Packages changed:
  apache2-mod_php8
  checkpolicy (3.4 -> 3.5)
  cppcheck (2.10 -> 2.10.2)
  ethtool
  graphviz
  grub2
  gtk4 (4.8.3 -> 4.10.0)
  harfbuzz (7.0.1 -> 7.1.0)
  icu
  krb5
  lib2geom
  libadwaita (1.2.2 -> 1.2.3)
  libhandy (1.8.1 -> 1.8.2)
  libpaper (2.0.9 -> 2.0.10)
  libselinux (3.4 -> 3.5)
  libselinux-bindings (3.4 -> 3.5)
  libsemanage (3.4 -> 3.5)
  libsepol (3.4 -> 3.5)
  mariadb (10.10.3 -> 10.11.2)
  openexr
  patterns-fonts
  php8
  policycoreutils (3.4 -> 3.5)
  postfix (3.7.3 -> 3.7.4)
  python-base
  python-semanage (3.4 -> 3.5)
  restorecond (3.4 -> 3.5)
  selinux-policy
  systemd (252.6 -> 252.7)
  vim (9.0.1367 -> 9.0.1386)
  xscreensaver
  yast2 (4.6.0 -> 4.6.1)
  yast2-sudo (4.6.0 -> 4.6.1)
  yast2-trans (84.87.20230211.83e08d8766 -> 84.87.20230306.ba31ff5670)

=== Details ===

==== apache2-mod_php8 ====

- add "/usr/share/php" to include_path
- allow to specify load order of extensions in %{php_sysconf}/conf.d
  [bsc#1205162]

==== checkpolicy ====
Version update (3.4 -> 3.5)

- Update to version 3.5
  * error out if required permission would exceed limit
  * Improve error message for type bounds
- Added additional developer key (Jason Zaman)

==== cppcheck ====
Version update (2.10 -> 2.10.2)

- update to 2.10.2:
  * GUI: Set proper title for compliance report dialog
  * GUI: Generate compliance report
  * Tokenizer: tweaked simplification of function pointers

==== ethtool ====

- Split bash-completion to separate sub-package

==== graphviz ====
Subpackages: libcdt5 libcgraph6 libgvc6 libpathplan4

- Fix RPM conditionals for PHP, elif does not work on Leap 15.x
- Remove unused ghostscript_any BuildRequires for qt5 and main
  flavors

==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen

- Fix riscv64 error for relocation 0x13 is not implemented yet
  * 0001-RISC-V-Handle-R_RISCV_CALL_PLT-reloc.patch

==== gtk4 ====
Version update (4.8.3 -> 4.10.0)
Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0

- Update to version 4.10.0:
  + GtkTextView: Document hanging indentation
  + GtkListView: Fix a size allocation problem
  + GtkFileChooser:
  - Fix paned behavior
  - Fix a crash
  + GtkText: Fix various problems with undo
  + Accessibility:
  - Make some getters transfer-full
  - Allow setting accessible parents and siblings
  - Add a role for toggle buttons
  - Miscellaneous property fixes and improvements
  + gtk: Improve the handling resize-during-size-allocate
  + gdk:
  - Introduce GdkTextureDownloader and use it
  - Make gdk_texture_get_format public
  + gsk:
  - Make mask nodes more versatile
  - Improve the GL implementation for texture scale nodes
  + X11: Fix key handling during DND
  + Tools:
  - gtk-builder-tool: Try harder to handle templates
  - gtk-builder-tool: Prefer properties over <child>
  + Updated translations.
- Update to version 4.9.4:
  + Printing:
  - Add a CPDB backend
  - Drop the lpr backend
  + GtkFileDialog: Robustness fixes
  + GtkScaleButton: Add an 'active' property
  + GtkSearchEntry: Add placeholder text
  + Fix conflicting type names between gtk and gio
  + Gsk:
  - Settable filtering for scaled textures
  - Add mask nodes
  - Some robustness and crash fixes
  + Wayland: Handle dispatch failing in more places
  + Deprecations: GtkVolumeButton
  + Updated translations.
- Changes from version 4.9.3:
  + Add GtkUriLauncher, as replacement for gtk_show_uri
  + Add GdkMonitor::description
  + Fix problems with tooltip sizing
  + Deprecations:
  - GtkStatusbar
  - GtkAssistant
  - GtkLockButton
  - gtk_gesture_set_sequence_state
  + GtkColumnView: Only create widgets for visible columns
  + GtkFileDialog: Drop shortcut folders API
  + GtkCalendar: Make marked days work again
  + GtkSwitch: Make state and active independently settable
  + GtkFileChooser:
  - Fix a crash with DND
  - Fix excessively wide sidebar
  - Make context menus work again
  + Accessibility:
  - Make GtkAccessible public, so it can be implemented outside
    GTK
  - Support accessible implementation for editables
  + CSS: Fix randomly stopping CSS animations
  + GL:
  - Fix synchronization with GStreamer
  - Fix problems with 3rd party GL in the same thread
  + Wayland: Fix startup notification with xdg_activation
  + Broadway: Implement modal windows
  + macOS: Make DND work
  + Build:
  - Require graphene 1.10
  - Require gobject-introspection 1.72
  + Updated translations.
- Update to version 4.9.2:
  + GtkFileChooserWidget: Add a grid view.
  + GtkText, GtkTextView:
  - Fix activation of the on-screen keyboard.
  - Prevent unexpected text direction changes.
  + GtkCenterBox: Add properties for children.
  + GtkTreeExpander: Add a hide-expander property.
  + GtkStringList: Add a construct-only strings property.
  + GtkBuilder: Support parsing Pango attributes in string form.
  + GtkGestureStylus: Add a stylus-only property.
  + GtkFileLauncher: New async-style api to replace gtk_show_uri.
  + GtkColorDialog, GtkFontDialog, GtkFileDialog, GtkAlertDialog:
  - APIs have seen some tweaks
  - Prefer portals when available
  - Fixes for cancellation
  + Add GDK_DEBUG=no-portals
  + Improve file DND with remote files
  + GtkInfoBar has been deprecated
  + gtk_widget_show/hide have been deprecated
  + gtk_show_uri has been deprecated
  + Wayland:
  - Fix button mask handling
  - Fix problems with cursor size on hi-dpi screens
  - Support newer versions of some protocols
  - Fix handling of surrounding text in input methods
- Changes from version 4.9.1:
  + GtkTreeView, GtkIconView, GtkComboBox and auxiliary classes
    have been deprecated.
    ... changelog too long, skipping 20 lines ...
  + Increase the memory limit for the jpeg loader to 1G.

==== harfbuzz ====
Version update (7.0.1 -> 7.1.0)
Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0

- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().

==== icu ====
Subpackages: libicu72 libicu72-ledata

- Use -fexcess-precision=fast as GCC 13 will default to -fexcess-precision=standard
  for C++.

==== krb5 ====
Subpackages: krb5-32bit krb5-client

- Update 0007-SELinux-integration.patch for SELinux 3.5;
  (bsc#1208887);

==== lib2geom ====

- Use -fexcess-precision=fast as GCC 13 changes the default
  for C++ compiler and without the change some tests fail on i586.
  More info can be seen here:
  https://gcc.gnu.org/gcc-13/porting_to.html#excess-precision

==== libadwaita ====
Version update (1.2.2 -> 1.2.3)
Subpackages: libadwaita-1-0 libadwaita-lang typelib-1_0-Adw-1

- Update to version 1.2.3:
  + AdwEntryRow: Fix :disabled styles.
  + AdwExpanderRow: Expose expanded state for a11y.
  + Memory leak fixes.

==== libhandy ====
Version update (1.8.1 -> 1.8.2)
Subpackages: libhandy-1-0 libhandy-lang typelib-1_0-Handy-1_0

- Update to version 1.8.2:
  + Demo:
  - Correctly use GtkSwitch
  - Fix a GLib deprecation
  + Docs: Fix dependency names
  + HdyTabView:
  - Fix set_menu_model() input check
  - Fix a typo in docs
  + HdySwipeable: Fix get_swipe_area() fallback
  + Memory leak fixes
  + Updated translations.

==== libpaper ====
Version update (2.0.9 -> 2.0.10)
Subpackages: libpaper-tools libpaper2

- Update to 2.0.10:
  * minor build fix.

==== libselinux ====
Version update (3.4 -> 3.5)
Subpackages: libselinux1 libselinux1-32bit selinux-tools

- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Added additional developer key (Jason Zaman)

==== libselinux-bindings ====
Version update (3.4 -> 3.5)

- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)

==== libsemanage ====
Version update (3.4 -> 3.5)
Subpackages: libsemanage-conf libsemanage-migrate-store libsemanage2

- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

==== libsepol ====
Version update (3.4 -> 3.5)

- Update to version 3.5
  * Stricter policy validation
  * do not write empty class definitions to allow simpler round-trip tests
  * reject attributes in type av rules for kernel policies
- Added additional developer key (Jason Zaman)

==== mariadb ====
Version update (10.10.3 -> 10.11.2)
Subpackages: libmariadbd19 mariadb-client mariadb-errormessages

- Update to 10.11.2:
  * release notes and changelog:
    https://mariadb.com/kb/en/changes-improvements-in-mariadb-1011/
    https://mariadb.com/kb/en/mariadb-10-11-2-release-notes/
    https://mariadb.com/kb/en/mariadb-10-11-2-changelog/
    https://mariadb.com/kb/en/mariadb-10-11-1-release-notes/
    https://mariadb.com/kb/en/mariadb-10-11-1-changelog/
    https://mariadb.com/kb/en/mariadb-10-11-0-release-notes/
    https://mariadb.com/kb/en/mariadb-10-11-0-changelog/
- Refresh mariadb-10.2.4-logrotate.patch

==== openexr ====
Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30

- Add upstream fix gcc13-fix.patch.

==== patterns-fonts ====
Subpackages: patterns-fonts-fonts patterns-fonts-fonts_opt

- Revert back to efont-unicode-bitmap-fonts from babelstone-han-fonts.
  The latter are apparently broken for Japanese at least.
- Fix changelog entries with invalid format.

==== php8 ====
Subpackages: php8-cli php8-ctype php8-dom php8-gd php8-gettext php8-iconv php8-mbstring php8-mysql php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter

- add "/usr/share/php" to include_path
- allow to specify load order of extensions in %{php_sysconf}/conf.d
  [bsc#1205162]

==== policycoreutils ====
Version update (3.4 -> 3.5)
Subpackages: policycoreutils-lang policycoreutils-python-utils python3-policycoreutils

- Update to version 3.5
  * fixfiles: Unmount temporary bind mounts on SIGINT
  * Lots of smaller changes
- Refreshed get_os_version.patch
- Drop chcat_handle_missing_translations.patch, is upstream
- Add additional BuildRequires for python
- Added additional developer key (Jason Zaman)
- Add requires for python3-distro for the devel package

==== postfix ====
Version update (3.7.3 -> 3.7.4)

- update to 3.7.4
  * Workaround: with OpenSSL 3 and later always turn on
    SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
    opportunities for TLS session reuse. This is safe because the SMTP protocol
    implements application-level framing, and is therefore not affected by TLS
    truncation attacks.
  * Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
    handles for digest implementations. In sufficiently hostile configurations,
    Postfix could mistakenly believe that a digest algorithm is available, and
    fail when it is not. A similar workaround may be needed for
    EVP_get_cipherbyname().
  * Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
    tls/tls_fprint.c evaluated its argument unconditionally; it should evaluate
    the argument only if there was no prior error.
  * Bugfix (bug introduced in Postfix 2.8): postscreen died with a segmentation
    violation when postscreen_dnsbl_threshold < 1. It should reject such input
    with a fatal error instead.
  * Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
  * Portability: Linux 6 support.
  * Added missing documentation that cidr:, pcre: and regexp: tables support
    inline specification only in Postfix 3.7 and later.
  * Rebased postfix-linux45.patch

==== python-base ====
Subpackages: libpython2_7-1_0 python-xml

- SLE-12 builds nis.so as well.

==== python-semanage ====
Version update (3.4 -> 3.5)

- Update to version 3.5
  * Allow user to set SYSCONFDIR
  * always write kernel policy when check_ext_changes is specified
- Added additional developer key (Jason Zaman)

==== restorecond ====
Version update (3.4 -> 3.5)

- Update to version 3.5
  * Code improvements, no user visible changes
- Added additional developer key (Jason Zaman)

==== selinux-policy ====
Subpackages: selinux-policy-targeted

- Remove erroneous SUSE man page. Will not be created with the
  3.5 toolchain

==== systemd ====
Version update (252.6 -> 252.7)
Subpackages: libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd-32bit systemd-container systemd-coredump systemd-lang udev

- Import commit d447802feee7752cd1756f8fa86ce2a6314ba24f (merge of v252.7)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/8e0a8094b8bbc442d262795b85ac57a37264c5fe...d447802feee7752cd1756f8fa86ce2a6314ba24f
- Fix return non-zero value when disabling SysVinit service(bsc#1208432)

==== vim ====
Version update (9.0.1367 -> 9.0.1386)
Subpackages: vim-data vim-data-common

- Updated to version 9.0.1386, fixes the following problems
  * Divide by zero in zero-width window.
  * Bass files are not recognized.
  * Still some "else if" constructs for setting options.
  * Crash when using a NULL object. (Ernie Rael)
  * Ballooneval interferes with Insert completion.
  * Test for 'toolbariconsize' may fail.
  * Wrong text displayed when using both 'linebreak' and 'list'.
  * Function for setting options not used consistently.
  * Crash when getting member of obj of unknown class.
  * Accessing invalid memory with put in Visual block mode.
  * job_status() may return "dead" if the process parent changed.
  * Illegal memory access when using virtual editing.
  * Functions for handling options are not ordered.
  * CTRL-X on 2**64 subtracts two. (James McCoy)
  * ACCESS_ names have a conflict with on some systems.
  * Failing test for strptime() doesn't show returned value.
  * xxd: combination of little endian and cols fails. (Aapo Rantalainen)
  * Setting HOMEBREW_NO_AUTO_UPDATE is not needed with Homebew version 4.
  * g'Esc is considered an error.
  * Options test fails with some window width.

==== xscreensaver ====
Subpackages: xscreensaver-data xscreensaver-data-extra xscreensaver-lang

- Added spec file changes to handle hard-coded PAM directories.
  * bsc#1204744
- Added fix for configuration reading
  * Added xscreensaver-bsc1204744.patch
  * bsc#1204744
  * Patch provided by Jaroslav Jindrak

==== yast2 ====
Version update (4.6.0 -> 4.6.1)
Subpackages: yast2-logs

- Merged SLE-15-SP5 branch
- Revert restoring DnsServerAPI.pm (bsc#1208833)
- 4.6.1

==== yast2-sudo ====
Version update (4.6.0 -> 4.6.1)

- Stop using File.exists? which no longer works in Ruby 3.2
  (bsc#1206419)
- 4.6.1

==== yast2-trans ====
Version update (84.87.20230211.83e08d8766 -> 84.87.20230306.ba31ff5670)
Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu

- Update to version 84.87.20230306.ba31ff5670:
  * Fixed string interpolations
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Swedish)
  * Translated using Weblate (Persian)
  * New POT for text domain 'control'.
  * New POT for text domain 'security'.
  * New POT for text domain 'packager'.
  * Translated using Weblate (Czech)