Packages changed: NetworkManager PackageKit (1.2.5 -> 1.2.8) PackageKit-branding-openSUSE accountsservice avahi avahi-glib2 dracut (059+suse.522.g0fc72191 -> 059+suse.530.gba7b6a35) evince gcr gcr3 gdm glib2 gnome-control-center (45.1+14 -> 45.1+22) gnome-keyring gnome-menus-branding-openSUSE gnome-session gnome-settings-daemon gnome-shell grub2 gsettings-desktop-schemas gstreamer-plugins-bad gstreamer-plugins-base gtk2 gtk2-engines gtk3 gvfs kernel-firmware (20231107 -> 20231127) kio-extras5 libcanberra libdrm libsecret libsemanage libxslt (1.1.38 -> 1.1.39) mozjs115 mutter pcsc-lite (2.0.0 -> 2.0.1) podman (4.7.2 -> 4.8.0) polkit-gnome python-Pygments (2.16.1 -> 2.17.2) python-SQLAlchemy (2.0.21 -> 2.0.23) python-certifi (2023.7.22 -> 2023.11.17) python-cryptography (41.0.5 -> 41.0.7) python-gevent (23.9.0 -> 23.9.1) python-greenlet (3.0.0 -> 3.0.1) python-httpx (0.25.0 -> 0.25.2) python-idna (3.4 -> 3.6) python-jsonpatch (1.32 -> 1.33) python-jsonpointer (2.3 -> 2.4) python-pyOpenSSL (23.2.0 -> 23.3.0) python-pyasn1 (0.5.0 -> 0.5.1) python-pycryptodome (3.18.0 -> 3.19.0) python-simplejson (3.19.1 -> 3.19.2) python-zipp (3.15.0 -> 3.17.0) rubygem-nokogiri (1.15.4 -> 1.15.5) rubygem-unf_ext (0.0.8.2 -> 0.0.9.1) system-config-printer thin-provisioning-tools tigervnc tracker-miners util-linux util-linux-systemd vte webkit2gtk3 webkit2gtk4 xdg-desktop-portal (1.18.1 -> 1.18.2) xdg-desktop-portal-gnome (45.0 -> 45.1) yast2-core (5.0.0 -> 5.0.1) zenity (3.99.2 -> 3.99.90) === Details === ==== NetworkManager ==== Subpackages: NetworkManager-bluetooth NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0 - Use %patch -p N instead of deprecated %patchN. ==== PackageKit ==== Version update (1.2.5 -> 1.2.8) Subpackages: PackageKit-backend-dnf PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0 - Update to version 1.2.8: + Libraries: - offline-updates: . Make package update list deduplication more efficient. . Add only one entry per package to 'offline-update-competed' file. - PkClient: Replace the GSimpleAsyncResult with the GTask API. - pk-client: . Fix use-before-set of PkProgress on cancellation. . Move cancellable disconnect to dispose. . Rework refcounting for PkClientState. + Backends: Changes to apt, dnf, PiSi and BSD backends. - Changes from version 1.2.7: + New Features: - pkclient: Add an option to count download size with dependencies. - pk-transaction: Add support for getting the RemainingTime property. + Backends: - zypp: Fix ambiguous reference to 'filesystem' class. - Changes to dnf, apt, alpm backends. - Changes from version 1.2.6: + New Features: - Expose transaction sender as read-only property on the bus. - pkmon: Display transaction sender binary name in log. - pk-transaction: Add Packages signal. - pk-transaction: Combine some D-Bus PropertiesChanged signal emissions. - pk-transaction: Add UpdateDetails signal. + Backends: - zypp: . implement upgrade-system method. . Clean up trailing whitespaces. . Avoid statuReset() on locked packages. . restore pool status after simulating an update. . Disable upgrade-system support in SLE. . build the pool before calling is_tumbleweed(). . update libzypp dependency version. . Don't refresh repos before searching. . Check if packages are locked before removing. . add repository data in package id. . Remove trailing whitespace. + Changes to alpm, aptcc, apt, and nix backends. - Rebase patches: + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch + PackageKit-dynamic-export.patch + PackageKit-zypp-disable-upgrade-system-in-sle.patch - Drop upstream fixed patches: + PackageKit-zypp-add-repo-in-packageid.patch + PackageKit-zypp-add-upgrade-system.patch + PackageKit-zypp-avoid-statuReset.patch + PackageKit-zypp-dont-refresh-before-searching.patch + PackageKit-zypp-dont-remove-locked-packages.patch + PackageKit-zypp-fix-ambiguous-filesystem-reference.patch + PackageKit-zypp-fix-is-tumbleweed-check.patch + PackageKit-zypp-restore-pool-status-after-simulating-update.patch + PackageKit-zypp-update-libzypp-dependency-version.patch ==== PackageKit-branding-openSUSE ==== - Use %patch -p N instead of deprecated %patchN. - Rebase PackageKit-branding-vendor.patch to apply against PackageKit 1.2.7 and later. ==== accountsservice ==== Subpackages: libaccountsservice0 typelib-1_0-AccountsService-1_0 - Use %patch -p N instead of deprecated %patchN. ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Reformat avahi-gacdir.patch to apply as patch -p1. - Use %autopatch instead of deprecated %patchN format. ==== avahi-glib2 ==== - Reformat avahi-gacdir.patch to apply as patch -p1. - Use %autopatch instead of deprecated %patchN format. ==== dracut ==== Version update (059+suse.522.g0fc72191 -> 059+suse.530.gba7b6a35) Subpackages: dracut-ima - Update to version 059+suse.530.gba7b6a35: * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083) * fix(90kernel-modules): add intel_lpss_pci for MacBook Pro 2017 * feat(kernel-modules): install SPMI modules on ARM/RISC-V * feat(kernel-modules): add Qualcomm IPC router to enable USB * fix(pcsc): add --disable-polkit to pcscd.service * fix(pcsc): add opensc load module file ==== evince ==== Subpackages: evince-plugin-pdfdocument libevdocument3-4 libevview3-3 typelib-1_0-EvinceDocument-3_0 typelib-1_0-EvinceView-3_0 - Use %patch -P N instead of deprecated %patchN. ==== gcr ==== Subpackages: gcr-ssh-agent gcr-ssh-askpass gcr-viewer libgck-2-2 libgcr-4-4 typelib-1_0-Gck-2 typelib-1_0-Gcr-4 - Use %patch -p N instead of deprecated %patchN. ==== gcr3 ==== Subpackages: gcr3-data gcr3-prompter gcr3-ssh-agent gcr3-ssh-askpass libgck-1-0 libgcr-3-1 - Use %patch -p N instead of deprecated %patchN. ==== gdm ==== Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Use %patch -p N instead of deprecated %patchN. ==== glib2 ==== Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 - Use %autosetup instead of %setup/%patch. ==== gnome-control-center ==== Version update (45.1+14 -> 45.1+22) Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces - Use %patch -p N instead of deprecated %patchN. - Update to version 45.1+22: + apps: Fix status page glitch on initialization + po: Fix missing closing tag in pt_BR locale + background: Improve preview performance + applications: Fix File & Link Associations UI + Updated translations. ==== gnome-keyring ==== Subpackages: gnome-keyring-pam libgck-modules-gnome-keyring - Use %patch -p N instead of deprecated %patchN. ==== gnome-menus-branding-openSUSE ==== - Use %patch -p N instead of deprecated %patchN. ==== gnome-session ==== Subpackages: gnome-session-core gnome-session-default-session gnome-session-wayland - Use %patch -p N instead of deprecated %patchN. ==== gnome-settings-daemon ==== - Use %patch -p N instead of deprecated %patchN. - Add a059909d62da0c11774f1089d02937699fabf150.patch: power: Fix enum mismatch warning - Add 41d0dc1db4d75c37ba67fe903105b4e162d42f1a.patch: power: Fix uninitialised variable warning - Renumber patches, ensure we have a patch0 when upstream patches are available in future release. ==== gnome-shell ==== Subpackages: gnome-extensions gnome-shell-calendar - Use %patch -p N instead of deprecated %patchN. ==== grub2 ==== Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin - Fix unattended boot with TPM2 allows downgrading kernel and rootfs, also enhancing the overall security posture (bsc#1216680) * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch * 0002-Restrict-file-access-on-cryptodisk-print.patch * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch * 0004-Key-revocation-on-out-of-bound-file-access.patch - grub2.spec: Fix openQA test failure in SLE-15-SP6 due to missing font in memdisk ==== gsettings-desktop-schemas ==== - Use %autosetup instead of %setup/%patch. ==== gstreamer-plugins-bad ==== Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 - Use %patch -p N instead of deprecated %patchN. ==== gstreamer-plugins-base ==== Subpackages: libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstTag-1_0 - Use %autosetup instead of %setup/%patch. ==== gtk2 ==== Subpackages: gtk2-data gtk2-immodule-amharic gtk2-immodule-inuktitut gtk2-immodule-thai gtk2-immodule-tigrigna gtk2-immodule-vietnamese gtk2-tools libgtk-2_0-0 - Use %patch -p N instead of deprecated %patchN. ==== gtk2-engines ==== - Use %autosetup instead of %setup/%patch. - Fix baselibs.conf: reference correct name of hcengine. ==== gtk3 ==== Subpackages: gtk3-data gtk3-immodule-amharic gtk3-immodule-inuktitut gtk3-immodule-thai gtk3-immodule-tigrigna gtk3-immodule-vietnamese gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0 - Use %patch -p N instead of deprecated %patchN. ==== gvfs ==== Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse - Use %patch -p N instead of deprecated %patchN. ==== kernel-firmware ==== Version update (20231107 -> 20231127) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20231127 (git commit 4124f8f928d5): * Make rdfind optional * ice: update ice DDP wireless_edge package to 1.3.13.0 * linux-firmware: update firmware for mediatek bluetooth chip (MT7922) * linux-firmware: update firmware for mediatek bluetooth chip (MT7921) * linux-firmware: update firmware for MT7922 WiFi device * linux-firmware: update firmware for MT7921 WiFi device * Makefile, copy-firmware: Use portable "command -v" to detect installed programs * amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32 * powervr: add firmware for Imagination Technologies AXE-1-16M GPU * ice: update ice DDP comms package to 1.3.45.0 * ice: update ice DDP package to 1.3.35.0 * mediatek: Remove an unused packed library * amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314 - Drop obsoleted copy-file-skip-rdfind.patch; use --ignore-duplicates - Update to version 20231120 (git commit 9552083a783e): * mediatek: Sync shared memory structure changes * Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 * i915: Update MTL DMC to v2.19 * Make email replies more resilient * Try both utf-8 and windows-1252 for decoding email - Update to version 20231116 (git commit 6723a8d90923): * iwlwifi: fix for the new FWs from core83-55 release * Enable deb and rpm builds on tags * linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops * linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops - Update to version 20231115 (git commit a07fd0b96b5a): * iwlwifi: add new FWs from core83-55 release * iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release * Add a workaround for gitlab.freedesktop.org pull requests * Add extra debugging output when processing pull requests * Process pull requets directly from mbox * linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Update to version 20231110 (git commit 74158e7ac86d): * amdgpu: DMCUB updates for various AMDGPU ASICs * Ensure rdfind is installed * Add checks for destination directory being specified * Fix symlink creation for some files * Fix classification of some pull requests * nvidia: add GSP-RM version 535.113.01 firmware images - Skip rdfind (not included in our distro as default): copy-file-skip-rdfind.patch - Fix make-files.sh to handle symlinked directories ==== kio-extras5 ==== Subpackages: libkioarchive5 - Add missing BuildRequires again, they got removed for some reason (boo#1211933) - Mention all plugins in %files explicitly ==== libcanberra ==== Subpackages: canberra-gtk-play libcanberra-gtk-module-common libcanberra-gtk0 libcanberra-gtk2-module libcanberra-gtk3-0 libcanberra-gtk3-module libcanberra0 - Use %autosetup instead of %setup/%patch. ==== libdrm ==== Subpackages: libdrm2 libdrm_amdgpu1 libdrm_nouveau2 libdrm_radeon1 - adjusted n_libdrm-drop-valgrind-dep-generic.patch, n_libdrm-drop-valgrind-dep-intel.patch to fix build on sle15-sp6 ==== libsecret ==== Subpackages: libsecret-1-0 typelib-1_0-Secret-1 - Use %patch -p N instead of deprecated %patchN. ==== libsemanage ==== Subpackages: libsemanage-conf libsemanage2 - Remove dependency on /usr/bin/python3, making scripts to depends on the real python3 binary, not the link. bsc#1212476 ==== libxslt ==== Version update (1.1.38 -> 1.1.39) Subpackages: libexslt0 libxslt-tools libxslt1 - Update to version 1.1.39: * Bug fixes: extensions: Don't search imports for extension prefixes * Improvements: - transform: Check maximum depth when processing default templates - build: . Add more missing include . Add missing includes - python: Don't set deprecated global - imports: Limit nesting depth - extensions: Report top-level elements in xsltDebugDumpExtensions - Add extern "C" { } block to xsltlocale.h * Portability: - python: Make it compatible with python3.12 - date: . Fix check for localtime_s . Fix check for gmtime_s * Build systems: - pkg-config files include cflags for static builds - Handle NOCONFIG case when setting locations from CMake target properties - autotools: Make xslt-config executable * Tests: - tests: Structured error handler now passes a const xmlError - python: Fix tests on MinGW - fuzz: Fix xmlFuzzEntityLoader after recent libxml2 changes ==== mozjs115 ==== - Use %patch -p N instead of deprecated %patchN. ==== mutter ==== - Use %patch -p N instead of deprecated %patchN. ==== pcsc-lite ==== Version update (2.0.0 -> 2.0.1) Subpackages: libpcsclite1 - version 2.0.1 * SCardConnect(): return SCARD_W_SECURITY_VIOLATION when needed (polkit) * SCardCancel(): return SCARD_S_SUCCESS even if the client already finished * polkit is enabled by default * libpcscspy: fix a crash with NULL pointers * Doxygen: fix SCardBeginTransaction() documentation * fix pcscd internal thread safety issues (clang -fsanitize=thread) * Some other minor improvements ==== podman ==== Version update (4.7.2 -> 4.8.0) - Update to version 4.8.0: * Bump to v4.8.0 * Update release notes for 4.8.0 * Add notes on upcoming deprecations to release notes * [v4.8] Bump to Buildah v1.33.2 * [CI:DOCS] Update release notes * machine applehv: create better error on start failure * Bump to v4.8.0-dev * Bump to v4.8.0-rc1 * Create release notes for v4.8.0 * Update release notes from v4.7 branch * Cirrus: Update operating branch * rootless_tutorial: modernize * Bump Buildah to v1.33.1 * Bump Buildah to v1.33.0 * Update to libhvee 0.5.0 * vmtypes names cannot be used as machine names * Add support for --compat-auth-file in login/logout * Update tests for a c/common error message change * Update c/image and c/common to latest, c/buildah to main * CI: test overlay and vfs * [CI:DOCS] Add link to podman py docs * Test fixes for debian * pasta tests: remove some skips * VM images: bump to 2023-11-16 * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security] * [CI:DOCS] Machine test timeout env var * Quadlet - add support for UID and GID Mapping * Quadlet - Allow using symlink on the base search paths * [skip-ci] Update dessant/lock-threads action to v5 * Avoid empty SSH keys on applehv * qemu,parseUSB: minor refactor * fix(deps): update module github.com/gorilla/handlers to v1.5.2 * docs: fix relabeling command * Pass secrets from the host down to internal podman containers * (Temporary) Emergency CI fix: quay search is broken * Update podman-stats.1.md.in * [CI:BUILD] packit: handle builds for RC releases * Quadlet test - add case for multi = sign in mount * set RLIMIT_NOFILE soft limit to match the hard limit on mac * rootless: use functionalities from c/storage * CI: e2e: fix a smattering of test bugs that slipped in * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1 * vendor: update c/storage * Improve the documentation of quadlet * Fix socket mapping socket mapping nits * fix(deps): update module golang.org/x/tools to v0.15.0 * fix(deps): update github.com/containers/libhvee digest to 9651e31 * [skip-ci] Update github/issue-labeler action to v3.3 * Document --userns=auto behaviour for rootless users * machine: qemu: add usb host passthrough * fix(deps): update module golang.org/x/net to v0.18.0 * fix(deps): update module github.com/onsi/gomega to v1.30.0 * Refactor Ignition configuration for virt providers * [CI:BUILD] rpm: disable GOPROXY * Automatic code cleanups - JetBrains * Refactor key machine objects * systests: add [NNN] prefix in logs, NNN = filename * systests: add a last-minute check for db backend * applehv: allow virtiofs to mount to / * Run codespell on podman * update completion scripts for cobra v1.8.0 * Fix man page display of podman-kube-generate * Try to fix the broken formatting of man podman‐kube‐apply(1). * fix(deps): update module golang.org/x/text to v0.14.0 * docs: make CNI removal explicit * fix(deps): update module github.com/gorilla/mux to v1.8.1 * fix(deps): update module github.com/spf13/cobra to v1.8.0 * fix(deps): update module golang.org/x/sync to v0.5.0 * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18 * Podman push --help should reveal default compression * Update container-device-interface (CDI) to v0.6.2 * fix: adjust helper string in machine_common * fix: adjust helper string in machine_common * remote,test: remove .dockerignore which is a symlink * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2 * fix: adjust helper string in machine_common * vendor: update github.com/coreos/go-systemd/v22 to latest main * CI: default to sqlite * vendor: update c/common * check system connections before machine init * Consume OCI images for machine image * freebsd: drop dead code * libpod: make removePodCgroup linux specific * containers: drop special handling for ErrCgroupV1Rootless * compose: fix compose provider debug message * image: replace GetStoreImage with ResolveReference * vendor: bump c/image to 373c52a9466f * Refactor machine socket mapping * AppleHV: Fix machine rm error message * Add status messages to podman --remote commit * End-of-Life policy for github issues * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10 * Support passing of Ulimits as -1 to mean max * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4 * fix(deps): update github.com/crc-org/vfkit digest to f3c783d * Log gvproxy and server9 to file on log-level=debug * Change to using gopsutil for cross-OS process ops * Initial addition of 9p code to Podman ... changelog too long, skipping 294 lines ... * Use url with scheme and path for the unix address ==== polkit-gnome ==== - Use %autosetup instead of %setup/%patch. ==== python-Pygments ==== Version update (2.16.1 -> 2.17.2) - update to 2.17.2: * Fix a packaging issue on macOS * Updated lexers: * TOML: Fix bug making lexing of single-quoted strings too eager * Cypher: fix comment matching, add missing keywords * Fortran: add ``elseif`` keyword * Lean: make it available as ``lean3``, in preparation for * a possible switch to ``lean`` highlighting as Lean 4 * JSON: add MIME types and file extensions for several line- delimited JSON formats * Nix: many improvements * OCaml: Add ``and`` keyword, remove ``value`` from keywords * Python: add ``starlark`` and ``bazel`` aliases * Snowball: Treat ``len`` like ``size`` * Spice: add ``panic`` keyword and ``->`` operator * squid.conf: fix catastrophic backtracking * TOML: rewritten, with many fixes * Turtle: support blank nodes * Wikitext: fix erroneous highlighting of LanguageConverter markup * CMake: support ``[=[ bracketed arguments ]=]``` * Fix ctags support and tests * Include ``Lexer.add_filter`` in the documentation * Add a ``Lean3Lexer`` alias * The ``pygments.styles`` module contains a new ``STYLES`` variable with a dictionary of built-in styles. The old ``STYLE_MAP`` variable, which uses a different format, is kept for backwards compatibility. * On Windows, add a new installation extra (``windows- terminal``) which pulls in dependencies for colored console output. See :doc:`cmdline` for more details. * Support more file types in ``autopygmentize`` script * Change color of numbers in ``rrt`` style * Fix error when trying to look up plugin formatters by file extension of the output format * Use Hatchling as a build backend instead of setuptools. * This change is transparent to most users. Distribution packagers who build without build isolation need to add hatchling as a build dependency and remove setuptools. People downloading source distributions and wheels from PyPI directly should note that they now have ``pygments`` in their file names instead of ``Pygments``. * Improve the test framework to also check for lost tokens when processing the snippets and example files * Improve the *Dracula* style definition to make it easier to maintain ==== python-SQLAlchemy ==== Version update (2.0.21 -> 2.0.23) - update to 2.0.23: * https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.23 * https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.22 ==== python-certifi ==== Version update (2023.7.22 -> 2023.11.17) - update to 2023.11.17: Added certs: * Subject: CN=TrustAsia Global Root CA G3 O=TrustAsia Technologies, Inc. * Subject: CN=TrustAsia Global Root CA G4 O=TrustAsia Technologies, Inc. * Subject: CN=CommScope Public Trust ECC Root-01 O=CommScope * Subject: CN=CommScope Public Trust ECC Root-02 O=CommScope * Subject: CN=CommScope Public Trust RSA Root-01 O=CommScope * Subject: CN=CommScope Public Trust RSA Root-02 O=CommScope Removed certs: * Subject: CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 ==== python-cryptography ==== Version update (41.0.5 -> 41.0.7) - update to 41.0.7 (CVE-2023-49083, bsc#1217592): * Fixed compilation when using LibreSSL 3.8.2. * Fixed a null-pointer-dereference and segfault that could occur when loading certificates from a PKCS#7 bundle. Credit to **pkuzco** for reporting the issue. **CVE-2023-49083** ==== python-gevent ==== Version update (23.9.0 -> 23.9.1) - update to 23.9.1: * Require greenlet 3.0 on Python 3.11 and Python 3.12; greenlet 3.0 is recommended for all platforms. ==== python-greenlet ==== Version update (3.0.0 -> 3.0.1) - update to 3.0.1: * Fix a potential crash on Python 3.8 at interpreter shutdown time. This was a regression from earlier 3.0.x releases. ==== python-httpx ==== Version update (0.25.0 -> 0.25.2) - update to 0.25.2: * Add missing type hints to few `__init__()` methods. (#2938) * Add support for Python 3.12. (#2854) * Add support for httpcore 1.0 (#2885) * Raise `ValueError` on `Response.encoding` being set after `Response.text` has been accessed. (#2852) - drop newer-httpcore.patch (upstream) ==== python-idna ==== Version update (3.4 -> 3.6) - update to 3.6: * Fix regression to include tests in source distribution. * Update to Unicode 15.1.0 * String codec name is now "idna2008" as overriding the system codec "idna" was not working. * Fix typing error for codec encoding * "setup.cfg" has been added for this release due to some downstream * lack of adherence to PEP 517. Should be removed in a future release so please prepare accordingly. * Removed reliance on a symlink for the "idna-data" tool to comport with PEP 517 and the Python Packaging User Guide for sdist archives. * Added security reporting protocol for project ==== python-jsonpatch ==== Version update (1.32 -> 1.33) - update 1.33: * fix invalid remove index * remove unused import * feat(jsondiff): Add support for preserving Unicode characters ==== python-jsonpointer ==== Version update (2.3 -> 2.4) - update to 2.4: * migrate to github actions ==== python-pyOpenSSL ==== Version update (23.2.0 -> 23.3.0) - update to 23.3.0: * Dropped support for Python 3.6. * The minimum ``cryptography`` version is now 41.0.5. * Removed ``OpenSSL.crypto.loads_pkcs7`` and ``OpenSSL.crypto.loads_pkcs12`` which had been deprecated for 3 years. * Added ``OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT`` to allow legacy insecure renegotiation between OpenSSL and unpatched servers. * Deprecated ``OpenSSL.crypto.PKCS12`` (which was intended to have been deprecated at the same time as ``OpenSSL.crypto.load_pkcs12``). * Deprecated ``OpenSSL.crypto.NetscapeSPKI``. * Deprecated ``OpenSSL.crypto.CRL`` * Deprecated ``OpenSSL.crypto.Revoked`` * Deprecated ``OpenSSL.crypto.load_crl`` and ``OpenSSL.crypto.dump_crl`` * Deprecated ``OpenSSL.crypto.sign`` and ``OpenSSL.crypto.verify`` * Deprecated ``OpenSSL.crypto.X509Extension`` * Changed ``OpenSSL.crypto.X509Store.add_crl`` to also accept * ``cryptography``'s ``x509.CertificateRevocationList`` arguments in addition * to the now deprecated ``OpenSSL.crypto.CRL`` arguments. * Fixed ``test_set_default_verify_paths`` test so that it is skipped if no network connection is available. ==== python-pyasn1 ==== Version update (0.5.0 -> 0.5.1) - update to 0.5.1: * Added support for PyPy 3.10 and Python 3.12 * Updated RTD configuration to include a dummy index.rst redirecting to contents.html, ensuring compatibility with third-party documentation and search indexes. * Fixed the API breakage wih decoder.decode(substrateFun=...). * A substrateFun passed to ``decoder.decode()`` can now be either v0.4 Non-Streaming or v0.5 Streaming. pyasn1 will detect and handle both cases transparently. * A substrateFun passed to one of the new streaming decoders is * still expected to be v0.5 Streaming only. ==== python-pycryptodome ==== Version update (3.18.0 -> 3.19.0) - update to 3.19.0: * The ``update()`` methods of TupleHash128 and TupleHash256 objects can now hash multiple items (byte strings) at once. * Added support for ECDH, with ``Crypto.Protocol.DH``. * GH#754: due to a bug in ``cffi``, do not use it on Windows with Python 3.12+. ==== python-simplejson ==== Version update (3.19.1 -> 3.19.2) - update to 3.19.2: * Updated test & build matrix to include Python 3.12 ==== python-zipp ==== Version update (3.15.0 -> 3.17.0) - update to 3.17.0: * Added ``CompleteDirs.inject`` classmethod to make available for use elsewhere. * Avoid matching path separators for '?' in glob. * In ``Path.match``, Windows path separators are no longer honored. The fact that they were was incidental and never supported. (#92) * Fixed name/suffix/suffixes/stem operations when no filename is present and the Path is not at the root of the zipfile. (#96) * Reworked glob utilizing the namelist directly. (#101) * Replaced the ``fnmatch.translate`` with a fresh glob-to-regex translator for more correct matching behavior. (#98) * Require Python 3.8 or later. ==== rubygem-nokogiri ==== Version update (1.15.4 -> 1.15.5) - 1.15.5: [#]# 1.15.5 / 2023-11-17 [#]## Dependencies * [CRuby] Vendored libxml2 is updated to v2.11.6 from v2.11.5. For details please see https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.11.6 * [CRuby] Vendored libxslt is updated to v1.1.39 from v1.1.38. For details please see https://gitlab.gnome.org/GNOME/libxslt/-/releases/v1.1.39 ==== rubygem-unf_ext ==== Version update (0.0.8.2 -> 0.0.9.1) - # Changelog [#]# [0.0.9.1](https://github.com/knu/ruby-unf_ext/tree/v0.0.9.1) (2023-11-16) [Full Changelog](https://github.com/knu/ruby-unf_ext/compare/v0.0.9...v0.0.9.1) - Fix use of designated initializers. [\#75](https://github.com/knu/ruby-unf_ext/pull/75) ([igorpeshansky](https://github.com/igorpeshansky)) [#]# [0.0.9](https://github.com/knu/ruby-unf_ext/tree/v0.0.9) (2023-11-11) [Full Changelog](https://github.com/knu/ruby-unf_ext/compare/v0.0.8.2...v0.0.9) - Use the newer TypedData extension API [\#72](https://github.com/knu/ruby-unf_ext/pull/72) ([casperisfine](https://github.com/casperisfine)) - Update Actions - updates OS's, add Ruby 3,2, etc [\#71](https://github.com/knu/ruby-unf_ext/pull/71) ([MSP-Greg](https://github.com/MSP-Greg)) - Add cross compilation for Ruby 3.2 [\#69](https://github.com/knu/ruby-unf_ext/pull/69) ([johnnyshields](https://github.com/johnnyshields)) ==== system-config-printer ==== Subpackages: python3-cupshelpers system-config-printer-common system-config-printer-dbus-service udev-configure-printer - Use %autosetup -p1 instead of multiple %patch lines. Allows us to get rid of deprecated %patchN. ==== thin-provisioning-tools ==== - Update vendored dependencies ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - introduced n_dont_sign_java_client.patch and changed n_tigervnc-date-time.patch to allow the build to be reproducible (bsc#1208478): * Dont sign the Java client so the jar file won't contain a signed file with a variable timestamp. * The signing was necessary for accessing the system clipboard when the Java client runs as an applet. (This shouldn't harm due to the deprecation of Java applets was done in version 9). ==== tracker-miners ==== Subpackages: tracker-miner-files - Use %patch -p N instead of deprecated %patchN. ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Remove /etc/filesystem, the content is outdated (/etc cleanup, [jsc#PED-240]) - Add libuuid-avoid-truncate-clocks.txt-to-improve-performance.patch ==== util-linux-systemd ==== - Remove /etc/filesystem, the content is outdated (/etc cleanup, [jsc#PED-240]) - Add libuuid-avoid-truncate-clocks.txt-to-improve-performance.patch ==== vte ==== - Use %patch -p N instead of deprecated %patchN. ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Adjust path to (openSUSE renamed) gst-plugin-scanner in the code using sed. ==== webkit2gtk4 ==== Subpackages: libjavascriptcoregtk6_0-1 libwebkitgtk6_0-4 webkitgtk-6_0-injected-bundles - Adjust path to (openSUSE renamed) gst-plugin-scanner in the code using sed. ==== xdg-desktop-portal ==== Version update (1.18.1 -> 1.18.2) - Update to version 1.18.2: + Pass the token to the OpenURI portal and, when missing, an empty string. + Fix various memory and file descriptor leaks in the Document portal. + Make files and folders openend with the Document portal close properly. This should fix cases where the Document portal prevented external devices from unmounting, due to files inside them not getting closed after applications stop using them. + Implement FUSE getlk and setlk callbacks.This should enable using sqlite3 through the Document portal. + Properly resolve fd symlinks before opening them with O_NOFOLLOW. + Fix cases where the portal id is assumed to match the .desktop file name. + Allow sending directories in the file transfer portal. This should make it possible to, among other things, drag and drop folders and files simultaneously from and to sandboxed applications. + Fallback to a hardcoded check to xdg-desktop-portal-gtk in the absence of any other portal or configuration file, as a last resort mechanism. + Various smaller fixes to the build system. ==== xdg-desktop-portal-gnome ==== Version update (45.0 -> 45.1) - Update to version 45.1: + accountdialog: Fix crash when pressing Escape + Send remote file URIs as local FUSE URIs + Various fixes to screencast and input capture + Expose org.gnome.desktop.calendar through the Settings portal + Put dialogs in separate window groups + Updated translations. ==== yast2-core ==== Version update (5.0.0 -> 5.0.1) - Do not test YCP on non-UTF-8 strings (bsc#1217523) - 5.0.1 ==== zenity ==== Version update (3.99.2 -> 3.99.90) - Update to version 3.99.90: + build: Make building manpage dependent upon manpage option + text: Handle long inputs properly + colview: Use g_signal_connect_object + tree/colview: Return correct value when filtered using search; code cleanups + colview: Add missing declaration to header + build: - Make implicit declarations an error - Make zenity4 compile against gtk 4.12 without deprecation warnings + tree: - Fix reading input from a named pipe - --checklist or --radiolist with < 2 cols should be an error - Fix output for non-check/radio multiple selections + util: Replace gtk_window_destroy() with gtk_application_remove_window(). + Updated translations.