Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20230504 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: dav1d (1.1.0 -> 1.2.0) dolphin editorconfig-core-c (0.12.5 -> 0.12.6) gtk4 libaom libbpf (1.1.0 -> 1.2.0) libheif (1.15.2 -> 1.16.1) ncurses (6.4.20230418 -> 6.4.20230429) perl-CGI (4.56 -> 4.57) perl-Image-ExifTool (12.60 -> 12.62) perl-URI (5.17 -> 5.19) permissions (1599_20230217 -> 1699_20230424) python-certifi (2022.9.24 -> 2022.12.7) python-mysqlclient python-psutil (5.9.4 -> 5.9.5) python-pycairo python-pycurl python-pyudev (0.24.0 -> 0.24.1) python-zope.event w3m (0.5.3+git20180125 -> 0.5.3+git20230121) === Details === ==== dav1d ==== Version update (1.1.0 -> 1.2.0) - Update to version 1.2.0 * Improvements on attachments of props and T.35 entries on output pictures * NEON z1/z3 high bit-depth optimizations and improvements for 8bpc * SSSE3 z2/z3 8bpc and SSSE3 z1/z3 high bit-depth optimziations * refmvs.save_tmvs optimizations in SSSE3/AVX2/AVX-512 * AVX-512 optimizations for high bit-depth itx (16x64, 32x64, 64x16, 64x32, 64x64) * AVX2 optimizations for 12bpc for 16x32, 32x16, 32x32 itx ==== dolphin ==== Subpackages: dolphin-part dolphin-part-lang dolphin-zsh-completion libdolphinvcs5 - Have dolphin-part-lang supplement dolphin-part on pre-TW (boo#1210984) ==== editorconfig-core-c ==== Version update (0.12.5 -> 0.12.6) - editorconfig-core-c 0.12.6: * CVE-2023-0341: A buffer overflow in ec_blob (boo#1211032) * Update property key, value length limits per spec change ==== gtk4 ==== Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Add gtk4-correctly-refresh-after-delete.patch -- Fix issue where deleting files causes folders in the directory to disappear and reappear after a refresh (glgo#GNOME/nautilus#2941); patch taken from upstream commit. ==== libaom ==== - Revert to BSD-2-Clause licence tag to only use SPDX valid license tag. - Fix license tag to BSD-2-Clause and AOMPL-1.0. ==== libbpf ==== Version update (1.1.0 -> 1.2.0) - update to 1.2.0: * completely overhauled "Libbpf overview" landing documentation page; * support for BPF link-based `struct_ops` programs: * `SEC(".struct_ops.link")` annotations; * `bpf_map__attach_struct_ops()` attach API; * `bpf_link__update_map()` link update API; * support sleepable `SEC("struct_ops.s")` programs * improved thread-safety of libbpf print callbacks and `libbpf_set_print()` * improve handling and reporting of missing BPF kfuncs * `bpf_{btf,link,map,prog}_get_info_by_fd()` APIs * `bpf_xdp_query_opts()` supports fetching XDP/XSK supported features; * `perf_buffer__new()` allows customizing notification/sampling period now; * BPF verifier logging improvements: * pass-through BPF verifier log level and flags to kernel as is * support `log_true_size` for getting required log buffer size to fit BPF verifier log completely; * allow precise control over kprobe/uprobe attach mode: legacy, perf-based, link-based. * fix legacy kprobe events names sanitization; * fix clobbering errno in some cases; * fix BPF map's `BPF_F_MMAPABLE` flag sanitization; * fix BPF-side USDT support code on s390x architecture; * fix `BPF_PROBE_READ{_STR}_INTO()` on s390x architecture; * fix kernel version setting for Debian kernels; * fix netlink protocol handling in some cases; * improve robustness of attaching to legacy kprobes and uprobes; * fix double-free during static linking empty ELF sections; * a bunch of other small fixes here and there. ==== libheif ==== Version update (1.15.2 -> 1.16.1) Subpackages: gdk-pixbuf-loader-libheif libheif1 - update to 1.16.1: * Small maintenance update that fixes building the gdk-pixbuf loader. * The source package name has also been changed back to the old naming scheme. * Support for HEIFv2 regions (rgan) and user annotations (udes). This enables to annotate regions in the image with several geometric primitives and assign user text descriptions to them. Thank you @bradh for the contributions. Mask support will be added soon. * Previously, chroma was downsampled and upsampled with a simple nearest-neighbor method. We now included the sharp-yuv chroma downsampling algorithm. This gives improved image quality when images are downsampled to 4:2:0 and upsampled with bilinear interpolation. Thank you @maryla-uc for the contributions. * The bilinear chroma upsampling and averaging downsampling algorithms are also new. You can choose what to use. * We added experimental support for decoding uncompressed images according to ISO/IEC 23001-17:2023. This is work in progress and currently decoding only. Thank you @bradh for the contributions. * There are new APIs to query the image transformations. Thus, you may choose to get the original image and apply the transformations yourself. * A longstanding bug writing non-compliant 'ispe' boxes (image size) has been fixed. Files should be standard compliant now. * When building binary packages, you can now make use of a CMake presets to set a default configuration. * The deprecated autotools build files have been removed. ==== ncurses ==== Version update (6.4.20230418 -> 6.4.20230429) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Do not overwrite PKG_CONFIG_PATH for new tack support - Add ncurses patch 20230429 + revise recent change to _nc_write_entry to isolate it to a Cygwin bug (cf: 20230311) + amend fix for wgetnstr, wgetn_wstr to use cbreak mode unless raw mode was set (cf: 20210522). + fix a few warnings from cppcheck, etc. + correct copy/paste error in nc_access.h (report by Werner Fink). - Adopt patch ncurses-6.4-makeuseof_secure_open.dif * Fix yet an other copy/paste typo - Add patch ncurses-6.4-makeuseof_secure_open.dif * Really make use of _nc_safe_fopen() and _nc_safe_open3() - Add ncurses patch 20230424 + check return value of _nc_save_str(), in special case for tic where extended capabilities are processed but the terminal description was not initialized (report by Ziqiao Kong). + regenerate llib-* files. - Add ncurses patch 20230423 (boo#1210552) + add tiscan_s() to help applications check formatting capabilities that would be passed to tiparm_s, etc. + add tiparm_s() to provide applications a way to tell ncurses what the expected parameters are for a capability (tmux #3531). + improve check in lib_tparm.c, ensuring that a char* fits into a TPARM_ARG. + add --disable-setuid-environ configure option (request by Sven Joachim). + drop compatibility with obsolete versions of tack, e.g., pre-1.08 (Debian #1034549, cf: 20170722). - Build tack on the own way as ncurses upstream drop build within support ==== perl-CGI ==== Version update (4.56 -> 4.57) - updated to 4.57 see /usr/share/doc/packages/perl-CGI/Changes 4.57 2023-05-01 [ DOCUMENTATION ] - Documentation tweaks around uploadInfo() and hooks (GH #256, thanks to rlauer6) ==== perl-Image-ExifTool ==== Version update (12.60 -> 12.62) Subpackages: exiftool perl-File-RandomAccess - Update to 12.62: - Added basic read support for WPG images - Added ImageDataMD5 support for HEIC images - Added support for RAR version 5.0 compressed files (thanks Amir Gooran) - Added a few new XMP-aux tags (thanks John Ellis) - Made Composite tags available for use in -fileNUM argument - Better handling of FlashPix VT_EMPTY value - Fixed "Can't write" error when specifying a .webp file for the -o option - API Changes: - Added NoWarning option - Added ImageDataMD5 support for J2C and JXL images - Added support for PDF 2.0 (specification is finally freely available) - Added ability to extract timed Accelerometer data from Azdome GS63H MP4 videos which don't contain GPS - Added some new Sony lenses (thanks Jos Roost) - Decode some new tags for the Sony ZV-E1 (thanks Jos Roost) - Decode more tags for the Nikon Z30 (thanks Xavier) - Enhanced -fileNUM option to allow tags from the main file to be used in the file name string - Validate sample offset and size when calculating ImageDataMD5 for MP4 videos (note: may change ImageDataMD5 value for videos where audio data runs past end of media data) - Return error when attempting to write a fragmented JXL file - Improved robustness for determining image size for corrupted JPEG - Patched to allow Insta360 GPS records of unexpected length and tweaked verification algorithm to determine validity of these records - Fixed bug introduced in 12.57 where -progress:%f gave runtime warnings - Fixed "--" option to ignore subsequent -common_args option - Fixed incorrect ImageDataMD5 for Sony A100 ARW images - Fixed problem reading new XMP-et:OriginalImageMD5 tag ==== perl-URI ==== Version update (5.17 -> 5.19) - updated to 5.19 see /usr/share/doc/packages/perl-URI/Changes 5.19 2023-04-30 16:15:58Z - Form parameters without values are now represented by undef (GH#65) (Gianni Ceccarelli) 5.18 2023-04-29 16:08:14Z - Add a GH workflow to test LWP::Curl (GH#116) (Olaf Alders) - Add documentation examples for the host() and ihost() methods (GH#28) (Sebastian Willing) - Remove colon from username:password if there is no password (GH#31) (David E. Wheeler, Joenio Marques da Costa, Julien Fiegehenn) - Prefix private methods with _ in URI::_punycode (GH#47) (David E Wheeler) ==== permissions ==== Version update (1599_20230217 -> 1699_20230424) Subpackages: chkstat permissions-config - Update to version 20230424: * profiles: remove dead opiepasswd entry (opie was removed via OBS sr#1065964). ==== python-certifi ==== Version update (2022.9.24 -> 2022.12.7) - update to 2022.12.7: Removed certs: * CN=Network Solutions Certificate Authority O=Network Solutions L.L.C. * CN=Staat der Nederlanden EV Root CA O=Staat der Nederlanden ==== python-mysqlclient ==== - Use sphinx-build and do not depend on removed build_sphinx in Sphinx 7.0 (boo#1211051). ==== python-psutil ==== Version update (5.9.4 -> 5.9.5) - update to 5.9.5: * in case of exception, display a cleaner error traceback by hiding the `KeyError` bit deriving from a missed cache hit. * print the full traceback when a `DeprecationWarning` or `UserWarning` is raised. * there are cases where `Process.cwd()`_ cannot be determined (e.g. directory no longer exists), in which case we returned either ``None`` or an empty string. This was consolidated and we now return ``""`` on all platforms. * [UNIX]: if process is a zombie, and we can only determine part of the its truncated `Process.name()`_ (15 chars), don't fail with `ZombieProcess`_ when we try to guess the full name from the `Process.cmdline()`_. Just return the truncated name. * on certain kernels, ``"MemAvailable"`` field from ``/proc/meminfo`` returns ``0`` (possibly a kernel bug), in which case we calculate an approximation for ``available`` memory which matches "free" CLI utility. * `disk_partitions()`_: do not unnecessarily read /proc/filesystems and raise `AccessDenied`_ unless user specified `all=False` argument. * `users()`_ loses precision for ``started`` attribute (off by 1 minute). * if cwd no longer exists. Return an empty string instead. ==== python-pycairo ==== - Switch to single spec version build for PSP ==== python-pycurl ==== - Switch documentation to be within the main package. ==== python-pyudev ==== Version update (0.24.0 -> 0.24.1) - update to 0.24.1: * Recommended development release: Fedora 37 * Add support for PySide6 * Add missing 'priority' argument for GLib.to_add_watch() * Tidies and Maintenance fixes ==== python-zope.event ==== - Use sphinx-build and do not depend on removed build_sphinx in Sphinx 7.0 (boo#1211051). ==== w3m ==== Version update (0.5.3+git20180125 -> 0.5.3+git20230121) - update to version 0.5.3+git20230121 - add 0001-Update-German-message-catalogue.patch - dropped patches: 0001-allow-to-configure-the-accept-option-for-bad-cookies.patch 0001-implements-simple-session-management.patch 0001-handle-EXDEV-during-history-file-rename.patch 0001-w3mman-don-t-show-invalid-characters-bsc-950800.patch 0001-Fix-warning-for-unused-variable-without-USE_M17N.patch 0002-Fix-m17n-backspace-handling-causes-out-of-bounds-wri.patch