# changelog

author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-1
changelog:
  - Version 0.5.0
  - New "zip" handler
  - Improved behaviour for zip/jar handlers when $SOURCE_DATE_EPOCH is not
    set


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Than Ngo <than@redhat.com> - 143.0.13^chromium143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192 [rhbz#2427842]
  - * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for
    x86_64/aarch64
  - Enable build for epel10.1


author: Than Ngo <than@redhat.com> - 144.0.6^chromium144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
  - * CVE-2026-0899: Out of bounds memory access in V8
  - * CVE-2026-0900: Inappropriate implementation in V8
  - * CVE-2026-0901: Inappropriate implementation in Blink
  - * CVE-2026-0902: Inappropriate implementation in V8
  - * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
  - * CVE-2026-0904: Incorrect security UI in Digital Credentials
  - * CVE-2026-0905: Insufficient policy enforcement in Network
  - * CVE-2026-0906: Incorrect security UI
  - * CVE-2026-0907: Incorrect security UI in Split View
  - * CVE-2026-0908: Use after free in ANGLE
  - Hoshino Lina: Update to cef-144.0.6+g5f7e671 (rhbz#2431156)


author: Than Ngo <than@redhat.com> - 143.0.7499.146-1
changelog:
  - Update to 143.0.7499.146
    * High CVE-2025-14765: Use after free in WebGPU
    * High CVE-2025-14766: Out of bounds read and write in V8
  - Force dark mode when auto dark mode web content is on
  - Remove omnibox-next-Improve-cutout-mouse-handling-for-Wayla patch, as it's merged


author: Than Ngo <than@redhat.com> - 143.0.7499.192-1
changelog:
  - Update to 143.0.7499.192
    * High CVE-2026-0628: Insufficient policy enforcement in WebView tag
  - Fix rhbz#2425338, Enable control flow integrity support for x86_64/aarch64
  - Enable build for epel10.1


author: Than Ngo <than@redhat.com> - 144.0.7559.59-1
changelog:
  - Update to 144.0.7559.59
    * CVE-2026-0899: Out of bounds memory access in V8
    * CVE-2026-0900: Inappropriate implementation in V8
    * CVE-2026-0901: Inappropriate implementation in Blink
    * CVE-2026-0902: Inappropriate implementation in V8
    * CVE-2026-0903: Insufficient validation of untrusted input in Downloads
    * CVE-2026-0904: Incorrect security UI in Digital Credentials
    * CVE-2026-0905: Insufficient policy enforcement in Network
    * CVE-2026-0906: Incorrect security UI
    * CVE-2026-0907: Incorrect security UI in Split View
    * CVE-2026-0908: Use after free in ANGLE


author: Than Ngo <than@redhat.com> - 144.0.7559.132-1
changelog:
  - Update to 144.0.7559.132
    * CVE-2026-1861: Heap buffer overflow in libvpx
    * CVE-2026-1862: Type Confusion in V8
  - Add BR on esbuild
  - Disable devtool bundle
  - Update scripts for downloading the source


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.10-1
changelog:
  - Update to release v1.32.10
  - Resolves: rhbz#2407593, rhbz#2407864, rhbz#2408140, rhbz#2408571
  - Resolves: rhbz#2408638, rhbz#2408701, rhbz#2409048, rhbz#2409331
  - Resolves: rhbz#2409610, rhbz#2409996, rhbz#2410283, rhbz#2410561
  - Resolves: rhbz#2410928, rhbz#2411196, rhbz#2411459, rhbz#2412524
  - Resolves: rhbz#2412676, rhbz#2412756


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.11-2
changelog:
  - Remove unneeded completions generation
  - Removes call to compiled crio binary to generate completions output.
  - Upstream release already contains generated content


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.12-5
changelog:
  - Update template with binutils fix
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2428281 for binutils
    update for F44 and F45 (rawhide). This breaks the build for CRI-O.
  - This is fixed with inclusion of -Wl,-z,notext.
  - Cleaned up confusing syntax (service_name).


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.13-1
changelog:
  - Update to release v1.32.13
  - Final v1.32 release
  - Upstream fix
  - Fix for updated binutils config in rawhide (f44, f45) that blocks cri-o
    build


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release 1.33.6
  - Resolves: rhbz#2407594, rhbz#2407865, rhbz#2408141, rhbz#2408575
  - Resolves: rhbz#2408639, rhbz#2408702, rhbz#2409049, rhbz#2409332
  - Resolves: rhbz#2409611, rhbz#2409997, rhbz#2410284, rhbz#2410562
  - Resolves: rhbz#2410929, rhbz#2411197, rhbz#2411460, rhbz#2412525
  - Resolves: rhbz#2412677, rhbz#2412757


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.9-1
changelog:
  - Update to release v1.33.9
  - No changes from upstream
  - Rawhide (f44, f45) contains an update to binutils which breaks cri-o
    build. Fixed by change to template


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release 1.34.2
  - Resolves: rhbz#2407595, rhbz#2407866, rhbz#2408142, rhbz#2408577
  - Resolves: rhbz#2408640, rhbz#2408703, rhbz#2409050, rhbz#2409333
  - Resolves: rhbz#2409612, rhbz#2409998, rhbz#2410285, rhbz#2410563
  - Resolves: rhbz#2410930, rhbz#2411198, rhbz#2411461, rhbz#2412526
  - Resolves: rhbz#2412678, rhbz#2412758


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-2
changelog:
  - Remove potential race condition
  - Removes unneeded calls to compiled crio binary that appear to cause an
    occasional race condition on ppc64le koji builders


author: Marek Blaha <mblaha@redhat.com> - 5.2.14.0-2
changelog:
  - Remove incorrect dnfdaemon output parameter names (https://github.com/rpm-software-management/dnf5/issues/2317)


author: Petr Menšík <pemensik@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0
  - Report statistics of unexpected messages
  - Datafiles converted to \DDD similar to other DNS tools, RFC 1035 format.
  - statistics can be printed as json stream with -j parameter


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.1-1
changelog:
  - Update to 2.7.1
  - Add patches to fix the build
  - Add extra source for build-only dxbc-spirv submodule


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Update to 3.2.0 (fedora#2395772)
  - Add xrizer subpackage for build deps management (fedora#2395971)


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Ondrej Holy <oholy@redhat.com> - 2:3.21.0-1
changelog:
  - Update to 3.21.0 (CVE-2026-23530, CVE-2026-23531, CVE-2026-23532,
    CVE-2026-23533, CVE-2026-23534, CVE-2026-23732, CVE-2026-23883,
    CVE-2026-23884)
    Resolves: rhbz#2430928


author: Ondrej Holy <oholy@redhat.com> - 2:3.22.0-1
changelog:
  - Update to 3.22.0 (CVE-2026-23948, CVE-2026-24682, CVE-2026-24683,
    CVE-2026-24676, CVE-2026-24677, CVE-2026-24678, CVE-2026-24684,
    CVE-2026-24679, CVE-2026-24681, CVE-2026-24675, CVE-2026-24491,
    CVE-2026-24680)
    Resolves: rhbz#2433803


author: Clemens Lang <cllang@redhat.com> - 2.4.9-1
changelog:
  - New upstream release 2.4.9
  - Fixes CVE-2025-68973 (https://gpg.fail/memcpy)
  - Fixes https://gpg.fail/sha1
  - Fixes https://gpg.fail/detached


author: Jerry James <loganjerry@gmail.com> - 0.0.14-8
changelog:
  - Minor packaging enhancements
  - BR gpgverify instead of gnupg2
  - Add a VCS field
  - Run pdflatex in nonstop mode


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Packit <hello@packit.dev> - 44-1
changelog:
  Changes with 44
  ----------------
    - [RFC] main: print pretty json manifest (#414)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: document details about  {,bib}cmd{ManifestFromCobra,Build} (#402)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - bib: fix anaconda-iso mTLS key extraction (#404)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Ondřej Budai
    - bib: small cleanups (#400)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cmd: move `awscloudNewUploader` back into upload.go (#397)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - cmd: remove bibupload as it was never exposed to the public (#405)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - data: install tmpfiles.d/image-builder.conf to auto-clean cache (#418)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: error when image-builder is used to create anaconda-iso (#401)
      - Author: Michael Vogt, Reviewers: Brian C. Lane, Lukáš Zapletal
    - test: add rhel specific tests (#403)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 45-1
changelog:
  Changes with 45
  ----------------
    - deps: bump images to 0.231.0 (#425)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2026-01-05


author: Packit <hello@packit.dev> - 47-1
changelog:
  Changes with 47
  ----------------
    - Revert "spec: Use gosource macro for Source0" (#433)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza

  — Somewhere on the Internet, 2026-01-16


author: Packit <hello@packit.dev> - 48-1
changelog:
  Changes with 48
  ----------------
    - Add pxe-tar-xz to bib types and add boot tests for f43, stream9, and stream10 (#436)
      - Author: Brian C. Lane, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support rootless bootc-image-builder (#445)
      - Author: Alexander Larsson, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: fix constant format string (#438)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - tests: Fix bootc pxe testing (#439)
      - Author: Brian C. Lane, Reviewers: Simon de Vlieger

  — Somewhere on the Internet, 2026-02-04


author: Mikhail Medvedev 1.4.5-1
changelog:
  - Fix: Incorrect block/page size after first read procedure
  - Fix: Incorrect reading/writing I2C low speed chips
  - Added support for MXIC MX25V8035F
  - Added I2C bus speed combobox to the main form


author: Mikhail Medvedev 1.5.1-1
changelog:
  - Fix: Incorrect install dir for udev while cross compiling
  - Added form for working with security registers for SPI NOR flash memory chips


author: Mikhail Medvedev 1.5.2-1
changelog:
  - Fix: Memory leaks
  - Fix: Gigadevice status registers write error
  - Added new SPI chip sizes
  - Added Fidelix, Zetta, MXIC OTP algorithm
  - Added support for new Boya, Winbond chips


author: Mikhail Medvedev 1.5.3-1
changelog:
  - Last version of QHexEdit used
  - Hex-functions optimised
  - Added support GIANTEC, DOSILICON NOR FLASH chips
  - Fix: incorrect uninstall script
  - Fix: i2C 128K size is repeated twice
  - Fix: error calculating file size


author: Mikhail Medvedev 1.6.1-1
changelog:
  - Add new feature: compare files
  - Add new feature: fill test array
  - Fix: when the page size is changed, the buffer is cleared
  - Fix: the code is executed twice and the code slows down the display of the interface


author: Mikhail Medvedev 1.6.2-1
changelog:
  - Fix: program crashed if security registers was less than 256 bytes
  - Fix: Information in the status bar disappears when hovering over a menu
  - Added comparison of INTEL HEX and ASUS CAP with other files
  - Added close and minimise buttons for subordinate forms
  - New chips added to database
  - Chip information form code optimized


author: Mikhail Medvedev 1.7.1-1
changelog:
  - Fix: pressing the Stop key did not stop auto operations
  - Added support for SPI NAND flash
  - Added traditional chinese translation
  - New chips added to database


author: Mikhail Medvedev 1.7.2-1
changelog:
  - Fix: NAND Flash information form freeze
  - Added new images for CH341A v1.7    
  - Added programmer type menu
  - Added support for the AT24CM02 chip


author: Mikhail Medvedev 1.7.3-1
changelog:
  - Fix: Incorrect HexEdit size when starting the program
  - Added: saving program settings to an ini file


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.7.10-1
changelog:
  - Update to 2.7.10 rhbz#2349308
  - Use gcc-toolset only for EL8 https://developers.redhat.com/articles/2024/10/15/rest-peace-gcc-toolset-and-gnu-debugger
  - Workaround issue #11813 depending on glibc-langpack-en and setting LC_ALL
  - Set KEEPASSXC_BUILD_TYPE to Release
  - Drop unused WITH_XC_KEESHARE_SECURE
  - Drop dependency on ykpers-devel as it's not required since 2.7.0 pr#6654
  - Simplify minizip dependency logic


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.1-0]
changelog:
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.19 cycle (Justin M. Forbes)
  - add libasan-static and libubsan as BR for selftests (Thorsten Leemhuis)
  - add liburing-devel as BR for selftests (Thorsten Leemhuis)
  - add a few optional BRs for perf (Thorsten Leemhuis)
  - Linux v6.18.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.3-0]
changelog:
  - Config update due to stable patches (Justin M. Forbes)
  - wifi: iwlwifi: Fix firmware version handling (Ville Syrjälä)
  - Linux v6.18.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.5-0]
changelog:
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - Linux v6.18.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.18.6-0]
changelog:
  - Conifg update for 6.18.6 backports (Justin M. Forbes)
  - fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Backport of Intel ISH HID patches to support sensors on Lenovo platforms (Vishnu Sankar) [2428677]
  - Linux v6.18.6


author: Augusto Caringi <acaringi@redhat.com> [6.18.9-0]
changelog:
  - Add a couple of bzs to be fixed with the 6.18.9 build (Justin M. Forbes)
  - media: ipu-bridge: Add DMI quirk for Dell XPS laptops with upside down sensors (Hans de Goede)
  - media: ov02c10: Remove unnecessary hflip and vflip pointers (Hans de Goede)
  - media: ov02c10: Fix the horizontal flip control (Hans de Goede)
  - media: ov02c10: Adjust x-win/y-win when changing flipping to preserve bayer-pattern (Hans de Goede)
  - media: ov02c10: Fix bayer-pattern change after default vflip change (Hans de Goede)
  - media: ov02c10: Support hflip and vflip (Sebastian Reichel)
  - media: ov02c10: Fix default vertical flip (Sebastian Reichel)
  - Linux v6.18.9


author: Karel Zak <kzak@redhat.com> - 2.40.4-9
changelog:
  - wall: Always use utmp as a fallback [BZ#2283049]
  - clean up the patches section in the spec file
  - re-sync patches with Git


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-2
changelog:
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.1-3
changelog:
  - cleanups and fixes
  - remove RHEL 7 compatibility
  - add RHEL 9 compatibility and EOL comments
  - restore RHEL 8 compatibility


author: Felix Kaechele <felix@kaechele.ca> - 2:1.28.2-1
changelog:
  - Update to 1.28.2
  - fixes CVE-2026-1642
  - move log directory to nginx-filesystem subpackage (PR#20)
  - delete Maxim Dounin's key, it's no longer listed on the nginx website


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.99.1-13
changelog:
  - Adjust build constraints to better avoid “too many open files”
  - Encode more customization in rust2rpm.toml


author: John Wolfe <john.wolfe@broadcom.com> - 12.4.0-1
changelog:
  - Package a new upstream version of open-vm-tools-12.4.0-23259341.
    - A number of Coverity reported issues have been addressed.


author: Packit <hello@packit.dev> - 147-1
changelog:
  Changes with 147
  ----------------
    * GH: remove the PR template (#4787)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger
    * Update snapshots to 20250730 (#4800)
      * Author: SchutzBot, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * chore: bump dependencies via gobump (#4803)
      * Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    * cloudapi: new image type: azure-sapapps-rhui [HMS-8738] (#4790)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * cloudapi: use distrofactory to get rhel-9.3 (#4789)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Tomáš Hozza
    * deps: update sentry dependency (#4771)
      * Author: Lukáš Zapletal, Reviewers: Simon de Vlieger, Tomáš Hozza
    * go.mod: update osbuild/images to v0.168.0 (#4799)
      * Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Simon de Vlieger
    * jobqueue: handle escaped null bytes in postgres (HMS-8885) (#4779)
      * Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * many: fix various linter warnings (#4792)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    * many: switch to osbuild/images/pkg/upload for azure (HMS-8940) (#4798)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    * schutzbot/update_github_status.sh: fix GA pipeline status reporting (#4786)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    * templates/packer: avoid errors in worker-executor startup (#4788)
      * Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    * test/repositories: use CDN repos for 9.5, 9.6 and 10.0 (#4783)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Tomáš Koscielniak
    * workflows: use correct token for gobump (#4795)
      * Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-08-06


author: Packit <hello@packit.dev> - 150-1
changelog:
  Changes with 150
  ----------------
    - Test/regression-old-worker-new-composer: make the test case more robust (#4839)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - Update snapshots to 20250825 (#4840)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - test/cases/rhel-upgrade: increase virt-install memory (#4843)
      - Author: Sanne Raymaekers, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-03


author: Packit <hello@packit.dev> - 151-1
changelog:
  Changes with 151
  ----------------
    - Bump distro aliased for RHEL 9 and 10 (HMS-9174) (#4854)
      - Author: Tomáš Hozza, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Sanne Raymaekers
    - Dockerfile-ubi-packer: do not use quay.io/app-sre/packer image (HMS-9246) (#4848)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - Many: refactor 'osbuild-depsolve-dnf' mocking in tests to support refactoring in `osbuild/images` (HMS-9355) (#4862)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Packer: install 'rsync' in the ubi-packer container (HMS-9287) (#4850)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Sanne Raymaekers
    - build(deps): bump actions/github-script from 7 to 8 (#4852)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - gha: split gobump and images (#4859)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - go.mod: update osbuild/images to 0.190.0 (`dnfjson` -> `depsolvednf` rename) (HMS-9365) (#4865)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update osbuild/images to v0.188.0 (#4849)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - templates/packer: handle vector error (#4866)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Tomáš Hozza
    - test: run older CIV tag on nightlies (#4861)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Simon de Vlieger
    - worker & executor: use vector to forward logs from executor to worker (HMS-9304) (#4858)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-17


author: Packit <hello@packit.dev> - 152-1
changelog:
  Changes with 152
  ----------------
    - Remove internal/runner/ (#4874)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Gianluca Zuccarelli, Lukáš Zapletal, Michael Vogt
    - Weldr API endpoints & store: don't use `rpmmd` package structs for serialization (HMS-9376) (#4868)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Brian C. Lane, Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4872)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Sanne Raymaekers
    - cloudapi/v2: recover from panics in serializeManifest (HMS-9379) (#4869)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller
    - go.mod: update osbuild/images to v0.198.0 (HMS-9444) (#4877)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Tomáš Hozza
    - go.mod: update to v0.197.0 (#4873)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - templates/packer/worker: remove unbound variable (#4871)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Gianluca Zuccarelli, Tomáš Hozza
    - worker/executor: drop cloudwatch logging from executor (HMS-9304) (#4870)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 153-1
changelog:
  Changes with 153
  ----------------
    - CloudAPI: fix `/compose/{id}/manifests` endpoint behavior on manifest generation errors (HMS-9501) (#4885)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Michael Vogt
    - Many: adjust code to unified rpmmd.Package struct (HMS-9504) (#4889)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Test/api/gcp: set root partition size to at least 4 GiB (#4879)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Sanne Raymaekers, Simon de Vlieger
    - Update snapshots to 20251001 (#4880)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - build(deps): bump actions/setup-go from 5 to 6 (#4853)
      - Author: dependabot[bot], Reviewers: Simon de Vlieger, Tomáš Hozza
    - chore: bump dependencies via gobump (#4891)
      - Author: SchutzBot, Reviewers: Simon de Vlieger, Tomáš Hozza
    - cloudapi/v2: add pxe-tar-xz image type (HMS-9472) (#4882)
      - Author: Lucas Garfield, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - executor: remove internet access entirely (HMS-9304) (#4884)
      - Author: Sanne Raymaekers, Reviewers: Brian C. Lane, Tomáš Hozza
    - go.mod: update osbuild/images to v0.202.0 (#4886)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - internal/cloudapi: rename OverrideSerializeManifestFunc for consistency (#4887)
      - Author: Tomáš Hozza, Reviewers: Michael Vogt, Simon de Vlieger
    - internal/worker: delete unneeded compatibility layers (HMS-9455) (#4875)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 154-1
changelog:
  Changes with 154
  ----------------
    - CI: run testing on RHEL 9.8 and 10.2 nightly (HMS-9226) (#4893)
      - Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - Update snapshots to 20251023 (#4905)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - chore: bump dependencies via gobump (#4895)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - cloudapi: add new dnf customizations [HMS-9335] (#4899)
      - Author: Achilleas Koutsou, Reviewers: Brian C. Lane, Tomáš Hozza
    - cloudapi: split out resolver job enqueueing into a separate function (#4894)
      - Author: Achilleas Koutsou, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - fix worker AMI builds by not running mock as root (#4902)
      - Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers
    - gitlab: only update github status at the end of the pipeline(s) (#4900)
      - Author: Achilleas Koutsou, Reviewers: Anna Vítová, Brian C. Lane, Sanne Raymaekers
    - go.mod: update images to v0.209.0 (#4901)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - go.mod: update osbuild/images to v0.208.0 (#4898)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Ondřej Budai
    - test/cases/usbi-wsl: delete azure resources in order (#4896)
      - Author: Sanne Raymaekers, Reviewers: Simon de Vlieger, Tomáš Hozza
    - worker: support partial results (HMS-9343) (#4897)
      - Author: Sanne Raymaekers, Reviewers: Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 155-1
changelog:
  Changes with 155
  ----------------
    - build(deps): bump actions/upload-artifact from 4 to 5 (#4906)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Sanne Raymaekers
    - chore: bump dependencies via gobump (#4907)
      - Author: SchutzBot, Reviewers: Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#4912)
      - Author: SchutzBot, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - cloudapi/v2: add netinst image type (HMS-9566) (#4913)
      - Author: Tomáš Koscielniak, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - schutzbot/terraform: bump terraform sha (#4909)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Florian Schüller, Lukáš Zapletal, Simon de Vlieger
    - weldr,cloudapi: tweaks around the reporegistry handling (#4910)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane, Lukáš Zapletal

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 158-1
changelog:
  Changes with 158
  ----------------
    - Add new job type for generating manifests using image-builder-cli [HMS-9049] (#4904)
      - Author: Achilleas Koutsou, Reviewers: Nobody
    - chore(deps): update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 docker digest to 90c2b32 (#4937)
      - Author: {}, Reviewers: Florian Schüller, Sanne Raymaekers
    - go.mod: update osbuild/images to v0.230.0 (#4964)
      - Author: Achilleas Koutsou, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal
    - konflux: osbuild-composer use tasks with valid cosign (HMS-9721) (#4956)
      - Author: Florian Schüller, Reviewers: Sanne Raymaekers, Tomáš Hozza
    - osbuild-worker-executor: ignore item order in tarball in test (#4965)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Michael Vogt
    - schutzfile: pin osbuild to version ignoring PQC keys (#4968)
      - Author: Ondřej Budai, Reviewers: Simon Steinbeiß
    - templates/openshift: switch to konflux images (HMS-9722) (#4957)
      - Author: Sanne Raymaekers, Reviewers: Nobody
    - test/{api,ubi}: pin cloud-tools to an older version (#4966)
      - Author: Ondřej Budai, Reviewers: Tomáš Hozza
    - worker: support separate set of s3 credentials (#4958)
      - Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli, Lukáš Zapletal, Tomáš Hozza

  — Somewhere on the Internet, 2025-12-24


author: Packit <hello@packit.dev> - 160-1
changelog:
  Changes with 160
  ----------------
    - Update snapshots to 20260106 (#4976)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore(deps): update konflux references (#4978)
      - Author: {}, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - chore: bump dependencies via gobump (#4979)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - ci: gobump blueprint separately (#4973)
      - Author: Lukáš Zapletal, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2026-01-21


author: Packit <hello@packit.dev> - 161-1
changelog:
  Changes with 161
  ----------------
    - Update snapshots to 20260118 (#4985)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - chore: bump dependencies via gobump (#4988)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - packit: Build RHEL10 RPMs for x86 and ARM in COPR (#4982)
      - Author: Simon Steinbeiß, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - worker: add job to generate bootc manifests [HMS-10006] (#4977)
      - Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza

  — Somewhere on the Internet, 2026-02-04


author: Remi Collet <remi@remirepo.net> - 1.19.4-1
changelog:
  - update to 1.19.4
  - raise dependency on libbson and libmongc 1.27.6
  - raise dependency on libmongocrypt 1.10.1


author: Remi Collet <remi@remirepo.net> - 1.20.0-1
changelog:
  - update to 1.20.0
  - raise dependency on libbson and libmongc 1.28.0
  - raise dependency on libmongocrypt 1.11.0


author: Remi Collet <remi@remirepo.net> - 1.21.0-1
changelog:
  - update to 1.21.0
  - raise dependency on PHP 8.1
  - raise dependency on libbson and libmongc 1.30
  - raise dependency on libmongocrypt 1.12
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.15-46
changelog:
  - Add RPM Provides for python3.6-libs, python3.6-devel, python3.6-idle, python3.6-tkinter, python3.6-test


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 0.4.0-1
changelog:
  - Update to v0.4.0
  - The request_timeout_secs configuration has been replaced by
    total_request_timeout_secs and sigul_request_timeout_secs. The total
    request timeout is the amount of time before an individual request is
    terminated. The sigul request timeout is the amount of time the bridge
    will wait for a Sigul request to succeed before canceling and retrying.


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.30-2
changelog:
  - Rebuilt with jsonwebtoken patched for CVE-2026-25537
  - Fixes RHBZ#2437472; fixes RHBZ#2437467; fixes RHBZ#2437461


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.1-6
changelog:
  - adjust file locations now /usr/sbin is a symlink to /usr/bin
  - remove debugedit fix as no longer needed


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-6
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
          CVE-2025-58147, CVE-2025-58148]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.4-2
changelog:
  x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150]
  	(#2434045)
    x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]
  	(#2434047)


author: Luya Tshimbalanga <luya@fedoraproject.org> - 1.2.6-1
changelog:
  - "Update to 1.2.6" * Fixed compass outline drawing * Exposed selected text
    to the windowing system Details on [release
    notes](https://github.com/xournalpp/xournalpp/releases/tag/v1.2.6)


