Packages changed:
  7zip
  dracut (059+suse.447.g9d1fc722 -> 059+suse.476.g5e324584)
  exiv2
  kmod
  libX11 (1.8.5 -> 1.8.6)
  libstorage-ng (4.5.123 -> 4.5.127)
  libwebp (1.3.0 -> 1.3.1)
  libyajl
  openexr
  pipewire (0.3.72 -> 0.3.74)
  python-jsonschema (4.18.3 -> 4.18.4)
  python-referencing (0.29.1 -> 0.30.0)
  qemu (8.0.2 -> 8.0.3)
  setools
  systemd-presets-branding-openSUSE
  taglib (1.13 -> 1.13.1)
  xkeyboard-config (2.38 -> 2.39)
  yast2-trans (84.87.20230708.d1de37aed1 -> 84.87.20230714.966688ddd0)

=== Details ===

==== 7zip ====

- Enable ARM64 ASM introduced in 23.01

==== dracut ====
Version update (059+suse.447.g9d1fc722 -> 059+suse.476.g5e324584)
Subpackages: dracut-ima

- Update to version 059+suse.476.g5e324584:
  This is the 2nd backport of the most important fixes and features from the upstream master branch,
  while the release date of version 060 is still undefined.
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  Fixes:
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(nvmf): install 8021q module unconditionally
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  Other:
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used

==== exiv2 ====

- add exiv2-metadata-null-checks.patch fixes gwenview crashes and
  other apps https://github.com/Exiv2/exiv2/issues/2638

==== kmod ====
Subpackages: kmod-bash-completion libkmod2

- Edit usr-lib-modules.patch to /lib/modules provide fallback
  behavior for successfully running `make modules_install` in
  pristine tarballs.

==== libX11 ====
Version update (1.8.5 -> 1.8.6)
Subpackages: libX11-6 libX11-data libX11-xcb1

- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, & error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)

==== libstorage-ng ====
Version update (4.5.123 -> 4.5.127)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- merge gh#openSUSE/libstorage-ng#941
- added get_version_string function
- 4.5.127
- merge gh#openSUSE/libstorage-ng#940
- wait for block device before using blkdiscard
- 4.5.126
- merge gh#openSUSE/libstorage-ng#939
- wait for block device before using wipefs (bsc#1213420)
- coding style
- 4.5.125
- Translated using Weblate (Georgian) (bsc#1149754)
- 4.5.124

==== libwebp ====
Version update (1.3.0 -> 1.3.1)
Subpackages: libsharpyuv0 libwebp7 libwebpdemux2 libwebpmux3

- Update to version 1.3.1:
  * security fixes for lossless encoder (CVE-2023-1999)
  * improve error reporting through WebPPicture error codes
  * fix upsampling for RGB565 and RGBA4444 in NEON builds
  * img2webp: add -sharp_yuv & -near_lossless
  * fix webp_js with emcc >= 3.1.27 (stack size change)
  * CMake fixes
  * further updates to the container and lossless bitstream docs
- Drop libwebp-double-free.patch: fixed upstream.

==== libyajl ====

- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)

==== openexr ====
Subpackages: libIex-3_1-30 libIlmThread-3_1-30 libOpenEXR-3_1-30

- Add patch to fix regression on non-SSE architectures
  https://github.com/AcademySoftwareFoundation/openexr/issues/1460:
  * 1488.patch
- Also disable 'DWA[AB]Compression' test on aarch64 as the patch
  above fixes the issue for all targets, except aarch64

==== pipewire ====
Version update (0.3.72 -> 0.3.74)
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools

- Update to version 0.3.74:
  * Highlights
  - Fix a critical bug where audio to bluetooth devices would cut
    out randomly.
  - Improve RAOP compatibility.
  - Avoid crashes after an update.
  - Small fixes and improvements.
  * PipeWire
  - Mix info on port is now created explicitly.
  - Remove the node as a driver peer when stopping. This caused
    some problem with playback on and other remote bluetooth
    devices.
  - Work on avoiding crashes when loading new modules that use
    internal API with old libpipewire. This is typical after an
    update where the old library is still loaded by an
    application but when a new stream is created, updated modules
    are loaded.
  * Modules
  - The RTP source module now has an option to ignore the SSRC,
    which is useful to continue to receive the stream when the
    sender is restarted.
  - The native protocol will refuse to load twice now instead of
    silently ignoring the error.
  - module-raop is compatible with more devices.
  * SPA
  - plugins will now warn when running out of buffers. This is
    always a bad thing.
  - Merge scope based cleanup macros.
  - Add ratelimit function.
- Update to version 0.3.73:
  * Highlights
  - Fixes an ALSA resume after suspend error.
  - Handle and disable seemingly wrong hires timestamps from
    ALSA.
  - Filter-chain now has loadable plugin modules. The LV2 and
    sofa plugins are moved to a separate .so file to make things
    more modular.
  - Rate changes in the graph should now be handled more
    gracefully by loopback and filter-chain.
  - A regression in the rtp-sap module was fixed where it would
    in some cases fail to start.
  - A potential crash in the peaks resampler was fixed.
  - Many cleanups and other small bug fixes.
  * PipeWire
  - Fix a potential segfault when no fallback driver was set in
    the config.
  - Improve OPUS detection.
  - Add ASYNC flag to pw-filter and pw-stream when queue/dequeue
    is not called from the process function. This ensure we
    allocate an extra buffer.
  - Discard pending process callbacks when disconnecting.
  - Cleanups and improvements to the debug environment variable
    parsing.
  - The graph rate was tweaked to better handle very low rates
        such as those requested by pavucontrol when it does the
    signal monitoring.
  * Modules
  - An example filter module was added.
  - Filter-chain and loopback now disable the resamplers if no
    rate is specified and will always follow the graph rate.
  - Improve setup of filter-chain. The graph is now created when
    starting because this ensure the target graph rate is known.
  - Filter-chain can now link notify ports to control ports in
    the graph.
  - Filter-chain now has loadable plugin modules. The LV2 and
    sofa plugins are moved to a separate .so file.
  - A regression in the rtp-sap module was fixed where it would
    in some cases fail to start.
  - Module-rt now has options to disable rlimits, portal and
    rtkit.
  - module-raop-discover now has an options to set the latency.
  * Tools
  - pw-cat now supports overriding all stream properties.
  * SPA
  - Disable rate negotiation when the resampler is disabled. We
    will always follow the graph rate.
  - Set device.icon property for UCM ports as well.
  - Improve ALSA recover when using hires timestamps. This fixes
    some problems after resume from suspend.
  - ALSA will now warn and disable hires timestamp when they seem
    wrong.
    They can also be disabled manually with a property.
  - V4l2 will now gracefully handle ENOTTY when enumerating frame
    sizes and frame rates.
  - A potential crash in the peaks resampler was fixed.
  * pulse-server
  - A client crash in pavucontrol is avoided by always setting a
    card name.
  - The graph rate is now taken correctly when using the FIX
    flags.
  - An option was added to ignore the FIX flags of a stream. Also
    the documentation for those options was updated.
  - module-raop-discover now support latency_msec.
  * Bluetooth
  - Remove an assert and issue a warning/recover instead when a
    buffer is too small.
  * GStreamer
  - The device provider does locking when destroying the
    registry.

==== python-jsonschema ====
Version update (4.18.3 -> 4.18.4)

- update to 4.18.4:
  no changelog available, only a diff:
  https://github.com/python-jsonschema/jsonschema/compare/v4.18.3...v4.18.4

==== python-referencing ====
Version update (0.29.1 -> 0.30.0)

- Update to version 0.30.0:
  * Declare support for 3.12.
  * Update the referencing suite.
- Update to version 0.29.3:
  * Spelling.
- Update to version 0.29.2:
  * Improve the hashability of exceptions when they contain
    hashable data.
  * [pre-commit.ci] pre-commit autoupdate
  * Bump suite from `9335e4a` to `fe891e8`

==== qemu ====
Version update (8.0.2 -> 8.0.3)

- Update to version 8.0.3:
  * See full log: https://lists.nongnu.org/archive/html/qemu-stable/2023-07/msg00086.html
  * Security issues fixed:
  - 9pfs: prevent opening special files (CVE-2023-2861)
  - vhost-vdpa (CVE-2023-3301)
  * Use the official xkb name for Arabic layout, not the
    legacy synonym (bsc#1212966)
  * [openSUSE][RPM] Update to version 8.0.3

==== setools ====
Subpackages: python311-setools setools-console

- Add python3-setuptools as a runtime requirement of python3-setools
  (boo#1213305)

==== systemd-presets-branding-openSUSE ====

- enable the various libvirt modular daemons (boo#1212195)

==== taglib ====
Version update (1.13 -> 1.13.1)

- Update to version 1.13.1:
  * Fixed parsing of TXXX frames without description.
  * Detect MP4 atoms with invalid length or type.
  * Do not miss ID3v2 frames when an extended header is present.
  * Use property "DISCSUBTITLE" for ID3v2 "TSST" frame.
  * Build system improvements: Use absolute path for macOS dylib install name,
    support --define-prefix when using pkg-config, fixed minimum required
    CppUnit version.
  * Code clean up using clang-tidy.

==== xkeyboard-config ====
Version update (2.38 -> 2.39)
Subpackages: xkeyboard-config-lang

- Update to version 2.39
  * another bugfix release; also needed for changes for the Amharic
    (am_ET.UTF-8) compose key sequences in libX11 1.8.5 (see
    corresponding changelog entry in libX11 package); removes old
    remappings like ar --> ara (git db45bd75, 470ad2cd) [breaks
    current qemu build]

==== yast2-trans ====
Version update (84.87.20230708.d1de37aed1 -> 84.87.20230714.966688ddd0)
Subpackages: yast2-trans-cs yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-fr yast2-trans-hu yast2-trans-it yast2-trans-ja yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ru yast2-trans-zh_CN yast2-trans-zh_TW

- Update to version 84.87.20230714.966688ddd0:
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Indonesian)