Packages changed:
  ImageMagick (7.1.0.61 -> 7.1.0.62)
  NetworkManager (1.42.0 -> 1.42.2)
  createrepo_c
  flatpak
  glib2 (2.74.5 -> 2.74.6)
  grub2
  lapack
  libcbor
  libfido2 (1.12.0 -> 1.13.0)
  libjpeg-turbo (2.1.4 -> 2.1.5.1)
  libnotify (0.8.1 -> 0.8.2)
  libyui (4.4.8 -> 4.4.9)
  libyui-ncurses (4.4.8 -> 4.4.9)
  libyui-ncurses-pkg (4.4.8 -> 4.4.9)
  libyui-qt (4.4.8 -> 4.4.9)
  libyui-qt-graph (4.4.8 -> 4.4.9)
  libyui-qt-pkg (4.4.8 -> 4.4.9)
  mariadb (10.10.2 -> 10.10.3)
  ndctl (75 -> 76)
  python-iniconfig (1.1.1 -> 2.0.0)
  python-lxml
  python-pexpect
  python-typing_extensions (4.4.0 -> 4.5.0)
  snapper
  spice-gtk (0.41 -> 0.42)
  sudo (1.9.13 -> 1.9.13p1)
  unbound (1.17.0 -> 1.17.1)
  yast2-python-bindings (4.5.1 -> 4.5.2)
  yast2-security (4.5.5 -> 4.5.6)
  zstd (1.5.2 -> 1.5.4)

=== Details ===

==== ImageMagick ====
Version update (7.1.0.61 -> 7.1.0.62)
Subpackages: ImageMagick-config-7-SUSE ImageMagick-extra libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10

- version update to 7.1.0.62
  https://github.com/ImageMagick/Website/blob/main/ChangeLog.md
- add %bcond_without djvulibre

==== NetworkManager ====
Version update (1.42.0 -> 1.42.2)
Subpackages: NetworkManager-bluetooth NetworkManager-lang NetworkManager-pppoe NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0

- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch

==== createrepo_c ====
Subpackages: libcreaterepo_c0 python3-createrepo_c

- Precompile the python bytecode to avoid lingering files on package removal.
- Add upstream patches (already merged) to publish IMA metadata in
  repomd repositories
  + 0001-Add-optional-filelists_ext-metadata.patch
  + 0002-Rename-filelists_ext-to-filelists-ext-to-be-consiste.patch
  + 0003-Rename-filelists_ext.xml-metadata-to-filelists-ext.x.patch
  + 0004-Add-missing-ext-to-filelists-ext-repomd-record.patch
- Add upstream patches (under review) to rename filelists-ext
  + 0005-Complete-renaming-to-filelists-ext.patch
- Use git for merging in %autosetup

==== flatpak ====
Subpackages: flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak

- Add flatpak-fix-gpg-agent-double-free.patch: stdout stream of a
  subprocess is owned by the subprocess, not the caller, so don't
  use g_autoptr for it to prevent double free (bsc#1207434).

==== glib2 ====
Version update (2.74.5 -> 2.74.6)
Subpackages: glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 libgthread-2_0-0-32bit

- Update to version 2.74.6:
  + Bugs fixed: glgo#GNOME/GLib!3239 Backport glgo#GNOME/GLib!3237
    鈥淔ix safe_wspawnve #define鈥� to glib-2-74.
  + Updated translations.

==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen

- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch
- Rediff
  * safe_tpm_pcr_snapshot.patch
- Patch supersceded
  * 0001-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch

==== lapack ====
Subpackages: libblas3 libcblas3 liblapack3

- Set -mfpmath=sse for the entire build for ix86 platforms
  on SLE/Leap. Since we build for x86_64, we know that sse
  is available.
  This helps to avoid effects from excess precision that
  can be seen in the test suite.
  On Factory we leave -ffloat-store for the test suite
  only as this option comes at a performance penalty.
  We may see precision related issues in the test suite
  with future compilers regardless.

==== libcbor ====

- Merge change from SLE15 SP4 made by pgajdos@suse.com on
  Tue Apr  5 14:36:56 UTC 2022:
- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.3

==== libfido2 ====
Version update (1.12.0 -> 1.13.0)

- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.

==== libjpeg-turbo ====
Version update (2.1.4 -> 2.1.5.1)
Subpackages: libjpeg8 libjpeg8-32bit libturbojpeg0

- update to 2.1.5.1:
  * Fixed a regression introduced by 2.0 beta1[15] that caused a buffer
    overrun in the progressive Huffman encoder when attempting to transform
    a specially-crafted malformed 12-bit-per-component JPEG image into a
    progressive 12-bit-per-component JPEG image using a 12-bit-per-component
    build of libjpeg-turbo.
  * Fixed an issue whereby, when using a 12-bit-per-component build of
    libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095
    or less than 0 to jpeg_write_scanlines() caused a buffer overrun or
    underrun in the RGB-to-YCbCr color converter.
  * Fixed a floating point exception that occurred when attempting to use
    the jpegtran -drop and -trim options to losslessly transform a
    specially-crafted malformed JPEG image.
  * Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result,
    rather than throwing an error, if the align parameter was not a power of 2.
  * Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt
    JPEG image in certain cases, rather than throwing an error,
    if the align parameter was not a power of 2.
  * Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for
    tjDecompressToYUVPlanes(), used the desired YUV image dimensions
    rather than the actual scaled image dimensions when computing the plane
    pointers and strides to pass to tjDecompressToYUVPlanes().
    This caused a buffer overrun and subsequent segfault if the desired
    image dimensions exceeded the scaled image dimensions.
  * Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG
    image (-DWITH_12BIT=1) using an alpha-enabled output color space such as
    JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095.
  * Fixed an issue whereby the Java version of TJBench did not accept a range
    of quality values.
  * Fixed an issue whereby, when -progressive was passed to TJBench,
    the JPEG input image was not transformed into a progressive JPEG image
    prior to decompression.

==== libnotify ====
Version update (0.8.1 -> 0.8.2)
Subpackages: libnotify-tools libnotify4 typelib-1_0-Notify-0_7

- Update to version 0.8.2:
  + Set new summary for library.
  + Docs:
  - Port to gi-docgen.
  - Fix URL to Desktop Notification Spec.
  + meson:
  - Replace deprecated meson.source_root() calls.
  - Bump minimum meson version to 0.58.
  + Introspection docs fixes.
- Following upstreams port to gi-docgen, drop gtk-doc and add
  meson, xsltproc and pkgconfig(gi-docgen) BuildRequires. Also pass
  explicit man=true to meson, ensure we are building manpages.

==== libyui ====
Version update (4.4.8 -> 4.4.9)

- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
- build-all: Don't build bindings with --small (-s)
- More docs for YShortcutManager (FAQ for our QA)
- Merged PR #88 from krai:
  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
- 4.4.9

==== libyui-ncurses ====
Version update (4.4.8 -> 4.4.9)

- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
- build-all: Don't build bindings with --small (-s)
- More docs for YShortcutManager (FAQ for our QA)
- Merged PR #88 from krai:
  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
- 4.4.9

==== libyui-ncurses-pkg ====
Version update (4.4.8 -> 4.4.9)

- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
- build-all: Don't build bindings with --small (-s)
- More docs for YShortcutManager (FAQ for our QA)
- Merged PR #88 from krai:
  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
- 4.4.9

==== libyui-qt ====
Version update (4.4.8 -> 4.4.9)

- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
- build-all: Don't build bindings with --small (-s)
- More docs for YShortcutManager (FAQ for our QA)
- Merged PR #88 from krai:
  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
- 4.4.9

==== libyui-qt-graph ====
Version update (4.4.8 -> 4.4.9)

- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
- build-all: Don't build bindings with --small (-s)
- More docs for YShortcutManager (FAQ for our QA)
- Merged PR #88 from krai:
  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
- 4.4.9

==== libyui-qt-pkg ====
Version update (4.4.8 -> 4.4.9)

- Fixed build with GCC13 (-Woverloaded-virtual) (bsc#1208238)
- build-all: Don't build bindings with --small (-s)
- More docs for YShortcutManager (FAQ for our QA)
- Merged PR #88 from krai:
  libyui-ncurses: Replace off64_t with off_t and stat64 with stat
- 4.4.9

==== mariadb ====
Version update (10.10.2 -> 10.10.3)
Subpackages: libmariadbd19 mariadb-client mariadb-errormessages

- Update to 10.10.3:
    https://mariadb.com/kb/en/mariadb-10-10-3-release-notes/
    https://mariadb.com/kb/en/mariadb-10-10-3-changelog/
- Update mariadb.keyring

==== ndctl ====
Version update (75 -> 76)

- Update to version 76
  * daxctl-online-memory: fix a memblock enumeration off-by-one
  * daxctl-online-memory: tolerate non-memblock sysfs attrs that start with 'memory_'
  * cxl-monitor: new command to monitor CXL events
- Add build fixes for TW and Leap
  + cxl-monitor-fix-include-paths-for-tracefs-and-tracee.patch
  + cxl-event-trace-use-the-wrapped-util_json_new_u64.patch

==== python-iniconfig ====
Version update (1.1.1 -> 2.0.0)

- update to 2.0.0:
  * Drop Python 3.6
  * Add Python 3.11 support
  * type hints added
- use gh tarball for tests

==== python-lxml ====

- allow building against any libxml2 version in sle15

==== python-pexpect ====

- Clean up SPEC file

==== python-typing_extensions ====
Version update (4.4.0 -> 4.5.0)

- update to version 4.5.0
  Details can be found here: https://pypi.org/project/typing-extensions/4.5.0/
- obsoletes _typed_dict_test_helper.py hack

==== snapper ====
Subpackages: libsnapper6 snapper-zypp-plugin

- wait for existing btrfs quota rescans to finish (bsc#1206814)

==== spice-gtk ====
Version update (0.41 -> 0.42)
Subpackages: libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 typelib-1_0-SpiceClientGlib-2_0 typelib-1_0-SpiceClientGtk-3_0

- Update to version 0.42. Features and Issues addressed:
  * !115 - Fix compilation on win32 with EGL
  * !114 - spice-widget: fix hotspot position on Wayland/HiDPI
  * !112 - meson: Allow building on a Wayland-only environment
  * !110 - usb-backend: Fix devices not being enumerated
  * !108 - spicy: Add keyboard shortcuts for copy/paste sync
  * Require meson >= 0.56

==== sudo ====
Version update (1.9.13 -> 1.9.13p1)
Subpackages: sudo-plugin-python

- Update to 1.9.13p1:
    Fixed a typo in the configure script that resulted in a line like
    鈥淽: command not found鈥� in the output. GitHub issue #238.
    Corrected the order of the C23 [[noreturn]] attribute in function
    prototypes. This fixes a build error with GCC 13. GitHub issue #239.
    The check make target misbehaved when there was more than one
    version of the UTF-8 C locale in the output of locale -a.
    GitHub issue #241.
    Removed a dependency on the AC_SYS_YEAR2038 macro in configure.ac.
    This was added in autoconf 2.72 but sudo鈥檚 configure.ac only
    required autoconf 2.70. GitHub issue #242.
    Relaxed the autoconf version requirement to version 2.69.

==== unbound ====
Version update (1.17.0 -> 1.17.1)
Subpackages: libunbound8 unbound-anchor

- Update to 1.17.1:
  * Features:
  - Expose 'statistics-inhibit-zero' as a configuration option;
    the default value retains Unbound's behavior.
  - Expose 'max-sent-count' as a configuration option; the default
    value retains Unbound's behavior.
  - Merge #461 from Christian Allred: Add max-query-restarts option.
    Exposes an internal configuration but the default value retains
    Unbound's behavior.
  - Merge #569 from JINMEI Tatuya: add keep-cache option to
    'unbound-control reload' to keep caches.
  * Bug Fixes:
  - Merge #768 from fobser: Arithmetic on a pointer to void is a
    GNU extension.
  - In unit test, print python script name list correctly.
  - testcode/dohclient sets log identity to its name.
  - Clarify the use of MAX_SENT_COUNT in the iterator code.
  - Fix that cachedb does not store failures in the external cache.
  - Merge #767 from jonathangray: consistently use IPv4/IPv6 in
    unbound.conf.5.
  - Fix to ignore tcp events for closed comm points.
  - Fix to make sure to not read again after a tcp comm point is
    closed.
  - Fix #775: libunbound: subprocess reap causes parent process
    reap to hang.
  - iana portlist update.
  - Complementary fix for distutils.sysconfig deprecation in
    Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2.
  - Fix #779: [doc] Missing documention in ub_resolve_event() for
    callback parameter was_ratelimited.
  - Ignore expired error responses.
  - Merge #720 from jonathangray: fix use after free when
    WSACreateEvent() fails.
  - Fix for the ignore of tcp events for closed comm points,
    preserve the use after free protection features.
  - Fix #782: Segmentation fault in stats.c:404.
  - Add SVCB and HTTPS to the types removed by 'unbound-control flush'.
  - Clear documentation for interactivity between the subnet module
    and the serve-expired and prefetch configuration options.
  - Fix #773: When used with systemd-networkd, unbound does not start
    until systemd-networkd-wait-online.service times out.
  - Merge #808: Wrap Makefile script's directory variables in quotes.
  - Fix to wrap Makefile scripts directory in quotes for uninstall.
  - Fix windows compile for libunbound subprocess reap comm point closes.
  - Update github workflows to use checkout v3.
  - Fix wildcard in hyperlocal zone service degradation, reported
    by Sergey Kacheev.
  * Add signature and keyring files
- Tighten permissions (boo#1173619)
- Add missing dependency: unbound-control-setup needs /usr/bin/openssl.

==== yast2-python-bindings ====
Version update (4.5.1 -> 4.5.2)

- Misc fixes to examples; (bsc#1199343).
- Fix python2 utf8 handling (python2 code wasn't displaying unicode
  strings); (bsc#1199348).
- Change conversion of Py_None to YCP_Void instead of YCP_Null;
  (bsc#1199344).
- 4.5.2

==== yast2-security ====
Version update (4.5.5 -> 4.5.6)

- bsc#1208492
  - do not store empty values in CFA login.defs empty value to
    avoid crash when parsing according to login.defs lens
- 4.5.6

==== zstd ====
Version update (1.5.2 -> 1.5.4)
Subpackages: libzstd1 libzstd1-32bit

- update to 1.5.4:
  * perf: +20% faster huffman decompression for targets that
    can't compile x64 assembly
  * perf: up to +10% faster streaming compression at levels 1-2
  * perf: +4-13% for levels 5-12 by optimizing function
    generation
  * pref: +3-11% compression speed for `arm` target
  * perf: +5-30% faster dictionary compression at levels 1-4
  * perf: +10-20% cold dict compression speed by prefetching
    CDict tables
  * perf: +1% faster compression by removing a branch in
    ZSTD_fast_noDict
  * perf: Small compression ratio improvements in high
    compression mode
  * perf: small speed improvement by better detecting
    `STATIC_BMI2` for `clang`
  * perf: Improved streaming performance when
    `ZSTD_c_stableInBuffer` is set
  * cli: Asynchronous I/O for improved cli speed
  * cli: Change `zstdless` behavior to align with `zless`
  * cli: Keep original file if `-c` or `--stdout` is given
  * cli: Keep original files when result is concatenated into a
    single output with `-o`
  * cli: Preserve Permissions and Ownership of regular files
  * cli: Print zlib/lz4/lzma library versions with `-vv`
  * cli: Print checksum value for single frame files with `-lv`
  * cli: Print `dictID` when present with `-lv`
  * cli: when `stderr` is *not* the console, disable status
    updates, but preserve final summary
  * cli: support `--best` and `--no-name` in `gzip` compatibility
    mode
  * cli: support for `posix` high resolution timer
    `clock_gettime()`, for improved benchmark accuracy
  * cli: improved help/usage (`-h`,  `-H`) formatting
  * cli: Fix better handling of bogus numeric values
  * cli: Fix input consists of multiple files _and_ `stdin`
  * cli: Fix tiny files passthrough
  * cli: Fix for `-r` on empty directory
  * cli: Fix empty string as argument for `--output-dir-*`
  * cli: Fix decompression memory usage reported by `-vv --long`
  * cli: Fix infinite loop when empty input is passed to trainer
  * cli: Fix `--adapt` doesn't work when `--no-progress` is also
    set
  * api: Support for Block-Level Sequence Producer
  * api: Support for in-place decompression
  * api: New  `ZSTD_CCtx_setCParams()`  function, set all
    parameters defined in a  `ZSTD_compressionParameters`
    structure
  * api: Streaming decompression detects incorrect header ID
    sooner
  * api: Window size resizing optimization for edge case
  * api: More accurate error codes for busy-loop scenarios
  * api: Fix limit overflow in `compressBound` and
    `decompressBound` (#3362, #3373, Cyan4973) reported by
    @nigeltao
  * api: Deprecate several advanced experimental functions:
    streaming (#3408, @embg), copy
  * bug: Fix corruption that rarely occurs in 32-bit mode with
    wlog=25
  * bug: Fix for block-splitter
  * bug: Fixes for Sequence Compression API
  * bug: Fix leaking thread handles on Windows
  * bug: Fix timing issues with cmake/meson builds
  * build: Allow user to select legacy level for cmake
  * build: Enable legacy support by default in cmake
  * build: Meson build script improvements
  * build: Add aarch64 to supported architectures for zstd_trace
  * build: support AIX architecture
  * build: Fix `ZSTD_LIB_MINIFY` build macro, which now reduces
    static library size by half
  * build: Fix Windows issues with Multithreading translation
    layer (#3364, #3380, @yoniko) and ARM64 target
  * build: Fix `cmake` script
  * doc: Updated man page, providing more details for `--train`
    mode
  * doc: Add decompressor errata document
  * misc: Enable Intel CET
  * misc: Fix `contrib/` seekable format
  * misc: Improve speed of the one-file library generator
- rebase pzstd.1.patch