# changelog

author: Tom Callaway <spot@fedoraproject.org> - 4.0.2-5
changelog:
  - make cups a "Recommends" instead of a "Requires" (bz1875165)
  - even though f31 uses a forked spec file, reflect the systemlapack change there here


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.2rc1-19
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Peter Hanecak <hany@hany.sk> - 9.12.2-1
changelog:
  - Upstream release of 9.12.2
  - Small spec tweaks
  - Updated xsltproc network read patch
  - Added patch for setup_option in v84
  - Build now requires also po4a


author: Hanecak <hany@hany.sk> - 9.15.1-2
changelog:
  - Custom /usr/lib/ocf/resource.d/linbit/drbd is broken, upstream variant works
    (#1908265, PR by robert)


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.24.1-3
changelog:
  - Set default settings in main.go
  - Embedded assets in the binary
  - Added a logrotate file
  - Fix: rhbz#1902496


author: Troy Dawson <tdawson@redhat.com> - 1:19.12.2-1.1
changelog:
  - Recommends: cdrskin from EPEL8, because cdrskin isn't in RHEL8
  - Put k3btheme.knsrc in correct directory


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 1.2.1-15
changelog:
  - Remove /usr/share/kservices5/settings-system-administration.desktop
  - Add Requires: plasma-systemsettings >= 5.16.90 (which now ships this file)


author: Mattia Verga <mattia.verga@email.it> - 3.2.1-2
changelog:
  - Backport patch from upstream to fix #1517718
  - Use --with-html in find_lang
  - Change appdata dir to metainfo


author: Rex Dieter <rdieter@fedoraproject.org> - 5.17.5-2
changelog:
  - -devel: drop bogus dep on -libs subpkg (#1790695), move more potd-devel stuff here
  - .spec cleanup


author: Rex Dieter <rdieter@fedoraproject.org> - 5.9.1-2
changelog:
  - Requires: hicolor-icon-theme
  - fix ChangeLog encoding
  - validate kipiplugins.desktop
  - add .spec comment clarifying purpose of Obsoletes: kipi-plugins (upgrade path only)


author: Troy Dawson <tdawson@redhat.com> - 19.08.3-1.1
changelog:
  - 19.08.3 for RHEL8 due to older version of poppler
  - libical (and thus kcalendarcore) not on all arches for RHEL8


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.5-2
changelog:
  - missing StartupWMClass=konversation in .desktop file (#1590462)
  - move script/desktop modifiations to %prep (ie, like patching)
  - fix byte-compile warning (python2 vs python3)


author: Mattia Verga <mattia.verga@tiscali.it> - 3.2.0-1
changelog:
  - Update to stable release 3.2.0
  - Soname bump to libkpmcore.so.6
  - Remove kf5-kio-devel dependency
  - Add udftools as recommended package


author: Dodji Seketeli <dodji@seketeli.org> - 1.5-2
changelog:
  - Apply patches
    Support-having-several-debuginfo-search-dirs-for-a-b.patch and
    Add-a-fail-no-debug-info-to-abidiff.patch


author: Mathieu Bridon <bochecha@daitauha.fr> - 1.5-4
changelog:
  - Remove unnecessary dependencies: python3-unittest2 and wget which
    was referred to twice.
  - Better group dependencies: Many dependencies are only required for
    fedabipkgdiff, so let's put them under the right conditional.
  - Split fedabipkgdiff to its own subpackage
      This tool is very specific, and only useful to Fedora developers,
      not all developers.  It also has lots of dependencies which aren't
      required by the other tools.  Splitting it to its own specialized
      package makes the main package, with its library and utilities,
      much lighter.


author: Dodji Seketeli <dodji@redhat.com> - 1.6-1
changelog:
  - Update to upstream 1.6
  - Removed patches that are now upstream
    Support-having-several-debuginfo-search-dirs-for-a-b.patch
    Add-a-fail-no-debug-info-to-abidiff.patch


author: Dodji Seketeli <dodji@redhat.com> - 1.8-1
changelog:
  - Update to upstream 1.8
  - Add "make check-self-compare" to the regression tests
  - Add BuildRequires python3-koji


author: Dodji Seketeli <dodji@redhat.com> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
      This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Rex Dieter <rdieter@fedoraproject.org> - 5.18.4-2
changelog:
  - patch to workaround "Qt applications lose system theme if launched via dbus activation" (#1754395)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.6.0-9
changelog:
  - Reformat whitespace
  - Convert URLs from HTTP to HTTPS
  - Add BR on make for
    https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
  - Use macros to reduce repetition throughout
  - Use modern macros (license, make_build/make_install)
  - Make -devel dependency on main package strict (arched)
  - Add -doc subpackage with finite state machine pseudocode
  - Fix so version symlinking
  - Add patch from Debian for upstream issue PRI-186 (libpri fails to build with
    GCC 10)
  - Honor system rpm configuration build flags, including hardening flags
  - Run some tests


author: David Cantrell <dcantrell@redhat.com> - 1.1-1
changelog:
  - Formatting fixes in Makefile help output
  - Begin config file restructuring starting with rpminspect-data-generic
  - Support multiple configuration files.
  - Docs work in progress.
  - Only fail the annocheck inspection for RESULT_VERIFY.
  - Read debuginfo if available when running the 'annocheck' inspection.
  - Add the '%files' inspection to librpminspect
  - Add __attribute__((__sentinel__)) to the run_cmd() prototype
  - Add test suite cases for the '%files' inspection.
  - Added the 'types' inspection to compare MIME types between builds.
  - Update TODO file
  - Update the MISSING file
  - s/rpminspect.yaml/generic.yaml/ in the Makefile and README
  - Skip debuginfo and debugsource packages in the 'types' inspection
  - Add test_types.py to the test suite
  - Note the 'types' inspection generic.yaml
  - Modify add_entry() in init.c to skip duplicate entries
  - Start GitHub Action workflow files for rpminspect.
  - Install meson in ci-ubuntu.yml
  - Change 'nls' option in meson_options.txt to a boolean
  - Install gettext for ci-ubuntu
  - Add more build dependencies to ci-ubuntu.yml
  - Drop the 'method' parameter from dependency() lines in meson.build
  - Split xmlrpc libs to separate dependency() lines in meson.build
  - More xmlrpc updates for meson.build and lib/meson.build
  - Try to support systems with xmlrpc-c without the pkgconfig file.
  - Changes to build on Ubuntu, specifically the GitHub Actions system
  - Syntax error in ci-ubuntu.yml
  - Add ci-fedora.yml for GitHub Action CI on Fedora
  - Fix errors in ci-fedora.yml
  - Put all of the ci-ubuntu.yml steps in ci-ubuntu.yml
  - Remove install-libmandoc.sh and ubuntu-pkgs.sh helper scripts.
  - Install python3-setuptools in ci-ubuntu.yml
  - Install rpm-build in ci-fedora.yml
  - Install libxmlrpc-core-c3-dev in ci-ubuntu.yml
  - Disable ci-ubuntu.yml for now, enable code coverage in ci-fedora.yml
  - Remove Travis-CI files.
  - coverage fixes for ci-fedora.yml
  - Install git in ci-fedora.yml
  - Enable manual dispatching of the CI on Fedora tests
  - Remove actionspanel thing for GitHub Actions, drop Coveralls block
  - Comment the ci-fedora-yaml file
  - Fix the 'elf' inspection and test_elf.py on Ubuntu
  - Enable the ci-ubuntu GitHub Action again
  - Check all return values of getcwd()
  - Ignore installed Python modules with pip3 in ci-ubuntu.yml
  - Build 'execstack' test program with -Wl,-z,lazy
  - Add ci-centos8.yml to enable CI on CentOS 8 as a GitHub Action
  - s/centos8:latest/centos8/g
  - Trying 'container: centos:centos8'
  - Drop 'sudo' from ci-centos8.yml
  - Rename README to README.md
  - Enable GitHub Action for CI on CentOS 7
  - Drop -I from the pip install line in ci-centos7.yml
  - Use the 'make instreqs' target for install test suite deps.
  - Add back 'dnf -y install 'dnf-command(builddep)'' to ci-fedora.yml
  - Nope, that doesn't do it.  Just install make in ci-fedora.yml first
  - More 'make instreqs' fixes.
  - s/scripts/utils/g in the Makefile
  - s/TOPDIR/topdir/g in the Makefile
  - Install make in ci-centos7.yml
  - Move REQS and PIP lists out of the Makefile to files in osdep/
  - '^$$' -> '^$'
  - Slightly different sourcing of the osdep/ files
  - Set OS using := in the Makefile
  - Make the reqs.txt files in osdep/ contain all deps
  - linux-headers -> linux-headers-$(uname -r) for Ubuntu
  - Remove html401-dtds from osdep/centos8/reqs.txt
  - Use `` instead of $() since this list goes through make(1)
  - Does $(shell uname -r) work in this case?
  - More osdep/ work and simplification.
  - Rename 'osdep' to 'osdeps'
  - meson patches for opensuse
  - Move mandoc installation to post.sh in osdep/ubuntu
  - Add GitHub Action for CI on OpenSUSE
  - opensuse:latest -> opensuse/leap:latest
  - Install tar in ci-opensuse.yml
  - Install gzip in ci-opensuse.yml
  - More fixes for ci-opensuse.yml
  - Small fixes to determine-os.sh
  - ci: Add Python linting jobs
  - ShellCheck fixes for the regress/ scripts
  - ci: Add ShellCheck to lint shell scripts
  - Adjust how the Makefile reports unknown operating system.
  - Just check $ID in determine-os.sh for opensuse
  - Use pip for PIP_CMD on opensuse-leap
  - Update the centos images before doing anything else.
  - Install curl in opensuse-leap
  - Get 'rc' from Fedora on opensuse and copy it to /usr/local
  - Install kernel-default-devel for opensuse CI
  - Move the 'uses' part of the centos CI jobs to the first step
  - ShellCheck fixes for the utils/ scripts.
  - Some flake8 fixes in test/, using yapf
  - Combine all of the GitHub Actions CI runs in to ci.yml
  - Manually install rpmfluff on CentOS 7; pip is failing here
  - Use rpmfluff-0.5.7 explicitly for centos7
  - Use rpmfluff-0.5.6 on centos7
  - OK, let's try rpmfluff-0.5 for centos7
  - Last try, rpmfluff-0.5.4.1 for centos7
  - Back to trying to manually install rpmfluff for centos7
  - Style the Python code with Black
  - Add the Black formatting commit to blame revision ignore list
  - OK, just copy rpmfluff.py in place
  - Make sure to manually install rpmfluff-0.5.7.1 for centos7
  - Don't assume we have a header or even a list of files (#161)
  - python: flake8: drop * imports
  - python: flake8: wrap long lines to less than 100 characters
  - python: flake8: drop unused imports
  - python: flake8: remove unused local variables
  - python: flake8: add PEP8 whitespace
  - python: flake8: mark in-line bash scripts as raw strings
  - python: rename several duplicate test cases
  - ci: merge style workflows
  - Adjust rpminspect.spec.in for file moves and default changes.
  - Return the reallybadword to the metadata tests
  - Adjust test_metadata.LosingVendorCompareKojiBuild to expect VERIFY
  - The shared libmandoc check should not look for a static libmandoc
  - Update the AUTHORS file
  - Rename ipv6_blacklist to forbidden_ipv6_functions
  - Rename stat-whitelist to fileinfo
  - Rename 'caps_whitelist' to 'caps' and drop the use of 'whitelist'
  - Rename abi-checking-whitelist/ to abi/ in /usr/share/rpminspect
  - Rename 'version-whitelist/' to 'rebaseable/' in /usr/share/rpminspect
  - Rename "political-whitelist/" to "politics/" in /usr/share/rpminspect
  - Drop unnecessary method re-definitions in base test classes
  - Use super() rather than explicitly calling the parent class
  - Call configFile() on object instance rather than using the parent
    class
  - Upload coverage report to codecov
  - Improve the error reporting for test result checking
  - Convert to AUTHORS.md file, add Makefile target to generate it.
  - Introduce the 'movedfiles' inspection and a lot of other fixes (#155)
  - AUTHORS -> AUTHORS.md in rpminspect.spec.in
  - Add basic tests for the filesize inspection
  - Multiply the file size difference before dividing
  - Update README.md
  - Update README.md (more Markdown changes)
  - Update POTFILES and rpminspect.pot
  - chmod 0755 test_filesize.py
  - tests: optionally check the result message
  - tests: add further filesize tests for shrinking files
  - inspect_filesize: drop extra - from the message about file shrinkage
  - Enable 'permissions' inspect for single build analysis.
  - Add 24 new test cases to cover the 'permissions' inspection.
  - chmod 0755 test_permissions.py
  - Make sure all RESULT_INFO results are set to NOT_WAIVABLE
  - Fix some specific problems with the 'permissions' inspection.
  - Pass "-r GENERIC" to rpminspect in the TestCompareKoji class
  - Add 12 more permissions test cases for setuid file checks
  - Update TODO list
  - Update test_symlink.py tests for new waiver_auth values
  - Add a fedora-rawhide job and renamed 'fedora' to fedora-stable
  - Update the rpminspect.pot translation template
  - Relicense librpminspect (lib/ and include/) as LGPL-3.0-or-later
  - Ignore .tox/ subdirectory
  - License the rpminspect-data-generic subpackage as CC-BY-4.0
  - Add a copy of the Apache 2.0 license for the 5 files in librpminspect
  - Update the License tag in the spec file and the %license lines
  - Add debian-testing as a CI workflow; add missing osdeps files.
  - Update determine-os.sh to handle Fedora stable and rawhide
  - Drop the use of 'sudo' in ci.yml
  - sudo required for Ubuntu CI job, install make for debian-testing
  - See what $ID is set to in determine-os.sh
  - Workaround a bug in meson 0.55.0 for Fedora CI jobs
  - Add 'debian' catch to utils/determine-os.sh
  - Rename 'osdeps/debian-testing/' to 'osdeps/debian/'
  - Add opensuse-tumbleweed to the CI job list
  - Add libmagic-dev to osdeps/debian/reqs.txt
  - Fix memory corruption in init_rpminspect
  - Add comment clarifying the License tag in the spec file.
  - If check_results() raises AssertionError, dump the JSON output
  - Fix test_changelog.py test cases that are failing.
  - Fix UnbalancedChangeLogEditCompareKoji
  - Handle rpm versions with x.y.z.w version numbers in test_symlinks.py
  - Fix mandoc build problems in opensuse-tumbleweed CI job
  - Install gcovr using pip on opensuse-tumbleweed
  - Handle systems that lack pkg-config files for libelf and libcap
  - Add archlinux CI job in GitHub Actions
  - Forgot --noconfirm on the 'pacman -Syu' line.
  - Add missing DESC_MOVEDFILES block to inspection_desc()
  - More minor fixes to the Arch Linux CI job.
  - Install gcovr with pip for the Arch Linux CI job.
  - Support building on systems that lack <sys/queue.h>
  - Add detection for <sys/queue.h> to meson.build
  - Ensure an int is used for snprintf() in inspect_manpage_path()
  - WIP: 'abidiff' inspection
  - Only report permissions change if there is a mode_diff (#181)
  - Fix -Werror failures in inspect_abidiff.c
  - Add sl_run_cmd() to librpminspect.
  - Add get_arches() to librpminspect
  - WIP: abidiff inspection
  - Some minor edits to the README.md file
  - More minor updates to the README.md file
  - Replace get_arches() with init_arches()
  - Add test_addedfiles.py to the integration test suite
  - Expand find_one_peer() to soft match versioned ELF shared libraries
  - Add the beginnings of the 'abidiff' inspection code.
  - Report out findings in the abidiff inspection.
  - Update the test suite to cover rpmfluff 0.6
  - libmandoc configure workaround needed on Debian too
  - shellcheck fixes for the scripts in utils/
  - Add abi.c, the code that reads in the ABI compat level files (#144)
  - Be sure to close the open file before exiting init_fileinfo()
  - Python formatting cleanups
  - Add --diff to the Python format checker
  - Add new setting to abidiff section of the config file
  - Add -n/--no-rebase command line option to disable rebase detection
  - Store size_threshold as a long int rather than a char *
  - Check abidiff(1) results against the ABI compat level definitions
    (#144)
  - Add 'apt-get -y install libgcc-s1:i386' to pre.sh for Debian
  - Add integration test cases for the abidiff inspection (#144)
  - Add 'dpkg --configure -a' to pre.sh for debian
  - Install libterm-readline-perl-perl for debian CI
  - Install libabigail for Fedora and CentOS CI jobs
  - libgcc-s1:i386 -> lib32gcc-s1 for debian CI
  - Install libabigail for opensuse-leap, opensuse-tumbleweed, and arch CI
  - Install libabigail for debian and ubuntu CI
  - Install libabigail-dev for debian and ubuntu, not libabigail
  - Install libabigail-tools on opensuse-leap and opensuse-tumbleweed
  - Install libabigail-git for arch linux CI
  - Move free_argv_table() to runcmd.c
  - Install 'abigail-tools' for debian-testing and ubuntu CI
  - Install libabigail using the Arch User Repo on arch CI
  - Explain the osdeps/ subdirectory.
  - No, just clone libabigail from git and build it manually on arch
  - Add beginning of kmidiff inspection, put ABI functions in abi.c
  - Read list of possible kernel executable filenames from the config
    file.
  - Drop abidiff_ and kmidiff_ from extra_args; add kernel_filenames
  - Just call the abidiff and kmidiff extra args settings "extra_args"
  - Define 'kmi_ignore_pattern' in the config file.
  - Handle builds that lack all debuginfo packages (#186)
  - Do not assume peer->after_hdr exists (#187)
  - Store copy of original pointer in strsplit() to free at the end.
  - Use mmap() and strsplit() in read_file() rather than a getline() loop
  - Fix memory leaks in abi.c functions
  - open() failure in readfile() is not fatal, just return NULL
  - Add utils/gate.sh
  - Have check_abi() pass back the ABI compat level found
  - Update descriptions for abidiff and kmidiff inspections
  - Hook up the kmidiff inspection.
  - Use read_file() in init_fileinfo() and init_caps()
  - Use read_file() in validate_desktop_contents()
  - Use read_file() in disttag_driver()
  - Adjust how init_fileinfo() and init_caps() iterate over file contents
  - Fix 'tox -e format' style problems found.
  - Avoid comparing elf files that are not shared libraries
  - Support --kmi-whitelist in the kmidiff inspection
  - Trim worksubdir from paths in reported abidiff and kmidiff commands
  - Remove the kmi_ignore_pattern setting for the config file.
  - Create include/queue.h to replace the _COMPAT_QUEUE blocks everywhere
  - Update AUTHORS.md
  - Report metadata changes for rebased packages as INFO
  - Do not fail the specname inspection when given a non-SRPM
  - For passing upstream inspections, do not report a remedy string.
  - Do not fail the lostpayload inspections if it only gives INFO messages
  - Clarify unapproved license message in the license inspection
  - Use FOPEN_MAX for nopenfd parameter in nftw() calls
  - Make sure to close open file descriptors from get_elf() calls.
  - Include 'src' architecture in the rpminspect runs in gate.sh
  - Make sure kmidiff is listed in the spec file
  - TODO updates
  - Update rpminspect.pot and POTFILES for translations


author: David Cantrell <dcantrell@redhat.com> - 1.2-1
changelog:
  - For BUILDTYPE=release, generate the correct type of changelog
  - Minor logic error in submit-koji-builds.sh
  - Fix reading existing spec file in submit-koji-builds.sh
  - Bump development build version to 1.2
  - Use is_rebase() in the 'upstream' inspection
  - Use rpmtdSetIndex() and rpmtdGetString() in get_header_value()
  - Add get_rpmtag_fileflags() to files.c and call from extract_rpm()
  - Use correct Version and Release values in download_build()
  - #include <rpm/rpmfiles.h> -> #include <rpm/rpmfi.h>
  - Add the 'config' inspection to librpminspect
  - Rephrase reporting messages in the 'config' inspection
  - Add the 'doc' inspection to librpminspect
  - Update TODO list
  - Minor updates to try and make gate.sh more reliable
  - Add config and doc to the inspections list in generic.yaml
  - Rename the '%files' inspection to 'files' (#194)
  - Modify baseclass.py to allow 'before' and 'after' NVR tuples
  - Use the after tuple to override the NVR in test_abidiff.py
  - Use the after tuple to override the NVR in test_upstream.py
  - Write rpminspect output to a file in the test suite
  - Add 28 test cases for the 'config' inspection
  - Fix the errors in the 'config' inspection found by the test suite
  - Fix Python problems in the test suite reported by black and flake8
  - Add Makefile targets for black and flake8
  - One more formatting issue reporting by Python black in test_config.py
  - More 'python black' formatting errors reported for test_config.py
  - https://mandoc.bsd.lv -> http://mandoc.bsd.lv
  - Add a -D/--dump-config option to rpminspect(1)
  - Use global reported variable in 'config' inspection
  - Fix reporting errors in the 'doc' inspection
  - Add test_doc.py with 'doc' inspection test cases
  - Ignore flake8 W291 in test_doc.py where we explicitly want whitepsace.
  - Add init_rebaseable() to librpminspect
  - Check the rebaseable list in is_rebase() in librpminspect
  - Update TODO list
  - Define a new GitHub Action using utils/gate.sh
  - Update the README.md file
  - shellcheck fixes for utils/gate.sh
  - Use utils/find-ninja.sh to determine what ninja-build command to use
  - Install fedora-packager for the gate.yml GitHub Action
  - Remove before and after variables from gate.sh; unused
  - Remove unnecessary basename() calls in inspect_upstream.c
  - Do not assume an or bn contain strings in is_rebase() (#196)
  - Adjust what things run during with GitHub Actions
  - Add get_rpm_header_string_array() to librpminspect
  - Replace init_source() with get_rpm_header_string_array() in
    inspect_upstream.c
  - free() allocated output string in inspect_changelog.c on errors
  - s/10240/16384/ in archive_read_open_filename() call in unpack.c
  - Add the 'patches' inspection to librpminspect
  - Add uncompress_file() to librpminspect
  - Add filecmp() and use that in place of zcmp/bzcmp/xzcmp
  - README.md updates
  - Restrict some GitHub Actions to source code and test suite changes.
  - Only enable lz4 compression if ARCHIVE_FILTER_LZ4 is defined
  - Go ahead and wrap the rest of the libarchive compression filters
  - s/class Test/class /g
  - Make sure uncompress_file() supports xz compression
  - Handle more compressed file MIME types.
  - Add test_changedfiles.py to the test suite.
  - Add test_patches.py with test cases for the 'patches' inspection
  - flake8 fixes in the test suite
  - Python format fixes for test_changedfiles.py
  - Python format fixes in test_patches.py
  - More Python format fixes for test_patches.py
  - Remove unnecessary 'a' in DESC_PATCHES
  - Better explanation as to why the EmptyLicenseTag tests are skipped.
  - Test suite cleanup; add rebase= and same= to TestCompareSRPM
  - Black formatting fixes for the test suite.
  - Remove unused imports in test_upstream.py
  - Revert black fixes for test_config.py
  - Fix my email address in test suite source files.
  - Support single package URLs for before and after builds (#190)
  - Handle invalid/missing RPMs in get_product_release()
  - Use warnx(), errx(), and err() in src/rpminspect.c
  - Modify submit-koji-builds.sh to pick up all pkg-git branches.
  - Update the rpminspect.1 man page to reflect current status.
  - Update translation template files in po/
  - Support relative directory paths for the -w option (#188)
  - Implement the 'virus' inspection and add test cases for it.
  - Update po/ template files
  - Python formatting fixes for test_virus.py
  - Update the osdeps/*/reqs.txt files.
  - More osdeps updates for the clamav needs
  - Install 'xz' for the 'style' GitHub Action
  - Fix a variety of small memory leaks in librpminspect
  - Stop the freshclam service for the Ubuntu gate job
  - Support slightly older versions of libclamav in inspect_virus.c
  - Add the 'politics' inspection to librpminspect.
  - In tearDown() in the test suite, call rpmfluff clean() methods
  - Add test_politics.py with 'politics' inspection test cases
  - Python black format fixes for test_politics.py
  - 'it should added' -> 'it should be added'
  - Increase the runtime timeout for test_virus.py
  - Install the timeout decorator on all OSes in our GitHub Actions
  - Install timeout-decorator with pip, not timeout
  - Expand librpminspect with support for SHA-224, SHA-384, and SHA-512
  - Define DEFAULT_MESSAGE_DIGEST in constants.h and use that.
  - Replace some fprintf()/fflush() calls with warn()/warnx() calls
  - Rename the 'DT_NEEDED' inspection to 'dsodeps'
  - Rename 'LTO' inspection to 'lto'
  - Update translation template and fix two incorrect error strings.
  - Note all valid message digests in data/politics/GENERIC
  - Improve reporting in the patches inspection
  - Only fail 'changedfiles' for VERIFY and higher results
  - If 'removedfiles' only reports INFO messages, pass the inspection
  - If 'addedfiles' only reports INFO results, pass the inspection
  - If 'patches' only reports INFO results, pass the inspection
  - No need to check value of allowed in permissions_driver()
  - Do not let INFO results fail the 'doc' inspection.
  - Do not let all INFO results in 'upstream' fail the inspection
  - Fix RPMFILE_FLAGS handling for %config files (#221)
  - Still report file changes in the 'config' inspection for rebases
  - Correctly check RPMFILE_DOC flags in the 'doc' inspection
  - Include rpm/rpmfi.h insted of rpm/rpmfiles.h
  - Only check regular files and symlinks in the 'doc' inspection
  - Remove unnecessary assert() statements in filecmp()
  - Remove incorrect warnx() reportings based on filecmp() return value
  - Exclude man pages from the 'doc' inspection
  - Honor the -a command line option for downloads as well as runtime
    (#233)
  - Allow optional 'commands' block in the config file
  - Fix assorted non-critical memory leaks
  - Remove unnecessary warn() after a failed stat()
  - Additional memory fixes for the abidiff inspection (#244)
  - Free ELF symbol names list in find_lto_symbols() before return
  - Followup to the memory fixes for read_abi() and free_abi()
  - Prevent invalid pointer dereferencing in invalid result in 'patches'
    (#245)
  - Avoid reusing the same abi_pkg_entry_t struct in read_abi()
  - Allow a set of excluded path prefixes in 'pathmigration'
  - Fix the YAML parsing for the pathmigration block
  - Document the BRANCHES variable for 'make koji'
  - Include the .asc file when submitting new Koji builds (#191)
  - Include the .asc file in the spec file


author: David Cantrell <dcantrell@redhat.com> - 1.3-2
changelog:
  - Small change to the way Koji builds are submitted
  - Move the master branch to version 1.3
  - Drop DEBUG_PRINT in process_table()
  - Add doc/git.md to explain source control conventions
  - Change Suggests to Recommends in the spec file
  - Add kmidiff and politics to the inspections section of generic.yaml
  - Update TODO list
  - Use warn() for non-fatal errors in mkdirp()
  - Require libabigail >= 1.8 in rpminspect.spec.in
  - Enable multiple --headers-dir1 and --headers-dir2 args in abidiff
  - Swap out some more fprintf()/fflush() reporting with warn()
  - #include <err.h> in peers.c and rmtree.c
  - On fedora-rawhide CI jobs, install gcc-c++ and gcc-plugin-devel
  - Disable fedora-rawhide GitHub Action for now
  - Correctly handle the -w option on rpminspect(1) (#256)
  - Drop the relative path handling for the -w option
  - Build and install rc from source on opensuse-leap
  - Update doc/git.md on how to track upstream
  - Add .github/ and osdeps/ directories to extra-ci.yml
  - Build and install rc from source on opensuse-tumbleweed
  - Adjust curl(1) command line used for rc in opensuse CI jobs
  - Trying to figure out why the opensuse jobs produce curl errors
  - Another slight change to post.sh for the opensuse-leap CI job
  - s/PowerTools/powertools/g in the centos8 PKG_CMD definition
  - The output of html2text on opensuse systems is different
  - Rename HEADER_MAN to HEADER_MANPAGE (#264)
  - Add inspection_header_to_desc() to librpminspect (#264)
  - Add xunit output format support (#264)
  - Support the new output function call syntax (#264)
  - Move init_elf_data() to readelf.c, move data to struct rpminspect
  - Update inspect_elf.c unit tests for librpminspect changes
  - Remove check_ipv6() from inspect_elf.c
  - Create the badfuncs inspection
  - Update po/ translation files.
  - Add badfuncs test cases
  - Forgot to commit test_badfuncs.py.
  - Fix flake8 and black errors with test_badfuncs.py
  - Skip debug packages in filesize, display changes correctly
  - Fix spurious execstack failure
  - Fix YAML config file reading for BLOCK_INSPECTIONS
  - Expand dump_config() to cover all config file settings
  - Minor spelling fixes in strfuncs.c and making code explicit
  - Simplify list_to_string() so it handles 1-elements lists right
  - Add abspath() to canonicalize path strings
  - In the doc inspection, only show diff(1) output for text files (#254)
  - Add strxmlescape() to strfuncs.c in librpminspect (#264)
  - Output the system-out xunit portion as CDATA (#264)
  - Slightly change how strxmlescape() works
  - Add the runpath inspection to librpminspect
  - Rename test/data/lto.c to test/data/mathlib.c
  - Handle the empty string case in abspath()
  - Expand dump_cfg() to show runpath settings
  - Fix block handling problems in the YAML config reader
  - Note single builds cannot be rebases in is_rebase()
  - Hook up the driver for the runpath inspection
  - Install patchelf for tests on fedora and centos
  - Update TODO and README.md files
  - Pass -D to rpminspect in the test suite
  - Add integration tests for the runpath inspection
  - Python flake8 and black fixes in test_runpath.py
  - Fixes for GitHub Actions on Debian and Ubuntu
  - Disable Rust support in pip modules, more extra-ci fixes
  - Update pip and setuptools on debian and ubuntu CI jobs
  - Make sure pip is updated on debian, centos7, and centos8
  - Fixes for extra-ci on arch, centos7, centos8, and debian
  - Adjust docker image names for opensuse and arch
  - Add Gentoo Linux to the Extra CI set
  - extra-ci.yml typo fix for the gentoo job
  - Use gentoo/stage3 as the container for the gentoo CI job
  - Disable opensuse-tumbleweed and archlinux CI jobs
  - Make sure util/determine-os.sh picks up Gentoo Linux
  - In the runpath inspection, fail if DT_RPATH and DT_RUNPATH exist
  - Use pip install for PIP_CMD on gentoo
  - Set PIP_CMD to pip install -user for gentoo
  - Handle a NULL from list_to_string() in abspath()
  - Do not match path prefixes in the runpath inspection
  - Python black fixes for test_runpath.py
  - Stop doing an emerge --sync on the gentoo CI job
  - Replace emerge --sync with a manual portage sync
  - Use emerge-webrsync to update portage on gentoo
  - Add uthash and move the file matching code to it.
  - Typo fix in README.md
  - Fix some memory leaks found by valgrind
  - Create mkannounce.sh to help make release announcements easier
  - shellcheck fixes for mkannounce.sh


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.0.0-1
changelog:
  - Update to 3.0.0.
  - Language bindings are separate projects now.
  - Update spec file and remove obsolete constructs.


author: Timotheus Pokorra <timotheus.pokorra@solidcharity.com> - 6.6.0-7
changelog:
  - another bootstrap build for Epel 8, but this time without the mono-find-provides and mono-find-requires scripts since they are still provided by rpm-build in Epel8


author: Stephen Smoogen <smooge@fedoraproject.org> - 4.4.3-3
changelog:
  - Fix BZ#1672027
  - Patch for daemon did not have enough endif in them. However test looks superfluous


author: Stephen Smoogen <smooge@fedoraproject.org> - 4.4.3-4
changelog:
  - Fix BZ#1674258 add explicite User and Group to systemctl startup.
  - Problem was missed because some config files had this set in them


author: Didier Fabert <didier.fabert@gmail.com> 1.26.0-2
changelog:
  - Fix wrong drop for el6 support
  - Fix tmpfiles (from /var/run to /run)
  - Minors changes in netdata.conf


author: Miroslav Lichvar <mlichvar@redhat.com> - 3.6.1-7
changelog:
  - build setlayout with hardening LDFLAGS (#1548830)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements


author: Owen Taylor <otaylor@redhat.com> - 4.10.1-3
changelog:
  - Pass Qt paths we'll use in the file list to CMake
  - In %check, augment PKG_CONFIG_PATH, not replace it


author: Rex Dieter <rdieter@fedoraproject.org> - 5.18.4.1-2
changelog:
  - use bundled synaptics header, if needed
  - fix feature macro logic (defined as 1 on, undefined off)
  - minor cleanups


author: Miro Hrončok <mhroncok@redhat.com> - 1.3.1-8
changelog:
  - Subpackage python2-lazy-object-proxy has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.2-4
changelog:
  - Subpackage python2-wrapt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:4.12.3-5
changelog:
  - Use new CMake macros where available
  - Backport minor fixes from upstream git
    - Correct flag reset code for ssq monitor option
    - Fix typo in xrootd-config help
  - Prevent deadlock in Python bindings
  - Fix plugin path in xrootd-http.cfg for 32 bit architectures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.0.1-1
changelog:
  - Update to version 5.0.1
  - Remove conditionals for building on EPEL 6
  - Drop patches (accepted upstream or previously backported)
  - Fix 32 bit compilation (format error)
  - Fix compilation on ARM, PPC and S390X (char is unsigned)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.0.2-1
changelog:
  - Update to version 5.0.2
  - Drop patches (accepted upstream or previously backported)
  - Obsolete xrdhttpvoms in xrootd-voms package


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.0.3-2
changelog:
  - Correct plugin version checking to prevent false negatives
  - Fix wrong section number in xrootdfs.1 manpage
  - Use system tinyxml library (unbundle)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1:5.1.0-1
changelog:
  - Update to version 5.1.0
  - Add scitokens plugin package
  - Packages xrootd-ceph and xrdcl-http are now built as part of xrootd
    replacing the packages built from separate source rpms
  - Drop patches (accepted upstream or previously backported)
  - Fix broken library dependency in XrdCeph cmake file


author: Julio Gonzalez Gil <git@juliogonzalez.es> - 1.85-1
changelog:
  - Fix cross building (https://github.com/s3fs-fuse/s3fs-fuse/pull/985)
    * 985-fix-cross-building.patch
  - Support Curl lower than 7.25 (CentOS6) (https://github.com/s3fs-fuse/s3fs-fuse/pull/987)
    * 987-support-curl-lt-7-25.patch
  - Update to 1.85 from https://github.com/s3fs-fuse/s3fs-fuse
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.85


author: Julio Gonzalez Gil <git@juliogonzalez.es> - 1.86-1
changelog:
  - Update to 1.86 from https://github.com/s3fs-fuse/s3fs-fuse (#1798716)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.86
  - Removed:
    * 985-fix-cross-building.patch
    * 987-support-curl-lt-7-25.patch


author: Julio Gonzalez Gil <packages@juliogonzalez.es> - 1.86-2
changelog:
  - Add mailcap dependency removed at 1.84-2. as it is in fact a runtime
    dependency to take care of mime-types on upload
    https://github.com/s3fs-fuse/s3fs-fuse/issues/1217


author: Julio Gonzalez Gil <packages@juliogonzalez.es> - 1.87-1
changelog:
  - Update to 1.87 from https://github.com/s3fs-fuse/s3fs-fuse (#1867722)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.87


author: Julio González Gil <packages@juliogonzalez.es> - 1.88-1
changelog:
  - Update to 1.88 from https://github.com/s3fs-fuse/s3fs-fuse (#1914881)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.88


author: Julio González Gil <packages@juliogonzalez.es> - 1.89-1
changelog:
  - Update to 1.89 from https://github.com/s3fs-fuse/s3fs-fuse (#1932107)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.89


author: Rex Dieter <rdieter@fedoraproject.org> - 0.18.0-1
changelog:
  - sddm-0.18.0
  - rebase libXau patch (upstream pull request #863)
  - drop patch from upstream pull request #735
  - drop remnants of 02-fedora sddm theme


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.48
   - osutil: add KernelCommandLineKeyValue
   - devicestate: implement boot.HasFDESetupHook
   - boot/makebootable.go: set snapd_recovery_mode=install at image-
     build time
   - bootloader: use ForGadget when installing boot config
   - interfaces/raw_usb: allow read access to /proc/tty/drivers
   - boot: add scaffolding for "fde-setup" hook support for sealing
   - tests: fix basic20 test on arm devices
   - seed: make a shared seed system label validation helper
   - snap: add new "fde-setup" hooktype
   - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test
   - secboot,cmd/snap-bootstrap: fix degraded mode cases with better
     device handling
   - boot,dirs,c/snap-bootstrap: avoid InstallHost* at the cost of some
     messiness
   - tests/nested/manual/refresh-revert-fundamentals: temporarily
     disable secure boot
   - snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all
     boot modes
   - many: address degraded recover mode feedback, cleanups
   - tests: Use systemd-run on tests part2
   - tests: set the opensuse tumbleweed system as manual in spread.yaml
   - secboot: call BlockPCRProtectionPolicies even if the TPM is
     disabled
   - vendor: update to current secboot
   - cmd/snap-bootstrap,o/devicestate: use a secret to pair data and
     save
   - spread.yaml: increase number of workers on 20.10
   - snap: add new `snap recovery --show-keys` option
   - tests: minor test tweaks suggested in the review of 9607
   - snapd-generator: set standard snapfuse options when generating
     units for containers
   - tests: enable lxd test on ubuntu-core-20 and 16.04-32
   - interfaces: share /tmp/.X11-unix/ from host or provider
   - tests: enable main lxd test on 20.10
   - cmd/s-b/initramfs-mounts: refactor recover mode to implement
     degraded mode
   - gadget/install: add progress logging
   - packaging: keep secboot/encrypt_dummy.go in debian
   - interfaces/udev: use distro specific path to snap-device-helper
   - o/devistate: fix chaining of tasks related to regular snaps when
     preseeding
   - gadget, overlord/devicestate: validate that system supports
     encrypted data before install
   - interfaces/fwupd: enforce the confined fwupd to align Ubuntu Core
     ESP layout
   - many: add /v2/system-recovery-keys API and client
   - secboot, many: return UnlockMethod from Unlock* methods for future
     usage
   - many: mv keys to ubuntu-boot, move model file, rename keyring
     prefix for secboot
   - tests: using systemd-run instead of manually create a systemd unit
     - part 1
   - secboot, cmd/snap-bootstrap: enable or disable activation with
     recovery key
   - secboot: refactor Unlock...IfEncrypted to take keyfile + check
     disks first
   - secboot: add LockTPMSealedKeys() to lock access to keys
     independently
   - gadget: correct sfdisk arguments
   - bootloader/assets/grub: adjust fwsetup menuentry label
   - tests: new boot state tool
   - spread: use the official image for Ubuntu 20.10, no longer an
     unstable system
   - tests/lib/nested: enable snapd logging to console for core18
   - osutil/disks: re-implement partition searching for disk w/ non-
     adjacent parts
   - tests: using the nested-state tool in nested tests
   - many: seal a fallback object to the recovery boot chain
   - gadget, gadget/install: move helpers to install package, refactor
     unit tests
   - dirs: add "gentoo" to altDirDistros
   - update-pot: include file locations in translation template, and
     extract strings from desktop files
   - gadget/many: drop usage of gpt attr 59 for indicating creation of
     partitions
   - gadget/quantity: tweak test name
   - snap: fix failing unittest for quantity.FormatDuration()
   - gadget/quantity: introduce a new package that captures quantities
   - o/devicestate,a/sysdb: make a backup of the device serial to save
   - tests: fix rare interaction of tests.session and specific tests
   - features: enable classic-preserves-xdg-runtime-dir
   - tests/nested/core20/save: check the bind mount and size bump
   - o/devicetate,dirs: keep device keys in ubuntu-save/save for UC20
   - tests: rename hasHooks to hasInterfaceHooks in the ifacestate
     tests
   - o/devicestate: unit test tweaks
   - boot: store the TPM{PolicyAuthKey,LockoutAuth}File in ubuntu-save
   - testutil, cmd/snap/version: fix misc little errors
   - overlord/devicestate: bind mount ubuntu-save under
     /var/lib/snapd/save on startup
   - gadget/internal: tune ext4 setting for smaller filesystems
   - tests/nested/core20/save: a test that verifies ubuntu-save is
     present and set up
   - tests: update google sru backend to support groovy
   - o/ifacestate: handle interface hooks when preseeding
   - tests: re-enable the apt hooks test
   - interfaces,snap: use correct type: {os,snapd} for test data
   - secboot: set metadata and keyslots sizes when formatting LUKS2
     volumes
   - tests: improve uc20-create-partitions-reinstall test
   - client, daemon, cmd/snap: cleanups from #9489 + more unit tests
   - cmd/snap-bootstrap: mount ubuntu-save during boot if present
   - secboot: fix doc comment on helper for unlocking volume with key
   - tests: add spread test for refreshing from an old snapd and core18
   - o/snapstate: generate snapd snap wrappers again after restart on
     refresh
   - secboot: version bump, unlock volume with key
   - tests/snap-advise-command: re-enable test
   - cmd/snap, snapmgr, tests: cleanups after #9418
   - interfaces: deny connected x11 plugs access to ICE
   - daemon,client: write and read a maintenance.json file for when
     snapd is shut down
   - many: update to secboot v1 (part 1)
   - osutil/disks/mockdisk: panic if same mountpoint shows up again
     with diff opts
   - tests/nested/core20/gadget,kernel-reseal: add sanity checks to the
     reseal tests
   - many: implement snap routine console-conf-start for synchronizing
     auto-refreshes
   - dirs, boot: add ubuntu-save directories and related locations
   - usersession: fix typo in test name
   - overlord/snapstate: refactor ihibitRefresh
   - overlord/snapstate: stop warning about inhibited refreshes
   - cmd/snap: do not hardcode snapshot age value
   - overlord,usersession: initial notifications of pending refreshes
   - tests: add a unit test for UpdateMany where a single snap fails
   - o/snapstate/catalogrefresh.go: don't refresh catalog in install
     mode uc20
   - tests: also check snapst.Current in undo-unlink tests
   - tests: new nested tool
   - o/snapstate: implement undo handler for unlink-snap
   - tests: clean systems.sh helper and migrate last set of tests
   - tests: moving the lib section from systems.sh helper to os.query
     tool
   - tests/uc20-create-partitions: don't check for grub.cfg
   - packaging: make sure that static binaries are indeed static, fix
     openSUSE
   - many: have install return encryption keys for data and save,
     improve tests
   - overlord: add link participant for linkage transitions
   - tests: lxd smoke test
   - tests: add tests for fsck; cmd/s-b/initramfs-mounts: fsck ubuntu-
     seed too
   - tests: moving main suite from systems.sh to os.query tool
   - tests: moving the core test suite from systems.sh to os.query tool
   - cmd/snap-confine: mask host's apparmor config
   - o/snapstate: move setting updated SnapState after error paths
   - tests: add value to INSTANCE_KEY/regular
   - spread, tests: tweaks for openSUSE
   - cmd/snap-confine: update path to snap-device-helper in AppArmor
     profile
   - tests: new os.query tool
   - overlord/snapshotstate/backend: specify tar format for snapshots
   - tests/nested/manual/minimal-smoke: use 384MB of RAM for nested
     UC20
   - client,daemon,snap: auto-import does not error on managed devices
   - interfaces: PTP hardware clock interface
   - tests: use tests.backup tool
   - many: verify that unit tests work with nosecboot tag and without
     secboot package
   - wrappers: do not error out on read-only /etc/dbus-1/session.d
     filesystem on core18
   - snapshots: import of a snapshot set
   - tests: more output for sbuild test
   - o/snapstate: re-order remove tasks for individual snap revisions
     to remove current last
   - boot: skip some unit tests when running as root
   - o/assertstate: introduce
     ValidationTrackingKey/ValidationSetTracking and basic methods
   - many: allow ignoring running apps for specific request
   - tests: allow the searching test to fail under load
   - overlord/snapstate: inhibit startup while unlinked
   - seed/seedwriter/writer.go: check DevModeConfinement for dangerous
     features
   - tests/main/sudo-env: snap bin is available on Fedora
   - boot, overlord/devicestate: list trusted and managed assets
     upfront
   - gadget, gadget/install: support for ubuntu-save, create one during
     install if needed
   - spread-shellcheck: temporary workaround for deadlock, drop
     unnecessary test
   - snap: support different exit-code in the snap command
   - logger: use strutil.KernelCommandLineSplit in
     debugEnabledOnKernelCmdline
   - logger: fix snapd.debug=1 parsing
   - overlord: increase refresh postpone limit to 14 days
   - spread-shellcheck: use single thread pool executor
   - gadget/install,secboot: add debug messages
   - spread-shellcheck: speed up spread-shellcheck even more
   - spread-shellcheck: process paths from arguments in parallel
   - tests: tweak error from tests.cleanup
   - spread: remove workaround for openSUSE go issue
   - o/configstate: create /etc/sysctl.d when applying early config
     defaults
   - tests: new tests.backup tool
   - tests: add tests.cleanup pop sub-command
   - tests: migration of the main suite to snaps-state tool part 6
   - tests: fix journal-state test
   - cmd/snap-bootstrap/initramfs-mounts: split off new helper for misc
     recover files
   - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for
     same IP addr
   - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for
     building snapd
   - boot, gadget, bootloader: observer preserves managed bootloader
     configs
   - tests/nested/manual: add uc20 grade signed cloud-init test
   - o/snapstate/autorefresh.go: eliminate race when launching
     autorefresh
   - daemon,snapshotstate: do not return "size" from Import()
   - daemon: limit reading from snapshot import to Content-Length
   - many: set/expect Content-Length header when importing snapshots
   - github: switch from ::set-env command to environment file
   - tests: migration of the main suite to snaps-state tool part 5
   - client: cleanup the Client.raw* and Client.do* method families
   - tests: moving main suite to snaps-state tool part 4
   - client,daemon,snap: use constant for snapshot content-type
   - many: fix typos and repeated "the"
   - secboot: fix tpm connection leak when it's not enabled
   - many: scaffolding for snapshots import API
   - run-checks: run spread-shellcheck too
   - interfaces: update network-manager interface to allow
     ObjectManager access from unconfined clients
   - tests: move core and regression suites to snaps-state tool
   - tests: moving interfaces tests to snaps-state tool
   - gadget: preserve files when indicated by content change observer
   - tests: moving smoke test suite and some tests from main suite to
     snaps-state tool
   - o/snapshotstate: pass set id to backend.Open, update tests
   - asserts/snapasserts: introduce ValidationSets
   - o/snapshotstate: improve allocation of new set IDs
   - boot: look at the gadget for run mode bootloader when making the
     system bootable
   - cmd/snap: allow snap help vs --all to diverge purposefully
   - usersession/userd: separate bus name ownership from defining
     interfaces
   - o/snapshotstate: set snapshot set id from its filename
   - o/snapstate: move remove-related tests to snapstate_remove_test.go
   - desktop/notification: switch ExpireTimeout to time.Duration
   - desktop/notification: add unit tests
   - snap: snap help output refresh
   - tests/nested/manual/preseed: include a system-usernames snap when
     preseeding
   - tests: fix sudo-env test
   - tests: fix nested core20 shellcheck bug
   - tests/lib: move to new directory when restoring PWD, cleanup
     unpacked unpacked snap directories
   - desktop/notification: add bindings for FDO notifications
   - dbustest: fix stale comment references
   - many: move ManagedAssetsBootloader into TrustedAssetsBootloader,
     drop former
   - snap-repair: add uc20 support
   - tests: print all the serial logs for the nested test
   - o/snapstate/check_snap_test.go: mock osutil.Find{U,G}id to avoid
     bug in test
   - cmd/snap/auto-import: stop importing system user assertions from
     initramfs mnts
   - osutil/group.go: treat all non-nil errs from user.Lookup{Group,}
     as Unknown*
   - asserts: deserialize grouping only once in Pool.AddBatch if needed
   - gadget: allow content observer to have opinions about a change
   - tests: new snaps-state command - part1
   - o/assertstate: support refreshing any number of snap-declarations
   - boot: use test helpers
   - tests/core/snap-debug-bootvars: also check snap_mode
   - many/apparmor: adjust rules for reading profile/ execing new
     profiles for new kernel
   - tests/core/snap-debug-bootvars: spread test for snap debug boot-
     vars
   - tests/lib/nested.sh: more little tweaks
   - tests/nested/manual/grade-signed-above-testkeys-boot: enable kvm
   - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install,
     recover modes
   - overlord: explicitly set refresh-app-awareness in tests
   - kernel: remove "edition" from kernel.yaml and add "update"
   - spread: drop vendor from the packed project archive
   - boot: fix debug bootloader variables dump on UC20 systems
   - wrappers, systemd: allow empty root dir and conditionally do not
     pass --root to systemctl
   - tests/nested/manual: add test for grades above signed booting with
     testkeys
   - tests/nested: misc robustness fixes
   - o/assertstate,asserts: use bulk refresh to refresh snap-
     declarations
   - tests/lib/prepare.sh: stop patching the uc20 initrd since it has
     been updated now
   - tests/nested/manual/refresh-revert-fundamentals: re-enable test
   - update-pot: ignore .go files inside .git when running xgettext-go
   - tests: disable part of the lxd test completely on 16.04.
   - o/snapshotstate: tweak comment regarding snapshot filename
   - o/snapstate: improve snapshot iteration
   - bootloader: lk cleanups
   - tests: update to support nested kvm without reboots on UC20
   - tests/nested/manual/preseed: disable system-key check for 20.04
     image
   - spread.yaml: add ubuntu-20.10-64 to qemu
   - store: handle v2 error when fetching assertions
   - gadget: resolve device mapper devices for fallback device lookup
   - tests/nested/cloud-init-many: simplify tests and unify
     helpers/seed inputs
   - tests: copy /usr/lib/snapd/info to correct directory
   - check-pr-title.py * : allow "*" in the first part of the title
   - many: typos and small test tweak
   - tests/main/lxd: disable cgroup combination for 16.04 that is
     failing a lot
   - tests: make nested signing helpers less confusing
   - tests: misc nested changes
   - tests/nested/manual/refresh-revert-fundamentals: disable
     temporarily
   - tests/lib/cla_check: default to Python 3, tweaks, formatting
   - tests/lib/cl_check.py: use python3 compatible code


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.48.2
   - tests: sign new nested-18|20* models to allow for generic serials
   - secboot: add extra paranoia when waiting for that fde-reveal-key
   - tests: backport netplan workarounds from #9785
   - secboot: add workaround for snapcore/core-initrd issue #13
   - devicestate: log checkEncryption errors via logger.Noticef
   - tests: add nested spread end-to-end test for fde-hooks
   - devicestate: implement checkFDEFeatures()
   - boot: tweak resealing with fde-setup hooks
   - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
     init restrict file
   - secboot: add new LockSealedKeys() that uses either TPM or
     fde-reveal-key
   - gadget: use "sealed-keys" to determine what method to use for
     reseal
   - boot: add sealKeyToModeenvUsingFdeSetupHook()
   - secboot: use `fde-reveal-key` if available to unseal key
   - cmd/snap-update-ns: fix sorting of overname mount entries wrt
     other entries
   - o/devicestate: save model with serial in the device save db
   - devicestate: add runFDESetupHook() helper
   - secboot,devicestate: add scaffoling for "fde-reveal-key" support
   - hookstate: add new HookManager.EphemeralRunHook()
   - update-pot: fix typo in plural keyword spec
   - store,cmd/snap-repair: increase initial expontential time
     intervals
   - o/devicestate,daemon: fix reboot system action to not require a
     system label
   - github: run nested suite when commit is pushed to release branch
   - tests: reset fakestore unit status
   - tests: fix uc20-create-parition-* tests for updated gadget
   - hookstate: implement snapctl fde-setup-{request,result}
   - devicestate: make checkEncryption fde-setup hook aware
   - client,snapctl: add naive support for "stdin"
   - devicestate: support "storage-safety" defaults during install
   - snap: use the boot-base for kernel hooks
   - vendor: update secboot repo to avoid including secboot.test binary


author: Michael Vogt <mvo@ubuntu.com>
changelog:
  - New upstream release 2.49
   - many: add Delegate=true to generated systemd units for special
     interfaces
   - cmd/snap-bootstrap: rename ModeenvFromModel to
     EphemeralModeenvForModel
   - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for
     recover+install
   - osutil: skip TestReadBuildGo inside sbuild
   - tests: fix umount for snapd snap on fsck-on-boot test
   - snap/info_test.go: add unit test cases for bug
   - tests/main/services-after-before: add regression spread test
   - snap/info.go: ignore unknown daemons in SortSnapServices
   - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in
     seeds
   - OpenGL interface: Support more Tegra libs
   - interfaces/browser-support: allow sched_setaffinity with browser-
     sandbox: true
   - cmd: make string/error code more robust against errno leaking
   - o/snapshotstate: handle conflicts between snapshot forget, export
     and import
   - cmd/snapd-generator: don't create mount overrides for snap-try
     snaps inside lxc
   - tests: update test pkg for fedora and centos
   - gadget: pass sector size in to mkfs family of functions, use to
     select block sz
   - o/snapshotstate: fix returning of snap names when duplicated
     snapshot is detected
   - tests/main/snap-network-errors: skip flushing dns cache on
     centos-7
   - interfaces/builtin: Allow DBus property access on
     org.freedesktop.Notifications
   - cgroup-support.c: fix link to CGROUP DELEGATION
   - osutil: update go-udev package
   - packaging: fix arch-indep build on debian-sid
   - {,sec}boot: pass "key-name" to the FDE hooks
   - asserts: sort by revision with Sort interface
   - gadget: add gadget.ResolveContentPaths()
   - cmd/snap-repair: save base snap and mode in device info; other
     misc cleanups
   - tests: cleanup the run-checks script
   - asserts: snapasserts method to validate installed snaps against
     validation sets
   - tests: normalize test tools - part 1
   - snapshotstate: detect duplicated snapshot imports
   - interfaces/builtin: fix unit test expecting snap-device-helper at
     /usr/lib/snapd
   - tests: apply workaround done for snap-advise-command to apt-hooks
     test
   - tests: skip main part of snap-advise test if 429 error is
     encountered
   - many: clarify gadget role-usage consistency checks for UC16/18 vs
     UC20
   - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable
     broken tests on sid
   - interfaces/builtin: more drive by fixes, import ordering, removing
     dead code
   - tests: skip interfaces-openvswitch spread test on debian sid
   - interfaces/apparmor: drive by comment fix
   - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree
     usage
   - cmd/libsnap-confine-private: make unit tests execute happily in a
     container
   - interfaces, wrappers: misc comment fixes, etc.
   - asserts/repair.go: add "bases" and "modes" support to the repair
     assertion
   - interfaces/opengl: allow RPi MMAL video decoding
   - snap: skip help output tests for go-flags v1.4.0
   - gadget: add validation for "$kernel:ref" style content
   - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside
     containers
   - spdx: update to SPDX license list version: 3.11 2020-11-25
   - tests: improve hotplug test setup on classic
   - tests: update check to verify is the current system is arm
   - tests: use os-query tool to check debian, trusty and tumbleweed
   - daemon: start moving implementation to api_snaps.go
   - tests/main/snap-validate-basic: disable test on Fedora due to go-
     flags panics
   - tests: fix library path used for tests.pkgs
   - tests/main/cohorts: replace yq with a Python snippet
   - run-checks: update to match new argument syntax of ineffassign
   - tests: use apiBaseSuite for snapshots tests, fix import endpoint
     path
   - many: separate consistency/content validation into
     gadget.Validate|Content
   - o/{device,snap}state: enable devmode snaps with dangerous model
     assertions
     secboot: add test for when systemd-run does not honor
     RuntimeMaxSec
   - secboot: add workaround for snapcore/core-initrd issue #13
   - devicestate: log checkEncryption errors via logger.Noticef
   - o/daemon: validation sets api and basic spread test
   - gadget: move BuildPartitionList to install and make it unexported
   - tests: add nested spread end-to-end test for fde-hooks
   - devicestate: implement checkFDEFeatures()
   - boot: tweak resealing with fde-setup hooks
   - tests: add os query commands for subsystems and architectures
   - o/snapshotstate: don't set auto flag in the snapshot file
   - tests: use os.query tool instead of comparing the system var
   - testutil: use the original environment when calling shellcheck
   - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud-
     init restrict file
   - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and
     instead set the implicit labels when loading the yaml
   - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal-
     key
   - gadget/quantity: introduce Offset, start using it for offset
     related fields in the gadget
   - gadget: use "sealed-keys" to determine what method to use for
     reseal
   - tests/main/fake-netplan-apply: disable test on xenial for now
   - daemon: start splitting snaps op tests out of api_test.go
   - testutil: make DBusTest use a custom bus configuration file
   - tests: replace pkgdb.sh (library) with tests.pkgs (program)
   - gadget: prepare gadget kernel refs (0/N)
   - interfaces/builtin/docker-support: allow /run/containerd/s/...
   - cmd/snap-preseed: reset run inhibit locks on --reset.
   - boot: add sealKeyToModeenvUsingFdeSetupHook()
   - daemon: reorg snap.go and split out sections and icons support
     from api.go
   - sandbox/seccomp: use snap-seccomp's stdout for getting version
     info
   - daemon: split find support to its own api_*.go files and move some
     helpers
   - tests: move snapstate config defaults tests to a separate file.
   - bootloader/{lk,lkenv}: followups from #9695
   - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite
   - gadget,o/devicestate: set implicit values for schema and role
     directly instead of relying on Effective* accessors
   - daemon: split aliases support to its own api_*.go files
   - gadget: start separating rule/convention validation from basic
     soundness
   - cmd/snap-update-ns: add better unit test for overname sorting
   - secboot: use `fde-reveal-key` if available to unseal key
   - tests: fix lp-1899664 test when snapd_x1 is not installed in the
     system
   - tests: fix the scenario when the "$SRC".orig file does not exist
   - cmd/snap-update-ns: fix sorting of overname mount entries wrt
     other entries
   - devicestate: add runFDESetupHook() helper
   - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv
     structs
   - daemon: split unsupported buy implementation to its own api_*.go
     files
   - tests: download timeout spread test
   - gadget,o/devicestate: hybrid 18->20 ready volume setups should be
     valid
   - o/devicestate: save model with serial in the device save db
   - bootloader: add check for prepare-image time and more tests
     validating options
   - interfaces/builtin/log_observe.go: allow controlling apparmor
     audit levels
   - hookstate: refactor around EphemeralRunHook
   - cmd/snap: implement 'snap validate' command
   - secboot,devicestate: add scaffoling for "fde-reveal-key" support
   - boot: observe successful command line update, provide a default
   - tests: New queries for the os tools
   - bootloader/lkenv: specify backup file as arg to NewEnv(), use ""
     as path+"bak"
   - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk
     iface
   - daemon: split out snapctl support and snap configuration support
     to their own api_*.go files
   - snapshotstate: improve handling of multiple errors
   - tests: sign new nested-18|20* models to allow for generic serials
   - bootloader: remove installableBootloader interface and methods
   - seed: cleanup/drop some no longer valid TODOS, clarify some other
     points
   - boot: set kernel command line in modeenv during install
   - many: rename disks.FindMatching... to FindMatching...WithFsLabel
     and err type
   - cmd/snap: suppress a case of spurious stdout logging from tests
   - hookstate: add new HookManager.EphemeralRunHook()
   - daemon: move some more api tests from daemon to daemon_test
   - daemon: split apps and logs endpoints to api_apps.go and tests
   - interfaces/utf: Add Ledger to U2F devices
   - seed/seedwriter: consider modes when checking for deps
     availability
   - o/devicestate,daemon: fix reboot system action to not require a
     system label
   - cmd/snap-repair,store: increase initial retry time intervals,
     stalling TODOs
   - daemon: split interfacesCmd to api_interfaces.go
   - github: run nested suite when commit is pushed to release branch
   - client: reduce again the /v2/system-info timeout
   - tests: reset fakestore unit status
   - update-pot: fix typo in plural keyword spec
   - tests: remove workarounds that add "ubuntu-save" if missing
   - tests: add unit test for auto-refresh with validate-snap failure
   - osutil: add helper for getting the kernel command line
   - tests/main/uc20-create-partitions: verify ubuntu-save encryption
     keys, tweak not MATCH
   - boot: add kernel command lines to the modeenv file
   - spread: bump delta ref, tweak repacking to make smaller delta
     archives
   - bootloader/lkenv: add v2 struct + support using it
   - snapshotstate: add cleanup of abandonded snapshot imports
   - tests: fix uc20-create-parition-* tests for updated gadget
   - daemon: split out /v2/interfaces tests to api_interfaces_test.go
   - hookstate: implement snapctl fde-setup-{request,result}
   - wrappers, o/devicestate: remove EnableSnapServices
   - tests: enable nested on 20.10
   - daemon: simplify test helpers Get|PostReq into Req
   - daemon: move general api to api_general*.go
   - devicestate: make checkEncryption fde-setup hook aware
   - client/snapctl, store: fix typos
   - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files
     before doing apt ops
   - cmd/snap-bootstrap: update model cross-check considerations
   - client,snapctl: add naive support for "stdin"
   - many: add new "install-mode: disable" option
   - osutil/disks: allow building on mac os
   - data/selinux: update the policy to allow operations on non-tmpfs
     /tmp
   - boot: add helper for generating candidate kernel lines for
     recovery system
   - wrappers: generate D-Bus service activation files
   - bootloader/many: rm ConfigFile, add Present for indicating
     presence of bloader
   - osutil/disks: allow mocking DiskFromDeviceName
   - daemon: start cleaning up api tests
   - packaging/arch: sync with AUR packaging
   - bootloader: indicate when boot config was updated
   - tests: Fix snap-debug-bootvars test to make it work on arm devices
     and core18
   - tests/nested/manual/core20-save: verify handling of ubuntu-save
     with different system variants
   - snap: use the boot-base for kernel hooks
   - devicestate: support "storage-safety" defaults during install
   - bootloader/lkenv: mv v1 to separate file,
     include/lk/snappy_boot_v1.h: little fixups
   - interfaces/fpga: add fpga interface
   - store: download timeout
   - vendor: update secboot repo to avoid including secboot.test binary
   - osutil: add KernelCommandLineKeyValue
   - gadget/gadget.go: allow system-recovery-{image,select} as roles in
     gadget.yaml
   - devicestate: implement boot.HasFDESetupHook
   - osutil/disks: add DiskFromName to get a disk using a udev name
   - usersession/agent: have session agent connect to the D-Bus session
     bus
   - o/servicestate: preserve order of services on snap restart
   - o/servicestate: unlock state before calling wrappers in
     doServiceControl
   - spread: disable unattended-upgrades on ubuntu
   - tests: testing new fedora 33 image
   - tests: fix fsck on boot on arm devices
   - tests: skip boot state test on arm devices
   - tests: updated the systems to run prepare-image-grub test
   - interfaces/raw_usb: allow read access to /proc/tty/drivers
   - tests: unmount /boot/efi in fsck-on-boot test
   - strutil/shlex,osutil/udev/netlink: minimally import go-check
   - tests: fix basic20 test on arm devices
   - seed: make a shared seed system label validation helper
   - tests/many: enable some uc20 tests, delete old unneeded tests or
     TODOs
   - boot/makebootable.go: set snapd_recovery_mode=install at image-
     build time
   - tests: migrate test from boot.sh helper to boot-state tool
   - asserts: implement "storage-safety" in uc20 model assertion
   - bootloader: use ForGadget when installing boot config
   - spread: UC20 no longer needs 2GB of mem
   - cmd/snap-confine: implement snap-device-helper internally
   - bootloader/grub: replace old reference to Managed...Blr... with
     Trusted...Blr...
   - cmd/snap-bootstrap: add readme for snap-bootstrap + real state
     diagram
   - interfaces: fix greengrass attr namingThe flavor attribute names
     are now as follows:
   - tests/lib/nested: poke the API to get the snap revisions
   - tests: compare options of mount units created by snapd and snapd-
     generator
   - o/snapstate,servicestate: use service-control task for service
     actions
   - sandbox: track applications unconditionally
   - interfaces/greengrass-support: add additional "process" flavor for
     1.11 update
   - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test


author: Maciek Borzecki <maciek.borzecki@gmail.com> - 2.49-1
changelog:
  - Release snapd 2.49 to Fedora (RHBZ#1927314)
  - Include fix for CVE-2020-27352 (RHBZ#1927428, RHBZ#1927432)


author: Christopher Engelhard <ce@lcts.de> 2.4.0-10
changelog:
  - add missing dependencies
  - move examples to (docdir)/examples subfolder
  - prefix directories with %dir in %files
  - use complete & commented config files
  - add white/blacklisting


author: Christopher Engelhard <ce@lcts.de> 2.4.0-12
changelog:
  - include patch to fully whitelist localhost in IPv6/v4 (PR #56)
  - add explicit Requires: ipset to firewalld backend


author: Christopher Engelhard <ce@lcts.de> 2.4.1-5
changelog:
  - Fix backend path in example spec file
  - Remove SysV init related things
  - Require a backend
  - Fix wrong check for EPEL8


author: Leigh Scott <leigh123linux@gmail.com> - 1.0.20200319-2
changelog:
  - Add missing config directory
  - Remove default buildroot BuildRequires
  - Simplify doc install
  - Remove commented lines
  - Use correct macro for bash-completion


author: Joe Doss <joe@solidadmin.com> - 1.0.20200510-1
changelog:
  - Update to 1.0.20200510
  - ipc: add support for openbsd kernel implementation
  - ipc: cleanup openbsd support
  - wg-quick: add support for openbsd kernel implementation
  - wg-quick: cleanup openbsd support
  - wg-quick: support dns search domains
  - Makefile: simplify silent cleaning
  - ipc: remove extra space
  - git: add gitattributes so tarball doesn't have gitignore files
  - terminal: specialize color_mode to stdout only
  - wg-quick: android: support application whitelist
  - systemd: add wg-quick.target


author: Joe Doss <joe@solidadmin.com> - 1.0.20200513-1
changelog:
  - Update to 1.0.20200513
  - Makefile: remember to install all systemd units
  - ipc: openbsd: switch to array ioctl interface


author: Joe Doss <joe@solidadmin.com> - 1.0.20200820-1
changelog:
  - Update to 1.0.20200820
  - ipc: split into separate files per-platform
  - wincompat: fold random into genkey
  - systemd: add reload target to systemd unit
  - man: wg-quick: use syncconf instead of addconf for strip example
  - pubkey: isblank is a subset of isspace
  - ctype: use non-locale-specific ctype.h
  - wg-quick: wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20200827-1
changelog:
  - Update to 1.0.20200827
  - wg-quick: android: use iproute2 to bring up interface instead of ndc
  - wg-quick: Revert wait on process substitutions


author: Joe Doss <joe@solidadmin.com> - 1.0.20210223-1
changelog:
  - wg-quick: android: do not free iterated pointer
  - wg-quick: openbsd: no use for userspace support
  - embeddable-wg-library: sync latest from netlink.h
  - wincompat: recent mingw has inet_ntop/inet_pton
  - wincompat: add resource and manifest and enable lto
  - wincompat: do not elevate by default
  - completion: add help and syncconf completions
  - sticky-sockets: do not use SO_REUSEADDR
  - man: LOG_LEVEL variables changed name
  - ipc: do not use fscanf with trailing \n
  - ipc: read trailing responses after set operation


