Packages changed:
  ImageMagick (7.1.1.17 -> 7.1.1.18)
  conmon
  container-selinux (2.215.0 -> 2.222.0)
  crypto-policies (20230614.5f3458e -> 20230920.570ea89)
  glib2
  grub2
  kbd (2.6.2 -> 2.6.3)
  libblockdev (3.0.2 -> 3.0.3)
  libdecor (0.1.1 -> 0.2.0)
  libnvme (1.4 -> 1.6)
  libwebp
  nvme-cli (2.4 -> 2.6)
  pam-config (2.8 -> 2.9)
  podman (4.6.2 -> 4.7.0)
  poppler
  poppler-qt5
  screen (4.9.0 -> 4.9.1)
  shadow
  suse-module-tools (16.0.35 -> 16.0.36)
  systemd (254.3 -> 254.5)
  xdg-desktop-portal-kde
  xdg-utils (1.1.3+20230831 -> 1.2.0~beta1+20230929)

=== Details ===

==== ImageMagick ====
Version update (7.1.1.17 -> 7.1.1.18)
Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10

- version update to 7.1.1.18
  * upstream changelog:
  https://github.com/ImageMagick/Website/blob/main/ChangeLog.md

==== conmon ====

- go 1.19 EOL, swith to go >= 1.20
  * [bsc#1215806]

==== container-selinux ====
Version update (2.215.0 -> 2.222.0)

- Update to version 2.222:
  * Allow containers to read/write inherited dri devices
- Update to version 2.221:
  * Allow containers to shutdown sockets inherited from container
    runtimes
  * Allow spc_t to use execmod libraries on container file systems
  * Add boolean to allow containers to read all cert files
  * More MLS Policy allow rules
  * Allow container runtimes using pasta bind icmp_socket to port_t
  * Fix spc_t transitions from container_runtime_domain

==== crypto-policies ====
Version update (20230614.5f3458e -> 20230920.570ea89)
Subpackages: crypto-policies-scripts

- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]
- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch
- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]

==== glib2 ====
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0

- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch

==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin

- Only build with fde-tpm-helper-rpm-macros for the architectures
  supporting the newer UEFI and TPM 2.0.
  * Also correct the location of %fde_tpm_update_requires
- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch
- Add the new BuildRequires for EFI builds for the better FDE
  support: fde-tpm-helper-rpm-macros
  + Also add the the macros to %post and %posttrans
- Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151)
  * arm64-Use-proper-memory-type-for-kernel-allocation.patch

==== kbd ====
Version update (2.6.2 -> 2.6.3)
Subpackages: kbd-legacy

- Update to version 2.6.3:
  - libkfont:
  * Don't look for fonts in the current directory.
  - showkey:
  * Add parameter to allow to change timeout.
  - po:
  * Update po files.

==== libblockdev ====
Version update (3.0.2 -> 3.0.3)
Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3

- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C

==== libdecor ====
Version update (0.1.1 -> 0.2.0)
Subpackages: libdecor-0-0

- Update to version 0.2.0:
  * Various bug and leak fixes.
  * New gtk plugin.
- Update URL and source to new home.
- Add pkgconfig(gtk-3.0) BuildRequires, new dependency.
- Use ldconfig_scriptlets macro for post(un) handling.

==== libnvme ====
Version update (1.4 -> 1.6)
Subpackages: libnvme-mi1 libnvme1

- Update to version 1.6:
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem()
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys'
  * tree: Add getter for subsystem iopolicy
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command
  * fabrics: check genctr after getting discovery entries
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
    ... changelog too long, skipping 12 lines ...
  * tree: Fix argument check in nvme_bytes_to_lba

==== libwebp ====
Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3

- Add 0001-Fix-invalid-incremental-decoding-check.patch
  A fuzzing finding fixed in the SLE/Leap updates

==== nvme-cli ====
Version update (2.4 -> 2.6)
Subpackages: nvme-cli-bash-completion

- Update to version 2.6:
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq()
  * fabrics: lookup_discovery_ctrl() must look under host and not root
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns
  * nvme-print-stdout: Support subsys reachable from several hosts
  * ccan: Add htable, strset and dependencies
  * ccan: Remove unused documentation
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list
  * fabrics: only look for matching ctrl on same host
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
    ... changelog too long, skipping 111 lines ...
- Fix install path for nvme-regress script

==== pam-config ====
Version update (2.8 -> 2.9)

- Update to version 2.9
  - Add support for kanidm

==== podman ====
Version update (4.6.2 -> 4.7.0)

- Build against latest stable Go version (bsc#1215807)
- Update to version 4.7.0:
  * Bump to v4.7.0
  * [CI:DOCS] v4.7.0 RELEASE_NOTES update
  * rpm: remove gvproxy subpackage
  * packit: tag @containers/packit-build team on copr build
    failures
  * specgen, rootless: fix mount of cgroup without a netns
  * pass --syslog to the cleanup process
  * fix --authfile auto-update test
  * version: switch back from -rc1 to -dev
  * New pre-release: v4.7.0-rc1
  * [CI:DOCS] Update release notes for v4.7.0-rc1
  * Cirrus: Update operating branch
  * Move podman build opts to common file
  * Add ability for machine rm -f for WSL
  * Plumbing to run machine tests with hyperv
  * CI: trace setup and runner scripts
  * Bump to Buildah v1.32.0
  * [CI:DOCS] bump release notes on main with the latest release
  * fix(deps): update module github.com/opencontainers/image-spec
    to v1.1.0-rc5
  * Add --filter pod= autocompletion
  * e2e: ExitCleanly(): manual test fixes
  * e2e: continuing ExitCleanly(): just the replacements
  * Fix some spelling and formatting
  * Add support for Ulimit in quadlet
  * Run codespell on code
  * wire in new buildah build options
  * make golangci-lint happy
  * add !remote tag to pkg/specgen/generate
  * pkg/specgen: do not depend on libimage for remote
  * bump buildah to latest
  * [CI:DOCS] restart.md: migrate to container unit
  * fix(deps): update module k8s.io/kubernetes to v1.28.2
  * Add support for PidsLimit in quadlet
  * Add DNS fields to Container and Network unit groups
  * [CI:DOCS] update API docs version list
  * Try to fix broken CI (gvisor-something)
  * e2e: more ExitCleanly(): manual test fixes
  * e2e: more ExitCleanly(): dumb string replacements
  * e2e: create_test: use ExitCleanly()
  * e2e: diff_test: use ExitCleanly()
  * The `podman init` command cannot modify containers.
  * bump c/common to latest main
  * Podmansh: use podmansh_timeout
  * e2e: more ExitCleanly(): low-hanging fruit
  * vendor: update checkpointctl to v1.1.0
  * kube: add DaemonSet support for generate
  * vendor of containers/(common, storage, image)
  * libpod: move oom_score_adj clamp to init
  * e2e: commit_test: use ExitCleanly()
  * e2e: container_clone_test.go: use ExitCleanly()
  * e2e: use ExitCleanly() in cleanup_test.go
  * Ensure HC events fire after logs are written
  * [CI:DOCS] podman-systemd.unit: fix equivalents
  * Add support for kube TerminationGracePeriodSeconds
  * Update podman-kube-play.1.md.in
  * Split up alt binaries to speed up build
  * Switch installer task to EC2
  * pod: fix duplicate volumes from containers.conf
  * tests: add test for pod cgroups
  * libpod: create the cgroup pod before containers
  * cmd, specgen: allow cgroup resources without --infra
  * specgen: allow --share-parent with --infra=false
  * libpod: allow cgroup path without infra container
  * libpod: check if cgroup exists before creating it
  * libpod: refactor platformMakePod signature
  * libpod: destroy pod cgroup on pod stop
  * utils: export MoveUnderCgroup
  * libpod: refactor code to new function
  * e2e: use ExitCleanly() in checkpoint tests
  * [CI:DOCS]Remove use of --latest|-l from tutorial
  * CI test runner: upgrade tests rely on system tests
  * run --rmi: "cannot remove" is a warning, not an error
  * StopContainer: display signal num when name unknown
  * URGENT: fix broken CI
  * Add support for kube  securityContext\.procMount
  * podman: don't restart after kill
  * Tmpfs should not be mounted noexec
  * sys tests: run_podman: check for unwanted warnings/errors
  * chore(deps): update dependency setuptools to ~=68.2.0
  * e2e: use ExitCleanly() in attach & build tests
  * Some distros do not default to docker.io for shortname searches
  * security: accept empty capabilities list
  * systests: random_free_port: fix EADDRINUSE flake
  * fix(deps): update module github.com/cyphar/filepath-securejoin
    to v0.2.4
  * Restrict fcos_test to amd64, arm64
  * fix(deps): update github.com/containers/libhvee digest to
    56fb235
  * fix(deps): update module github.com/docker/docker to
    v24.0.6+incompatible
  * fix(deps): update module golang.org/x/tools to v0.13.0
  * Ignore spurious container-removal errors
  * fix(deps): update module golang.org/x/net to v0.15.0
  * systests: manifest zstd test: lots of tiny cleanups
  * vendor: update github.com/opencontainers/runc to main
  * [skip-ci] Update actions/checkout action to v4
    ... changelog too long, skipping 474 lines ...
  * play.go: remove volumes on down -f

==== poppler ====
Subpackages: libpoppler-cpp0 libpoppler-glib8 libpoppler131 poppler-tools

- build with gpgmepp for signing documents (bsc#1215632)

==== poppler-qt5 ====

- build with gpgmepp for signing documents (bsc#1215632)

==== screen ====
Version update (4.9.0 -> 4.9.1)

- update to 4.9.1 (bsc#1210272, CVE-2023-24626):
  * Support stop/parity bits on serial port
  * Add needed system headers in checks and return values
    for implicit function declarations
  * Avoid zombies after shell exit
  * Missed signal sending permission check on failed
    query messages (CVE-2023-24626)
  * manpage fixes
  * source code fixes during cleanup
  * UTF-8 encoding can emit invalid UTF-8 sequences
  * for out of range unicode values

==== shadow ====
Subpackages: libsubid4 login_defs

- Add shadow-4.14.0-selinux-labels.patch:
  Set proper SELinux labels for new homedirs.
  See gh/shadow-maint/shadow#812.

==== suse-module-tools ====
Version update (16.0.35 -> 16.0.36)
Subpackages: suse-module-tools-scriptlets

- Update to version 16.0.36
  * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731)
  * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829)

==== systemd ====
Version update (254.3 -> 254.5)
Subpackages: libsystemd0 libudev1 systemd-coredump systemd-doc udev

- Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff1a80bf225...9674bb256205e6c643feadbcccfd1ee8feeee684
- Make sure to call %sysusers_create only when transfiletrigger is disabled.
- systemd.spec: switch to %ldconfig_scriptlets
- systemd.spec: add `%tmpfiles_create systemd-resolve`
  It's only needed by SLE distros since systemd packages rely on
  transtriggerfiles in Factory.
- Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d13be82789a...6ed5b11298005e07509832881a0c5ff1a80bf225

==== xdg-desktop-portal-kde ====

- Add: 0001-kde_portals.patch (kde#474746)
  * Add a fallback to the GTK portal for settings. This makes sure
    that GTK apps always get valid fonts and related settings.

==== xdg-utils ====
Version update (1.1.3+20230831 -> 1.2.0~beta1+20230929)

- Update to version 1.2.0-beta1+20230929:
  * Set Version to 1.2.0-beta1
  * Update Changes and Release Notes
  * fix(xdg-open): handle spaces in .desktop file path
  * Quote Browser variable to avod unintentional code execution
  * Add missing result gathering
  * Enhance LXQt Desktop Enviromment support
  * xdg-terminal: don't run 'kreadconfig' if KDE_SESSION_VERSION is >= 5
- Drop the following fix, now actually included upstream
  * xdg-terminal-don-t-run-kreadconfig-if-KDE_SESSION_VE.patch
- The following entries may have been missed in previous changelog
  versions
  * all: shellcheck fixes; make xdg-mime DASH-compatible
  * xdg-email: do not run BROWSER if xdg-open failed
  * Ensure POSIX-compliant shell scripting to support DASH
  * all: spelling fixes
  * Fix set_url_scheme_handler_gnome3 to not associate text/html handler
  * xdg-screensaver: fix the freedesktop screensaver
  * xdg-screensaver: implement support for "gnome3" DE
  * xdg-screensaver: better error detection for freedesktop 'status' command
  * xdg-desktop-menu: Drop obsolete GNOME support
  * xdg-open: support WSL (FDO#108975)
  * xdg-su: support deepin
  * xdg-mime: If mimeapps.list is a symlink, retain the symlink (#7)
  * xdg-open: fix search_desktop_file's logic
  * xdg-open: handle local hostname in `file:` URLs
  * xdg-desk-menu: Check if defaults file exists during installation
  * xdg-su: Remove quotes for lxqt-sudo cmd arg
  * xdg-open: handle opening files when DE=flatpak