# changelog

author: Michal Fabik <mfabik@redhat.com> 1.21.0-1
changelog:
  - README: Add translation status
  - translations: Remove zanata config and script
  - retrace: Fix bytes has no attribute encode
  - Fix error when calling run_crash_cmdline after conversion to run()
  - Fix error handling when unknown exception occurs in run_crash_cmdline
  - podman: Tweak the Dockerfile for retracing
  - Remove rpm2cpio part from podman retrace
  - Check for RequireGPGCheck
  - Simplify run calls
  - Make returncode checks more readable
  - Fix container and image cleanup
  - Tag podman images with task id
  - Replace call() and Popen() with run()
  - Fix container cleanup
  - Change home dir for user 'retrace'
  - Use more meaningful log messages
  - Replace os.devnull with subprocess.DEVNULL
  - Add podman-specific deployment instructions
  - Fix pylint issues
  - Run hooks with podman as well
  - Add UseFafPackages support in podman
  - Fix indentation
  - Add exit code to spec file scriptlet
  - Add podman as a weak dependency
  - Beautify gdb.sh
  - Run retrace in podman container
  - Create Dockerfiles
  - Make mock-specific parts conditional
  - Remove test for abrt-gdb-exploitable
  - Add RetraceEnvironment config item
  - Fix spelling
  - Tweak man pages
  - Update translations
  - r-s-reposync-faf: Fix paths to rpms
  - Update (pt) translation
  - Update (nl) translation
  - Update (de) translation
  - Update (bg) translation
  - Update (tr) translation
  - Update (it) translation
  - Add (zh_HK) translation
  - r-s-reposync: Replace old way of cmp with key
  - README.md: Change capitalization of freenode
  - Fix build error after change of mock.conf to environment.conf
  - hooks: Rename mock hook to environment
  - hooks: Add option for per-executable timeouts
  - spec: Remove upgrade script moving config to new location
  - hooks:config: Load configs from users homedir
  - hooks: Move default hook script dir to /usr/libexec
  - hooks: Log stdout and stderr of scripts after exception
  - hooks: Run hook scripts in parallel processes
  - spec: Do not replace configs on reinstall
  - hooks: Fix hook timeouts and other exceptions logs
  - hooks: Change cwd for hooks to hooks dir
  - hooks: Change of retrace hooks
  - config: Move retrace-server configuration file
  - retrace: Change logging format
  - retrace_worker: Remove distro hack from mock config
  - dockerfile_local: Install vim
  - docker: Update Makefile
  - docker: Use sbin/httpd instead of apachectl
  - dockerfile_local: Install make
  - dockerfile: Update to Fedora 31
  - dockerfile: Install mod_ssl
  - retrace_worker: Fix file mode to write to file
  - retrace-server-worker: Correct import of ArgumentParser


author: Matěj Grabovský <mgrabovs@redhat.com> 1.22.0-1
changelog:
  - Add support for virtual memory files for vmcores
  - Add option to restart an existing task in retrace-server-task and on task manager page
  - Disallow users other than 'retrace' to call retrace-server-worker
  - Improve error message in case of Kerberos authentication failure
  - Revamp task manager web UI
  - Revamp GPG verification of package signatures; use keys from distribution-gpg-keys
  - Accommodate for multiple debug directories in Fedora 27 and later
  - Fix FTP submissions on task manager page
  - Fix permissions on dmesg file in task results directory
  - Update translations
  - Drop python3-six dependency
  - Add build dependencies on gzip, lsof, tar and xz
  - Rewrite Dockerfile
  - Migrate to calling subprocess.run() in place of s.Popen() and s.call()
  - Use pathlib.Path instead of strings and os.path methods in some places
  - Add kernel-only config options 'KernelDebuggerPath' and 'RetraceEnvironment=native'
  - Introduce type annotations
  - Address issues reported by Pylint
  - Other minor code refactoring and cleanup operations


author: Matěj Grabovský <mgrabovs@redhat.com> 1.22.0-1
changelog:
  - Add support for virtual memory files for vmcores
  - Add option to restart an existing task in retrace-server-task and on task manager page
  - Disallow users other than 'retrace' to call retrace-server-worker
  - Improve error message in case of Kerberos authentication failure
  - Revamp task manager web UI
  - Revamp GPG verification of package signatures; use keys from distribution-gpg-keys
  - Accommodate for multiple debug directories in Fedora 27 and later
  - Fix FTP submissions on task manager page
  - Fix permissions on dmesg file in task results directory
  - Migrate build process to Meson; completely drop Autotools
  - Add Tito configuration
  - Update translations
  - Drop python3-six dependency
  - Add build dependencies on gzip, lsof, tar and xz
  - Rewrite Dockerfile
  - Migrate to calling subprocess.run() in place of s.Popen() and s.call()
  - Use pathlib.Path instead of strings and os.path methods in some places
  - Add kernel-only config options 'KernelDebuggerPath' and 'RetraceEnvironment=native'
  - Introduce type annotations
  - Address issues reported by Pylint
  - Other minor code refactoring and cleanup operations


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.22.4-1
changelog:
  - Release version 1.22.4-1 (Matěj Grabovský)
  - r-s-reposync-faf: Fix type errors (Matěj Grabovský)
  - fedora: Remove old releases before 31 (Matěj Grabovský)
  - fedora: Add Fedora 33 to version list (Matěj Grabovský)
  - Update translations (Jenkins Automation Server)
  - retrace: Do not allocate pseudo-TTY for container (Matěj Grabovský)
  - retrace: Slight refactoring in Podman backend (Matěj Grabovský)
  - retrace: Remove intermediate Podman containers in build (Matěj Grabovský)
  - retrace: More precise argument type (Matěj Grabovský)
  - Update translations (Jenkins Automation Server)
  - ftp/manager: Add link on manager page and create backlink on ftp page (Dave Wysochanski)
  - managertask: Remove unnecessary whitespace at right of notes and backtrace (Dave Wysochanski)
  - manager: Rework display of finished, running, and available tasks (Dave Wysochanski)
  - manager: reformat manager page to improve readability (Dave Wysochanski)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.23.0-1
changelog:
  - Release version 1.23.0-1 (Matěj Grabovský)
  - fedora: Add Fedora 34 to version list (Matěj Grabovský)
  - retrace: Be more careful when reading task status (Matěj Grabovský)
  - retrace_worker: Add backtrace to log when a task fails with error (Pierguido Lambri)
  - retrace: Fix "file not found" when the archive contains directories (Pierguido Lambri)
  - r-s-cleanup: Improve regex (Matěj Grabovský)
  - r-s-cleanup: Use a constant instead of signal number (Matěj Grabovský)
  - retrace: Add timeout to Podman commands (Matěj Grabovský)
  - retrace: Check if directory exists before iterating (Matěj Grabovský)
  - r-s-cleanup: Replace loop with list comprehension (Matěj Grabovský)
  - r-s-cleanup: Pretty-print elapsed process time (Matěj Grabovský)
  - retrace: Work with elapsed process time in seconds (Matěj Grabovský)
  - retrace: Shorten regex for matching workers (Matěj Grabovský)
  - retrace: Replace loop with generator (Matěj Grabovský)
  - util: Pythonic way to check for suffix (Matěj Grabovský)
  - retrace: Minor code style improvements (Matěj Grabovský)
  - retrace: Correct stripping of epoch number (Matěj Grabovský)
  - util: Repair parsing regexes (Matěj Grabovský)
  - test: Prepend to PATH in Meson script (Matěj Grabovský)
  - test: Factor out paths to executables (Matěj Grabovský)
  - test: Repair test script (Matěj Grabovský)
  - test: Code style fixes and cleanup (Matěj Grabovský)
  - test: Add Meson script for testing (Matěj Grabovský)
  - spec: Update build prerequisites for tests (Matěj Grabovský)
  - retrace: Factor out path to Podman executable (Matěj Grabovský)
  - hooks: Warn if config directory does not exist (Matěj Grabovský)
  - r-s-worker: Don't check user in testing mode (Matěj Grabovský)
  - util: Improve regexes for parsing problem data (Matěj Grabovský)
  - Update translations (Jenkins Automation Server)
  - spec: Recommend logrotate (Michal Židek)
  - Update translations (Jenkins Automation Server)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.24.0-1
changelog:
  - Release version 1.24.0-1 (Matěj Grabovský)
  - spec: Recommend httpd dependency (Matěj Grabovský)
  - retrace: Do not clean c2p_log and Containerfile (Matěj Grabovský)
  - spec: Migrate old home directory in post scriptlet (Matěj Grabovský)
  - retrace_worker: Fix container name for vmcores (Matěj Grabovský)
  - retrace: Rename Dockerfile to Containerfile globally (Matěj Grabovský)
  - retrace_worker: Fix paths to vmcore in Podman backend (Matěj Grabovský)
  - retrace_worker: Guess OS release from kernelver (Matěj Grabovský)
  - retrace_worker: Update arguments to podman run (Matěj Grabovský)
  - retrace_worker: Fix undefined variable error (Matěj Grabovský)
  - r-s-reposync: Fix type error (Matěj Grabovský)
  - config: Add typing annotations (Matěj Grabovský)
  - retrace: Major refactoring of Podman backend code (Matěj Grabovský)
  - r-s-reposync: Slight refactoring (Matěj Grabovský)
  - r-s-reposync-faf: Add logging (Matěj Grabovský)
  - retrace: Do not delete Dockerfile and c2p log (Matěj Grabovský)
  - retrace: Code style tweaks (Matěj Grabovský)
  - retrace_worker: Simplify path construction (Matěj Grabovský)
  - retrace: Fix type error (Matěj Grabovský)
  - doc: Document metrics feature (Matěj Grabovský)
  - retrace: Disable metrics by default (Matěj Grabovský)
  - metrics: Add an endpoint exposing task metrics (Matěj Grabovský)
  - spec: Add missing dependency on coreutils (Matěj Grabovský)
  - retrace: Factor out path to ps (Matěj Grabovský)
  - doc: Slight style and info update (Matěj Grabovský)


author: Benjamin Lowry <ben@ben.gmbh> - 0.4.1-2
changelog:
  - Change source url
  - Change BuildRequires
  - Use make_install macro
  - Preserve timestamps when running install


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-10
changelog:
  - Drop check on libkeyutils, it's a legit library now. Fixes rhbz#1914662
  - Look for and use the ssh.d config snippet direction. Thanks John Dodson for patch. Fixes rhbz#1851620


author: Vladis Dronov <vdronov@redhat.com> - 6.12-1
changelog:
  - Update to 6.12
  - Drop libsysfs dependency since it is not used anymore
  - Remove jitterentropy-remove-install.patch since we depend on a system jitterentropy library now
  - Remove rngd-shutdown.patch since it is the upstream commit 62fbff0a
  - Remove rngd-exit-code-for-list.patch since it is the upstream commit fb46dc48
  - Remove pkcs11-path.patch since it is the upstream commit 1993eca9


author: Major Hayden <major@mhtx.net> - 5.1.0-3
changelog:
  - Added extra X11/Wayland requirements.
  - Removed shebangs in rofimoji.py.
  - Added wildcard for future man page compression changes.


author: K. de Jong <keesdejong@fedoraproject.org> - 1.6-1
changelog:
  - First release
  - Applied patch to fix custom disk image selection menu, for more info
  please check: https://github.com/raspberrypi/rpi-imager/issues/159


author: clime <clime@fedoraproject.org> 0.3-1
changelog:
  - fix warning about unset git indetity in test_submodule_sources
  - skip test for submodule_sources on epel6
  - add missing sleep in tests, add TODO
  - fix changelog renderring for legacy git as there is no points-at
    option
  - resolve problem in git_pack and submodules for epel7


author: clime <clime@fedoraproject.org> 0.4-1
changelog:
  - remove shebangs in library files according to Fedora review
  - changes according to review - usage of %{_prefix} in spec, g-w for
  pack_sources
  - use git-core on Fedoras


author: clime <clime@fedoraproject.org> 1.0-1
changelog:
  - fix version check in git_pack
  - rpm-git-tag-sort is also required during build for tests
  - add man pages for rpkg-macros, redirect there from MACRO REFERENCE
    in man rpkg
  - fix parameter order for rpm-git-tag-sort in git_merged_tag_refs
  - fix version parsing from the latest tag, package name may contain
    dashes!
  - implement support for multiple Sources at once
  - use rpm-git-tag-sort for tag sorting & filtering in git_merged_tag_refs
  submodules
  - fix git_head for detached head state
  - in git_bumped_version, lead must be numeric and greater than zero to output
  follow as zero + small code tweak in git_version_generic
  - remove now unused git_bumped_release, set "" as default for lead in
  git_bumped_version
  - make lead="" the only special case, otherwise lead is lead
  - unify code and params for git_release and git_version
  - code cleanup


author: clime <clime@fedoraproject.org> 2.0-1
changelog:
  - derive GIT_ROOT and other git properties from the INPUT_DIR_PATH directory
  - INPUT_DIR_PATH, if not specified, is derived from INPUT_PATH


author: David Cantrell <dcantrell@redhat.com> - 0.9-1
changelog:
  - Add the new favor_release setting to rpminspect.conf
  - Add commented out [inspections] block in rpminspect.conf
  - Simplify the string concatenation in meson.build
  - Make compatible with meson 0.47.0
  - Sync up rpminspect.conf with the default one.
  - Add 'pathmigration' settings to rpminspect.conf
  - Add size_threshold=20 to the [settings] section
  - Ignore *.xml.in template files.
  - Synchronize with official Fedora license list.
  - Update the AUTHORS file
  - Remove GitHub Release entry stuff from utils/release.sh


author: David Cantrell <dcantrell@redhat.com> - 0.10-1
changelog:
  - Add F32 to stat-whitelist, fix version names
  - Add F33 with Java 11 default bytecode version
  - Add [lto] section to rpminspect.conf with lto_symbol_name_prefixes


author: David Cantrell <dcantrell@redhat.com> - 1.0-1
changelog:
  - Use this project's user.name and user.email for Koji builds.
  - Add .gitignore
  - Convert configuration files to YAML format, bump version to 1.0.
  - Update the 'ignore' section in rpminspect.yaml
  - Add /usr/bin/vmware-user-suid-wrapper to setxid whitelist
  - Split 'make release' in to 'make new-release' and 'make release'


author: David Cantrell <dcantrell@redhat.com> - 1.1-1
changelog:
  - Restructure rpminspect-data-fedora so it can coexist with other pkgs
  - Update the README
  - Add 'types: off' to the list of commented out inspections
  - Rename ipv6_blacklist to forbidden_ipv6_blacklist
  - Rename stat-whitelist to fileinfo, adjust header comments
  - Rename abi-checking-whitelist/ to abi/
  - Rename political-whitelist/ to politics/
  - Rename version-whitelist/ to rebaseable/
  - Change default licensing to CC-BY-SA-4.0
  - A few missed files for the license change
  - Rollback project version change
  - Add abidiff section to fedora.yaml
  - Update abidiff and kmidiff blocks in fedora.yaml
  - Add kabi_dir and kabi_filename to fedora.yaml, but commented out.
  - Add Firmware and Distributable licenses.
  - Set minimum JVM bytecode version for Fedora 34 (#9)
  - Update the inspections section in fedora.yaml
  - Utility script and Copr Makefile updates


author: David Cantrell <dcantrell@redhat.com> - 1.2-1
changelog:
  - More fixes for submit-koji-builds.sh
  - Increment development work version to 1.2
  - Rename '%files' to 'files'; add 'config' and 'doc' to inspections
  - Remove the politics/ subdirectory and the files in it.
  - Add 'politics' and 'virus' to the fedora.yaml config file.
  - s/DT_NEEDED/dsodeps/g in fedora.yaml
  - Require optional packages used by enabled inspections.
  - Add excluded_paths block to the pathmigration block
  - Adjust the pathmigration block to have 'migrated_paths'
  - Update rpminspect-data-fedora.spec.in
  - Updates to the 'make koji' process


author: David Cantrell <dcantrell@redhat.com> - 1.3-1
changelog:
  - Small change to the way Koji builds are submitted
  - Ignore build/ in .gitignore
  - Update fedora.yaml from generic.yaml, disable 'patches' inspection
  - Eliminate duplicate entries in licenses/fedora.json
  - Simplify test() definition in meson.build


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Increment the development tree version to 1.4.
  - Document the release process and add another helper target to the
    Makefile
  - 'make koji' skips branches that lack Koji build targets
  - Set VENDORBLD to the vendor build too in submit-koji-builds.sh
  - Add NPSL
  - Update fedora.yaml for the new 'badfuncs' inspection.
  - The badfuncs inspection is in rpminspect >= 1.3, update spec file
  - Add MIT-0 license
  - Add runpath section to fedora.yaml


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Add a 'rawhide' profile to disable a lot of inspections
  - Add missing ID value to the npsl license entry
  - /usr/lib/dracut and /usr/lib/udev are valid paths
  - Update fedora.yaml with all current configuration file changes
  - Explain size_threshold can be 'info'


author: Miro Hrončok <mhroncok@redhat.com> - 1.11-10
changelog:
  - Don't use the %python_sitelib macro, because it errors
  - See https://fedoraproject.org/wiki/Changes/PythonMacroError


author: Uwe Klotz <uwe.klotz@gmail.com> - 1.9.1-2
changelog:
  - Use FFTW instead of KissFFT: https://github.com/breakfastquay/rubberband/issues/37
  - Explicitly enable libsamplerate


author: Vít Ondruch <vondruch@redhat.com> - 0.5.5-8
changelog:
  - Bundle js-jquery1, because the package was dropped from Fedora.
    Resolves: rhbz#1866730
    Related: rhbz#1799550


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 0.16.0-10
changelog:
  - Backport some patches from the upstream
  - Ruby 3.0: apply the upstream WIP patch for keyword separation


author: Pavel Valena <pvalena@redhat.com> - 0.9.26-1
changelog:
  - Update to yard 0.9.26.
    Resolves: rhbz#1830795
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.0


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.0.0-376.dev.git12644e6
changelog:
  - unversioned Provides: oci-runtime
  - runc package will also provide an unversioned Provides: oci-runtime.
  - user should pull in runc separately or else it will install crun by default
   (alphabetical order)
  - similar situation as caddy, httpd, lighttpd and nginx having Provides: webserver


author: Rémi Lauzier <remilauzier@protonmail.com> - 0.3.1-1
changelog:
  - Update to 0.3.1 (#1958601)
  - COPYING and README.md file include in crate (https://github.com/jmesmon/build-env/issues/7)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.16.3-2
changelog:
  - Drop bear-lib-terminal and blt-backend features due to missing dependencies
    (#1961856)
  - Remove timestamps from changelog


author: Jan Staněk <jstanek@redhat.com> - 0.5.10-1
changelog:
  - Initial package
  - Manually specify provides for c++XY features (https://pagure.io/fedora-rust/rust2rpm/pull-request/123)


author: Davide Cavalca <davide@cavalca.name> - 0.3.0~1-2
changelog:
  - Install license
  - Unbundle libbpf and use the system one instead
  - Add missing Requires to devel subpackages


author: Fabio Valentini <decathorpe@gmail.com> - 0.20.3-1
changelog:
  - Update to version 0.20.3.
  - Enable all available features on appropriate architectures.
  - Fixes RHBZ#1951801


author: Olivier Lemasle <o.lemasle@gmail.com> - 0.6.9-1
changelog:
  - Update to upstream 0.6.9
  - Stop providing feature async-std (missing dependency async-std) - Fixes rhbz#1964664


author: SaltStack Packaging Team <packaging@saltstack.com> - 3002.2-1
changelog:
  - Update to bugfix release 3002.2-1 for Python3
  - Revert _scope_id patch since it's been fixed upstream


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.0.0-18
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

  -* Wed Jul 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.0-17
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

  -* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.0-16
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild


author: Michal Ambroz <rebus AT seznam.cz> - 3.0.0-20
changelog:
  - use Debian patch to switch to the current version of openssl for crypto
  - adding dependencies to make and gcc


author: Martin Gansser <martinkg@fedoraproject.org> - 1.6.0-0.6.beta6
changelog:
  - Use %cmake_build and %cmake_install macros instead of %make_build and %make_install
  - Add "%global __cmake_in_source_build 1" due sayonara doesn't support out-of-src tree builds


author: Jan Černý <jcerny@redhat.com> - 0.1.51-4
changelog:
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix FTBS in Rawhide/F33 (RHBZ#1863741)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.52-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.52 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.52


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.53-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.53 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.53


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.54-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.54 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.54


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.55-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.55 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.55


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.56-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.56 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.56


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.5.1-2
changelog:
  - Fix build failure with GCC10.1 and Werror (upstream pull request)
  - Adapt specfile to new cmake macros (out of tree build)
  - Drop EPEL 6 conditionals (EOL)
  - Fix compilation error with gcc 11


author: Derek Weitzel <dweitzel@unl.edu> - 0.6.0-1
changelog:
  - Fix compilation errors on c++11
  - Update to jwt-cpp-0.4.0 vendor
  - Change scitoken profile name to match spec, scitoken:2.0


author: Stefan Schulze Frielinghaus <stefansf@fedoraproject.org> - 2.8.2-1
changelog:
  - New upstream release
  - Clean up spec file
  - Added an environment file /etc/sysconfig/sec in order to specify command line options


author: Zdenek Pytela <zpytela@redhat.com> - 34.6-1
changelog:
  - Make domains use kernel_write_perf_event() and kernel_manage_perf_event()
  - Add kernel_write_perf_event() and kernel_manage_perf_event()
  - Allow syslogd_t watch root and var directories
  - Allow unconfined_t read other processes perf_event records
  - Allow login_userdomain read and map /var/lib/systemd files
  - Allow NetworkManager watch its config dir
  - Allow NetworkManager read and write z90crypt device
  - Allow tgtd create and use rdma socket
  - Allow aide connect to init with a unix socket


author: Zdenek Pytela <zpytela@redhat.com> - 34.7-1
changelog:
  - Allow tgtd read and write infiniband devices
  - Add a comment on virt_sandbox booleans with empty content
  - Deprecate duplicate dev_write_generic_sock_files() interface
  - Allow vnstatd_t map vnstatd_var_lib_t files
  - Allow privoxy execmem
  - Allow pmdakvm read information from the debug filesystem
  - Add lockdown integrity into kernel_read_debugfs() and kernel_manage_debugfs()
  - Add permissions to delete lnk_files into gnome_delete_home_config()
  - Remove rules for inotifyfs
  - Remove rules for anon_inodefs
  - Allow systemd nnp_transition to login_userdomain
  - Allow unconfined_t write other processes perf_event records
  - Allow sysadm_t dbus chat with tuned
  - Allow tuned write profile files with file transition
  - Allow tuned manage perf_events
  - Make domains use kernel_write_perf_event() and kernel_manage_perf_event()


author: Zdenek Pytela <zpytela@redhat.com> - 34.8-1
changelog:
  - Allow local_login_t nnp_transition to login_userdomain
  - Allow asterisk watch localization symlinks
  - Allow NetworkManager_t to watch /etc
  - Label /var/lib/kdump with kdump_var_lib_t
  - Allow amanda get attributes of cgroup filesystems
  - Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
  - Allow install_t nnp_domtrans to setfiles_mac_t
  - Allow fcoemon create sysfs files


author: Zdenek Pytela <zpytela@redhat.com> - 34.9-1
changelog:
  - Add kerberos object filetrans for nsswitchdomain
  - Allow fail2ban watch various log files
  - Add logging_watch_audit_log_files() and logging_watch_audit_log_dirs()
  - Remove further modules recently removed from refpolicy
  - Remove modules not shipped and not present in refpolicy
  - Revert "Add permission open to files_read_inherited_tmp_files() interface"
  - Revert "Allow pcp_pmlogger_t to use setrlimit BZ(1708951)"
  - Revert "Dontaudit logrotate to setrlimit itself. rhbz#1309604"
  - Revert "Allow cockpit_ws_t domain to set limits BZ(1701703)"
  - Dontaudit setrlimit for domains that exec systemctl
  - Allow kdump_t net_admin capability
  - Allow nsswitch_domain read init pid lnk_files
  - Label /dev/trng with random_device_t
  - Label /run/systemd/default-hostname with hostname_etc_t
  - Add default file context specification for dnf log files
  - Label /dev/zram[0-9]+ block device files with fixed_disk_device_t
  - Label /dev/udmabuf character device with dma_device_t
  - Label /dev/dma_heap/* char devices with dma_device_t
  - Label /dev/acpi_thermal_rel char device with acpi_device_t


author: Zdenek Pytela <zpytela@redhat.com> - 34.10-1
changelog:
  - Allow using opencryptoki for ipsec
  - Allow using opencryptoki for certmonger
  - Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
  - Label /dev/dma_heap with dma_device_dir_t
  - Allow syslogd watch non security dirs conditionally
  - Introduce logging_syslogd_list_non_security_dirs tunable
  - Remove openhpi module
  - Allow udev to watch fixed disk devices
  - Allow httpd_sys_script_t read, write, and map hugetlbfs files
  - Allow apcupsd get attributes of cgroup filesystems


author: Zdenek Pytela <zpytela@redhat.com> - 34.11-1
changelog:
  - Allow sanlock get attributes of cgroup filesystems
  - Associate dma_device_dir_t with device filesystem
  - Set default file context for /var/run/systemd instead of /run/systemd
  - Allow nmap create and use rdma socket
  - Allow pkcs-slotd create and use netlink_kobject_uevent_socket


author: Zdenek Pytela <zpytela@redhat.com> - 34.12-1
changelog:
  - Label /dev/dma_heap/* char devices with dma_device_t
  - Revert "Label /dev/dma_heap/* char devices with dma_device_t"
  - Revert "Label /dev/dma_heap with dma_device_dir_t"
  - Revert "Associate dma_device_dir_t with device filesystem"
  - Add the lockdown integrity permission to dev_map_userio_dev()
  - Allow systemd-modules-load read/write tracefs files
  - Allow sssd watch /run/systemd
  - Label /usr/bin/arping plain file with netutils_exec_t
  - Label /run/fsck with fsadm_var_run_t
  - Label /usr/bin/Xwayland with xserver_exec_t
  - Allow systemd-timesyncd watch dbus runtime dir
  - Allow asterisk watch localization files
  - Allow iscsid read all process stat
  - iptables.fc: Add missing legacy-restore and legacy-save entries
  - Label /run/libvirt/common with virt_common_var_run_t
  - Label /.k5identity file allow read of this file to rpc.gssd
  - Make usbmuxd_t a daemon


author: Zdenek Pytela <zpytela@redhat.com> - 34.12-2
changelog:
  - Add a systemd service to check that SELinux is disabled properly
  - specfile: Add unowned dir to the macro
  - Relabel /dev/dma_heap explicitly


author: Zdenek Pytela <zpytela@redhat.com> - 34.13-1
changelog:
  - Allow radius map its library files
  - Allow nftables read NetworkManager unnamed pipes
  - Allow logrotate rotate container log files


author: Zdenek Pytela <zpytela@redhat.com> - 34.14-1
changelog:
  - Revert "update libs_filetrans_named_content() to have support for /usr/lib/debug directory"
  - Remove references to init_watch_path_type attribute
  - Remove all redundant watch permissions for systemd
  - Allow systemd watch non_security_file_type dirs, files, lnk_files
  - Removed adding to attribute unpriv_userdomain from userdom_unpriv_type template
  - Allow bacula get attributes of cgroup filesystems
  - Allow systemd-journal-upload watch logs and journal
  - Create a policy for systemd-journal-upload
  - Allow tcpdump and nmap get attributes of infiniband_device_t
  - Allow arpwatch get attributes of infiniband_device_t devices
  - Label /dev/wmi/dell-smbios as acpi_device_t


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.24-1
changelog:
  - Add 'fur' into shipped locales
   - Update translations
   - Log full reports with correct syslog identifier
   - Cancel pending alarm during AVC analyses


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.25-1
changelog:
  - Use Python dasbus instead of pydbus
  - Optimize get_rpm_nvr_by_type by adding a cache
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.26-1
changelog:
  - Fix plugin exception reporting
  - Update translations
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Do not use Python slip package


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-8
changelog:
  - man: include lastlog file caveat (#951564)
  - Upstream links to several patches
  - Spec file cleanup by Robert Scheck
  - Add BuildRequires: make by Tom Stellard


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 20210217-1.git1ca80982c5
changelog:
  - Source switched to github
  - Update to github latest git
  - license investigated again and updated, especially for SKK-JISYO.edict


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.49-1
changelog:
  - Release snapd 2.49 to Fedora (RHBZ#1927314)
  - Include fix for CVE-2020-27352 (RHBZ#1927428, RHBZ#1927432)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49.1
   - tests: turn modules off explicitly in spread go unti test
   - o/snapshotstate: create snapshots directory on import
   - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
   - interfaces: add allegro-vcu and media-control interfaces
   - interfaces: opengl: add Xilinx zocl bits
   - many: fix new ineffassign warnings
   - interfaces/seccomp/template.go: allow copy_file_range
   - interfaces: allow reading the Xauthority file KDE Plasma writes
     for Wayland sessions
   - data/selinux: allow system dbus to watch
     /var/lib/snapd/dbus-1
   - Remove apparmor downgrade feature
   - Support tmp and log dirs on Yocto/Poky


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49.2
   - interfaces/tee: add TEE/OPTEE interface
   - o/configstate/configcore: add hdmi_timings to pi-config
   - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
   - snap-seccomp: fix seccomp test on ppc64el
   - interfaces{,/apparmor}, overlord/snapstate:
     late removal of snap-confine apparmor profiles
   - overlord/snapstate, wrappers: add dependency on usr-lib-
     snapd.mount for services on core with snapd snap
   - o/configstate: deal with no longer valid refresh.timer=managed
   - overlord/snapstate: make sure that snapd current symlink is not
     removed during refresh
   - packaging: drop dh-systemd from build-depends on ubuntu-16.04+
   - o/{device,hook}state: encode fde-setup-request key as base64
   - snapstate: reduce reRefreshRetryTimeout to 1/2 second
   - tests/main/uc20-create-partitions: fix tests cleanup
   - o/configstate, o/snapshotstate: fix handling of nil snap config on
     snapshot restore
   - snap-seccomp: add new `close_range` syscall


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.50
   - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu
     Core system
   - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug
   - o/servicestate/servicemgr.go: add ensure loop for snap service
     units
   - wrappers/services.go: introduce EnsureSnapServices()
   - snapstate: add "kernel-assets" to featureSet
   - systemd: wait for zfs mounts
   - overlord: make servicestate responsible to compute
     SnapServiceOptions
   - boot,tests: move where we write boot-flags one level up
   - o/configstate: don't pass --root=/ when
     masking/unmasking/enabling/disabling services
   - cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to
     /run
   - gadget: be more flexible with kernel content resolving
   - boot, cmd/snap: include extra cmdline args in debug boot-vars
     output
   - boot: support read/writing boot-flags from userspace/initramfs
   - interfaces/pwm: add PWM interface
   - tests/lib/prepare-restore.sh: clean out snapd changes and snaps
     before purging
   - systemd: enrich UnitStatus returned by systemd.Status() with
     Installed flag
   - tests: updated restore phase of spread tests - part 1
   - gadget: add support for kernel command line provided by the gadget
   - tests: Using GO111MODULE: "off" in spread.yaml
   - features: add gate-auto-refresh-hook feature flag
   - spread: ignore linux kernel upgrade in early stages for arch
     preparation
   - tests: use snaps-state commands and remove them from the snaps
     helper
   - o/configstate: fix panic with a sequence of config unset ops over
     same path
   - api: provide meaningful error message on connect/disconnect for
     non-installed snap
   - interfaces/u2f-devices: add HyperFIDO Pro
   - tests: add simple sanity check for systemctl show
     --property=UnitFileState for unknown service
   - tests: use tests.session tool on interfaces-desktop-document-
     portal test
   - wrappers: install D-Bus service activation files for snapd session
     tools on core
   - many: add x-gvfs-hide option to mount units
   - interfaces/builtin/gpio_test.go: actually test the generated gpio
     apparmor
   - spread: tentative workaround for arch failure caused by libc
     upgrade and cgroups v2
   - tests: add spread test for snap validate against store assertions
   - tests: remove snaps which are not used in any test
   - ci: set the accept-existing-contributors parameter for the cla-
     check action
   - daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and
     some apiBaseSuite cosmetics)
   - o/devicestate/devicemgr: register install-device hook, run if
     present in install
   - o/configstate/configcore: simple refactors in preparation for new
     function
   - tests: unifying the core20 nested suite with the core nested suite
   - tests: uboot-unpacked-assets updated to reflect the real path used
     to find the kernel
   - daemon: switch api_test.go to daemon_test and various other
     cleanups
   - o/configstate/configcore/picfg.go: add hdmi_cvt support
   - interfaces/apparmor: followup cleanups, comments and tweaks
   - boot: cmd/snap-bootstrap: handle a candidate recovery system v2
   - overlord/snapstate: skip catalog refresh when snappy testing is
     enabled
   - overlord/snapstate, overlord/ifacestate: move late security
     profile removal to ifacestate
   - snap-seccomp: fix seccomp test on ppc64el
   - interfaces, interfaces/apparmor, overlord/snapstate: late removal
     of snap-confine apparmor profiles
   - cmd/snap-bootstrap/initramfs-mounts: move time forward using
     assertion times
   - tests: reset the system while preparing the test suite
   - tests: fix snap-advise-command check for 429
   - gadget: policy for gadget/kernel refreshes
   - o/configstate: deal with no longer valid refresh.timer=managed
   - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
   - cla-check: Use has-signed-canonical-cla GitHub Action
   - tests: validation sets spread test
   - tests: simplify the reset.sh logic by removing not needed command
   - overlord/snapstate: make sure that snapd current symlink is not
     removed during refresh
   - tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20
   - tests/lib/fde-setup-hook: also verify that fde-reveal-key key data
     is base64
   - o/devicestate: split off ensuring next boot goes to run mode into
     new task
   - tests: fix cgroup-tracking test
   - boot: export helper for clearing tried system state, add tests
   - cmd/snap: use less aggressive client timeouts in unit tests
   - daemon: fix signing key validity timestamp in unit tests
   - o/{device,hook}state: encode fde-setup-request key as base64
     string
   - packaging: drop dh-systemd from build-depends on ubuntu-16.04+
   - cmd/snap/pack: unhide the compression option
   - boot: extend set try recovery system unit tests
   - cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use
     secboot's implicit fallback
   - o/configstate/configcore: add hdmi_timings to pi-config
   - snapstate: reduce reRefreshRetryTimeout to 1/2 second
   - interfaces/tee: add TEE/OPTEE interface
   - o/snapstate: update validation sets assertions with auto-refresh
   - vendor: update go-tpm2/secboot to latest version
   - seed: ReadSystemEssentialAndBetterEarliestTime
   - tests: replace while commands with the retry tool
   - interfaces/builtin: update unit tests to use proper distro's
     libexecdir
   - tests: run the reset.sh helper and check test invariants while the
     test is restored
   - daemon: switch preexisting daemon_test tests to apiBaseSuite and
     .req
   - boot, o/devicestate: split makeBootable20 into two parts
   - interfaces/docker-support: add autobind unix rules to docker-
     support
   - interfaces/apparmor: allow reading
     /proc/sys/kernel/random/entropy_avail
   - tests: use retry tool instead a loops
   - tests/main/uc20-create-partitions: fix tests cleanup
   - asserts: mode where Database only assumes cur time >= earliest
     time
   - daemon: validation sets/api tests cleanup
   - tests: improve tests self documentation for nested test suite
   - api: local assertion fallback when it's not in the store
   - api: validation sets monitor mode
   - tests: use fs-state tool in interfaces tests
   - daemon:  move out /v2/login|logout and errToResponse tests from
     api_test.go
   - boot: helper for inspecting the outcome of a recovery system try
   - o/configstate, o/snapshotstate: fix handling of nil snap config on
     snapshot restore
   - tests: update documentation and checks for interfaces tests
   - snap-seccomp: add new `close_range` syscall
   - boot: revert #10009
   - gadget: remove `device-tree{,-origin}` from gadget tests
   - boot: simplify systems test setup
   - image: write resolved-content from snap prepare-image
   - boot: reseal the run key for all recovery systems, but recovery
     keys only for the good ones
   - interfaces/builtin/network-setup-{control,observe}: allow using
     netplan directly
   - tests: improve sections prepare and restore - part 1
   - tests: update details on task.yaml files
   - tests: revert os.query usage in spread.yaml
   - boot: export bootAssetsMap as AssetsMap
   - tests/lib/prepare: fix repacking of the UC20 kernel snap for with
     ubuntu-core-initramfs 40
   - client: protect against reading too much data from stdin
   - tests: improve tests documentation - part 2
   - boot: helper for setting up a try recover system
   - tests: improve tests documentation - part 1
   - tests/unit/go: use tests.session wrapper for running tests as a
     user
   - tests: improvements for snap-seccomp-syscalls
   - gadget: simplify filterUpdate (thanks to Maciej)
   - tests/lib/prepare.sh: use /etc/group and friends from the core20
     snap
   - tests: fix tumbleweed spread tests part 2
   - tests: use new commands of os.query tool on tests
   - o/snapshotstate: create snapshots directory on import
   - tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list
   - packaging: drop 99-snapd.conf via dpkg-maintscript-helper
   - osutil: add SetTime() w/ 32-bit and 64-bit implementations
   - interfaces/wayland: rm Xwayland Xauth file access from wayland
     slot
   - packaging/ubuntu-16.04/rules: turn modules off explicitly
   - gadget,devicestate: perform kernel asset update for $kernel: style
     refs
   - cmd/recovery: small fix for `snap recovery` tab output
   - bootloader/lkenv: add recovery systems related variables
   - tests: fix new tumbleweed image
   - boot: fix typo, should be systems
   - o/devicestate: test that users.create.automatic is configured
     early
   - asserts: use Fetcher in AddSequenceToUpdate
   - daemon,o/c/configcore: introduce users.create.automatic
   - client, o/servicestate: expose enabled state of user daemons
   - boot: helper for checking and marking tried recovery system status
     from initramfs
   - asserts: pool changes for validation-sets (#9930)
   - daemon: move the last api_foo_test.go to daemon_test
   - asserts: include the assertion timestamp in error message when
     outside of signing key validity range
   - ovelord/snapshotstate: keep a few of the last line tar prints
     before failing
   - gadget/many: rm, delay sector size + structure size checks to
     runtime
   - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
   - interfaces: add allegro-vcu and media-control interfaces
   - interfaces: opengl: add Xilinx zocl bits
   - mkversion: check that version from changelog is set before
     overriding the output version
   - many: fix new ineffassign warnings
   - .github/workflows/labeler.yaml: try work-around to not sync
     labels
   - cmd/snap, boot: add debug set-boot-vars
   - interfaces: allow reading the Xauthority file KDE Plasma writes
     for Wayland sessions
   - tests/main/snap-repair: test running repair assertion w/ fakestore
   - tests: disable lxd tests for 21.04 until the lxd images are
     published for the system
   - tests/regression/lp-1910456: cleanup the /snap symlink when done
   - daemon: move single snap querying and ops to api_snaps.go
   - tests: fix for preseed and dbus tests on 21.04
   - overlord/snapshotstate: include the last message printed by tar in
     the error
   - interfaces/system-observe: Allow reading /proc/zoneinfo
   - interfaces: remove apparmor downgrade feature
   - snap: fix unit tests on Go 1.16
   - spread: disable Go modules support in environment
   - tests: use new path to find kernel.img in uc20 for arm devices
   - tests: find files before using cat command when checking broadcom-
     asic-control interface
   - boot: introduce good recovery systems, provide compatibility
     handling
   - overlord: add manager gadget refresh test
   - tests/lib/fakestore: support repair assertions too
   - github: temporarily disable action labeler due to issues with
     labels being removed
   - o/devicestate,many: introduce DeviceManager.preloadGadget for
     EarlyConfig
   - tests: enable ubuntu 21.04 for spread tests
   - snap: provide a useful error message if gdbserver is not installed
   - data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1
   - tests/lib/prepare.sh: split reflash.sh into two parts
   - packaging/opensuse: sync with openSUSE packaging
   - packaging: disable Go modules in snapd.mk
   - snap: add deprecation noticed to "snap run --gdb"
   - daemon: add API for checking and installing available theme snaps
   - tests: using labeler action to add automatically a label to run
     nested tests
   - gadget: improve error handling around resolving content sources
   - asserts: repeat the authority cross-check in CheckSignature as
     well
   - interfaces/seccomp/template.go: allow copy_file_range
   - o/snapstate/check_snap.go: add support for many subversions in
     assumes snapdX..
   - daemon: move postSnap and inst.dispatch tests to api_snaps_test.go
   - wrappers: use proper paths for mocked mount units in tests
   - snap: rename gdbserver option to `snap run --gdbserver`
   - store: support validation sets with fetch-assertions action
   - snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky
   - packaging/fedora: sync with downstream packaging in Fedora
   - many: add Delegate=true to generated systemd units for special
     interfaces (master)
   - boot: use a common helper for mocking boot assets in cache
   - api: validate snaps against validation set assert from the store
   - wrappers: don't generate an [Install] section for timer or dbus
     activated services
   - tests/nested/core20/boot-config-update: skip when snapd was not
     built with test features
   - o/configstate,o/devicestate: introduce devicestate.EarlyConfig
     implemented by configstate.EarlyConfig
   - cmd/snap-bootstrap/initramfs-mounts: fix typo in func name
   - interfaces/builtin: mock distribution in fontconfig cache unit
     tests
   - tests/lib/prepare.sh: add another console= to the reflash magic
     grub entry
   - overlord/servicestate: expose dbus activators of a service
   - desktop/notification: test against a real session bus and
     notification server implementation
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - HACKING.md: explain how to run UC20 spread tests with QEMU
   - asserts: introduce AtSequence
   - overlord/devicestate: task for updating boot configs, spread test
   - gadget: fix documentation/typos
   - gadget: cleanup MountedFilesystem{Writer,Updater}
   - gadget: use ResolvedSource in MountedFilesystemWriter
   - snap/info.go: add doc-comment for SortServices
   - interfaces: add an optional mount-host-font-cache plug attribute
     to the desktop interface
   - osutil: skip TestReadBuildGo inside sbuild
   - o/hookstate/ctlcmd: add optional --pid and --apparmor-label
     arguments to "snapctl is-connected"
   - data/env/snapd: use quoting in case PATH contains spaces
   - boot: do not observe successful boot assets if not in run mode
   - tests: fix umount for snapd snap on fsck-on-boot testumount:
     /run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount
   - misc: little tweaks
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - devicestate: keep log from install-mode on installed system
   - seed: add LoadEssentialMeta to seed16 and allow all of its
     implementations to be called multiple times
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - tests/core/uc20-recovery: move recover mode helpers to generic
     testslib script
   - interfaces/fwupd: allow any distros to access fw files via fwupd
   - store: method for fetching validation set assertion
   - store: switch to v2/assertions api
   - gadget: add new ResolvedContent and populate from LayoutVolume()
   - spread: use full format when listing processes
   - osutil/many: make all test pkgs osutil_test instead of "osutil"
   - tests/unit/go: drop unused environment variables, skip coverage
   - OpenGL interface: Support more Tegra libs
   - gadget,overlord: pass kernelRoot to install.Run()
   - tests: run unit tests in Focal instead of Xenial
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - daemon: move query /snaps/<name> tests to api_snaps_test.go
   - cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair
     runner
   - systemd/systemd.go: support journald JSON messages with arrays for
     values
   - cmd: make string/error code more robust against errno leaking
   - github, run-checks: do not collect coverage data on subsequent
     test runs
   - boot: boot config update & reseal
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - osutil/stat.go: add RegularFileExists
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - gadget/gadget.go: rename ubuntu-* to system-* in doc-comment
   - tests: use 6 spread workers for centos8
   - bootloader/assets: support injecting bootloader assets in testing
     builds of snapd
   - gadget: enable multi-volume uc20 gadgets in
     LaidOutSystemVolumeFromGadget; rename too
   - overlord/devicestate, sysconfig: do nothing when cloud-init is not
     present
   - cmd/snap-repair: filter repair assertions based on bases + modes
   - snap-confine: make host /etc/ssl available for snaps on classic


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.50.1
   - interfaces: update permitted /lib/.. paths to be compatible with
     UC20
   - interfaces: builtin: update permitted paths to be compatible with
     UC20
   - interfaces/greengrass-support: delete white spaces at the end of
     lines
   - snap-seccomp: update syscalls.go list
   - many: backport kernel command line for 2.50
   - interfaces/dbus: allow claiming 'well-known' D-Bus names with a
     wildcard suffix
   - interfaces/camera: allow devices in /sys/devices/platform/**/usb*
   - interfaces/builtin: introduce dsp interface


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.51
   - cmd/snap: stacktraces debug endpoint
   - secboot: deactivate volume again when model checker fails
   - store: extra log message, a few minor cleanups
   - packaging/debian-sid: update systemd patch
   - snapstate: adjust update-gadget-assets user visible message
   - tests/nested/core/core20-create-recovery: verify that recovery
     system can be created at runtime
   - gadget: support creating vfat partitions during bootstrap
   - daemon/api_quotas.go: support updating quotas with ensure action
   - daemon: tighten access to a couple of POST endpoints that should
     be really be root-only
   - seed/seedtest, overlord/devicestate: move seed validation helper
     to seedtest
   - overlord/hookstate/ctlcmd: remove unneeded parameter
   - snap/quota: add CurrentMemoryUsage for current memory usage of a
     quota group
   - systemd: add CurrentMemoryUsage to get current memory usage for a
     unit
   - o/snapstate: introduce minimalInstallInfo interface
   - o/hookstate: print pending info (ready, inhibited or none)
   - osutil: a helper to find out the total amount of memory in the
     system
   - overlord, overlord/devicestate: allow for reloading modeenv in
     devicemgr when testing
   - daemon: refine access testing
   - spread: disable unattended-upgrades on debian
   - tests/lib/reset: make nc exit after a while when connection is
     idle
   - daemon: replace access control flags on commands with access
     checkers
   - release-tools/changelog.py: refactor regexp + file reading/writing
   - packaging/debian-sid: update locale patch for the latest master
   - overlord/devicestate: tasks for creating recovery systems at
     runtime
   - release-tools/changelog.py: implement script to update all the
     changelog files
   - tests: change machine type used for nested testsPrices:
   - cmd/snap: include locale when linting description being lower case
   - o/servicestate: add RemoveSnapFromQuota
   - interfaces/serial-port: add Qualcomm serial port devices to
     allowed list
   - packaging: merge 2.50.1 changelog back
   - interfaces/builtin: introduce raw-input interface
   - tests: remove tests.cleanup prepare from nested test
   - cmd/snap-update-ns: fix linter errors
   - asserts: fix errors reported by linter
   - o/hookstate/ctlcmd: allow system-mode for non-root
   - overlord/devicestate: comment why explicit system mode check is
     needed in ensuring tried recovery systems (#10275)
   - overlord/devicesate: observe snap writes when creating recovery
     systems
   - packaging/ubuntu-16.04/changelog: add placeholder for 2.50.1
   - tests: moving to tests directories snaps built locally - part 1
   - seed/seedwriter: fail early when system seed directory exists
   - o/snapstate: autorefresh phase1 for refresh-control
   - c/snap: more precise message for ErrorKindSystemRestart op !=
     reboot
   - tests: simplify the tests.cleanup tool
   - boot: helpers for manipulating current and good recovery systems
     list
   - o/hookstate, o/snapstate: print revision, version, channel with
     snapctl --pending
   - overlord:  unit test tweaks, use well known snap IDs, setup snap
     declarations for most common snaps
   - tests/nested/manual: add test for install-device + snapctl reboot
   - o/servicestate: restart slices + services on modifications
   - tests: update mount-ns test to support changes in the distro
   - interfaces: fix linter issues
   - overlord: mock logger in managers unit tests
   - tests: adding support for fedora-34
   - tests: adding support for debian 10 on gce
   - boot: reseal given keys when the respective boot chain has changed
   - secboot: switch encryption key size to 32 byte (thanks to Chris)
   - interfaces/dbus: allow claiming 'well-known' D-Bus names with a
     wildcard suffix
   - spread: bump delta reference version
   - interfaces: builtin: update permitted paths to be compatible with
     UC20
   - overlord: fix errors reported by linter
   - tests: remove old fedora systems from tests
   - tests: update spread url
   - interfaces/camera: allow devices in /sys/devices/platform/**/usb*
   - interfaces/udisks2: Allow access to the login manager via dbus
   - cmd/snap: exit normally if "snap changes" has no changes
     (LP #1823974)
   - tests: more fixes for spread suite on openSUSE
   - tests: fix tests expecting cgroup v1/hybrid on openSUSE Tumbleweed
   - daemon: fix linter errors
   - spread: add Fedora 34, leave a TODO about dropping Fedora 32
   - interfaces: fix linter errors
   - tests: use op.paths tools instead of dirs.sh helper - part 2
   - client: Fix linter errors
   - cmd/snap: Fix errors reported by linter
   - cmd/snap-repair: fix linter issues
   - cmd/snap-bootstrap: Fix linter errors
   - tests: update permission denied message for test-snapd-event on
     ubuntu 2104
   - cmd/snap: small tweaks based on previous reviews
   - snap/snaptest: helper that mocks both the squashfs file and a snap
     directory
   - overlord/devicestate: tweak comment about creating recovery
     systems, formatting tweaks
   - overlord/devicestate: move devicemgr base suite helpers closer to
     test suite struct
   - overlord/devicestate: keep track of tried recovery system
   - seed/seedwriter: clarify in the diagram when SetInfo is called
   - overlord/devicestate: add helper for creating recovery systems at
     runtime
   - snap-seccomp: update syscalls.go list
   - boot,image: support image.Customizations.BootFlags
   - overlord: support snapctl --halt|--poweroff in gadget install-
     device
   - features,servicestate: add experimental.quota-groups flag
   - o/servicestate: address comments from previous PR
   - tests: basic spread test for snap quota commands
   - tests: moving the snaps which are not locally built to the store
     directory
   - image,c/snap: implement prepare-image --customize
   - daemon: implement REST API for quota groups (create / list / get)
   - cmd/snap, client: snap quotas command
   - o/devicestate,o/hookstate/ctlcmd: introduce SystemModeInfo methods
     and snapctl system-mode
   - o/servicestate/quota_control.go: introduce (very) basic group
     manipulation methods
   - cmd/snap, client: snap remove-quota command
   - wrappers, quota: implement quota groups slice generation
   - snap/quotas: followups from previous PR
   - cmd/snap: introduce 'snap quota' command
   - o/configstate/configcore/picfg.go: use ubuntu-seed config.txt in
     uc20 run mode
   - o/servicestate: test has internal ordering issues, consider both
     cases
   - o/servicestate/quotas: add functions for getting and setting
     quotas in state
   - tests: new buckets for snapd-spread project on gce
   - spread.yaml: update the gce project to start using snapd-spread
   - quota: new package for managing resource groups
   - many: bind and check keys against models when using FDE hooks v2
   - many: move responsibilities down seboot -> kernel/fde and boot ->
     secboot
   - packaging: add placeholder changelog
   - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap
     bug
   - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu
     Core system
   - many: hide EncryptionKey size and refactors for fde hook v2 next
     steps
   - tests: adding debug info for create user tests
   - o/hookstate: add "refresh" command to snapctl (hidden, not
     complete yet)
   - systemd: wait for zfs mounts (LP #1922293)
   - testutil: support referencing files in FileEquals checker
   - many: refactor to kernel/fde and allow `fde-setup initial-setup`
     to return json
   - o/snapstate: store refresh-candidates in the state
   - o/snapstate: helper for creating gate-auto-refresh hooks
   - bootloader/bootloadertest: provide interface implementation as
     mixins, provide a mock for recovery-aware-trusted-asses bootloader
   - tests/lib/nested: do not compress images, return early when
     restored from pristine image
   - boot: split out a helper for making recovery system bootable
   - tests: update os.query check to match new bullseye codename used
     on sid images
   - o/snapstate: helper for getting snaps affected by refresh, define
     new hook
   - wrappers: support in EnsureSnapServices a callback to observe
     changes (#10176)
   - gadget: multi line support in gadget's cmdline file
   - daemon: test that requesting restart from (early) Ensure works
   - tests: use op.paths tools instead of dirs.sh helper - part 1
   - tests: add new command to snaps-state to get current core, kernel
     and gadget
   - boot, gadget: move opening the snap container into the gadget
     helper
   - tests, overlord: extend unit tests, extend spread tests to cover
     full command line support
   - interfaces/builtin: introduce dsp interface
   - boot, bootloader, bootloader/assets: support for full command line
     override from gadget
   - overlord/devicestate, overlord/snapstate: add task for updating
     kernel command lines from gadget
   - o/snapstate: remove unused DeviceCtx argument of
     ensureInstallPreconditions
   - tests/lib/nested: proper status return for tpm/secure boot checks
   - cmd/snap, boot: add snapd_full_cmdline_args to dumped boot vars
   - wrappers/services.go: refactor helper lambda function to separate
     function
   - boot/flags.go: add HostUbuntuDataForMode
   - boot: handle updating of components that contribute to kernel
     command line
   - tests: add 20.04 to systems for nested/core
   - daemon: add new accessChecker implementations
   - boot, overlord/devicestate: consider gadget command lines when
     updating boot config
   - tests: fix prepare-image-grub-core18 for arm devices
   - tests: fix gadget-kernel-refs-update-pc test on arm and when
     $TRUST_TEST_KEY is false
   - tests: enable help test for all the systems
   - boot: set extra command line arguments when preparing run mode
   - boot: load bits of kernel command line from gadget snaps
   - tests: update layout for tests - part 2
   - tests: update layout for tests - part 1
   - tests: remove the snap profiler from the test suite
   - boot: drop gadget snap yaml which is already defined elsewhere in
     the tests
   - boot: set extra kernel command line arguments when making a
     recovery system bootable
   - boot: pass gadget path to command line helpers, load gadget from
     seed
   - tests: new os.paths tool
   - daemon: make ucrednetGet() return a *ucrednet structure
   - boot: derive boot variables for kernel command lines
   - cmd/snap-bootstrap/initramfs-mounts: fix boot-flags location from
     initramfs


author: Dominik Mierzejewski <rpm@greysector.net> - 1.0.3-1
changelog:
  - update to 1.0.3 release (#1860667)
  - backport patch to fix exception with missing locale (#1811313)


author: Dominik Mierzejewski <rpm@greysector.net> - 1.0.5-1
changelog:
  - update to 1.0.5 (#1933413)
  - drop obsolete patch
  - drop redundant explicit Requires: on pyudev
  - python3-gobject is optional (for GUI only), move to Recommends:
  - fix unknown battery status regression


author: Dominik Mierzejewski <rpm@greysector.net> - 1.0.6-1
changelog:
  - update to 1.0.6 (#1953333)
  - improve handling of unavailable devices on startup or resume (#1921575, #1912132, #1942301, #1946104)
  - add a conditional weak dependency on appindicator extension for gnome-shell


author: Leigh Scott <leigh123linux@gmail.com> - 2.1.1-1
changelog:
  - Update to 2.1.1 release
  - Remove pointless check, builders don't have internet access
  - Use python3 macros
  - Fix Source URL
  - Remove gz extension from man file
  - Don't bother compressing man file as rpmbuild does it
  - Remove unnecessary Requires
  - Spec file clean up


author: Benjamin Berg <bberg@redhat.com> - 0.19.0-3
changelog:
  - Add patch to lookup graphical session
    https://gitlab.freedesktop.org/spice/linux/vd_agent/merge_requests/2
  - Resolves: #1750120


author: Peter Oliver <rpm@mavit.org.uk> - 1.9.8.1287-2
changelog:
  - Use ALSA backend by default.  Works around #1901872, which causes some audio content to play at the wrong speed and pitch.


author: Peter Oliver <rpm@mavit.org.uk> - 1.9.9.1353-3
changelog:
  - Properly clean between builds.  Fixes lack of audio with
    squeezelite-pulse on Fedora 34.
  - Drop redundant systemd user service preset, since the default is now off.


author: Christopher Engelhard <ce@lcts.de> 2.4.0-12
changelog:
  - include patch to fully whitelist localhost in IPv6/v4 (PR #56)
  - add explicit Requires: ipset to firewalld backend


author: Christopher Engelhard <ce@lcts.de> 2.4.1-5
changelog:
  - Fix backend path in example spec file
  - Remove SysV init related things
  - Require a backend
  - Fix wrong check for EPEL8


author: Clark Williams <williams@redhat.com> - 1.2-1
changelog:
  - utils.c: added info() functions
  - detect and correctly parse old-style /proc/sched_debug
  - src/stalld: Fix an retval check while reading sched_debug
  - src/throttling: Fix a compilation warning
  - ensure we only count task lines in old-format sched_debug info
  - Add comments, clean up trailing whitespace
  - src/utils: Fix runtime parameters check
  - stalld: Do not take actions if log_only is set
  - remove warning from parse_old_task_format


author: Clark Williams <williams@redhat.com> - 1.3-1
changelog:
  - Readme: Add information about repositories
  - Add version management and version option
  - create doc and scripts directory and add info on releases


author: Clark Williams <williams@redhat.com> - 1.4-1
changelog:
  - stalld: Set rt_runtime to -1 before trying the SCHED_DEADLINE
  - Fix incorrect recursion of specfile version field


author: Clark Williams <williams@redhat.com> - 1.7-1
changelog:
  - rework detect_task_format and buffer_size logic
  - make CFLAGS for local compile match rpmbuild CFLAGS


author: Clark Williams <williams@redhat.com> - 1.8-1
changelog:
  - Fix Readiness Protocol Mismatch with systemd
  - test01:  update to use buildin atomic operations
  - test01: add throttling check


author: Clark Williams <williams@redhat.com> - 1.9-1
changelog:
  - Set starvation threshold default to 30 seconds
  - rework read buffer allocation to properly find page size
  - Add the -g/--granularity option
  - Change the default granularity to five seconds
  - Implement idle detection
  - Implement the single-threaded mode
  - Add HRTICK_DL support


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Paul Wouters <pwouters@redhat.com> - 5.9.0-1
changelog:
  - Resolves: rhbz#1861747 strongswan-5.9.0 is available
  - Remove --enable-fips-mode=2, which defaults strongswan to FIPS only.
    (use fips_mode = 2 in plugins {} openssl {} in strongswan.conf to enable FIPS)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 5.9.0-4
changelog:
  - Build with with capabilities support
  - Resolves: rhbz#1911572 StrongSwan not configured with libcap support


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.3-1
changelog:
  - Resolves: rhbz#1979574 strongswan-5.9.3 is available
  - Make strongswan main dir world readable so apps can find strongswan.conf


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1.10.5-2.20200913git10aefff0
changelog:
  - Update to latest git snapshot
  - Do not re-render the assets during build
  - Remove SCSS sources from the final install


author: Xavier Bachelot <xavier@bachelot.org> 6.2.56-1
changelog:
  - Update to 6.2.56 (Fixes CVE-2020-10936)
  - Fix typo in url and also socket location in lighttpd configuration (RHBZ#1812325)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.62-1
changelog:
  - Update to 6.2.62
    - Fixes CVE-2020-26880 (RHBZ#1886232 - RHBZ#1886233)
  - Unbundle jquery-ui
  - Unbundle jquery on EL8


author: Ding-Yi Chen <dchen@redhat.com> - 1:1.10.2-1
changelog:
  - Revert to v1 as Synergy 2 is back to beta
    https://symless.com/blog/synergy-2-back-beta
  - Following files/programs are gone
    * /usr/bin/synergy-core
    * /usr/share/pixmaps/synergy.ico
  - Following files/programs are back
    * /usr/bin/synergy
    * /usr/bin/syntool


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc4-3
changelog:
  - Fix hang when processing timers during DST switch in Europe/Dublin timezone (#1941335)
  - Fix returning combined IPv4/IPv6 responses from systemd-resolved cache (#1940715)
    (But note that the disablement of caching added previously is
    retained until we can do more testing.)
  - Minor fix to interface naming by udev
  - Fix for systemd-repart --size


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc4-4
changelog:
  - Revert patch that seems to cause problems with dns resolution
    (see comments on https://bodhi.fedoraproject.org/updates/FEDORA-2021-1c1a870ceb)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc4-5
changelog:
  - Do not preset systemd-networkd.service and systemd-networkd-wait-online.service
    on upgrades from before systemd-networkd was split out (#1943263)
  - In nsswitch.conf, move nss-myhostname to the front, before nss-mdns4 (#1943199)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248-1
changelog:
  - Latest upstream release, see
    https://github.com/systemd/systemd/blob/v248/NEWS.
  - The changes since -rc4 are rather small, various fixes all over the place.
    A fix to how systemd-oomd selects a candidate to kill, and more debug logging
    to make this more transparent.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.1-1
changelog:
  - Latest stable version: a long list of minor correctness fixes all around
    (#1955475, #911766, #1958167, #1952919)
  - Enable tpm2-tss dependency (#1949505)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.2-1
changelog:
  - Pull in some more patches from upstream (#1944646, #1885090, #1941340)
  - Adjust modes of some %ghost files (#1956059)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.3-1
changelog:
  - A fix for resolved crashes (#1946386, #1960227, #1950241)
  - Some minor fixes for documentation, systemd-networkd, systemd-run, bootctl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.4-1
changelog:
  - Assorted fixes (some systemd-resolved crashes, invalid
    systemd-tmpfiles assertion, etc.)
  - systemd-networkd workaround for TALOS-2020-1142, CVE-2020-13529.
  - A big update of hardware descriptions.


author: Sergio Correia <scorreia@redhat.com> - 7.8
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Sergio Correia <scorreia@redhat.com> - 10-2
changelog:
  - Fix issues reported by shellcheck and a possible NULL pointer
    dereference reported by gcc static analyzer (3d770c6, 262d98f)


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-1
changelog:
  - New version 4.9.3
  - Fixes CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452, CVE-2018-16300, CVE-2018-16228, CVE-2019-15166, CVE-2019-15167


author: josef radinger <cheese@nosuchhost.net> - 0.12.0-1
changelog:
  - bump version
  - switch to github
  - remove patch0 libxml
  - remove patch3 wording (todo)
  - remove patch20
  - autogen.sh
  - we now require gettext-devel
  - gcc-c++
  - add libtool + autoconf
  - add goocanvas2 to buildrequires
  - add %global optflags %{optflags} -fcommon
  - remove source2 todo
  - work around language-creation (INSTOBJEXT)
  - schemas-convert file
  - remove scripts


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.1-3
changelog:
  - Second attempt - Rebuilt for
    https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Fix cmake changes
  - Apply upstream patch to allow for new FindTaglib.cmake in ECM 5.72


author: Dominic Hopf <dmaphy@fedoraproject.org> - 1.92-2
changelog:
  - Improve requirement listings
  - Fix requirement for python3-psutil on EPEL8
  - Add missing requirement for gtk-update-icon-cache


author: Hans de Goede <hdegoede@redhat.com> - 1.92-6
changelog:
  - Fix not being able to select text in the first column of a split terminal
    https://github.com/gnome-terminator/terminator/issues/191


author: Christian Krause <chkr@fedoraproject.org> - 3.0.2-1
changelog:
  - Updated to 3.0.2 (BZ #1750167)
  - Updated installed documentation files
  - Added provided man page (adjusted to Fedora's script name "testssl")


author: Tom Callaway <spot@fedoraproject.org> - 9:20200327-22
changelog:
  - make proper texlive-optex subpackage by moving it here
  - bump epoch to 9 so this texlive-optex package replaces the one that used to live in texlive


author: Tom Callaway <spot@fedoraproject.org> - 7:20200327-28
changelog:
  - set TEXMFLOCAL during the context scriptlet to minimize the scope of where it looks during mtxrun --generate


author: Carl George <carl@george.computer> - 2.2.0-3.2020704git5a1c8d8
changelog:
  - Update to latest upstream commit
  - Add patch to use correct shell completion locations
  - Run test suite
  - Add provides for ag and bundled uthash


author: Carl George <carl@george.computer> - 2.2.0^2020704.5a1c8d8-1
changelog:
  - Switch to caret versioning
  - Build against system uthash
  - Add patch for zsh completion of new flags


author: Karolina Surma <ksurma@redhat.com> - 3.3.6-1
changelog:
  - New upstream version 3.3.6
  Resolves: rhbz#1875293
  - Correct the license tag
  - Mark the lang files as %lang


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-6
changelog:
  - Backport upstream fix allowing Tigervnc to specify boolean valus in configuration
  - Revert removal of vncserver for F32 and F33


author: Peter Hutterer <peter.hutterer@redhat.com> 1.11.0-7
changelog:
  - Require xkbcomp directly, not xorg-x11-xkb-utils. The latter has had
    Provides xkbcomp for years.


author: Jakub Kadlcik <frostyx@email.cz> 0.6.12-1
changelog:
  - Remove obsolete Group tag (ignatenkobrain@fedoraproject.org)
  - Update URL and Source locations (awilliam@redhat.com)
  - Fix cheetah binary dependency (awilliam@redhat.com)
  - Correct and make less confusing the conditional Python macros (awilliam@redhat.com)
  - python-devel → python2-devel (ignatenkobrain@fedoraproject.org)
  - %{python_sitelib} → %{python2_sitelib} (ignatenkobrain@fedoraproject.org)
  - Remove %clean section (ignatenkobrain@fedoraproject.org)
  - Use python3 on EPEL8 (frostyx@email.cz)
  - Do not require obsoleted fedora-cert (msuchy@redhat.com)
  - Fix tito build --test --rpm -i Traceback on Fedora 31 (sisi.chlupova@gmail.com)
  - Enable GnuPG signed tags (bcl@redhat.com)
  - Fix #335 handle source tarballs with UTF8 characters in the name (awood@redhat.com)
  - Remove deprecated BuildRoot macros from spec (awood@redhat.com)
  - Releaser: Ensure rpmlintrc files are copied when releasing (ngompa13@gmail.com)
  - Releaser: Ensure SUSE-style changes file is copied when releasing (ngompa13@gmail.com)
  - Tagger: Add SUSETagger to support SUSE-style detached changelogs (ngompa13@gmail.com)
  - Add support for building with Git LFS. (ntillman@barracuda.com)
  - use built-in shutil.copy2 instead of cp command (mtinberg@wisc.edu)
  - Avoid double builds with mock (tdockendorf@osc.edu)
  - Fix rsync failures in dockerized tests, update for F27. (dgoodwin@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.13-1
changelog:
  - Add _copy_extra_sources() method to BuilderBase class.
    (daniel@versatushpc.com.br)
  - Rename HACKING to HACKING.md so it renders on GitHub (tadej.j@nez.si)
  - Modernize developer installation (tadej.j@nez.si)
  - make get_project_name more resilient (evgeni@golov.de)
  - Use pycodestyle pacakge when pep8 is not available (frostyx@email.cz)
  - Move to python-blessed (ekulik@redhat.com)
  - Fix the Source0 URL and prep phase (frostyx@email.cz)
  - run_command_print should behave similar to run_command (yuxzhu@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.14-1
changelog:
  - Fix #367 - copy_extra_sources for alternative builders (frostyx@email.cz)
  - Fix #243 - Add a list of projects using tito (frostyx@email.cz)
  - Fix #364 - Make yes or no input less aggressive (frostyx@email.cz)
  - Fix #358 - Move bugzilla code to a separate file (frostyx@email.cz)
  - Fix #158 - Separate .tito directory creation from tito.props file creation (frostyx@email.cz)
  - Fix #338 - Use os.makedirs instead of running mkdir -p command (frostyx@email.cz)
  - Fix #331 - Do not specify file digest algorithms (frostyx@email.cz)
  - #305 - Add a possibility to have full datetime entries in changelog (frostyx@email.cz)
  - #252 - Use template to generate file with __version__ (frostyx@email.cz)
  - #187 - Implement --version parameter (frostyx@email.cz)
  - mention the #tito irc channel in the readme (frostyx@email.cz)
  - Describe how to release tito (frostyx@email.cz)
  - Move tito under rpm-software-management namespace (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.15-1
changelog:
  - FedoraGitReleaser: upload extra sources to lookaside cache
    (praiskup@redhat.com)
  - When extra source file exist, then do not copy it
    (jhnidek@redhat.com)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.16-1
changelog:
  - Fix manpage generation on Fedora Rawhide (F34)
  - Ignore spectool warnings
  - Skip nonexisting extra sources
  - Fix copy_extra_sources for remote URLs
  - Use --no-rebuild-srpm for scratch builds in KojiReleaser


author: Jakub Kadlcik <frostyx@email.cz> 0.6.17-1
changelog:
  - Update releasers.conf (frostyx@email.cz)
  - Make build --verbose autocompletable (nmoumoul@redhat.com)
  - Add support for centpkg (wpoteat@redhat.com)
  - Remove extraneous extra newline (areese@users.noreply.github.com)
  - Add some documentation for tito.builder.SubmoduleAwareBuilder
    (areese999@apple.com)
  - Update based on feedback: 1. Remove PushDir, tito.common.chdir has the same
    functionality so use that instead. 2. Remove useless override of constructor,
    it's just extra noise. (areese999@apple.com)
  - 150 Add support for repos that use submodules. Allow though submodules are a
    contentious topic, this adds a submodule_aware_builder (areese999@apple.com)
  - doc: fix typo tito.props (subpop@users.noreply.github.com)
  - Update fedora releaser in .tito/releasers.conf (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6.18-1
changelog:
  - Document fetch_sources option in tito.props (frostyx@email.cz)
  - Rename fetch-sources to fetch_sources in the tito.props config
    (frostyx@email.cz)
  - Adding option to fetch sources (sisi.chlupova@gmail.com)
  - Change the master branch in releasers.conf to rawhide (frostyx@email.cz)


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-2
changelog:
  - License fixes.
  - *.so.* names fix
  - make_build fix
  - -doc fixes
  - check fixes
  - ldconfig call fix
  - compiler flags fixes


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-3
changelog:
  - Disabled only those tests that lock excessive numbers of pages (and will
    therefore fail on a system with default resource limits)
  - Disabled LTO, since it causes test failures on all file-based database tests
  - Added COPYING file in files section for -doc subpackage
  - Installing doc/ and api-doc/ subdirectories in -doc subpackage
  - Added example/ to -doc
  - Changed man pages wildcard from ..._*.1.* to ..._*.1*
  - Removed -lib/-libs mess
  - Excluded i686 arch


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-4
changelog:
  - 'Required: pkgconfig' removed from -devel
  - spec spaces/tabs resolved
  - Added CONTRIBUTING.md to -libs
  - examples/ moved from -doc to -devel
  - `excludearch i686` proven


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.15-1
changelog:
  - Version bump
  - Added gcc10 as required for el8
  - x32 enabled (#1920195)
  - 'make check' temporary disabled


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.8a-2
changelog:
  - Add patches from upstream git fixing a couple of issues which may have
    security implications (CVE-2021-3561)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1792264
    - oracle: turned off NUMA balancing
      resolves: rhbz#1782233
    - man: documented the possibility to apply multiple profiles
      resolves: rhbz#1794337
    - cpu-partitioning: disabled kernel.timer_migration
      resolves: rhbz#1797629
    - profiles: new profile optimize-serial-console
      resolves: rhbz#1840689
    - added support for a post-loaded profile
      resolves: rhbz#1798183
    - plugins: new irqbalance plugin
      resolves: rhbz#1784645
    - throughput-performance: added architecture specific tuning for Marvell ThunderX
      resolves: rhbz#1746961
    - throughput-performance: added architecture specific tuning for AMD
      resolves: rhbz#1746957
    - scheduler: added support for cgroups
      resolves: rhbz#1784648


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.0-2
changelog:
  - scheduler: fixed isolated_cores to work with cgroups
    related: rhbz#1784648
  - throughput-performance: fix performance regression on AMD platforms
    related: rhbz#1746957


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.15.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1874052
    - added plugin service for linux services control
      resolves: rhbz#1869991
    - scheduler: added default_irq_smp_affinity option
      resolves: rhbz#1896348
    - bootloader: skip boom managed BLS snippets
      resolves: rhbz#1901532
    - scheduler: added perf_process_fork option to enable processing of fork
      resolves: rhbz#1894610
    - scheduler: added perf_mmap_pages option to set perf buffer size
      resolves: rhbz#1890219
    - bootloader: fixed cmdline duplication with BLS and grub2-mkconfig
      resolves: rhbz#1777874


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1936426
    - realtime: "isolate_managed_irq=Y" should be mentioned in
      "/etc/tuned/realtime-virtual-*-variables.conf"
      resolves: rhbz#1817827
    - realtime: changed tuned default to "isolcpus=domain,managed_irq,X-Y"
      resolves: rhbz#1820626
    - applying a profile with multiple inheritance where parents include a common
      ancestor fails
      resolves: rhbz#1825882
    - failure in moving i40e IRQ threads to housekeeping CPUs from isolated CPUs
      resolves: rhbz#1933069
    - sort network devices before matching by regex
      resolves: rhbz#1939970
    - net: fixed traceback while adjusting the netdev queue count
      resolves: rhbz#1943291
    - net: fixed traceback if the first listed device returns netlink error
      resolves: rhbz#1944686
    - realtime: improve verification
      resolves: rhbz#1947858
    - bootloader: add support for the rpm-ostree
      resolves: rhbz#1950164
    - net: fixed traceback if a device channel contains n/a
      resolves: rhbz#1974071
    - mssql: updated the profile
      resolves: rhbz#1942733
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Peter Robinson <pbrobinson@fedoraproject.org> - 2021.04-1
changelog:
  - Update to 2021.04 GA
  - Fix DTB load check (rhbz 1946278)
  - Build Rockchip SPI support as idbloader.spi
  - Fixes for Rockchip devices
  - Build Turris Omnia for MMC/SPI/UART


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Andreas Schneider <asn@redhat.com> - 1.2.8-1
changelog:
  - Update to version 1.2.8
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.2.8/ChangeLog


author: Michal Schorm <mschorm@redhat.com> - 2.3.9-3
changelog:
  - Bump release after fix of the default configuration for MySQL driver
    comming from "mysql-connector-odbc" package


author: Robert Scheck <robert@fedoraproject.org> 5.0.7-2
changelog:
  - Remove build-time path from rpath (#1891370 #c1)
  - Apply Fedora system-wide crypto policy (#1891370 #c1)
  - License breakdown in spec file (#1891370 #c1)


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-1
changelog:
  - New upstream release 0.99.11
  - Intltool has been replaced by gettext
  - D-Bus configuration moved from sysconfdir to datadir
  - Systemd is creating /var/lib/upower, so 'ghost' the dir


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Jiri Kucera <jkucera@redhat.com> - 1.114-2
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1969918


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> - 2.3.6-1
changelog:
  - update to 2.3.6
  - new upstream location
  - use cmake and run tests
  - switch main package to archful per
    https://docs.fedoraproject.org/en-US/packaging-guidelines/#_do_not_use_noarch


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> - 3.1-1
changelog:
  - update to 3.1
  - include cmake import file
  - symlink headers in the previous location for compatibility


author: Vít Ondruch <vondruch@redhat.com> - 2.2.6-4
changelog:
  - Relax rubygem-net-ssh dependency.
    Resolves: rhbz#1805240
  - Fix FTBFS due to Ruby 2.7.
    Resolves: rhbz#1800230


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-1
changelog:
  - Update to Vagrant 2.2.9.
    Resolves: rhbz#1795460
  - Added support for podman via docker podman-docker wrapper
    (https://github.com/hashicorp/vagrant/pull/11356).


author: Pavel Valena <pvalena@redhat.com> - 2.2.9-2
changelog:
  - Move dependency load map_command_options
    for creating @box_extra_download_options to config/vm.rb.
    https://github.com/hashicorp/vagrant/pull/11609


author: Vít Ondruch <vondruch@redhat.com> - 2.2.9-5
changelog:
  - Fix Ruby 3.0 and rspec-mock 3.10.1 compatibility.
  - Relax net-ssh dependency.
  - Relax Ruby version restriction.
    Resolves: rhbz#1915671


author: Tadej Janež <tadej.j@nez.si> - 0.0.45-3
changelog:
  - Backport/Add useful features and fixes from upstream:
    - Allow customizing of virt-sysprep behaviour on package.
    - Use fetch to obtain environment variable value in package_domain.
    - Halt a domain before packaging it as a box to avoid hard to debug issues.


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.3043-1
changelog:
  - patchlevel 3043
  - enable libsodium encryption in Fedora
  - require glibc-gconv-extra on F35 and later


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.1.0-0.19.rc1
changelog:
  - Update to version 2.1.0-rc1
  - Drop patches accepted upstream:
    voms-nid-defined.patch, voms-gssapi-header.patch and voms-wsdl2h.patch
  - Use systemd unit file from source distribution


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.13-1
changelog:
  - update to 1.0.13 (#1792557)
  - drop obsolete patch and work-arounds
  - bundle wasm-c-api (only wasm.h used for build)
  - double test timeout again to prevent failures on armv7hl


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.15-1
changelog:
  - update to 1.0.15 (#1832317)
  - pathfix.py no longer required, upstream moved to python3-only
  - skip new failing tests in i686 and ppc64le (reported upstream)


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.17-1
changelog:
  - update to 1.0.17 (#1838384)
  - backport a fix for 32-bit arches
  - stop pretending it works on big-endian
  - use names and macros portable across Fedora and EPEL


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.19-1
changelog:
  - update to 1.0.19 (#1838384)
  - drop obsolete patches
  - adapt to https://www.fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds


author: Dominik Mierzejewski <rpm@greysector.net> 1.0.23-1
changelog:
  - update to 1.0.23 (#1934466)
  - drop obsolete patch
  - skip some failing tests on s390x and ppc64le (reported upstream)


author: Luiz Carvalho <lui@redhat.com> - 1.1.4-1
changelog:
  - New ``/config`` API endpoint to expose the application configuration
  - Retry sending STOMP message after a delay
  - Revert allow overriding krb_principal option for waiverdb-cli


author: Valerij Maljulin <vmaljuli@redhat.com> - 1.1.7-1
changelog:
  - Support for multiple LDAP queries was added
  - Calling ``start`` for the ``stomp.py`` connection was removed as it was deprecated
  - ``scenario`` field was added to the database


author: Lukas Holecek <hluk@email.cz> - 1.3.0-1
changelog:
  - A simpler permission configuration can be now used. New option
    ``PERMISSIONS`` uses glob expressions instead of a regular expression to
    verify the user is allowed to waive a test case. The configuration can be
    listed with :http:get:`/api/v1.0/permissions`. Additional GET parameter
    ``testcase`` can be used to filter the list by matching test case.
    ``PERMISSION_MAPPING`` is deprecated but still works if the new option is not
    defined.
  - Fixes possible disconnecting issue with older stomp.py library
    (https://github.com/jasonrbriggs/stomp.py/issues/323).


author: Nicolas Chauvet <kwizart@gmail.com> - 1.32.1910230-2.20200909gitb585d21
changelog:
  - Improve description
  - Add --with tests conditional for tests
  - Switch to cmake3
  - And ExcludeArch inherited from folly


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.32.1910230-1.20210128git6aec23c
changelog:
  - Bump git commit to include upstream fixes
  - Use system folly instead of bundling it
  - Default to shared library build
  - Use %cmake instead of %cmake3
  - Use %bcond for tests and turn off by default due to flakiness
  - Update BuildRequires and Requires


author: Brian C. Lane <bcl@redhat.com> - 35.1-1
changelog:
  - New release: 35.1 (bcl)
  - spec: Change release back to 1 (bcl)
  - spec: Move testify BuildRequires into fedora block (bcl)
  - vendor: Add vendored dependencies for RHEL (bcl)
  - tools: Add prepare-source.sh vendoring helper script (bcl)
  - Makefile: skip vendor directory for check target (bcl)
  - spec: Bump release to 2 (bcl)
  - spec: Fix BuildRequires for tests (bcl)
  - Makefile: Remove executable from bash completion (bcl)
  - Makefile: Only use GOBUILDFLAGS (bcl)
  - spec: Bump release to 2 (bcl)
  - spec: Add doc files (bcl)
  - spec: Add gpg signature verification (bcl)
  - spec: Use git-core instead of git (bcl)
  - spec: Set License to Apache 2.0 (bcl)
  - spec: Update Source urls with new project location (bcl)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 7.0.93-1
changelog:
  - Update to RC1 for Weston 8.0 (version 7.0.93)
  - Remove have_simple_dmabuf_drm_client variable
  - The executable weston-simple-dmabuf-drm is gone


author: dave@bevhost.com 20080615-13.2
changelog:
  - Added parameterized systemd unit file for client
  - Added more complete usage example to RELEASENOTES


author: dave@bevhost.com 20080615-23.1
changelog:
  - Update upstream from 13 to 23 including
  - bugfix close file descriptions on exec
  - bugfix warning suppression for YYDEBUG
  - better logging for Option 20
  - added more examples in documentation
  - enhancement now able to randomize interface IP


author: Hans de Goede <hdegoede@redhat.com> - 0-0.77.build20
changelog:
  - Stop replacing symlinks with dirs this breaks upgrades (rhbz 1806272)
  - Use fc-match to generate font file symlinks to future proof the package
    against future font file-path or name changes (rhbz 1806272)


author: Andy Mender <andymenderunix@fedoraproject.org> - 0-0.83.build21
changelog:
  - Unbundle Culmus fonts
  - Update to build21
  - Clean up patches
  - Point Source0 to GitHub release tarballs
  - Fix new issues with fonts
  - Use appdata and desktop file provided by upstream
  - Update records in %files section


author: Joe Doss <joe@solidadmin.com> - 1.0.20200510-1
changelog:
  - Update to 1.0.20200510
  - ipc: add support for openbsd kernel implementation
  - ipc: cleanup openbsd support
  - wg-quick: add support for openbsd kernel implementation
  - wg-quick: cleanup openbsd support
  - wg-quick: support dns search domains
  - Makefile: simplify silent cleaning
  - ipc: remove extra space
  - git: add gitattributes so tarball doesn't have gitignore files
  - terminal: specialize color_mode to stdout only
  - wg-quick: android: support application whitelist
  - systemd: add wg-quick.target


author: Joe Doss <joe@solidadmin.com> - 1.0.20200513-1
changelog:
  - Update to 1.0.20200513
  - Makefile: remember to install all systemd units
  - ipc: openbsd: switch to array ioctl interface


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Joe Doss <joe@solidadmin.com> - 1.0.20210424-1
changelog:
  - wg-quick: freebsd: check for socket using -S, not -f
  - wg-quick: freebsd: do not assume point-to-point interface flag
  - wg-quick: freebsd: use ifconfig for determining if interface is up
  - wg-quick: kill route monitor when loop terminates


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Major Hayden <major@mhtx.net> - 0.3-2
changelog:
  - Remove extension from archivename.
  - Use pkgconfig to find build requirements.
  - Remove post/postun scriptlets as they're no longer needed.


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.1.8-2
changelog:
  - Unretire package
  - Update URL
  - Install README as doc
  - Use the appropriate macro to install the license
  - Relax globbing for man pages
  - Convert specfile from tabs to spaces


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.2.0-1
changelog:
  - Update to 0.2.0
  - Drop versioned pipewire dependency: all supported Fedora releases have required version.


author: Michael Young <m.a.young@durham.ac.uk> - 4.14.0-14
changelog:
  - xenstore watch notifications lacking permission checks [XSA-115,
  	CVE-2020-29480] (#1908091)
  - Xenstore: new domains inheriting existing node permissions [XSA-322,
  	CVE-2020-29481] (#1908095)
  - Xenstore: wrong path length check [XSA-323, CVE-2020-29482] (#1908096)
  - Xenstore: guests can crash xenstored via watchs [XSA-324, CVE-2020-29484]
  	(#1908088)
  - Xenstore: guests can disturb domain cleanup [XSA-325, CVE-2020-29483]
  	(#1908087)
  - oxenstored memory leak in reset_watches [XSA-330, CVE-2020-29485]
  	(#1908000)
  - undue recursion in x86 HVM context switch code [XSA-348, CVE-2020-29566]
  	(#1908085)
  - oxenstored: node ownership can be changed by unprivileged clients
  	[XSA-352, CVE-2020-29486] (#1908003)
  - oxenstored: permissions not checked on root node [XSA-353, CVE-2020-29479]
  	(#1908002)
  - infinite loop when cleaning up IRQ vectors [XSA-356, CVE-2020-29567]
  	(#1907932)
  - FIFO event channels control block related ordering [XSA-358,
  	CVE-2020-29570] (#1907931)
  - FIFO event channels control structure ordering [XSA-359, CVE-2020-29571]
  	(#1908089)


author: Michael Young <m.a.young@durham.ac.uk> - 4.14.1-1
changelog:
  - update to 4.14.1
    adjust xen.canonicalize.patch
    remove or adjust patches now included or superceded upstream
    renumber patches


author: Michael Young <m.a.young@durham.ac.uk> - 4.14.1-4
changelog:
  - backport upstream zstd dom0 and guest patches
  - add libzstd-devel BuildRequires
  - add weak dependency on grub modules to improve initial boot setup


author: Michael Young <m.a.young@durham.ac.uk> - 4.14.1-5
changelog:
  - Linux: display frontend "be-alloc" mode is unsupported (comment only)
  	[XSA-363, CVE-2021-26934] (#1929549)
  - arm: The cache may not be cleaned for newly allocated scrubbed pages
  	[XSA-364, CVE-2021-26933] (#1929547)


author: Michael Young <m.a.young@durham.ac.uk> - 4.14.2-1
changelog:
  - update to 4.14.2
    remove or adjust patch content now included or superceded upstream
  - re-copy grub modules if they have changed


author: Michael Young <m.a.young@durham.ac.uk> - 4.14.2-2
changelog:
  - xen/arm: Boot modules are not scrubbed [XSA-372, CVE-2021-28693]
  - inappropriate x86 IOMMU timeout detection / handling
  	[XSA-373, CVE-2021-28692]
  - Speculative Code Store Bypass [XSA-375, CVE-2021-0089]
  - x86: TSX Async Abort protections not restored after S3
  	[XSA-377, CVE-2021-28690]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.6-3
changelog:
  - Adjust whitespace and ordering to personal preference
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Slightly nicer description
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Greg Hellings <greg.hellings@gmail.com> - 4.2.1-1
changelog:
  - Upstream release 4.2.1
  - Remove patches
  - Remove GConf2 and libgsf dependencies
  - Removed Xiphos.ogg doc
  - Added Italian help translation


author: Peter Hutterer <peter.hutterer@redhat.com> 2.32-1
changelog:
  - xkeyboard-config 2.32
  - build with meson now
  - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev
    these days.


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-29
changelog:
  - BuildRequire mkfontscale now that it's separated out from
    xorg-x11-font-utils (#1938069)
  - Use the make_build rpm macro


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-30
changelog:
  - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro
    doing the same thing, removing our runtime reliance on
    xorg-x11-font-utils (#1938074)


author: Peter Hutterer <peter.hutterer@redhat.com> 7.5-31
changelog:
  - Drop the daewoo-misc fonts, they have no upstream license terms and may be
    proprietary (#1952723)


author: Peter Hutterer <peter.hutterer@redhat.com> 2021.2-1
changelog:
  - xorgproto 2021.2
  - Remove two header files that belong to libX11/libXv and are now part of
    the --enable-legacy build only


author: Peter Hutterer <peter.hutterer@redhat.com> 2021.3-1
changelog:
  - xorgproto 2021.3 (no changes except the tarball no longer fails with meson)
  - clean up the gitignore file


author: Olivier Fourdan <ofourdan@redhat.com> - 21.0.99.902-1
changelog:
  - xwayland 21.0.99.902
  - Remove xdmcp, udev, udev_kms build options
  - Stop overriding the vendor name, same as xorg-x11-server


author: Peter Hutterer <peter.hutterer@redhat.com> 1.1.1-3
changelog:
  - Restore Recommends: cpp lost in the package split
    xorg-x11-server-utils used mcpp but that one is unmaintained and broken in
    some cases, let's use the standard cpp instead.


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.14-2
changelog:
  - Bump up to 0.9.14
  - Add a set of patches to deal with new GCC warnings/errors
  - Do not emit warning on failed architecture detection
  - Exclude s390x arch for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:5.45-3
changelog:
  - Fix up gcc -Wstringop or -Wformat-overflow warnings
  - Make xscreensaver logo or ok button appear on lock screen


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.00-2
changelog:
  - xscreensaver-text use en_US locale for lscpu (bug 1956089)
  - dialog.c: window_init: show more version string (bug 1956262)
  - Exclude xfce4-screensaver for xscreensaver-autostart (bug 1955993)
  - fontglide.c: pick_font_1 exclude substitution rectagle glyph


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1:6.01-2
changelog:
  - main_loop: consistently check init file after some activitity occurred
  - main_loop: check init file saver_mode (bug 1978971)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.0.2-1
changelog:
  - Unretire package
  - Switch source to GitHub and update to 1.0.2
  - Use cmake instead of scons
  - Install systemd user service
  - Misc specfile updates


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.7.4-1
changelog:
  - Update to version 0.7.4
  - Enable runtime detection of sse2/avx2/avx512 on intel architectures
  - Fix compiler warning for 32 bit architectures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.8.0-1
changelog:
  - Update to version 0.8.0
  - Drop patches xxhash-compiler-warning-32-bit.patch (accepted upstream)
    and xxhash-pkgconfig.patch (issue fixed upstream)
  - Fix empty version in .pc file


author: Michal Ambroz <rebus at, seznam.cz> - 3.11.0-1
changelog:
  - bump to 3.11.0 release (#1760678)
  - BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
  - BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
  - BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
  - BUGFIX: Memory leak while attaching to a process fails (upstream #1070)


author: Bob Hepple <bob.hepple@gmail.com> - 0.1.9-0.1.20200405.git.9c3a4e7
changelog:
  - Changes per RHBZ#1807753 - 
  Requires(post): systemd 
  Requires(preun): systemd 
  Requires(postun): systemd 
   and ldconfig are no longer required


author: Bob Hepple <bob.hepple@gmail.com> - 0.2.0-1
changelog:
  - new version
  - upstream has dropped the idea of -devel libraries so we are only
    distributing the regular package now; also libevdevPlus-devel and
    libuInputPlus-devel are no longer needed as they are now compiled
    in.


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.20-1
changelog:
  - New upstream version
    https://github.com/coreos/zincati/releases/tag/v0.0.20
  - Temporarily use bundled crates from vendor tarball


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.21-1
changelog:
  - New upstream version
    https://github.com/coreos/zincati/releases/tag/v0.0.21
  - Turn off the usage of bundled crates, all in Fedora now


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.22-1
changelog:
  - New upstream version
    https://github.com/coreos/zincati/releases/tag/v0.0.22
  - Temporarily use bundled crates from vendor tarball


