# changelog

author: Simone Caronni <negativo17@gmail.com> - 011.3-5
changelog:
  - Remove all EL7 / Python 2 conditionals.
  - Trim changelog.
  - Format SPEC file and sort all Requires/BuildRequires.


author: Neil Hanlon <neil@shrug.pw> - 1.37.0-1
changelog:
  - update to 1.37 (fedora#2249918)
  - change URL to aria2 organization as it was moved from the prior org


author: Than Ngo <than@redhat.com> - 136.0.7103.113-1
changelog:
  - Update to 136.0.7103.113
    * CVE-2025-4664: Insufficient policy enforcement in Loader
    * CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo


author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Than Ngo <than@redhat.com> - 137.0.7151.119-1
changelog:
  - Update to 137.0.7151.119
    * CVE-2025-6191: Integer overflow in V8
    * CVE-2025-6192: Use after free in Profiler


author: Than Ngo <than@redhat.com> - 138.0.7204.49-1
changelog:
  - Update to 138.0.7204.49
    * CVE-2025-6555: Use after free in Animation
    * CVE-2025-6556: Insufficient policy enforcement in Loader
    * CVE-2025-6557: Insufficient data validation in DevTools


author: Kamil Dudka <kdudka@redhat.com> - 3.4.1-1
changelog:
  - introduce the csdiff-static subpackage with the csgrep-static executable
  - update to latest upstream release


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 1.22.6-1
changelog:
  - Update dpkg to 1.22.6
  - Drop dpkg-fsys-usrunmess as it is not required on properly usr-merged systems
    and pulls in perl as a dependency.


author: Simone Caronni <negativo17@gmail.com> - 1.22.15-3
changelog:
  - Clean up SPEC file.
  - Adjust Requires and BuildRequires.
  - Update configure options.
  - Fix all tests except one.


author: Neal Gompa <ngompa@fedoraproject.org> - 10.2.16-4
changelog:
  - Add kiwi-image:oci provides for OBS compatibility
  - Backport fix for filename extension for container images
  - Refresh patch with upstreamed version for allowing C locale in images
  - Backport support for filtering files from embedded ESP images


author: Michael J Gruber <mjg@fedoraproject.org> - 0.39-1
changelog:
  - rebase with upstream release 0.39 (rhbz#2348751)
  - general improvements and fixes
  - deprecated legacy python bindings are dropped


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98-1
changelog:
  - New version
    Resolves: rhbz#2297124
  - Fixed incorrect parsing of multiline rfc2231 header filename
    Resolves: CVE-2024-39929
  - Dropped upstreamed patches


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Jens Petersen <petersen@redhat.com> - 1.5-22
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.5/changelog
  - highlights:
  - ported from using PDC to Bodhi: `fedora-dists` replaced by `fedora-releases`
  - some improvements to autorelease handling
  - 'clone': prints no of repos and new --group option
  - 'copr' defaults to no longer rebuilding nvr's; new --monitor option
  - 'install': one can now select subpackages (like koji-tool install)
    using new `select-rpms` library
  - 'parallel' accepts chain-build style list of sorted package layers
  - 'review-package': new --interactive lightweight review mode
  - 'reviews': new --assignee, --submitted and --submitter options
  - 'sort' defaults to chain-build style output
  - 'update-sources': git add patches
  - require rpmbuild-order 0.4.12 to order rust crates and rubygems
  - git fetch earlier to get new branches


author: Jens Petersen <petersen@redhat.com> - 1.6-23
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.6/changelog
  - supports new wait-repo-request koji workflow
  - fedora-releases and select-rpms now packaged in fedora
  - Release Highlights:
  - update to fedora-releases-0.2.0 (supports epel10.0)
  - kojiWaitRepo: uses request-repo to trigger newrepo
  - 'build': use --notes to set Bodhi update notes text (#59)
  - 'clone' now uses fedpkg for better compatibility (#62)
  - 'copr' refactoring and fix existingChrootBuilds to prevent rebuilds
  - 'create-review': include FAS id if can be determined (#42)
  - 'create-review': --force to create a new "duplicate" review (#53)
  - 'import': prompt whether to build or only push (#47)
  - 'install': add --existing-only, --skip-existing, --no-reinstall options from select-rpms-0.2 (ported from koji-tool --install)
  - 'parallel': koji-tool tail of failed build.log if < 3 packages in layer
  - 'request-repo': now offers to import the new repo immediately
  - 'request-repo': only post comment if prompt input
  - 'review-package': allow --interactive also for local review
  - 'review-package': summarizes long rpmlint error output
  - 'reviews --created': now uses REL_PREP state
  - 'scratch-x86_64','scratch-aarch64': --exclude-arch no longer fast fails
  - 'sidetag': add --create
  - 'update': remove autorelease -b bump when updating version
  - RpmBuild buildRequires: improve dyn BRs handling
  - fix merging from new unfetched branch
  - sentence-case commit and changelog messages (#38)
  - targetMaybeSidetag: now maps "rawhide" to its dist_tag


author: Jens Petersen <petersen@redhat.com> - 1.6.1-24
changelog:
  - https://hackage.haskell.org/package/fbrnch-1.6.1/changelog
  - 'build','parallel': waitrepo now just uses "koji wait-repo --request"
  - 'build': now respects --waitrepo
  - 'local','install': new --jobs option for _smp_ncpus_max
  - waitrepo is now timed again


author: Jens Petersen <petersen@redhat.com> - 1.6.2-26
changelog:
  - 'diff': use git diff's builtin filtering
  - 'fetch': add --lenient to skip non dist-git directories
  - 'local': --detached-head
  - 'parallel': do not waitrepo for final layer
  - 'parallel': koji-tool tail of failed builds and end with task url
  - 'parallel': only print "parallel layer" is more than one pkg in layer
  - 'request-branches': wait 30s before checking for package added to tag
  - 'sidetags': --tagged lists tagged builds
  - 'unautospec': new command to remove autochangelog and/or autorelease
  - 'update-sources': now takes optional version, replacing 'update-version'
  - new fedora-krb lib replaces Krb module: handles different FAS userid (#67)
  - rename --allow-head to --detached-head
  - targetMaybeSidetag: warn/prompt if target does not match branch


author: Jens Petersen <petersen@redhat.com> - 1.7-28
changelog:
  - support epel10.x minors with fedora-releases-0.3.0
  - 'merge': now done from origin for consistency
  - targetMaybeSidetag: prompts to choose which sidetag
  - 'autospec': no duplicate %changelog line
  - 'branches': add --only-dead option
  - 'branches': improve the prefixing for multiple packages
  - 'build': update latest tagged check to include epel-testing; print all
  - 'build': use target branch to determine nvr
  - 'bump': complete rework of logic (--strict replaces --local)
  - 'clone': add --dryrun
  - 'clone': now supports globbing of packages
  - 'copr': order chroots by branch (release): so epel10 > epel9
  - 'copr': rename i686 to i386
  - 'fetch': fix --lenient was no-op
  - 'import': now also waits for package to be setup in koji
  - 'install': add --yes
  - 'install': perform also if given a rpm subpackage selection
  - 'install': select-rpms-0.3.0 adds --error-existing
  - 'install': skip ":" separator
  - 'list': refactor with countListPackages
  - 'mock': add experimental --install mode (for single package)
  - 'parallel': better sidetag setup with warnings
  - 'parallel': offer to retry failures or continue with waitrepo for layer
  - 'parallel': print nvr earlier and only latest commits
  - 'parallel': reduce default delay to 1s between triggering builds
  - 'parallel': always show task url for fail
  - 'pull': drop stash pop to avoid making conflicts
  - 'push': check local branch exists
  - 'request-branches': now also checks for commit access via group membership
  - 'request-branches': request all branches/pkgs before waiting for koji pkgs
  - 'review-package': defaults to interactive, use --full for fedora-review
  - 'scratch': do not create a new sidetag!
  - 'sidetags': listings are now sorted
  - 'switch': add --lenient option to avoid error for non-existent branch
  - 'uninstall': new experimental command to remove a package NVR
  - 'update-sources': partition sources by isArchiveFile
  - 'waitrepo': add --no-nvr option for generic wait-repo
  - Branches gitCurrentBranchWarn: offer to rename master to rawhide
  - Branches listOfBranches: print branch EOL warning when < 7 days left
  - Branches systemBranch: support CPE_NAME
  - Package isArchiveFile: ".sig" files are ascii
  - RpmBuild getSources: fix to use exists for uncompressed file
  - RpmBuild: check/install compression tool before downloading tarball
  - buildRPMs: backup build.log's with cp -p
  - new 'tag-build-to-sidetag': tags branch's nvr into a sidetag
  - recognize .crate as archive file (#70)
  - refPrompt: accept "origin" and require ref to over 3 chars
  - withPackagesByBranches: git fetch earlier to get any new branches
  - withPackagesByBranches: switch back branch before unstash


author: Jens Petersen <petersen@redhat.com> - 1.7.1-29
changelog:
  - merging now prompts even with --merge (--no-prompt) when branch unmergeable
  - parallel: restore package header output for merge
  - parallel: fix error for -F/-E when run outside dist-git
  - createKojiSidetag: needs krbTicket


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: Jens Petersen <petersen@redhat.com> - 0.6.0-0.1
changelog:
  - update to 0.6.0
    https://github.com/idris-lang/Idris2/blob/v0.6.0/CHANGELOG.md
  - revert to chez-scheme


author: Jens Petersen <petersen@redhat.com> - 0.7.0-3
changelog:
  - use github archive tarball (zbyszek, #2314358)
  - enable s390x
  - rename docs subpackage to noarch doc (#2314358)
  - move license file to lib (zbyszek, #2314358)


author: Simone Caronni <negativo17@gmail.com> - 1:31.0-14
changelog:
  - Remove obsolete EL7, Python 2 conditionals and Conflicts.
  - Switch to a valid Source URL.
  - Explicitly list man pages.
  - Format SPEC file.
  - Trim changelog.


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.3-13
changelog:
  - use systemctl try-restart in postrotate script (resolves rhbz#2372859)
  - attempt to fix CVE-2023-47430 (resolves rhbz#2271621)


author: Morten Stevens <mstevens@fedoraproject.org> - 4.9.1-2
changelog:
  - Fixed typo in /usr/bin/install macro
  - Remove outdated obsoletes entries
  - Remove temporary migration of pdns home directory


author: Paul Howarth <paul@city-fan.org> - 1.6000-1
changelog:
  - Update to 1.60
    - Removed not working modules Fidelity.pm, Cdbfundlibrary.pm, Fundata.pm and
      Fool.pm (GH#346, GH#366, GH#368)
    - YahooJSON.pm - Added code to retrieve cookies and a "crumb" required to
      continue to utilize the v11 API (GH#369)
    - The YahooJSON.pm currency module was changed to use the v8 chart API
    - Added initial version of CONTRIBUTING.pod that metacpan.org utilizes; it
      will completely replace the Hacker's Guide in the future
    - Bloomberg.pm - Changed module to extract data from JSON structure embedded
      within the HTML (GH#360)
    - NSEIndia.pm - Eliminated need to use temp folders by storing file data from
      URL into a variable
  - Exclude Finance::CONTRIBUTING manpage, CONTRIBUTING.pod added as %doc


author: Paul Howarth <paul@city-fan.org> - 1.6100-1
changelog:
  - Update to 1.61
    - SIX.pm - Changed lookup for currency, added lookups for symbol and last
      (GH#380)
    - YahooJSON.pm - URLs to retrieve required cookies and crumbs were changed to
      allow EU-based users to use the module (GH#373)


author: Paul Howarth <paul@city-fan.org> - 1.6200-1
changelog:
  - Update to 1.62
    - Fixed AEX.pm
    - Removed throttling from AlphaVantage.pm (GH#363)
    - Added CurrencyFreaks.pm - new currency module
    - YahooJSON.pm - added more error handling (GH#390)
    - Fixed MarketWatch.pm module (GH#389)
    - Rewrote Fool.pm and added back to F::Q (GH#379)
    - Added StockData.pm - methods stockdata, nyse, nasdaq
    - Modified YahooJSON.pm module in order handle EU consent redirects better
    - TwelveData.pm - Added "last" to data being returned
    - Added BorsaItaliana.pm - module for Borsa Italiana, Italian traded bonds
      using ISIN
    - YahooWeb.pm - modified YahooWeb to account for changes from Yahoo (GH#377)
  - Upstream dropped CONTRIBUTING.pod


author: Michal Josef Špaček <mspacek@redhat.com> - 1.6200-3
changelog:
  - Fix version handling for build with different locales set
    `printf "%.4f" 1.62` has different results e.g. for cs_CZ.UTF-8 vs C
  - Rename variable to cpan_version which is common in Fedora


author: Paul Howarth <paul@city-fan.org> - 1.6300-1
changelog:
  - Update to 1.63
    - Fixed TesouroDireto.pm - using different source URL (GH#424)
    - Added FinanceAPI.pm - requires API key from https://financeapi.net/
      - US and other exchange data available
    - Fixed BVB.pm (GH#409)
    - Fixed BSEIndia.pm (GH#410); removed Unzip as quotes file is now a CSV file
    - Fixed NSEIndia.pm (GH#410)
    - Fixed NZX.pm (GH#401)


author: Paul Howarth <paul@city-fan.org> - 1.6400-1
changelog:
  - Update to 1.64
    - Update AlphaVantage.pm (GH#447)
    - Fix to Stooq.pm (GH#445)
    - Updated ASX.pm (GH#404)
    - Added more fields to CSE.pm and exposed all labels
    - Changed parsing in Comdirect.pm (GH#413)
    - Complete rewrite of OnVista.pm (GH#414)
    - Minor fix to FinanceAPI decoding JSON (GH#434)
    - Modified YahooJSON to deal with "nan" as dividend yield in JSON
    - New CurrencyRates module, CurrencyRates/FinanceAPI (GH#427)
    - Fixed Bourso.pm (GH#417)
    - Allowed Currency Rates modules Fixer.pm and OpenExchange.pm to read their
      API keys from environment variables (GH#426)
    - Removed references to IEXCloud (IEX ended support for all products at the
      end of August 2024)
  - Switch source URL from cpan.metacpan.org to www.cpan.org
  - Add build conditional for author tests, disabled by default


author: Paul Howarth <paul@city-fan.org> - 1.6500-1
changelog:
  - Update to 1.65
    - Added EXCHANGE feature to Sinvestor.pm and some fixes (GH#481)
    - Added EXCHANGE feature to OnVista.pm (GH#480)
    - Added EXCHANGE feature to Consorsbank.pm and some fixes (GH#479)
    - Enabled usage count in Quote.pm
    - Removed DWS.pm
    - Improved check that dividend yield is a number in YahooJSON.pm by adding
      regex anchors
    - Added ssl_opts to user agent in Union.pm to account for bad certificate
      chain (GH#482)
    - Added ETFs search, more labels and EXCHANGE feature to Comdirect.pm (GH#478)
    - GoogleWeb: Add support for Hong Kong Exchange (GH#476)
    - YahooJSON: Adjust other currency fields when data is returned in GBp, ZAc,
      or ILA
    - Added labels wkn, ìsin, close, ask, bid, p_change, time to OnVista.pm
    - Modified OnVista.pm to enable search by ISIN and WKN and search for ETFs
    - Added methodinfo hash to Tradegate.pm (GH#465)
    - Added labels isin, open, ask, bid, time to Tradegate.pm (GH#465)
    - Fixed Tradegate.pm - Search for ETFs (GH#465)
    - Removed MorningstarAU (GH#405)
    - Fixed malformed character in YahooWeb.pm (GH#468)
    - Changed useragent in YahooJSON.pm (GH#467)
    - Added methodinfo hash to AEX.pm (GH#466)
    - Added labels exchange, close, time to AEX.pm (GH#466)
    - Fixed XETRA.pm (GH#460)
    - Added methodinfo hash to Fool.pm
    - Fixed MorningstarJP.pm (GH#443, GH#451)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.6600-1
changelog:
  - Update to 1.66
    - Modified CurrencyRates/CurrencyFreaks.pm to return from and to values
      instead of calculated rate
    - Removed Bloomberg.pm, Tiaacref.pm, Troweprice.pm
    - AlphaVantage: Return 'symbol not found' when no price data is returned
    - ASX: Changed error message when symbol isn't found (GH#497)
    - Added a new module to fetch the fund NAV from CMBChina (GH#494)
    - Added Cookie Jar to Comdirect user agent (GH#491)
    - Removed HU.pm, Oslobors.pm, and SEB.pm (GH#490)


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.6-2
changelog:
  - Remove a patch to drop the runtime dependency on Sphinx
  - It is no longer needed, python3-sphinx-7.2.6-2+ no longer Requires this


author: Miro Hrončok <miro@hroncok.cz> - 20.26.6-1
changelog:
  - Update to 20.26.6
  - Fixes: rhbz#2188155
  - Removes support for Python 2.7 virtual environments
  - Removes support for Python 3.6 virtual environments


author: Karolina Surma <ksurma@redhat.com> - 20.31.2-2
changelog:
  - EPEL 10: Add support for Python 3.13
  - Add RPM Requires needed for Python 3.13
  - Search for the wheels in Python version specific directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-10
changelog:
  - Report unsafe symlinks during installation as a specific case (RHEL-73186)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-54386)
  - Rebuild for ima-evm-utils 1.6 soname bump (RHEL-65378)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-11
changelog:
  - Fix possible package corruption on --delsign/resign/addsign (RHEL-69518)
  - Fix regression on build-id generation from compressed ELF (RHEL-54000)
  - Fix root relocation regression (RHEL-56613)
  - Update sequoia macros for sq 1.0 (RHEL-56363)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Jan André Reuter <j.reuter@fz-juelich.de> - 8.4-1
changelog:
  - New version 8.4
  - Require cube >= 4.8.2
  - Require otf2 >= 3.0
  - Drop C compatibility patch as fixed upstream
  - Remove libunwind as fork is not recommended
  - Fix issues when downgrading package


author: Jan André Reuter <j.reuter@fz-juelich.de> - 8.4-2
changelog:
  - Fix missing runtime dependency on libunwind-devel (rhbz#2278816)
  - Fix detection of GCC plug-in for GCC 14


author: Jan André Reuter <j.reuter@fz-juelich.de> - 9.0-1
changelog:
  - New version 9.0
  - Require cube >= 4.9
  - Require otf2 >= 3.1
  - Require opari2 >= 2.0.9
  - Drop GCC 14 patch as fixed upstream
  - Add gotcha-devel dependency
  - Remove el7-isms
  - Drop rpath patch


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


