Packages changed:
  MicroOS-release (20250610 -> 20250614)
  apparmor
  audit (4.0 -> 4.0.2)
  audit-secondary (4.0 -> 4.0.2)
  curl
  dracut (059+suse.725.g1df2cbe1 -> 059+suse.732.g739e1c2f)
  ffmpeg-7
  gnome-branding-Aeon
  gtk4 (4.18.5 -> 4.18.6)
  jq
  kernel-firmware-iwlwifi (20250603 -> 20250609)
  kernel-firmware-mediatek (20250603 -> 20250606)
  kernel-firmware-nvidia
  kernel-source (6.15.1 -> 6.15.2)
  libapparmor
  libarchive (3.7.9 -> 3.8.1)
  libass (0.17.3 -> 0.17.4)
  libgcrypt
  libimobiledevice (1.3.0+263git.20250123 -> 1.3.0+283git.20250610)
  libopenmpt (0.7.13 -> 0.8.0)
  libportal
  libslirp (4.9.0+5 -> 4.9.1+1)
  libupnp (1.14.23 -> 1.14.24)
  openal-soft (1.24.2 -> 1.24.3~179)
  patterns-base
  pcre2
  pipewire (1.4.4 -> 1.4.5)
  plasma-branding-Kalpa (20241009 -> 20250612)
  python-greenlet (3.2.2 -> 3.2.3)
  python-maturin (1.8.6 -> 1.8.7)
  python-pycairo (1.26.1 -> 1.28.0)
  python-pyserial
  python-pysmbc
  python-pyzmq
  python-requests (2.32.3 -> 2.32.4)
  qemu (10.0.0 -> 10.0.2)
  qpdf (11.9.1 -> 11.10.1)
  rpm
  samba (4.22.1+git.393.a3fcbaec1e5 -> 4.22.2+git.396.c752843dcf4)
  sdbootutil (1+git20250529.307d6ff -> 1+git20250613.ee73e55)
  slirp4netns (1.3.2 -> 1.3.3)
  sndiff (0.2.2~0 -> 0.2.2~2)
  sqlite3 (3.49.2 -> 3.50.1)
  transactional-update (5.0.3 -> 5.0.4)
  u-boot-rpiarm64
  vlc

=== Details ===

==== MicroOS-release ====
Version update (20250610 -> 20250614)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== apparmor ====

- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)

==== audit ====
Version update (4.0 -> 4.0.2)
Subpackages: libaudit1 libauparse0

- Refresh systemd service patches:
  - audit-allow-manual-stop.patch
  - auditd.service-fix-plugin-termination.patch
  - enable-stop-rules.patch
  - fix-hardened-service.patch
  - harden_auditd.service.patch
- Update to 4.0.2
  - Fix musl C builds
  - Many code cleanups (Yugend)
  - Use atomic variables if available for signal related flags
  - Dont rotate audit logs when auditd is in debug mode
  - Fix a couple memory leaks on error paths
  - Correct output when displaying rules with exe/path/dir (Attila Lakatos)
  - Fix auparse lookup test to not use the system libaupaurse
  - Improve auparse metrics
  - Update auparse normalizer for recent syscalls
  - Make status report uniform
- Update to 4.0.1
  - Update TRUSTED_APP interpretation to look for known fields
  - In auditd plugins, allow variable amount of arguments (Attila Lakatos)
  - Fix augenrules to work correctly when kernel is in immutable mode
  - Add ausearch_cur_event to auparse library (Attila Lakatos)
  - Add audisp-filter plugin (Attila Lakatos)
  - Improve sorting speed of aureport --summary reports
  - auditd & audit-rules.service pick up paths automatically (Laurent Bigonville)
  - Update auparse normalizer for new syscalls

==== audit-secondary ====
Version update (4.0 -> 4.0.2)
Subpackages: audit audit-rules python3-audit system-group-audit

- Refresh systemd service patches:
  - audit-allow-manual-stop.patch
  - auditd.service-fix-plugin-termination.patch
  - enable-stop-rules.patch
  - fix-hardened-service.patch
  - harden_auditd.service.patch
- Update to 4.0.2
  - Fix musl C builds
  - Many code cleanups (Yugend)
  - Use atomic variables if available for signal related flags
  - Dont rotate audit logs when auditd is in debug mode
  - Fix a couple memory leaks on error paths
  - Correct output when displaying rules with exe/path/dir (Attila Lakatos)
  - Fix auparse lookup test to not use the system libaupaurse
  - Improve auparse metrics
  - Update auparse normalizer for recent syscalls
  - Make status report uniform
- Update to 4.0.1
  - Update TRUSTED_APP interpretation to look for known fields
  - In auditd plugins, allow variable amount of arguments (Attila Lakatos)
  - Fix augenrules to work correctly when kernel is in immutable mode
  - Add ausearch_cur_event to auparse library (Attila Lakatos)
  - Add audisp-filter plugin (Attila Lakatos)
  - Improve sorting speed of aureport --summary reports
  - auditd & audit-rules.service pick up paths automatically (Laurent Bigonville)
  - Update auparse normalizer for new syscalls

==== curl ====
Subpackages: libcurl4

- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.

==== dracut ====
Version update (059+suse.725.g1df2cbe1 -> 059+suse.732.g739e1c2f)
Subpackages: dracut-ima

- Update to version 059+suse.732.g739e1c2f:
  * ci(suse.conf.example): change log levels (jsc#PED-12922)
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)

==== ffmpeg-7 ====
Subpackages: libavcodec61 libavfilter10 libavformat61 libavutil59 libpostproc58 libswresample5 libswscale8

- Enable libiec61883 integration

==== gnome-branding-Aeon ====

- Rename "openSUSE Aeon" to "Aeon" in zenity titles to follow Aeon's Brand Guidelines.

==== gtk4 ====
Version update (4.18.5 -> 4.18.6)
Subpackages: gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0

- Update to version 4.18.6:
  + Bugs fixed:
  - Wrong behavior of GdkKeymap on macOS
  - cups: NULL-terminate array of choices
  - Fix the android build
  - icontheme: Load the missing image icon from the theme
  + Updated translations.

==== jq ====
Subpackages: libjq1

- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)

==== kernel-firmware-iwlwifi ====
Version update (20250603 -> 20250609)

- Update to version 20250609 (git commit 0d92efb540f4):
  * Revert "iwlwifi: add Bz/gl FW for core96-76 release"

==== kernel-firmware-mediatek ====
Version update (20250603 -> 20250606)

- Update to version 20250606 (git commit 4f0106cf1943):
  * mediatek MT7922: update bluetooth firmware to 20250523103438
  * mediatek MT7921: update bluetooth firmware to 20250523111333
  * linux-firmware: update firmware for MT7922 WiFi device
  * linux-firmware: update firmware for MT7921 WiFi device

==== kernel-firmware-nvidia ====

- Fix zypper conflict about directory -> symlink workaround (bsc#1244458)

==== kernel-source ====
Version update (6.15.1 -> 6.15.2)
Subpackages: kernel-64kb kernel-default

- Linux 6.15.2 (bsc#1012628).
- tracing: Fix compilation warning on arm32 (bsc#1012628).
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for
  GPIOs > 31 (bsc#1012628).
- pinctrl: armada-37xx: set GPIO output value before setting
  direction (bsc#1012628).
- clk: samsung: correct clock summary for hsi1 block
  (bsc#1012628).
- acpi-cpufreq: Fix nominal_freq units to KHz in
  get_max_boost_ratio() (bsc#1012628).
- Documentation: ACPI: Use all-string data node references
  (bsc#1012628).
- pinctrl: mediatek: eint: Fix invalid pointer dereference for
  v1 platforms (bsc#1012628).
- rtc: Make rtc_time64_to_tm() support dates before 1970
  (bsc#1012628).
- rtc: Fix offset calculation for .start_secs < 0 (bsc#1012628).
- bcachefs: Kill un-reverted directory i_size code (bsc#1012628).
- bcachefs: Repair code for directory i_size (bsc#1012628).
- bcachefs: delete dead code from may_delete_deleted_inode()
  (bsc#1012628).
- bcachefs: Run may_delete_deleted_inode() checks in
  bch2_inode_rm() (bsc#1012628).
- bcachefs: Fix subvol to missing root repair (bsc#1012628).
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
  (bsc#1012628).
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage
  device (bsc#1012628).
- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
  (bsc#1012628).
- usb: typec: ucsi: fix Clang -Wsign-conversion warning
  (bsc#1012628).
- Bluetooth: hci_qca: move the SoC type check to the right place
  (bsc#1012628).
- serial: jsm: fix NPE during jsm_uart_port_init (bsc#1012628).
- nvmem: rmem: select CONFIG_CRC32 (bsc#1012628).
- usb: usbtmc: Fix timeout value in get_stb (bsc#1012628).
- binder: fix use-after-free in binderfs_evict_inode()
  (bsc#1012628).
- binder: fix yet another UAF in binder_devices (bsc#1012628).
- thunderbolt: Do not double dequeue a configuration request
  (bsc#1012628).
- dt-bindings: pwm: adi,axi-pwmgen: Fix clocks (bsc#1012628).
- dt-bindings: remoteproc: qcom,sm8150-pas: Add missing SC8180X
  compatible (bsc#1012628).
- dt-bindings: usb: cypress,hx3: Add support for all variants
  (bsc#1012628).
- dt-bindings: phy: imx8mq-usb: fix
  fsl,phy-tx-vboost-level-microvolt property (bsc#1012628).
- Rename to
  patches.kernel.org/6.15.2-002-Revert-x86-smp-Eliminate-mwait_play_dead_cpuid.patch.
- Rename to
  patches.kernel.org/6.15.2-003-ACPICA-Introduce-ACPI_NONSTRING.patch.
- Rename to
  patches.kernel.org/6.15.2-004-ACPICA-Apply-ACPI_NONSTRING.patch.
- Rename to
  patches.kernel.org/6.15.2-005-ACPICA-Apply-ACPI_NONSTRING-in-more-places.patch.
- Rename to
  patches.kernel.org/6.15.2-034-Revert-drm-amd-display-more-liberal-vmin-vmax-.patch.
- commit bcb3897
- mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
- commit 7c95ae0
- MyBS: Do not build kernel-obs-qa with limit_packages
  Fixes: 58e3f8c34b2b ("bs-upload-kernel: Pass limit_packages also on multibuild")
- commit f4c6047
- MyBS: Simplify qa_expr generation
  Start with a 0 which makes the expression valid even if there are no QA
  repositories (currently does not happen). Then separator is always
  needed.
- commit e4c2851
- MyBS: Correctly generate build flags for non-multibuild package limit
  (bsc# 1244241)
  Fixes: 0999112774fc ("MyBS: Use buildflags to set which package to build")
- commit 27588c9
- bs-upload-kernel: Pass limit_packages also on multibuild
  Fixes: 0999112774fc ("MyBS: Use buildflags to set which package to build")
  Fixes: 747f601d4156 ("bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)")
- commit 8ef486c
- Refresh
  patches.suse/Revert-drm-amd-display-more-liberal-vmin-vmax-update.patch.
  Update upstream status.
- commit f548b28
- series.conf: cleanup
- update upstream reference and resort
  - patches.suse/iommu-Allow-attaching-static-domains-in-iommu_attach.patch
- commit 7c1c418
- drm/amd/display: Fix default DC and AC levels (bsc#1240650).
- drm/amd/display: Add debugging message for brightness caps
  (bsc#1240650).
- commit 98de36e
- kernel-source: Do not use multiple -r in sed parameters
  This usage is enabled in commit b18d64d
  (sed: allow multiple (non-conflicting) -E/-r parameters, 2016-07-31)
  only available since sed 4.3
  Fixes: dc2037cd8f94 ("kernel-source: Also replace bin/env"
- commit 91ad98e

==== libapparmor ====

- update dovecot24.diff - more permissions for dovecot 2.4 (boo#1243008)

==== libarchive ====
Version update (3.7.9 -> 3.8.1)

- update to 3.8.1:
  * libarchive: fix FILE_skip regression
  * compress: Prevent call stack overflow
  * iso9660: always check archive_string_ensure return value
  * tar: Support negative time values with pax
  * tar: Reset accumulated header state after reading macOS metadata blob
  * tar: Keep block alignment after pax error
  * tar: Handle extra bytes after sparse entries
- includes changes from 3.8.0:
  * bsdtar: support --mtime and --clamp-mtime
  * 7-zip reader: improve self-extracting archive detection
  * xar: xmllite support for the XAR reader and writer
  * zip writer: added XZ, LZMA, ZSTD and BZIP2 support
  * zip writer: added LZMA + RISCV BCJ filter
  * rar: do not skip past EOF while reading (boo#1244159)
  * rar: fix double free with over 4 billion nodes (boo#1244160)
  * rar: fix heap-buffer-overflow (boo#1244161)
  * warc: prevent signed integer overflow (boo#1244162)
  * tar: fix overflow in build_ustar_entry (boo#1244163)
  * bsdtar: don't hardlink negative inode files together
  * gz: allow setting the original filename for gzip compressed files
  * lib: improve lseek handling
  * lib: support @-prefixed Unix epoch timestamps as date strings
  * rar: support large headers on 32 bit systems
  * tar reader: Improve LFS support on 32 bit systems
- drop lib-suffix.patch, different implementation upstream
- spec file clean-up, removing currently unused -static

==== libass ====
Version update (0.17.3 -> 0.17.4)

- Update to 0.17.4:
  * add new API to prune old events from memory
  - ass_prune_events for manual pruning
  - ass_configure_prune to set up automatic pruning
  * add ASS_OVERRIDE_BIT_BLUR flag
  * fontconfig: fix minor memory leaks in pathological font setups
  * coretext: fix build on older compilers or Mac OS X 10.5
  * checkasm: fix build for older compilers
  * aarch64: fix assembly build on strict compilers due to oversized align
  * meson: improve ASM configuration on x86 Android
  * meson: align MSVC warnings and optimisations closer to gcc-like compilers
  * meson can now build all dev utility executables

==== libgcrypt ====

- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch

==== libimobiledevice ====
Version update (1.3.0+263git.20250123 -> 1.3.0+283git.20250610)

- Update to version 1.3.0+283git.20250610:
  * Use updated libplist API if available
  * Use SHA256 signature instead of SHA1 for iOS 4 and newer when creating and signing pairing certificates

==== libopenmpt ====
Version update (0.7.13 -> 0.8.0)

- Update to 0.8.0:
  * [New] Can now read PumaTracker (PUMA) modules.
  * [New] Can now read Face The Music (FTM) modules.
  * [New] Can now read Future Composer (FC / FC13 / FC14 / SMOD)
    modules.
  * [New] Can now read Game Music Creator (GMC) modules.
  * [New] Can now read Chuck Biscuits / Black Artist (CBA) modules
    from the Expoze musicdisk by Heretics
  * [New] Can now read Real Tracker 2 (RTM) modules.
  * [New] Can now read Images Music System (IMS) modules.
  * [New] Can now read ChipTracker (MOD) modules.
  * [New] Can now read TCB Tracker (MOD) modules.
  * [New] Can now read EasyTrax (ETX) modules.
  * [New] Can now load UNIC Tracker v1 (UNIC) files.
  * [New] MED: Synthesized and hybrid instruments are now
    supported.
  * [New] GT2: Better support for old “envelopes”, in particular
    adding support for the previously missing
    tremor / tremolo / vibrato.
  * [New] NST: His Master’s Noise “Mupp” instruments are now
    supported, as well as command 7 “mega-arp”.
  * [New] libopenmpt: New APIs for determining whether order list
    entries or pattern indices have a special meaning:
    openmpt::module::is_order_skip_entry(),
    openmpt::module::is_pattern_skip_item(),
    openmpt::module::is_order_stop_entry(),
    openmpt::module::is_pattern_stop_item() (C++),
    and openmpt_module_is_order_skip_entry(),
    openmpt_module_is_pattern_skip_item(),
    openmpt_module_is_order_stop_entry(),
    openmpt_module_is_pattern_stop_item() (C).
  * [New] libopenmpt: New APIs for retrieving pattern time
    signature information:
    openmpt::module::get_pattern_rows_per_beat(),
    openmpt::module::get_pattern_rows_per_measure() (C++),
    and openmpt_module_get_pattern_rows_per_beat(),
    openmpt_module_get_pattern_rows_per_measure() (C).
  * [New] libopenmpt: New APIs for retrieving the
    restart / loop position:
    openmpt::module::get_restart_order(),
    openmpt::module::get_restart_row() (C++),
    and openmpt_module_get_restart_order(),
    openmpt_module_get_restart_row() (C).
  * [New] libopenmpt: New API for retrieving the playback time at a
    given order / row combination:
    openmpt::module::get_time_at_position() (C++),
    and openmpt_module_get_time_at_position() (C).
  * When formatting pattern data, effect letters in the volume
    column are now always formatted correctly, regardless of the
    module format.
  * IT: Various playback fixes.
  * IT: When using tone portamento to another sample after the
    previous sample’s sustain loop has been released, the new
    sample should also not play its sustain loop.
  * IT: When triggering an empty instrument note slot, completely
    ignore the pattern cell - do not reset the currently playing
    instrument’s envelopes, and also don’t process any
    effects - including global ones.
  * IT: Offset with instrument number but no note should play
    offset effect with previous note.
  * IT: Fixed various combinations of volume column and effect
    column portamento effects.
  * IT: Implemented a quirk in command Lxx that always executes a
    portamento down when no tone portamento has been set up before,
    sometimes causing the target note to be reached immediately,
    or sliding the note down very subtly.
  * IT: Envelope Carry should not be influenced by a previous
    note-off.
  * XM: When a key-off is encountered before auto-vibrato reaches
    full depth, the depth is reset.
  * S3M: Combined slides (Kxy / Lxy) are no longer run on the first
    tick of a row in files made with Scream Tracker.
  * MOD: Groo’s “The Ultimate Beeper” now plays like in ProTracker.
  * DTM: Portamentos are now also evaluated on the first tick of
    the row.
  * MO3: If multiple sample slots shared the same Ogg Vorbis
    sample, only one sample slot was loaded.
  * MED: Various playback fixes.
  * SymMOD: Files containing more than 127 channels are no longer
    rejected.
  * Better support for automatic slide commands (commands that keep
    sliding on following rows) in various formats.
  * The pattern channel limit was raised from 127 to 192 for some
    formats.
  * openmpt123: Multi-threaded encoding is enabled with
    libFLAC 1.5.0 or newer.
  * xmp-openmpt: Memory consumption during file loading has been
    reduced.

==== libportal ====
Subpackages: libportal-gtk4-1 libportal1

- Fix qt devel sub-packages Requires.
- Use _multibuild for qt5 and qt6 so we can disable building the
  qt5 flavor in SLE16/SLFO and enable it in Leap 16.

==== libslirp ====
Version update (4.9.0+5 -> 4.9.1+1)

- Update to version 4.9.1+1:
  * Mention how to get debugging prints
  * Release v4.9.1
  * tcp: Fix starting the linger2 timer on socket shutdown
  * tcp: Reduce linger time to two minutes
  * tcp: on input during init, reset TCPT_KEEP to TCPTV_KEEP_INIT
  * tcp: on input, reset TCPT_KEEP to TCPTV_KEEP_IDLE rather than TCPTV_KEEPINTVL
  * Modified util.c to handle WSA function return values closer to specification. Explicit checks for INVALID_SOCKET and SOCKET_ERROR are made.
  * apple: Fix getting IPv4 DNS server address when IPv4 and IPv4 are interleaved
  * Do not link tests with libslirp.map

==== libupnp ====
Version update (1.14.23 -> 1.14.24)
Subpackages: libixml11 libupnp17

- Update to release 1.14.24
  * Fix possible close() on non-initialized socket

==== openal-soft ====
Version update (1.24.2 -> 1.24.3~179)

- Use the @TAG@~@VERSION@ format specifier in obs_scm service
- Update to git version 1.24.3+git7f56dcdf. This includes the port
  to Qt6 added as a patch previously and also other fixes that
  let this build in Leap 15.6.
- Drop patch that's already included in this version:
  * 1132.patch
- Use %cmake_build instead of %make_jobs
- Add 1132.patch: port to Qt6
- Apply spec-cleaner -ki changes
- Replaced deprecated ALSOFT_CONFIG CMake option with
  ALSOFT_INSTALL_UTILS
- Update to version 1.24.3:
  * Fixed handling WASAPI enumerated device changes
  * Fixed a crash with UWP builds when __wargv is null
  * Fixed using AL_FORMAT_BFORMAT3D_I32
  * Improved the bsinc resamplers' cutoff frequencies
  * Slightly reduced the aliasing noise in the cubic spline
    resampler
  * Added new bsinc48 and fast_bsinc48 resampler options.
  * Added support for using NFC filters with UHJ output.

==== patterns-base ====
Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11

- Remove xf86-video-fbdev from x11_raspberrypi pattern as the
  package has been removed - boo#1243696
- Add cockpit-packages to sw_management Recommends for SLES 16.0
  (bsc#1240517).

==== pcre2 ====
Subpackages: libpcre2-16-0 libpcre2-8-0

- Mark profiling as non-deterministic (boo#1040589)

==== pipewire ====
Version update (1.4.4 -> 1.4.5)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools

- Update to version 1.4.5:
  * Highlights
  - Fix negotiation errors when using multichannel output.
    Fixes audio in some games and mpv in some cases.
  - 1 Small fix and 1 improvement.
  * SPA
  - Fix another bug caused by reversing the filter default
    value preference. (#4722)
  * pulse-server
  - Implement STREAM_DONT_INHIBIT_AUTO_SUSPEND flags. This
    can reduce power in pavucontrol when monitoring inactive
    streams.  (#4255 #4726)
  * ALSA
  - Fix a potential deadlock when calling _drop and _drain at
    the same time. (#4728)

==== plasma-branding-Kalpa ====
Version update (20241009 -> 20250612)

- Update to 20250612
- Added:
  * 10-wayland.conf
  * set-notification-priority.conf
  * flatpak-update.service
  * flatpak-update.timer

==== python-greenlet ====
Version update (3.2.2 -> 3.2.3)

- Update to 3.2.3
  * Make greenlet build and run on Python 3.14 beta 2 on Windows amd64.
  * Potentially fix build on NetBSD/sparc64. See PR 447.

==== python-maturin ====
Version update (1.8.6 -> 1.8.7)

- Update to 1.8.7
  * Allow specifying compression method and level, in both `build`
    and `develop` modes
    gh#PyO3/maturin#2625

==== python-pycairo ====
Version update (1.26.1 -> 1.28.0)

- Update to 1.28.0:
  * Changes:
    + Remove hypothesis test dependency
    + Release the input buffer passed to ImageSurface.create_for_data() when
    calling Surface.finish() already, not just when the underlying surface
    is destroyed
    + Return a PathDataType (int subtype) instead of int with Path.__iter__()
    + Emit a DeprecationWarning in case ImageSurface.get_data() is called on
    an already finished surface.
    + Emit a DeprecationWarning for the undocumented num_glyphs parameter in
    Context.glyph_extents(), Context.glyph_path(), Context.show_glyphs(),
    ScaledFont.glyph_extents()
  * Fixes:
    + Remove the executable bit from cairo/__init__.py
    + Remove usage of removed typing.ByteString to fix compatibility with
    Python 3.14.0a1
    + Drop support for Python 3.8
    + Port PEP517/wheel build from setuptools to meson-python.
    + meson: install the package metadata to .dist-info/METADATA instead
    of .egg-info

==== python-pyserial ====

- Switch to pyproject macros.

==== python-pysmbc ====

- Convert to pip-based build

==== python-pyzmq ====

- Switch to pyproject macros.

==== python-requests ====
Version update (2.32.3 -> 2.32.4)

- update to 2.32.4:
  * CVE-2024-47081 Fixed an issue where a maliciously crafted URL
    and trusted environment will retrieve credentials for the wrong
    hostname/machine from a netrc file
  * Numerous documentation improvements
  * Added support for pypy 3.11 for Linux and macOS.
  * Dropped support for pypy 3.9 following its end of support.
- drop CVE-2024-47081.patch (merged upstream)

==== qemu ====
Version update (10.0.0 -> 10.0.2)

- Update to stable release 10.0.2:
  Full list of backports here:
  https://lore.kernel.org/qemu-devel/1748499690.323471.13081.nullmailer@localhost/
  A selection of them is reported here too:
  Revert "Drop support for Python 3.8"
  Update version for 10.0.1 release
  Drop support for Python 3.8
  target/hppa: Fix FPE exceptions
  linux-user/hppa: Send proper si_code on SIGFPE exception
  target/hppa: Copy instruction code into fr1 on FPU assist fault
  migration: Allow caps to be set when preempt or multifd cap enabled
  migration/multifd: Don't send device state packets with zerocopy flag
  qapi/misc-target: Fix the doc to distinguish query-sgx and query-sgx-capabilities
  hw/pci-host: Remove unused pci_host_data_be_ops
  hw/pci-host/gt64120: Fix endianness handling
  i386/hvf: Make CPUID_HT supported
  i386/tcg: Make CPUID_HT and CPUID_EXT3_CMP_LEG supported
  target/riscv/kvm: do not read unavailable CSRs
  target/riscv/kvm: add kvm_csr_cfgs[]
  target/riscv/kvm: turn kvm_riscv_reg_id_ulong() into a macro
  target/riscv/kvm: turn u32/u64 reg functions into macros
  target/riscv/kvm: fix leak in kvm_riscv_init_multiext_cfg()
  target/riscv/kvm: minor fixes/tweaks
  target/riscv: Fix vslidedown with rvv_ta_all_1s
  target/riscv: Fix the rvv reserved encoding of unmasked instructions
  ...

==== qpdf ====
Version update (11.9.1 -> 11.10.1)

- version update to 11.10.1
  11.10.1: February 15, 2025
    Build fixes
    .  Fix incorrect detection of zopfli.
    .  Recognize cygwin perl as Windows when running test suite.
  11.10.0: February 8, 2025
    Bug fixes
    .  Detect and break loops in the outline (bookmark) tree.
    .  Correctly handle outline (bookmark) items where the destination is
    given as a dictionary with ‘/D’ entry.
    .  When loading object streams, ignore any objects not included in the
    xref table.
    .  When writing real numbers as JSON ensure they do not end in a
    trailing decimal point.
    .  When QPDF::getObject, getObjectByObjGen or getObjectByID are called
    with a QPDFObjGen that does not
    exists in the xref and object tables return a direct null.
    .  Fix handling of certain deleted objects in hybrid reference files.
    .  Default the stream decode level to generalized.
    .  Reject CLI flags with parameters.
    CLI Enhancements
    .  The fix-qdf command now allows an output file to be specified as an
    optional second argument.
    .  New --remove-metadata and --remove-info options to exclude document
    metadata and information from the output PDF.
    Library Enhancements
    .  qpdf can now be built with zopfli support.
    .  Add QPDFObjectHandle operator bool.
    .  New C API function qpdf_oh_free_buffer to free malloc allocated buffers.
  * for other changes see
    https://qpdf.readthedocs.io/en/stable/release-notes.html
- deleted patches
  - qpdf-11.9.1-gcc15.patch (upstreamed)

==== rpm ====

- use the pubkey modification time instead of the creation time
  as the release number, as it was with older rpm versions
  * new patch: pgpreleasemtime.diff

==== samba ====
Version update (4.22.1+git.393.a3fcbaec1e5 -> 4.22.2+git.396.c752843dcf4)
Subpackages: libldb2 samba-ad-dc-libs samba-client samba-client-libs samba-dcerpc samba-libs

- Update to 4.22.2
  * (CVE-2025-0620) [SECURITY] CVE-2025-0620: smbd doesn't pick
    up group membership changes when re-authenticating an expired
    SMB session; (bso#15707); (bsc#1244136).
  * Profile sync fails due to Directory Leases; (bso#15861).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).

==== sdbootutil ====
Version update (1+git20250529.307d6ff -> 1+git20250613.ee73e55)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit

- Update to version 1+git20250613.ee73e55:
  * Fix uhmac installation
  * Remove edition downgrade
  * Update Cargo.lock

==== slirp4netns ====
Version update (1.3.2 -> 1.3.3)

- Update to 1.3.3
  * The official statically-linked binaries are updated to be linked with the new version of libslirp: v4.9.0 -> v4.9.1 (#357)
  * Enabled GitHub Actions Attestations (#355, thanks to @takumin)

==== sndiff ====
Version update (0.2.2~0 -> 0.2.2~2)

- Update to version 0.2.2~2:
  * Update Cargo.lock
  * Some style change

==== sqlite3 ====
Version update (3.49.2 -> 3.50.1)

- Update to 3.50 (3.50.1):
  * Improved handling and robust output of control characters
  * sqlite3_rsync no longer requires WAL mode and needs less
    bandwidth
  * Bug fixes and optimized JSON handling
  * Performance optimizations and developer visible fixes

==== transactional-update ====
Version update (5.0.3 -> 5.0.4)
Subpackages: dracut-transactional-update libtukit4 transactional-update-zypp-config tukit tukit-snapper-plugin tukitd

- Version 5.0.4
  - Don't override soft-reboot with hard reboot
  - Fix stdio when returning from selfupdate [boo#1243910],
    [gh#openSUSE/transactional-update#151]

==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc

- Add u-boot-roc-cc-rk3328

==== vlc ====
Subpackages: libvlc5 libvlccore9 vlc-noX vlc-qt

- Add 5590.patch: opus_header: fix channel mapping family 1 parsing
  (boo#1244167).