Packages changed: MicroOS-release (20260324 -> 20260326) dracut (110+suse.16.g47bca564 -> 110+suse.18.g5a7a17b3) fribidi (1.0.15 -> 1.0.16) libopenmpt (0.8.4 -> 0.8.6) llvm21 ncurses (6.6.20260307 -> 6.6.20260321) nghttp2 (1.68.0 -> 1.68.1) python-SQLAlchemy (2.0.46 -> 2.0.48) python-tornado6 sbc (2.1 -> 2.2) sdbootutil (1+git20260319.f4cfda0 -> 1+git20260324.bd0fc60) skopeo (1.20.0 -> 1.22.0) snapper userspace-rcu (0.15.5 -> 0.15.6) wireplumber (0.5.13 -> 0.5.14) yast2 (5.0.19 -> 5.0.20) zlib-ng-compat === Details === ==== MicroOS-release ==== Version update (20260324 -> 20260326) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== dracut ==== Version update (110+suse.16.g47bca564 -> 110+suse.18.g5a7a17b3) Subpackages: dracut-ima - Update to version 110+suse.18.g5a7a17b3: * fix(zipl): repair parsing of rd.zipl=LABEL|UUID|...= (bsc#1259587) * fix(dracut): avoid calling log functions before dracut-logger is sourced ==== fribidi ==== Version update (1.0.15 -> 1.0.16) - update to 1.0.16: * Update Unicode character databases to v16.0.0 ==== libopenmpt ==== Version update (0.8.4 -> 0.8.6) - Update to version 0.8.6: * [Sec] The security fix in libopenmpt 0.8.5 (r25042) was incomplete, causing a regression when playing short looped ("chip2) samples (r25084). - Update to 0.8.5: * [Sec] Possible out-of-bounds sample data read in a specific combination of reverse sample playback + offset past sample loop. (r25042). * MOD: ProTracker arpeggio wrapraound results in an effective period of 65536 on Paula, not pausing the sample entirely. * ULT: Loop points were incorrectly limited for 16-bit samples. ==== llvm21 ==== - clang-riscv-triple.patch: Add riscv64-suse-linux to RISCV64Triples ==== ncurses ==== Version update (6.6.20260307 -> 6.6.20260321) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20260321 + build-fix for --enable-fvisibility option vs C++ shared library (adapted from patch by Nicholas Vinson). + improve a few configure-checks vs overly-strict compiler warnings. - Add ncurses patch 20260314 + fixes for pangoterm and wezterm, from tic warnings -TD + improve man page description of getmaxyx (report by Lucas Veltkamp). + add configure option --enable-conpty, and modify configure script to allow the low-level term-driver and conpty driver as part of termlib. ==== nghttp2 ==== Version update (1.68.0 -> 1.68.1) - Update to 1.68.1 (bsc#1259835): * Fixes CVE-2026-27135 ==== python-SQLAlchemy ==== Version update (2.0.46 -> 2.0.48) - Update to 2.0.48: * https://docs.sqlalchemy.org/en/21/changelog/changelog_20.html#change-2.0.48 * https://docs.sqlalchemy.org/en/21/changelog/changelog_20.html#change-2.0.47 ==== python-tornado6 ==== - add pycares-getaddrinfo.patch to increase compatibility with newer pycares versions ==== sbc ==== Version update (2.1 -> 2.2) - update to 2.2: * Fix issue when compiling with C23 requirements. ==== sdbootutil ==== Version update (1+git20260319.f4cfda0 -> 1+git20260324.bd0fc60) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20260324.bd0fc60: * Add CAP_LINUX_IMMUTABLE when called by snapperd * get_timeout and default respect UPDATE_NVRAM (bsc#1243889) ==== skopeo ==== Version update (1.20.0 -> 1.22.0) - Update to version 1.22.0: * [release-1.22] Bump Skopeo to v1.22.0 * [release-1.22] Update tests for a changed error message * [release-1.22] Document the default of --retry-times * [release-1.22] chore: fix function name in comment * [release-1.22] Bump common 0.67.0, image 5.39.1, storage 1.62.0 * Packit: use `post-modifications` hook to update downstream TMT plan * Bump to 1.21.0 * Packit: Do not notify on podman-next copr build failure * Support empty sigstore passphrases, for cosign compatibility * Make TestSharedCopyOptionsCopyOptions table-driven * Use retries in more cases of copying from external registries * Makefile: remove stale target * Makefile: use hack/test-system.sh for test-system-local * Recreate hack/test-system.sh * chore(deps): update dependency golangci/golangci-lint to v2.6.1 * fix(deps): update github.com/opencontainers/image-spec digest to 26647a4 * chore(deps): update dependency golangci/golangci-lint to v2.6.0 * main: Add support for overriding HTTP User-Agent * fix(deps): update module go.podman.io/common to v0.66.0 * fix(deps): update module go.podman.io/image/v5 to v5.38.0 * fix(deps): update module go.podman.io/storage to v1.61.0 * Add missing newline to the output of (skopeo generate-sigstore-key) * fix(deps): update module golang.org/x/term to v0.36.0 * Fold the test cases of TestSyncTLSPrecedence to a single line each * Remove the explicit test name * Construct the source context from CLI instead of manually * Use a real YAML fragment instead of constructing inputs manually * Merge the two TestTLSPrecedence tests * Update dependency golangci/golangci-lint to v2.5.0 * Update github.com/opencontainers/image-spec digest to 6519a62 * sync: honor CLI/global tls-verify unless YAML explicitly sets tls-verify * test-integration-local: use SKOPEO_BINARY if set * Add --sign-by-sq-fingerprint and an integration test * Also build+test with Sequoia * Update CI images * Update conditions for signing tests * Update module golang.org/x/term to v0.35.0 * Use strings.SplitSeq * Use bytes.SplitSeq * Rely on Go-maintained commit value instead of handling that ourselves * Update to Go 1.24 * RPM: build with sequoia for F43+ * RPM: Re-org distro conditionals * Packit/RPM: Epoch and version fetching fixes * Update CONTRIBUTING.md * [skip-ci] Update actions/stale action to v10 * Packit: re-enable CentOS Stream jobs on PRs * Packit/TMT: enable ELN testing on PRs * Update to tagged container-libs releases * Update module github.com/spf13/pflag to v1.0.10 * Add --dest-force-compress-format option on copy * Packit: enable ELN * Packit: replace files_to_sync with prepare-files * RPM: skopeo-tests only installs dependencies * TMT: additions to make local TMT runs similar to testing-farm * Update module github.com/spf13/cobra to v1.10.1 * Update module github.com/spf13/pflag to v1.0.9 * Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY] * TMT: run systemtest via `make test-system-local` * Makefile: inline logic for test-integration-local * Makefile: test-system-local checks for SKOPEO_BINARY * Makefile: validate-local depends on tools * fix(deps): update module github.com/stretchr/testify to v1.11.1 * Migrate storage, image and common to monorepo and remote go.podman.io imports. * Allow running CI from rawhide images * Stop using fgrep * Update tests to work with the Sequoia c/image backend * chore(deps): update dependency golangci/golangci-lint to v2.4.0 * Adding mohanboddu as community manager to MAINTAINERS.md * fix(deps): update module golang.org/x/term to v0.34.0 * fix(deps): update module github.com/containers/common to v0.64.1 * fix(deps): update module github.com/containers/image/v5 to v5.36.1 * fix(deps): update module github.com/containers/storage to v1.59.1 * chore(deps): update dependency golangci/golangci-lint to v2.3.1 * Bump to v1.21.0-dev ==== snapper ==== Subpackages: libsnapper8 - fix deleting LVM configs in case of empty directories (bsc#1260410) ==== userspace-rcu ==== Version update (0.15.5 -> 0.15.6) - update to 0.15.6: * urcu-mb: Add missing TSAN annotation to _urcu_mb_read_lock_update * lfstack: Coding style cleanup * urcu-qsbr: Use CMM_SEQ_CST_FENCE for _urcu_qsbr_thread_online * urcu-mb: Use CMM_SEQ_CST_FENCE for _urcu_mb_read_lock_update * urcu-qsbr: Use CMM_SEQ_CST_FENCE for quiescent state update and offline * urcu-mb: Use CMM_SEQ_CST_FENCE for _urcu_mb_read_unlock_update_and_wakeup * Fix: Only include linux/time_types.h when __NR_futex_time64 is defined * Use __NR_futex_time64 in futex syscall wrapper ==== wireplumber ==== Version update (0.5.13 -> 0.5.14) Subpackages: libwireplumber-0_5-0 - Update to version 0.5.14: * Additions & Enhancements: - Added per-device default volume configuration via the device.routes.default-{source,sink}-volume property, allowing device-specific volume defaults (e.g. a comfortable default for internal speakers or no attenuation for HDMI) - Added Lua 5.5 support; the bundled Lua subproject wrap has also been updated to 5.5.0 - Enhanced libcamera monitor to load camera nodes locally within the WirePlumber process instead of the PipeWire daemon, eliminating race conditions that could occur during initial enumeration and hotplug events - Enhanced Bluetooth loopback nodes to always be created when a device supports both A2DP and HSP/HFP profiles, simplifying the logic and making the BT profile autoswitch setting take effect immediately without requiring device reconnection - Enhanced Bluetooth loopback nodes to use target.object property instead of smart filters, fixing issues that prevented users from setting them as default nodes and also allowing smart filters to be used with them - Enhanced Bluetooth profile autoswitch logic with further robustness improvements, including better headset profile detection using profile name patterns and resolving race conditions by running profile switching after device/apply-profile in a dedicated event hook - Enhanced wpctl set-default command to accept virtual nodes (e.g. Audio/Source/Virtual) in addition to regular device nodes - Improved stream linking to make the full graph rescan optional when linkable items change, saving CPU on low-end systems and reducing audio startup latency when connecting multiple streams in quick succession (!800 (merged)) - Allowed installation of systemd service units without libsystemd being present, useful for distributions like Alpine Linux that allow systemd service subpackages - Allowed the mincore syscall in the WirePlumber systemd sandbox, required for Mesa/EGL (e.g. for the libcamera GPUISP pipeline) - Allowed passing WIREPLUMBER_CONFIG_DIR via the wp-uninstalled script, useful for passing additional configuration paths in an uninstalled environment * Fixes: - Removed Bluetooth sink loopback node, which was causing issues with KDE and GNOME - Fixed default audio source selection to never automatically use Audio/Sink nodes as the default source unless explicitly selected by the user - Fixed crash in state-stream when the Format parameter has a Choice for the number of channels - Fixed BAP Bluetooth device set channel properties, where audio.position was incorrectly serialized as a pointer address instead of the channel array - Fixed memory leaks in wp_interest_event_hook_get_matching_event_types and in the Lua LocalModule() implementation - Fixed HFP HF stream media class being incorrectly assigned due to api.bluez5.internal=true being set on HFP HF streams - Fixed Lua 5.4 compatibility in state-stream script - Updated translations: Bulgarian, Georgian, Kazakh, Swedish - Rebase patch: * set-profile-in-service.patch - Drop patches already included in this version: * 0001-monitors-bluez-request-device-ports-take-loopback-no.patch * 0002-autoswitch-bluetooth-profile-Fix-attempt-to-index-a-.patch * 0003-default-nodes-Never-consider-Audio_Sink-nodes-as-best-for.patch * 0004-event-hook-fix-interest-hook-event-type-memory-leak.patch * 0005-state-stream-fix-crash-in-case-the-Format-has-a-Choice-for.patch * 0006-state-stream-fix-Lua-5.4-compatibility.patch ==== yast2 ==== Version update (5.0.19 -> 5.0.20) - jsc#PED-14507 - Removed reference to update-desktop-files from spec file - 5.0.20 ==== zlib-ng-compat ==== - Fix cmake *tagets.cmake and zlib.pc for the compat build, as the target dir {_libdir} is manually changed in the spec file to {_libdir}/zlib-ng-compat, we have to manually adjust the directory in the devel files as well.