Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20231119 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: flatpak (1.15.4 -> 1.15.6) gnome-bluetooth (42.6 -> 42.7) harfbuzz (8.2.2 -> 8.3.0) ibus-table (1.17.1 -> 1.17.4) libadwaita (1.4.0 -> 1.4.0+12) libportal plasma5-openSUSE (84.87~git20230131T131056~433af24 -> 84.87~git20231117T211718~757fefa) python-rich (13.5.2 -> 13.7.0) webkit2gtk3 (2.42.1 -> 2.42.2) webkit2gtk4 (2.42.1 -> 2.42.2) === Details === ==== flatpak ==== Version update (1.15.4 -> 1.15.6) Subpackages: flatpak-remote-flathub libflatpak0 system-user-flatpak - Update to version 1.15.6: + In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.8.0 is now required. + Enabling the optional Wayland security context feature requires libwayland-client, wayland-scanner >= 1.15 and wayland-protocols >= 1.32. + Add --device=input, for access to evdev devices in /dev/input + Update bundled copy of bubblewrap to version 0.8.0, and rely on its features: + Improve error message if seccomp is disabled in kernel config + Security hardening: set user namespace limit to 0, to prevent creation of nested user namespaces in a more robust way + For subsandboxes started by flatpak-portal, inherit environment variables from the flatpak run that started the original instance rather than from flatpak-portal, fixing behaviour of FLATPAK_GL_DRIVERS and similar features + Stop http transfers if a download in progress becomes very slow + Make it easier to configure extra languages, by picking them up from AccountsService if configured there + Add new flatpak_transaction_add_rebase_and_uninstall() API, allowing end-of-life apps to be replaced by their intended replacement more reliably + Create a private Wayland socket with the "security context" extension if available, allowing the compositor to identify connections from sandboxed apps as belonging to the sandbox + Update libglnx to 2023-08-29 + Use features of newer GLib versions if available + Turn off system-level crash reporting infrastructure during some unit tests that involve intentional assertion failures + Add anchors to link to sections of flatpak-metadata documentation + Bug fixes: - Avoid warnings processing symbolic links with GLib >= 2.77.0, and with GLib 2.76.0 (GLib 2.76.1 or later silences these warnings) - Bypass page cache for backend requests in revokefs, fixing installation errors with libostree 2023.4 - Show AppStream metadata in flatpak remote-info as intended - Don't let Flatpak apps inherit VK_DRIVER_FILES or VK_ICD_FILENAMES from the host system, which would be wrong for the sandbox - Fix build failure with prereleases of libappstream 0.17.x - Forward-compatibility with libappstream 1.0 - Fix installation with Meson if configured with - Dauto_sideloading=true - Fix a memory leak - Fix compiler warnings - Make the tests fail more comprehensibly if a required tool is missing - Clean up /var/tmp/flatpak-cache-* directories on boot - Don't force GIO_USE_VFS=local for programs launched via flatpak-spawn - Clarify documentation for D-Bus name ownership + Internal changes: - Split up large source files into smaller modules, reducing internal circular dependencies - Re-synchronize code backported from GLib with the version in GLib - Clarify documentation for D-Bus name ownership - Make the flags used to apply "extra data" clearer - Use glnx_opendirat() where possible + Updated translations. - Add pkgconfig(wayland-client), pkgconfig(wayland-scanner) and pkgconfig(wayland-protocols) BuildRequires and pass with-wayland-security-context=yes to configure: Enable the optional Wayland security context. ==== gnome-bluetooth ==== Version update (42.6 -> 42.7) Subpackages: gnome-bluetooth-lang libgnome-bluetooth-3_0-13 libgnome-bluetooth-ui-3_0-13 typelib-1_0-GnomeBluetooth-3_0 - Update to version 42.7: + Fix bugs that stopped the Obex Push server from automatically accepting files from paired devices. + Fix bugs that caused the device's Connection switch to appear out of sync with the connection state. + Build fixes. + Updated translations. ==== harfbuzz ==== Version update (8.2.2 -> 8.3.0) Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0 - Update to version 8.3.0: + Improve memory barrier to fix potential segfaults + Various subsetting and instancing fixes. + Rename âhb-subsetâ option â--instanceâ to â--variationsâ to match the other tools, old option kept as an alias - -devel: fix no-library-dependency-on libharbuzz-cairo0 ==== ibus-table ==== Version update (1.17.1 -> 1.17.4) - Update version to 1.17.4 * Fix compose support for ibus >= 1.5.28 (Resolves: #145) * Translation update from Weblate (New language, Russian, (ru) 80%) ==== libadwaita ==== Version update (1.4.0 -> 1.4.0+12) Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1 - Update to version 1.4.0+12: + docs: Use `<property>` instead of `<child> for `AdwNavigationSplitView` + navigation-view: Add missing space to warning message + tab-view: Fix typo causing crash on AdwTabPages dispose + combo-row: Make the selected indicator a presentational element + tab-view: pages model can outlive it's view + tab-view: keep view alive during ::page-detached + about-window: Fix build with newer libappstream (boo#1217047) + combo-row: Preserve focus when opening the popover + Revert "Add some default options to the GTK subproject" + Updated translations. ==== libportal ==== Subpackages: libportal-gtk3-1 libportal-gtk4-1 - Rename package name from libportal-1 to libportal1, this is necessary to conform to the shared library policy: https://en.opensuse.org/openSUSE:Shared_library_packaging_policy#Package_nam... ==== plasma5-openSUSE ==== Version update (84.87~git20230131T131056~433af24 -> 84.87~git20231117T211718~757fefa) Subpackages: plasma5-defaults-openSUSE plasma5-theme-openSUSE plasma5-workspace-branding-openSUSE sddm-theme-openSUSE - Update to version 84.87~git20231117T211718~757fefa: * Fix active titlebar color with OpenSUSEdark(alternate) color schemes ==== python-rich ==== Version update (13.5.2 -> 13.7.0) - update to version 13.7.0: * Added + Adds missing parameters to Panel.fit #3142 + Fixed + Some text goes missing during wrapping when it contains double width characters #3176 + Ensure font is correctly inherited in exported HTML #3104 + Fixed typing for FloatPrompt. - additional changes from 13.6.0: * Added Python 3.12 to classifiers. - additional changes from 13.5.3: * Fixed + Markdown table rendering issue with inline styles and links [#3115] + Fix Markdown code blocks on a light background #3123 ==== webkit2gtk3 ==== Version update (2.42.1 -> 2.42.2) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.42.2 (boo#1217210): + Bump Safari version in user agent header. + Fix CSP regression that broke Unity WebGL applications. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-41983, CVE-2023-42852. ==== webkit2gtk4 ==== Version update (2.42.1 -> 2.42.2) Subpackages: WebKitGTK-6.0-lang libjavascriptcoregtk6_0-1 libwebkitgtk6_0-4 webkitgtk-6_0-injected-bundles - Update to version 2.42.2 (boo#1217210): + Bump Safari version in user agent header. + Fix CSP regression that broke Unity WebGL applications. + Fix the build with GBM disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2023-41983, CVE-2023-42852.