# changelog

author: Tim Semeijn <tim@goat.re> - 0.9.4-2
changelog:
  - Fix failing builds with *_poll build patch (3proxy-0.9.4-poll-build.patch)
  - Convert license to SPDX


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.0-1
changelog:
  - Update to version 3.3.0
  - Soname bump for libHepMC3 (3 to 4)
  - Additional build dependencies for tests
  - Fix an uninitialized value issue found by valgrind
  - Drop EPEL7 build (soon to be EOL)
  - Avoid assert due to implicit narrowing cast on 32 bit architectures
  - Suppress a valgrind error on Fedora 39 ppc64le


author: Chris Patterson <cpatterson@microsoft.com> - 0.5.0-1
changelog:
  - Uprev to 0.5.0
  - Drop 0001-cmake-Allow-the-install-directory-to-be-configurable.patch
  - Delete selftest executable after install
  - Add new json-c and libcmocka build dependencies.


author: Petr Pisar <ppisar@redhat.com> - 1.3.0-1
changelog:
  - 1.3.0 bump (CVE-2023-29415, CVE-2023-29416, CVE-2023-29417, CVE-2023-29418,
    CVE-2023-29419, CVE-2023-29420, CVE-2023-29421)


author: Petr Pisar <ppisar@redhat.com> - 1.3.1-2
changelog:
  - Fix a memory allocation in bz3_compress() (upstream bug #120)
  - Fix bz3grep error message on an invalid argument (upstream bug #127)
  - Fix a decoding failure on specific sizes (upstream bug #131)
  - Do not create an output file in case an input argument is a directory
    (upstream bug #138)


author: Sérgio Basto <sergio@serjux.com> - 1.5.87-2
changelog:
  - Drop debconf-gnome on epel 10 because we don't have perl-GTK3 package
    and I don't know if we'll ever have or want have it (perl-GTK3 on epel 10)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.5.87-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
  - Fix sbin merge for all releases


author: Dominik Wombacher <dominik@wombacher.cc> - 1.0.9-4
changelog:
  - Include upstream Patch to ensure swapon with maximum priority before hibernation
  - Resolves rhbz#2322884


author: Ondřej Nosek <onosek@redhat.com> - 1.45-2
changelog:
  - Add support for building for epel10
  - Don't print the branch name after dash when there is no dash
  - Remove mbs.fedoraproject.org scopes from git cred helper
  - Fix unittests after creating the project in hatch


author: Ondřej Nosek <onosek@redhat.com> - 1.45-5
changelog:
  - Add py313 environment as that's current
  - Drop support for bodhi-client <= 5
  - Drop all usage of six
  - Replace and update use of deprecated 'linux_distribution'
  - Modernize and clean unittest imports
  - Update check_bodhi_version to check for >= 6.0.0
  - Fix URL of Bodhi in staging
  - Fixes missing key in distro.os_release_info()
  - Do not auto-request ELN modules
  - Fix minor requirements for EPEL10+ in test
  - Use minor value from koji when no minor in branch name
  - Fix EPEL10 branch expression to cover 2 or more digits.
  - Get macros from epel-candidate build target.
  - Improvements on string parsing
  - Add tests cases for runtime_disttag removal when working with epel10
  - Handle rhel runtimes when minor version exists in disttag


author: Ondřej Nosek <onosek@redhat.com> - 1.45-6
changelog:
  - gitignore the name-version-build/ directory created by fedpkg prep/local
  - Fixing unittests for py36
  - Fix tests on EPEL 9/10.
  - Add setuptools to dependencies for Python 3.12+
  - Update expired token exception instructions
  - Clone epel10 branches with clone -B


author: Ondřej Nosek <onosek@redhat.com> - 1.45-9
changelog:
  - `releases-info` should always show the same order
  - Python 3.13 environment and renew testing image
  - Fix unittests when building for ELN target


author: Ondřej Nosek <onosek@redhat.com> - 1.45-10
changelog:
  - Dynamically exclude Rawhide branch from fedpkg branching
  - Do not auto-request EPEL x.y modules
  - Don't allow to request repositories in modules/ namespace


author: Ondřej Nosek <onosek@redhat.com> - 1.46-1
changelog:
  - `request-repo`: add `--onboard-packit` argument (nforro)
  - Fork a package using anonymous auth - #574 (onosek)
  - Check that auth tokens aren’t written to world-readable files (git)
  - Don't allow to request repositories in modules/ namespace (miro)
  - Do not auto-request EPEL x.y modules (carlwgeorge)
  - Dynamically exclude Rawhide branch from fedpkg branching - #566 (samyak.jn11)
  - Fix unittests when building for ELN target - #589 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - `releases-info` should always show the same order - #569 (onosek)
  - Update expired token exception instructions (astra)
  - Clone epel10 branches with clone -B (carlwgeorge)
  - Update expired token exception instructions (ferdnyc)
  - Add setuptools to dependencies for Python 3.12+ (ferdnyc)
  - Fix tests on EPEL 9/10. (romain.geissler)
  - Fixing unittests for py36 (onosek)
  - gitignore the name-version-build/ directory created by fedpkg prep/local (miro)
  - Handle rhel runtimes when minor version exists in disttag (dherrera)
  - Add tests cases for runtime_disttag removal when working with epel10 (dherrera)
  - Improvements on string parsing (dherrera)
  - Get macros from epel-candidate build target. (dherrera)
  - Fix EPEL10 branch expression to cover 2 or more digits. (dherrera)
  - Use minor value from koji when no minor in branch name (dherrera)
  - Fix minor requirements for EPEL10+ in test (dherrera)
  - Do not auto-request ELN modules (yselkowi)
  - Fixes missing key in distro.os_release_info() (onosek)
  - Update check_bodhi_version to check for >= 6.0.0 (awilliam)
  - Modernize and clean unittest imports (awilliam)
  - Replace and update use of deprecated 'linux_distribution' (awilliam)
  - Drop all usage of six (awilliam)
  - Drop support for bodhi-client <= 5 (awilliam)
  - Add py313 environment as that's current (awilliam)
  - Fix URL of Bodhi in staging (nils)
  - Extend load_rpmdefines to work with EPEL10+ (dherrera)
  - Add EPEL10+ url pattern on assert_valid_epel_package (dherrera)
  - Test url usage in assert_valid_epel_package (dherrera)
  - Add EPEL10 branch name cases as valid (dherrera)
  - Test for valid EPEL branch names (dherrera)
  - Don't print the branch name after dash when there is no dash - 554 (miro)
  - Don't use hatchling on python 3.6 (dherrera)
  - Remove mbs.fedoraproject.org scopes from git cred helper (kj)
  - Fix unittests after creating the project in hatch (onosek)


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Simone Caronni <negativo17@gmail.com> - 0.15.0-6
changelog:
  - Leave autodetection of hardware extensions as per developer's comment at
    https://bugzilla.redhat.com/show_bug.cgi?id=2307795#c16


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Karel Volný <kvolny@redhat.com> - 2.7.0-1
changelog:
  - Update to 2.7.0 (rhbz#2272301)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1 (rhbz#2281508)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.8.0-1
changelog:
  - Update to 2.8.0 (rhbz#2291131)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304188)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.1-1
changelog:
  - Update to 2.10.1 (rhbz#2316762)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323581)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329741)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: David Pascual Hernandez <davherna@redhat.com> - 1.19.0-1
changelog:
  - 6f81e37 test: speed-up tests by mocking gethostbyaddr (Petr Vobornik)
  - 587a9c7 fix(beaker): supress 10_avc_check restraint plugin (Petr Vobornik)
  - 2c0c2bb test: Add add_dict_to_node test (Petr Vobornik)
  - f4324bf feat: handle list value for add_dict_to_node function (Petr Vobornik)
  - f1e7590 fix: make delete_host function more robust (Petr Vobornik)
  - 784d24b chore: bump black in pre-commit (David Pascual)
  - f6f9131 chore(deps): bump black from 22.3.0 to 24.3.0 (David Pascual)
  - a7db867 test: Add test for _get_recipe_info function (Petr Vobornik)
  - aa25ff3 feat: Provide beaker log links (Petr Vobornik)


author: David Pascual Hernandez <davherna@redhat.com> - 1.20.0-1
changelog:
  - feeae04 feat: Add support for translanting %pre and main body part of kickstart (David Pascual)
  - 236393c chore: Update deprecated actions (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.22.0-1
changelog:
  - f43d20f style: Reformat by black (David Pascual)
  - 768bba5 fix: podman: set podman connection information for ansible (David Pascual)
  - 4d0b63c chore: setup: package seccomp filter (David Pascual)
  - 9b2d980 docs: Update seccomp configuration example (David Pascual)
  - f3deca1 feat: podman: handle custom network configuration (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.0-1
changelog:
  - 64a84db feat: Add support for translanting job-owner of kickstart (David Pascual)
  - 868523c feat: Add translantion for kernel_options and kernel_options_post (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683,
      CVE-2023-51713)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-3
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Ondřej Nosek <onosek@redhat.com> - 1.67-1
changelog:
  - Include URL in upload/download (walters)
  - Use python-requests-gssapi instead of -kerberos (lsedlar)
  - man page generator: use $SOURCE_DATE_EPOCH if specified (zbyszek)
  - do not block tag --clog due autospec usage (msuchy)
  - Processing of another return message from lookaside cache (onosek)
  - Allow setting --force for sources command by env var (lsedlar)
  - Update docker image for Jenkinks tests (onosek)
  - '_set_token' method moved to a shared place (onosek)
  - Fix copr-build command with results_dir=subdir option (otto.liljalaakso)
  - mockbuild: use results/mock_* when results_dir=subdir (tmz)
  - Add option to mockbuild use default resultdir of mock (v3) (sergio)
  - Restrict completion to .src.rpm files for import - #706 (orion)
  - `remote add` command: create a non-anonymous remote - #599 (onosek)
  - `mockbuild`: new argument --extra-pkgs - 498 (onosek)
  - *pkg import: check specfile matches the repo name - 529 (onosek)
  - Fixes syntax issues reported by flake8 (onosek)
  - Unittests for "Undo rpmautospec processing" (onosek)
  - *pkg import: Undo rpmautospec processing - 527 (miro)
  - *pkg import: Don't delete changelog generated by `rpmautospec convert` (miro)
  - Make lookaside cache retries configurable (onosek)
  - Lookaside cache operations retries (onosek)
  - Prepare the lookaside cache code for retries (onosek)
  - Fix flake8 complaints (onosek)
  - Support for checking exploded sources before push (onosek)
  - Split git credential data on first = only - 694 (lsedlar)
  - `commit` command fails on 'containers' namespace (onosek)
  - `copr-build` passes extra_args to copr-cli command - 510 (onosek)
  - Do not require 'sources' file for all namespaces - #684 (onosek)
  - Use release's rpmdefines in unused sources check - #671 (otto.liljalaakso)
  - Pre-push hook won't check private branches - #683 (onosek)
  - Config file option to skip the hook script creation - 515 (onosek)
  - Allow empty commits when `uses_rpmautospec` - #677 (j1.kyjovsky)
  - Check remote file with correct hash (lsedlar)
  - Ignore missing spec file in pre-push hook (lsedlar)
  - import_srpm: allow pre-generated srpms - #655 (onosek)
  - Fix unittests for `clone` and pre-push hook script (onosek)
  - pre-push hook script contains a user's config - #667 (onosek)
  - A HEAD query into a lookaside cache - 513 (onosek)
  - `pre-push-check` have to use spectool with --define - #672 (onosek)
  - Add more information about pre-push hook (lsedlar)
  - Update to spec file presence checking - #663 (onosek)
  - More robust spec file presence checking - #663 (onosek)
  - Do not generate pre-push hook script in some cases - #665 (onosek)
  - Avoid calling repo_name from load_nameverrel - #657 (otto.liljalaakso)
  - Move warnings from missing Git repo to debug level - #659 (otto.liljalaakso)
  - Update docker image for Jenkinks tests (onosek)
  - container-build: update --signing-intent help for OSBS 2 (kdreyer)
  - Process source URLs with fragment in pre-push hook (lsedlar)


author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - There is a new convenience method `Sections.get_or_create()` that allows you to manipulate a section
    without checking if it exists first. If a section doesn't exist, it will be appended to the end. (#441)
    For example, this will work properly even on spec files without `%changelog`:

    ```
    with spec.sections() as sections:
        changelog = sections.get_or_create("changelog")
        changelog[:] = ["%autochangelog"]
    ```
  - Resolves: rhbz#2332288


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.7.1-2
changelog:
  - Workaround doxygen non-reproducibility - make doc package noarch again
  - Increase client timeouts for XRootD server tests


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.7.20231006git8d00acdc
changelog:
  - Remove require of libpng12.so.0, lsb-desktop already require libpng
  - redhat-lsb now provides lsb_release, in future maybe we can remove the rest since LSB 5.0 is out of date
  - more cleanups
  - Report that is not LSB compliance, because various components are missing from Fedora, so compliance is not possible


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.10.20231006git8d00acdc
changelog:
  - The packages are architecture-specific, but do not contain any ELF
    binaries with debuginfo to extract, so we need disable debuginfo.


author: Sérgio Basto <sergio@serjux.com> - 5.0-0.13.20231006git8d00acdc
changelog:
  - Remove sub-pacakges: redhat-lsb-core, redhat-lsb-cxx, redhat-lsb-desktop,
    redhat-lsb-languages and redhat-lsb-printing aren't useful for a long time
  - Switch to a noarch package


author: Zygmunt Krynicki <me@zygoon.pl>
changelog:
  - Re-cherry pick fix for SELinux timedatex problem from upstream
    as it was not released in 2.66.1, sorry.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.67.1
   - Fix apparmor permissions to allow snaps access to kernel modules
     and firmware on UC24, which also fixes the kernel-modules-control
     interface on UC24
   - AppArmor prompting (experimental): disallow /./ and /../ in path
     patterns
   - Fix 'snap run' getent based user lookup in case of bad PATH
   - Fix snapd using the incorrect AppArmor version during undo of an
     refresh for regenerating snap profiles
   - Add new syscalls to base templates
   - hardware-observe interface: allow riscv_hwprobe syscall
   - mount-observe interface: allow listmount and statmount syscalls


author: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
changelog:
  - The changelog date and author have been modified to maintain linearity.
  - Drop 0001-data-selinux-remove-timedatex.patch - applied upstream.
  - New upstream release 2.67
   - AppArmor prompting (experimental): allow overlapping rules
   - Registry view (experimental): Changes to registry data (from both
     users and snaps) can be validated and saved by custodian snaps
   - Registry view (experimental): Support 'snapctl get --pristine' to
     read the registry data excluding staged transaction changes
   - Registry view (experimental): Put registry commands behind
     experimental feature flag
   - Components: Make modules shipped/created by kernel-modules
     components available right after reboot
   - Components: Add tab completion for local component files
   - Components: Allow installing snaps and components from local files
     jointly on the CLI
   - Components: Allow 'snapctl model' command for gadget and kernel
     snaps
   - Components: Add 'snap components' command
   - Components: Bug fixes
   - eMMC gadget updates (WIP): add syntax support in gadget.yaml for
     eMMC schema
   - Support for ephemeral recovery mode on hybrid systems
   - Support for dm-verity options in snap-bootstrap
   - Support for overlayfs options and allow empty what argument for
     tmpfs
   - Enable ubuntu-image to determine the size of the disk image to
     create
   - Expose 'snap debug' commands 'validate-seed' and 'seeding'
   - Add debug API option to use dedicated snap socket /run/snapd-
     snap.socket
   - Hide experimental features that are no longer required
     (accepted/rejected)
   - Mount ubuntu-save partition with no{exec,dev,suid} at install, run
     and factory-reset
   - Improve memory controller support with cgroup v2
   - Support ssh socket activation configurations (used by ubuntu
     22.10+)
   - Fix generation of AppArmor profile with incorrect revision during
     multi snap refresh
   - Fix refresh app awareness related deadlock edge case
   - Fix not caching delta updated snap download
   - Fix passing non root uid, guid to initial tmpfs mount
   - Fix ignoring snaps in try mode when amending
   - Fix reloading of service activation units to avoid systemd errors
   - Fix snapd snap FIPS build on Launchpad to use Advantage Pro FIPS
     updates PPA
   - Make killing of snap apps best effort to avoid possibility of
     malicious failure loop
   - Alleviate impact of auto-refresh failure loop with progressive
     delay
   - Dropped timedatex in selinux-policy to avoid runtime issue
   - Fix missing syscalls in seccomp profile
   - Modify AppArmor template to allow using SNAP_REEXEC on arch
     systems
   - Modify AppArmor template to allow using vim.tiny (available in
     base snaps)
   - Modify AppArmor template to add read-access to debian_version
   - Modify AppArmor template to allow owner to read
     @{PROC}/@{pid}/sessionid
   - {common,personal,system}-files interface: prohibit trailing @ in
     filepaths
   - {desktop,shutdown,system-observe,upower-observe} interface:
     improve for Ubuntu Core Desktop
   - custom-device interface: allow @ in custom-device filepaths
   - desktop interface: improve launch entry and systray integration
     with session
   - desktop-legacy interface: allow DBus access to
     com.canonical.dbusmenu
   - fwupd interface: allow access to nvmem for thunderbolt plugin
   - mpris interface: add plasmashell as label
   - mount-control interface: add support for nfs mounts
   - network-{control,manager} interface: add missing dbus link rules
   - network-manager-observe interface: add getDevices methods
   - opengl interface: add Kernel Fusion Driver access to opengl
   - screen-inhibit-control interface: improve screen inhibit control
     for use on core
   - udisks2 interface: allow ping of the UDisks2 service
   - u2f-devices interface: add Nitrokey Passkey


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68
   - FDE: add support for new and more extensible key format that is
     unified between TPM and FDE hook
   - FDE: add support for adding passphrases during installation
   - FDE: update secboot to 30317622bbbc
   - Snap components: make kernel components available on firstboot
     after either initramfs or ephemeral rootfs style install
   - Snap components: mount drivers tree from initramfs so kernel
     modules are available in early boot stages
   - Snap components: support remodeling to models that contain
     components
   - Snap components: support offline remodeling to models that contain
     components
   - Snap components: support creating new recovery systems with
     components
   - Snap components: support downloading components with 'snap
     download' command
   - Snap components: support sideloading asserted components
   - AppArmor Prompting(experimental): improve version checks and
     handling of listener notification protocol for communication with
     kernel AppArmor
   - AppArmor Prompting(experimental): make prompt replies idempotent,
     and have at most one rule for any given path pattern, with
     potentially mixed outcomes and lifespans
   - AppArmor Prompting(experimental): timeout unresolved prompts after
     a period of client inactivity
   - AppArmor Prompting(experimental): return an error if a patch
     request to the API would result in a rule without any permissions
   - AppArmor Prompting(experimental): warn if there is no prompting
     client present but prompting is enabled, or if a prompting-related
     error occurs during snapd startup
   - AppArmor Prompting(experimental): do not log error when converting
     empty permissions to AppArmor permissions
   - Confdb(experimental): rename registries to confdbs (including API
     /v2/registries => /v2/confdb)
   - Confdb(experimental): support marking confdb schemas as ephemeral
   - Confdb(experimental): add confdb-control assertion and feature
     flag
   - Refresh App Awareness(experimental): LP: #2089195 prevent
     possibility of incorrect notification that snap will quit and
     update
   - Confidential VMs: snap-bootstrap support for loading partition
     information from a manifest file for cloudimg-rootfs mode
   - Confidential VMs: snap-bootstrap support for setting up cloudimg-
     rootfs as an overlayfs with integrity protection
   - dm-verity for essential snaps: add support for snap-integrity
     assertion
   - Interfaces: modify AppArmor template to allow owner read on
     @{PROC}/@{pid}/fdinfo/*
   - Interfaces: LP: #2072987 modify AppArmor template to allow using
     setpriv to run daemon as non-root user
   - Interfaces: add configfiles backend that ensures the state of
     configuration files in the filesystem
   - Interfaces: add ldconfig backend that exposes libraries coming
     from snaps to either the rootfs or to other snaps
   - Interfaces: LP: #1712808 LP: 1865503 disable udev backend when
     inside a container
   - Interfaces: add auditd-support interface that grants audit_control
     capability and required paths for auditd to function
   - Interfaces: add checkbox-support interface that allows
     unrestricted access to all devices
   - Interfaces: fwupd | allow access to dell bios recovery
   - Interfaces: fwupd | allow access to shim and fallback shim
   - Interfaces: mount-control | add mount option validator to detect
     mount option conflicts early
   - Interfaces: cpu-control | add read access to /sys/kernel/irq/
   - Interfaces: locale-control | changed to be implicit on Ubuntu Core
     Desktop
   - Interfaces: microstack-support | support for utilizing of AMD SEV
     capabilities
   - Interfaces: u2f | added missing OneSpan device product IDs
   - Interfaces: auditd-support | grant seccomp setpriority
   - Interfaces: opengl interface | enable parsing of nvidia driver
     information files
   - Allow mksquashfs 'xattrs' when packing snap types os, core, base
     and snapd as part of work to support non-root snap-confine
   - Upstream/downstream packaging changes and build updates
   - Improve error logs for malformed desktop files to also show which
     desktop file is at fault
   - Provide more precise error message when overriding channels with
     grade during seed creation
   - Expose 'snap prepare-image' validation parameter
   - Add snap-seccomp 'dump' command that dumps the filter rules from a
     compiled profile
   - Add fallback release info location /etc/initrd-release
   - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
     initramfs deb builds
   - Remove stale robust-mount-namespace-updates experimental feature
     flag
   - Remove snapd-snap experimental feature (rejected) and it's feature
     flag
   - Changed snap-bootstrap to mount base directly on /sysroot
   - Mount ubuntu-seed mounted as no-{suid,exec,dev}
   - Mapping volumes to disks: add support for volume-assignments in
     gadget
   - Fix silently broken binaries produced by distro patchelf 0.14.3 by
     using locally build patchelf 0.18
   - Fix mismatch between listed refresh candidates and actual refresh
     due to outdated validation sets
   - Fix 'snap get' to produce compact listing for tty
   - Fix missing store-url by keeping it as part of auxiliary store
     info
   - Fix snap-confine attempting to retrieve device cgroup setup inside
     container where it is not available
   - Fix 'snap set' and 'snap get' panic on empty strings with early
     error checking
   - Fix logger debug entries to show correct caller and file
     information
   - Fix issue preventing hybrid systems from being seeded on first
     boot
   - LP: #1966203 remove auto-import udev rules not required by deb
     package to avoid unwanted syslog errors
   - LP: #1886414 fix progress reporting when stdout is on a tty, but
     stdin is not


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.2
   - FDE: use boot mode for FDE hooks
   - FDE: add snap-bootstrap compatibility check to prevent image
     creation with incompatible snapd and kernel snap
   - FDE: add argon2 out-of-process KDF support
   - FDE: have separate mutex for the sections writing a fresh modeenv
   - FDE: LP: #2099709 update secboot to e07f4ae48e98
   - Confdb: support pruning ephemeral data and process alternative
     types in order
   - core-initrd: look at env to mount directly to /sysroot
   - core-initrd: prepare for Plucky build and split out 24.10
     (Oracular)
   - Fix missing primed packages in snapd snap manifest
   - Interfaces: posix-mq | fix incorrect clobbering of global variable
     and make interface more precise
   - Interfaces: opengl | add more kernel fusion driver files


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.68.3
   - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
     old keyring path
   - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
     permissions
   - Fix snapd deb build complaint about ifneq with extra bracket


author: Richard W.M. Jones <rjones@redhat.com> - 7.0.7-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Than Ngo <than@redhat.com> - 20200406-35
changelog:
  - fixed rhbz#2284575, add texlive-mdframed
  - fixed rhbz#2275109, add texlive-picinpar
  - add texlive-selinput, texlive-lipsum, texlive-picture, texlive-kantlipsum, texlive-ntheorem


author: Adrien Vergé <adrienverge@gmail.com> - 1.31.0-1
changelog:
  - Update to latest upstream version
  - Temporarily restore setup.py/setup.cfg since setuptools ≥ 61 is not available


