# changelog

author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98-1
changelog:
  - New version
    Resolves: rhbz#2297124
  - Fixed incorrect parsing of multiline rfc2231 header filename
    Resolves: CVE-2024-39929
  - Enabled SRS support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.98.1-1
changelog:
  - New version
    Resolves: rhbz#2346977
  - Fixed possible remote SQL injection
    Resolves: CVE-2025-26794
  - Updated exim maintainers keyring


author: Jens Petersen <petersen@redhat.com> - 1.6.2-26
changelog:
  - 'diff': use git diff's builtin filtering
  - 'fetch': add --lenient to skip non dist-git directories
  - 'local': --detached-head
  - 'parallel': do not waitrepo for final layer
  - 'parallel': koji-tool tail of failed builds and end with task url
  - 'parallel': only print "parallel layer" is more than one pkg in layer
  - 'request-branches': wait 30s before checking for package added to tag
  - 'sidetags': --tagged lists tagged builds
  - 'unautospec': new command to remove autochangelog and/or autorelease
  - 'update-sources': now takes optional version, replacing 'update-version'
  - new fedora-krb lib replaces Krb module: handles different FAS userid (#67)
  - rename --allow-head to --detached-head
  - targetMaybeSidetag: warn/prompt if target does not match branch


author: Jens Petersen <petersen@redhat.com> - 1.7-28
changelog:
  - support epel10.x minors with fedora-releases-0.3.0
  - 'merge': now done from origin for consistency
  - targetMaybeSidetag: prompts to choose which sidetag
  - 'autospec': no duplicate %changelog line
  - 'branches': add --only-dead option
  - 'branches': improve the prefixing for multiple packages
  - 'build': update latest tagged check to include epel-testing; print all
  - 'build': use target branch to determine nvr
  - 'bump': complete rework of logic (--strict replaces --local)
  - 'clone': add --dryrun
  - 'clone': now supports globbing of packages
  - 'copr': order chroots by branch (release): so epel10 > epel9
  - 'copr': rename i686 to i386
  - 'fetch': fix --lenient was no-op
  - 'import': now also waits for package to be setup in koji
  - 'install': add --yes
  - 'install': perform also if given a rpm subpackage selection
  - 'install': select-rpms-0.3.0 adds --error-existing
  - 'install': skip ":" separator
  - 'list': refactor with countListPackages
  - 'mock': add experimental --install mode (for single package)
  - 'parallel': better sidetag setup with warnings
  - 'parallel': offer to retry failures or continue with waitrepo for layer
  - 'parallel': print nvr earlier and only latest commits
  - 'parallel': reduce default delay to 1s between triggering builds
  - 'parallel': always show task url for fail
  - 'pull': drop stash pop to avoid making conflicts
  - 'push': check local branch exists
  - 'request-branches': now also checks for commit access via group membership
  - 'request-branches': request all branches/pkgs before waiting for koji pkgs
  - 'review-package': defaults to interactive, use --full for fedora-review
  - 'scratch': do not create a new sidetag!
  - 'sidetags': listings are now sorted
  - 'switch': add --lenient option to avoid error for non-existent branch
  - 'uninstall': new experimental command to remove a package NVR
  - 'update-sources': partition sources by isArchiveFile
  - 'waitrepo': add --no-nvr option for generic wait-repo
  - Branches gitCurrentBranchWarn: offer to rename master to rawhide
  - Branches listOfBranches: print branch EOL warning when < 7 days left
  - Branches systemBranch: support CPE_NAME
  - Package isArchiveFile: ".sig" files are ascii
  - RpmBuild getSources: fix to use exists for uncompressed file
  - RpmBuild: check/install compression tool before downloading tarball
  - buildRPMs: backup build.log's with cp -p
  - new 'tag-build-to-sidetag': tags branch's nvr into a sidetag
  - recognize .crate as archive file (#70)
  - refPrompt: accept "origin" and require ref to over 3 chars
  - withPackagesByBranches: git fetch earlier to get any new branches
  - withPackagesByBranches: switch back branch before unstash


author: Jens Petersen <petersen@redhat.com> - 1.7.1-29
changelog:
  - merging now prompts even with --merge (--no-prompt) when branch unmergeable
  - parallel: restore package header output for merge
  - parallel: fix error for -F/-E when run outside dist-git
  - createKojiSidetag: needs krbTicket


author: Jens Petersen <petersen@redhat.com> - 1.7.1-34
changelog:
  - rebuild for haxr xmlrpc to Accept: application/xml
  - use rpmbuild-order 0.4.13
  - [epel] recommends epel-rpm-macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 20231228-9
changelog:
  - Assert that %pyproject_files contains a license file
  - Copy the pyHanko license so it ends up in dist-info


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.8-1
changelog:
  - Update to version 0.8.8; Fixes RHBZ#2311783
  - Add upstream link for fixing mixture of newline styles
  - Backport commit from upstream to fix s390x issues
  - Where possible, patch out "support for common crates" features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


