# changelog

author: Pavel Raiskup <praiskup@redhat.com> 1.110-1
changelog:
  - Add keys for el-10 rpmfusion-free and nonfree
  - Add symlinks to rpmfusion 42 and 43
  - Navy Linux GPG key Update


author: Neal Gompa <neal@gompa.dev> 1.112-1
changelog:
  - Add FreeBSD keys
  - Fix AlmaLinux name and alphabetical ordering of distros
  - Add AlmaLinux EPEL AltArch Key


author: Miroslav Suchý <msuchy@redhat.com> 1.115-1
changelog:
  - update copr keys
  - Update for openSUSE 16 keys
  - Update changelog
  - Microsoft: add 2025 & open tech keys
  - alpine-linux: Add loongarch64 key
  - fedora: Update rawhide symlink


author: Pavel Raiskup <pavel@raiskup.cz> 1.116-1
changelog:
  - Add CentOS PQC signing keys
  - Add RHEL PQC signing keys
  - suse: Update RPM-GPG-KEY-SuSE-SLE-12
  - Refresh CentOS SIG Extras key
  - Update CentOS SIG keys downlod script
  - Add missing CentOS SIG keys
  - Add new Slack key used by versions 4.47 and above
  - Add openSUSE Leap SLE imports
  - Add Slack key


author: Miroslav Suchý <msuchy@redhat.com> 1.119-1
changelog:
  - update copr keys
  - add: ultramarine repository keys
  - add: terra repository keys
  - update Google key block


author: Aurelien Bompard <abompard@fedoraproject.org> - 3.5.0-2
changelog:
  - Remove "-s" from the script shebangs (https://bugzilla.redhat.com/2272526)
  - Relax the dependency on jsonschema (https://bugzilla.redhat.com/2272967)


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Fabian Arrotin <arrfab@centos.org> - 1.36.1-1
changelog:
  - Bumped to upstream release 1.36.1
  - Modified conditional for sysusers dynamic kojibuilder user (rhel8 and above)


author: Packit <hello@packit.dev> - 4-1
changelog:
  Changes with 4
  ----------------
    * ci: pull osbuild from COPR (#3)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-09


author: Packit <hello@packit.dev> - 5-1
changelog:
  Changes with 5
  ----------------
    * Fixed cli pkg name in README.md (#8)
      * Author: Fabian Arrotin, Reviewers: Simon de Vlieger
    * ci: enable epel8 in packit (#6)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * many: replace `$arch` and `$buildarch` variable manually (COMPOSER-2507) (#10)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * readme updates (#7)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane

  — Somewhere on the Internet, 2025-04-16


author: Packit <hello@packit.dev> - 6-1
changelog:
  Changes with 6
  ----------------
    * build: include `arch` in artifact names (#12)
      * Author: Simon de Vlieger, Reviewers: Nobody

  — Somewhere on the Internet, 2025-04-17


author: Packit <hello@packit.dev> - 8-1
changelog:
  Changes with 8
  ----------------
    * builder: return `release` in results (#14)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-07-24


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Pavel Raiskup <praiskup@redhat.com> 42.4-1
changelog:
  - fix sysusers packaging practice once more
  - configuration file owned by `root:root`
  - Rocky Linux 10 configs added (label@rockylinux.org)
  - missing config for AlmaLinux Kitten x86_64_v2 added (jhernandez@cloudlinux.com)
  - config for AlmaLinux Kitten 10 x86_64_v2 added (jonathan@almalinux.org)
  - AlmaLinux 10 configs added (jonathan@almalinux.org)


author: Pavel Raiskup <praiskup@redhat.com> 43.2-1
changelog:
  - disable gpgcheck for EPEL [local] repos
  - make sure [local] repo is available in rhel+epel repos
  - Add Kylin OS 11 (negativo17@gmail.com)
  - Azure Linux (CBL Mariner) 2.0 is now EOL (negativo17@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 43.3-1
changelog:
  - Add openSUSE Leap 16.0 configurations (negativo17@gmail.com)
  - Update Kylin OS images and comments (negativo17@gmail.com)


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 43.4-1
changelog:
  - Disable bootstrap for riscv (j1.kyjovsky@gmail.com)
  - Add risc-v fedora chroots (j1.kyjovsky@gmail.com)
  - eol/epel-6: copy-paste ca-bundle from host (praiskup@redhat.com)
  - Fix aarch64 configuration for Azure Linux 3 (negativo17@gmail.com)


author: Pavel Raiskup <pavel@raiskup.cz> 43.5-1
changelog:
  - add PQ keys to rhel9 (msuchy@redhat.com)
  - Switch Mageia 10+ and Cauldron to DNF5 (ngompa@mageia.org)
  - EOL Fedora 41


author: Pavel Raiskup <pavel@raiskup.cz> 44.3-1
changelog:
  - the fedora-release-eln renamed to fedora-eln-release
  - Add config for Fedora 44 version of RISC-V port (marcin@juszkiewicz.com.pl)
  - set bootstrap_image_ready=True for AlmaLinux configs (andrew.lukoshko@gmail.com)
  - re-enable bootstrap images for x86_64_v2 AlmaLinux configs (andrew.lukoshko@gmail.com)
  - remove dependency on python3-dnf (msuchy@redhat.com)


author: Pavel Raiskup <pavel@raiskup.cz> 44.4-1
changelog:
  - Fixes #1761: Add Fedora Rawhide RISC-V (jmontleo@redhat.com)
  - configs: add Azure Linux 4.0 beta configuration (tobiasb@microsoft.com)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.1-1
changelog:
  - osbuild: Handle wsl2 images (lsedlar)
  - repoclosure: Clean up cache for dnf5 (lsedlar)
  - Ignore errors for rmtree after archive extraction (dhodovsk)
  - imagebuilder: accept `manifest_type` (supakeen)
  - Add a telemetry span over image building threads (lsedlar)
  - Add specific exception for skopeo copy (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.13.0-1
changelog:
  - phase/kiwi, phase/image-builder: xorrisofs (cmdr)
  - phase/kiwi, phase/image-builder: iso fields (cmdr)
  - imagebuilder,kiwibuild: fix failable wildcard arch expansion (lsedlar)
  - Improve Koji task ID discovery and logging (awilliam)
  - phases/buildinstall: remove unused non-lorax paths (awilliam)
  - Correct ostree_installer phase name in log messages (awilliam)
  - phase/imagebuilder: failable arches fix (cmdr)
  - Move image sanity checks from test phase to image-generating phases (lsedlar)
  - Update phase diagram (lsedlar)
  - Remove OSBS and ImageContainer phases (awilliam)
  - Drop size check for ISOs (lsedlar)
  - Support list of URLs for rpm_repo_mapping (hlin)
  - docs: modernize Sphinx conf.py (hlin)
  - kiwi: also include subvariant in failure logging (awilliam)
  - kiwi: include image profile in global logs and watch-task filenames
    (awilliam)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.14.0-1
changelog:
  - Add support for building boot.iso via image-builder and kiwibuild (supakeen)
  - phase/imagebuilder: vhd-compressed mapping (cmdr)


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.1.0-1
changelog:
  - Update to v25.1.0
  - Attempting using any methods that mutate an OpenSSL.SSL.Context after it
    has been used to create an OpenSSL.SSL.Connection will emit a warning. In
    a future release, this will raise an exception.


author: Jeremy Cline <jeremycline@linux.microsoft.com> - 25.3.0-1
changelog:
  - Update to 25.3.0
  - pyOpenSSL now sets SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER on connections by
    default, matching CPython’s behavior.
  - Added OpenSSL.SSL.Context.clear_mode.
  - Added OpenSSL.SSL.Context.set_tls13_ciphersuites to set the allowed TLS
    1.3 ciphers.
  - Added OpenSSL.SSL.Connection.set_info_callback


author: Jeremy Cline <jeremycline@microsoft.com> - 26.0.0-1
changelog:
  - Update to v26.0.0
  - Added support for using aws-lc instead of OpenSSL.
  - Properly raise an error if a DTLS cookie callback returned a cookie
    longer than DTLS1_COOKIE_LENGTH bytes. Previously this would result in a
    buffer-overflow. Credit to dark_haxor for reporting the issue.
    CVE-2026-27459
  - Added OpenSSL.SSL.Connection.get_group_name to determine which group name
    was negotiated.
  - Context.set_tlsext_servername_callback now handles exceptions raised in
    the callback by calling sys.excepthook and returning a fatal TLS alert.
    Previously, exceptions were silently swallowed and the handshake would
    proceed as if the callback had succeeded. Credit to Leury Castillo for
    reporting this issue. CVE-2026-27448


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2.4.0-19
changelog:
  - Disable tests, which require python-matplotlib, which in turn have an
  extensive list of BRs including tex, xorg-x11-server-Xvfb, inkscape, and
  half a dozen pyton-* pkgs. When all the BRs are satisfied we can enable
  tests again.


author: Carl George <carlwgeorge@fedoraproject.org> - 24.2.0-1
changelog:
  - Update to version 24.2.0 rhbz#2258307
  - Remove hatch-fancy-pypi-readme build-system dependency
  - Disable docs when building for RHEL (EPEL)


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Miro Hrončok <miro@hroncok.cz> - 20.26.6-1
changelog:
  - Update to 20.26.6
  - Fixes: rhbz#2188155
  - Removes support for Python 2.7 virtual environments
  - Removes support for Python 3.6 virtual environments


author: Karolina Surma <ksurma@redhat.com> - 20.31.2-2
changelog:
  - EPEL 10: Add support for Python 3.13
  - Add RPM Requires needed for Python 3.13
  - Search for the wheels in Python version specific directory


author: Miro Hrončok <mhroncok@redhat.com> - 4.2.0-16
changelog:
  - Subpackage python2-zope-event has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <miro@hroncok.cz> - 4.16.0-1
changelog:
  - Update to 4.16.0
  - https://tox.wiki/en/latest/changelog.html#v4-16-0-2024-07-02
  - Fixes: rhbz#2277427


