# changelog

author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Jens Petersen <petersen@redhat.com> - 1.8-35
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.8/changelog
  - new 'branch-log' command
  - 'build','parallel': can now merge --from a particular branch
  - 'commit': requires -b option to confirm non-rawhide commit
  - 'compare-tarballs': new command to diff source tarballs
  - 'copr --failures': fetches tails of failed build logs
  - new 'repoquery' command which wraps fedora-repoquery
  - 'update-sources': prep in tmpdir; compares tarballs; improved ver-rel logic
  - `FBRNCH_KOJI_PROFILE` provides experimental Koji profile support (eg riscv)
  - merge handling improvements
  - tries to setup git upstream branch tracking


author: Jens Petersen <petersen@redhat.com> - 1.8.1-38
changelog:
  - new native watchtask implementation and command
  - local build.log's now generated with 'script' tool instead of tee pipe
  - some web API calls now retry to help with connection issues
  - update-sources try to take "sources" changes into account now
  - merge tries to rebase if origin ahead
  - more details: https://hackage.haskell.org/package/fbrnch-1.8.1/changelog


author: Jens Petersen <petersen@redhat.com> - 1.8.3-40
changelog:
  - 'autospec': don't switch to rawhide and pass pkg spec file to convert
  - 'compare-tarballs': order tarballs by removal and addition
  - 'copr': filter out canceled builds from existing builds
  - 'mock': add --no-pull and --config-options
  - 'mock': use target branch for srpm and build disttag
  - 'nvr': fix for epel10 disttag with autorelease
  - Branches listOfBranches: do eol/branched checks for all BranchesReq


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: Pavel Raiskup <praiskup@redhat.com> 42.3-1
changelog:
  - Fedora 40 EOL
  - Add RHEL 10 template and configs (carlwgeorge@gmail.com)
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - Add epel-z-10 template (carlwgeorge@gmail.com)
  - Update Azure Linux configurations (scaronni@nvidia.com)
  - make opensuse-leap-15.5.tpl eol
  - fix the leap image reference to 15.6


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Pavel Raiskup <pavel@raiskup.cz> 44.3-1
changelog:
  - the fedora-release-eln renamed to fedora-eln-release
  - Add config for Fedora 44 version of RISC-V port (marcin@juszkiewicz.com.pl)
  - set bootstrap_image_ready=True for AlmaLinux configs (andrew.lukoshko@gmail.com)
  - re-enable bootstrap images for x86_64_v2 AlmaLinux configs (andrew.lukoshko@gmail.com)
  - remove dependency on python3-dnf (msuchy@redhat.com)


author: Jens Petersen <petersen@redhat.com> - 2.31.5-1
changelog:
  - rebase to nix-2.31.5 using libgit_1.9
  - fixes GHSA-vh5x-56v6-4368
  - https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html


author: Packit <hello@packit.dev> - 1.15.1-1
changelog:
  - We have fixed a bug that prevented running `sync_release()` on a `PackitAPI` instance initialized with `non_git_upstream=True` repeatedly due to an improper clean-up. (#2691)


author: Packit <hello@packit.dev> - 1.15.2-1
changelog:
  - Packit now uses the specfile library's sanitization when parsing spec files.
  - Resolves: rhbz#2450841


author: Packit <hello@packit.dev> - 1.15.3-1
changelog:
  - We've fixed the formatting of the strings Packit appends to the changelog. Now there will be at most one blank line before or after the Packit comment. (#2707)
  - Resolves: rhbz#2453842


author: Packit <hello@packit.dev> - 1.16.0-1
changelog:
  - Packit CLI has a new option `--[no-]update-release` that, by default, follows the value of the option set in the config, and also allows you to override manually, if necessary. (#2713)
  - In addition to `version_update_mask`, users can now use a new `version_update_specifiers` configuration option to control the upstream versions allowed to be release-synced. The option accepts [PEP440 version specifier sets](https://packaging.pypa.io/en/stable/specifiers.html), for example `version_update_specifiers: >=1.0,~=1.0`. (#2710)
  - Resolves: rhbz#2461103


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)
  - Use existing dependency Crypt::URandom rather than Crypt::SysRandom to
    generate seed in Crypt::DSA::KeyChain; both modules use getrandom() as
    the backend on Linux, and Crypt::SysRandom is currently not available
    in EPEL


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Fixed key material reuse for multiple signing events (CVE-2026-12205,
      CWE-323)
      - sign() reused the DSA nonce k across signatures (r and k^-1 were cached
        on the key and not regenerated), allowing private-key recovery from two
        signatures over different messages
      - Now generates a fresh nonce per signature
      - Keys used to sign more than once with an affected version should be
        considered compromised


author: Paul Howarth <paul@city-fan.org> - 0.261630-1
changelog:
  - Update to 0.261630 (rhbz#2488228)
    - Change the default hash algorithm to HMAC-SHA256, and increase the default
      number of iterations to 600,000, in line with current OWASP recommendations
      (CVE-2026-9641)
    - Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
      builtin rand(), which is not cryptographically secure (CVE-2026-9638)
    - Use a constant-time comparison in 'validate' to avoid timing attacks
      (CVE-2017-20240)
  - Switch to Module::Build::Tiny flow
  - Package new README file


author: Paul Howarth <paul@city-fan.org> - 2.83-1
changelog:
  - Update to 2.83
    - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
      but gdlib-config (the check was too strict)


author: Paul Howarth <paul@city-fan.org> - 2.84-1
changelog:
  - Update to 2.84
    - Added Makefile.PL --with and --without options to bypass autodetection
      errors or upstream libgd or subsequent library errors (GH#55)
    - Better support MSWin32 without gdlib.pc (requires manual --options and
      --lib_gd_path)
    - Work around broken ExtUtils::PkgConfig->find (GH#61)
    - Fixed snprintf for newer MSVC (>= VS 2015)
    - Added GD::Image::supported() image types method
    - Added newFromTiffData() method
    - Fixed t/GD.t for unsupported image types
    - Add GIFANIM to the default since 2.0.33 (GH#56)
    - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
    - Add demos/png2jpeg.pl
  - Don't disable XPM support if GD config doesn't explicitly require -lX11
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 2.85-1
changelog:
  - Update to 2.85
    - Tolerate runtime TIFF decode failures in autodetect (GH#62)
    - Replace cpm with cpanm in github actions
    - Fixed a minor precedence bug in t/z_manifest.t


author: Remi Collet <remi@remirepo.net> - 2.2.0-1
changelog:
  - update to 2.2.0
  - drop patch merged upstream
  - re-license spec file to CECILL-2.1
  - add pie virtual provides


author: Remi Collet <remi@remirepo.net> - 2.0.0-1
changelog:
  - update to 2.0.0
  - rename to php-pecl-ds2
  - run standard php test suite from extension sources
    instead of separate tests using phpunit
  - drop ZTS build


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2452368
  - Fix rhbz#2453084
  - Fix rhbz#2455643
  - Fix rhbz#2458928
  - Fix CVE-2026-47215


author: Robert Scheck <robert@fedoraproject.org> 4.00-4
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


