# changelog

author: Than Ngo <than@redhat.com> - 139.0.7258.66-1
changelog:
  - Updated to 139.0.7258.66
    * CVE-2025-8576: Use after free in Extensions
    * CVE-2025-8578: Use after free in Cast
    * CVE-2025-8579: Inappropriate implementation in Gemini Live in Chrome
    * CVE-2025-8580: Inappropriate implementation in Filesystems
    * CVE-2025-8581: Inappropriate implementation in Extensions
    * CVE-2025-8582: Insufficient validation of untrusted input in DOM
    * CVE-2025-8583: Inappropriate implementation in Permissions


author: Than Ngo <than@redhat.com> - 139.0.7258.127-1
changelog:
  - Updated to 139.0.7258.127
    * CVE-2025-8879: Heap buffer overflow in libaom
    * CVE-2025-8880: Race in V8
    * CVE-2025-8901: Out of bounds write in ANGLE
    * CVE-2025-8881: Inappropriate implementation in File Picker
    * CVE-2025-8882: Use after free in Aura


author: Than Ngo <than@redhat.com> - 140.0.7339.80-1
changelog:
  - Update to 140.0.7339.80
    * CVE-2025-9864: Use after free in V8
    * CVE-2025-9865: Inappropriate implementation in Toolbar
    * CVE-2025-9866: Inappropriate implementation in Extensions
      CVE-2025-9867: Inappropriate implementation in Downloads


author: Than Ngo <than@redhat.com> - 140.0.7339.127-1
changelog:
  - Update to 140.0.7339.127
    * CVE-2025-10200: Use after free in Serviceworker
    * CVE-2025-10201: Inappropriate implementation in Mojo


author: Paul.Whitaker@rackspace.co.uk - 1.3.1-1
changelog:
  - Latest upstream release.
  - Added mariadb-dump, mysqlsh and command plugin packages
  - Upstream moved holland/lib contents to holland/lib/common


author: Karel Volný <kvolny@redhat.com> - 2.8.0-1
changelog:
  - Update to 2.8.0 (rhbz#2291131)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304188)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.1-1
changelog:
  - Update to 2.10.1 (rhbz#2316762)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323581)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329741)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.15.0-1
changelog:
  - Update to 2.15.0 (rhbz#2359289)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Richard Russon <rich@flatcap.org> - 20241114-1
changelog:
  - Security
    - Fixed: CVE-2024-49393
    - Fixed: CVE-2024-49394
    - #4300 Read the protected Message-ID
  - Features
    - #4336 Allow toggling numeric configs, e.g. `:toggle pager_index_lines`
    - #4427 alias: tag/untag pattern
    - query: tag with `<space>`
  - Contrib
    - #4400 `mutt_oauth2.py`: Fix reference to `client_secret`
  - Bug Fixes
    - #4399 fix duplicate save-hook
    - #4403 expando: fix escaping
    - #4404 browser: fix enter-quit-enter
    - #4405 pager: fix repaint
    - #4407 config: warn about deprecated variables
    - #4425 Refresh alias/query dialog on alias/query format change
    - #4433 compose: fix redraw on attachment
    - #4436 compose: fix search with `arrow_cursor`
    - #4438 autocrypt: fix `copy_normalize_addr()`
    - alias: fix cli crash
    - expando: fix relative dates
    - expando: padding default to space
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Czech
    - 99% Slovak
    - 82% French
  - Docs
    - drop refs to always-enabled features
    - fix typo in unmacro
    - fix broken link
    - ncrypt: fix typo in `config.c`


author: Richard Russon <rich@flatcap.org> - 20241212-1
changelog:
  - Features
    - #4437 show message preview in compose view
    - #4439 add trailing commas when editing addresses
  - Bug Fixes
    - #4444 expando: fix overflow
    - #4461 Spaces can be wide
    - #4464 Remove BOM from UTF-8 text
    - #4467 Bug with wrong fingerprints in certificate_file
    - #4470 fix postponed sorting assertion failure
    - #4472 fix: `save_attachment_open()` when overwriting
    - #4473 add text-wrapping to compose message preview pager
    - #4475 edit_headers: cleanup temporary file on error
    - expando: fix crash on empty '[]' date
    - expando: fix container formatting
    - browser: fix 'tag-' display
    - query: fix memory leak
    - fix more arrow_cursor + search
  - Changed Config
    - Config Renames:
      - `$pgp_sort_keys`       -> `$pgp_key_sort`
      - `$sidebar_sort_method` -> `$sidebar_sort`
      - `$sort_alias`          -> `$alias_sort`
      - `$sort_browser`        -> `$browser_sort`
    - Changed Defaults:
      - `set alias_format = "%3i %f%t   | %C%> %Y"`
      - `set query_format = "%3i %t   | %C%> %Y"`
  - Translations
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
    - 89% French
    - 39% Chinese (Traditional)
  - Coverity Defects
    - Explicit null dereferenced
    - Overflowed constant
    - Overflowed return value
    - Resource leak
  - Docs
    - alias tags
  - Build
    - #4452 only use `struct tm.tm_gmtoff` if available
  - Code
    - #4294 refactor memory allocation
    - #4442 remove unused fields from ComposeSharedData
    - #4447 refactor 'sort' constants
    - #4449 add `mutt_window_swap()`
    - unify Menu data
    - move config to libraries
    - unify Alias/Query
    - expando factor out callbacks
    - refactor `simple_dialog_new()`
    - test: add `TEST_CHECK_NUM_EQ()`
    - fopen: tidy read-only
  - Upstream
    - #4448 Update queue.h


author: Richard Russon <rich@flatcap.org> - 20250113-1
changelog:
  - Bug Fixes
    - #4477 fix crash in folder-hook
    - #4480 fix memory leak in compose message preview (fixes #4478)
    - #4483 query: fix comma-separated names
    - #4485 lua: fix `lua_mutt_call()`
    - #4490 notmuch: refresh the Email if the filename changes
    - fix: no new mail message
    - fix display of certificate fingerprints
    - fix prompt colour
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovakian
    - 100% Turkish
    - 91% French
    - 41% Chinese (Traditional)
  - Build
    - #4479 Fix DT_NUMBER entries on 32-bit endian platforms
  - Code
    - #4481 Simplify `mutt_file_fopen()`
    - colour refactoring
    - standardise variable names for temporary files


author: Richard Russon <rich@flatcap.org> - 20250404-1
changelog:
  - Features
    - #4493 config: don't quote enums
    - #4493 link config dump to docs
    - #4494 refactor the Help Page for clarity
    - #4554 CLI: `neomutt -DD` -- Dump Different
    - #4593 browser: tag select rather than descend
  - Bug Fixes
    - #3469 source: fix variable interpretation
    - #4370 `mutt_oauth2`: refactor `sasl_string` computation
    - #4536 expand tabs to spaces in compose preview
    - #4537 fix dumping of initial values
    - #4538 move `real_name` init
    - #4542 Remove `MUTT_NEWFOLDER`, fix appending to mbox
    - #4546 Respect Ignore when modifying an email's headers
    - #4549 fix refresh on toggle `hide_thread_subject`
    - #4550 buffer: fix seek
    - #4551 add comma to single `<complete-query>` match
    - #4595 notmuch: check for parse failure
    - #4596 query: allow `<>`s around email addresses
    - pager: fix normal/stripe colour
    - fix colour leaks in pager
    - fix array leak in the verify certificate dialog
  - Translations
    - 100% German
    - 100% Turkish
    - 96% Lithuanian
    - 86% French
    - 49% Chinese (Traditional)
  - Build
    - #4552 Deprecate some configure options that aren't used anymore
    - build: workaround for unused-result warning
  - Code
    - #4492 colour refactoring
    - #4543 debug: Chain old SEGV Handler
    - #4545 Allow nested `ARRAY_FOREACH()`
    - #4553 config: API `has_been_set()`
    - #4557 config: drop ConfigSet from API functions
    - #4558 drop obsolete pgp/smime menus
    - #4559 array: `foreach_reverse()`
    - #4560 Change description of verify-key to be crypto-scheme agnostic
    - #4561 expando: move EnvList out of library
    - #4570 Simplify the management of NeoMutt Commands
    - #4571 libcli - parse the command line
    - #4580 Split CLI Usage into sections
    - #4582 pager: fix lost `NT_PAGER` notifications
    - #4591 pager: fix refresh on config/colour changes
    - array: upgrade `get_elem_list()`
    - Buffer refactoring
    - coverity: fix defects
    - improve `localise_config()`
    - main: drop -B (batch mode) option
    - merge init.[ch] into main.c
    - refactor version code
    - neomutt: `home_dir`, `username`, `env`
    - query: unify NeoMutt `-D` and `-Q`
    - refactor `main.c`/`init.c`
    - sidebar: streamline expando callbacks
    - test: lots of parse coverage
    - window refactoring
    - window: force recalc|repaint on new windows
  - Upstream
    - Update mutt/queue.h
    - Fix NULL pointer dereference when calling `imap_logout_all()`


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-1
changelog:
  - ARC version 7 packaged for EPEL with a different package name
  - Based on the Fedora rawhide package
  - These packages declare conflicts with the ARC version 6 packages


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 7.0.0-3
changelog:
  - Update the VOMS attribute certificate signing hash algorithm
  - Re-enable the VOMSUtilTest on Fedora 43 (after above fix)
  - Fix unowned directory /etc/arc.conf.d


author: Paul Howarth <paul@city-fan.org> - 4.38-1
changelog:
  - Update to 4.38
    - Encode real core booleans as boolean notation (GH#224)
    - Minor test fixes
    - Fix docs typo (GH#225)


author: Paul Howarth <paul@city-fan.org> - 4.39-1
changelog:
  - Update to 4.39
    - Fix Windows -Dusequadmath (GH#229, GH#235)
    - Fix inconsistent behavior between decoding escaped and unescaped
      surrogates, and escaped non-characters vs. non-escaped non-characters; now
      aligned to JSON::PP (GH#227, GH#233)
    - Add type_all_string tests (GH#236)
    - Silence UV to char cast warnings (GH#232)
    - Fix MSVC preprocessor errors (GH#232)
    - Fix -Wformat warnings on Windows (GH#228)
    - Clarify BigInt decoding (GH#226)
  - Drop EL-7 support
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 4.40-1
changelog:
  - Update to 4.40
    - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
    - Detect more malformed numbers, with two decimal points
    - Pin Github actions to latest @v via pinact run -u


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-1
changelog:
  - Initial commit conatining the clone of the rwarhide branch with a new
    source of postgresql 16.8 and the removal of Requires and BuildRequires
    of postgresql-server and postgresql-server-devel to get around the
    modularity of epel8 during build


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-2
changelog:
  - Changed the filepath inside the lto_optimization patch since the target
    file cannot be found without using autosetup inside the spec file.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-3
changelog:
  - Added the necessary build for postgresql to acommodate the modularity of
    epel8 This means: * a minimal build of postgresql16 inside the build
    phase * "installation" of said builds files into a temporary dir
    (/tmp/pgsql) to ease it's deletion later * passing the pg_config files
    location as an rgument to the %make_build and %make_install of
    credcheck * creation of all the necessary directories since ppostgresql
    is located in a weird spot so they won't be created by it * moving all
    the necessary files of credcheck: - credcheck.control - credcheck.so -
    credcheck--%{version}.0.sql - credcheck--*--*.sql (the "update" files)
    to their proper place as they will be installed inside the dir that
    postgresql is in, this cannot be overriden using destdir or any other
    means known to me and is caused by the call of pgxs.mk provided by
    postgresql-server-devel inside the makefile of credcheck (the location of
    pgxs.mk can be found using: /usr/bin/pg_config --pgxs) * removing the
    installed files of postgresql16 (as mentioned above they are all in
    /tmp/pgsql)


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-4
changelog:
  - Renamed the package to postgresql16-credcheck to make handling building
    for other versions of postgresql in the future easier.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-6
changelog:
  - This is a commit message for the previous commit I have unfortunately
    pushed a commit with an inclomplete commit message into the epel8 branch
    which does not allow force pushing, therefore a rebase is not possible so
    this empty commit only exists to amend that commit message: I have
    renamed the base package back to credcheck to keep the srpms called
    credcheck as well to work around the automatisation used in koji and mock
    builds, I have created a subpackage named
    postgresql%{postgres_major_version}-credcheck to be able to produce the
    correct output rpms and also renamed the selinux subpackage to
    postgresql%{postgresq_major_version}-credcheck-selinux to keep the
    naming consistent. This now allows me to build the package using koji
    without raising the "epel8 branch not requested for
    postgresql16-credcheck" error during the builds.


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-7
changelog:
  - Updated the Requires and recommends between the main package and the
    selinux subpackage to reflect the rename


author: Pavol Sloboda <psloboda@redhat.com> - 3.0-8
changelog:
  - [bugfix] Updated the Requires of postgresql-server to only postgresql16
    The Requires of postgresql-server > 15 did not work as expected and
    allowed this package to be installed with postgresql-server 15 as well.
    This caused the package not to work as it was built with postgresql16 and
    postgresql15 is incompatible with it.


author: Scott K Logan <logans@cottsay.net> - 1.1.0-1
changelog:
  - Update to 1.1.0 (rhbz#2394423)
  - Replace macro use in URL/Source0 fields for spec legibility
  - Move doc subpackage after python3 so %{summary} resolves correctly


author: Ondřej Nosek <onosek@redhat.com> - 1.67-5
changelog:
  - Patch: `chain-build`: correct the info message
  - Patch: Fix regular expression for parsing Source lines
  - Patch: Add draft builds support


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - There is a new convenience method `Sections.get_or_create()` that allows you to manipulate a section
    without checking if it exists first. If a section doesn't exist, it will be appended to the end. (#441)
    For example, this will work properly even on spec files without `%changelog`:

    ```
    with spec.sections() as sections:
        changelog = sections.get_or_create("changelog")
        changelog[:] = ["%autochangelog"]
    ```
  - Resolves: rhbz#2332288


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.35.1-1
changelog:
  - We have fixed a bug that caused changes to get lost when a spec file passed as a path was replaced or deleted. (#470)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


