Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=1&version=Tumbleweed&build=20221208 https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&component=MicroOS&query_format=advanced&resolution=--- Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: 7zip ImageMagick (7.1.0.52 -> 7.1.0.53) SVT-AV1 (1.3.0 -> 1.4.0) avahi avahi-glib2 bolt (0.9.3 -> 0.9.4) btrfsprogs (6.0 -> 6.0.2) containerd (1.6.6 -> 1.6.9) cyrus-sasl docker (20.10.17_ce -> 20.10.21_ce) evolution-data-server (3.46.1 -> 3.46.2) exempi (2.6.1 -> 2.6.2) firewalld (1.2.1 -> 1.2.2) fuse-overlayfs (1.7.1 -> 1.10) gnome-terminal (3.46.4 -> 3.46.7) google-opensans-fonts (20180610 -> 20210927) grub2 gtk3 (3.24.35 -> 3.24.35+10) hwdata (0.364 -> 0.365) ibus-libpinyin (1.13.0 -> 1.13.1) ibus-libzhuyin (1.10.0 -> 1.10.1) libICE (1.0.10 -> 1.1.0) libXScrnSaver (1.2.3 -> 1.2.4) libXcomposite (0.4.5 -> 0.4.6) libXv (1.0.11 -> 1.0.12) libXxf86dga (1.1.5 -> 1.1.6) libbluray (1.3.3 -> 1.3.4) libcontainers-common libeconf (0.4.9 -> 0.5.0) libexttextcat (3.4.5 -> 3.4.6) libglvnd (1.5.0 -> 1.6.0) libmfx (22.6.1 -> 22.6.4) libqt5-qtbase libstorage-ng (4.5.54 -> 4.5.56) libwps (0.4.12 -> 0.4.13) libyui (4.4.6 -> 4.4.7) libyui-ncurses (4.4.6 -> 4.4.7) libyui-ncurses-pkg (4.4.6 -> 4.4.7) libyui-qt (4.4.6 -> 4.4.7) libyui-qt-graph (4.4.6 -> 4.4.7) libyui-qt-pkg (4.4.6 -> 4.4.7) llvm15 (15.0.5 -> 15.0.6) mariadb-connector-c (3.3.2 -> 3.3.3) mdadm ncurses (6.3.20221105 -> 6.3.20221126) nss-mdns (0.14.1 -> 0.15.1) openSUSE-build-key podman (4.2.1 -> 4.3.1) protobuf (21.9 -> 21.10) python-Jinja2 python-cffi python-iniconfig python-pycryptodome (3.15.0 -> 3.16.0) python-pymongo (4.3.2 -> 4.3.3) python-simplejson (3.17.6 -> 3.18.0) python-zope.interface (5.5.1 -> 5.5.2) ruby3.1 systemd-presets-branding-openSUSE systemd-presets-common-SUSE texinfo (7.0 -> 7.0.1) timezone (2022f -> 2022g) timezone-java (2022f -> 2022g) tracker (3.4.1 -> 3.4.2) tracker-miners (3.4.1 -> 3.4.2) udisks2 vte (0.70.1 -> 0.70.2) wayland-utils (1.0.0 -> 1.1.0) wireless-regdb (20221012 -> 20221205) xdg-desktop-portal-gtk (1.14.0 -> 1.14.1) xdm (1.1.13 -> 1.1.14) xinit (1.4.1 -> 1.4.2) xmlsec1 (1.2.36 -> 1.2.37) xprop (1.2.5 -> 1.2.6) xrandr (1.5.1 -> 1.5.2) xset (1.2.4 -> 1.2.5) xterm (376 -> 377) yast2-installation (4.5.10 -> 4.5.11) yast2-kdump (4.5.5 -> 4.5.6) yast2-storage-ng (4.5.14 -> 4.5.15) yast2-trans (84.87.20221114.6ac294712f -> 84.87.20221203.a7355e12ff) === Details === ==== 7zip ==== - Enable ASM to increase performance in compression and decompression bsc#1202197 ==== ImageMagick ==== Version update (7.1.0.52 -> 7.1.0.53) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.0.53 upstream changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md ==== SVT-AV1 ==== Version update (1.3.0 -> 1.4.0) - update to 1.4.0: * Adopted the 6L / 32-picture mini-GOP configuraion as default and adjusted MD feature levels accordingly yielding higher compression efficiency gains * Update the TPL model to account for the larger mini-gop size * Re-tune presets M0-M12 using the gained coding efficiency for improved quality vs cycles tradeoffs * Allow duplicate commandline parameters to be parsed and take into consideration the latter to allow AWCY integration * Build, Cleanup and Documentation * Make include and lib paths friendly to abs and rel paths * Update preset and API documentation * Various functional bug fixes * Remove manual prediction structure support ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-common3 libavahi-core7 - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_avahi-daemon.service.patch * harden_avahi-dnsconfd.service.patch ==== avahi-glib2 ==== - Added hardening to systemd service(s) (bsc#1181400). Added patch(es): * harden_avahi-daemon.service.patch * harden_avahi-dnsconfd.service.patch ==== bolt ==== Version update (0.9.3 -> 0.9.4) - update to 0.9.4: * spec file added and a few metadata fixes, no code change ==== btrfsprogs ==== Version update (6.0 -> 6.0.2) Subpackages: btrfsprogs-udev-rules libbtrfs0 - update to 6.0.2: * fix resize cancel not working in some cases * fix fileattr stream command format and add workaround when it cannot be applied * properly handle degraded raid56 reads * fi defrag: fix verbosity, don't print file names by default * receive: fix silent data loss after fall back from encoded write * fi mkswapfile: new command to create a formatted swapfile in one go - includes changes from 6.0.1: * send: minor speed up for v2 due to increased buffer size * resize: invalid command line options fail with error code * quota rescan: * add long options --status and --wait * new option to wait but don't start rescan * qgroup show: print path by default, updated format * qgroup: new subcommand clear-stale, remove qgroups without their subvolumes * experimental: * add warnings to commands that have it enabled (mkfs, image, btrfstune) * other: * documentation, help text, error message updates ==== containerd ==== Version update (1.6.6 -> 1.6.9) - Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.6.9 ==== cyrus-sasl ==== Subpackages: cyrus-sasl-gssapi libsasl2-3 - Do not set directories inside doc/ mode 644; otherwise the directories are set 644 as well, which means no files inside are accessible. This resulted in the past in doc/ actually not being added to the devel package. ==== docker ==== Version update (20.10.17_ce -> 20.10.21_ce) Subpackages: docker-bash-completion - Update to Docker 20.10.21-ce. See upstream changelog online at https://docs.docker.com/engine/release-notes/#201021. bsc#1206065 - Rebase patches: * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch - The PRIVATE-REGISTRY patch will now output a warning if it is being used (in preparation for removing the feature). This feature was never meant to be used by users directly (and is only available in the -kubic/CaaSP version of the package anyway) and thus should not affect any users. ==== evolution-data-server ==== Version update (3.46.1 -> 3.46.2) Subpackages: evolution-data-server-lang libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-2 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.46.2: + e-xml-utils: Enable parse of huge XML files. I Fix possible NULL-dereference in e_cal_backend_file_modify_objects(). I ECalComponentAttendee: Default CUTYPE is INDIVIDUAL. I IMAP: Excessive memory usage on folder summary download. I Trust Prompt: Add issuer's certificate fingerprint. I Fails to add task with X-EVOLUTION-GTASKS-POSITION into Google Task list. ==== exempi ==== Version update (2.6.1 -> 2.6.2) - update to 2.6.2: - Update XMPCore to Adobe XMP SDK v2022.06 - Build system fixes that don't matter. - Fix a typo in an ID3 genre string - Build XMP_SDK with some fatal warnings: - -Werror=missing-field-initializers - -Werror=misleading-indentation - -Werror=class-memaccess - Remove (deprecated) boost_test_minimal - Remove old .sym file (Daniel Kolesa) - Added --enable-samples (default = yes) (Fabrice Fontaine) ==== firewalld ==== Version update (1.2.1 -> 1.2.2) Subpackages: firewalld-bash-completion firewalld-lang python3-firewall - update to 1.2.2: * fix(client): raise exception (40a473b) * fix(nftables): raise exception (a4b82cc) * fix(nftables): invalid conditional statement (e9ca0ad) * fix(check_config): use on disk firewalld_conf (d141d6d) * fix(service): llmnr: improve description (d233698) * Revert "feat(service): Add jellyfin service" (ea154d5) ==== fuse-overlayfs ==== Version update (1.7.1 -> 1.10) - update to 1.10: * main: use /proc/self/fd to read xattrs. * main: inherit ACLs for new files/dirs. * main: fix passing noatime. * main: add checks for valid /proc mount. * main: fix copy_file_range for deleted files. * main: fix creating links of just deleted files. * main: fix setting attributes on file without permissions. * main: ignore EOVERFLOW when copying xattrs. * main: set the correct value for RENAME_NOREPLACE when it is not already defined in the system headers. * main: create source whiteout only when needed * main: fix missing source whiteout when destination is whiteout * main: fix lookup if underlying path is a symlink, but a directory on a upper directory. * main: fix race when looking up an inode that was renamed. * main: fix type used for ioctl. * main: honor user.overlay. xattrs. Native overlay uses user.overlay to store the overlay metadata instead of trusted.overlay. * main: add a mount flag to disable ACLs. ==== gnome-terminal ==== Version update (3.46.4 -> 3.46.7) Subpackages: gnome-shell-search-provider-gnome-terminal gnome-terminal-lang nautilus-extension-terminal - Update to version 3.46.7: * nautilus: Fix macro redefinition warning * screen: Add some missing casts * build: Add define for openbsd * Updated translations. - Update to version 3.46.6: * prefs: Sink a floating variant * prefs: Use default timeout when debugging * prefs: Reduce default bus timeout * prefs: Fix serialisation format * client: Improve env var filters - Update to version 3.46.5: * util: Fix interpretation of TryExec desktop entry key - Drop f06e6e5.patch: fixed upstream. ==== google-opensans-fonts ==== Version update (20180610 -> 20210927) - update to 20210927 from GitHub * Add gasp tables * Add VTT hinting * Cvt editing * Hinting Updates - Clarify license to be OFL 1.1 ==== grub2 ==== Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi - Add tpm to signed grub.elf image (PED-1990) (bsc#1205912) - Increase initial heap size from 1/4 to 1/3 * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch ==== gtk3 ==== Version update (3.24.35 -> 3.24.35+10) Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-immodule-xim gtk3-lang gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Update to version 3.24.35+10: + Flush drawable surface when getting a pixbuf. + wayland: Look for cursor themes in $HOME (boo#1206001). ==== hwdata ==== Version update (0.364 -> 0.365) - update to 0.365: + Updated pci, usb and vendor ids. ==== ibus-libpinyin ==== Version update (1.13.0 -> 1.13.1) - update to 1.13.1: * fix setup dialog ==== ibus-libzhuyin ==== Version update (1.10.0 -> 1.10.1) - update to 1.10.1: * fix setup dialog ==== libICE ==== Version update (1.0.10 -> 1.1.0) - U_ICEmsg-Fix-C-interoperability-error-due-to-static_as.patch * needed by plasma5-workspace - Update to version 1.1.0 * Fix spelling/wording issues * gitlab CI: add a basic build test * configure: check for libbsd before libxtrans checks for strlcpy * ConnectToPeer: be doubly sure that use-after-free doesn't happen * ProcessAuthReply: rename status variable to avoid shadowing * Only link to libbsd for arc4random_buf if it is not found in libc * IceGetHeaderExtra: only include extra space in outbufptr if there's room * Refactor Fatal I/O error handling into a common function * IceFlush: signal fatal I/O error if bufptr is past end of buffer * ICEmsg.h: Add static asserts that message header length <= ICE_OUTBUFSIZE * Handle arrays too large to fit in iceConn buffers * Only link with libbsd if needed for arc4random_buf() or getentropy() * Avoid -Wdeclaration-after-statement warnings from static_assert * ice.pc.in: "Libs.Private" should be "Libs.private" * configure: Use AC_SYS_LARGEFILE to enable large file support ==== libXScrnSaver ==== Version update (1.2.3 -> 1.2.4) - Update to version 1.2.3: * Update README for gitlab migration * Update configure.ac bug URL for gitlab migration * Fix spelling/wording issues * gitlab CI: add a basic build test * Whitespace fixes * Add .git-blame-ignore-revs to hide whitespace commits from git blame * Handle implicit conversion warnings from clang ==== libXcomposite ==== Version update (0.4.5 -> 0.4.6) - Update to version 0.4.6 * Fix spelling/wording issues * gitlab CI: add a basic build test * Mark two dpy parameters const as suggested by cppcheck * Remove unnecessary casts from malloc() and free() calls * Wrap XComposite*CheckExtension() in do { ... } while(0) * Handle implicit conversion warnings from clang * XCompositeCloseDisplay: Mark codes as unused ==== libXv ==== Version update (1.0.11 -> 1.0.12) - Update to version 1.0.12: * Update README for gitlab migration * Update configure.ac bug URL for gitlab migration * Build xz tarballs instead of bzip2 * Fix spelling/wording issues * gitlab CI: add a basic build test * XvGetReq: remove trailing semicolon that caller is expected to provide * Variable scope reductions * Handle implicit conversion warnings from clang ==== libXxf86dga ==== Version update (1.1.5 -> 1.1.6) - Update to version 1.1.6 * Fix spelling/wording issues * gitlab CI: add a basic build test * unifdef __UNIXOS2__ * Remove SunOS 4 support (defined(sun) && (SVR4)) * unifdef ISC * unifdef Lynx * unifdef DGUX ==== libbluray ==== Version update (1.3.3 -> 1.3.4) - update to 1.3.4: * Improve API documentation. * Improve JVM probing. * Improve support for FreeBSD and Solaris. * Improve .jar file search. * Add configure option to build without external libudfread. ==== libcontainers-common ==== - Remove registry.suse.com from search unqualified-search-registries: registry.suse.com responds very slowly to pagination repository listings (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes every `podman search` to take over 90s. We have to remove it until this regression is fixed. ==== libeconf ==== Version update (0.4.9 -> 0.5.0) - Update to version 0.5.0: * API calls econf_read*WithCallback supporting a general (void *) argument for user defined data with which the callback function is called. * Tagged following functions deprecated: econf_requireOwner, econf_requireGroup, econf_requirePermissions, econf_followSymlinks, econf_reset_security_settings Use one of the econf_read*WithCallback functions instead. ==== libexttextcat ==== Version update (3.4.5 -> 3.4.6) Subpackages: libexttextcat-2_0-0 - update to 3.4.6: * Add Venetian, Comorian, Maore, Sundanese, Quechua, South Bolivian, Papiamentu, Nganasan, Minangkabau, Ladin, Ligurian, Komi, Kabardian, Fon Finnish, Kven, Dzongkha, Chuvash, Bushi ==== libglvnd ==== Version update (1.5.0 -> 1.6.0) - update to 1.6.0: * Read gl.symbols when generating stubs for libGL.so * Update GL headers and XML files * Add support for loongarch64 * GLX: Fix assembly stubs for x32 * Fix pthreads lookup on FreeBSD ==== libmfx ==== Version update (22.6.1 -> 22.6.4) - update to 22.6.4: * Fix VC1 Decode assertion failure when frame type is NONE_PICTURE ==== libqt5-qtbase ==== Subpackages: libQt5Concurrent5 libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5OpenGL5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5 libqt5-qtbase-platformtheme-gtk3 - Add patch to fix text rendering on 16bit X11 surfaces (boo#1205585): * 0001-Fix-wrong-to-linear-conversion.patch ==== libstorage-ng ==== Version update (4.5.54 -> 4.5.56) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#907 - handle changed output from 'btrfs qgroup show' (bsc#1206090) - 4.5.56 - merge gh#openSUSE/libstorage-ng#906 - use RAII - 4.5.55 ==== libwps ==== Version update (0.4.12 -> 0.4.13) - update to 0.4.13: * Quattro Dos: try to retrieve correctly the spreadsheet's name when creating some charts, Quattro: try to avoid potential spreadsheet names clashes + * Quattro[dos,wq2]: try to retrieve sheet's name + check that the sheet id in formula is not greater than 255, PocketWord: change some comments... ==== libyui ==== Version update (4.4.6 -> 4.4.7) - YQPkg: Scroll patterns list by pixels, not by item to avoid problems caused by non-uniform item heights (bsc#1189550) - 4.4.7 ==== libyui-ncurses ==== Version update (4.4.6 -> 4.4.7) - YQPkg: Scroll patterns list by pixels, not by item to avoid problems caused by non-uniform item heights (bsc#1189550) - 4.4.7 ==== libyui-ncurses-pkg ==== Version update (4.4.6 -> 4.4.7) - YQPkg: Scroll patterns list by pixels, not by item to avoid problems caused by non-uniform item heights (bsc#1189550) - 4.4.7 ==== libyui-qt ==== Version update (4.4.6 -> 4.4.7) - YQPkg: Scroll patterns list by pixels, not by item to avoid problems caused by non-uniform item heights (bsc#1189550) - 4.4.7 ==== libyui-qt-graph ==== Version update (4.4.6 -> 4.4.7) - YQPkg: Scroll patterns list by pixels, not by item to avoid problems caused by non-uniform item heights (bsc#1189550) - 4.4.7 ==== libyui-qt-pkg ==== Version update (4.4.6 -> 4.4.7) - YQPkg: Scroll patterns list by pixels, not by item to avoid problems caused by non-uniform item heights (bsc#1189550) - 4.4.7 ==== llvm15 ==== Version update (15.0.5 -> 15.0.6) - Update to version 15.0.6. * This release contains bug-fixes for the LLVM 15.0.0 release. This release is API and ABI compatible with 15.0.0. - Rebase llvm-do-not-install-static-libraries.patch. ==== mariadb-connector-c ==== Version update (3.3.2 -> 3.3.3) - Update to release 3.3.3: https://mariadb.com/kb/en/mariadb-connector-c-333-release-notes/ https://mariadb.com/kb/en/mariadb-connector-c-333-changelog/ ==== mdadm ==== - Drop the patch which is reported as regression by upstream developer (bsc#1206139) 0045-Manage-Block-unsafe-member-failing.patch - Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they are both the requirement to update mdadm to latest upstream state via different requestors. ==== ncurses ==== Version update (6.3.20221105 -> 6.3.20221126) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20221126 + fix an error in pathname of explain.txt (cf: 20200201). + fix an error in "@" command in test/ncurses.c F-menu (cf: 20190121). + improve formatting of ncurses-intro.html and hackguide.html + improve man/curs_clear.3x links to other pages - Add ncurses patch 20221119 + use static libraries for AdaCurses test-package for Mageia, since no gprbuild package is available. + updated test packages for Debian. - Add ncurses patch 20221112 + build-fixes for AdaCurses RPM test-package. ==== nss-mdns ==== Version update (0.14.1 -> 0.15.1) - Update to version 0.15.1: + Updated README.md for clarity + The return of BSD support! + Support for `AVAHI_SOCKET` in `/run` (instead of legacy `/var/run`). ==== openSUSE-build-key ==== - Package OBS project key if available. Useful when forking openSUSE-build-key for use in appliances. ==== podman ==== Version update (4.2.1 -> 4.3.1) Subpackages: podman-cni-config - switch to building with go 1.17 - use %%make_* macros - drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE & Leap - remove rpmlintrc (contained only obsolete filters) - remove obsolete with_libostree (we don't build on anything older than SLE 15) - add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch (hotfix for https://github.com/containers/podman/issues/16765) - Update to version 4.3.1: 4.3.1: [#]## Bugfixes - Fixed a deadlock between the `podman ps` and `podman container inspect` commands [#]## Misc - Updated the containers/image library to v5.23.1 4.3.0: [#]## Features - A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers. - A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)). - A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command). - The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend. - Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers). - Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers). - The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)). - The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)). - The `podman kube play` command now supports the `HostUsers` field in the pod spec. - The `podman play kube` command now supports `binaryData` in ConfigMaps. - The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options. - The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)). - The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out. - Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images. - The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)). - The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container). - The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)). - The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)). - The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options. - The `podman restart` command now supports the `--cidfile` and `--filter` options. - The `podman rm` command now supports the `--filter` option to select which containers will be removed. - The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images. - The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility. - The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility. - The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)). - The `podman manifest create` command now accepts a new option, `--amend`/`-a`. - The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility. - The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`. - The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets. - The `podman secret ls` command now accepts the `--quiet`/`-q` option. - The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format. - The `podman stats` command now accepts the `--no-trunc` option. - The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)). - The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)). - A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility. - The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)). [#]## Changes - Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)). - The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function. - A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success. - When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored. - The installer for the Windows Podman client has been improved. - The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)). - Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)). - Events for containers that are part of a pod now include the ID of the pod in the event. - SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication. - The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this. - The `podman inspect` command on containers now includes the digest of the image used to create the container. - Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled. [#]## Bugfixes - Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)). - Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)). - Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)). - Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)). - Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)). - Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)). - Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes. - Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress. - Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)). - Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use. - Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)). - Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)). - Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot. - Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)). - Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)). - Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)). - Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)). - Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)). - Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)). - Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option. - Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)). - Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted. - Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)). - Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)). - Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)). - Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)). - Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command. - Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status. - Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)). - Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)). - Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed. - Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic. - Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)). [#]## API ... changelog too long, skipping 15 lines ... - Updated the containers/common library to v0.50.1 ==== protobuf ==== Version update (21.9 -> 21.10) - update to 21.10: * Java * Use bit-field int values in buildPartial to skip work on unset groups of fields. (#10960) * Mark nested builder as clean after clear is called (#10984) ==== python-Jinja2 ==== - ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is deprecated and will be removed in a future release.' error from pytest 7.2 ==== python-cffi ==== - Add python-py as test dependency ==== python-iniconfig ==== - Add python-py as test dependency ==== python-pycryptodome ==== Version update (3.15.0 -> 3.16.0) - Update to version 3.16.0 * New features Build wheels for musl Linux. Thanks to Ben Raz. * Resolved issues GH#639: ARC4 now also works with 'keys' as short as 8 bits. GH#669: fix segfaults when running in a manylinux2010 i686 image. ==== python-pymongo ==== Version update (4.3.2 -> 4.3.3) - Update to 4.3.3 Version 4.3.3 documents support for the following: * CSFLE on-demand credentials for cloud KMS providers. * Authentication support for EKS Clusters. * Added the Client Side Operation Timeout example page to improve the documentation for pymongo.timeout(). Bug Fixes * Fixed a performance regression in download_to_stream() and download_to_stream_by_name() by reading in chunks instead of line by line (PYTHON-3502). * Improved performance of gridfs.grid_file.GridOut.read() and gridfs.grid_file.GridOut.readline() (PYTHON-3508). ==== python-simplejson ==== Version update (3.17.6 -> 3.18.0) - Update to v3.18.0 * Allow serialization of classes that implement for_json or _asdict by ignoring TypeError when those methods are called https://github.com/simplejson/simplejson/pull/302 * Raise JSONDecodeError instead of ValueError in invalid unicode escape sequence edge case https://github.com/simplejson/simplejson/pull/298 ==== python-zope.interface ==== Version update (5.5.1 -> 5.5.2) - Update to version 5.5.2 * Add support for building arm64 wheels on macOS. ==== ruby3.1 ==== Subpackages: libruby3_1-3_1 - Add ruby-3.1.3-remove-timezone-test.patch to disable timezone tests broken by 2022g update - Update rb_arch_short macro ==== systemd-presets-branding-openSUSE ==== - enable autostart of drkonqi (bsc#1203493). ==== systemd-presets-common-SUSE ==== - enable user side autostart of drkonqi socket (bsc#1203493). ==== texinfo ==== Version update (7.0 -> 7.0.1) Subpackages: info info-lang info-std - texinfo 7.0.1: * texi2any: avoid multiple crashes on empty @image argument and other conditions * avoid hang on @ref command inside section command * info: fix recoding of UTF-8 files to ASCII when run in C locale * js: index search fixed for new HTML output ==== timezone ==== Version update (2022f -> 2022g) - timezone update 2022g: * In the Mexican state of Chihuahua, the border strip near the US will change to agree with nearby US locations on 2022-11-30. The strip's western part, represented by Ciudad Juárez, switches from -06 all year to -07/-06 with US DST rules, like El Paso, TX. The eastern part, represented by Ojinaga, will observe US DST next year, like Presidio, TX. A new Zone America/Ciudad_Juarez splits from America/Ojinaga. * Much of Greenland, represented by America/Nuuk, stops observing winter time after March 2023, so its daylight saving time becomes standard time. * Changes for pre-1996 northern Canada * Update to past DST transition in Colombia (1993), Singapore (1981) * timegm is now supported by default ==== timezone-java ==== Version update (2022f -> 2022g) - timezone update 2022g: * In the Mexican state of Chihuahua, the border strip near the US will change to agree with nearby US locations on 2022-11-30. The strip's western part, represented by Ciudad Juárez, switches from -06 all year to -07/-06 with US DST rules, like El Paso, TX. The eastern part, represented by Ojinaga, will observe US DST next year, like Presidio, TX. A new Zone America/Ciudad_Juarez splits from America/Ojinaga. * Much of Greenland, represented by America/Nuuk, stops observing winter time after March 2023, so its daylight saving time becomes standard time. * Changes for pre-1996 northern Canada * Update to past DST transition in Colombia (1993), Singapore (1981) * timegm is now supported by default ==== tracker ==== Version update (3.4.1 -> 3.4.2) Subpackages: libtracker-sparql-3_0-0 tracker-data-files - Update to version 3.4.2: + Warn if IRIs are not absolute. This will turn into a query error in future releases. + Handle slight type affinity changes in SQLite 3.40.0 in some operations that broke Tracker expectations. + Close file descriptors asynchronously in TrackerEndpointDBus. + Updated translations. ==== tracker-miners ==== Version update (3.4.1 -> 3.4.2) Subpackages: tracker-miner-files tracker-miners-lang - Update to version 3.4.2: + Fix advised flatpak command in sandboxing documentation. + Fix intermittent build break. + Updated translations. ==== udisks2 ==== Subpackages: libudisks2-0 libudisks2-0_btrfs udisks2-lang - avoid wakening spun-down disks on unrelated events (bsc#1120608) * add: 0001-udisksata-Move-the-low-level-PM-state-call.patch 0001-udiskslinuxfilesystem-Make-the-size-property-retriev.patch 0001-udiskslinuxprovider-Only-update-related-objects-on-u.patch ==== vte ==== Version update (0.70.1 -> 0.70.2) Subpackages: libvte-2_91-0 vte-lang - Update to version 0.70.2: * widget: Modernise HTML output. * missing: Add better fdwalk implementation for darawin. * build: Print warning on unstable release. * build: Add define for openbsd. * Updated translations. ==== wayland-utils ==== Version update (1.0.0 -> 1.1.0) - update to 1.1.0: * Support for linux_dmabuf version 4 (version 3 still supported) * A human readable description to the dmabuf format modifier tokens using libdrm (optional), * The list of SHM supported formats is now more consistent with the list of dmabuf formats, * Support for wl_output version 4, * A couple of compilation issues on the BSD systems are addressed. ==== wireless-regdb ==== Version update (20221012 -> 20221205) - Update to version 20221205: * wireless-regdb: Update regulatory rules for Japan (JP) on 6GHz * wireless-regdb: Update regulatory rules for Japan (JP) on 5GHz ==== xdg-desktop-portal-gtk ==== Version update (1.14.0 -> 1.14.1) Subpackages: xdg-desktop-portal-gtk-lang - Update to version 1.14.1: + printing, - wallpaper: Fix some memory leaks. - Consistently include .desktop in the fallback app name. + screencast: Fall back to desktop ID if we don't know the app name. + appchooser: Fix a use-after-free. + wallpaper: Handle errors storing images in the cache. + email: Fix a crash if no addresses are provided. + notification: Fix notifications for apps with no ID not appearing. + screenshot: Report whether PickColor is implemented, if possible. ==== xdm ==== Version update (1.1.13 -> 1.1.14) - Update to release 1.1.14 * This release improves compatibility for building with GNU libc 2.36, and adds a --without-xinerama option to the configure script for those who want to build without linking to libXinerama. - supersedes u_glibc-2.36.patch ==== xinit ==== Version update (1.4.1 -> 1.4.2) - Update to version 1.4.2 * Fix spelling/wording issues * gitlab CI: add a basic build test * gitlab CI: stop requiring Signed-off-by in commits * man page: Update remote display example from rsh to ssh * Remove non-portable grep usage from startx * Don't wait for X to finish starting if it has died * stop unsetting DBUS_SESSION_BUS_ADDRESS variable * darwin: Drop support for macOS 10.7 and earlier * darwin: Ensure we launch the user startx from $HOME * darwin: Specify +extension GLX when the user requests IGLX support * darwin: Wait for font_cache to complete to avoid a race with `xset fb=` * man: Restore non-SCO UNIX bits of the man page * startx: use uname -n instead of hostname * startx: Source XINITRC and XSERVERRC variables * startx: don't attempt to catch SIGKILL - supersedes xinit-nolonger-unset-dbus-session.patch - refreshed xinit-suse.patch ==== xmlsec1 ==== Version update (1.2.36 -> 1.2.37) Subpackages: libxmlsec1-1 libxmlsec1-nss1 libxmlsec1-openssl1 - update to 1.2.37: Fixed two regressions from 1.2.36 release ==== xprop ==== Version update (1.2.5 -> 1.2.6) - Update to version 1.2.6 * Fix spelling/wording issues * gitlab CI: add a basic build test * gitlab CI: stop requiring Signed-off-by in commits * Mark help(), usage(), and grammar() with _X_NORETURN _X_COLD * Declare help() and print_help() as static * Rename "dpy" function arguments to "display" to avoid shadowing global * Resolve many gcc -Wsign-compare warnings * Variable scope reductions as suggested by cppcheck ==== xrandr ==== Version update (1.5.1 -> 1.5.2) - Update to version 1.5.2 * gitlab CI: add a basic build test * Fix spelling/wording issues * gitlab CI: stop requiring Signed-off-by in commits * Variable scope reductions as suggested by cppcheck * Fix a -Wsign-compare warning * Remove unused macros left over from original RandR 1.2 code * Remove unused definition of rectangle_t * Constify array argument to find_last_non_clamped() - refreshed xrandr-print-outputs-per-provider.patch ==== xset ==== Version update (1.2.4 -> 1.2.5) - Update to version 1.2.5 * Update README for gitlab migration * Update configure.ac bug URL for gitlab migration * Use the real name of the DPMS extension in messages & man page * gitlab CI: add a basic build test * Fix spelling/wording issues * gitlab CI: stop requiring Signed-off-by in commits * Variable scope reduction as recommended by cppcheck * Remove unnecessary casts * Remove unnecessary check for NULL pointer before calling free() * set_pixels: Mark pixels parameter as const * Use C99 designated struct initializers * configure: Make xf86misc support disabled by default ==== xterm ==== Version update (376 -> 377) Subpackages: xterm-bin xterm-resize - update to 377: * add control sequences for reporting the current state of the modified keys options (XTQMODKEYS) and allowed/disallowed operations (XTQALLOWED), (prompted by discussion with Bram Moolenaar). * amend modifyOtherKeys case 2 to distinguish the escape character with modifiers, e.g., shift-escape, from a plain escape character (suggested by Bram Moolenaar). * improve parsing and error-recovery in the case where a list of X11 bitmap fonts is given in the -fn and related options. * change default for xftTrackMemUsage to false, because libXft has does not handle certain fonts. ==== yast2-installation ==== Version update (4.5.10 -> 4.5.11) - Use default depth for Xvnc, no longer enforce depth 16 (bsc#1205585) - 4.5.11 ==== yast2-kdump ==== Version update (4.5.5 -> 4.5.6) - Changed default of KDUMP_AUTO_RESIZE to "no" as documented in https://github.com/openSUSE/kdump/blob/SLE-15-SP5/sysconfig.kdump.in#L57-L65 (bsc#1205816) - 4.5.6 ==== yast2-storage-ng ==== Version update (4.5.14 -> 4.5.15) - Allow reusing LVM volume groups - 4.5.15 - Proposal: new setting to prevent reusing LVM volume groups (related to gh#yast/d-installer#264). ==== yast2-trans ==== Version update (84.87.20221114.6ac294712f -> 84.87.20221203.a7355e12ff) Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW - Update to version 84.87.20221203.a7355e12ff: * Translated using Weblate (Macedonian) * Translated using Weblate (Spanish) * Translated using Weblate (Bulgarian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * New POT for text domain 'autoinst'. * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * New POT for text domain 'pam'. * New POT for text domain 'control'. * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * New POT for text domain 'country'. * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * New POT for text domain 'storage'. * New POT for text domain 'online-update'. * New POT for text domain 'ntp-client'. * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Czech) * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * Translated using Weblate (Catalan) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Czech) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Slovak) * Translated using Weblate (Portuguese (Brazil)) * Translated using Weblate (Dutch) * Translated using Weblate (Czech) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Japanese) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * New POT for text domain 'storage'. * New POT for text domain 'installation'. * New POT for text domain 'autoinst'. * Translated using Weblate (Slovak) * Translated using Weblate (Slovak) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Dutch) * Translated using Weblate (Catalan) * Translated using Weblate (Japanese) * Translated using Weblate (Japanese) * Translated using Weblate (Macedonian) * New POT for text domain 'update'. * New POT for text domain 'security'. * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Macedonian) * Translated using Weblate (Czech)