# changelog

author: Tim Semeijn <tim@goat.re> - 0.9.4-2
changelog:
  - Fix failing builds with *_poll build patch (3proxy-0.9.4-poll-build.patch)
  - Convert license to SPDX


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.0-1
changelog:
  - Update to version 3.3.0
  - Soname bump for libHepMC3 (3 to 4)
  - Additional build dependencies for tests
  - Fix an uninitialized value issue found by valgrind
  - Drop EPEL7 build (soon to be EOL)
  - Avoid assert due to implicit narrowing cast on 32 bit architectures
  - Suppress a valgrind error on Fedora 39 ppc64le


author: Douglas Kosovic <doug@uq.edu.au> - 1.20.10-1
changelog:
  - Updated to 1.20.10 release
  - Remove redundant ppp related patches
  - Use ppp_version macro from NetworkManager


author: Dave Dykstra <dwd@cern.ch> - 1.3.4-1
changelog:
  - Change Requires: fakeroot to Recommends: fakeroot on epel10 for now,
    until fakeroot is built for epel10.


author: Dave Dykstra <dwd@cern.ch> - 1.4.0
changelog:
  - Update to upstream 1.4.0
  - Change Recommends: fakeroot back to Requires: fakeroot on epel10
    now that fakeroot is available there.


author: Chris Patterson <cpatterson@microsoft.com> - 0.5.0-1
changelog:
  - Uprev to 0.5.0
  - Drop 0001-cmake-Allow-the-install-directory-to-be-configurable.patch
  - Delete selftest executable after install
  - Add new json-c and libcmocka build dependencies.


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Ondřej Nosek <onosek@redhat.com> - 1.45-2
changelog:
  - Add support for building for epel10
  - Don't print the branch name after dash when there is no dash
  - Remove mbs.fedoraproject.org scopes from git cred helper
  - Fix unittests after creating the project in hatch


author: Ondřej Nosek <onosek@redhat.com> - 1.45-5
changelog:
  - Add py313 environment as that's current
  - Drop support for bodhi-client <= 5
  - Drop all usage of six
  - Replace and update use of deprecated 'linux_distribution'
  - Modernize and clean unittest imports
  - Update check_bodhi_version to check for >= 6.0.0
  - Fix URL of Bodhi in staging
  - Fixes missing key in distro.os_release_info()
  - Do not auto-request ELN modules
  - Fix minor requirements for EPEL10+ in test
  - Use minor value from koji when no minor in branch name
  - Fix EPEL10 branch expression to cover 2 or more digits.
  - Get macros from epel-candidate build target.
  - Improvements on string parsing
  - Add tests cases for runtime_disttag removal when working with epel10
  - Handle rhel runtimes when minor version exists in disttag


author: Ondřej Nosek <onosek@redhat.com> - 1.45-6
changelog:
  - gitignore the name-version-build/ directory created by fedpkg prep/local
  - Fixing unittests for py36
  - Fix tests on EPEL 9/10.
  - Add setuptools to dependencies for Python 3.12+
  - Update expired token exception instructions
  - Clone epel10 branches with clone -B


author: Ondřej Nosek <onosek@redhat.com> - 1.45-9
changelog:
  - `releases-info` should always show the same order
  - Python 3.13 environment and renew testing image
  - Fix unittests when building for ELN target


author: Ondřej Nosek <onosek@redhat.com> - 1.45-10
changelog:
  - Dynamically exclude Rawhide branch from fedpkg branching
  - Do not auto-request EPEL x.y modules
  - Don't allow to request repositories in modules/ namespace


author: Ondřej Nosek <onosek@redhat.com> - 1.46-1
changelog:
  - `request-repo`: add `--onboard-packit` argument (nforro)
  - Fork a package using anonymous auth - #574 (onosek)
  - Check that auth tokens aren’t written to world-readable files (git)
  - Don't allow to request repositories in modules/ namespace (miro)
  - Do not auto-request EPEL x.y modules (carlwgeorge)
  - Dynamically exclude Rawhide branch from fedpkg branching - #566 (samyak.jn11)
  - Fix unittests when building for ELN target - #589 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - `releases-info` should always show the same order - #569 (onosek)
  - Update expired token exception instructions (astra)
  - Clone epel10 branches with clone -B (carlwgeorge)
  - Update expired token exception instructions (ferdnyc)
  - Add setuptools to dependencies for Python 3.12+ (ferdnyc)
  - Fix tests on EPEL 9/10. (romain.geissler)
  - Fixing unittests for py36 (onosek)
  - gitignore the name-version-build/ directory created by fedpkg prep/local (miro)
  - Handle rhel runtimes when minor version exists in disttag (dherrera)
  - Add tests cases for runtime_disttag removal when working with epel10 (dherrera)
  - Improvements on string parsing (dherrera)
  - Get macros from epel-candidate build target. (dherrera)
  - Fix EPEL10 branch expression to cover 2 or more digits. (dherrera)
  - Use minor value from koji when no minor in branch name (dherrera)
  - Fix minor requirements for EPEL10+ in test (dherrera)
  - Do not auto-request ELN modules (yselkowi)
  - Fixes missing key in distro.os_release_info() (onosek)
  - Update check_bodhi_version to check for >= 6.0.0 (awilliam)
  - Modernize and clean unittest imports (awilliam)
  - Replace and update use of deprecated 'linux_distribution' (awilliam)
  - Drop all usage of six (awilliam)
  - Drop support for bodhi-client <= 5 (awilliam)
  - Add py313 environment as that's current (awilliam)
  - Fix URL of Bodhi in staging (nils)
  - Extend load_rpmdefines to work with EPEL10+ (dherrera)
  - Add EPEL10+ url pattern on assert_valid_epel_package (dherrera)
  - Test url usage in assert_valid_epel_package (dherrera)
  - Add EPEL10 branch name cases as valid (dherrera)
  - Test for valid EPEL branch names (dherrera)
  - Don't print the branch name after dash when there is no dash - 554 (miro)
  - Don't use hatchling on python 3.6 (dherrera)
  - Remove mbs.fedoraproject.org scopes from git cred helper (kj)
  - Fix unittests after creating the project in hatch (onosek)


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Karel Volný <kvolny@redhat.com> - 2.7.0-1
changelog:
  - Update to 2.7.0 (rhbz#2272301)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1 (rhbz#2281508)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.8.0-1
changelog:
  - Update to 2.8.0 (rhbz#2291131)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304188)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.1-1
changelog:
  - Update to 2.10.1 (rhbz#2316762)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323581)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329741)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Troy Dawson <tdawson@redhat.com> - 6.3.0-1.1
changelog:
  - Drop sub-packages whose dependencies are not in epel10 yet
    plasma-nm-{fortisslvpn,l2tp,openvpn,pptp,sstp}


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.1.0-3
changelog:
  - Simplify testing
  - Always run an import-only “smoke test”
  - Do not run language-specific tests; run only the tests that tox would run


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-5
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-6
changelog:
  - Fix support for building with no ENGINE support in OpenSSL (GH#1816)
  - Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-8
changelog:
  - Drop EL-7 support
    - Drop mod_geoip support
    - Drop mod_wrap support
    - Always build mod_proxy
    - Always use libpcre2
    - Always use maridb client library in preference to mysql
    - Always use libpq client library in preference to postgresql
    - Always use OpenSSL Cipher Profiles
  - Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
    onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.1.rc2
changelog:
  - Update to 1.3.9rc2
    - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
    - Fix mod_sftp not advertising standard extensions for protocol version 3
      (GH#1570)
    - Fix mod_sftp "check-file" extension using wrong block size when offset and
      length are specified (GH#1569)
    - Use JSON for Controls protocol messages (GH#379)
    - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
    - Enforce requirement of preceding RewriteCondition for RewriteRule directives
      to avoid confusion (Bug #4495)
    - Implement LogFormat variable for data transfer average speed (GH#535)
    - Optimize per-connection file I/O when reading SFTPHostKey from disk
      (GH#1596)
    - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
      (GH#1610)
    - Reduce latency due to signal handling in the daemon process (GH#1623)
    - SSH key exchange requests should be classified into the "SEC" ExtendedLog
      class (GH#1626)
    - Update mod_exec to use the Jot API for resolving variables (GH#1630)
    - Use system TCP backlog value by default (GH#1636)
    - Gracefully handle directory creation requests when the directory already
      exists (GH#1639)
    - Remove asynchronous FTP responses emitted while computing digest values
      (GH#1661)
    - Support terminating connection after USER command when TLS is required
      (GH#1640)
    - Support OPTS commands for querying configured policy for resumed uploads,
      downloads (GH#1676)
    - MaxStoreFileSize for single user was not properly honored for SFTP uploads
      (GH#1686)
    - DisplayChdir using absolute path should work properly with DefaultRoot
      (GH#1688)
    - Clients should be disconnected when unable to be added to the
      ScoreboardFile (GH#1700)
    - Support injecting random delay when clients connect via DelayOnEvent
      (GH#1701)
    - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
    - Support obtaining default UID/GID values for AD directories in mod_ldap
      (GH#1716)
    - Update upload progress in scoreboard when throttling (GH#1433)
    - Null pointer reference encountered for FTPS connection due to config
      parser ignoring Include file problem (GH#1721)
    - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
    - mod_auth_otp should require per-user OTP entries by default (GH#1562)
    - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
      when using older OpenSSL versions (GH#1730)
    - Error resolving DNS name for implicit "server config" vhost lead to
      DelayTable not being found (GH#1746)
    - Log message for exceeding quota did not include the user/group/class quota
      type (GH#1749)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)
  - Additional C compatibility fix


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.2.rc3
changelog:
  - Update to 1.3.9rc3
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - Using mod_facl and mod_vroot at same time caused unexpected permissions
      issues (GH#1780)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
    - Implement limits@openssh.com SFTP extension (GH#1798)
    - Implement SFTPAuthPublicKeys directive for configuring the list of public
      key algorithms allowed for authentication (GH#1806)
    - Fix stack trace changing to directory with DisplayChdir file using %F
      variable on a large filesystem (GH#1819)
    - Remove inherited supplemental groups when started with root privileges
      (GH#1836)
    - SSH ECDSA host key algorithms were not being used as expected despite
      configuring appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.9-0.3.rc3
changelog:
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect


author: Paul Howarth <paul@city-fan.org> - 1.3.9-1
changelog:
  - Update to 1.3.9
    - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
      unexpected behavior (GH#1855)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
    - Added Polish translation (Bug #4511)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Update libtool.m4 for better MacOSX support (GH#1878)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.33.0-1
changelog:
  - Update to 0.33.0 (close RHBZ#2353440)
  - Drop the -doc subpackage (PDF docs and examples) for simplicity


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.33.0-3
changelog:
  - Backport to EPEL10
  - Restore -doc subpackage, removed in Fedora
  - Remove spec-file conditionals and let the branches diverge


author: Bala <kumaran.4353@gmail.com> - 0.6.4-1
changelog:
  - Upgrade version to 0.6.4
  - Use packaged vendor http-parser as system provided package is deprecated
  - Remove temporary fix of PR-73 as it got merged to 0.6.1 onwards


author: Ondřej Nosek <onosek@redhat.com> - 1.67-1
changelog:
  - Include URL in upload/download (walters)
  - Use python-requests-gssapi instead of -kerberos (lsedlar)
  - man page generator: use $SOURCE_DATE_EPOCH if specified (zbyszek)
  - do not block tag --clog due autospec usage (msuchy)
  - Processing of another return message from lookaside cache (onosek)
  - Allow setting --force for sources command by env var (lsedlar)
  - Update docker image for Jenkinks tests (onosek)
  - '_set_token' method moved to a shared place (onosek)
  - Fix copr-build command with results_dir=subdir option (otto.liljalaakso)
  - mockbuild: use results/mock_* when results_dir=subdir (tmz)
  - Add option to mockbuild use default resultdir of mock (v3) (sergio)
  - Restrict completion to .src.rpm files for import - #706 (orion)
  - `remote add` command: create a non-anonymous remote - #599 (onosek)
  - `mockbuild`: new argument --extra-pkgs - 498 (onosek)
  - *pkg import: check specfile matches the repo name - 529 (onosek)
  - Fixes syntax issues reported by flake8 (onosek)
  - Unittests for "Undo rpmautospec processing" (onosek)
  - *pkg import: Undo rpmautospec processing - 527 (miro)
  - *pkg import: Don't delete changelog generated by `rpmautospec convert` (miro)
  - Make lookaside cache retries configurable (onosek)
  - Lookaside cache operations retries (onosek)
  - Prepare the lookaside cache code for retries (onosek)
  - Fix flake8 complaints (onosek)
  - Support for checking exploded sources before push (onosek)
  - Split git credential data on first = only - 694 (lsedlar)
  - `commit` command fails on 'containers' namespace (onosek)
  - `copr-build` passes extra_args to copr-cli command - 510 (onosek)
  - Do not require 'sources' file for all namespaces - #684 (onosek)
  - Use release's rpmdefines in unused sources check - #671 (otto.liljalaakso)
  - Pre-push hook won't check private branches - #683 (onosek)
  - Config file option to skip the hook script creation - 515 (onosek)
  - Allow empty commits when `uses_rpmautospec` - #677 (j1.kyjovsky)
  - Check remote file with correct hash (lsedlar)
  - Ignore missing spec file in pre-push hook (lsedlar)
  - import_srpm: allow pre-generated srpms - #655 (onosek)
  - Fix unittests for `clone` and pre-push hook script (onosek)
  - pre-push hook script contains a user's config - #667 (onosek)
  - A HEAD query into a lookaside cache - 513 (onosek)
  - `pre-push-check` have to use spectool with --define - #672 (onosek)
  - Add more information about pre-push hook (lsedlar)
  - Update to spec file presence checking - #663 (onosek)
  - More robust spec file presence checking - #663 (onosek)
  - Do not generate pre-push hook script in some cases - #665 (onosek)
  - Avoid calling repo_name from load_nameverrel - #657 (otto.liljalaakso)
  - Move warnings from missing Git repo to debug level - #659 (otto.liljalaakso)
  - Update docker image for Jenkinks tests (onosek)
  - container-build: update --signing-intent help for OSBS 2 (kdreyer)
  - Process source URLs with fragment in pre-push hook (lsedlar)


author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Carl George <carlwgeorge@fedoraproject.org> - 0.23.2-1
changelog:
  - Update to version 0.23.2, resolves rhbz#2030302
  - Convert to pyproject macros
  - Switch license field to SPDX identifier
  - Skip tests that fail on Python 3.12


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.1-2
changelog:
  - Workaround doxygen non-reproducibility - make doc package noarch again
  - Increase client timeouts for XRootD server tests


author: Zygmunt Krynicki <me@zygoon.pl>
changelog:
  - Re-cherry pick fix for SELinux timedatex problem from upstream
    as it was not released in 2.66.1, sorry.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.67.1
   - Fix apparmor permissions to allow snaps access to kernel modules
     and firmware on UC24, which also fixes the kernel-modules-control
     interface on UC24
   - AppArmor prompting (experimental): disallow /./ and /../ in path
     patterns
   - Fix 'snap run' getent based user lookup in case of bad PATH
   - Fix snapd using the incorrect AppArmor version during undo of an
     refresh for regenerating snap profiles
   - Add new syscalls to base templates
   - hardware-observe interface: allow riscv_hwprobe syscall
   - mount-observe interface: allow listmount and statmount syscalls


author: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
changelog:
  - The changelog date and author have been modified to maintain linearity.
  - Drop 0001-data-selinux-remove-timedatex.patch - applied upstream.
  - New upstream release 2.67
   - AppArmor prompting (experimental): allow overlapping rules
   - Registry view (experimental): Changes to registry data (from both
     users and snaps) can be validated and saved by custodian snaps
   - Registry view (experimental): Support 'snapctl get --pristine' to
     read the registry data excluding staged transaction changes
   - Registry view (experimental): Put registry commands behind
     experimental feature flag
   - Components: Make modules shipped/created by kernel-modules
     components available right after reboot
   - Components: Add tab completion for local component files
   - Components: Allow installing snaps and components from local files
     jointly on the CLI
   - Components: Allow 'snapctl model' command for gadget and kernel
     snaps
   - Components: Add 'snap components' command
   - Components: Bug fixes
   - eMMC gadget updates (WIP): add syntax support in gadget.yaml for
     eMMC schema
   - Support for ephemeral recovery mode on hybrid systems
   - Support for dm-verity options in snap-bootstrap
   - Support for overlayfs options and allow empty what argument for
     tmpfs
   - Enable ubuntu-image to determine the size of the disk image to
     create
   - Expose 'snap debug' commands 'validate-seed' and 'seeding'
   - Add debug API option to use dedicated snap socket /run/snapd-
     snap.socket
   - Hide experimental features that are no longer required
     (accepted/rejected)
   - Mount ubuntu-save partition with no{exec,dev,suid} at install, run
     and factory-reset
   - Improve memory controller support with cgroup v2
   - Support ssh socket activation configurations (used by ubuntu
     22.10+)
   - Fix generation of AppArmor profile with incorrect revision during
     multi snap refresh
   - Fix refresh app awareness related deadlock edge case
   - Fix not caching delta updated snap download
   - Fix passing non root uid, guid to initial tmpfs mount
   - Fix ignoring snaps in try mode when amending
   - Fix reloading of service activation units to avoid systemd errors
   - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS
     updates PPA
   - Make killing of snap apps best effort to avoid possibility of
     malicious failure loop
   - Alleviate impact of auto-refresh failure loop with progressive
     delay
   - Dropped timedatex in selinux-policy to avoid runtime issue
   - Fix missing syscalls in seccomp profile
   - Modify AppArmor template to allow using SNAP_REEXEC on arch
     systems
   - Modify AppArmor template to allow using vim.tiny (available in
     base snaps)
   - Modify AppArmor template to add read-access to debian_version
   - Modify AppArmor template to allow owner to read
     @{PROC}/@{pid}/sessionid
   - {common,personal,system}-files interface: prohibit trailing @ in
     filepaths
   - {desktop,shutdown,system-observe,upower-observe} interface:
     improve for Ubuntu Core Desktop
   - custom-device interface: allow @ in custom-device filepaths
   - desktop interface: improve launch entry and systray integration
     with session
   - desktop-legacy interface: allow DBus access to
     com.canonical.dbusmenu
   - fwupd interface: allow access to nvmem for thunderbolt plugin
   - mpris interface: add plasmashell as label
   - mount-control interface: add support for nfs mounts
   - network-{control,manager} interface: add missing dbus link rules
   - network-manager-observe interface: add getDevices methods
   - opengl interface: add Kernel Fusion Driver access to opengl
   - screen-inhibit-control interface: improve screen inhibit control
     for use on core
   - udisks2 interface: allow ping of the UDisks2 service
   - u2f-devices interface: add Nitrokey Passkey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.10-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-10/10536
  - security fixes for bz#2253846 & bz#2211726 & bz#2253847


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.11-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-11/12265
  - bz#2211726


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-12/13060
  - Security fixes: bz#2248564, bz#2281499, bz#2281500, bz#2281502, bz#2281503
  - switch to sysusers based user provisioning approach - fixes bz#2252618
  - Add legacy openssl build dependency from F41 on - fixes FTBS / bz#2301334
  - since we can now drop EL7 support we can also cleanup systemd handling


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.12-2
changelog:
  - Re-add systemd-devel as build dependency so the daemon knows how to notify systemd that it was started - fixes bz#2302910


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.13-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/new-tor-stable-release-0-4-8-13/15397 (bz#2211726)
  - reviewed and adjusted SPDX license format


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.8.14-1
changelog:
  - update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-14/17242 (bz#2211726)


