# changelog

author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-1
changelog:
  - update to 3.1.2: http://www.python.org/download/releases/3.1.2/
  - drop upstreamed patch 2 (.pyc permissions handling)
  - drop upstream patch 5 (fix for the test_tk and test_ttk_* selftests)
  - drop upstreamed patch 200 (path-fixing script)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-3
changelog:
  - update python-gdb.py from v3 to v4 (fixing infinite recursion on reference
  cycles and tracebacks on bytes 0x80-0xff in strings, adding handlers for sets
  and exceptions)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-5
changelog:
  - exclude test_http_cookies when running selftests, due to hang seen on
  http://koji.fedoraproject.org/koji/taskinfo?taskID=2088463 (cancelled after
  11 hours)
  - update python-gdb.py from v5 to py3k version submitted upstream


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-6
changelog:
  - build and install two different configurations of Python 3: debug and
  standard, packaging the debug build in a new "python3-debug" subpackage
  (patch 103)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-7
changelog:
  - add configure-time support for COUNT_ALLOCS and CALL_PROFILE debug options
  (patch 104); enable them and the WITH_TSC option within the debug build


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-10
changelog:
  - ensure that the compiler is invoked with "-fwrapv" (rhbz#594819)
  - reformat whitespace in audioop.c (patch 106)
  - CVE-2010-1634: fix various integer overflow checks in the audioop
  module (patch 107)
  - CVE-2010-2089: further checks within the audioop module (patch 108)
  - CVE-2008-5983: the new PySys_SetArgvEx entry point from r81399 (patch 109)


author: David Malcolm <dmalcolm@redhat.com> - 3.1.2-11
changelog:
  - Fix an incompatibility between pyexpat and the system expat-2.0.1 that led to
  a segfault running test_pyexpat.py (patch 110; upstream issue 9054; rhbz#610312)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.0.a1
changelog:
  - 3.2a1; add alphatag
  - rework %files in the light of PEP 3147 (__pycache__)
  - drop our configuration patch to Setup.dist (patch 0): setup.py should do a
  better job of things, and the %files explicitly lists our modules (r82746
  appears to break the old way of doing things).  This leads to various modules
  changing from "foomodule.so" to "foo.so".  It also leads to the optimized build
  dropping the _sha1, _sha256 and _sha512 modules, but these are provided by
  _hashlib; _weakref becomes a builtin module; xxsubtype goes away (it's only for
  testing/devel purposes)
  - fixup patches 3, 4, 6, 8, 102, 103, 105, 111 for the rebase
  - remove upstream patches: 7 (system expat), 106, 107, 108 (audioop reformat
  plus CVE-2010-1634 and CVE-2010-2089), 109 (CVE-2008-5983)
  - add machinery for rebuilding "configure" and friends, using the correct
  version of autoconf (patch 300)
  - patch the debug build's usage of COUNT_ALLOCS to be less verbose (patch 125)
  - "modulator" was removed upstream
  - drop "-b" from patch applications affecting .py files to avoid littering the
  installation tree


author: Thomas Spura <tomspur@fedoraproject.org> - 3.2-0.1.a1
changelog:
  - on 64bit "stdlib" was still "/usr/lib/python*" (modify *lib64.patch)
  - make find-provides-without-python-sonames.sh 64bit aware


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.3.a1
changelog:
  - Move test.support to core package (rhbz#596258)
  - Add various missing __pycache__ directories to payload


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.4.a1
changelog:
  - move most of the content of the core package to the libs subpackage, given
  that the libs aren't meaningfully usable without the standard libraries


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.5.b2
changelog:
  - 3.2b2
  - rework patch 3 (removal of mimeaudio tests), patch 6 (no static libs),
  patch 8 (systemtap), patch 102 (lib64)
  - remove patch 4 (rendered redundant by upstream r85537), patch 103 (PEP 3149),
  patch 110 (upstreamed expat fix), patch 111 (parallel build fix for grammar
  fixed upstream)
  - regenerate patch 300 (autotool intermediates)
  - workaround COUNT_ALLOCS weakref issues in test suite (patch 126, patch 127,
  patch 128)
  - stop using runtest.sh in %check (dropped by upstream), replacing with
  regrtest; fixup list of failing tests
  - introduce "pyshortver", "SOABI_optimized" and "SOABI_debug" macros
  - rework manifests of shared libraries to use "SOABI_" macros, reflecting
  PEP 3149
  - drop itertools, operator and _collections modules from the manifests as py3k
  commit r84058 moved these inside libpython; json/tests moved to test/json_tests
  - move turtle code into the tkinter subpackage


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.8.b2
changelog:
  - set EXTRA_CFLAGS to our CFLAGS, rather than overriding OPT, fixing a linker
  error with dynamic annotations (when configured using --with-valgrind)
  - fix the ppc build of the debug configuration (patch 130; rhbz#661510)


author: David Malcolm <dmalcolm@redhat.com> - 3.2-0.9.rc1
changelog:
  - 3.2rc1
  - rework patch 6 (static lib removal)
  - remove upstreamed patch 130 (ppc debug build)
  - regenerate patch 300 (autotool intermediates)
  - updated packaging to reflect upstream rewrite of "Demo" (issue 7962)
  - added libpython3.so and 2to3-3.2


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-1
changelog:
  - 3.2.1; refresh lib64 patch (102), subprocess unit test patch (129), disabling
  of static library build (due to Modules/_testembed; patch 6), autotool
  intermediates (patch 300)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.1-5
changelog:
  - re-enable and fix the --with-tsc option on ppc64, and rework it on 32-bit
  ppc to avoid aliasing violations (patch 130; rhbz#698726)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-2
changelog:
  - rewrite of "check", introducing downstream-only hooks for skipping specific
  cases in an rpmbuild (patch 132), and fixing/skipping failing tests in a more
  fine-grained manner than before; (patches 106, 133-142 sparsely, moving
  patches for consistency with python.spec: 128 to 134, 126 to 135, 127 to 141)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-3
changelog:
  - renumber and rename patches for consistency with python.spec (8 to 55, 106
  to 104, 6 to 111, 104 to 113, 105 to 114, 125, 131, 130 to 143)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.2-5
changelog:
  - support OpenSSL FIPS mode in _hashlib and hashlib; don't build the _md5 and
  _sha* modules, relying on _hashlib in hashlib (rhbz#563986; patch 146)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-1
changelog:
  - 3.2.3; refresh patch 102 (lib64); drop upstream patches 148 (gdbm magic
  values), 149 (__pycache__ fix); add patch 152 (test_gdb regex)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-4
changelog:
  - avoid allocating thunks in ctypes unless absolutely necessary, to avoid
  generating SELinux denials on "import ctypes" and "import uuid" when embedding
  Python within httpd (patch 155; rhbz#814391)


author: David Malcolm <dmalcolm@redhat.com> - 3.2.3-7
changelog:
  - update uid/gid handling to avoid int overflows seen with uid/gid
  values >= 2^31 on 32-bit architectures (patch 157; rhbz#697470)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  * Fri Jun 22 2012 David Malcolm <dmalcolm@redhat.com> - 3.2.3-10
  - use macro for power64 (rhbz#834653)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.1.b1
changelog:
  - 3.2 -> 3.3: https://fedoraproject.org/wiki/Features/Python_3.3
  - 3.3.0b1: refresh patches 3, 55, 102, 111, 113, 114, 134, 157; drop upstream
  patch 147; regenenerate autotools patch; drop "--with-wide-unicode" from
  configure (PEP 393); "plat-linux2" -> "plat-linux" (upstream issue 12326);
  "bz2" -> "_bz2" and "crypt" -> "_crypt"; egg-info files are no longer shipped
  for stdlib (upstream issues 10645 and 12218); email/test moved to
  test/test_email; add /usr/bin/pyvenv[-3.3] and venv module (PEP 405); add
  _decimal and _lzma modules; make collections modules explicit in payload again
  (upstream issue 11085); add _testbuffer module to tests subpackage (added in
  upstream commit 3f9b3b6f7ff0); fix test failures (patches 160 and 161);
  workaround erroneously shared _sysconfigdata.py upstream issue #14774; fix
  distutils.sysconfig traceback (patch 162); add BuildRequires: xz-devel (for
  _lzma module); skip some tests within test_socket (patch 163)


author: David Malcolm <dmalcolm@redhat.com> - 3.3.0-0.3.b2
changelog:
  - 3.3b1 -> 3.3b2; drop upstreamed patch 152; refresh patches 3, 102, 111,
  134, 153, 160; regenenerate autotools patch; rework systemtap patch to work
  correctly when LANG=C (patch 55); importlib.test was moved to
  test.test_importlib upstream


author: Toshio Kuratomi <toshio@fedoraproject.org> - 3.3.0-8
changelog:
  - Fix error in platform.platform() when non-ascii byte strings are decoded to
    unicode (rhbz#922149)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-1
changelog:
  - Updated to Python 3.3.1.
  - Refreshed patches: 55 (systemtap), 111 (no static lib), 146 (hashlib fips),
  153 (fix test_gdb noise), 157 (uid, gid overflow - fixed upstream, just
  keeping few more downstream tests)
  - Removed patches: 3 (audiotest.au made it to upstream tarball)
  - Removed workaround for http://bugs.python.org/issue14774, discussed in
  http://bugs.python.org/issue15298 and fixed in revision 24d52d3060e8.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.1-3
changelog:
  - Add patch that enables building on ppc64p7 (replace the sed, so that
  we get consistent with python2 spec and it's more obvious that we're doing it.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.3.2-1
changelog:
  - Updated to Python 3.3.2.
  - Refreshed patches: 153 (gdb test noise)
  - Dropped patches: 175 (configure -Wformat, fixed upstream), 182 (gdb
  test threads)
  - Synced patch numbers with python.spec.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.a4
changelog:
  - Update to Python 3.4 alpha 4.
  - Refreshed patches: 55 (systemtap), 102 (lib64), 111 (no static lib),
  114 (statvfs flags), 132 (unittest rpmbuild hooks), 134 (fix COUNT_ALLOCS in
  test_sys), 143 (tsc on ppc64), 146 (hashlib fips), 153 (test gdb noise),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port), 186 (dont raise
  from py_compile)
  - Removed patches: 129 (test_subprocess nonreadable dir - no longer fails in
  Koji), 142 (the mock issue that caused this is fixed)
  - Added patch 187 (remove thread atfork) - will be in next version
  - Refreshed script for checking pyc and pyo timestamps with new ignored files.
  - The fips patch is disabled for now until upstream makes a final decision
  what to do with sha3 implementation for 3.4.0.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b1
changelog:
  - Update to Python 3.4 beta 1.
  - Refreshed patches: 102 (lib64), 111 (no static lib), 125 (less verbose COUNT
  ALLOCS), 141 (fix COUNT_ALLOCS in test_module), 146 (hashlib fips),
  157 (UID+GID overflows), 173 (ENOPROTOOPT in bind_port)
  - Removed patch 00187 (remove pthread atfork; upstreamed)


author: Bohuslav Kabrda <bkabrda@redhat.com> - 3.4.0-0.1.b2
changelog:
  - Update to Python 3.4 beta 2.
  - Refreshed patches: 55 (systemtap), 146 (hashlib-fips), 154 (test_gdb noise)
  - Dropped patches: 114 (statvfs constants), 177 (platform unicode)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.0-5
changelog:
  - Don't add Werror=declaration-after-statement for extension
    modules through setup.py (PyBT#21121)


author: Dan Horák <dan[at]danny.cz> - 3.4.1-7
changelog:
  - update the arch list where valgrind exists - %power64 includes also
      ppc64le which is not supported yet


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-1
changelog:
  - Update to 3.4.2
  - Refreshed patches: 156 (gdb autoload)
  - Removed: 195 (Werror declaration), 197 (CVE-2014-4650)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.2-7
changelog:
  - Fixed undefined behaviour in faulthandler which caused test to hang on x86_64
    (http://bugs.python.org/issue23433)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-1
changelog:
  - Updated to 3.4.3
  - BuildPython now accepts additional build options
  - Temporarily disabled test_gdb on arm (rhbz#1196181)


author: Matej Stuchlik <mstuchli@redhat.com> - 3.4.3-4
changelog:
  - Use 1024bit DH key in test_ssl
  - Use -O0 when compiling -debug build
  - Update pip version variable to the version we actually ship


author: Thomas Spura <tomspur@fedoraproject.org> - 3.4.3-4
changelog:
  - python3-devel: Require python-macros for version independant macros such as
    python_provide. See fpc#281 and fpc#534.


author: Tomas Orsava <torsava@redhat.com> - 3.5.1-9
changelog:
  - Fix for: CVE-2016-0772 python: smtplib StartTLS stripping attack
  - Raise an error when STARTTLS fails
  - rhbz#1303647: https://bugzilla.redhat.com/show_bug.cgi?id=1303647
  - rhbz#1346345: https://bugzilla.redhat.com/show_bug.cgi?id=1346345
  - Fixed upstream: https://hg.python.org/cpython/rev/d590114c2394


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-1
changelog:
  - Rebased to version 3.5.2
  - Set to work with pip version 8.1.2
  - Removed patches 207, 237, 241 as fixes are already contained in Python 3.5.2
  - Removed arch or environment specific patches 194, 196, 203, and 208
    as test builds indicate they are no longer needed
  - Updated patches 102, 146, and 242 to work with the new Python codebase
  - Removed patches 200, 201, 5000 which weren't even being applied


author: Tomas Orsava <torsava@redhat.com> - 3.5.2-2
changelog:
  - Updated .pyc 'bytecompilation with the newly installed interpreter' to also
    recompile optimized .pyc files
  - Removed .pyo 'bytecompilation with the newly installed interpreter', as .pyo
    files are no more
  - Resolves rhbz#1373635


author: Charalampos Stratakis <cstratak@redhat.com> - 3.5.2-6
changelog:
  - Use proper patch numbering and base upstream branch for
  porting ssl and hashlib modules to OpenSSL 1.1.0
  - Drop hashlib patch for now
  - Add riscv64 arch to 64bit and no-valgrind arches


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-7
changelog:
  - Fix error check, so that Random.seed actually uses OS randomness (rhbz#1412275)
  - Skip test_aead_aes_gcm during rpmbuild


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-8
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs to use
    just the version and release number, but not the dist tag due to Modularity


author: Tomas Orsava <torsava@redhat.com> - 3.6.0-9
changelog:
  - Modify the runtime dependency of python3-libs on system-python-libs again,
    because previous attempt didn't work properly with dnf resolving mechanism


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-12
changelog:
  - BuildRequire the new dependencies of setuptools when rewheel mode is enabled
  in order for the virtualenvs to work properly


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-18
changelog:
  - Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables
  - Use new %_module_build macro


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.0-19
changelog:
  - Revert "Set values of prefix and exec_prefix to /usr/local for
    /usr/bin/python* executables..." to prevent build failures
    of packages using alternate build tools


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.0-21
changelog:
  - Use proper command line parsing in _testembed
  - Backport of PEP 538: Coercing the legacy C locale to a UTF-8 based locale
    https://fedoraproject.org/wiki/Changes/python3_c.utf-8_locale


author: Iryna Shcherbina <ishcherb@redaht.com> - 3.6.1-0.1.rc1
changelog:
  - Update to Python 3.6.1 release candidate 1
  - Add patch 264 to skip a known test failure on aarch64


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.1-6
changelog:
  - Enable profile guided optimizations for x86_64 and i686 architectures
  - Update to a newer implementation of PEP 538
  - Update description to reflect that Python 3 is now the default Python


author: Tomas Orsava <torsava@redhat.com> - 3.6.1-7
changelog:
  - Added a dependency to the devel subpackage on python3-rpm-generators which
    have been excised out of rpm-build
  - Updated notes on bootstrapping Python on top of this specfile accordingly
  - Involves: rhbz#1410631, rhbz#1444925


author: Florian Weimer <fweimer@redhat.com> - 3.6.2-4
changelog:
  - Do not generate debuginfo subpackages (#1476593)
  - Rebuild with binutils fix for ppc64le (#1475636)


author: Tomas Orsava <torsava@redhat.com> - 3.6.2-5
changelog:
  - Dropped BuildRequires on db4-devel which was useful for Python 2 (module
    bsddb), however, no longer needod for Python 3
  - Tested building Python 3 with and without the dependency, all tests pass and
    filelists of resulting RPMs are identical


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-7
changelog:
  - Revert "Add --executable option to install.py command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-8
changelog:
  - Have /usr/bin/2to3 (rhbz#1111275)
  - Provide 2to3 and idle3, list them in summary and description (rhbz#1076401)


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-11
changelog:
  - Add bcond for --without optimizations
  - Reword package descriptions
  - Remove Group declarations
  - Skip failing test_float_with_comma


author: Michal Cyprian <mcyprian@redhat.com> - 3.6.2-12
changelog:
  - Use python3 style of calling super() without arguments in rpath
    patch to prevent recursion in UnixCCompiler subclasses
  Resolves: rhbz#1458122


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-13
changelog:
  - Rename patch files to be consistent
  - Run autotools to generate the configure script before building
  - Merge lib64 patches (104 into 102)
  - Skip test_bdist_rpm using test config rather than a patch (removes patch 137)
  - Remove patches 157 and 186, which had test changes left over after upstreaming
  - Remove patch 188, a temporary workaround for hashlib tests
  - Merge patches 180, 206, 243, 5001 (architecture naming) into new patch 274
  - Move python2-tools conflicts to tools subpackage (it was wrongly in tkinter)


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-14
changelog:
  - Expat >= 2.1.0 is everywhere, remove explicit requires
  - Conditionalize systemtap-devel BuildRequires
  - For consistency, require /usr/sbin/ifconfig instead of net-tools


author: Petr Viktorin <pviktori@redhat.com> - 3.6.2-16
changelog:
  - Specfile cleanup
  - Make the main description also applicable to the SRPM
  - Add audiotest.au to the test package


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.2-19
changelog:
  - Move pathfix.py to bindir, https://github.com/fedora-python/python-rpm-porting/issues/24
  - Make the -devel package require redhat-rpm-config
  Resolves: rhbz#1496757


author: Björn Esser <besser82@fedoraproject.org> - 3.6.4-8
changelog:
  - Add patch to explicitly link _ctypes module with -ldl (#1537489)
  - Refactored patch for libxcrypt
  - Re-enable strict symbol checks in the link editor


author: Tomas Orsava <torsava@redhat.com> - 3.6.4-10
changelog:
  - Disable test_gdb for all arches and test_buffer for ppc64le in anticipation
    of the F28 mass rebuild
  - Re-enable these tests after the mass rebuild when they can be properly
    addressed


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.6.4-14
changelog:
  - Remove the python3-tools package (#rhbz 1312030)
  - Move /usr/bin/2to3 to python3-devel
  - Move /usr/bin/idle and idlelib to python3-idle
  - Provide python3-tools from python3-idle


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-15
changelog:
  - Filter out automatic /usr/bin/python3.X requirement,
    recommend the main package from libs instead
  Resolves: rhbz#1547131


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.4-18
changelog:
  - Fix the py_byte_compile macro to work on Python 2
  - Remove the pybytecompile macro file from the flat package
  Resolves: rhbz#1484993


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-3
changelog:
  - Platform-Python: Rebase implementation from RHEL8 Alpha:
  - Move the main executable to /usr/libexec/platform-python
  - Move /usr/bin/python*-config and /usr/bin/pythonX.Ym scripts to /usr/libexec/
  - Provide symlink to the main executable and other scripts from /usr/bin/,
    these will be later shipped only in the python36 module


author: Tomas Orsava <torsava@redhat.com> - 3.6.5-7
changelog:
  - Fix %py_byte_compile macro: when invoked with a Python 2 binary it also
    mistakenly ran py3_byte_compile


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-4
changelog:
  - Create the `libs-devel` subpackage and move `devel` contents there
  - `devel` subpackage is only for the buildroot and requires `python36-devel`
    to get /usr/bin/python3{,-config} symlinks there
  - `devel` subpackage will not be shipped into RHEL8, only `libs-devel` will
  - `debug` subpackage now runtime requires `libs-devel` instead of `devel`


author: Petr Viktorin <pviktori@redhat.com> - 3.6.6-5
changelog:
  - Fix the `devel` subpackage to require python3, rather than python36-devel,
    and provide /usr/bin/python3-config itself.


author: Petr Viktorin <pviktori@redhat.com> - 3.6.6-6
changelog:
  - Make `devel` subpackage require python36-devel again
    (and get /usr/bin/python3 and /usr/bin/python3-config from that).
  - Remove /usr/bin/python3* executables
  - Use pip36 instead of `pip3`


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-9
changelog:
  - Rename the python3 subpackage to platform-python
  - Provide the `python3` name for backwards compatibility until it's taken over
    by the python36 component
  - The python36 component that contains /usr/bin/python3 will Provide the
    name `python3` in its upcoming update
  - Resolves: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-11
changelog:
  - Implement `alternatives` for chosing /usr/bin/python
  - Provide the default `no-python` alternative
  - Resolves: rhbz#1632625


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-12
changelog:
  - Rename the python3-debug subpackage to platform-python-debug
  - Provide the `python3-debug` name for backwards compatibility until it's taken
    over by the python36 component
  - Rename the python3-libs-devel subpackage to platform-python-devel for
    symmetry with the `platform-python` and `platform-python-debug` package
  - Add symlink /usr/libexec/platform-python-debug that was mistakenly omitted
  - Related: rhbz#1619153


author: Tomas Orsava <torsava@redhat.com> - 3.6.6-13
changelog:
  - Stop providing the `python3` and `python3-debug` names from the
    platform-python/-debug subpackages
  - The `python3` and `python3-debug` names are now provided from the python36
    component
  - Conflict with older versions of `python3` and `python3-debug`
  - Related: rhbz#1619153


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.7-1
changelog:
  - Update to 3.6.7 (rhbz#1627739)
  - Re-enable test_gdb (rhbz#1639536)
  - Re-enable test_faulthandler (rhbz#1640147)


author: Tomas Orsava <torsava@redhat.com> - 3.6.7-2
changelog:
  - Switch to requiring platform-python-pip/setuptools instead of the python3-
    versions
  - Resolves: rhbz#1638836


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-7
changelog:
  - Disallow control chars in http URLs
  - Fixes CVE-2019-9740 and CVE-2019-9947
  Resolves: rhbz#1704365 and rhbz#1703531


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-9
changelog:
  - Reduced default build flags used to build extension modules
    https://fedoraproject.org/wiki/Changes/Python_Extension_Flags
  Resolves: rhbz#1634784


author: Miro Hrončok <mhroncok@redhat.com> - 3.6.8-12
changelog:
  - Use RPM built wheels of pip and setuptools in ensurepip instead of our rewheel patch
  - Require platform-python-setuptools from platform-python-devel to prevent packaging errors
  Resolves: rhbz#1701286


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-13
changelog:
  - Do not set PHA verify flag on client side (rhbz#1725721)
  - Enable TLS 1.3 post-handshake authentication in http.client (rhbz#1671353)


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-14
changelog:
  - Adding a new patch 329 that adds support for OpenSSL FIPS mode
  - Explicitly listing man pages in files section to fix an RPM warning
  Resolves: rhbz#1731424


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-15
changelog:
  - Patch 329 that adds support for OpenSSL FIPS mode has been improved and
    bugfixed
  Resolves: rhbz#1744670 rhbz#1745499 rhbz#1745685


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-16
changelog:
  - Properly pass the -Og optimization flag to the debug build
  Resolves: rhbz#1712977 and rhbz#1714733


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-18
changelog:
  - Reduce the number of tests running during the profile guided optimizations build
  - Enable profile guided optimizations for all the supported architectures
  Resolves: rhbz#1749576


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-19
changelog:
  - Skip windows specific test_get_exe_bytes test case and enable test_distutils
  Resolves: rhbz#1754040


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-21
changelog:
  - Patch 329 (FIPS) modified: Added workaround for mod_ssl:
    Skip error checking in _Py_hashlib_fips_error
  Resolves: rhbz#1760106


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-22
changelog:
  - Changed Requires into Recommends for python3-pip to allow a lower RHEL8
    footprint for containers and other minimal environments
  Resolves: rhbz#1756217


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-23
changelog:
  - Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
  - Use OpenSSL's DRBG and disable os.getrandom() function in FIPS mode
  Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-24
changelog:
  - Build Python with -fno-semantic-interposition for better performance
  - https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
  - Also fix test_gdb failures with Link Time Optimizations
  Resolves: rhbz#1724996


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-26
changelog:
  - Skip test_startup_imports from test_site if we have a .pth file in sys.path
  Resolves: rhbz#1814392


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-27
changelog:
  - Add a sentinel value on the Hmac_members table of the fips compliant hmac module
  Resolves: rhbz#1800512


author: Victor Stinner <vstinner@python.org> - 3.6.8-30
changelog:
  - Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
    introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
    (rhbz#1851090).


author: Tomas Orsava <torsava@redhat.com> - 3.6.8-31
changelog:
  - Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
  Resolves: rhbz#1856481
  - Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
  Resolves: rhbz#1854926


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-32
changelog:
  - Security fix for CVE-2020-26116: Reject control chars in HTTP method in http.client
  Resolves: rhbz#1883257


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-33
changelog:
  - Add support for upstream architecture names
  https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names
  Resolves: rhbz#1868003


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-34
changelog:
  - Security fix for CVE-2020-27619: eval() call on content received via HTTP in the CJK codec tests
  Resolves: rhbz#1890237


author: Victor Stinner <vstinner@redhat.com> - 3.6.8-39
changelog:
  - Fix reentrant call to threading.enumerate() (rhbz#1959459)
  - Don't exit Python with abort() when a thread exit and there is no available
    file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-41
changelog:
  - Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
  Resolves: rhbz#1995234


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-43
changelog:
  - Change shouldRollover() methods of logging.handlers to only rollover regular files
  Resolves: rhbz#2009200


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-44
changelog:
  - Use the monotonic clock for theading.Condition
  - Use the monotonic clock for the global interpreter lock
  Resolves: rhbz#2003758


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-45
changelog:
  - Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
  Resolves: rhbz#2036020


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-46
changelog:
  - Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#2047376, rhbz#2060435


author: Charalampos Stratakis <cstratak@redhat.com> - 3.6.8-50
changelog:
  - Security fix for CVE-2022-45061
  - Strip the LTO bytecode from python.o
  Resolves: rhbz#2144072, rhbz#2137707


author: Lumír Balhar <lbalhar@redhat.com> - 3.6.8-58
changelog:
  - Security fix for CVE-2022-48564
  Resolves: RHEL-16674
  - Skip tests failing on s390x
  Resolves: RHEL-19252


author: zhangbinchen <zhangbinchen@openanolis.org> - 3.6.8-62.0.1
changelog:
  - Add Anolis platform
  - Support Loongarch for python3 (songmingliang@uniontech.com)
  - Fix testcase fails on loongarch64 (geliwei@openanolis.org)
  - repair security fix for CVE-2007-4559 (sunxinpeng@inspur.com)
  - Fix CVE-2023-40217: Check for & avoid the ssl (hezhongkun@inspur.com)
  - Security fix for CVE-2022-48560 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2022-48564 (wangkaiqiang@inspur.com)
  - Security fix for CVE-2023-27043 (liubo03@inspur.com)
  - cherry-pick `add sw patch #1182efa2f05c5804a55d35d45a9d72f97b64a9b2`. (Weisson@linux.alibaba.com)
    cherry-pick `sw use python of wordsize 64 #862dabb407d3f98c64f3a9d2675fcd3a6300a21f`.


author: pangqing <pangqing@uniontech.com> - 3.6.8-62.0.1.01
changelog:
  - spec: change redhat-rpm-config to uos-rpm-config
  - rebrand: add uos platform
  - feat: add sm3 support
  - feat: add sw_64 support


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-11
changelog:
  - Subpackage python2-dirq has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.22.08-11
changelog:
  - Drop the memstat module for Fedora 35+
    The required __malloc_hook was removed from glibc 2.33.9000-48
    The memstat module is deprecated and will be removed in root 6.26


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.24.02-1
changelog:
  - Update to 6.24.02
  - ROOT now uses llvm/clang version 9 (updated from version 5)
  - No longer exclude arch s390x (better supported in llvm/clang 9)
  - Drop patches accepted upstream or previously backported
  - Backport some fixes that make more tests work
  - New subpackages: python{2,3}-distrdf, root-roofit-batchcompute
  - Require js-jsroot >= 6


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.24.04-1
changelog:
  - Update to 6.24.04
  - Add dependency on json-devel to root-core
  - Disable uring in EPEL 8 (liburing is available, but uring not
    supported by kernel)


author: qiudengkui <qiudengkui@uniontech.com> - 6.24.04-1.02
changelog:
  - i686 build test falid, So Cancel i686 build. Refer to "http://10.30.38.102/kojifiles/work/tasks/671/670671/build.log" log for details


author: Miro Hrončok <mhroncok@redhat.com> - 2.39-14
changelog:
  - Subpackage python2-distutils-extra has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-12
changelog:
  - [repomanage] Use modules only from repo they are handling
  - [repomanage] Add new option --oldonly
  - Skip all non rpm tsi for transaction_action plugins


author: Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-13
changelog:
  - [copr] Fix 'dnf copr enable' on Fedora 35
  - [copr] Disable dnf playground command
  - [copr] Fix baseurl for centos stream chroot
  - [copr] Silence a deprecation warning in plugins/copr.py
  - [copr] Shorter verification that the project exists
  - [copr] Better error message for dnf copr enable
  - [copr] allow specifying protocol as part of --hub


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.4-4
changelog:
  - Subpackage python2-editor has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.25.1-2
changelog:
  - Subpackage python2-eventlet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Ken Dreyer <kdreyer@redhat.com> - 1.5.0-7
changelog:
  - Update Summary to match upstream
  - Use HTTPS in upstream URL
  - License is now MIT-only
  - Use standard pypi_source macro
  - Remove explicit Requires
  - Remove Sphinx docs generation on py2 (rhbz#1690057)
  - Drop double listing of python3/LICENSE file
  - Patch tests for latest apipkg (rhbz#1690057)
  - Patch docs config for Sphinx 2 (rhbz#1690057)


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-10
changelog:
  - Subpackage python2-extras has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Athmane Madjoudj <athmane@fedoraproject.org> - 2.0.0-1
changelog:
  - Update to 2.0.0 (rhbz #1576800)
  - Revamp the spec with py2/py3 packages
  - Allow installation along with older fabric
  - Add patch to fix and run the test suite


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.0-5
changelog:
  - Subpackage python2-fabric has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Viktorin <pviktori@redhat.com> - 0.14.1-14
changelog:
  - Drop the python-testtools build dependency

    The testtools module adds some extensions to unittest, but none of these
    extensions are actually used in python-fasteners tests (or they've been
    added back to unittest years ago, and thus aren't extensions any more).


author: Fabian Affolter <mail@fabian-affolter.ch> - 1.0.5-2
changelog:
  - Update to latest upstream release 1.0.5
  - Fix license tag and add LICENSE file
  - Use upstream source
  - Enable tests


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.0-16
changelog:
  - Subpackage python2-fixtures has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.1.1-7
changelog:
  - Subpackage python2-flask-migrate has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.0-4
changelog:
  - Subpackage python2-flask-sqlalchemy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.14.2-7
changelog:
  - Subpackage python2-flask-wtf has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-16
changelog:
  - Subpackage python2-fluidity-sm has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.2-9
changelog:
  - Subpackage python2-frozendict has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-10
changelog:
  - Skip python2 tests to allow removing python2-unittest2 from the distribution
  - Fix workaround for allowing Python 2 for build


author: Petr Viktorin <pviktori@redhat.com> - 1.0.2-11
changelog:
  - Disable the python3 subpackage
    Functionality of funcsigs is available in Python 3's inspect module.


author: Antonio Trande <sagitterATfedoraproject.org> - 0.17.1-0.2.20190506git23989c4
changelog:
  - Bump to a pre-release 0.17.1, commit #23989c4
  - Unversioned commands point to Python3 on Fedora
  - Obsolete Python2 version on Fedora


author: Petr Viktorin <pviktori@redhat.com> - 2.0.3-6
changelog:
  - Remove Python 2 subpackage
    https://bugzilla.redhat.com/show_bug.cgi?id=1723967
  - Run tests using a specific Python interpreter, rather than rely on command name
  - Re-enable passing tests


author: Adam Williamson <awilliam@redhat.com> - 0.7.0-5
changelog:
  - Disable Python 2 build on F30+, EL8+
  - Drop all the EPEL compat stuff for now as we can't build for EPEL


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.3-7
changelog:
  - Subpackage python2-idstools has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Carl George <carl@george.computer> - 0.15-2
changelog:
  - Include missing upstream license
  - Disable package data in setup.py to avoid installing source files


author: Michal Ambroz <rebus _AT seznam.cz> - 0.9.18-2
changelog:
  - add missing dependencies for EPEL7 - python2-setuptools
  - patch setup.py to remove python_version to meet RHEL7 setuptools version


author: Michal Ambroz <rebus _AT seznam.cz> - 0.9.20-1
changelog:
  - bump to version 0.9.20
  - generate python3 packages, preference goes to python3
  - omit python2 for fc32+ rhel8+


author: Athmane Madjoudj <athmane@fedoraproject.org> - 1.2.0-1
changelog:
  - Update to 1.2.0 (rhbz #1600756)
  - Remove upstreamed patches
  - Add patch for bypass vendorized libs


author: Paul Howarth <paul@city-fan.org> - 1.4.0-1
changelog:
  - Update to 1.4.0 (#1787868)
    - A corner case in #~invoke.context.Context.run# caused overridden streams to
      be unused if those streams were also set to be hidden, e.g.
      'run(command, hide=True, out_stream=StringIO())' would result in no writes
      to the 'StringIO' object (GH#637); this has been fixed - hiding for a given
      stream is now ignored if that stream has been set to some non-'None' (and
      in the case of 'in_stream', non-'False') value.
    - As part of feature work on GH#682, we noticed that the
      '~invoke.runners.Result' return value from '~invoke.context.Context.run'
      was inconsistent between dry-run and regular modes; for example, the
      dry-run version of the object lacked updated values for 'hide', 'encoding'
      and 'env' - this has been fixed
    - Add asynchronous behavior to '~invoke.runners.Runner.run' (GH#194, GH#682):
      - Basic asynchronicity, where the method returns as soon as the subprocess
        has started running, and that return value is an object with methods
        allowing access to the final result
      - "Disowning" subprocesses entirely, which not only returns immediately but
        also omits background threading, allowing the subprocesses to outlive
        Invoke's own process
      See the updated API docs for the '~invoke.runners.Runner' for details on
      the new 'asynchronous' and 'disown' kwargs enabling this behavior
    - Never accompanied the top-level singleton '~invoke.run' (which simply wraps
      an anonymous '~invoke.context.Context's 'run' method) with its logical
      sibling, '~invoke.sudo' - this has been remedied


author: Carl George <carl@george.computer> - 0.12.1-2
changelog:
  - Remove _docdir_fmt macro to allow upgrading subpackages separately rhbz#1625015
  - Standardize on srcname, modname, eggname, and pkgname macros


author: Ken Dreyer <ktdreyer@ktdreyer.com> 0.4.14-1
changelog:
  - Update to 0.4.14 (rhbz#1267414)
  - Use HTTPS homepage URL
  - New Source0 PyPI URL
  - Avoid nose on el7 (LP: #872887)
  - BR: python-kerberos to make the tests get a bit further


author: Scott K Logan <logans@cottsay.net> - 0.4.16-1
changelog:
  - Update to 0.4.16
  - Add weak dependency on python-kerberos
  - Align spec file between Fedora and EPEL
  - Use a subpackage for python 2 on EPEL
  - Enable python 3 subpackage for EPEL
  - Handle automatic dependency generation (f30+)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7-12
changelog:
  - Python 2 binary package renamed to python2-junitxml
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.1-4
changelog:
  - Python 2 binary package renamed to python2-kafka
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-3
changelog:
  - Subpackage python2-kafka has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Fedora Release Engineering <releng@fedoraproject.org> - 10.0.1-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Work around BZ1758141 for BZ1799937


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-8
changelog:
  - Subpackage python2-lazy-object-proxy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-8
changelog:
  - Subpackage python2-lexicon has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.8-3
changelog:
  - Subpackage python2-libarchive-c has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.0.0-4
changelog:
  - Python 2 binary package renamed to python2-libplist
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Bastien Nocera <bnocera@redhat.com> - 2.0.0-10
changelog:
  + libplist-2.0.0-10
  - The Python3 Cython binary is now called "cython" not "cython3"
  - Resolves: #1611726


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-24
changelog:
  - Subpackage python2-linecache2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.7-11
changelog:
  - Subpackage python2-logging-tree has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.1.2-3
changelog:
  - Subpackage python2-lz4 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.1-5
changelog:
  - Subpackage python2-marshmallow-enum has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.58-11
changelog:
  - Subpackage python2-memcached has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1-13
changelog:
  - Subpackage python2-messaging has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.11.0-10
changelog:
  - Subpackage python2-migrate has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.3-10
changelog:
  - Subpackage python2-mistune has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.2-4
changelog:
  - Subpackage python2-mmtf has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.5-13
changelog:
  - Subpackage python2-moksha-common has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.5-5
changelog:
  - Subpackage python2-monotonic has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.1-5
changelog:
  - Subpackage python2-msgpack has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Scott K Logan <logans@cottsay.net> - 2.0.3-10
changelog:
  - Subpackage python2-multi_key_dict has been removed from f31+ (rhbz#1716662)
  - Python 3 subpackage has been added for epel7
  - Update unified spec format


author: Miro Hrončok <mhroncok@redhat.com> - 2.3.2-6
changelog:
  - Subpackage python2-munch has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.0.12-8
changelog:
  - Subpackage python2-munkres has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.6.10-1
changelog:
  - Update to 0.16.10
  - Drop python-ncclient-0.6.9-shebangs.patch, now upstreamed
  - Drop python3dist(setuptools) BR, redundant with pyproject-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.0-14
changelog:
  - Subpackage python2-ndg_httpsclient has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Šplíchal <psplicha@redhat.com> 1.1-0
changelog:
  - TestCase.{setup,action,effect,breakdown} attributes [BZ#1089039]
  - Map automated/manual when searching test cases [BZ#1092464]
  - Iterate over PlanRuns sorted by id/creation
  - Indexing support for containers
  - Separate methods for locking, handle corrupted cache
  - Limit cache writing window (chance of corruption) [BZ#1091404]
  - Ignore malformed and stale cache locks [BZ#1091404]
  - Workaround Teiid problem with converting time [BZ#1093054]


author: Petr Šplíchal <psplicha@redhat.com> 1.2-0
changelog:
  - Include example config in documentation [BZ#1098818]
  - Handle duplicate entry errors gracefully [BZ#1112521]
  - Added Aleš Zelinka to the list of contributors


author: Petr Šplíchal <psplicha@redhat.com> 1.3-1
changelog:
  - Package nitrate for PyPI, several adjustments, docs update
  - Better handle non-existent objects [BZ#1204028]
  - Correctly handle no caseplan found [BZ#1171671]
  - Typo fix in the TestPlan's _attributes [BZ#1304295]
  - Make sure that PlanStatus id type is int


author: Petr Šplíchal <psssssss@gmail.com> 1.4-1
changelog:
  - Update specfile to new python packaging standards
  - Performance improvement for TestPlan.sortkey
  - Port to python-gssapi from pykerberos
  - Make TestRun errata_id default to None


author: Petr Šplíchal <psplicha@redhat.com> - 1.5-2
changelog:
  - Use py3_build and py3_install to simplify spec
  - Rename and explicitly list the license file
  - Remove group, fix license, add missing requires


author: Petr Šplíchal <psplicha@redhat.com> - 1.5-3
changelog:
  - For older releases build both python2 and python3 packages
  - Include conflicting files only in the python3 package


author: Petr Šplíchal <psplicha@redhat.com> - 1.5-4
changelog:
  - Fix requires (no python2-gssapi and python2-psycopg2 in RHEL7).
  - Enable automated python dependecies generator


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.6.1-10
changelog:
  - Subpackage python2-nmap has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.1.0-24
changelog:
  - Subpackage python2-nose-cover3 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.6-3
changelog:
  - Subpackage python2-numexpr has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7.0-1
changelog:
  - Update to latest version (#1614993)
  - Various modernization to the spec file. Actually fail %check if the test
    suite fails.


author: Tomas Orsava <torsava@redhat.com> - 1:1.14.3-5
changelog:
  - Switch runtime dependency of the python3-numpy-f2py package from
    python3-devel (that's now buildroot-only) to python3-libs-devel
  Resolves: rhbz#1610863


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2-6
changelog:
  - Python 2 binary package renamed to python2-openid-cla
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1-9
changelog:
  - Python 2 binary package renamed to python2-openid-teams
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1-0.29.20110209
changelog:
  - Subpackage python2-openoffice has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.24.1-2
changelog:
  - Subpackage python2-pandas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: kekepower <kekepower> 1.0.3-1.mga7
changelog:
  + Revision: 1206656
  - Update to version 1.0.3
  - Rename python-parallax to python2-parallax
  - Added python3-parallax


author: Carl George <carl@george.computer> - 0.5.1-1
changelog:
  - Latest upstream
  - Drop EPEL python34 subpackage
  - Disable python2 package on F31+ and EL8+ rhbz#1733248


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.4-12
changelog:
  - Subpackage python2-pickleshare has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-14
changelog:
  - Fixes for CVE-2021-25290, CVE-2021-25292, CVE-2021-25293, CVE-2021-27921
  CVE-2021-27922, and CVE-2021-27923
  Resolves: rhbz#1934685 rhbz#1934699 rhbz#1934705 rhbz#1935384 rhbz#1935396 rhbz#1935401


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-15
changelog:
  - Fixes for CVE-2021-25288, CVE-2021-25287, CVE-2021-28675, CVE-2021-28676,
  CVE-2021-28677 and CVE-2021-28678
  Resolves: rhbz#1958231, rhbz#1958226, rhbz#1958240, rhbz#1958252, rhbz#1958257, rhbz#1958263


author: Charalampos Stratakis <cstratak@redhat.com> - 5.1.1-18
changelog:
  - Fixup for CVE-2022-22817
  - Security fixes for CVE-2022-22815, CVE-2022-22816
  Resolves: rhbz#2042511, rhbz#2042522


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-3.20130210gite09ff61
changelog:
  - Really remove -fno-strict-aliasing
  - Place comment on how to retreive source just above the Source0 line


author: Sandro Mani <manisandro@gmail.com> - 1.7.8-4.20130305git7866759
changelog:
  - Update to latest git snapshot
  - 0001-Cast-hash-table-values-to-unsigned-long.patch now upstream
  - Pillow-1.7.8-selftest.patch now upstream


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-2.git2e88848
changelog:
  - Update to latest git
  - Remove python-pillow-disable-test.patch, gcc is now fixed
  - Add python-pillow_tempfile.patch to prevent a temporary file from getting packaged


author: Sandro Mani <manisandro@gmail.com> - 2.0.0-6.gitd1c6db8
changelog:
  - Update to latest git
  - python-pillow_quantization.patch now upstream
  - python-pillow_endianness.patch now upstream
  - Add subpackage for ImageQt module, with correct dependencies
  - Add PyQt4 and numpy BR (for generating docs / running tests)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0-7.gitd1c6db8
changelog:
  - Remove Obsoletes in the python-pillow-qt subpackage. Obsoletes isn't
    appropriate since qt support didn't exist in the previous python-pillow
    package so there's no reason to drag in python-pillow-qt when updating
    python-pillow.


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Run tests in builddir, not installroot
  - Build python3-pillow docs with python3
  - python-pillow_endian.patch upstreamed


author: Sandro Mani <manisandro@gmail.com> - 2.1.0-4
changelog:
  - Add patch to fix incorrect PyArg_ParseTuple tuple signature, fixes rhbz#962091 and rhbz#988767.
  - Renable webp support on bigendian arches


author: Sandro Mani <manisandro@gmail.com> - 2.3.0-1
changelog:
  - Update to 2.3.0
  - Build with doc disabled to break circular python-pillow -> python-sphinx -> python pillow dependency


author: Sandro Mani <manisandro@gmail.com> - 2.4.0-2
changelog:
  - Enable Jpeg2000 support
  - Enable webp support also on s390* archs, bug #962091 is now fixed
  - Add upstream patch for ghostscript detection


author: Sandro Mani <manisandro@gmail.com> - 2.7.0-1
changelog:
  - Update to 2.7.0
  - Drop sane subpackage, is in python-sane now
  - Fix python3 headers directory
  - Drop Obsoletes: python3-pillow on python3-pillow-qt


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-2
changelog:
  - Remove the python2 version of docs
  - Remove Qt subpackages
  - Drop dependency on python2-olefile (breaking MicImagePlugin.py, FpxImagePlugin)


author: Petr Viktorin <pviktori@redhat.com> - 5.1.1-3
changelog:
  - Remove the Python 2 subpackage
  - Remove the libimagequant dependency
    The imagequant library was only used to support a non-default image
    quantization mode.


author: Lumír Balhar <lbalhar@redhat.com> - 5.1.1-7
changelog:
  - Add upstream patch to solve build-time warning
  - Move patches to dist-git
  - Resolves: rhbz#1639348


author: Miro Hrončok <mhroncok@redhat.com> - 0.9-2
changelog:
  - Subpackages python2-pint, python2-pint-doc have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 2.8.4-3
changelog:
  - Fix shebang mangling
  - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either


author: Kevin Fenzi <kevin@scrye.com> - 2.0.0-7
changelog:
  - Review fixes: drop python3 dep, Update obsoletes, add python_provide
  - Review fixes: Use pypi_source, fixed files globbing.


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-4
changelog:
  - Subpackage python2-pydot has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Terje Rosten <terje.rosten@ntnu.no> - 0.25-1
changelog:
  - 0.25
  - Use bundled construct as construct 2.9 is incompatible
  - Drop Python 2 stuff on el8 and Python 31 or newer


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.6-13
changelog:
  - Python 2 binary package renamed to python2-pylibravatar
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.6-20
changelog:
  - Subpackage python2-pylibravatar has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.0-5
changelog:
  - Subpackage python2-pynacl has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.4-4
changelog:
  - Subpackage python2-pyngus has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.3.8-7
changelog:
  - Python 2 binary package renamed to python2-pyramid-fas-openid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.3-6
changelog:
  - Subpackage python2-pyroute2 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-13
changelog:
  - Subpackage python2-pysendfile has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.9-2
changelog:
  - Subpackage python2-pysnmp has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Orion Poplawski <orion@nwra.com> - 0.10.0-1.2
changelog:
  - Support pytest 3.4.2 in EL8 (bugz#1761169)
  - Re-enable tests for EPEL8
  - Avoid issues with older hypothesis for now


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.1.1-8
changelog:
  - Subpackage python2-pytest-benchmark has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal
  - Fix FTBFS caused by removal of python2-cpuinfo (#1675780)


author: Dan Callaghan <dan.callaghan@opengear.com> - 3.3.1-1
changelog:
  - new upstream release 3.3.1:
    https://github.com/pytest-dev/pytest-randomly/blob/3.3.1/HISTORY.rst


author: Dan Callaghan <djc@djc.id.au> - 3.4.0-1
changelog:
  - new upstream release 3.4.0:
    https://github.com/pytest-dev/pytest-randomly/blob/3.4.0/HISTORY.rst


author: Dan Callaghan <djc@djc.id.au> - 3.4.1-1
changelog:
  - new upstream release 3.4.1:
    https://github.com/pytest-dev/pytest-randomly/blob/3.4.1/HISTORY.rst


author: Scott Talbert <swt@techie.net> - 1:1.24.1-1
changelog:
  - Add epoch and revert back to 1.24.1 for pytest 3.4.2 compatibility (#1742828)
  - Remove Python 2 support
  - Re-enable tests


author: mulhern <amulhern@redhat.com> - 0.21.1
changelog:
  - Deprecate use of Device object as mapping from udev property names to values
  - Add a Properties class and a Device.properties() method for udev properties
  - Fix places where Device object was incorrectly used in a boolean context
  - Return an empty string, not None, if the property value is an empty string
  - Exceptions re-raised from libudev calls now have a message string
  - Insert a warning about using a Device in a boolean context in docs
  - Infrastructure for vagrant tests is removed
  - Various internal refactorings
  - Extensive test improvements
  - Numerous documentation fixes


author: Raphael Groner <projects.rg@smart.ms> - 6.7.3-3
changelog:
  - rebuilt for vcpry>=2 etc., rhbz#1763484
  - avoid duplication of dependency generation
  - [epel] try to enable tests for python3, still WIP


author: Rex Dieter <rdieter@fedoraproject.org> - 2.11.2-2
changelog:
  - cleanup, fix qsci docs and %check logic
  - include python dist-info for qt5 builds
  - drop python2 on f31+ for now due to FTBFS


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 6.0.0-3
changelog:
  - Python 2 binary package renamed to python2-raven
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 4.2.1-1
changelog:
  - Update to 4.2.1
  - Add missing python3 requires (rhbz#1295098)
  - Modernize the package (python2 subpackage, %pyX_* macros..., new versioned executable)
  - Run tests on Python 3, even when failing
  - Fixed bad shebangs


author: Miro Hrončok <mhroncok@redhat.com> - 3.2.1-4
changelog:
  - Subpackage python2-redis has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Ken Dreyer <kdreyer@redhat.com> 1.1.2-1
changelog:
  - Update to 1.1.2
  - Use standard %srcname macro
  - Use %pypi_source macro for Source0
  - Switch to %autosetup
  - Drop PYTHONPATH manipulation in %check


author: Jamie Lennox <jamielennox@gmail.com> - 1.7.0-1
changelog:
  - Updated to upstream 1.7.0
  - Conditionalized tests for EPEL8 not having required dependencies
  - Add patch to skip purl tests as dependency not present.


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.0-4
changelog:
  - Subpackage python2-responses has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.3-18
changelog:
  - Subpackage python2-retrying has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-3
changelog:
  - Subpackage python2-rfc3986 has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.16-8
changelog:
  - Related: #1622145 - don't run dmi_warnings() if there's no dmidecode
    (tkasparek@redhat.com)
  - Related: #1622145 - split into arch package (tkasparek@redhat.com)
  - Resolves: #1622145 - drop dmidecode dependency on non x86_64 arches
    (tkasparek@redhat.com)


author: Michael Mraka <michael.mraka@redhat.com> 5.4.65-1
changelog:
  - rhn-virtualization: do not install sys-v init script on SUSE
  - rhn-virtualization: add missing dirs to filelist for SUSE and enable build
    for Tumbleweed


author: Michael Mraka <michael.mraka@redhat.com> 5.4.70-1
changelog:
  - remove install/clean section initial cleanup
  - removed Group from specfile
  - removed BuildRoot from specfiles


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.1-9
changelog:
  - Subpackage python2-routes has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Ondřej Nosek <onosek@redhat.com> - 1.61-1
changelog:
  - Pytest update and MANIFEST.in prune (onosek)
  - Re-enable clog tests (onosek)
  - Skip directories inside of imported srpm file - rhbz#1866297 (onosek)
  - Skip 'sources' file when it is missing - rhbz#1867440 (onosek)
  - New layout for retired packages - rhbz#1867822 (onosek)
  - added a extendable layout module to deal with different package layouts
    within the CLI (2183506+odra)
  - Add (onosek)
  - Pytest replaces nosetests - #501 (onosek)
  - Disable some test for 'clog' functionality (onosek)
  - Suggest a way to track remote branch - update (onosek)
  - Suggest a way to track remote branch in the error log (cqi)
  - Remove deprecated support for kojiconfig (onosek)
  - Switch from krb_login to gssapi_login - rhbz#1830430 (onosek)
  - Disable test method's docstring in nosetests list (onosek)
  - Check repo name for correct format (onosek)
  - Unittests for passing additional arguments (onosek)
  - Passing additional arguments to underlaying commands - #432 (onosek)
  - Updated supported plaforms in documentation (onosek)
  - Repair compatible formatting for Python 2.6 (onosek)
  - Repair downloading sources into external directory (onosek)


author: Miro Hrončok <mhroncok@redhat.com> - 3.4.2-12
changelog:
  - Subpackage python2-rsa has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.10-13
changelog:
  - Subpackage python2-setproctitle has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.1-14
changelog:
  - Subpackage python2-simplegeneric has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Randy Barlow <bowlofeggs@fedoraproject.org> - 3.17.0-1
changelog:
  - Update to 3.17.0 (#1773534).
  - https://github.com/simplejson/simplejson/blob/v3.17.0/CHANGES.txt
  - Drop python2-simplejson.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.0-0.11.b2
changelog:
  - Python 2 binary package renamed to python2-simplemediawiki
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-0.17.b2
changelog:
  - Subpackage python2-simplemediawiki has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.3-6
changelog:
  - Subpackage python2-smmap has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - use standard rpmbuild bytecompile
  - modules are now in standard sitelib path
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-abrt into python2/python3 specific packages


author: Michael Mraka <michael.mraka@redhat.com> 2.8.2-1
changelog:
  - install files into python_sitelib/python3_sitelib
  - split spacewalk-oscap into python2/python3 specific packages


author: Tomas Kasparek <tkasparek@redhat.com> 2.8.1-3
changelog:
  - split spacewalk-usix into python2 and python3 variants (tkasparek@redhat.com)
  - build python3-spacewalk-usix also on rhel8 (tkasparek@redhat.com)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.0.0-3
changelog:
  - Fix the python2 and python3 scripts to coexist according to the
    Packaging:Python guidelines
  - Fix dist tag


author: Paul Howarth <paul@city-fan.org> - 1.4.1-2
changelog:
  - Incorporate feedback from package review (#1785391)
    - Use %pypi_source macro
    - Use %python_provide macro
    - Runtime python dependencies detected automatically since F-30, EL-8
    - Fix egg-info globbing in %files list
    - Add GPG source verification in %prep section
    - Update LICENSE file (updated copyright date)


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-4
changelog:
  - Subpackage python2-sphinxcontrib-httpdomain has been removed
    See https://fedoraproject.org/wiki/Changes/Sphinx2


author: Julian Sikorski <belegdol@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to 1.1.0
  - Add -cairosvgconverter subpackage
  - Move BuildRequires to main package section
  - Add python3-setuptools to BuildRequires


author: Miro Hrončok <mhroncok@redhat.com> - 1.3-7
changelog:
  - Subpackage python2-sqlalchemy_schemadisplay has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.2.2-4
changelog:
  - Python 2 binary package renamed to python2-sqlparse
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.4-4
changelog:
  - Subpackage python2-sqlparse has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 4.1.21-3
changelog:
  - Subpackage python2-stomppy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jerry James <loganjerry@gmail.com> - 1.3.0-18
changelog:
  - The python iso8601 module in Fedora has diverged too much from the bundled
    version.  Allow this package to bundle it (bz 1811697).


author: Jerry James <loganjerry@gmail.com> - 1.3.0-19
changelog:
  - Drop the -decode-binary-to-unicode patch; it doesn't work with the bundled
    version of iso8601.
  - Add 0003 and 0004 patches to fix bugs reported to upstream.


author: Raphael Groner <projects.rg@smart.ms> - 0.8.3-7
changelog:
  - epel: (re-)add properly subpackages for python2 and both python3 versions
  - use macro for description


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.1-25
changelog:
  - Subpackage python2-tempita has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.3.1-7
changelog:
  - Subpackage python2-testpath has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.0.20-20
changelog:
  - Subpackage python2-testrepository has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.0-11
changelog:
  - Subpackage python2-testresources has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-17
changelog:
  - Subpackage python2-testscenarios has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.0-3
changelog:
  - Subpackage python2-toml has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Robert-André Mauchin <zebob.m@gmail.com> - 19.10.0-2
changelog:
  - Security fix for CVE-2020-10108 (#1813439, #1813441)
  - Security fix for CVE-2020-10109 (#1813447, #1813449)


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.1-17
changelog:
  - Subpackage python2-txws has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Carl George <carl@george.computer> - 0.9.1-20
changelog:
  - Include LICENSE file
  - Fix automatic dependency generation
  - Add provides for python-txws
  - Run test suite


author: Miro Hrončok <mhroncok@redhat.com> - 0.8.0-11
changelog:
  - Subpackage python2-txzmq has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-5
changelog:
  - Subpackage python2-vcrpy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-3
changelog:
  - Subpackage python2-vine has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jiri Kucera <jkucera@redhat.com> - 0.3.11-4
changelog:
  - fixed License
  - Requires: /usr/bin/gpg2 in libs subpackage
  - Added support for opening all types of LUKS devices
    Resolves: #1626974


author: Kevin Fenzi <kevin@scrye.com> - 1.2.1-2
changelog:
  - Remove non free docs from src.rpm and provide script to do so before upload. 
  - Fixes bug #1684335


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.1-5
changelog:
  - Subpackage python2-waitress has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.0-10
changelog:
  - Subpackage python2-warlock has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-7
changelog:
  - Subpackage python2-wtforms has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.2-9
changelog:
  - Subpackage python2-xlwt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.2-15
changelog:
  - Subpackage python2-zake has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 18.1.0-2
changelog:
  - Subpackages python2-zmq, python2-zmq-test have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Jochen Breuer <jbreuer@suse.de> - 18.1.0-3
changelog:
  - Providing python-pyzmq, since some packages are still relying on that.
    See: https://bugzilla.redhat.com/show_bug.cgi?id=1789889


author: Zdenek Dohnal <zdohnal@redhat.com>
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.0-0.1.beta2
changelog:
  - %build: -accessibility
  - macros.qt5: +%_qt5_archdatadir +%_qt5_settingsdir
  - pull in a couple more configure-related upstream patches


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-4
changelog:
  - create/own %{_qt5_plugindir}/iconengines
  - -devel: create/own %{_qt5_archdatadir}/mkspecs/modules
  - cleanup .prl


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.1-5
changelog:
  - -static subpkg, Requires: fontconfig-devel,glib2-devel,zlib-devel
  - -devel: Requires: pkgconfig(gl)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.1.alpha
changelog:
  - 5.2.0-alpha
  - -system-harfbuzz
  - rename subpkg -x11 => -gui
  - move some gui-related plugins base => -gui
  - don't use symlinks in %_qt5_bindir (more qtchooser-friendly)


author: Rex Dieter <rdieter@fedoraproject.org> 5.2.0-0.10.rc1
changelog:
  - 5.2.0-rc1
  - revert/omit recent egl packaging changes
  - -doc install changes-5.* files here (#989149)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.2.0-0.11.rc1
changelog:
  - needs a minimum version on sqlite build dependency (#1038617)
  - fix build when doc macro not defined


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.2.0-4
changelog:
  - fix QTBUG-35459 (too low entityCharacterLimit=1024 for CVE-2013-4549)
  - fix QTBUG-35460 (error message for CVE-2013-4549 is misspelled)
  - reenable docs on Fedora (accidentally disabled)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.3.1-4
changelog:
  - support the old versions of libxcb and libxkbcommon in F19 and F20
  - don't use the bundled libxkbcommon


author: Rex Dieter <rdieter@fedoraproject.org> - 5.3.1-5
changelog:
  - drop dep on xorg-x11-xinit (own shared dirs instead)
  - fix/improve qtchooser support using alternatives (#1122316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.1.beta
changelog:
  - 5.4.0-beta
  - avoid extra -devel deps by moving *Plugin.cmake files to base pkgs
  - support bootstrap macro, to disable -doc,-examples


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-3
changelog:
  - pull in handful of upstream fixes, particularly...
  - Fix a division by zero when processing malformed BMP files (QTBUG-44547, CVE-2015-0295)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.1-12
changelog:
  - backport a couple more upstream fixes
  - introduce -common noarch subpkg, should help multilib issues


author: Helio Chissini de Castro <helio@kde.org> - 5.5.0-11
changelog:
  - Add mesa-dri-drivers as recommends on gui package as reported by Kevin Kofler
  - Reference https://bugzilla.redhat.com/1249280


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.0-14
changelog:
  - remove GDB hackery again, -12 built fine on i686, hack breaks ARM build
  - fix 10-qt5-check-opengl2.sh for multiple screens (#1245755)


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-16
changelog:
  - backport 0055-Respect-manual-set-icon-themes.patch (kde#344469)
  - conditionally use valgrind only if needed


author: Rex Dieter <rdieter@fedoraproject.org> 5.5.0-18
changelog:
  - When a screen comes back online, the windows need to be told about it (QTBUG-47041)
  - xcb: Ignore disabling of outputs in the middle of the mode switch


author: Helio Chissini de Castro <helio@kde.org> - 5.5.1-8
changelog:
  - qt5-qdoc need requires >= current version, otherwise will prevent the usage further when moved to qttools


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-0.2
changelog:
  - Valgrind still needed as buildreq due recent split qdoc package, but we can get rid of
    specific arch set.
  - Added missing libproxy buildreq
  - Epel and RHEL doesn't have libinput, so a plugin need to be excluded for this distros


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - re-introduce bootstrap/examples macros
  - put examples-manifest.xml in -examples
  - restore -doc multilib hack (to be on the safe side, can't hurt)
  - %build: s/-optimized-qmake/-optimized-tools/


author: Rex Dieter <rdieter@fedoraproject.org> 5.6.0-0.40.rc
changelog:
  - respin QTBUG-51649 patch
  - %build: use -dbus-runtime unconditionally
  - drop (unused) build deps: atspi, dbus, networkmanager


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-6
changelog:
  - macros.qt5: we really only want the null-pointer-checks flag here
    and definitely no arch-specific ones


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-8
changelog:
  - make 10-qt5-check-opengl2.sh xinit script more robust
  - enable journald support for el7+ (#1315239)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-17
changelog:
  - support out-of-tree build
  - better %check
  - pull in final/upstream fixes for QTBUG-51648,QTBUG-51649
  - disable examples/tests in bootstrap mode


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.0-10
changelog:
  - fix Source0: https://download.qt.io/official_releases/qt/5.9/5.9.0/submodules/qtbase-opensource-src-5.9.0.tar.xz


author: Rex Dieter <rdieter@fedoraproject.org> - 5.7.1-6
changelog:
  - namespace QT_VERSION_CHECK to workaround major/minor being pre-defined (#1396755)
  - update moc patch to define _SYS_SYSMACROS_H (#1396755)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-6
changelog:
  - bootstrap (rawhide)
  - revert some minor changes introduced since 5.7
  - move *Plugin.cmake items to runtime (not -devel)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-6
changelog:
  - enable openssl11 support only for f27+ (for now)
  - Use mariadb-connector-c-devel, f28+ (#1493909)
  - Backport upstream mariadb patch (#1491316)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.0-2
changelog:
  - re-enable gold linker (#1458003)
  - drop qt5_null_flag/qt5_deprecated_flag hacks (should be fixed upstream for awhile)
  - make qt_settings/journald support unconditional


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-5
changelog:
  - QOpenGLShaderProgram: glProgramBinary() resulting in LINK_STATUS=FALSE not handled properly (QTBUG-66420)


author: Jan Grulich <jgrulich@redhat.com> - 5.11.1-7
changelog:
  - Move libQt5EglFSDeviceIntegration lib out of the -devel subpkg
    Resolves: bz#1692970

  - Fix QImage allocaion failure
    Resolve: bz#1667860

  - Fix double free in QXmlStreamReader
    Resolve: bz#1667858

  - Fix segmentation fault on malformed BMP file
    Resolve: bz#1667859


author: Jan Grulich <jgrulich@redhat.com> - 5.12.5-5
changelog:
  - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683

  - Fix: XML entity expansion vulnerability
    Resolves: bz#1822193


author: Rex Dieter <rdieter@fedoraproject.org> - 5.4.0-0.3.rc
changelog:
  - libQt5Designer should be in a subpackage (#1156685)
  - -doc: disable(boostrap for new clucene), drop dep on main pkg


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 5.4.0-0.4.rc
changelog:
  - disable bootstrap (reenable -doc)
  - system-clucene patch: drop -fpermissive flag
  - system-clucene patch: use toLocal8Bit instead of toStdString
  - system_clucene: BR clucene09-core-devel >= 0.9.21b-12 (-11 was broken)


author: Helio Chissini de Castro <helio@kde.org> - 5.6.0-3
changelog:
  - Reenable examples. Some interfaces marked as examples are needed from phonon
  - Update to second rc snapshot


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.5
changelog:
  - (re)fix bootstrap macro
  - include qt5-qdoc/qt5-qhelpgenerator build dep deps in -doc subpkg only
  - fix whitespace


author: Rex Dieter <rdieter@fedoraproject.org> - 5.8.0-4
changelog:
  - bootstrap 5.8.0 (rawhide)
  - Created a meta package called qt5-doctools to avoid the mess of multiple tools


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-4
changelog:
  - Obsoletes: qt5-designer-plugin-webkit (upgrade path when webkit support is not enabled)
  - resurrect bootstrap macro (commented)


author: Helio Chissini de Castro <helio@kde.org> - 5.5.0-2
changelog:
  - Update with unbundle flags. Adapted from original 5.4 Suse package
  - Disable vpx and sqlite as unbundle due some compilation issues
  - Enable verbose build


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.1-2
changelog:
  - Add missing explicit BRs on pkgconfig(expat) and pkgconfig(libxml-2.0)
  - Remove unused BR v8-devel (cannot currently be unbundled)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.5.1-4
changelog:
  - Remove unused BRs flex, libgcrypt-devel, bzip2-devel, pkgconfig(gio-2.0),
    pkgconfig(hunspell), pkgconfig(libpcre), pkgconfig(libssl),
    pkgconfig(libcrypto), pkgconfig(jsoncpp), pkgconfig(libmtp),
    pkgconfig(libexif), pkgconfig(liblzma), pkgconfig(cairo), pkgconfig(libusb),
    perl(version), perl(Digest::MD5), perl(Text::ParseWords), ruby
  - Add missing explicit BRs on pkgconfig(x11),  pkgconfig(xext),
    pkgconfig(xfixes), pkgconfig(xdamage), pkgconfig(egl)
  - Fix BR pkgconfig(flac++) to pkgconfig(flac) (libFLAC++ not used, only libFLAC)
  - Fix BR python-devel to python
  - Remove unused -Duse_system_openssl=1 flag (QtWebEngine uses NSS instead)
  - Remove unused -Duse_system_jsoncpp=1 and -Duse_system_libusb=1 flags


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.1.beta
changelog:
  - Readd BR pkgconfig(jsoncpp) because linux.pri now checks for it
  - BR yasm only on x86 (i686, x86_64)
  - Add dot at the end of %description
  - Rebase no-format patch
  - Replace unbundle-gyp.patch with new linux-pri.patch
  - Use system ninja-build instead of the bundled one
  - Run the unbundling script replace_gyp_files.py in linux.pri rather than here
  - Update file list for 5.6.0-beta (no more libffmpegsumo since Chromium 45)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.2.beta
changelog:
  - linux-pri patch: Add missing newline at the end of the log line
  - Use export for NINJA_PATH (fixes system ninja-build use)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.4.beta
changelog:
  - Fix License tag
  - Use %_qt5_examplesdir macro
  - Add Provides: bundled(*) for all the bundled libraries that I found


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.4.beta.1
changelog:
  - Use more specific BuildRequires for docs (thanks to rdieter)
  - Fix FTBFS against ICU 54 (F22/F23), thanks to spot for the Chromium fix


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.5.beta
changelog:
  - Fix FTBFS on ARM: linux-pri patch: Set use_system_yasm only on x86_64 and i386
  - Fix FTBFS on ARM: Respin tarball with: clean_ffmpeg.sh: Add missing ARM files


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.6.beta
changelog:
  - Fix extractCFlag to also look in QMAKE_CFLAGS_RELEASE (needed for ARM)
  - Fix FTBFS on ARM: Disable NEON due to #1282495 (GCC bug)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.7.beta
changelog:
  - Use the system libvpx on F24+ (1.5.0)
  - Fixes to Provides: bundled(*): libwebp if bundled, x86inc only on x86


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.10.beta
changelog:
  - Unbundle prtime.cc, use the system NSPR instead (which is already required)
  - Unbundle icu_utf.cc, use the system ICU instead (which is already required)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.13.beta
changelog:
  - Drop nss321 backport (and the related nss-headers patch), it did not help
  - Do an NSS/BoringSSL "chimera build" as will be the default in Chromium 47
  - Update License accordingly (add "OpenSSL")
  - Fix the "chimera build" to call EnsureNSSHttpIOInit (backport from Chromium)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.15.beta
changelog:
  - Build V8 as a shared library on i686 to allow for swappable backends
  - Build both the x87 version and the SSE2 version of V8 on i686
  - Add the private library directory to the file list on i686
  - Add Provides/Requires filtering for libv8.so (i686) and for plugins


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-0.19.rc
changelog:
  - Update to 5.6.0 RC
  - Rebase linux-pri and no-sse2 patches
  - Remove BuildRequires pkgconfig(flac), pkgconfig(speex), no longer needed
  - Update file list for 5.6.0 RC (resources now in resources/ subdirectory)
  - Tag translations with correct %lang tags


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.0-3
changelog:
  - Build with CONFIG+="webcore_debug v8base_debug force_debug_info"
  - Force -fno-delete-null-pointer-checks through CXXFLAGS, Qt flags not used here
  - Use -g1 instead of -g on non-x86_64 to avoid memory exhaustion
  - Work around debugedit failure by removing "./" from #line commands and
    changing "//" to "/" in an #include command


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.6.1-1
changelog:
  - Update to 5.6.1
  - Rebase linux-pri patch (drop the parts already fixed upstream)
  - Drop backported chimera-nss-init patch, already applied upstream
  - Rebase no-sse2 patch (the core_module.pro change)
  - Add the new designer/libqwebengineview.so plugin to the file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.7.0-1
changelog:
  - Update to 5.7.0
  - Update version numbers of bundled stuff
  - Update system libvpx/libwebp version requirements (now F24+ only)
  - Drop no-format patch, fixed upstream (they stopped passing -Wno-format)
  - Rebase linux-pri patch (use_system_protobuf is now a qmake flag)
  - Rebase system-nspr-prtime, system-icu-utf and no-sse2 patches
  - Fix ARM NEON handling in webrtc gyp files (honor arm_neon=0)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.7.1-2
changelog:
  - clean_qtwebengine.sh: Rip out openh264 sources
  - Rebase no-neon patch, add new arm-fpu-fix patch where no-neon not wanted
  - Try enabling arm_neon unconditionally, #1282495 should be fixed even in F23
  - Remove Android dependencies from openmax_dl ARM NEON detection (detect.c)
  - Set CFLAGS, unset both CFLAGS and CXXFLAGS between qmake and make
  - chromium-skia: build SkUtilsArm.cpp also on non-Android ARM
  - webrtc: backport CPU feature detection for ARM Linux, enable it for Chromium


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.7.1-4
changelog:
  - Respun tarball (now really includes the page margin fix)
  - Change qt5-qtbase dependency from >= to =


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.8.0-1
changelog:
  - Update to 5.8.0
  - Update version numbers of bundled stuff
  - Rebase (unfuzz) system-nspr-prtime and system-icu-utf patches
  - Drop system-icu54 patch, ICU 5.4 no longer supported
  - Rebase the webrtc-neon-detect patch (backported portions no longer needed)
  - Rebase the no-sse2 patch
  - Update clean_ffmpeg.sh: autorename* files now #include the unrenamed ones
  - Update -docs BuildRequires and Requires (Helio Castro)
  - Fix FTBFS in V8 with GCC 7 (by Ben Noordhuis, backported from Chromium RPM)
  - Fix FTBFS in PDFium with GCC 7: backport upstream cleanup removing that code
  - Generate qtwebengine-3rdparty.qdoc, it is missing from the tarball
  - Work around missing qt5_qtwebengine_arches macro on F24
  - Upstream added a qwebengine_convert_dict executable, package it


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.8.0-5
changelog:
  - Enable use_spellchecker explicitly so that it is also enabled on Qt 5.7
  - Use file triggers to automatically convert system hunspell dictionaries


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.9.0-1
changelog:
  - Update to 5.9.0
  - Update version numbers of bundled stuff
  - Use bundled libsrtp and protobuf, Chromium dropped unbundling support for them
  - Use bundled libxml2 and libxslt, QtWebEngine 5.9 requires a libxml2 built with
    ICU due to https://bugreports.qt.io/browse/QTBUG-59094, Fedora libxml2 is not
  - Add missing Provides: bundled(hunspell) for the spellchecking added in 5.8
  - Rebase linux-pri, no-neon, system-icu-utf, no-sse2, arm-fpu-fix,
    openmax-dl-neon and webrtc-neon-detect patches (port to GN)
  - Sync system-nspr-prtime patch with Debian (they ported it to GN)
  - Rebase fix-extractcflag patch
  - Restore NEON runtime detection in Skia, drop old skia-neon patch (rewritten)
  - Drop webrtc-neon, v8-gcc7, pdfium-gcc7, wtf-gcc7, fix-open-in-new-tab and
    fix-dead-keys patches, fixed upstream
  - Update system libvpx/libwebp version requirements (libvpx now F25+ only)
  - Drop the flag hacks (-g1 -fno-delete-null-pointer-checks), fixed upstream
  - Force verbose output from the GN bootstrap process
  - Backport upstream patch to fix GN FTBFS on aarch64 (QTBUG-61128)
  - Backport patch to fix FTBFS with GCC on aarch64 from upstream Chromium
  - Fix src/3rdparty/chromium/build/linux/unbundle/re2.gn
  - Delete all "toolprefix = " lines from build/toolchain/linux/BUILD.gn
  - Reduce debugging info on ARM on F26-


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.9.0-3
changelog:
  - Fix broken binary compatibility for C memory management functions (incomplete
    upstream fix for QTBUG-60565) (QTBUG-61521)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.9.1-1
changelog:
  - Update to 5.9.1
  - Rebase qtbug-61521 patch (drop the parts that are already in 5.9.1)
  - Drop backported GN aarch64 patches already included in 5.9.1
  - no-sse2 patch: Upstream added 2 examples, add -Wl,-rpath-link to them too


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.2-1
changelog:
  - Update to 5.9.2
  - Add BuildRequires: qt5-qtquickcontrols2-devel for the examples
  - Rebase linux-pri patch
  - Drop qt57 and qtbug-61521 patches, fixed upstream
  - arm-fpu-fix patch: Drop the host tools hunk added in 5.9.0-2, fixed upstream


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.9.2-2
changelog:
  - linux-pri patch: Do not call the Chromium unbundling script on re2,
    QtWebEngine now auto-detects and uses the system re2 out of the box
  - Drop system-re2 patch (patching the no longer used unbundle/re2.gn), the
    QtWebEngine re2/BUILD.gn is already correct
  - Explicitly force use_system_re2, the autodetection does not work on F25
  - Fix FTBFS with Qt 5.7


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 5.10.0-1
changelog:
  - Update to 5.10.0
  - Update version numbers of bundled stuff
  - Drop support for Fedora < 26 (in particular, WEBENGINE_CONFIG F25 workarounds)
  - Drop qt57 patch, support for Qt 5.7 was completely dropped upstream
  - Update get_free_ffmpeg_source_files.py from Fedora Chromium packaging
  - Update clean_ffmpeg.sh whitelist (sync from Fedora Chromium packaging)
  - clean_qtwebengine.sh: Update for the changed tarball naming scheme
  - Use QMAKE_EXTRA_ARGS instead of the removed WEBENGINE_CONFIG
  - Rebase linux-pri, system-nspr-prtime, system-icu-utf, no-sse2, skia-neon and
    gn-bootstrap-verbose patches
  - In particular, restore the removed V8 x87 backend in the no-sse2 patch
  - Re-backport no-aspirational-scripts from upstream (undo 5.9 backport)
  - Disable system libvpx support for now, requires unreleased libvpx (1.6.2+)
  - Add new BuildRequires: flex (required) and pkgconfig(lcms2) (unbundled)
  - Forward-port missing parts of 5.9 ICU>=59 build fix (QTBUG-60886, QTBUG-65090)
  - Reduce debugging info on ARM also on F27+ (as on F26- since 5.9.0)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-7
changelog:
  - rebuild (qt5 5.11.0)
  - Add patch by spot from the Fedora Chromium RPM for FTBFS with GCC 8 on i686
  - include 0027-Fix-compilation-of-simplebrowser-example.patch (5.11 branch)


author: Rex Dieter <rdieter@fedoraproject.org> - 5.11.0-1
changelog:
  - 5.11.0
  - drop shadow build (to match other qt5 packages where it has been problematic)
  - drop upstreamed patches
  - rebase no-icudtl-dat.patch
  - pull in upstream gcc8 FTBFS fix
  - update clean_ffmpeg whitelist
  - patches needswork: system-nspr-prtime,system-icu-utf,no-sse2,skia-neon,icu59
  - minimal debug/debuginfo (for now)
  - use macros %make_build %ldconfig_scriptlets %__ninja %__ninja_common_opts


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.2-4
changelog:
  - BR: perl(version) perl(Digest::MD5) pkgconfig(xslt)
  - deal with bundled code
  - add (commented) upstream link http://qt-project.org/doc/qt-5.0/qtdoc/licensing.html
    to clarify licensing


author: Rex Dieter <rdieter@fedoraproject.org> - 5.6.0-0.4
changelog:
  - restore bootstrap macro, omit more optional BR's/features in bootstrap mode
  - drop (unused) system_angle support
  - include -qdoc builddep only in -doc subpkg


author: Björn Esser <besser82@fedoraproject.org> - 5.212.0-0.15.alpha2
changelog:
  - Add patch2 to fix CMake warnings
  - Add patch3 to fix build (missing src file caused by typo)
  - Add missing BuildRequires


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.3.4-28
changelog:
  - Remove obsolete comments about source tarball generation (an upstream release
    tarball has been used for years and there is and will be no better source)
  - Drop the extra no-sse2 build on i686, Fedora has required SSE2 since F29


author: Rex Dieter <rdieter@fedoraproject.org> - 0.5.3-4
changelog:
  - Provide qt4 support (#1147204)
  - rename libqtxdg-qt4 -> libqtxdg, libqtxdg-qt4-devel -> libqtxdg to ease/simplify upgrade path
  - use %find_lang for translations
  - -devel: drop cmake dep


changelog: - New upstream release tied to lxqt 0.11
author:
  Helio Chissini de Castro <helio@kde.org> - * Sun Sep 25 2016 Helio Chissini de Castro <helio@kde.org> - 2.0.0-1


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Thomas Woerner <twoerner@redhat.com> 1:3.13-1.3
changelog:
  - tcp_wrappers has a new devel and libs sub package, therefore changing build
    requirement for tcp_wrappers to tcp_wrappers-devel


author: Steve Dickson <SteveD@RedHat.com> 3.15-2
changelog:
  - More review comments:
      - BuiltPreReq to BuiltReq
      - Removed '.' From Summary
      - Added 'GPLv2+' to License Tag
      - Condensed the _sysconfdir entries in to one line


author: Ondrej Vasik <ovasik@redhat.com> 3.15-5
changelog:
  - added symbolic link for quotaoff man page(#436110)
  - don't ship xqmstats.8 man page as we don't ship those
    binaries(#436100)


author: Ondrej Vasik <ovasik@redhat.com> 3.15-6
changelog:
  - added enable-ldapmail=try option(wonder how #133207
    got closed by FC-4 without it or warnquota.conf change)
  - dropped with-ext2direct=no option - this option is 
    invalid and original bug was fixed in 3.07


author: Ondrej Vasik <ovasik@redhat.com> 3.16-2
changelog:
  - upstream fix of some typos, string formats + 4TB+ fix
    for repquota
  - some additional stripping removal
  - change default mode of binaries from 555 to 755
    (strip error messages in build log)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-3
changelog:
  - Add support for -h option (do not show invalid option
    error) at edquota,setquota and quota (#457898)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-4
changelog:
  - fix bug in warnquota which could result in bogus hostname
    and domainname (upstream)
  - remove IMMUTABLE flag from quota file in quotacheck(upstream)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.16-5
changelog:
  - fix rpmlint warnings - absolute symlink and not using epoch
    in version in changelog (#226353)
  - rquota headers and manpage now in devel subpackage


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Petr Pisar <ppisar@redhat.com> 1:3.17-12
changelog:
  - Prevent corruptive read/write from/to NULL address in rpc.rquotad
    (Resolves #528581, example in #532342)
  - Fix spelling in summary


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-15
changelog:
  - Add quota_nld daemon init script (bug #634169)
  - Sub-package quota_nld files to weak dependecies
  - Sub-package warnquota files to weak dependecies


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-16
changelog:
  - Break dependecies on main package as there are none
  - Add plain text documentation to each sub-package
  - Package additional documentation into `doc' sub-package


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.4.pre1
changelog:
  - Make RPC block factor dynamic (bug #667757)
  - Check whether set limits fit into the range supported by quota format
    (bug #668688)
  - Check set limits fit into the range supported by RPC transport (bug #668691)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.6.pre1
changelog:
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)
  - Add quotasync tool (bug #596794)
  - Implement quotacheck for GFS2 (bug #596794)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.9.pre1
changelog:
  - Explain meaning of the second column in repquota output
  - Make RPC handle properly host names with colons (i.e. IPv6 server host name)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.16.pre1
changelog:
  - Report quotacheck failures by return code (bug #717982)
  - Improve quotacheck error message (bug #717982)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-1
changelog:
  - 4.00 bump
  - Remove unneeded LDAP linking patch
  - Prevent from stripping by configure option
  - Remove unneeded sed scripts on sources
  - Remove unneeded file removal


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-2
changelog:
  - Remove unneeded cryptographic library build-time dependencies
  - Fortify build-time configuration
  - Migrate quota_nld service from sysvinit to systemd
  - Document --print-below option in quota_nld service


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Remove code for migration from systemv-style init script
  - Drop useless dependency on initscripts (bug #964440)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-7
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-11
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-6
changelog:
  - Correct repquota indentation for file systems with hiden quota files
  - Remove unnecessary quota dependency from quota-devel package
  - Break licenses down to each package


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-9
changelog:
  - Fix disabling features at build time
  - Fix a race between checking for and opening a directory to be scanned
  - Fix an undefined behavior on parsing yes-no answer
  - Check for setuid and setgid calls failure in edquota tool
  - Check for failures when reading edquota input
  - Check for failures when duplicating a file handle


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-3
changelog:
  - rpcgen tool split from glibc-common package
  - Pass TIRPC header files location to all RPC compilation units
  - Do not iterate over negative UIDs in repquota
  - Fix mistakes in warnquota reported by GCC 8


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-4
changelog:
  - Avoid questions in quotacheck non-interactive mode
  - Report an error when quotacheck fails to cache quota files
  - Report an error if quota file magic is invalid


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-2
changelog:
  - Report an error if an RPC fails on an explicitly requested file system
    (upstream bug #134)
  - Fix Free Software Foundation's postal address (upstream bug #133)


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-6
changelog:
  - Optimize out useless checking of file systems with hidden quota files
  - Fix warnquota --help output
  - Fix checking for the LDAP failures in the warnquota tool
  - Report detailed LDAP failures
  - Document CC_TO in warquota.conf is looked up with LDAP
  - Initialize all members of a configparams structure in warnquota
  - Free parsed configuration in warnquota


author: Larence R. Rogers <lrr@cert,org> - 5.3.0-1
changelog:
  * Release 5.3.0-1
    1. Directory wildcards are allowed in RAR command line in file names to
        archive. For example:

        rar a backup c:\backup\2015*\*

        Recursion is enabled automatically for such directory wildcards
        even if -r switch is not specified.

     2. New 'R' object for -sc switch defines encoding of console
        RAR messages sent to redirected files and pipes. For example:

        rar lb -scur data > list.txt

        will produce Unicode list.txt with archived file names.

     3. Console RAR "l" and "v" commands display file time in YYYY-MM-DD
        format.

     4. "Test" command also verifies contents of NTFS alternate data streams
        in RAR 3.x - 5.x archives. Previously their contents was checked
        only during extraction command.

     5. Bugs fixed:

        a) console RAR crashed instead of displaying an overwrite prompt
           when attempting to add files to already existing volumes;

        b) console RAR "lt" command did not display seconds in file timestamp.


author: Kevin Fenzi <kevin@scrye.com> - 1.2.8-24
changelog:
  - Add patch to ignore ENODATA when removing acls (as one might remove already a later one). Fixes bug #1494236


author: Sumit Bose <sbose@redhat.com> - 0.16.3-17
changelog:
  - rebuild fails if DISTRO variable is exported
    Resolves: rhbz#1747454
  - realmd.conf user-principal RFE and clarification
    Resolves: rhbz#1747452
  - realmd.conf documentation incorrect
    Resolves: rhbz#1747457
  - Document realmd.conf and how realmd reads the configuration
    Resolves: rhbz#1747456


author: Sumit Bose <sbose@redhat.com> - 0.16.3-19
changelog:
  - Realm join fails with error 'Failed to join domain: failed to lookup
    DC info ...'
    Resolves: rhbz#1859503
  - realm command to use option like dnshostname=fqdn
    Resolves: rhbz#1867912


author: Sumit Bose <sbose@redhat.com> - 0.16.3-20
changelog:
  - realmd should handle default_realm in krb5.conf
    Resolves: rhbz#1791016
  - [RFE] Enable LDAPS functionality in realmd join
    Resolves: rhbz#1826964


author: Sumit Bose <sbose@redhat.com> - 0.16.3-24
changelog:
  - Avoid duplicated log messages and use Samba's new CLI options
    Resolves: rhbz#2024248
    Resolves: rhbz#2028528


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-29
changelog:
  - ethmonitor/pgsql: remove attrd_updater "-q" parameter to solve issue
    with Pacemaker 2.1.3+ not ignoring it

    Resolves: rhbz#2116941


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-30
changelog:
  - storage_mon: fix specified scores count and possible false negatives
  - LVM-activate: use correct return codes to fix unexpected behaviour
  - azure-events-az: new resource agent

    Resolves: rhbz#2109159
    Resolves: rhbz#1905820
    Resolves: rhbz#1977012


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-32
changelog:
  - Filesystem: add support for Amazon EFS (Elastic File System)
  - vdo-vol: dont fail probe action when the underlying device doesnt
    exist

    Resolves: rhbz#2049319
    Resolves: rhbz#2141836


author: lixin <lixinb@uniontech.com> - 4.9.0-32.01
changelog:
  - update: update to upstream 4.9.0-32
  - feat: Resource Agent for solution Two-node cluster brain split
  - fix: iSCSILogicalUnit: fix issue where resource was in stopped state
  - when using allowed_initiators parameter
  - fix: podman: add podman parameter error judgment
  - build: add BuildRequires gettext


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14
changelog:
  - Merge Pacemaker cluster resource agents:
    * Add Source1.
    * Drop noarch. We have real binaries now.
    * Update BuildRequires.
    * Update all relevant prep/build/install/files/description sections.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.0-16
changelog:
  - Create an ldirectord package
  - Update Pacameker agents to upstream version: 2198dc90bec4
    + Build: Import ldirectord.
    + Ensure HA_VARRUNDIR has a value to substitute
    + High: Add findif tool (mandatory for IPaddr/IPaddr2)
    + High: IPv6addr: new nic and cidr_netmask parameters
    + High: postfix: new resource agent
    + Include license information
    + Low (LF 2159): Squid: make the regexp match more precisely output of netstat
    + Low: configure: Fix package name.
    + Low: ldirectord: add dependency on $remote_fs.
    + Low: ldirectord: add mandatory required header to init script.
    + Medium (LF 2165): IPaddr2: remove all colons from the mac address before passing it to send_arp
    + Medium: VirtualDomain: destroy domain shortly before timeout expiry
    + Medium: shellfuncs: Make the mktemp wrappers work.
    + Remove references to Echo function
    + Remove references to heartbeat shellfuncs.
    + Remove useless path lookups
    + findif: actually include the right header. Simplify configure.
    + ldirectord: Remove superfluous configure artifact.
    + ocf-tester: Fix package reference and path to DTD.


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.3-3
changelog:
  - Update Pacameker agents to upstream version: 099c0e5d80db
    + Add the ha_parameter function back into .ocf-shellfuncs.
    + Bug bnc#534803 - Provide a default for MAILCMD
    + Fix use of undefined macro @HA_NOARCHDATAHBDIR@
    + High (LF 2138): IPsrcaddr: replace 0/0 with proper ip prefix (thanks to Michael Ricordeau and Michael Schwartzkopff)
    + Import shellfuncs from heartbeat as badly written RAs use it
    + Medium (LF 2173): nfsserver: exit properly in nfsserver_validate
    + Medium: RA: Filesystem: implement monitor operation
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable
    + Medium: RA: VirtualDomain: loop on status if libvirtd is unreachable (addendum)
    + Medium: RA: iSCSILogicalUnit: use a 16-byte default SCSI ID
    + Medium: RA: iSCSITarget: be more persistent deleting targets on stop
    + Medium: RA: portblock: add per-IP filtering capability
    + Medium: mysql-proxy: log_level and keepalive parameters
    + Medium: oracle: drop spurious output from sqlplus
    + RA: Filesystem: allow configuring smbfs mounts as clones


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.4-2
changelog:
  - Update Pacameker agents to upstream version: e2338892f59f
    + High: send_arp - turn on unsolicited mode for compatibilty with the libnet version's exit codes
    + High: Trap sigterm for compatibility with the libnet version of send_arp
    + Medium: Bug - lf#2147: IPaddr2: behave if the interface is down
    + Medium: IPv6addr: recognize network masks properly
    + Medium: RA: VirtualDomain: avoid needlessly invoking "virsh define"


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.5-2
changelog:
  - Update Pacameker agents to upstream version: bc00c0b065d9
    + High: RA: introduce OCF_FUNCTIONS_DIR, allow it to be overridden (LF2239)
    + High: doc: add man pages for all RAs (LF2237)
    + High: syslog-ng: new RA
    + High: vmware: make meta-data work and several cleanups (LF 2212)
    + Medium: .ocf-shellfuncs: add ocf_is_probe function
    + Medium: Dev: make RAs executable (LF2239)
    + Medium: IPv6addr: ifdef out the ip offset hack for libnet v1.1.4 (LF 2034)
    + Medium: add mercurial repository version information to .ocf-shellfuncs
    + Medium: build: add perl-MailTools runtime dependency to ldirectord package (LF 1469)
    + Medium: iSCSITarget, iSCSILogicalUnit: support LIO
    + Medium: nfsserver: use check_binary properly in validate (LF 2211)
    + Medium: nfsserver: validate should not check if nfs_shared_infodir exists (thanks to eelco@procolix.com) (LF 2219)
    + Medium: oracle/oralsnr: export variables properly
    + Medium: pgsql: remove the previous backup_label if it exists
    + Medium: postfix: fix double stop (thanks to Dinh N. Quoc)
    + RA: LVM: Make monitor operation quiet in logs (bnc#546353)
    + RA: Xen: Remove instance_attribute "allow_migrate" (bnc#539968)
    + ldirectord: OCF agent: overhaul


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New rgmanager resource agents upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use %name macro more aggressively


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.6-2
changelog:
  - Update Pacameker agents to upstream version: c76b4a6eb576
    + High: RA: VirtualDomain: fix forceful stop (LF 2283)
    + High: apache: monitor operation of depth 10 for web applications (LF 2234)
    + Medium: IPaddr2: CLUSTERIP/iptables rule not always inserted on failed monitor (LF 2281)
    + Medium: RA: Route: improve validate (LF 2232)
    + Medium: mark obsolete RAs as deprecated (LF 2244)
    + Medium: mysql: escalate stop to KILL if regular shutdown doesn't work


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.8-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#548133, rhbz#565907, rhbz#545602, rhbz#555901
    Resolves: rhbz#564471, rhbz#515717, rhbz#557128, rhbz#536157
    Resolves: rhbz#455300, rhbz#561416, rhbz#562237, rhbz#537201
    Resolves: rhbz#536962, rhbz#553383, rhbz#556961, rhbz#555363
    Resolves: rhbz#557128, rhbz#455300, rhbz#557167, rhbz#459630
    Resolves: rhbz#532808, rhbz#556603, rhbz#554968, rhbz#555047
    Resolves: rhbz#554968, rhbz#555047
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#455300, rhbz#568446, rhbz#561862, rhbz#536902
    Resolves: rhbz#512171, rhbz#519491


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.9-2
changelog:
  - Resolves: rhbz#572993 - Patched build process to correctly generate ldirectord man page
  - Resolves: rhbz#574732 - Add libnet-devel as a dependancy to ensure IPaddrv6 is built


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.10-1
changelog:
  - New rgmanager resource agents upstream release
    Resolves: rhbz#519491, rhbz#570525, rhbz#571806, rhbz#574027
    Resolves: rhbz#574215, rhbz#574886, rhbz#576322, rhbz#576335
    Resolves: rhbz#575103, rhbz#577856, rhbz#577874, rhbz#578249
    Resolves: rhbz#578625, rhbz#578626, rhbz#578628, rhbz#578626
    Resolves: rhbz#579621, rhbz#579623, rhbz#579625, rhbz#579626
    Resolves: rhbz#579059


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.10-2
changelog:
  - New pacemaker agents upstream release
    + High: RA: vmware: fix set_environment() invocation (LF 2342)
    + High: RA: vmware: update to version 0.2
    + Medium: Filesystem: prefer /proc/mounts to /etc/mtab for non-bind mounts (lf#2388)
    + Medium: IPaddr2: don't bring the interface down on stop (thanks to Lars Ellenberg)
    + Medium: IPsrcaddr: modify the interface route (lf#2367)
    + Medium: ldirectord: Allow multiple email addresses (LF 2168)
    + Medium: ldirectord: fix setting defaults for configfile and ldirectord (lf#2328)
    + Medium: meta-data: improve timeouts in most resource agents
    + Medium: nfsserver: use default values (lf#2321)
    + Medium: ocf-shellfuncs: don't log but print to stderr if connected to a terminal
    + Medium: ocf-shellfuncs: don't output to stderr if using syslog
    + Medium: oracle/oralsnr: improve exit codes if the environment isn't valid
    + Medium: RA: iSCSILogicalUnit: fix monitor for STGT
    + Medium: RA: make sure that OCF_RESKEY_CRM_meta_interval is always defined (LF 2284)
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: ManageRAID: require bash
    + Medium: RA: VirtualDomain: bail out early if config file can't be read during probe (Novell 593988)
    + Medium: RA: VirtualDomain: fix incorrect use of __OCF_ACTION
    + Medium: RA: VirtualDomain: improve error messages
    + Medium: RA: VirtualDomain: spin on define until we definitely have a domain name
    + Medium: Route: add route table parameter (lf#2335)
    + Medium: sfex: don't use pid file (lf#2363,bnc#585416)
    + Medium: sfex: exit with success on stop if sfex has never been started (bnc#585416)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.11-1
changelog:
  - new upstream release
    Resolves: rhbz#583945, rhbz#581047, rhbz#576330, rhbz#583017
    Resolves: rhbz#583019, rhbz#583948, rhbz#584003, rhbz#582017
    Resolves: rhbz#555901, rhbz#582754, rhbz#582573, rhbz#581533
  - Switch to file based Requires.
    Also address several other problems related to missing runtime
    components in different agents.
    With the current Requires: set, we guarantee all basic functionalities
    out of the box for lvm/fs/clusterfs/netfs/networking.
    Resolves: rhbz#570008


author: Andrew Beekhof <andrew@beekhof.net> - 3.0.12-1
changelog:
  - New pacemaker agents upstream release: a7c0f35916bf
    + High: pgsql: properly implement pghost parameter
    + High: RA: mysql: fix syntax error
    + High: SAPInstance RA: do not rely on op target rc when monitoring clones (lf#2371)
    + High: set the HA_RSCTMP directory to /var/run/resource-agents (lf#2378)
    + Medium: IPaddr/IPaddr2: add a description of the assumption in meta-data
    + Medium: IPaddr: return the correct code if interface delete failed
    + Medium: nfsserver: rpc.statd as the notify cmd does not work with -v (thanks to Carl Lewis)
    + Medium: oracle: reduce output from sqlplus to the last line for queries (bnc#567815)
    + Medium: pgsql: implement "config" parameter
    + Medium: RA: iSCSITarget: follow changed IET access policy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - new upstream release
    Resolves: rhbz#585217, rhbz#586100, rhbz#581533, rhbz#582753
    Resolves: rhbz#582754, rhbz#585083, rhbz#587079, rhbz#588890
    Resolves: rhbz#588925, rhbz#583789, rhbz#589131, rhbz#588010
    Resolves: rhbz#576871, rhbz#576871, rhbz#590000, rhbz#589823


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.13-1
changelog:
  - new upstream release
    Resolves: rhbz#592103, rhbz#593108, rhbz#578617, rhbz#594626
    Resolves: rhbz#594511, rhbz#596046, rhbz#594111, rhbz#597002
    Resolves: rhbz#599643


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.14-1
changelog:
  - new upstream release
    Resolves: rhbz#553383, rhbz#557563, rhbz#578625, rhbz#591003
    Resolves: rhbz#593721, rhbz#593726, rhbz#595455, rhbz#595547
    Resolves: rhbz#596918, rhbz#601315, rhbz#604298, rhbz#606368
    Resolves: rhbz#606470, rhbz#606480, rhbz#606754, rhbz#606989
    Resolves: rhbz#607321, rhbz#608154, rhbz#608887, rhbz#609181
    Resolves: rhbz#609866, rhbz#609978, rhbz#612097, rhbz#612110
    Resolves: rhbz#612165, rhbz#612941, rhbz#614127, rhbz#614356
    Resolves: rhbz#614421, rhbz#614457, rhbz#614961, rhbz#615202
    Resolves: rhbz#615203, rhbz#615255, rhbz#617163, rhbz#617566
    Resolves: rhbz#618534, rhbz#618703, rhbz#618806, rhbz#618814


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.16-1
changelog:
  - new upstream release
    Resolves: rhbz#619096, rhbz#614046, rhbz#620679, rhbz#619680
    Resolves: rhbz#621562, rhbz#621694, rhbz#608887, rhbz#622844
    Resolves: rhbz#623810, rhbz#617306, rhbz#623816, rhbz#624691
    Resolves: rhbz#622576


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.17-1
changelog:
  - new upstream release
    Resolves: rhbz#632595, rhbz#633856, rhbz#632385, rhbz#628013
    Resolves: rhbz#621313, rhbz#595383, rhbz#580492, rhbz#605733
    Resolves: rhbz#636243, rhbz#591003, rhbz#637913, rhbz#634718
    Resolves: rhbz#617247, rhbz#617247, rhbz#617234, rhbz#631943
    Resolves: rhbz#639018


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.1.0-1
changelog:
  - new upstream release
  - spec file update:
    Update upstream URL
    Update source URL
    use standard configure macro
    use standard make invokation


author: Chris Feist <cfeist@redhat.com> - 3.9.2-3.8
changelog:
  - Remove cluster-glue-libs-devel
  - Disable IPv6addr & sfex to fix deps on libplumgpl & libplum (due to
    disappearance of cluster-glue in F18)


author: David Vossel <dvossel@redhat.com> - 3.9.5-3
changelog:
  - Fixes build system error with conditional logic involving
    IPv6addr and updates spec file to build against rhel 7 as
    well as fedora 19.


author: David Vossel <dvossel@redhat.com> - 3.9.5-5
changelog:
  - Merges redhat provider into heartbeat provider. Remove
    rgmanager's redhat provider.

    Resolves: rhbz#917681
    Resolves: rhbz#928890
    Resolves: rhbz#952716
    Resolves: rhbz#960555


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-8
changelog:
  - LVM: fix missing dash in activate_options
  - LVM-activate: warn about incorrect vg_access_mode
  - lvmlockd: add cmirrord support


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-15
changelog:
  - nfsserver: fix start-issues when nfs_shared_infodir parameter is
    changed

    Resolves: rhbz#1642027


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-16
changelog:
  - vdo-vol: fix monitor-action
  - LVM-activate: dont fail initial probe

    Resolves: rhbz#1662466
    Resolves: rhbz#1643307


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-18
changelog:
  - aliyun-vpc-move-ip: exclude from main package
  - aliyuncli-ra: upgrade bundled python-aliyun-sdk-core and fix Python 3 issues
  - ocf.py: byte compile

    Resolves: rhbz#1677204
    Resolves: rhbz#1677981
    Resolves: rhbz#1678874


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-19
changelog:
  - Add CI gating tests
  - LVM-activate: support LVs from same VG
  - tomcat: use systemd when catalina.sh is unavailable
  - Fixed python-devel/perl build dependencies

    Resolves: rhbz#1682136
    Resolves: rhbz#1667414
    Resolves: rhbz#1666691
    Resolves: rhbz#1595854


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-20
changelog:
  - aws-vpc-move-ip: use "--query" to avoid a possible race condition
  - gcloud-ra: fix Python 3 issue and remove Python 2 detection

    Resolves: rhbz#1693662
    Resolves: rhbz#1691456


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-22
changelog:
  - aws-vpc-move-ip: add multi route-table support and fix issue
    w/multiple NICs

    Resolves: rhbz#1697559


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-23
changelog:
  - Route: make family parameter optional
  - redis: mute password warning

    Resolves: rhbz#1669140
    Resolves: rhbz#1683548


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-27
changelog:
  - ocf_log: do not log debug messages when HA_debug unset
  - Filesystem: remove notify-action from metadata
  - dhcpd keep SELinux context in chroot

    Resolves: rhbz#1707969
    Resolves: rhbz#1717759
    Resolves: rhbz#1719684


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-28
changelog:
  - podman: fixes to avoid bundle resources restarting when probing
    takes too long
  - LVM-activate: fix monitor to avoid hang caused by validate-all call

    Resolves: rhbz#1718219
    Resolves: rhbz#1730455


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-30
changelog:
  - iSCSITarget/iSCSILogicalUnit: only create iqn/acls when it doesnt
    exist

    Resolves: rhbz#1692413


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-33
changelog:
  - rabbitmq-cluster: fail monitor when node is in minority partition,
    fix stop regression, retry start when cluster join fails, ensure
    node attributes are removed

    Resolves: rhbz#1745713


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-34
changelog:
  - LVM/clvm: remove manpages for excluded agents
  - LVM-activate: return NOT_RUNNING when node rejoins cluster
  - LVM-activate: detect systemid volume without reboot
  - Filesystem: add symlink support
  - Filesystem: avoid corrupt mount-list and dont kill incorrect processes
    for bind-mounts
  - IPsrcaddr: make proto optional to fix regression when used without
    NetworkManager
  - docker: fix stop issues
  - rabbitmq-cluster: also restore users in single node mode
  - IPaddr2: sanitize compressed IPv6 IPs
  - nfsserver: systemd performance improvements
  - NovaEvacuate: add "evacuate_delay" parameter

    Resolves: rhbz#1694392
    Resolves: rhbz#1695039
    Resolves: rhbz#1738428
    Resolves: rhbz#1744103
    Resolves: rhbz#1744140
    Resolves: rhbz#1757837
    Resolves: rhbz#1748768
    Resolves: rhbz#1750352
    Resolves: rhbz#1751700
    Resolves: rhbz#1751962
    Resolves: rhbz#1755760


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-35
changelog:
  - Route: dont fence when parameters not set
  - LVM-activate: add partial-activation support

    Resolves: rhbz#1750261
    Resolves: rhbz#1741843


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-36
changelog:
  - exportfs: allow multiple exports with same fsid
  - mysql/galera: fix incorrect rc

    Resolves: rhbz#1764888
    Resolves: rhbz#1765128


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-40
changelog:
  - podman: improve image exist check
  - IPaddr2: add CLUSTERIP not supported info to metadata/manpage
  - Filesystem: refresh UUID if block device doesnt exist

    Resolves: rhbz#1788889
    Resolves: rhbz#1767916
    Resolves: rhbz#1777381


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-44
changelog:
  - lvmlockd: automatically remove locking_type from lvm.conf for LVM
    v2.03+

    Resolves: rhbz#1808468


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-45
changelog:
  - azure-lb: support using socat instead of nc
  - aws-vpc-move-ip: add "routing_table_role" parameter
  - redis: fix validate-all action and run it during start

    Resolves: rhbz#1804658
    Resolves: rhbz#1810466
    Resolves: rhbz#1792237


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-46
changelog:
  - use safe temp file location
  - ocf-shellfuncs: ocf_is_clone(): fix to return true when clone-max
    is set to 0

    Resolves: rhbz#1817432
    Resolves: rhbz#1817598


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-49
changelog:
  - aws-vpc-route53: new resource agent for AWS
  - pgsql: improve checks to prevent incorrect status, and set initial
    score for primary and hot standby

    Resolves: rhbz#1759115
    Resolves: rhbz#1744190


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-51
changelog:
  - NovaEvacuate: suppress expected initial error message
  - db2 (HADR): promote standby node when master node disappears

    Resolves: rhbz#1830716
    Resolves: rhbz#1836945


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-54
changelog:
  - exportfs: add symlink support
  - aliyun-vpc-move-ip: log output when failing

    Resolves: rhbz#1820523
    Resolves: rhbz#1843999


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-55
changelog:
  - nfsserver: dont log error message when /etc/sysconfig/nfs does not exist
  - exportfs: describe clientspec format in metadata

    Resolves: rhbz#1845581
    Resolves: rhbz#1845583


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-64
changelog:
  - nfsserver: fix NFSv4-only support
  - azure-events: new resource agent for Azure

    Resolves: rhbz#1818997
    Resolves: rhbz#1819965


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-69
changelog:
  - pgsql: ignore masters re-promote
  - pgsql: add PostgreSQL 12 support
  - Make Samba/CIFS dependency weak
  - Filesystem: Support whitespace in device or directory name
  - aws-vpc-move-ip: add region parameter

    Resolves: rhbz#1640587
    Resolves: rhbz#1795535
    Resolves: rhbz#1828600
    Resolves: rhbz#1858752
    Resolves: rhbz#1872999


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-71
changelog:
  - redis: parse password correctly based on version
  - all agents: fix pcs syntax in manpage for pcs 0.10+
  - gcp-pd-move: dont stop partially matched "disk_name"

    Resolves: rhbz#1815013
    Resolves: rhbz#1763249
    Resolves: rhbz#1890068


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-72
changelog:
  - sybaseASE: Run verify_all() for start operation only
  - sybaseASE: add logfile parameter
  - galera: set bootstrap attribute before promote
  - galera: recover after network split in a 2-node cluster

    Resolves: rhbz#1848025
    Resolves: rhbz#1861001
    Resolves: rhbz#1891835
    Resolves: rhbz#1891855


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-76
changelog:
  - podman: recover from killed conmon process
  - podman: recover from podman's storage being out of sync
  - crypt: make key_file and crypt_type parameters not unique

    Resolves: rhbz#1886262
    Resolves: rhbz#1900015
    Resolves: rhbz#1898690


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-79
changelog:
  - LVM-activate: add drop-in during start-action to avoid getting
    fenced during reboot

    Resolves: rhbz#1902208


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-87
changelog:
  - gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
    make vpc_network parameter optional

    Resolves: rhbz#1913932


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-91
changelog:
  - ethmonitor: fix vlan regex
  - iface-vlan: make vlan parameter not unique
  - nfsserver: error-check unmount
  - VirtualDomain: fix pid status regex
  - podman: return NOT_RUNNING when monitor cmd fails
  - awsvip: dont partially match similar IPs during
  - aws agents: dont spam log files
  - aws-vpc-move-ip: add ENI lookup

    Resolves: rhbz#1891883, rhbz#1902045, rhbz#1924363, rhbz#1932863
    Resolves: rhbz#1920698, rhbz#1939992, rhbz#1940094, rhbz#1939281


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-93
changelog:
  - db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check
  - pgsqlms: new resource agent
  - python-pygments: fix CVE-2021-27291 and CVE-2021-20270

    Resolves: rhbz#1872754, rhbz#1934651, rhbz#1935422, rhbz#1943464


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.1.1-95
changelog:
  - lvmlockd: remove cmirrord support, as cmirrord is incompatible w/lvmlockd

    Resolves: rhbz#1969968


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-3
changelog:
  - Rebase to resource-agents 4.9.0 upstream release.
  - gcp-pd-move/gcp-vpc-move-route: dont fail with configuration rc
    when it might be a network hickup

    Resolves: rhbz#1995178, rhbz#2008333


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-4
changelog:
  - gcp-vpc-move-route/gcp-vpc-move-vip: add serviceaccount JSON file
    support

    Resolves: rhbz#1704348


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-5
changelog:
  - All agents: set correct agent and OCF version in metadata
  - nfsserver: add nfs_server_scope parameter

    Resolves: rhbz#2003117
    Resolves: rhbz#2014415


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-12
changelog:
  - Route: return OCF_NOT_RUNNING for probe action when interface
    or route doesnt exist

    Resolves: rhbz#2012057


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-16
changelog:
  - IPsrcaddr: add warning about possible issues when used with DHCP,
    and add error message when matching route not found

    Resolves: rhbz#2064342


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-19
changelog:
  - Filesystem: fix UUID/label device support when there's whitespace
    between parameter and UUID/label

    Resolves: rhbz#2049414


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-22
changelog:
  - gcp-vpc-move-route/gcp-vpc-move-vip: upgrade bundled
    python-httplib2 to fix SSL issue

    Resolves: rhbz#2097462


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-26
changelog:
  - openstack-cinder-volume/openstack-floating-ip/openstack-info/
    openstack-virtual-ip: new resource agents

    Resolves: rhbz#1908146, rhbz#1908147, rhbz#1908148, rhbz#1949114


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-34
changelog:
  - nfsserver: add nfsv4_only parameter to make it run without
    rpc-statd/rpcbind services

    Resolves: rhbz#2127117


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-35
changelog:
  - mysql-common: return error in stop-action if kill fails to stop
    the process, so the node can get fenced

    Resolves: rhbz#2139131


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-40
changelog:
  - all agents: dont check notify/promotable settings during
    validate-action

    Resolves: rhbz#2157873


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-41
changelog:
  - lvmlockd: add "use_lvmlockd = 1" if it's commented out or missing
  - ethmonitor: dont log "Interface does not exist" for monitor-action

    Resolves: rhbz#2149970
    Resolves: rhbz#2154727


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-42
changelog:
  - azure-events*: fix for no "Transition Summary" for Pacemaker 2.1+
  - Filesystem: fail if AWS efs-utils not installed when fstype=efs

    Resolves: rhbz#2181019
    Resolves: rhbz#2183152


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-47
changelog:
  - Filesystem: improve stop-action and allow setting term/kill signals
    and signal_delay for large filesystems

    Resolves: rhbz#2189243


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-51
changelog:
  - aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter
    and AWS Policy based authentication type

    Resolves: RHEL-16248


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-53
changelog:
  - bundled urllib3: fix CVE-2023-45803
  - bundled pycryptodome: fix CVE-2023-52323

    Resolves: RHEL-22431, RHEL-20916


author: lichao <lichaod@uniontech.com> - 4.9.0-54.01
changelog:
  - build: use /usr/bin/ps instead of /bin/ps for 105xe
  - build: disable python bytecompilation for 105xe
  - build: fix httplib2 not found error for 105xe
  - feat: New Resource Agent for TongWeb
  - feat: Resource Agent for solution Two-node cluster brain split
  - fix: iSCSILogicalUnit: fix issue where resource was in stopped state when using allowed_initiators parameter
  - fix: podman: add podman parameter error judgment
  - build: add BuildRequires gettext


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.9.0-54.02
changelog:
  - bundled setuptools: fix CVE-2024-6345
    Resolves: RHEL-50360

  - gcp-pd-move: fix TLS_VERSION_1 issue
    Resolves: RHEL-50041

  - bundled urllib3: fix CVE-2024-37891
    Resolves: RHEL-44923

  - AWS agents: retry failed metadata requests to avoid instantly
    failing when there is a hiccup in the network or metadata service
  - db2: fix OCF_SUCESS typo
    Resolves: RHEL-34137, RHEL-32828


author: Matej Marusak <mmarusak@redhat.com> 1.17.0-1
changelog:
  - Enable creating releases with makefile
  - Introduce gen-version
  - Do not use fedorahosted.org as source
  - Include md5sum of original archive in summary page
  - Do not try to get default time when ftptask
  - Fix character escape typo
  - Change retrace-server httpd config
  - Modify search for existing vmlinux files in cache to handle older kernel-debuginfos
  - Default to hex mode for crash commands involving backtraces.
  - Create directories for tests if they are not present
  - Don't mention old wiki page
  - Fix double call of _fail method
  - Update README
  - Allow any compression of man pages
  - Autogen without args configures for debugging
  - Run 'configure' at the end of 'autogen'
  - Improve autogen to list and install dependencies
  - Avoid circular dependency on kernel-debuginfo for vmlinux files already in cache
  - Add plugin checking action
  - Update documentation of plugin in README
  - Use short form rhel when creating repository
  - Fix methods arguments
  - Move global variables to config.py.in
  - Recover from missing start/finish task files
  - Change error message in cleanup script
  - Add '-ascending' argument to gdb
  - Use devtoolset-4-gdb when used on RHEL
  - Enable creating repository from faf repository
  - Add 'make check'
  - Correct eu-unstrip parser if FILE is .
  - Not mark packages with different architectures as duplicity
  - Separate worker start_retrace method
  - Add class to wrap plugins accessing
  - Add class to wrap configuration file reading
  - Delete python labels when no python backtrace available
  - Git ignore bytecode
  - Add python backtrace, source and locals into backtrace
  - Move src/lib to src/retrace to make testing retrace-server easier
  - Add "exploitable" into LocationMatch in the httpd.conf
  - Fix invalid syntax error in sys.stderr.print()


author: Matej Marusak <mmarusak@redhat.com> 1.18.0-1
changelog:
  - mark license as license
  - Update Python 2 dependency declarations to new packaging standards
  - defattr is not needed as this is default
  - use standard python_sitelib macro
  - remove old changelog entries
  - we do not build for el6 any more
  - remove group
  - Remove duplicate RetraceWorker._fail call when start_vmcore fails
  - Add md5sum and kernelver to email notifications, help text to failing notification
  - Convert notify_email_success and notify_email_fail to a single method
  - Create notify_email_success / notify_email_fail helpers
  - Enable packages with epoch
  - Update to new mock
  - Set kernelver and vmlinux as soon as possible
  - reposync: Cleanup is not done by default in createrepo
  - Explicitly state python version in shebangs
  - Fix unreadable crash subdirectory when tarball is submitted without group read permissions
  - Try noarch when checking for package
  - Add pylintrc
  - Use dnf in mock config on Fedora
  - Update mock config for new mock version
  - Pylint updates
  - Add commandline client
  - Add aliases into FAF reposync
  - Cleanup tmp FAF repository after failing
  - Write coresize for vmcores
  - Change error message
  - Fix wrong html tag
  - Set zero to non-existing type of tasks
  - Fix typeo in manager.wsgi which creates a backtrace on non-ftp tasks.
  - Bump version of gettext
  - Change path for README.md
  - Fix problem with missing modules on kernel versions with cached vmlinux files.
  - No first retrace time when no existing task
  - Make the reposync tool more verbose if required


author: Martin Kutlak <mkutlak@redhat.com> 1.19.0-1
changelog:
  - docker: Allow building local changes
  - docker: Introduce docker
  - spec: Require Python3 pkgs of dnf and hawkey
  - retrace: Check result of get_nevra_possibilities
  - r-s-reposync-faf: Convert generator to list
  - spec: Add BuildRequire python3-devel
  - r-s-reposync-faf: Generate repo using createrepo_c
  - httpd-conf: Set WSGIApplicationGroup to %{GLOBAL}
  - r-s-reposync: Use default number of workers
  - dnf-comp: Replace yum.misc lib with one from dnf
  - py3-comp: Distinguish string and byte values in POST
  - py3-comp: Specify encoding for Popen
  - py3-comp: Use parentheses for print
  - py3-comp: Encode response body as a bytestring
  - py3-comp: Convert regexps strings to raw strings
  - Migrate retrace-server to python3
  - Implement splitFilename function using dnf
  - Replace yum with DNF
  - Correct syntax for gdb backtrace command
  - Refactoring: Too long lines, missing whitespaces
  - Add has_coredump() method to RetraceTask and upate get_md5_tasks()
  - Modify get_md5_tasks to skip tasks with no vmcores or invalid md5sum files
  - Add 'has_vmcore' method to RetraceTask
  - spec: Bytecompile r-s plugins explicitly
  - spec: Remove automake byte-compiled files
  - spec: Correct the file ownership
  - do not require install-info on F28+
  - Adjust indentation according to pylint recommendation
  - py3 compatibility: Replace filter function with a list equivalent
  - py3 compatibility: Adjust urllib, urllib2 and urlparse
  - Fix missing sys import
  - Clean up of unused imports
  - py3 compatibility: Adjust imports
  - py3 compatibility: Resolution of range and xrange
  - py3 compatibility: Replace ConfigParser module with configparser
  - py3 compatibility: Classic division
  - py3 compatibility: Adjust raise statement syntax
  - py3 compatibility: Replace StringIO module with io module
  - py3 compatibility: Removal of tuple parameter unpacking
  - Refactoring: Missing or bad whitespace
  - py3 compatibility: Set literals
  - py3 compatibility: Use 'sorted' built-in function
  - py3 compatibility: Replacement of basestring with six.string_types
  - py3 compatibility: Ensure map function to return a list
  - py3 compatibility: Replacement of 'has_key' with 'in'
  - Make r-s-bugzilla-query query options configurable
  - Load credentials from custom file
  - manager: Make the bugzillano a clickable link
  - Query the remaining bugzilla statuses
  - retrace: Add reset_age method
  - Implement retrace-server-bzquery tool
  - Implement retrace-server-bugzilla-refresh tool
  - Implement bugzilla field
  - py3 compatibility: Octal literals
  - py3 compatibility: try-except statement
  - py3 compatibility: print statement is replaced with a print() function
  - For vmcores that fail crash but have a large enough kernel log, try --minimal
  - Set md5sum as soon as possible.
  - Add dedup_vmcore to RetraceWorker and call from retrace-server-cleanup
  - Fail task if the crash sys command exits with non-zero and kernellog is small
  - Fix typo in exception handling of get_kernel_release
  - Set default signal handler for SIGPIPE before calling Popen on 'crash --osrelease'
  - Improve vmcore kernel parsing for certain scenarios and limit file scanning
  - autogen: correctly parse buildrequires from spec file
  - spec: Do not:x show every single change


author: Michal Fabik <mfabik@redhat.com> 1.20.0-1
changelog:
  - Bump Fedora Release in Dockerfile
  - retrace_worker: Use kernelver_str var
  - retrace_worker: Remove unused variables
  - retrace: Remove unused variable
  - retrace: Use converted integer value
  - retrace: Remove unsused variable
  - pylint: Fix wrong indentations
  - pylint W0702: Fix-up bare exceptions
  - pylint: Fix spacing issues
  - Remove Python2/Python3 compatibility code
  - pylint E713: Test for membership should be ‘not in’
  - retrace: Refactor asterisk imports of retrace
  - Translation updates
  - Add new translation languages - tr
  - Add transtalations from Fedora Zanata
  - Remove workdir functionality
  - retrace-server-interact: Fix undefined self var
  - retrace: Fix undefined vmcore variable
  - Fix typos
  - Fix typos and minor grammar issues
  - Switch to requests-gssapi
  - create: Fix strip_extra_pages() invocation
  - plugins: Add el8 to versionlist
  - plugins: Add plugin for CentOS
  - plugins: Update fedora versionlist
  - plugins: Update devtoolset version
  - stats: Display whole release version
  - Use sys.exit instead of exit for retrace-server commands
  - Move makedumpfile logic from download_remote into start_vmcore
  - Move prepare_debuginfo to KernelVMcore
  - Remove call to prepare_debuginfo from retrace-server-interact
  - Move get_kernel_release to KernelVMcore
  - Move strip_vmcore to KernelVMcore.strip_extra_pages
  - Add KernelVMcore.has_extra_pages method
  - Move get_vmcore_dump_level to KernelVMcore.get_dump_level
  - Handle 'flattened' vmcore format by converting with makedumpfile
  - Pass 'results' directory to hook script rather than task_dir.
  - Rename 'misc' methods and subdirectory to 'results'.
  - delete: Fix typo in function name
  - Clean up handling of mock with x86 vmcores in x86_64 environments
  - Remove bt_filter from retrace-server
  - Remove excess post-retrace crash commands
  - Make retrace-server-cleanup more resilient to non-existent tasks
  - retrace: Allow tilde in package names
  - spec: Use macros instead of environment variables
  - Fix module extraction from kernel-debuginfo
  - Move ProcessCommunicateTimeout inside run_crash_cmdline
  - Move run_crash_cmdline from RetraceWorker to RetraceTask
  - Fix backtrace of bt_filter on Python3
  - Remove 'utf-8' encoding for run_crash_cmd and change related functions.
  - Refactor crash commands run after prepare_debuginfo into run_crash_cmdline helper
  - worker: Add string formatting for provided arguments
  - worker: Remove unused function
  - worker: Use log_error function to log errors
  - Fix runaway crash processes due to either corrupted vmcore memory or files.
  - Fix backtrace when updating bugzillano from web UI due to use of basestring
  - Fix message and code path when we fail to decode the release of vmcore
  - spec: Fix test condition for Fedora
  - spec: Fix %if conditions
  - spec: Add python3-createrepo_c dependency
  - retrace_worker: Ignore EEXISTS when symlinking log
  - retrace: Replace execfile with exec(open())
  - Drop YUM support
  - Drop __future__.print_function import
  - Drop __future__.division import
  - Fix ftp.wsgi for Python3 due to sorted() method change, speed manager load
  - Fix get_kernel_release() on Python3
  - cleanup: Add check for opened crash files
  - Add forgotten encoding
  - reposync: Inform why creating of repository failed


author: Michal Fabik <mfabik@redhat.com> 1.21.0-1
changelog:
  - README: Add translation status
  - translations: Remove zanata config and script
  - retrace: Fix bytes has no attribute encode
  - Fix error when calling run_crash_cmdline after conversion to run()
  - Fix error handling when unknown exception occurs in run_crash_cmdline
  - podman: Tweak the Dockerfile for retracing
  - Remove rpm2cpio part from podman retrace
  - Check for RequireGPGCheck
  - Simplify run calls
  - Make returncode checks more readable
  - Fix container and image cleanup
  - Tag podman images with task id
  - Replace call() and Popen() with run()
  - Fix container cleanup
  - Change home dir for user 'retrace'
  - Use more meaningful log messages
  - Replace os.devnull with subprocess.DEVNULL
  - Add podman-specific deployment instructions
  - Fix pylint issues
  - Run hooks with podman as well
  - Add UseFafPackages support in podman
  - Fix indentation
  - Add exit code to spec file scriptlet
  - Add podman as a weak dependency
  - Beautify gdb.sh
  - Run retrace in podman container
  - Create Dockerfiles
  - Make mock-specific parts conditional
  - Remove test for abrt-gdb-exploitable
  - Add RetraceEnvironment config item
  - Fix spelling
  - Tweak man pages
  - Update translations
  - r-s-reposync-faf: Fix paths to rpms
  - Update (pt) translation
  - Update (nl) translation
  - Update (de) translation
  - Update (bg) translation
  - Update (tr) translation
  - Update (it) translation
  - Add (zh_HK) translation
  - r-s-reposync: Replace old way of cmp with key
  - README.md: Change capitalization of freenode
  - Fix build error after change of mock.conf to environment.conf
  - hooks: Rename mock hook to environment
  - hooks: Add option for per-executable timeouts
  - spec: Remove upgrade script moving config to new location
  - hooks:config: Load configs from users homedir
  - hooks: Move default hook script dir to /usr/libexec
  - hooks: Log stdout and stderr of scripts after exception
  - hooks: Run hook scripts in parallel processes
  - spec: Do not replace configs on reinstall
  - hooks: Fix hook timeouts and other exceptions logs
  - hooks: Change cwd for hooks to hooks dir
  - hooks: Change of retrace hooks
  - config: Move retrace-server configuration file
  - retrace: Change logging format
  - retrace_worker: Remove distro hack from mock config
  - dockerfile_local: Install vim
  - docker: Update Makefile
  - docker: Use sbin/httpd instead of apachectl
  - dockerfile_local: Install make
  - dockerfile: Update to Fedora 31
  - dockerfile: Install mod_ssl
  - retrace_worker: Fix file mode to write to file
  - retrace-server-worker: Correct import of ArgumentParser


author: Matěj Grabovský <mgrabovs@redhat.com> 1.22.0-1
changelog:
  - Add support for virtual memory files for vmcores
  - Add option to restart an existing task in retrace-server-task and on task manager page
  - Disallow users other than 'retrace' to call retrace-server-worker
  - Improve error message in case of Kerberos authentication failure
  - Revamp task manager web UI
  - Revamp GPG verification of package signatures; use keys from distribution-gpg-keys
  - Accommodate for multiple debug directories in Fedora 27 and later
  - Fix FTP submissions on task manager page
  - Fix permissions on dmesg file in task results directory
  - Update translations
  - Drop python3-six dependency
  - Add build dependencies on gzip, lsof, tar and xz
  - Rewrite Dockerfile
  - Migrate to calling subprocess.run() in place of s.Popen() and s.call()
  - Use pathlib.Path instead of strings and os.path methods in some places
  - Add kernel-only config options 'KernelDebuggerPath' and 'RetraceEnvironment=native'
  - Introduce type annotations
  - Address issues reported by Pylint
  - Other minor code refactoring and cleanup operations


author: Matěj Grabovský <mgrabovs@redhat.com> 1.22.0-1
changelog:
  - Add support for virtual memory files for vmcores
  - Add option to restart an existing task in retrace-server-task and on task manager page
  - Disallow users other than 'retrace' to call retrace-server-worker
  - Improve error message in case of Kerberos authentication failure
  - Revamp task manager web UI
  - Revamp GPG verification of package signatures; use keys from distribution-gpg-keys
  - Accommodate for multiple debug directories in Fedora 27 and later
  - Fix FTP submissions on task manager page
  - Fix permissions on dmesg file in task results directory
  - Migrate build process to Meson; completely drop Autotools
  - Add Tito configuration
  - Update translations
  - Drop python3-six dependency
  - Add build dependencies on gzip, lsof, tar and xz
  - Rewrite Dockerfile
  - Migrate to calling subprocess.run() in place of s.Popen() and s.call()
  - Use pathlib.Path instead of strings and os.path methods in some places
  - Add kernel-only config options 'KernelDebuggerPath' and 'RetraceEnvironment=native'
  - Introduce type annotations
  - Address issues reported by Pylint
  - Other minor code refactoring and cleanup operations


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.22.4-1
changelog:
  - Release version 1.22.4-1 (Matěj Grabovský)
  - r-s-reposync-faf: Fix type errors (Matěj Grabovský)
  - fedora: Remove old releases before 31 (Matěj Grabovský)
  - fedora: Add Fedora 33 to version list (Matěj Grabovský)
  - Update translations (Jenkins Automation Server)
  - retrace: Do not allocate pseudo-TTY for container (Matěj Grabovský)
  - retrace: Slight refactoring in Podman backend (Matěj Grabovský)
  - retrace: Remove intermediate Podman containers in build (Matěj Grabovský)
  - retrace: More precise argument type (Matěj Grabovský)
  - Update translations (Jenkins Automation Server)
  - ftp/manager: Add link on manager page and create backlink on ftp page (Dave Wysochanski)
  - managertask: Remove unnecessary whitespace at right of notes and backtrace (Dave Wysochanski)
  - manager: Rework display of finished, running, and available tasks (Dave Wysochanski)
  - manager: reformat manager page to improve readability (Dave Wysochanski)


author: Tomas Kasparek <tkasparek@redhat.com> 5.4.42-4
changelog:
  - Resolves: #1566053 - require dnf-plugin-spacewalk on rhel8 instead of yum
    (tkasparek@redhat.com)


author: Tomas Kasparek <tkasparek@redhat.com> 5.0.33-1
changelog:
  - fix rhnsd triggered upgrade of rhnsd on systemd systems
  - 1494389 - Revert "[1260527] RHEL7 reboot loop"
  - 1494389 - Revert "1260527 RHEL7 rhnsd reload doesn't work"


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-1
changelog:
  - Update to 1.4.6. Fixes bug #1547315
  - Allow KRA vault log files. Fixes bug #1541472
  - ipc_shared_mem warning fixed upstream. Fixes bug #1524456


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-10
changelog:
  - Drop check on libkeyutils, it's a legit library now. Fixes rhbz#1914662
  - Look for and use the ssh.d config snippet direction. Thanks John Dodson for patch. Fixes rhbz#1851620


author: Colin Walters <walters@verbum.org> - 2020.7-4
changelog:
  - Backport https://github.com/coreos/rpm-ostree/pull/2386/commits/aa8e49aaeddfc5d38651fa08f46e059655818fd1
    Resolves: #1944760


author: Luca BRUNO <lucab@lucabruno.net> - 2021.5-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2021.5
    Resolves: rhbz#1959874


author: Luca BRUNO <lucab@redhat.com> - 2021.5-2
changelog:
  - Backport _dbpath fixes, see
    https://github.com/coreos/rpm-ostree/issues/2904
    Resolves: rhbz#1973579


author: dongyuzhen <dongyuzhen@h-partners.com> - 2.15-3
changelog:
  - Type:bugfix
  - CVE:NA
  - SUG:NA
  - DESC:change the uid and gid of directories newly created when run with --change-files


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Radovan Sroka <rsroka@redhat.com> - 8.32.0-1
changelog:
  - initial clean build with plugins from rhel7
  - removed plugins:
    - libdbi
    - omruleset
    - pmrfc3164sd
  - imported from fedora26


author: Marek Tamaskovic <mtamasko@redhat.com> - 8.35.0-1
changelog:
  - rebase to 8.35
  - rebased patches from 8.32 to 8.35
    - fixed imjournal-duplicates
    - fixed imjournal-default-tag
    - fixed service patch
    - fixed in upstream deserialize-property-name


author: Jiri Vymazal <jvymazal@redhat.com> - 8.35.0-1
changelog:
  - spec file cleanup
  - enabled kafka and hiredis modules
    resolves: rhbz#1542497
    resolves: rhbz#1542504
  - renamed patch fixing imjournal duplicating messages
    resolves: rhbz#1544394


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - rebase to 8.36
  - removed hiredis module
  - removed omudpspoof module
    resolves: rhbz#1593762
  - finished converting config to new-style syntax


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-1
changelog:
  - changed PID file name to follow upstream
  - removed config option to disable stdlog as it is now
    disabled by default


author: Jiri Vymazal <jvymazal@redhat.com> - 8.36.0-3
changelog:
  - dropped json_nonoverwrite patch as there is no reason for
    keeping it
  - renumbered rest of patches
  - added release number to AC_INIT to have it in package error logs


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-1
changelog:
  - rebase to 8.37.0
    resolves: rhbz#1613880
    resolves: rhbz#1564054
    resolves: rhbz#1598218
    - dropped invalid statefile patch - upstreamed
    - dropped imjournal duplicates patch - upstreamed
    resolves: rhbz#1544394
  - renumbered default tag patch and fitted onto rebased version


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-5
changelog:
  - rebuild for rebased dependencies
  - dependency cleanup and sorted sub-packages in spec
    resolves: rhbz#1613880


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-10
changelog:
  RHEL 8.1.0 ERRATUM
  - added option for imfile endmsg.regex
    resolves: rhbz#1627941
  - added patch enhancing imfile rotation detection
    resolves: rhbz#1674471
  - added patch fixing msgOffset datatype preventing crash on
    message with too long other fields
    resolves: rhbz#1677037
  - added patch introducing "preservecase" option for imudp/imtcp
    resolves: rhbz#1614181


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-11
changelog:
  RHEL 8.1.0 ERRATUM
  - fixed memory leak in imjournal by proper cursor releasing
    resolves: rhbz#1716867


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-12
changelog:
  RHEL 8.1.0 ERRATUM
  - edited imjournal memleak patch to not cause double-free crash
    resolves: rhbz#1729995
  - added patch calling journald API only when there are no
    preceeding errors
    resolves: rhbz#1722165
  - added patch fixing imrelp module when invoked with old syntax
    resolves: rhbz#1724218


author: Jiri Vymazal <jvymazal@redhat.com> - 8.37.0-13
changelog:
  RHEL 8.1.0 ERRATUM
  - added patch enabling stricter TLS certs checking conforming to
    common criteria requirements
    resolves: rhbz#1733244


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-1
changelog:
  RHEL 8.2.0 ERRATUM
  - rebased to 8.1911.0 upstream version, removed, previously
    upstreamed patches
    resolves: rhbz#1740683
    resolves: rhbz#1659383
    resolves: rhbz#1746876
    resolves: rhbz#1676559
    resolves: rhbz#1692072
    resolves: rhbz#1692073
    resolves: rhbz#1692074
    resolves: rhbz#1699242
    resolves: rhbz#1738213
    resolves: rhbz#1744691
    resolves: rhbz#1755218
    resolves: rhbz#1768321
    resolves: rhbz#1768324
  - added patch fixing imfile stefiles naming
    resolves: rhbz#1763757


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-3
changelog:
  RHEL 8.2.0 ERRATUM
  - added patch reverting rejecting expired certs by default
    resolves: rhbz#1782353
  - added patch silencing false errors on config.enabled statement
    resolves: rhbz#1659383


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-5
changelog:
  RHEL 8.3.0 ERRATUM
  - added qpid-proton as another source and enabled omamqp1 module
    in a separate sub-package with it statically linked
    resolves: rhbz#1713427
  - extended config.enabled patch to cover rest of the cases
    resolves: rhbz#1659383
  - added patch making json serialization thread-safe
    resolves: rhbz#1789675
  - added another patch for imfile state-files id
    resolves: rhbz#1793569
  - fixed typo in commend-out part of default rsyslog.conf


author: Jiri Vymazal <jvymazal@redhat.com> - 8.1911.0-6
changelog:
  RHEL 8.3.0 ERRATUM
  - added patch preventing imfile crash when selinux blocks symlink
    access
    resolves: rhbz#1843994
  - fixed config-enabled patch
    resolves: rhbz#1659383


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-2
changelog:
  RHEL 8.5.0 ERRATUM
  - rebase to 8.2102.0
    resolves: rhbz#1932795
  - Enable openssl
    resolves: rhbz#1891458
  - EKU check for client cert on server side
    resolves: rhbz#1783348
  - Use GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1880434
  - Use librelp with openssl enabled
    resolves: rhbz#1795607
  - Close dir when fsync=on
    resolves: rhbz#1960536


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-3
changelog:
  - Priority field must have valid length
    resolves: rhbz#1866877
  - Allocate more memory on too large groups
    resolves: rhbz#1944718


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-5
changelog:
  - Do not exit when user/group can not be found
    resolves: rhbz#1984489
  - Remove abortOnIDResolution fail


author: zhangxianting <zhangxianting@uniontech.com> - 3.1.2-1.01
changelog:
  - spec: annotation buildrequires rubygem(cucumber-wire)\rubygem(aruba) and check of cucumber in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 0.0.1-1.01
changelog:
  - spec: annotation buildrequires rubygem(aruba)\rubygem(cucumber) and check of cucumber in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 0.2.5-1.01
changelog:
  - spec: annotation buildrequires rubygem(shindo) and check of shindo because of missong rubygem-shindo in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 0.4.2-4.01
changelog:
  - spec: annotation buildrequires rubygem(railties) because of missong rubygem-railties in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 5.0.4-1.01
changelog:
  - spec: annotation buildrequires rubygem(tilt) and check of tilt because of missing rubygem-tilt in order to build it for the first time at kongzi tag


author: Pavel Valena <pvalena@redhat.com> - 0.0.4-1
changelog:
  - Update to introspection 0.0.4(rhbz#1390394)
    - Remove patch0, subsumed
    - Remove patch1, subsumed


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 0.14.0-1
changelog:
  - Update to 0.14.0
  - Run unit and acceptance tests in a single process
  - Patch test suite to work outside rake/bundler


author: shinwell_hu <micromotive@qq.com> - 3.12.6-1
changelog:
  - Upgrade to 3.12.6 to fix following known CVEs
    CVE-2020-11077
    CVE-2020-11076
  - Workaround test failure on x forwarded protol


author: zhangxianting <zhangxianting@uniontech.com> - 1.0.2-1.01
changelog:
  - spec: annotation buildrequires rubygem(railties) and check of rails because of missong rubygem-railties in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 1.2.1-2.01
changelog:
  - spec: annotation buildrequires rubygem(cucumber) and check of cucumber in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 1.2.1-2.02
changelog:
  - spec: revert annotation buildrequires rubygem(cucumber) and check of cucumber because they were builded at kongzi


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 3.2.0-1
changelog:
  - Update to 3.2.0 (RHBZ #1173070)
  - Drop unneeded BRs
  - Use %license macro
  - Adjustments for https://fedoraproject.org/wiki/Changes/Ruby_2.1
  - Unconditionally pass tests for now (RHBZ #1173070)


author: Ken Dreyer <ktdreyer@ktdreyer.com> - 3.2.1-1
changelog:
  - Update to 3.2.1 (RHBZ #1192389)
  - Remove Fedora 19 compatibility macros
  - Use static test.conf, since upstream uses a dynamic ERB template now
  - Correct comment about IPv6 support


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-8
changelog:
  - Fix test suite compatibility with Ruby 3+.
    Resolves: rhbz#2113703
  - Update certificates to fix integration test suite.


author: zhangxianting <zhangxianting@uniontech.com> - 3.8.2-2.01
changelog:
  - spec: annotation buildrequires rubygem(aruba) in order to build it bacause of missing rubygem(aruba)


author: zhangxianting <zhangxianting@uniontech.com> - 1.2.0-1.01
changelog:
  - spec: annotation buildrequires rubygem(aruba) and check of cucumber in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 1.2.0-1.02
changelog:
  - spec: revert annotation buildrequires rubygem(aruba) and check of cucumber because they were builded at kongzi


author: zhangxianting <zhangxianting@uniontech.com> - 2.14.1-1.01
changelog:
  - spec: annotation the dependencies rubygem(rspec2-core) rubygem(rspec2-mocks) rubygem(rspec2-expectations) in order to build them for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 2.14.1-1.02
changelog:
  - spec :revert annotation the dependencies rubygem(rspec2-core) rubygem(rspec2-mocks) rubygem(rspec2-expectations) bacause them were builded at kongzi


author: zhangxianting <zhangxianting@uniontech.com> - 2.14.8-2.01
changelog:
  - spec: annotation buildrequires rubygem(aruba) in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 2.0.3-4.up1.01
changelog:
  - spec: annotation buildrequires rubygem(tilt) and check of tilt because of missong rubygem-tilt in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 2.0.3-4.up1.03
changelog:
  - spec: revert annotation buildrequires rubygem(tilt) and check of tilt, remove gem_remove_require_tilt.patch


author: zhangxianting <zhangxianting@uniontech.com> - 3.2.1-1.01
changelog:
  - spec: annotation buildrequires rubygem(railties) and check because of missong rubygem-railties in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 0.20.3-2.01
changelog:
  - spec: annotation buildrequires rubygem(webmock) in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 2.0.8-1.01
changelog:
  - spec: annotation buildrequires rubygem(haml) and check of haml because of missong rubygem-haml in order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 0.7.1-1.01
changelog:
  - spec: annotation buildrequires rubygem(activesupport) and check of activesupport order to build it for the first time at kongzi tag


author: zhangxianting <zhangxianting@uniontech.com> - 0.7.1-1.02
changelog:
  - spec: revert buildrequires rubygem(activesupport) and check of activesupport because it was builded at kongzi


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: lixin <lixinb@uniontech.com> - 1.5.1-3
changelog:
  - update: update to upstream 1.5.1-3, modify Conflicts version of fence-agents-sbd
  - arch: add loongarch64


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2228444)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2228455)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2228465)
  - Make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2228471)
  - Correct URL used to download CVE checks (RHBZ#2228452)
  - Evaluation and remediation of rules related to mount points have been enhanced for Image builder (RHBZ#2228448)
  - Mention exact required configuration value in description of some PAM related rules (RHBZ#2228441)
  - Fixed rules related to AIDE configuration (RHBZ#2228458)
  - Update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2228429)
  - Improved and unified OVAL checks checking for interactive users (RHBZ#2228433)
  - Unify OVAL checks to correctly identify interactive users (RHBZ#2228460)
  - Fixed excess quotes in journald configuration files (RHBZ#2228437)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2228443)
  - Make mount point related rules not applicable when no such mount points exist (RHBZ#2228473)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.5.1-2
changelog:
  - Fix build failure with GCC10.1 and Werror (upstream pull request)
  - Adapt specfile to new cmake macros (out of tree build)
  - Drop EPEL 6 conditionals (EOL)
  - Fix compilation error with gcc 11


author: Derek Weitzel <dweitzel@unl.edu> - 0.6.0-1
changelog:
  - Fix compilation errors on c++11
  - Update to jwt-cpp-0.4.0 vendor
  - Change scitoken profile name to match spec, scitoken:2.0


author: Peter Vrabec <pvrabec@redhat.com> 1.5a65-1
changelog:
  - upgrade 1.5a65-1 made by Horst H. von Brand <vonbrand@inf.utfsm.cl>
  - Source URL changed, no homepage now
  - License changed from GPL to CDDL 1.0
  - Define MAKEPROG=gmake like the Gmake.linux script does
  - Disable fat binary as per star/Makefile, update star-1.5-selinux.patch for
    the various *.mk files used in that case
  - Axe /usr/share/man/man1/match.1*, /usr/etc/default/rmt too
  - Explicit listing in %files, allow for compressed or plain manpages


author: Ondrej Vasik <ovasik@redhat.com> 1.5-7
changelog:
  - Merge review (#226434) changes: convert AN-1.5 to utf-8,
    spec file cosmetic/policy changes, ship README.linux in doc


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.1-10
changelog:
  - do not crash during extracting if extended attributes are not set on all
    archived files (#861848)
  - note in man page that H=crc format uses Sum32 algorithm (FIPS refuses CRC)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-1
changelog:
  - rebase to most up2date upstream tarball, remove patches already upstream, fix
    code movements in patches (#928758)
  - fix man-page-day objections (private #948866)
  - fix the build for aarch64 (#926571)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-2
changelog:
  - package spax and scpio separately (#959917)
  - fedora-review fixes, unapplied patch
  - make the spax to be pax alternative (#960007)


author: Pavel Raiskup <praiskup@redhat.com> - 1.5.2-7
changelog:
  - we should provide /etc/rmt symlink for a while (related to #968980)
  - use the ssh as the default remote access method


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-12
changelog:
  - lib/sssd: redirect warning message to file (#1749001)
  - useradd: clarify valid usernames/groupnames (#1869432)
  - login.defs: link login specific information to its own package (#1804766)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-15
changelog:
  - Creation of subid and subid-devel subpackages (#2013009)
  - libsubid: creation and nsswitch support
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - libsubid: make shadow_logfd not extern
  - useradd: fix SUB_UID_COUNT=0
  - man: mention NSS in new[ug]idmap manpages
  - man: clarify subid delegation


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-16
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013016
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-17
changelog:
  - subordinateio: also compare the owner ID. Resolves: #2093311
  - Fix release sources
  - Add subid requirement for subid-devel


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.6-18
changelog:
  - Update patch to close label to reset libselinux state. Resolves: #1984740
  - useradd: check if subid range exists for user. Resolves: #2012929
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269


author: Javier Martinez Canillas <javierm@redhat.com> - 15-3
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715878
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717064


author: Peter Jones <pjones@redhat.com> - 15-4
changelog:
  - Rebuild for bug fixes and new signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Once more with the MokListRT config table patch added.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1861977
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Sérgio Basto <sergio@serjux.com> - 19.5.0-5
changelog:
  - Remove smtube sub-package it is available in separated package
  - Announce bundle of libmaia
  - Suggests mpv instead mplayer


author: Michael Vogt <michael.vogt@ubuntu.com>
changelog:
  - New upstream release 2.51.2
   - snapstate: remove temporary snap file for local revisions early
   - interface: allows reading sd cards internal info from block-
     devices interface
   - o/ifacestate: do not visit same halt tasks in waitChainSearch to
     avoid slow convergence (or unlikely cycles)
   - corecfg: allow using `# snapd-edit: no` header to disable pi-
     config
   - configcore: ignore system.pi-config.* setting on measured kernels
   - many: pass device/model info to configcore via sysconfig.Device
     interface
   - o/configstate/configcore: support snap set system swap.size=...
   - store: make the log with download size a debug one
   - interfaces/opengl: add support for Imagination PowerVR


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.51.3
   - interfaces/builtin: add sd-control interface
   - store: set ResponseHeaderTimeout on the default transport


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.51.4
   - {device,snap}state: skip kernel extraction in seeding
   - vendor: move to snapshot-4c814e1 branch and set fixed KDF options
   - tests/interfaces/tee: fix HasLen check for udev snippets
   - interfaces/tee: add support for Qualcomm qseecom device node
   - gadget: check for system-save with multi volumes if encrypting
     correctly
   - gadget: drive-by: drop unnecessary/supported passthrough in test
     gadget.yaml


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.51.5
   - snap/squashfs: handle squashfs-tools 4.5+
   - tests/core20-install-device-file-install-via-hook-hack: adjust
     test for 2.51
   - o/devicestate/handlers_install.go: add workaround to create dirs
     for install
   - tests: fix linter warning
   - tests: update other spread tests for new behaviour
   - tests: ack assertions by default, add --noack option
   - release-tools/changelog.py: also fix opensuse changelog date
     format
   - release-tools/changelog.py: fix typo in function name
   - release-tools/changelog.py: fix fedora date format
   - release-tools/changelog.py: handle case where we don't have a TZ
   - release-tools/changelog.py: fix line length check
   - release-tools/changelog.py: specify the LP bug for the release as
     an arg too
   - interface/modem-manager: add support for MBIM/QMI proxy
     clients
   - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd
     snap


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.51.6
   - secboot: use half the mem for KDF in AddRecoveryKey
   - secboot: switch main key KDF memory cost to 32KB


author: Ian Johnson <ian.johnson@canonical.com>
changelog:
  - New upstream release 2.51.7
   - cmd/snap-seccomp/syscalls: update syscalls list to libseccomp
     v2.2.0-428-g5c22d4b1
   - tests: cherry-pick shellcheck fix `bd730fd4`
   - interfaces/dsp: add /dev/ambad into dsp interface
   - many: shellcheck fixes
   - snapstate: abort kernel refresh if no gadget update can be found
   - overlord: add manager test for "assumes" checking
   - store: deal correctly with "assumes" from the store raw yaml


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.51.7-1
changelog:
  - New upstream release 2.51.7 (RHBZ#1972558)
  - Include an upstream fix for squashfs 4.5+ compatibility (RHBZ#1999998)


author: Zygmunt Krynicki <me@zygoon.pl> - 2.0.9-2
changelog:
  - Depend on kernel-modules to ensure that squashfs can be loaded. Load it afer
    installing the package. This hopefully fixes
    https://github.com/zyga/snapcore-fedora/issues/2


author: Neal Gompa <ngompa13@gmail.com> - 2.23.1-1
changelog:
  - Rebase to snapd 2.23.1
  - Add support for vendored tarball for non-Fedora targets
  - Use merged in SELinux policy module


author: Neal Gompa <ngompa13@gmail.com> - 2.23.5-1
changelog:
  - Rebase to snapd 2.23.5
  - Disable seccomp temporarily avoid snap-confine bugs (LP#1674193)
  - Use vendorized build for non-Fedora


author: Neal Gompa <ngompa13@gmail.com> - 2.23.6-1
changelog:
  - Rebase to snapd 2.23.6
  - Rediff patches
  - Re-enable seccomp
  - Fix building snap-confine on 32-bit arches
  - Set ExclusiveArch based on upstream supported arch list


author: Neal Gompa <ngompa13@gmail.com> - 2.23.6-2
changelog:
  - Fix the overlapping file conflicts between snapd and snap-confine
  - Rework package descriptions slightly


author: Neal Gompa <ngompa13@gmail.com> - 2.26.3-1
changelog:
  - Update to snapd 2.26.3
  - Drop merged and unused patches
  - Cover more Snappy content for proper erasure on final uninstall (RH#1444422)
  - Add temporary fix to ensure generated seccomp profiles don't break snapctl


author: Neal Gompa <ngompa13@gmail.com> - 2.26.3-2
changelog:
  - Fix error in script for removing Snappy content (RH#1444422)
  - Adjust changelog bug references to be specific on origin


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.27
   - fix build failure on 32bit fedora
   - interfaces: add password-manager-service implicit classic interface
   - interfaces/greengrass-support: adjust accesses now that have working
     snap
   - interfaces/many, cmd/snap-confine: miscellaneous policy updates
   - interfaces/unity7: allow receiving media key events in (at least)
     gnome-shell
   - cmd: fix re-exec bug when starting from snapd 2.21
   - tests: restore interfaces-account-control properly
   - cmd: fix tests that assume /snap mount
   - cmd: mark arch as non-reexecing distro
   - snap-confine: don't share /etc/nsswitch from host
   - store: talk to api.snapcraft.io for purchases
   - hooks: support for install and remove hooks
   - packaging: fix Fedora support
   - tests: add bluetooth-control interface test
   - store: talk to api.snapcraft.io for assertions
   - tests: remove snapd before building from branch
   - tests: add avahi-observe interface test
   - store: orders API now checks if customer is ready
   - cmd/snap: snap find only searches stable
   - interfaces: updates default, mir, optical-observe, system-observe,
     screen-inhibit-control and unity7
   - tests: speedup prepare statement part 1
   - store: do not send empty refresh requests
   - asserts: fix error handling in snap-developer consistency check
   - systemd: add explicit sync to snapd.core-fixup.sh
   - snapd: generate snap cookies on startup
   - cmd,client,daemon: expose "force devmode" in sysinfo
   - many: introduce and use strutil.ListContains and also
     strutil.SortedListContains
   - assserts,overlord/assertstate: test we don't accept chains of
     assertions founded on a self-signed key coming externally
   - interfaces: enable access to bridge settings
   - interfaces: fix copy-pasted iio vs io in io-ports-control
   - cmd/snap-confine: various small fixes and tweaks to seccomp
     support code
   - interfaces: bring back seccomp argument filtering
   - systemd, osutil: rework systemd logs in preparation for services
     commands
   - tests: store /etc/systemd/system/snap-*core*.mount in snapd-
     state.tar.gz
   - tests: shellcheck improvements for tests/main tasks - first set of
     tests
   - cmd/snap: `--last` for abort and watch, and aliases
     (search→find, change→tasks)
   - tests: shellcheck improvements for tests/lib scripts
   - tests: create ramdisk if it's not present
   - tests: shellcheck improvements for nightly upgrade and regressions
     tests
   - snapd: fix for snapctl get panic on null config values.
   - tests: fix for rng-tools service not restarting
   - systemd: add snapd.core-fixup.service unit
   - cmd: avoid using current symlink in InternalToolPath
   - tests: fix timeout issue for test refresh core with hanging …
   - intefaces: control bridged vlan/ppoe-tagged traffic
   - cmd/snap: include snap type in notes
   - overlord/state: Abort() only visits each task once
   - tests: extend find-private test to cover more cases
   - snap-seccomp: skip socket() tests on systems that use socketcall()
     instead of socket()
   - many: support snap title as localized/title-cased name
   - snap-seccomp: deal with mknod on aarch64 in the seccomp tests
   - interfaces: put base policy fragments inside each interface
   - asserts: introduce NewDecoderWithTypeMaxBodySize
   - tests: fix snapd-notify when it takes more time to restart
   - snap-seccomp: fix snap-seccomp tests in artful
   - tests: fix for create-key task to avoid rng-tools service ramains
     alive
   - snap-seccomp: make sure snap-seccomp writes the bpf file
     atomically
   - tests: do not disable ipv6 on core systems
   - arch: the kernel architecture name is armv7l instead of armv7
   - snap-confine: ensure snap-confine waits some seconds for seccomp
     security profiles
   - tests: shellcheck improvements for tests/nested tasks
   - wrappers: add SyslogIdentifier to the service unit files.
   - tests: shellcheck improvements for unit tasks
   - asserts: implement FindManyTrusted as well
   - asserts: open up and optimize Encoder to help avoiding unnecessary
     copying
   - interfaces: simplify snap-confine by just loading pre-generated
     bpf code
   - tests: restart rng-tools services after few seconds
   - interfaces, tests: add mising dbus abstraction to system-observe
     and extend spread test
   - store: change main store host to api.snapcraft.io
   - overlord/cmdstate: new package for running commands as tasks.
   - spread: help libapt resolve installing libudev-dev
   - tests: show the IP from .travis.yaml
   - tests/main: use pkgdb function in more test cases
   - cmd,daemon: add debug command for displaying the base policy
   - tests: prevent quoting error on opensuse
   - tests: fix nightly suite
   - tests: add linode-sru backend
   - snap-confine: validate SNAP_NAME against security tag
   - tests: fix ipv6 disable for ubuntu-core
   - tests: extend core-revert test to cover bluez issues
   - interfaces/greengrass-support: add support for Amazon Greengrass
     as a snap
   - asserts: support timestamp and optional disabled header on repair
   - tests: reboot after upgrading to snapd on the -proposed pocket
   - many: fix test cases to work with different DistroLibExecDir
   - tests: reenable help test on ubuntu and debian systems
   - packaging/{opensuse,fedora}: allow package build with testkeys
     included
   - tests/lib: generalize RPM build support
   - interfaces/builtin: sync connected slot and permanent slot snippet
   - tests: fix snap create-key by restarting automatically rng-tools
   - many: switch to use http numeric statuses as agreed
   - debian: add missing  Type=notify in 14.04 packaging
   - tests: mark interfaces-openvswitch as manual due to prepare errors
   - debian: unify built_using between the 14.04 and 16.04 packaging
     branch
   - tests: pull from urandom when real entropy is not enough
   - tests/main/manpages: install missing man package
   - tests: add refresh --time output check
   - debian: add missing "make -C data/systemd clean"
   - tests: fix for upgrade test when it is repeated
   - tests/main: use dir abstraction in a few more test cases
   - tests/main: check for confinement in a few more interface tests
   - spread: add fedora snap bin dir to global PATH
   - tests: check that locale-control is not present on core
   - many: snapctl outside hooks
   - tests: add whoami check
   - interfaces: compose the base declaration from interfaces
   - tests: fix spread flaky tests linode
   - tests,packaging: add package build support for openSUSE
   - many: slight improvement of some snap error messaging
   - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in
     err reports
   - tests: fix for the test postrm-purge
   - tests: restoring the /etc/environment and service units config for
     each test
   - daemon: make snapd a "Type=notify" daemon and notify when startup
     is done
   - cmd/snap-confine: add support for --base snap
   - many: derive implicit slots from interface meta-data
   - tests: add core revert test
   - tests,packaging: add package build support for Fedora for our
     spread setup
   - interfaces: move base declaration to the policy sub-package
   - tests: fix for snapd-reexec test cheking for restart info on debug
     log
   - tests: show available entropy on error
   - tests: clean journalctl logs on trusty
   - tests: fix econnreset on staging
   - tests: modify core before calling set
   - tests: add snap-confine privilege test
   - tests: add staging snap-id
   - interfaces/builtin: silence ptrace denial for network-manager
   - tests: add alsa interface spread test
   - tests: prefer ipv4 over ipv6
   - tests: fix for econnreset test checking that the download already
     started
   - httputil,store: extract retry code to httputil, reorg usages
   - errtracker: report if snapd did re-execute itself
   - errtracker: include bits of snap-confine apparmor profile
   - tests: take into account staging snap-ids for snap-info
   - cmd: add stub new snap-repair command and add timer
   - many: stop "snap refresh $x --channel invalid" from working
   - interfaces: revert "interfaces: re-add reverted ioctl and quotactl
   - snapstate: consider connect/disconnect tasks in
     CheckChangeConflict.
   - interfaces: disable "mknod |N" in the default seccomp template
     again
   - interfaces,overlord/ifacestate: make sure installing slots after
     plugs works similarly to plugs after slots
   - interfaces/seccomp: add bind() syscall for forced-devmode systems
   - packaging/fedora: Sync packaging from Fedora Dist-Git
   - tests: move static and unit tests to spread task
   - many: error types should be called FooError, not ErrFoo.
   - partition: add directory sync to the save uboot.env file code
   - cmd: test everything (100% coverage \o/)
   - many: make shell scripts shellcheck-clean
   - tests: remove additional setup for docker on core
   - interfaces: add summary to each interface
   - many: remove interface meta-data from list of connections
   - logger (& many more, to accommodate): drop explicit syslog.
   - packaging: import packaging bits for opensuse
   - snapstate,many: implement snap install --unaliased
   - tests/lib: abstract build dependency installation a bit more
   - interfaces, osutil: move flock code from interfaces/mount to
     osutil
   - cmd: auto import assertions only from ext4,vfat file systems
   - many: refactor in preparation for 'snap start'
   - overlord/snapstate: have an explicit code path last-refresh
     unset/zero => immediately refresh try
   - tests: fixes for executions using the staging store
   - tests: use pollinate to seed the rng
   - cmd/snap,tests: show the sha3-384 of the snap for snap info
     --verbose SNAP-FILE
   - asserts: simplify and adjust repair assertion definition
   - cmd/snap,tests: show the snap id if available in snap info
   - daemon,overlord/auth: store from model assertion wins
   - cmd/snap,tests/main: add confinement switch instead of spread
     system blacklisting
   - many: cleanup MockCommands and don't leave a process around after
     hookstate tests
   - tests: update listing test to the core version number schema
   - interfaces: allow snaps to use the timedatectl utility
   - packaging: Add Fedora packaging files
   - tests/libs: add distro_auto_remove_packages function
   - cmd/snap: correct devmode note for anomalous state
   - tests/main/snap-info: use proper pkgdb functions to install distro
     packages
   - tests/lib: use mktemp instead of tempfile to work cross-distro
   - tests: abstract common dirs which differ on distributions
   - many: model and expose interface meta-data.
   - overlord: make config defaults from gadget work also at first boot
   - interfaces/log-observe: allow using journalctl from hostfs for
     classic distro
   - partition,snap: add support for android boot
   - errtracker: small simplification around readMachineID
   - snap-confine: move rm_rf_tmp to test-utils.
   - tests/lib: introduce pkgdb helper library
   - errtracker: try multiple paths to read machine-id
   - overlord/hooks: make sure only one hook for given snap is executed
     at a time.
   - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the
     confinement env
   - tests: bump kill-timeout and remove quiet call on build
   - tests/lib/snaps: add a test store snap with a passthrough
     configure hook
   - daemon: teach the daemon to wait on active connections when
     shutting down
   - tests: remove unit tests task
   - tests/main/completion: source from /usr/share/bash-completion
   - assertions: add "repair" assertion
   - interfaces/seccomp: document Backend.NewSpecification
   - wrappers: make StartSnapServices cleanup any services that were
     added if a later one fails
   - overlord/snapstate: avoid creating command aliases for daemons
   - vendor: remove unused packages
   - vendor,partition: fix panics from uenv
   - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from
     core if possible
   - daemon: do not allow to install ubuntu-core anymore
   - wrappers: service start/stop were inconsistent
   - tests: fix failing tests (snap core version, syslog changes)
   - cmd/snap-update-ns: add actual implementation
   - tests: improve entropy also for ubuntu
   - cmd/snap-confine: use /etc/ssl from the core snap
   - wrappers: don't convert between []byte and string needlessly.
   - hooks: default timeout
   - overlord/snapstate: Enable() was ignoring the flags from the
     snap's state, resulting in losing "devmode" on disable/enable.
   - difs,interfaces/mount: add support for locking namespaces
   - interfaces/mount: keep track of kept mount entries
   - tests/main: move a bunch of greps over to MATCH
   - interfaces/builtin: make all interfaces private
   - interfaces/mount: spell unmount correctly
   - tests: allow 16-X.Y.Z version of core snap
   - the timezone_control interface only allows changing /etc/timezone
     and /etc/writable/timezone. systemd-timedated also updated the
     link of /etc/localtime and /etc/writable/localtime ... allow
     access to this file too
   - cmd/snap-confine: aggregate operations holding global lock
   - api, ifacestate: resolve disconnect early
   - interfaces/builtin: ensure we don't register interfaces twice


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.27.1
   - tests: use dnf --refresh install to avert stale cache
   - tests: fix test failure on 14.04 due to old version of
     flock
   - updates for unity7/x11, browser-support, network-control,
     mount-observe
   - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
   - interfaces/browser-support: update sysfs reads for
     newer browser versions
   - interfaces/network-control: rw for ieee80211 advanced wireless
   - interfaces/mount-observe: allow read on sysfs entries for block
     devices


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.27.2
   - tests: remove TestInterfacesHelp as it breaks when go-flags
     changes
   - interfaces: don't crash if content slot has no attributes
   - debian: do not build with -buildmode=pie on i386
   - interfaces: backport broadcom-asic-control interface
   - interfaces: allow /usr/bin/xdg-open in unity7
   - store: do not resume a download when we already have the whole
     thing


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.27.3
    - systemd: disable `Nice=-5` to fix error when running inside lxdSee
      https://bugs.launchpad.net/snapd/+bug/1709536


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.27.5
    - interfaces: fix network-manager plug regression
    - hooks: do not error when hook handler is not registered
    - interfaces/alsa,pulseaudio: allow read on udev data for sound
    - interfaces/optical-drive: read access to udev data for /dev/scd*
    - interfaces/browser-support: read on /proc/vmstat and misc udev
      data


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.27.6
    - interfaces: add udev netlink support to hardware-observe
    - interfaces/network-{control,observe}: allow receiving
      kobject_uevent() messages


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.28
   - hooks: rename refresh to after-refresh
   - snap-confine: bind mount /usr/lib/snapd relative to snap-confine
   - cmd,dirs: treat "liri" the same way as "arch"
   - snap-confine: fix base snaps on core
   - hooks: substitute env vars when executing hooks
   - interfaces: updates for default, browser-support, desktop, opengl,
     upower and stub-resolv.conf
   - cmd,dirs: treat manjaro the same as arch
   - systemd: do not run auto-import and repair services on classic
   - packaging/fedora: Ensure vendor/ is empty for builds and fix spec
     to build current master
   - many: fix TestSetConfNumber missing an Unlock and other fragility
     improvements
   - osutil: adjust StreamCommand tests for golang 1.9
   - daemon: allow polkit authorisation to install/remove snaps
   - tests: make TestCmdWatch more robust
   - debian: improve package description
   - interfaces: add netlink kobject uevent to hardware observe
   - debian: update trusted account-keys check on 14.04 packaging
   - interfaces/network-{control,observe}: allow receiving
     kobject_uevent() messages
   - tests: fix lxd test for external backend
   - snap-confine,snap-update-ns: add -no-pie to fix FTBFS on
     go1.7,ppc64
   - corecfg: mock "systemctl" in all corecfg tests
   - tests: fix unit tests on Ubuntu 14.04
   - debian: add missing flags when building static snap-exec
   - many: end-to-end support for the bare base snap
   - overlord/snapstate: SetRootDir from SetUpTest, not in just some
     tests
   - store: have an ad-hoc method on cfg to get its list of uris for
     tests
   - daemon: let client decide whether to allow interactive auth via
     polkit
   - client,daemon,snap,store: add license field
   - overlord/snapstate: rename HasCurrent to IsInstalled, remove
     superfluous/misleading check from All
   - cmd/snap: SetRootDir from SetUpTest, not in just some individual
     tests.
   - systemd: rename snap-repair.{service,timer} to snapd.snap-
     repair.{service,timer}
   - snap-seccomp: remove use of x/net/bpf from tests
   - httputil: more naive per go version way to recreate a default
     transport for tls reconfig
   - cmd/snap-seccomp/main_test.go: add one more syscall for arm64
   - interfaces/opengl: use == to compare, not =
   - cmd/snap-seccomp/main_test.go: add syscalls for armhf and arm64
   - cmd/snap-repair: track and use a lower bound for the time for
     TLS checks
   - interfaces: expose bluez interface on classic OS
   - snap-seccomp: add in-kernel bpf tests
   - overlord: always try to get a serial, lazily on classic
   - tests: add nmcli regression test
   - tests: deal with __PNR_chown on aarch64 to fix FTBFS on arm64
   - tests: add autopilot-introspection interface test
   - vendor: fix artifact from manually editing vendor/vendor.json
   - tests: rename complexion to test-snapd-complexion
   - interfaces: add desktop and desktop-legacy
     interfaces/desktop: add new 'desktop' interface for modern DEs*
     interfaces/builtin/desktop_test.go: use modern testing techniques*
     interfaces/wayland: allow read on /etc/drirc for Plasma desktop*
     interfaces/desktop-legacy: add new 'legacy' interface (currently
     for a11y and input)
   - tests: fix race in snap userd test
   - devices/iio: add read/write for missing sysfs entries
   - spread: don't set HTTPS?_PROXY for linode
   - cmd/snap-repair: check signatures of repairs from Next
   - env: set XDG_DATA_DIRS for wayland et.al.
   - interfaces/{default,account-control}: Use username/group instead
     of uid/gid
   - interfaces/builtin: use udev tagging more broadly
   - tests: add basic lxd test
   - wrappers: ensure bash completion snaps install on core
   - vendor: use old golang.org/x/crypto/ssh/terminal to build on
     powerpc again
   - docs: add PULL_REQUEST_TEMPLATE.md
   - interfaces: fix network-manager plug
   - hooks: do not error out when hook is optional and no hook handler
     is registered
   - cmd/snap: add userd command to replace snapd-xdg-open
   - tests: new regex used to validate the core version on extra snaps
     ass...
   - snap: add new `snap switch` command
   - tests: wait more and more debug info about fakestore start issues
   - apparmor,release: add better apparmor detection/mocking code
   - interfaces/i2c: adjust sysfs rule for alternate paths
   - interfaces/apparmor: add missing call to dirs.SetRootDir
   - cmd: "make hack" now also installs snap-update-ns
   - tests: copy files with less verbosity
   - cmd/snap-confine: allow using additional libraries required by
     openSUSE
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - snapstate: improve the error message when classic confinement is
     not supported
   - tests: add test to ensure amd64 can run i386 syscall binaries
   - tests: adding extra info for fakestore when fails to start
   - tests: install most important snaps
   - cmd/snap-repair: more test coverage of filtering
   - squashfs: remove runCommand/runCommandWithOutput as we do not need
     it
   - cmd/snap-repair: ignore superseded revisions, filter on arch and
     models
   - hooks: support for refresh hook
   - Partial revert "overlord/devicestate, store: update device auth
     endpoints URLs"
   - cmd/snap-confine: allow reading /proc/filesystems
   - cmd/snap-confine: genearlize apparmor profile for various lib
     layout
   - corecfg: fix proxy.* writing and add integration test
   - corecfg: deal with system.power-key-action="" correctly
   - vendor: update vendor.json after (presumed) manual edits
   - cmd/snap: in `snap info`, don't print a newline between tracks
   - daemon: add polkit support to /v2/login
   - snapd,snapctl: decode json using Number
   - client: fix go vet 1.7 errors
   - tests: make 17.04 shellcheck clean
   - tests: remove TestInterfacesHelp as it breaks when go-flags
     changes
   - snapstate: undo a daemon restart on classic if needed
   - cmd/snap-repair: recover brand/model from
     /var/lib/snapd/seed/assertions checking signatures and brand
     account
   - spread: opt into unsafe IO during spread tests
   - snap-repair: update snap-repair/runner_test.go for API change in
     makeMockServer
   - cmd/snap-repair: skeleton code around actually running a repair
   - tests: wait until the port is listening after start the fake store
   - corecfg: fix typo in tests
   - cmd/snap-repair: test that redirects works during fetching
   - osutil: honor SNAPD_UNSAFE_IO for testing
   - vendor: explode and make more precise our golang.go/x/crypto deps,
     use same version as Debian unstable
   - many: sanitize NewStoreStack signature, have shared default store
     test private keys
   - systemd: disable `Nice=-5` to fix error when running inside lxd
   - spread.yaml: update delta ref to 2.27
   - cmd/snap-repair: use E-Tags when refetching a repair to retry
   - interfaces/many: updates based on chromium and mrrescue denials
   - cmd/snap-repair: implement most logic to get the next repair to
     run/retry in a brand sequence
   - asserts/assertstest: copy headers in SigningDB.Sign
   - interfaces: convert uhid to common interface and test cases
     improvement for time_control and opengl
   - many tests: move all panicing fake store methods to a common place
   - asserts: add store assertion type
   - interfaces: don't crash if content slot has no attributes
   - debian: do not build with -buildmode=pie on i386
   - wrappers: symlink completion snippets when symlinking binaries
   - tests: adding more debug information for the interfaces-cups-
     control …
   - apparmor: pass --quiet to parser on load unless SNAPD_DEBUG is set
   - many: allow and support serials signed by the 'generic' authority
     instead of the brand
   - corecfg: add proxy configuration via `snap set core
     proxy.{http,https,ftp}=...`
   - interfaces: a bunch of interfaces test improvement
   - tests: enable regression and completion suites for opensuse
   - tests: installing snapd for nested test suite
   - interfaces: convert lxd_support to common iface
   - interfaces: add missing test for camera interface.
   - snap: add support for parsing snap layout section
   - cmd/snap-repair: like for downloads we cannot have a timeout (at
     least for now), less aggressive retry strategies
   - overlord: rely on more conservative ensure interval
   - overlord,store: no piles of return args for methods gathering
     device session request params
   - overlord,store: send model assertion when setting up device
     sessions
   - interfaces/misc: updates for unity7/x11, browser-
     support, network-control and mount-observe
     interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
     interfaces/browser-support: update sysfs reads for
     newer browser versions, interfaces/network-control: rw for
     ieee80211 advanced wireless interfaces/mount-observe: allow read
     on sysfs entries for block devices
   - tests: use dnf --refresh install to avert stale cache
   - osutil: ensure TestLockUnlockWorks uses supported flock
   - interfaces: convert lxd to common iface
   - tests: restart snapd to ensure re-exec settings are applied
   - tests: fix interfaces-cups-control test
   - interfaces: improve and tweak bunch of interfaces test cases.
   - tests: adding extra worker for fedora
   - asserts,overlord/devicestate: support predefined assertions that
     don't establish foundational trust
   - interfaces: convert two hardware_random interfaces to common iface
   - interfaces: convert io_ports_control to common iface
   - tests: fix for  upgrade test on fedora
   - daemon, client, cmd/snap: implement snap start/stop/restart
   - cmd/snap-confine: set _FILE_OFFSET_BITS to 64
   - interfaces: covert framebuffer to commonInterface
   - interfaces: convert joystick to common iface
   - interfaces/builtin: add the spi interface
   - wrappers, overlord/snapstate/backend: make link-snap clean up on
     failure.
   - interfaces/wayland: add wayland interface
   - interfaces: convert kvm to common iface
   - tests: extend upower-observe test to cover snaps providing slots
   - tests: enable main suite for opensuse
   - interfaces: convert physical_memory_observe to common iface
   - interfaces: add missing test for optical_drive interface.
   - interfaces: convert physical_memory_control to common iface
   - interfaces: convert ppp to common iface
   - interfaces: convert time-control to common iface
   - tests: fix failover test
   - interfaces/builtin: rework for avahi interface
   - interfaces: convert broadcom-asic-control to common iface
   - snap/snapenv: document the use of CoreSnapMountDir for SNAP
   - packaging/arch: drop patches merged into master
   - cmd: fix mustUnsetenv docstring (thanks to Chipaca)
   - release: remove default from VERSION_ID
   - tests: enable regression, upgrade and completion test suites for
     fedora
   - tests: restore interfaces-account-control properly
   - overlord/devicestate, store: update device auth endpoints URLs
   - tests: fix install-hook test failure
   - tests: download core and ubuntu-core at most once
   - interfaces: add common support for udev
   - overlord/devicestate: fix, don't assume that the serial is backed
     by a 1-key chain
   - cmd/snap-confine: don't share /etc/nsswitch from host
   - store: do not resume a download when we already have the whole
     thing
   - many: implement "snap logs"
   - store: don't call useDeltas() twice in quick succession
   - interfaces/builtin: add kvm interface
   - snap/snapenv: always expect /snap for $SNAP
   - cmd: mark arch as non-reexecing distro
   - cmd: fix tests that assume /snap mount
   - gitignore: ignore more build artefacts
   - packaging: add current arch packaging
   - interfaces/unity7: allow receiving media key events in (at least)
     gnome-shell
   - interfaces/many, cmd/snap-confine: miscellaneous policy updates
   - interfaces/builtin: implement broadcom-asic-control interface
   - interfaces/builtin: reduce duplication and remove cruft in
     Sanitize{Plug,Slot}
   - tests: apply underscore convention for SNAPMOUNTDIR variable
   - interfaces/greengrass-support: adjust accesses now that have
     working snap
   - daemon, client, cmd/snap: implement "snap services"
   - tests: fix refresh tests not stopping fake store for fedora
   - many: add the interface command
   - overlord/snapstate/backend: some copydata improvements
   - many: support querying and completing assertion type names
   - interfaces/builtin: discard empty Validate{Plug,Slot}
   - cmd/snap-repair:  start of Runner, implement first pass of Peek
     and Fetch
   - tests: enable main suite on fedora
   - snap: do not always quote the snap info summary
   - vendor: update go-flags to address crash in "snap debug"
   - interfaces: opengl support pci device and vendor
   - many: start implenting "base" snap type on the snapd side
   - arch,release: map armv6 correctly
   - many: expose service status in 'snap info'
   - tests: add browser-support interface test
   - tests: disable snapd-notify for the external backend
   - interfaces: Add /run/uuid/request to openvswitch
   - interfaces: add password-manager-service implicit classic
     interface
   - cmd: rework reexec detection
   - cmd: fix re-exec bug when starting from snapd 2.21
   - tests: dependency packages installed during prepare-project
   - tests: remove unneeded check for re-exec in InternalToolPath()
   - cmd,tests: fix classic confinement confusing re-execution code
   - store: configurable base api
   - tests: fix how package lists are updated for opensuse and fedora


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.28.1
    - snap-confine: update apparmor rules for fedora based basesnaps
    - snapstate: rename refresh hook to post-refresh for consistency


author: Neal Gompa <ngompa13@gmail.com> - 2.28.1-1
changelog:
  - Release 2.28.1 to Fedora (RH#1495852)
  - Drop userd backport patches, they are part of 2.28 release
  - Backport changes to rework distro checks to fix derivative distro usage of snapd
  - Revert import path change for cheggaaa/pb as it breaks build on Fedora
  - Add a posttrans relabel to snapd-selinux to ensure everything is labeled correctly


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.28.2
    - interfaces: fix udev rules for tun
    - release,cmd,dirs: Redo the distro checks to take into account
      distribution families


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.28.3
    - interfaces/lxd: lxd slot implementation can also be an app
      snap


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.28.4
    - interfaces/opengl: don't udev tag nvidia devices and use snap-
      confine instead
    - debian: fix replaces/breaks for snap-xdg-open (thanks to apw!)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.28.5
    - snap-confine: cleanup broken nvidia udev tags
    - cmd/snap-confine: update valid security tag regexp
    - overlord/ifacestate: refresh udev backend on startup
    - dbus: ensure io.snapcraft.Launcher.service is created on re-
      exec
    - snap-confine: add support for handling /dev/nvidia-modeset
    - interfaces/network-control: remove incorrect rules for tun


author: Neal Gompa <ngompa13@gmail.com> - 2.28.5-1
changelog:
  - Release 2.28.5 to Fedora (RH#1502186)
  - Build snap-exec and snap-update-ns statically to support base snaps


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.29
   - interfaces/many: miscellaneous updates based on feedback from the
     field
   - snap-confine: allow reading uevents from any where in /sys
   - spread: add bionic beaver
   - debian: make packaging/ubuntu-14.04/copyright a real file again
   - tests: cherry pick the fix for services test into 2.29
   - cmd/snap-update-ns: initialize logger
   - hooks/configure: queue service restarts
   - snap-{confine,seccomp}: make @unrestricted fully unrestricted
   - interfaces: clean system apparmor cache on core device
   - debian: do not build static snap-exec on powerpc
   - snap-confine: increase sanity_timeout to 6s
   - snapctl: cherry pick service commands changes
   - cmd/snap: tell translators about arg names and descs req's
   - systemd: run all mount units before snapd.service to avoid race
   - store: add a test to show auth failures are forwarded by doRequest
   - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error.
   - store: forward on INVALID_CREDENTIALS error as
     ErrInvalidCredentials
   - daemon: generate a forbidden response message if polkit dialog is
     dismissed
   - daemon: Allow Polkit authorization to cancel changes.
   - travis: switch to container based test runs
   - interfaces: reduce duplicated code in interface tests mocks
   - tests: improve revert related testing
   - interfaces: sanitize plugs and slots early in ReadInfo
   - store: add download caching
   - preserve TMPDIR and HOSTALIASES across snap-confine invocation
   - snap-confine: init all arrays with `= {0,}`
   - tests: adding test for network-manager interface
   - interfaces/mount: don't generate legacy per-hook/per-app mount
     profiles
   - snap: introduce structured epochs
   - tests: fix interfaces-cups-control test for cups-2.2.5
   - snap-confine: cleanup incorrectly created nvidia udev tags
   - cmd/snap-confine: update valid security tag regexp
   - cmd/libsnap: enable two stranded tests
   - cmd,packaging: enable apparmor on openSUSE
   - overlord/ifacestate: refresh all security backends on startup
   - interfaces/dbus: drop unneeded check for
     release.ReleaseInfo.ForceDevMode
   - dbus: ensure io.snapcraft.Launcher.service is created on re-
     exec
   - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the
     model is generic-classic
   - snap-confine: add support for handling /dev/nvidia-modeset
   - interfaces/network-control: remove incorrect rules for tun
   - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each
     section
   - packaging: remove .mnt files on removal
   - tests: fix econnreset scenario when the iptables rule was not
     created
   - tests: add test for lxd interface
   - run-checks: use nakedret static checker to check for naked
     returns on long functions
   - progress: be more flexible in testing ansimeter
   - interfaces: fix udev rules for tun
   - many: implement our own ANSI-escape-using progress indicator
   - snap-exec: update tests to follow main_test pattern
   - snap: support "command: foo $ENV_STRING"
   - packaging: update nvidia configure options
   - snap: add new `snap pack` and use in tests
   - cmd: correctly name the "Ubuntu" and "Arch" NVIDIA methods
   - cmd: add autogen case for solus
   - tests: do not use http://canihazip.com/ which appears to be down
   - hooks: commands for controlling own services from snapctl
   - snap: refactor cmdGet.Execute()
   - interfaces/mount: make Change.Perform testable and test it
   - interfaces/mount,cmd/snap-update-ns: move change code
   - snap-confine: is_running_on_classic_distribution() looks into os-
     release
   - interfaces: misc updates for default, browser-support, home and
     system-observe
   - interfaces: deny lttng by default
   - interfaces/lxd: lxd slot implementation can also be an app snap
   - release,cmd,dirs: Redo the distro checks to take into account
     distribution families
   - cmd/snap: completion for alias and unalias
   - snap-confine: add new SC_CLEANUP and use it
   - snap: refrain from running filepath.Base on random strings
   - cmd/snap-confine: put processes into freezer hierarchy
   - wrappers: fail install if exec-line cannot be re-written
   - cmd/snap-seccomp,osutil: make user/group lookup functions public
   - snapstate: deal with snap user data in the /root/ directory
   - interfaces: Enhance full-confinement support for biarch
     distributions
   - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA
     is used
   - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks
   - overlord/snapstate: prefer a smaller corner case for doing the
     wrong thing
   - cmd/snap-repair:  set user agent for snap-repair http requests
   - packaging: bring down the delta between 14.04 and 16.04
   - snap-confine: Ensure lib64 biarch directory is respected
   - snap-confine: update apparmor rules for fedora based base snaps
   - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to
     install real snaps
   - daemon: use client.Snap instead of map[string]interface{} for
     snaps.
   - hooks: rename refresh hook to post-refresh
   - git: make the .gitingore file a bit more targeted
   - interfaces/opengl: don't udev tag nvidia devices and use snap-
     confine instead
   - cmd/snap-{confine,update-ns}: apply mount profiles using snap-
     update-ns
   - cmd: update "make hack"
   - interfaces/system-observe: allow clients to enumerate DBus
     connection names
   - snap-repair: implement `snap-repair {list,show}`
   - dirs,interfaces: create snap-confine.d on demand when re-executing
   - snap-confine: fix base snaps on core
   - cmd/snap-repair: fix tests when running as root
   - interfaces: add Connection type
   - cmd/snap-repair: skip disabled repairs
   - cmd/snap-repair: prefer leaking unmanaged fds on test failure over
     closing random ones
   - snap-repair: make `repair` binary available for repair scripts
   - snap-repair: fix missing Close() in TestStatusHappy
   - cmd/snap-confine,packaging: import snapd-generated policy
   - cmd/snap: return empty document if snap has no configuration
   - snap-seccomp: run secondary-arch tests via gcc-multilib
   - snap: implement `snap {repair,repairs}` and pass-through to snap-
     repair
   - interfaces/builtin: allow receiving dbus messages
   - snap-repair: implement `snap-repair {done,skip,retry}`
   - data/completion: small tweak to snap completion snippet
   - dirs: fix classic support detection
   - cmd/snap-repair: integrate root public keys for repairs
   - tests: fix ubuntu core services
   - tests: add new test that checks that the compat snapd-xdg-open
     works
   - snap-confine: improve error message if core/u-core cannot be found
   - tests: only run tests/regression/nmcli on amd64
   - interfaces: mount host system fonts in desktop interface
   - interfaces: enable partial apparmor support
   - snapstate: auto-install missing base snaps
   - spread: work around temporary packaging issue in debian sid
   - asserts,cmd/snap-repair: introduce a mandatory summary for repairs
   - asserts,cmd/snap-repair: represent RepairID internally as an int
   - tests: test the real "xdg-open" from the core snap
   - many: implement fetching sections and package names periodically.
   - interfaces/network: allow using netcat as client
   - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp
   - snap-seccomp: skip mknod syscall on arm64
   - tests: add trivial canonical-livepatch test
   - tests: add test that ensures that all core services are working
   - many: add logger.MockLogger() and use it in the tests
   - snap-repair: fix test failure in TestRepairHitsTimeout
   - asserts: add empty values check in HeadersFromPrimaryKey
   - daemon: remove unused installSnap var in test
   - daemon: reach for Overlord.Loop less thanks to overlord.Mock
   - snap-seccomp: manually resolve socket() call in tests
   - tests: change regex used to validate installed ubuntu core snap
   - cmd/snapctl: allow snapctl -h without a context (regression fix).
   - many: use snapcore/snapd/i18n instead of i18n/dumb
   - many: introduce asserts.NotFoundError replacing both ErrNotFound
     and store.AssertionNotFoundError
   - packaging: don't include any marcos in comments
   - overlord: use overlord.Mock in more tests, make sure we check the
     outcome of Settle
   - tests: try to fix staging tests
   - store: simplify api base url config
   - systemd: add systemd.MockJournalctl()
   - many: provide systemd.MockSystemctl() helper
   - tests: improve the listing test to not fail for e.g. 2.28~rc2
   - snapstate: give snapmgrTestSuite.settle() more time to settle
   - tests: fix regex to check core version on snap list
   - debian: update trusted account-keys check on 14.04 packaging
   - interfaces: add udev netlink support to hardware-observe
   - overlord: introduce Mock which enables to use Overlord.Settle for
     settle in many more places
   - snap-repair: execute the repair and capture logs/status
   - tests: run the tests/unit/go everywhere
   - daemon, snapstate: move ensureCore from daemon/api.go into
     snapstate.go
   - cmd/snap: get keys or root document
   - spread.yaml: turn suse to manual given that it's breaking master
   - many: configure store from state, reconfigure store at runtime
   - osutil: AtomicWriter (an io.Writer), and io.Reader versions of
     AtomicWrite*
   - tests: check for negative syscalls in runBpf() and skip those
     tests
   - docs: use abolute path in PULL_REQUEST_TEMPLATE.md
   - store: move device auth endpoint uris to config (#3831)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.29.1
   - interfaces: fix incorrect signature of ofono DBusPermanentSlot
   - interfaces/serial-port: udev tag plugged slots that have just
     'path' via KERNEL
   - interfaces/hidraw: udev tag plugged slots that have just 'path'
     via KERNEL
   - interfaces/uhid: unconditionally add existing uhid device to the
     device cgroup
   - cmd/snap-update-ns: fix mount rules for font sharing
   - tests: disable refresh-undo test on trusty for now
   - tests: use `snap change --last=install` in snapd-reexec test
   - Revert " wrappers: fail install if exec-line cannot be re-written
   - interfaces: don't udev tag devmode or classic snaps
   - many: make ignore-validation sticky and send the flag with refresh
     requests


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.29.2
    - snapctl: disable stop/start/restart (2.29)
    - cmd/snap-update-ns: fix collection of changes made


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.29.3
   - daemon: cherry-picked /v2/logs fixes
   - cmd/snap-confine: Respect biarch nature of libdirs
   - cmd/snap-confine: Ensure snap-confine is allowed to access os-
     release
   - interfaces: fix udev tagging for hooks
   - cmd: fix re-exec bug with classic confinement for host snapd
   - tests: disable xdg-open-compat test
   - cmd/snap-confine: add slave PTYs and let devpts newinstance
     perform mediation
   - interfaces/many: misc policy updates for browser-support, cups-
     control and network-status
   - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
   - tests: fix security-device-cgroup* tests on devices with
     framebuffer


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.29.4
   - snap-confine: fix snap-confine under lxd
   - tests: disable classic-ubuntu-core-transition on i386 temporarily
   - many: reject bad plugs/slots
   - interfaces,tests: skip unknown plug/slot interfaces
   - store: enable "base" field from the store
   - packaging/fedora: Merge changes from Fedora Dist-Git


author: Neal Gompa <ngompa13@gmail.com> - 2.29.4-1
changelog:
  - Release 2.29.4 to Fedora (RH#1508433)
  - Install Polkit configuration (RH#1509586)
  - Drop changes to revert cheggaaa/pb import path used


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.30
   - tests: set TRUST_TEST_KEYS=false for all the external backends
   - tests: fix external backend for tests that need DEBUG output
   - tests: do not disable refresh timer on external backend
   - client: send all snap related bool json fields
   - interfaces: interfaces: also add an app/hook-specific udev RUN
     rule for hotplugging
   - interfaces/desktop,unity7: allow status/activate/lock of
     screensavers
   - tests/main: source mkpinentry.sh
   - devicestate: use a different nowhere domain
   - interfaces: add ssh-keys, ssh-public-keys, gpg-keys and gpg-public
     keys interfaces
   - interfaces/many: misc updates for default, browser-support, opengl,
     desktop, unity7, x11
   - devicestate: fix misbehaving test when using systemd-resolved
   - interfaces/removable-media: also allow 'k' (lock)
   - interfaces/many: misc updates for default, browser-support,
     opengl, desktop, unity7, x11
   - corecfg: also "mask" services when disabling them
   - tests: add support for autopkgtests on s390x
   - snapstate: support for pre-refresh hook
   - many: allow to configure core before it is installed
   - devicestate: fix unkeyed fields error
   - snap-confine: create mount target for lib32,vulkan on demand
   - snapstate: add support for refresh.schedule=managed
   - cmd/snap-update-ns: teach update logic to handle synthetic changes
   - many: remove configure-snapd task again and handle internally
   - snap: fix TestDirAndFileMethods() test to work with gccgo
   - debian: ensure /var/lib/snapd/lib/vulkan is available
   - cmd/snap-confine: use #include instead of bare include
   - snapstate: store userID in snapstate
   - snapd.dirs: add var/lib/snapd/lib/gl32
   - timeutil, overlod/snapstate: cleanup remaining pieces of timeutil
     weekday support
   - packaging/arch: install missing directories, manpages and version
     info
   - snapstate,store: store if a snap is a paid snap in the sideinfo
   - packaging/arch: pre-create snapd directories when packaging
   - tests/main/manpages: set LC_ALL=C as man may complain if the
     locale is unset or unsupported
   - repo: ConnectedPlug and ConnectedSlot types
   - snapd: fix handling of undo in the taskrunner
   - store: fix download caching and add integration test
   - snapstate: move autorefresh code into autoRefresh helper
   - snapctl: don't error out on start/stop/restart from configure hook
     during install or refresh
   - cmd/snap-update-ns: add planWritableMimic
   - deamon: don't omit responses, even if null
   - tests: add test for frame buffer interface
   - tests/lib: fix shellcheck errors
   - apparmor: generate the snap-confine re-exec profile for
     AppArmor{Partial,Full}
   - tests: remove obsolete workaround
   - snap: use existing files in `snap download` if digest/size matches
   - tests: merge pepare-project.sh into prepare-restore.sh
   - tests: cache snaps to $TESTSLIB/cache
   - tests: set -e, -o pipefail in prepare-restore.sh
   - apparmor: generate the snap-confine re-exec profile for
     AppArmor{Partial,Full}
   - cmd/snap-seccomp: fix uid/gid restrictions tests on Arch
   - tests: document and slightly refactor prepare/restore code
   - snapstate: ensure RefreshSchedule() gives accurate results
   - snapstate: add new refresh-hints helper and use it
   - spread.yaml,tests: move most of project-wide prepare/restore to
     separate file
   - timeutil: introduce helpers for weekdays and TimeOfDay
   - tests: adding new test for uhid interface
   - cmd/libsnap: fix parsing of empty mountinfo fields
   - overlord/devicestate:  best effort to go to early full retries for
     registration on the like of DNS no host
   - spread.yaml: bump delta ref to 2.29
   - tests: adding test to test physical memory observe interface
   - cmd, errtracker: get rid of SNAP_DID_REEXEC environment
   - timeutil: remove support to parse weekday schedules
   - snap-confine: add workaround for snap-confine on 4.13/upstream
   - store: do not log the http body for catalog updates
   - snapstate: move catalogRefresh into its own helper
   - spread.yaml: fix shellcheck issues and trivial refactor
   - spread.yaml: move prepare-each closer to restore-each
   - spread.yaml: increase workers for opensuse to 3
   - tests: force delete when tests are restore to avoid suite failure
   - test: ignore /snap/README
   - interfaces/opengl: also allow read on 'revision' in
     /sys/devices/pci...
   - interfaces/screen-inhibit-control: fix case in screen inhibit
     control
   - asserts/sysdb: panic early if pointed to staging but staging keys
     are not compiled-in
   - interfaces: allow /bin/chown and fchownat to root:root
   - timeutil: include test input in error message in
     TestParseSchedule()
   - interfaces/browser-support: adjust base declaration for auto-
     connection
   - snap-confine: fix snap-confine under lxd
   - store: bit less aggressive retry strategy
   - tests: add new `fakestore new-snap-{declaration,revision}` helpers
   - cmd/snap-update-ns: add secureMkfileAll
   - snap: use field names when initializing composite literals
   - HACKING: fix path in snap install
   - store: add support for flags in ListRefresh()
   - interfaces: remove invalid plugs/slots from SnapInfo on
     sanitization.
   - debian: add missing udev dependency
   - snap/validate: extend socket validation tests
   - interfaces: add "refresh-schedule" attribute to snapd-control
   - interfaces/builtin/account_control: use gid owning /etc/shadow to
     setup seccomp rules
   - cmd/snap-update-ns: tweak changePerform
   - interfaces,tests: skip unknown plug/slot interfaces
   - tests: disable interfaces-network-control-tuntap
   - cmd: use a preinit_array function rather than parsing
     /proc/self/cmdline
   - interfaces/time*_control: explicitly deny noisy read on
     /proc/1/environ
   - cmd/snap-update-ns: misc cleanups
   - snapd: allow hooks to have slots
   - fakestore: add go-flags to prepare for `new-snap-declaration` cmd
   - interfaces/browser-support: add shm path for nwjs
   - many: add magic /snap/README file
   - overlord/snapstate: support completion for command aliases
   - tests: re-enable tun/tap test on Debian
   - snap,wrappers: add support for socket activation
   - repo: use PlugInfo and SlotInfo for permanent plugs/slots
   - tests/interfaces-network-control-tuntap: disable on debian-
     unstable for now
   - cmd/snap-confine: Loosen the NVIDIA Vulkan ICD glob
   - cmd/snap-update-ns: detect and report read-only filesystems
   - cmd/snap-update-ns: re-factor secureMkdirAll into
     secureMk{Prefix,Dir}
   - run-checks, tests/lib/snaps/: shellcheck fixes
   - corecfg: validate refresh.schedule when it is applied
   - tests: adjust test to match stderr
   - snapd: fix snap cookie bugs
   - packaging/arch: do not quote MAKEFLAGS
   - state: add change.LaneTasks helper
   - cmd/snap-update-ns: do not assume 'nogroup' exists
   - tests/lib: handle distro specific grub-editenv naming
   - cmd/snap-confine: Add missing bi-arch NVIDIA filesthe
     `/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl/vdpau` paths within
   - cmd: Support exposing NVIDIA Vulkan ICD files to the snaps
   - cmd/snap-confine: Implement full 32-bit NVIDIA driver support
   - packaging/arch: packaging update
   - cmd/snap-confine: Support bash as base runtime entry
   - wrappers: do not error on incorrect Exec= lines
   - interfaces: fix udev tagging for hooks
   - tests/set-proxy-store: exclude ubuntu-core-16 via systems: key
   - tests: new tests for network setup control and observe interfaces
   - osutil: add helper for obtaining group ID of given file path
   - daemon,overlord/snapstate: return snap-not-installed error in more
     cases
   - interfaces/builtin/lxd_support: allow discovering of host's os-
     release
   - configstate: add support for configure-snapd for
     snapstate.IgnoreHookError
   - tests:  add a spread test for proxy.store setting together with
     store assertion
   - cmd/snap-seccomp: do not use group 'shadow' in tests
   - asserts/assertstest:  fix use of hardcoded value when the passed
     or default keys should be used
   - interfaces/many: misc policy updates for browser-support, cups-
     control and network-status
   - tests: fix xdg-open-compat
   - daemon: for /v2/logs, 404 when no services are found
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - cmd/snap-update-ns: add new helpers for mount entries
   - cmd/snap-confine: Respect biarch nature of libdirs
   - cmd/snap-confine: Ensure snap-confine is allowed to access os-
     release
   - cmd: fix re-exec bug with classic confinement for host snapd <
     2.28
   - interfaces/kmod: simplify loadModules now that errors are ignored
   - tests: disable xdg-open-compat test
   - tests: add test that checks core reverts on core devices
   - dirs: use alt root when checking classic confinement support
     without …
   - interfaces/kmod: treat failure to load module as non-fatal
   - cmd/snap-update-ns: fix golint and some stale comments
   - corecfg:  support setting proxy.store if there's a matching store
     assertion
   - overlord/snapstate: toggle ignore-validation as needed as we do
     for channel
   - tests: fix security-device-cgroup* tests on devices with
     framebuffer
   - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
   - interfaces: add USB interface number attribute in udev rule for
     serial-port interface
   - overlord/devicestate: switch to the new endpoints for registration
   - snap-update-ns: add missing unit test for desired/current profile
     handling
   - cmd/{snap-confine,libsnap-confine-private,snap-shutdown}: cleanup
     low-level C bits
   - ifacestate: make interfaces.Repository available via state cache
   - overlord/snapstate: cleanups around switch-snap*
   - cmd/snapd,client,daemon: display ignore-validation flag through
     the notes mechanism
   - cmd/snap-update-ns: add logging to snap-update-ns
   - many: have a timestamp on store assertions
   - many: lookup and use the URL from a store assertion if one is set
     for use
   - tests/test-snapd-service: fix shellcheck issues
   - tests: new test for hardware-random-control interface
   - tests: use `snap change --last=install` in snapd-reexec test
   - repo, daemon: use PlugInfo, SlotInfo
   - many: handle core configuration internally instead of using the
     core configure hook
   - tests: refactor and expand content interface test
   - snap-seccomp: skip in-kernel bpf tests for socket() in trusty/i386
   - cmd/snap-update-ns: allow Change.Perform to return changes
   - snap-confine: Support biarch Linux distribution confinement
   - partition/ubootenv: don't panic when uboot.env is missing the eof
     marker
   - cmd/snap-update-ns: allow fault injection to provide dynamic
     result
   - interfaces/mount: exspose mount.{Escape,Unescape}
   - snapctl: added long help to stop/start/restart command
   - cmd/snap-update-ns: create missing mount points automatically.
   - cmd: downgrade log message in InternalToolPath to Debugf()
   - tests: wait for service status change & file update in the test to
     avoid races
   - daemon, store: forward SSO invalid credentials errors as 401
     Unauthorized responses
   - spdx: fix for WITH syntax, require a license name before the
     operator
   - many: reorg things in preparation to make handling of the base url
     in store dynamic
   - hooks/configure: queue service restarts
   - cmd/snap: warn when a snap is not from the tracking channel
   - interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}=
   - cmd/snap-confine: add detection of stale mount namespace
   - interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo
   - tests: check for invalid udev files during all tests
   - daemon: use newChange() in changeAliases for consistency
   - servicestate: use taskset
   - many: add support for /home on NFS
   - packaging,spread: fix and re-enable opensuse builds


author: Neal Gompa <ngompa13@gmail.com> - 2.30-1
changelog:
  - Release 2.30 to Fedora (RH#1527519)
  - Backport fix to correctly locate snapd libexecdir on Fedora derivatives (RH#1536895)
  - Refresh SELinux policy fix patches with upstream backport version


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.31
   - cmd/snap-confine: allow snap-update-ns to chown things
   - cmd/snap-confine: fix read-only filesystem when mounting nvidia
     files in biarch
   - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
     packaging
   - advisor: ensure commands.db has mode 0644 and add test
   - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
   - snap: improve validation of snap layoutsRules for validating
     layouts:
   - snap: fix command-not-found on core devices
   - cmd/snap: display snap license information
   - tests: enable content sharing test for $SNAP
   - userd: add support for a simple UI that can be used from userd
   - snap-confine/nvidia: Support legacy biarch trees for GLVND systems
   - tests: generic detection of gadget and kernel snaps
   - cmd/snap-update-ns: refactor and improve Change.Perform to handle
     EROFS
   - cmd/snap: improve output when snaps were found in a section or the
     section is invalid
   - cmd/snap-confine,tests: hide message about stale base snap
   - cmd/snap-mgmt: fix out of source tree build
   - strutil/quantity: new package that exports formatFoo (from
     progress)
   - cmd/snap: snap refresh --time with new and legacy schedules
   - state: unknown tasks handler
   - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD
   - snap: add io.snapcraft.Settings to `snap userd`
   - spread: remove more EOLed releases
   - snap: tidy up top-level help output
   - snap: fix race in `snap run --strace`
   - tests: update "searching" test to match store changes
   - store: use the "publisher" when populating the "publisher" field
   - snap: make `snap find --section` show all sections
   - tests: new test to validate location control interface
   - many: add new `snap refresh --amend <snap>` command
   - tests/main/kernel-snap-refresh-on-core: skip the whole test if
     edge and stable are the same version
   - tests: set test kernel-snap-refresh-on-core to manual
   - tests: new spread test for interface gpg-keys
   - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
     fix
   - interfaces: miscellaneous policy updates
   - interfaces/builtin: Replace Solus support with GLVND support
   - tests/main/kernel-snap-refresh-on-core: do not fail if edge and
     stable kernels are the same version
   - snap: add `snap run --strace` to be able to strace snap apps
   - tests: new spread test for ssh-keys interface
   - errtracker: include detected virtualisation
   - tests: add new kernel refresh/revert test for spread-cron
   - interfaces/builtin: blacklist zigbee dongle
   - cmd/snap-confine: discard stale mount namespaces
   - cmd: remove unused execArg0/execEnv
   - snap,interfaces/mount: disallow nobody/nogroup
   - cmd/snap: improve `snap aliases` output when no aliases are
     defined
   - tests/lib/snaps/test-snapd-service: refactor service reload
   - tests: new spread test for gpg-public-keys interface
   - tests: new spread test for ssh-public-keys interface
   - spread: setup machine creation on Linode
   - interfaces/builtin: allow introspecting UDisks2
   - interfaces/builtin: add support for content "source" section
   - tests: new spread test for netlink-audit interface
   - daemon: avoid panic'ing building an error response w/no snaps
     given
   - interfaces/mount,snap: early support for snap layouts
   - daemon: unlock state even if RefreshSchedule() fails
   - arch: add "armv8l" to ubuntuArchFromKernelArch table
   - tests: fix for test interface-netlink-connector
   - data/dbus: add AssumedAppArmorLabel=unconfined
   - advisor: use forked bolt to make it work on ppc
   - overlord/snapstate: record the 'kind' of conflicting change
   - dirs: fix snap mount dir on Manjaro
   - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,
     fallback to refresh.schedule
   - config: add support for `snap set core proxy.no_proxy=...`
   - snap-mgmt: extend spread tests, stop, disable and cleanup snap
     services
   - spread.yaml: add fedora 27
   - cmd/snap-confine: allow snap-update-ns to poke writable holes in
     $SNAP
   - packaging/14.04: move linux-generic-lts-xenial to recommends
   - osutil/sys: ppc has 32-bit getuid already
   - snapstate: make no autorefresh message clearer
   - spread: try to enable Fedora once more
   - overlord/snapstate: do a minimal sanity check on containers
   - configcore: ensure config.txt has a final newline
   - cmd/libsnap-confine-private: print failed mount/umount regardless
     of SNAP_CONFINE_DEBUG
   - debian/tests: add missing autopkgtest test dependencies for debian
   - image: port ini handling to goconfigparser
   - tests/main/snap-service-after-before: add test for after/before
     service ordering
   - tests: enabling opensuse for tests
   - tests: update auto-refresh-private to match messages from current
     master
   - dirs: check if distro 'is like' fedora when picking path to
     libexecdir
   - tests: fix "job canceled" issue and improve cleanup for snaps
   - cmd/libsnap-confine-private: add debug build of libsnap-confine-
     private.a, link it into snap-confine-debug
   - vendor: remove x/sys/unix to fix builds on arm64 and powerpc
   - image: let consume snapcraft export-login files from tooling
   - interfaces/mir: allow Wayland socket and non-root sockets
   - interfaces/builtin: use snap.{Plug,Slot}Info over
     interfaces.{Plug,Slot}
   - tests: add simple snap-mgmt test
   - wrappers: autogenerate After/Before in systemd's service files for
     apps
   - snap: add usage hints in `snap download`
   - snap: provide more meaningful errors for installMany and friends
   - cmd/snap: show header/footer when `snap find` is used without
     arguments
   - overlord/snapstate: for Enable's tasks refer to the first task
     with snap-setup, do not duplicate
   - tests: add hard-coded fully expired macaroons to run related tests
   - cmd/snap-update-ns: new test features
   - cmd/snap-update-ns: we don't want to bind mount symlinks
   - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.
     options
   - cmd/snap-update-ns: untangle upcoming cyclic initialization
   - client, daemon: update user's email when logging in with new
     account
   - tests: ensure snap-confine apparmor profile is parsable
   - snap: do not leak internal errors on install/refresh etc
   - snap: fix missing error check when multiple snaps are refreshed
   - spread: trying to re-enable tests on Fedora
   - snap: fix gadget.yaml parsing for multi volume gadgets
   - snap: give the snap.Container interface a Walk method
   - snap: rename `snap advise-command` to `snap advise-snap --command`
   - overlord/snapstate: no refresh just for hints if there was a
     recent regular full refresh
   - progress: switch ansimeter's Spin() to use a spinner
   - snap: support `command-not-found` symlink for `snap advise-
     command`
   - daemon: store email, ID and macaroon when creating a new user
   - snap: app startup after/before validation
   - timeutil: refresh timer take 2
   - store, daemon/api: Rename MyAppsServer, point to
     dashboard.snapcraft.io instead
   - tests: use "quiet" helper instead of "dnf -q" to get errors on
     failures
   - cmd/snap-update-ns: improve mocking for tests
   - many: implement the advisor backend, populate it from the store
   - tests: make less calls to the package manager
   - tests/main/confinement-classic: enable the test on Fedora
   - snap: do not leak internal network errors to the user
   - snap: use stdout instead of stderr for "fetching" message
   - tests: fix test whoami, share successful_login.exp
   - many: refresh with appropriate creds
   - snap: add new `snap advice-command` skeleton
   - tests: add test that ensures we never parse versions as numbers
   - overlord/snapstate: override Snapstate.UserID in refresh if the
     installing user is gone
   - interfaces: allow socket "shutdown" syscall in default profile
   - snap: print friendly message if `snap keys` is empty
   - cmd/snap-update-ns: add execWritableMimic
   - snap: make `snap info invalid-snap` output more user friendly
   - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when
     running under classic confinement
   - overlord/ifacestate: fix disable/enable cycle to setup security
   - snap: fix snap find " " output
   - daemon: add new polkit action to manage interfaces
   - packaging/arch: disable services when removing
   - asserts/signtool: support for building tools on top that fill-
     in/compute some headers
   - cmd: clarify "This leaves %s tracking %s." message
   - daemon: return "bad-query" error kind for store.ErrBadQuery
   - taskrunner/many: KnownTaskKinds helper
   - tests/main/interfaces-fuse_support: fix confinement, allow
     unmount, fix spread tests
   - snap: use the -no-fragments mksquashfs option
   - data/selinux: allow messages from policykit
   - tests: fix catalog-update wait loop
   - tests/lib/prepare-restore: disable rate limiting in journald
   - tests: change interfaces-fuse_support to be debug friendly
   - tests/main/postrm-purge: stop snapd before purge
   - This is an example of test log:https://paste.ubuntu.com/26215170/
   - tests/main/interfaces-fuse_support: dump more debugging
     information
   - interfaces/dbus: adjust slot policy for listen, accept and accept4
     syscalls
   - tests: save the snapd-state without compression
   - tests/main/searching: handle changes in featured snaps list
   - overlord/snapstate: fix auto-refresh summary for 2 snaps
   - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser
   - interfaces: add /proc/partitions to system-observe (This addresses
     LP#1708527.)
   - tests/lib: introduce helpers for setting up /dev/random using
     /dev/urandom in project prepare
   - tests: new test for interface network status
   - interfaces: interfaces: also add an app/hook-specific udev RUN
     rule for hotplugging
   - tests: fix external backend for tests that need DEBUG output
   - tests: do not disable refresh timer on external backend
   - client: send all snap related bool json fields
   - interfaces/desktop,unity7: allow status/activate/lock of
     screensavers
   - tests/main: source mkpinentry.sh
   - tests: fix security-device-cgroups-serial-port test for rpi and db
   - cmd/snap-mgmt: add more directories for cleanup and refactor
     purge() code
   - snap: YAML and data structures for app before/after ordering
   - tests: set TRUST_TEST_KEYS=false for all the external backends
   - packaging/arch: install snap-mgmt tool
   - tests: add support on tests for cm3 gadget
   - interfaces/removable-media: also allow 'k' (lock)
   - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)
   - interfaces: rename sanitize methods
   - devicestate: fix misbehaving test when using systemd-resolved
   - interfaces: added Ref() helpers, restored more detailed error
     message on spi iface
   - debian: make "gnupg" a recommends
   - interfaces/many: misc updates for default, browser-support,
     opengl, desktop, unity7, x11
   - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot
     attribute helpers
   - interfaces: update fixme comments
   - tests: make interfaces-snapd-control-with-manage more robust
   - userd: generalize dbusInterface
   - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)
   - hookstate: add compat "configure-snapd" task.
   - config, overlord/snapstate, timeutil: rename ParseSchedule to
     ParseLegacySchedule
   - tests: adding tests for time*-control interfaces
   - tests: new test to check interfaces after reboot the system
   - cmd/snap-mgmt: fixes
   - packaging/opensuse-42.2: package and use snap-mgmt
   - corecfg: also "mask" services when disabling them
   - cmd/snap-mgmt: introduce snap-mgmt tool
   - configstate: simplify ConfigManager
   - interfaces: add gpio-memory-control interface
   - cmd: disable check-syntax-c
   - packaging/arch: add bash-completion as optional dependency
   - corecfg: rename package to overlord/configstate/configcore
   - wrappers: fix unit tests to use dirs.SnapMountDir
   - osutil/sys: reimplement getuid and chown with the right int type
   - interfaces-netlink-connector: fix sourcing snaps.sh


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.31.1
   - tests: multiple autopkgtest related fixes for 18.04
   - overlord/snapstate: use spread in the default refresh schedule
   - timeutil: fix scheduling on nth weekday of the month
   - interfaces: miscellaneous policy updates for home, opengl, time-
     control, network, et al
   - cmd/snap: use proper help strings for `snap userd --help`
   - interfaces/time-control,netlink-audit: adjust for util-linux
     compiled with libaudit
   - rules: do not static link on powerpc
   - packaging: revert LDFLAGS rewrite again after building snap-
     seccomp
   - store: revert PR#4532 and do not display displayname
   - daemon: allow `snapctl get` from any uid
   - debian, snap: only static link libseccomp in snap-seccomp on
     ubuntu
   - daemon: improve ucrednet code for the snap.socket


author: Neal Gompa <ngompa13@gmail.com> - 2.31.1-1
changelog:
  - Release 2.31.1 to Fedora (RH#1542483)
  - Drop all backported patches as they're part of this release


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.31.2
   - many: add the snapd-generator
   - polkit: ensure error is properly set if dialog is dismissed
   - xdgopenproxy: integrate xdg-open implementation into snapctl
   - userd: add an OpenFile method for launching local files with xdg-
     open
   - configstate: when disable "ssh" we must disable the "sshd"
     service
   - many: remove snapd.refresh.{timer,service}
   - interfaces/builtin: allow MM to access login1
   - timeutil: account for 24h wrap when flattening clock spans
   - interfaces/screen-inhibit-control,network-status: fix dbus path
     and interface typos
   - systemd, wrappers: start all snap services in one systemctl
     call
   - tests: disable interfaces-location-control on s390x


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32
   - snap: make `snap run` look at the system-key for security profiles
   - overlord/configstate: change how ssh is stopped/started
   - cmd/snap-confine: nvidia: preserve globbed file prefix
   - advisor: deal with missing commands.db file
   - interfaces,release: probe seccomp features lazily
   - interfaces: harden snap-update-ns profile
   - polkit: Pass caller uid to PolicyKit authority
   - tests: change debug for layout test
   - cmd/snap-confine: don't use per-snap s-u-n profile
   - many: backported fixes for layouts and symlinks
   - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
   - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
   - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
   - cmd/snap-confine: fix ptrace rule with snap-confine peer
   - tests: update tests to deal with s390x quirks
   - snapstate: add compat mode for default-provider"snapname:ifname"
   - snap-confine: fallback to /lib/udev/snappy-app-dev if the core is
     older
   - tests: a bunch of test fixes for s390x from looking at the
     autopkgtest logs
   - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
   - interfaces/builtin: let MM change qmi device attributes
   - debian: undo snap.mount system unit removal
   - snap: don't create empty Change with "Hold" state on disconnect
   - tests: add workaround for s390x failure
   - tests: make autopkgtest tests more targeted
   - many: propagate contexts enough to be able to mark store
     operations done from the Ensure loop
   - store: cleanup test naming, dropping remoteRepo and
     UbuntuStore(Repository)? references
   - store: reorg auth refresh
   - tests: autopkgtest may have non edge core too
   - data: translate polkit strings
   - snapstate: put layout feature behind feature flag
   - errtracker: respect the /etc/whoopsie configuration
   - overlord/snapstate: hold refreshes for 2h after seeding on classic
   - many: cherry-pick relevant `go vet` 1.10 fixes to 2.32
   - snap/squashfs: when installing from seed, try symlink before cp
   - wrappers: services which are socket or timer activated should not
     be started during boot
   - many: generate and use per-snap snap-update-ns profile
   - many: support holding refreshes by setting refresh.hold
   - snap-confine, snap-seccomp: utilize new seccomp logging features
   - many: remove snapd.refresh.{timer,service}
   - many: add the snapd-generator
   - polkit: do not shadow dbus errors, avoid panic in case of errors
   - polkit: ensure error is properly set if dialog is dismissed
   - xdgopenproxy: integrate xdg-open implementation into snapctl
   - userd: add an OpenFile method for launching local files with xdg-
     open
   - asserts:  use a timestamp for the assertion after the signing key
     has been created
   - ifacestate: be consistent passing Retry.After as named field
   - interfaces/apparmor,system-key: add upperdir snippets for strict
     snaps on livecd
     interfaces/apparmor,system-key: add upperdir snippets for strict
     snaps
   - configstate: when disable "ssh" we must disable the "sshd"
     service
   - store: don't ask for snap_yaml_raw except on the details endpoint
   - osutil: handle file being matched by multiple patterns
   - cmd/snap-update-ns: use recursive bind mounts for writable mimic
   - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
   - interfaces/screen-inhibit-control,network-status: fix dbus path
     and interface typos
   - interfaces/network-status: fix use of '/' in interface in DBus
     rule
   - interfaces/screen-inhibit-control: fix use of '.' in path in DBus
     rule
   - overlord/snapstate: fix task iteration order in
     TestDoPrereqRetryWhenBaseInFlight
   - interfaces: add an interface for gnome-online-accounts D-Bus
     service
   - snap: pass full timer spec in `snap run --timer`
   - cmd/snap: introduce `snap run --timer`
   - snapstate: auto install default-providers for content snaps
   - hooks/strutil: limit the number of data read from the hooks to
     avoid oom
   - osutil: aggregate mockable symbols
   - tests: make sure snapd is running before attempting to remove
     leftover snaps
   - timeutil: account for 24h wrap when flattening clock spans
   - many: send  new Snap-CDN header with none or with cloud instance
     placement info as needed
   - cmd/snap-update-ns,testutil: move syscall testing helpers
   - tests: disable interfaces-location-control on s390x
   - tests: new spread test for gpio-memory-control interface
   - tests: spread test for broadcom-asic-control interface
   - tests: make restore of interfaces-password-manager-service more
     robust
   - tests/lib/prepare-restore: sync journal before rotating and
     vacuuming
   - overlord/snapstate: use spread in the default refresh schedule
   - tests: fixes for autopkgtest in bionic
   - timeutil: introduce helpers for checking it time falls inside the
     schedule
   - cmd/snap-repair,httputil: set snap-repair User-Agent on requests
   - vendor: resync formatting of vendor.json
   - snapstate/ifacestate: auto-connect tasks
   - cmd/snap: also include tracking channel in list output.
   - interfaces/apparmor: use snap revision with surrounding '.' when
     replacing in glob
   - debian,vendor: import github.com/snapcore/squashfs and use
   - many: implement "refresh-mode: {restart,endure,...}" for services
   - daemon: make the ast-inspecting test smarter; drop 'exceptions'
   - tests: new spread test for kvm interface
   - cmd/snap: tweaks to 'snap info' output
   - snap: remove underscore from version validator regexp
   - testutil: add File{Matches,Equals,Contains} checkers.
   - snap: improve the version validator's error messages.
   - osutil: refactor EnsureFileState to separate out the comparator
   - timeutil: fix scheduling on nth weekday of the month
   - cmd/snap-update-ns: small refactor for upcoming per-user mounts
   - many: rename snappy-app-dev to snap-device-helper
   - systemd: add default target for timers
   - interfaces: miscellaneous policy updates for home, opengl, time-
     control, network, et al
   - cmd/snap: linter cleanups
   - interfaces/mount: generate per-user mount profiles
   - cmd/snap: use proper help strings for `snap userd --help`
   - packaging: provide a compat symlink for snappy-app-dev
   - interfaces/time-control,netlink-audit: adjust for util-linux
     compiled with libaudit
   - tests: adding new test to validate the raw-usb interface
   - snap: add support for `snap run --gdb`
   - interfaces/builtin: allow MM to access login1
   - packaging: fix build on sbuild
   - store: revert PR#4532 and do not display displayname
   - interfaces/mount: add support for per-user mount entries
   - cmd/system-shutdown: move sync to be even more pessimistic
   - osutil: reimplement IsMounted with LoadMountInfo
   - tests/main/ubuntu-core-services: enable snapd.refresh.timer for
     the test
   - many: don't allow layout construction to silently fail
   - interfaces/apparmor: ensure snap-confine profile for reexec is
     current
   - interfaces/apparmor: generalize apparmor load and unload helpers
   - tests: removing packages which are not needed anymore to generate
     random data
   - snap: improve `snap run` comments/naming
   - snap: allow options for --strace, e.g. `snap run --strace="-tt"`
   - tests: fix spread test failures on 18.04
   - systemd: update comment on SocketsTarget
   - osutil: add and update docstrings
   - osutil: parse mount entries without options field
   - interfaces: mock away real mountinfo/fstab
   - many: move /lib/udev/snappy-app-dev to /usr/lib/snapd/snappy-app-
     dev
   - overlord/snapstate/backend: perform cleanup if snap setup fails
   - tests/lib/prepare: disable snapd.refresh.timer
   - daemon: remove redundant UserOK markings from api commands
   - snap: introduce  timer service data types and validation
   - cmd/snap: fix UX of snap services
   - daemon: allow `snapctl get` from any uid
   - debian, snap: only static link libseccomp in snap-seccomp on
     ubuntu
   - all: snap versions are now validated
   - many: add nfs-home flag to system-key
   - snap: disallow layouts in various special directories
   - cmd/snap: add help for service commands.
   - devicestate: fix autopkgtest failure in
     TestDoRequestSerialErrorsOnNoHost
   - snap,interfaces: allow using bind-file layouts
   - many: move mount code to osutil
   - snap: understand directories in layout blacklist
   - snap: use custom unsquashfsStderrWriter for unsquashfs error
     detection
   - tests/main/user-data-handling: get rid of ordering bug
   - snap: exclude `gettimeofday` from `snap run --strace`
   - tests: check if snapd.socket is active before stoping it
   - snap: sort layout elements before validating
   - strutil: introducing MatchCounter
   - snap: detect unsquashfs write failures
   - spread: add missing ubuntu-18.04-arm64 to available autopkgtest
     machines
   - cmd/snap-confine: allow mounting anywhere, effectively
   - daemon: improve ucrednet code for the snap.socket
   - release, interfaces: add new release.AppArmorFeatures helper
   - snap: apply some golint suggestions
   - many: add interfaces.SystemKey() helper
   - tests: new snaps to test installs nightly
   - tests: skip alsa interface test when the system does not have any
     audio devices
   - debian/rules: workaround for
     https://github.com/golang/go/issues/23721
   - interfaces/apparmor: early support for snap-update-ns snippets
   - wrappers: cleanup enabled service sockets
   - cmd/snap-update-ns: large refactor / update of unit tests
   - interfaces/apparmor: remove leaked future layout code
   - many: allow constructing layouts (phase 1)
   - data/systemd: for debugging/testing use /etc/environment also for
     snap-repair runs
   - cmd/snap-confine: create lib/{gl,gl32,vulkan} under /var/lib/snapd
     and chown as root:root
   - overlord/configstate/config: make [GS]etSnapConfig use *RawMessage
   - daemon: refactor snapFooMany helpers a little
   - cmd/snap-confine: allow snap-update-ns to chown things
   - interfaces/apparmor: use a helper to set the scope
   - overlord/configstate/config: make SetSnapConfig delete on empty
   - osutil: make MkdirAllChown clean the path passed in
   - many: at seeding try to capture cloud information into core config
     under "cloud"
   - cmd/snap: add completion conversion helper to increase DRY
   - many: remove "content" argument from snaptest.MockSnap()
   - osutil: allow using many globs in EnsureDirState
   - cmd/snap-confine: fix read-only filesystem when mounting nvidia
     files in biarch
   - tests: use root path to /home/test/tmp to avoid lack of space
     issue
   - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
     packaging
   - tests: update kill-timeout focused on making tests pass on boards
   - advisor: ensure commands.db has mode 0644 and add test
   - snap: improve validation of snap layouts
   - tests: ensure disabled services are masked
   - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
   - systemd, wrappers: start all snap services in one systemctl call
   - mir: software clients need access to shared memory /dev/shm/#*
   - snap: add support for `snap advise-snap pkgName`
   - snap: fix command-not-found on core devices
   - tests: new spead test for openvswitch-support interface
   - tests: add integration for local snap licenses
   - config: add (Get|Set)SnapConfig to do bulk config e.g. from
     snapshots
   - cmd/snap: display snap license information
   - tests: enable content sharing test for $SNAP
   - osutil: add ContextWriter and RunWithContext helpers.
   - osutil: add DirExists and IsDirNotExist


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.1
   - cmd/snapd: make sure signal handlers are established during early
     daemon startup
   - osutil: use tilde suffix for temporary files used for atomic
     replacement
   - cmd/snap-confine: apparmor: allow creating prefix path for
     gl/vulkan
   - tests: disentangle etc vs extrausers in core tests
   - packaging: fix changelogs' typo


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.2
   - interfaces/content: add rule so slot can access writable files at
     plug's mountpoint
   - tests: adjust canonical-livepatch test on GCE
   - interfaces/serial: change pattern not to exclude /dev/ttymxc
   - spread.yaml: switch Fedora 27 tests to manual
   - store: Sections and WriteCatalogs need to strictly send device
     auth only if the device has a custom store
   - configstate: give a chance to immediately recompute the next
     refresh time when schedules are set
   - cmd/snap-confine: attempt to detect if multiarch host uses arch
     triplets
   - vendor: update gopkg.in/yaml.v2 to the latest version (#4945)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.3
   - ifacestate: add to the repo also snaps that are pending being
     activated but have a done setup-profiles
   - snapstate: inject autoconnect tasks in doLinkSnap for regular
     snaps
   - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
   - errtracker: add more fields to aid debugging
   - interfaces: make system-key more robust against invalid fstab
     entries
   - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
   - overlord,interfaces: be more vocal about broken snaps and read
     errors
   - osutil: fix fstab parser to allow for # in field values


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.3.1
   - debian: add gbp.conf script to build snapd via `gbp
     buildpackage`
   - tests: add check for OOM error after each test
   - cmd/snap-seccomp: graceful handling of non-multilib host
   - interfaces/shutdown: allow calling SetWallMessage
   - data/selinux: Give snapd access to more aspects of the system
   - daemon,overlord/hookstate: stop/wait for running hooks before
     closing the snapctl socket
   - cmd/snap-confine: ignore missing cgroups in snap-device-helper
   - interfaces: misc updates for default, firewall-control, fuse-
     support and process-control
   - overlord: test fix, address corner case


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.3.2
   - errtracker: make TestJournalErrorSilentError work on
     gccgo
   - errtracker: check for whoopsie.service instead of reading
     /etc/whoopsie


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.4
   - cmd/snap: user session application autostart
   - overlord/snapstate: introduce envvars to control the channels for
     bases and prereqs
   - overlord/snapstate: on multi-snap refresh make sure bases and core
     are finished before dependent snaps
   - many: use the new install/refresh /v2/snaps/refresh store API


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.5
   - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of
     conflating that with refresh-mode
   - overlord/snapstate:  poll for up to 10s if a snap is unexpectedly
     not mounted in doMountSnap
   - daemon: support 'system' as nickname of the core snap


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.6
   - snap: do not use overly short timeout in `snap
     {start,stop,restart}`
   - interfaces/apparmor: fix incorrect apparmor profile glob
   - tests: detect kernel oops during tests and abort tests in this
     case
   - tests: run interfaces-boradcom-asic-control early
   - tests: skip interfaces-content test on core devices


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.7
   - many: add wait command and seeded target (2
   - snapd.core-fixup.sh: add workaround for corrupted uboot.env
   - boot: clear "snap_mode" when needed
   - cmd/libsnap: fix compile error on more restrictive gcc
   - tests: cherry-pick commits to move spread to google backend
   - spread.yaml: add cosmic (18.10) to autopkgtest/qemu
   - userd: set up journal logging streams for autostarted apps


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.32.9
   - tests: run all spread tests inside GCE
   - tests: build spread in the autopkgtests with a more recent go


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.33
   - packaging: use official bolt in the errtracker on fedora
   - many: add `snap debug connectivity` command
   - interfaces/raw-usb: also allow usb serial devices
   - errtracker: do not send duplicated reports
   - selftest: add new selftest package that tests squashfs mounting
   - tests: backport lxd force stop and econnreset fixes
   - tests: add test to ensure /dev/input/event* for non-joysticks is
     denied
   - interfaces/joystick: support modern evdev joysticks
   - interfaces: add juju-client-observe
   - interfaces/hardware-observe: allow access to /etc/sensors* for
     libsensors
   - many: holding refresh on metered connections
   - many: expose AppStream IDs (AKA common ID)
   - tests: speed up save/restore snapd state for all-snap systems
     during tests execution
   - interfaces/apparmor: use helper to load stray profile
   - tests: ubuntu core abstraction
   - overlord/snapstate: don't panic in a corner case interaction of
     cleanup tasks and pruning
   - interfaces/apparmor: add 'mediate_deleted' profile flag for all
     snaps
   - tests: new parameter for the journalctl rate limit
   - spread-shellcheck: port to python
   - interfaces/home: add 'read' attribute to allow non-owner read to
     @{HOME}
   - testutil: import check.v1 differently to workaround gccgo error
   - interfaces/many: miscellaneous updates for default, desktop,
     desktop-legacy, system-observe, hardware-observe, opengl and gpg-
     keys
   - snapstate/hooks: reorder autoconnect and reconnect hooks
   - daemon: update unit tests to match current master
   - overlord/snapshotstate/backend: introducing the snapshot backend
   - many: support 'system' nickname in interfaces
   - userd: add the "snap" scheme to the whitelist
   - many: make rebooting of core on refresh immediate, refactor logic
     around it
   - tests/main/snap-service-timer: account for service timer being in
     the 'running' state
   - interfaces/builtin: allow access to libGLESv* too for opengl
     interface
   - daemon: fix unit tests on arch
   - interfaces/default,process-control: miscellaneous signal policy
     fixes
   - interfaces/bulitin: add write permission to optical-drive
   - configstate: validate known core.* options
   - snap, wrappers: systemd WatchdogSec support
   - ifacestate: do not auto-connect manually disconnected interfaces
   - systemd: mock useFuse() so testsuite passes in container via lxd
     snap
   - snap/env: fix env duplication logic
   - snap: some doc comments fixes and additions
   - cmd/snap-confine, interfaces/opengl: allow access to glvnd EGL
     vendor files
   - ifacestate: unify reconnect and autoconnect methods
   - tests: fix user mounts test for external systems
   - overlord/snapstate,overlord/auth,store: coalesce no auth user
     refresh requests
   - boot,partition: improve tests/docs around SetNextBoot()
   - many: improve `snap wait` command
   - snap: fix `snap interface --attrs` output when numbers are used
   - cmd/snap-update-ns: poke holes when creating source paths for
     layouts
   - snapstate: support getting new bases/default-providers on refresh
   - ifacemgr: remove stale connections on startup
   - asserts: use Attrer in policy checks
   - testutil: record system call errors / return values
   - tests: increase timeouts to make tests reliable on slow boards
   - repo: pass and return ConnRef via pointers
   - interfaces: add xdg-document-portal support to desktop interface
   - debian: add a zenity|kdialog suggests
   - snapstate: make TestDoPrereqRetryWhenBaseInFlight less brittle
   - tests: go must be installed as a classic snap
   - tests: use journalctl cursors instead rotating logs
   - daemon: add confinement-options to /v2/system-info
     daemon: refactor classic support flag to be more structured
   - tests: build spread in the autopkgtests with a more recent go
   - cmd/snap: fix the message when snap.channel != snap.tracking
   - overlord/snapstate: allow core defaults configuration via 'system'
     key
   - many: add "snap debug sandbox-features" and needed bits
   - interfaces: interface hooks for refresh
   - snapd.core-fixup.sh: add workaround for corrupted uboot.env
   - boot: clear "snap_mode" when needed
   - many: add wait command and `snapd.seeded` service
   - interfaces: move host font update-ns AppArmor rules to desktop
     interface
   - jsonutil/safejson: introducing safejson.String &
     safejson.Paragraph
   - cmd/snap-update-ns: use Secure.BindMount to bind mount files
   - cmd/snap-update-ns,tests: mimic the mode and ownership of
     directories
   - cmd/snap-update-ns: add support for ignoring mounts with missing
     source/target
   - interfaces: interface hooks implementation
   - cmd/libsnap: fix compile error on more restrictive gcc
     cmd/libsnap: fix compilation errors on gcc 8
   - interfaces/apparmor: allow bash and dash to be in /usr/bin/
   - cmd/snap-confine: allow any base snap to provide /etc/alternatives
   - tests: fix interfaces-network test for systems with partial
     confinement
   - spread.yaml: add cosmic (18.10) to autopkgtest/qemu
   - tests: ubuntu 18.04 or higher does not need linux-image-extra-
   - configcore: validate experimental.layouts option
   - interfaces:minor autoconnect cleanup
   - HACKING: fix typos
   - spread: add adt for ubuntu 18.10
   - tests: skip test lp-1721518 for arch, snapd is failing to start
     after reboot
   - interfaces/x11: allow X11 slot implementations
   - tests: checking interfaces declaring the specific interface
   - snap: improve error for snaps not available in the given context
   - cmdstate: add missing test for default timeout handling
   - tests: shellcheck spread tasks
   - cmd/snap: update install/refresh help vs --revision
   - cmd/snap-confine: add support for per-user mounts
   - snap: do not use overly short timeout in `snap
     {start,stop,restart}`
   - tests: adding google-sru backend replacing linode-sur
   - interfaces/apparmor: fix incorrect apparmor profile glob
   - systemd: replace ancient paths with 16.04+ standards
   - overlord,systemd: store snap revision in mount units
   - testutil: add test helper for SysLstat
   - testutil,cmd: rename test helper of Lstat to OsLstat
   - testutil: document all fake syscall/os functions
   - osutil,interfaces,cmd: use less hardcoded strings
   - testutil: rename UNMOUNT_NOFOLLOW to umountNoFollow
   - testutil: don't dot-import check.v1
   - store: getStructFields takes pointers now
   - tests: drop `linux-image-extra-$(uname -r)` install in 18.04
   - many: fix false negatives reported by vet
   - osutil,interfaces: use uint32 for uid, gid
   - many: fix various issues reported by shellcheck
   - tests: add pending shutdown detection
   - image: support refreshing soft-expired user macaroons in tooling
   - interfaces/builtin, daemon: cleanup mocked builtin interfaces in
     daemon tests
   - interfaces/builtin: add support for software-watchdog interface
   - spread: auto accept key changes when calling dnf
   - snap,overlord/snapstate: introduce and use BrokenSnapError
   - tests: detect kernel oops during tests and abort tests in this
     case
   - tests: bring back one missing test in snap-service-stop-mode
   - debian: update LP bug for the 2.32.5 SRU
   - userd: set up journal logging streams for autostarted apps
   - snap,tests : don't fail if we cannot stat MountFile
   - tests: smaller fixes for Arch tests
   - tests: run interfaces-broadcom-asic-control early
   - client: support for snapshot sets, snapshots, and snapshot actions
   - tests: skip interfaces-content test on core devices
   - cmd: generalize locking to global, snap and per-user locks
   - release-tools: handle the snapd-x.y.z version
   - packaging: fix incorrectly auto-generated changelog entry for
     2.32.5
   - tests: add arch to CI
   - systemd: add helper for opening stream file descriptors to the
     journal
   - cmd/snap: handle distros with no version ID
   - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of
     conflating that with refresh-mode
   - tests: removing linode-sru backend
   - tests: updating bionic version for spread tests on google
   - overlord/snapstate: poll for up to 10s if a snap is unexpectedly
     not mounted in doMountSnap
   - overlord/snapstate: allow to get an error from readInfo instead of
     a broken stub, use it in doMountSnap
   - snap: snap.AppInfo is now a fmt.Stringer
   - tests: move fedora 27 to google backend
   - many: add `core.problem-reports.disabled` option
   - cmd/snap-update-ns: remove the need for stash directory in secure
     bind mount implementation
   - errtracker: check for whoopsie.service instead of reading
     /etc/whoopsie
   - cmd/snap: user session application autostart v3
   - tests: add test to ensure `snap refresh --amend` works with
     different channels
   - tests: add check for OOM error after each test
   - cmd/snap-seccomp: graceful handling of non-multilib host
   - interfaces/shutdown: allow calling SetWallMessage
   - cmd/snap-update-ns: add secure bind mount implementation for use
     with user mounts
   - snap: fix `snap advise-snap --command` output to match spec
   - overlord/snapstate: on multi-snap refresh make sure bases and core
     are finished before dependent snaps
   - overlord/snapstate: introduce envvars to control the channels for
     based and prereqs
   - cmd/snap-confine: ignore missing cgroups in snap-device-helper
   - debian: add gbp.conf script to build snapd via `gbp buildpackage`
   - daemon,overlord/hookstate: stop/wait for running hooks before
     closing the snapctl socket
   - advisor: use json for package database
   - interfaces/hostname-control: allow setting the hostname via
     syscall and systemd
   - tests/main/interfaces-opengl-nvidia: verify access to 32bit
     libraries
   - interfaces: misc updates for default, firewall-control, fuse-
     support and process-control
   - data/selinux: Give snapd access to more aspects of the system
   - many: use the new install/refresh API by switching snapstate to
     use store.SnapAction
   - errtracker: make TestJournalErrorSilentError work on gccgo
   - ifacestate: add to the repo also snaps that are pending being
     activated but have a done setup-profiles
   - snapstate, ifacestate: inject auto-connect tasks try 2
   - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
   - errtracker: add more fields to aid debugging
   - interfaces: make system-key more robust against invalid fstab
     entries
   - overlord,interfaces: be more vocal about broken snaps and read
     errors
   - ifacestate: injectTasks helper
   - osutil: fix fstab parser to allow for # in field values
   - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
   - release-tools: add repack-debian-tarball.sh
   - daemon,client: add build-id to /v2/system-info
   - cmd: make fmt (indent 2.2.11)
   - interfaces/content: add rule so slot can access writable files at
     plug's mountpoint
   - interfaces: add /var/lib/snapd/snap to @{INSTALL_DIR}
   - ifacestate: don't surface errors from stale connections
   - cmd/snap-update-ns: convert Secure* family of functions into
     methods
   - tests: adjust canonical-livepatch test on GCE
   - tests: fix quoting issues in econnreset test
   - cmd/snap-confine: make /run/media an alias of /media
   - cmd/snap-update-ns: rename i to segNum
   - interfaces/serial: change pattern not to exclude /dev/ttymxc*
   - spread: disable StartLimitInterval option on opensuse-42.3
   - configstate: give a chance to immediately recompute the next
     refresh time when schedules are set
   - cmd/snap-confine: attempt to detect if multiarch host uses
     arch triplets
   - store: add Store.SnapAction to support the new install/refresh API
     endpoint
   - tests: adding test for removable-media interface
   - tests: update interface tests to remove extra checks and normalize
     tests
   - timeutil: in Human, count days with fingers
   - vendor: update gopkg.in/yaml.v2 to the latest version
   - cmd/snap-confine: fix Archlinux compatibility
   - cmd/snapd: make sure signal handlers are established during early
     daemon startup
   - cmd/snap-confine: apparmor: allow creating prefix path for
     gl/vulkan
   - osutil: use tilde suffix for temporary files used for atomic
     replacement
   - tests: copy or sanity check core users using usernames
   - tests: disentangle etc vs extrausers in core tests
   - tests: fix snap-run tests when snapd is not running
   - overlord/configstate: change how ssh is stopped/started
   - snap: make `snap run` look at the system-key for security profiles
   - strutil, cmd/snap: drop strutil.WordWrap, first pass at
     replacement
   - tests: adding opensuse-42.3 to google
   - cmd/snap: fix one issue with noWait error handling logic, add
     tests plus other cleanups
   - cmd/snap-confine: nvidia: preserve globbed file prefix
   - advisor: add comment why osutil.FileExists(dirs.SnapCommandsDB) is
     needed
   - interfaces,release: probe seccomp features lazily
   - tests: change debug for layout test
   - advisor: deal with missing commands.db file
   - interfaces/apparmor: simplify UpdateNS internals
   - polkit: Pass caller uid to PolicyKit authority
   - tests: moving debian 9 from linode to google backend
   - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
   - po: specify charset in po/snappy.pot
   - interfaces: harden snap-update-ns profile
   - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
   - tests: update tests to deal with s390x quirks
   - debian: run snap.mount upgrade fixup *before* debhelper
   - tests: move xenial i386 to google backend
   - snapstate: add compat mode for default-provider
   - tests: a bunch of test fixes for s390x from looking at the
     autopkgtest logs
   - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
   - interfaces/builtin: let MM change qmi device attributes
   - tests: add workaround for s390x failure
   - snap/pack, cmd/snap: add `snap pack --check-skeleton`
   - daemon: support 'system' as nickname of the core snap
   - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
   - devicestate: add DeviceManager.Registered returning a channel
     closed when the device is known to be registered
   - store: Sections and WriteCatalogs need to strictly send device
     auth only if the device has a custom store
   - tests: add bionic system to google backend
   - many: fix shellcheck warnings in bionic
   - cmd/snap-update-ns: don't fail on existing symlinks
   - tests: make autopkgtest tests more targeted
   - cmd/snap-update-ns: fix creation of layout symlinks
   - spread,tests: move suite-level prepare/restore to central script
   - many: propagate contexts enough to be able to mark store
     operations done from the Ensure loop
   - snap: don't create empty Change with "Hold" state on disconnect
   - snap: unify snap name validation w/python; enforce length limit.
   - cmd/snap: use shlex when parsing `snap run --strace` arguments
   - osutil,testutil: add symlinkat(2) and readlinkat(2)
   - tests: autopkgtest may have non edge core too
   - tests: adding checks before stopping snapd service to avoid job
     canceled on ubuntu 14.04
   - errtracker: respect the /etc/whoopsie configuration
   - overlord/snapstate:  hold refreshes for 2h after seeding on
     classic
   - cmd/snap: tweak and polish help strings
   - snapstate: put layout feature behind feature flag
   - tests: force profile re-generation via system-key
   - snap/squashfs: when installing from seed, try symlink before cp
   - wrappers: services which are socket or timer activated should not
     be started during boot
   - many: go vet cleanups
   - tests: define MATCH from spread
   - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
     fix
   - cmd/snap: use timeutil.Human to show times in `snap refresh
     --time`
   - cmd/snap: in changes and tasks, default to human-friendly times
   - many: support holding refreshes by setting refresh.hold
   - Revert "cmd/snap: use timeutil.Human to show times in `snap
     refresh -…-time`"
   - cmd/snap: use timeutil.Human to show times in `snap refresh
     --time`
   - tests/main/snap-service-refresh-mode: refactor the test to rely on
     comparing PIDs
   - tests/main/media-sharing: improve the test to cover /media and
     /run/media
   - store: enable deltas for core devices too
   - cmd/snap: unhide --no-wait; make wait use go via waitMixin
   - strutil/shlex: import github.com/google/shlex into the tree
   - vendor: update github.com/mvo5/libseccomp-golang
   - overlord/snapstate: block install of "system"
   - cmd/snap: "current"→"installed"; "refreshed"→"refresh-date"
   - many: add the snapd-generator
   - cmd/snap-seccomp: Cancel the atomic file on error, not just Close
   - polkit: ensure error is properly set if dialog is dismissed
   - snap-confine, snap-seccomp: utilize new seccomp logging features
   - progress: tweak ansimeter cvvis use to no longer confuse minicom
   - xdgopenproxy: integrate xdg-open implementation into snapctl
   - tests: avoid removing preinstalled snaps on core
   - tests: chroot into core to run xdg-open there
   - userd: add an OpenFile method for launching local files with xdg-
     open
   - tests: moving ubuntu core from linode to google backend
   - run-checks: remove accidental bashism
   - i18n: simplify NG usage by doing the modulo math in-package.
   - snap/squashfs: set timezone when calling unsquashfs to get the
     build date
   - timeutil: timeutil.Human(t) gives a human-friendly string for t
   - snap: add autostart app property
   - tests: add support for external backend executions on listing test
   - tests: make interface-broadcom-asic-control test work on rpi
   - configstate: when disable "ssh" we must disable the "sshd" service
   - interfaces/apparmor,system-key: add upperdir snippets for strict
     snaps on livecd
   - snap/squashfs: add BuildDate
   - store: parse the JSON format used by the coming new store API to
     convey snap information
   - many: remove snapd.refresh.{timer,service}
   - tests: adding ubuntu-14.04-64 to the google backend
   - interfaces: add xdg-desktop-portal support to desktop interface
   - packaging/arch: sync with snapd/snapd-git from AUR
   - wrappers, tests/main/snap-service-timer: restore missing commit,
     add spread test for timer services
   - store: don't ask for snap_yaml_raw except on the details endpoint
   - many: generate and use per-snap snap-update-ns profile
   - tests: add debug for layout test
   - wrappers: detect whether systemd-analyze can be used in unit tests
   - osutil: allow creating strings out of MountInfoEntry
   - servicestate: use systemctl enable+start and disable+stop instead
     of --now flag
   - osutil: handle file being matched by multiple patterns
   - daemon, snap: fix InstallDate, make a method of *snap.Info
   - wrappers: timer services
   - wrappers: generator for systemd OnCalendar schedules
   - asserts: fix flaky storeSuite.TestCheckAuthority
   - tests: fix dependency for ubuntu artful
   - spread: start moving towards google backend
   - tests: add a spread test for layouts
   - ifacestate: be consistent passing Retry.After as named field
   - cmd/snap-update-ns: use recursive bind mounts for writable mimic
   - testutil: allow mocking syscall.Fstat
   - overlord/snapstate: verify that default schedule is randomized and
     is  not a single time
   - many: simplify mocking of home-on-NFS
   - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
   - store: move infoFromRemote into details.go close to snapDetails
   - userd/tests: Test kdialog calls and mock kdialog too to make tests
     work in KDE
   - cmd/snap: tweaks to 'snap info' (feat. installed->current rename)
   - cmd/snap: add self-strace to `snap run`
   - interfaces/screen-inhibit-control,network-status: fix dbus path
     and interface typos
   - update-pot: Force xgettext() to return true
   - store: cleanup test naming, dropping remoteRepo  and
     UbuntuStore(Repository)? references
   - store: reorg auth refresh


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.33.1
   - many: improve udev trigger on refresh experience
   - systemd: require snapd.socket in snapd.seeded.service
   - snap: don't include newline in hook environment
   - interfaces/apparmor: allow killing snap-update-ns
   - tests: skip "try" test on s390x
   - tests: skip security-dev-input-event-denied when /dev/input/by-
     path/ is missing
   - tests: skip security-dev-input-event-denied on s390x/arm64


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.34
   - store, daemon, client, cmd/snap: expose "scope", default to wide*
   - tests: fix arch tests
   - snapstate: make sure all *link-*snap tasks carry a snap type and
     further hints
   - snapstate: allow setting "refresh.timer=managed"
   - cmd/snap: display a link to data privacy notice for interactive
     snap login
   - devicestate: fix race when refreshing a snap with snapd-control
   - tests: skip interfaces-framebuffer when no /dev/fb0 is found
   - tests: run interfaces-contacts-service only where test-snapd-eds
     is available
   - many: expose publisher's validation throughout the API
   - many: use extra "releases" information on store "revision-not-
     found" errors to produce better errors
   - dirs: improve distro detection for Antegros
   - Revert "dirs: improve identification of Arch Linux like systems"
   - devicestate: fix panic in firstboot code when no snaps are seeded
   - i18n: use xgettext-go --files-from to avoid running into cmdline
     size limits
   - interfaces: move ValidateName helper to utils
   - snapstate,ifstate: wait for pending restarts before auto-
     connecting
   - snap: account for parallel installs in wrappers, place info and
     tests
   - configcore: fix incorrect handling of keys with numbers (like
     gpu_mem_512)
   - tests: fix tests when no keyboard input detected
   - overlord/configstate: add watchdog options
   - snap-mgmt: fix for non-existent dbus system policy dir,
     shellchecks
   - tests/main/snapd-notify: use systemd's service properties rater
     than the journal
   - snapstate: allow removal of snap.TypeOS when using a model with a
     base
   - interfaces: make findSnapdPath smarter
   - tests: run "arp" tests only if arp is available
   - spread: increase the number of auto retries for package downloads
     in opensuse
   - cmd/snap-confine: fix nvidia support under lxd
   - corecfg: added experimental.hotplug feature flag
   - image: block installation of parallel snap instances
   - interfaces: moved normalize method to interfaces/utils and made it
     public
   - api/snapctl: allow -h and --help for regular users.
   - interfaces/udisks2: also implement implicit classic slot
   - cmd/snap-confine: include CUDA runtime libraries
   - tests: disable auto-refresh test on core18
   - many: switch to account validation: unproven|verified
   - overlord/ifacestate: get/set connection state only via helpers
   - tests: adding extra check to validate journalctl is showing
     current test data
   - data: add systemd environment configuration
   - i18n: handle write errors in xgettext-go
   - snap: helper for validating snap instance names
   - snap{/snaptest}: set instance key based on snap name
   - userd: fix running unit tests on KDE
   - tests/main/econnreset: limit ingress traffic to 512kB/s
   - snap: introduce a struct Channel to represent store channels, and
     helpers to work with it
   - tests: add fedora to distro_clean_package_cache function
   - many: rename snap.Info.StoreName() to snap.Info.SnapName()
   - tests: add spread test to ensure snapd/core18 are not removable
   - tests: tweaks for running the main tests on core18
   - overlord/{config,snap}state: introduce experimental.parallel-
     instances feature flag
   - strutil: support iteration over almost clean paths
   - strutil: add PathIterator.Rewind
   - tests: update interfaces-timeserver-control to core18
   - tests: add halt-timeout to google backend
   - tests: skip security-udev-input-subsystem without /dev/input/by-
     path
   - snap: introduce the instance key field
   - packaging/opensuse: remaining packaging updates for 2.33.1
   - overlord/snapstate: disallow installing snapd on baseless models
   - tests: disable core tests on all core systems (16 and 18)
   - dirs: improve identification of Arch Linux like systems
   - many: expose full publisher info over the snapd API
   - tests: disable core tests on all core systems (16 and 18)
   - tests/main/xdg-open: restore or clean up xdg-open
   - tests/main/interfaces-firewall-control: shellcheck fix
   - snapstate: sort "snapd" first
   - systemd: require snapd.socket in snapd.seeded.service; make sure
     snapd.seeded
   - spread-shellcheck: use the latest shellcheck available from snaps
   - tests: use "ss" instead of "netstat" (netstat is not available in
     core18)
   - data/complete: fix three out of four shellcheck warnings in
     data/complete
   - packaging/opensuse: fix typo, missing assignment
   - tests: initial core18 spread image building
   - overlord: introduce a gadget-connect task and use it at first boot
   - data/completion: fix inconsistency in +x and shebang
   - firstboot: mark essential snaps as "Required" in the state
   - spread-shellcheck: use a whitelist of files that are allowed to
     fail validation
   - packaging/opensuse: build position-independent binaries
   - ifacestate: prevent running interface hooks twice when self-
     connecting on autoconnect
   - data: remove /bin/sh from snapd.sh
   - tests: fix shellcheck 0.5.0 warnings
   - packaging/opensuse: snap-confine should be 06755
   - packaging/opensuse: ship apparmor integration if enabled
   - interfaces/udev,misc: only trigger udev events on input subsystem
     as needed
   - packaging/opensuse: add missing bits for snapd.seeded.service
   - packaging/opensuse: don't use  in comments
   - tests: shellchecks part 4
   - many: rename snap.Info.Name() to snap.Info.InstanceName(), leave
     parallel-install TODOs
   - store: drop unused: channel map types, and details fixture.
   - store: have a basic test about the unmarshalling of /search
     results
   - tests: show executed tests on current system when a test fails
   - tests: fix for the download of the big snap
   - interfaces/apparmor: add chopTree
   - tests: remove double debug: | entry in tests and add more checks
   - cmd/snap-update-ns: introduce mimicRequired helper
   - interfaces: move assertions around for better failure line number
   - store: log a nice clear "download succeeded" message
   - snap: run snap-confine from the re-exec location
   - snapstate: support restarting snapd from the snapd snap on core18
   - tests: show status of the partial test-snapd-huge snap in
     econnreset test
   - tests: fix interfaces-calendar-service test when gvfsd-metadata
     loks the xdg dirctory
   - store: switch store.SnapInfo to use the new v2/info endpoint
   - interfaces: add Repository.AllInterfaces
   - snapstate: stop using evolving SnapSpec internally, use an
     internal-only snapSpec instead
   - cmd/libsnap-confine-private: introduce a helper for splitting snap
     name
   - tests: econnreset/retry tweaks
   - store, et al: kill dead code that uses the bulk endpoint
   - tests/lib/prepare-restore: fix upgrade/reboot handling on arch
   - cmd/snap-update-ns,strutil: move PathIterator to strutil, add
     Depth helper
   - data/systemd/snapd.run-from-snap: ensure snapd tooling is
     available
   - store: switch connectivity check to use v2/info
   - devicestate: support seeding from a base snap instead of core
   - snapstate,ifacestate: remove core-phase-2 handling
   - interfaces/docker-support: update for docker 18.05
   - tests: enable fedora 28 again
   - overlord/ifacestate:  simplify checkConnectConflicts and also
     connect signature
   - snap: parse connect instructions in gadget.yaml
   - tests: fix snapd-repair.timer on ubuntu-core-snapd-run- from-snap
     test
   - interfaces/apparmor: allow killing snap-update-ns
   - tests: skip "try" test on s390x
   - store, image: have 'snap download' use v2/refresh action=download
   - interfaces/policy: test that base policy can be parsed
   - tests: publish test-snapd-appstreamid for any architecture
   - snap: don't include newline in hook environment
   - cmd/snap-update-ns: use RCall with SyscallsEqual
   - cmd/snap-update-ns: add IsSnapdCreatedPrivateTmpfs and tests
   - tests: skip security-dev-input-event-denied on s390x/arm64
   - interfaces: add the dvb interface
   - daemon: paging is not a thing.
   - cmd/snap-mgmt: remove system key on purge
   - testutil: syscall sequence checker
   - cmd/snap-update-ns: fix a leaking file descriptor in MkSymlink
   - packaging: use official bolt in the errtracker on fedora
   - many: add `snap debug connectivity` command* many: add `snap debug
     connectivity` command
   - configstate: deny configuration of base snaps and for the "snapd"
     snap
   - interfaces/raw-usb: also allow usb serial devices
   - snap: reject more layout locations
   - errtracker: do not send duplicated reports
   - httputil: extra debug if an error is not retried
   - cmd/snap-update-ns: improve wording in many errors
   - cmd/snap: use snaptest.MockSnapCurrent in `snap run` tests
   - cmd/snap-update-ns: add helper for checking for read-only
     filesystems
   - interfaces/builtin/docker: use commonInterface over specific
     struct
   - testutil: add test support for Fstatfs
   - cmd/snap-update-ns: discard the concept of segments
   - cmd/libsnap-confine-private: helper for extracting store snap name
     from local-name
   - tests: fix flaky test for hooks undo
   - interfaces: add {contacts,calendar}-service interfaces
   - tests: retry 'restarting into..' match in the snap-confine-from-
     core test
   - systemd: adjust TestWriteMountUnitForDirs() to use
     squashfs.MockUseFuse(false)
   - data: add helper that can generate/start/stop the snapd service
   - sefltest: advise reboot into 4.4 on trusty running 3.13
   - selftest: add new selftest package that tests squashfs mounting
   - store, jsonutil: move store.getStructFields to
     jsonutil.StructFields
   - ifacestate: improved conflict and error handling when creating
     autoconnect tasks
   - cmd/snap-confine: applied make fmt
   - interfaces/udev: call 'udevadm settle --timeout=10' after
     triggering events
   - tests: wait more time until snap start to be downloaded on
     econnreset test
   - snapstate: ensure fakestore returns TypeOS for the core snap
   - tests: fix lxd test which hangs on restore
   - cmd/snap-update-ns: add PathIterator
   - asserts,image: add support for models with bases
   - tests: shellchecks part 3
   - overlord/hookstate: support undo for hooks
   - interfaces/tpm: Allow access to the kernel resource manager
   - tests: skip appstream-id test for core systems 32 bits
   - interfaces/home: remove redundant common interface assignment
   - tests: reprioritise a few tests that are known to be slow
   - cmd/snap: small help tweaks and fixes
   - tests: add test to ensure /dev/input/event* for non-joysticks is
     denied
   - spread-shellcheck: silly fix & pep8
   - spread: switch fedora 28 to manual
   - client,cmd/snap,daemon,tests: expose base of a snap over API, show
     it in snap info --verbose
   - tests: fix lxd test - --auto now sets up networking
   - tests: adding fedora-28 to spread.yaml
   - interfaces: add juju-client-observe interface
   - client, daemon: add a "mounted-from" entry to local snaps' JSON
   - image: set model.DisplayName() in bootenv as "snap_menuentry"
   - packaging/opensuse: Refactor packaging to support all openSUSE
     targets
   - interfaces/joystick: force use of the device cgroup with joystick
     interface
   - interfaces/hardware-observe: allow access to /etc/sensors* for
     libsensors
   - interfaces: remove Plug/Slot types
   - interface hooks: update old AutoConnect methods
   - snapcraft: run with DEB_BUILD_OPTIONS=nocheck
   - overlord/{config,snap}state: the number of inactive revisions is
     config
   - cmd/snap: check with snapd for unknown sections
   - tests: moving test helpers from sh to bash
   - data/systemd: add snapd.apparmor.service
   - many: expose AppStream IDs (AKA common ID)
   - many: hold refresh when on metered connections
   - interfaces/joystick: also support modern evdev joysticks and
     gamepads
   - xdgopenproxy: skip TestOpenUnreadableFile when run as root
   - snapcraft: use dpkg-buildpackage options that work in xenial
   - spread: openSUSE LEAP 42.2 was EOLd in January, remove it
   - get-deps: work with an unset GOPATH too
   - interfaces/apparmor: use strict template on openSUSE tumbleweed
   - packaging: filter out verbose flags from "dh-golang"
   - packaging: fix description
   - snapcraft.yaml: add minimal snapcraft.yaml with custom build


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.34.1
   - tests: cherry-pick test fixes from master for 2.34
   - coreconfig: add support for `snap set system network.disable-
     ipv6`
   - debian: do not ship snapd.apparmor.service on ubuntu
   - overlord/snapstate: dedupe default content providers
   - interfaces/builtin: create can-bus interface


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.34.2
   - packaging: fix bogus date in fedora snapd.spec
   - tests: fix tests expecting old email address


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.34.3
   - interfaces/apparmor: use the cache in mtime-resilient way
   - cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so
   - snapstate: allow setting "refresh.timer=managed"
   - spread: switch Fedora and openSUSE images


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.35
   - snapstate: add support for gadget tracks in model assertion
   - image: add support for "gadget=track"
   - asserts: add support for gadget tracks in the model assertion
   - interfaces: add new "sysfs-name" to i2c interfaces code
   - overlord: handle sigterm during shutdown better
   - wayland: add extra sockets that are used by older toolkits
   - snap: fix advice json
   - tests: fix autopkgtest failures in cosmic
   - store: backward compatible instance-key handling for non-instance
     snaps
   - snapstate: ensure normal snaps wait for the "snapd" snap on
     refresh
   - interfaces: add cpu-control for setting CPU tunables
   - debian: add missing breaks on comisc
   - overlord/devicestate: DTRT w/a snap proxy to reach a serial vault
   - devicestate: only run device-hook when fully seeded
   - seccomp: conditionally add socketcall() based on system and base
   - interfaces/builtin: addtl network-manager resolved DBus fix
   - hookstate: simplify some hook tests
   - udev: skip TestParseUdevEvent on ppc
   - interfaces: miscellaneous policy updates
   - debian: add tzdata to build-dep to ensure snapd builds correctly
   - interfaces/builtin: network-manager resolved DBus changes
   - tests: add spread test for fedora29 base snap
   - cmd/libsnap: treat distributions with VARIANT_ID=snappy as "core"
   - dirs: fix SnapMountDir inside a Fedora base snap
   - tests: fix snapd-failover for core18 with external backend
   - overlord/snapstate: always clean SnapState when doing Get()
   - overlod/ifacestate: always use a new SnapState when fetching the
     snap state
   - overlord/devicestate: have the serial request talk to the proxy if
     set
   - interfaces/hotplug: udevadm output parser
   - tests: New test for daemon-notify interface
   - image: ensure "core" is ordered early if base: and core is used
   - cmd/snap-confine: snap-device-helper parallel installs support
   - tests: enable interfaces-framebuffer everywhere
   - tests: reduce nc wait time from 2 to 1 second
   - snap/snapenv: add snap instance specific variables
   - cmd/snap-confine: add minimal test for snap-device-helper
   - tests: enable snapctl test on core18
   - overlord: added UDevMonitor for future hotplug support
   - wrappers: do not glob when removing desktop files
   - tests: add dbus monitor log to interfaces-accounts-service
   - tests: add core-18 systems to external backend
   - wrappers: account for changed app wrapper in parallel installed
     snaps
   - wrappers: make sure that the tests pass on non-Ubuntu too
   - many: add snapd snap failure handling
   - tests: new test for dvb interface
   - configstate: accept refresh.timer=managed
   - tests: new test for snap logs command
   - wrapper: generate all the snapd unit files when generating
     wrappers
   - store: keep all files with link-count > 1 in the cache
   - store: be less verbose in the common refresh case of "no updates"
   - snap-confine: update snappy-app-dev path
   - debian: ensure dependency on fixed apt on 18.04
   - snapd: add initial software watchdog for snapd
   - daemon, systemd: change journalctl -n=all to --no-tail
   - systemd: fix snapd.apparmor.service.in dependencies
   - snapstate: refuse to remove bases or core if snaps need them
   - snap: introduce package-level helpers for building snap related
     directory/file paths
   - overlord/devicestate: deny parallel install of kernel or gadget
     snaps
   - store: clean up parallel-install TODOs in store tests
   - timeutil: fix first weekday of the month schedule
   - interfaces: match all possible tty but console
   - tests: shellchecks part 5
   - cmd/snap-confine: allow ptrace read for 4.18 kernels
   - advise: make the bolt database do the atomic rename dance
   - tests/main/apt-hooks: debug dump of commands.db
   - tests/lib/prepare-restore: update Arch Linux kernel LOCALVERSION
     handling
   - snap: validate instance name as part of Validate()
   - daemon: if a snap is inactive, don't ask systemd about its
     services.
   - udev: skip TestParseUdevEvent on s390x
   - tests: switch core-amd64-18 to use `kernel: pc-kernel=18`
   - asserts,image: add support for new kernel=track syntax
   - tests: new gce image for fedora 27
   - interfaces/apparmor: use the cache in mtime-resilient way
   - store, overlord/snapstate: introduce instance name in store APIs
   - tests: drive-by cleanup of redudant pkgname matching
   - tests: ensure apt-hook is only run after catalog update ran
   - tests: use pkill instead of kilall
   - tests/main: another bunch of updates for Amazon Linux 2
   - tests/lib/snaps: avoid using relative command paths that go up in
     the  directory tree
   - tests: disable/fix more tests for Amazon Linux 2
   - overlord: introduce InstanceKey to SnapState and SnapSetup,
     renames
   - daemon: make sure most change generating handlers can produce
     errors with kinds
   - tests/main/interfaces-calendar-service: skip the test on AMZN2
   - tests/lib/snaps: avoid using relative command paths that go up in
     the directory tree
   - cmd/snap: add a green check mark to verified publishers
   - cmd/snap: fix two issues in the cmd/snap unit tests
   - packaging/fedora: fix target path of /snap symlink
   - cmd/snap: support `--last=<type>?` to mean "no error on empty"
   - cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so
   - strutil: detect and bail out of Unmarshal on duplicate key
   - packaging/fedora(amzn2): disable SELinux, drop dependency on
     squashfuse for AMZN2
   - spread, tests: add support for Amazon Linux 2
   - packaging/fedora: Add Amazon Linux 2 support
   - many: make Wait/Stop optional on StateManagers
   - snap/squashfs: stop printing unsquashfs info to stderr
   - snap: add support for `snap advise-snap --from-apt`
   - overlord/ifacestate: ignore connect if already connected
   - tests: change the service snap used instead of network-bind-
     consumer
   - interfaces/network-control: update for wpa-supplicant and ifupdown
   - tests: fix raciness in stop mode tests
   - logger: try to not have double dates
   - debian: use deb-systemd-invoke instead of systemctl directly
   - tests: run all main tests on core18
   - many: finish sharing a single TaskRunner with all the the managers
   - interfaces/repo: added AllHotplugInterfaces helper
   - snapstate: ensure kernel-track is honored on switch/refresh
   - overlord/ifacestate: support implicit slots on snapd
   - image: add support for "kernel-track" in `snap prepare-image`
   - tests: add test that ensures we do not boot any system in degraded
     state
   - tests: update tests to work on core18
   - cmd/snap: check for typographic dashes in command
   - tests: fix tests expecting old email address
   - client: add some existing error kinds that were not listed in
     client.go
   - tests: add missing slots in classic and core provider test snaps
   - overlord,daemon,cmd: re-map snap names around the edges of snapd
   - tests: use install_local in snap-run-hooks
   - coreconfig: add support for `snap set system network.disable-
     ipv6`
   - overlord/snapstate: dedupe default content providers
   - osutil/udev: sync with upstream
   - debian: do not ship snapd.apparmor.service on ubuntu
   - overlord: have SnapManager use a passed in TaskRunner created by
     Overlord
   - many: streamline the generic conflict check mechanisms
   - tests: remove unneeded setup code in snap-run-symlink
   - cmd/snap: print unset license as "unset", instead of "unknown"
   - asserts: add (optional) kernel-track to model assertion
   - snap/squashfs, tests: pass -n[o-progress] to {mk,un}squashfs
   - interfaces/pulseaudio: be clear that the interface allows playback
     and record
   - snap: support hook environment
   - interfaces: fix typo "daemonNotify" (add missing "n")
   - interfaces: tweak tests of daemon-notify, use common naming
   - interfaces: allow invoking systemd-notify when daemon-notify is
     connected
   - store: make snap blobs be 0600
   - interfaces,daemon: move JSON types to the daemon
   - tests: prepare needs to handle bin/snapctl being a symlink
   - tests: do not mask errors in interfaces-timezone-control (#5405)
   - packaging: put snapctl into /usr/lib/snapd and symlink in usr/bin
   - tests: add basic integration test for spread hold
   - overlord/snapstate: improve PlugsOnly comment
   - many: assorted shellcheck fixes
   - store, daemon, client, cmd/snap: expose "scope", default to wide
   - snapstate: allow setting "refresh.timer=managed"
   - cmd/snap: display a link to data privacy notice for interactive
     snap login
   - client, cmd/snap: pass snap instance name when installing from
     file
   - cmd/snap: add 'debug paths' command
   - snapstate: make sure all *link-*snap tasks carry a snap type and
     further hints
   - devicestate: fix race when refreshing a snap with snapd-control
   - tests: fix tests on arch
   - tests: start active system units on reset
   - tests: new test for joystick interface
   - tests: moving install of dependencies to pkgdb helper
   - tests: enable new fedora image with test dependencies installed
   - tests: start using the new opensuse image with test dependencies
   - tests: check catalog refresh before and after restart snapd
   - tests: stop restarting journald service on prepare
   - interfaces: make core-support a no-op interface
   - interfaces: prefer "snapd" when resolving implicit connections
   - interfaces/hotplug: add hotplug Specification and
     HotplugDeviceInfo
   - many: lessen the use of core-support
   - tests: fixes for the autopkgtest failures in cosmic
   - tests: remove extra ' which breaks interfaces-bluetooth-control
     test
   - dirs: fix antergos typo
   - tests: use grep to avoid non-matching messages from MATCH
   - dirs: improve distro detection for Antegros
   - vendor: switch to latest bson
   - interfaces/builtin: create can-bus interface
   - tests: "snap connect" is idempotent so just connect
   - many: use extra "releases" information on store "revision-not-
     found" errors to produce better errors
   - interfaces: treat "snapd" snap as type:os
   - interfaces: tweak tests to have less repetition of "core" and
     "ubuntu…
   - tests: simplify econnreset test
   - snap: add helper for renaming slots
   - devicestate: fix panic in firstboot code when no snaps are seeded
   - tests: add artful for sru validation on google backend
   - snap,interfaces: move interface name validation to snap
   - overlord/snapstate: introduce path to fake backend ops
   - cmd/snap-confine: fix snaps running on core18
   - many: expose publisher's validation throughout the API


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.35.1
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - snapcraft: do not use --diry in mkversion.sh
   - cmd: add systemd environment generator
   - snap-confine: map /var/lib/extrausers into snaps mount-namespace
   - tests: cherry-pick test fixes from master for 2.35
   - systemd: do not run "snapd.snap-repair.service.in on firstboot
     bootstrap
   - interfaces: retain order of inserted security backends
   - selftest: detect if apparmor is unusable and error


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.35.2
   - cmd,overlord/snapstate: go 1.11 format fixes
   - ifacestate: fix hang when retrying content providers
   - snap-env-generator: do nothing when PATH is unset
   - interfaces/modem-manager: allow access to more USB strings


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.35.3
   - overlord: don't make become-operational interfere with user
     requests
   - docker_support.go: add rules to read apparmor macros
   - interfaces/apparmor: handle overlayfs snippet for snap-update-
     nsFixes:
   - snapcraft.yaml: add workaround to fix snapcraft build
   - interfaces/opengl: misc accesses for VA-API


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.35.4
    - wrappers: do not depend on network.taget in socket units, tweak
      generated units


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.35.5
   - interfaces/home: don't allow snaps to write to $HOME/bin
   - osutil: workaround overlayfs on ubuntu 18.10


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.36
   - overlord/snapstate, snap, wrappers: start services in the right
     order during install
   - tests: the store has caught up, drop gccgo test, update cosmic
     image
   - cmd/snap: try not to panic on error from "snap try"`--devmode`
   - overlord/ifacestate: don't conflict on own discard-snap tasks when
     refreshing & doing garbage collection
   - snapstate: add command-chain to supported featureset
   - daemon, snap: mark screenshots as deprecated
   - interfaces: fix decoding of json numbers for static/dynamic
     attributes
   - data/systemd, wrappers: tweak system-shutdown helper for core18
   - interfaces/system-key: add parser mtime and only discover features
     on write
   - interfaces: fix NormalizeInterfaceAttributes, add tests
   - systemd,wrappers: don't start disabled services
   - ifacestate/hooks: only create interface hook tasks if hooks exist
   - tests: do not run degraded test in autopkgtest env
   - osutil: workaround overlayfs on ubuntu 18.10
   - interfaces: include invalid type in Attr error
   - many: enable layouts by default
   - interfaces/default: don't scrub with change_profile with classic
   - cmd/snap: speed up unit tests
   - vendor, cmd/snap: refactor to accommodate the new less buggy go-
     flags
   - daemon: expose snapshots to the API
   - interfaces: updates for default, screen-inhibit-control, tpm,
     {hardware,system,network}-observe
   - interfaces/hotplug: rename HotplugDeviceKey method to HotplugKey,
     update test interface
   - interfaces/tests: use TestInterface instead of a custom local
     helper
   - overlord/snapstate: export getFeatureFlagBool.
   - osutil,asserts,daemon: support force password change in system-
     user assertion
   - snap, wrappers: support restart-delay, generate RestartSec=<value>
     in service units
   - tests/ifacestate: moved asserts-related mocking into helper
   - image: fetch device store assertion if available
   - many: enable AppArmor on Arch
   - interfaces/repo: two helper methods for hotplug
   - overlord/ifacestate: add hotplug slots with implicit slots
   - interfaces/hotplug: helpers and struct updates
   - tests: run the snapd tests on Ubuntu 18.10
   - snapstate: only report errors if there is an actual error
   - store: speedup unit tests
   - spread-shellcheck: fix interleaved error messages, tweaks
   - apparmor: create SnapAppArmorDir in setupSnapConfineReexec
   - ifacestate: implementation of defaultDeviceKey function for
     hotplug
   - cmd/snap-update-ns: remove empty placeholders used for mounting
   - snapshotstate: restore to current revision
   - tests/lib: rework the CLA checker
   - many: support and consider store friendly-stores when checking
     device scope constraints
   - overlord/snapstate: block parallel installs of snapd, core, base,
     kernel, gadget snaps
   - overlord/patch: patch for static plug/slot attributes
   - interfaces: honor static attributes when reloading conns
   - osutils: unit tests speedup; introduce «run-checks --short-
     unit».
   - systemd, wrappers: speed up wrappers unit tests
   - client: speedup unit tests
   - spread-shellcheck: use threads to parallelise
   - snap: validate plug and slot names
   - osutil, interfaces/apparmor: add and use of osutil.UnlinkMany
   - wrappers: do not depend on network.taget in socket units, tweak
     generated units
   - interfaces/apparmor: (un)load profiles in one apparmor_parser call
   - store: gracefully handle unexpected errors in 'action'
     response
   - cmd: put our manpages in section 8
   - overlord: don't make become-operational interfere with user
     requests
   - store: tweak unmatched refresh result error log
   - snap, client, daemon, store: use and expose "media" more
   - tests,cmd/snap-update-ns: add test showing mount update bug
     cmd/snap-update-ns: better detection of snapd-made tmpfs
   - tests: spread tests for aliases with parallel installed snaps
   - interfaces/seccomp: allow using statx by default
   - store: gracefully handle unexpected errors in 'action' response
   - overlord/snapshotstate: chown the tempdir
   - cmd/snap: attempt to start the document portal if running with a
     session bus
   - snap: detect layouts vs layout in snap.yaml
   - interfaces/apparmor: handle overlayfs snippet for snap-update-ns
   - snapcraft.yaml: set grade to stable
   - tests: shellchecks, final round
   - interfaces/apparmor: handle overlayfs snippet for snap-update-ns
   - snap: detect layouts vs layout in snap.yaml
   - overlord/snapshotstate: store epoch in snapshot, check on restore
   - cmd/snap: tweak UX of snap refresh --list
   - overlord/snapstate: improve consistency, use validateInfoAndFlags
     also in InstallPath
   - snap: give Epoch a CanRead helper
   - overlord/snapshotstate: small refactor of internal helpers
   - interfaces/builtin: adding missing permission to create
     /run/wpa_supplicant directory
   - interfaces/builtin: avahi interface update
   - client, daemon: support passing of 'unaliased' option when
     installing from local files
   - selftest: rename selftest.Run() to sanity.Check()
   - interfaces/apparmor: report apparmor support level and policy
   - ifacestate: helpers for generating slot names for hotplug
   - overlord/ifacestate: make sure to pass in the Model assertion when
     enforcing policies
   - overlord/snapshotstate: store the SnapID in snapshot, block
     restore if changed
   - interfaces: generalize writable mimic profile
   - asserts,interfaces/policy: add support for on-store/on-brand/on-
     model plug/slot rule constraints
   - many: fetch the device store assertion together and in the context
     of interpreting snap-declarations
   - tests: disable gccgo tests on 18.04 for now, until dh-golang vs
     gccgo is fixed
   - tests/main/parallel-install-services: add spread test for snaps
     with services
   - tests/main/snap-env: extend to cover parallel installations of
     snaps
   - tests/main/parallel-install-local: rename from *-sideload, extend
     to run snaps
   - cmd/snapd,daemon,overlord: without snaps, stop and wait for socket
   - cmd/snap: tame the help zoo
   - tests/main/parallel-install-store: run installed snap
   - cmd/snap: add a bunch of TRANSLATORS notes (and a little more
     i18n)
   - cmd: fix C formatting
   - tests: remove unneeded cleanup from layout tests
   - image: warn on missing default-providers
   - selftest: add test to ensure selftest.checks is up-to-date
   - interfaces/apparmor, interfaces/builtin: tweaks for parallel snap
     installs
   - userd: extend the list of supported XDG Desktop properties when
     autostarting user applications
   - cmd/snap-update-ns: enforce trespassing checks
   - selftest: actually run the kernel version selftest
   - snapd: go into degraded mode when the selftest fails
   - tests: add test that runs snapctl with a core18 snap
   - tests: add snap install hook with base: core18
   - overlord/{snapstate,assertstate}: parallel instances and
     refresh validation
   - interfaces/docker-support: add rules to read apparmor macros
   - tests: make nfs test available for more systems
   - tests: cleanup copy/paste dup in interfaces-network-setup-control
   - tests: using single sh snap in interface tests
   - overlord/snapstate: improve cleaup in mount-snap handler
   - tests: don't fail interfaces-bluez test if bluez is already
     installed
   - tests: find snaps just for edge and beta channels
   - daemon, snapstate: consistent snap list [--all] output with broken
     snaps
   - tests: fix listing to allow extra things in the notes column
   - cmd/snap: improve UX when removing specific snap revision
   - cmd/snap, tests/main/snap-info: highlight the current channel
   - interfaces/testiface: added TestHotplugInterface
   - snap: tweak commands
   - interfaces/hotplug: hotplug spec takes one slot definition
   - overlord/snapstate, snap: handle shared snap directories when
     installing/remove snaps with instance key
   - interfaces/opengl: misc accesses for VA-API
   - client, cmd/snap: expose warnings to the world
   - cmd/snap-update-ns: introduce trespassing state tracking
   - cmd/snap: commands no longer build their own client
   - tests: try to build cmd/snap for darwin
   - daemon: make error responders not printf when called with 1
     argument
   - many: return real snap name in API response
   - overlord/state: return latest LastAdded time in WarningsSummary
   - many: mount namespace mapping for parallel installs of snaps
   - ifacestate/autoconnect: do not self-conflict on setup-profiles if
     core-phase-2
   - client, cmd/snap: on !linux, exit when the client tries to Do
     something
   - tests: refactor for nested suite and tests fixed
   - tests: use lxd's waitready instead of polling lxd socket
   - ifacestate: don't initialize udev monitor until we have a system
     snap
   - interfaces: extra argument for static attrs in
     NewConnectedPlug/NewConnectedSlot
   - packaging/arch: sync packaging with AUR
   - snapstate/tests: serialize all appends in fake backend
   - snap-confine: make /lib/modules optional
   - cmd/snap: handle "snap interfaces core" better
   - store: move download tests into downloadSuite
   - tests,interfaces: run interfaces-account-control on UC18
   - tests: fix install snaps test by adding link to /snap
   - tests: fix for nested test suite
   - daemon: fix snap list --all with parallel snap instances
   - snapstate: refactor tests to use SetModel*
   - wrappers: fix snap services order in tests
   - many: provide salt for generating instance-key in store requests
   - ifacestate: fix hang when retrying content providers
   - snapd-env-generator: fix when PATH is empty or unset
   - overlord/assertstate: propagate TaskSnapSetup error
   - client: catch and expose logs errors
   - overlord: integrate device enumeration with udev monitor
   - daemon, overlord/state: warnings pipeline
   - tests: add publisher regex to fix the snap-info test pass on sru
   - cmd: use systemdsystemgeneratorsdir, cleanup automake complaints,
     tweaks
   - cmd/snap-update-ns: remove the unused Secure type
   - osutil, o/snapshotstate, o/sss/backend: quick fixes
   - tests: update the listing expression to support core from
     different channels
   - store: use stable instance key in store refresh requests
   - cmd/snap-update-ns: detach Mk{Prefix,{File,Dir,Symlink{,All}}}
   - overlord/patch: support for sublevel patches
   - tests: update prepare/restore for nightly suite
   - cmd/snap-update-ns: detach BindMount from the Secure type
   - cmd/snap-update-ns: re-factor pair of helpers to call fstatfs once
   - ifacestate: retry on "discard-snap" in autoconnect conflict check
   - cmd/snap-update-ns: separate OpenPath from the Secure struct
   - wrappers: remove Wants=network-online.target
   - tests: add new core16-base test
   - store: refactor tests so that they work as store_test package
   - many: add refresh.rate-limit core option
   - tests: run account-control test with different bases
   - tests: port proxy test to use python tinyproxy
   - overlord: introduce snapshotstate.
   - testutil: allow Fstatfs results to vary over time
   - snap-update-ns: add comments about the "deadcode" in bootstrap.go
   - overlord: add chg.Err() in testUpdateWithAutoconnectRetry
   - many: remove deadcode
   - tests: also run unit/gccgo in 18.04
   - tests: introduce a helper for installing local snaps with --name
   - tests: avoid removing core snap on reset
   - snap: use snap.SideInfo in test to fix build with gccgo
   - partition: remove unused runCommand
   - image: fix incorrect error when using local bases
   - overlord/snapstate: fix format
   - cmd: fix format
   - tests: setting "storage: preserve-size" just for amazon-linux
     system
   - tests: test for the hostname interface
   - interfaces/modem-manager: allow access to more USB strings
   - overlord: instantiate UDevMonitor
   - interfaces/apparmor: tweak naming, rename to AddLayout()
   - interfaces: take instance name in ifacetest.InstallSnap
   - snapcraft: do not use --dirty in mkversion
   - cmd: add systemd environment generator
   - devicestate: support getting (http) proxy from core config
   - many: rename ClientOpts to ClientOptions
   - prepare-image-grub-core18: remove image root in restore
   - overlord/ifacestate: remove "old-conn" from connect/undo connect
     handlers
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - image: handle errors when downloadedSnapsInfoForBootConfig has no
     data
   - tests: use official core18 model assertion in tests
   - snap-confine: map /var/lib/extrausers into snaps mount-namespace
   - overlord,store: support proxy settings internally too
   - cmd/snap: bring back 'snap version'
   - interfaces/mount: tweak naming of things
   - strutil: fix MatchCounter to also work with buffer reuse
   - cmd,interfaces,tests: add /mnt to removable-media interface
   - systemd: do not run "snapd.snap-repair.service.in on firstboot
     bootstrap
   - snap/snapenv: drop some instance specific variables, use instance-
     specific ones for user locations
   - firstboot: sort by type when installing the firstboot snaps
   - cmd, cmd/snap: better support for non-linux
   - strutil: add new ParseByteSize
   - image: detect and error if bases are missing
   - interfaces/apparmor: do not downgrade confinement on arch with
     linux-hardened 4.17.4+
   - daemon: add pokeStateLock helper to the daemon tests
   - snap/squashfs: improve error message from Build on mksquashfs
     failure
   - tests: remove /etc/alternatives from dirs-not-shared-with-host
   - cmd: support re-exec into the "snapd" snap
   - spdx: remove "Other Open Source" from the support licenses
   - snap: add new type "TypeSnapd" and attach to the snapd snap
   - interfaces: retain order of inserted security backends
   - tests: spread test for parallel-installs desktop file handling
   - overlord/devicestate: use OpenSSL's PEM format when generating
     keys
   - cmd: remove --skip-command-chain from snap run and snap-exec
   - selftest: detect if apparmor is unusable and error
   - snap,snap-exec: support command-chain for hooks
   - tests: significantly reduce execution time for managers test
   - snapstate: use new "snap.ByType" sorting
   - overlord/snapstate: fix UpdateMany() to work with parallel
     instances
   - testutil: have File* checker produce more useful error output
   - overlord/ifacestate: introduce connectOpts
   - interfaces: parallel instances support, extend unit tests
   - tests: normalize tests
   - snapstate: make InstallPath() return *snap.Info too
   - snap: add ByType sorting
   - interfaces: add cifs-mount interface
   - tests: use file based markers in snap-service-stop-mode
   - osutil: reorg and stub out things to get it building on darwin
   - tests/main/layout: cleanup after the test
   - osutil/sys: small tweaks to let it build on darwin
   - daemon, overlord/snapstate: set instance name when installing from
     snap file
   - many: move Uname to osutil, for more DRY and easier porting.
   - cmd/snap: create snap user directory when running parallel
     installed snaps
   - cmd/snap-confine: switch to validation of SNAP_INSTANCE_NAME
   - tests: basic test for parallel installs from the store
   - image: download the gadget from the model.GadgetTrack()
   - snapstate: add support for gadget tracks in model assertion
   - image: add support for "gadget=track"
   - overlord: handle sigterm during shutdown better
   - tests: add the original function to fix the errors on new kernels
   - tests/main/lxd: pull lxd from candidate; reënable i386
   - wayland: add extra sockets that are used by older toolkits (e.g.
     gtk3)
   - asserts: add support for gadget tracks in the model assertion
   - overlord/snapstate: improve feature flag validation
   - tests/main/lxd: run ubuntu-16.04 only on 64 bit variant
   - interfaces: workaround for activated services and newer DBus
   - tests: get the linux-image-extra available for the current kernel
   - interfaces: add new "sysfs-name" to i2c interfaces code
   - interfaces: disconnect hooks
   - cmd/libsnap: unify detection of core/classic with go
   - tests: fix autopkgtest failures in cosmic
   - snap: fix advice json
   - overlord/snapstate: parallel snap install
   - store: backward compatible instance-key handling for non-instance
     snaps
   - interfaces: add screencast-legacy for video and audio recording
   - tests: skip unsupported architectures for fedora-base-smoke test
   - tests: avoid using the journalctl cursor when it has not been
     created yet
   - snapstate: ensure normal snaps wait for the "snapd" snap on
     refresh
   - tests: enable lxd again everywhere
   - tests: new test for udisks2 interface
   - interfaces: add cpu-control for setting CPU tunables
   - overlord/devicestate: fix tests, set seeded in registration
     through proxy tests
   - debian: add missing breaks on cosmic
   - devicestate: only run device-hook when fully seeded
   - seccomp: conditionally add socketcall() based on system and base
   - tests: new test for juju client observe interface
   - overlord/devicestate: DTRT w/a snap proxy to reach a serial vault
   - snapcraft: set version information for the snapd snap
   - cmd/snap, daemon: error out if trying to install a snap using
     empty name
   - hookstate: simplify some hook tests
   - cmd/snap-confine: extend security tag validation to cover instance
     names
   - snap: fix mocking of systemkey in snap-run tests
   - packaging/opensuse: fix static build of snap-update-ns and snap-
     exec
   - interfaces/builtin: addtl network-manager resolved DBus fix
   - udev: skip TestParseUdevEvent on ppc
   - interfaces: miscellaneous policy updates
   - debian: add tzdata to build-dep to ensure snapd builds correctly
   - cmd/libsnap-confine-private: intoduce helpers for validating snap
     instance name and instance key
   - snap,snap-exec: support command-chain for app
   - interfaces/builtin: network-manager resolved DBus changes
   - snap: tweak `snap wait` command
   - cmd/snap-update-ns: introduce validation of snap instance names
   - cmd/snap: fix some corner-case test setup weirdness
   - cmd,dirs: fix various issues discovered by a Fedora base snap
   - tests/lib/prepare: fix extra snaps test


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.36.1
   - tests,snap-confine: add core18 only hooks test and fix running
     core18 only hooks on classic
   - interfaces/apparmor: allow access to
     /run/snap.$SNAP_INSTANCE_NAME
   - spread.yaml: add more systems to the autopkgtest and qemu backends
   - daemon: spool sideloaded snap into blob dir
   - wrappers: fix generating of service units with multiple `before`
     dependencies
   - data: run snapd.autoimport.service only after seeding
   - tests,store,daemon: ensure proxy settings are honored in
     auth/userinfo too
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - tests/lib: adjust to changed systemctl behaviour on debian-9
   - tests/main/interfces-accounts-service: switch to busctl, more
     debugging
   - store: also make snaps downloaded via deltas 0600
   - cmd/snap-exec: don't fail on some try mode snaps
   - cmd/snap, userd, testutil: tweak DBus tests to use private session
     bus connection
   - tests/main: fixes for the new shellcheck
   - cmd/snap-confine: remove stale mount profile along stale namespace
   - data/apt: close stderr when calling snap in the apt install hook


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.36.2
   - daemon, vendor: bump github.com/coreos/go-systemd/activation,
     handle API changes
   - snapstate: update fontconfig caches on install
   - overlord,daemon: mock security backends for testing
   - sanity, spread, tests: add CentOS
   - Revert "cmd/snap, tests/main/snap-info: highlight the current
     channel"
   - cmd/snap: add nanosleep to blacklisted syscalls when running with
     --strace
   - tests: add regression test for LP: #1803535
   - snap-update-ns: fix trailing slash bug on trespassing error
   - interfaces/builtin/opengl: allow reading /etc/OpenCL/vendors
   - cmd/snap-confine: nvidia: pick up libnvidia-opencl.so
   - interfaces/opengl: add additional accesses for cuda


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.36.3
   - wrappers: use new systemd.IsActive in core18 early boot
   - httputil: retry on temporary net errors
   - wrappers: only restart service in core18 when they are active
   - systemd: start snapd.autoimport.service in --no-block mode
   - data/selinux: fix syntax error in definition of snappy_admin
     interfacewhen installing selinux-policy-devel package.
   - centos: enable SELinux support on CentOS 7
   - cmd, dirs, interfaces/apparmor: update distro identification to
     support ID="archlinux"
   - apparmor: allow hard link to snap-specific semaphore files
   - overlord,apparmor: new syskey behaviour + non-ignored snap-confine
     profile errors
   - snap: add new `snap run --trace-exec` call
   - interfaces/backends: detect too old apparmor_parser


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37
   - snapd: fix race in TestSanityFailGoesIntoDegradedMode test
   - cmd: fix snap-device-helper to deal correctly with hooks
   - tests: various fixes for external backend
   - interface: raw-usb: Adding ttyACM[0-9]* as many serial devices
     have device node /dev/ttyACM[0-9]
   - tests: fix enable-disable-unit-gpio test on external boards
   - tests: define new "tests/smoke" suite and use that for
     autopkgtests
   - interfaces/builtin/opengl: allow access to NVIDIA VDPAU
     library
   - snapshotstate: don't task.Log without the lock
   - overlord/configstate/configcore: support - and _ in cloud init
     field names
   - cmd/snap-confine: use makedev instead of MKDEV
   - tests: review/fix the autopkgtest failures in disco
   - systemd: allow only a single daemon-reload at the same time
   - cmd/snap: only auto-enable unicode to a tty
   - cmd/snap: right-align revision and size in info's channel map
   - dirs, interfaces/builtin/desktop: system fontconfig cache path is
     different on Fedora
   - tests: fix "No space left on device" issue on amazon-linux
   - store: undo workaround for timezone-less released-at
   - store, snap, cmd/snap: channels have released-at
   - snap-confine: fix incorrect use "src" var in mount-support.c
   - release: support probing SELinux state
   - release-tools: display self-help
   - interface: add new `{personal,system}-files` interface
   - snap: give Epoch an Equal method
   - many: remove unused interface code
   - interfaces/many: use 'unsafe' with docker-support change_profile
     rules
   - run-checks: stop running HEAD of staticcheck
   - release: use sync.Once around lazy intialized state
   - overlord/ifacestate: include interface name in the hotplug-
     disconnect task summary
   - spread: show free space in debug output
   - cmd/snap: attempt to restore SELinux context of snap user
     directories
   - image: do not write empty etc/cloud
   - tests: skip snapd snap on reset for core systems
   - cmd/snap-discard-ns: fix umount(2) typo
   - overlord/ifacestate: hotplug-remove-slot task handler
   - overlord/ifacestate: handler for hotplug-disconnect task
   - ifacestate/hotplug: updateDevice helper
   - tests: reset snapd state on tests restore
   - interfaces: return security setup errors
   - overlord: make InstallMany work like UpdateMany, issuing a single
     request to get candidates
   - systemd/systemd.go: add missing tests for systemd.IsActive
   - overlord/ifacestate: addHotplugSeqWaitTask helper
   - cmd/snap-confine: refactor call to snap-update-ns --user-mounts
   - tests: new backend used to run upgrade test suite
   - travis: short circuit failures in static and unit tests travis job
   - cmd: automatically fix localized <option>s to <option>
   - overlord/configstate,features: expose features to snapd tools
   - selinux: package to query SELinux status and verify/restore file
     contexts
   - wrappers: use new systemd.IsActive in core18 early boot
   - cmd: add tests for lintArg and lintDesc
   - httputil: retry on temporary net errors
   - cmd/snap-confine: remove unused sc_discard_preserved_mount_ns
   - wrappers: only restart service in core18 when they are active
   - overlord/ifacestate: helpers for serializing hotplug changes
   - packaging/{fedora,opensuse}: own /var/lib/snapd/cookie
   - systemd: start snapd.autoimport.service in --no-block mode
   - data/selinux: fix syntax error in definition of snappy_admin
     interface
   - snap/info: bind global plugs/slots to implicit hooks
   - cmd/snap-confine: remove SC_NS_MNT_FILE
   - spread: record each tests/upgrade job
   - osutil: do not import dirs
   - cmd/snap-confine: fix typo "a pipe"
   - tests: make security-device-cgroups-{devmode,jailmode} work on arm
     devices
   - tests: force test-snapd-daemon-notify exit 0 when the interface is
     not connected
   - overlord/snapstate: run 'remove' hook before 'auto-disconnect'
   - centos: enable SELinux support on CentOS 7
   - apparmor: allow hard link to snap-specific semaphore files
   - tests/lib/pkgdb: disable weak deps on Fedora
   - release: detect too old apparmor_parser
   - tests: improve how the log is checked to see if the system is
     waiting for a reboot
   - cmd, dirs, interfaces/apparmor: update distro identification to
     support ID="archlinux"
   - spread, tests: add Fedora 29
   - cmd/snap-confine: refactor calling snapd tools into helper module
   - apparmor: allow snap-update-ns access to common devices
   - cmd/snap-confine: capture initialized per-user mount ns
   - tests: reduce verbosity around package installation
   - data: set KillMode=process for snapd
   - cmd/snap: handle DNS error gracefully
   - spread, tests: use checkpoints when dumping audit log
   - tests/lib/prepare: make sure that SELinux context of repacked core
     snap is controlled
   - testutils: split checkers, tweak tests
   - tests: fix for tests test-*-cgroup
   - spread: show AVC audits when debugging, start auditd on Fedora
   - spread: drop Fedora 27, add Fedora 29
   - tests/lib/reset: restore context of removed snapd directories
   - testutil: add File{Present,Absent} checkers
   - snap: add new `snap run --trace-exec`
   - tests: fix for failover test on how logs are checked
   - snapctl: add "services"
   - overlord/snapstate: use file timestamp to initialize timer
   - cmd/libsnap: introduce and use sc_strdup
   - interfaces: let NM access ifindex/ifupdown files
   - overlord/snapstate: on refresh, check new rev can read current
   - client, store: don't use store from client (use client from store)
   - tests/main/parallel-install-store: verify installation of more
     than one instance at a time
   - overlord: don't write system key if security setup fails
   - packaging/fedora/snapd.spec: fix bogus date in changelog
   - snapstate: update fontconfig caches on install
   - interfaces/apparmor/backend.go:411:38: regular expression does not
     contain any meta characters (SA6004)
   - asserts/header_checks.go:199:35: regular expression does not
     contain any meta characters (SA6004)
   - run staticcheck every time :-)
   - tests/lib/systemd-escape/main.go:46:14: printf-style function with
     dynamic first argument and no further arguments should use print-
     style function instead (SA1006)
   - tests/lib/fakestore/cmd/fakestore/cmd_run.go:66:15: the channel
     used with signal.Notify should be buffered (SA1017)
   - tests/lib/fakedevicesvc/main.go:55:15: the channel used with
     signal.Notify should be buffered (SA1017)
   - spdx/parser.go:30:1: only the first constant has an explicit type
     (SA9004)
   - overlord/snapstate/snapmgr.go:553:21: printf-style function with
     dynamic first argument and no further arguments should use print-
     style function instead (SA1006)
   - overlord/patch/patch3.go:44:70: printf-style function with dynamic
     first argument and no further arguments should use print-style
     function instead (SA1006)
   - cmd/snap/cmd_advise.go:200:2: empty branch (SA9003)
   - osutil/udev/netlink/conn.go:120:5: ineffective break statement.
     Did you mean to break out of the outer loop? (SA4011)
   - daemon/api.go:992:22: printf-style function with dynamic first
     argument and no further arguments should use print-style function
     instead (SA1006)
   - cmd/snapd/main.go:94:5: ineffective break statement. Did you mean
     to break out of the outer loop? (SA4011)
   - cmd/snap/cmd_userd.go:73:15: the channel used with signal.Notify
     should be buffered (SA1017)
   - cmd/snap/cmd_help.go:102:7: io.Writer.Write must not modify the
     provided buffer, not even temporarily (SA1023)
   - release: probe apparmor features lazily
   - overlord,daemon: mock security backends for testing
   - cmd/libsnap: move apparmor-support to libsnap
   - cmd: drop cruft from snap-discard-ns build rules
   - cmd/snap-confine: use snap-discard-ns ns to discard stale
     namespaces
   - cmd/snap-confine: handle mounted shared /run/snapd/ns
   - many: fix composite literals with unkeyed fields
   - dirs, wrappers, overlord/snapstate: make completion + bases work
   - tests: revert "tests: restore in restore, not prepare"
   - many: validate title
   - snap: make description maximum in runes, not bytes
   - tests: discard mount namespaces in reset.sh
   - tests/lib: sync cla check back from snapcraft
   - Revert "cmd/snap, tests/main/snap-info: highlight the current
     channel"
   - daemon: remove enableInternalInterfaceActions
   - mkversion: use "test -n" rather than "! test -z"
   - run-checks: assorted fixes
   - tests: restore in restore, not in prepare
   - cmd/snap: fix missing newline in "snap keys" error message
   - snap: epoch lists must contain no duplicate entries
   - interfaces/avahi_observe: Fix typo in comment
   - tests: add SPREAD_JOB to the description of
     systemd_create_and_start_unit
   - daemon, vendor: bump github.com/coreos/go-systemd/activation,
     handle API changes
   - Revert "cmd/snap-confine: don't allow mapping lib{uuid,blkid}"
   - packaging/fedora: use %_sysctldir macro
   - cmd/snap-confine: remove unneeded unshare
   - sanity: extend the kernel version check to cover CentOS/RHEL
     kernels
   - wrappers: remove all desktop files from a snap on removal
   - snap: add an explicit check for `epoch: null` loading
   - snap: check max description length in validate
   - spread, tests: add CentOS support
   - cmd/snap-confine: allow mapping more libc shards
   - cmd/snap-discard-ns: add support for --from-snap-confine
   - tests: make tinyproxy support systemd notify
   - tests: fix shellcheck
   - snap, store: rename `snap.Epoch`'s `Unset` to `IsZero`
   - store: add a test for a non-zero epoch refresh (with epoch bump)
   - store: v1 search doesn't send epoch, stop pretending it does
   - snap: make any "0" epoch be Unset, and marshalled to {[0],[0]}
   - overlord/snapstate: amend test should send local revision
   - tests: use mock-gpio.py in enable-disable-units-gpio test
   - snap: enforce minimal snap name len of 2
   - cmd/libsnap: add sc_verify_snap_lock
   - cmd/snap-update-ns: extra debugging of trespassing events
   - userd: force zenity width if the text displayed is long
   - overlord/snapstate, store: always send epochs
   - cmd/snap-confine,snap-update-ns: discard quirks
   - cmd/snap: add nanosleep to blacklisted syscalls when running with
     --strace
   - cmd/snap-update-ns, tests: clean trespassing paths
   - nvidia, interfaces/builtin: OpenCL fixes
   - ifacestate/hotplug: removeDevice helper
   - cmd: install snap-discard-ns in "make hack"
   - overlord/ifacestate: setup security backends phased by backends
     first
   - ifacestate/helpers: added SystemSnapName mapper helper method
   - overlord/ifacestate: set hotplug-key of the connection when
     connecting hotplug slots
   - snapd: allow snap-update-ns to read /proc/version
   - cmd: handle tumbleweed and leap in autogen.sh
   - interfaces/tests: MockHotplugSlot test helper
   - store,daemon: make UserInfo,LoginUser part of the store interface
   - overlord/ifacestate: use remapper when checking if system snap is
     installed
   - tests: fix how pinentry is prepared for new gpg v 2.1 and 2.2
   - packaging/arch: fix bash completions path
   - interfaces/builtin: add device-buttons interface for accessing
     events
   - tests, fakestore: extend refresh tests with parallel installed
     snaps
   - snap, store, overlord/snapshotstate: drop epoch pointers
   - snap: make Epoch default to {[0],[0]} on load from yaml
   - data/completion: pass documented arguments to completion functions
   - tests: skip opensuse from interfaces-openvswitch-support test
   - tests: simple reproducer for snap try and hooks bug
   - snapstate: do not allow classic mode for strict snaps
   - snap: make Epoch's MarshalJSON not simplify
   - store: remove unused currentSnap and currentSnapJSON
   - many: some small doc comment fixes in recent hotplug code
   - ifacestate/udevmonitor: added callback to signal end of
     enumeration
   - cmd/libsnap: add simplified feature flag checker
   - interfaces/opengl: add additional accesses for cuda
   - tests: add core18 only hooks test and fix running core18 only on
     classic
   - sanity, release, cmd/snap: refuse to try to do things on WSL.
   - cmd: make coreSupportsReExec faster
   - overlord/ifacestate: don't remove the dash when generating unique
     slot name
   - cmd/snap-seccomp: add full complement of ptrace constants
   - cmd: update autogen.sh for opensuse
   - interfaces/apparmor: allow access to /run/snap.$SNAP_INSTANCE_NAME
   - spread.yaml: add more systems to the autopkgtest and qemu backends
   - daemon: spool sideloaded snap into blob dir
     overlord/snapstate: address review feedback
   - packaging/opensuse: stop using golang-packaging
   - overlord/snapshots: survive an unknown user
   - wrappers: fix generating of service units with multiple `before`
     dependencies
   - data: run snapd.autoimport.service only after seeding
   - cmd/snap: unhide --name parameter to snap install, tweak help
     message
   - packaging/fedora: Merge changes from Fedora Dist-Git
   - tests/main/snap-service-after-before-install: verify after/before
     in snap install
   - overlord/ifacestate: mark connections disconnected by hotplug with
     hotplug-gone
   - ifacestate/ifacemgr: don't reload hotplug-gone connections on
     startup
   - tests: install dependencies during prepare
   - tests,store,daemon: ensure proxy settings are honored in
     auth/userinfo too
   - tests: core 18 does not support classic confinement
   - tests: add debug output for degraded test
   - strutil: make VersionCompare faster
   - overlord/snapshotstate/backend: survive missing directories
   - overlord/ifacestate: use map[string]*connState when passing conns
     around
   - tests: move fedora 28 to manual
   - overlord/snapshotstate/backend: be more verbose when
     SNAPPY_TESTING=1
   - tests: removing fedora 26 system from spread.yaml
   - tests: linode execution is not needed anymore
   - tests/lib: adjust to changed systemctl behaviour on debian-9
   - tests: fixes and new backend for tests on nested suite
   - strutil: let MatchCounter work with a nil regexp
   - ifacestate/helpers: findConnsForHotplugKey helper
   - many: move regexp.(Must)Compile out of non-init functions into
     variables
   - store: also make snaps downloaded via deltas 0600
   - snap: use Lstat to determine snap size, remove
     ReadSnapInfoExceptSize
   - interfaces/builtin: add adb-support interface
   - tests: fail if install_snap_local fails
   - strutil: add extra test to CommaSeparatedList as suggested by
     mborzecki
   - cmd/snap, daemon, strutil: use CommaSeparatedList to split a CSL
   - ifacestate: optimize disconnect hooks
   - cmd/snap-update-ns: parse the -u <uid> command line option
   - cmd/snap, tests: snapshots for all
   - client, cmd/daemon: allow disabling keepalive, improve degraded
     mode unit tests
   - snap: only show "next" refresh time if its after the hold time
   - overlord/snapstate: run tests for classic snaps even on systems
     that don't support classic
   - overlord/standby: fix a race between standby goroutine and stop
   - cmd/snap-exec: don't fail on some try mode snaps
   - cmd/snap, userd, testutil: tweak DBus tests to use private session
     bus connection
   - cmd: remove remnants of sc_should_populate_mount_ns
   - client, daemon, cmd/snap: indicate that services are socket/timer
     activated
   - cmd/snap-seccomp: only look for PTRACE_GETFPX?REGS where available
   - cmd/snap-confine: remove SC_NS_FAIL_GRACEFULLY
   - snap/pack, cmd/snap: allow specifying the filename of 'snap pack'
   - cmd/snap-discard-ns: add support for per-user mount namespaces
   - cmd/snap-confine: remove stale mount profile along stale namespace
   - data/apt: close stderr when calling snap in the apt install hook.
   - tests/main: fixes for the new shellcheck
   - testutil, cmd/snap: introduce and use testutil.EqualsWrapped and
     fly
   - tests: initial setup for testing current branch on nested vm and
     hotplug management
   - cmd: refactor IPC and lifecycle of the helper process
   - tests/main/parallel-install-store: the store has caught up, do not
     expect failures
   - overlord/snapstate, snap, wrappers: start services in the right
     order during install
   - interfaces/browser-support, cmd/snap-seccomp: Allow read-only
     ptrace, for the Breakpad crash reporter
   - snap,client: use a different exit code for retryable errors
   - overlord/ifacestate: don't conflict on own discard-snap tasks when
     refreshing & doing garbage collection
   - cmd/snap: tweak `snap services` output when there is no services
   - interfaces/many: updates to support k8s worker nodes
   - cmd/snap: gnome-software install via snap:// handler
   - overlord/many: cleanup use of snapName vs. instanceName
   - snapstate: add command-chain to supported featureset
   - daemon, snap: mark screenshots as deprecated
   - interfaces: fix decoding of json numbers for static/dynamic
     attributes* ifstate: fix decoding of json numbers
   - cmd/snap: try not to panic on error from "snap try"
   - tests: new cosmic image for spread tests on gce
   - interfaces/system-key: add parser mtime and only discover features
     on write
   - overlord/snapshotstate/backend: detect path to tar in unit tests
   - tests/unit/gccgo: drop gccgo unit tests
   - cmd: use relative file names in locking APIs
   - interfaces: fix NormalizeInterfaceAttributes, add tests
   - overlord/snapshotstate/backend: fall back on sudo when no runuser
   - cmd/snap-confine: reduce verbosity of debug and error messages
   - systemd: extend Status() to work for socket and timer units
   - interfaces: typo 'allows' for consistency with other ifaces
   - systemd,wrappers: don't start disabled services
   - ifacestate: simplify task chaining in ifacestate.Connect
   - tests: ensure that goa-daemon is off
   - snap/pack, snap/squashfs: remove extra copy before mksquashfs
   - cmd/snap: block 'snap help <cmd> --all'
   - asserts, image: ensure kernel, gadget, base and required-snaps use
     valid snap names
   - apparmor: add unit test for probeAppArmorParser and simplify code
   - interfaces/apparmor: conditionally add explicit deny rules for
     ptrace
   - po: sync translations from launchpad
   - osutil: tweak handling of error adduser errors
   - cmd: rename ns_group to mount_ns
   - tests/main/interfaces-accounts-service: more debugging
   - snap/pack, snap/squashfs: use type to determine mksquashfs args
   - data/systemd, wrappers: tweak system-shutdown helper for core18
   - tests: show list of processes when ifaces-accounts-service fails
   - tests: do not run degraded test in autopkgtest env
   - snap: overhaul validation error messages
   - ifacestate/hooks: only create interface hook tasks if hooks exist
   - osutil: workaround overlayfs on ubuntu 18.10
   - interfaces/home: don't allow snaps to write to $HOME/bin
   - interfaces: improve Attr error further
   - snapstate: tweak GetFeatureFlagBool() to have a default argument
   - many: cleanup remaining parallel installs TODOs
   - image: improve validation of extra snaps


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37.1
   - cmd/snap-confine: add special case for Jenkins
   - tests: workaround missing go dependencies in debian-9
   - daemon, polkit: pid_t is signed
   - interfaces: add display-control interface
   - interfaces: add block-devices interface
   - tests/main/searching: video section got renamed to photo-and-video
   - interfaces/camera: allow reading vendor/etc info from
     /run/udev/data/+usb
   - interfaces/dbus: be less strict about alternations for well-known
     names
   - interfaces/home: allow dac_read_search with 'read: all'
   - interfaces/pulseaudio: allow reading subdirectories of
     /etc/pulse
   - interfaces/system-observe: allow read on
     /proc/locks
   - tests: get test-snapd-dbus-{provider,consumer} from the beta
     channel
   - interfaces/apparmor: mock presence of overlayfs root
   - packaging/{fedora,opensuse,ubuntu}: add /var/lib/snapd/lib/glvnd


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37.2
   - cmd/snap, overlord/snapstate: silently ignore classic flag when a
     snap is strictly confined
   - snap-confine: remove special handling of /var/lib/jenkins
   - cmd/snap-confine: handle death of helper process gracefully
   - snap-confine: fix classic snaps for users with /var/lib/* homedirs
     like jenkins/postgres
   - packaging: disable systemd environment generator on 18.04
   - tests: update smoke/sandbox test for armhf
   - cmd/snap-confine: refactor and cleanup of seccomp loading
   - snap-confine: increase locking timeout to 30s
   - snap-confine: fix incorrect "sanity timeout 3s" message
   - snap: fix hook autodiscovery for parallel installed snaps
   - tests: iterate getting journal logs to support delay on boards on
     daemon-notify test
   - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile
   - interfaces: add u2f-devices interface


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37.3
   - interfaces/seccomp: generate global seccomp profile
   - overlord/snapstate: add some randomness to the catalog refresh
   - tests: add upgrade test from 2.15.2ubuntu1 -> current snapd
   - snap-confine: fix fallback to ubuntu-core
   - packaging: avoid race in snapd.postinst
   - overlord/snapstate: discard mount namespace when undoing 1st link
     snap
   - cmd/snap-confine: allow writes to /var/lib/** again
   - tests: stop catalog-update/apt-hooks test until the catlog refresh
     is randomized
   - debian: ensure leftover usr.lib.snapd.snap-confine is gone


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.37.4
   - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test
   - overlord/ifacestate: fix migration of connections on upgrade from
     ubuntu-core
   - tests: fix upgrade-from-2.15 with kernel 4.15
   - interfaces/seccomp: increase filter precision
   - tests: remove snapweb from tests


author: Zygmunt Bazyli Krynicki <me@zygoon.pl> - 2.37.4-1
changelog:
  - Release 2.37.4 to Fedora (RH#1683795)
  - Fix RPM macro in changelog (rpmlint)
  - Fix non-break space in changelog (rpmlint)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.38
   - overlord/snapstate,: retry less for auto-stuff
   - cmd/snap: fix regression of snap saved command
   - interfaces/builtin: add dev/pts/ptmx access to docker_support
   - overlord/snapstate, store: set a header when auto-refreshing
   - interfaces/builtin: add add exec "/" to docker-support
   - cmd/snap, client, daemon, ifacestate: show a leading attribute of
     a connection
   - interface: avahi-observe: Fixing socket permissions on 4.15
     kernels
   - tests: check that apt works before using it
   - apparmor: support AppArmor 2.13
   - snapstate: restart into the snapd snap on classic
   - overlord/snapstate: during refresh, re-refresh on epoch bump
   - cmd, daemon: split out the common bits of mapLocal and mapRemote
   - cmd/snap-confine: chown private /tmp to root.root
   - cmd/snap-confine: drop uid from random /tmp name
   - overlord/hookstate: apply pending transaction changes onto
     temporary configuration for snapctl get
   - cmd/snap: `snap connections` command
   - interfaces/greengrass_support: update accesses for GGC 1.8
   - cmd/snap, daemon: make the connectivity check use GET
   - interfaces/builtin,/udev: add spec support to disable udev +
     device cgroup and use it for greengrass
   - interfaces/intel-mei: small follow up tweaks
   - ifacestate/tests: fix/improve udev mon test
   - interfaces: add multipass-support interface
   - tests/main/high-user-handling: fix the test for Go 1.12
   - interfaces: add new intel-mei interface
   - systemd: decrease the checker counter before unlocking otherwise
     we can get spurious panics
   - daemon/tests: fix race in the disconnect conflict test
   - cmd/snap-confine: allow moving tasks to pids cgroup
   - tests: enable opensuse tumbleweed on spread
   - cmd/snap: fix `snap services` completion
   - ifacestate/hotplug: integration with udev monitor
   - packaging: build snapctl as a static binary
   - packaging/opensuse: move most logic to snapd.mk
   - overlord: fix ensure before slowness on Retry
   - overlord/ifacestate: fix migration of connections on upgrade from
     ubuntu-core
   - daemon, client, cmd/snap: debug GETs ask aspects, not actions
   - tests/main/desktop-portal-*: fix handling of python dependencies
   - interfaces/wayland: allow wayland server snaps function on classic
     too
   - daemon, client, cmd/snap: snap debug base-declaration
   - tests: run tests on opensuse leap 15.0 instead of 42.3
   - cmd/snap: fix error messages for snapshots commands if ID is not
     uint
   - interfaces/seccomp: increase filter precision
   - interfaces/network-manager: no peer label check for hostname1
   - tests: add a tests for xdg-desktop-portal integration
   - tests: not checking 'tracking channel' after refresh core on
     nested execution
   - tests: remove snapweb from tests
   - snap, wrappers: support StartTimeout
   - wrappers: Add an X-SnapInstanceName field to desktop files
   - cmd/snap: produce better output for help on subcommands
   - tests/main/nfs-support: use archive mode for creating fstab backup
   - many: collect time each task runs and display it with `snap debug
     timings <id>`
   - tests: add attribution to helper script
   - daemon: make ucrednetGet not loop
   - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test
   - features,cmd/libsnap: add new feature "refresh-app-awareness"
   - overlord: fix random typos
   - interfaces/seccomp: generate global seccomp profile
   - daemon/api: fix error case for disconnect conflict
   - overlord/snapstate: add some randomness to the catalog refresh
   - tests: disable trusty-proposed for now
   - tests: fix upgrade-from-2.15 with kernel 4.15
   - interfaces/apparmor: allow sending and receiving signals from
     ourselves
   - tests: split the test interfaces-many in 2 and remove snaps on
     restore
   - tests: use snap which takes 15 seconds to install on retryable-
     error test
   - packaging: avoid race in snapd.postinst
   - overlord/snapstate: discard mount namespace when undoing 1st link
     snap
   - cmd/snap-confine: allow writes to /var/lib/**
   - tests: stop catalog-update test for now
   - tests/main/auto-refresh-private: make sure to actually download
     with the expired macaroon
   - many: save media info when installing, show it when listing
   - userd: handle help urls which requires prepending XDG_DATA_DIRS
   - tests: fix NFS home mocking
   - tests: improve snaps-system-env test
   - tests: pre-cache core on core18 systems
   - interfaces/hotplug: renamed RequestedSlotSpec to ProposedSlot,
     removed Specification
   - debian: ensure leftover usr.lib.snapd.snap-confine is gone
   - image,cmd/snap,tests: introduce support for modern prepare-image
     --snap <snap>[=<channel>]
   - overlord/ifacestate: tweak logic for generating unique slot names
   - packaging: import debian salsa packaging work, add sbuild test and
     use in spead
   - overlord/ifacestate: hotplug-add-slot handler
   - image,cmd/snap:  simplify --classic-arch to --arch, expose
     prepare-image
   - tests: run test snap as user in the smoke test
   - cmd/snap: tweak man output to have no doubled up .TP lines
   - cmd/snap, overlord/snapstate: silently ignore classic flag when a
     snap is strictly confined
   - snap-confine: remove special handling of /var/lib/jenkins
   - cmd/snap-confine: handle death of helper process
   - packaging: disable systemd environment generator on 18.04
   - snap-confine: fix classic snaps for users with /var/lib/* homedirs
   - tests/prepare: prevent console-conf from running
   - image: bootstrapToRootDir => setupSeed
   - image,cmd/snap,tests:  introduce prepare-image --classic
   - tests: update smoke/sandbox test for armhf
   - client, daemon: introduce helper for querying snapd API for the
     list of slot/plug connections
   - cmd/snap-confine: refactor and cleanup of seccomp loading
   - snapstate, snap: allow update/switch requests with risk only
     channel to DTRT
   - interfaces: add network-manager-observe interface
   - snap-confine: increase locking timeout to 30s
   - snap-confine: fix incorrect "sanity timeout 3s" message
   - snap-confine: provide proper error message on sc_sanity_timeout
   - snapd,state: improve error message on state reading failure
   - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile
   - snap: fix reexec from the snapd snap for classic snaps
   - snap: fix hook autodiscovery for parallel installed snaps
   - overlord/snapstate: format the refresh time for the log
   - cmd/snap-confine: add special case for Jenkins
   - snapcraft.yaml: fix XBuildDeb PATH for go-1.10
   - overlord/snapstate: validate instance names early
   - overlord/ifacestate: handler for hotplug-update-slot tasks
   - polkit: cast pid to uint32 to keep polkit happy for now
   - snap/naming: move various name validation helpers to separate
     package
   - tests: iterate getting journal logs to support delay on boards on
     daemon-notify test
   - cmd/snap: fix typo in cmd_wait.go
   - snap/channel: improve channel parsing
   - daemon, polkit: pid_t is signed
   - daemon: introduce /v2/connections snapd API endpoint
   - cmd/snap: small refactor of cmd_info's channel handling
   - overlord/snapstate: use an ad-hoc error when no results
   - cmd/snap: wrap "summary" better
   - tests: workaround missing go dependencies in debian-9
   - daemon: try to tidy up the icon stuff a little
   - interfaces: add display-control interface
   - snapcraft.yaml: fix snap building in launchpad
   - tests: update fedora 29 workers to speed up the whole testing time
   - interfaces: add u2f-devices interface and allow reading udev
     +power_supply:* in hardware-observe
   - cmd/snap-update-ns: save errno from strtoul
   - tests: interfaces tests normalization
   - many: cleanup golang.org/x/net/context
   - tests: add spread test for system dbus interface
   - tests: remove -o pipefail
   - interfaces: add block-devices interface
   - spread: enable upgrade suite on fedora
   - tests/main/searching: video section got renamed to photo-and-video
   - interfaces/home: use dac_read_search instead of dac_override with
     'read: all'
   - snap: really run the RunSuite
   - interfaces/camera: allow reading vendor/etc info from
     /run/udev/data/+usb:*
   - interfaces/dbus: be less strict about alternations for well-known
     names
   - interfaces/home: allow dac_override with 'read:
     all'
   - interfaces/pulseaudio: allow reading subdirectories of
     /etc/pulse
   - interfaces/system-observe: allow read on
     /proc/locks
   - run-checks: ensure we use go-1.10 if available
   - tests: get test-snapd-dbus-{provider,consumer} from the beta
     channel
   - interfaces/apparmor: mock presence of overlayfs root
   - spread: increase default kill-timeout to 30min
   - tests: simplify interfaces-contacts-service test
   - packaging/ubuntu: build with golang 1.10
   - ifacestate/tests: extra test for hotplug-connect handler
   - packaging: make sure that /var/lib/snapd/lib/glvnd is accounted
     for
   - overlord/snapstate/backend: call fontconfig helpers from the new
     'current'
   - kvm: load required kernel modules if necessary
   - cmd/snap: use a fake user for 'run' tests
   - tests: update systems for google sru backend
   - tests: fix install-snaps test by changing the snap info regex
   - interfaces: helpers for sorting plug/slot/connection refs
   - tests: moving core-snap-refresh-on-core test from main to nested
     suite
   - tests: fix daemon-notify test checking denials considering all the
     log lines
   - tests: skip lp-1802591 on "official" images
   - tests: fix listing tests to match "snap list --unicode=never"
   - debian: fix silly typo in the spread test invocation
   - interface: raw-usb: Adding ttyACM ttyACA permissions
   - tests: fix enable-disable-unit-gpio test on external boards
   - overlord/ifacestate: helper API to obtain the state of connections
   - tests: define new "tests/smoke" suite and use that for
     autopkgtests
   - cmd/snap-update-ns: explicitly check for return value from
     parse_arg_u
   - interfaces/builtin/opengl: allow access to NVIDIA VDPAU library
   - tests: auto-clean the test directory
   - cmd/snap: further tweak messaging; add a test
   - overlord/ifacestate: handler for hotplug-connect task
   - cmd/snap-confine: join freezer only after setting up user mount
   - cmd/snap-confine: don't preemptively create .mnt files
   - cmd/snap-update-ns: manually implement isspace
   - cmd/snap-update-ns: let the go parser know we are parsing -u
   - cmd/snap-discard-ns: fix name of user fstab files
   - snapshotstate: don't task.Log without the lock
   - tests: exclude some more slow tests from runs in autopkgtest
   - many: remove .user-fstab files from /run/snapd/ns
   - cmd/libsnap: pass --from-snap-confine when calling snap-update-ns
     as user
   - cmd/snap-update-ns: make freezer mockable
   - cmd/snap-update-ns: move XDG code to dedicated file
   - osutil: add helper for loading fstab from string
   - cmd/snap-update-ns: move existing code around, renaming some
     functions
   - overlord/configstate/configcore: support - and _ in cloud init
     field names
   - * cmd/snap-confine: use makedev instead of MKDEV
   - tests: review/fix the autopkgtest failures in disco
   - overlord: drop old v1 store api support from managers test
   - tests: new test for snapshots with more than 1 user


author: Neal Gompa <ngompa13@gmail.com> - 2.38-1
changelog:
  - Release 2.38 to Fedora (RH#1691296)
  - Switch to officially released main source tarball
  - Drop obsolete snapd-login-service Provides


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.39
   - overlord/ifacestate: update static attributes of "content"
     interface
   - data/selinux: tweak the policy for runuser and s-c, interpret
     audit entries
   - snapshotstate: disable automatic snapshots on core for now
   - overlord/corecfg: make expiration of automatic snapshots
     configurable
   - snapstate: auto-install snapd when needed
   - interfaces: add support for the snapd snap in the dbus backend
   - overlord/snapstate: tweak autorefresh logic if network is not
     available
   - interfaces/apparmor: allow running /usr/bin/od
   - osutil,cmdutil: move CommandFromCore and make it use the snapd
     snap (if available)
   - daemon: also verify snap instructions for multi-snap requests
   - data/selinux: allow snap-confine to mount on top of bin
   - data/selinux: auto transition /var/snap to snappy_var_t
   - cmd: add `snap debug validate-seed <path>` cmd
   - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on
     Fedora
   - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern
   - tests: make snap-connections test work on boards with snaps pre-
     installed
   - tests: check for /snap/core16/current in core16-provided-by-core
   - tests: run livepatch test on 18.04 as well
   - devicestate: deal correctly with the "required" flag on Remodel
   - snapstate,state: add TaskSet.AddAllWithEdges() and use in doUpdate
   - snapstate: add new NoReRefresh flag and use in Remodel()
   - many: allow core as a fallback for core16
   - snapcraft: build static fontconfig in the snapd snap
   - cmd/snap-confine: remove unused sc_open_snap_{update,discard}_ns
   - data/selinux: allow snapd to execute runuser under snappy_t
   - spread, tests: do not leave mislabeled files in restorecon test,
     attempt to catch similar files
   - interfaces: cleanup internal tool lookup in system-key
   - many: move auth.AuthContext to store.DeviceAndAuthContext, the
     implemention to a separate storecontext packageThis:
   - overlord/devicestate: measurements around ensure and related tasks
   - cmd: tweak internal tool lookup to accept more possible locations
   - overlord/snapstate,snapshotstate: create snapshot on snap removal
   - tests: run smoke tests on (almost) pristine systems
   - tests: system disable ssh for config defaults in gadget
   - cmd/debug: integrate new task timings with "snap debug timings"
   - tests/upgrade/basic, packaging/fedoar: restore SELinux context of
     /var/cache/fontconfig, patch pre-2.39 mount units
   - image: simplify prefer local logic  and fixes
   - tests/main/selinux-lxd: make sure LXD from snaps works cleanly
     with enforcing SELinux
   - tests: deny ioctl - TIOCSTI with garbage in high bits
   - overlord: factor out mocking of device service and gadget w.
     prepare-device for registration tests
   - data/selinux, tests/main/selinux-clean: fine tune the policy, make
     sure that no denials are raised
   - cmd/libsnap,osutil: fix parsing of mountinfo
   - ubuntu: disable -buildmode=pie on armhf to fix memory issue
   - overlord/snapstate: inhibit refresh for up to a week
   - cmd/snap-confine: prevent cwd restore permission bypass
   - overlord/ifacestate: introduce HotplugKey type use short key in
     change summaries
   - many: make Remodel() download everything first before installing
   - tests: fixes discovered debugging refresh-app-awareness
   - overlord/snapstate: track time of postponed refreshes
   - snap-confine: set rootfs_dir in sc_invocation struct
   - tests: run create-user on core devices
   - boot: add flag file "meta/force-kernel-extraction"
   - tests: add regression test for systemctl race fix
   - overlord/snapshotstate: helpers for snapshot expirations
   - overlord,tests: perform soft refresh check in doInstall
   - tests: enable tests that write /etc/{hostname,timezone} on core18
   - overlord/ifacestate: implement String() method of
     HotplugDeviceInfo for better logs/messages
   - cmd/snap-confine: move ubuntu-core fallback checks
   - testutil: fix MockCmd for shellcheck 0.5
   - snap, gadget: move gadget read/validation into separate package,
     tweak naming
   - tests: split travis spread execution in 2 jobs for ubuntu and non
     ubuntu systems
   - testutil: make mocked command work with shellcheck from snaps
   - packaging/fedora, tests/upgrade/basic: patch existing mount units
     with SELinux context on upgrade
   - metautil, snap: extract yaml value normalization to a helper
     package
   - tests: use apt via eatmydata
   - dirs,overlord/snapstate: add Soft and Hard refresh checks
   - cmd/snap-confine: allow using tools from snapd snap
   - cmd,interfaces: replace local helpers with cmd.InternalToolPath
   - tweak: fix "make hack" on Fedora
   - snap: add validation of gadget.yaml
   - cmd/snap-update-ns: refactor of profile application
   - cmd/snap,client,daemon,store: layout and sanity tweaks for
     find/search options
   - tests: add workaround for missing cache reset on older snapd
   - interfaces: deal with the snapd snap correctly for apparmor 2.13
   - release-tools: add debian-package-builder
   - tests: enable opensuse 15 and add force-resolution installing
     packages
   - timings: AddTag helper
   - testutil: run mocked commands through shellcheck
   - overlord/snapshotstate: support auto flag
   - client, daemon, store: search by common-id
   - tests: all the systems for google backend with 6 workers
   - interfaces: hotplug nested vm test, updated serial-port interface
     for hotplug.
   - sanity: use proper SELinux context when mounting squashfs
   - cmd/libsnap: neuter variables in cleanup functions
   - interfaces/adb-support: account for hubs on sysfs path
   - interfaces/seccomp: regenerate changed profiles only
   - snap: reject layouts to /lib/{firmware,modules}
   - cmd/snap-confine, packaging: support SELinux
   - selinux, systemd: support mount contexts for snap images
   - interfaces/builtin/opengl: allow access to Tegra X1
   - cmd/snap: make 'snap warnings' output yamlish
   - tests: add check to detect a broken snap on reset
   - interfaces: add one-plus devices to adb-support
   - cmd: prevent umask from breaking snap-run chain
   - tests/lib/pkgdb: allow downgrade when installing packages in
     openSUSE
   - cmd/snap-confine: use fixed private tmp directory
   - snap: tweak parsing errors of gadget updates
   - overlord/ifacemgr: basic measurements
   - spread: refresh metadata on openSUSE
   - cmd/snap-confine: pass sc_invocation instead of numerous args
     around
   - snap/gadget: introduce volume update info
   - partition,bootloader: rename 'partition' package to 'bootloader'
   - interfaces/builtin: add dev/pts/ptmx access to docker_support
   - tests: restore sbuild test
   - strutil: make SplitUnit public, allow negative numbers
   - overlord/snapstate,: retry less for auto-stuff
   - interfaces/builtin: add add exec "/" to docker-support
   - cmd/snap: fix regression of snap saved command
   - cmd/libsnap: rename C enum for feature flag
   - cmd: typedef mountinfo structures
   - tests/main/remodel: clean up before reverting the state
   - cmd/snap-confine: umount scratch dir using UMOUNT_NOFOLLOW
   - timings: add new helpers, Measurer interface and DurationThreshold
   - cmd/snap-seccomp: version-info subcommand
   - errortracker: fix panic in Report if db cannot be opened
   - sandbox/seccomp: a helper package wrapping calls to snap-seccomp
   - many: add /v2/model API, `snap remodel` CLI and spread test
   - tests: enable opensuse tumbleweed back
   - overlord/snapstate, store: set a header when auto-refreshing
   - data/selinux, tests: refactor SELinux policy, add minimal tests
   - spread: restore SELinux context when we mess with system files
   - daemon/api: filter connections with hotplug-gone=true
   - daemon: support returning assertion information as JSON with the
     "json" query parameter
   - cmd/snap: hide 'interfaces' command, show deprecation notice
   - timings: base API for recording timings in state
   - cmd/snap-confine: drop unused dependency on libseccomp
   - interfaces/apparmor: factor out test boilerplate
   - daemon: extract assertions api endpoint implementation into
     api_asserts.go
   - spread.yaml: bump delta reference
   - cmd/snap-confine: track per-app and per-hook processes
   - cmd/snap-confine: make sc_args helpers const-correct
   - daemon: move a function that was between an other struct and its
     methods
   - overlord/snapstate: fix restoring of "old-current" revision config
     in undoLinkSnap
   - cmd/snap, client, daemon, ifacestate: show a leading attribute of
     a connection
   - cmd/snap-confine: call sc_should_use_normal_mode once
   - cmd/snap-confine: populate enter_non_classic_execution_environment
   - daemon: allow downloading snaps blobs via .../file
   - cmd/snap-confine: introduce sc_invocation
   - devicestate: add initial Remodel support
   - snap: remove obsolete license-* fields in the yaml
   - cmd/libsnap: add cgroup-pids-support module
   - overlord/snapstate/backend: make LinkSnap clean up more
   - snapstate: only keep 2 snaps on classic
   - ctlcmd/tests: tests tweaks (followup to #6322)


author: Neal Gompa <ngompa13@gmail.com> - 2.39-1
changelog:
  - Release 2.39 to Fedora (RH#1699087)
  - Enable basic SELinux integration
  - Fix changelog entry to fix build for EPEL 7
  - Exclude bash and POSIX sh shebangs from mangling (LP:1824158)
  - Drop some old pre Fedora 28 logic


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.39.1
   - spread: enable Fedora 30
   - cmd/snap-confine, data/selinux: cherry pick Fedora 30 fixes
   - tests/unit/spread-shellcheck: temporary workaround for SC2251
   - packaging: build empty package on powerpc
   - interfaces: special-case "snapd" in sanitizeSlotReservedForOS*
     helper
   - cmd/snap: mangle descriptions that have indent > terminal width
   - cmd/snap-confine: unshare per-user mount ns once
   - tests: avoid adding spaces to the base snaps names
   - systemd: workaround systemctl show quirks on older systemd
     versions


author: Neal Gompa <ngompa13@gmail.com> - 2.39.1-1
changelog:
  - Release 2.39.1 to Fedora (RH#1715505)
  - Backport SELinux policy fixes for systemd unit mount namespacing (RH#1708991)


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.39.2
   - debian: rework how we run autopkgtests
   - interfaces/docker-support: add overlayfs accesses for ubuntu core
   - data/selinux: permit init_t to remount snappy_snap_t
   - strutil/shlex: fix ineffassign
   - packaging: fix build-depends on powerpc


author: Maciej Borzecki <maciek.borzecki@gmail.com> - 2.39.1-2
changelog:
  - Fix SELinux policy to allow running hooks and services from snaps with bases
    and classic snaps
  - Bump SELinux policy version


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.39.3
    - daemon: increase `shutdownTimeout` to 25s to deal with slow HW
    - spread: run tests against openSUSE 15.1
    - data/selinux: fix policy for snaps with bases and classic snaps


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.40
   - overlord/patch: simplify conditions for re-applying sublevel
     patches for level 6
   - cmd,tests: forcibly discard mount namespace when bases change
   - cmd/snap-confine: handle device cgroup before pivot
   - cmd/snap-apparmor-service: quit if there are no profiles
   - cmd/snap, image: add --target-directory and --basename to 'snap
     download'
   - interfaces: add jack1 implicit classic interface
   - interfaces: miscellaneous policy updates
   - daemon: classic confinement is not supported on core
   - interfaces: bluetooth-control: add mtk BT device node
   - cmd/snap-seccomp: initial support for negative arguments with
     uid/gid caching
   - snap-confine: move seccomp load after permanent privilege drop
   - tests: new profiler snap used to track cpu and memory for snapd
     and snap commands
   - debian: make maintainer scripts do nothing on powerpc
   - gadget: mounted filesystem writer
   - cmd/snap: use padded checkers for snapshot output
   - bootloader: switch to bootloader_test style testing
   - gadget: add a wrapper for generating partitioned images with
     sfdisk
   - tests/main/snap-seccomp-syscalls: add description
   - tests: continue executing on errors either updating the repo db or
     installing dependencies
   - cmd/snap-seccomp/syscalls: add io_uring syscalls
   - systemd: add InstanceMode enumeration to control which systemd
     instance to control
   - netutil: extract socket activation helpers from daemon package.
   - interfaces: spi: update regex rules to accept spi nodes like
     spidev12345.0
   - gadget: fallback device lookup
   - many: add strutil.ElliptLeft, use it for shortening cohorts
   - wrappers: allow sockets under $XDG_RUNTIME_DIR
   - gadget: add wrapper for creating and populating filesystems
   - gadget: add writer for offset-write
   - gadget: support relative symlinks in device lookup
   - snap, snapstate: additional validation of base field
   - many: fix some races and missing locking, make sure UDevMonitor is
     stopped
   - boot: move ExtractKernelAssets
   - daemon, snap: screenshots _only_ shows the deprecation notice,
     from 2.39
   - osutil: add a workaround for overlayfs apparmor as it is used on
     Manjaro
   - snap: introduce GetType() function for snap.Info
   - tests: update systems to be used for during sru validation
   - daemon: increase `shutdownTimeout` to 25s to deal with slow
     HW
   - interfaces/network-manager: move deny ptrace to the connected slot
   - interfaces: allow locking of pppd files
   - cmd/snap-exec: fix snap completion for classic snaps with non
     /usr/lib/snapd libexecdir
   - daemon: expose pprof endpoints
   - travis: disable snap pack on OSX
   - client, cmd/snap: expose the new cohort options for snap ops
   - overlord/snapstate: tweak switch summaries
   - tests: reuse the image created initially for nested tests
     execution
   - tests/lib/nested: tweak assert disk prepare step
   - daemon, overlord/snapstate: support leave-cohort
   - tests/main/appstream-id: collect debug info
   - store,daemon: add client-user-agent support to store.SnapInfo
   - tests: add check for invalid PR titles in the static checks
   - tests: add snap-tool for easier access to internal tools
   - daemon: unexport file{Response,Stream}
   - devicestate: make TestUpdateGadgetOnClassicErrorsOut less racy
   - tests: fix test desktop-portal-filechooser
   - tests: sort commands from DumpCommands in the dumpDbHook
   - cmd/snap: add unit test for "advise-snap --dump-db".
   - bootloader: remove extra mock bootloader implementation
   - daemon: tweak for "add api endpoint for download" PR
   - packaging: fix reproducible build error
   - tests: synchronize journal logs before check logs
   - tests: fix snap service watchdog test
   - tests: use more readable test directory names
   - tests/regression/lp-1805485: update test description
   - overlord: make changes conflict with remodel
   - tests: make sure the snapshot unit test uses a snapshot time
     relative to Now()
   - tests: revert "tests: stop catalog-update/apt-hooks test for now"
   - tests: mountinfo-tool --one prints matches on failure
   - data/selinux: fix policy for snaps with bases and classic snaps
   - debian: fix building on eoan by tweaking golang build-deps
   - packaging/debian-sid: update required golang version to 1.10
   - httputil: handle "no such host" error explicitly and do not retry
     it
   - overlord/snapstate, & fallout: give Install a *RevisionOptions
   - cmd/snap: don't run install on 'snap --help install'
   - gadget: raw/bare structure writer and updater
   - daemon, client, cmd/snap: show cohort key in snap info --verbose
   - overlord/snapstate: add update-gadget task when needed, block
     other changes
   - image: turn a missing default content provider into an error
   - overlord/devicestate: update-gadget-assets task handler with
     stubbed gadget callbacks
   - interface: builtin: avahi-observe/control: update label for
     implicit slot
   - tests/lib/nested: fix multi argument copy_remote
   - tests/lib/nested: have mkfs.ext4 use a rootdir instead of mounting
     an image
   - packaging: fix permissions powerpc docs dir
   - overlord: mock store to avoid net requests
   - debian: rework how we run autopkgtests
   - interface: builtin: avahi-observe/control: allow slots
     implementation also by app snap on classic system
   - interfaces: builtin: utils: add helper function to identify system
     slots
   - interfaces: add missing adjtimex to time-control
   - overlord/snapstate, snap: support base = "none"
   - daemon, overlord/snapstate: give RevisionOptions a CohortKey
   - data/selinux: permit init_t to remount snappy_snap_t
   - cmd/snap: test for a friendly error on 'okay' without 'warnings'
   - cmd/snap: support snap debug timings --startup=.. and measure
     loadState time
   - advise-snap: add --dump-db which dumps the command database
   - interfaces/docker-support: support overlayfs on ubuntu core
   - cmd/okay: Remove err message when warning file not exist
   - devicestate: disallow removal of snaps used in booting early
   - packaging: fix build-depends on powerpc
   - tests: run spread tests on opensuse leap 15.1
   - strutil/shlex: fix ineffassign
   - cmd/snapd: ensure GOMAXPROCS is at least 2
   - cmd/snap-update-ns: detach unused mount points
   - gadget: record gadget root directory used during positioning
   - tests: force removal to prevent restore fails when directory
     doesn't exist on lp-1801955 test
   - overlord: implement store switch remodeling
   - tests: stop using ! for naive negation in shell scripts
   - snap,store,daemon,client: send new "Snap-Client-User-Agent" header
     in Search()
   - osutil: now that we require golang-1.10, use user.LookupGroup()
   - spread.yaml,tests: change MATCH and REBOOT to cmds
   - packaging/fedora: force external linker to ensure static linking
     and -extldflags use
   - timings: tweak the conditional for ensure timings
   - timings: always store ensure timings as long as they have an
     associated change
   - cmd/snap: tweak the output of snap debug timings --ensure=...
   - overlord/devicestate: introduce remodel kinds and
     contextsregistrationContext:
   - snaptest: add helper for mocking snap with contents
   - snapstate: allow removal of non-model kernels
   - tests: change strace parameters on snap-run test to avoid the test
     gets stuck
   - gadget: keep track of the index where structure content was
     defined
   - cmd/snap-update-ns: rename leftover ctx to upCtx
   - tests: add "not" command
   - spread.yaml: use "snap connections" in debug
   - tests: fix how strings are matched on auto-refresh-retry test
   - spread-shellcheck: add support for variants and environment
   - gadget: helper for shifting structure start position
   - cmd/snap-update-ns: add several TODO comments
   - cmd/snap-update-ns: rename ctx to upCtx
   - spread.yaml: make HOST: usage shellcheck-clean
   - overlord/snapstate, daemon: snapstate.Switch now takes a
     RevisionOption
   - tests: add mountinfo-tool
   - many: make snapstate.Update take *RevisionOptions instead of chan,
     rev
   - tests/unit/spread-shellcheck: temporary workaround for SC2251
   - daemon: refactor user ops to api_users
   - cmd/snap, tests: refactor info to unify handling of 'direct' snaps
   - cmd/snap-confine: combine sc_make_slave_mount_ns into caller
   - cmd/snap-update-ns: use "none" for propagation changes
   - cmd/snap-confine: don't pass MS_SLAVE along with MS_BIND
   - cmd/snap, api, snapstate: implement "snap remove --purge"
   - tests: new hotplug test executed on ubuntu core
   - tests: running tests on fedora 30
   - gadget: offset-write: fix validation, calculate absolute position
   - data/selinux: allow snap-confine to do search on snappy_var_t
     directories
   - daemon, o/snapstate, store: support for installing from cohorts
   - cmd/snap-confine: do not mount over non files/directories
   - tests: validates snapd from ppa
   - overlord/configstate: don't panic on invalid configuration
   - gadget: improve device lookup, add helper for mount point lookup
   - cmd/snap-update-ns: add tests for executeMountProfileUpdate
   - overlord/hookstate: don't run handler unless hooksup.Always
   - cmd/snap-update-ns: allow changing mount propagation
   - systemd: workaround systemctl show quirks on older systemd
     versions
   - cmd/snap: allow option descriptions to start with the command
   - many: introduce a gadget helper for locating device matching given
     structure
   - cmd/snap-update-ns: fix golint complaints about variable names
   - cmd/snap: unit tests for debug timings
   - testutil: support sharing-related mount flags
   - packaging/fedora: Merge changes from Fedora Dist-Git and drop EOL
     Fedora releases
   - cmd/snap: support for --ensure argument for snap debug timings
   - cmd,sandbox: tweak seccomp version info handling
   - gadget: record sector size in positioned volume
   - tests: make create-user test support managed devices
   - packaging: build empty package on powerpc
   - overlord/snapstate: perform hard refresh check
   - gadget: add volume level update checks
   - cmd/snap: mangle descriptions that have indent > terminal width
   - cmd/snap-update-ns: rename applyFstab to executeMountProfileUpdate
   - cmd/snap-confine: unshare per-user mount ns once
   - tests: retry govendor sync
   - tests: avoid removing snaps which are cached to speed up the
     prepare on boards
   - tests: fix how the base snap are deleted when there are multiple
     to deleted on reset
   - cmd/snap-update-ns: merge apply functions
   - many: introduce assertstest.SigningAccounts and AddMany test
     helpers
   - interfaces: special-case "snapd" in sanitizeSlotReservedForOS*
     helpers
   - cmd/snap-update-ns: make apply{User,System}Fstab identical
   - gadget: introduce checkers for sanitizing structure updates
   - cmd/snap-update-ns: move apply{Profile,{User,System}Fstab} to same
     file
   - overlord/devicestate: introduce registrationContext
   - cmd/snap-update-ns: add no-op load/save current user profile logic
   - devicestate: set "new-model" on the remodel change
   - devicestate: use deviceCtx in checkGadgetOrKernel
   - many: use a fake assertion model in the device contexts for tests
   - gadget: fix handling of positioning constrains for structures of
     MBR role
   - snap-confine: improve error when running on a not /home homedir
   - devicestate: make Remodel() return a state.Change
   - many: make which store to use contextualThis reworks
     snapstate.Store instead of relying solely on DeviceContext,
     because:
   - tests: enable tests on centos 7 again
   - interfaces: add login-session-control interface
   - tests: extra debug for snapshot-basic test
   - overlord,overlord/devicestate: do without GadgetInfo/KernelInfo in
     devicestate
   - gadget: more validation checks for legacy MBR structure type &
     role
   - osutil: fix TestReadBuildGo test in sbuild
   - data: update XDG_DATA_DIRS via the systemd environment.d mechanism
     too
   - many: do without device state/assertions accessors based on state
     only outside of devicestate/tests
   - interfaces/dbus: fix unit tests when default snap mount dir is not
     /snap
   - tests: add security-seccomp to verify seccomp with arg filtering
   - snapshotstate: disable automatic snapshots on core for now
   - snapstate: auto-install snapd when needed
   - overlord/ifacestate: update static attributes of "content"
     interface
   - interfaces: add support for the snapd snap in the dbus backend*
   - overlord/snapstate: tweak autorefresh logic if network is not
     available
   - snapcraft: also include ld.so.conf from libc in the snapcraft.yml
   - snapcraft.yaml: fix links ld-linux-x86-64.so.2/ld64.so.2
   - overlord: pass a DeviceContext to the checkSnap implementations
   - daemon: add RootOnly flag to commands
   - many:  make access to the device model assertion etc contextual
     via a DeviceCtx hook/DeviceContext interface
   - snapcraft.yaml: include libc6 in snapd
   - tests: reduce snapcraft leftovers from PROJECT_PATH,  temp disable
     centos
   - overlord: make the store context composably backed by separate
     backends for device asserts/info etc.
   - snapstate: revert "overlord/snapstate: remove PlugsOnly"
   - osutil,cmdutil: move CommandFromCore and make it use the snapd
     snap (if available)
   - travis: bump Go version to 1.10.x
   - cmd/snap-update-ns: remove instanceName argument from applyProfile
   - gadget: embed volume in positioned volume, rename fields
   - osutil: use go build-id when no gnu build-id is available
   - snap-seccomp: add 4th field to version-info for golang-seccomp
     features
   - cmd/snap-update-ns: merge computeAndSaveSystemChanges into
     applySystemFstab
   - cmd/snap, client, daemon, store: create-cohort
   - tests: give more time until nc returns on appstream test
   - tests: run spread tests on ubuntu 19.04
   - gadget: layout, smaller fixes
   - overlord: update static attrs when reloading connections
   - daemon: verify snap instructions for multi-snap requests
   - overlord/corecfg: make expiration of automatic snapshots
     configurable (4/4)
   - cmd/snap-update-ns: pass MountProfileUpdate to
     apply{System,User}Fstab
   - snap: fix interface bindings on implicit hooks
   - tests: improve how snaps are cached
   - cmd/snap-update-ns: formatting tweaks
   - data/selinux: policy tweaks
   - cmd/snap-update-ns: move locking to the common layer
   - overlord: use private YAML inside several tests
   - cmd/snap, store, image: support for cohorts in "snap download"
   - overlord/snapstate: add timings to critical task handlers and the
     backend
   - cmd: add `snap debug validate-seed <path>` cmd
   - state: add possible error return to TaskSet.Edge()
   - snap-seccomp: use username regex as defined in osutil/user.go
   - osutil: make IsValidUsername public and fix regex
   - store: serialize the acquisition of device sessions
   - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on
     Fedora
   - many: move Device/SetDevice to devicestate, start of making them
     pluggable in storecontext
   - overlord/snapstate: remove PlugsOnly
   - interfaces/apparmor: allow running /usr/bin/od
   - spread: add qemu:fedora-29-64
   - tests: make test parallel-install-interfaces work for boards with
     pre-installed snaps
   - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern
   - spread.yaml: add qemu:centos-7-64
   - overlord/devicestate: extra measurements related to
     populateStateFromSeed
   - cmd/snap-update-ns: move Assumption to {System,User}ProfileUpdate
   - cmd/libsnap: remove fringe error function
   - gadget: add validation of cross structure overlap and offset
     writes
   - cmd/snap-update-ns: refactor of profile application (3/N)
   - data/selinux: tweak the policy for runuser and s-c, interpret
     audit entries
   - tests: fix spaces issue in the base snaps names to remove during
     reset phase
   - tests: wait for man db cache is updated before after install snapd
     on Fedora
   - tests: extend timeout of sbuild test


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.41
   - overlord/snapstate: revert track-risk behavior
   - tests: fix snap info test
   - httputil: rework protocol error detection
   - gadget: do not error on gadget refreshes with multiple volumes
   - i18n, vendor, packaging: drop github.com/ojii/gettext.go, use
     github.com/snapcore/go-gettext
   - snapstate: validate all system-usernames before creating them
   - mkversion.sh: fix version from git checkouts
   - interfaces/network-{control,manager}: allow 'k' on
     /run/resolvconf/**
   - interfaces/wayland,x11: allow reading an Xwayland Xauth file
   - interfaces: k8s worker node updates
   - debian: re-enable systemd environment generator
   - many: create system-usernames user/group if both don't exist
   - packaging: fix symlink for snapd.session-agent.socket
   - tests: change cgroups so that LXD doesn't have to
   - interfaces/network-setup-control: allow dbus netplan apply
     messages
   - tests: add /var/cache/snapd to the snapd state to prevent error on
     the store
   - tests: add test for services disabled during refresh hook
   - many: simpler access to snap-seccomp version-info
   - snap: cleanup some tests, clarify some errorsThis is a follow up
     from work on system usernames:
   - osutil: add osutil.Find{Uid,Gid}
   - tests: use a different archive based on the spread backend on go-
     build test
   - cmd/snap-update-ns: fix pair of bugs affecting refresh of snap
     with layouts
   - overlord/devicestate: detect clashing concurrent (ongoing, just
     finished) remodels or changes
   - interfaces/docker-support: declare controls-device-cgroup
   - packaging: fix removal of old apparmor profile
   - store: use track/risk for "channel" name when parsing store
     details
   - many: allow 'system-usernames' with libseccomp > 2.4 and golang-
     seccomp > 0.9.0
   - overlord/devicestate, tests: use gadget.Update() proper, spread
     test
   - overlord/configstate/configcore: allow setting start_x=1 to enable
     CSI camera on RPi
   - interfaces: remove BeforePrepareSlot from commonInterface
   - many: support system-usernames for 'snap_daemon' user
   - overlord/devicestate,o/snapstate: queue service commands before
     mark-seeded and other final tasks
   - interfaces/mount: discard mount ns on backend Remove
   - packaging/fedora: build on RHEL8
   - overlord/devicestate: support seeding a classic system with the
     snapd snap and no core
   - interfaces: fix test failure in gpio_control_test
   - interfaces, policy: remove sanitize helpers and use minimal policy
     check
   - packaging: use %systemd_user_* macros to enable session agent
     socket according to presets
   - snapstate, store: handle 429s on catalog refresh a little bit
     better
   - tests: part4 making tests work on ubuntu-core-18
   - many: drop snap.ReadGadgetInfo wrapper
   - xdgopenproxy: update test API to match upstream
   - tests: show why sbuild failed
   - data/selinux: allow mandb_t to search /var/lib/snapd
   - tests: be less verbose when checking service status
   - tests: set sbuild test as manual
   - overlord: DeviceCtx must find the remodel context for a remodel
     change
   - tests: use snap info --verbose to check for base
   - sanity: unmount squashfs with --lazy
   - overlord/snapstate: keep current track if only risk is specified
   - interfaces/firewall-control: support nft routing expressions and
     device groups
   - gadget: support for writing symlinks
   - tests: mountinfo-tool fail if there are no matches
   - tests: sync journal log before start the test
   - cmd/snap, data/completion: improve completion for 'snap debug'
   - httputil: retry for http2 PROTOCOL_ERROR
   - Errata commit: pulseaudio still auto-connects on classic
   - interfaces/misc: updates for k8s 1.15 (and greengrass test)
   - tests: set GOTRACEBACK=1 when running tests
   - cmd/libsnap: don't leak memory in sc_die_on_error
   - tests: improve how the system is restored when the upgrade-
     from-2.15 test fails
   - interfaces/bluetooth-control: add udev rules for BT_chrdev devices
   - interfaces: add audio-playback/audio-record and make pulseaudio
     manually connect
   - tests: split the sbuild test in 2 depending on the type of build
   - interfaces: add an interface granting access to AppStream metadata
   - gadget: ensure filesystem labels are unique
   - usersession/agent: use background context when stopping the agent
   - HACKING.md: update spread section, other updates
   - data/selinux: allow snap-confine to read entries on nsfs
   - tests: respect SPREAD_DEBUG_EACH on the main suite
   - packaging/debian-sid: set GOCACHE to a known writable location
   - interfaces: add gpio-control interface
   - cmd/snap: use showDone helper with 'snap switch'
   - gadget: effective structure role fallback, extra tests
   - many: fix unit tests getting stuck
   - tests: remove installed snap on restore
   - daemon: do not modify test data in user suite
   - data/selinux: allow read on sysfs
   - packaging/debian: don't md5sum absent files
   - tests: remove test-snapd-curl
   - tests: remove test-snapd-snapctl-core18 in restore
   - tests: remove installed snap in the restore section
   - tests: remove installed test snap
   - tests: correctly escape mount unit path
   - cmd/Makefile.am: support building with the go snap
   - tests: work around classic snap affecting the host
   - tests: fix typo "current"
   - overlord/assertstate: add Batch.Precheck to check for the full
     validity of the batch before Commit
   - tests: restore cpuset clone_children clobbered by lxd
   - usersession: move userd package to usersession/userd
   - tests: reformat and fix markdown in snapd-state.md
   - gadget: select the right updater for given structure
   - tests: show stderr only if it exists
   - sessionagent: add a REST interface with socket activation
   - tests: remove locally installed core in more tests
   - tests: remove local revision of core
   - packaging/debian-sid: use correct apparmor Depends for Debian
   - packaging/debian-sid: merge debian upload changes back into master
   - cmd/snap-repair: make sure the goroutine doesn't stick around on
     timeout
   - packaging/fedora: github.com/cheggaaa/pb is no longer used
   - configstate/config: fix crash in purgeNulls
   - boot, o/snapst, o/devicest: limit knowledge of boot vars to boot
   - client,cmd/snap: stop depending on status/status-code in the JSON
     responses in client
   - tests: unmount leftover /run/netns
   - tests: switch mount-ns test to manual
   - overlord,daemon,cmd/snapd:  move expensive startup to dedicated
     StartUp methods
   - osutil: add EnsureTreeState helper
   - tests: measure properties of various  mount namespaces
   - tests: part2 making tests work on ubuntu-core-18
   - interfaces/policy: minimal policy check for replacing
     sanitizeReservedFor helpers (1/2)
   - interfaces: add an interface that grants access to the PackageKit
     service
   - overlord/devicestate: update gadget update handlers and mocks
   - tests: add mountinfo-tool --ref-x1000
   - tests: remove lxd / lxcfs if pre-installed
   - tests: removing support for ubuntu cosmic on spread test suite
   - tests: don't leak /run/netns mount
   - image: clean up the validateSuite
   - bootloader: remove "Dir()" from Bootloader interface
   - many: retry to reboot if snapd gets restarted before expected
     reboot
   - overlord: implement re-registration remodeling
   - cmd: revert PR#6933 (tweak of GOMAXPROCS)
   - cmd/snap: add snap unset command
   - many: add Client-User-Agent to "SnapAction" install API call
   - tests: first part making tests run on ubuntu-core-18
   - hookstate/ctlcmd: support hidden commands in snapctl
   - many: replace snapd snap name checks with type checks (3/4)
   - overlord: mostly stop needing Kernel/CoreInfo, make GadgetInfo
     consider a DeviceContext
   - snapctl: handle unsetting of config options with "!"
   - tests: move core migration snaps to tests/lib/snaps dir
   - cmd/snap: handle unsetting of config options with "!"
   - cmd/snap, etc: add health to 'snap list' and 'snap info'
   - gadget: use struct field names when intializing data in mounted
     updater unit tests
   - cmd/snap-confine: bring /lib/firmware from the host
   - snap: set snapd snap type (1/4)
   - snap: add checks in validate-seed for missing base/default-
     provider
   - daemon: replace shutdownServer with net/http's native shutdown
     support
   - interfaces/builtin: add exec "/bin/runc" to docker-support
   - gadget: mounted filesystem updater
   - overlord/patch: simplify conditions for re-applying sublevel
     patches for level 6
   - seccomp/compiler: adjust test case names and comment for later
     changes
   - tests: fix error doing snap pack running failover test
   - tests: don't preserve size= when rewriting mount tables
   - tests: allow reordering of rewrite operations
   - gadget: main update routine
   - overlord/config: normalize nulls to support config unsetting
     semantics
   - snap-userd-autostart: don't list as a startup application on the
     GUI
   - tests: renumber snap revisions as seen via writable
   - tests: change allocation for mount options
   - tests: re-enable ns-re-associate test
   - tests: mountinfo-tool allow many --refs
   - overlord/devicestate: implement reregRemodelContext with the
     essential re-registration logic
   - tests: replace various numeric mount options
   - gadget: filesystem image writer
   - tests: add more unit tests for mountinfo-tool
   - tests: introduce mountinfo-tool --ref feature
   - tests: refactor mountinfo-tool rewrite state
   - tests: allow renumbering mount namespace identifiers
   - snap: refactor and explain layout blacklisting
   - tests: renumber snap revisions as seen via hostfs
   - daemon, interfaces, travis: workaround build ID with Go 1.9, use
     1.9 for travis tests
   - cmd/libsnap: add sc_error_init_{simple,api_misuse}
   - gadget: make raw updater handle shifted structures
   - tests/lib/nested: create WORK_DIR before accessing it
   - cmd/libsnap: rename SC_LIBSNAP_ERROR to SC_LIBSNAP_DOMAIN
   - cmd,tests: forcibly discard mount namespace when bases change
   - many: introduce healthstate, run check-health
     post-(install/refresh/try/revert)
   - interfaces/optical-drive: add scsi-generic type 4 and 5 support
   - cmd/snap-confine: exit from helper when parent dies


