Packages changed: MicroOS-release (20260131 -> 20260202) conmon (2.1.13 -> 2.2.0) distrobox (1.8.2.2 -> 1.8.2.3) gdk-pixbuf (2.44.4 -> 2.44.5) grub2 (2.12 -> 2.14) highway kernel-firmware-amdgpu (20260126 -> 20260130) kernel-firmware-intel (20260123 -> 20260130) kernel-firmware-network (20260116 -> 20260130) kernel-firmware-platform (20251228 -> 20260128) kernel-firmware-qcom (20260114 -> 20260128) kernel-firmware-realtek (20251217 -> 20260130) kernel-firmware-sound (20260123 -> 20260130) kernel-source (6.18.7 -> 6.18.8) pcr-oracle (0.5.8 -> 0.5.9) python-greenlet (3.3.0 -> 3.3.1) sdbootutil (1+git20260127.6240918 -> 1+git20260130.2ae660a) sysextmgr (0.0+git20250806.0599a82 -> 0.0+git20250924.8eb417e) === Details === ==== MicroOS-release ==== Version update (20260131 -> 20260202) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== conmon ==== Version update (2.1.13 -> 2.2.0) - Update to version 2.2.0: * Release v2.2.0 * Fix SIGABRT crash in drop_signal_event * Add an easy cleanup for tests * [skip-ci] Update actions/checkout action to v6 * Check memory.events file exists before adding inotify watch * Fix remaining busybox references in tests * Fix inconsistent error messages when runtime fails (bsc#1252432) * Move attach start message after failure check * Add more tests for ctr_logging.c * Document testing package requirements * Switch tests from busybox to UBI10 and add consistent terminal size validation * Restore use of `writev()` system call * Document all CLI options * Add tests for --terminal and ctrl.c * Add tests for _OCI_SYNCPIPE. * Add log rotation functionality as alternative to log truncation * Add tests for --exec-attach. * Add more tests for --stdin and --exec. * [skip-ci] Update actions/setup-go action to v6 * Add systemd priority prefix parsing to journald logging * Run the coverage_task also on VM, not in container. * Show the code coverage in `make test-coverage` output. * [skip-ci] Update actions/checkout action to v5 * Really run the container in the 04-runtime.bats. * Fix missing F-sequence on container exit * Fix JSON parsing error in console file descriptor communication * Fix code quality issues * Revert 'Fix conmon exec exit status handling' * Fix meson install path to match Makefile * Fix conmon exec exit status handling * Add --no-container-partial-message option * Fix OOM detection on cgroup v2 * Fix CI: Remove Go dependencies and fix missing make targets * Replace Go tests with BATS and remove Go dependency * Fix errno race condition and logging macro issues * Add optional systemd support for static builds * Require at least golang 1.23 * ci/int: test with Go 1.23 and 1.24 * ci/deps: use "stable" go version * Fix container exit detection in systemd scope environments * Enhance k8s-file log rotation test coverage for corruption fix * Add test suite for k8s-file log rotation fix * Fix k8s-file log corruption during log rotation * conn_sock: drop -1 fron snprintf * conn_sock: make sure strncpy buffer is NUL terminated * oom: drop usage of sprintf in favor of snprintf * conmon: drop usage of sprintf in favor of snprintf * cmsg: shrink buffer to effective size * src: Fix terminal resize event processing * fix integration github action * fix wrong conditions of k8s-file logging * logging: Add container labels to log entries on journald * Makefile: simplify fmt * Remove hack/tree_status.sh * Remove hack/kubernetes-e2e * ci: add go.mod/go.sum validation * ci/gha: add all-done job * ci/gha: fix branch name * Remove old vendored go-md2man * ci/gha: remove actions/cache * Use gofumpt * runner/conmon_test: rm unused skopeoPath * runner/conmon: rm unused writeConmonPipeData * Replace ioutil.TempDir with t.TempDir * Use os.ReadFile/os.WriteFile instead of ioutil * runner: stop using pkg/errors * Use %m instead of strerror(errno) * cmsg: error logging nits * seccomp_accept_cb: fix memory leak * Remove pwarn macro * write_journald: fix logging a warning * write_oom_adjust: remove extra newlines from ndebugf * Introduce pwarnf() for better diagnosis of socket/fd write issues. * Handle descriptor in non-blocking mode properly. Resolves: #490 * Bump conmon version to 2.1.13 * Install some packages to fix CI * Make timestamp generation never fail. * Change permissions of logs from 0600 to 0640 * Avoid bogus journal filling errors * Fix typos and clarify man page. * Packit: constrain downstream jobs to the fedora package * gh actions: use crun and update runc version * gh actions: call make correctly * runner: fix runtime test * gh actions: add sudo to make command * vendor: drop libpod in runner package * [skip-ci] Update actions/checkout action to v4 * chore(deps): update module github.com/docker/docker to v25 [security] * RPM: delete unnecessary patching from spec * RPM: cleanup changelog conditionals * RPM: do not create cri-o dirs * Use `.gitignore` in nix build excludes * conmon: do not create oom file under cwd * gh actions: bump to golang 1.22 * logging: remove unuseful fsync * fix(deps): update module golang.org/x/sys to v0.20.0 * Remove CI VM OS names * chore(deps): update dependency containers/automation_images to v20240513 ... changelog too long, skipping 151 lines ... * bump to v2.0.31-dev ==== distrobox ==== Version update (1.8.2.2 -> 1.8.2.3) Subpackages: distrobox-bash-completion - Update to 1.8.2.3: * fix: add missing fedora dependency by @Kamorst in https://github.com/89luca89/distrobox/pull/1922 * fix: unintended print to stdout in assemble command by @balanza in https://github.com/89luca89/distrobox/pull/1925 * build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/89luca89/distrobox/pull/1929 * Review README.md by @nilslindemann in https://github.com/89luca89/distrobox/pull/1953 * fix: make sure PWD matches workdir by @Taywee in https://github.com/89luca89/distrobox/pull/1952 * fix(init): fix support for newer shadow strictier checks by @89luca89 in https://github.com/89luca89/distrobox/pull/1965 * init: only install base packages once by @Kamorst in https://github.com/89luca89/distrobox/pull/1932 * fix: remove the error in case dependencies are not fully met by @dottorblaster in https://github.com/89luca89/distrobox/pull/1967 * fix: manpages generation auth error by @dottorblaster in https://github.com/89luca89/distrobox/pull/1968 * chore(version): bump to 1.8.2.3 by @dottorblaster in https://github.com/89luca89/distrobox/pull/1969 * docs: add Fedora 43 to the compatbility list by @dottorblaster in https://github.com/89luca89/distrobox/pull/1970 * docs: fix manpages generation by setting contents: write permissions by @dottorblaster in https://github.com/89luca89/distrobox/pull/1971 * docs: add CentOS Stream 10 to the supported container OSes by @dottorblaster in https://github.com/89luca89/distrobox/pull/1972 * ci: persist credentials in order to allow for manpages commit by @dottorblaster in https://github.com/89luca89/distrobox/pull/1973 * docs: add Oracle Linux 10 to the compatibility doc by @dottorblaster in https://github.com/89luca89/distrobox/pull/1974 * docs: leverage PAT again for gen_man action by @dottorblaster in https://github.com/89luca89/distrobox/pull/1975 * docs: add Linux Mint 22.3 to the compatibility document by @dottorblaster in https://github.com/89luca89/distrobox/pull/1976 ==== gdk-pixbuf ==== Version update (2.44.4 -> 2.44.5) Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0 - Update to version 2.44.5: + Make the testsuite work with glycin + glycin: Add support for xpm and xbm + Updated translations. - Drop gdk-pixbuf-jpeg-slow.patch, we are not running tests, nor do we want to depend on glycin during build as it leads to a cycle. - Pass test=false to meson setup. - Drop unused check section and already disabled meson_test macro. ==== grub2 ==== Version update (2.12 -> 2.14) Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls - Fix sporadic boot failure in 2.14 BLS (bsc#1257547) * 0001-blsuki-Fix-linux_cmd-size-calcution-in-bls_get_linux.patch - Update to 2.14 - New in 2.14 * libgcrypt 1.11. * LVM LV integrity and cachevol support. * EROFS support. * GRUB environment block inside the Btrfs header support. * NX support for EFI platforms. * shim loader protocol support. * BLS and UKI support. * Argon2 KDF support. * TPM2 key protector support. * Appended Signature Secure Boot Support for PowerPC. * New option to block command line interface. * Support dates outside of 1901..2038 range. * zstdio decompression support. * EFI code improvements and fixes. * TPM driver fixes. * Filesystems fixes. * CVE and Coverity fixes. * Tests improvements. * Documentation improvements. - New tarball * grub-2.14.tar.xz - Removed tarball * grub-2.12.tar.xz - Patch rediff * use-grub2-as-a-package-name.patch * grub2-secureboot-add-linuxefi.patch * grub2-secureboot-no-insmod-on-sb.patch * grub2-secureboot-chainloader.patch * grub2-linguas.sh-no-rsync.patch * grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch * grub2-s390x-03-output-7-bit-ascii.patch * grub2-s390x-04-grub2-install.patch * grub2-efi-chainload-harder.patch * grub2-emu-4-all.patch * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch * grub2-btrfs-03-follow_default.patch * grub2-btrfs-05-grub2-mkconfig.patch * grub2-btrfs-06-subvol-mount.patch * grub2-btrfs-10-config-directory.patch * grub2-efi-xen-cmdline.patch * grub2-Add-hidden-menu-entries.patch * grub2-suse-remove-linux-root-param.patch * 0003-bootp-New-net_bootp6-command.patch * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch * 0001-add-support-for-UEFI-network-protocols.patch * 0001-kern-mm.c-Make-grub_calloc-inline.patch * 0002-cmdline-Provide-cmdline-functions-as-module.patch * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch * 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch * 0001-Add-grub_envblk_buf-helper-function.patch * 0004-Introduce-prep_load_env-command.patch * 0008-linuxefi-Use-common-grub_initrd_load.patch * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch * grub-read-pcr.patch * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch * 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch * 0002-ofdisk-add-early_log-support.patch * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch * 0001-Streamline-BLS-and-improve-PCR-stability.patch * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch * 0001-blscfg-read-fragments-in-order.patch * grub2-bls-boot-counting.patch * grub2-bls-boot-assessment.patch * grub2-bls-boot-show-snapshot.patch * grub2-blscfg-set-efivars.patch * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch * grub2-bls-loader-entry-oneshot.patch * grub2-blsbumpcounter-menu.patch - Patch removed * grub2-getroot-treat-mdadm-ddf-as-simple-device.patch * grub2-grubenv-in-btrfs-header.patch * 0003-Make-grub_error-more-verbose.patch * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch * 0005-docs-grub-Document-signing-grub-under-UEFI.patch * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch * 0008-pgp-factor-out-rsa_pad.patch * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch * 0011-libtasn1-import-libtasn1-4.18.0.patch * 0012-libtasn1-disable-code-not-needed-in-grub.patch * 0013-libtasn1-changes-for-grub-compatibility.patch * 0014-libtasn1-compile-into-asn1-module.patch * 0015-test_asn1-test-module-for-libtasn1.patch * 0016-grub-install-support-embedding-x509-certificates.patch * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch * 0019-appended-signatures-support-verifying-appended-signa.patch * 0020-appended-signatures-verification-tests.patch ... changelog too long, skipping 131 lines ... with new glibc 2.43 ==== highway ==== - Reenable LTO on riscv64, gcc has been fixed ==== kernel-firmware-amdgpu ==== Version update (20260126 -> 20260130) - Update to version 20260130 (git commit 82e3e0e4c96f): * amdgpu: DMCUB updates for various ASICs ==== kernel-firmware-intel ==== Version update (20260123 -> 20260130) - Update to version 20260130 (git commit 4b3f8c411f17): * linux-firmware: Add Dell ISH firmware for Intel panther lake systems ==== kernel-firmware-network ==== Version update (20260116 -> 20260130) - Update to version 20260130 (git commit 4b3f8c411f17): * linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - Update to version 20260130 (git commit 82e3e0e4c96f): * linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 * ice: update DDP LAG package to 1.3.2.0 ==== kernel-firmware-platform ==== Version update (20251228 -> 20260128) - Update to version 20260128 (git commit 2e5a8b0550ba): * Update firmware for NPU PHX, STX and STX HALO ==== kernel-firmware-qcom ==== Version update (20260114 -> 20260128) - Update to version 20260128 (git commit 2e5a8b0550ba): * qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a * qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A ==== kernel-firmware-realtek ==== Version update (20251217 -> 20260130) - Update to version 20260130 (git commit 82e3e0e4c96f): * rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - Update to version 20260128 (git commit 2e5a8b0550ba): * rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC * rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC ==== kernel-firmware-sound ==== Version update (20260123 -> 20260130) - Update to version 20260130 (git commit 82e3e0e4c96f): * cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware ==== kernel-source ==== Version update (6.18.7 -> 6.18.8) - Linux 6.18.8 (bsc#1012628). - arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links (bsc#1012628). - arm64: dts: qcom: sm8550: Fix compile warnings in USB controller node (bsc#1012628). - arm64: dts: qcom: sm8650: Fix compile warnings in USB controller node (bsc#1012628). - arm64: dts: rockchip: Fix wrong register range of rk3576 gpu (bsc#1012628). - perf parse-events: Fix evsel allocation failure (bsc#1012628). - Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (bsc#1012628). - btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE (bsc#1012628). - dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO (bsc#1012628). - pmdomain: qcom: rpmhpd: Add MXC to SC8280XP (bsc#1012628). - wifi: ath12k: don't force radio frequency check in freq_to_idx() (bsc#1012628). - ata: ahci: Do not read the per port area for unimplemented ports (bsc#1012628). - ata: libata: Call ata_dev_config_lpm() for ATAPI devices (bsc#1012628). - ata: libata-sata: Improve link_power_management_supported sysfs attribute (bsc#1012628). - ata: libata: Add cpr_log to ata_dev_print_features() early return (bsc#1012628). - ata: libata: Add DIPM and HIPM to ata_dev_print_features() early return (bsc#1012628). - ata: libata: Print features also for ATAPI devices (bsc#1012628). - wifi: ath12k: cancel scan only on active scan vdev (bsc#1012628). - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (bsc#1012628). - wifi: ath12k: fix dead lock while flushing management frames (bsc#1012628). - wifi: ath12k: Fix wrong P2P device link id issue (bsc#1012628). - ice: initialize ring_stats->syncp (bsc#1012628). - ice: Avoid detrimental cleanup for bond during interface stop (bsc#1012628). - ice: Fix incorrect timeout ice_release_res() (bsc#1012628). - igc: Restore default Qbv schedule when changing channels (bsc#1012628). - igc: fix race condition in TX timestamp read for register 0 (bsc#1012628). - igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue (bsc#1012628). - vsock/virtio: Coalesce only linear skb (bsc#1012628). - net: usb: dm9601: remove broken SR9700 support (bsc#1012628). - bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1012628). - l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1012628). - selftests: net: fib-onlink-tests: Convert to use namespaces by default (bsc#1012628). - net: freescale: ucc_geth: Return early when TBI PHY can't be found (bsc#1012628). - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1012628). - amd-xgbe: avoid misleading per-packet error log (bsc#1012628). - gue: Fix skb memleak with inner IP protocol 0 (bsc#1012628). - tools: ynl: Specify --no-line-number in ynl-regen.sh (bsc#1012628). - fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1012628). - veth: fix data race in veth_get_ethtool_stats (bsc#1012628). - pwm: Ensure ioctl() returns a negative errno on error (bsc#1012628). - pwm: max7360: Populate missing .sizeof_wfhw in max7360_pwm_ops (bsc#1012628). - l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1012628). - ipvlan: Make the addrs_lock be per port (bsc#1012628). - octeontx2: cn10k: fix RX flowid TCAM mask handling (bsc#1012628). - net/sched: Enforce that teql can only be used as root qdisc (bsc#1012628). - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (bsc#1012628). - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1012628). - wifi: mac80211: don't perform DA check on S1G beacon (bsc#1012628). - serial: 8250_pci: Fix broken RS485 for F81504/508/512 (bsc#1012628). - serial: Fix not set tty->port race condition (bsc#1012628). - comedi: dmm32at: serialize use of paged registers (bsc#1012628). - w1: therm: Fix off-by-one buffer overflow in alarms_store (bsc#1012628). - w1: fix redundant counter decrement in w1_attach_slave_device() (bsc#1012628). - Revert "nfc/nci: Add the inconsistency check between the input data length and count" (bsc#1012628). - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (bsc#1012628). - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (bsc#1012628). - scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1012628). - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() (bsc#1012628). ... changelog too long, skipping 295 lines ... - commit e21436a ==== pcr-oracle ==== Version update (0.5.8 -> 0.5.9) - Update to 0.5.9 + Fix event skipping due to double increment + Add '--persistent-srk' to make SRK persistent (bsc#1248516) ==== python-greenlet ==== Version update (3.3.0 -> 3.3.1) - Update to 3.3.1 * Publish Windows ARM binary wheels, where available. * Fix compilation for 3.14t on Windows. * Publish Windows 3.14t binary wheels for Intel. * Switch from Appveyor for Windows to Github Actions. * Fix compilation on MIPS with GCC 15 and binutils 2.45. See PR 487 by Rosen Penev. Note that this is not a platform tested by this project’s CI. * Move most project metadata into the static pyproject.toml file. This updates licensing information to use the modern License-Expression field. See PR 480 by mrbean-bremen. - Update BuildRequires from pyproject.toml ==== sdbootutil ==== Version update (1+git20260127.6240918 -> 1+git20260130.2ae660a) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20260130.2ae660a: * Better support for GRUB2 2.12 / 2.14 * Drop pcrlock_manual_raw in favor of lock-raw * If shim is installed, it will measure the kernel * In grub2-bls the kernel also measures initrd and cmdline * Instead of hd0, uses the DISK-SEQ order * Hide grep error when missing files * A non-snapshot is not read-only ==== sysextmgr ==== Version update (0.0+git20250806.0599a82 -> 0.0+git20250924.8eb417e) - Update to version 0.0+git20250924.8eb417e: * sysextmgrd: ignore images without metadata * Implement reading of os-release from snapshots * Adjust for new mkosi manifest format