - [`char::from_u32_unchecked`](https://doc.rust-lang.org/stable/core/char/fn.from_u32_unchecked.html) (function)
  - [`char::from_u32_unchecked`](https://doc.rust-lang.org/stable/core/primitive.char.html#method.from_u32_unchecked) (method)
  - [`CStr::count_bytes`](https://doc.rust-lang.org/stable/core/ffi/c_str/struct.CStr.html#method.count_bytes)
  - [`CStr::from_ptr`](https://doc.rust-lang.org/stable/core/ffi/c_str/struct.CStr.html#method.from_ptr)
    Cargo
  -----
  - [Generated `.cargo_vcs_info.json` is always included, even when `--allow-dirty` is passed.](https://github.com/rust-lang/cargo/pull/13960/)
  - [Disallow `package.license-file` and `package.readme` pointing to non-existent files during packaging.](https://github.com/rust-lang/cargo/pull/13921/)
  - [Disallow passing `--release`/`--debug` flag along with the `--profile` flag.](https://github.com/rust-lang/cargo/pull/13971/)
  - [Remove `lib.plugin` key support in `Cargo.toml`. Rust plugin support has been deprecated for four years and was removed in 1.75.0.](https://github.com/rust-lang/cargo/pull/13902/)
    Compatibility Notes
    * Usage of the `wasm32-wasi` target will now issue a compiler warning and request users switch to the `wasm32-wasip1` target instead. Both targets are the same, `wasm32-wasi` is only being renamed, and this [change to the WASI target](https://blog.rust-lang.org/2024/04/09/updates-to-rusts-wasi-targets.html) is being done to enable removing `wasm32-wasi` in January 2025.
    * We have renamed `std::panic::PanicInfo` to `std::panic::PanicHookInfo`. The old name will continue to work as an alias, but will result in a deprecation warning starting in Rust 1.82.0.
    `core::panic::PanicInfo` will remain unchanged, however, as this is now a *different type*.
    The reason is that these types have different roles: `std::panic::PanicHookInfo` is the argument to the [panic hook](https://doc.rust-lang.org/stable/std/panic/fn.set_hook.html) in std context (where panics can have an arbitrary payload), while `core::panic::PanicInfo` is the argument to the [`#[panic_handler]`](https://doc.rust-lang.org/nomicon/panic-handler.html) in no_std context (where panics always carry a formatted *message*). Separating these types allows us to add more useful methods to these types, such as `std::panic::PanicHookInfo::payload_as_str()` and `core::panic::PanicInfo::message()`.
    * The new sort implementations may panic if a type's implementation of [`Ord`](https://doc.rust-lang.org/std/cmp/trait.Ord.html) (or the given comparison function) does not implement a [total order](https://en.wikipedia.org/wiki/Total_order) as the trait requires. `Ord`'s supertraits (`PartialOrd`, `Eq`, and `PartialEq`) must also be consistent. The previous implementations would not "notice" any problem, but the new implementations have a good chance of detecting inconsistencies, throwing a panic rather than returning knowingly unsorted data.
    * [In very rare cases, a change in the internal evaluation order of the trait
    solver may result in new fatal overflow errors.](https://github.com/rust-lang/rust/pull/126128)
    Internal Changes
    These changes do not affect any public interfaces of Rust, but they represent
    significant improvements to the performance or internals of rustc and related
    tools.
  - [Add a Rust-for Linux `auto` CI job to check kernel builds.](https://github.com/rust-lang/rust/pull/125209/)


author: asarai@suse.com
changelog:
  - Fix build to correctly build a static binary (which will allow it to work in
    all containers). This was caused by forgetting to include
    'glibc-devel-static'. I've added a check to ensure it doesn't happen by
    accident again.
  - Add catatonit-rpmlintrc to include filters for "static binary" warnings,
    since this is intentional.


author: asarai@suse.com
changelog:
  - Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
    that dockerd doesn't give spurrious warnings.


author: Aleksa Sarai <asarai@suse.com>
changelog:
  - Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
    endlessly when pid1 died in very specific ways. bsc#1176155


author: Aleksa Sarai <asarai@suse.com>
changelog:
  - Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
    socket activation or features somewhat adjacent to socket activation (such as
    passing file descriptors).
  - Update catatonit-rpmlintrc in order to cover that static binaries are now an
    error not a warning.


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
    once. Fix build with autocnf 2.71 / automake 1.16.5.


author: Richard Brown <rbrown@suse.com>
changelog:
  - Update to catatont v0.1.7
  - This release adds the ability for catatonit to be used as the only
    process in a pause container, by passing the -P flag (in this mode no
    subprocess is spawned and thus no signal forwarding is done).


author: Aleksa Sarai <asarai@suse.com>
changelog:
  - Update to catatonit v0.2.0.
    * Change license to GPL-2.0-or-later.
  - Remove upstreamed patches:
    - 99bb9048f.patch


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 4.8:
    * Improved the automatic cache cleanup mechanism. Automatic
      cleanups are now performed on 1/256 of the cache instead of
      1/16, thus making them much quicker (but naturally more frequent).
      Cleanups are coordinated between ccache processes so that at most
      one process will perform cleanup at a time. Also, the actual cache
      size will stay very close to the configured maximum size instead of
      staying around 90% as was the case before.
    * Added support for setting per-compilation configuration options on
      the command line. Example: `ccache hash_dir=false gcc -c example.c`
    * Made it possible to disable ccache for a certain source code file
      by embedding the string `ccache:disable` in a comment near the top
      of the file.
    * Made ccache understand that an MSVC `/Z7` option overrides an
      earlier `/Z*` option and thus is not too hard to cache.
    * Added a `--recompress-threads` command line option for selecting
      the number of CPU threads to use when recompressing the local cache.
    * Added `--trim-recompress` and `--trim-recompress-threads` command
      line options for recompressing file-based remote storage.
    * Added tmpfs, ufs and zfs to the list of supported filesystems on
      macOS and BSDs for the inode cache.
    * Improved progress bars for clean/clear/evict-style operations.
    * Improved printing of cache sizes in various outputs.
    * Activate debug logging for command mode options like `--cleanup`.
    * Added support for `-Wp,-U<macro>` in the direct mode.
    * Added quotes around arguments with space in logged command lines.
    * Added logging of executed command lines on Windows. +
    * Made sure not to update the stats file when there are no incremented
      counters.
    * Improved actual disk size calculation on Windows.
    * Bugfixes


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 4.8.1:
    * Fixed an issue with the depend mode in combination with `--`
      on the command line for Clang-based compilers. +
    * Improved knowledge about MSVC debug flags so that non-debug
      `/Z*` options are once again supported. +
    * Ccache no longer treats `/Zi` as unsupported for clang-cl.
    * Made the output format of `ccache -k max_size` parsable by
      ccache itself. +
    * Added a remote file storage example with URL-encoded spaces.


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 4.8.2:
    * Ccache no longer passes `-v` to the preprocessor. This
      improves preprocessor mode hit rate when `-v` is on the
      compiler command line.
    * Made `--trim-max-size` accept 0 for no limit. +
    * Clarified `--evict-older-than` semantics.
    * Fixed typo in "`Directory is not hashed if using -gz`" test.


author: Andreas Stieger <andreas.stieger@gmx.de>
changelog:
  - update to 4.8.3
    * Fixed handling of NVCC -Xcompiler and --Werror options
    * Fixed bookkeeping of files when hard linking or file cloning is
      enabled
    * Made a workaround for GCC 12.3 bug 109241 where GCC fails to
      compile ccache.
    * Upgraded to xxHash 0.8.2, which fixes compilation of ccache
      with GCC 12 and -Og.
  - enable redis backend


author: Danilo Spinella <danilo.spinella@suse.com>
changelog:
  - Update to 4.9:
    * Made ignore_options/CCACHE_IGNOREOPTIONS also skip the option from special
      processing, similar to how --ccache-skip works.
    * Added support for expanding environment variables references in all
      configuration options.
    * MSVC options /Fd, /FS and /MP are no longer included in the input hash.
    * Made ccache terminate an ongoing compiler subprocess when terminated on all
      platforms, not only on Unix.
    * Added support for multiple -Xarch_* arguments matching -arch.
    * Added a debug_level/CCACHE_DEBUGLEVEL configuration option, making it
      possible to tell ccache to only write a log file for each compilation, not
      other debug files.
    * Added max_cache_size_kibibyte and max_files_in_cache fields in output from
      ccache --print-stats.
    * Paths after -Xclang -include are now rewritten to relative paths if
      base_dir/CCACHE_BASEDIR is in effect.
    * Added support for clang --analyze.
    * Improved processing of input file arguments.
    * Added support for st_Xtimensec fields in struct stat, thus improving
      behavior on some BSDs when using newly created include files.
    * Added support for the undocumented GCC/Clang option --include.
    * Ccache now exits more gracefully on invalid sharded remote storage URLs.
    * Made ccache bail out on too hard options -fmodules-ts, -fmodule-header,
    - wrapper and -Xclang -ast-dump.
    * Stopped relying on the st_blocks field in struct stat since it cannot be
      trusted for filesystems such as ZFS that do transparent compression or
      deduplication and adjust st_blocks some time in the future.
    * Fixed crash on Windows for paths with only a drive letter.
    * Made handling of Clang config options (such as --config-system-dir) more
      robust.
    * Fixed compiler type detection when compiler is a symlink called ?clang-cl?.
    * Made sure to use MSVC logic for clang-cl when handling a precompiled
      header.
    * Generalized expansion of remote storage URLs with sharding, for instance
      making it possible to shard on port number.
    * Upgraded to xxHash 0.8.2, thereby fixing an error when compiling ccache
      with -Og.
    * Fixed sign-compare warning in src/InodeCache.cpp on FreeBSD.
    * Fixed the CMake option STATIC_LINK on Linux/macOS.
    * Added the CMake option OFFLINE, defaulting to the value of the standard
      variable FETCHCONTENT_FULLY_DISCONNECTED (which is OFF by default), to
      disable downloading anything from the internet.
    * Fixed warnings about unused functions on new MSVC versions.
    * Made sure to set both C and C++ CMake compiler launcher variables if either
      is set.
    * The manual now mentions that system_headers sloppiness is not supported for
      MSVC.
    * Fixed regex in direct.bash.
  - Fix SLE build by using gcc11 and disable hiredis dependency


author: ming li <mli@suse.com>
changelog:
  - Update to 4.9.1:
    * Improved detection of bad remote storage URLs gracefully. This also fixes
      crashes seen in ccache?s own test suite.
    * Made caching completely disabled when modification of a source or include
      file is detected during ccache invocation. Previously this was only done for the direct mode.
    * Fixed an MSVC crash when using /Zi with many concurrent compilations.
    * Fixed a crash when -arch is the last compiler option.
  - Drop no longer needed fix2038.patch


author: jslaby@suse.cz
changelog:
  - Update to version 4.10:
    * chore: Update authors
    * chore: Update NEWS
    * ci: Disable Ubuntu 24.04 builds temporarily
    * build: Fix zstd build for older CMake versions
    * chore: Juggle some include headers
    * build: Fix MSVC /Zc:preprocessor warning (#1461)
    * chore: Remove unused headers (#1460)
    * refactor: Use tl::expected for process_args return value
    * chore: Fix some Cppcheck warnings
    * chore: Remove obsolete os_path helper in test_storage_local_util
    * chore: Improve cast and avoid repeating types (#1459)
    * feat: Add argument handling for Emscripten's --em-config (#1458)
    * feat: Add support for -fdump-ipa-clones (#1449)
    * fix: Force run_second_cpp=true when generating profiling information
    * fix: Hash "apparent real path" of object file when using -fprofile-arcs
    * test: Improve verbose printing of test names
    * refactor: Add more Hash::hash overloads
    * docs: Improve documentation of gcno_cwd sloppiness
    * fix: Handle -fdiagnostics-color for Clang again
    * chore: Clean up comment and debug log string
    * test: Improve printing of test suite
    * chore: Fix typo


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 4.10.1:
    * Fixed prefix command lookup from `PATH`.
    * Fixed detection and usage of system blake3.
    * Find CppHttplib named libhttplib.so as well.
    * Removed Xcode assembly workaround for zstd.
    * Added bundled subset of Fmt again for convenience.
    * Removed no longer needed workaround when building downloaded
      Zstd


author: Antonio Teixeira <antonio.teixeira@suse.com>
changelog:
  - Update to 4.10.2:
    * Fixed detection of Fmt version 11 and newer.
    * Made the ?-fprofile-update=atomic? test only run when that
      option is supported by the compiler.
    * Made the color diagnostics tests work when the user running the
      tests has a non-POSIX login shell.
  - Remove fmt_fix.patch
    * Already included in 4.10.2 upstream release


author: reddwarf@opensuse.org
changelog:
  - Update to version 10.2+0.90
    * First stable version
  - Add libcdio-paranoia-10.2+0.90-include_path.patch


author: p.drouand@gmail.com
changelog:
  - Update to version 10.2+0.93+1
    * Add cdio_cddap_free_messages function
    * Start using Coverty Static analysis
    * Update OS versions we recognize
    * Upgrade libcdio-paranoia to paranoia version 10.2
    * Bug fixes on MS Windows and other bug fixes
    * Redo license so everything is GPL3
  - Fix license tag; now released under GPL-3.0
  - Remove libcdio-paranoia-10.2+0.90-include_path.patch; fixed on
    upstream
  - Bump sonum to 2


author: olaf@aepfle.de
changelog:
  - Include all detected libs in pkg-config --libs output
    to fix build of ffmpeg in SLE_11
    libcdio-paranoia.libcdio_cddda-libs.patch


author: dimstar@opensuse.org
changelog:
  - Fix baselibs.conf: with the update to 10.2+0.93+1, the sonum was
    bumped to 2, but baselibs was forgotten.


author: Karol Babioch <kbabioch@suse.de>
changelog:
  - version 10.2+2.0.0 (2019-01-26)
    * Now works with audio CD's that start on a track greater than 1.
    * typos in manual page and README
    * Do not attempt to call a NULL callback from mskamp
  - version 10.2+0.94+2 (2017-08-22)
    * Add --force-overread
      Force overreading into the lead-out portion of the disc. This option
      is only applicable when using the "-O" option with a positive sample
      offset value. Many drives are not capable of reading into this
      portion of the disc and attempting to do so on those drives will
      produce read errors and possibly hard lockups
  - version 10.2+0.94+1 (2017-03-25)
    * Fix problem where end of span seems to default to last track.
    * Fix NULL pointer dereference that occurs when byte swapping is needed.
    * Re-silence recently added gcc -Wunused-result warnings
    * Use @LIBS@ figured out by autoconf when linking (for -lrt on Linux).
    * Incorrect track was getting used in matching.
  - Added sig file along with keyring for source verification
  - Make use of %license macro
  - Adopted for change of README to README.md


author: Jan Engelhardt <jengelh@inai.de>
changelog:
  - Drop --with-pic (no effect with --disable-static)
  - Trim old rpm macros/constructs
  - Update descriptions


author: Callum Farmer <gmbr3@opensuse.org>
changelog:
  - version 10.2+2.0.1 (2019-09-16)
    * cdda toc routines now included
    * "make distcheck" broken in 2.0.0 works properly again
    * Remove some gcc/clang warnings
  - Use %find_lang
  - Use correct License


author: davejplater@gmail.com
changelog:
  - Update to libcdio-0.83, removed need for libcdio-mini by adding
    linker library paths to sources in the spec file build section.
  - Upstream changes:
    * Add retrieval SCSI sense reply from the most-recent MMC command.
    * Add exclusive read/write access for devices which is used for
    experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
    * MMC bug fixes
    * FreeBSD drive list now shows empty drives.
    * Add ability to retrieve SCSI tuple for a name and/or fake one up for
    programs that wanto to cd-record compatible.
    * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
    added iso9660_set_{d,l}time_with_timezone
    * Add mmc_get_disk_erasable
    * Update MMC Feature Profile list, DVD Book types
    * Reduce range of seek in paranoia_seek to be int32_t
    * Remove some potential flaws found by Coverty's static analysis tool
    * Add ISRC track info to cd-info output.
    * Don't wrap-around volume adjustment for cdda-player.
    * Handle double-byte strings in CD-text
    * --no-header on cd-info omits copyright and warranty


author: davejplater@gmail.com
changelog:
  - Update to 0.83.git from 14/04/2012 git head.
  - libcdio-paranoia separated from libcdio due to license issues
    see bnc#756564


author: reddwarf@opensuse.org
changelog:
  - Update to 0.90
    * CD-Text overhaul and API change (Leon Merten Lohse)
    * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
    * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
    * OSX fixes (Natalia Portillo and Robert William Fuller)
    * paranoia library removed as that is GPL 2-ish. This is now a separate project
    * file names in cue files are relative to the cue file rather than cwd.
    * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
    * Add mmc_cmd2str() to show MMC command name. Show that in some errors
    * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
    * bug fixes, more tests, update documentation


author: p.drouand@gmail.com
changelog:
  - Update to version 0.93
    * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
    * Deprecate mmc_isrc_track_read_subchannel
    * Add mmc_get_track_isrc function.
    * Update OS versions we recognize
    * OSX, and MS Windows, ISO 9660 and other bug fixes
    * Remove Coverty scan warnins and errors
    * OS/2 driver performance update - KO Myung-Hun
  - Bump so versions
    * libcdio14 to libcdio16
    * libiso9660-8 to libiso9660-10
  - Update baselibs.conf
  - Remove depreciated AUTHORS section


author: mpluskal@suse.com
changelog:
  - Add gpg signature
  - Remove ppc obsoletes/provides as it affects unsupported releases
  - Cleanup spec file with spec-cleaner


author: jengelh@inai.de
changelog:
  - Remove --with-pic (only useful for static libs) and compact
    - -enable-static=n.
  - Change description to reflect the package content.


author: kbabioch@suse.com
changelog:
  - Update to version 2.0.0
    - Fixed several memory leaks
  - Applied spec-cleaner
  - Require newer vcdimager


author: tchvatal@suse.com
changelog:
  - Redo the buildsystem to use only shared libs and allow parallel
    building to have it faster in obs.
    * removed patches:
    - cdparanoia-III-dt_needed.patch
    - cdparanoia-large-pic.diff
    * added patches:
    - 010_build_system.patch
    - 050_all_build_only_shared_libraries.patch


author: adam.majer@suse.de
changelog:
  - Adjust licenses to be installed with %license not %doc
  - libraries are covered by LGPL-2.1-or-greater and the command-line
    tool is GPL-2.0-or-greater


author: mpluskal@suse.com
changelog:
  - Update to 1.3.8
    * Bug fix: Wrong stack usage caused SIGBUS on sparc when
      compiled by gcc -O2
    * Bug fix: Minimum drive buffer fill was measured by cdrskin
      before the buffer could get full
    * Bug fix: A failed MMC BLANK command did not cause error
      indication by libburn
    * Bug fix: A final fsync(2) was performed with stdio drives,
      even if not desired


author: asterios.dramis@gmail.com
changelog:
  - Update to 1.4.0:
    libburn:
    * Bug fix: Wrong read access to memory.
    cdrskin:
    * Bug fix: Double free with cdrskin -vvv. Introduced with
      rev 5065, version 1.3.1.


author: asterios.dramis@gmail.com
changelog:
  - Update to 1.4.2.pl01:
    cdrskin:
    * Bug fix: cdrskin "failed to attach fifo" when burning from
      stdin. Regression of 1.4.2, rev 5522.
    From 1.4.2:
    libburn:
    * Bug fix: burn_disc_get_media_id() returned BD identifiers 2
      chars too long
    * Bug fix: burn_disc_get_multi_caps() returned 2048 bytes too
      many in caps.start_range_high
    * Bug fix: Media summary session count of blank and closed media
      was short by 1
    * Bug fix: Endless loop if transport error occurs while waiting
      for drive ready
    * New API calls burn_drive_get_serial_no() and
      burn_drive_get_media_sno()
    * Result of a Coverity audit: 40+ code changes, but no
      easy-to-trigger bugs
    cdrskin:
    * New -toc line "Drive id" tells the drive's individual serial
      number


author: asterios.dramis@gmail.com
changelog:
  - Update to 1.4.4:
    * Bug fix: Option drive_scsi_dev_family=sg did not convert
      /dev/sr* to /dev/sg*
    * Bug fix: burn_make_input_sheet_v07t() falsly recognized double
      byte encoding. Affected cdrskin option: cdtext_to_v07t=
    * Bug fix: Double free at end of run if
      burn_write_opts_set_leadin_text() is used. Affected cdrskin
      option: textfile=
    * Bug fix: DVD book type of DVD+RW DL and DVD+R DL was reported
      wrong.


author: asterios.dramis@gmail.com
changelog:
  - Update to 1.4.6:
    * Bug fix: SAO CD could be perceived 2 blocks to short.
      Regression in 1.4.4 by rev 5672.
    * New API call burn_drive_set_immed()
    * New cdrskin option use_immed_bit=


author: asterios.dramis@gmail.com
changelog:
  - Update to 1.4.8:
    * Bug fix: Option -dummy did not affect writing by
      direct_write_amount=
    * New API call burn_drive_reset_simulate()
    * New API call burn_drive_get_bd_r_pow()
    * Refusing to write to BD-R if formatted to Pseudo Overwrite


author: sean@suspend.net
changelog:
  - Update to 1.5.0:
    * User defined padding was moved after appended partitions
    * xorriso and libisoburn make user of the new xattr capability of libisofs
    * libburn got some rarely triggered bugs fixed


author: Luigi Baldoni <aloisio@gmx.com>
changelog:
  - Update to version 1.5.2.pl01
    * Bug fix
    + cdrskin multi-track burning was slow and stalled after track 1.
      Regression introduced in version 1.5.0, O_DIRECT is now
      disabled for track sources.
    version 1.5.2:
    * Bug fixes
      + No lock was obtained for setting up a fifo object
      + Stream recording was applied regardless whether the drive
      offers it. This caused Xfburn failures with some MATSHITA
      laptop drives.
      + TDK Corporation was not recognized as manufacturer of
      DVD-R "TTH02"
    * Made libburn ready for building out-of-source.
    * New API calls burn_drive_get_feature_codes(),
      burn_drive_get_feature()
    * New cdrskin option --list_features
  - Added signature file and keyring as sources
  - Spec cleanup


author: Dirk Müller <dmueller@suse.com>
changelog:
  - update to 1.5.4:
    * Bug fix: Early SCSI commands from sg-linux.c were not logged
    * New API call burn_drive_set_speed_exact()
    * New API call burn_nominal_slowdown()


author: Dave Plater <davejplater@gmail.com>
changelog:
  - Update to 1.5.6 (jsc#PED-5018)
    * Bug fix: Overburning with cdrskin option -force ended by a
      libburn error
    * New API call burn_write_opts_set_bdr_obs_exempt()
    * New cdrskin option --bdr_obs_exempt
    * Officially enabled overburning with burn_write_opts_set_force(,1)


author: cristian.rodriguez@opensuse.org
changelog:
  - Upgrade to 0.9.1.x
    * improves the packet loss concealment.
    * high-frequency artefacts have been reduced.


author: davejplater@gmail.com
changelog:
  - Added source services to update to 0.11.1.
  - libcelt0-1 bumped to libcelt0-2 due to "current" increment.
  - Upstream changes :
    * fixes two minor bugs with 0.11 that affect the bit-stream.
    The quality should improve (very) slightly, but not enough to be
    noticeable in most cases. Several Opus-related bugs have also
    been fixed.


author: jengelh@medozas.de
changelog:
  - Remove redundant tags/sections from specfile
  - Use %_smp_mflags for parallel building
  - Add celt-devel to baselibs


author: mpluskal@suse.com
changelog:
  - Update to 0.11.3
    * no upstream changelog provided
  - Cleanup spec file with spec-cleaner
  - Update baselibs.conf


author: Fabian Vogt <fvogt@suse.com>
changelog:
  - Only install the selinux policy if necessary
  - Add missing dependency on the main package to the certmonger
    subpackage
  - Use %license and move it to the common subpackage
  - Avoid bashisms
  - Fix file list for the python subpackage for 3.10+


author: David Mulder <dmulder@suse.com>
changelog:
  Release v0.3.5:
  - Added polling_interval which tells certmonger how long to wait in seconds before retrying.
  - Implemented Certificate authentication method.
  - Python 3.10 compatible.


author: David Mulder <dmulder@suse.com>
changelog:
  Release v0.3.6:
  - Fix Bug #15 cepces.conf.dist: server should be pointed to actual CEP host
  - Replace old requests_kerberos with requests_gssapi
  - setup: Do not install example configs
  - setup: Respect the prefix the user specifies
  - Delete the spec file
  - Make Kerberos delegation configurable
  - Fix Bug #24 cepces-submit 'TypeError: option values must be strings'
  - Removed b755b56d25f3e54f8f15d9985fd0597b21c1051d.patch because
    it is now upstream.


author: dmulder@suse.com
changelog:
  - Update to version 0.3.8:
    * Fix WSTEP BinarySecurityToken attribute namespaces
    * Migrate to SPNEGO auth mech


