Packages changed:
  git
  gnome-shell (45.2 -> 45.3)
  grub2 (2.12~rc1 -> 2.12)
  gvfs (1.52.1 -> 1.52.2)
  hwdata (0.377 -> 0.378)
  kernel-default-base
  libcap-ng (0.8.3 -> 0.8.4)
  libgxps (0.3.2 -> 0.3.2+5)
  libstorage-ng (4.5.170 -> 4.5.171)
  libxkbcommon
  libzypp (17.31.27 -> 17.31.28)
  mdadm
  mpg123 (1.32.3 -> 1.32.4)
  mutter (45.2 -> 45.3)
  ncurses (6.4.20231202 -> 6.4.20240106)
  protobuf (4.23.4 -> 4.25.1)
  publicsuffix (20231213 -> 20240107)
  redis (7.2.3 -> 7.2.4)
  sg3_utils (1.48+6.7f43e14 -> 1.48+7.63e63cb)
  shadow
  yast2-core (5.0.1 -> 5.0.2)
  yast2-packager (5.0.1 -> 5.0.2)

=== Details ===

==== git ====

- gitweb AppArmor profile: allow reading etc/gitweb-common.conf
  (boo#1218664)

==== gnome-shell ====
Version update (45.2 -> 45.3)
Subpackages: gnome-extensions gnome-shell-calendar

- Update to version 45.3:
  + Allow any enter key to be used to screenshot.
  + Fix spinner in light style variant.
  + Improve formatting of extension errors.
  + Fixed crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop gnome-shell_nb_fix_trans.patch: fixed upstream.

==== grub2 ====
Version update (2.12~rc1 -> 2.12)
Subpackages: grub2-arm64-efi grub2-snapper-plugin grub2-systemd-sleep-plugin

- Version bump to 2.12 (PED-5589)
  * Added:
  - grub-2.12.tar.xz
  - fix_no_extra_deps_in_release_tarball.patch
  * Removed:
  - grub-2.12~rc1.tar.xz
  * Patch dropped as it merged into new version:
  - 0001-disk-cryptodisk-Fix-missing-change-when-updating-to-.patch
  - 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch
  - 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  - 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  - 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  - 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  - 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  - 0006-fs-ntfs-Make-code-more-readable.patch
  - 0001-kern-ieee1275-init-Restrict-high-memory-in-presence-.patch
  - 0001-fs-xfs-Incorrect-short-form-directory-data-boundary-.patch
  - 0002-fs-xfs-Fix-XFS-directory-extent-parsing.patch
  - 0003-fs-xfs-add-large-extent-counters-incompat-feature-su.patch
  - 0001-mkstandalone-ensure-stable-timestamps-for-generated-.patch
  - 0002-mkstandalone-ensure-deterministic-tar-file-creation-.patch
  * Patch adjusted for the updated base version:
  - use-grub2-as-a-package-name.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-04-grub2-install.patch
  - grub2-ppc64le-disable-video.patch
  - 0002-AUDIT-0-http-boot-tracker-bug.patch
  - 0001-Unify-the-check-to-enable-btrfs-relative-path.patch
  - 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  - 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  - 0016-grub-install-support-embedding-x509-certificates.patch
  - 0021-appended-signatures-documentation.patch
  - 0022-ieee1275-enter-lockdown-based-on-ibm-secure-boot.patch
  - safe_tpm_pcr_snapshot.patch

==== gvfs ====
Version update (1.52.1 -> 1.52.2)
Subpackages: gvfs-backend-afc gvfs-backend-goa gvfs-backend-samba gvfs-backends gvfs-fuse

- Update to version 1.52.2:
  + smb: Fix livelock when mounting share without enough
    permissions.
  + smb: Fi moving files across filesystem boundaries.
  + Updated transltions.

==== hwdata ====
Version update (0.377 -> 0.378)

- update to 0.378:
  * Update pci, usb and vendor ids

==== kernel-default-base ====

- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios

==== libcap-ng ====
Version update (0.8.3 -> 0.8.4)

- Update to version 0.8.4
  * In capng_change_id, clear PR_SET_KEEPCAPS if returning an error
  * pscap: add -p option for reporting a specified process
  * Annotate function prototypes to warn if results are unused
  * Drop python2 support

==== libgxps ====
Version update (0.3.2 -> 0.3.2+5)

- Update to version 0.3.2+5:
  + DOAP: Fix 'bug-database' value to point to GNOME GitLab Issues
  + images:
  - For jpeg images try to get the image resolution from exif
    first
  - Add support for jpeg images with CMYK color space
  + Fix compiler warnings
  + Fix meson warnings
- Switch to git checkout via source service, use explicit commit.
- Use ldconfig_scriptlets macro for post(un) handling.
- Update URL to new home.
- Drop no longer needed libgxps-rpmlintrc.

==== libstorage-ng ====
Version update (4.5.170 -> 4.5.171)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- merge gh#openSUSE/libstorage-ng#977
- provide light_probe function with SystemInfo parameter
- 4.5.171

==== libxkbcommon ====
Subpackages: libxkbcommon-x11-0 libxkbcommon0 libxkbregistry0

- add libxkbregistry-devel to baselibs for use by wine-32bit. (bsc#1218640)

==== libzypp ====
Version update (17.31.27 -> 17.31.28)

- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)

==== mdadm ====

- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context->update & refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch

==== mpg123 ====
Version update (1.32.3 -> 1.32.4)
Subpackages: libmpg123-0 mpg123-openal

- Update to version 1.32.4
  build:
  * Reorganize shared headers, API headers into src/include.
  * Use relative include paths, avoiding internal directories in
    CPPFLAGS except for config.h.
  * Group C99 feature checks and make several standard headers
    mandatory.
  * Get rid of SIZE_P, OFF_P and friends.
  * Only enforce dummy module together with libout123, to be able
    to build individual modules using --disable-components logic.
  out123:
  * added --libversion
  libmpg123:
  * Avoid indirect branches into the assembly routines by using C
    wrappers also for dct36, relieving us of the need to care for
    bti / endbr i nstructions for control flow integrity.

==== mutter ====
Version update (45.2 -> 45.3)

- Update to version 45.3:
  + Fix handling of relative mode for tablets.
  + Fix forcing EGLStream with NVIDIA proprietary driver.
  + Sync geometry only when window is mapped.
  + Improve repick due to transform changes.
  + wayland/client: Add make_desktop() method.
  + Fix occasional artifacts at top of X11 fullscreen windows.
  + background: Fix background color around image.
  + Fixed crashes.
  + Plugged leaks.
  + Misc. bug fixes and cleanups.
  + Updated translations.

==== ncurses ====
Version update (6.4.20231202 -> 6.4.20240106)
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen

- Add foot to terminfo-base. It's the most compliant wayland
  terminal emulator according to
  https://github.com/dankamongmen/notcurses/blob/master/TERMINALS.md
- Add ncurses patch 20240106
  + use ansi+arrows, ansi+apparrows, ansi+csr, ansi+erase, ansi+idc,
    ansi+idc1, ansi+idl, ansi+idl1, ansi+inittabs to trim -TD
  + minor manpage formatting changes for consistency.
  + modify doc-html test package's install-directory, per lintian.
  + add attr_get.3x to man_db.renames.in (patch by Sven Joachim).
- Add ncurses patch 20231230
  + improve formatting/style of manpages (patches by Branden Robinson).
  + add ms-vt100-16color, winconsole -TD
  + add rio, rio-direct -TD
  + add mostlike -TD
  + add wezterm, contour -TD
- Add ncurses patch 20231223
  + improve formatting/style of manpages (patches by Branden Robinson).
- Add ncurses patch 20231217
  + improve formatting/style of manpages (patches by Branden Robinson).
  + correct an assignment in infocmp "-u" for detecting if a boolean
    is unset in a base entry and set in a use'd chunk, i.e., if it was
    cancelled.
  + modify infocmp "-u" option to not report cancels for strings which
    were already cancelled in a use'd chunk.
  + join two lines in infotocap.3x to eliminate a spurious "description"
    link in installed manpages (report by Sven Joachim).
  + fix typo in NEWS (report by Sven Joachim).
- Port patches
  * ncurses-5.9-ibm327x.dif
  * ncurses-6.4.dif

==== protobuf ====
Version update (4.23.4 -> 4.25.1)

- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    ... changelog too long, skipping 54 lines ...
  * Fix `PyUpb_Message_MergeInternal` segfault

==== publicsuffix ====
Version update (20231213 -> 20240107)

- Update to version 20240107:
  * Remove homeoffice.gov.uk (#1909)
  * util: gTLD data autopull updates for 2024-01-06T15:12:04 UTC (#1918)

==== redis ====
Version update (7.2.3 -> 7.2.4)

- redis 7.2.4: (boo#1218646)
  - Security fixes
  - (CVE-2023-41056) In some cases, Redis may incorrectly handle
    resizing of memory buffers which can result in incorrect
    accounting of buffer sizes and lead to heap overflow and
    potential remote code execution.
  - Bug fixes
  - Fix crashes of cluster commands clusters with mixed versions
    of 7.0 and 7.2 (#12805, #12832)
  - Fix slot ownership not being properly handled when deleting a
    slot from a node (#12564)
  - Fix atomicity issues with the RedisModuleEvent_Key module API
    event (#12733)

==== sg3_utils ====
Version update (1.48+6.7f43e14 -> 1.48+7.63e63cb)
Subpackages: libsgutils2-1_48-2

- Fix spurious warning for non-SCSI devices (boo#1218666)

==== shadow ====
Subpackages: libsubid4 login_defs

- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.

==== yast2-core ====
Version update (5.0.1 -> 5.0.2)

- Don't close file descriptors in .target.bash calls (bsc#1218064)
  avoiding "[ASYNC BUG] rb_thread_wakeup_timer_thread: write(3) EBADF"
  with Ruby 3.3
- 5.0.2

==== yast2-packager ====
Version update (5.0.1 -> 5.0.2)

- After installation disable the empty installation repository
  from the SLE15 Online medium (bsc#1182303)
- 5.0.2