# changelog

author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31
    - Require Class::XSAccessor 1.17+ when trying to load it; earlier versions
      cause test failures (GH#27)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.05-2
changelog:
  - Incorporate feedback from package review (#2073377)
    - perl(strict) is a run-time dependency, not just a test dependency
    - Don't package the tests as documentation


author: Paul Howarth <paul@city-fan.org> - 1.150-2
changelog:
  - Use SPDX-format license tag for perl-Test-Perl-Critic-Policy sub-package
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.152-1
changelog:
  - Update to 1.152 (rhbz#2244582)
    - Fix a test failure for Subroutines::RequireArgUnpacking (GH#1048)
    - Fix a test failure in t/06_violation.t on Perl 5.39.1 or above (GH#1037)


author: Paul Howarth <paul@city-fan.org> - 1.154-1
changelog:
  - Update to 1.154 (rhbz#2320114)
    Enhancements
    - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
      %LAST_PAREN_MATCH (GH#1065)
    - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
      (GH#1067)
    - RequireExplicitPackage now accepts a use VERSION as the first line
      (GH#1070)
    Fixes
    - Fix some false positives for function calls as a hash index (GH#1071)
    Documentation
    - Clarify package_exemptions rules (GH#1043)


author: Paul Howarth <paul@city-fan.org> - 1.156-1
changelog:
  - Update to 1.156 (rhbz#2321227)
    - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
      variable names (GH#1027)


author: Paul Howarth <paul@city-fan.org> - 1.119-23
changelog:
  - Spec tidy-up
    - Package LICENSE file
    - Make %files list more explicit
    - Specify all build dependencies


author: Paul Howarth <paul@city-fan.org> - 0.014-1
changelog:
  - Update to 0.014 (rhbz#2157212)
    - Update packaging and metadata
    - Minimum required Perl is now v5.12
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 0.9916-1
changelog:
  - Update to 0.9916
    - Ignore core modules with undef version correctly
    - Drop URI::cpan dependency and use Parse::Distname to parse cpan URI


author: Paul Howarth <paul@city-fan.org> - 0.08-1
changelog:
  - Update to 0.08
    - Fix "Attempt to call undefined import method with arguments" error on
      perl 5.39.1


author: Paul Howarth <paul@city-fan.org> - 0.100006-1
changelog:
  - Update to 0.100006
    - Update packaging and metadata
    - Minimum required Perl is now v5.12
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.094002-1
changelog:
  - Update to 0.094002
    - Fix typo
    - Update author contact info
    - Document perl version policy
  - Use %license unconditionally


author: Michal Josef Špaček <mspacek@redhat.com> - 0.26-14
changelog:
  - Fix not created man page automatically in new Module::Build::Tiny (BZ#2189099)
  - Remove EPEL6 code
  - Update license to SPDX format


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-3
changelog:
  - Add BR: gcc
  - Add ExcludeArch: %{ix86} for 44+, where valkey is missing for i686
  - Unset test envars


author: Xavier Bachelot <xavier@bachelot.org> - 0.37-5
changelog:
  - Drop conditional around ExcludeArch, no i686 valkey build anywhere
  - Directly BR: valkey rather than valkey-compat-redis
  - Drop duplicate BR:


author: Paul Howarth <paul@city-fan.org> - 2024080801-1
changelog:
  - Update to 2024080801
    - Eliminate 'use vars'
    - Update the MySQL comment pattern
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 0.02-15
changelog:
  - Use SPDX-format license tag
  - Drop support for building with ancient distributions prior to EL-7
  - Avoid use of deprecated patch syntax


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.27-24
changelog:
  - Update to more modern perl build/install commands
  - Perform deglobbing of files per packaging guidelines


author: Paul Howarth <paul@city-fan.org> - 0.21-24
changelog:
  - Use author-independent source URL
  - Drop redundant use of %{?perl_default_filter}
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 4.025-1
changelog:
  - Update to 4.025
    - Changes to the FREEZE/THAW mechanism
      - Remove the part that says that FREEZE cannot return a list; it can, and
        we have supported it for a very long time, although I have not checked
        how far back this support goes
      - If you use the FREEZE/THAW API's you should upgrade to this version or
        later
    - Test fixes for t/020_sort_keys.t hanging on some perls that do not come
      bundled with Hash::Util


author: Paul Howarth <paul@city-fan.org> - 5.001-1
changelog:
  - Update to 5.001
    - First official release of protocol 5
      - Better support for non-standard NV types
      - Support for the new Perl 5.36 bools
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 5.002-1
changelog:
  - Update to 5.002 (rhbz#2166279)
    - Fix up Decoder tests to run on perl 5.8, which has no defined-or
    - Ensure that Encoder depends on the correct version of the Decoder
    - Test compatibility fixes when no perl is already installed
    - Add t/195_backcompat.t to check if the latest decoder will seamlessly
      handle reading output from older versions
    - Test compatibility fixes with version 3 and earlier


author: Paul Howarth <paul@city-fan.org> - 5.003-1
changelog:
  - Update to 5.003 (rhbz#2168014)
    - Update Miniz to 3.0.2, Zstd to 1.5.2 and Devel::CheckLib to 1.16
      (note: this package uses the system versions of these)
    - Assorted build fixes related to these updates
    - OpenBSD build fixes


author: Paul Howarth <paul@city-fan.org> - 5.004-1
changelog:
  - Update to 5.004 (rhbz#2188044)
    - Decoder fixes: fix thaw ordering for frozen objects - nested THAW
      operations now happen in the documented LIFO order (GH#283, GH#285)


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480335)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 4.025-1
changelog:
  - Update to 4.025
    - Changes to the FREEZE/THAW mechanism
      - Remove the part that says that FREEZE cannot return a list; it can, and
        we have supported it for a very long time, although I have not checked
        how far back this support goes
      - If you use the FREEZE/THAW API's you should upgrade to this version
    - Test fixes for t/020_sort_keys.t hanging on some perls that do not come
      bundled with Hash::Util


author: Paul Howarth <paul@city-fan.org> - 5.002-1
changelog:
  - Update to 5.002 (rhbz#2166280)
    - Test compatibility fixes with version 3 and earlier
    - Test compatibility fixes when no perl is already installed
    - Add t/195_backcompat.t to check if the latest decoder will seamlessly
      handle reading output from older versions
    - Ensure that Encoder depends on the correct version of the Decoder
    - Fix up Decoder tests to run on perl 5.8, which has no defined-or


author: Paul Howarth <paul@city-fan.org> - 5.003-1
changelog:
  - Update to 5.003 (rhbz#2168015)
    - Update Miniz to 3.0.2, Zstd to 1.5.2 and Devel::CheckLib to 1.16
      (note: in this package we use the system versions of these)
    - Assorted build fixes related to these updates
    - OpenBSD build fixes


author: Paul Howarth <paul@city-fan.org> - 5.004-1
changelog:
  - Update to 5.004 (rhbz#2188045)
    - Fix thaw ordering for frozen objects: nested THAW operations now happen in
      the documented LIFO order (GH#283, GH#285)


author: Paul Howarth <paul@city-fan.org> - 5.005-1
changelog:
  - Update to 5.005 (rhbz#2480052)
    - Update bundled Zstd to 1.5.7, and other changes
    - Update spec to document changes from version 5
    - Security fixes - make sure that COPY tags cannot be used to read past end
      of buffer


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480334)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 4.023-1
changelog:
  - Update to 4.023
    - Make it possible to upgrade with passing tests when using
      Sereal::Decoder 4.015-4.019 on threaded debugging perls


author: Paul Howarth <paul@city-fan.org> - 5.002-1
changelog:
  - Update to 5.002 (rhbz#2166281)
    - Fix up Decoder tests to run on perl 5.8, which has no defined-or
    - Ensure that Encoder depends on the correct version of the Decoder
    - Test compatibility fixes when no perl is already installed
    - Add t/195_backcompat.t to check if the latest decoder will seamlessly
      handle reading output from older versions
    - Test compatibility fixes with version 3 and earlier


author: Paul Howarth <paul@city-fan.org> - 5.003-1
changelog:
  - Update to 5.003 (rhbz#2168016)
    - Update Miniz to 3.0.2, Zstd to 1.5.2 and Devel::CheckLib to 1.16
      (note: this package uses the system versions of these)
    - Assorted build fixes related to these updates
    - OpenBSD build fixes


author: Paul Howarth <paul@city-fan.org> - 5.004-1
changelog:
  - Update to 5.004 (rhbz#2188043)
    - Decoder fixes: fix thaw ordering for frozen objects - nested THAW
      operations now happen in the documented LIFO order (GH#283, GH#285)


author: Paul Howarth <paul@city-fan.org> - 5.006-1
changelog:
  - Update to 5.006 (rhbz#2480336)
    - Update bundled miniz to 3.1.1
    - Avoid deprecated ZSTD api
    - Tidy and regen


author: Paul Howarth <paul@city-fan.org> - 0.48-1
changelog:
  - Update to 0.48
    - Importing types into a class that inherited from another class that had
      imported types wouldn't work, leaving the child class with no 't()' sub


author: Paul Howarth <paul@city-fan.org> - 0.6600-1
changelog:
  - Update to 0.66
    - Fix for CVE-2023-7101 (unvalidated input can lead to arbitrary code
      execution vulnerability)
      https://github.com/runrig/spreadsheet-parseexcel/issues/33
  - Use author-independent source URL
  - Use SPDX-format license tag
  - No longer need to fix document file permissions
  - Fix permissions verbosely
  - Don't assume "pm" suffix on manpage files


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.33-1
changelog:
  - Update to 1.33 (rhbz#2166170)
    - Remove a bunch of old deprecated functions: crunch, cellfill, define,
      randword, fullchomp, randcrypt, equndef, neundef
    - Update documentation
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.35-1
changelog:
  - Update to 1.35 (rhbz#2309763)
    - Add substr_count()
    - Move away from Dist::Milla
    - Fix typos in Changes (GH#4)
    - Fix bug in string-containment functions (GH#7)
  - Switch to EU::MM flow


author: Paul Howarth <paul@city-fan.org> - 0.100055-1
changelog:
  - Update to 0.100055
    - Update packaging and metadata
    - Minimum required Perl is now v5.12
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.000-1
changelog:
  - Update to 1.000
    - Switch guts to builtin::export_lexically
    - This means you'll get experimental warnings
    - This also means v5.37.2 is required unless you have Lexical::Sub, which
      is from Lexical::Var
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.27-1
changelog:
  - Update to 0.27
    - Skip quote-separator tests on newer perls that deprecate this behavior
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.11-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Classify buildreqs by usage
    - Use author-independent source URL
    - Fix permissions verbosely
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.99.1-1
changelog:
  - Update to 1.991
    - Enforce text files in some functions, as warned in GH#18
    - Change up some diag messages:
      - Lowercase first letter
      - Not ! at end
      - Use "file" instead of "filename"
      If you were matching on those, you may need to update your patterns


author: Paul Howarth <paul@city-fan.org> - 1.99.3-1
changelog:
  - Update to 1.993
    - Try harder to check for symlinks on Windows by stealing some code from
      Win32:: (GH#36)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.101083-1
changelog:
  - Update to 0.101083
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Drop MODULE_COMPAT, replaced by generators


author: Paul Howarth <paul@city-fan.org> - 1.3-23
changelog:
  - Fix FTBFS triggered by package note feature
  - Use %license unconditionally
  - Drop workarounds for EL-6 support


author: Paul Howarth <paul@city-fan.org> - 0.38-1
changelog:
  - Update to 0.38 (rhbz#2129537)
    - Stop permanently altering Test::More's export list (CPAN RT#73299)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.08-23
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit


author: Petr Pisar <ppisar@redhat.com> - 0.008-32
changelog:
  - Do not provide symlinked modules by perl-Test-Pod-LinkCheck-tests
  - Convert a license tag to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.17-1
changelog:
  - Update to 0.17
    - Mention related module Test::Synopsis::Expectation in docs (GH#22)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 2.004000-6
changelog:
  - Use author-independent source URL
  - Classify buildreqs by usage
  - Fix permissions verbosely
  - Do EXTENDED_TESTING
  - Make %files list more explicit
  - Bootstrap for EPEL-10


author: Paul Howarth <paul@city-fan.org> - 2.006000-1
changelog:
  - Update to 2.006000
    Bug Fixes:
    - Fix uninitialized warning messages from Error::TypeTiny when processing very
      shallow stack traces
    Documentation:
    - Fixes for various typos (GH#155)
    - Improve documentation for the initialization of the 'coercion' attribute
      for 'Type::Tiny'
    - Fix minor typo in documentation for named parameters in 'Type::Params'
    - Update copyright notices in files to 2024
    Other:
    - Updated: Smartmatch discontinued beginning perl-5.41.3; Type::Tiny will no
      longer attempt to support smartmatch if the Perl version is too high
      (GH#161)
    - Improved initialization of variables when they are tied to a type
      constraint; initialization to explicit values will work even when not tied
      via the 'ttie' wrapper function; if no explicit values are provided, tied
      scalars will be initialized to the type's 'type_default'
      So for example, 'tie( my $title, Str )' will initialize '$title' to the
      empty string instead of undef, and 'tie( my $title, Str, 'Foo' )' will
      initialize the variable to 'Foo' as was already implied by documentation
    - Inlining 'Int' now calls the XS implementation when available (the speed
      improvement is negligible, but it also may result in small memory savings)
      (GH#145)
    - Removed: Support for the ${^TYPE_PARAMS_MULTISIG} global variable has been
      dropped; using this global variable was deprecated in trial version
      1.999_010 and stable version 2.000000, both of which are nearly two years
      old - use ${^_TYPE_PARAMS_MULTISIG} instead


author: Paul Howarth <paul@city-fan.org> - 0.10-1
changelog:
  - Update to 0.10
    - Previously, when tests were run via prove without the verbose flag and
      there was a warning that caused a test failure, there was no output
      indicating that a warning caused the failure; this has now been corrected
      and you'll see output that includes "Unexpected warning"


author: Paul Howarth <paul@city-fan.org> - 1.51-1
changelog:
  - Update to 1.51 (rhbz#2229806)
    - Contact e-mail update
    - Attribute skip_empty_rows extended
    - Fix comments (GH#45)
    - Fix help (GH#46)
    - Update to Devel::PPPort-3.71
    - Fix HTML on Windows
    - Fix double header-interpretation on bom + headers => "auto" (GH#47)


author: Paul Howarth <paul@city-fan.org> - 1.53-1
changelog:
  - Update to 1.53 (rhbz#2251219)
    - Two casts for -Wformat (GH#50)
    - Add --skip-empty to csv2xlsx
    - Add --font and --font-size to csv2xlsx
    - Fix skip_empty_rows ("skip") and trailing newlines (GH#52)
    - Fix comment in last line (CPAN RT#150501)


author: Paul Howarth <paul@city-fan.org> - 1.54-1
changelog:
  - Update to 1.54 (rhbz#2275976)
    - It's 2024
    - Fix comment_str with strict
    - Documentation fixes (CPAN RT#150757, CPAN RT#151546)


author: Paul Howarth <paul@city-fan.org> - 1.55-1
changelog:
  - Update to 1.55 (rhbz#2292859)
    - More fixes for strict under bind_columns (GH#54)
    - Strict won't hide previous error (GH#56)
    - Update to Devel::PPPort-3.72


author: Paul Howarth <paul@city-fan.org> - 1.56-1
changelog:
  - Update to 1.56 (rhbz#2303862)
    - Yet another strict/comment_str conflict (GH#57)
    - Strict affected by column_names


author: Paul Howarth <paul@city-fan.org> - 1.57-1
changelog:
  - Update to 1.57 (rhbz#2325504)
    - Add on_error callback to csv()
    - Retain runtime error from csv()


author: Paul Howarth <paul@city-fan.org> - 1.58-1
changelog:
  - Update to 1.58 (rhbz#2334923)
    - Add strict_eol (warnings default in csv())
    - Add XS line number in errors
    - Add streaming support (not set in stone)


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60 (rhbz#2343165)
    - Add SECURITY.md
    - CR/NL/CRNL inside quoted fields not affected by strict_eol
    - Fix incorrect error 2014 (GH#62)


author: Paul Howarth <paul@city-fan.org> - 1.61-1
changelog:
  - Update to 1.61 (rhbz#2383739)
    - Add love letter to CSV from xan project with reference
    - Bugtracker to Github (long overdue) (GH#63)
    - Update to Devel::PPPort-3.73


author: Paul Howarth <paul@city-fan.org> - 1.62-1
changelog:
  - Update to 1.62 (rhbz#2463743)
    - It is 2026
    - Fix possible stack corruption (GH#65, CVE-2026-7111)


author: Paul Howarth <paul@city-fan.org> - 1.20171012-22
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Drop redundant %{?perl_default_filter}
    - Drop redundant shellbang mangling
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely
    - Make %files list more explicit
    - Package CONTRIBUTING file


author: Paul Howarth <paul@city-fan.org> - 0.08-46
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify buildreqs by usage
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Simplify find command using -delete
    - Drop redundant removal of empty directories from the buildroot
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 7.900059-1
changelog:
  - Update to 7.900059 (see Changes for details)
  - Use SPDX-format license tag
  - Drop MODULE_COMPAT, replaced by generators


author: Paul Howarth <paul@city-fan.org> - 0.63-1
changelog:
  - Update to 0.63 (rhbz#2128532)
    - Add support for 5.37.3's PADSV_STORE optimization; B.pm-related tests have
      been taught about this new thing (CPAN RT#144052)
    - Updated contact information
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.64-1
changelog:
  - Update to 0.64 (rhbz#2270204)
    - This is a maintenance release; the code contains no functional change
    - Contributing guidelines are now listed in the new CONTRIBUTING file
    - Fix for t/18-opinfo.t broken under blead (CPAN RT#151104)
  - Use %{make_build} and %{make_install}
  - Make %files list more explicit


author: Yaroslav Fedevych <yaroslav@fedevych.name> - 2.17-2
changelog:
  - Update Source0 URL to a working one (upstream maintainer change)
  - Convert a license tag to an SPDX format
  - Run tests in parallel


author: Paul Howarth <paul@city-fan.org> - 0.38-14
changelog:
  - Use SPDX-format license tag
  - Drop MODULE_COMPAT, replaced by generators
  - BR: procps-ng rather than /usr/bin/ps


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.43-24
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - follow perl best practices for build and install
    - include README.md in doc
    - don't glob man base filename


author: Michal Josef Špaček <mspacek@redhat.com> - 0.900-9
changelog:
  - Package tests
  - Update license to SPDX format and change from CC0, it's not CC0, but public domain
  - Remove bad executable flag from library file
  - Simplify build and install process


author: Petr Pisar <ppisar@redhat.com> - 0.39-7
changelog:
  - Convert RHEL 10 perl-XS-Parse-Keyword package to perl-XS-Parse-Keyword-epel
    with just perl-XS-Parse-Keyword-Builder and perl-XS-Parse-Keyword-tests
    subpackages (bug #2373142)


author: Paul Howarth <paul@city-fan.org> - 1:0.87-1
changelog:
  - Update to 0.87
    - Turn off internal POK flag for number scalars
  - Avoid use of deprecated patch syntax


author: Petr Pisar <ppisar@redhat.com> - 1:0.89-2
changelog:
  - Break a build cycle: perl-YAML-LibYAML → perl-boolean → perl-JSON-MaybeXS
    → perl-Cpanel-JSON-XS → perl-YAML-LibYAML


author: Paul Howarth <paul@city-fan.org> - 1.37-1
changelog:
  - Update to 1.37
    Features:
    - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
    Fixes:
    - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
    - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
    - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
    - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
    - Fix dumping of tied hashes (GH#31)
    - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
    - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
    - Fix double-dash YAML parsing (RT#34073, GH#35)
    - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
    - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
    - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
      (GH#40)
    - Fix growing !!perl/regexp objects in round-trips (GH#43)
    - Fix quoted '=' being transformed into 'str' (GH#45)
    - Fix backslash-space escape in double-quoted YAML strings (GH#61)
    - Fix flow sequence comma separator not recognized without trailing space
      (GH#60)
    - Fix wide character warning in DumpFile (GH#28)
    - Fix inline arrays without space after comma (GH#25)
    - Fix: quote strings matching YAML implicit types to prevent round-trip
      failures (GH#26)
    - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
    - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
    - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
    - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
    - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
    - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
    - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
    - Fix: correct $SortKeys POD default from false to true (GH#100)
    - Fix: correct POD documentation errors (GH#103)
    Maintenance:
    - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
    - Silence macOS compiler warnings (GH#92)
    - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
    - Guard stdint.h include in syck_st.h for portability (GH#24)
    - Update ppport.h to 3.68
    - Add regression tests for magical variable dumping (GH#32)
    - CI: modernize GitHub Actions workflow (GH#123, GH#124)
    - CI: add disttest job to validate MANIFEST completeness
  - Use %{make_build} and %{make_install}
  - Drop workaround for C23 incompatibility


author: Paul Howarth <paul@city-fan.org> - 1.39-1
changelog:
  - Update to 1.39
    Bug Fixes:
    - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
      (GH#125, GH#130)
    - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
    - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
    - Fix: guard against NULL type from strtok in tag parsing (GH#135)
    - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
    - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
      (GH#138, GH#139)
    Improvements:
    - Resolve TODO tests for empty/invalid YAML to match actual behaviour
      (GH#127, GH#129)
    Maintenance:
    - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
    - Add comprehensive implicit type resolution test suite (GH#137)
    - Update MANIFEST to include all unit tests
    - Clean up test names to remove unnecessary numbering


author: Paul Howarth <paul@city-fan.org> - 1.41-1
changelog:
  - Update to 1.41
    Bug Fixes:
    - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
      strtod() so that floats like -3.14 are not corrupted by double-precision
      rounding artifacts (GH#140, GH#141)


author: Paul Howarth <paul@city-fan.org> - 1.42-1
changelog:
  - Update to 1.42
    Bug Fixes:
    - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
      perl_syck.h (GH#145)
    - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
    - Fix: Skip %TAG and %YAML directives in document header (GH#151)
    - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
    - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
    - Fix: Remove spurious %type <nodeId> for indent_open in gram.y
      (GH#157, GH#158)
    - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
    Improvements:
    - Implement YAML merge key (<<) support (GH#149)
    Maintenance:
    - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
    - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
    - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
    - Remove unneeded TODO in t/json-basic.t (GH#154)
    - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
    - Do not require a .y file to build YAML::Syck; add brew support for bison
    - Don't ship docs/ directory in tarball


author: Paul Howarth <paul@city-fan.org> - 1.43-1
changelog:
  - Update to 1.43
    Bug Fixes:
    - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
    - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
    - Fix: Load() in list context returns empty list for empty/undef input; also
      applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
    - Fix: DumpCode serializes prototype string instead of code body (GH#168)
    - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
      (GH#170)
    - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
      (GH#175, GH#176)
    - Fix: Add TODO guard for eval_pv leak on Perl < 5.14 (GH#179, GH#180)
    - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
    - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
    Improvements:
    - Modernize META_MERGE for CPANTS compliance (GH#162)
    - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
    Maintenance:
    - Restore TODO guard for Dump code leak test on Perl < 5.26 (GH#167)
    - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
    - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)


author: Paul Howarth <paul@city-fan.org> - 1.44-1
changelog:
  - Update to 1.44
    Bug Fixes:
    - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
    - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)


author: Paul Howarth <paul@city-fan.org> - 1.45-1
changelog:
  - Update to 1.45
    Bug Fixes:
    - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
      base64 encode/decode buffers; also plugs a memory leak (GH#189)
    - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
      no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
    - Fix: Negative float#base60 values produce wrong results; strip sign before
      accumulating and avoid negative zero for portable stringification (GH#191)
    - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
    Maintenance:
    - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
    - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
    - Update README


author: Paul Howarth <paul@city-fan.org> - 0.31-1
changelog:
  - Update to 0.31 (rhbz#2318345)
    - Switch from Sub::Identify to Sub::Util (core in modern perls), falling back
      to B.pm as needed


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.14-1
changelog:
  - Resolves: rhbz#2254560 CVE-2023-41913 buffer overflow and possible RCE
  - Resolved: rhbz#2250666 Update to 5.9.14 (IKEv2 OCSP extensions, seqno/regno overflow handling
  - Update to 5.9.13 (OCSP nonce set regression configuration option charon.ocsp_nonce_len)
  - Update to 5.9.12 (CVE-2023-41913 fix, various IKEv2 fixes)


author: Paul Howarth <paul@city-fan.org> - 20230912-1
changelog:
  - Update to 20230912 (rhbz#2238633)
    - Remove a syntax error check that could cause an incorrect error message
      when List::Gather::gather was used (GH#124)


author: Simone Caronni <negativo17@gmail.com> - 1.24.1-6
changelog:
  - Update logroate and reload commands:
  - https://bugzilla.redhat.com/show_bug.cgi?id=2372537
  - https://bugzilla.redhat.com/show_bug.cgi?id=2403541


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12
  - disable pspell and imap extensions
  - disable pdo_dblib (missing freetds)
  - disable pdo_firebird (missing firebird)


author: Remi Collet <rcollet@redhat.com> - 8.3.12-3
changelog:
  - Fix Integer overflow in the dblib/firebird quoter causing OOB writes
    CVE-2024-11236
  - enable pdo_dblib extension


author: Remi Collet <remi@remirepo.net> - 2.2.0-1
changelog:
  - update to 2.2.0
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.8.0-1
changelog:
  - update to 1.8.0
  - raise dependency on PHP 8.2
  - switch to phpunit11
  - drop pear/pecl dependency
  - sources from github
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Remi Collet <remi@fedoraproject.org> - 4.2.4-8
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add upstream patch for libcurl 8.9
  - Fix build with PHP 8.4 using patch from
    https://github.com/m6w6/ext-http/pull/135


author: Remi Collet <remi@fedoraproject.org> - 3.7.0-14
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/Imagick/imagick/pull/690


author: Remi Collet <remi@remirepo.net> - 3.2.0-9
changelog:
  - build out of sources tree
  - fix incompatible pointer types using patch from
    https://github.com/php-memcached-dev/php-memcached/pull/555


author: Remi Collet <remi@remirepo.net> - 1.19.0-1
changelog:
  - update to 1.19.0
  - raise dependency on libbson and libmongc 1.27.0
  - raise dependency on libmongocrypt 1.10.0


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - raise dependency on libbson and libmongc 1.28.0
  - raise dependency on libmongocrypt 1.11.0


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.3.0-1
changelog:
  - update to 2.3.0
  - raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@fedoraproject.org> - 1.0.11-12
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php84
  - add patch for PHP 8.4 from
    https://github.com/krakjoe/pcov/pull/111


author: Remi Collet <remi@remirepo.net> - 2.0.2-1
changelog:
  - update to 2.0.2
  - re-license spec file to CECILL-2.1
  - add pie virtualprovides (m6w6/ext-raphf)
  - drop patch merged upstream


author: Remi Collet <remi@remirepo.net> - 1.2.1-1
changelog:
  - update to 1.2.1
  - PHP License updated from version 3 to version 4 (BSD-3-Clause)
  - drop pear/pecl dependency
  - sources from github
  - add php_base option to create namespaced packages
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.2.3-4
changelog:
  - fix incompatible-pointer-types using patch from
    https://github.com/php/pecl-file_formats-yaml/pull/74


author: Remi Collet <remi@remirepo.net> - 1.7.3-8
changelog:
  - add upstream patch for PHP 8.2
  - add patch for PHP 8.3 from https://github.com/zetacomponents/ConsoleTools/pull/26
  - fix FTBFS #2261516


author: Remi Collet <rcollet@redhat.com> - 8.4.14-1
changelog:
  - build as php8.4-extras
  - update to 8.4.14
  - drop pspell an imap subpackages
  - add sodium-devel subpackage


author: Remi Collet <remi@remirepo.net> - 1.1.0-6
changelog:
  - rebuild for https://fedoraproject.org/wiki/Changes/php85
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 1.2.1-1
changelog:
  - update to 1.2.1
  - PHP License updated from version 3 to version 4 (BSD-3-Clause)
  - drop pear/pecl dependency
  - sources from github


author: Remi Collet <remi@remirepo.net> - 5.2.3-1
changelog:
  - update to 5.2.3 (2025-10-08, bugfix release)
  - fix patch to system CA certificates
  - always build with composer-generators


author: Kevin Fenzi <kevin@scrye.com> - 2023.04-1
changelog:
  - Switch to new fork, update to new version scheme ( rhbz#2256866 )
  - Enable custom baud rate ( rhbz#2294619 )
  - Convert to SPDX license identifier


author: Remi Collet <remi@remirepo.net> - 0.9.0-2
changelog:
  - update to 0.9.0
  - add notice about dnf in self-update output
  - open https://github.com/php/pie/issues/217 broken bash completion


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.2.7-2
changelog:
  - Rename to pipewire-epel
  - Enable lv2, disable bluez5, vulkan, libcamera
  - Only build the lv2 subpackage


author: Timothée Ravier <tim@siosm.fr> - 6.4.5-2
changelog:
  - Move dependency on fedora-third-party, fedora-flathub-remote &
    fedora-workstation-repositories to comps groups.


author: Troy Dawson <tdawson@redhat.com> - 6.4.2-1.1
changelog:
  - Drop sub-packages whose dependencies are not in epel10 yet
    plasma-nm-{fortisslvpn,sstp}

    * Thu Jul 03 2025 Steve Cossette <farchord@gmail.com> - 6.4.2-1
  - 6.4.2


author: Xavier Bachelot <xavier@bachelot.org> - 19-45
changelog:
  - Add conditional for {pipewire-,}jack-audio-connection-kit-devel
  - Narrow scope of globs for .so/.pc


author: Pavol Sloboda <psloboda@redhat.com> - 5.4.3-2
changelog:
  - Updated the tests to require the non distro default name of pg_partman
    instead of the distro default one to ensure it is being found


author: David Beveridge <dave@bevhost.com> - 2.1.0-1
changelog:
  - Update to 2.1 with new features e.g. Reload configuration on SIGHUP
  - inotify support to watch domains-file for changes and reconfigure automatically.


author: Dave Love <loveshack@fedoraproject.org> - 2.4.4-1
changelog:
  - Update to 2.4.4
  - Remove el7 conditional
  - Exclude s390x
  - Run all the checks
  - Drop patch 0
  - Adjust dependencies and installed files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.1.0-3
changelog:
  - Simplify testing
  - Always run an import-only “smoke test”
  - Do not run language-specific tests; run only the tests that tox would run


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-5
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-6
changelog:
  - Fix support for building with no ENGINE support in OpenSSL (GH#1816)
  - Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-8
changelog:
  - Drop EL-7 support
    - Drop mod_geoip support
    - Drop mod_wrap support
    - Always build mod_proxy
    - Always use libpcre2
    - Always use maridb client library in preference to mysql
    - Always use libpq client library in preference to postgresql
    - Always use OpenSSL Cipher Profiles
  - Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
    onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.1.rc2
changelog:
  - Update to 1.3.9rc2
    - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
    - Fix mod_sftp not advertising standard extensions for protocol version 3
      (GH#1570)
    - Fix mod_sftp "check-file" extension using wrong block size when offset and
      length are specified (GH#1569)
    - Use JSON for Controls protocol messages (GH#379)
    - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
    - Enforce requirement of preceding RewriteCondition for RewriteRule directives
      to avoid confusion (Bug #4495)
    - Implement LogFormat variable for data transfer average speed (GH#535)
    - Optimize per-connection file I/O when reading SFTPHostKey from disk
      (GH#1596)
    - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
      (GH#1610)
    - Reduce latency due to signal handling in the daemon process (GH#1623)
    - SSH key exchange requests should be classified into the "SEC" ExtendedLog
      class (GH#1626)
    - Update mod_exec to use the Jot API for resolving variables (GH#1630)
    - Use system TCP backlog value by default (GH#1636)
    - Gracefully handle directory creation requests when the directory already
      exists (GH#1639)
    - Remove asynchronous FTP responses emitted while computing digest values
      (GH#1661)
    - Support terminating connection after USER command when TLS is required
      (GH#1640)
    - Support OPTS commands for querying configured policy for resumed uploads,
      downloads (GH#1676)
    - MaxStoreFileSize for single user was not properly honored for SFTP uploads
      (GH#1686)
    - DisplayChdir using absolute path should work properly with DefaultRoot
      (GH#1688)
    - Clients should be disconnected when unable to be added to the
      ScoreboardFile (GH#1700)
    - Support injecting random delay when clients connect via DelayOnEvent
      (GH#1701)
    - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
    - Support obtaining default UID/GID values for AD directories in mod_ldap
      (GH#1716)
    - Update upload progress in scoreboard when throttling (GH#1433)
    - Null pointer reference encountered for FTPS connection due to config
      parser ignoring Include file problem (GH#1721)
    - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
    - mod_auth_otp should require per-user OTP entries by default (GH#1562)
    - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
      when using older OpenSSL versions (GH#1730)
    - Error resolving DNS name for implicit "server config" vhost lead to
      DelayTable not being found (GH#1746)
    - Log message for exceeding quota did not include the user/group/class quota
      type (GH#1749)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)
  - Additional C compatibility fix


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.2.rc3
changelog:
  - Update to 1.3.9rc3
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - Using mod_facl and mod_vroot at same time caused unexpected permissions
      issues (GH#1780)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
    - Implement limits@openssh.com SFTP extension (GH#1798)
    - Implement SFTPAuthPublicKeys directive for configuring the list of public
      key algorithms allowed for authentication (GH#1806)
    - Fix stack trace changing to directory with DisplayChdir file using %F
      variable on a large filesystem (GH#1819)
    - Remove inherited supplemental groups when started with root privileges
      (GH#1836)
    - SSH ECDSA host key algorithms were not being used as expected despite
      configuring appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.3.rc3
changelog:
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Paul Howarth <paul@city-fan.org> - 1.3.9-1
changelog:
  - Update to 1.3.9
    - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
      unexpected behavior (GH#1855)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
    - Added Polish translation (Bug #4511)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Update libtool.m4 for better MacOSX support (GH#1878)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-1
changelog:
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)


author: Paul Howarth <paul@city-fan.org> - 1.3.9a-2
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.9b-1
changelog:
  - Update to 1.3.9b
    - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
      CVE-2026-44331)
    - Additional fix for session management with OpenSSL 3.2.x or later, when
      using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
    - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
      expected (GH#2098)
    - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
      in mod_sftp (GH#2102)
    - SSH packet with empty payload triggered null pointer dereference in
      mod_sftp (GH#2104)
    - Bad DSA signatures could lead to out-of-bounds read of heap memory in
      mod_sftp (GH#2106)
    - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
      mod_sftp (GH#2108)
    - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
    - Several modules failed to build using OpenSSL 4.0 (GH#2120)
  - Update mod_proxy to 0.9.7
    - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
    - Set the payload_len field before checking its value (GH#292)
    - Keep the SSH packet reading code in mod_proxy more in line with what is
      done in mod_sftp, for legibility (GH#294)
    - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
      (GH#295, GH#296)
    - Correct misspellings noted by codespell (GH#297)
    - Use clang-tidy to start polishing the codebase (GH#298)
    - Disable the Nagle algorithm by default on our TCP connections to back-end
      servers (GH#299)
    - Require OpenSSL for building (GH#249, GH#300)
    - Documentation fixes
    - Implement a limit on the number of EXT_INFO extensions we'll be willing to
      accept (GH#303)
    - Comparison of expected/provided MAC data should be done in a constant-time
      manner
    - Support PKCS11-stored private keys
    - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
      post-quantum SSH key exchange mechanisms (GH#306)
    - Add sanity check for SRV record lengths
    - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
      does not underflow
    - If we detect a bad DSA signature length, properly error out
    - Ensure that RSA/DSA signatures match their expected algorithm types, and
      avoid null pointer dereferences
    - Update to build against OpenSSL 4.x (GH#313)


author: Paul Howarth <paul@city-fan.org> - 1.3.9c-1
changelog:
  - Update to 1.3.9c
    - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
    - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
    - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
    - AdminControlsACLs for config, get actions not honored as they should be
      (GH#2163)
    - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
      buffers without bounds checking (GH#2166)
    - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
      to reject illegal characters (GH#2173)
    - SQL group name lookup concatenates client-provided group names without
      escaping (GH#2188)
    - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
    - Default Controls socket ACLs unintentionally allow all users access for
      sending Controls requests (GH#2210)


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 42 >= and RHEL >= 11


author: Robert Scheck <robert@fedoraproject.org> 13.0.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371331, thanks to Marcos Mello)
  - Do not use removed /etc/pki/tls/certs/ca-bundle.crt bundle file
    for Fedora 43 >= and RHEL >= 11


author: Tom Callaway <spot@fedoraproject.org> - 13.0.4-2
changelog:
  - rebuild for lua 5.5
  - apply upstream fix for configure
  - make a new patch to actually support lua 5.5


author: Pavel Raiskup <praiskup@redhat.com> 1.22-1
changelog:
  - ajust to the current/future DNF packaging
  - fix for new DNF that doesn't accept %location in --queryformat


author: Pavel Raiskup <praiskup@redhat.com> 1.23-2
changelog:
  - using a temporary DNF cache directory, Koji FTBFS and https://github.com/fedora-copr/copr/issues/2756


author: Pavel Raiskup <praiskup@redhat.com> 1.25-1
changelog:
  - PruneRepoAnalyzer to use the temporary cachedir, too
  - Read BUILDTIME from the repo metadata, rather than every single RPM file


author: Pavel Raiskup <praiskup@redhat.com> 1.26-1
changelog:
  - dnf5 compat: Use file:// in baseurls explicitly
  - pair_srpm_rpm: migrate to DNF5, keep DNF4 backward compat
  - pair_srpm_rpm: use a correct specifier for logging strings


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.7-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.2
  - https://github.com/okbob/pspg/releases/tag/5.8.3
  - https://github.com/okbob/pspg/releases/tag/5.8.4
  - https://github.com/okbob/pspg/releases/tag/5.8.6
  - https://github.com/okbob/pspg/releases/tag/5.8.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.9-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.9
  - https://github.com/okbob/pspg/releases/tag/5.8.8


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.11-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.11
  - https://github.com/okbob/pspg/releases/tag/5.8.10


author: Pavel Raiskup <praiskup@redhat.com> - 5.8.16-1
changelog:
  - https://github.com/okbob/pspg/releases/tag/5.8.16
  - https://github.com/okbob/pspg/releases/tag/5.8.15
  - https://github.com/okbob/pspg/releases/tag/5.8.14
  - https://github.com/okbob/pspg/releases/tag/5.8.13
  - https://github.com/okbob/pspg/releases/tag/5.8.12


author: Jerry James <loganjerry@gmail.com> - 1.15-1
changelog:
  - Update to 1.15 (rhbz#2241663)
  - Change doc subpackage architecture to noarch
  - Change Source URL to tarball with the tests included
  - Add a %check script
  - Do not glob the library name
  - Minor spec file cleanups


author: Alessandro Astone <ales.astone@gmail.com> - 1.4.0-2
changelog:
  - 1.4.0
  - Add qt6-doc package for Qt6 API
  - Release number 2 because we should always be ahead of f39 for the obsoletion path


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.1.0-1
changelog:
  - Update to v25.1.0
  - Attempting using any methods that mutate an OpenSSL.SSL.Context after it
    has been used to create an OpenSSL.SSL.Connection will emit a warning. In
    a future release, this will raise an exception.


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.3.0-1
changelog:
  - Update to 25.3.0
  - pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by
    default, matching CPython’s behavior.
  - Added OpenSSL.SSL.Context.clear_mode.
  - Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS
    1.3 ciphers.
  - Added OpenSSL.SSL.Connection.set_info_callback


author: Jeremy Cline <jeremycline@microsoft.com> - 26.0.0-1
changelog:
  - Update to v26.0.0
  - Added support for using aws-lc instead of OpenSSL.
  - Properly raise an error if a DTLS cookie callback returned a cookie
    longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
    buffer-overflow. Credit to dark_haxor for reporting the issue.
    CVE-2026-27459
  - Added OpenSSL.SSL.Connection.get_group_name to determine which group name
    was negotiated.
  - Context.set_tlsext_servername_callback now handles exceptions raised in
    the callback by calling sys.excepthook and returning a fatal TLS alert.
    Previously, exceptions were silently swallowed and the handshake would
    proceed as if the callback had succeeded. Credit to Leury Castillo for
    reporting this issue. CVE-2026-27448


author: Marie Loise Nolden <loise@kde.org> - 6.8.2.1-2
changelog:
  - fix build due to 
    
    CFLAGS="${CFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection   }" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection   }" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection   -I/usr/lib64/gfortran/modules }" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=thin -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS --config=/usr/lib/rpm/redhat/redhat-hardened-clang.cfg -fstack-protector-strong   -m64 -march=x86-64-v3 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection   -I/usr/lib64/gfortran/modules }" ; export FCFLAGS ; 
    VALAFLAGS="${VALAFLAGS:--g}" ; export VALAFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,pack-relative-relocs -Wl,-z,now --config=/usr/lib/rpm/redhat/redhat-hardened-clang-ld.cfg  -flto=thin -ffat-lto-objects -Wl,--build-id=sha1  }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-clang}" ; export CC ; 
    CXX="${CXX:-clang++}" ; export CXX 
    /usr/bin/cmake \
          -S "." \
          -B "redhat-linux-build" \
          -DCMAKE_C_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_CXX_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_Fortran_FLAGS_RELEASE:STRING="-DNDEBUG" \
          -DCMAKE_VERBOSE_MAKEFILE:BOOL=ON \
          -DCMAKE_INSTALL_DO_STRIP:BOOL=OFF \
          -DCMAKE_INSTALL_PREFIX:PATH=/usr \
          -DINCLUDE_INSTALL_DIR:PATH=/usr/include \
          -DLIB_INSTALL_DIR:PATH=/usr/lib64 \
          -DSYSCONF_INSTALL_DIR:PATH=/etc \
          -DSHARE_INSTALL_PREFIX:PATH=/usr/share \
          -DLIB_SUFFIX=64 \
          -DBUILD_SHARED_LIBS:BOOL=ON macro change after removal of -DLIB_SUFFIX in rawhide
  - prepare documentation build


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.33.0-1
changelog:
  - Update to 0.33.0 (close RHBZ#2353440)
  - Drop the -doc subpackage (PDF docs and examples) for simplicity


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.33.0-3
changelog:
  - Backport to EPEL10
  - Restore -doc subpackage, removed in Fedora
  - Remove spec-file conditionals and let the branches diverge


author: Robert-André Mauchin <eclipseo@mauchin.fr> - 0.7.8-9
changelog:
  - Switch to manual dependencies for tests and documentation
  - Remove -t option from %%pyproject_buildrequires
  - Remove patch as we won't use requirements-dev.txt


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.9-2
changelog:
  - Patch to explicitly distribute brukerapi.config
  - Fixes a warning from setuptools about ambiguous configuration


author: Scott K Logan <logans@cottsay.net> - 1.1.0-1
changelog:
  - Update to 1.1.0 (rhbz#2394423)
  - Replace macro use in URL/Source0 fields for spec legibility
  - Move doc subpackage after python3 so %{summary} resolves correctly


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.127-1
changelog:
  - Explicitly ask which user checks the permissions
  - Make sure user can build in the project before uploading


author: Pavel Raiskup <praiskup@redhat.com> 1.130-1
changelog:
  - priority=X support added for copr project repositories
  - several forward/backward compat fixes with libs/tooling


author: Jakub Kadlcik <frostyx@email.cz> 1.132-1
changelog:
  - Discourage from deleting objects while paginating over them
  - Suggest pagination only when a GET request timeouts


author: Jakub Kadlcik <frostyx@email.cz> 2.2-1
changelog:
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove rhel7 conditions and remove python2 support


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Use correct used HTTP methods for delete and update requests
  - Introduce v3.requests.DELETE method


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Don't traceback new-api-token for default config
  - Bypass anubis challenge by setting copr user agent
  - Use Tito to generate component.__version__


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.7-1
changelog:
  - Update to 1.1.7 (close RHBZ#2115204)
  - Port to pyproject-rpm-macros
  - Add extras metapackages
  - Build Sphinx documentation as PDF rather than HTML to avoid issues with
    bundled and precompiled JavaScript etc.
  - Split out a python3-dateparser-scripts subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.1-1
changelog:
  - Update to 0.7.1 (close RHBZ#2239611)
  - The hard dependency on python-psutil is dropped; there is a new
    memory_info extra and a corresponding metapackage, upon which we carry a
    weak (Recommends:) dependency.


author: Michel Lind <salimma@fedoraproject.org> - 2.0.4-6
changelog:
  - Disable doc building on EL9
  - Don't use deprecated %%pyproject_build_lib
  - Use SPDX license identifier


author: Steve Traylen <steve.traylen@cern.ch> - 1.8.2-1
changelog:
  - Update to 1.8.2 rhbz#2377100
  - Stop using deprecated py3 macros. rhbz#2450068
  - Run tests with tox


author: Gwyn Ciesla <gwync@protonmail.com> - 3.3.0-1
changelog:
  - 3.3.0
    - Add support and tests for 'Match final ..' (frequently used in ProxyJump
      configurations to exclude the jump host) to our SSH config parser (GH#1907,
      GH#1992)
    - Add an explicit 'max_concurrent_prefetch_requests' argument to
      'paramiko.client.SSHClient.get' and 'paramiko.client.SSHClient.getfo',
      allowing users to limit the number of concurrent requests used during
      prefetch (GH#1587, GH#2058)


author: Paul Howarth <paul@city-fan.org> - 3.3.1-1
changelog:
  - Update to 3.3.1 (rhbz#2227478)
    - Cleaned up some very old root level files, mostly just to exercise some of
      our doc build and release machinery


author: Gwyn Ciesla <gwync@protonmail.com> - 3.4.0-1
changelog:
  - 3.4.0
    - 'Transport' grew a new 'packetizer_class' kwarg for overriding the
      packet-handler class used internally (mostly for testing, but advanced
      users may find this useful when doing deep hacks)
    - Address CVE 2023-48795 (https://terrapin-attack.com/) a.k.a. the "Terrapin
      Attack", a vulnerability found in the SSH protocol re: treatment of packet
      sequence numbers) as follows:
      - The vulnerability only impacts encrypt-then-MAC digest algorithms in
        tandem with CBC ciphers, and ChaCha20-poly1305; of these, Paramiko
        currently only implements 'hmac-sha2-(256|512)-etm' in tandem with
        'AES-CBC'; if you are unable to upgrade to Paramiko versions containing
        the below fixes right away, you may instead use the 'disabled_algorithms'
        connection option to disable the ETM MACs and/or the CBC ciphers (this
        option is present in Paramiko ≥ 2.6)
      - As the fix for the vulnerability requires both ends of the connection to
        cooperate, the below changes will only take effect when the remote end is
        OpenSSH ≥ 9.6 (or equivalent, such as Paramiko in server mode, as of this
        patch version) and configured to use the new "strict kex" mode (Paramiko
        will always attempt to use "strict kex" mode if offered by the server,
        unless you override this by specifying 'strict_kex=False' in
        'Transport.__init__')
      - Paramiko will now raise an 'SSHException' subclass ('MessageOrderError')
        when protocol messages are received in unexpected order; this includes
        situations like receiving 'MSG_DEBUG' or 'MSG_IGNORE' during initial key
        exchange, which are no longer allowed during strict mode
      - Key (re)negotiation -- i.e. 'MSG_NEWKEYS', whenever it is encountered --
        now resets packet sequence numbers (this should be invisible to users
        during normal operation, only causing exceptions if the exploit is
        encountered, which will usually result in, again, 'MessageOrderError')
      - Sequence number rollover will now raise 'SSHException' if it occurs
        during initial key exchange (regardless of strict mode status)
    - Tweak 'ext-info-(c|s)' detection during KEXINIT protocol phase; the
      original implementation made assumptions based on an OpenSSH implementation
      detail


author: Paul Howarth <paul@city-fan.org> - 3.4.0-6
changelog:
  - Fix detection of SHA1 signing support
    https://github.com/paramiko/paramiko/pull/2420
    https://github.com/pyca/cryptography/issues/11332
    https://github.com/PyO3/pyo3/issues/3059
  - Remove cache Sphinx build folder ".doctrees"


author: Paul Howarth <paul@city-fan.org> - 3.4.1-1
changelog:
  - Update to 3.4.1
    - Massage our import of the TripleDES cipher to support Cryptography ≥ 43;
      this should prevent 'CryptographyDeprecationWarning' from appearing upon
      import (GH#2419, GH#2421)
    - Modify a test-harness skiptest check to work with newer versions of
      Cryptography (GH#2420)
    - Fix a 64-bit-ism in the test suite so the tests don't encounter a false
      negative on 32-bit systems (GH#2353)


author: Paul Howarth <paul@city-fan.org> - 3.5.0-1
changelog:
  - Update to 3.5.0 (rhbz#2312503)
    - Add support for AES-GCM encryption ciphers (128 and 256 bit variants)
      (GH#982, GH#2157, GH#2444, rhbz#2311855); this functionality has been
      tested in client mode against OpenSSH 9.0, 9.2 and 9.6, as well as against
      a number of proprietary appliance SSH servers
    - Check for 'None' transport members inside '~paramiko.channel.Channel' when
      closing the channel; this likely doesn't come up much in the real world,
      but was causing warnings in the test suite


author: Paul Howarth <paul@city-fan.org> - 3.5.1-1
changelog:
  - Update to 3.5.1 (rhbz#2343673)
    - Private key material is now explicitly 'unpadded' during decryption,
      removing a reliance on some lax OpenSSL behavior and making us compatible
      with future Cryptography releases (GH#2490)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.5-1
changelog:
  - Starting with Fedora 43, do not build PDF documentation
  - Drop the -doc subpackage (again, starting with Fedora 43)


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2-0.3.git91d1781
changelog:
  - remove Provides and Obsolutes, dnf should automatically remove any transient dependencies by itself
  - remove -r option from  macro pyproject_buildrequires
  - use macro %{pyproject_files} and %pyproject_save_files pyliblo3}
  - remove python3 requirements, because the macro %pyproject_buildrequires is used


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2-0.4.git91d1781
changelog:
  - Use correct source tag address
  - Recompile `.pyx` file
  - Fix permission of NEWS README.md and COPYING


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-1
changelog:
  - Add patch `type-erase lo_blob_dataptr input` for _liblo.pyx
  - Add obsolete for older version of pyliblo
  - Add Requires to doc subpackage


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Scott K Logan <logans@cottsay.net> - 0.26.0-1
changelog:
  - Update to 0.26.0 (rhbz#2307470)
  - Switch to pyproject build macros (rhbz#2378179)
  - Add patch for sphinx 8 compatibility (rhbz#2329891)
  - Review SPDX licensing


author: Scott K Logan <logans@cottsay.net> - 1.6.0-1
changelog:
  - Update to 1.6.0 (rhbz#2342035)
  - Drop spec file support for RHEL 7
  - Review SPDX licensing
  - Fix summary on Python 3 subpackage


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2.4.0-19
changelog:
  - Disable tests, which require python-matplotlib, which in turn have an
  extensive list of BRs including tex, xorg-x11-server-Xvfb, inkscape, and
  half a dozen pyton-* pkgs. When all the BRs are satisfied we can enable
  tests again.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.0-12
changelog:
  - Fix source archive committed to dist-git
  - Stop pretending we will use this spec file for EPEL7/8
  - Reduce macro indirection in the spec file
  - Drop unnecessary BuildRequires on git
  - Improve the source archive URL
  - Update summary and description from upstream
  - Rename the binary RPM to match the canonical project name
  - Fix incorrect file and directory permissions
  - Build docs as PDF instead of HTML to sidestep most issues with bundling etc.
  - Adjust spec-file whitespace for readability
  - Stop doing coverage analysis
  - Package the changelog
  - Confirm License is SPDX MIT
  - Port to pyproject-rpm-macros


author: Jerry James <loganjerry@gmail.com> - 5.0-1
changelog:
  - Version 5.0
  - Convert the License field to SPDX
  - Drop upstreamed patches
  - Simplify with pyproject_save_files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.1.48-1
changelog:
  - Update to 3.1.48; closes RHBZ#2460480, fixes GHSA-rpm5-65cw-6hj4,
    fixes GHSA-x2qx-6953-8485, and fixes GHSA-7545-fcxq-7j24


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.8.0-1
changelog:
  - Stop generating HTML documentation; Obsolete the -doc subpackage
  - Update to 4.8.0 (close RHBZ#2236330)


author: Carl George <carlwgeorge@fedoraproject.org> - 3.7.2-1
changelog:
  - Update to 3.7.2, resolves rhbz#2209379
  - Remove mypy build requirement
  - Run tests directly with pytest to avoid tox build requirement
  - Run import check when tests are disabled
  - Remove duplicate license file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.30.0-2
changelog:
  - Conditionalize python-k5test test dependency
  - Allows building on EPEL10, where it is currently unavailable


author: Georg Sauthoff <mail@gms.tf> - 2.14.2-1
changelog:
  - Update to latest upstream version (fixes fedora#2255038)
  - Fix CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (fixes fedora#2254210)


author: Zane Bitter <zaneb@fedoraproject.org> 0.6.0-1
changelog:
  - Fix compatibility with Python 3.15.0a5 (rhbz#2424583)
  - Comply with PEP540 UTF-8 Mode
  - Defer to stdlib for argparse coloring in Python 3.14 and later
  - Add feature to specify a default error code


author: Onuralp SEZER <thunderbirdtr@fedoraproject.org> - 2.7.0-1
changelog:
  - Update python-cairosvg version 2.7.0
  - Disable isort flake8 patch updated
  - Fix CVE-2023-27586 - BZ#2180272 BZ#2180271


author: Michel Lind <salimma@fedoraproject.org> - 2.9.0-1
changelog:
  - Update to 2.9.0 upstream release
  - Resolves: rhbz#2229363
  - Resolves: CVE-2026-31899
  - Enable Packit
  - Drop unneeded test shenanigans
  - Enforce that license is preinstalled, stop installing by hand


author: Scott K Logan <logans@cottsay.net> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Review SPDX license
  - Drop spec file support for EPEL 7
  - convert license to SPDX


author: Benjamin A. Beasley <code@musicinmybrain.net> - 24.1.2-2
changelog:
  - Enable the msgspec extra on Fedora F41 and later
  - The python-msgspec package now works with Python 3.13.


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 18.9.0-5
changelog:
  - Add patch for compatibility with Python 3.13, workaround removed cgi stdlib module
  - Fixes: rhbz#2256924


author: Steve Traylen <steve.traylen@cern.ch> - 4.13.2-1
changelog:
  - Update to 4.13.2
  - New --with bootstrap flag for stestr dep
  - Use pyproject macros file list
  - Remove redundant pyproject-rpms-macro BR
  - Remove redundant seds from setup


author: Scott K Logan <logans@cottsay.net> - 0.3.2-1
changelog:
  - Rebuilt to change main python from 3.4 to 3.6 in EPEL 7
  - Handle automatic dependency generation (f30+)


author: Scott K Logan <logans@cottsay.net> - 0.18.1-1
changelog:
  - Update to 0.18.1 (rhbz#2300129)
  - Drop RHEL 7 spec support
  - Use boolean operators for backwards compatibility package dependencies


author: Scott K Logan <logans@cottsay.net> - 0.2.2-1
changelog:
  - Update to 0.2.2
  - Rebuilt to change main python from 3.4 to 3.6 in EPEL 7
  - Handle automatic dependency generation (f30+)


author: Scott K Logan <logans@cottsay.net> - 0.3.2-1
changelog:
  - Update to 0.3.2
  - Rebuilt to change main python from 3.4 to 3.6 in EPEL 7
  - Handle automatic dependency generation (f30+)


author: Carl George <carl@george.computer> - 0.7-17
changelog:
  - Convert to pyproject macros
  - Switch to SPDX license identifier
  - Rebuild for Python 3.12, resolves rhbz#2226174


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 2.8-1
changelog:
  - Update python-crc32c package to version 2.8
  - Bump version from 2.7.1 to 2.8
  - Remove bcond tests conditional compilation flag
  - Remove build requirement wheel and pytest which is already provided
    dynamically
  - Simplify buildrequires generation with -g test flag
  - Add manual page generation using help2man
  - Remove conditional test execution (always run tests now)
  - Update file list in the %files section
  - Clean up spec file formatting and remove unnecessary blank lines


author: Carl George <carlwgeorge@fedoraproject.org> - 1.6^1.1484546-1
changelog:
  - Update to latest upstream snapshot
  - Resolves Python 3.13 build error rhbz#2246053
  - Switch to SPDX license notation


author: Sandro <devel@penguinpee.nl> - 2025.4.0-1
changelog:
  - Update to 2025.4.0 (RHBZ#2338642)
  - Fix path for `--ignore` on `s390x`
  - Exclude tests previously excluded for dask-expr


author: Packit <hello@packit.dev> - 1.2.14-1
changelog:
  - Drops seemingly unused importlib-metadata dev dep (Colin Dean)
  - Fixes comment on which version is development branch (Colin Dean)
  - Adds Pythons dropped notice to changelog (Colin Dean)
  - Drops limitation on tox < 4 since bug was fixed (Colin Dean)
  - Adds srpm_build_deps to Packit config (Colin Dean)
  - Try explicitly setting AppVeyor image to VS2022 (Colin Dean)
  - Exclude pypy3 on ppc64le on Travis builds (Colin Dean)
  - Drops old Pythons and adds newer ones for Appveyor build (Colin Dean)
  - Drop the .9 from pypy3 in tox.ini (Colin Dean)
  - Use specifically pypy3.9 v7.3.9 (Colin Dean)
  - Adds Python 3.12 config to tox (Colin Dean)
  - Limit tox to <4 on Travis because of outdatedness (Colin Dean)
  - Try installing importlib_metadata for tox run (Colin Dean)
  - Use newer Travis environment, Focal (Ubuntu 20.04) (Colin Dean)
  - Adds importlib-metadata to dev deps (Colin Dean)
  - Split and fix tox config for more better coverage (Colin Dean)
  - Dropping support for Python older than v3.7 in build systems like pytest and tox, while ensuring the library remains production-compatible. (Colin Dean)
  - Drops Python 2.7, 3.5, 3.6 builds from Travis; add 3.12 (Colin Dean)
  - Upgrades some actions versions in Actions python builds (Colin Dean)
  - Drops Actions builds for Python 2.7, 3.5, 3.6; condense 3.7+ (Colin Dean)
  - Bump checkout to v3 in CodeQL Analysis workflow (Colin Dean)
  - Add support for Python 3.11 (Hugo van Kemenade)
  - edit changelog (Pierrick Rambaud)
  - add test for D213 docstrings (Pierrick Rambaud)
  - work with empty docstring (Pierrick Rambaud)
  - fix: digest D212 and D213 docstring (Pierrick Rambaud)
  - Add support for Python 3.10 (Hugo van Kemenade)
  - Prepare next version 1.2.14 (unreleased) (Laurent LAPORTE)
  - Minor change in bumpversion  configuration to also bump the project version in "appveyor.xml". (Laurent LAPORTE)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.36.00-1
changelog:
  - Update to 6.36.00
  - Enable the R interface for EPEL 10.1
  - Removed subpackages: root-gui-qt5webdisplay, -hist-draw, -histv7 and -html
  - New subpackage: root-roofit-codegen


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.36.00-2
changelog:
  - Add root-tree-ntuple and root-tree-ntuple-utils dependensies to root-core
    (listed in root-config --libs)
  - Rename root-fonts package to root-font-files
  - Add optional test dependency python3-pandas now available in EPEL 10
  - Add dependency jupyter-notebook to root-jupyroot for EPEL 10.1 and later
  - Fix Python 3.14 refcount issues in tests


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Michel Lind <salimma@fedoraproject.org> - 1.0.6-1
changelog:
  - Update to version 1.0.6
  - Modernize to follow the latest Python packaging guidelines
  - Generate extras subpackages
  - Enable import checks
  - Run unit tests
  - Use proper SPDX license identifier (zlib -> Zlib)
  - Enable Packit for future Rawhide updates


author: Michel Lind <salimma@fedoraproject.org> - 1.1.8-1
changelog:
  - Update to 1.1.8 upstream release
  - Add conditional BR on openssl to run some tests
  - Remove unneeded `upstream_project_url` from packit.yaml


author: Carl George <carlwgeorge@fedoraproject.org> - 0.9.0-1
changelog:
  - Switch to docopt-ng upstream rhbz#2267060
  - Convert to pyproject macros
  - Confirmed SPDX license identifier


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Completely modernize (and greatly simplify) the packaging
  - Use pyproject-rpm-macros (fix RHBZ#2377674)
  - Package from the GitHub archive instead of the PyPI sdist
  - Run the tests
  - Use the provisional pyproject declarative buildsystem


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4-1
changelog:
  - Update to 0.4 (close RHBZ#2220948)
  - Upstream switched from setuptools to flit_core: pyproject-rpm-macros no
    longer handles LICENSE.txt


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.2-3
changelog:
  - Apply a patch to fix typos
  - This includes user-visible fixes for minor typos in README.md and
    CHANGELOG.md


author: Steve Traylen <steve.traylen@cern.ch> - 0.5-1
changelog:
  - Update to 0.5 release - rhbz#1595860
  - Run tests with pytest macro - rhbz#2319655
  - Correct autogenerated license field
  - Switch source to github URL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.0^20240916git3f11fdc-1
changelog:
  - Package a post-release snapshot to fix regressions
  - Add a build conditional to optionally enable very slow tests; enable them


author: Carl George <carlwgeorge@fedoraproject.org> - 1:3.1.3-1
changelog:
  - Update to version 3.1.3
  - Generate build requirements automatically
  - Add upstream patch for Python 3.13 rhbz#2291695


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.115.10-3
changelog:
  - Fix boostrapping
  - Break the circular dep. with python-sqlmodel
  - Don’t run test_fastapi_cli when bootstrapping


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.115.10-4
changelog:
  - Improve conditionalized build dependencies
  - Make sure they work as advertised, together or separately
  - Add conditionals for some things that are missing in EPEL10 so we can
    more easily see what would be required to branch there; however, nobody
    has yet requested this package in EPEL10, we have no concrete plans to
    branch it there, and we still lack some hard dependencies


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Fix Source URL (frostyx@email.cz)
  - Unify descriptions and mention querying bodhi (frostyx@email.cz)
  - Link fedfind project (frostyx@email.cz)
  - make repository REUSE compliant (msuchy@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Drop bodhi-client dependency (frostyx@email.cz)
  - Add installation instructions (frostyx@email.cz)
  - Show how to get only version numbers (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.3-1
changelog:
  - Make sure everything behaves correctly during the branching window
    (frostyx@email.cz)
  - Add releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.5-1
changelog:
  - Implement a caching mechanism (frostyx@email.cz)
  - Return bodhi releases as simple dicts (frostyx@email.cz)
  - Add CLI (mfocko@redhat.com)
  - Use pagination for bodhi's API (carlwgeorge@gmail.com)
  - Combine HTTP calls in bodhi_active_releases (carlwgeorge@gmail.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.7-1
changelog:
  - Exclude archived releases (nforro@redhat.com)
  - Generate aliases for minor versions of EPEL (nforro@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 1.8-1
changelog:
  - Implement a filter_distro helper function (frostyx@email.cz)
  - Test EPEL minor version aliases after 10.1 branching (nforro@redhat.com)


author: Scott K Logan <logans@cottsay.net> - 0.2.1-2
changelog:
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Enable doctest check using pytest


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.19.2-1
changelog:
  - Version 0.19.2 (rhbz#2355107)
  - Just two small changes related to unexpected AttributeError thrown by the
    code.


author: Packit <hello@packit.dev> - 5.6.0-1
changelog:
  - Update to 5.6.0 upstream release
  - Resolves: rhbz#2312193
  - Relax specific required versions of of httpx, gql and respx


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.3-4
changelog:
  - Avoid an unneeded dependency on python3-tomli
  - Use tomllib from the Python 3.11+ standard library instead


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.10.0-1
changelog:
  - Update to 0.10.0
  - Switch to psf fork
  - Adopt rpmautospec
  - Adopt pyproject-rpm-macros
  - Misc clean-ups


author: Carl George <carlwgeorge@fedoraproject.org> - 1.0.8-1
changelog:
  - Update to version 1.0.8 rhbz#2359117
  - Fix Python 3.14 AttributeError rhbz#2353138
  - Enable tests on EPEL


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.1-7
changelog:
  - Do not spuriously attempt to generate BuildRequires from tox
    (fix RHBZ#2354110)
  - Add an import-only smoke test, and document why we cannot run tests
  - Fix missing license file
  - Remove language about Python 3 in the description, left over from when we
    also had Python 2


author: Steve Traylen <steve.traylen@cern.ch> - 1.48.0-4
changelog:
  - Create sub packages for ciso, async and extra
  - Stop running non-existent tox testing
  - Relax some strong versionion of dependencies


author: Ondrej Mosnáček <omosnacek@gmail.com> - 4.0.0-2
changelog:
  - Fix the install command to comply with guidelines
  - Use %{pyproject_[save_]files}
  - Fix EPEL9 build


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-1
changelog:
  - Upgrade to version 0.9.0 rhbz#2348855
  - Replaces the previous workaround for Python 3.14 rhbz#2327982


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-3
changelog:
  - Use the older flit_core in EPEL10 by reverting upstreams patch
  - Skip the pytest-trio dependency as it is anyway not used without DBus


author: Jason Montleon <jmontleo@redhat.com 1:30.1.0-5
changelog:
  - Fix fail to install for tests sub-package for EPEL 9.
  - BZ #2314125 will fully resolve FTI on EPEL 10.


author: Miro Hrončok <mhroncok@redhat.com> - 1:31.0.0-2
changelog:
  - Remove unused tests Requires
  - https://fedoraproject.org/wiki/Changes/DeprecateNose
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonMock


author: Fedora Release Monitoring <release-monitoring@fedoraproject.org> - 1:34.1.0-2
changelog:
  - Drop urllib3 upper limit so the package can be installed, https://github.com/kubernetes-client/python/issues/2458


author: Sudip Shil <sshil@redhat.com> - 1.0.9-2
changelog:
  - License changed to Apache-2.0(SPDX format)
  - Removed Requires: python3dist(six) because it's auto generated


author: Carl George <carlwgeorge@fedoraproject.org> - 2.9.1-10
changelog:
  - Update license tag to LGPL-3.0-or-later
  - Remove duplicate COPYING.LESSER.txt license file
  - Run an import check and the upstream test suite in %check


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.0-10
changelog:
  - Drop the hypothesmith test dependency (omit fuzz tests)
  - Also drop hypothesis since it is also only used for fuzz tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.22.0-1
changelog:
  - Update to 0.22.0 (close RHBZ#1873395)
  - The “sassc” module is removed upstream; we already did not install
    /usr/bin/sassc due to conflicts with libsass.


author: Karolina Surma <ksurma@redhat.com> - 2.2.0-1
changelog:
  - Update to 2.2.0, includes the fix for CVE-2023-26302
  Resolves: rhbz#2172373 rhbz#2177154
  - Provide extra subpackages: linkify and plugins


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.9.1-0
changelog:
  - bootstrap epel10
  -  temporarily (or is it?) remove qt5 sub-package. Will epel10 get qt5?
  -  temporarily remove test w/ xvfb-run until I can figure out the
     proper replacement.
  -  inkscape seems to not be needed. Or am I wrong about that? It builds 
     without it as a BR. Will add it back when inkscape is built for EPEL10.


author: Michel Lind <salimma@fedoraproject.org> - 1.4.3-1
changelog:
  - Update to 1.4.3 upstream release
  - Resolves: rhbz#2337263
  - Exclude tests that require griffe
  - Deselect one failed test


author: Jerry James <loganjerry@gmail.com> - 1.3.0-7
changelog:
  - Restore the doc subpackage
  - Minimize the LaTeX dependencies
  - Use modern python macros
  - Migrate License field to SPDX
  - Package the gmpy2 extra
  - Minor spec file cleanups


author: Tim Semeijn <tim@goat.re> - 1.5.0-1
changelog:
  - Update to 1.5.0 > - Drop obsolete python-mrcfile-issue-49.patch > - Use
    %autorelease and %autochangelog


author: Tim Semeijn <tim@goat.re> - 1.5.0-2
changelog:
  - Update to 1.5.0 - Drop obsolete python-mrcfile-issue-49.patch - Use
    %autorelease and %autochangelog


author: Tim Semeijn <tim@goat.re> - 1.5.0-3
changelog:
  - Update to 1.5.0
  - Drop obsolete python-mrcfile-issue-49.patch
  - Use %autorelease and %autochangelog


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.0.1-3
changelog:
  - epel10
  - add BR for python-soupsieve to eliminate an error
  - temp remove %check due to 11 new failing tests. To be restored at some
    future date


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.18-3
changelog:
  - Revert "Fix automatic provides on Python extension due to SONAME"
  - The fix is in rust-1.81.0-4 and later, which is now in all stable
    branches, so this workaround is no longer necessary.


author: Petr Šplíchal <psplicha@redhat.com> - 1.9.0-1
changelog:
  - Fix initializing version object by a version object (#48)
  - Send cookies with Python 3 as well
  - Rename required package, fix docs building & tests (#46)
  - Do not build and test on `epel-7` anymore
  - Use the `py3_shebang_fix` macro instead of `pathfix.py`
  - Add an explicit config for building readthedocs
  - Include srpm build requirements in Packit config
  - Remove 'enable_net' from Packit config
  - Remove 'metadata' from Packit config
  - Add missing build job(s) to Packit config


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-1
changelog:
  - Update to 1.8.0 (close RHBZ#1466314)
  - Update License to SPDX
  - Port to pyproject-rpm-macros (new Python guidelines)
  - Package additional text documentation files
  - Remove dependency on deprecated python-mock package
  - Add a man page, generated with help2man


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.8.5-2
changelog:
  - Revert changes in 2.8.5 which causes problems in PyTables (#2231686).
    Upstream is still working on a fix, and it seems that this functionality
    needs more design work. This reverts all the commits related to
    validation of expressions.


author: Maja Massarini <mmassari@redhat.com> - 0.54.0-1
changelog:
  - Support for Forgejo pull requests has been added. (#925)
  - We have added support for Forgejo methods related to permissions. (#918)


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Packit <hello@packit.dev> - 0.60.0-1
changelog:
  - A new method `get_rate_limit_remaining()` to check rate limit thresholds has been added to the service API. (#970)
  - Resolves: rhbz#2430818


author: Packit <hello@packit.dev> - 0.60.1-1
changelog:
  - The method `get_rate_limit_remaining()` now also supports repository-specific checks for GitHub. (#972)
  - Resolves: rhbz#2435481


author: Packit <hello@packit.dev> - 0.61.1-1
changelog:
  - Force downstream synchronization of upstream configuration to enable side tagging in EPEL 10.
  - Resolves: rhbz#2437993


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.19.5-4
changelog:
  - Work around Python 3.14 issues; fixes RHBZ#2372014
  - Do not error on warnings, particularly DeprecationWarning
  - Report and skip TestImportModelCreate::test_dynamic_model regression


author: Miro Hrončok <miro@hroncok.cz> - 4.1.0-16
changelog:
  - Drop redundant test BuildRequires on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.10.13-1
changelog:
  - Update to 3.10.13 (close RHBZ#2334886)
  - Work around upstream’s maturin version pin to allow building with maturin
    1.8.0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.10.16-1
changelog:
  - Update to 3.10.6 (close RHBZ#2354600)
  - Fixes compatibility with CPython 3.14 alpha 6 (close RHBZ#2349447)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Carl George <carlwgeorge@fedoraproject.org> - 1.2.0-1
changelog:
  - Update to version 1.2.0, resolves rhbz#2097140
  - Switch to SPDX license identifier
  - Always run tests


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.0-5
changelog:
  - F38+: Use %{py3_test_envvars} to run tests
  - Set the same environment variables for nose2 and unittest as for pytest
    when testing with different runners


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.19.0-11
changelog:
  - Correct the License (and convert to SPDX)
  - Before 1.19.1, the package had an incorrect trove classifier indicating a
    BSD license, but the license file had MIT text; see
    https://github.com/r1chardj0n3s/parse/issues/145.


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 3.10.1-1
changelog:
  - Update to upstream.
  - Update URL according to redirection on github.
  - Source URL updated to github, unable to download from pypi.
  - CGI warnings have been disabled, no cgi used in this version.


author: Ondřej Pohořelský <opohorel@redhat.com> - 0.2.12-1
changelog:
  - Update to 0.2.12
  - Migrate to the newest python macros
  - Convert license to SPDX
  - Resolves: rhbz#2137836


author: Benjamin A. Beasley <code@musicinmybrain.net> - 20240706-4
changelog:
  - F43+: No longer build PDF docs (simplify the package)
  - The -doc subpackage is dropped and Obsoleted


author: Benjamin A. Beasley <code@musicinmybrain.net> - 20250327-3
changelog:
  - Backport to EPEL10
  - Remove conditionals, Obsoletes, etc. for other releases
  - Work around buildroot-only adobe-mappings-cmap-devel


author: Sandro <devel@penguinpee.nl> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Use upstreamed patch (now applies cleanly)
  - Handle test dependencies using extras
  - Fix %doc file list


author: Michel Lind <salimma@fedoraproject.org> - 0.2.6-1
changelog:
  - Update to 0.2.6 upstream release
  - Drop unneeded extra sources and backported patches
  - Resolves: rhbz#2386020


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Robert Scheck <robert@fedoraproject.org> - 0.10.0-11
changelog:
  - Update license identifier to SPDX expression
  - Add patch proposal to change incompatible pointer type (#2259528)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.23.4-2
changelog:
  - Rebuilt with idna 1.x; no longer allow older idna versions
  - Expect maturin to handle license files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.10.4-2
changelog:
  - Add build conditionals for several extras
  - This allows branching to EPEL10 without some optional dependencies


author: Jerry James <loganjerry@gmail.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Verify the license is valid SPDX
  - Automatically generate python BuildRequires
  - Modernize python RPM macro usage
  - Update description to remove upper bound on graphviz attribute support


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.3.0-2
changelog:
  - Test fix: patch httpretty socket for latest urllib3 release
  - Test fix: work around expired test token
  - Fixes RHBZ#2334702


author: Jerry James <loganjerry@gmail.com> - 1.12-1
changelog:
  - Version 1.12
  - SPDX migration
  - Update home page URL
  - Update python RPM macro usage
  - Automatically generate python BuildRequires


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.8-7
changelog:
  - Use tomllib instead of toml (used only in tests)
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Scott K Logan <logans@cottsay.net> - 0.9.3-1
changelog:
  - Update to 0.9.3 (rhbz#2241970)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros
  - Switch to SPDX license identifier


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.16.5-2
changelog:
  - Fix reading numeric array data on big-endian hosts
  - Build on all architectures (arched base package) to help detect any
    future endian-related regressions


author: Packit <hello@packit.dev> - 1.16.6-1
changelog:
  - Update to 1.16.6 upstream release
  - Resolves: rhbz#2275890
  - Splits the examples into a separate subpackage


author: Peter Bieringer <pb@bieringer.de> - 3.5.2-1
changelog:
  - Add support for optional environment file /etc/sysconfig/radicale
  - Package template for /etc/sysconfig/radicale
  - Update to 3.5.2


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Peter Bieringer <pb@bieringer.de>
changelog:
  - Add missing requirement InfCloud-fontware to InfCloud
  - Extend SELinux policy for access to /run/systemd/userdb/io.systemd.DynamicUser on start


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.2-6
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Jerry James <loganjerry@gmail.com> - 1.0.0-1
changelog:
  - Version 1.0.0
  - Drop upstreamed Sphinx 4 patch
  - Convert License tag to SPDX
  - Run the tests now that upstream provides some
  - Add patch for compatibility with Sphinx 7.2.x


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 3.0.0-1
changelog:
  - Update to upstream
  - Disable crypt check. Crypt module has been removed from python3.13,
    repoze-who works well without it and therefore this test is useless
  - Use pytest instead of setup.py test


author: Carl George <carl@george.computer> - 1.0.0-14
changelog:
  - Convert to pyproject macros
  - Rename binary package to follow guidelines
  - Update license field to use SPDX identifier


author: Dan Radez <dradez@redhat.com> - 0.4.0-1
changelog:
  - RHBZ#2284361
    Updating to new upstream project, see comment at
    https://github.com/msabramo/requests-unixsocket/issues/73#issuecomment-2125848213
    Dated: May 22, 2024

    FYI to all: since this project seems to be abandoned, but its longevity is important to my team,
    we've forked the project as requests-unixsocket2. It should be a drop in replacement for this package.

    PyPI: https://pypi.org/project/requests-unixsocket2/0.4.0/
    Repository: https://gitlab.com/thelabnyc/requests-unixsocket2
    We've migrated the fix for this issue there, merged it, and released to PyPI as part of v0.4.0.
  - Updated to pyproject macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.1-13
changelog:
  - Simplify and reformat the spec file
  - Deconditionalize the tests
  - Stop using the “forge macros,” which don’t contribute much here


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.14.6-15
changelog:
  - Backport to EPEL10
  - Revert "F41+: Use the provisional declarative buildsystem"
  - Allow typing-extensions 4.9.0
  - Disable tests requiring inline-snapshot (all of them, unfortunately)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main pyyhon package
  - New subpackages: root-package graf3d-glad, root-package net-curl,
    root-package tmva-sofie-parser-python, root-package tree-ml,
    root-package histv7util
  - Dropped patches: 2
  - New patches: 7


author: Ondřej Nosek <onosek@redhat.com> - 1.67-1
changelog:
  - Include URL in upload/download (walters)
  - Use python-requests-gssapi instead of -kerberos (lsedlar)
  - man page generator: use $SOURCE_DATE_EPOCH if specified (zbyszek)
  - do not block tag --clog due autospec usage (msuchy)
  - Processing of another return message from lookaside cache (onosek)
  - Allow setting --force for sources command by env var (lsedlar)
  - Update docker image for Jenkinks tests (onosek)
  - '_set_token' method moved to a shared place (onosek)
  - Fix copr-build command with results_dir=subdir option (otto.liljalaakso)
  - mockbuild: use results/mock_* when results_dir=subdir (tmz)
  - Add option to mockbuild use default resultdir of mock (v3) (sergio)
  - Restrict completion to .src.rpm files for import - #706 (orion)
  - `remote add` command: create a non-anonymous remote - #599 (onosek)
  - `mockbuild`: new argument --extra-pkgs - 498 (onosek)
  - *pkg import: check specfile matches the repo name - 529 (onosek)
  - Fixes syntax issues reported by flake8 (onosek)
  - Unittests for "Undo rpmautospec processing" (onosek)
  - *pkg import: Undo rpmautospec processing - 527 (miro)
  - *pkg import: Don't delete changelog generated by `rpmautospec convert` (miro)
  - Make lookaside cache retries configurable (onosek)
  - Lookaside cache operations retries (onosek)
  - Prepare the lookaside cache code for retries (onosek)
  - Fix flake8 complaints (onosek)
  - Support for checking exploded sources before push (onosek)
  - Split git credential data on first = only - 694 (lsedlar)
  - `commit` command fails on 'containers' namespace (onosek)
  - `copr-build` passes extra_args to copr-cli command - 510 (onosek)
  - Do not require 'sources' file for all namespaces - #684 (onosek)
  - Use release's rpmdefines in unused sources check - #671 (otto.liljalaakso)
  - Pre-push hook won't check private branches - #683 (onosek)
  - Config file option to skip the hook script creation - 515 (onosek)
  - Allow empty commits when `uses_rpmautospec` - #677 (j1.kyjovsky)
  - Check remote file with correct hash (lsedlar)
  - Ignore missing spec file in pre-push hook (lsedlar)
  - import_srpm: allow pre-generated srpms - #655 (onosek)
  - Fix unittests for `clone` and pre-push hook script (onosek)
  - pre-push hook script contains a user's config - #667 (onosek)
  - A HEAD query into a lookaside cache - 513 (onosek)
  - `pre-push-check` have to use spectool with --define - #672 (onosek)
  - Add more information about pre-push hook (lsedlar)
  - Update to spec file presence checking - #663 (onosek)
  - More robust spec file presence checking - #663 (onosek)
  - Do not generate pre-push hook script in some cases - #665 (onosek)
  - Avoid calling repo_name from load_nameverrel - #657 (otto.liljalaakso)
  - Move warnings from missing Git repo to debug level - #659 (otto.liljalaakso)
  - Update docker image for Jenkinks tests (onosek)
  - container-build: update --signing-intent help for OSBS 2 (kdreyer)
  - Process source URLs with fragment in pre-push hook (lsedlar)


author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.69-3
changelog:
  - Patch: Check the correct sorting of imports from now on
  - Patch: `update`: interactive editor is broken


author: Nils Philippsen <nils@redhat.com> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Update license
  - Make using click, pygit2, rpm Python packages optional and enable
    fallbacks


author: Miroslav Suchý <msuchy@redhat.com> 1.1.9-1
changelog:
  - Add BuildRequire on setuptools to fix distutils error on Python 3.12
  - when package config does not exists use /dev/null instead


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.0-8
changelog:
  - Generate BuildRequires dynamically
  - Drop unneeded build dependency on python3dist(toml)
  - Drop duplicate runtime dependency on python3-dateutil


author: Cristian Le <git@lecris.dev> - 0.10.7-3
changelog:
  - Various simplifications
  - Added `Requires: ninja-build` by default
  - Removed `Suggests` and `Recommends`, these are not likely to be used
  - Removed the test conditional for epel10 since everything will be packaged
  - Removed the `pyproject` subpackage since it's empty and all dependents
    are gone


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.0-1
changelog:
  - Create simple CLI tool to examine keycache in Python and refresh all entries in keycache
  - Verify Thread-safe + Unwritable Cache + Negative Cache
  - Revamp Sphinx documentation
  - Patch Enforcer to validate against multiple issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.6-1
changelog:
  - Fix SQL injection risk in KeyCache by using parameterized SQLite queries
  - Prevent sibling-path authorization bypass in Enforcer scope checks


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.7-1
changelog:
  - Remove legacy parent SciToken chaining behavior from token initialization and claim handling
  - Harden Enforcer scope path traversal validation (including encoded traversal checks)
  - Clean up documentation references to parent/chained SciTokens


author: Carl George <carlwgeorge@fedoraproject.org> - 24.2.0-1
changelog:
  - Update to version 24.2.0 rhbz#2258307
  - Remove hatch-fancy-pypi-readme build-system dependency
  - Disable docs when building for RHEL (EPEL)


author: Steve Traylen <steve.traylen@cern.ch> - 1.3.2-1
changelog:
  - Update to version 1.3.2
  - Run tests with tox
  - Use rpmautospec changelog
  - Use forgeurl to get tox.ini file
  - Use more conventional pypi_macro for name
  - Use pyproject_macros
  - Mark license file as license


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)
  - Resolves: rhbz#2344364


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: mh <mh+fedora@scrit.ch> - 0.1.8-1
changelog:
  - Update to 0.1.8 (#2169100)
  - remove the upstreamed patch for argparse
  - Require python3-zombie-imp as a stopgap to workaround #2220964


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.6-2
changelog:
  - Remove a patch to drop the runtime dependency on Sphinx
  - It is no longer needed, python3-sphinx-7.2.6-2+ no longer Requires this


author: Jerry James <loganjerry@gmail.com> - 1.4.3-1
changelog:
  - Version 1.4.3
  - python-iso8601 is no longer bundled in python3-subunit
  - perl support has moved to https://github.com/jelmer/subunit-perl


author: Carl George <carl@george.computer> - 3.0.3-1
changelog:
  - Update to version 3.0.3, resolves rhbz#2169878
  - Convert to pyproject macros
  - Add setuptools dependency


author: Jerry James <loganjerry@gmail.com> - 1.13.0-1
changelog:
  - Version 1.13.0
  - Drop unnecessary circuitplot patch
  - Drop upstreamed incompatible-pointer patch
  - Link duplicate documentation files
  - Run tests on all architectures


author: Jerry James <loganjerry@gmail.com> - 1.14.0-1
changelog:
  - Version 1.14.0
  - Drop upstreamed tempfile flush patch
  - Add patch to avoid intersphinx_registry
  - Drop workaround for buggy lark on ppc64le
  - Drop examples subpackage


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.3.0-1
changelog:
  - Update to 2.3.0 - Closes rhbz#2162954
  - Convert to rpmautospec
  - Adopt pyproject-rpm-macros
  - Change homepage to package defined GitHub's one
  - Enable checks


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Permit dnf4 to check for reboot with non-root user (riehecky@fnal.gov)
  - Add --reboot-only filter (riehecky@fnal.gov)


author: Carl George <carlwgeorge@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to version 1.1.0 rhbz#2192283
  - Switch to automatically generated buildrequires
  - Switch to SPDX license identifier


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.16.0-4
changelog:
  - Remove Conflicts with erlang-dialyzer
  - Since erlang-26.2.5.13-2, python3-typer-cli no longer conflicts with
    erlang-dialyzer; we keep the Conflicts for older versions.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.30-2
changelog:
  - Rebuilt with jsonwebtoken patched for CVE-2026-25537
  - Fixes RHBZ#2437472; fixes RHBZ#2437467; fixes RHBZ#2437461


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.11-2
changelog:
  - Rebuilt with rust-tracing-subscriber-0.3.20
  - Fixes CVE-2025-58160: fixes RHBZ#2392055, fixes RHBZ#2392012, fixes
    RHBZ#2391975


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.11-4
changelog:
  - Rebuilt with astral-tokio-tar version 0.5.5
  - Security fix for path traversal CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Carl George <carlwgeorge@fedoraproject.org> - 0.23.2-1
changelog:
  - Update to version 0.23.2, resolves rhbz#2030302
  - Convert to pyproject macros
  - Switch license field to SPDX identifier
  - Skip tests that fail on Python 3.12


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.34.0-2
changelog:
  - Build for Python 3.14 (fix RHBZ#2372189)
  - Disable uvloop dep., and therefore the "standard" extra, for now
  - Do not error on warnings, as this is too strict and there are new
    DeprecationWarnings
  - Patch test_loop_auto for Python 3.14


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.2.1-4
changelog:
  - backport patch to fix test failures with Python 3.12: AttributeError: type
    object 'VCRHTTPConnection[…]' has no attribute 'debuglevel'


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.28-1
changelog:
  - Update to 0.28
  - Port to pyproject-rpm-macros
  - Add metapackage for “toml” extra
  - License has changed from CC0-1.0 (spec file had Public Domain) to Unlicense
  - Remove obsolete posttrans scriptlet
  - Add details.md to documentation


author: Miro Hrončok <miro@hroncok.cz> - 20.26.6-1
changelog:
  - Update to 20.26.6
  - Fixes: rhbz#2188155
  - Removes support for Python 2.7 virtual environments
  - Removes support for Python 3.6 virtual environments


author: Karolina Surma <ksurma@redhat.com> - 20.31.2-2
changelog:
  - EPEL 10: Add support for Python 3.13
  - Add RPM Requires needed for Python 3.13
  - Search for the wheels in Python version specific directory


author: Davide Cavalca <dcavalca@fedoraproject.org> - 6.0.0-5
changelog:
  - Relax test dependencies
  - relax version pins
  - drop ruff as it's not actually needed
  - drop eventlet as it's been retired


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.4-5
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.8.8-1
changelog:
  - Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065
  - pypi_source constructed manually according to project/name case inconsistency
  - only require legacy-cgi on on systems where it's present
  - remove python3.9 patch (applied upstream)


author: Carl George <carlwgeorge@fedoraproject.org> - 1.8.9-1
changelog:
  - Update to version 1.8.9 rhbz#2325373
  - Port to pyproject macros
  - Remove old provides/obsoletes for python3-webob1.2


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.8.2-1
changelog:
  - Update to version 5.8.2
  - Use reserved uid and gid 194 for the xrootd user
    - https://pagure.io/packaging-committee/issue/1444
    - https://src.fedoraproject.org/rpms/setup/pull-request/27


author: Brad Bell <bradbell at seanet dot com> - 2024.0.0-1
changelog:
  - New upstream source.
  - pyspellchecker is now available as a fedora package.
  - Remove some extra blank lines.


author: Brad Bell <bradbell at seanet dot com> - 2025.0.2-3
changelog:
  - Change import toml -> import tomli; see
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.0-1
changelog:
  - Update to 3.8.0 (close RHBZ#2492139)
  - Run tests with pytest, as upstream is gradually adopting it


author: Jerry James <loganjerry@gmail.com> - 5.1-1
changelog:
  - Version 5.1 (rhbz#2290844)
  - Add patch for python 3.13 compatibility (rhbz#2280553)
  - Minor spec file cleanups


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Miro Hrončok <mhroncok@redhat.com> - 23.1.2-6
changelog:
  - Drop no-longer-needed custom changes to /usr/bin/pip*
  - Stop Recommending libcrypt.so.1 on Python 3.12+
  Resolves: rhbz#2150373


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241115git03e441d-1
changelog:
  - Update to 0^20241115git03e441d
  - Add `PyLong_IsPositive`/`Negative`/`Zero()` functions
  - Relax `PYPY_VERSION_NUM` requirements for hash macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20250128gitc84545f-1
changelog:
  - Update to 0^20250128gitc84545f
  - Remove `PyConfig.use_system_logger`: it will only be available on Python
    3.13.2 which is not released yet.
  - Fix multiple definitions for `Py_fclose`
  - Avoid `Py_ARRAY_LENGTH()` (because it fails with C++ on Python 3.9 on
    macOS)
  - Improve `test_config`
  - Replace `extern` with `PyAPI_FUNC()`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Robert Scheck <robert@fedoraproject.org> - 1.0.0-32
changelog:
  - Updated license identifier to SPDX expression
  - Added missing build dependency on python3-setuptools (#2142035)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.9.0-7
changelog:
  - Add id to developer element in AppStream XML metadata
  - Fixes failure to build/validate with appstream 1.0.2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.9.0-8
changelog:
  - Use the autogenerated archive instead of the “release” archive
  - Fixes an obsolete FSF postal address in the license file.
  - Fixes the need to patch in upstream PR#103, which was released


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-9
changelog:
  - Add package to EPEL 9, keep it synched with Fedora Rawhide.
  - Use qemu-kvm package on EPEL.
  - Remove comment about armv7, no longer applicable on Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-14
changelog:
  - Look for kernels in /lib/modules/*/vmlinuz
  - Display the correct test-suite.log if %check fails
  - Enhance debugging in tests/run-qemu-sanity-check


author: Jan Grulich <jgrulich@redhat.com> - 6.8.2-3
changelog:
  - Rework OpenH264 support following Chromium package
  - Backport upstream change for ffmpeg codec selection issues.


author: Zephyr Lykos <fedora@mochaa.ws> - 0.11-1
changelog:
  - New version, switch upstream URL
  - Use CMake to build, remove unused BR
  - Add KDE theming support
  - Remove ExcludeArch s390x


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Ben Boeckel <fedora@me.benboeckel.net> - 1.9.4-1
changelog:
  - Update to 1.9.4 (rhbz#2324228)
  - Support Python 3.13 (rhbz#2315724)
  - Update license to GPL-3.0 (no "or later" present in comment headers)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.68.2-1
changelog:
  - Update to 1.68.2 - Closes rhbz#2311287 rhbz#2326578 rhbz#2333262
    rhbz#2333238 rhbz#2331989 rhbz#2331961


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Orion Poplawski <orion@nwra.com> - 1.9.0-15
changelog:
  - Add upstream patch to use correct modulus and exponent in
    rdssl_rkey_get_exp_mod
  - Use SPDX license


author: Ondrej Pohorelsky <opohorel@redhat.com> - 3.7.14-1
changelog:
  - 3.7.14 bump
  - Adds upstream patch to prevent double free
  - Require python3-setuptools unconditionaly
  - Resolves: rhbz#2170818, rhbz#2166136


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-3
changelog:
  - Add helpers subpackage
  - Add wek deps: conditional recommends on recoll-krunner if
    kf6-krunner is present and corresponding backwards conditional supplements


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.6-40
changelog:
  - Bump Release to 40 to ensure a working update path. rgb was a separate
    package in xorg-x11-server-utils (not just a Provides) and took the
    Release from that.


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-31
changelog:
  - Add patch to find systemd-journald config and avoid warning. Fixes rhbz#2361203
  - Add patch to fix false positive on Li0n from bin/sbin merge. Fixes rhbz#2382304


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Tim Flink <tflink@fedoraproject.org> - 6.4.0-5
changelog:
  - add patch for option to disable roctracer logging
  - disable roctracer logging for rhel builds
  - allow for builds on rhel with ninja


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.0-1
changelog:
  - Update to 6.4.0
  - Use version requires to pull in newer packages
  - Fix rpmlint warnings
  - Package is now noarch


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.2-1
changelog:
  - Update to 6.4.2
  - Drop patch1 to fix comgr linking, as it's been applied in upstream 6.4.2
  - Make sure 6.4.2 or newer is used for building due to api requirements


author: Tim Flink <tflink@fedoraproject.org> - 6.4.0-2
changelog:
  - create test subpackage and add --with test flag
  - move during-build checks to %check section
  - change build to be noarch only for -devel subpackage so that arch-specific tests could be packaged in -test


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.2-1
changelog:
  - Update to 6.4.2
  - Rebase patch1
  - Fix some tabs to spaces in the specfile for consistent formatting


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0^20230201gita79b3c3-1
changelog:
  - Repo definitions now split into individual files
  - simplified usage; either pass the distro name or the path to the distro's
    repos
  - rpmdistro-gendnfconf no longer needed for Mageia


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0^20230612gitcf75cee-1
changelog:
  - Update to snapshot from 20230612
  - Add EPEL source repos
  - Also refactor to deduplicate the repo files
  - Add Amazon Linux configuration (2023+)
  - Add CentOS extras repos


author: Tom Callaway <spot@fedoraproject.org> - 2.8.0-1
changelog:
  - update to 2.8.0
  - filter out the "alternative-link-missing" and "alternative-generic-name-not-symlink" checks
    these reflect the OpenSUSE packaging guidelines, but NOT the Fedora ones (bz2208474)


author: Miro Hrončok <mhroncok@redhat.com> - 2.8.0-2
changelog:
  - Filter out cross-directory-hard-link
  - https://fedoraproject.org/wiki/Changes/Hardlink_identical_files_in_packages_by_default
  - Fixes: rhbz#2400621


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.16.4-2
changelog:
  - Make rubygem-minizip testsuite dependency optional, drop on RHEL
    (Patch by Jun Aruga <jaruga@redhat.com>)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.0.1-3
changelog:
  - Execute spec test provided by the upstream
  - Backport upstream patch for ruby32 regex issue with hash character


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.1-3
changelog:
  - Disable tests in EPEL
  - Avoid bringing in large dependency trees via the axum and tower-http dev-
    dependencies


author: Michel Lind <salimma@fedoraproject.org> - 0.9.0-1
changelog:
  - Update to 0.9.0; Fixes: RHBZ#2347620
  - Disable assertions that fail at certain times of day; Fixes: RHBZ#2338148


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-2
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.0-1
changelog:
  - Initial package (close RHBZ#2328487)
  - Re-generate with rust2rpm 27 for a slightly nicer spec file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-1
changelog:
  - Update to 0.4.1 (close RHBZ#2277955)
  - Reduce manual editing of the spec file after running rust2rpm
  - Reduce unnecessary (benchmark-only) build dependencies


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0-1
changelog:
  - Update to 0.7.0 (close RHBZ#2337404)
  - Patch out optional features that would require blosc2-rs or isal-rs
    crates


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to version 0.17.0; Fixes RHBZ#2316899
  - Re-enable all tests except test_procinfo, and a couple we had to skip


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-2
changelog:
  - Report and skip failing tests on non-x86_64 architectures
  - Fix tests failing to compile on 32-bit architectures


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.8-1
changelog:
  - Update to version 0.8.8; Fixes RHBZ#2311783
  - Add upstream link for fixing mixture of newline styles
  - Backport commit from upstream to fix s390x issues
  - Where possible, patch out "support for common crates" features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 12.1.2-13
changelog:
  - Align rust2rpm.toml patch comments with the spec file
  - Re-generate the spec file with rust2rpm 27


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.10-3
changelog:
  - Update dialoguer to 0.12
  - No longer allow similar 2.6.0, since we have 2.7.0
  - Update `License` expression


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-2
changelog:
  - Undo onig version bump in #7976 and #7973, only needed to match systems
    where oniguruma is newer, but for us we keep onig matched with oniguruma
    already
  - Skip one regex test on EPEL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.10.4-2
changelog:
  - On i686, skip a test that is designed for 64-bit
  - Send a PR upstream to conditionalize the test by architecture.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2259758)
  - Patch out the zopfli binary, which conflicts with the one provided by the
    zopfli package


author: Julio González Gil <packages@juliogonzalez.es> - 1.92-1
changelog:
  - Update to 1.92 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Tom Callaway <spot@fedoraproject.org> - 2.2.2-1
changelog:
  - update to 2.2.2
  - fix hardcoded versioning (with sed, not patch)
  - fixup .pc file
  - fix old minimum cmake version which breaks the build


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.0-1
changelog:
  - Allow the scitokens library user to setup a custom CA file
  - Fix typecast errors in scitoken_status_get_*() that caused async queries to fail
  - Fix logic error in deserialize_continue() that caused async deserialization to fail


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Jan André Reuter <j.reuter@fz-juelich.de> - 8.4-1
changelog:
  - New version 8.4
  - Require cube >= 4.8.2
  - Require otf2 >= 3.0
  - Drop C compatibility patch as fixed upstream
  - Remove libunwind as fork is not recommended
  - Fix issues when downgrading package


author: Jan André Reuter <j.reuter@fz-juelich.de> - 8.4-2
changelog:
  - Fix missing runtime dependency on libunwind-devel (rhbz#2278816)
  - Fix detection of GCC plug-in for GCC 14


author: Jan André Reuter <j.reuter@fz-juelich.de> - 9.0-1
changelog:
  - New version 9.0
  - Require cube >= 4.9
  - Require otf2 >= 3.1
  - Require opari2 >= 2.0.9
  - Drop GCC 14 patch as fixed upstream
  - Add gotcha-devel dependency
  - Remove el7-isms
  - Drop rpath patch


author: Jeremy Linton <jeremy.linton@arm.com> - 1.0-5
changelog:
  - BZ 2250498 Add hacky grubby = 8.41 line to assure that anaconda-core, as used by initial-setup-gui, for xfce/etc is satisfied


author: Jeremy Linton <jeremy.linton@arm.com> - 1.0-8
changelog:
  - Add default kernel compatibility flag and install.conf file to force kernel-install to do the right thing, work around BZ 2271674


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Backport upstream PR for securemode and verifySIGPassword
  - Use standard macros for building and installing


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.20.0-7
changelog:
  - Convert to SPDX license string and add missing licenses
  - Add macros for github owner/project/commit


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-1
changelog:
  - Upgrade to SIMDe 0.8.2
    Resolves: rhbz#2251016
  - Use upstream ci.sh
  - Fix build on aarch64 and backport some upstream fixes


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-2
changelog:
  - use upstream PR to fix tests with clang on aarch64
  - switch to noarch for the devel subpackage (tests still run on all arches)


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2452368
  - Fix rhbz#2453084
  - Fix rhbz#2455643
  - Fix rhbz#2458928
  - Fix CVE-2026-47215


author: Stewart Smith <stewart@flamingspork.com> - 2.26-37
changelog:
  - Build with the right LDFLAGS (fixes rpmlint warning about PIE binaries, hardens build)
  - Remove executable bit on man page.


author: Zygmunt Krynicki <me@zygoon.pl>
changelog:
  - Re-cherry pick fix for SELinux timedatex problem from upstream
    as it was not released in 2.66.1, sorry.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.67.1
   - Fix apparmor permissions to allow snaps access to kernel modules
     and firmware on UC24, which also fixes the kernel-modules-control
     interface on UC24
   - AppArmor prompting (experimental): disallow /./ and /../ in path
     patterns
   - Fix 'snap run' getent based user lookup in case of bad PATH
   - Fix snapd using the incorrect AppArmor version during undo of an
     refresh for regenerating snap profiles
   - Add new syscalls to base templates
   - hardware-observe interface: allow riscv_hwprobe syscall
   - mount-observe interface: allow listmount and statmount syscalls


author: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
changelog:
  - The changelog date and author have been modified to maintain linearity.
  - Drop 0001-data-selinux-remove-timedatex.patch - applied upstream.
  - New upstream release 2.67
   - AppArmor prompting (experimental): allow overlapping rules
   - Registry view (experimental): Changes to registry data (from both
     users and snaps) can be validated and saved by custodian snaps
   - Registry view (experimental): Support 'snapctl get --pristine' to
     read the registry data excluding staged transaction changes
   - Registry view (experimental): Put registry commands behind
     experimental feature flag
   - Components: Make modules shipped/created by kernel-modules
     components available right after reboot
   - Components: Add tab completion for local component files
   - Components: Allow installing snaps and components from local files
     jointly on the CLI
   - Components: Allow 'snapctl model' command for gadget and kernel
     snaps
   - Components: Add 'snap components' command
   - Components: Bug fixes
   - eMMC gadget updates (WIP): add syntax support in gadget.yaml for
     eMMC schema
   - Support for ephemeral recovery mode on hybrid systems
   - Support for dm-verity options in snap-bootstrap
   - Support for overlayfs options and allow empty what argument for
     tmpfs
   - Enable ubuntu-image to determine the size of the disk image to
     create
   - Expose 'snap debug' commands 'validate-seed' and 'seeding'
   - Add debug API option to use dedicated snap socket /run/snapd-
     snap.socket
   - Hide experimental features that are no longer required
     (accepted/rejected)
   - Mount ubuntu-save partition with no{exec,dev,suid} at install, run
     and factory-reset
   - Improve memory controller support with cgroup v2
   - Support ssh socket activation configurations (used by ubuntu
     22.10+)
   - Fix generation of AppArmor profile with incorrect revision during
     multi snap refresh
   - Fix refresh app awareness related deadlock edge case
   - Fix not caching delta updated snap download
   - Fix passing non root uid, guid to initial tmpfs mount
   - Fix ignoring snaps in try mode when amending
   - Fix reloading of service activation units to avoid systemd errors
   - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS
     updates PPA
   - Make killing of snap apps best effort to avoid possibility of
     malicious failure loop
   - Alleviate impact of auto-refresh failure loop with progressive
     delay
   - Dropped timedatex in selinux-policy to avoid runtime issue
   - Fix missing syscalls in seccomp profile
   - Modify AppArmor template to allow using SNAP_REEXEC on arch
     systems
   - Modify AppArmor template to allow using vim.tiny (available in
     base snaps)
   - Modify AppArmor template to add read-access to debian_version
   - Modify AppArmor template to allow owner to read
     @{PROC}/@{pid}/sessionid
   - {common,personal,system}-files interface: prohibit trailing @ in
     filepaths
   - {desktop,shutdown,system-observe,upower-observe} interface:
     improve for Ubuntu Core Desktop
   - custom-device interface: allow @ in custom-device filepaths
   - desktop interface: improve launch entry and systray integration
     with session
   - desktop-legacy interface: allow DBus access to
     com.canonical.dbusmenu
   - fwupd interface: allow access to nvmem for thunderbolt plugin
   - mpris interface: add plasmashell as label
   - mount-control interface: add support for nfs mounts
   - network-{control,manager} interface: add missing dbus link rules
   - network-manager-observe interface: add getDevices methods
   - opengl interface: add Kernel Fusion Driver access to opengl
   - screen-inhibit-control interface: improve screen inhibit control
     for use on core
   - udisks2 interface: allow ping of the UDisks2 service
   - u2f-devices interface: add Nitrokey Passkey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.4
   - Snap components: LP: #2104933 workaround for classic 24.04/24.10
     models that incorrectly specify core22 instead of core24
   - Update build dependencies


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.69
   - FDE: re-factor listing of the disks based on run mode model and
     model to correctly resolve paths
   - FDE: run snapd from snap-failure with the correct keyring mode
   - Snap components: allow remodeling back to an old snap revision
     that includes components
   - Snap components: fix remodel to a kernel snap that is already
     installed on the system, but not the current kernel due to a
     previous remodel.
   - Snap components: fix for snapctl inputs that can crash snapd
   - Confdb (experimental): load ephemeral data when reading data via
     snapctl get
   - Confdb (experimental): load ephemeral data when reading data via
     snap get
   - Confdb (experimental): rename {plug}-view-changed hook to observe-
     view-{plug}
   - Confdb (experimental): rename confdb assertion to confdb-schema
   - Confdb (experimental): change operator grouping in confdb-control
     assertion
   - Confdb (experimental): add confdb-control API
   - AppArmor: extend the probed features to include the presence of
     files, as well as directories
   - AppArmor prompting (experimental): simplify the listener
   - AppArmor metadata tagging (disabled): probe parser support for
     tags
   - AppArmor metadata tagging (disabled): implement notification
     protocol v5
   - Confidential VMs: sysroot.mount is now dynamically created by
     snap-bootstrap instead of being a static file in the initramfs
   - Confidential VMs: Add new implementation of snap integrity API
   - Non-suid snap-confine: first phase to replace snap-confine suid
     with capabilities to achieve the required permissions
   - Initial changes for dynamic security profiles updates
   - Provide snap icon fallback for /v2/icons without requiring network
     access at runtime
   - Add eMMC gadget update support
   - Support reexec when using /usr/libexec/snapd on the host (Arch
     Linux, openSUSE)
   - Auto detect snap mount dir location on unknown distributions
   - Modify snap-confine AppArmor template to allow all glibc HWCAPS
     subdirectories to prevent launch errors
   - LP: #2102456 update secboot to bf2f40ea35c4 and modify snap-
     bootstrap to remove usage of go templates to reduce size by 4MB
   - Fix snap-bootstrap to mount kernel snap from
     /sysroot/writable/system-data
   - LP: #2106121 fix snap-bootstrap busy loop
   - Fix encoding of time.Time by using omitzero instead of omitempty
     (on go 1.24+)
   - Fix setting snapd permissions through permctl for openSUSE
   - Fix snap struct json tags typo
   - Fix snap pack configure hook permissions check incorrect file mode
   - Fix gadget snap reinstall to honor existing sizes of partitions
   - Fix to update command line when re-executing a snapd tool
   - Fix 'snap validate' of specific missing newline and add error on
     missed case of 'snap validate --refresh' without another action
   - Workaround for snapd-confine time_t size differences between
     architectures
   - Disallow pack and install of snapd, base and os with specific
     configure hooks
   - Drop udev build dependency that is no longer required and add
     missing systemd-dev dependency
   - Build snap-bootstrap with nomanagers tag to decrease size by 1MB
   - Interfaces: polkit | support custom polkit rules
   - Interfaces: opengl | LP: #2088456 fix GLX on nvidia when xorg is
     confined by AppArmor
   - Interfaces: log-observe | add missing udev rule
   - Interfaces: hostname-control | fix call to hostnamectl in core24
   - Interfaces: network-control | allow removing created network
     namespaces
   - Interfaces: scsi-generic | re-enable base declaration for scsi-
     generic plug
   - Interfaces: u2f | add support for Arculus AuthentiKey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.70
   - FDE: Fix reseal with v1 hook key format
   - FDE: set role in TPM keys
   - AppArmor prompting (experimental): add handling for expired
     requests or listener in the kernel
   - AppArmor prompting: log the notification protocol version
     negotiated with the kernel
   - AppArmor prompting: implement notification protocol v5 (manually
     disabled for now)
   - AppArmor prompting: register listener ID with the kernel and
     resend notifications after snapd restart (requires protocol v5+)
   - AppArmor prompting: select interface from metadata tags and set
     request interface accordingly (requires protocol v5+)
   - AppArmor prompting: include request PID in prompt
   - AppArmor prompting: move the max prompt ID file to a subdirectory
     of the snap run directory
   - AppArmor prompting: avoid race between closing/reading socket fd
   - Confdb (experimental): make save/load hooks mandatory if affecting
     ephemeral
   - Confdb: clear tx state on failed load
   - Confdb: modify 'snap sign' formats JSON in assertion bodies (e.g.
     confdb-schema)
   - Confdb: add NestedEphemeral to confdb schemas
   - Confdb: add early concurrency checks
   - Simplify building Arch package
   - Enable snapd.apparmor on Fedora
   - Build snapd snap with libselinux
   - Emit snapd.apparmor warning only when using apparmor backend
   - When running snap, on system key mismatch e.g. due to network
     attached HOME, trigger and wait for a security profiles
     regeneration
   - Avoid requiring state lock to get user, warnings, or pending
     restarts when handling API requests
   - Start/stop ssh.socket for core24+ when enabling/disabling the ssh
     service
   - Allow providing a different base when overriding snap
   - Modify snap-bootstrap to mount snapd snap directly to /snap
   - Modify snap-bootstrap to mount /lib/{modules,firmware} from snap
     as fallback
   - Modify core-initrd to use systemctl reboot instead of /sbin/reboot
   - Copy the initramfs 'manifest-initramfs.yaml' to initramfs file
     creation directory so it can be copied to the kernel snap
   - Build the early initrd from installed ucode packages
   - Create drivers tree when remodeling from UC20/22 to UC24
   - Load gpio-aggregator module before the helper-service needs it
   - Run 'systemctl start' for mount units to ensure they are run also
     when unchanged
   - Update godbus version to 'v5 v5.1.0'
   - Add support for POST to /v2/system-info with system-key-mismatch
     indication from the client
   - Add 'snap sign --update-timestamp' flag to update timestamp before
     signing
   - Add vfs support for snap-update-ns to use to simulate and evaluate
     mount sequences
   - Add refresh app awareness debug logging
   - Add snap-bootstrap scan-disk subcommand to be called from udev
   - Add feature to inject proxy store assertions in build image
   - Add OP-TEE bindings, enable by default in ARM and ARM64 builds
   - Fix systemd dependency options target to go under 'unit' section
   - Fix snap-bootstrap reading kernel snap instead of base resulting
     in bad modeenv
   - Fix a regression during seeding when using early-config
   - LP: #2107443 reset SHELL to /bin/bash in non-classic snaps
   - Make Azure kernels reboot upon panic
   - Fix snap-confine to not drop capabilities if the original user is
     already root
   - Fix data race when stopping services
   - Fix task dependency issue by temporarily disable re-refresh on
     prerequisite updates
   - Fix compiling against op-tee on armhf
   - Fix dbx update when not using FDE
   - Fix potential validation set deadlock due to bases waiting on
     snaps
   - LP: #2104066 Only cancel notices requests on stop/shutdown
   - Interfaces: bool-file | fix gpio glob pattern as required for
     '[XXXX]*' format
   - Interfaces: system-packages-doc | allow access to
     /usr/local/share/doc
   - Interfaces: ros-snapd-support interface | added new interface
   - Interfaces: udisks2 | allow chown capability
   - Interfaces: system-observe | allow reading cpu.max
   - Interfaces: serial-port | add ttyMAXX to allowed list
   - Interfaces: modified seccomp template to disallow
     'O_NOTIFICATION_PIPE'
   - Interfaces: fwupd | add support for modem-manager plugin
   - Interfaces: gpio-chardev | make unsupported and remove
     experimental flag to hide this feature until gpio-aggregator is
     available
   - Interfaces: hardware-random | fix udev match rule
   - Interfaces: timeserver-control | extend to allow timedatectl
     timesync commands
   - Interfaces: add symlinks backend
   - Interfaces: system key mismatch handling


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Robert Scheck <robert@fedoraproject.org> 4.00-4
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.3-14
changelog:
  - Remove macros obsolete in Fedora
  - Use CMake RPM macros to build and install
  - Build and run the tests
  - Do not glob over the .so version
  - Test with the system gtest instead of the bundled one


author: Emir Akdag <infraw.linux@proton.me> - 1.5.3-1
changelog:
  - Update spoofdpi to 1.5.3
  - Update to 1.5.3 to fix CVE-2026-27145
  - Add missing license for go-localereader
  - Fix build directory case sensitivity issue
  - Resolves: rhbz#2494220, rhbz#2494389


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.1-1
changelog:
  - rebuilt for version 2.3.1 fixes rhbz#1856025 rhbz#2454296 rhbz#2128374
  - modernized packaging, enabled generator, templates, and libev support


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Ron Olson <tachoknight@gmail.com> 5.8.1-6
changelog:
  - Made 5.8.1 work for EPEL 10 as it is the last version of
    Swift that could be built without another version of
    Swift being present


author: Ron Olson <tachoknight@gmail.com> - 6.0.2-1
changelog:
  - Updated to Swift 6.0.2-RELEASE
    Resolves: rhbz#2291122
    Resolves: rhbz#2322729
    Resolves: rhbz#2324076


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-4
changelog:
  - Tidy up BuildRequires/Requires
  - BR: tzdata, which is not pulled from dependencies on F39+ (RHBZ#2261742)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Xavier Bachelot <xavier@bachelot.org> 1.0.20-11
changelog:
  - Fix build on EL9
  - egrep is deprecated, use grep -E instead in order to fix build on F38+
  - Drop conditionals for EL6


author: Peter Czanik <peter@czanik.hu> - 4.8.1-1
changelog:
  - update to 4.8.2, a bug fix release
  - fixes an inproper certificate validation problem (CVE-2024-47619)
  - fixes elasticsearch-http() and other drivers after a backwards
    incompatible fix in format-json
  - reliability and performance improvements in the S3 destination


author: Scott K Logan <logans@cottsay.net> - 0.8.90-32
changelog:
  - Fix svg2png.sh permissions after build
  - Review SPDX license identifier
  - Switch to %license macro


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.9.6-0.1
changelog:
  - Snapshot of upcoming upstream release 0.9.6
  - New upstream source at github
  - Removed patches and hacks merged upstream
  - Installs a default systemd unit tayga.service that points to a default config
    (similar to Debian and upstream)
  - Pulled support for older EL releases


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Than Ngo <than@redhat.com> - 20200406-35
changelog:
  - fixed rhbz#2284575, add texlive-mdframed
  - fixed rhbz#2275109, add texlive-picinpar
  - add texlive-selinput, texlive-lipsum, texlive-picture, texlive-kantlipsum, texlive-ntheorem


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Fix missing texlive-ms that is splitted into multitoc and count1to
  - Fix Requirement on texlive-base, texlive-kpathsea
  - Remove texlive-sfmath as it's part of texlive-2024


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.2-28
changelog:
  - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718)
  - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462
    (rhbz#2254376, rhbz#2254381)
  - fix incorrect text element encoding (upstream isssue #51)
  - compile and run tests


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-12/13060
  - Security fixes: bz#2248564, bz#2281499, bz#2281500, bz#2281502, bz#2281503
  - switch to sysusers based user provisioning approach - fixes bz#2252618
  - Add legacy openssl build dependency from F41 on - fixes FTBS / bz#2301334
  - since we can now drop EL7 support we can also cleanup systemd handling


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-2
changelog:
  - Re-add systemd-devel as build dependency so the daemon knows how to notify systemd that it was started - fixes bz#2302910


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.11-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-9-11/21786 bz#2483769


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Miro Hrončok <miro@hroncok.cz> - 4.26.0-1
changelog:
  - Update to 4.26.0
  - Requires virtualenv 20.29+
  - Supports freethreading Python
  - Fixes: rhbz#2365939


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Dominik Mierzejewski <dominik@greysector.net> - 3.2.4-1
changelog:
  - update to 3.2.4 (resolves rhbz#2231660)
  - switch to SPDX expression in License tag
  - use modern autosetup and plain cmake dependency and macros


author: Björn Esser <besser82@fedoraproject.org> - 2.3.0-5
changelog:
  - Add tools package
  - Add explicit perl BRs
  - Add example program to doc package
  - Drop google site-verification file from doc package
  - Require main package in doc package to avoid file conflicts


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Jonathan Wright <jonathan@almalinux.org> - 1.32.0-1
changelog:
  - update to 1.32.0 rhbz#2304045
    Resolves CVE-2024-39924
    Resolves CVE-2024-39925
    Resolves CVE-2024-39926


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 2026.4.1-1
changelog:
  - update to 2026.4.1 rhbz#2387335
  - Fixes CVE-2026-27803 Unauthorized collection management operations due to improper access control
  - Fixes CVE-2026-27801 Two-factor authentication bypass allows unauthorized access and data deletion
  - Fixes CVE-2026-27802 Privilege Escalation via Unauthorized Bulk Permission Update
  - Fixes CVE-2026-27898 Information disclosure via API partial update


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - Handle (no traceback) "invalid-syntax" code from Ruff
  - log.debug() all git commands
  - do not let "git apply" pollute stderr with whitespace errors


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.4-12
changelog:
  - Explicitly set most Makefile variables
  - Moves the documentation into the standard location
  - Enables rebuilding localized man pages etc.


author: Petr Pisar <ppisar@redhat.com> - 5-22
changelog:
  - Disable filesystem subpackage as it is already provided by CentOS 10 Stream
    (bug #2309358)
  - Convert license tags to SPDX
  - Fix restarting systemd services


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.17.0-1
changelog:
  - Update to 0.17.0 (#2250885)
  - Use xcb-errors util library
  - Apply patches from 0.17.x bugfix branch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Hans de Goede <hans@hansg.org> - 3.2.9a-1.20250317gitce9782a
changelog:
  - Update to 3.2.9a + latest git changes to fix build with -std=c11
  - Switch to upstream appdata/metainfo and desktop file
  - Drop all patches (all upstreamed)
  - Resolves: rhbz#2341567
  - Resolves: rhbz#2385740


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


author: Xavier Bachelot <xavier@bachelot.org> - 0.99.14-2
changelog:
  - Use SPDX License: tag
  - Drop useless conditionals
  - Drop useless comments
  - Add EL7 cond for %post/%postun
  - Escape unescaped % in %changelog
  - Drop very old Obsoletes:/Provides: for xine/xine-skins


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Jonathan Wright <jonathan@almalinux.org> - 1.60.4-1
changelog:
  - update to 1.60.4 rhbz#2334236
  - re-enable builds against libxml2, no more bundled libexpat
  - fixes rhbz#2310136
  - fixes rhbz#2310146
  - fixes rhbz#2310152


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.1.2-1
changelog:
  - xbitmaps 1.1.2
  - Use make macros, see
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.1.8-3
changelog:
  - Do not hardcode the build type
  - Use CMAKE_BUILD_TYPE RelWithDebInfo to avoid -Werror in compiler flags


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Vitaly Zaitsev <vitaly@easycoding.org> - 0.7.0-3
changelog:
  - Fixed broken CMake configs (rhbz#2188009).
  - Backported CMake fixes from upstream.
  - Converted license tag to SPDX.
  - Performed minor SPEC cleanup.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to v1.1.0
  - Upstream bug fixes: out-of-bounds array access, missing unistd.h header,
    localtime prototype, curses header preprocessor guard
  - Upstream build improvements: LDFLAGS support in Makefile
  - Migrate to %autorelease
  - Remove unnecessary %global _hardened_build 1 (default since F23)


