# changelog

author: Carl George <carlwgeorge@fedoraproject.org> - 2.19.5-4
changelog:
  - Move Python module to correct location rhbz#2299798
  - Mark package as architecture-independent (noarch)


author: Than Ngo <than@redhat.com> - 137.0.7151.55-1
changelog:
  - Update to 137.0.7151.55
    * CVE-2025-5063: Use after free in Compositing
    * CVE-2025-5280: Out of bounds write in V8
    * CVE-2025-5064: Inappropriate implementation in Background Fetch API
    * CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
    * CVE-2025-5066: Inappropriate implementation in Messages
    * CVE-2025-5281: Inappropriate implementation in BFCache
    * CVE-2025-5283: Use after free in libvpx
    * CVE-2025-5067: Inappropriate implementation in Tab Strip
  - Fix FTBFS caused by simdutf and pdfium-png_decoder
  - Remove chromium-135-gperf.patch and chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by upstream
  - Refresh ppc64le patches
  - Enable system simdutf for F43


author: Than Ngo <than@redhat.com> - 137.0.7151.68-1
changelog:
  - Update to 137.0.7151.68
    * CVE-2025-5419: Out of bounds read and write in V8
    * CVE-2025-5068: Use after free in Blink


author: Than Ngo <than@redhat.com> - 137.0.7151.103-1
changelog:
  - Update to 137.0.7151.103
    * CVE-2025-5958: Use after free in Media
    * CVE-2025-5959: Type Confusion in V8
  - Provide correct version for bundle librarires
  - Fix rhbz#2368923, Chromium crash


author: Than Ngo <than@redhat.com> - 137.0.7151.119-1
changelog:
  - Update to 137.0.7151.119
    * CVE-2025-6191: Integer overflow in V8
    * CVE-2025-6192: Use after free in Profiler


author: Than Ngo <than@redhat.com> - 138.0.7204.49-1
changelog:
  - Update to 138.0.7204.49
    * CVE-2025-6555: Use after free in Animation
    * CVE-2025-6556: Insufficient policy enforcement in Loader
    * CVE-2025-6557: Insufficient data validation in DevTools


author: Than Ngo <than@redhat.com> - 138.0.7204.157-1
changelog:
  - Update to 138.0.7204.157
    * CVE-2025-7656: Integer overflow in V8
    * CVE-2025-7657: Use after free in WebRTC
    * CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU


author: Than Ngo <than@redhat.com> - 138.0.7204.168-1
changelog:
  - Update to 138.0.7204.168
    * CVE-2025-8010: Type Confusion in V8
    * CVE-2025-8011: Type Confusion in V8


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-46.20230706git
changelog:
  - Update on 2023-07-06
  - General clean-ups
  - Move built javaversion to new sub-package
  - Drop built javaversion from i686


author: Mosaab Alzoubi <moceap[AT]fedoraproject[DOT]com> - 0-47.20230709git
changelog:
  - Update on 2023-07-09
  - Fix can't build on aarch64  (https://bugzilla.redhat.com/show_bug.cgi?id=2220874)
  - Fix can't build on epel8 (https://koji.fedoraproject.org/koji/buildinfo?buildID=2227816)


author: Packit <hello@packit.dev> - 14-1
changelog:
  Changes with 14
  ----------------
    * build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-deps group (#147)
      * Author: dependabot[bot], Reviewers: Simon de Vlieger
    * doc: fix typo (#152)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt
    * ibcli: add new --output-name flag and predictable default names (#158)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: fix creating output dir for `--with-buildlog` (#150)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: show "success" message with output dir when build finishes (#154)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: skip arch checks on`IMAGE_BUILDER_EXPERIMENTAL=bootstrap` (#155)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * packit: enable epel-9 and epel-10 (#149)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai

  — Somewhere on the Internet, 2025-03-14


author: Packit <hello@packit.dev> - 15-1
changelog:
  Changes with 15
  ----------------
    * README: document that cross building works (#168)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * Revert "blueprintload: enable strict checking for toml" (#174)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    * blueprintload: enable strict checking for toml (#163)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    * go.mod: update to latest version of `github.com/osbuild/blueprint` (#172)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * import: `progress` from `bootc-image-builder` (#179)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
    * import: `setup`, `util`, `podmanutil` from `bootc-image-builder` (#178)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou
    * main: Add a --version flag to show the build version (#175)
      * Author: Brian C. Lane, Reviewers: Michael Vogt, Simon de Vlieger
    * main: allow seed setting (#176)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    * main: automatically cross build when --arch <foreign> is passed (#164)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: show output directory content after image build (#162)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * main: tweak handling of --output-name to avoid adding double extensions (#161)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: tweak how ibcli determines if bootstraping is needed (#167)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * many: move to use the new github.com/osbuild/blueprint module (HMS-5804) (#169)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * progress: set --cache-max-size in osbuild (#182)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-04-02


author: Packit <hello@packit.dev> - 19-1
changelog:
  Changes with 19
  ----------------
    * refactor: use standard logger instead of logrus (#214)
      * Author: Lukáš Zapletal, Reviewers: Michael Vogt

  — Somewhere on the Internet, 2025-05-14


author: Packit <hello@packit.dev> - 20-1
changelog:
  Changes with 20
  ----------------
    * deps: update (#219)
      * Author: Simon de Vlieger, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-05-30


author: Packit <hello@packit.dev> - 21-1
changelog:
  Changes with 21
  ----------------
    * image-builder: fix cross-arch uploading (#218)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * packit: rename epel9-next (#224)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal

  — Somewhere on the Internet, 2025-06-11


author: Packit <hello@packit.dev> - 22-1
changelog:
  Changes with 22
  ----------------
    * GHA: add the common-stale-action (#225)
      * Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    * chore: bump `images` (#228)
      * Author: Simon de Vlieger, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2025-06-22


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Packit <hello@packit.dev> - 25-1
changelog:
  Changes with 25
  ----------------
    * deps: update images to 0.162.0 (#247)
      * Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Ondřej Budai
    * main: `--version` includes git commit (#230)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Michael Vogt
    * packit: enable RHEL 10 builds (HMS-8829) (#246)
      * Author: Ondřej Budai, Reviewers: Florian Schüller, Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-16


author: Packit <hello@packit.dev> - 26-1
changelog:
  Changes with 26
  ----------------
    * deps: bump images to 0.164 (#252)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai
    * main: add `--ignore-warnings` cmdline option (#250)
      * Author: Michael Vogt, Reviewers: Lukáš Zapletal, Sanne Raymaekers, Simon de Vlieger
    * testutil: trivial cleanup/rename (#249)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-07-21


author: Kevin Fenzi <kevin@scrye.com> - 1.35.2-1
changelog:
  - Update to 1.35.2. Fixes rhbz#2346249
  - Fix FTBFS. Fixed rhbz#2340700
  - Update license tags
  - Add patch to handle older python versions (already upstream)
  - Add patch for /usr/sbin merge handling.


author: Kevin Fenzi <kevin@scrye.com> - 1.35.3-3
changelog:
  - Add patch from Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> with sysusers.d handling
  - Fixes rhbz#2364015


author: Peter Oliver <git@mavit.org.uk> - 16p-4
changelog:
  - Update build options
  - Drop obsolete options.
  - Specify the correct build flags for ARM and zSeries.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.9.1-1
changelog:
  - Update to 1.9.1 - Closes rhbz#2362077 rhbz#2354430 rhbz#2352319
    rhbz#2350839 rhbz#2348836 rhbz#2339349


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-1
changelog:
  - Upgrade to version 0.9.0 rhbz#2348855
  - Replaces the previous workaround for Python 3.14 rhbz#2327982


author: Göran Uddeborg <goeran@uddeborg.se> - 0.9.0-3
changelog:
  - Use the older flit_core in EPEL10 by reverting upstreams patch
  - Skip the pytest-trio dependency as it is anyway not used without DBus


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.11.0-1
changelog:
  - Update to 3.11.0 (close RHBZ#2380202)
  - Upstream no longer bundles a forked copy of PyO3
  - More carefully audit and account for all licenses in the source
  - Add a build conditional to allow building with the yyjson backend


