# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 14:3.7-4
changelog:
  - Fix arpwatch/arpsnmp permissions in %install, not in %files
  - Works around an issue extracting debuginfo


author: Jakub Kadlcik <frostyx@email.cz> 0.67-1
changelog:
  - Add loggs to python-backoff decorator
  - Set git.safe_directory as repo rootdir
  - Explain how to reproduce the build locally
  - Retry only git clone without checkouting
  - Use git checkout instead of switch but ignore files


author: Pavel Raiskup <praiskup@redhat.com> 0.69-1
changelog:
  - require python-specfile (in new enough) version, and use it for specfile
    parsing instead of parsing the metadata from SRPMs
  - make sure we have (also) the latest DNF5 on builders
  - override disttag macro to None
  - make sure detected epoch is int() or None
  - build RPMs in one Mock step, instead of two (SRPM and then RPM)
  - use Mock's bootstrap_image_ready for the custom build (Mock 5.0+ required)
  - store review.json generated by fedora-review into the result directory
  - better/more verbose logging in the results.json generator
  - drop dependency on simplejson
  - repeatedly try to download files from lookaside cache
  - moving the package NEVRA parsing to from backend here into copr-rpmbuild
  - priority=X support added for the Copr repository itself
  - query exclusivearch and excludearch from the specfile, and store into results.json


author: Pavel Raiskup <praiskup@redhat.com> 0.70-1
changelog:
  - collect and compress fedora-review logs after run
  - use Copr custom macros when parsing the specfile


author: Pavel Raiskup <praiskup@redhat.com> 0.71-1
changelog:
  - don't set bootstrap_image_ready for rawhide
  - no Jinja-vars in config_opts keys (mock-core-configs 40.2 compat)
  - allow user SSH to builders
  - fix copr-rpmbuild --dump-configs
  - install copr-distgit-client with copr-rpmbuild


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 1.0-1
changelog:
  - Specify snippets to mock config via copr-rpmbuild config file
  - Increase the custom method timeout to 90 minutes
  - Use new dist-git-client instead of copr one
  - Add diff.txt file for fedora review
  - When `copr-builder release` set timestamp 0


author: Jakub Kadlcik <frostyx@email.cz> 1.1-1
changelog:
  - Make_srpmbuild, set recursive safe.directory
  - Activate Red Hat subscription on demand
  - Drop six usage (this is a Python 3 only package)
  - Add tooling for "safer" RH subscription


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-4
changelog:
  - Do not run exhaustive tests by default
  - We can always manually run scratch builds with them enabled, especially
    after significant upstream changes.


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Miroslav Suchý <msuchy@redhat.com> 1.56-1
changelog:
  - add public domain dedication in package calf
  - add public domain dedication for btop
  - add public domain dedication for upx
  - add DocBook-Stylesheet
  - add LGPL-2.1-only WITH WxWindows-exception-3.1
  - add public domain dedication for bsh
  - Add vim into OPUBL-1.0 exceptions
  - add GPL-1.0-or-later WITH Autoconf-exception-generic
  - LicenseRef-Fedora-Public-Domain: Add perlmulticore.h
  - add MIT-Click


author: Miroslav Suchý <msuchy@redhat.com> 1.57-1
changelog:
  - add filedrop public domain dedication
  - add ddate public domain dedication
  - Add wgrib license text
  - add zork public domain dedication
  - add AGPL-3.0-or-later WITH GPL-3.0-linking-source-exception
  - allow CC-BY-SA 3.0 for fonts
  - add Boehm-GC-without-fee license
  - add LicenseRef-Julius as not allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.58-1
changelog:
  - add Ultra permissive dedication of docbook5-schemas
  - add public domain dedication for clc
  - add Sendmail-Open-Source-1.1 license
  - add public domain dedication for biblesync
  - add public domain dedication for BareBonesBrowserLaunch
  - add public domain dedication for astronomy-menus
  - add LGPL-2.1-only WITH OCCT-exception-1.0
  - add CERN-OHL-P-2.0
  - add Jam license
  - add public domain dedication for ants


author: Miroslav Suchý <msuchy@redhat.com> 1.59-1
changelog:
  - add public domain findings for sdl-telnet
  - add public domain findings for libmodplug
  - add public domain findings for mb2md
  - add public domain findings for perl-DateTime-Precise
  - add public domain findings for gimpfx-foundry
  - add public domain findings for gnome-valgrind-session
  - add public domain findings for sqlite2
  - Blessing.toml -> blessing.toml
  - add public domain findings for surfraw
  - add GPL-3.0-or-later WITH GPL-3.0-389-ds-base-exception
  - add public domain findings for klt
  - add public domain findings for libb64
  - add public domain dedication of emacs-slime
  - add public domain dedication of cproto
  - add public domain dedication for cockatrice
  - add LGPL-2.1-or-later WITH Independent-modules-exception


author: Miroslav Suchý <msuchy@redhat.com> 1.60-1
changelog:
  - add LicenseRef-Intel-firmware
  - add public domain dedication for oflb-goudy-bookletter-1911-fonts
  - add public domain dedication for nacl
  - add Apache-2.0 WITH mxml-exception
  - add public domain dedication for nec2c
  - add any-OSI-perl-modules
  - add public domain dedication for ogre
  - add text of Unsplash license
  - add LicenseRef-Intel-firmware
  - add SGI-B-1.1 as not-allowed
  - add public domain dedication for libgenht
  - add ultra permissive findings for lyx
  - add public domain findings for golang-github-xi2-xz
  - add UltraPermissive dedication of package samcoupe-rom
  - add UltraPermissive dedication of package radial
  - add LicenseRef-MIT-CRL-Xim license as not-allowed
  - add public domain findings for icon
  - add public domain findings for jhead
  - add public domain findings for mingw-pdcurses
  - add LicenseRef-BASS (beneath a steel sky) as not-allowed
  - add public domain and ultra permissive findings for rubygem-ruby-shadow


author: Miroslav Suchý <msuchy@redhat.com> 1.62-1
changelog:
  - add Avasys public license as allowed-firmware
  - add public domain dedication for python-hexdump
  - add public domain dedication for allegro (loadpng addon)
  - add LicenseRef-soundfont as not-allowed
  - add broadcom firmware license
  - Reclassify LicenseRef-qmail as allowed (deprecated)
  - add GPL-2.0-only WITH CGAL-linking-exception
  - add firmware licensing terms for atmel-firmware
  - add wwl license
  - add generic-xts license
  - add LicenseRef-Mod-Archive as not-allowed
  - add public domain dedication for perl-Math-Expression-Evaluator
  - add public domain dedication for perl-MaxMind-DB-Reader-XS
  - add public domain dedication for python-django-pdb
  - add UltraPermissive dedication of package python-utmp
  - add public domain dedication for re2c
  - add public domain dedication for python-nine
  - add public domain dedication for perl-Devel-Trace
  - add LGPL-3.0-or-later WITH LGPL-3.0-linking-exception


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.4.2-15
changelog:
  - Simplify spec
  - Remove checks on if systemd is present
  - Remove checks on old Fedora releases
  - Remove checks on EL7 or older
  - Use make macros


author: Mark McKinstry <mmckinst@fedoraproject.org> - 20240728-1
changelog:
  - upgrade to 20240728
  - include work from Xose Perez https://src.fedoraproject.org/rpms/nawk/pull-request/7


author: Michel Lind <salimma@fedoraproject.org> - 0.88.1-4
changelog:
  - Drop unnecessary Rust minimum version, for building on EPEL 9
  - Work around missing constrain_build macro on EPEL 9


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.22.0-4
changelog:
  - Update the rust-image-0.25 patch to match what was merged upstream
  - Fewer image formats are now supported.


author: Paul Howarth <paul@city-fan.org> - 0.04-23
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.3.8-1
changelog:
  - Update to 1.3.8
    - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
      (GH#1488)
    - 1.3.8rc4 failed to build on Solaris due to missing type declarations
      (GH#1494)
    - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
    - mod_tls module unexpectedly allows TLS handshake after authentication in
      some configurations (GH#1533)
    - Disable FSCachePolicy by default (GH#1528)
    - Avoid logging "session closed" messages unless there is a corresponding
      "session opened" log message, to avoid user confusion (GH#1539)
    - Implement support for the CSID FTP command (GH#1550)
    - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
      publickey algorithm 'ssh-rsa' (Bug #4491)
    - mod_auth_otp improperly allows keyboard-interactive logins for users
      lacking OTP entries (GH#1560)
  - Update mod_vroot to 0.9.11
    - Addresses a bad interaction with mod_auth_file, and failed login attempts,
      which can lead to inexplicably "stuck" processes that cannot be terminated
      (https://github.com/proftpd/proftpd/issues/1384)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.8-4
changelog:
  - Ensure mod_rewrite is linked against libidn2 so that it loads properly
    (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
  - No longer need to explicitly remove libtool archives from Fedora 36 onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683,
      CVE-2023-51713)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-3
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-1
changelog:
  - Update to 3.9.3, security update for CVE-2024-23334 and CVE-2024-23829 (fix
    RHBZ#2261891, fix RHBZ#2261910)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.3-3
changelog:
  - Backport support for llhttp 9.2.1
  - Started rejecting obsolete line folding in Python parser to match


author: Packit <hello@packit.dev> - 1.2.14-1
changelog:
  - Drops seemingly unused importlib-metadata dev dep (Colin Dean)
  - Fixes comment on which version is development branch (Colin Dean)
  - Adds Pythons dropped notice to changelog (Colin Dean)
  - Drops limitation on tox < 4 since bug was fixed (Colin Dean)
  - Adds srpm_build_deps to Packit config (Colin Dean)
  - Try explicitly setting AppVeyor image to VS2022 (Colin Dean)
  - Exclude pypy3 on ppc64le on Travis builds (Colin Dean)
  - Drops old Pythons and adds newer ones for Appveyor build (Colin Dean)
  - Drop the .9 from pypy3 in tox.ini (Colin Dean)
  - Use specifically pypy3.9 v7.3.9 (Colin Dean)
  - Adds Python 3.12 config to tox (Colin Dean)
  - Limit tox to <4 on Travis because of outdatedness (Colin Dean)
  - Try installing importlib_metadata for tox run (Colin Dean)
  - Use newer Travis environment, Focal (Ubuntu 20.04) (Colin Dean)
  - Adds importlib-metadata to dev deps (Colin Dean)
  - Split and fix tox config for more better coverage (Colin Dean)
  - Dropping support for Python older than v3.7 in build systems like pytest and tox, while ensuring the library remains production-compatible. (Colin Dean)
  - Drops Python 2.7, 3.5, 3.6 builds from Travis; add 3.12 (Colin Dean)
  - Upgrades some actions versions in Actions python builds (Colin Dean)
  - Drops Actions builds for Python 2.7, 3.5, 3.6; condense 3.7+ (Colin Dean)
  - Bump checkout to v3 in CodeQL Analysis workflow (Colin Dean)
  - Add support for Python 3.11 (Hugo van Kemenade)
  - edit changelog (Pierrick Rambaud)
  - add test for D213 docstrings (Pierrick Rambaud)
  - work with empty docstring (Pierrick Rambaud)
  - fix: digest D212 and D213 docstring (Pierrick Rambaud)
  - Add support for Python 3.10 (Hugo van Kemenade)
  - Prepare next version 1.2.14 (unreleased) (Laurent LAPORTE)
  - Minor change in bumpversion  configuration to also bump the project version in "appveyor.xml". (Laurent LAPORTE)


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-55
changelog:
  - Debundle vobject as now available in EPEL9 (#2246219)
  - Skip bundle setup in case of nothing to bundle


author: Peter Bieringer <pb@bieringer.de> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - EL8: update bundled vobject to 0.9.7
  - EL8: update to Python 3.9 (requires update with option --allowerasing)
  - EL8: reenable bundled dateutil (required by Python 3.9)


author: Peter Bieringer <pb@bieringer.de> - 3.2.2-2
changelog:
  - Update to 3.2.2
  - Obsolete radicale-config-storage-hooks-SELinux-note.patch by inject inside spec file
  - Obsolete radicale-httpd by contrib config from upstream
  - Fix group+permissions of /etc/radicale/rights
  - Create an empty file /etc/radicale/users with proper permissions


author: Peter Bieringer <pb@bieringer.de> - 3.3.0-1
changelog:
  - Update to 3.3.0
  - EL8: update bundled vobject to 0.9.8 (align with EL9)
  - EL8: update bundled defusedxml to 2.8.1 (align with EL9)
  - EL8: update bundled passlib to 1.7.4 (align with EL9)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.0-8
changelog:
  - Simplify patching pyproject.toml and handling test dependencies
  - Drop unnecessary version-bounded BuildRequires on python-pytest-sugar,
    fixing failure to build from source with python-pytest-sugar 1.0.0.


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Ambroz <rebus at, seznam.cz> 5.8.8-2
changelog:
  - cherrypick from upstream master patches for known vulnerabilities:
  - CVE-2023-4322 - heap-buffer-overflow in the brainfuck dissassembler
  - CVE-2023-5686 - heap-buffer-overflow in /radare2/shlr/java/code.c


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.1
   - Support building snapd using base Core22 (Snapcraft 8.x)
   - FIPS: support building FIPS complaint snapd variant that switches
     to FIPS mode when the system boots with FIPS enabled
   - AppArmor: update to latest 4.0.2 release
   - AppArmor: enable using ABI 4.0 from host parser
   - AppArmor: fix parser lookup
   - AppArmor: support AppArmor snippet priorities
   - AppArmor: allow reading cgroup memory.max file
   - AppArmor: allow using snap-exec coming from the snapd snap when
     starting a confined process with jailmode
   - AppArmor prompting (experimental): add checks for prompting
     support, include prompting status in system key, and restart snapd
     if prompting flag changes
   - AppArmor prompting (experimental): include prompt prefix in
     AppArmor rules if prompting is supported and enabled
   - AppArmor prompting (experimental): add common types, constraints,
     and mappings from AppArmor permissions to abstract permissions
   - AppArmor prompting (experimental): add path pattern parsing and
     matching
   - AppArmor prompting (experimental): add path pattern precedence
     based on specificity
   - AppArmor prompting (experimental): add packages to manage
     outstanding request prompts and rules
   - AppArmor prompting (experimental): add prompting API and notice
     types, which require snap-interfaces-requests-control interface
   - AppArmor prompting (experimental): feature flag can only be
     enabled if prompting is supported, handler service connected, and
     the service can be started
   - Registry views (experimental): rename from aspects to registries
   - Registry views (experimental): support reading registry views and
     setting/unsetting registry data using snapctl
   - Registry views (experimental): fetch and refresh registry
     assertions as needed
   - Registry views (experimental): restrict view paths from using a
     number as first character and view names to storage path style
     patterns
   - Snap components: support installing snaps and components from
     files at the same time (no REST API/CLI)
   - Snap components: support downloading components related assertions
     from the store
   - Snap components: support installing components from the store
   - Snap components: support removing components individually and
     during snap removal
   - Snap components: support kernel modules as components
   - Snap components: support for component install, pre-refresh and
     post-refresh hooks
   - Snap components: initial support for building systems that contain
     components
   - Refresh app awareness (experimental): add data field for
     /v2/changes REST API to allow associating each task with affected
     snaps
   - Refresh app awareness (experimental): use the app name from
     .desktop file in notifications
   - Refresh app awareness (experimental): give snap-refresh-observe
     interface access to /v2/snaps/{name} endpoint
   - Improve snap-confine compatibility with nvidia drivers
   - Allow re-exec when SNAP_REEXEC is set for unlisted distros to
     simplify testing
   - Allow mixing revision and channel on snap install
   - Generate GNU build ID for Go binaries
   - Add missing etelpmoc.sh for shell completion
   - Do not attempt to run snapd on classic when re-exec is disabled
   - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
   - Add snap debug API command to enable running raw queries
   - Enable snap-confine snap mount directory detection
   - Replace global seccomp filter with deny rules in standard seccomp
     template
   - Remove support for Ubuntu Core Launcher (superseded by snap-
     confine)
   - Support creating pending serial bound users after serial assertion
     becomes available
   - Support disabling cloud-init using kernel command-line
   - In hybrid systems, apps can refresh without waiting for restarts
     required by essential snaps
   - Ship snap-debug-info.sh script used for system diagnostics
   - Improve error messages when attempting to run non-existent snap
   - Switch to -u UID:GID for strace-static
   - Support enabling snapd logging with snap set system
     debug.snapd.{log,log-level}
   - Add options system.coredump.enable and system.coredump.maxuse to
     support using systemd-coredump on Ubuntu Core
   - Provide documentation URL for 'snap interface '
   - Fix snapd riscv64 build
   - Fix restarting activated services instead of their activator units
     (i.e. sockets, timers)
   - Fix potential unexpected auto-refresh of snap on managed schedule
   - Fix potential segfault by guarding against kernel command-line
     changes on classic system
   - Fix proxy entries in /etc/environment with missing newline that
     caused later manual entries to not be usable
   - Fix offline remodelling by ignoring prerequisites that will
     otherwise be downloaded from store
   - Fix devmode seccomp deny regression that caused spamming the log
     instead of actual denies
   - Fix snap lock leak during refresh
   - Fix not re-pinning validation sets that were already pinned when
     enforcing new validation sets
   - Fix handling of unexpected snapd runtime failure
   - Fix /v2/notices REST API skipping notices with duplicate
     timestamps
   - Fix comparing systemd versions that may contain pre-release
     suffixes
   - Fix udev potentially starting before snap-device-helper is made
     available
   - Fix race in snap seed metadata loading
   - Fix treating cloud-init exit status 2 as error
   - Fix to prevent sending refresh complete notification if snap snap-
     refresh-observe interface is connected
   - Fix to queue snapctl service commands if run from the default-
     configure hook to ensure they get up-to-date config values
   - Fix stop service failure when the service is not actually running
     anymore
   - Fix parsing /proc/PID/mounts with spaces
   - Add registry interface that provides snaps access to a particular
     registry view
   - Add snap-interfaces-requests-control interface to enable prompting
     client snaps
   - steam-support interface: remove all AppArmor and seccomp
     restrictions to improve user experience
   - opengl interface: improve compatibility with nvidia drivers
   - home interface: autoconnect home on Ubuntu Core Desktop
   - serial-port interface: support RPMsg tty
   - display-control interface: allow changing LVDS backlight power and
     brightness
   - power-control interface: support for battery charging thesholds,
     type/status and AC type/status
   - cpu-control interface: allow CPU C-state control
   - raw-usb interface: support RPi5 and Thinkpad x13s
   - custom-device interface: allow device file locking
   - lxd-support interface: allow LXD to self-manage its own cgroup
   - network-manager interface: support MPTCP sockets
   - network-control interface: allow plug/slot access to gnutls config
     and systemd resolved cache flushing via D-Bus
   - network-control interface: allow wpa_supplicant dbus api
   - gpio-control interface: support gpiochip* devices
   - polkit interface: fix "rw" mount option check
   - u2f-devices interface: enable additional security keys
   - desktop interface: enable kde theming support


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.65.2
   - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb
     only)


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66
   - AppArmor prompting (experimental): expand kernel support checks
   - AppArmor prompting (experimental): consolidate error messages and
     add error kinds
   - AppArmor prompting (experimental): grant /v2/snaps/{name} via
     snap-interfaces-requests-control
   - AppArmor prompting (experimental): add checks for duplicate
     pattern variants
   - Registry views (experimental): add handlers that commit (and
     cleanup) registry transactions
   - Registry views (experimental): add a snapctl fail command for
     rejecting registry transactions
   - Registry views (experimental): allow custodian snaps to implement
     registry hooks that modify and save registry data
   - Registry views (experimental): run view-changed hooks only for
     snaps plugging views affected by modified paths
   - Registry views (experimental): make registry transactions
     serialisable
   - Snap components: handle refreshing components to revisions that
     have been on the system before
   - Snap components: enable creating Ubuntu Core images that contain
     components
   - Snap components: handle refreshing components independently of
     snaps
   - Snap components: handle removing components when refreshing a snap
     that no longer defines them
   - Snap components: extend snapd Ubuntu Core installation API to
     allow for picking optional snaps and components to install
   - Snap components: extend kernel.yaml with "dynamic-modules",
     allowing kernel to define a location for kmods from component
     hooks
   - Snap components: renamed component type "test" to "standard"
   - Desktop IDs: support installing desktop files with custom names
     based on desktop-file-ids desktop interface plug attr
   - Auto-install snapd on classic systems as prerequisite for any non-
     essential snap install
   - Support loading AppArmor profiles on WSL2 with non-default kernel
     and securityfs mounted
   - Debian/Fedora packaging updates
   - Add snap debug command for investigating execution aspects of the
     snap toolchain
   - Improve snap pack error for easier parsing
   - Add support for user services when refreshing snaps
   - Add snap remove --terminate flag for terminating running snap
     processes
   - Support building FIPS complaint snapd deb and snap
   - Fix to not use nss when looking up for users/groups from snapd
     snap
   - Fix ordering in which layout changes are saved
   - Patch snapd snap dynamic linker to ignore LD_LIBRARY_PATH and
     related variables
   - Fix libexec dir for openSUSE Slowroll
   - Fix handling of the shared snap directory for parallel installs
   - Allow writing to /run/systemd/journal/dev-log by default
   - Avoid state lock during snap removal to avoid delaying other snapd
     operations
   - Add nomad-support interface to enable running Hashicorp Nomad
   - Add intel-qat interface
   - u2f-devices interface: add u2f trustkey t120 product id and fx
     series fido u2f devices
   - desktop interface: improve integration with xdg-desktop-portal
   - desktop interface: add desktop-file-ids plug attr to desktop
     interface
   - unity7 interface: support desktop-file-ids in desktop files rule
     generation
   - desktop-legacy interface: support desktop-file-ids in desktop
     files rule generation
   - desktop-legacy interface: grant access to gcin socket location
   - login-session-observe interface: allow introspection
   - custom-device interface: allow to explicitly identify matching
     device in udev tagging block
   - system-packages-doc interface: allow reading /usr/share/javascript
   - modem-manager interface: add new format of WWAN ports
   - pcscd interface: allow pcscd to read opensc.conf
   - cpu-control interface: add IRQ affinity control to cpu_control
   - opengl interface: add support for cuda workloads on Tegra iGPU in
     opengl interface


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.66.1
   - AppArmor prompting (experimental): Fix kernel prompting support
     check
   - Allow kernel snaps to have content slots
   - Fix ignoring snaps in try mode when amending


author: Lukáš Zachar <lzachar@redhat.com> - 1.32.2
changelog:
  - Remove /var/tmp workdir from rpm packaging
  - Refactor package manager discovery to allow priorities
  - Add unit test for package manager installing a file system path
  - Update pre-commit checks and add a couple of new ones
  - Removing c9s workaround for pytest-container
  - Clarify the `--last` symlink creation race a bit
  - Remove the `.travis.yml` config file
  - Correctly show the `--provision-timeout` default
  - Refresh Beaker API client in mrack to use up-to-date Kerberos ticket


author: Tomáš Bajer <tbajer@redhat.com> - 1.33.0
changelog:
  - Fix installation of packages from files (#2914)
  - Simplify the documentation building (#2483)
  - Install dependencies of upgrade tasks
  - Improve fail message when library doesn't exist
  - Parse the `system` hardware requirement (#2795)
  - Define `location.lab-controller` hardware requirement (#2794)
  - Test restart on crash (#2870)
  - Add `codespell` pre-commit and fix revealed errors
  - Add test restart counter, similar to `TMT_REBOOT_COUNT`
  - Fix error message if no supported package manager found
  - Fix copy/paste issue for `combine_hw_disk_size()`
  - Slightly improve rendering of ReST for command like
  - Allow `duration` in the `execute` schema
  - Log hash of the beakerlib library repo
  - Fix inability of rpm-ostree to install multiple packages (#2887)
  - Fix Alpine Linux support (#2828)
  - Allow custom failure patterns in `dmesg` test check
  - Make `junit_xml` more visible to linters
  - Add support for `virtualization.hypervisor` hardware requirement (#2733)
  - Add a new section `Review` to contributor docs
  - Accept SSH options from environment variable (#2783)
  - Fix AVC denial detection on Fedora rawhide (#2881)
  - Reuse "become" image to fix sudo-related trouble in /tests/provision/user (#2892)
  - Polish prepare/ansible documentation
  - Support `cpu.cores` hardware requirement for mrack (#2728)
  - Allow pip install from git-archive
  - Add the `cpu.vendor` hardware requirement
  - Fix incorrect translation of `cpu.processors` to Beaker
  - Document custom Jinja template filters (#2769)
  - Update logger-name for clean


author: Martin Hoyer <mhoyer@redhat.com> - 1.34.0
changelog:
  - Fix normalization of `hardware` key/option (#3015)
  - Keep patched sources directly in TMT_SOURCE_DIR (#2999)
  - Copy launch description to suite description (#2992)
  - Add support for multiple disks to testcloud plugin (#2767)
  - Improve rendering of story links in our docs (#3001)
  - Simplify parsing of HW requirements and add missing ones (#2928)
  - Make test shell wrapper filename even more unique (#2998)
  - Add support for basic rerun of tests (#2521)
  - Split provision/virtual plans to subgroups per step (#2938)
  - Document custom container images built for tmt tests (#2930)
  - Require python3.9 in 'develop' target
  - Fix multiple rules `adjust` example in `duration` spec (#2971)
  - Fix "skip missing" behavior when installig debuginfo packages with dnf (#2956)
  - Extend results schema to allow test phases (#2933)
  - Fix path to watchdog log (#2901)
  - Display locals in traceback when requested (#2900)
  - Polish test-check/dmesg documentation (#2897)
  - docs: tweak docs to include how to see details about test failures (#2541)
  - Allow multiplication in duration input value (#2845)
  - Fix validation of fmf id URL, it must be cloneable first (#2957)
  - Cover `tmt.trying` with `pyright` check (#2942)
  - Clarify the `trigger` context dimension values (#2961)
  - Add konflux as possible initiator (#2947)
  - Fix some invalid links in documentation (#2940)
  - Define "block-device" key for guest topology HW exposition
  - Cover tmt.steps.prepare.shell with pyright checks
  - Ignore report files created by pytest-html
  - Fix pre-commit typing python version (#2959)
  - Cover tmt.steps.prepare.distgit with pyright
  - Pass correct spec to _parse_system and _parse_location (#2924)
  - Support `cpu.model-name` hardware requirement for mrack (#2921)
  - Enforce "one blank line after class docstring" rule (#2934)
  - Enable pydocstyle checks in ruff (#2906)
  - Update distros in the `mrack` provisioning config (#2932)
  - Drop duplicate list of supported HW requirements in beaker plugin (#2902)
  - Update interaction with Fedora rawhide (#2931)
  - Run the `no-commit-to-branch` check only locally


