# changelog

author: Jakub Kadlcik <frostyx@email.cz> 0.67-1
changelog:
  - Add loggs to python-backoff decorator
  - Set git.safe_directory as repo rootdir
  - Explain how to reproduce the build locally
  - Retry only git clone without checkouting
  - Use git checkout instead of switch but ignore files


author: Pavel Raiskup <praiskup@redhat.com> 0.69-1
changelog:
  - require python-specfile (in new enough) version, and use it for specfile
    parsing instead of parsing the metadata from SRPMs
  - make sure we have (also) the latest DNF5 on builders
  - override disttag macro to None
  - make sure detected epoch is int() or None
  - build RPMs in one Mock step, instead of two (SRPM and then RPM)
  - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required)
  - store review.json generated by fedora-review into the result directory
  - better/more verbose logging in the results.json generator
  - drop dependency on simplejson
  - repeatedly try to download files from lookaside cache
  - moving the package NEVRA parsing to from backend here into copr-rpmbuild
  - priority=X support added for the Copr repository itself
  - query exclusivearch and excludearch from the specfile, and store into results.json


author: Pavel Raiskup <praiskup@redhat.com> 0.70-1
changelog:
  - collect and compress fedora-review logs after run
  - use Copr custom macros when parsing the specfile


author: Pavel Raiskup <praiskup@redhat.com> 0.71-1
changelog:
  - don't set bootstrap_image_ready for rawhide
  - no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
  - allow user SSH to builders
  - fix copr-rpmbuild --dump-configs
  - install copr-distgit-client with copr-rpmbuild


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.4.2-15
changelog:
  - Simplify spec
  - Remove checks on if systemd is present
  - Remove checks on old Fedora releases
  - Remove checks on EL7 or older
  - Use make macros


author: Richard Russon <rich@flatcap.org> - 20231221-1
changelog:
  - Features
    - #4126 - add alias 'tags:'
  - Bug Fixes
    - #4115 - create HelpBar after colours
    - #4116 - Fix Batch Sending of Emails
    - #4119 - Fix Header Cache Key Handling
    - #4121 - mutt_oauth2.py: error out if ENCRYPTION_PIPE was not supplied
    - #4124 - config: fix flag overlaps
    - #4125 - compose: restore view-text/pager/mailcap
    - color: fix attr_color_copy()
    - fix :color dump
    - fix leak in completion
    - force mail check on current mailbox after `<imap-fetch-mail>`
    - Allow sending an empty mail
    - mutt_oauth2.py: Use readline to overcome macOS input() restrictions
  - Changed Config
    - add $history_format: '%s'
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovak
    - 100% Turkish
    - 99% Spanish
    - 99% Hungarian
  - Coverity defects
    - #4111 Educate Coverity about ARRAYs
    - fix defects
  - Build
    - #4098 - build: use fallthrough attribute
    - #4100 - build: split maildir and mh types
    - #4101 - version: drop default features
    - #4108 - strip non-conditionals
    - #4122 - add github action to check for unused functions (xunused)
    - update fedora action
    - coverage: fix build for lcov v2
    - tests: fix error cases
  - Code
    - #4097 - config: add DT_ON_STARTUP
    - #4104 - Change mutt_default_save() and addr_hook() to take a buffer
    - #4105 - Use buffer pool in tests
    - #4106 - Switch some buffers to use the buffer pool
    - #4109 - Improve the Progress Bar
    - #4117 - remove MxOps::path_parent() and mutt_path_parent()
    - #4120 - remove unused functions
    - #4131 - move editor test code
    - #4133 - move log_disp_null() into test folder
    - #4137 - move config string name functions into tests
    - add: hook_new()/hook_free()
    - fix more printf-style params
    - rename compare to equal
    - hcache: renaming for clarity


author: Richard Russon <rich@flatcap.org> - 20240201-1
changelog:
  - Features
    - #4134 Command-line Crypto (neomutt -C)
  - Bug Fixes
    - #4065 track new-mail check time per mailbox
    - #4141 fix(change-folder): don't exclude notmuch
    - #4147 envelope: manage subject/real_subj together
    - #4155 fix parsing of $REPLYTO
    - #4158 status: fix refresh after sync-mailbox
    - #4166 Fix two memory leaks in notmuch support
    - progress: fix percentages
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovak
    - 100% Turkish
  - Docs
    - #4172 Several fixes for the manual pages
  - Build
    - build: openbsd workarounds
  - Code
    - #4142 add mutt_time_now()
    - #4146 config: factor out R_ flags
    - #4154 file: upgrade mutt_file_fopen/fclose()
    - #4159 upgrade mutt_str_append_item() to use struct Buffer
    - #4161 maildir: encapsulate the header cache
    - #4162 remove mutt_str_dequote_comment()
    - #4165 bufferize mutt_str_inline_replace() as buf_inline_replace()
    - #4167 bufferize mutt_strn_rfind() as buf_rfind()
    - #4168 replace buf_len() checks with buf_is_empty()
    - config: drop unused flags
    - use message_new()/message_free()
    - Reconsider the config type bitmap entirely


author: Richard Russon <rich@flatcap.org> - 20240323-1
changelog:
  - Bug Fixes
    - #4185 c441f5957 Fix memory leak in trash_append()
    - #4189 Fix off-by-one error in %b with notmuch
    - #4190 Zero-out mailbox counters on delete
    - #4204 colour: honour the normal colour
    - #4205 match folder-hook also against mailbox name (fixes #4201)
    - wrap colour in <show-log-messages>
    - history: fix saving file
    - history: improve error message format
  - Docs
    - #4182 docs: -C: Fix some accidents
    - #4188 Update oauth2 README
    - #4193 Update oauth2 README
    - fix typos, lots of tidying
    - tidy license info
  - Build
    - #4196 use FreeBSD 14.0 in Cirrus CI
    - actions: update cpu count
    - actions: use codeql v3
  - Code
    - #4186 Buffer refactoring: make_entry()
    - address: tidy config handling
    - coverage: buf, slist
    - graphviz: link labels
    - tidy buf_strcpy() calls
    - tidy char buffers
    - test: default timezone to UTC


author: Richard Russon <rich@flatcap.org> - 20240416-1
changelog:
  - Features
    - #4216 Compose: Hide MixMaster chain if chain is empty
    - Expando upgrade
    - version: bold labels
  - Contrib
    - mutt_oauth2.py: Detect recipient for oauth automatically
    - mutt_oauth2.py: imap_oauth_refresh_command does not need options
  - Bug Fixes
    - #4210 mbox: fix sorting for `mbox_resync()`
    - #4241 only wrap after first address in header lines
    - status: reset Buffer before reuse
    - history: truncate file before writing over it
    - notmuch: strip leading / from short path
    - Fix smtp client `$envelope_from_address` possible dangling pointer
    - Fix non-printable keyname printing to use `<octal>` syntax
    - Filter Arabic Letter Mark due to display corruption
    - Loosen `imap_open_mailbox()` SELECT response data parsing
    - Change `mailto_allow` to be exact match only
    - Fix `mutt_read_rfc822_line()` to use `is_email_wsp()`
    - Improve pattern compiler whitespace skipping
    - Fix gpgme crash when listing keys in a public key block
    - Add SigInt handler for pattern functions
    - Fix some mailbox prompts to use mailbox history ring
    - Improve GPGME inline processing
    - Reset SIGPIPE signal handler in child process before `exec()`
    - Filter headers passed via the command line
    - Remove trailing slashes when opening maildir/mh mailboxes
    - Fix `mutt_paddstr()` to properly filter unprintable chars
    - Minor fixes to `match_body_patterns()`
    - Fix `mutt_ts_capability()` fallback list loop
    - Ensure SIGALRM interrupts connect() in batch mode
    - Tighten `$query_command` parsing to allow empty name field
  - Changed Config
    - #4224 config: add L10N support
    - New: `set compose_confirm_detach_first = yes`
      Prevent the accidental deletion of the composed message
    - Changed: `set reply_regex = "^((re)(\\[[0-9]+\\])*:[ \t]*)*"`
      Regex to match message reply subjects like 're: '
    - Changed: `set pager = ""`
      External command for viewing messages, or empty to use NeoMutt's
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovak
    - 99% Turkish
    - l10n: document functions
    - config: add L10N support
  - Docs
    - Clarify the manual section on POP3 support
    - Document the `<1234>` key syntax for bind
    - Document `$sendmail` invocation behavior
    - Clarify -H usage in batch mode is not a "pass through" option


author: Richard Russon <rich@flatcap.org> - 20240425-1
changelog:
  - Bug Fixes
    - #4263 fix: cache naming
    - #4261 expando: fix conditional padding
    - #4261 expando: fix container
    - #4261 expando: add lower-case operator
    - #4261 expando: add external filter
    - imap: add mailboxes more directly
  - Translations
    - trans: tidy messages
  - Docs
    - doxy: add missing params
  - Build
    - #4268 Filter out CFLAGS with paths from the output of '-v'
    - #4273 guard truecolor functions in tests
    - #4275 use homebrew in macOS build
  - Code
    - use Buffer rather than strcat()
    - ncrypt: use gpgme types consistently


author: Richard Russon <rich@flatcap.org> - 20241002-1
changelog:
  - Security
    - #4243 - security: kill unnecessary blank lines
    - #4251 - more security improvements
    - #4282 - improve NeoMutt bailout handling
  - Features
    - #4329 - remove mixmaster
    - #4149 - honour umask in attach save
  - Bug Fixes
    - #3945 - do not force username in addition to client certificate
    - #4341 - Fix '%z' and '%Z in '%{...}' expando
    - #4356 - Allow longer maildir filename suffixes
    - #4357 - Don't force mbox stats calculations on startup
    - #4365 - Fix sorting INBOX and its subfolders
    - #4367 - Let `~Y` match each tag individually
    - #4371 - ignore macro events during autocrypt initialization
    - #4383 - Generate the Message-ID earlier
    - compose: fix `$compose_confirm_detach_first`
  - Changed Config
    - `set crypt_encryption_info = yes`
      Add an informative block with details about the encryption
    - `set crypt_protected_headers_weed = no`
      Controls wether NeoMutt will weed protected header fields
    - `set devel_security = no`
      Devel feature: Security -- https://github.com/neomutt/neomutt/discussions/4251
    - `$mixmaster` is deprecated
    - `$mix_entry_format` is deprecated
  - Translations
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Spanish
    - 81% French
  - Docs
    - #4350 - Fix configure script name in INSTALL.md
    - fix para ordering
  - Build
    - #4280 - Update autosetup
    - #4281 - Update acutest to the latest upstream commit
    - #4289 - don't treat stddef.h specially
    - #4306 - Add -std to CFLAGS too
    - #4307 - require C11
    - #4347 - Support BerkeleyDB 18.1
    - #4362 - Assume 'struct timespec' exists
    - fix idn2 typo
  - Code
    - #4113 - Close the hcache handle on failure to open the store
    - #4214 - upgrade `assert()`
    - #4283 - mutt/list.c: Use `STAILQ_FOREACH_SAFE()` in stailq deallocators
    - #4296 - Use `wmem*()` functions with wide-character strings
    - #4297 - ncrypt/crypt.c: Fix allocation size calculation
    - #4305 - remove `mutt_expand_path()`
    - #4308 - fix `-Wdouble-promotion` warnings
    - #4310 - scanf: initialise out-vars
    - #4312 - Allow opening the header cache in non-`O_CREAT` mode
    - #4337 - Fix function pointer types
    - #4348 - Check `mutt_date_parse_date()`s return value
    - #4366 - Fix up slashes in `imap_fix_path()`
    - #4378 - Fix padding with an empty string
    - tidy expando library


author: Richard Russon <rich@flatcap.org> - 20241114-1
changelog:
  - Security
    - Fixed: CVE-2024-49393
    - Fixed: CVE-2024-49394
    - #4300 Read the protected Message-ID
  - Features
    - #4336 Allow toggling numeric configs, e.g. `:toggle pager_index_lines`
    - #4427 alias: tag/untag pattern
    - query: tag with `<space>`
  - Contrib
    - #4400 `mutt_oauth2.py`: Fix reference to `client_secret`
  - Bug Fixes
    - #4399 fix duplicate save-hook
    - #4403 expando: fix escaping
    - #4404 browser: fix enter-quit-enter
    - #4405 pager: fix repaint
    - #4407 config: warn about deprecated variables
    - #4425 Refresh alias/query dialog on alias/query format change
    - #4433 compose: fix redraw on attachment
    - #4436 compose: fix search with `arrow_cursor`
    - #4438 autocrypt: fix `copy_normalize_addr()`
    - alias: fix cli crash
    - expando: fix relative dates
    - expando: padding default to space
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Czech
    - 99% Slovak
    - 82% French
  - Docs
    - drop refs to always-enabled features
    - fix typo in unmacro
    - fix broken link
    - ncrypt: fix typo in `config.c`


author: Packit <hello@packit.dev> - 0.100.3-1
changelog:
  - `dist-git init` command now allows `upstream-git-url` not to be specified. (#2387)
  - Resolves: rhbz#2306481


author: Packit <hello@packit.dev> - 0.101.0-1
changelog:
  - Packit now supports passing custom arguments to various static analyzers through `--csmock-args` CLI option and `csmock_args` configuration. (#2402)
  - When synching a new release Packit is now able to fast forward a specified merge to a configured list of branches.
    Use the `dist_git_branches` new syntax as in this example:
    `{"rawhide": {"fast_forward_merge_into": ["f40"]}, "fedora-stable": {}}` (#2363)
  - Resolves: rhbz#2310376


author: Packit <hello@packit.dev> - 0.101.1-1
changelog:
  - In the user configuration file, it's possible to set `default_parse_time_macros`, e.g. might be helpful in situations like [packit/packit-service#2514](https://github.com/packit/packit-service/issues/2514). (#2408)
  - Packit now allows to configure mock bootstrap feature setup of Copr projects with a new `bootstrap` configuration option. (#2411)
  - Resolves: rhbz#2313250


author: Packit <hello@packit.dev> - 0.102.0-1
changelog:
  - Check for `upstream_project_url` presence in the configuration when `pull_from_upstream` job is configured was removed from `validate-config`, as this is no longer required. (#2423)
  - `packit init` now adds working directories that are used in `packit prepare-sources` into the `.gitignore` file in the same directory where Packit config resides. (#2431)
  - Previously, `create-update` command took `--resolve-bugzillas` option and `propose-downstream` command took `--resolve-bug` option. The options have been unified into `--resolve-bug` for better user experience. If you used `create-update` with `--resolve-bugzillas` you have to use `--resolve-bug` (or shorthand `-b`) now instead. (#2428)
  - Resolves: rhbz#2316445


author: Packit <hello@packit.dev> - 0.102.1-1
changelog:
  - We have fixed an issue that was introduced during the unification of the interface for passing resolved Bugzillas / Jira tickets to the `sync-release` or `bodhi_update` jobs. (#2442)
  - `packit validate-config` now checks for the existence of downstream package. (#2436)
  - Packit now allows building VM images via CLI without any Copr repository specified. (#2434)
  - Resolves: rhbz#2318003


author: Packit <hello@packit.dev> - 0.102.2-1
changelog:
  - Fixed passing list of resolved bugs when running `packit propose-downstream` or `packit pull-from-upstream`. (#2447)
  - Resolves: rhbz#2321004


author: Packit <hello@packit.dev> - 0.103.0-1
changelog:
  - Packit now supports and defaults to `fast_forward_merge_into` syntax via `--dist-git-branches-mapping` in `dist-git init`. (#2456)


author: Packit <hello@packit.dev> - 0.104.0-1
changelog:
  - Packit configuration file can now have a placeholder top-level key `_` that is ignored when read.
    This is useful for storing yaml anchors in complex config files, e.g.:
  ```yaml
  _:
    base-test: &base-test
      job: tests
      fmf_path: .distro
  jobs:
    - <<: *base-test
      trigger: pull_request
      manual_trigger: true
    - <<: *internal-test
      trigger: commit
      use_internal_tf: true
  ```
  (#2378)
  - You can now define `with_opts` and `without_opts` in target-specific configuration of `copr_build` job to build with `--with` and `--without` rpmbuild options. (#2463)
  - Resolves: rhbz#2325040


author: Paul Howarth <paul@city-fan.org> - 0.04-23
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.3.8-1
changelog:
  - Update to 1.3.8
    - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
      (GH#1488)
    - 1.3.8rc4 failed to build on Solaris due to missing type declarations
      (GH#1494)
    - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
    - mod_tls module unexpectedly allows TLS handshake after authentication in
      some configurations (GH#1533)
    - Disable FSCachePolicy by default (GH#1528)
    - Avoid logging "session closed" messages unless there is a corresponding
      "session opened" log message, to avoid user confusion (GH#1539)
    - Implement support for the CSID FTP command (GH#1550)
    - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
      publickey algorithm 'ssh-rsa' (Bug #4491)
    - mod_auth_otp improperly allows keyboard-interactive logins for users
      lacking OTP entries (GH#1560)
  - Update mod_vroot to 0.9.11
    - Addresses a bad interaction with mod_auth_file, and failed login attempts,
      which can lead to inexplicably "stuck" processes that cannot be terminated
      (https://github.com/proftpd/proftpd/issues/1384)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.8-4
changelog:
  - Ensure mod_rewrite is linked against libidn2 so that it loads properly
    (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
  - No longer need to explicitly remove libtool archives from Fedora 36 onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683,
      CVE-2023-51713)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-3
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Packit <hello@packit.dev> - 1.2.14-1
changelog:
  - Drops seemingly unused importlib-metadata dev dep (Colin Dean)
  - Fixes comment on which version is development branch (Colin Dean)
  - Adds Pythons dropped notice to changelog (Colin Dean)
  - Drops limitation on tox < 4 since bug was fixed (Colin Dean)
  - Adds srpm_build_deps to Packit config (Colin Dean)
  - Try explicitly setting AppVeyor image to VS2022 (Colin Dean)
  - Exclude pypy3 on ppc64le on Travis builds (Colin Dean)
  - Drops old Pythons and adds newer ones for Appveyor build (Colin Dean)
  - Drop the .9 from pypy3 in tox.ini (Colin Dean)
  - Use specifically pypy3.9 v7.3.9 (Colin Dean)
  - Adds Python 3.12 config to tox (Colin Dean)
  - Limit tox to <4 on Travis because of outdatedness (Colin Dean)
  - Try installing importlib_metadata for tox run (Colin Dean)
  - Use newer Travis environment, Focal (Ubuntu 20.04) (Colin Dean)
  - Adds importlib-metadata to dev deps (Colin Dean)
  - Split and fix tox config for more better coverage (Colin Dean)
  - Dropping support for Python older than v3.7 in build systems like pytest and tox, while ensuring the library remains production-compatible. (Colin Dean)
  - Drops Python 2.7, 3.5, 3.6 builds from Travis; add 3.12 (Colin Dean)
  - Upgrades some actions versions in Actions python builds (Colin Dean)
  - Drops Actions builds for Python 2.7, 3.5, 3.6; condense 3.7+ (Colin Dean)
  - Bump checkout to v3 in CodeQL Analysis workflow (Colin Dean)
  - Add support for Python 3.11 (Hugo van Kemenade)
  - edit changelog (Pierrick Rambaud)
  - add test for D213 docstrings (Pierrick Rambaud)
  - work with empty docstring (Pierrick Rambaud)
  - fix: digest D212 and D213 docstring (Pierrick Rambaud)
  - Add support for Python 3.10 (Hugo van Kemenade)
  - Prepare next version 1.2.14 (unreleased) (Laurent LAPORTE)
  - Minor change in bumpversion  configuration to also bump the project version in "appveyor.xml". (Laurent LAPORTE)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.00-5
changelog:
  - Add dependency on liburing-devel to root-io
  - Exclude failing tutorial-tmva-RBatchGenerator_filters_vectors-py test
    on aarch64 (Fedora 40+)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.02-2
changelog:
  - Add openssl-devel-engine build requirement on Fedora 41+
  - Fixes for TUri class (PCRE2 compatibility)
  - Fix test failure with tbb 2021.13.0


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.04-1
changelog:
  - Update to 6.32.04
  - Drop patches accepted upstream
  - Disable Qt5 Web display for Fedora 41+ (broken qt5-qtwebengine package)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.32.06-1
changelog:
  - Update to 6.32.06
  - Split out ROOT 7 dependent parts of root-browsable to a separate package
  - Split out ROOT 7 dependent parts of root-browserv7 to a separate package


author: Packit <hello@packit.dev> - 0.28.3-1
changelog:
  - Fixed several minor issues such as processing seemingly commented-out macro definitions (e.g. `#%global prerel rc1`) and treating `SourceLicense` tag as a source. (#374, #376)
  - Made `EVR`, `NEVR` and `NEVRA` objects comparable. (#379)


author: Packit <hello@packit.dev> - 0.30.0-1
changelog:
  - Fixed an exception that occured when accessing the `Specfile.has_autochangelog` property while having unparseable lines (e.g. lines ending with unescaped `%`) in `%changelog`. (#387)


author: Packit <hello@packit.dev> - 0.32.0-1
changelog:
  - It is now possible to bump a release in a manner similar to `rpmdev-bumpspec` using `Specfile.bump_release()` method. (#399)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - Explicitly invalidate the global parse hash when a SpecParser instance is created to prevent this issue. (#409)


author: Packit <hello@packit.dev> - 0.32.3-1
changelog:
  - specfile can now handle multi-line tag values (enclosed in a macro body, e.g. `%shrink`). (#412)
  - Resolves: rhbz#2299289


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.0-8
changelog:
  - Simplify patching pyproject.toml and handling test dependencies
  - Drop unnecessary version-bounded BuildRequires on python-pytest-sugar,
    fixing failure to build from source with python-pytest-sugar 1.0.0.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240806git39e2663-1
changelog:
  - Update to 0^20240806git39e2663
  - Add `static inline` to `PyUnicodeWriter_WriteStr()` and
    `PyUnicodeWriter_WriteRepr()`.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241009git669c882-1
changelog:
  - Update to 0^20241009git669c882
  - Add `PyUnicode_Equal()` function
  - Add `PyBytes_Join()` function
  - Add `Py_HashBuffer()` function
  - Add `PyIter_NextItem()` function
  - Add `PyLong_FromUInt64()` and `PyLong_AsUInt64()`


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20241115git03e441d-1
changelog:
  - Update to 0^20241115git03e441d
  - Add `PyLong_IsPositive`/`Negative`/`Zero()` functions
  - Relax `PYPY_VERSION_NUM` requirements for hash macros


author: Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
changelog:
  - cherrypick from upstream master patches for known vulnerabilities:
  - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
  - CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.1
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix snapd riscv64 build
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.2
   - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb
     only)


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66
   - AppArmor prompting (experimental): expand kernel support checks
   - AppArmor prompting (experimental): consolidate error messages and
     add error kinds
   - AppArmor prompting (experimental): grant /v2/snaps/{name} via
     snap-interfaces-requests-control
   - AppArmor prompting (experimental): add checks for duplicate
     pattern variants
   - Registry views (experimental): add handlers that commit (and
     cleanup) registry transactions
   - Registry views (experimental): add a snapctl fail command for
     rejecting registry transactions
   - Registry views (experimental): allow custodian snaps to implement
     registry hooks that modify and save registry data
   - Registry views (experimental): run view-changed hooks only for
     snaps plugging views affected by modified paths
   - Registry views (experimental): make registry transactions
     serialisable
   - Snap components: handle refreshing components to revisions that
     have been on the system before
   - Snap components: enable creating Ubuntu Core images that contain
     components
   - Snap components: handle refreshing components independently of
     snaps
   - Snap components: handle removing components when refreshing a snap
     that no longer defines them
   - Snap components: extend snapd Ubuntu Core installation API to
     allow for picking optional snaps and components to install
   - Snap components: extend kernel.yaml with "dynamic-modules",
     allowing kernel to define a location for kmods from component
     hooks
   - Snap components: renamed component type "test" to "standard"
   - Desktop IDs: support installing desktop files with custom names
     based on desktop-file-ids desktop interface plug attr
   - Auto-install snapd on classic systems as prerequisite for any non-
     essential snap install
   - Support loading AppArmor profiles on WSL2 with non-default kernel
     and securityfs mounted
   - Debian/Fedora packaging updates
   - Add snap debug command for investigating execution aspects of the
     snap toolchain
   - Improve snap pack error for easier parsing
   - Add support for user services when refreshing snaps
   - Add snap remove --terminate flag for terminating running snap
     processes
   - Support building FIPS complaint snapd deb and snap
   - Fix to not use nss when looking up for users/groups from snapd
     snap
   - Fix ordering in which layout changes are saved
   - Patch snapd snap dynamic linker to ignore LD_LIBRARY_PATH and
     related variables
   - Fix libexec dir for openSUSE Slowroll
   - Fix handling of the shared snap directory for parallel installs
   - Allow writing to /run/systemd/journal/dev-log by default
   - Avoid state lock during snap removal to avoid delaying other snapd
     operations
   - Add nomad-support interface to enable running Hashicorp Nomad
   - Add intel-qat interface
   - u2f-devices interface: add u2f trustkey t120 product id and fx
     series fido u2f devices
   - desktop interface: improve integration with xdg-desktop-portal
   - desktop interface: add desktop-file-ids plug attr to desktop
     interface
   - unity7 interface: support desktop-file-ids in desktop files rule
     generation
   - desktop-legacy interface: support desktop-file-ids in desktop
     files rule generation
   - desktop-legacy interface: grant access to gcin socket location
   - login-session-observe interface: allow introspection
   - custom-device interface: allow to explicitly identify matching
     device in udev tagging block
   - system-packages-doc interface: allow reading /usr/share/javascript
   - modem-manager interface: add new format of WWAN ports
   - pcscd interface: allow pcscd to read opensc.conf
   - cpu-control interface: add IRQ affinity control to cpu_control
   - opengl interface: add support for cuda workloads on Tegra iGPU in
     opengl interface


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66.1
   - AppArmor prompting (experimental): Fix kernel prompting support
     check
   - Allow kernel snaps to have content slots
   - Fix ignoring snaps in try mode when amending


