# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.25.0-2
changelog:
  - Update etcetera dependency to version 0.10
  - Update License based on other indirect dependency changes


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:19.2.0-10
changelog:
  - hack around cmake -std=gnu99 w/ userspace-rcu
  - use system version of gmock and gtest to avoid bundled brain damage
    that creates but does not install gmock and gtest shlibs rhbz#2341687


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.0.1-1
changelog:
  - Update to release v2.0.1
  - Resolves rhbz#2332367
  - Drops 0001-fsverity.IsEnabled-big-endian-fix.patch. Upstream incorporated
    a change that obviates this patch.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.0.2-1
changelog:
  - Update to release v2.0.2
  - Resolves rhbz#2337577
  - Upstream release note summary: "The second patch release for containerd
    2.0 includes a number of bug fixes and improvements."


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.1-6
changelog:
  - CUPS restart has to happen after universal filter is gone for good (in posttrans) (fedora#2370978)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.23.0-3
changelog:
  - Ignore fedpkg mockbuild generated artifacts
  - Ignore generated rpms and results_ sub-directory generated by fedpkg
    during mockbuild


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.24.0-1
changelog:
  - Update package to release v0.24.0
  - Resolve: rhbz#2366388, rhbz#2360632
  - Upstream fixes and changes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 0.26.1-1
changelog:
  - Update to release v0.26.1
  - Resolves: rhbz#2382656
  - Upstream fix
  - Includes temporary nodwarf5 flag for go


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.2.1-1
changelog:
  - Update to release v28.2.1
  - Resolves: rhbz#2369024, rhbz#2354429, rhbz#2353100
  - V28.2.1 contains regression fix
  - V28.2.0 has new features and fixes
  - Reconcile all branches for possible packit integration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.3.3-1
changelog:
  - Update to release v28.3.3
  - Resolves: rhbz#2384219
  - Resolves: CVE-2025-54388 / GHSA-x4rx-4gw3-53p4
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.36.1-1
changelog:
  - Update to release v2.36.1
  - Resolves: rhbz#2367247, rhbz#2360592, rhbz#2353097, rhbz#2352158
  - Improvements and fixes. See upstream changelog


author: Jos de Kloe <josdekloe@gmail.com> - 2.42.0-3
changelog:
  - Add calling a little python script in the install stage to revert
    the (upstream) replacing of directories by a symlinks 
    which causes upgrade problems with rpm for the data package.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.72.0-1
changelog:
  - Update to 2.72.0 - Closes rhbz#2359713 rhbz#2340213 rhbz#2345809
    rhbz#2347477 rhbz#2350818 rhbz#2352165 rhbz#2360633 rhbz#2360593


author: Steven Presti <spresti@redhat.com> - 2.21.0-2
changelog:
  - Rename ignition.cfg -> 05_ignition.cfg to mirror upstream
    additionally backport rename.
  - Rename ignition-ignition-grub subpackage to ignition-grub
  - Update grub2 config to use the correct dir for bootupd static grub configs
    https://github.com/coreos/ignition/pull/2037#issuecomment-2736300056


author: Packit <hello@packit.dev> - 19-1
changelog:
  Changes with 19
  ----------------
    * refactor: use standard logger instead of logrus (#214)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 20-1
changelog:
  Changes with 20
  ----------------
    * deps: update (#219)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-05-30


author: Packit <hello@packit.dev> - 21-1
changelog:
  Changes with 21
  ----------------
    * image-builder: fix cross-arch uploading (#218)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * packit: rename epel9-next (#224)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 22-1
changelog:
  Changes with 22
  ----------------
    * GHA: add the common-stale-action (#225)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * chore: bump `images` (#228)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-06-22


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 25-1
changelog:
  Changes with 25
  ----------------
    * deps: update images to 0.162.0 (#247)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai
    * main: `--version` includes git commit (#230)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    * packit: enable RHEL 10 builds (HMS-8829) (#246)
      * Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-16


author: Packit <hello@packit.dev> - 26-1
changelog:
  Changes with 26
  ----------------
    * deps: bump images to 0.164 (#252)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
    * main: add `--ignore-warnings` cmdline option (#250)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Simon de Vlieger
    * testutil: trivial cleanup/rename (#249)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-21


author: Packit <hello@packit.dev> - 27-1
changelog:
  Changes with 27
  ----------------
    * chore: set specfile version at build (#253)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Lukáš Zapletal

  — Somewhere on the Internet, 2025-07-23


author: Packit <hello@packit.dev> - 28-1
changelog:
  Changes with 28
  ----------------
    * README.md: document `--ignore-warnings` (#254)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * ci/packit: remove EPEL release automation (#258)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    * ci: upgrade golangci-lint to 2.3.0 (#257)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    * deps: update `images` to 0.168 (HMS-8949, HMS-8922) (#262)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt, Tomáš Hozza
    * spec: fix up version number (#259)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Ondřej Budai, Tomáš Hozza

  — Somewhere on the Internet, 2025-07-31


author: Pavol Sloboda <pavol.sloboda02@gmail.com> - 2.6.2-3
changelog:
  - fix: fixed the BuildRequires of mariadb-devel package the mariadb-
    connector-c-devel package is available for all RHEL versions from version
    8 and above, as version 7 is quite old this condition is not necessary
    and all packages should use the BuildRequires of mariadb-connector-c-
    devel instead of mariadb-devel if possible


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3 (rhbz#2368989)
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user (rhbz#2324168)


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0 (rhbz#2374737)
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: Michel Lind <salimma@fedoraproject.org> - 5.4.1-3
changelog:
  - Correctly set the soversion based on SemVer properties
    Backport of upstream PR#4319 from Neal Gompa (ngompa)
  - Split shared libraries into their own -libs subpackage


author: Chapien <inquiries@chapien.net> - 3.4.3-1
changelog:
  - Unretiring mygui. Changed specfile to reflect modern mygui. - Source now
    points to new upstream repo - Desktop files created for other tools -
    Built using openGL instead of OGRE now - No longer build demos. Might
    build demos again later.


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 3.4.3-5
changelog:
  - move two shared libraries from -devel to main package
  - add missing SONAME to libMyGUI.OpenGLPlatform.so


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.9.1-1
changelog:
  - Update to 1.9.1 - Closes rhbz#2362077 rhbz#2354430 rhbz#2352319
    rhbz#2350839 rhbz#2348836 rhbz#2339349


author: Dumitru Ceara <dceara@redhat.com> - 24.03.90-5
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - cb8e5433281b8ab5f3a65e52e41f46839e32d4fc
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Numan Siddique <numans@ovn.org> - 24.03.90-6
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 8efac26f6637fc35fd1d3e5b41b935ebcb074a1d
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Dumitru Ceara <dceara@redhat.com> - 24.03.90-7
changelog:
  - Updated the OVN sources to upstream branch-24.09 commit - 76bd54eb36d52d1b3fa663d185f53dcaa2cff06b
    This is required by ovn-kubernetes to test out new features in their CI before
    OVN 24.09 is released.


author: Numan Siddique <numans@ovn.org> - 24.09.2-04
changelog:
  - Update the OVN sources to upstream release v24.09.2
    with the base OVN commit df4f80a60d4cd712870aa73d32d5677448c11c78
    and OVS commit 9e07a69bbb2a7d3eb35f9b487161c50cfa5bd65e
    The below commits are also synced:

  - Prepare for 24.09.3.
  [Upstream: 0a899586b9ec222b335a956021971de1c2dd2312]

  - ic: Fix NULL ptr deref on log of duplicate routes.
  [Upstream: 5a19ae8fa2965e4bf6864f84dfd1adef85ba4b13]

  - controller: Fix IPv6 dp flow explosion by setting flow table prefixes.
  [Upstream 8d64f2b7dcef24d175151ba5e0732281cdeb6d54]

  - tests: Fix flaky "ovn-controller: Multiple OVS interfaces ...".
  [Upstream: c09c714a6beb413c479983d2a301411e81d89f71]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.0-52
changelog:
  - Updated the OVN sources to upstream release 25.03.0
    with the base OVN commit c24b1aa3c724de1aa9fd2461f07e4127a6bfa190
    and OVS commit bb059333496a9b48d6d798b6b32108c9f2720479.
    The following commits are also synced:
  - tests: Don't assume first bucket will be chosen.
  [Upstream: 362d2c0b9bc13da031c08497504c2601b5de6897]

  - ci: Add permanent fix for /etc/hosts file.
  [Upstream: 5c32795e0745897d6e6fcd9a33b9c523f5ebe919]

  - pinctrl: Remove useless volatile qualifier.
  [Upstream: 30717870c70dac547a8bd92b35010cc74dfbbbe8]

  - tests: Add direct lsp to dynamic-routing tests.
  [Upstream: 65ae5bef3db049648804535e63a72a06dbce48cc]

  - ovn-controller: Update handlers for route changes.
  [Upstream: 2a77e7230fd72ce705ac1c2ffc071f4ca20f4bb5]

  - route: Filter datapaths that should advertise.
  [Upstream: 0a9906c82158d829fb8052d764a93825ea2bc9ee]

  - northd: Set REGBIT_CONNTRACK_COMMIT earlier.
  [Upstream: 7454213615258cc445ce7e49f9d50c6c5abfbc7b]

  - contoller, northd: Limit number of claims for virtual ports.
  [Upstream: 9f1c2b14a0ba300e1719d57f62ebf1c060d63c35]

  - controller: Remove only commited virtual port binding requests.
  [Upstream: 81c5e0168c6c0fc98c3bb64a43aa1561d7900dfe]

  - controller: Make sure we will update routes on tracked port change.
  [Upstream: 2f6cf63351c0bbc2637f0a7713eec4689a9b283b]

  - northd: Prevent SB LB duplicates.
  [Upstream: 58735ad207803aa9c5d6cd236dc9aafab83c18c6]

  - tests: Fix racy hard_age value.
  [Upstream: 4b7392d1a467f1de51d4bf869f534d2d29b485d1]

  - tests: Prevent flakiness of "LR ct-commit-all" test.
  [Upstream: 2c98b6c13464ddb7c1ad40c49df4d806b6a76073]

  - ovn-nb: Improve docs for nbctl --template lb-add.
  [Upstream: b4a897ac0aeec16b01eb64b52d7ff0df40081a6a]

  - ovn-nbctl.8: Document the "--route-table" option.
  [Upstream: 5713cd605f5012d06135f302de7bcf42affedbb2]

  - ovn-architecture.7: Fix outdated nb_cfg description.
  [Upstream: eabf8251ca3ee537c9facd3d1986ab82b6b84a02]

  - tests: Don't hardcode table numbers in the default flows test.
  [Upstream: df4e4bf291f396234b29e15ee68110545a741243]

  - controller: Optimize adding 'dps' to the local datapaths.
  [Upstream: 5ad811ce400838c4d024fb23fc3b1ee66944c78a]

  - controller: Expand the helper lport_get_peer().
  [Upstream: 4e7f4a1e4c6d00382d7880eb4aa73e1db9ca3102]

  - controller: Add a helper lport_get_cr_port().
  [Upstream: 354c4b298516ad1ee45bc1a40f575b701a81c91d]

  - controller: Add debug/dump-local-datapaths unixctl.
  [Upstream: 77f6069e891df4bd96f4285149f5417d1c4fdf26]

  - northd: Avoid matching on ct_state.dnat in logical flows.
  [Upstream: 5a12b937f1a035d926842b72730656776d4ab8cf]

  - lib: northd: Add a new ct-state-save feature flag.
  [Upstream: 87f8d012aeae27f0e47066d508ea9b2278d5ee63]

  - lib: ovn-controller: Add a new ct_state_save() logical action.
  [Upstream: 001ba9a3ae1a55d41ebd5958f8f944821205bd55]

  - northd: Limit flooding the self originated neigh disc packets.
  [Upstream: fe5740e2c75fdb815a1dec7d812e88694727d366]

  - northd: Fix network_id computation for IPv6 LRP networks.
  [Upstream: 4b41c118a01a715201937f9279bd95cf562bef70]

  - ovn-nbctl: Add --template option for lb-add.
  [Upstream: 1d7951c3cedc82d32e922cb01659ae1f9c1a213a]

  - tests: Use scapy contrib BFD implementation.
  [Upstream: d5b6169d3ffc566dca7d8a34e1e89fd85b1b8ddb]

  - controller, northd: Add command to enable time warp.
  [Upstream: 202a2a8675e9030b97d5d21ba50ec1008139c346]

  - docs: Fix up stage-hint ovn-sb documentation.
  [Upstream: 40b7ffe7a0b41eda468f800dc113413eebe9663f]

  - northd: Do not drop ip traffic with destination vip expressed via template vars.
  [Upstream: 2326d64f48ad3f8f103a3238a8154bc8529a0465]

  - northd: Use next-hop network for SNAT when lb_force_snat_ip=router_ip.
  [Upstream: 6756ece392bafcc2e2041369e0dfffb377f8d9e7]

  - ovs: Update the submodule to include python F824 fix.
  [Upstream: d0143b75379761ed8a927b9bc6b66b9446076cf8]

  - ci: Add missing llvm package into Fedora.
  [Upstream: bd4c1eee96aa3fd6d4f5e294dcab604a45e54f6d]

  - controller: Redirect traffic for container port.
  [Upstream: 664a82eeb830f284ee5fdfc941f399a78e88f3f0]

  - multinode tests: Simplify/Cleanup migration test.
  [Upstream: e07c56c430be705452cfd083741e4d21b9c47042]

  - lb: Make the LB validation consistent.
  [Upstream: 1a3fd5de519b962769a5b377ff7bdc674fa4068e]

  - tests: Ignore FDB transaction errors.
  [Upstream: 5e2b1ecf945b1124c4593ea76a86cd81bfbc6a9b]

  - controller: Fix possible NULL ptr access in lport_is_local().
  [Upstream: 65e7bcbf2bc2673262c621bd714d0e8c3e855b78]

  - controller: Fix active mac-binding refresh for IPv6.
  [Upstream: e664d16d03aaeac963c203d455794d94a21978ae]

  - tests: Fix flaky "IGMP incremental processing".
  [Upstream: 4a8b656a2ad650a28c6e181c507a4326c2725290]

  - tests: Avoid adding two similar load balancers.
  [Upstream: d3adc824a28e3a19fa1067f2be4c978516c89d94]

  - Fix missing load balancer hairpin flows.
  [Upstream: a4a71fcad105e32fa09fd330b9e8b06c2f565614]

  - ovn.at: Run 'ACL Conntrack ID propagation' for each northd type.
  [Upstream: c6af3c568813f10f4971ebe7ac0fabcb0f838225]

  - ci: Bump the Ubuntu image to 24.04.
  [Upstream: 06b49b45633cae02c9060e0fa0d799514cd7aa67]

  - docs: Move "Transit Router" notes to the "Logical_Router" section.
  [Upstream: ea9d0982fa08a76c36f7e611936d30fb2edf7e15]

  - containers: Get sparse from the official GitHub mirror.
  [Upstream: 0cb2b9b2be9a6efb91fb4e6992e33251840a2884]


author: Dumitru Ceara <dceara@redhat.com> - 25.03.1-32
changelog:
  - Updated the OVN sources to upstream release 25.03.1
    with the base OVN commit 4b8dac64fd3fbbfb39a7105365d5143c7ffa5a35
    and OVS commit a0f636163b60a6afe5e20da221b7e7a47a8a3753.
    The following commits are also synced:
  - logical-fields: Fix inconsistency of register usage.
  [Upstream: 4e12cc2cb655c09e80fa906edeb7f153e1a66040]

  - ovn-trace: Fix pop action in trace.
  [Upstream: 6a473e324ec6260a2c1ee20b95d639ba6b2bb9a0]

  - multinode tests: Fix tests for ENABLE_SSL="yes" clusters.
  [Upstream: c6edf6ad9291e2e660cb4d1292ed3032d5183d72]

  - tests: Fix flaky "interconnection".
  [Upstream: b3bff9ded592338b45b51391a6bd314e4969b69b]

  - tests: Add missing check for scapy.
  [Upstream: 0b79d0aad78a082a0a4f23917ad8027aad5cd114]

  - tests: Remove unused commands from mac-binding test.
  [Upstream: 89184aa4285766daa838e5425464d1588123b179]

  - tests: Fix flaky "send arp for nexthop".
  [Upstream: 59607a4c8f932e683ad81b6dea2f85c084dd3574]

  - tests: Fix flaky tests not properly waiting for ovn-controller exit.
  [Upstream: fddffe180bb16a222ec2cfa22d3e2ba5bdae597f]

  - tests: Fix flaky "NAT on a provider network with no localnet ports".
  [Upstream: 3c545c0bb76e1f014061d30006979e4a7e39c7db]

  - tests: Avoid calling ovs/ovn commands when ovs/ovn are stopped.
  [Upstream: eba392509f1343cec7ea0bd2315301a554351f58]

  - tests: Avoid unloading not existing modules.
  [Upstream: 09eb45dfa5bd37af23af94ffc86607b8b28e449b]

  - tests: Fix ovn-macro when ovn_check_packets__ fails.
  [Upstream: e51b73cdf1c88338d057cb3668e22a4d53d7bc39]

  - ovn-nbctl: Fix lrp set gateway chassis duplicate gc.
  [Upstream: e16b45a97b7eda51653fb14a9fc2c5709d7d6ce0]

  - multinode.at: Cleanup test interfaces created in br-ex.
  [Upstream: 857e0c931e2904c4e4b6dc59800c343939d50ed0]

  - multinode-macros: Cleanup and check resources on all chassis.
  [Upstream: f954ca224291859e4b1034dc36653205691e4de2]

  - ovn-ctl: Fix ovsdb-server/sync-status command output.
  [Upstream: 6a59909bdb36640db27a8358d2585faf11b003f2]

  - multinode tests: Dump logs when test exits.
  [Upstream: 1c12218ba7eaf33e42602855c5311fea980476d9]

  - multinode: Avoid code duplication in macros.
  [Upstream: 382e67032079d69f23f6aad38929500680e0b8a1]

  - route-exchange: Don't keep trying to delete non-existent VRFs.
  [Upstream: 14f9a157e21234b67b977a865fa370155e74f164]

  - controller: Fix bad backport of route_exchange_sb_ro_handler().
  [Upstream: 84048893727f2586c9d379fb347453f1697d47b7]

  - route-table-notify: Avoid unnecessary lookups.
  [Upstream: a264720144fda2d0091f7f6692bd4220a97c5297]

  - controller: Prevent assert with BGP when SB is read only.
  [Upstream: 3e53345ab6899617be3a94ff30b5e5f7636b5940]

  - controller: Slightly optimize the runtime_data handler for sb_ro.
  [Upstream: 02266e0c58b28514032a5bbf31c2dc1e0e1785be]

  - Revert "northd: Don't skip the unSNAT stage for traffic towards VIPs."
  [Upstream: 69a5b2e894324805e5bec0200783a462a9b348f9]

  - ci: Rebalance system tests to speed up the testing.
  [Upstream: d3a1264d29d7bdfcf156e8ec21e9a4628d46a0b7]

  - test: Add missing sync calls.
  [Upstream: 1eb9d441d1a2a47da968d6bffb4dd580976279bf]

  - controller: Install QoS rules even on 'system' ports. (#FDP-1472)
  [Upstream: 6f66904ae108917db8090b9dfe8590642e2f895f]

  - controller: Make sure we run engine_cleanup after thread destroy.
  [Upstream: fd0e5c6fa50f7d67731f168cc498c893071b6f02]

  - Prepare for 25.03.2.
  [Upstream: c1a1c3461f26e0a3e5f231f39b9ae52c78fa5a51]


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-0.1.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9-rc3,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9-rc3


author: Klaus Wenninger <kwenning@redhat.com> - 2.1.9-1
changelog:
  - Update for new upstream release tarball: Pacemaker-2.1.9,
    for full details, see included ChangeLog file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-2.1.9


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.1.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc1
  - syncing with upstream spec-file (removed nagios)


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.2.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc2
  - disable docs for now as koji build shows issues with python requirements
    for inkscape


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-0.4.rc3
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0-rc3,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0-rc3
  - synced dropping inkscape build-requirement with upstream


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.0-5
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.0,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.0
  - Regarding noteworthy changes coming with the bump of the major version see
    https://projects.clusterlabs.org/w/projects/pacemaker/pacemaker_3.0_changes/
  - add patch to when resetting scheduler as well reset error and warning flags
    lacking pcmk_reset_scheduler in 3.0.0 branch pcmk__set_scheduler_defaults
    seems to be the most reasonable alternative for now


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc1
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc1,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc1
  - sync cts/cts-cli -V in check with upstream
  - New corosync package is leaving /var/lib/corosync to be created by systemd
    we're running our test without systemd so have it done by playbook


author: Klaus Wenninger <kwenning@redhat.com> - 3.0.1-0.4.rc2
changelog:
  - Update for new upstream release tarball: Pacemaker-3.0.1-rc2,
    for full details, see included ChangeLog.md file or
    https://github.com/ClusterLabs/pacemaker/releases/tag/Pacemaker-3.0.1-rc2


author: Marek Kasik <mkasik@redhat.com> - 25.02.0-2
changelog:
  - Move isOk() check inside JBIG2Bitmap::combine
  - PSStack::roll: Protect against doing int = -INT_MIN
  - Resolves: #2357815, #2357819


author: Karolina Surma <ksurma@redhat.com> - 1.3.0-2
changelog:
  - Read the runtime depedencies from pyproject.toml
  - w gets the dependencies by building the wheel which is time- and
    resource-consuming, and done twice during one package build (again in the
    %build phase). Instead, -p reads the dependencies from the [project]
    table in pyproject.toml which is a part of the sdist.


author: Jos de Kloe <josdekloe@gmail.com> 2.38.1-1
changelog:
  - move to upstream release 2.38.1
    Note that upstream numbering scheme has changed so 1.7.1 jumped to 2.37.0


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


author: Jerry James <loganjerry@gmail.com> - 4.9.1-1
changelog:
  - Version 4.9.1
  - Fixes CVE-2024-21506 (rhbz#2273860)
  - Fixes CVE-2024-5629 (rhbz#2290587)
  - Modernize the spec file
  - Fix up the license information
  - Add check script
  - Package the ocsp, snappy, and zstd extras
  - Build docs for Fedora only
  - Permit use of pytest-asyncio 0.23 until Fedora can catch up


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.68.2-1
changelog:
  - Update to 1.68.2 - Closes rhbz#2311287 rhbz#2326578 rhbz#2333262
    rhbz#2333238 rhbz#2331989 rhbz#2331961


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.68.2-2
changelog:
  - Update to 1.68.2
  - Move to bundling with gotmax23 tool
  - Bump golang.org/x/net/html to v0.33.0 to fix CVE-2024-45338
  - Bump golang.org/x/crypto/ssh to v0.31.0 to fix CVE-2024-45337
  - Bump github.com/quic-go/quic-go to 0.48.2 to fix CVE-2024-53259 and
    CVE-2024-22189
  - s390x is temporarly disable until a workaround to
    https://github.com/cronokirby/saferith/issues/52 is found


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.70.2-1
changelog:
  - Update to 1.70.2 - Closes rhbz#2254045 rhbz#2336979 rhbz#2337234
    rhbz#2341265 rhbz#2348838 rhbz#2350844 rhbz#2352327 rhbz#2354433
    rhbz#2360615 rhbz#2360653


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Packit <hello@packit.dev> - 0.18.4-1
changelog:
  - Add ioctls for Chromium OS EC devices (thanks Abhinav Baid)
  - Generate "remove" uevent in umockdev_testbed_remove_device() (thanks Bob Henz)
  - Recursively remove children with uevents (thanks Bob Henz)
  - preload: Fix sigmask block and restore race (thanks barath)


author: Packit <hello@packit.dev> - 0.19.0-1
changelog:
  - API: Add UMockdev.Testbed.wait_script() to sync to scripts/evemu replays
  - API: UMockdev.Testbed.load_script_from_string()
  - API: UMockdev.Testbed.load_evemu_events_from_string()
  - Make uevent synthesis thread-safe (thanks Bob Henz)
  - Handle "connection refused" when sending a uevent (thanks Bob Henz)


author: Packit <hello@packit.dev> - 0.19.1-1
changelog:
  - preload: Restore errno in ioctl_emulate_open()
  - preload: Only emulate ioctls on emulated devices
  - Fix ioctl_tree_execute() ret type and initialization (thanks Helge Deller)
  - tests: Disable spidev on big-endian 32-bit platforms (thanks Helge Deller)


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


