# changelog

author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Require and use mutter as default compositor in RHEL
  - Make other compositors very weak dependencies in RHEL


author: Adrien Vergé <adrienverge@gmail.com> - 1.31.0-1
changelog:
  - Update to latest upstream version
  - Temporarily restore setup.py/setup.cfg since setuptools ≥ 61 is not available


author: Neal Gompa <ngompa@fedoraproject.org> - 1.22.10-4
changelog:
  - Work around broken brp-mangle-shebangs behavior (see RHBZ#1998924)
  - Fix broken macro variable for legacy "nodejs-yarn" binary name (RHBZ#1904279)


author: zsvetlik@redhat.com - 1.22.17-1
changelog:
  - Update to latest upstream release
  - use --force in yarnpkg-tarball.sh to workaround dependency conflincts


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.3.0-1
changelog:
  - New upstream release (#2059540)
  - Initialize maybe-uninitialized variables
  - Fix usage of pointer after free
  - Build against OpenSSL 3.0


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.4.8-4
changelog:
  - Add explicit requirement on javapackages-tools since yuicompressor
    script uses java-functions. See RHBZ#1600426.


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


author: Orion Poplawski <orion@nwra.com> - 1:6.0.36-1
changelog:
  - Update to 6.0.36 (CVE-2024-42330 rhbz#2329218, CVE-2024-42332 rhbz#2329221,
    CVE-2024-42333 rhbz#2329224)


author: Orion Poplawski <orion@nwra.com> - 1:6.0.36-1
changelog:
  - Update to 6.0.36 (CVE-2024-42330 rhbz#2329219, CVE-2024-42332 rhbz#2329222,
    CVE-2024-42333 rhbz#2329225)


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


author: Ben Woodard <woodard@redhat.com> - 4.3.4-2
changelog:
  - disable building with libunwind to fix C++ exceptions when a C applicaion loads
    a module written in C++ #2175966


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin W. Flory <jflory7@fedoraproject.org> - 1.0.3-1
changelog:
  - Fix reused integers from being optimized out.
  - Props to Jan Drögehoff (FAS: sentry) for sending this fix upstream to avoid carrying a Fedora-specific patch.
  - Remove grues.


