# changelog

author: Nick Clifton <nickc@redhat.com> - 9.38-1
changelog:
  - Rebase to 9.39
  - Annocheck: Add fixes for building on RHEL-7.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Rebuild with plugin enabled to check that suppression works.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)
  - Annocheck: Do not skip tests of the short-enums notes.  (#1743635)
  - Add (optional) llvm plugin.
  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)


author: Nick Clifton <nickc@redhat.com> - 9.46-1
changelog:
  - Annocheck: Disable reporting future fails by default.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.


author: Nick Clifton <nickc@redhat.com> - 9.59-1
changelog:
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
  - gcc plugin: Add support for GCC 11's cl_vars array.


author: Nick Clifton <nickc@redhat.com> - 9.64-1
changelog:
  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Add some GO tests to annocheck.


author: Nick Clifton <nickc@redhat.com> - 9.71-1
changelog:
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Obsolete annobin < 9.66-1 (bug #1949570)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.
  - gcc-plugin: Use a fixed filename when running in LTO mode.


author: Chris Caron <lead2gold@gmail.com> - 0.9.1-1
changelog:
  - Updated to v0.9.1

  -* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 0.9.0-3
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Eric Smith <brouhaha@fedoraproject.org> 1.42-0.36.bld131
changelog:
  - Update to latest upstream snapshot.
  - Update s390x sysdefs.h patch.
  - Do not build German documentation on EL7 due to lack of tex(german.sty).


author: Josh Stone <jistone@redhat.com> - 1.51.0-2
changelog:
  - Security fixes for CVE-2021-28876, CVE-2021-28878, CVE-2021-28879
  - Fix bootstrap for stage0 rust 1.51


author: Pavel Lisý <pali@fedoraproject.org> - 1.2.103-1
changelog:
  - latest 1.2.x upstream release
  - Resolves bz 961057 - RFE: Cherokee 1.2.103 is available
  - Resolves bz 961056 - RFE: Cherokee 1.2.103 is available
  - Resolves bz 954199 - cherokee 1.2.103 is available
  - Resolves bz 958337 - Update request for Cherokee
  - Resolves bz 858542 - Cherokee should not be built with trace/backtrace support for performance


author: Pavel Lisý <pali@fedoraproject.org> - 1.2.103-6
changelog:
  - Resolves bz 1114461 - CVE-2014-4668 cherokee: authentication bypass when LDAP server allows unauthenticated binds
  - Resolves bz 1094901 - cherokee: script and/or trigger should not directly enable systemd units
  - Resolves bz  959170 - cherokee-worker and cherokee-admin want to use execstack (EL5)


author: Nick Rhodes <nrhodes91@gmail.com> - 0.16.1-1
changelog:
  - Revert previous --config release with argparse rewrite
  - Add --config option for specifying custom a configuration file using optparse
  - Filter the "ip address show" output to remove lines containing valid_lft XXsec preferred_lft XXsec


author: Nick Rhodes <nrhodes91@gmail.com> - 0.19.0-1
changelog:
  - Added lsblk and blkid (PR 115)
  - Fix flake8 warnings (PR 118)
  - Filtering out update line in pcs status (PR 112)


author: Pavel Raiskup <praiskup@redhat.com> 1.85-1
changelog:
  - new 'copr-cli build-module --distgit DISTGIT' option
  - make build-package honor the --background flag


author: Pavel Raiskup <praiskup@redhat.com> 1.86-1
changelog:
  - add script to list package build order in copr or koji
  - fix `copr mock-config` to use `dnf.conf/yum.conf` automatically


author: Pavel Raiskup <praiskup@redhat.com> 1.88-1
changelog:
  - add command to list all builds of a project
  - more effective query of packages with their latest builds
  - point docs to the correct Fedora Copr instances


author: Pavel Raiskup <praiskup@redhat.com> 1.89-1
changelog:
  - copr get-package supports with_latest* args again
  - testsuite fixes for el6
  - useful error message when new client runs against old frontend


author: Jakub Kadlcik <frostyx@email.cz> 1.90-1
changelog:
  - cli, frontend: custom build batches
  - cli: propagate build --bootstrap value to API call
  - cli: move the build --bootstrap option to a correct parser
  - frontend, cli, python, rpmbuild: better bootstrap config
  - beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap
  - all: run pytest with -vv in package build
  - cli: fix timeout option to allow change timeout for build
  - cli: fix dist-git unit tests
  - common, cli, python, rpmbuild, frontend, backend: DistGit source method
  - cli: support project/chroot format for getting/editting chroots
  - cli: do bash-completion when argcomplete is installed
  - cli: formally deprecate --memory option


author: Pavel Raiskup <praiskup@redhat.com> 1.92-1
changelog:
  - allow excluding chroots when submitting builds
  - raise a proper exception if the module yaml file does not exist
  - allow etting isolation option per chroot
  - fix serializable() helper for the new python3-munch


author: Jakub Kadlcik <frostyx@email.cz> 1.94-1
changelog:
  - cli: migrate from CoprClient APIv1 call for generating webhook secrets
  - cli: fix output format, new option --output-format
  - test: cli: Test for get-chroot command
  - Explicitly require setuptools, copr_cli/main.py imports pkg_resources
  - cli: test list-builds, list-packages and get-package output


author: Ranjan Maitra <aarem@fedoraproject.org>
changelog:
  - 3.0.5-2
  - patched for dillo to use openssl 1.1 using patch provided  by Mattias Ellert <mattias.ellert AT physics DOT uu DOT se> 
  - fixes BZ #1470354


author: Petr Vokac <petr.vokac@cern.ch> - 1.14.2-6
changelog:
  - Bugfixes: LCGDM-2958, LCGDM-2961, LCGDM-2963, LCGDM-2964, OOB reads
  - Improvements: LCGDM-2943, LCGDM-2959, LCGDM-2962, LCGDM-2967, davs speed


author: Hanecak <hany@hany.sk> - 9.15.1-2
changelog:
  - Custom /usr/lib/ocf/resource.d/linbit/drbd is broken, upstream variant works
    (#1908265, PR by robert)


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.15.1-5
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Petr Šplíchal <psplicha@redhat.com> - 0.9-1
changelog:
  - Support custom conjunction like 'or' in listed()
  - Update smoke testset to the latest L2 spec
  - Fix build conditional default for englocale
  - Use raw strings for regular expression patterns


author: Petr Šplíchal <psplicha@redhat.com> - 0.11-1
changelog:
  - Add git to BuildRequires (now required by tests)
  - Use coveralls to report coverage results
  - Adjust Tree.node() implementation, extend tests
  - Get metadata for unique id [fix #67]
  - Use the fedora-all target in packit config (#72)
  - Define the full fmf identifier [fix #52]
  - A minor cleanup of the concept documentation
  - Always ignore special system directories
  - Filesystem root and inaccessible dirs [fix #70]
  - Rename the 'testsets' directory to 'plans'


author: Petr Šplíchal <psplicha@redhat.com> - 0.13-1
changelog:
  - Enable copr builds from master, simplify config
  - Adjust documentation for the new Context class
  - Add documentation for the new Context class
  - Add a new Tree.adjust() method for handling rules
  - Context: Better operator names, comments
  - Adjust the new Context implementation
  - Context implementation


author: Petr Šplíchal <psplicha@redhat.com> - 0.14-1
changelog:
  - Adjust context docs, fix typos, style cleanup
  - Left vs Right side in Context matches
  - Simplify deep merging, adjust test suite a bit
  - Implement recursive merging of data
  - Remove the duplicate build job from packit config
  - Adjust 'make test' to work under virtualenv
  - Update the adjust continue key default to True


author: Petr Šplíchal <psplicha@redhat.com> - 0.15-1
changelog:
  - Implement the new 'fmf clean' command
  - Functions to manipulate cache
  - Fetch the whole tree using utils.fetch_tree()
  - Raise FileException on duplicate YAML keys
  - Allow to set desired cache location
  - Adjust support for storing modified data to disk
  - Add support for storing modified metadata to disk
  - Prevent exploring tests in the tmt directory
  - Simplify special distro comparison examples
  - Store command output in run(), fetch() exceptions
  - Use filelock for locking, expand test coverage
  - Adjust locking for Tree.node() and utils.fetch()
  - Use locking to checkout/read tree
  - Enable integration testing with tmt, some cleanup
  - Implement a new method copy() for cloning nodes
  - Adjust fetch() with custom destination and env
  - Support calls fetch(destination, env) and run(env)
  - Use the origin default branch instead of master
  - Store commit hash if the tree is under a git repo


author: Petr Šplíchal <psplicha@redhat.com> - 0.16.0-1
changelog:
  - Add support for empty files and virtual nodes
  - Change outcome of CannotDecide operations
  - Enable copr builds from master for epel-7 as well
  - Define dict method to get child or data item
  - Keep original adjust rules when adjusting nodes
  - Use a deep copy when storing raw node data
  - Fix warnings in pytest


author: Greg Bailey <gbailey@lxpro.com> - 2019.10-1
changelog:
  - New upstream release 2019.10 (#1772903)
  - Fix python3 incompatibility (#1748462)
  - Drop python2 support


author: Greg Bailey <gbailey@lxpro.com> - 2019.11-1
changelog:
  - New upstream release 2019.11 (#1777999)
  - several performance improvements
  - use ISO datetime format
  - refactor git calls into a convenience class
  - improve documentation
  - add several TODO and FIXME notes as a roadmap draft
  - remove outdated benchmarks


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-4.20191019gitf00e248
changelog:
  - Updated to last upstream commits
  - Use Gio.Subprocess for cleaner child process handling
  - Updated Italian Translation
  - Updated Slovak translation
  - Edited gpu_usage.sh to work with glxinfo
  - Included GS 3.34. Fixed formatting
  - Removed duplicate css class
  - Added Dutch (Netherlands) translation
  - Use enums (instead of magic numbers) with GLib.file_test()


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-6.20200325gitcd2704c
changelog:
  - Updated to last upstream commits
  - Translate to Turkish language
  - Add patch to fix typo nvidia-settings in gpu_usage.sh - RHBZ#1794158
  - Add patch to improve fetching values for NVidia GPU usage


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-7.20200416git32cc79e
changelog:
  - Updated to last upstream commits
  - Support for gnome-shell 3.36 added, and keep legacy usage
  - Be able to show preferences from menu
  - Make compact work even on resize
  - Use UPower directly to remove warning
  - Dropped patches (applied upstream)


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-8.20200503git7f8f0a7
changelog:
  - Updated to last upstream commits
  - Fix string warning: Use ByteArray
  - Fixed malformed nl translation. Updated makefile to put builds in ./dist
  - Cleaned and switched Recommends tag for gnome-tweaks to Suggests tag as dnf
    treats it as Requires tag - RHBZ#1830474


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-11.20210320git0b42126
changelog:
  - Updated to last upstream commits
  - Fix gnome-shell and information spelling
  - Fix for top left corner info
  - Use utilities-system-monitor icon
  - Numerous fixes for translations and locales handling
  - Fix GPU not translated


author: Nicolas Viéville <nicolas.vieville@uphf.fr> - 1:38-12.20210507gitbc38ccf
changelog:
  - Updated to last upstream commits
  - Added and updated translations
  - Add units for network speeds over one gigabit
  - Don't use version but check for function
  - Fixed thermal sensor dropdown label rendering
  - Prevent refreshes while the Shell is busy
  - gpu_usage.sh improvements
  - prefs: Remove unused Clutter reference
  - Update prefs to support gnome 40 - RHBZ#1956148, RHBZ#1957479


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Drop merged patch
  - Add R and BR to python-keybinder
  - Convert the package to noarch


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.8.1-1
changelog:
  - Update to 0.8.1
  - Backport upstream patch to fix the size of the tab bar
  - Backport upstream patch fixing recovering from full-screen mode


author: Robert Scheck <robert@fedoraproject.org> 1.8.27-1
changelog:
  - Backport from 1.8.27-2: Fix copy_argv for arguments that begin
    with hypen (#1838319)
  - Backport from 1.8.27-1: Update to 1.8.27 (#1905663, #1838319)


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Ian McLeod <imcleod@redhat.com> - 1.1.8-1
changelog:
  - Upstream release 1.1.8
  - systemd support
  - docker base image updates
  - significant EC2 updates for regions and instance types
  - VMWare fusion vagrant box support


author: Ian McLeod <imcleod@redhat.com> - 1.1.9-1
changelog:
  - Upstream release 1.1.9
    - Add HyperV Vagrant support
    - enhance vSphere and VMWare Fusion support


author: Jakub Ružička <jakub.ruzicka@nic.cz> - 3.0.4-1
changelog:
  - Update to 3.0.4
  - Move dnstap module to subpackage
  - Move geoip module to subpackage
  - Remove redundant VERSION macro


author: ElXreno <elxreno@gmail.com> - 0.2.0-4
changelog:
  - * Format spec
    * Replace git command via echo in Makefile
    * Don't exec chcon in Makefile
    * Don't exec systemctl in Makefile
    * Disable search of debuginfo
    * Drop not required build macros


author: Jean-Francois Saucier <jsaucier@gmail.com> - 3.1.2-1
changelog:
  - Update to the new upstream version
  - Added support for postgresql 9.5
  - Removed support for postgresql 8.2


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.6.2-2
changelog:
  - Remove installed in Makefile documentation to work correctly on epel7 where doc dir still versioned.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-0.alpha.1
changelog:
  - New upstream version - 0.8.2-alpha1.
  - New segfault issue: https://github.com/pgmodeler/pgmodeler/issues/777


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-0.2.beta
changelog:
  - Create plugins directory to do not complain on start: https://github.com/pgmodeler/pgmodeler/issues/783


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-1
changelog:
  - Update version to release 0.8.2.
  - Fix prerev var usage.
  - Add BR qt5-qtsvg-devel.
  - Use _qt5_qmake_flags macros to honor Fedora build flags, drop old hacks.
  - Step to use find_lang macro for localizations.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-2
changelog:
  - Review request in progress - bz#977116. Thanks to Igor Gnatenko. Changes by comments https://github.com/Hubbitus/Fedora-packaging/commit/d0716a3d152c8d085988944bce7140b8e56f2e64#commitcomment-18686601
  - Use macroses %qmake_qt5 and %make_build.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.2-4
changelog:
  - Add Requires shared-mime-info
  - Explicit require single logo file.
  - Drop listing %{_libdir}/%{name}/lib*.so twice.
  - Drop provate requires anf provides from '%{_libdir}/%{name}/lib*.so*'


author: Dave Love <loveshack@fedoraproject.org> - 2.3.24-1
changelog:
  - New version (fixes #967084)
  - Clean up spec; use %license; fix URL
  - Move stonith file to main package and own directory
  - BR libgenders-devel


author: Dave Love <loveshack@fedoraproject.org> - 2.3.24-2
changelog:
  - Support systemd (fixes #1179482)
  - Run tests
  - Add snmppower
  - Don't BR flex bison readline-devel
  - More cleanup
  - Make pm man page a link


author: Dave Love <loveshack@fedoraproject.org> - 2.3.24-4
changelog:
  - Update systemd support (fixes #1489093)
  - Clean up spec post-el5
  - Fix %preun
  - Own stonith directories


author: Robert Scheck <robert@fedoraproject.org> 0.11.8-2
changelog:
  - Added upstream patch to unbreak Lua 5.4 support (#1933063)
  - Added %check to run some common commands (as a small testsuite)


author: Robert Scheck <robert@fedoraproject.org> 0.11.8-4
changelog:
  - Added upstream patch to avoid '-Wl,--as-needed' removing linking
    to libpthread when building with current libicu (#1954178)


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.3-1
changelog:
  - update to 2.4.3
  - use https in URLs
  - supply native systemd unit
  - drop obsolete patches
  - merge Fedora-specific changes into one patch
  - use system whois client instead of bundled one
  - update (and sort) Requires list
  - tighten file list
  - remove bundled stuff in prep


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.3-2
changelog:
  - fix SELinux policy temporarily (#1040425)
  - document patch purpose and file/dir permissions
  - depend on whois binary, not package
  - verify tarball GPG signature in prep


author: Dominik Mierzejewski <rpm@greysector.net> - 2.4.3-3
changelog:
  - EPEL7 install doesn't support -D and -t together
  - EPEL7 SELinux policy update (#1389191)
  - add missing dependencies
  - add dependencies to the systemd unit


author: Neal Gompa <ngompa13@gmail.com> - 2.4.0-1
changelog:
  - Rebase to 2.4.0
  - Fix license tag to match actual source license
  - Use bconds for controlling build behavior
  - Make compatible with EPEL7


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 4.2.1-1
changelog:
  - Update to 4.2.1 (#1602746).
  - https://github.com/celery/celery/blob/v4.2.1/Changelog
  - Correct documentation license to CC-BY-SA.


author: Neal Gompa <ngompa13@gmail.com> - 4.2.1-2
changelog:
  - Switch celery binary to Python 3 in F30+
  - Switch to bconds for controlling the build
  - Drop unused macro


author: Pavel Raiskup <praiskup@redhat.com> 1.103-1
changelog:
  - fix APIv3 build deletion
  - warn about deprecated APIv1
  - fix v2 client is_a_group_project usage
  - show obsolete warning on all APIv1 and APIv2 pages
  - more effective query of packages with their latest builds


author: Jakub Kadlcik <frostyx@email.cz> 1.105.3.dev-1
changelog:
  - frontend, python: we cannot order chroots by name
  - python: synchronize the docs for build options
  - frontend, cli, python, rpmbuild: better bootstrap config
  - beaker-tests, cli, frontend, python, rpmbuild: add option to config bootstrap
  - all: run pytest with -vv in package build
  - common, cli, python, rpmbuild, frontend, backend: DistGit source method
  - python: Don't apply bind_proxy in BaseProxy __init__()


author: Jakub Kadlcik <frostyx@email.cz> 1.110-1
changelog:
  - python: drop the deprecated APIv1 code from client
  - python: add deprecation warning for APIv2
  - frontend: test that we can set these options via API
  - cli: test list-builds, list-packages and get-package output
  - frontend: document missing isolation argument


author: Pradeep Kilambi <pkilambi@redhat.com> - 1.2.7-1
changelog:
  - Rebase to 1.2.7
  - move sphinx-build to %build
  - move buildRequires/requires to python2-cotyledon 
  - run python3 tests


author: Jackson Isaac <jacksonisaac2008@gmail.com> - 1.0-2
changelog:
  - Add compiler flags in build. Create py2 and py3 specific packages.
  - Add kernprof script in buildroot for both py2 and py3 versions.


author: Jackson Isaac <jacksonisaac2008@gmail.com> - 1.0-5
changelog:
  - Remove python2_sitelib definition. Remove ghost from files. 
  - Add PYTHONPATH for tests. Run tests for files in tests/


author: Robert Scheck <robert@fedoraproject.org> - 0.56-3
changelog:
  - Weak Python 2.7 pyparsing requirement for EPEL 7 correctly
  - Add simple self-test mechanism to detect future weaking mistakes


author: Orion Poplawski <orion@nwra.com> - 0.2.12-1.post1
changelog:
  - Build for Python 3
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)
  - Python 2 binary package renamed to python2-d2to1
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - New upstream source (0.2.12)
  - Use python2 macro


author: Michal Ambroz <rebus _AT seznam.cz> - 0.9.22-1
changelog:
  - Updated to new upstream release 0.9.22
  - modernize specfile with bconds
  - upstream patch for python39 compatibility (needed for FC34+)


author: Neal Gompa <ngompa13@gmail.com> - 1:4.2.2-1
changelog:
  - Update to 4.2.2
  - Fix summary for Python 2 subpackage
  - Switch to bconds for controlling the build
  - Add EPEL7 compatibility


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9-3
changelog:
  - Python 2 binary package renamed to python2-libpagure
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 3.15-1
changelog:
  - Update to 3.15
  - Use HTTPS URLs
  - Remove Group tag
  - Enable parallel make with smpflags
  - Switch to %autosetup
  - cherry-pick "Fix passing CFLAGS to PHP configure" from upstream
  - set REMCTL_PYTHON_VERSIONS=python2 (rhbz#1606109)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-11
changelog:
  - Python 2 binary package renamed to python2-straight-plugin
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Sundeep Anand <suanand@redhat.com> - 1.5.0-2
changelog:
  - add build requires, v1.5.0 release notes:
    - Bug 1139950 - Translation files mapping rules
    - Bug 1311705 - traceback when trying to push
    - ZNTA-303 - podir projects handling
    - ZNTA-927 - Project Status and Versions
    - ZNTA-929 - failed to retrieve version in non-git environment
    - ZNTA-934 - init failed to generate java-client compatible zanata.xml
    - ZNTA-936 - error message for unexpected html response
    - ZNTA-946 - Cannot push with zanata Python client 1.4.2


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-4
changelog:
  - Python 2 binary package renamed to python2-zanata-client
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2017.11.5-5
changelog:
  - Python2 binary package has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Antonio Trande <sagitter@fedoraproject.org> - 2.0-21
changelog:
  - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager
  - Exclude examples
  - Fix Flexiblas include dir flags


author: David Benoit <dbenoit@redhat.com> 6.12-7
changelog:
  - Remove hardened build since it is enabled by default
  - Add gcc to BuildRequires
  - Remove wildcards from directory listings in files section


author: David Benoit <dbenoit@redhat.com> 6.12-8
changelog:
  - Annotate dependencies with links to source code
  - Move dependencies to racket-pkgs, since they are only used
    by that subpackage
  - Update mred symbolic links
  - Fix ownership of directories
  - Remove executable bit from starter-sh


author: David Benoit <dbenoit@redhat.com> 7.0-1
changelog:
  - Update sources to Racket v7.0
  - Remove 6.12 patches and add update remove nonfree
    srfi patch to 7.0


author: David Benoit <dbenoit@redhat.com> 7.0-2
changelog:
  - Disable SSE math on i686 until issue is fixed upstream
  - Exclude ppc due to issue building Racket v7.0 and 
    arch being deprecated in next release


author: David Benoit <dbenoit@redhat.com> 7.0-4
changelog:
  - Add scriptlets to handle updating links.rktd based on
    whether racket-pkgs is installed
  - fix owenership of docs dir
  - update docs patch


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 1.4.2-8
changelog:
  - Add /dev/shm/qb* files to whitelist. Fixes bug #1403602
  - Add /dev/shm/squid-ssl_session_cache.shm to whitelist. Fixes bug #1411130


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-1
changelog:
  - Upgrade to 1.4.6. Fixes bug #1524456
  - Allow KRA vault log files. Fixes bug #1541472
  - ipc_shared_mem warning fixed upstream. Fixes bug #1524456


author: David Cantrell <dcantrell@redhat.com> - 0.9-1
changelog:
  - Add the new favor_release setting to rpminspect.conf
  - Add commented out [inspections] block in rpminspect.conf
  - Simplify the string concatenation in meson.build
  - Make compatible with meson 0.47.0
  - Sync up rpminspect.conf with the default one.
  - Add 'pathmigration' settings to rpminspect.conf
  - Add size_threshold=20 to the [settings] section
  - Ignore *.xml.in template files.
  - Synchronize with official Fedora license list.
  - Update the AUTHORS file
  - Remove GitHub Release entry stuff from utils/release.sh


author: David Cantrell <dcantrell@redhat.com> - 0.10-1
changelog:
  - Add F32 to stat-whitelist, fix version names
  - Add F33 with Java 11 default bytecode version
  - Add [lto] section to rpminspect.conf with lto_symbol_name_prefixes


author: David Cantrell <dcantrell@redhat.com> - 1.0-1
changelog:
  - Use this project's user.name and user.email for Koji builds.
  - Add .gitignore
  - Convert configuration files to YAML format, bump version to 1.0.
  - Update the 'ignore' section in rpminspect.yaml
  - Add /usr/bin/vmware-user-suid-wrapper to setxid whitelist
  - Split 'make release' in to 'make new-release' and 'make release'


author: David Cantrell <dcantrell@redhat.com> - 1.1-1
changelog:
  - Restructure rpminspect-data-fedora so it can coexist with other pkgs
  - Update the README
  - Add 'types: off' to the list of commented out inspections
  - Rename ipv6_blacklist to forbidden_ipv6_blacklist
  - Rename stat-whitelist to fileinfo, adjust header comments
  - Rename abi-checking-whitelist/ to abi/
  - Rename political-whitelist/ to politics/
  - Rename version-whitelist/ to rebaseable/
  - Change default licensing to CC-BY-SA-4.0
  - A few missed files for the license change
  - Rollback project version change
  - Add abidiff section to fedora.yaml
  - Update abidiff and kmidiff blocks in fedora.yaml
  - Add kabi_dir and kabi_filename to fedora.yaml, but commented out.
  - Add Firmware and Distributable licenses.
  - Set minimum JVM bytecode version for Fedora 34 (#9)
  - Update the inspections section in fedora.yaml
  - Utility script and Copr Makefile updates


author: David Cantrell <dcantrell@redhat.com> - 1.2-1
changelog:
  - More fixes for submit-koji-builds.sh
  - Increment development work version to 1.2
  - Rename '%files' to 'files'; add 'config' and 'doc' to inspections
  - Remove the politics/ subdirectory and the files in it.
  - Add 'politics' and 'virus' to the fedora.yaml config file.
  - s/DT_NEEDED/dsodeps/g in fedora.yaml
  - Require optional packages used by enabled inspections.
  - Add excluded_paths block to the pathmigration block
  - Adjust the pathmigration block to have 'migrated_paths'
  - Update rpminspect-data-fedora.spec.in
  - Updates to the 'make koji' process


author: David Cantrell <dcantrell@redhat.com> - 1.3-1
changelog:
  - Small change to the way Koji builds are submitted
  - Ignore build/ in .gitignore
  - Update fedora.yaml from generic.yaml, disable 'patches' inspection
  - Eliminate duplicate entries in licenses/fedora.json
  - Simplify test() definition in meson.build


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Increment the development tree version to 1.4.
  - Document the release process and add another helper target to the
    Makefile
  - 'make koji' skips branches that lack Koji build targets
  - Set VENDORBLD to the vendor build too in submit-koji-builds.sh
  - Add NPSL
  - Update fedora.yaml for the new 'badfuncs' inspection.
  - The badfuncs inspection is in rpminspect >= 1.3, update spec file
  - Add MIT-0 license
  - Add runpath section to fedora.yaml


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Add a 'rawhide' profile to disable a lot of inspections
  - Add missing ID value to the npsl license entry
  - /usr/lib/dracut and /usr/lib/udev are valid paths
  - Update fedora.yaml with all current configuration file changes
  - Explain size_threshold can be 'info'


author: Stefan Schulze Frielinghaus <stefansf@fedoraproject.org> - 2.8.2-1
changelog:
  - New upstream release
  - Clean up spec file
  - Added an environment file /etc/sysconfig/sec in order to specify command line options


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49
   - many: add Delegate=true to generated systemd units for special
     interfaces
   - cmd/snap-bootstrap: rename ModeenvFromModel to
     EphemeralModeenvForModel
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - osutil: skip TestReadBuildGo inside sbuild
   - tests: fix umount for snapd snap on fsck-on-boot test
   - snap/info_test.go: add unit test cases for bug
   - tests/main/services-after-before: add regression spread test
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - OpenGL interface: Support more Tegra libs
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - cmd: make string/error code more robust against errno leaking
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - tests: update test pkg for fedora and centos
   - gadget: pass sector size in to mkfs family of functions, use to
     select block sz
   - o/snapshotstate: fix returning of snap names when duplicated
     snapshot is detected
   - tests/main/snap-network-errors: skip flushing dns cache on
     centos-7
   - interfaces/builtin: Allow DBus property access on
     org.freedesktop.Notifications
   - cgroup-support.c: fix link to CGROUP DELEGATION
   - osutil: update go-udev package
   - packaging: fix arch-indep build on debian-sid
   - {,sec}boot: pass "key-name" to the FDE hooks
   - asserts: sort by revision with Sort interface
   - gadget: add gadget.ResolveContentPaths()
   - cmd/snap-repair: save base snap and mode in device info; other
     misc cleanups
   - tests: cleanup the run-checks script
   - asserts: snapasserts method to validate installed snaps against
     validation sets
   - tests: normalize test tools - part 1
   - snapshotstate: detect duplicated snapshot imports
   - interfaces/builtin: fix unit test expecting snap-device-helper at
     /usr/lib/snapd
   - tests: apply workaround done for snap-advise-command to apt-hooks
     test
   - tests: skip main part of snap-advise test if 429 error is
     encountered
   - many: clarify gadget role-usage consistency checks for UC16/18 vs
     UC20
   - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable
     broken tests on sid
   - interfaces/builtin: more drive by fixes, import ordering, removing
     dead code
   - tests: skip interfaces-openvswitch spread test on debian sid
   - interfaces/apparmor: drive by comment fix
   - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree
     usage
   - cmd/libsnap-confine-private: make unit tests execute happily in a
     container
   - interfaces, wrappers: misc comment fixes, etc.
   - asserts/repair.go: add "bases" and "modes" support to the repair
     assertion
   - interfaces/opengl: allow RPi MMAL video decoding
   - snap: skip help output tests for go-flags v1.4.0
   - gadget: add validation for "$kernel:ref" style content
   - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside
     containers
   - spdx: update to SPDX license list version: 3.11 2020-11-25
   - tests: improve hotplug test setup on classic
   - tests: update check to verify is the current system is arm
   - tests: use os-query tool to check debian, trusty and tumbleweed
   - daemon: start moving implementation to api_snaps.go
   - tests/main/snap-validate-basic: disable test on Fedora due to go-
     flags panics
   - tests: fix library path used for tests.pkgs
   - tests/main/cohorts: replace yq with a Python snippet
   - run-checks: update to match new argument syntax of ineffassign
   - tests: use apiBaseSuite for snapshots tests, fix import endpoint
     path
   - many: separate consistency/content validation into
     gadget.Validate|Content
   - o/{device,snap}state: enable devmode snaps with dangerous model
     assertions
     secboot: add test for when systemd-run does not honor
     RuntimeMaxSec
   - secboot: add workaround for snapcore/core-initrd issue #13
   - devicestate: log checkEncryption errors via logger.Noticef
   - o/daemon: validation sets api and basic spread test
   - gadget: move BuildPartitionList to install and make it unexported
   - tests: add nested spread end-to-end test for fde-hooks
   - devicestate: implement checkFDEFeatures()
   - boot: tweak resealing with fde-setup hooks
   - tests: add os query commands for subsystems and architectures
   - o/snapshotstate: don't set auto flag in the snapshot file
   - tests: use os.query tool instead of comparing the system var
   - testutil: use the original environment when calling shellcheck
   - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
     init restrict file
   - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and
     instead set the implicit labels when loading the yaml
   - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal-
     key
   - gadget/quantity: introduce Offset, start using it for offset
     related fields in the gadget
   - gadget: use "sealed-keys" to determine what method to use for
     reseal
   - tests/main/fake-netplan-apply: disable test on xenial for now
   - daemon: start splitting snaps op tests out of api_test.go
   - testutil: make DBusTest use a custom bus configuration file
   - tests: replace pkgdb.sh (library) with tests.pkgs (program)
   - gadget: prepare gadget kernel refs (0/N)
   - interfaces/builtin/docker-support: allow /run/containerd/s/...
   - cmd/snap-preseed: reset run inhibit locks on --reset.
   - boot: add sealKeyToModeenvUsingFdeSetupHook()
   - daemon: reorg snap.go and split out sections and icons support
     from api.go
   - sandbox/seccomp: use snap-seccomp's stdout for getting version
     info
   - daemon: split find support to its own api_*.go files and move some
     helpers
   - tests: move snapstate config defaults tests to a separate file.
   - bootloader/{lk,lkenv}: followups from #9695
   - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite
   - gadget,o/devicestate: set implicit values for schema and role
     directly instead of relying on Effective* accessors
   - daemon: split aliases support to its own api_*.go files
   - gadget: start separating rule/convention validation from basic
     soundness
   - cmd/snap-update-ns: add better unit test for overname sorting
   - secboot: use `fde-reveal-key` if available to unseal key
   - tests: fix lp-1899664 test when snapd_x1 is not installed in the
     system
   - tests: fix the scenario when the "$SRC".orig file does not exist
   - cmd/snap-update-ns: fix sorting of overname mount entries wrt
     other entries
   - devicestate: add runFDESetupHook() helper
   - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv
     structs
   - daemon: split unsupported buy implementation to its own api_*.go
     files
   - tests: download timeout spread test
   - gadget,o/devicestate: hybrid 18->20 ready volume setups should be
     valid
   - o/devicestate: save model with serial in the device save db
   - bootloader: add check for prepare-image time and more tests
     validating options
   - interfaces/builtin/log_observe.go: allow controlling apparmor
     audit levels
   - hookstate: refactor around EphemeralRunHook
   - cmd/snap: implement 'snap validate' command
   - secboot,devicestate: add scaffoling for "fde-reveal-key" support
   - boot: observe successful command line update, provide a default
   - tests: New queries for the os tools
   - bootloader/lkenv: specify backup file as arg to NewEnv(), use ""
     as path+"bak"
   - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk
     iface
   - daemon: split out snapctl support and snap configuration support
     to their own api_*.go files
   - snapshotstate: improve handling of multiple errors
   - tests: sign new nested-18|20* models to allow for generic serials
   - bootloader: remove installableBootloader interface and methods
   - seed: cleanup/drop some no longer valid TODOS, clarify some other
     points
   - boot: set kernel command line in modeenv during install
   - many: rename disks.FindMatching... to FindMatching...WithFsLabel
     and err type
   - cmd/snap: suppress a case of spurious stdout logging from tests
   - hookstate: add new HookManager.EphemeralRunHook()
   - daemon: move some more api tests from daemon to daemon_test
   - daemon: split apps and logs endpoints to api_apps.go and tests
   - interfaces/utf: Add Ledger to U2F devices
   - seed/seedwriter: consider modes when checking for deps
     availability
   - o/devicestate,daemon: fix reboot system action to not require a
     system label
   - cmd/snap-repair,store: increase initial retry time intervals,
     stalling TODOs
   - daemon: split interfacesCmd to api_interfaces.go
   - github: run nested suite when commit is pushed to release branch
   - client: reduce again the /v2/system-info timeout
   - tests: reset fakestore unit status
   - update-pot: fix typo in plural keyword spec
   - tests: remove workarounds that add "ubuntu-save" if missing
   - tests: add unit test for auto-refresh with validate-snap failure
   - osutil: add helper for getting the kernel command line
   - tests/main/uc20-create-partitions: verify ubuntu-save encryption
     keys, tweak not MATCH
   - boot: add kernel command lines to the modeenv file
   - spread: bump delta ref, tweak repacking to make smaller delta
     archives
   - bootloader/lkenv: add v2 struct + support using it
   - snapshotstate: add cleanup of abandonded snapshot imports
   - tests: fix uc20-create-parition-* tests for updated gadget
   - daemon: split out /v2/interfaces tests to api_interfaces_test.go
   - hookstate: implement snapctl fde-setup-{request,result}
   - wrappers, o/devicestate: remove EnableSnapServices
   - tests: enable nested on 20.10
   - daemon: simplify test helpers Get|PostReq into Req
   - daemon: move general api to api_general*.go
   - devicestate: make checkEncryption fde-setup hook aware
   - client/snapctl, store: fix typos
   - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files
     before doing apt ops
   - cmd/snap-bootstrap: update model cross-check considerations
   - client,snapctl: add naive support for "stdin"
   - many: add new "install-mode: disable" option
   - osutil/disks: allow building on mac os
   - data/selinux: update the policy to allow operations on non-tmpfs
     /tmp
   - boot: add helper for generating candidate kernel lines for
     recovery system
   - wrappers: generate D-Bus service activation files
   - bootloader/many: rm ConfigFile, add Present for indicating
     presence of bloader
   - osutil/disks: allow mocking DiskFromDeviceName
   - daemon: start cleaning up api tests
   - packaging/arch: sync with AUR packaging
   - bootloader: indicate when boot config was updated
   - tests: Fix snap-debug-bootvars test to make it work on arm devices
     and core18
   - tests/nested/manual/core20-save: verify handling of ubuntu-save
     with different system variants
   - snap: use the boot-base for kernel hooks
   - devicestate: support "storage-safety" defaults during install
   - bootloader/lkenv: mv v1 to separate file,
     include/lk/snappy_boot_v1.h: little fixups
   - interfaces/fpga: add fpga interface
   - store: download timeout
   - vendor: update secboot repo to avoid including secboot.test binary
   - osutil: add KernelCommandLineKeyValue
   - gadget/gadget.go: allow system-recovery-{image,select} as roles in
     gadget.yaml
   - devicestate: implement boot.HasFDESetupHook
   - osutil/disks: add DiskFromName to get a disk using a udev name
   - usersession/agent: have session agent connect to the D-Bus session
     bus
   - o/servicestate: preserve order of services on snap restart
   - o/servicestate: unlock state before calling wrappers in
     doServiceControl
   - spread: disable unattended-upgrades on ubuntu
   - tests: testing new fedora 33 image
   - tests: fix fsck on boot on arm devices
   - tests: skip boot state test on arm devices
   - tests: updated the systems to run prepare-image-grub test
   - interfaces/raw_usb: allow read access to /proc/tty/drivers
   - tests: unmount /boot/efi in fsck-on-boot test
   - strutil/shlex,osutil/udev/netlink: minimally import go-check
   - tests: fix basic20 test on arm devices
   - seed: make a shared seed system label validation helper
   - tests/many: enable some uc20 tests, delete old unneeded tests or
     TODOs
   - boot/makebootable.go: set snapd_recovery_mode=install at image-
     build time
   - tests: migrate test from boot.sh helper to boot-state tool
   - asserts: implement "storage-safety" in uc20 model assertion
   - bootloader: use ForGadget when installing boot config
   - spread: UC20 no longer needs 2GB of mem
   - cmd/snap-confine: implement snap-device-helper internally
   - bootloader/grub: replace old reference to Managed...Blr... with
     Trusted...Blr...
   - cmd/snap-bootstrap: add readme for snap-bootstrap + real state
     diagram
   - interfaces: fix greengrass attr namingThe flavor attribute names
     are now as follows:
   - tests/lib/nested: poke the API to get the snap revisions
   - tests: compare options of mount units created by snapd and snapd-
     generator
   - o/snapstate,servicestate: use service-control task for service
     actions
   - sandbox: track applications unconditionally
   - interfaces/greengrass-support: add additional "process" flavor for
     1.11 update
   - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.49-1
changelog:
  - Release snapd 2.49 to Fedora (RHBZ#1927314)
  - Include fix for CVE-2020-27352 (RHBZ#1927428, RHBZ#1927432)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49.1
   - tests: turn modules off explicitly in spread go unti test
   - o/snapshotstate: create snapshots directory on import
   - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
   - interfaces: add allegro-vcu and media-control interfaces
   - interfaces: opengl: add Xilinx zocl bits
   - many: fix new ineffassign warnings
   - interfaces/seccomp/template.go: allow copy_file_range
   - interfaces: allow reading the Xauthority file KDE Plasma writes
     for Wayland sessions
   - data/selinux: allow system dbus to watch
     /var/lib/snapd/dbus-1
   - Remove apparmor downgrade feature
   - Support tmp and log dirs on Yocto/Poky


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49.2
   - interfaces/tee: add TEE/OPTEE interface
   - o/configstate/configcore: add hdmi_timings to pi-config
   - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
   - snap-seccomp: fix seccomp test on ppc64el
   - interfaces{,/apparmor}, overlord/snapstate:
     late removal of snap-confine apparmor profiles
   - overlord/snapstate, wrappers: add dependency on usr-lib-
     snapd.mount for services on core with snapd snap
   - o/configstate: deal with no longer valid refresh.timer=managed
   - overlord/snapstate: make sure that snapd current symlink is not
     removed during refresh
   - packaging: drop dh-systemd from build-depends on ubuntu-16.04+
   - o/{device,hook}state: encode fde-setup-request key as base64
   - snapstate: reduce reRefreshRetryTimeout to 1/2 second
   - tests/main/uc20-create-partitions: fix tests cleanup
   - o/configstate, o/snapshotstate: fix handling of nil snap config on
     snapshot restore
   - snap-seccomp: add new `close_range` syscall


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.50
   - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu
     Core system
   - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug
   - o/servicestate/servicemgr.go: add ensure loop for snap service
     units
   - wrappers/services.go: introduce EnsureSnapServices()
   - snapstate: add "kernel-assets" to featureSet
   - systemd: wait for zfs mounts
   - overlord: make servicestate responsible to compute
     SnapServiceOptions
   - boot,tests: move where we write boot-flags one level up
   - o/configstate: don't pass --root=/ when
     masking/unmasking/enabling/disabling services
   - cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to
     /run
   - gadget: be more flexible with kernel content resolving
   - boot, cmd/snap: include extra cmdline args in debug boot-vars
     output
   - boot: support read/writing boot-flags from userspace/initramfs
   - interfaces/pwm: add PWM interface
   - tests/lib/prepare-restore.sh: clean out snapd changes and snaps
     before purging
   - systemd: enrich UnitStatus returned by systemd.Status() with
     Installed flag
   - tests: updated restore phase of spread tests - part 1
   - gadget: add support for kernel command line provided by the gadget
   - tests: Using GO111MODULE: "off" in spread.yaml
   - features: add gate-auto-refresh-hook feature flag
   - spread: ignore linux kernel upgrade in early stages for arch
     preparation
   - tests: use snaps-state commands and remove them from the snaps
     helper
   - o/configstate: fix panic with a sequence of config unset ops over
     same path
   - api: provide meaningful error message on connect/disconnect for
     non-installed snap
   - interfaces/u2f-devices: add HyperFIDO Pro
   - tests: add simple sanity check for systemctl show
     --property=UnitFileState for unknown service
   - tests: use tests.session tool on interfaces-desktop-document-
     portal test
   - wrappers: install D-Bus service activation files for snapd session
     tools on core
   - many: add x-gvfs-hide option to mount units
   - interfaces/builtin/gpio_test.go: actually test the generated gpio
     apparmor
   - spread: tentative workaround for arch failure caused by libc
     upgrade and cgroups v2
   - tests: add spread test for snap validate against store assertions
   - tests: remove snaps which are not used in any test
   - ci: set the accept-existing-contributors parameter for the cla-
     check action
   - daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and
     some apiBaseSuite cosmetics)
   - o/devicestate/devicemgr: register install-device hook, run if
     present in install
   - o/configstate/configcore: simple refactors in preparation for new
     function
   - tests: unifying the core20 nested suite with the core nested suite
   - tests: uboot-unpacked-assets updated to reflect the real path used
     to find the kernel
   - daemon: switch api_test.go to daemon_test and various other
     cleanups
   - o/configstate/configcore/picfg.go: add hdmi_cvt support
   - interfaces/apparmor: followup cleanups, comments and tweaks
   - boot: cmd/snap-bootstrap: handle a candidate recovery system v2
   - overlord/snapstate: skip catalog refresh when snappy testing is
     enabled
   - overlord/snapstate, overlord/ifacestate: move late security
     profile removal to ifacestate
   - snap-seccomp: fix seccomp test on ppc64el
   - interfaces, interfaces/apparmor, overlord/snapstate: late removal
     of snap-confine apparmor profiles
   - cmd/snap-bootstrap/initramfs-mounts: move time forward using
     assertion times
   - tests: reset the system while preparing the test suite
   - tests: fix snap-advise-command check for 429
   - gadget: policy for gadget/kernel refreshes
   - o/configstate: deal with no longer valid refresh.timer=managed
   - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
   - cla-check: Use has-signed-canonical-cla GitHub Action
   - tests: validation sets spread test
   - tests: simplify the reset.sh logic by removing not needed command
   - overlord/snapstate: make sure that snapd current symlink is not
     removed during refresh
   - tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20
   - tests/lib/fde-setup-hook: also verify that fde-reveal-key key data
     is base64
   - o/devicestate: split off ensuring next boot goes to run mode into
     new task
   - tests: fix cgroup-tracking test
   - boot: export helper for clearing tried system state, add tests
   - cmd/snap: use less aggressive client timeouts in unit tests
   - daemon: fix signing key validity timestamp in unit tests
   - o/{device,hook}state: encode fde-setup-request key as base64
     string
   - packaging: drop dh-systemd from build-depends on ubuntu-16.04+
   - cmd/snap/pack: unhide the compression option
   - boot: extend set try recovery system unit tests
   - cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use
     secboot's implicit fallback
   - o/configstate/configcore: add hdmi_timings to pi-config
   - snapstate: reduce reRefreshRetryTimeout to 1/2 second
   - interfaces/tee: add TEE/OPTEE interface
   - o/snapstate: update validation sets assertions with auto-refresh
   - vendor: update go-tpm2/secboot to latest version
   - seed: ReadSystemEssentialAndBetterEarliestTime
   - tests: replace while commands with the retry tool
   - interfaces/builtin: update unit tests to use proper distro's
     libexecdir
   - tests: run the reset.sh helper and check test invariants while the
     test is restored
   - daemon: switch preexisting daemon_test tests to apiBaseSuite and
     .req
   - boot, o/devicestate: split makeBootable20 into two parts
   - interfaces/docker-support: add autobind unix rules to docker-
     support
   - interfaces/apparmor: allow reading
     /proc/sys/kernel/random/entropy_avail
   - tests: use retry tool instead a loops
   - tests/main/uc20-create-partitions: fix tests cleanup
   - asserts: mode where Database only assumes cur time >= earliest
     time
   - daemon: validation sets/api tests cleanup
   - tests: improve tests self documentation for nested test suite
   - api: local assertion fallback when it's not in the store
   - api: validation sets monitor mode
   - tests: use fs-state tool in interfaces tests
   - daemon:  move out /v2/login|logout and errToResponse tests from
     api_test.go
   - boot: helper for inspecting the outcome of a recovery system try
   - o/configstate, o/snapshotstate: fix handling of nil snap config on
     snapshot restore
   - tests: update documentation and checks for interfaces tests
   - snap-seccomp: add new `close_range` syscall
   - boot: revert #10009
   - gadget: remove `device-tree{,-origin}` from gadget tests
   - boot: simplify systems test setup
   - image: write resolved-content from snap prepare-image
   - boot: reseal the run key for all recovery systems, but recovery
     keys only for the good ones
   - interfaces/builtin/network-setup-{control,observe}: allow using
     netplan directly
   - tests: improve sections prepare and restore - part 1
   - tests: update details on task.yaml files
   - tests: revert os.query usage in spread.yaml
   - boot: export bootAssetsMap as AssetsMap
   - tests/lib/prepare: fix repacking of the UC20 kernel snap for with
     ubuntu-core-initramfs 40
   - client: protect against reading too much data from stdin
   - tests: improve tests documentation - part 2
   - boot: helper for setting up a try recover system
   - tests: improve tests documentation - part 1
   - tests/unit/go: use tests.session wrapper for running tests as a
     user
   - tests: improvements for snap-seccomp-syscalls
   - gadget: simplify filterUpdate (thanks to Maciej)
   - tests/lib/prepare.sh: use /etc/group and friends from the core20
     snap
   - tests: fix tumbleweed spread tests part 2
   - tests: use new commands of os.query tool on tests
   - o/snapshotstate: create snapshots directory on import
   - tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list
   - packaging: drop 99-snapd.conf via dpkg-maintscript-helper
   - osutil: add SetTime() w/ 32-bit and 64-bit implementations
   - interfaces/wayland: rm Xwayland Xauth file access from wayland
     slot
   - packaging/ubuntu-16.04/rules: turn modules off explicitly
   - gadget,devicestate: perform kernel asset update for $kernel: style
     refs
   - cmd/recovery: small fix for `snap recovery` tab output
   - bootloader/lkenv: add recovery systems related variables
   - tests: fix new tumbleweed image
   - boot: fix typo, should be systems
   - o/devicestate: test that users.create.automatic is configured
     early
   - asserts: use Fetcher in AddSequenceToUpdate
   - daemon,o/c/configcore: introduce users.create.automatic
   - client, o/servicestate: expose enabled state of user daemons
   - boot: helper for checking and marking tried recovery system status
     from initramfs
   - asserts: pool changes for validation-sets (#9930)
   - daemon: move the last api_foo_test.go to daemon_test
   - asserts: include the assertion timestamp in error message when
     outside of signing key validity range
   - ovelord/snapshotstate: keep a few of the last line tar prints
     before failing
   - gadget/many: rm, delay sector size + structure size checks to
     runtime
   - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
   - interfaces: add allegro-vcu and media-control interfaces
   - interfaces: opengl: add Xilinx zocl bits
   - mkversion: check that version from changelog is set before
     overriding the output version
   - many: fix new ineffassign warnings
   - .github/workflows/labeler.yaml: try work-around to not sync
     labels
   - cmd/snap, boot: add debug set-boot-vars
   - interfaces: allow reading the Xauthority file KDE Plasma writes
     for Wayland sessions
   - tests/main/snap-repair: test running repair assertion w/ fakestore
   - tests: disable lxd tests for 21.04 until the lxd images are
     published for the system
   - tests/regression/lp-1910456: cleanup the /snap symlink when done
   - daemon: move single snap querying and ops to api_snaps.go
   - tests: fix for preseed and dbus tests on 21.04
   - overlord/snapshotstate: include the last message printed by tar in
     the error
   - interfaces/system-observe: Allow reading /proc/zoneinfo
   - interfaces: remove apparmor downgrade feature
   - snap: fix unit tests on Go 1.16
   - spread: disable Go modules support in environment
   - tests: use new path to find kernel.img in uc20 for arm devices
   - tests: find files before using cat command when checking broadcom-
     asic-control interface
   - boot: introduce good recovery systems, provide compatibility
     handling
   - overlord: add manager gadget refresh test
   - tests/lib/fakestore: support repair assertions too
   - github: temporarily disable action labeler due to issues with
     labels being removed
   - o/devicestate,many: introduce DeviceManager.preloadGadget for
     EarlyConfig
   - tests: enable ubuntu 21.04 for spread tests
   - snap: provide a useful error message if gdbserver is not installed
   - data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1
   - tests/lib/prepare.sh: split reflash.sh into two parts
   - packaging/opensuse: sync with openSUSE packaging
   - packaging: disable Go modules in snapd.mk
   - snap: add deprecation noticed to "snap run --gdb"
   - daemon: add API for checking and installing available theme snaps
   - tests: using labeler action to add automatically a label to run
     nested tests
   - gadget: improve error handling around resolving content sources
   - asserts: repeat the authority cross-check in CheckSignature as
     well
   - interfaces/seccomp/template.go: allow copy_file_range
   - o/snapstate/check_snap.go: add support for many subversions in
     assumes snapdX..
   - daemon: move postSnap and inst.dispatch tests to api_snaps_test.go
   - wrappers: use proper paths for mocked mount units in tests
   - snap: rename gdbserver option to `snap run --gdbserver`
   - store: support validation sets with fetch-assertions action
   - snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky
   - packaging/fedora: sync with downstream packaging in Fedora
   - many: add Delegate=true to generated systemd units for special
     interfaces (master)
   - boot: use a common helper for mocking boot assets in cache
   - api: validate snaps against validation set assert from the store
   - wrappers: don't generate an [Install] section for timer or dbus
     activated services
   - tests/nested/core20/boot-config-update: skip when snapd was not
     built with test features
   - o/configstate,o/devicestate: introduce devicestate.EarlyConfig
     implemented by configstate.EarlyConfig
   - cmd/snap-bootstrap/initramfs-mounts: fix typo in func name
   - interfaces/builtin: mock distribution in fontconfig cache unit
     tests
   - tests/lib/prepare.sh: add another console= to the reflash magic
     grub entry
   - overlord/servicestate: expose dbus activators of a service
   - desktop/notification: test against a real session bus and
     notification server implementation
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - HACKING.md: explain how to run UC20 spread tests with QEMU
   - asserts: introduce AtSequence
   - overlord/devicestate: task for updating boot configs, spread test
   - gadget: fix documentation/typos
   - gadget: cleanup MountedFilesystem{Writer,Updater}
   - gadget: use ResolvedSource in MountedFilesystemWriter
   - snap/info.go: add doc-comment for SortServices
   - interfaces: add an optional mount-host-font-cache plug attribute
     to the desktop interface
   - osutil: skip TestReadBuildGo inside sbuild
   - o/hookstate/ctlcmd: add optional --pid and --apparmor-label
     arguments to "snapctl is-connected"
   - data/env/snapd: use quoting in case PATH contains spaces
   - boot: do not observe successful boot assets if not in run mode
   - tests: fix umount for snapd snap on fsck-on-boot testumount:
     /run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount
   - misc: little tweaks
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - devicestate: keep log from install-mode on installed system
   - seed: add LoadEssentialMeta to seed16 and allow all of its
     implementations to be called multiple times
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - tests/core/uc20-recovery: move recover mode helpers to generic
     testslib script
   - interfaces/fwupd: allow any distros to access fw files via fwupd
   - store: method for fetching validation set assertion
   - store: switch to v2/assertions api
   - gadget: add new ResolvedContent and populate from LayoutVolume()
   - spread: use full format when listing processes
   - osutil/many: make all test pkgs osutil_test instead of "osutil"
   - tests/unit/go: drop unused environment variables, skip coverage
   - OpenGL interface: Support more Tegra libs
   - gadget,overlord: pass kernelRoot to install.Run()
   - tests: run unit tests in Focal instead of Xenial
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - daemon: move query /snaps/<name> tests to api_snaps_test.go
   - cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair
     runner
   - systemd/systemd.go: support journald JSON messages with arrays for
     values
   - cmd: make string/error code more robust against errno leaking
   - github, run-checks: do not collect coverage data on subsequent
     test runs
   - boot: boot config update & reseal
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - osutil/stat.go: add RegularFileExists
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - gadget/gadget.go: rename ubuntu-* to system-* in doc-comment
   - tests: use 6 spread workers for centos8
   - bootloader/assets: support injecting bootloader assets in testing
     builds of snapd
   - gadget: enable multi-volume uc20 gadgets in
     LaidOutSystemVolumeFromGadget; rename too
   - overlord/devicestate, sysconfig: do nothing when cloud-init is not
     present
   - cmd/snap-repair: filter repair assertions based on bases + modes
   - snap-confine: make host /etc/ssl available for snaps on classic


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2.5.1-1
changelog:
  - Resolves: rhbz#1095890 - upstream version bump to 2.5.1
  - Resolves: rhbz#1095967 - spectrwm packaging issues
  - generate and install appropriate licenses


author: Xavier Bachelot <xavier@bachelot.org> 6.2.56-1
changelog:
  - Update to 6.2.56 (Fixes CVE-2020-10936)
  - Fix typo in url and also socket location in lighttpd configuration (RHBZ#1812325)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.62-1
changelog:
  - Update to 6.2.62
    - Fixes CVE-2020-26880 (RHBZ#1886232 - RHBZ#1886233)
  - Unbundle jquery-ui
  - Unbundle jquery on EL8


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 4-1
changelog:
  - Release v4. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Extract user session recording functionality from tlog-rec into a new tool:
    tlog-rec-session. It should be used as the user's login shell now, and
    tlog-rec should be used as a general recording and testing tool.
  - Add (optional) support for writing to and reading from Systemd Journal - the
    "journal" reader and writer.
  - Make tlog-rec default to "file" writer, and tlog-rec-session to "journal",
    if built with Journal support, and to "syslog" otherwise.
  - Add "-o" option to tlog-rec as an alias to "--file-path".
  - Add "-i" option to tlog-play as an alias to "--file-path".
  - Assume locale charset is UTF-8, if ASCII charset is detected, since that is
    a likely indication the locale settings were lost. E.g. upon console login
    or "su -" on Fedora and RHEL.
  - Switch the "ver" JSON field type to string. Now it should be two numbers
    separated by a dot. The increase of the first number indicates
    forward-incompatible changes, the increase of the second number -
    forward-compatible. If the dot and the second number are omitted, the second
    number is considered to be zero. Bump the format version to "2".
  - Add a new JSON field: "rec", containing an opaque host-unique recording ID.
    Bump the format version to "2.1".
  - Add support for playback controls, both through the command line and via
    playback-time control keys, including: speed adjustment, pause/resume,
    fast-forward to a time, and packet-by-packet stepping through the recording.
  - Add optional rate-limiting of logged messages. Both throttling and dropping
    messages are supported.
  - Add "--lax" option to tlog-play to allow playing back recordings with
    missing messages.
  - Fix input being ignored when there is a lot of output, while recording.
  - Remove addition of tlog-rec (tlog-rec-session) to /etc/shells from RPM
    packaging to prevent users from changing their shells themselves once it has
    been assigned.
  - Add support for specifying the shell to start via the tlog-rec-session
    executable name. E.g. by making a tlog-rec-session-shell-zsh ->
    tlog-rec-session symlink and executing it. That can be used to specify
    particular shells to be recorded for specific users by assigning these
    symlinks as their login shells.
  - Make error messages from all the tools a bit less noisy and more readable.


author: Kirill Glebov <kgliebov@redhat.com> - 5-1
changelog:
  - Release v5. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Implement support for --configuration option for all programs.
    The option makes the program output its configuration in JSON and then
    exit.
  - Add BuildDependencies to allow yum-builddep.
  - Open JSON writer file with euid/egid. To allow creating protected log files
    with tlog-rec-session, open the JSON writer's file with the EUID and
    GUID the program was started with.
  - Installing Packages with the APT Addon instead of apt-get.
  - Switch to using TLOG_ERRS_RAISE macros.
  - Fix tlog-play cleanup-path segfault.
  - Modify command-line option parsing.
  - Remove "fields" field from ES query URL to fix compatibility with
    Elasticsearch 5.
  - Remove unused _source parameter from ES query URL.
  - Fix tlog-rec-session file permissions bug.
  - Use CLOCK_MONOTONIC for rate-limiting writing.
  - Filter out some more input control sequences.


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6. Added features and implemented fixes follow. See README.md and
    manpages for documentation of new features.
  - Add integration tests for end-to-end test coverage.
  - Fix compiler type comparison error with json-c json_object_array_length
    return value.
  - Fix a distribution issue causing incorrect M4_CONF_PATH expansion.
  - Log more detailed error when systemd journal is not present.


author: David Brown <david.brown@pnnl.gov> - 4.2.10-3
changelog:
  - Bugfix - #1215207 create/install service files for these
  - Bugfix - #1117263 qmgr aborts in some instances
  - Bugfix - #1144396 Hey! Version Bump!
  - Bugfix - #1215992 more service scripts
  - Bugfix - #1216037 fixed permissions on directories
  - Bugfix - #1149045 hopefully these are all fixed now
  - Bugfix - #965513 calling this one fixed...


author: David Brown <david.brown@pnnl.gov> - 4.2.10-4
changelog:
  - Bugfix - #1227003 test system in cluster environment
  - Bugfix - #1216049 add --enable-cpuset and hwloc
  - Bugfix - #1176080 this maybe a duplicate of #1216037


author: David Brown <david.brown@pnnl.gov> - 4.2.10-9
changelog:
  - Resolve dependencies for rawhide (#1308192)
  - Fix port and args environment variables for el5/6 (#1254301)


author: Pavel Alexeev <Pahan@Hubbitus.info> - 5.2.3-6
changelog:
  - Changes made due review process. Thank you to Manuel Wolfshant.
  - Removed AUTHORS files mention as it absent now.


author: Joe Doss <joe@solidadmin.com> - 1.0.20200510-1
changelog:
  - Update to 1.0.20200510
  - ipc: add support for openbsd kernel implementation
  - ipc: cleanup openbsd support
  - wg-quick: add support for openbsd kernel implementation
  - wg-quick: cleanup openbsd support
  - wg-quick: support dns search domains
  - Makefile: simplify silent cleaning
  - ipc: remove extra space
  - git: add gitattributes so tarball doesn't have gitignore files
  - terminal: specialize color_mode to stdout only
  - wg-quick: android: support application whitelist
  - systemd: add wg-quick.target


author: Joe Doss <joe@solidadmin.com> - 1.0.20200513-1
changelog:
  - Update to 1.0.20200513
  - Makefile: remember to install all systemd units
  - ipc: openbsd: switch to array ioctl interface


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-2
changelog:
  - Disable contrib/dns-hatchet/apply.sh on Fedora 33+ and RHEL9+
  - Prevent RPM from including python3 from doc macro for EPEL7


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Joe Doss <joe@solidadmin.com> - 1.0.20210424-1
changelog:
  - wg-quick: freebsd: check for socket using -S, not -f
  - wg-quick: freebsd: do not assume point-to-point interface flag
  - wg-quick: freebsd: use ifconfig for determining if interface is up
  - wg-quick: kill route monitor when loop terminates


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.14-2
changelog:
  - Bump up to 0.9.14
  - Add a set of patches to deal with new GCC warnings/errors
  - Do not emit warning on failed architecture detection
  - Exclude s390x arch for now


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.2-2
changelog:
  - Fix multipart range handling to work with quotes, fixes #1706627
  - Fix file creation permissions so they respect umask
  - Actually push new sources


