# changelog

author: Chris Caron <lead2gold@gmail.com> - 1.9.4-3
changelog:
  - Spec file modernization BZ2377453
  - Translation files patch added to allow v1.9.4 to build corectly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.41-2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream dnssec system test testcase for this problem


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.44-2
changelog:
  - Create /var/named directories for bind-chroot (RHEL-132053)
  - Add forgotten _libdir/named into bind-chroot tmpfiles


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.109-1
changelog:
  - Update to 145.0.7632.109
  - * CVE-2026-2648: Heap buffer overflow in PDFium
  - * CVE-2026-2649: Integer overflow in V8
  - * CVE-2026-2650: Heap buffer overflow in Media


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.116-1
changelog:
  - Update to 145.0.7632.116
  - * CVE-2026-3061: Out of bounds read in Media
  - * CVE-2026-3062: Out of bounds read and write in Tint
  - * CVE-2026-3063: Inappropriate implementation in DevTools


author: Than Ngo <than@redhat.com> - 145.0.25^chromium145.0.7632.159-1
changelog:
  - Update to 145.0.7632.159
  - * CVE-2026-3536: Integer overflow in ANGLE
  - * CVE-2026-3537: Object lifecycle issue in PowerVR
  - * CVE-2026-3538: Integer overflow in Skia
  - * CVE-2026-3539: Object lifecycle issue in DevTools
  - * CVE-2026-3540: Inappropriate implementation in WebAudio
  - * CVE-2026-3541: Inappropriate implementation in CSS
  - * CVE-2026-3542: Inappropriate implementation in WebAssembly
  - * CVE-2026-3543: Inappropriate implementation in V8
  - * CVE-2026-3544: Heap buffer overflow in WebCodecs
  - * CVE-2026-3545: Insufficient data validation in Navigation


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.71-1
changelog:
  - Update to 146.0.7680.71
  - * CVE-2026-3913: Heap buffer overflow in WebML
  - * CVE-2026-3914: Integer overflow in WebML
  - * CVE-2026-3915: Heap buffer overflow in WebML
  - * CVE-2026-3916: Out of bounds read in Web Speech
  - * CVE-2026-3917: Use after free in Agents
  - * CVE-2026-3918: Use after free in WebMCP
  - * CVE-2026-3919: Use after free in Extensions
  - * CVE-2026-3920: Out of bounds memory access in WebML
  - * CVE-2026-3921: Use after free in TextEncoding
  - * CVE-2026-3922: Use after free in MediaStream
  - * CVE-2026-3923: Use after free in WebMIDI
  - * CVE-2026-3924: Use after free in WindowDialog
  - * CVE-2026-3925: Incorrect security UI in LookalikeChecks
  - * CVE-2026-3926: Out of bounds read in V8
  - * CVE-2026-3927: Incorrect security UI in PictureInPicture
  - * CVE-2026-3928: Insufficient policy enforcement in Extensions
  - * CVE-2026-3929: Side-channel information leakage in ResourceTiming
  - * CVE-2026-3930: Unsafe navigation in Navigation
  - * CVE-2026-3931: Heap buffer overflow in Skia
  - * CVE-2026-3932: Insufficient policy enforcement in PDF
  - * CVE-2026-3934: Insufficient policy enforcement in ChromeDriver
  - * CVE-2026-3935: Incorrect security UI in WebAppInstalls
  - * CVE-2026-3936: Use after free in WebView
  - * CVE-2026-3937: Incorrect security UI in Downloads
  - * CVE-2026-3938: Insufficient policy enforcement in Clipboard
  - * CVE-2026-3939: Insufficient policy enforcement in PDF
  - * CVE-2026-3940: Insufficient policy enforcement in DevTools
  - * CVE-2026-3941: Insufficient policy enforcement in DevTools
  - * CVE-2026-3942: Incorrect security UI in PictureInPicture
  - Fix build errors
  - Refresh patches for new upstream changes
  - Remove patches merged by upstream
  - Hoshino Lina: Update to cef-146.0.6+g68649e2 (rhbz#2450085)


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.75-1
changelog:
  - Update to 146.0.7680.75
  - * CVE-2026-3909: Out of bounds write in Skia
  - * CVE-2026-3910: Inappropriate implementation in V8


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.153-1
changelog:
  - Update to 146.0.7680.153
  - * CVE-2026-4439: Out of bounds memory access in WebGL
  - * CVE-2026-4440: Out of bounds read and write in WebGL
  - * CVE-2026-4441: Use after free in Base
  - * CVE-2026-4442: Heap buffer overflow in CSS
  - * CVE-2026-4443: Heap buffer overflow in WebAudio
  - * CVE-2026-4444: Stack buffer overflow in WebRTC
  - * CVE-2026-4445: Use after free in WebRTC
  - * CVE-2026-4446: Use after free in WebRTC
  - * CVE-2026-4447: Inappropriate implementation in V8
  - * CVE-2026-4448: Heap buffer overflow in ANGLE
  - * CVE-2026-4449: Use after free in Blink
  - * CVE-2026-4450: Out of bounds write in V8
  - * CVE-2026-4451: Insufficient validation of untrusted input in Navigation
  - * CVE-2026-4452: Integer overflow in ANGLE
  - * CVE-2026-4453: Integer overflow in Dawn
  - * CVE-2026-4454: Use after free in Network
  - * CVE-2026-4455: Heap buffer overflow in PDFium
  - * CVE-2026-4456: Use after free in Digital Credentials API
  - * CVE-2026-4457: Type Confusion in V8
  - * CVE-2026-4458: Use after free in Extensions
  - * CVE-2026-4459: Out of bounds read and write in WebAudio
  - * CVE-2026-4460: Out of bounds read in Skia
  - * CVE-2026-4461: Inappropriate implementation in V8
  - * CVE-2026-4462: Out of bounds read in Blink
  - * CVE-2026-4463: Heap buffer overflow in WebRTC
  - * CVE-2026-4464: Integer overflow in ANGLE


author: Than Ngo <than@redhat.com> - 146.0.6^chromium146.0.7680.164-1
changelog:
  - Update to 146.0.7680.164
  - * High CVE-2026-4673: Heap buffer overflow in WebAudio
  - * High CVE-2026-4674: Out of bounds read in CSS
  - * High CVE-2026-4675: Heap buffer overflow in WebGL
  - * High CVE-2026-4676: Use after free in Dawn
  - * High CVE-2026-4677: Out of bounds read in WebAudio
  - * High CVE-2026-4678: Use after free in WebGPU
  - * High CVE-2026-4679: Integer overflow in Fonts
  - * High CVE-2026-4680: Use after free in FedCM


author: Björn Esser <besser82@fedoraproject.org> - 3.31.1-1
changelog:
  - cmake-3.31.1
    Fixes rhbz#2324190
  - macros: Fix handling of double-dash without argument for ctest


author: Petr Šplíchal <psplicha@redhat.com> - 0.22-1
changelog:
  - Implement `transition` stats for the `jira` plugin (#352)
  - Fix issue with wrong `until` in GitHub search (#376)
  - List resolved jira by tester and contributor field
  - Fix `zammad` token bug, some minor adjustments
  - Better handling auth max retry in jira plugin
  - Handle JSON decode errors in pagure plugin
  - Reuse bodhi connection instead of opening new ones
  - Properly handle timeout in pagure plugin
  - Complete report even on plugin error
  - Better handling on server errors for pagure plugin
  - Better handling of wrong url in confluence plugin
  - Handle timeout fetching batches in jira plugin
  - Fixed Jira updated issues and support timeout
  - Collect stats in parallel
  - Add stats for updated jira tickets
  - Handle rate limiting in Jira plugin
  - Allow to filter out orgs in GitHub plugin
  - Properly collect comments in GitHub
  - Improve items plugin
  - Enable pagure closed PRs stats collection
  - Add hyperkitty support
  - Handle better the GitLab expired token case
  - Increased test coverage
  - Use pytest-xdist for parallelizing test execution
  - Add collection of comments for Pagure
  - Cover markdown format while testing Koji
  - Use tenacity handling retry connection to GitHub
  - Added stats for modified pages in Confluence
  - Allow to skip SSL verification in bugzilla plugin
  - Added markdown support to google plugin
  - Add token authentication to confluence plugin
  - Add markdown support to koji plugin
  - Fetch all created issues correctly in `pagure` (#379)
  - Use custom `user-agent` in the `public_inbox` plugin (#392)
  - Fix dockerfile executable path, add git to container (#354)
  - Support `user`, `org`, `repo` in the `github` plugin (#373)
  - Handle the GitHub rate limit in a better way (#374)
  - Create a Public Inbox Plugin
  - Implement `did last [monday..sunday]`
  - Correctly handle merge commits in verbose mode
  - Prevent duplicates in github issue stats
  - Retry connecting to GitLab API on error
  - Add a `Toolbelt Catalog` entry for `did`
  - Allow skipping events that are not reportable
  - Add a team report example using login aliases
  - Migrate to the `SPDX` identifier


author: Petr Šplíchal <psplicha@redhat.com> - 0.23-1
changelog:
  - Enable `epel-10` building and testing (#454)
  - Implement initial support for `forgejo` stats (#452)
  - Support `merged` pull requests for `github` and `gitlab` (#311)
  - Improve the Jira Cloud implementation (#453)
  - Support Jira Cloud instance (#448)
  - Fix issues reported by CodeQL security scan
  - Add --full-message flag to show complete commit/PR/MR bodies (#446)
  - Avoid fetching thousands of pages from GitLab API (#377)
  - Upgrade to CodeQL Action v4 (#445)
  - Fix parsing of --config argument with whitespace (#437)
  - Fix `GitHub.commented_in_range` (#444)
  - Add type hints to items plugin (#443)
  - Add type hints to Confluence plugin (#442)
  - Add type hints to Jira plugin (#441)
  - Jira issues with worklogs (#429)
  - Enable Python 3.14 support (#440)
  - Add type hints and error handling to Bugzilla plugin (#433)
  - Add type hints and error handling to Bodhi plugin (#432)
  - Fix error handling in config parsing and CLI (#431)
  - Add typing hints to conftest.py (#430)
  - Add type hints to CLI module (#424)
  - Add type annotations on base.py (#423)
  - Fix typing issues reported by mypy (#422)
  - Fix GitLab plugin 60s default timeout (#421)
  - Add unit tests for utils module (#417)
  - Add unit tests for stats module (#414)
  - Fix missing Optional typing (#411)
  - Fix return type for `get_token` in `base.py` (#412)
  - Avoid using variable names used in exceptions (#413)
  - Handle error responses querying GitHub (#408)
  - Fix Zammad plugin by filtering tickets after search (#328)
  - Add `pyproject.toml` (#409)
  - Support retry while fetching `public-inbox` stats
  - Retry bugzilla search query on connection errors
  - Deal with conflicting period options
  - Fix PageModified stat in Confluence plugin
  - Fix Jira transition to state with multiple projects


author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Miroslav Suchý <msuchy@redhat.com> 1.119-1
changelog:
  - update copr keys
  - add: ultramarine repository keys
  - add: terra repository keys
  - update Google key block


author: Sander Hoentjen <shoentjen@antagonist.nl> - 1.9.12-1
changelog:
  - Update to 1.9.12
  - Fixes CVE-2026-0396, CVE-2026-0397, CVE-2026-24028, CVE-2026-24029,
    CVE-2026-24030, CVE-2026-27853, CVE-2026-27854


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.3-1
changelog:
  - Update to release v0.26.3
  - Resolves CVE-2024-25621: rhbz#2419004, rhbz#2419033, rhbz#2419427
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.5-2
changelog:
  - Add rpminspect.yaml with temporary skip
  - the stack-prot annocheck test is failing on ppc64le and s390x but not
    other arch. Normally should skip
  - skip: stack-prot test because function fatalf is part of the CGO runtime
    library which is compiled without stack protection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.3.1-1
changelog:
  - Update to release v29.3.1
  - Resolves: rhbz#2451425
  - Upstream notes that this release resolves: CVE-2026-34040,
    CVE-2026-33997, CVE-2026-33748, CVE-2026-33747
  - Upstream fixes


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Neal Gompa <ngompa@fedoraproject.org> - 2:3.23.0-1
changelog:
  - Update to 3.23.0 (CVE-2026-26965, CVE-2026-26955, CVE-2026-26271,
    CVE-2026-25997, CVE-2026-25959, CVE-2026-25955, CVE-2026-25954,
    CVE-2026-25953, CVE-2026-25952, CVE-2026-25942, CVE-2026-25941)
    Resolves: rhbz#2442589
  - Small spec cleanups
  - Enable rdp2tcp channel support


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.0-1
changelog:
  - Update to 3.24.0 (CVE-2026-29774, CVE-2026-29775, CVE-2026-29776,
    CVE-2026-31806, CVE-2026-31883, CVE-2026-31884, CVE-2026-31885,
    CVE-2026-31897)
    Resolves: rhbz#2447295, rhbz#2447393, rhbz#2447412, rhbz#2447415
    Resolves: rhbz#2447417, rhbz#2447419, rhbz#2447423, rhbz#2447428
    Resolves: rhbz#2447431


author: Ondrej Holy <oholy@redhat.com> - 2:3.24.2-1
changelog:
  - Update to 3.24.2 (CVE-2026-33952, CVE-2026-33977, CVE-2026-33982,
    CVE-2026-33983, CVE-2026-33984, CVE-2026-33985, CVE-2026-33986,
    CVE-2026-33987, CVE-2026-33995)
    Resolves: rhbz#2448592


author: Jens Petersen <petersen@redhat.com> - 2.9.2-1
changelog:
  - place .p_dyn_hi files in prof subpkg
  - drop duplicate ghc_merge_filelist definition (mimi1vx)
  - ghc_set_gcc_flags: also silence C backend for riscv64


author: Jens Petersen <petersen@redhat.com> - 2.9.4-1
changelog:
  - ghc-dep.sh: unbreak prof for ghc9.10+
  - ghc_executable_profiling: to configure having detailed backtraces


author: Jens Petersen <petersen@redhat.com> - 2.10.1-1
changelog:
  - allow stderr from ghc_version
  - ghcplatform: use ppc64le for now (#2435862, needed for F44 Cabal-3.12+ hadrian)


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20250919-9
changelog:
  - update to 9.12.3 RC1
  - https://downloads.haskell.org/ghc/9.12.3-rc1/docs/users_guide/9.12.3-notes.html
  - boot with ghc9.10


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251110-10
changelog:
  - update to 9.12.3 RC2
  - https://downloads.haskell.org/ghc/9.12.3-rc2/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.2.20251209-11
changelog:
  - update to 9.12.3 RC3
  - https://downloads.haskell.org/ghc/9.12.3-rc3/docs/users_guide/9.12.3-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.12.3-15
changelog:
  - rebuild with ghc-rpm-macros-2.11
  - add ppc64le arch patches for ghc-platform and rts.cabal (#26870)
  - ppc64le NCG: add an upstream patch for the clrrxi instruction


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.2-1
changelog:
  - Update to 1.4.2, support for DNS-persist challenge
  - Resolves: rhbz#2434366 FTBFS in Fedora rawhide/f4
  - Resolves: rhbz#2438330 1.4.2 is available


author: Pavol Sloboda <pavol.sloboda02@gmail.com> - 2.6.2-3
changelog:
  - fix: fixed the BuildRequires of mariadb-devel package the mariadb-
    connector-c-devel package is available for all RHEL versions from version
    8 and above, as version 7 is quite old this condition is not necessary
    and all packages should use the BuildRequires of mariadb-connector-c-
    devel instead of mariadb-devel if possible


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.5-1
changelog:
  - Update to version 6.5.5
  - Drop soname patch, use new configure option --enable-librelease instead
  - Unbundle yaml-cpp, using new configure option --with-yaml-cpp
  - EPEL 7 EOL specfile cleanup


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.5.6-1
changelog:
  - Update to version 6.5.6
  - Add PDFs used by new tests to the source RPM
  - Add test file missing from the source tarfile to the source RPM


author: Sandro Mani <manisandro@gmail.com> - 2.43.1-6
changelog:
  - Backport fixes for CVE-2025-11081, CVE-2025-11839, CVE-2025-11840,
    CVE-2025-69644, CVE-2025-69645, CVE-2025-69646, CVE-2025-69647,
    CVE-2025-69648, CVE-2025-69649, CVE-2025-69650, CVE-2025-69651,
    CVE-2025-69652, CVE-2026-4647


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.4-4
changelog:
  - Clean-up: drop no longer necessary work-arounds
  - Remove redundant spacing
  - Move cmake call to conf section
  - Drop unnecessary BR: ccache and chrpath


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.0-1
changelog:
  - 64a84db feat: Add support for translanting job-owner of kickstart (David Pascual)
  - 868523c feat: Add translantion for kernel_options and kernel_options_post (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.1-1
changelog:
  - 0cabc75 fix: Translate job-group properly (David Pascual)
  - 70e07c1 fix: Return empty list when there is no content in res_ks_list (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.3-1
changelog:
  - cee2f5b fix : Not try to login beaker hub unless needed (David Pascual)
  - 75eb8ea chore: Release version 1.23.3 (github-actions)
  - 4da221c fix: Translate nested or/and constraint properly (David Pascual)
  - 60275ee fix: Make distro_variants working as patterns (David Pascual)
  - c02cc90 docs: Update maintainer email (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.4-1
changelog:
  - 75d8c3b chore: Enable epel-10 builds in Packit (David Pascual)
  - 4a98123 fix: Support pass fetch_url to task (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.23.5-1
changelog:
  - b46c7c4 chore: Bump python-semantic-release to fix release issue (David Pascual)
  - 033e1f7 chore(packit): Update epel spec for fedora propose upstream (David Pascual)
  - aeb12fe fix: Enforce beaker-client 29.2 to fix fetch_url error (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.24.0-1
changelog:
  - 39e9d79 feat: Add support to pass watchdog panic="ignore" in Beaker recipe (David Pascual)
  - 801ef4b fix: Fix nested and/or issue (David Pascual)
  - fad14c2 test: Add _translate_constraint test (David Pascual)


author: David Pascual Hernandez <davherna@redhat.com> - 1.25.0-1
changelog:
  - 8ed12e7 feat: Add support for Beaker group key (David Pascual)
  - 8e6ab07 fix: Revert commit 0cabc75 (David Pascual)


author: - 1.26.0-1
changelog:
  - a702da2 fix: Pin setuptools<82 to restore pkg_resources for beaker-client (Rizwan Shaikh)
  - cf48126 feat: add EC2 UserData support for AWS provider (Rizwan Shaikh)


author: Jerry James <loganjerry@gmail.com> - 0.9.0-3
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Debarshi Ray <rishi@fedoraproject.org> - 48.6-2
changelog:
  - Move the Bash completion from /etc to /usr/share because the former is
    reserved for system administrators and the latter for the operating
    system.


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-1
changelog:
  - Update to 1.28.2
  - fixes CVE-2026-1642
  - move log directory to nginx-filesystem subpackage (PR#20)
  - delete Maxim Dounin's key, it's no longer listed on the nginx website


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-4
changelog:
  - Fix RHEL 8 & 9 compatibility
  - Fix SSL passphrase dialog patch when used with OpenSSL < 3 (EL8 w/o EPEL)
  - Build now works with and without EPEL enabled


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-9
changelog:
  - Spec file and macro cleanups
  - move some files into the packages that have the dependencies they rely on
    (e.g. systemd, logrotate are not present in nginx-core, so don't install
    files pertaining to them there)
  - remove unused LDFLAGS and DESTDIR overrides, for perl we patch the
    Makefile.PL already
  - use zlib-ng-devel dependency also in nginx-mod-devel
  - improve macro consistency
  - sync configure command in macros.nginxmods.in with main package


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.3-1
changelog:
  - Update to 1.28.3
  - fixes CVE-2026-27654, CVE-2026-27784, CVE-2026-32647, CVE-2026-27651,
    CVE-2026-28753, CVE-2026-28755


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-5
changelog:
  - Clean up spec file so it's aligned with c10s
  - Remove UPGRADE_INSTRUCTIONS for openldap-server upgrade (rhbz#2133526)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.0-1
changelog:
  - New upstream release (#2311896)
  - Separate OpenSC into libraries and binaries
  - Change expected test failures in FIPS mode
  - Do not build with OpenPACE on RHEL


author: Jakub Jelen <jjelen@redhat.com> - 0.27.1-1
changelog:
  - New upstream release (#2442363) fixing various security issues:
    - CVE-2025-66038 Memory corruption via improper compact-TLV length validation
    - CVE-2025-66215 Stack-buffer-overflow with physical access via crafted smart card or USB device
    - CVE-2025-49010 Stack-buffer-overflow via crafted smart card or USB device responses
    - CVE-2025-66037 Out-of-bounds read via crafted input
    - CVE-2025-13763 Several uses of potentially uninitialized memory detected by fuzzers


author: Paul Wouters <paul.wouters@aiven.io> - 2.10.0-1
changelog:
  - Initial vendor version of pebble
  - Resolves: rhbz#2453110 Review Request: pebble - A miniature version of
    Boulder, a small RFC 8555 ACME test


author: Remi Collet <remi@remirepo.net> - 12.5.9-1
changelog:
  - update to 12.5.9
  - raise dependency on phpunit/php-file-iterator 6.0.1
  - re-add dependency on sebastian/recursion-context 7.0.1


author: Jan Rybar <jrybar@redhat.com> - 124-4
changelog:
  - pkla-compat is now recommends: pkla is obsolete and binaries are run every time
  - polkitbackend watches only session changes to reduce cpu usage
  - PolkitPermission: only sessions that really changed state send CheckAuthorization


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.2-4
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.7.0-15
changelog:
  - Modernize packaging
  - Update License to reflect the presence of public-domain code
  - Add a man page


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-4
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.12-2
changelog:
  - Security fix for CVE-2025-12084
  - Require at least the same expat version as used during the build time


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Jose Fernandez <me@jrfernandez.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Update from 0.8.0 to 0.14.0
  - Update features: crossterm/serde/termion → ratatui-crossterm/ratatui-
    termion
  - Default feature changed to ratatui-crossterm


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.1.2-2
changelog:
  - Workaround for use-after-free when trying to repaint window after opening
    supprted file (bug 2425678)


