Packages changed: SDL2 (2.28.4 -> 2.28.5) avahi avahi-glib2 certmonger ell (0.58 -> 0.59) fde-tools (0.7.1 -> 0.7.2) fwupd (1.8.17 -> 1.9.7) gdm git (2.42.0 -> 2.42.1) gjs glslang gnome-control-center gnome-shell (45.0 -> 45.1) gnome-shell-extensions (45.0 -> 45.1) gpg2 json-c (0.16 -> 0.17) kdump (1.9.7 -> 1.9.8) kio-fuse ksystemstats5 (5.27.8 -> 5.27.9) libHX (4.15 -> 4.16) libappindicator-gtk3 libmodulemd (2.14.0 -> 2.15.0) libostree (2023.6 -> 2023.7) libshumate (1.1.1 -> 1.1.2) libvirt (9.8.0 -> 9.9.0) libxml2 (2.10.4 -> 2.11.5) libxml2-python (2.10.4 -> 2.11.5) mutter (45.0+45 -> 45.1) nbdkit (1.36.0 -> 1.36.1) okular openldap2 (2.6.4 -> 2.6.6) openldap2-contrib-src (2.6.4 -> 2.6.6) p11-kit (0.25.1 -> 0.25.2) patterns-base pipewire (0.3.83 -> 0.3.84) polkit-default-privs (1550+20231006.28f05f1 -> 1550+20231103.3b4a82f) postgresql16 publicsuffix (20230930 -> 20231028) python-authheaders (0.14.1 -> 0.15.3) python-httpx python-libvirt-python (9.8.0 -> 9.9.0) python-mailman (3.3.8 -> 3.3.9) qt6-base raptor (2.0.15 -> 2.0.16) redis (7.2.2 -> 7.2.3) redland rubygem-actioncable-7.0 (7.0.5.1 -> 7.0.8) rubygem-actionmailer-7.0 (7.0.5.1 -> 7.0.8) rubygem-actionpack-7.0 (7.0.5.1 -> 7.0.8) rubygem-actionview-7.0 (7.0.5.1 -> 7.0.8) rubygem-activejob-7.0 (7.0.5.1 -> 7.0.8) rubygem-activemodel-7.0 (7.0.5.1 -> 7.0.8) rubygem-activesupport-7.0 (7.0.5.1 -> 7.0.8) rubygem-addressable (2.8.4 -> 2.8.5) rubygem-bcrypt (3.1.18 -> 3.1.19) rubygem-concurrent-ruby (1.1.10 -> 1.2.2) rubygem-erubi (1.11.0 -> 1.12.0) rubygem-ffi (1.15.5 -> 1.16.3) rubygem-googleapis-common-protos-types (1.4.0 -> 1.9.0) rubygem-i18n (1.12.0 -> 1.14.1) rubygem-listen (3.7.1 -> 3.8.0) rubygem-mini_portile2 (2.8.4 -> 2.8.5) rubygem-net-ssh (7.0.1 -> 7.2.0) rubygem-pairing_heap (1.0.0 -> 3.0.1) rubygem-public_suffix (5.0.0 -> 5.0.3) rubygem-ruby-dbus samba (4.19.2+git.322.7e9201cef5 -> 4.19.2+git.324.fa0b54b91b) sdbootutil (1+git20231023.873adb9 -> 1+git20231026.f43c33c) shaderc sssd systemd tracker-miners (3.6.1 -> 3.6.2) util-linux util-linux-systemd vlc (3.0.19 -> 3.0.20) webkit2gtk3 webkit2gtk3-soup2 xfconf (4.18.1 -> 4.18.3) yast2 (5.0.2 -> 5.0.3) yast2-installation (5.0.1 -> 5.0.2) yast2-storage-ng (5.0.3 -> 5.0.4) yast2-update (5.0.0 -> 5.0.1) === Details === ==== SDL2 ==== Version update (2.28.4 -> 2.28.5) - Update to release 2.28.5 * Added support for the HP HyperX Clutch Gladiate controller * Fixed a crash if a controller is disconnected while SDL is opening it * Fixed a crash on Linux if XInput2 isn't available at runtime ==== avahi ==== Subpackages: libavahi-client3 libavahi-common3 libavahi-core7 - Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470). ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470). ==== certmonger ==== - dbus-daemon is now split out into a separate package. ==== ell ==== Version update (0.58 -> 0.59) - Update to release 0.59 * Add l_safe_ato* functions to the exported symbol list. ==== fde-tools ==== Version update (0.7.1 -> 0.7.2) - Update to version 0.7.2 + Add help output for the command tpm-authorize + Improve the multi-devices support ==== fwupd ==== Version update (1.8.17 -> 1.9.7) Subpackages: fwupd-bash-completion libfwupd2 typelib-1_0-Fwupd-2_0 - Disable passim support for now. For openSUSE users this is likely less intereting that it would be for enterprise customers. - Update to versrion 1.9.7: + This release adds the following features: - Add support for child device requirements in metadata. - Allow to have more than one host BKC. - Delete BootNext as a post-reboot action to work around broken firmware. - Parse cabinet archives internally without libgcab. - Use close-ended mode for eMMC FFU to speed up firmware updates. + This release adds support for the following hardware: - Logitech Rally System devices. - More PixartRF HPAC devices. - More Synaptics Prometheus fingerprint readers. - Some Western Digital eMMC devices. - VIA VL830 and VL832. - Update to version 1.9.6: + This release adds the following features: - Add a launchd agent for macOS. - Add a new security attribute for BIOS capsule updates to be enabled. - Add functionality to fix specific host security attributes. - Add global information from the context into the report data. - Add support for coSWID payload sections. - Add support for parsing the EDID. - Allow adding only-quirk instance IDs from quirk files. - Install a sysusers.d systemd file when using - Dsystemd_unit_user. + For The changes of 1.9.0…1.9.5, please consult https://github.com/fwupd/fwupd/releases - Add pkgconfig(passim) BuildRequires: new dependency. - Pass -Dplugin_amdgpu=disabled to meson: not buildable just yet. - Pass -Dlaunchd=disabled to meson: launched is MacOS only. - Drop -Dplugin_dell=enabled meson parameter: no longer supported. - Drop fwupd-bsc1130056-change-shim-path.patch: no longer applicable. ==== gdm ==== Subpackages: gdm-schema gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0 - Rebase patches for SLE-15-SP6 (bsc#216595): + Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch + Rebase gdm-disable-gnome-initial-setup.patch + Rebase gdm-restart-session-when-X-server-restart.patch ==== git ==== Version update (2.42.0 -> 2.42.1) Subpackages: git-core git-email git-web perl-Git - git 2.24.1: * The usual number of bug fixes, including * Fix "git diff" exit code handling * Various fixes to the behavior of "rebase -i" when the command got interrupted by conflicting changes ==== gjs ==== Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Add 3cae384aaf15dec6653b1a5400032c2c2e5dc34c.patch: module: Canonicalize import specifier before inserting it in registry. - Explicitly BuildRequire /usr/bin/dbus-run-session: needed by the test suite. ==== glslang ==== - Fix include dirs for headers of SPIRV and StandAlone. According to the setting in %{_libdir}/cmake/glslang/glslang-targets.cmake, headers of SPIRV and StandAlone should be installed in %{_includedir}/External ==== gnome-control-center ==== Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces - Rebase gnome-control-center-disable-error-message-for-NM.patch, gnome-control-center-info-never-use-gnome-software.patch, gnome-control-center-more-power-button-actions.patch and gnome-control-center-bring-back-firewall-zone.patch(bsc#1216601). ==== gnome-shell ==== Version update (45.0 -> 45.1) Subpackages: gnome-extensions gnome-shell-calendar - Update to version 45.1: + Fix scroll handling on sliders + overview: Handle unredirection as part of the state transition + Handle DESKTOP windows during workspace animations + Fix unexpected focus changes with multi-window apps + Improve recording indicator in light style + Fix calendar popup shrinking on date changes + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Update to version 45.0+20: + workspaceAnimation: Handle DESKTOP windows + st/scroll-view: Use clutter_actor_get_effect() to get fade effect + overview: Handle unredirection in OverviewShown state machine + status/system: Use Intl to format battery percentage + slider: - Ignore left/right scroll directions - Fix check for emulated scroll events + Updated translations. - Add gnome-shell_nb_fix_trans.patch: Fix typo in translation breaking gnome-shell calendar overview. ==== gnome-shell-extensions ==== Version update (45.0 -> 45.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common - Update to version 45.1: + workspace-indicator: Fix initial preview visibility + screenshot-window-sizer: Fix cycling between sizes backwards + Misc. bug fixes and cleanups + Updated translations. ==== gpg2 ==== Subpackages: dirmngr - Fix the build in SLE and Leap by adding an exclude in the files section for the dirmngr's systemd user units. [jsc#PED-7093] ==== json-c ==== Version update (0.16 -> 0.17) - Update to 0.17: + New features: * json_patch: add first implementation only with patch application * Add --disable-static and --disable-dynamic options to the cmake-configure script. * Add -DBUILD_APPS=NO option to disable app build * Minimum cmake version is now 3.9 + Significant changes and bug fixes: * When serializing with JSON_C_TO_STRING_PRETTY set, keep the opening and closing curly or square braces on same line for empty objects or arrays. * Disable locale handling when targeting a uClibc system due to problems with its duplocale() function. * When parsing with JSON_TOKENER_STRICT set, integer overflow/underflow now result in a json_tokener_error_parse_number. Without that flag values are capped at INT64_MIN/UINT64_MAX. * Fix memory leak with emtpy strings in json_object_set_string * json_object_from_fd_ex: fail if file is too large (>=INT_MAX bytes) * Add back json_number_chars, but only because it's part of the public API. * Entirely drop mode bits from open(O_RDONLY) to avoid warnings on certain platforms. * Specify dependent libraries, including -lbsd, in a more consistent way so linking against a static json-c works better * Fix a variety of build problems and add & improve tests * Update RFC reference to https://www.rfc-editor.org/rfc/rfc8259 - Remove deprecated suse_version checks ==== kdump ==== Version update (1.9.7 -> 1.9.8) - upgrade to version 1.9.8 * drop obsolete dependency on systemd-sysvinit (bsc#1216745) ==== kio-fuse ==== - dbus-run-session now needs to be explicitly required for the test suite. ==== ksystemstats5 ==== Version update (5.27.8 -> 5.27.9) - Update to 5.27.9 * New bugfix release * For more details please see: * https://kde.org/announcements/plasma/5/5.27.9 - No code changes since 5.27.8 - dbus-1 no longer provides dbus-run-session, so BuildRequire it explicitly ==== libHX ==== Version update (4.15 -> 4.16) - Update to release 4.16 * Add HX_strtoull_nsec to parse time period and emit nanoseconds * doc: specify return value and semantics for HXio_fullread, HXio_fullwrite, HX_sendfile ==== libappindicator-gtk3 ==== Subpackages: libappindicator3-1 typelib-1_0-AppIndicator3-0_1 - Ensure the src.rpms have unique names between the multibuild flavors. - Disable mono bindings also when building gtk2 flavor: there seems to be no consumer left for this. ==== libmodulemd ==== Version update (2.14.0 -> 2.15.0) - Update to 2.15.0 + Add support for decompressing Zstandard-compressed YAML files + Remove a dependency on "file" library (libmagic) + Add a XML specification for in-YUM-repository metadata + Deprecate intents in modulemd-defaults specification + Fix a crash when converting a modulemd-packager object with a default profile and without a module name or stream to a module index + Fix parsing empty profiles + A specification for modulemd-v2 format was corrected to require a "content" license subtree only if the module build contains artifacts. + Double-quote strings in scalar YAML values when they look like a number + Warnings from g_str_equal() macro of glib2 about passing an unsigned char * to strcmp() were fixed ==== libostree ==== Version update (2023.6 -> 2023.7) Subpackages: libostree-1-1 - Update to version 2023.7: + support for a "transient etc" + HTTP layer now retries requests by default + a longstanding bug was fixed where ostree would still try to fetch "loose" objects even when we were doing a delta pull + Fix variety of clang-analyzer fixes (some false positives, some real memory leaks, etc) ==== libshumate ==== Version update (1.1.1 -> 1.1.2) Subpackages: libshumate-1_0-1 typelib-1_0-Shumate-1_0 - Update to version 1.1.2: + Fix using overlay map layers with different tile sizes than the reference source. ==== libvirt ==== Version update (9.8.0 -> 9.9.0) Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-libs - Update to libvirt 9.9.0 - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432 - Many incremental improvements and bug fixes, see https://libvirt.org/news.html#v9-9-0-2023-11-01 ==== libxml2 ==== Version update (2.10.4 -> 2.11.5) Subpackages: libxml2-2 libxml2-tools - Add python312.patch to make it compatible with python 3.12 https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226 - Use pyproject_wheel and pyproject_install macros instead of python_build, python_install ==== libxml2-python ==== Version update (2.10.4 -> 2.11.5) - Add python312.patch to make it compatible with python 3.12 https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226 - Use pyproject_wheel and pyproject_install macros instead of python_build, python_install ==== mutter ==== Version update (45.0+45 -> 45.1) - Update to version 45.1: + Fix filtering keybinding events in presence of grabs + Fix direct scanout support when using integer scaling + Fix capitalization of some keys when caps lock is on + Fix vsync regression + Fix visibility of software cursors when using direct scanout + Fix artifacts at the bottom of some surfaces + Discard monitor configs with fractional scale when unusable + Apply track point settings + xwayland: Enable XDG portal only when not nested + Inhibit real-time scheduling when mode setting + Don't delay frame updates after idle period + Fix running Xwayland in headless setup with nvidia driver + wayland: Send keyboard modifiers after the enter event + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Update to version 45.0+61: + backend: - Introduce helpers for turning from/to clutter/evdev buttons - Use helper to translate from/to clutter/evdev button codes + clutter/frame-clock: - Simplify next_presentation_time_us calculation - Start next update ASAP after idle period + cogl/onscreen: Add missing error untrap calls + input-capture: - Check barriers don't extend into nonexisting monitors - Fix off-by-one for barrier validation + renderer/native: - Add a new has_addfb2 property - Send modifiers even without AddFb2 + screen-cast/stream-src: - Assert that dmabuf handle lookup succeeds - Calculate stride after adding handle to hash table + tests/clutter/event-delivery: Avoid race with stage update + tests/clutter/frame-clock*: Use clutter_frame_get_target_presentation_time + wayland/dma-buf: Advertise INVALID modifier without AddFb2 + wayland: Send keyboard modifiers after the enter event + input-capture: Add more barrier tests, mostly for invalid barriers ==== nbdkit ==== Version update (1.36.0 -> 1.36.1) Subpackages: nbdkit-basic-filters nbdkit-basic-plugins nbdkit-curl-plugin nbdkit-nbd-plugin nbdkit-python-plugin nbdkit-server nbdkit-ssh-plugin - Update to version 1.36.1: * Version 1.36.1. * python: Document nbdkit.disconnect(force) helper function * python: List helper functions in alphabetical order * python: Clarify possible handle values returned by open() method * tests: Fix incorrect comment in tests * docs: Remove references to -U - when it is implicit ==== okular ==== - Rework patch that informs the user about missing postscript support and how to install it. Replace patch: * 0001-Inform-users-about-the-okular-spectre-package-in-the.patch with * 0001-Inform-users-about-the-okular-spectre-package.patch ==== openldap2 ==== Version update (2.6.4 -> 2.6.6) Subpackages: libldap-data libldap2 openldap2-client - Update to release 2.6.6 * Fixed libldap handling of TCP KEEPALIVE options * Fixed slapd callback handling with overlays that do extended operations ==== openldap2-contrib-src ==== Version update (2.6.4 -> 2.6.6) - Update to release 2.6.6 * Fixed libldap handling of TCP KEEPALIVE options * Fixed slapd callback handling with overlays that do extended operations ==== p11-kit ==== Version update (0.25.1 -> 0.25.2) Subpackages: libp11-kit0 p11-kit-tools - Update to 0.25.2: * fix error code checking of readpassphrase for --login option [#595] * build fixes [#594] * test fixes [#596] ==== patterns-base ==== Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-transactional_base patterns-base-x11 patterns-base-x11_enhanced - Do not recommend nscd anymore. NIS is being phased out and modern technologies like sssd are not compatible with it anyway. ==== pipewire ==== Version update (0.3.83 -> 0.3.84) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 0.3.84 (1.0RC4): * Highlights - Fix a regression with openal because the queued buffers in the stream were not reported correctly. - Fix a bug in port busy counters that could cause random silent links. - Fix a regression in echo-cancel because it was not reporting its streams as ASYNC. - Fix a JACK regression where not all ports were enumerated in all cases. - Many more fixes and improvements. * PipeWire - pw_stream now reports the queued buffers more accurately. This fixes a regression when using openal. (#3592) - The port busy counters were not updated correctly in some cases. This could lead to negotiation errors and silent links. (#3547) - Ignore latency maximum when forcing rate/quantum. (#3613) - Nodes can now be added to multiple groups and link-groups. (#3612) * Modules - The filter-chain now also handles notify port dependencies correctly. (#3596) - Filter-chain has support for new linear, clamp, recip, exp, log, mult, sine builtin plugins. - The echo-cancel module now correctly reports its playback and capture streams as ASYNC to avoid running out of buffers. (#3593) - It is now possible to specify an array of remote names to connect to with the native protocol. - module-rtp-sap and module-rtp-sink now try to bind to the specified interface. * SPA - The alsa plugin now removes the runtime properties such as period-num, period-size and max-latency when suspended. (#3613) * Bluetooth - BAP Locations/Context is now set on endpoints as required by new bluez. - Improve selection of BAP leader. * JACK - Add a jack_set_sample_rate() extension function. - Make sure we get the info of all nodes/ports before completing the jack_client_open() operation so that we can enumerate the ports correctly in all cases. (#3618) * GStreamer - Fix types of metadata in pipewiresink. - Also copy metadata in buffers in all cases. - Fix size allocation in bufferpool for compressed formats. - Don't stop streaming thread when unlinked. (#3620) * ALSA - The ALSA plugin now handles NULL values from mmap_areas. (#3600) - Disable the WebRTC-based echo canceller in big endian architectures since webrtc-audio-processing is not available there. ==== polkit-default-privs ==== Version update (1550+20231006.28f05f1 -> 1550+20231103.3b4a82f) - Update to version 1550+20231103.3b4a82f: * profiles: fwupd: add host-security-attr actions (bsc#1216832) * profiles: remove outdates sysprof2 actions * profiles: drop obsolete udisks2 bcache and zram actions ==== postgresql16 ==== Subpackages: libpq5 postgresql16-contrib postgresql16-server - boo#1216734: Revert the last change and make the devel package independend of all other subpackages except for the libs. ==== publicsuffix ==== Version update (20230930 -> 20231028) - Update to version 20231028: * util: gTLD data autopull updates for 2023-10-28 * AWS Submissions to the Public Suffix List - Q3 2023 * Add <4-8>.azurestaticapps.net DNS suffix ==== python-authheaders ==== Version update (0.14.1 -> 0.15.3) - Update to version 0.15.3 * https://github.com/ValiMail/authentication-headers/blob/0.15.3/CHANGES or the CHANGES file included in this package ==== python-httpx ==== - Add upstream newer-httpcore.patch * it only allows httpcore 1.0.0 in the pyproject.toml, no code changes ==== python-libvirt-python ==== Version update (9.8.0 -> 9.9.0) - Update to 9.9.0 - Add all new APIs and constants in libvirt 9.9.0 - jsc#PED-3279, jsc#PED-4931, jsc#PED-5432 ==== python-mailman ==== Version update (3.3.8 -> 3.3.9) - Require authheaders >= 0.15.2 - Update to version 3.3.9 * See https://gitlab.com/mailman/mailman/-/blob/v3.3.9/src/mailman/docs/NEWS.rst or the file NEWS.rst in this package - Removed mailman-fix-importlib-resources.patch ==== qt6-base ==== Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3 - Add upstream changes: * 0001-xcb-replace-a-warning-with-debug-info-in-qxcbconnect.patch (QTBUG-117820) * 0001-a11y-fix-race-condition-on-atspi-startup-on-Wayland.patch - Turn FEATURE_forkfd_pidfd off until QTBUG-117954 gets fixed ==== raptor ==== Version update (2.0.15 -> 2.0.16) - Add support for libxml 2.11.0+ * Added patch raptor-libxml2-2.11-support.patch - update to 2.0.16: * long list of accumulated bug, security and portability fixes * see https://librdf.org/raptor/RELEASE.html#rel2_0_16 - drop 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1: obsolete/upstream - ubsan.patch: refresh ==== redis ==== Version update (7.2.2 -> 7.2.3) - redis 7.2.3: - Fix file descriptor leak preventing deleted files from freeing disk space on replicas (#12693) - Fix a possible crash after cluster node removal (#12702) ==== redland ==== - Fix tests against latest raptor by cleaning up parser in each iteration. * Added patch redland-fix-tests.patch ==== rubygem-actioncable-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * No changes. [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * Fix Action Cable Redis configuration with sentinels. * Dmitriy Ivliev* ==== rubygem-actionmailer-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * No changes. [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-actionpack-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix `HostAuthorization` potentially displaying the value of the X_FORWARDED_HOST header when the HTTP_HOST header is being blocked. * Hartley McGuire*, *Daniel Schlosser* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-actionview-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix `form_for` missing the hidden `_method` input for models with a namespaced route. * Hartley McGuire* * Fix `render collection: @records, cache: true` inside `jbuilder` templates The previous fix that shipped in `7.0.7` assumed template fragments are always strings, this isn't true with `jbuilder`. * Jean Boussier* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * Fix `render collection: @records, cache: true` to cache fragments as bare strings Previously it would incorrectly cache them as Action View buffers. * Jean Boussier* * Don't double-encode nested `field_id` and `field_name` index values Pass `index: @options` as a default keyword argument to `field_id` and `field_name` view helper methods. * Sean Doyle* [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-activejob-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix Active Job log message to correctly report a job failed to enqueue when the adapter raises an `ActiveJob::EnqueueError`. * Ben Sheldon* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * No changes. [#]# Rails 7.0.6 (June 29, 2023) ## * Fix error Active Job passed class with `permitted?`. * Alex Baldwin* ==== rubygem-activemodel-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * No changes. [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7 (August 09, 2023) ## * Error.full_message now strips ":base" from the message. * zzak* * Add a load hook for `ActiveModel::Model` (named `active_model`) to match the load hook for `ActiveRecord::Base` and allow for overriding aspects of the `ActiveModel::Model` class. [#]# Rails 7.0.6 (June 29, 2023) ## * No changes. ==== rubygem-activesupport-7.0 ==== Version update (7.0.5.1 -> 7.0.8) - ## Rails 7.0.8 (September 09, 2023) ## * Fix `TimeWithZone` still using deprecated `#to_s` when `ENV` or `config` to disable it are set. * Hartley McGuire* * Fix CacheStore#write_multi when using a distributed Redis cache with a connection pool. Fixes [#48938](https://github.com/rails/rails/issues/48938). * Jonathan del Strother* [#]# Rails 7.0.7.2 (August 22, 2023) ## * No changes. [#]# Rails 7.0.7.1 (August 22, 2023) ## * Use a temporary file for storing unencrypted files while editing [CVE-2023-38037] [#]# Rails 7.0.7 (August 09, 2023) ## * Fix `Cache::NullStore` with local caching for repeated reads. * fatkodima* * Fix `to_s` with no arguments not respecting custom `:default` formats * Hartley McGuire* * Fix `ActiveSupport::Inflector.humanize(nil)` raising ``NoMethodError: undefined method `end_with?' for nil:NilClass``. * James Robinson* * Fix `Enumerable#sum` for `Enumerator#lazy`. * fatkodima*, *Matthew Draper*, *Jonathan Hefner* * Improve error message when EventedFileUpdateChecker is used without a compatible version of the Listen gem * Hartley McGuire* [#]# Rails 7.0.6 (June 29, 2023) ## * Fix `EncryptedConfiguration` returning incorrect values for some `Hash` methods * Hartley McGuire* * Fix arguments being destructed `Enumerable#many?` with block. * Andrew Novoselac* * Fix humanize for strings ending with id. * fatkodima* ==== rubygem-addressable ==== Version update (2.8.4 -> 2.8.5) - # Addressable 2.8.5 - Fix thread safety issue with encoding tables ([#515]) - Define URI::NONE as a module to avoid serialization issues ([#509]) - Fix YAML serialization ([#508]) [#508]: https://github.com/sporkmonger/addressable/pull/508 [#509]: https://github.com/sporkmonger/addressable/pull/509 [#515]: https://github.com/sporkmonger/addressable/pull/515 ==== rubygem-bcrypt ==== Version update (3.1.18 -> 3.1.19) - 3.1.19 June 22 2023 - Deprecate passing the third argument to `BCrypt::Engine.hash_secret` [GH #207 by @sergey-alekseev] - Add GC guards so the C compiler won't optimize out references [GH #270] ==== rubygem-concurrent-ruby ==== Version update (1.1.10 -> 1.2.2) - 1.2.2: concurrent-ruby 1.2.2: * (#993) Fix arguments passed to `Concurrent::Map`'s `default_proc`. 1.2.1: concurrent-ruby 1.2.1: * (#990) Add missing `require 'fiber'` for `FiberLocalVar`. * (#989) Optimize `Concurrent::Map#[]` on CRuby by letting the backing Hash handle the `default_proc`. ==== rubygem-erubi ==== Version update (1.11.0 -> 1.12.0) - === 1.12.0 (2022-12-22) * Use erb/escape for faster html escaping if available (jeremyevans) * Default :freeze_template_literals option to false if running with --enable-frozen-string-literal (casperisfine) (#35) ==== rubygem-ffi ==== Version update (1.15.5 -> 1.16.3) - 1.16.3 / 2023-10-04 Fixed: * Fix gcc error when building on CentOS 7. #1052 * Avoid trying to store new DataConverter type in frozen TypeDefs hash. #1057 1.16.2 / 2023-09-25 Fixed: * Handle null pointer crash after fork. #1051 1.16.1 / 2023-09-24 Fixed: * Fix compiling the builtin libffi. #1049 1.16.0 / 2023-09-23 Fixed: * Fix an issue with signed bitmasks when using flags on the most significant bit. #949 * Fix FFI::Pointer#initialize using NUM2LL instead of NUM2ULL. * Fix FFI::Type#inspect to properly display the constant name. #1002 * Use libffi closure allocations on hppa-Linux. #1017 Previously they would segfault. * Fix class name of Symbol#inspect. * Fix MSVC support of libtest. #1028 * Fix attach_function of functions ending in ? or ! #971 Added: * Convert all C-based classes to TypedData and use write barriers. #994, #995, #996, #997, #998, #999, #1000, #1001, #1003, #1004, #1005, #1006, #1007, #1008, #1009, #1010, #1011, #1012 This results in less pressure on the garbage collector, since the objects can be promoted to the old generation, which means they only get marked on major GC. * Implement `ObjectSpace.memsize_of()` of all C-based classes. * Make FFI Ractor compatible. #1023 Modules extended per `extend FFI::Library` need to be frozen in order to be used by non-main Ractors. This can be done by calling `freeze` below of all C interface definitions. * In a Ractor it's possible to: * load DLLs and call its functions, access its global variables * use builtin typedefs * use and modify ractor local typedefs * define callbacks * receive async callbacks from non-ruby threads * use frozen FFI::Library based modules with all attributes (enums, structs, typedefs, functions, callbacks) * invoke frozen functions and callbacks defined in the main Ractor * use FFI::Struct definitions from the main Ractor * In a Ractor it's impossible to: * create new FFI::Library based modules * create new FFI::Struct definitions * use custom global typedefs * use non-frozen FFI::Library based modules * Allow type retrieval of attached functions+variables. #1023 * Make FFI classes `GC.compact` friendly. #1021 * Update libffi and disable custom trampoline when using libffi closure allocation. #1020 This is because libffi changed the way how closures are allocated to static trampolines. * Add types.conf for loongarch64-linux. #943 * Add types.conf for sw_64-linux (Shen Wei 64-bit, based on Alpha). #1018 * Add support for aarch64-windows. #1035 * Windows: Update LoadLibrary error message to include error code. #1026 * Allow private release method for FFI::ManagedStruct and FFI::AutoPointer. #1029 * Add support for passing ABI version to FFI.map_library_name. #963 This adds the new class FFI::LibraryPath . * Add support for ruby-3.2 to windows binary gem. #1047 * Enable debug symbols for `rake compile` builds to ease debugging. #1048 Removed: * Remove allocator of AbstractMemory. #1013 This disables AbstractMemory.new, which has no practical use. * Remove unused FFI::SizeTypes. #1022 ==== rubygem-googleapis-common-protos-types ==== Version update (1.4.0 -> 1.9.0) - ### 1.9.0 (2023-09-19) [#]### Features * Added the "IDENTIFIER" field behavior ([#181](https://github.com/googleapis/common-protos-ruby/issues/181)) [#]## 1.8.0 (2023-08-07) [#]### Features * Support for API method policies ([#175](https://github.com/googleapis/common-protos-ruby/issues/175)) * Updated generated protobuf output to use binary descriptors for better future compatibility ([#165](https://github.com/googleapis/common-protos-ruby/issues/165)) [#]## 1.7.0 (2023-07-16) [#]### Features * Support for a few additional client library organizations ([#141](https://github.com/googleapis/common-protos-ruby/issues/141)) [#]## 1.6.0 (2023-04-24) [#]### Features * Added Google::Rpc::Context::AttributeContext * Added Google::Rpc::Context::AuditContext * Added dotnet-specific fields to API language settings * Added overrides_by_request_protocol to api.BackendRule * Added proto_reference_documentation_uri to api.Publishing * Added SERVICE_NOT_VISIBLE and GCP_SUSPENDED error reason values [#]## 1.5.0 (2023-01-04) [#]### Features * Added "cookie" JwtLocation * Added protos related to client library publishing * Added several new error reasons * Added protos describing HTTP requests and responses ==== rubygem-i18n ==== Version update (1.12.0 -> 1.14.1) - 1.14.1: [#]# Included in this release * Simplify the "Translation missing" message when default is an empty Array by @amatsuda in https://github.com/ruby-i18n/i18n/pull/662 [#]# Maintenance stuff * Skip CIing on jruby against Rails 5.2 by @amatsuda in https://github.com/ruby-i18n/i18n/pull/664 * A fix for failing CI against edge Rails by @amatsuda in https://github.com/ruby-i18n/i18n/pull/663 * Add documentation hint for fallback values by @mark-a in https://github.com/ruby-i18n/i18n/pull/659 * CI against Ruby 3.2 by @amatsuda in https://github.com/ruby-i18n/i18n/pull/665 * Fix build warnings in the CI by using actions/checkout@v3 by @amatsuda in https://github.com/ruby-i18n/i18n/pull/666 Thanks to @amatsuda for these PRs! [#]# New Contributors * @mark-a made their first contribution in https://github.com/ruby-i18n/i18n/pull/659 * *Full Changelog**: https://github.com/ruby-i18n/i18n/compare/v1.14.0...v1.14.1 1.14.0: [#]# What's Changed * fix LazyLoadable#available_locales duplicating locales by @ccutrer in https://github.com/ruby-i18n/i18n/pull/655 * Add more helpful translation error when :default option is provided. by @Nerian in https://github.com/ruby-i18n/i18n/pull/654 * Fix I18n::Locale::Fallbacks not initializing itself on Ruby 3 by @yheuhtozr in https://github.com/ruby-i18n/i18n/pull/653 * Fix I18n.t when locale contains separator by @tubaxenor in https://github.com/ruby-i18n/i18n/pull/656 * **This reverts a change from #651, that was released in v1.13.0** [#]# New Contributors * @ccutrer made their first contribution in https://github.com/ruby-i18n/i18n/pull/655 * @Nerian made their first contribution in https://github.com/ruby-i18n/i18n/pull/654 * @yheuhtozr made their first contribution in https://github.com/ruby-i18n/i18n/pull/653 * @tubaxenor made their first contribution in https://github.com/ruby-i18n/i18n/pull/656 * *Full Changelog**: https://github.com/ruby-i18n/i18n/compare/v1.13.0...v1.14.0 1.13.0: [#]# What's Changed * Fix symbol resolving with pluralization by @movermeyer in https://github.com/ruby-i18n/i18n/pull/636 * Updating DEFAULT_APPROXIMATIONS with capitalised German Eszett character for consistency by @lucapericlp in https://github.com/ruby-i18n/i18n/pull/627 * Fix load_path example in README.md by @nickcampbell18 in https://github.com/ruby-i18n/i18n/pull/642 * Add support for meridian indicators on `Date` objects by @movermeyer in https://github.com/ruby-i18n/i18n/pull/640 * Make translations loading thread-safe by @mensfeld in https://github.com/ruby-i18n/i18n/pull/644 * Get closer to full CLDR pluralization support by @movermeyer in https://github.com/ruby-i18n/i18n/pull/634 * Allow passing scope argument to exists? by @misdoro in https://github.com/ruby-i18n/i18n/pull/647 * Revert #503 changes for `Backend::Base` by @movermeyer in https://github.com/ruby-i18n/i18n/pull/637 * Properly stub constants by @fatkodima in https://github.com/ruby-i18n/i18n/pull/650 * Optimize `I18n.t` by @fatkodima in https://github.com/ruby-i18n/i18n/pull/651 * Return same string object when no interpolations were made by @fatkodima in https://github.com/ruby-i18n/i18n/pull/649 [#]# New Contributors * @lucapericlp made their first contribution in https://github.com/ruby-i18n/i18n/pull/627 * @nickcampbell18 made their first contribution in https://github.com/ruby-i18n/i18n/pull/642 * @mensfeld made their first contribution in https://github.com/ruby-i18n/i18n/pull/644 * @misdoro made their first contribution in https://github.com/ruby-i18n/i18n/pull/647 * *Full Changelog**: https://github.com/ruby-i18n/i18n/compare/v1.12.0...v1.13.0 ==== rubygem-listen ==== Version update (3.7.1 -> 3.8.0) - 3.8.0: - Use the defined type to the default value of `directory` (#566) @y-yagi - update ruby version matrix to drop 2.4, 2.5 and add 3.2 (#567) @ColinDKelley - Update ruby version 3.0.4 (#562) @vickyprahastra - Raise argument error when passing a file path (#563) @janko - Fix kwargs matching with rspec-mock 3.12 and Ruby 3+ (#564) @voxik - Disable fail-fast for CI matrix (#555) @ybiquitous - Add Ruby 3.0/3.1 to CI (#554) @ybiquitous ==== rubygem-mini_portile2 ==== Version update (2.8.4 -> 2.8.5) - ### 2.8.5 / 2023-10-22 [#]### Added - New methods `#lib_path` and `#include_path` which point at the installed directories under `ports`. (by @flavorjones) - Add config param for CMAKE_BUILD_TYPE, which now defaults to `Release`. (#136 by @Watson1978) [#]### Experimental Introduce experimental support for `MiniPortile#mkmf_config` which sets up MakeMakefile variables to properly link against the recipe. This should make it easier for C extensions to package third-party libraries. (by @flavorjones) - With no arguments, will set up just `$INCFLAGS`, `$libs`, and `$LIBPATH`. - Optionally, if provided a pkg-config file, will use that config to more precisely set `$INCFLAGS`, `$libs`, `$LIBPATH`, and `$CFLAGS`/`$CXXFLAGS`. - Optionally, if provided the name of a static archive, will rewrite linker flags to ensure correct linkage. Note that the behavior may change slightly before official support is announced. Please comment on [#118](https://github.com/flavorjones/mini_portile/issues/118) if you have feedback. ==== rubygem-net-ssh ==== Version update (7.0.1 -> 7.2.0) - === 7.2.0 * Add debugging information for algorithm of pubkey in use [#918] === 7.2.0 rc1 * Allow IdentityAgent as option to Net::SSH.start [#912] === 7.2.0 beta1 * Support `chacha20-poly1305@opnessh.com` cypher if `RbNaCl` gem is installed [#908] === 7.1.0 * Accept pubkey_algorithms option when starting a new connection [#891] === 7.1.0 beta1 * Don't use the deprecated set_XXX methods on RSA keys. [#875] * Raise error when BCryptPbkdf fails [#876] === 7.0.1 * Drop leftover debug statement [#866] === 7.0.0 * BREAKING: Drop support for Ruby 2.5 * Fix decoding of ecdsa-sha2-nistp256 private keys [#657, #854] * Fix missing require [#855] * Support `~` in the path to the SSH agent's unix socket [#850] * Add support for RSA client authentication with SHA-2 [a45f54] * openssl: DSA: don't hardcode expected signature size, see ruby/openssl#483 [23a15c] * Internal housekeeping (rubocop, codecov, remove travis, adding/improving tests) ==== rubygem-pairing_heap ==== Version update (1.0.0 -> 3.0.1) - 3.0.1: [#] Fixed issues * `change_priority` could sometimes return `nil` instead of `self` 3.0.0: [#] Breaking changes - `#pop` returns `nil` on empty heap instead of raising an Error - `#get_priority` returns nil on empty heap instead of raising an Error [#] New methods - `PairingHeap::PairingHeap#include?` - `#each_with_priority` 2.0.0: [#] Breaking changes * Second argument of #push now defaults to the first argument ```ruby [#] it is now possible to write array.each { |el| heap.push(el) } [#] instead of array.each { |el| heap.push(el, el) } ``` * PairingHeap#pop_priority was separated to two methods; PairingHeap#pop_priority and PairingHeap#pop_with_priority, similarly to SimplePairingHeap [#] New methods * `#each` returns an iterator of heap elements. * `PairingHeap#get_priority_if_exists` returns a pair where first element is success flag, and second element is priority. ==== rubygem-public_suffix ==== Version update (5.0.0 -> 5.0.3) - ## 5.0.3 [#]## Fixed - Fixed automated release workflow. [#]# 5.0.2 [#]## Changed - Updated definitions. [#]# 5.0.1 [#]## Changed - Updated definitions. ==== rubygem-ruby-dbus ==== - Testsuite requires dbus-daemon and dbus-send which are now separate packages ==== samba ==== Version update (4.19.2+git.322.7e9201cef5 -> 4.19.2+git.324.fa0b54b91b) Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs - packaging: samba-tool domain provision requires python3-Markdown; (bsc#1216519). ==== sdbootutil ==== Version update (1+git20231023.873adb9 -> 1+git20231026.f43c33c) Subpackages: sdbootutil-rpm-scriptlets sdbootutil-snapper - Update to version 1+git20231026.f43c33c: * Fix generating initrd for random snapshots ==== shaderc ==== - Adjust for glslang-nonstd-devel switching paths ==== sssd ==== Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Offer the sssd.conf template as %doc (for examples, do actually see the "Examples" section of the sssd.conf(5) manpage) ==== systemd ==== Subpackages: libsystemd0 libudev1 systemd-boot systemd-container systemd-coredump udev - Disable utmp support The announcement can be found at: https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/MYIWGQEE54VJDBYXMQCEY7XKEAIUFLAU/ The user visible consequence of it is that /run/utmp file is no more created. systemd itself doesn't depend on utmp anymore since "shared/wall: use logind if build without utmp support" has been backported. ==== tracker-miners ==== Version update (3.6.1 -> 3.6.2) Subpackages: tracker-miner-files - Update to version 3.6.2: + Improvements to the seccomp jail, and fixes for spurious SIGSYS positives. + Use GDateTime to handle dates. + Updated translations. ==== util-linux ==== Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1 - Add patch: * setterm-resize-uninit-flags.patch ==== util-linux-systemd ==== - Add patch: * setterm-resize-uninit-flags.patch ==== vlc ==== Version update (3.0.19 -> 3.0.20) Subpackages: libvlc5 libvlccore9 vlc-codec-gstreamer vlc-lang vlc-noX vlc-qt vlc-vdpau - Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel + Decoders: - Fix crash when AV1 hardware decoder fails + Interface: - Fix annoying disappearance of the Windows fullscreen controller + Demuxers: - Fix potential security issue (OOB Write) on MMS:// by checking user size bounds ==== webkit2gtk3 ==== Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf renderer for NVIDIA proprietary drivers (boo#1216778). ==== webkit2gtk3-soup2 ==== Subpackages: libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles - Add webkit2gtk3-disable-dmabuf-nvidia.patch: disable DMABuf renderer for NVIDIA proprietary drivers (boo#1216778). ==== xfconf ==== Version update (4.18.1 -> 4.18.3) Subpackages: libxfconf-0-3 typelib-1_0-Xfconf-0 xfconf-lang - Fix usage of %%lang_package - Update to version 4.18.3 * cache: Fix overwritten error * cache: Fix uncached value - Fixes boo#1216682 - Update to version 4.18.2 * Cache property-not-found responses in XfconfCache * Don't reset scheduled save timer on every write * xfconf-query: Sort channel list (-l or -m alone) * docs: Fix transfer type of xfconf_list_channels() * docs: Add clarification about bindings - Use lang_package as bnc#513786 has been closed as fixed almost 8 years ago. ==== yast2 ==== Version update (5.0.2 -> 5.0.3) Subpackages: yast2-logs - Added Repository#refresh method (related to bsc#1215884) - 5.0.3 ==== yast2-installation ==== Version update (5.0.1 -> 5.0.2) - Refresh repositories with changed URL and reload them again to activate the changes (related to bsc#1215884) - 5.0.2 ==== yast2-storage-ng ==== Version update (5.0.3 -> 5.0.4) - Encryption method TpmFde to be used by Agama (and later by YaST) for setting up LUKS2 devices that are unlocked during boot using a TPM chip (gh#yast/yast-storage-ng#1088, related to bsc#1210512) - 5.0.4 ==== yast2-update ==== Version update (5.0.0 -> 5.0.1) - Drop the previously used repositories when going back to the partition selection at upgrade, this ensures the repositories are correctly reinitialized later (bsc#1215884) - 5.0.1