Please note that this mail was generated by a script. The described changes are computed based on the aarch64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=microos&groupid=3&version=... https://bugzilla.opensuse.org/buglist.cgi?product=openSUSE%20Tumbleweed&comp... Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: Mesa (24.2.6 -> 24.3.0) Mesa-drivers (24.2.6 -> 24.3.0) MicroOS-release (20241114 -> 20241124) alsa containerd curl docker evolution-data-server (3.54.1 -> 3.54.2) gnome-initial-setup (47.1 -> 47.2) gnome-settings-daemon (47.1 -> 47.2) gnome-user-docs (47.0 -> 47.2) gnutls (3.8.7 -> 3.8.8) gpgme (1.23.2 -> 1.24.0) gtk4 (4.16.5 -> 4.16.6) iptables (1.8.10 -> 1.8.11) kdump (2.0.10+git0.g62142dd -> 2.0.11) kernel-firmware (20241018 -> 20241113) kernel-source (6.11.7 -> 6.11.8) kf6-bluez-qt libXt (1.3.0 -> 1.3.1) libbpf (1.4.6 -> 1.5.0) libimobiledevice libinput (1.26.2 -> 1.27.0) libmtp (1.1.21 -> 1.1.22) librepo (1.18.1 -> 1.19.0) libsoup libsoup2 libxml2 libzypp (17.35.13 -> 17.35.14) llvm19 (19.1.3 -> 19.1.4) localsearch (3.8.0 -> 3.8.1) microos-tools (4.0+git2 -> 4.0+git6) mozjs128 multipath-tools (0.10.0+108+suse.2c2e597 -> 0.11.0~1+118+suse.4a51b1a) ncurses (6.5.20241102 -> 6.5.20241109) net-snmp patterns-gnome (20201210 -> 20241112) podman (5.2.5 -> 5.3.0) python-PyJWT (2.9.0 -> 2.10.0) python-alembic (1.13.3 -> 1.14.0) python-blinker (1.8.2 -> 1.9.0) python-jsonpointer (2.4 -> 3.0.0) python-psutil (6.0.0 -> 6.1.0) python311 python311-core rpm runc (1.2.1 -> 1.2.2) tcpd tiff tinysparql (3.8.0 -> 3.8.1) upower (1.90.4 -> 1.90.6) util-linux util-linux-systemd vlc webkit2gtk3 webkit2gtk4 xprop (1.2.7 -> 1.2.8) === Details === ==== Mesa ==== Version update (24.2.6 -> 24.3.0) Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - Update to release 24.3.0 - -> https://docs.mesa3d.org/relnotes/24.3.0 - Update to release 24.3.0~rc2 - -> https://www.phoronix.com/news/Mesa-24.3-rc2 - Update to release 24.3.0~rc1 - -> https://www.phoronix.com/news/Mesa-24.3-rc1-Released - refreshed patches: * n_drirc-disable-rgb10-for-chromium-on-amd.patch * python36-buildfix1.patch * python36-buildfix2.patch * tlsdesc_test.patch * u_mesa-CVE-2023-45913.patch * u_mesa-CVE-2023-45919.patch * u_mesa-CVE-2023-45922.patch * u_dep_xcb.patch - drop no longer supported options: * -Ddri3=enabled * -Ddri-search-path=%{_libdir}/dri - new files added in this update currently packaged as part of Mesa-dri: * %{_libdir}/gbm/dri_gbm.so - Update to release 24.2.7 - -> https://docs.mesa3d.org/relnotes/24.2.7 - supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch ==== Mesa-drivers ==== Version update (24.2.6 -> 24.3.0) Subpackages: Mesa-dri Mesa-gallium - Update to release 24.3.0 - -> https://docs.mesa3d.org/relnotes/24.3.0 - Update to release 24.3.0~rc2 - -> https://www.phoronix.com/news/Mesa-24.3-rc2 - Update to release 24.3.0~rc1 - -> https://www.phoronix.com/news/Mesa-24.3-rc1-Released - refreshed patches: * n_drirc-disable-rgb10-for-chromium-on-amd.patch * python36-buildfix1.patch * python36-buildfix2.patch * tlsdesc_test.patch * u_mesa-CVE-2023-45913.patch * u_mesa-CVE-2023-45919.patch * u_mesa-CVE-2023-45922.patch * u_dep_xcb.patch - drop no longer supported options: * -Ddri3=enabled * -Ddri-search-path=%{_libdir}/dri - new files added in this update currently packaged as part of Mesa-dri: * %{_libdir}/gbm/dri_gbm.so - Update to release 24.2.7 - -> https://docs.mesa3d.org/relnotes/24.2.7 - supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch ==== MicroOS-release ==== Version update (20241114 -> 20241124) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== alsa ==== - Fix incorrect versioned symbol for snd_seq_has_queue_tempo_base: 0001-src-Versions.in.in-Update-_tempo_base-name.patch ==== containerd ==== ==== curl ==== Subpackages: libcurl4 - Add patch to fix libcurl when netrc parsing is enabled. curl_easy_duphandle did not init netrc which broke applications such as for example git. gh#curl/curl#15496 * 0001-duphandle-also-init-netrc.patch ==== docker ==== Subpackages: docker-buildx docker-rootless-extras - Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from sysconfig a long time ago, and apparently this causes issues with systemd in some cases. ==== evolution-data-server ==== Version update (3.54.1 -> 3.54.2) Subpackages: libcamel-1_2-64 libebackend-1_2-11 libebook-1_2-21 libebook-contacts-1_2-4 libecal-2_0-3 libedata-book-1_2-27 libedata-cal-2_0-2 libedataserver-1_2-27 libedataserverui-1_2-4 - Update to version 3.54.2: + Bug Fixed: - libedataserverui: Avoid initializing the icon_theme when building introspection data - Fails to build/link against icu 76.1 - Correct certificate key usage constants + Updated translations. - Update to version 3.54.1+4: * libedataserverui: Avoid initializing the icon_theme when building introspection data * Updated translations. - Workaround build failure using ICU 76.1: fix up CMakeLists.txt to link icu-uc instead of icu-i18n (glgo#GNOME/evolution-data-server#574). ==== gnome-initial-setup ==== Version update (47.1 -> 47.2) - Update to version 47.2: + Previously, the timezone page would list duplicate entries for some cities, and selecting the wrong one would crash Initial Setup. In this release these problematic entries are not shown. + Previous versions would crash on startup when run with GTK 4.17, which has made it a fatal error to use certain functions before gtk_init() has been called. This crash is fixed in this release. + Updated translations. ==== gnome-settings-daemon ==== Version update (47.1 -> 47.2) - Only recommend xf86-input-libinput if xorg-x11-server is present: wayland does not rely on the xf86 drivers. - Update to version 47.2: + Power: - Fix possible invalid reads if backlight fails to initialize. - Handle broken upower more elegantly. - Test warning fixes. + Updated translations. ==== gnome-user-docs ==== Version update (47.0 -> 47.2) - Update to version 47.2: + Updated translations. ==== gnutls ==== Version update (3.8.7 -> 3.8.8) - Update to 3.8.8: - libgnutls: Experimental support for X25519MLKEM768 and SecP256r1MLKEM768 key exchange in TLS 1.3: The support for post-quantum key exchanges has been extended to cover the final standard of ML-KEM, following draft-kwiatkowski-tls-ecdhe-mlkem. The minimum supported version of liboqs is bumped to 0.11.0. - libgnutls: All records included in an OCSP response are now checked in TLS: Previously, when multiple records are provided in a single OCSP response, only the first record was considered; now all those records are examined until the server certificate matches. - libgnutls: Handling of malformed compress_certificate extension is now more standard compliant: The server behavior of receiving a malformed compress_certificate extension now more strictly follows RFC 8879; return illegal_parameter alert instead of bad_certificate, as well as overlong extension data is properly rejected. - build: More flexible library linking options for compression libraries, TPM, and liboqs support: The configure options, - -with-zstd, --with-brotli, --with-zlib, --with-tpm2, and --with-liboqs now take 4 states: yes/link/dlopen/no, to specify how the libraries are linked or loaded. * Rebase gnutls-FIPS-140-3-references.patch ==== gpgme ==== Version update (1.23.2 -> 1.24.0) Subpackages: libgpgme11 libgpgmepp6 python311-gpg - Move the gpg python bindings out of the egg directory. - Fix file list on Leap 15 - Update to 1.24.0: * Extended gpgme_op_decrypt* and gpgme_op_verify* to allow writing the output directly to a file. [T6550] * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and gpgme_op_sign* to allow reading the input data directly from a file. [T6550] * Add information about designated revocation keys. [T7118] * New context flag "import-options". [T7152] * New context flag "proc-all-sigs". [T7261] * New context flag "known-notations". [T4060] * New info flags "beta_compliance". [rM1a7bc88ee7] * New function gpgme_op_setownertrust to make changing the owner trust easier and to allow enabling/disabling of keys (requires GnuPG 2.4.6). [T7239] * New flag to re-encrypt OpenPGP data (requires GnuPG 2.5.1). [T1825] * cpp: Provide information about designated revocation keys for a Key. [T7118] * cpp: Add safer member function returning text describing an error. [T5960] * cpp: Add support for setting the owner trust of keys and for enabling and disabling keys. [T7239] * qt: Build QGpgME for Qt 5 and Qt 6 simultaneously. [T7205] * qt: Install headers for Qt 5 and Qt 6 in separate folders. [T7161] * qt: Allow reading the data to decrypt/encrypt/sign/verify directly from files. [T6550] * qt: Allow writing the decrypted/encrypted/signed/verified data directly to files. [T6550] * qt: Allow specifying import options when importing keys. [T7152] * qt: Allow appending a detached signature to an existing file. [T6867] * qt: Add support for enabling and disabling keys. [T7239] * qt: Add support for new context flag "proc-all-sigs" to the jobs that verify data signatures. * Interface changes relative to the 1.23.2 release: - GPGME_ENCRYPT_FILE NEW. - GPGME_SIG_MODE_FILE NEW. - GPGME_ENCRYPT_ADD_RECP NEW. - GPGME_ENCRYPT_CHG_RECP NEW. - gpgme_key_t EXT: New field 'revkeys'. - gpgme_revocation_key_t NEW. - gpgme_set_ctx_flag EXT: New flag 'import-options'. - gpgme_set_ctx_flag EXT: New flag 'proc-all-sigs'. - gpgme_set_ctx_flag EXT: New flag 'known-notation'. - gpgme_op_setownertrust_start NEW. - gpgme_op_setownertrust NEW. - gpgme_subkey_t EXT: New field 'beta_compliance'. - gpgme_signature_t EXT: New field 'beta_compliance'. - gpgme_decrypt_result_t EXT: New field 'beta_compliance'. - cpp: Context::EncryptFile NEW. - cpp: Context::setOwnerTrust NEW. - cpp: Context::startSetOwnerTrust NEW. - cpp: Context::setKeyEnabled NEW. - cpp: Context::startSetKeyEnabled NEW. - cpp: SignatureMode::SignFile NEW. - cpp: RevocationKey NEW. - cpp: Key::revocationKey NEW. - cpp: Key::numRevocationKeys NEW. - cpp: Key::revocationKeys NEW. - cpp: Key::isBetaCompliance NEW. - cpp: Subkey::isBetaCompliance NEW. - cpp: Error::asStdString NEW. - cpp: Error::asString DEPRECATED. - cpp: DecryptionResult::isBetaCompliance NEW. - cpp: Signature::isBetaCompliance NEW. - qt: DecryptVerifyArchiveJob::setProcessAllSignatures NEW. - qt: DecryptVerifyArchiveJob::processAllSignatures NEW. - qt: DecryptVerifyJob::setInputFile NEW. - qt: DecryptVerifyJob::inputFile NEW. - qt: DecryptVerifyJob::setOutputFile NEW. - qt: DecryptVerifyJob::outputFile NEW. - qt: DecryptVerifyJob::setProcessAllSignatures NEW. - qt: DecryptVerifyJob::processAllSignatures NEW. - qt: EncryptJob::setRecipients NEW. - qt: EncryptJob::recipients NEW. - qt: EncryptJob::setInputFile NEW. - qt: EncryptJob::inputFile NEW. - qt: EncryptJob::setOutputFile NEW. - qt: EncryptJob::outputFile NEW. - qt: EncryptJob::setEncryptionFlags NEW. - qt: EncryptJob::encryptionFlags NEW. - qt: SignEncryptJob::setSigners NEW. - qt: SignEncryptJob::signers NEW. - qt: SignEncryptJob::setRecipients NEW. - qt: SignEncryptJob::recipients NEW. - qt: SignEncryptJob::setInputFile NEW. - qt: SignEncryptJob::inputFile NEW. - qt: SignEncryptJob::setOutputFile NEW. - qt: SignEncryptJob::outputFile NEW. - qt: SignEncryptJob::setEncryptionFlags NEW. - qt: SignEncryptJob::encryptionFlags NEW. - qt: SignJob::setSigners NEW. - qt: SignJob::signers NEW. - qt: SignJob::setInputFile NEW. - qt: SignJob::inputFile NEW. - qt: SignJob::setOutputFile NEW. - qt: SignJob::outputFile NEW. - qt: SignJob::setSigningFlags NEW. - qt: SignJob::signingFlags NEW. - qt: SignJob::setAppendSignature NEW. - qt: SignJob::appendSignatureEnabled NEW. - qt: VerifyDetachedJob::setSignatureFile NEW. - qt: VerifyDetachedJob::signatureFile NEW. ... changelog too long, skipping 15 lines ... * Remove patch upstream: gpgme-D545-obsolete-distutils.patch ==== gtk4 ==== Version update (4.16.5 -> 4.16.6) Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0 - Update to version 4.16.6: + To prevent issues when using GTK under kwin, this release makes Wayland color management opt-in. To experiment with it, set GDK_DEBUG=color-mgmt. + GtkText: Don't select inserted Emoji + GtkApplication: Set the default window icon from the app ID + GtkFontChooser: Make the dialog more shrinkable + Updated translations. ==== iptables ==== Version update (1.8.10 -> 1.8.11) Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins - Update to release 1.8.11 * New arptables-translate tool * ebtables-nft: support --replace and --list-rules commands * iptables-translate: support socket match and TPROXY target ==== kdump ==== Version update (2.0.10+git0.g62142dd -> 2.0.11) - upgrade to version 2.0.11 * fadump mkinitrd: propagate --debug to the inner dracut call * mkdumprd: look for kernel image under /boot as well ==== kernel-firmware ==== Version update (20241018 -> 20241113) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20241113 (git commit 1727aceef4d2): * qcom: venus-5.4: add venus firmware file for qcs615 * qcom: update venus firmware file for SC7280 * QCA: Add 22 bluetooth firmware nvm files for QCA2066 - Update to version 20241112 (git commit c57a0a42468b): * mediatek MT7922: update bluetooth firmware to 20241106163512 * mediatek MT7921: update bluetooth firmware to 20241106151414 * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: update firmware for MT7921 WiFi device * qcom: Add QDU100 firmware image files. * qcom: Update aic100 firmware files * dedup-firmware.sh: fix infinite loop for --verbose * rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 * cnm: update chips&media wave521c firmware. * mediatek MT7920: update bluetooth firmware to 20241104091246 * linux-firmware: update firmware for MT7920 WiFi device * copy-firmware.sh: Run check_whence.py only if in a git repo * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops * amdgpu: update DMCUB to v9.0.10.0 for DCN351 * rtw89: 8852a: update fw to v0.13.36.2 * rtw88: Add firmware v52.14.0 for RTL8812AU * i915: Update Xe2LPD DMC to v2.23 * linux-firmware: update firmware for mediatek bluetooth chip (MT7925) * linux-firmware: update firmware for MT7925 WiFi device * WHENCE: Add sof-tolg for mt8195 * linux-firmware: Update firmware file for Intel BlazarI core * qcom: Add link for QCS6490 GPU firmware * qcom: update gpu firmwares for qcs615 chipset * cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops * mediatek: Add sof-tolg for mt8195 - Drop obsoleted workaround patch: copy-file-skip-check.patch - Update to version 20241029 (git commit 048795eef350): * ath11k: move WCN6750 firmware to the device-specific subdir * xe: Update LNL GSC to v104.0.0.1263 * i915: Update MTL/ARL GSC to v102.1.15.1926 - Update to version 20241028 (git commit 987607d681cb): * amdgpu: DMCUB updates for various AMDGPU ASICs * i915: Add Xe3LPD DMC * cnm: update chips&media wave521c firmware. * linux-firmware: Add firmware for Cirrus CS35L41 * linux-firmware: Update firmware file for Intel BlazarU core * Makefile: error out of 'install' if COPYOPTS is set ==== kernel-source ==== Version update (6.11.7 -> 6.11.8) Subpackages: kernel-64kb kernel-default - Linux 6.11.8 (bsc#1012628). - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1012628). - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (bsc#1012628). - xtensa: Emulate one-byte cmpxchg (bsc#1012628). - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (bsc#1012628). - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout (bsc#1012628). - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout (bsc#1012628). - drm/xe: Move LNL scheduling WA to xe_device.h (bsc#1012628). - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout (bsc#1012628). - block: fix queue limits checks in blk_rq_map_user_bvec for real (bsc#1012628). - blacklist.conf: drop it - block: rework bio splitting (bsc#1012628). - firmware: qcom: scm: suppress download mode error (bsc#1012628). - firmware: qcom: scm: Refactor code to support multiple dload mode (bsc#1012628). - Update config files. - selftests: hugetlb_dio: check for initial conditions to skip in the start (bsc#1012628). - ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1012628). - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (bsc#1012628). - irqchip/gic-v3: Force propagation of the active state with a read-back (bsc#1012628). - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation (bsc#1012628). - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation (bsc#1012628). - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock (bsc#1012628). - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks (bsc#1012628). - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs (bsc#1012628). - USB: serial: option: add Quectel RG650V (bsc#1012628). - USB: serial: option: add Fibocom FG132 0x0112 composition (bsc#1012628). - USB: serial: qcserial: add support for Sierra Wireless EM86xx (bsc#1012628). - USB: serial: io_edgeport: fix use after free in debug printk (bsc#1012628). - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (bsc#1012628). - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier (bsc#1012628). - usb: dwc3: fix fault at system suspend if device was already runtime suspended (bsc#1012628). - usb: musb: sunxi: Fix accessing an released usb phy (bsc#1012628). - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING (bsc#1012628). - mm/thp: fix deferred split unqueue naming and locking (bsc#1012628). - mm/mlock: set the correct prev on failure (bsc#1012628). - mm/damon/core: handle zero schemes apply interval (bsc#1012628). - mm/damon/core: handle zero {aggregation,ops_update} intervals (bsc#1012628). - mm/damon/core: avoid overflow in damon_feed_loop_next_input() (bsc#1012628). - signal: restore the override_rlimit logic (bsc#1012628). - objpool: fix to make percpu slot allocation more robust (bsc#1012628). - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (bsc#1012628). - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set (bsc#1012628). - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags (bsc#1012628). - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set (bsc#1012628). - filemap: Fix bounds checking in filemap_read() (bsc#1012628). - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1012628). - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model (bsc#1012628). - platform/x86/amd/pmf: Update SMU metrics table for 1AH family series (bsc#1012628). - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header (bsc#1012628). - btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1012628). - btrfs: fix per-subvolume RO/RW flags with new mount API (bsc#1012628). - btrfs: fix the length of reserved qgroup to free (bsc#1012628). - idpf: fix idpf_vc_core_init error path (bsc#1012628). - idpf: avoid vport access in idpf_get_link_ksettings (bsc#1012628). - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid spurious interrupts (bsc#1012628). - mm/slab: fix warning caused by duplicate kmem_cache creation in kmem_buckets_create (bsc#1012628). - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard ... changelog too long, skipping 1694 lines ... - commit dd0f9f9 ==== kf6-bluez-qt ==== Subpackages: kf6-bluez-qt-imports libKF6BluezQt6 - Add a workaround for a build issue with CMake 3.31. Despite being unused, CMake complains about missing QtQml private API headers. ==== libXt ==== Version update (1.3.0 -> 1.3.1) - update to 1.3.1 * README.md: update & correct links to O'Reilly X Toolkit books * unifdef ultrix * unifdef sgi * unifdef hpux * unifdef __osf__ * unifdef AIXV3 * unifdef MOTOROLA * unifdef USG * unifdef VMS * unifdef __EMX__ * unifdef AIXSHLIB & SUNSHLIB * Improve linking with widget libraries on macOS * issue #17: avoid _Static_assert from c++ * issue #18: cross-build issue in util * issue #19: include <process.h> on Windows for getpid() * issue #20: c23 boolean conflict * remove substitution for EXEEXT_FOR_BUILD, not defined in automake * Add continue_to_dispatch parameter to _XtResourceConfigurationEH() * eliminate an unnecessary cast * quiet a couple of unused-parameter warnings ==== libbpf ==== Version update (1.4.6 -> 1.5.0) - update to 1.5.0: * libbpf can now open (but not load!) BPF objects of non-native endianness, enabling cross-architecture support for BPF skeleton generation and BPF object introspection * BPF skeleton will now auto-attach SEC(".struct_ops") maps as part of <skeleton>__attach() call * BPF kprobe session programs support (SEC("kprobe.session")) * allow specifying kernel module name for fentry/fexit BPF programs (SEC(fentry/module:function) * libbpf recognizes LIBBPF_LOG_LEVEL environment variable, which can be used to set default log verboseness * BPF ringbuf APIs that limit maximum number of consumed records at a time (ring_buffer__consume_n(), ring__consume_n()) * distilled BTF support (btf__distill_base(), btf__relocate()) * BPF link-based attachment of BPF_PROG_TYPE_SOCKMAP programs (bpf_program__attach_sockmap()) * bpf_object__token_fd() API to fetch BPF token FD of a BPF object, if any * fixes for fetching syscall arguments on arm64, s390x, risc-v architectures * better GCC-BPF source code compatibility * __bpf_fastcall support for a few BPF helpers * __uptr annotation definition added to bpf/bpf_helpers.h API header * fixes and improvements around handling missing and nulled out struct_ops programs * fixed mmap()-ing logic for global data, fixing interop between generic bpf_object__open() APIs and BPF subskeletons * BPF skeleton backwards compatibility handling fixes * handle LTO-produced *.llvm.<hash> symbols better * feature detection fixes in the presence of BPF token inside user namespace * older kernels have broken PID filtering logic for multi-uprobes, libbpf now detects this and avoids the use of multi-uprobes for USDTs * fix accidental drop of FD_CLOEXEC flag during BPF map reuse * few BTF dumper formatting fixes * a few more small fixes all around. - update to 1.4.7: * fix interop issues between generic bpf_object__open() APIs and BPF subskeleton w.r.t. global data handling * speed up BTF sanity checks by skipping already validated base BTF * fix legacy treatment of non-SEC()-annotated subprogram as entry BPF program in some cases ==== libimobiledevice ==== - add python3-setuptools for python 3.13 support ==== libinput ==== Version update (1.26.2 -> 1.27.0) - Update to release 1.27 * New "sticky" mode for drag-locking * For tablet pads we now support tablet pad mode groups for devices without status LEDs as well * If a tablet is unknown to libwacom we now assume that it is a built-in tablet. (similar to libwacom 2.11) * The available area on external tablets can be reduced via the new tablet "area" configuration. ==== libmtp ==== Version update (1.1.21 -> 1.1.22) Subpackages: libmtp-udev libmtp9 - updated to 1.1.21 release - bugfixes - lots of new ids ==== librepo ==== Version update (1.18.1 -> 1.19.0) - Update to 1.19.0: * Fix input termination for pgpParsePkts [#325] * Upper case xattr incompatible to Amazon S3 [#326, #327] * Introduce entropy for fastestmirror option [#324] ==== libsoup ==== Subpackages: libsoup-3_0-0 typelib-1_0-Soup-3_0 - Add 4c9e75c6.patch: fix an intermittent test failure (glgo#GNOME/libsoup#399). ==== libsoup2 ==== - Add 4c9e75c6.patch: fix an intermittent test failure (glgo#GNOME/libsoup#399). ==== libxml2 ==== Subpackages: libxml2-2 libxml2-tools - add %{?sle15allpythons} macro [jsc#PED-68] - use %python_build and %python_install for 15 ==== libzypp ==== Version update (17.35.13 -> 17.35.14) - The 20MB download limit must not apply to non-metadata files like package URLs provided via the CLI (bsc#1233393). - version 17.35.14 (35) ==== llvm19 ==== Version update (19.1.3 -> 19.1.4) - Update to version 19.1.4. * This release contains bug-fixes for the LLVM 19.1.0 release. This release is API and ABI compatible with 19.1.0. - Rebase llvm-do-not-install-static-libraries.patch. - Apply clang-shlib-symbol-versioning.patch to add symbol versions to libclang-cpp.so similar to libLLVM.so. This is required when multiple versions of the library are loaded into the same process. (boo#1219405, boo#1221183, boo#1233220) - Enable lldb on s390x and ppc64le (bsc#1232906). ==== localsearch ==== Version update (3.8.0 -> 3.8.1) - Update to version 3.8.1: + Fix multiple leaks in metadata extractors + Fix reporting of metadata extraction progress in "localsearch daemon -f" and "localsearch status" + Cache mounts for generating stable content identifiers + Added missing includes necessary for Musl libc + Updated translations. ==== microos-tools ==== Version update (4.0+git2 -> 4.0+git6) Subpackages: selinux-autorelabel - Update to version 4.0+git6: * test: Check for AVC denials in the journal * test: More reliable output of combustion-validate * test: Remove workaround for boo#1230912 * Label /sys before selinux-autorelabel units run (bsc#1232709) ==== mozjs128 ==== - Drop autoconf213 BuildRequires: the source embeds autoconf.sh directly. - Fix build against icu 76.1: link the correct libraries (icu-uc instead of icu-i18n). ==== multipath-tools ==== Version update (0.10.0+108+suse.2c2e597 -> 0.11.0~1+118+suse.4a51b1a) Subpackages: kpartx libmpath0 - Update to version 0.11.0~1+118+suse.4a51b1a See NEWS.md for details about upstream changes in 0.11.0. * Pre-release of upstream 0.11.0 * Rework of the path checking algorithm to reduce wait time and improve performance * Modified the systemd unit `multipathd.service` such that multipathd will now restart after a failure or crash (gh#opensvc/multipath-tools#100) * multipathd: move systemd watchdog handling into daemon (bsc#1232227) * libmultipath: dm_get_maps(): don't bail out for single-map failures (bsc#1233588, gh#opensvc/multipath-tools#102) * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL * multipathd: fix deferred_failback_tick for reload removes ==== ncurses ==== Version update (6.5.20241102 -> 6.5.20241109) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20241109 + work around musl header ifdef's (report by Urs Jansen, cf: Gentoo [#920266]). + improve error-reporting in write_entry.c (report by Changqing Li). + remove unused #include from DJGPP configuration (report by Stas Sergeev). + workaround/fix issues from clang-analyze ==== net-snmp ==== Subpackages: libsnmp40 snmp-mibs - logrotate should use reload instead of restart (bsc#1232030) ==== patterns-gnome ==== Version update (20201210 -> 20241112) Subpackages: patterns-gnome-gnome_basic patterns-gnome-gnome_basis - Replace tracker with tinysparql: tracker was renamed with GNOME 47. - Some major overhaul over the GNOME patterns: allow to properly have wayland or X11 decoupled from each other, stepping closer to a wayland-only installation. ==== podman ==== Version update (5.2.5 -> 5.3.0) - Update to version 5.3.0: * Bump to v5.3.0 * Update release notes for v5.3.0 * [v5.3] Bump to Buildah v1.38.0 * [v5.3] Skip FIPS mode secrets run test * [v5.3] Buildah treadmill tweaks * test/buildah-bud: build new inet helper * test/system: add regression test for TZDIR local issue * vendor latest c/{buildah,common,image,storage} * Reapply "CI: test nftables driver on fedora" * Revert "cirrus: test only on f40/rawhide" * test f41 VMs * volume ls: fix race that caused it to fail * AdditionalSupport for SubPath volume mounts * Bump to v5.3.0-dev * Bump to v5.3.0-rc3 * Update release notes for v5.3-rc3 * podman: update roadmap * libpod: journald do not lock thread * Add key to control if a container can get started by its pod * Honor users requests in quadlet files * CI: systests: workaround for parallel podman-stop flake * Fix inconsistent line ending in win-installer project * fix(deps): update module github.com/opencontainers/runc to v1.2.1 * Quadlet - support image file based mount in container file * API: container logs flush status code * rework event code to improve API errors * events: remove memory eventer * libpod: log file use Wait() over event API * Makefile: vendor target should always remove toolchain * cirrus: check consitent vendoring in test/tools * test/tools/go.mod: remove toolchain * fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10 * fix(deps): update module github.com/onsi/gomega to v1.35.1 * doc: explain --interactive in more detail * fix(deps): update golang.org/x/exp digest to f66d83c * fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a * fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c * Bump to v5.3.0-dev * Bump to v5.3.0-rc2 * Update release notes for v5.3.0-rc2 * add default polling interval to Container.Wait * Instrument cleanup tracer to log weird volume removal flake * make podman-clean-transient.service work as user * Add default remote socket path if empty * Use current user if no user specified * Add support for ssh_config for connection * libpod: use pasta Setup() over Setup2() * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0 * fix(deps): update module github.com/onsi/gomega to v1.35.0 * logformatter: add cleanup tracer log link * docs: fix broken example * docs: add missing swagger links for the stable branches * readthedocs: build extra formats * pkg/machine/e2e: remove debug * fix(docs): Integrate pasta in rootless tutorial * chore(deps): update dependency setuptools to ~=75.3.0 * libpod: report cgroups deleted during Stat() call * chore: fix some function names in comment * CI: parallelize 450-interactive system tests * CI: parallelize 520-checkpoint tests * CI: make 070-build.bats use safe image names * test/system: add podman network reload test to distro gating * System tests: clean up unit file leaks * healthcheck: do not leak service on failed stop * healthcheck: do not leak statup service * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0 * Add Startup HealthCheck configuration to the podman inspect * buildah version display: use progress() * new showrun() for displaying and running shell commands * Buildah treadmill: redo the .cirrus.yml tweaks * Buildah treadmill: more allow-empty options * Buildah treadmill: improve test-failure instructions * Buildah treadmill: improve wording in test-fail instructions * doc: Remove whitespace before comma * fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0 * ps: fix display of exposed ports * ps: do not loop over port protocol * readme: Add reference to pasta in the readme * test/system: Fix spurious "duplicate tests" failures in pasta tests * Improve "podman load - from URL" * Try to repair c/storage after removing an additional image store * Use the config digest to compare images loaded/pulled using different methods * Simplify the additional store test * Fix the store choice in "podman pull image with additional store" * Bump to v5.3.0-dev * Bump to v5.3.0-rc1 * Set quota on volume root directory, not _data * fix(deps): update module github.com/opencontainers/runc to v1.2.0 * test: set soft ulimit * Vagrantfile: Delete * Enable pod restore with crun * vendor: update c/{buildah,common,image,storage} * Fix 330-corrupt-images.bats in composefs test runs * quadlet: add default network dependencies to all units * quadlet: ensure user units wait for the network * add new podman-user-wait-network-online.service * contrib/systemd: switch user symlink for file symlinks * Makefile: remove some duplication from install.systemd ... changelog too long, skipping 448 lines ... * pr-should-include-tests: no more CI:DOCS override ==== python-PyJWT ==== Version update (2.9.0 -> 2.10.0) - Update to version 2.10.0 * chore: use sequence for typing rather than list * Add support for Python 3.13 * [pre-commit.ci] pre-commit autoupdate * Add an RTD config file to resolve RTD build failures * docs: Update iat exception docs * Remove algorithm requirement for JWT API * [pre-commit.ci] pre-commit autoupdate * Create SECURITY.md * docs fix: decode_complete scope and algorithms * fix doctest for docs/usage.rst * fix test_utils.py not to xfail * Correct jwt.decode audience param doc expression * Add PS256 encoding and decoding usage * Add API docs for PyJWK * Refactor project configuration files from setup.cfg to pyproject.toml PEP-518 * Add JWK support to JWT encode * Update pre-commit hooks to lint pyproject.toml * Add EdDSA algorithm encoding/decoding usage * Ruff linter and formatter changes * Validate sub and jti claims for the token * Add ES256 usage * Encode EC keys with a fixed bit length * [pre-commit.ci] pre-commit autoupdate * Drop support for Python 3.8 * Prepare 2.10.0 release * Bump codecov/codecov-action from 4 to 5 * [pre-commit.ci] pre-commit autoupdate ==== python-alembic ==== Version update (1.13.3 -> 1.14.0) - update to el_1_14_0: * **[usecase] [runtime]** Added a new hook to the `DefaultImpl` `DefaultImpl.version_table_impl()`. This allows third party dialects to define the exact structure of the alembic_version table, to include use cases where the table requires special directives and/or additional columns so that it may function correctly on a particular backend. ==== python-blinker ==== Version update (1.8.2 -> 1.9.0) - update to 1.9.0: * Drop support for Python 3.8. :pr:`175` * Remove previously deprecated __version__, receiver_connected, Signal.temporarily_connected_to and WeakNamespace. :pr:`172` * Skip weakref signal cleanup if the interpreter is shutting down. :issue:`173` ==== python-jsonpointer ==== Version update (2.4 -> 3.0.0) - update to 3.0.0: * Add support for python 3.12 * drop python 2.7 support * CI fixes ==== python-psutil ==== Version update (6.0.0 -> 6.1.0) - update to 6.1.0: * 2366_, [Windows]: drastically speedup `process_iter()`_. We now determine process unique identity by using process "fast" create time method. This will considerably speedup those apps which use `process_iter()`_ only once, e.g. to look for a process with a certain name. * 2446_: use pytest instead of unittest. * 2448_: add make install-sysdeps target to install the necessary system dependencies (python-dev, gcc, etc.) on all supported UNIX flavors. * 2449_: add make install-pydeps-test and make install-pydeps- dev targets. They can be used to install dependencies meant for running tests and for local development. They can also be installed via pip install .[test] and pip install .[dev]. * 2456_: allow to run tests via python3 -m psutil.tests even if pytest module is not installed. This is useful for production environments that don't have pytest installed, but still want to be able to test psutil installation. * 2427_: psutil (segfault) on import in the free-threaded (no GIL) version of Python 3.13. (patch by Sam Gross) * 2455_, [Linux]: IndexError may occur when reading /proc/pid/stat and field 40 (blkio_ticks) is missing. * 2457_, [AIX]: significantly improve the speed of `Process.open_files()`_ for some edge cases. * 2460_, [OpenBSD]: `Process.num_fds()`_ and `Process.open_files()`_ may fail with `NoSuchProcess`_ for PID 0. Instead, we now return "null" values (0 and [] respectively). - drop skip_failing_tests.patch: obsolete ==== python311 ==== - Remove -IVendor/ from python-config boo#1231795 ==== python311-core ==== Subpackages: libpython3_11-1_0 python311-base - Remove -IVendor/ from python-config boo#1231795 ==== rpm ==== - Bump debugedit version (bsc#1233156) ==== runc ==== Version update (1.2.1 -> 1.2.2) - Update to runc v1.2.2. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.2.2>. ==== tcpd ==== - hosts.allow/hosts.deny: remove executable bit ==== tiff ==== - make doc packages noarch. no need to have those per arch - ensure that the src rpms are named per build flavor: You might now ask why. Good question: 1. the spec file during the build get patched. `@BUILD_FLAVOR@` gets replaced with the value. which means the src rpm between build flavor builds is not identical. Also the last built src.rpm will be published. with different content and runtime requires (aka our BuildRequires). 2. for historical reasons the internal dependency tracking goes via the src.rpm package. So without having differently named src.rpms the build cycle we were trying to solve was not actually solved. So we append a suffix to the Name attribute in the preamble now. - In the previous change to enable the cmake based build we also needed python3-Sphinx to build the man pages, as unlike the autotools based build, the cmake based build does not fall back to the pre-built man pages. This causes build cycle. Split out the documentation building to break the cycle. The Tumbleweed release managers preferred this solution over a mini package. - switch build to cmake for the webp build - we need the cmake finder code ==== tinysparql ==== Version update (3.8.0 -> 3.8.1) Subpackages: libtracker-sparql-3_0-0 typelib-1_0-Tracker-3_0 - Update to version 3.8.1: + Fix leak iterating bus-based cursors + Fix allowed extension for Turtle files in ontology definitions + Test fixes + Updated translations. ==== upower ==== Version update (1.90.4 -> 1.90.6) Subpackages: libupower-glib3 typelib-1_0-UpowerGlib-1_0 - Update to version 1.90.6: * Fractional battery percentage. * CI enhancement. * Tweak the default battery charging threshold to 75-80. * Fix g_object_weak_ref: assertion 'g_atomic_int_get (&object->ref_count) >= 1' failed. - Changes from version 1.90.5: * Suspend and Ignore as the CriticalPowerActions. * Support for battery charging threshold. * Tweak the device priority to make sure the device kind joystick can be correctly shown. - Add pkgconfig(polkit-gobject-1) BuildRequires: New dependency. ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Skip aarch64 decode path for rest of the architectures (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch). - agetty: Prevent login cursor escape (bsc#1194818, util-linux-agetty-prevent-cursor-escape.patch). - Document unexpected side effects of lazy destruction (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch, util-linux-umount-losetup-lazy-destruction-generated.patch). ==== util-linux-systemd ==== Subpackages: lastlog2 liblastlog2-2 - Skip aarch64 decode path for rest of the architectures (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch). - agetty: Prevent login cursor escape (bsc#1194818, util-linux-agetty-prevent-cursor-escape.patch). - Document unexpected side effects of lazy destruction (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch, util-linux-umount-losetup-lazy-destruction-generated.patch). ==== vlc ==== Subpackages: libvlc5 libvlccore9 vlc-noX vlc-qt - Convert BuildRequires from libfaad-devel to pkgconfig(faad2) ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 webkit2gtk-4_1-injected-bundles - Add 63f7badbada070ebaadd318b2801818ecf7e7ea0.patch: Fix build using ICU 76.1. ==== webkit2gtk4 ==== Subpackages: libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 webkitgtk-6_0-injected-bundles - Add 63f7badbada070ebaadd318b2801818ecf7e7ea0.patch: Fix build using ICU 76.1. ==== xprop ==== Version update (1.2.7 -> 1.2.8) - Update to version 1.2.8 * This release contains the following change to the way icons are displayed in the terminal when COLORTERM=truecolor in the environment variables: The vast majority of monospaced fonts are roughly half as wide as they are tall; to account for this when displaying icons, `xprop` draws each pixel twice in the horizontal, which nicely evens out the proportions. This patch utilizes the Lower Half Block character (â) to obtain the same result in a quarter of the space. By setting both a background and a foreground color, we can draw two pixels per character cell, thereby halving the apparent height of an icon rather than doubling its width.