Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20241208 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: gegl gobject-introspection libtpms liburing (2.6 -> 2.8) llvm19 (19.1.4 -> 19.1.5) luajit mariadb meson openSUSE-release (20241206 -> 20241208) pam pam-full-src plymouth presage python-kiwi (10.1.18 -> 10.2.3) python-pexpect sdbootutil (1+git20241112.ecf5f97 -> 1+git20241206.dccea55) selinux-policy (20241118 -> 20241206) === Details === ==== gegl ==== Subpackages: gegl-0_4 gegl-0_4-lang libgegl-0_4-0 - Disable luajit on LoongArch64 ==== gobject-introspection ==== Subpackages: girepository-1_0 libgirepository-1_0-1 - Fix dependency generation for loongarch64. - Add python3-setuptools Requires: needed for python 3.13 which dropped distutils; setuptools now provides it. ==== libtpms ==== - Use gcc/g++-13 on Leap to fix the following failure: "tpm2_setprofile.c:49:24: error: initializer element is not constant" ==== liburing ==== Version update (2.6 -> 2.8) - switch URLs to the current location on github - Update to 2.8 * Add support for incrementally/partially consumed provided buffers, usable with the provided buffer ring support. * Add support for foo_and_wait_min_timeout(), where it's possible to define a minimum timeout for waiting to get batches of completions, but if that fails, extend for a longer timeout without having any extra context switches. * Add support for using different clock sources for completion waiting. * Great increase coverage of test cases, test case improvements and fixes. * Don't leak _GNU_SOURCE via pkb-config --cflags * Support for address sanitizer * Add examples/kdigest sample program * Add discard helper, test, and man page * Man page updates * Sync with kernel 6.10 * send/recv bundle support * accept nowait and CQE_F_MORE * Add and update test cases * Fix io_uring_queue_init_mem() returning a value that was too small, potentially causing memory corruption in userspace by overwriting 64 bytes beyond the returned value. Also add test case for that. * Add 64-bit length variants of io_uring_prep_{m,f}advise() * Add BIND/LISTEN support and helpers / man pages * Add io_uring_enable_rings.3 man page * Fix bug in io_uring_prep_read_multishot() * Fixup bundle test cases * Add fixed-hugepage test case * Fix io_uring_prep_fixed_fd_install.3 man page * Note 'len' == 0 requirement in io_uring_prep_send.3 man page * Fix some test cases for skipping on older kernels - drop (they are upstream) * test-buf-ring-nommap-skip-the-test-on-queue-init-ENO.patch * test-buf-ring-nommap-zero-the-ringbuf-memory.patch - add * 0001-test-init-mem-zero-the-ringbuf-memory.patch * 0001-test-rsrc_tags-use-correct-buffer-index-for-test.patch - cleanup spec file ==== llvm19 ==== Version update (19.1.4 -> 19.1.5) Subpackages: clang-tools clang19 libLLVM19 libclang-cpp19 libclang13 libclang_rt19 llvm19-gold - Update to version 19.1.5. * This release contains bug-fixes for the LLVM 19.1.0 release. This release is API and ABI compatible with 19.1.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== luajit ==== - No loongarch64 support yet - turn around the logic to known supported architectures ==== mariadb ==== Subpackages: libmariadbd19 mariadb-client mariadb-errormessages - Fix test for SSL connection init with openssl 3.2.3. * Added mariadb-fix-testsuite-openssl3.2.3.patch ==== meson ==== Subpackages: meson-vim - Add 13935.patch: Fix test suite with rust 1.83. ==== openSUSE-release ==== Version update (20241206 -> 20241208) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== pam ==== Subpackages: pam-32bit - pam_access: rework resolving of tokens as hostname - separate resolving of IP addresses from hostnames. Don't resolve TTYs or display variables as hostname. - Add "nodns" option to disallow resolving of tokens as hostname. - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078, CVE-2024-10963] ==== pam-full-src ==== Subpackages: pam-extra pam-manpages - pam_access: rework resolving of tokens as hostname - separate resolving of IP addresses from hostnames. Don't resolve TTYs or display variables as hostname. - Add "nodns" option to disallow resolving of tokens as hostname. - [pam_access-rework-resolving-of-tokens-as-hostname.patch, bsc#1233078, CVE-2024-10963] ==== plymouth ==== Subpackages: libply-splash-core5 libply-splash-graphics5 libply5 plymouth-dracut plymouth-lang plymouth-plugin-label plymouth-plugin-two-step plymouth-scripts plymouth-theme-bgrt plymouth-theme-spinner - Remove plymouth-only_use_fb_for_cirrus_bochs.patch: Bochs and cirrus DRM drivers are fully compatible with plymouth. Remove the workaround that forces them to use fbdev. Resolves the blank screen when disabling fbdev interfaces.(bsc#1232727) ==== presage ==== Subpackages: libpresage1 presage-data - Add presage-setuptools.patch: Fix installation of python bindings with setuptools 76. ==== python-kiwi ==== Version update (10.1.18 -> 10.2.3) - Bump version: 10.2.2 → 10.2.3 - Update STYLEROOT to SUSE 2022 - Fix broken links in the documentation - Fix legacy_bios_mode detection The code in this method does not work correctly if the firmware is set to 'bios'. In bios only mode the method returned a false value which is incorrect as it should return a true value in this case. Without this patch ISO images will fail to boot because no loader gets configured. - Added /dev/pts to bind mount locations During runtime several kernel filesystems are bind mounted into the image root system such that programs expecting it can work. /dev/pts was not needed so far but seems to be a good addition to the list to make tools like sudo to work properly when called e.g. from a config.sh script. This Fixes #2686 - Added provide/require system files for containers Added the attributes provide_system_files and require_system_files to control the provider and requester of system files in container image builds. systemfiles is a metadata file which contains all files from the package database at call time. It is used in flake-pilot to provision the systemfiles data from the host into the container instance. One possible use case for this data is a flake registration which uses a base container that is derived from a runtime container but all data from the runtime should be provisioned from the host. Using this feature tightly couples the flake to the host OS distribution and version. - Bump version: 10.2.1 → 10.2.2 - Fix scope issue Increase livetime of the the compressor instances to the livetime of RootImportOCI. They create temporary files which are referenced later and need to live longer than the block they got created in - Bump version: 10.2.0 → 10.2.1 - Fixed use of fscreateoptions for iso type The information for fscreateoptions was not passed along to the tooling if a custom filesystem attribute was specified. This Fixes #2681 - Allow to derive from multiple containers Add support for multi inheritance to the derived_from attribute In the order of a comma seperated list of docker source URI's a base tree is created. This was possible only with one container so far and Fixes #2680 as well as jira#OBS-354 - Bump version: 10.1.18 → 10.2.0 - Add selinux test build to TW Also update derived docker integration test to latest Leap - kiwi/schema: Fix allowed value type for ISO publisher and application ID According to the spec, this should be constrained to 128 characters but also allow quite a few other special characters (as well as spaces). We didn't allow spaces in application ID, but allowed too much for Publisher. Now we set up both correctly. - Fix setup of kiwi environment variables Some kiwi env vars are initialized with an empty value and not overwritten if another value is provided. For the selected variables an empty value setting is not allowed because the schema also enforces the value to be set at least once. In addition a helpful option named --print-kiwi-env was added to the 'image info' command which allows to print the environment variables and their values. - Add random key support for LUKS encryption Allow to pass luks="random". In random mode use the generated keyfile as the only key to decrypt. This is only secure if the generated initrd also gets protected e.g. through encryption like it is done with the secure linux execution on zSystems - Added development group in pyproject setup generateDS and other tools are needed and were forgotten to be added when we deleted the tox dependency - Added containers integration with OBS When building in the Open Build Service (OBS) there is no way to create outgoing connections from the build workers. To allow the <containers> section to fetch containers from the SUSE registry we need to apply an OCI URI translation into a local path. The actual OCI container image is expected to be provided by the obs backend on the worker. Along with this commit also an integration test named test-image-disk-containers is provided. This Fixes jira#OBS-351 - Fix rendering of SUSE docs The SUSE documentation is produced through a conversion of the ReST source into docbook. The name kiwi is reserved in the index and needs to be referenced as kiwi-ng when used as command. - Remove tox dependency tox was used as sort of a make target to run unit tests and more in a python virtualenv. However, since we switched everything to poetry it's no longer needed to let tox create the python virtual environments. This commit moves the tox targets into the Makefile and adapts the github workflow files accordingly. In addition the scripts container based tests were re-activated and fixed such that they succeed again. ==== python-pexpect ==== - Disable test_performance as it randomly fails ==== sdbootutil ==== Version update (1+git20241112.ecf5f97 -> 1+git20241206.dccea55) Subpackages: sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20241206.dccea55: * Fix quotes in bind mount command (bsc#1233378) * Allow multiple entries for initial measurements - Update to version 1+git20241126.83ebe2c: * Fix help for get-timeout * Add get default and timeout * Replace -a with && * Drop PATH field * sdbootutil-enroll: harden script against unexpected conditions - Update to version 1+git20241118.23c1900: * Fix missing grep file * Detect new bootctl error message * If BLI is not active use the loader.conf ==== selinux-policy ==== Version update (20241118 -> 20241206) Subpackages: selinux-policy-targeted - Update to version 20241206: * Move systemd-homed interfaces to seperate optional_policy block (bsc#1234228) * adjust kandim binary paths (bsc#1232328)