# changelog

author: David Woodhouse <dwmw2@infradead.org> - 1.2.6-1
changelog:
  - Update to 1.2.6
  - Support all protocols that OpenConnect does (#1714121)
  - Persistent support (#1701157)


author: Tom Callaway <spot@fedoraproject.org> - 4.0.2-5
changelog:
  - make cups a "Recommends" instead of a "Requires" (bz1875165)
  - even though f31 uses a forked spec file, reflect the systemlapack change there here


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.2rc1-19
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Petr Vokac <petr.vokac@cern.ch> - 1.14.2-6
changelog:
  - Bugfixes: LCGDM-2958, LCGDM-2961, LCGDM-2963, LCGDM-2964, OOB reads
  - Improvements: LCGDM-2943, LCGDM-2959, LCGDM-2962, LCGDM-2967, davs speed


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 6.0.11-1
changelog:
  - Update to 6.0.11
  - Use the new option to specify linking against the full protobuf on EPEL
  - Adjust for cmake macro changes


author: Filipe Brandenburger <filbranden@gmail.com> - 6.0.11-3
changelog:
  - Go back to using protobuf-lite on epel8, since the -devel package
    for it is now available (rhbz#1787458).


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 6.1.4-1
changelog:
  - Update to 6.1.4
  - Fix for SIGSTKSZ/MINSIGSTKSZ non-constant on glibc > 2.33
  - Declare bundled libraries


author: Miro Hrončok <mhroncok@redhat.com> - 1.22-20
changelog:
  - Subpackage python2-genders has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jens Petersen <petersen@redhat.com> - 8.2.2-67
changelog:
  - move manuals to new ghc-manual (noarch)
  - rename ghc-doc-index to ghc-doc-cron (noarch)
  - ghost the ghc-doc-index local state files
  - ghost some newer libraries index files
  - simplify and extend bcond for build configuration
  - drop bootstrap builds and do ABI hash checks unless ghc version changed
  - no longer need autotools on aarch64


author: Jens Petersen <petersen@redhat.com> - 8.2.2-68.1
changelog:
  - apply install_dirs.patch from llvm3.9 to fix llvm RPATHs
  - use ghc_set_cflags
  - turn off the testsuite


author: Jens Petersen <petersen@redhat.com> - 8.2.2-68.2
changelog:
  - do not delete RPATH for bundled llvm
  - fix docs config
  - add llvm-D25865-cmakeshlib.patch from llvm3.9


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:15.0.2.0.7-0.rolling
changelog:
  - Update to jdk-15.0.2.0+7
  - Add release notes for 15.0.1.0 & 15.0.2.0
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 15.0.x rather than 15.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Cleanup debug package descriptions and version number placement.
  - Remove unused patch files.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:16.0.0.0.36-0.rolling
changelog:
  - Update to jdk-16.0.0.0+36
  - Update tarball generation script to use git following OpenJDK's move to github
  - Update tarball generation script to use PR3823 which handles JDK-8235710 changes
  - Use upstream default for version-pre rather than setting it to "ea" or ""
  - Drop libsunec.so which is no longer generated, thanks to JDK-8235710
  - Drop unnecessary compiler flags, dating back to work on GCC 6 & 10
  - Adapt RH1750419 alt-java patch to still apply after some variable re-naming in the makefiles
  - Update filever to remove any trailing zeros, as in the OpenJDK build, and use for source filename
  - Use system harfbuzz now this is supported.
  - Pass SOURCE_DATE_EPOCH to build for reproducible builds


author: Jiri Vanek <jvanek@redhat.com> - 1:16.0.0.0.36-1.rolling
changelog:
  - fixed suggests of wrong pcsc-lite-devel(ppc-64) to correct pcsc-lite-libs(ppc-64)
  - bumped buildjdkver to build by itself - 16


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:16.0.0.0.36-2.rolling
changelog:
  - Perform static library build on a separate source tree with bundled image libraries
  - Make static library build optional
  - Based on initial work by Severin Gehwolf


author: Troy Dawson <tdawson@redhat.com> - 1:19.12.2-1.1
changelog:
  - Recommends: cdrskin from EPEL8, because cdrskin isn't in RHEL8
  - Put k3btheme.knsrc in correct directory


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 1.2.1-15
changelog:
  - Remove /usr/share/kservices5/settings-system-administration.desktop
  - Add Requires: plasma-systemsettings >= 5.16.90 (which now ships this file)


author: Mattia Verga <mattia.verga@email.it> - 3.2.1-2
changelog:
  - Backport patch from upstream to fix #1517718
  - Use --with-html in find_lang
  - Change appdata dir to metainfo


author: Rex Dieter <rdieter@fedoraproject.org> - 5.17.5-2
changelog:
  - -devel: drop bogus dep on -libs subpkg (#1790695), move more potd-devel stuff here
  - .spec cleanup


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.2-2
changelog:
  - replaced -WITH_XC_UPDATECHECK=OFF with -DWITH_XC_UPDATECHECK=OFF Read https://bugzilla.redhat.com/show_bug.cgi?id=1887609


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.3-2
changelog:
  - EL8: disabled documentation, removed rubygem-asciidoctor and quazip depencendies. For bugzilla tickets about missing dependencies, read this spec file near Fedora/EL8 macros


author: Germano Massullo <germano.massullo@gmail.com> - 2.6.4-2
changelog:
  - added xcb.patch that fixes GNOME quirks on Wayland sessions. Read https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/3BVLBS4B3XHJEXFVGD7RK2ZMXZG6JQZT/


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-2
changelog:
  - Requires: hicolor-icon-theme
  - fix ChangeLog encoding
  - validate kipiplugins.desktop
  - add .spec comment clarifying purpose of Obsoletes: kipi-plugins (upgrade path only)


author: Troy Dawson <tdawson@redhat.com> - 19.08.3-1.1
changelog:
  - 19.08.3 for RHEL8 due to older version of poppler
  - libical (and thus kcalendarcore) not on all arches for RHEL8


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.5-2
changelog:
  - missing StartupWMClass=konversation in .desktop file (#1590462)
  - move script/desktop modifiations to %prep (ie, like patching)
  - fix byte-compile warning (python2 vs python3)


author: Mattia Verga <mattia.verga@tiscali.it> - 3.2.0-1
changelog:
  - Update to stable release 3.2.0
  - Soname bump to libkpmcore.so.6
  - Remove kf5-kio-devel dependency
  - Add udftools as recommended package


author: Rich Mattes <richmattes@gmail.com> - 2.6.4-1
changelog:
  - Update to release 2.6.4, with upstream fix for qreal on armv7 (rhbz#1556028)
  - Remove upstream patch and update library names


author: Rex Dieter <rdieter@fedoraproject.org> - 5.18.4-2
changelog:
  - patch to workaround "Qt applications lose system theme if launched via dbus activation" (#1754395)


author: David Cantrell <dcantrell@redhat.com> - 1.1-1
changelog:
  - Formatting fixes in Makefile help output
  - Begin config file restructuring starting with rpminspect-data-generic
  - Support multiple configuration files.
  - Docs work in progress.
  - Only fail the annocheck inspection for RESULT_VERIFY.
  - Read debuginfo if available when running the 'annocheck' inspection.
  - Add the '%files' inspection to librpminspect
  - Add __attribute__((__sentinel__)) to the run_cmd() prototype
  - Add test suite cases for the '%files' inspection.
  - Added the 'types' inspection to compare MIME types between builds.
  - Update TODO file
  - Update the MISSING file
  - s/rpminspect.yaml/generic.yaml/ in the Makefile and README
  - Skip debuginfo and debugsource packages in the 'types' inspection
  - Add test_types.py to the test suite
  - Note the 'types' inspection generic.yaml
  - Modify add_entry() in init.c to skip duplicate entries
  - Start GitHub Action workflow files for rpminspect.
  - Install meson in ci-ubuntu.yml
  - Change 'nls' option in meson_options.txt to a boolean
  - Install gettext for ci-ubuntu
  - Add more build dependencies to ci-ubuntu.yml
  - Drop the 'method' parameter from dependency() lines in meson.build
  - Split xmlrpc libs to separate dependency() lines in meson.build
  - More xmlrpc updates for meson.build and lib/meson.build
  - Try to support systems with xmlrpc-c without the pkgconfig file.
  - Changes to build on Ubuntu, specifically the GitHub Actions system
  - Syntax error in ci-ubuntu.yml
  - Add ci-fedora.yml for GitHub Action CI on Fedora
  - Fix errors in ci-fedora.yml
  - Put all of the ci-ubuntu.yml steps in ci-ubuntu.yml
  - Remove install-libmandoc.sh and ubuntu-pkgs.sh helper scripts.
  - Install python3-setuptools in ci-ubuntu.yml
  - Install rpm-build in ci-fedora.yml
  - Install libxmlrpc-core-c3-dev in ci-ubuntu.yml
  - Disable ci-ubuntu.yml for now, enable code coverage in ci-fedora.yml
  - Remove Travis-CI files.
  - coverage fixes for ci-fedora.yml
  - Install git in ci-fedora.yml
  - Enable manual dispatching of the CI on Fedora tests
  - Remove actionspanel thing for GitHub Actions, drop Coveralls block
  - Comment the ci-fedora-yaml file
  - Fix the 'elf' inspection and test_elf.py on Ubuntu
  - Enable the ci-ubuntu GitHub Action again
  - Check all return values of getcwd()
  - Ignore installed Python modules with pip3 in ci-ubuntu.yml
  - Build 'execstack' test program with -Wl,-z,lazy
  - Add ci-centos8.yml to enable CI on CentOS 8 as a GitHub Action
  - s/centos8:latest/centos8/g
  - Trying 'container: centos:centos8'
  - Drop 'sudo' from ci-centos8.yml
  - Rename README to README.md
  - Enable GitHub Action for CI on CentOS 7
  - Drop -I from the pip install line in ci-centos7.yml
  - Use the 'make instreqs' target for install test suite deps.
  - Add back 'dnf -y install 'dnf-command(builddep)'' to ci-fedora.yml
  - Nope, that doesn't do it.  Just install make in ci-fedora.yml first
  - More 'make instreqs' fixes.
  - s/scripts/utils/g in the Makefile
  - s/TOPDIR/topdir/g in the Makefile
  - Install make in ci-centos7.yml
  - Move REQS and PIP lists out of the Makefile to files in osdep/
  - '^$$' -> '^$'
  - Slightly different sourcing of the osdep/ files
  - Set OS using := in the Makefile
  - Make the reqs.txt files in osdep/ contain all deps
  - linux-headers -> linux-headers-$(uname -r) for Ubuntu
  - Remove html401-dtds from osdep/centos8/reqs.txt
  - Use `` instead of $() since this list goes through make(1)
  - Does $(shell uname -r) work in this case?
  - More osdep/ work and simplification.
  - Rename 'osdep' to 'osdeps'
  - meson patches for opensuse
  - Move mandoc installation to post.sh in osdep/ubuntu
  - Add GitHub Action for CI on OpenSUSE
  - opensuse:latest -> opensuse/leap:latest
  - Install tar in ci-opensuse.yml
  - Install gzip in ci-opensuse.yml
  - More fixes for ci-opensuse.yml
  - Small fixes to determine-os.sh
  - ci: Add Python linting jobs
  - ShellCheck fixes for the regress/ scripts
  - ci: Add ShellCheck to lint shell scripts
  - Adjust how the Makefile reports unknown operating system.
  - Just check $ID in determine-os.sh for opensuse
  - Use pip for PIP_CMD on opensuse-leap
  - Update the centos images before doing anything else.
  - Install curl in opensuse-leap
  - Get 'rc' from Fedora on opensuse and copy it to /usr/local
  - Install kernel-default-devel for opensuse CI
  - Move the 'uses' part of the centos CI jobs to the first step
  - ShellCheck fixes for the utils/ scripts.
  - Some flake8 fixes in test/, using yapf
  - Combine all of the GitHub Actions CI runs in to ci.yml
  - Manually install rpmfluff on CentOS 7; pip is failing here
  - Use rpmfluff-0.5.7 explicitly for centos7
  - Use rpmfluff-0.5.6 on centos7
  - OK, let's try rpmfluff-0.5 for centos7
  - Last try, rpmfluff-0.5.4.1 for centos7
  - Back to trying to manually install rpmfluff for centos7
  - Style the Python code with Black
  - Add the Black formatting commit to blame revision ignore list
  - OK, just copy rpmfluff.py in place
  - Make sure to manually install rpmfluff-0.5.7.1 for centos7
  - Don't assume we have a header or even a list of files (#161)
  - python: flake8: drop * imports
  - python: flake8: wrap long lines to less than 100 characters
  - python: flake8: drop unused imports
  - python: flake8: remove unused local variables
  - python: flake8: add PEP8 whitespace
  - python: flake8: mark in-line bash scripts as raw strings
  - python: rename several duplicate test cases
  - ci: merge style workflows
  - Adjust rpminspect.spec.in for file moves and default changes.
  - Return the reallybadword to the metadata tests
  - Adjust test_metadata.LosingVendorCompareKojiBuild to expect VERIFY
  - The shared libmandoc check should not look for a static libmandoc
  - Update the AUTHORS file
  - Rename ipv6_blacklist to forbidden_ipv6_functions
  - Rename stat-whitelist to fileinfo
  - Rename 'caps_whitelist' to 'caps' and drop the use of 'whitelist'
  - Rename abi-checking-whitelist/ to abi/ in /usr/share/rpminspect
  - Rename 'version-whitelist/' to 'rebaseable/' in /usr/share/rpminspect
  - Rename "political-whitelist/" to "politics/" in /usr/share/rpminspect
  - Drop unnecessary method re-definitions in base test classes
  - Use super() rather than explicitly calling the parent class
  - Call configFile() on object instance rather than using the parent
    class
  - Upload coverage report to codecov
  - Improve the error reporting for test result checking
  - Convert to AUTHORS.md file, add Makefile target to generate it.
  - Introduce the 'movedfiles' inspection and a lot of other fixes (#155)
  - AUTHORS -> AUTHORS.md in rpminspect.spec.in
  - Add basic tests for the filesize inspection
  - Multiply the file size difference before dividing
  - Update README.md
  - Update README.md (more Markdown changes)
  - Update POTFILES and rpminspect.pot
  - chmod 0755 test_filesize.py
  - tests: optionally check the result message
  - tests: add further filesize tests for shrinking files
  - inspect_filesize: drop extra - from the message about file shrinkage
  - Enable 'permissions' inspect for single build analysis.
  - Add 24 new test cases to cover the 'permissions' inspection.
  - chmod 0755 test_permissions.py
  - Make sure all RESULT_INFO results are set to NOT_WAIVABLE
  - Fix some specific problems with the 'permissions' inspection.
  - Pass "-r GENERIC" to rpminspect in the TestCompareKoji class
  - Add 12 more permissions test cases for setuid file checks
  - Update TODO list
  - Update test_symlink.py tests for new waiver_auth values
  - Add a fedora-rawhide job and renamed 'fedora' to fedora-stable
  - Update the rpminspect.pot translation template
  - Relicense librpminspect (lib/ and include/) as LGPL-3.0-or-later
  - Ignore .tox/ subdirectory
  - License the rpminspect-data-generic subpackage as CC-BY-4.0
  - Add a copy of the Apache 2.0 license for the 5 files in librpminspect
  - Update the License tag in the spec file and the %license lines
  - Add debian-testing as a CI workflow; add missing osdeps files.
  - Update determine-os.sh to handle Fedora stable and rawhide
  - Drop the use of 'sudo' in ci.yml
  - sudo required for Ubuntu CI job, install make for debian-testing
  - See what $ID is set to in determine-os.sh
  - Workaround a bug in meson 0.55.0 for Fedora CI jobs
  - Add 'debian' catch to utils/determine-os.sh
  - Rename 'osdeps/debian-testing/' to 'osdeps/debian/'
  - Add opensuse-tumbleweed to the CI job list
  - Add libmagic-dev to osdeps/debian/reqs.txt
  - Fix memory corruption in init_rpminspect
  - Add comment clarifying the License tag in the spec file.
  - If check_results() raises AssertionError, dump the JSON output
  - Fix test_changelog.py test cases that are failing.
  - Fix UnbalancedChangeLogEditCompareKoji
  - Handle rpm versions with x.y.z.w version numbers in test_symlinks.py
  - Fix mandoc build problems in opensuse-tumbleweed CI job
  - Install gcovr using pip on opensuse-tumbleweed
  - Handle systems that lack pkg-config files for libelf and libcap
  - Add archlinux CI job in GitHub Actions
  - Forgot --noconfirm on the 'pacman -Syu' line.
  - Add missing DESC_MOVEDFILES block to inspection_desc()
  - More minor fixes to the Arch Linux CI job.
  - Install gcovr with pip for the Arch Linux CI job.
  - Support building on systems that lack <sys/queue.h>
  - Add detection for <sys/queue.h> to meson.build
  - Ensure an int is used for snprintf() in inspect_manpage_path()
  - WIP: 'abidiff' inspection
  - Only report permissions change if there is a mode_diff (#181)
  - Fix -Werror failures in inspect_abidiff.c
  - Add sl_run_cmd() to librpminspect.
  - Add get_arches() to librpminspect
  - WIP: abidiff inspection
  - Some minor edits to the README.md file
  - More minor updates to the README.md file
  - Replace get_arches() with init_arches()
  - Add test_addedfiles.py to the integration test suite
  - Expand find_one_peer() to soft match versioned ELF shared libraries
  - Add the beginnings of the 'abidiff' inspection code.
  - Report out findings in the abidiff inspection.
  - Update the test suite to cover rpmfluff 0.6
  - libmandoc configure workaround needed on Debian too
  - shellcheck fixes for the scripts in utils/
  - Add abi.c, the code that reads in the ABI compat level files (#144)
  - Be sure to close the open file before exiting init_fileinfo()
  - Python formatting cleanups
  - Add --diff to the Python format checker
  - Add new setting to abidiff section of the config file
  - Add -n/--no-rebase command line option to disable rebase detection
  - Store size_threshold as a long int rather than a char *
  - Check abidiff(1) results against the ABI compat level definitions
    (#144)
  - Add 'apt-get -y install libgcc-s1:i386' to pre.sh for Debian
  - Add integration test cases for the abidiff inspection (#144)
  - Add 'dpkg --configure -a' to pre.sh for debian
  - Install libterm-readline-perl-perl for debian CI
  - Install libabigail for Fedora and CentOS CI jobs
  - libgcc-s1:i386 -> lib32gcc-s1 for debian CI
  - Install libabigail for opensuse-leap, opensuse-tumbleweed, and arch CI
  - Install libabigail for debian and ubuntu CI
  - Install libabigail-dev for debian and ubuntu, not libabigail
  - Install libabigail-tools on opensuse-leap and opensuse-tumbleweed
  - Install libabigail-git for arch linux CI
  - Move free_argv_table() to runcmd.c
  - Install 'abigail-tools' for debian-testing and ubuntu CI
  - Install libabigail using the Arch User Repo on arch CI
  - Explain the osdeps/ subdirectory.
  - No, just clone libabigail from git and build it manually on arch
  - Add beginning of kmidiff inspection, put ABI functions in abi.c
  - Read list of possible kernel executable filenames from the config
    file.
  - Drop abidiff_ and kmidiff_ from extra_args; add kernel_filenames
  - Just call the abidiff and kmidiff extra args settings "extra_args"
  - Define 'kmi_ignore_pattern' in the config file.
  - Handle builds that lack all debuginfo packages (#186)
  - Do not assume peer->after_hdr exists (#187)
  - Store copy of original pointer in strsplit() to free at the end.
  - Use mmap() and strsplit() in read_file() rather than a getline() loop
  - Fix memory leaks in abi.c functions
  - open() failure in readfile() is not fatal, just return NULL
  - Add utils/gate.sh
  - Have check_abi() pass back the ABI compat level found
  - Update descriptions for abidiff and kmidiff inspections
  - Hook up the kmidiff inspection.
  - Use read_file() in init_fileinfo() and init_caps()
  - Use read_file() in validate_desktop_contents()
  - Use read_file() in disttag_driver()
  - Adjust how init_fileinfo() and init_caps() iterate over file contents
  - Fix 'tox -e format' style problems found.
  - Avoid comparing elf files that are not shared libraries
  - Support --kmi-whitelist in the kmidiff inspection
  - Trim worksubdir from paths in reported abidiff and kmidiff commands
  - Remove the kmi_ignore_pattern setting for the config file.
  - Create include/queue.h to replace the _COMPAT_QUEUE blocks everywhere
  - Update AUTHORS.md
  - Report metadata changes for rebased packages as INFO
  - Do not fail the specname inspection when given a non-SRPM
  - For passing upstream inspections, do not report a remedy string.
  - Do not fail the lostpayload inspections if it only gives INFO messages
  - Clarify unapproved license message in the license inspection
  - Use FOPEN_MAX for nopenfd parameter in nftw() calls
  - Make sure to close open file descriptors from get_elf() calls.
  - Include 'src' architecture in the rpminspect runs in gate.sh
  - Make sure kmidiff is listed in the spec file
  - TODO updates
  - Update rpminspect.pot and POTFILES for translations


author: David Cantrell <dcantrell@redhat.com> - 1.2-1
changelog:
  - For BUILDTYPE=release, generate the correct type of changelog
  - Minor logic error in submit-koji-builds.sh
  - Fix reading existing spec file in submit-koji-builds.sh
  - Bump development build version to 1.2
  - Use is_rebase() in the 'upstream' inspection
  - Use rpmtdSetIndex() and rpmtdGetString() in get_header_value()
  - Add get_rpmtag_fileflags() to files.c and call from extract_rpm()
  - Use correct Version and Release values in download_build()
  - #include <rpm/rpmfiles.h> -> #include <rpm/rpmfi.h>
  - Add the 'config' inspection to librpminspect
  - Rephrase reporting messages in the 'config' inspection
  - Add the 'doc' inspection to librpminspect
  - Update TODO list
  - Minor updates to try and make gate.sh more reliable
  - Add config and doc to the inspections list in generic.yaml
  - Rename the '%files' inspection to 'files' (#194)
  - Modify baseclass.py to allow 'before' and 'after' NVR tuples
  - Use the after tuple to override the NVR in test_abidiff.py
  - Use the after tuple to override the NVR in test_upstream.py
  - Write rpminspect output to a file in the test suite
  - Add 28 test cases for the 'config' inspection
  - Fix the errors in the 'config' inspection found by the test suite
  - Fix Python problems in the test suite reported by black and flake8
  - Add Makefile targets for black and flake8
  - One more formatting issue reporting by Python black in test_config.py
  - More 'python black' formatting errors reported for test_config.py
  - https://mandoc.bsd.lv -> http://mandoc.bsd.lv
  - Add a -D/--dump-config option to rpminspect(1)
  - Use global reported variable in 'config' inspection
  - Fix reporting errors in the 'doc' inspection
  - Add test_doc.py with 'doc' inspection test cases
  - Ignore flake8 W291 in test_doc.py where we explicitly want whitepsace.
  - Add init_rebaseable() to librpminspect
  - Check the rebaseable list in is_rebase() in librpminspect
  - Update TODO list
  - Define a new GitHub Action using utils/gate.sh
  - Update the README.md file
  - shellcheck fixes for utils/gate.sh
  - Use utils/find-ninja.sh to determine what ninja-build command to use
  - Install fedora-packager for the gate.yml GitHub Action
  - Remove before and after variables from gate.sh; unused
  - Remove unnecessary basename() calls in inspect_upstream.c
  - Do not assume an or bn contain strings in is_rebase() (#196)
  - Adjust what things run during with GitHub Actions
  - Add get_rpm_header_string_array() to librpminspect
  - Replace init_source() with get_rpm_header_string_array() in
    inspect_upstream.c
  - free() allocated output string in inspect_changelog.c on errors
  - s/10240/16384/ in archive_read_open_filename() call in unpack.c
  - Add the 'patches' inspection to librpminspect
  - Add uncompress_file() to librpminspect
  - Add filecmp() and use that in place of zcmp/bzcmp/xzcmp
  - README.md updates
  - Restrict some GitHub Actions to source code and test suite changes.
  - Only enable lz4 compression if ARCHIVE_FILTER_LZ4 is defined
  - Go ahead and wrap the rest of the libarchive compression filters
  - s/class Test/class /g
  - Make sure uncompress_file() supports xz compression
  - Handle more compressed file MIME types.
  - Add test_changedfiles.py to the test suite.
  - Add test_patches.py with test cases for the 'patches' inspection
  - flake8 fixes in the test suite
  - Python format fixes for test_changedfiles.py
  - Python format fixes in test_patches.py
  - More Python format fixes for test_patches.py
  - Remove unnecessary 'a' in DESC_PATCHES
  - Better explanation as to why the EmptyLicenseTag tests are skipped.
  - Test suite cleanup; add rebase= and same= to TestCompareSRPM
  - Black formatting fixes for the test suite.
  - Remove unused imports in test_upstream.py
  - Revert black fixes for test_config.py
  - Fix my email address in test suite source files.
  - Support single package URLs for before and after builds (#190)
  - Handle invalid/missing RPMs in get_product_release()
  - Use warnx(), errx(), and err() in src/rpminspect.c
  - Modify submit-koji-builds.sh to pick up all pkg-git branches.
  - Update the rpminspect.1 man page to reflect current status.
  - Update translation template files in po/
  - Support relative directory paths for the -w option (#188)
  - Implement the 'virus' inspection and add test cases for it.
  - Update po/ template files
  - Python formatting fixes for test_virus.py
  - Update the osdeps/*/reqs.txt files.
  - More osdeps updates for the clamav needs
  - Install 'xz' for the 'style' GitHub Action
  - Fix a variety of small memory leaks in librpminspect
  - Stop the freshclam service for the Ubuntu gate job
  - Support slightly older versions of libclamav in inspect_virus.c
  - Add the 'politics' inspection to librpminspect.
  - In tearDown() in the test suite, call rpmfluff clean() methods
  - Add test_politics.py with 'politics' inspection test cases
  - Python black format fixes for test_politics.py
  - 'it should added' -> 'it should be added'
  - Increase the runtime timeout for test_virus.py
  - Install the timeout decorator on all OSes in our GitHub Actions
  - Install timeout-decorator with pip, not timeout
  - Expand librpminspect with support for SHA-224, SHA-384, and SHA-512
  - Define DEFAULT_MESSAGE_DIGEST in constants.h and use that.
  - Replace some fprintf()/fflush() calls with warn()/warnx() calls
  - Rename the 'DT_NEEDED' inspection to 'dsodeps'
  - Rename 'LTO' inspection to 'lto'
  - Update translation template and fix two incorrect error strings.
  - Note all valid message digests in data/politics/GENERIC
  - Improve reporting in the patches inspection
  - Only fail 'changedfiles' for VERIFY and higher results
  - If 'removedfiles' only reports INFO messages, pass the inspection
  - If 'addedfiles' only reports INFO results, pass the inspection
  - If 'patches' only reports INFO results, pass the inspection
  - No need to check value of allowed in permissions_driver()
  - Do not let INFO results fail the 'doc' inspection.
  - Do not let all INFO results in 'upstream' fail the inspection
  - Fix RPMFILE_FLAGS handling for %config files (#221)
  - Still report file changes in the 'config' inspection for rebases
  - Correctly check RPMFILE_DOC flags in the 'doc' inspection
  - Include rpm/rpmfi.h insted of rpm/rpmfiles.h
  - Only check regular files and symlinks in the 'doc' inspection
  - Remove unnecessary assert() statements in filecmp()
  - Remove incorrect warnx() reportings based on filecmp() return value
  - Exclude man pages from the 'doc' inspection
  - Honor the -a command line option for downloads as well as runtime
    (#233)
  - Allow optional 'commands' block in the config file
  - Fix assorted non-critical memory leaks
  - Remove unnecessary warn() after a failed stat()
  - Additional memory fixes for the abidiff inspection (#244)
  - Free ELF symbol names list in find_lto_symbols() before return
  - Followup to the memory fixes for read_abi() and free_abi()
  - Prevent invalid pointer dereferencing in invalid result in 'patches'
    (#245)
  - Avoid reusing the same abi_pkg_entry_t struct in read_abi()
  - Allow a set of excluded path prefixes in 'pathmigration'
  - Fix the YAML parsing for the pathmigration block
  - Document the BRANCHES variable for 'make koji'
  - Include the .asc file when submitting new Koji builds (#191)
  - Include the .asc file in the spec file


author: David Cantrell <dcantrell@redhat.com> - 1.3-2
changelog:
  - Small change to the way Koji builds are submitted
  - Move the master branch to version 1.3
  - Drop DEBUG_PRINT in process_table()
  - Add doc/git.md to explain source control conventions
  - Change Suggests to Recommends in the spec file
  - Add kmidiff and politics to the inspections section of generic.yaml
  - Update TODO list
  - Use warn() for non-fatal errors in mkdirp()
  - Require libabigail >= 1.8 in rpminspect.spec.in
  - Enable multiple --headers-dir1 and --headers-dir2 args in abidiff
  - Swap out some more fprintf()/fflush() reporting with warn()
  - #include <err.h> in peers.c and rmtree.c
  - On fedora-rawhide CI jobs, install gcc-c++ and gcc-plugin-devel
  - Disable fedora-rawhide GitHub Action for now
  - Correctly handle the -w option on rpminspect(1) (#256)
  - Drop the relative path handling for the -w option
  - Build and install rc from source on opensuse-leap
  - Update doc/git.md on how to track upstream
  - Add .github/ and osdeps/ directories to extra-ci.yml
  - Build and install rc from source on opensuse-tumbleweed
  - Adjust curl(1) command line used for rc in opensuse CI jobs
  - Trying to figure out why the opensuse jobs produce curl errors
  - Another slight change to post.sh for the opensuse-leap CI job
  - s/PowerTools/powertools/g in the centos8 PKG_CMD definition
  - The output of html2text on opensuse systems is different
  - Rename HEADER_MAN to HEADER_MANPAGE (#264)
  - Add inspection_header_to_desc() to librpminspect (#264)
  - Add xunit output format support (#264)
  - Support the new output function call syntax (#264)
  - Move init_elf_data() to readelf.c, move data to struct rpminspect
  - Update inspect_elf.c unit tests for librpminspect changes
  - Remove check_ipv6() from inspect_elf.c
  - Create the badfuncs inspection
  - Update po/ translation files.
  - Add badfuncs test cases
  - Forgot to commit test_badfuncs.py.
  - Fix flake8 and black errors with test_badfuncs.py
  - Skip debug packages in filesize, display changes correctly
  - Fix spurious execstack failure
  - Fix YAML config file reading for BLOCK_INSPECTIONS
  - Expand dump_config() to cover all config file settings
  - Minor spelling fixes in strfuncs.c and making code explicit
  - Simplify list_to_string() so it handles 1-elements lists right
  - Add abspath() to canonicalize path strings
  - In the doc inspection, only show diff(1) output for text files (#254)
  - Add strxmlescape() to strfuncs.c in librpminspect (#264)
  - Output the system-out xunit portion as CDATA (#264)
  - Slightly change how strxmlescape() works
  - Add the runpath inspection to librpminspect
  - Rename test/data/lto.c to test/data/mathlib.c
  - Handle the empty string case in abspath()
  - Expand dump_cfg() to show runpath settings
  - Fix block handling problems in the YAML config reader
  - Note single builds cannot be rebases in is_rebase()
  - Hook up the driver for the runpath inspection
  - Install patchelf for tests on fedora and centos
  - Update TODO and README.md files
  - Pass -D to rpminspect in the test suite
  - Add integration tests for the runpath inspection
  - Python flake8 and black fixes in test_runpath.py
  - Fixes for GitHub Actions on Debian and Ubuntu
  - Disable Rust support in pip modules, more extra-ci fixes
  - Update pip and setuptools on debian and ubuntu CI jobs
  - Make sure pip is updated on debian, centos7, and centos8
  - Fixes for extra-ci on arch, centos7, centos8, and debian
  - Adjust docker image names for opensuse and arch
  - Add Gentoo Linux to the Extra CI set
  - extra-ci.yml typo fix for the gentoo job
  - Use gentoo/stage3 as the container for the gentoo CI job
  - Disable opensuse-tumbleweed and archlinux CI jobs
  - Make sure util/determine-os.sh picks up Gentoo Linux
  - In the runpath inspection, fail if DT_RPATH and DT_RUNPATH exist
  - Use pip install for PIP_CMD on gentoo
  - Set PIP_CMD to pip install -user for gentoo
  - Handle a NULL from list_to_string() in abspath()
  - Do not match path prefixes in the runpath inspection
  - Python black fixes for test_runpath.py
  - Stop doing an emerge --sync on the gentoo CI job
  - Replace emerge --sync with a manual portage sync
  - Use emerge-webrsync to update portage on gentoo
  - Add uthash and move the file matching code to it.
  - Typo fix in README.md
  - Fix some memory leaks found by valgrind
  - Create mkannounce.sh to help make release announcements easier
  - shellcheck fixes for mkannounce.sh


author: David Cantrell <dcantrell@redhat.com> - 1.4-1
changelog:
  - Start work on the 1.4 release
  - Trim git commit summary prefix from changelog lines
  - Report the program version number in the results (#309)
  - Handle compressed but otherwise empty man pages (#308)
  - Flake8 fixes for test_manpage.py
  - s/self.rpm/self.after_rpm/ in two test_manpage.py tests
  - Disable broken ELF heurisitic and size limit in libclamav
  - Modify dump_cfg() to write valid YAML to stdout (#306)
  - Migrate more code off hsearch and to uthash
  - Replace hsearch() with uthash in the kmod inspection
  - Update TEST_METADATA status in TODO and MISSING
  - Restrict style checks to specific directories
  - Replace hsearch() with uthash in the abidiff inspection
  - Change tsearch/twalk use to uthash
  - Correct misuse of entry with hentry variables (#321)
  - Normalize copyright boilerplates in source files
  - Use hentry->key over hentry->value in pathmigration
  - Adjust lib/meson.build for Fedora rawhide
  - Drop gate.yml and begin non-x86_64 arches in ci.yml
  - Add armv7, aarch64, and s390x to the other_arches job
  - Change init.c error reporting over to err/warn functions
  - Modify file triggers and matrix use in ci.yml
  - Split 32-bit osdeps out to post.sh scripts in osdeps/
  - Split style.yml in to shellcheck.yml and python.yml
  - Rewrite extra-ci.yml to use the matrix strategy method for GHA
  - Move the emulated CI jobs to extra-ci.yml
  - s/pkg/pki/ for the centos jobs
  - Debian and Ubuntu fixes for CI
  - Python pip on Debian is called pip
  - Try to fix just debian:stable
  - Enable debian:testing in extra-ci.yml
  - Enable centos8 in extra-ci.yml again
  - Enable centos7 in extra-ci.yml again
  - Enable opensuse-leap and gentoo in extra-ci.yml again
  - Run each test script individually on emulated targets
  - Try a different syntax for the emulated matrix jobs
  - Install s390 glibc headers on s390x fedora systems
  - Detect 32-bit and musl presence in test_elf.py
  - Skip lost -fPIC tests if gcc lacks -m32 support
  - Add stretch and buster to the emulated targets list
  - Drop Debian buster from the emulated targets
  - Install gcc-multilib only on Debian x86_64 and s390x systems
  - libc-dev:i386 -> libc6-dev:i386
  - Disable Debian targets in extra-ci temporarily
  - s/AUR/git/g in osdeps/arch/post.sh
  - In read_cfgfile(), keep track of block depth correctly (#329)
  - A few more yaml parsing fixes for block vs group
  - Recommend or Require libabigail >= 1.8.2
  - Finish normalizing all the error reporting statements
  - Advertise of rpminspect-report in the contrib README.
  - Report libclamav version and CVD versions (#258)
  - Ensure first argument of warn(3) is a format string.
  - Enable werror=true and warning_level=3 in default_options
  - Update the translation template file
  - Get rid of invalid free() in get_product_release()
  - Add inspection_id() to librpminspect
  - Update the po/rpminspect.pot template
  - Improve mkannounce.sh to handle stable and devel releases


author: David Cantrell <dcantrell@redhat.com> - 1.5-1
changelog:
  - Begin work on version 1.5
  - Use llabs() instead of labs() in the filesize inspection
  - Improve has invalid execstack flags reporting
  - Use long unsigned int to report size changes in patches
  - Fix some errors in the changedfiles inspection
  - Update the changedfiles test cases
  - Check DT_SONAME in is_elf_shared_library()
  - Skip debuginfo and debugsource files in abidiff
  - Make sure abidiff test cases add a DT_SONAME to the test lib
  - Report INFO level for patches findings by default
  - Python black fixes in test/test_abidiff.py
  - Update the test/test_patches.py cases for patches changes
  - Generate regular changelog in utils/srpm.h
  - Skip branches without targets in submit-koji-builds.sh
  - Fedora and CentOS systems in ci need diffstat
  - opensuse-leap CI job requires diffstat
  - Fix the Debian CI jobs in GitHub Actions
  - Fix and enable the Ubuntu extra-ci job in GitHub Actions
  - Use pip instead of pip3 for the Ubuntu command
  - Use apt-get -y install in
  - Enable the opensuse-tumbleweed GHA job again
  - Make sure the Gentoo GHA job has diffstat
  - Get the Arch Linux GHA job working again
  - Use ubuntu:latest for the ubuntu GHA image
  - Simplify the utils/determine-os.sh script
  - Update license table in README.md
  - Allow any number of builds specified for fetch only mode
  - Handle old or broken versions of libmagic in changedfiles
  - Update GitHub Action status badges in README.md
  - Fix $(OS) check in the Makefile
  - Fix the ubuntu GitHub Actions extra-ci job
  - Make sure the centos8 job has git available before cloning
  - Change strappend() to work as a variadic function
  - Use json_tokener_parse_ex() to get better error reporting
  - Fix reading of the javabytecode block in the config file
  - Catch missing/losing -fPIC correctly on .a ELF objects (#352)
  - Refactor elf_archive_tests() and its helper functions
  - Followup fix for find_no_pic, find_pic, and find_all
  - Install cpp-coveralls using pacman on Arch Linux
  - Install cpp-coveralls using pip on Arch Linux
  - Install cpp-coveralls in pre.sh on Arch Linux
  - Install required Python modules in pre.sh on Arch Linux
  - Do not upgrade pip on Arch Linux, go back to using pip.txt
  - Drop DEBUG_PRINT from source generated by pic_bits.sh
  - Do not run apt-get update as a second time on Debians systems
  - The lost PIC tests need to invoke gcc with -fno-PIC
  - Update the OpenSUSE Tumbleweed files, but disable it anyway
  - Define inspection_ignores in struct rpminspect
  - Clean up the config file section reading code
  - Add add_ignore() to init.c
  - Fix fetch only mode download directory
  - Stub out libcurl download progress callback function
  - Perform symbolic owner and group matching in ownership (#364)
  - Restrict download_progress() to systems with CURLOPT_XFERINFOFUNCTION
  - Read per-inspection ignore lists from the config file.
  - Add commented out per-inspection ignore blocks
  - Implement per-inspection path ignore support (#351)
  - Report annocheck failures correctly in librpminspect.
  - Note all regular expression settings use regex(7) syntax
  - Allow size_threshold: info in the config file (#261)
  - Check ignore list in files for path prefixes to ignore (#360)
  - Support a list of expected empty RPMs in the config file (#355)
  - Call mparse_reset() before mparse_readfd()
  - Do not crash with the -c option specifies a non-existent file
  - Update TODO list
  - Make sure brp-compress is disabled in test_manpage.py
  - Require/Recommend /usr/bin/annocheck
  - Note size_threshold can be the keyword info
  - Ensure ctxt->lastError.message is not NULL before strdup (#382)
  - Handle corrupt compressed files in changedfiles (#382)
  - Disable debugging output for the ignore lists in init.c
  - Drop debugging output in the xml inspection
  - Remove what working directories we can
  - Correctly find icons for desktop files in subpackages (#367)
  - Followup to the Icon= check in the desktop inspection (#367)
  - BuildRequires libmandoc-devel >= 1.14.5
  - Manually install mandoc on centos7 for now


author: Tom Stellard <tstellar@redhat.com> - 5.0.1-2
changelog:
  - Work-around LLVMHello.so link failures caused by LD_FLAGS="-Wl,-z,defs"
  - https://bugzilla.redhat.com/show_bug.cgi?id=1538318


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.0.0-1
changelog:
  - Update to 3.0.0.
  - Language bindings are separate projects now.
  - Update spec file and remove obsolete constructs.


author: Miroslav Lichvar <mlichvar@redhat.com> - 3.6.1-7
changelog:
  - build setlayout with hardening LDFLAGS (#1548830)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements


author: Owen Taylor <otaylor@redhat.com> - 4.10.1-3
changelog:
  - Pass Qt paths we'll use in the file list to CMake
  - In %check, augment PKG_CONFIG_PATH, not replace it


author: Rex Dieter <rdieter@fedoraproject.org> - 5.18.4.1-2
changelog:
  - use bundled synaptics header, if needed
  - fix feature macro logic (defined as 1 on, undefined off)
  - minor cleanups


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.3.0-5
changelog:
  - Fix null pointer dereference in pngcheck when -f is given and the sCAL chunk
    is missing the pixel height.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.0-4
changelog:
  - Bounds-check all accesses into enumerated-value name arrays; a malformed file
    could have caused a buffer overrun in several of these cases. (RHBZ#1902810)
  - Fix buffer overrun when print_buffer() is passed a nonpositive size, which
    can occur in practice for certain malformed inputs. (RHBZ#1902810)
  - In some cases, the chunk length from the file data (sz) is used to index into
    the read buffer without sufficient bounds-checking, leading to a buffer
    overrun. Fix this for PPLT, hIST, sCAL, FRAM, SAVE, nEED, PAST, DISC, DROP,
    DBYK, ORDR, and SEEK chunks. (RHBZ#1902810)
  - Fix buffer overrun printing the contents of the sPLT chunk in certain
    malformed inputs. (RHBZ#1905775)
  - Backport fix for off-by-one bug in check_magic() from 3.0.0
  - Backport fix for zlib version warnings going to stdout from 3.0.0
  - Use name macro when referencing patches.
  - Add BR on make in anticipation of
    https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot.
  - New upstream version 2.4.0
  - Added new license file for main package (same MIT-style license)
  - Drop format-security patch, now upstreamed
  - Use upstreamed man pages; no need to generate with help2man anymore
  - Add rpmlintrc rules for -extras subpackage
  - Add rpmlintrc file to suppress spurious rpmlint warnings


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.4.0-5
changelog:
  - Previous fix for buffer overrun printing the contents of the sPLT chunk in
    certain malformed inputs (RHBZ#1905775) was incomplete; it should be properly
    fixed now.


author: Dave Love <loveshack@fedoraproject.org> - 2.3.24-1
changelog:
  - New version (fixes #967084)
  - Clean up spec; use %license; fix URL
  - Move stonith file to main package and own directory
  - BR libgenders-devel


author: Dave Love <loveshack@fedoraproject.org> - 2.3.24-2
changelog:
  - Support systemd (fixes #1179482)
  - Run tests
  - Add snmppower
  - Don't BR flex bison readline-devel
  - More cleanup
  - Make pm man page a link


author: Dave Love <loveshack@fedoraproject.org> - 2.3.24-4
changelog:
  - Update systemd support (fixes #1489093)
  - Clean up spec post-el5
  - Fix %preun
  - Own stonith directories


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-8
changelog:
  - Subpackage python2-lazy-object-proxy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.2-4
changelog:
  - Subpackage python2-wrapt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Irina Boverman <iboverma@redhat.com> - 0.29.0-1
changelog:
  - Resolved PROTON-2092
  - Rebased to 0.29.0 rc1 upstream
  - Removed jsoncpp BuildRequires and Requires for now, there is no jsoncpp in EPEL 8


author: Rex Dieter <rdieter@fedoraproject.org> - 0.18.0-1
changelog:
  - sddm-0.18.0
  - rebase libXau patch (upstream pull request #863)
  - drop patch from upstream pull request #735
  - drop remnants of 02-fedora sddm theme


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49
   - many: add Delegate=true to generated systemd units for special
     interfaces
   - cmd/snap-bootstrap: rename ModeenvFromModel to
     EphemeralModeenvForModel
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - osutil: skip TestReadBuildGo inside sbuild
   - tests: fix umount for snapd snap on fsck-on-boot test
   - snap/info_test.go: add unit test cases for bug
   - tests/main/services-after-before: add regression spread test
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - OpenGL interface: Support more Tegra libs
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - cmd: make string/error code more robust against errno leaking
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - tests: update test pkg for fedora and centos
   - gadget: pass sector size in to mkfs family of functions, use to
     select block sz
   - o/snapshotstate: fix returning of snap names when duplicated
     snapshot is detected
   - tests/main/snap-network-errors: skip flushing dns cache on
     centos-7
   - interfaces/builtin: Allow DBus property access on
     org.freedesktop.Notifications
   - cgroup-support.c: fix link to CGROUP DELEGATION
   - osutil: update go-udev package
   - packaging: fix arch-indep build on debian-sid
   - {,sec}boot: pass "key-name" to the FDE hooks
   - asserts: sort by revision with Sort interface
   - gadget: add gadget.ResolveContentPaths()
   - cmd/snap-repair: save base snap and mode in device info; other
     misc cleanups
   - tests: cleanup the run-checks script
   - asserts: snapasserts method to validate installed snaps against
     validation sets
   - tests: normalize test tools - part 1
   - snapshotstate: detect duplicated snapshot imports
   - interfaces/builtin: fix unit test expecting snap-device-helper at
     /usr/lib/snapd
   - tests: apply workaround done for snap-advise-command to apt-hooks
     test
   - tests: skip main part of snap-advise test if 429 error is
     encountered
   - many: clarify gadget role-usage consistency checks for UC16/18 vs
     UC20
   - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable
     broken tests on sid
   - interfaces/builtin: more drive by fixes, import ordering, removing
     dead code
   - tests: skip interfaces-openvswitch spread test on debian sid
   - interfaces/apparmor: drive by comment fix
   - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree
     usage
   - cmd/libsnap-confine-private: make unit tests execute happily in a
     container
   - interfaces, wrappers: misc comment fixes, etc.
   - asserts/repair.go: add "bases" and "modes" support to the repair
     assertion
   - interfaces/opengl: allow RPi MMAL video decoding
   - snap: skip help output tests for go-flags v1.4.0
   - gadget: add validation for "$kernel:ref" style content
   - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside
     containers
   - spdx: update to SPDX license list version: 3.11 2020-11-25
   - tests: improve hotplug test setup on classic
   - tests: update check to verify is the current system is arm
   - tests: use os-query tool to check debian, trusty and tumbleweed
   - daemon: start moving implementation to api_snaps.go
   - tests/main/snap-validate-basic: disable test on Fedora due to go-
     flags panics
   - tests: fix library path used for tests.pkgs
   - tests/main/cohorts: replace yq with a Python snippet
   - run-checks: update to match new argument syntax of ineffassign
   - tests: use apiBaseSuite for snapshots tests, fix import endpoint
     path
   - many: separate consistency/content validation into
     gadget.Validate|Content
   - o/{device,snap}state: enable devmode snaps with dangerous model
     assertions
     secboot: add test for when systemd-run does not honor
     RuntimeMaxSec
   - secboot: add workaround for snapcore/core-initrd issue #13
   - devicestate: log checkEncryption errors via logger.Noticef
   - o/daemon: validation sets api and basic spread test
   - gadget: move BuildPartitionList to install and make it unexported
   - tests: add nested spread end-to-end test for fde-hooks
   - devicestate: implement checkFDEFeatures()
   - boot: tweak resealing with fde-setup hooks
   - tests: add os query commands for subsystems and architectures
   - o/snapshotstate: don't set auto flag in the snapshot file
   - tests: use os.query tool instead of comparing the system var
   - testutil: use the original environment when calling shellcheck
   - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
     init restrict file
   - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and
     instead set the implicit labels when loading the yaml
   - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal-
     key
   - gadget/quantity: introduce Offset, start using it for offset
     related fields in the gadget
   - gadget: use "sealed-keys" to determine what method to use for
     reseal
   - tests/main/fake-netplan-apply: disable test on xenial for now
   - daemon: start splitting snaps op tests out of api_test.go
   - testutil: make DBusTest use a custom bus configuration file
   - tests: replace pkgdb.sh (library) with tests.pkgs (program)
   - gadget: prepare gadget kernel refs (0/N)
   - interfaces/builtin/docker-support: allow /run/containerd/s/...
   - cmd/snap-preseed: reset run inhibit locks on --reset.
   - boot: add sealKeyToModeenvUsingFdeSetupHook()
   - daemon: reorg snap.go and split out sections and icons support
     from api.go
   - sandbox/seccomp: use snap-seccomp's stdout for getting version
     info
   - daemon: split find support to its own api_*.go files and move some
     helpers
   - tests: move snapstate config defaults tests to a separate file.
   - bootloader/{lk,lkenv}: followups from #9695
   - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite
   - gadget,o/devicestate: set implicit values for schema and role
     directly instead of relying on Effective* accessors
   - daemon: split aliases support to its own api_*.go files
   - gadget: start separating rule/convention validation from basic
     soundness
   - cmd/snap-update-ns: add better unit test for overname sorting
   - secboot: use `fde-reveal-key` if available to unseal key
   - tests: fix lp-1899664 test when snapd_x1 is not installed in the
     system
   - tests: fix the scenario when the "$SRC".orig file does not exist
   - cmd/snap-update-ns: fix sorting of overname mount entries wrt
     other entries
   - devicestate: add runFDESetupHook() helper
   - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv
     structs
   - daemon: split unsupported buy implementation to its own api_*.go
     files
   - tests: download timeout spread test
   - gadget,o/devicestate: hybrid 18->20 ready volume setups should be
     valid
   - o/devicestate: save model with serial in the device save db
   - bootloader: add check for prepare-image time and more tests
     validating options
   - interfaces/builtin/log_observe.go: allow controlling apparmor
     audit levels
   - hookstate: refactor around EphemeralRunHook
   - cmd/snap: implement 'snap validate' command
   - secboot,devicestate: add scaffoling for "fde-reveal-key" support
   - boot: observe successful command line update, provide a default
   - tests: New queries for the os tools
   - bootloader/lkenv: specify backup file as arg to NewEnv(), use ""
     as path+"bak"
   - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk
     iface
   - daemon: split out snapctl support and snap configuration support
     to their own api_*.go files
   - snapshotstate: improve handling of multiple errors
   - tests: sign new nested-18|20* models to allow for generic serials
   - bootloader: remove installableBootloader interface and methods
   - seed: cleanup/drop some no longer valid TODOS, clarify some other
     points
   - boot: set kernel command line in modeenv during install
   - many: rename disks.FindMatching... to FindMatching...WithFsLabel
     and err type
   - cmd/snap: suppress a case of spurious stdout logging from tests
   - hookstate: add new HookManager.EphemeralRunHook()
   - daemon: move some more api tests from daemon to daemon_test
   - daemon: split apps and logs endpoints to api_apps.go and tests
   - interfaces/utf: Add Ledger to U2F devices
   - seed/seedwriter: consider modes when checking for deps
     availability
   - o/devicestate,daemon: fix reboot system action to not require a
     system label
   - cmd/snap-repair,store: increase initial retry time intervals,
     stalling TODOs
   - daemon: split interfacesCmd to api_interfaces.go
   - github: run nested suite when commit is pushed to release branch
   - client: reduce again the /v2/system-info timeout
   - tests: reset fakestore unit status
   - update-pot: fix typo in plural keyword spec
   - tests: remove workarounds that add "ubuntu-save" if missing
   - tests: add unit test for auto-refresh with validate-snap failure
   - osutil: add helper for getting the kernel command line
   - tests/main/uc20-create-partitions: verify ubuntu-save encryption
     keys, tweak not MATCH
   - boot: add kernel command lines to the modeenv file
   - spread: bump delta ref, tweak repacking to make smaller delta
     archives
   - bootloader/lkenv: add v2 struct + support using it
   - snapshotstate: add cleanup of abandonded snapshot imports
   - tests: fix uc20-create-parition-* tests for updated gadget
   - daemon: split out /v2/interfaces tests to api_interfaces_test.go
   - hookstate: implement snapctl fde-setup-{request,result}
   - wrappers, o/devicestate: remove EnableSnapServices
   - tests: enable nested on 20.10
   - daemon: simplify test helpers Get|PostReq into Req
   - daemon: move general api to api_general*.go
   - devicestate: make checkEncryption fde-setup hook aware
   - client/snapctl, store: fix typos
   - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files
     before doing apt ops
   - cmd/snap-bootstrap: update model cross-check considerations
   - client,snapctl: add naive support for "stdin"
   - many: add new "install-mode: disable" option
   - osutil/disks: allow building on mac os
   - data/selinux: update the policy to allow operations on non-tmpfs
     /tmp
   - boot: add helper for generating candidate kernel lines for
     recovery system
   - wrappers: generate D-Bus service activation files
   - bootloader/many: rm ConfigFile, add Present for indicating
     presence of bloader
   - osutil/disks: allow mocking DiskFromDeviceName
   - daemon: start cleaning up api tests
   - packaging/arch: sync with AUR packaging
   - bootloader: indicate when boot config was updated
   - tests: Fix snap-debug-bootvars test to make it work on arm devices
     and core18
   - tests/nested/manual/core20-save: verify handling of ubuntu-save
     with different system variants
   - snap: use the boot-base for kernel hooks
   - devicestate: support "storage-safety" defaults during install
   - bootloader/lkenv: mv v1 to separate file,
     include/lk/snappy_boot_v1.h: little fixups
   - interfaces/fpga: add fpga interface
   - store: download timeout
   - vendor: update secboot repo to avoid including secboot.test binary
   - osutil: add KernelCommandLineKeyValue
   - gadget/gadget.go: allow system-recovery-{image,select} as roles in
     gadget.yaml
   - devicestate: implement boot.HasFDESetupHook
   - osutil/disks: add DiskFromName to get a disk using a udev name
   - usersession/agent: have session agent connect to the D-Bus session
     bus
   - o/servicestate: preserve order of services on snap restart
   - o/servicestate: unlock state before calling wrappers in
     doServiceControl
   - spread: disable unattended-upgrades on ubuntu
   - tests: testing new fedora 33 image
   - tests: fix fsck on boot on arm devices
   - tests: skip boot state test on arm devices
   - tests: updated the systems to run prepare-image-grub test
   - interfaces/raw_usb: allow read access to /proc/tty/drivers
   - tests: unmount /boot/efi in fsck-on-boot test
   - strutil/shlex,osutil/udev/netlink: minimally import go-check
   - tests: fix basic20 test on arm devices
   - seed: make a shared seed system label validation helper
   - tests/many: enable some uc20 tests, delete old unneeded tests or
     TODOs
   - boot/makebootable.go: set snapd_recovery_mode=install at image-
     build time
   - tests: migrate test from boot.sh helper to boot-state tool
   - asserts: implement "storage-safety" in uc20 model assertion
   - bootloader: use ForGadget when installing boot config
   - spread: UC20 no longer needs 2GB of mem
   - cmd/snap-confine: implement snap-device-helper internally
   - bootloader/grub: replace old reference to Managed...Blr... with
     Trusted...Blr...
   - cmd/snap-bootstrap: add readme for snap-bootstrap + real state
     diagram
   - interfaces: fix greengrass attr namingThe flavor attribute names
     are now as follows:
   - tests/lib/nested: poke the API to get the snap revisions
   - tests: compare options of mount units created by snapd and snapd-
     generator
   - o/snapstate,servicestate: use service-control task for service
     actions
   - sandbox: track applications unconditionally
   - interfaces/greengrass-support: add additional "process" flavor for
     1.11 update
   - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.49-1
changelog:
  - Release snapd 2.49 to Fedora (RHBZ#1927314)
  - Include fix for CVE-2020-27352 (RHBZ#1927428, RHBZ#1927432)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49.1
   - tests: turn modules off explicitly in spread go unti test
   - o/snapshotstate: create snapshots directory on import
   - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
   - interfaces: add allegro-vcu and media-control interfaces
   - interfaces: opengl: add Xilinx zocl bits
   - many: fix new ineffassign warnings
   - interfaces/seccomp/template.go: allow copy_file_range
   - interfaces: allow reading the Xauthority file KDE Plasma writes
     for Wayland sessions
   - data/selinux: allow system dbus to watch
     /var/lib/snapd/dbus-1
   - Remove apparmor downgrade feature
   - Support tmp and log dirs on Yocto/Poky


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49.2
   - interfaces/tee: add TEE/OPTEE interface
   - o/configstate/configcore: add hdmi_timings to pi-config
   - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
   - snap-seccomp: fix seccomp test on ppc64el
   - interfaces{,/apparmor}, overlord/snapstate:
     late removal of snap-confine apparmor profiles
   - overlord/snapstate, wrappers: add dependency on usr-lib-
     snapd.mount for services on core with snapd snap
   - o/configstate: deal with no longer valid refresh.timer=managed
   - overlord/snapstate: make sure that snapd current symlink is not
     removed during refresh
   - packaging: drop dh-systemd from build-depends on ubuntu-16.04+
   - o/{device,hook}state: encode fde-setup-request key as base64
   - snapstate: reduce reRefreshRetryTimeout to 1/2 second
   - tests/main/uc20-create-partitions: fix tests cleanup
   - o/configstate, o/snapshotstate: fix handling of nil snap config on
     snapshot restore
   - snap-seccomp: add new `close_range` syscall


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.50
   - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu
     Core system
   - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug
   - o/servicestate/servicemgr.go: add ensure loop for snap service
     units
   - wrappers/services.go: introduce EnsureSnapServices()
   - snapstate: add "kernel-assets" to featureSet
   - systemd: wait for zfs mounts
   - overlord: make servicestate responsible to compute
     SnapServiceOptions
   - boot,tests: move where we write boot-flags one level up
   - o/configstate: don't pass --root=/ when
     masking/unmasking/enabling/disabling services
   - cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to
     /run
   - gadget: be more flexible with kernel content resolving
   - boot, cmd/snap: include extra cmdline args in debug boot-vars
     output
   - boot: support read/writing boot-flags from userspace/initramfs
   - interfaces/pwm: add PWM interface
   - tests/lib/prepare-restore.sh: clean out snapd changes and snaps
     before purging
   - systemd: enrich UnitStatus returned by systemd.Status() with
     Installed flag
   - tests: updated restore phase of spread tests - part 1
   - gadget: add support for kernel command line provided by the gadget
   - tests: Using GO111MODULE: "off" in spread.yaml
   - features: add gate-auto-refresh-hook feature flag
   - spread: ignore linux kernel upgrade in early stages for arch
     preparation
   - tests: use snaps-state commands and remove them from the snaps
     helper
   - o/configstate: fix panic with a sequence of config unset ops over
     same path
   - api: provide meaningful error message on connect/disconnect for
     non-installed snap
   - interfaces/u2f-devices: add HyperFIDO Pro
   - tests: add simple sanity check for systemctl show
     --property=UnitFileState for unknown service
   - tests: use tests.session tool on interfaces-desktop-document-
     portal test
   - wrappers: install D-Bus service activation files for snapd session
     tools on core
   - many: add x-gvfs-hide option to mount units
   - interfaces/builtin/gpio_test.go: actually test the generated gpio
     apparmor
   - spread: tentative workaround for arch failure caused by libc
     upgrade and cgroups v2
   - tests: add spread test for snap validate against store assertions
   - tests: remove snaps which are not used in any test
   - ci: set the accept-existing-contributors parameter for the cla-
     check action
   - daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and
     some apiBaseSuite cosmetics)
   - o/devicestate/devicemgr: register install-device hook, run if
     present in install
   - o/configstate/configcore: simple refactors in preparation for new
     function
   - tests: unifying the core20 nested suite with the core nested suite
   - tests: uboot-unpacked-assets updated to reflect the real path used
     to find the kernel
   - daemon: switch api_test.go to daemon_test and various other
     cleanups
   - o/configstate/configcore/picfg.go: add hdmi_cvt support
   - interfaces/apparmor: followup cleanups, comments and tweaks
   - boot: cmd/snap-bootstrap: handle a candidate recovery system v2
   - overlord/snapstate: skip catalog refresh when snappy testing is
     enabled
   - overlord/snapstate, overlord/ifacestate: move late security
     profile removal to ifacestate
   - snap-seccomp: fix seccomp test on ppc64el
   - interfaces, interfaces/apparmor, overlord/snapstate: late removal
     of snap-confine apparmor profiles
   - cmd/snap-bootstrap/initramfs-mounts: move time forward using
     assertion times
   - tests: reset the system while preparing the test suite
   - tests: fix snap-advise-command check for 429
   - gadget: policy for gadget/kernel refreshes
   - o/configstate: deal with no longer valid refresh.timer=managed
   - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
   - cla-check: Use has-signed-canonical-cla GitHub Action
   - tests: validation sets spread test
   - tests: simplify the reset.sh logic by removing not needed command
   - overlord/snapstate: make sure that snapd current symlink is not
     removed during refresh
   - tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20
   - tests/lib/fde-setup-hook: also verify that fde-reveal-key key data
     is base64
   - o/devicestate: split off ensuring next boot goes to run mode into
     new task
   - tests: fix cgroup-tracking test
   - boot: export helper for clearing tried system state, add tests
   - cmd/snap: use less aggressive client timeouts in unit tests
   - daemon: fix signing key validity timestamp in unit tests
   - o/{device,hook}state: encode fde-setup-request key as base64
     string
   - packaging: drop dh-systemd from build-depends on ubuntu-16.04+
   - cmd/snap/pack: unhide the compression option
   - boot: extend set try recovery system unit tests
   - cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use
     secboot's implicit fallback
   - o/configstate/configcore: add hdmi_timings to pi-config
   - snapstate: reduce reRefreshRetryTimeout to 1/2 second
   - interfaces/tee: add TEE/OPTEE interface
   - o/snapstate: update validation sets assertions with auto-refresh
   - vendor: update go-tpm2/secboot to latest version
   - seed: ReadSystemEssentialAndBetterEarliestTime
   - tests: replace while commands with the retry tool
   - interfaces/builtin: update unit tests to use proper distro's
     libexecdir
   - tests: run the reset.sh helper and check test invariants while the
     test is restored
   - daemon: switch preexisting daemon_test tests to apiBaseSuite and
     .req
   - boot, o/devicestate: split makeBootable20 into two parts
   - interfaces/docker-support: add autobind unix rules to docker-
     support
   - interfaces/apparmor: allow reading
     /proc/sys/kernel/random/entropy_avail
   - tests: use retry tool instead a loops
   - tests/main/uc20-create-partitions: fix tests cleanup
   - asserts: mode where Database only assumes cur time >= earliest
     time
   - daemon: validation sets/api tests cleanup
   - tests: improve tests self documentation for nested test suite
   - api: local assertion fallback when it's not in the store
   - api: validation sets monitor mode
   - tests: use fs-state tool in interfaces tests
   - daemon:  move out /v2/login|logout and errToResponse tests from
     api_test.go
   - boot: helper for inspecting the outcome of a recovery system try
   - o/configstate, o/snapshotstate: fix handling of nil snap config on
     snapshot restore
   - tests: update documentation and checks for interfaces tests
   - snap-seccomp: add new `close_range` syscall
   - boot: revert #10009
   - gadget: remove `device-tree{,-origin}` from gadget tests
   - boot: simplify systems test setup
   - image: write resolved-content from snap prepare-image
   - boot: reseal the run key for all recovery systems, but recovery
     keys only for the good ones
   - interfaces/builtin/network-setup-{control,observe}: allow using
     netplan directly
   - tests: improve sections prepare and restore - part 1
   - tests: update details on task.yaml files
   - tests: revert os.query usage in spread.yaml
   - boot: export bootAssetsMap as AssetsMap
   - tests/lib/prepare: fix repacking of the UC20 kernel snap for with
     ubuntu-core-initramfs 40
   - client: protect against reading too much data from stdin
   - tests: improve tests documentation - part 2
   - boot: helper for setting up a try recover system
   - tests: improve tests documentation - part 1
   - tests/unit/go: use tests.session wrapper for running tests as a
     user
   - tests: improvements for snap-seccomp-syscalls
   - gadget: simplify filterUpdate (thanks to Maciej)
   - tests/lib/prepare.sh: use /etc/group and friends from the core20
     snap
   - tests: fix tumbleweed spread tests part 2
   - tests: use new commands of os.query tool on tests
   - o/snapshotstate: create snapshots directory on import
   - tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list
   - packaging: drop 99-snapd.conf via dpkg-maintscript-helper
   - osutil: add SetTime() w/ 32-bit and 64-bit implementations
   - interfaces/wayland: rm Xwayland Xauth file access from wayland
     slot
   - packaging/ubuntu-16.04/rules: turn modules off explicitly
   - gadget,devicestate: perform kernel asset update for $kernel: style
     refs
   - cmd/recovery: small fix for `snap recovery` tab output
   - bootloader/lkenv: add recovery systems related variables
   - tests: fix new tumbleweed image
   - boot: fix typo, should be systems
   - o/devicestate: test that users.create.automatic is configured
     early
   - asserts: use Fetcher in AddSequenceToUpdate
   - daemon,o/c/configcore: introduce users.create.automatic
   - client, o/servicestate: expose enabled state of user daemons
   - boot: helper for checking and marking tried recovery system status
     from initramfs
   - asserts: pool changes for validation-sets (#9930)
   - daemon: move the last api_foo_test.go to daemon_test
   - asserts: include the assertion timestamp in error message when
     outside of signing key validity range
   - ovelord/snapshotstate: keep a few of the last line tar prints
     before failing
   - gadget/many: rm, delay sector size + structure size checks to
     runtime
   - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
   - interfaces: add allegro-vcu and media-control interfaces
   - interfaces: opengl: add Xilinx zocl bits
   - mkversion: check that version from changelog is set before
     overriding the output version
   - many: fix new ineffassign warnings
   - .github/workflows/labeler.yaml: try work-around to not sync
     labels
   - cmd/snap, boot: add debug set-boot-vars
   - interfaces: allow reading the Xauthority file KDE Plasma writes
     for Wayland sessions
   - tests/main/snap-repair: test running repair assertion w/ fakestore
   - tests: disable lxd tests for 21.04 until the lxd images are
     published for the system
   - tests/regression/lp-1910456: cleanup the /snap symlink when done
   - daemon: move single snap querying and ops to api_snaps.go
   - tests: fix for preseed and dbus tests on 21.04
   - overlord/snapshotstate: include the last message printed by tar in
     the error
   - interfaces/system-observe: Allow reading /proc/zoneinfo
   - interfaces: remove apparmor downgrade feature
   - snap: fix unit tests on Go 1.16
   - spread: disable Go modules support in environment
   - tests: use new path to find kernel.img in uc20 for arm devices
   - tests: find files before using cat command when checking broadcom-
     asic-control interface
   - boot: introduce good recovery systems, provide compatibility
     handling
   - overlord: add manager gadget refresh test
   - tests/lib/fakestore: support repair assertions too
   - github: temporarily disable action labeler due to issues with
     labels being removed
   - o/devicestate,many: introduce DeviceManager.preloadGadget for
     EarlyConfig
   - tests: enable ubuntu 21.04 for spread tests
   - snap: provide a useful error message if gdbserver is not installed
   - data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1
   - tests/lib/prepare.sh: split reflash.sh into two parts
   - packaging/opensuse: sync with openSUSE packaging
   - packaging: disable Go modules in snapd.mk
   - snap: add deprecation noticed to "snap run --gdb"
   - daemon: add API for checking and installing available theme snaps
   - tests: using labeler action to add automatically a label to run
     nested tests
   - gadget: improve error handling around resolving content sources
   - asserts: repeat the authority cross-check in CheckSignature as
     well
   - interfaces/seccomp/template.go: allow copy_file_range
   - o/snapstate/check_snap.go: add support for many subversions in
     assumes snapdX..
   - daemon: move postSnap and inst.dispatch tests to api_snaps_test.go
   - wrappers: use proper paths for mocked mount units in tests
   - snap: rename gdbserver option to `snap run --gdbserver`
   - store: support validation sets with fetch-assertions action
   - snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky
   - packaging/fedora: sync with downstream packaging in Fedora
   - many: add Delegate=true to generated systemd units for special
     interfaces (master)
   - boot: use a common helper for mocking boot assets in cache
   - api: validate snaps against validation set assert from the store
   - wrappers: don't generate an [Install] section for timer or dbus
     activated services
   - tests/nested/core20/boot-config-update: skip when snapd was not
     built with test features
   - o/configstate,o/devicestate: introduce devicestate.EarlyConfig
     implemented by configstate.EarlyConfig
   - cmd/snap-bootstrap/initramfs-mounts: fix typo in func name
   - interfaces/builtin: mock distribution in fontconfig cache unit
     tests
   - tests/lib/prepare.sh: add another console= to the reflash magic
     grub entry
   - overlord/servicestate: expose dbus activators of a service
   - desktop/notification: test against a real session bus and
     notification server implementation
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - HACKING.md: explain how to run UC20 spread tests with QEMU
   - asserts: introduce AtSequence
   - overlord/devicestate: task for updating boot configs, spread test
   - gadget: fix documentation/typos
   - gadget: cleanup MountedFilesystem{Writer,Updater}
   - gadget: use ResolvedSource in MountedFilesystemWriter
   - snap/info.go: add doc-comment for SortServices
   - interfaces: add an optional mount-host-font-cache plug attribute
     to the desktop interface
   - osutil: skip TestReadBuildGo inside sbuild
   - o/hookstate/ctlcmd: add optional --pid and --apparmor-label
     arguments to "snapctl is-connected"
   - data/env/snapd: use quoting in case PATH contains spaces
   - boot: do not observe successful boot assets if not in run mode
   - tests: fix umount for snapd snap on fsck-on-boot testumount:
     /run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount
   - misc: little tweaks
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - devicestate: keep log from install-mode on installed system
   - seed: add LoadEssentialMeta to seed16 and allow all of its
     implementations to be called multiple times
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - tests/core/uc20-recovery: move recover mode helpers to generic
     testslib script
   - interfaces/fwupd: allow any distros to access fw files via fwupd
   - store: method for fetching validation set assertion
   - store: switch to v2/assertions api
   - gadget: add new ResolvedContent and populate from LayoutVolume()
   - spread: use full format when listing processes
   - osutil/many: make all test pkgs osutil_test instead of "osutil"
   - tests/unit/go: drop unused environment variables, skip coverage
   - OpenGL interface: Support more Tegra libs
   - gadget,overlord: pass kernelRoot to install.Run()
   - tests: run unit tests in Focal instead of Xenial
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - daemon: move query /snaps/<name> tests to api_snaps_test.go
   - cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair
     runner
   - systemd/systemd.go: support journald JSON messages with arrays for
     values
   - cmd: make string/error code more robust against errno leaking
   - github, run-checks: do not collect coverage data on subsequent
     test runs
   - boot: boot config update & reseal
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - osutil/stat.go: add RegularFileExists
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - gadget/gadget.go: rename ubuntu-* to system-* in doc-comment
   - tests: use 6 spread workers for centos8
   - bootloader/assets: support injecting bootloader assets in testing
     builds of snapd
   - gadget: enable multi-volume uc20 gadgets in
     LaidOutSystemVolumeFromGadget; rename too
   - overlord/devicestate, sysconfig: do nothing when cloud-init is not
     present
   - cmd/snap-repair: filter repair assertions based on bases + modes
   - snap-confine: make host /etc/ssl available for snaps on classic


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-2
changelog:
  - License fixes.
  - *.so.* names fix
  - make_build fix
  - -doc fixes
  - check fixes
  - ldconfig call fix
  - compiler flags fixes


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-3
changelog:
  - Disabled only those tests that lock excessive numbers of pages (and will
    therefore fail on a system with default resource limits)
  - Disabled LTO, since it causes test failures on all file-based database tests
  - Added COPYING file in files section for -doc subpackage
  - Installing doc/ and api-doc/ subdirectories in -doc subpackage
  - Added example/ to -doc
  - Changed man pages wildcard from ..._*.1.* to ..._*.1*
  - Removed -lib/-libs mess
  - Excluded i686 arch


author: TI_Eugene <ti.eugene@gmail.com> - 0.9.3-4
changelog:
  - 'Required: pkgconfig' removed from -devel
  - spec spaces/tabs resolved
  - Added CONTRIBUTING.md to -libs
  - examples/ moved from -doc to -devel
  - `excludearch i686` proven


author: Joe Doss <joe@solidadmin.com> - 1.0.20200510-1
changelog:
  - Update to 1.0.20200510
  - ipc: add support for openbsd kernel implementation
  - ipc: cleanup openbsd support
  - wg-quick: add support for openbsd kernel implementation
  - wg-quick: cleanup openbsd support
  - wg-quick: support dns search domains
  - Makefile: simplify silent cleaning
  - ipc: remove extra space
  - git: add gitattributes so tarball doesn't have gitignore files
  - terminal: specialize color_mode to stdout only
  - wg-quick: android: support application whitelist
  - systemd: add wg-quick.target


author: Joe Doss <joe@solidadmin.com> - 1.0.20200513-1
changelog:
  - Update to 1.0.20200513
  - Makefile: remember to install all systemd units
  - ipc: openbsd: switch to array ioctl interface


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


author: Joe Doss <joe@solidadmin.com> - 1.0.20210315-1
changelog:
  - Makefile: fix version indicator
  - wireguard-tools: const correctness
  - wireguard-tools: drag in headers for prototypes
  - ipc: uniformly ignore preshared keys that are zero
  - wg-quick: freebsd: add kernel support
  - ipc: freebsd: add initial FreeBSD support
  - wg-quick: freebsd: avoid writing private keys to /tmp


author: Joe Doss <joe@solidadmin.com> - 1.0.20210424-1
changelog:
  - wg-quick: freebsd: check for socket using -S, not -f
  - wg-quick: freebsd: do not assume point-to-point interface flag
  - wg-quick: freebsd: use ifconfig for determining if interface is up
  - wg-quick: kill route monitor when loop terminates


author: Bojan Smojver <bojan@rexurive.com> - 1:0.9.14-2
changelog:
  - Bump up to 0.9.14
  - Add a set of patches to deal with new GCC warnings/errors
  - Do not emit warning on failed architecture detection
  - Exclude s390x arch for now


author: Michal Ambroz <rebus at, seznam.cz> - 3.11.0-1
changelog:
  - bump to 3.11.0 release (#1760678)
  - BUGFIX: Some regexp character classes not matching correctly when used with “nocase” modifier (upstream #1117)
  - BUGFIX: Reduce the number of ERROR_TOO_MANY_RE_FIBERS errors for certain hex pattern containing large jumps (upstream #1107)
  - BUGFIX: Buffer overrun in “dotnet” module (upstream #1108)
  - BUGFIX: Memory leak while attaching to a process fails (upstream #1070)


author: Jonathan Dieter <jdieter@gmail.com> - 1.1.2-2
changelog:
  - Fix multipart range handling to work with quotes, fixes #1706627
  - Fix file creation permissions so they respect umask
  - Actually push new sources


