<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="650">
<package pkgid="c3435f8e2ab2c01eff45b4247e91fd7f445098683b22011bec5111ab3dfdfdb2" name="Judy" arch="i686">
  <version epoch="0" ver="1.0.5" rel="42.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="e273c37a103a8871abf822c87c1a7699ccb8e5d9799a8ec348d0ca1c2c81b646" name="Judy-devel" arch="i686">
  <version epoch="0" ver="1.0.5" rel="42.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="e5e70374427b35d6e14ee2f3e49e0ae98e7b113bf8ce46ad10201de44cefc3a0" name="ansible-collection-community-libvirt" arch="noarch">
  <version epoch="0" ver="2.3.0" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.1-1" date="1734436800">- Update to 1.3.1 (rhbz#2332772)
  - libvirt_lxc: add configuration for libvirt_lxc_noseclabel</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.0-1" date="1748260800">- Update to 1.4.0 (rhbz#2368572)
  - virt: implement basic check mode functionality (GH#98)
  - virt: implement the gathering of Dom UUIDs (GH#187)
  - virt: implement the gathering of Dom interface names and MAC addresses
    (GH#189)
  - virt: implement the removal of volumes for a Dom (GH#177)
  - New module community.libvirt.virt_volume: manage libvirt volumes inside a
    storage pool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0.0-1" date="1753099200">- Update to 2.0.0 (rhbz#2382300)
  - This is a major release of the community.libvirt collection
  - Many changes for virt_volume: see CHANGELOG.rst for details
  - New module community.libvirt.virt_install to provision new virtual machines
    using the virt-install tool</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1.0-1" date="1771243200">- Update to 2.1.0 (rhbz#2440142)
  - This is a minor release of the community.libvirt collection
  - virt_install:
    - Added support for memoryBacking source type configuration, including
      memfd for shared memory (GH#228)
    - Added support for primary value attribute (_value or value) in dynamic
      dict options that require a primary value alongside additional attributes
    - Enhanced cloud_init configuration handling for sub-options (meta-data,
      user-data and network-config) to support both string and dictionary inputs
    - Refactored common virt-install functionality into module_utils and
      doc_fragments to enable code reuse between modules
    - Fixed cloud_init configuration handling for meta-data, user-data and
      network-config
    - Fixed the dict-based options handling for events, resource and sysinfo
      options
  - virt_volume:
    - New return key/value pairs 'Type', 'Capacity' and 'Allocation' were added
      to command 'list_volumes' (GH#187)
    - Added ability to resize volumes if defined capacity is different; if
      volume already exists and defined capacity in XML differs, a resize is
      attempted
  - New module community.libvirt.virt_cloud_instance: Provision new virtual
    machines from cloud images via libvirt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.0-1" date="1774872000">- Update to 2.2.0 (rhbz#2452926)
  - This is a minor release of the community.libvirt collection
  - virt_cloud_instance: Added command's return field to provide visibility
    into executed commands during VM provisioning
  - virt_install: Added command's return field to provide visibility into
    executed commands during VM provisioning
  - libvirt_qemu: Vendor '_parse_clixml' locally to fix 'ImportError' on
    ansible-core devel (2.21+)</changelog>
  <changelog author="* Mon Mar 30 2026 Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.0-1" date="1782820800">- Update to 2.3.0 (rhbz#2494563)
  - This is a minor release of the community.libvirt collection
  - inventory: Added option 'alternate_id_groups' (default 'true')
  - inventory: Added option 'filter' (default '.*') to include domains by name
    or uuid that match regex
  - inventory: Added checks to prevent powered-off hosts from being issued
    guest agent calls
  - plugins: Replaced deprecated imports from 'ansible.module_utils._text' with
    'ansible.module_utils.common.text.converters' to avoid ansible-core
    deprecation warnings and prepare for removal of the private import path in
    ansible-core 2.24
  - virt: Add 'get_ifaddresses' function to retrieve domain interface addresses
  - virt_cloud_instance: Add support for compressed base images (gzip, bzip2,
    xz)
  - virt_cloud_instance: Add passt network support via shared network schema
    (GH#231)
  - virt_cloud_instance: Added cloud-config header when converting cloud-init
    user-data from dictionary form
  - virt_cloud_instance: Check if instance exists and not running before
    calling 'create()'
  - virt_install: Add 'wait_timeout' parameter to wait for multi-phase
    unattended installs to complete
  - virt_install: Add 'wwn' parameter to disk specifications for setting the
    World Wide Name of a disk device (GH#271)
  - virt_install: Add passt network support with 'value' shorthand and
    structured 'type: user' form (GH#231)
  - virt_install: Added cloud-config header when converting cloud-init
    user-data from dictionary form
  - virt_install: Remove incorrect 'required=True' from 'install.os' parameter
    to allow 'install.no_install=true' without specifying an OS</changelog>
</package>
<package pkgid="b2461b8ffb316bf7f2fc6101224855cdb47f3a2ec936b2a4f57b1642e7fc1def" name="bluefish" arch="i686">
  <version epoch="0" ver="2.2.16" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-5" date="1702468800">- Fix use of incompatible pointer types (upstream rev 8991)
- Fix improper use of pointer: https://sourceforge.net/p/bluefish/tickets/80/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-1" date="1710763200">- Update to 2.2.15 (rhbz#2269978)
  - Bluefish 2.2.15 is a minor maintenance release
  - New feature: it can highlight the indenting level with a vertical line,
    which is very useful during python programming and helps with a lot more
    programming languages
  - Fix zencoding for python releases newer than 3.12
  - Add a retry button when opening files from a remote location
  - Tiny performance improvement when scrolling
  - Fix a bug in the bookmarks function and the visible indenting function
    that potentially could lead to a crash
  - The perl syntax detection has been greatly improved
  - YAML syntax detection has been added
  - The code has several fixes to make it compile on modern Mac OSX releases
    and to make it compile with the clang compiler
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-2" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-4" date="1726833600">- Switch from enchant to enchant2 for spell checking where it's available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-1" date="1727006400">- Update to 2.2.16 (rhbz#2314037)
  - Bluefish 2.2.16 is mostly a maintenance release
  - New feature: Bookmarks can now be generated from external commands such as
    ctags
  - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
  - The old built-in javascript beautifier has been removed; Bluefish now uses
    the jsbeautify from your system (if available)
  - The word-wrap function has been fixed
- Add fix for type issue causing FTBFS with gcc 14
  (https://sourceforge.net/p/bluefish/tickets/95/)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-3" date="1737028801">- Fix for gcc 15</changelog>
</package>
<package pkgid="74a12b8488ac0ec6a9553739e1d04e09ba0fcb70a6ad58d8203509ce42f72030" name="bluefish-shared-data" arch="noarch">
  <version epoch="0" ver="2.2.16" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-5" date="1702468800">- Fix use of incompatible pointer types (upstream rev 8991)
- Fix improper use of pointer: https://sourceforge.net/p/bluefish/tickets/80/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-1" date="1710763200">- Update to 2.2.15 (rhbz#2269978)
  - Bluefish 2.2.15 is a minor maintenance release
  - New feature: it can highlight the indenting level with a vertical line,
    which is very useful during python programming and helps with a lot more
    programming languages
  - Fix zencoding for python releases newer than 3.12
  - Add a retry button when opening files from a remote location
  - Tiny performance improvement when scrolling
  - Fix a bug in the bookmarks function and the visible indenting function
    that potentially could lead to a crash
  - The perl syntax detection has been greatly improved
  - YAML syntax detection has been added
  - The code has several fixes to make it compile on modern Mac OSX releases
    and to make it compile with the clang compiler
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-2" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-4" date="1726833600">- Switch from enchant to enchant2 for spell checking where it's available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-1" date="1727006400">- Update to 2.2.16 (rhbz#2314037)
  - Bluefish 2.2.16 is mostly a maintenance release
  - New feature: Bookmarks can now be generated from external commands such as
    ctags
  - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
  - The old built-in javascript beautifier has been removed; Bluefish now uses
    the jsbeautify from your system (if available)
  - The word-wrap function has been fixed
- Add fix for type issue causing FTBFS with gcc 14
  (https://sourceforge.net/p/bluefish/tickets/95/)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-3" date="1737028801">- Fix for gcc 15</changelog>
</package>
<package pkgid="da14d27ad7ea93c1da97a1be42ac10b525dfc05203de142fc924ba583c707838" name="btcflash" arch="i686">
  <version epoch="11" ver="1.1" rel="2.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="28af331591ee78b0e885865bf651b1556b2ac9c63c962f6408aa1acd75e3dc9d" name="btcflash" arch="i686">
  <version epoch="10" ver="3.01" rel="5.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="f4777a3d2350357cd0b8408a02c8bb9dfa258ff6387b96c18f0aee35f7ada1e2" name="c-ares" arch="i686">
  <version epoch="0" ver="1.34.8" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.3-1.0.cf" date="1721908800">- Update to 1.32.3
  This is a bugfix release
  Changes:
  - Prevent complex recursion during query requeuing and connection clean-up
    for stability
  - Better propagate error codes in requeue situations
  - Try to prevent SIGPIPE from being generated and delivered to integrations
  Bugfixes:
  - Windows: Rework EventThread AFD code for better stability (GH#811)
  - Windows: If an IP address was detected to have changed, it could lead to a
    crash due to a bad pointer (regression introduced in 1.31.0)
  - Windows: Use 'QueryPerformanceCounters()' instead of 'GetTickCount64()' for
    better time accuracy (~15ms -&gt; ~1us)
  - Windows 32-bit config change callback needs to be tagged as 'stdcall',
    otherwise it could result in a crash
  - Tests that need accurate timing should not depend on internal symbols as
    there are C++ equivalents in 'std::chrono' (GH#809)
  - Kqueue (MacOS, *BSD): If the open socket count exceeded 8 (unlikely), it
    would try to allocate a new buffer that was too small
  - Missing manpage for 'ares_dns_record_set_id()'
  - Memory leak in 'ares__hosts_entry_to_hostent()' due to allocation strategy
    (GH#824)
  - UDP write failure detected via ICMP unreachable should trigger faster
    failover (GH#821)
  - Fix pycares test case regression due to wrong error code being returned
    (regression from 1.31.0) (GH#820)
  - Fix possible Windows crash during 'ares_destroy()' when using event threads
  - 'ARES_OPT_MAXTIMEOUTMS' wasn't being honored in all cases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.0-1.0.cf" date="1722945600">- Update to 1.33.0
  This is a feature and bugfix release
  Features:
  - Add DNS cookie support (RFC7873+RFC9018) to help prevent off-path cache
    poisoning attacks (GH#833)
  - Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
    on supported systems (GH#840)
  Changes:
  - Reorganize source tree (GH#822)
  - Refactoring of connection handling to prevent code duplication (GH#839)
  - New dynamic array data structure to prevent simple logic flaws in array
    handling in various code paths (GH#841)
  Bugfixes:
  - 'ares_destroy()' race condition during shutdown due to missing lock (GH#831)
  - Android: Preserve thread name after attaching it to JVM (GH#838)
  - Windows UWP (Store) support fix (GH#845)
- Test for TCP_FASTOPEN_CONNECT rather than MSG_FASTOPEN (GH#850)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.1-1.0.cf" date="1724846400">- Update to 1.33.1
  This is a bugfix release
  Bugfixes:
  - Work around systemd-resolved quirk that returns unexpected codes for single
    label names; also adds test cases to validate the work around works and
    will continue to work in future releases (GH#863)
    See also https://github.com/systemd/systemd/issues/34101
  - Fix sysconfig ndots default value; also adds containerized test case to
    prevent future regressions (GH#862)
  - Fix blank DNS name returning error code rather than valid record for
    commands like: 'adig -t SOA .'; also adds test case to prevent future
    regressions
  - Fix calculation of query times &gt; 1s
  - Fix building on old Linux releases that don't have 'TCP_FASTOPEN_CONNECT'
  - Fix minor Android build warnings (GH#848)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.1-1.0.cf" date="1728907200">- Update to 1.34.1
  This is a feature and bugfix release
  Features:
  - adig: Read arguments from adigrc (GH#856)
  - Add new pending write callback optimization via 'ares_set_pending_write_cb'
    (GH#857)
  * New function 'ares_process_fds()' (GH#875)
  - Failed servers should be probed rather than redirecting queries, which could
    cause unexpected latency (GH#877)
  - adig: Rework command line arguments to mimic dig from bind (GH#890)
  - Add new method for overriding network functions
    'ares_set_socket_function_ex()' to properly support all new functionality
    (GH#894)
  - Fix regression with custom socket callbacks due to DNS cookie support
    (GH#895)
  - ares_socket: Set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets
    (GH#887)
  - URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv()
    (GH#882)
  Changes:
  - Connection handling modularization (GH#857, GH#876)
  - Expose library/utility functions to tools (GH#860)
  - Remove 'ares__' prefix, just use 'ares_' for internal functions' (GH#872)
  Bugfixes:
  - Fix: Potential WIN32_LEAN_AND_MEAN redefinition (GH#869)
  - Fix googletest v1.15 compatibility (GH#874)
  - Fix pkgconfig thread dependencies (GH#884)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.2-1.0.cf" date="1729080000">- Update to 1.34.2
  - This release contains a fix for downstream packages detecting the c-ares
    version based on the contents of the header file rather than the
    distributed pkgconf or cmake files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.3-1.0.cf" date="1731326400">- Update to 1.34.3
  This is a bugfix release
  Changes:
  - Build the release package in an automated way so we can provide provenance
    as per SLSA3 (https://slsa.dev/) (GH#906)
  Bugfixes:
  - Some upstream servers are non-compliant with EDNS options; re-send queries
    without EDNS (GH#911)
  - Android: ≤7 needs sys/system_properties.h
  - Android: CMake needs '-D_GNU_SOURCE' and others (GH#914)
  - TSAN warns on missing lock, but lock isn't actually necessary (GH#915)
  - 'ares_getaddrinfo()' for 'AF_UNSPEC' should retry IPv4 if only IPv6 is
    received
  - 'ares_send()' shouldn't return 'ARES_EBADRESP', it's 'ARES_EBADQUERY'
  - Fix typos in man pages (GH#905)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.4-1.0.cf" date="1734436800">- Update to 1.34.4
  This is a bugfix release
  Changes:
  - QNX Port: Port to QNX 8, add primary config reading support, add CI build
    (GH#934, GH#937, GH#938)
  Bugfixes:
  - Empty TXT records were not being preserved (GH#922)
  - docs: Update deprecation notices for 'ares_create_query()' and
    'ares_mkquery()' (GH#910)
  - license: Some files weren't properly updated (GH#920)
  - Fix bind local device regression from 1.34.0 (GH#929, GH#931, GH#935)
  - CMake: Set policy version to prevent deprecation warnings (GH#932)
  - CMake: Shared and static library names should be the same on unix platforms
    like autotools uses (GH#933)
  - Update to latest autoconf archive macros for enhanced system compatibility
    (GH#936)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.5-1.0.cf" date="1744372800">- Update to 1.34.5
  This is a security release
  Security:
  - CVE-2025-31498: A use-after-free bug has been uncovered in read_answers()
    that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
  Changes:
  - Restore Windows XP support (GH#958)
  Bugfixes:
  - A missing mutex initialization would make busy polling for configuration
    changes (platforms other than Windows, Linux, MacOS) eat too much CPU
    (GH#974)
  - Pkgconfig may be generated wrong for static builds in relation to '-pthread'
    (GH#965)
  - Localhost resolution can fail if only one address family is in '/etc/hosts'
    (GH#947)
- Drop old ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.6-1.0.cf" date="1765540800">- Update to 1.34.6
  This is a security release
  Security:
  - CVE-2025-62408: Another use-after-free bug has been uncovered in
    read_answers() that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
  Changes:
  - Ignore Windows IDN Search Domains until proper IDN support is added
    (GH#1034)
  Bugfixes:
  - Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state (GH#1032)
  - Fix conversion of invalid service to port number in ares_getaddrinfo()
    (GH#1029)
  - Fix memory leak in ares_uri (GH#1012)
  - Ignore ares_event_configchg_init failures (GH#1009)
  - Use XOR for random seed generation on fallback logic (GH#994)
  - Fix clang build on Windows (GH#996)
  - Fix IPv6 link-local nameservers in /etc/resolv.conf (GH#996)
  - Fix a few build issues on MidnightBSD (GH#983)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.8-1.0.cf" date="1783512000">- Update to 1.34.8
  Bugfixes:
  - Revert "Mark parameters in callbacks as const", which shipped in 1.34.7
    - Changing the parameter types of the 'ares_callback', 'ares_host_callback'
      and 'ares_nameinfo_callback' function pointer typedefs was an unintended
      API break: existing applications with the historical non-const callback
      signatures no longer compiled, particularly in C++ where function pointer
      types must match exactly
    - The read-only nature of the callback parameters is now documented instead
      (GH#1244)
  Changes for 1.34.7:
  Security:
  - CVE-2026-33630: Use-after-free / double-free in c-ares' query-completion
    handling, remotely triggerable via ares_getaddrinfo() over TCP; see
    https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542
  - CPU-exhaustion denial of service via unbounded DNS name compression pointer
    chains; see
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pjmc-gx33-gc76
  - Memory-amplification denial of service via unvalidated DNS header record
    counts; see
    https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj
  Changes:
  - ares_getaddrinfo(): Handle a NULL node per POSIX and implement
    ARES_AI_PASSIVE (GH#1186)
  - Mark parameters in callbacks as const (GH#1060)
  - Correct ARES_CLASS_HESOID misspelling to ARES_CLASS_HESIOD (GH#1092)
  Bugfixes:
  - Fix sticky server recovery when all servers have failures (GH#1192)
  - Fix UDP socket exhaustion regression: retire connections per-connection,
    not via server failure count (GH#1197)
  - Guard DNS record binary length overflow (GH#1168)
  - Prevent integer overflow in allocation size calculations (GH#1147)
  - Prevent overflow in ares_array allocation size calculations (GH#1117)
  - Prevent integer overflow in buffer size calculation (GH#1116)
  - Add overflow checks to ares_buf_ensure_space() (GH#1094)
  - Skip name compression offsets beyond the 14-bit pointer limit (GH#1159)
  - ares_dns_parse: Reject name compression in RDATA where not permitted
    (RFC 3597) (GH#1190)
  - ares_dns_parse: Reject responses with more than one OPT record (RFC 6891)
    (GH#1189)
  - Discard oversized UDP datagrams instead of truncating the length frame
    (GH#1161)
  - Route numeric config parsing through range-checked ares_str_parse_uint
    (GH#1158)
  - Replace atoi-based port parsing with validated helper (GH#1097)
  - Defer TCP connection error handling until DNS responses are parsed (GH#1138)
  - Prevent undefined-behavior left shift in ares_calc_query_timeout() (GH#1151)
  - Use unsigned type for ares_round_up_pow2_u64 to avoid undefined behavior
    (GH#1107)
  - Fix undefined behavior in ares_buf_replace() pointer arithmetic (GH#1099)
  - ares_array: Reset offset when array becomes empty (GH#1165)
  - ares_iface_ips: Add ARES_IFACE_IP_NONE zero enum value (GH#1187)
  - ares_sysconfig_files: Recognize AIX netsvc.conf bind4/local4 tokens
    (GH#1188)
  - Use safe string construction in Windows sysconfig join path (GH#1143)
  - Fix zero-length RAW_RR losing type metadata during parsing (GH#1129)
  - Fix RAW_RR type tostr/fromstr roundtrip mismatch (GH#1123)
  - Fix NULL dereference for ifa netmask (GH#1120)
  - adig: Fix negated option prefix parsing (GH#1135)
  - Use UnregisterWaitEx to prevent use-after-free on Win32 (GH#1111)
  - Add NULL check after ares_malloc_zero in Windows UTF8 conversion (GH#1121)
  - Fix NULL dereference after ares_malloc_zero in Win32 IOCP event add
    (GH#1132)
  - Fix microsecond overflow in ares_queue_wait_empty timeout (GH#1122)
  - Fix NULL dereference in ares_buf_replace() on NULL buf (GH#1124)
  - Initialize *read_bytes in ares_socket_recvfrom() (GH#1125)
  - Fix memory leak of binbuf in ares_buf_parse_dns_binstr_int (GH#1126)
  - Fix memory leak of qcache entry on key allocation failure (GH#1127)
  - Fix memory leak of buf in ares_dns_multistring_combined() on OOM (GH#1110)
  - Fix memory leaks on error paths in two functions (GH#1109)
  - Fix memory leak of buckets in ares_htable_dict_keys() error path (GH#1108)
  - Fix memory leak of bucket-&gt;key in ares_htable_dict_insert error path
    (GH#1105)
  - Fix additional memory leaks (GH#1078, GH#1091)
  - Prevent corrupt addrinfo nodes on sockaddr allocation failure (GH#1112)
  - Fix two logic bugs in DNS cookie handling (GH#1103)
  - Fix linked list INSERT_BEFORE corruption and array insertdata_first
    ordering (GH#1101)
  - Fix HASH_IDX macro missing parentheses (GH#1128)
  - Fix malloc(0) in ares_htable_all_buckets on empty table (GH#1131)
  - Fix wrong sizeof in QNX confstr() call truncating domain names (GH#1130)
  - Clear probe pending flag after timeout (GH#1059)
  - Fix incorrect check for empty wide string (GH#1064)
  - Handle strdup failure (GH#1077)
  - doc: Reference ares_free_string(), not ares_free() (GH#1084)</changelog>
</package>
<package pkgid="09c6273d0aabd672746f44aac45403886b1dd47e434913cf5111ab4dd0df945f" name="c-ares-devel" arch="i686">
  <version epoch="0" ver="1.34.8" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.3-1.0.cf" date="1721908800">- Update to 1.32.3
  This is a bugfix release
  Changes:
  - Prevent complex recursion during query requeuing and connection clean-up
    for stability
  - Better propagate error codes in requeue situations
  - Try to prevent SIGPIPE from being generated and delivered to integrations
  Bugfixes:
  - Windows: Rework EventThread AFD code for better stability (GH#811)
  - Windows: If an IP address was detected to have changed, it could lead to a
    crash due to a bad pointer (regression introduced in 1.31.0)
  - Windows: Use 'QueryPerformanceCounters()' instead of 'GetTickCount64()' for
    better time accuracy (~15ms -&gt; ~1us)
  - Windows 32-bit config change callback needs to be tagged as 'stdcall',
    otherwise it could result in a crash
  - Tests that need accurate timing should not depend on internal symbols as
    there are C++ equivalents in 'std::chrono' (GH#809)
  - Kqueue (MacOS, *BSD): If the open socket count exceeded 8 (unlikely), it
    would try to allocate a new buffer that was too small
  - Missing manpage for 'ares_dns_record_set_id()'
  - Memory leak in 'ares__hosts_entry_to_hostent()' due to allocation strategy
    (GH#824)
  - UDP write failure detected via ICMP unreachable should trigger faster
    failover (GH#821)
  - Fix pycares test case regression due to wrong error code being returned
    (regression from 1.31.0) (GH#820)
  - Fix possible Windows crash during 'ares_destroy()' when using event threads
  - 'ARES_OPT_MAXTIMEOUTMS' wasn't being honored in all cases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.0-1.0.cf" date="1722945600">- Update to 1.33.0
  This is a feature and bugfix release
  Features:
  - Add DNS cookie support (RFC7873+RFC9018) to help prevent off-path cache
    poisoning attacks (GH#833)
  - Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
    on supported systems (GH#840)
  Changes:
  - Reorganize source tree (GH#822)
  - Refactoring of connection handling to prevent code duplication (GH#839)
  - New dynamic array data structure to prevent simple logic flaws in array
    handling in various code paths (GH#841)
  Bugfixes:
  - 'ares_destroy()' race condition during shutdown due to missing lock (GH#831)
  - Android: Preserve thread name after attaching it to JVM (GH#838)
  - Windows UWP (Store) support fix (GH#845)
- Test for TCP_FASTOPEN_CONNECT rather than MSG_FASTOPEN (GH#850)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.1-1.0.cf" date="1724846400">- Update to 1.33.1
  This is a bugfix release
  Bugfixes:
  - Work around systemd-resolved quirk that returns unexpected codes for single
    label names; also adds test cases to validate the work around works and
    will continue to work in future releases (GH#863)
    See also https://github.com/systemd/systemd/issues/34101
  - Fix sysconfig ndots default value; also adds containerized test case to
    prevent future regressions (GH#862)
  - Fix blank DNS name returning error code rather than valid record for
    commands like: 'adig -t SOA .'; also adds test case to prevent future
    regressions
  - Fix calculation of query times &gt; 1s
  - Fix building on old Linux releases that don't have 'TCP_FASTOPEN_CONNECT'
  - Fix minor Android build warnings (GH#848)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.1-1.0.cf" date="1728907200">- Update to 1.34.1
  This is a feature and bugfix release
  Features:
  - adig: Read arguments from adigrc (GH#856)
  - Add new pending write callback optimization via 'ares_set_pending_write_cb'
    (GH#857)
  * New function 'ares_process_fds()' (GH#875)
  - Failed servers should be probed rather than redirecting queries, which could
    cause unexpected latency (GH#877)
  - adig: Rework command line arguments to mimic dig from bind (GH#890)
  - Add new method for overriding network functions
    'ares_set_socket_function_ex()' to properly support all new functionality
    (GH#894)
  - Fix regression with custom socket callbacks due to DNS cookie support
    (GH#895)
  - ares_socket: Set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets
    (GH#887)
  - URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv()
    (GH#882)
  Changes:
  - Connection handling modularization (GH#857, GH#876)
  - Expose library/utility functions to tools (GH#860)
  - Remove 'ares__' prefix, just use 'ares_' for internal functions' (GH#872)
  Bugfixes:
  - Fix: Potential WIN32_LEAN_AND_MEAN redefinition (GH#869)
  - Fix googletest v1.15 compatibility (GH#874)
  - Fix pkgconfig thread dependencies (GH#884)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.2-1.0.cf" date="1729080000">- Update to 1.34.2
  - This release contains a fix for downstream packages detecting the c-ares
    version based on the contents of the header file rather than the
    distributed pkgconf or cmake files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.3-1.0.cf" date="1731326400">- Update to 1.34.3
  This is a bugfix release
  Changes:
  - Build the release package in an automated way so we can provide provenance
    as per SLSA3 (https://slsa.dev/) (GH#906)
  Bugfixes:
  - Some upstream servers are non-compliant with EDNS options; re-send queries
    without EDNS (GH#911)
  - Android: ≤7 needs sys/system_properties.h
  - Android: CMake needs '-D_GNU_SOURCE' and others (GH#914)
  - TSAN warns on missing lock, but lock isn't actually necessary (GH#915)
  - 'ares_getaddrinfo()' for 'AF_UNSPEC' should retry IPv4 if only IPv6 is
    received
  - 'ares_send()' shouldn't return 'ARES_EBADRESP', it's 'ARES_EBADQUERY'
  - Fix typos in man pages (GH#905)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.4-1.0.cf" date="1734436800">- Update to 1.34.4
  This is a bugfix release
  Changes:
  - QNX Port: Port to QNX 8, add primary config reading support, add CI build
    (GH#934, GH#937, GH#938)
  Bugfixes:
  - Empty TXT records were not being preserved (GH#922)
  - docs: Update deprecation notices for 'ares_create_query()' and
    'ares_mkquery()' (GH#910)
  - license: Some files weren't properly updated (GH#920)
  - Fix bind local device regression from 1.34.0 (GH#929, GH#931, GH#935)
  - CMake: Set policy version to prevent deprecation warnings (GH#932)
  - CMake: Shared and static library names should be the same on unix platforms
    like autotools uses (GH#933)
  - Update to latest autoconf archive macros for enhanced system compatibility
    (GH#936)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.5-1.0.cf" date="1744372800">- Update to 1.34.5
  This is a security release
  Security:
  - CVE-2025-31498: A use-after-free bug has been uncovered in read_answers()
    that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
  Changes:
  - Restore Windows XP support (GH#958)
  Bugfixes:
  - A missing mutex initialization would make busy polling for configuration
    changes (platforms other than Windows, Linux, MacOS) eat too much CPU
    (GH#974)
  - Pkgconfig may be generated wrong for static builds in relation to '-pthread'
    (GH#965)
  - Localhost resolution can fail if only one address family is in '/etc/hosts'
    (GH#947)
- Drop old ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.6-1.0.cf" date="1765540800">- Update to 1.34.6
  This is a security release
  Security:
  - CVE-2025-62408: Another use-after-free bug has been uncovered in
    read_answers() that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
  Changes:
  - Ignore Windows IDN Search Domains until proper IDN support is added
    (GH#1034)
  Bugfixes:
  - Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state (GH#1032)
  - Fix conversion of invalid service to port number in ares_getaddrinfo()
    (GH#1029)
  - Fix memory leak in ares_uri (GH#1012)
  - Ignore ares_event_configchg_init failures (GH#1009)
  - Use XOR for random seed generation on fallback logic (GH#994)
  - Fix clang build on Windows (GH#996)
  - Fix IPv6 link-local nameservers in /etc/resolv.conf (GH#996)
  - Fix a few build issues on MidnightBSD (GH#983)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.8-1.0.cf" date="1783512000">- Update to 1.34.8
  Bugfixes:
  - Revert "Mark parameters in callbacks as const", which shipped in 1.34.7
    - Changing the parameter types of the 'ares_callback', 'ares_host_callback'
      and 'ares_nameinfo_callback' function pointer typedefs was an unintended
      API break: existing applications with the historical non-const callback
      signatures no longer compiled, particularly in C++ where function pointer
      types must match exactly
    - The read-only nature of the callback parameters is now documented instead
      (GH#1244)
  Changes for 1.34.7:
  Security:
  - CVE-2026-33630: Use-after-free / double-free in c-ares' query-completion
    handling, remotely triggerable via ares_getaddrinfo() over TCP; see
    https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542
  - CPU-exhaustion denial of service via unbounded DNS name compression pointer
    chains; see
    https://github.com/c-ares/c-ares/security/advisories/GHSA-pjmc-gx33-gc76
  - Memory-amplification denial of service via unvalidated DNS header record
    counts; see
    https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj
  Changes:
  - ares_getaddrinfo(): Handle a NULL node per POSIX and implement
    ARES_AI_PASSIVE (GH#1186)
  - Mark parameters in callbacks as const (GH#1060)
  - Correct ARES_CLASS_HESOID misspelling to ARES_CLASS_HESIOD (GH#1092)
  Bugfixes:
  - Fix sticky server recovery when all servers have failures (GH#1192)
  - Fix UDP socket exhaustion regression: retire connections per-connection,
    not via server failure count (GH#1197)
  - Guard DNS record binary length overflow (GH#1168)
  - Prevent integer overflow in allocation size calculations (GH#1147)
  - Prevent overflow in ares_array allocation size calculations (GH#1117)
  - Prevent integer overflow in buffer size calculation (GH#1116)
  - Add overflow checks to ares_buf_ensure_space() (GH#1094)
  - Skip name compression offsets beyond the 14-bit pointer limit (GH#1159)
  - ares_dns_parse: Reject name compression in RDATA where not permitted
    (RFC 3597) (GH#1190)
  - ares_dns_parse: Reject responses with more than one OPT record (RFC 6891)
    (GH#1189)
  - Discard oversized UDP datagrams instead of truncating the length frame
    (GH#1161)
  - Route numeric config parsing through range-checked ares_str_parse_uint
    (GH#1158)
  - Replace atoi-based port parsing with validated helper (GH#1097)
  - Defer TCP connection error handling until DNS responses are parsed (GH#1138)
  - Prevent undefined-behavior left shift in ares_calc_query_timeout() (GH#1151)
  - Use unsigned type for ares_round_up_pow2_u64 to avoid undefined behavior
    (GH#1107)
  - Fix undefined behavior in ares_buf_replace() pointer arithmetic (GH#1099)
  - ares_array: Reset offset when array becomes empty (GH#1165)
  - ares_iface_ips: Add ARES_IFACE_IP_NONE zero enum value (GH#1187)
  - ares_sysconfig_files: Recognize AIX netsvc.conf bind4/local4 tokens
    (GH#1188)
  - Use safe string construction in Windows sysconfig join path (GH#1143)
  - Fix zero-length RAW_RR losing type metadata during parsing (GH#1129)
  - Fix RAW_RR type tostr/fromstr roundtrip mismatch (GH#1123)
  - Fix NULL dereference for ifa netmask (GH#1120)
  - adig: Fix negated option prefix parsing (GH#1135)
  - Use UnregisterWaitEx to prevent use-after-free on Win32 (GH#1111)
  - Add NULL check after ares_malloc_zero in Windows UTF8 conversion (GH#1121)
  - Fix NULL dereference after ares_malloc_zero in Win32 IOCP event add
    (GH#1132)
  - Fix microsecond overflow in ares_queue_wait_empty timeout (GH#1122)
  - Fix NULL dereference in ares_buf_replace() on NULL buf (GH#1124)
  - Initialize *read_bytes in ares_socket_recvfrom() (GH#1125)
  - Fix memory leak of binbuf in ares_buf_parse_dns_binstr_int (GH#1126)
  - Fix memory leak of qcache entry on key allocation failure (GH#1127)
  - Fix memory leak of buf in ares_dns_multistring_combined() on OOM (GH#1110)
  - Fix memory leaks on error paths in two functions (GH#1109)
  - Fix memory leak of buckets in ares_htable_dict_keys() error path (GH#1108)
  - Fix memory leak of bucket-&gt;key in ares_htable_dict_insert error path
    (GH#1105)
  - Fix additional memory leaks (GH#1078, GH#1091)
  - Prevent corrupt addrinfo nodes on sockaddr allocation failure (GH#1112)
  - Fix two logic bugs in DNS cookie handling (GH#1103)
  - Fix linked list INSERT_BEFORE corruption and array insertdata_first
    ordering (GH#1101)
  - Fix HASH_IDX macro missing parentheses (GH#1128)
  - Fix malloc(0) in ares_htable_all_buckets on empty table (GH#1131)
  - Fix wrong sizeof in QNX confstr() call truncating domain names (GH#1130)
  - Clear probe pending flag after timeout (GH#1059)
  - Fix incorrect check for empty wide string (GH#1064)
  - Handle strdup failure (GH#1077)
  - doc: Reference ares_free_string(), not ares_free() (GH#1084)</changelog>
</package>
<package pkgid="94d396bb39597b8131c8079c633af56c1b5699d61b583bc3bdb9f980981a3d21" name="cdda2wav" arch="i686">
  <version epoch="10" ver="3.01" rel="5.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="5610d0f36cecd7933e205bea7a77c30a517a30da2f96af6c34349fd51ab203e2" name="cdda2wav" arch="i686">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="652c4f7757a7c57c913b72646442093c6edd0e6641a50ad66ccc25d11a235e9f" name="cdrecord" arch="i686">
  <version epoch="10" ver="3.01" rel="5.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="567ec3a865049e92fa3cf54135808bbe899dfa632e83aff56fff8c01d6d57737" name="cdrecord" arch="i686">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="f48da25211ef8ea1d03d3f694c4e047f6944af86608292ec278d06ab342571bd" name="cdrtools-devel" arch="i686">
  <version epoch="10" ver="3.01" rel="5.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="8c9b145b32116c431db9c9225c8564904e968222748732834008598993e69e4b" name="cdrtools-devel" arch="i686">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="61d2e70b576b5f8061f07a81cb3c1c5274fc885e81290cdcf0ebfadd3424495e" name="cdrtools-libs" arch="i686">
  <version epoch="10" ver="3.01" rel="5.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="46216ac19349a60a4b737109d7b785e837ad6ba8456a604b779e60c8de08a6eb" name="cdrtools-libs" arch="i686">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="ce33b597568d1e2d87ef081ba50c9c82d1919f81c818df44724204363567f386" name="check" arch="i686">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="393ad7f5c307d39d93cc507312a870e55f9cdb10df48bf211d79c5618da6af06" name="check-checkmk" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="ac4fbd9231c2de1e4696c1afd786e5983c134358c33c36475680b58f7e795168" name="check-devel" arch="i686">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="b0548b2224bd9d2f3a0b5d85c38f68d17da30059b520215aff13a89278696286" name="check-static" arch="i686">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="d522b8e16c4b572cd3ed6e48cc1966b2dbc1ae11236e98f635f7dda88711c1bd" name="city-fan.org-release" arch="noarch">
  <version epoch="0" ver="3" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-14" date="1723809600">- Add support for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-15" date="1730289600">- Fedora 41 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-16" date="1738843200">- Fedora 42 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-17" date="1745236800">- Fedora 42 rebuild complete and released
- Drop support for EOL distros prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-18" date="1751889600">- Include GPG key for Fedora 43 in package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-19" date="1755086400">- Fedora 43 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-20" date="1761739200">- Fedora 43 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-21" date="1770379200">- Fedora 44 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-22" date="1771502400">- Fedora 44 rebuild complete</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-23" date="1777896000">- Fedora 44 released</changelog>
</package>
<package pkgid="c49ed6b37d1096ecb7aaedb8a49c4c58ca2cefd72fd0a6ac879ed8c90862a450" name="contagged" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-5" date="1642507200">- Rebase code using actively-maintained fork at https://github.com/bob4os/contagged
- Drop support for old distributions prior to Fedora 19
  - Drop support for Apache httpd 2.2
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-6" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="63e23287fdc44a26c2f5bdb992f035945f7121104d3915894ee63174275aa028" name="curl" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="1f0c2bc8ae2e8748ffd975cb82bd52f8fcba04de05fae20febfc8f6d02feb949" name="curl-minimal" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="2edd4d9a78ed5b9083fc9d804ac62c1c54cce672a4c354ca12546ef59da053db" name="davfs2" arch="i686">
  <version epoch="0" ver="1.7.3" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.0-7.0.cf" date="1730289600">- Add support for building with neon version 0.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.0.cf" date="1732276800">- Update to 1.7.1
  - The project has been moved to github, which will make it easier to track
    issues, receive PR requests, implement CI, etc.
  - Hide password prompt when -o username=myname is specified
  - Fix segfault on prop query on backup node
  - Fix autoload fuse module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.1.cf" date="1733486400">- Add support for building with neon version 0.34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-3.0.cf" date="1753876800">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards
- Add support for building with neon version 0.35</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-4.0.cf" date="1753876801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-1.0.cf" date="1756209600">- Update to 1.7.2 (rhbz#2391098)
  - Add support for libneon 34, 35
  - Increase buf read size to 64 (fixes read issue on linux 6.16)
  - Allow setting a mount password via DAVFS_PASSWORD
  - Introduce sync_on_lookup option (off by default)
  - Don't compress man pages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.3-1.0.cf" date="1773403200">- Update to 1.7.3 (rhbz#2447065)
  - Add musl support
  - Fix macro-substitution in manual pages
  - Remove hardcoded neon versions from configure.ac
- Use %{make_build} and %{make_install}
- Consider AUTHORS as a license file rather than just documentation</changelog>
</package>
<package pkgid="f9271c149d6969a873f0d5ddd8e6531c2b5e369f81895ec4388697b80f1b2c84" name="demoroniser" arch="noarch">
  <version epoch="0" ver="1" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-2" date="1651060800">- Modernize spec and add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8fcef00b1d8d49d78c4a2ea03ce5c012bf18a8f41fac21dff295816972fb7a06" name="dovecot" arch="i686">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="609c30fbbdd67a5cd3b68beff9556d4b0377cc753371c32db4ed521e91a0fb72" name="dovecot-devel" arch="i686">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="d01dca33820eec9ceb9c529fa068847a49622513ca5dfce9706d0dc58ea2594f" name="dovecot-mysql" arch="i686">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="8442e9bcfc7d5d15933d05165e56839cea9ab8c78267ec0ccd51fe75b73c0fab" name="dovecot-pgsql" arch="i686">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="160c90bf1a83ef5427005a4b728aef014f2eea8ca8d2df5b23c0ac838d2087de" name="dovecot-pigeonhole" arch="i686">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="5188150044346343a384f01e6123032253ecdad52b35e1c66c94c406c220a571" name="drive-google" arch="i686">
  <version epoch="0" ver="0.4.0" rel="1.a42ab82.fc36"/>
  <changelog author="Vaughan &lt;devel at agrez dot net&gt; - 0.3.9.1-3.52aed62" date="1558958400">- Rebuild for f30</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.9.1-4.52aed62" date="1577793600">- Local f31 build as upstream is unresponsive
  https://github.com/agrez/drive-google/issues/5
- Use %license
- Drop legacy %defattr</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-1.a42ab82" date="1617710400">- New release
- Update to git commit: a42ab82225d2c9cc370926d6f0055a7039979e66</changelog>
</package>
<package pkgid="8d2a29df7f99150c64fdacd0f8a2227a33108ec925a83fff3d79090b7f2bf59e" name="geoipupdate" arch="i686">
  <version epoch="0" ver="6.1.0" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.11.1-1" date="1679054400">- Update to 4.11.1
  - 'github.com/pkg/errors' is no longer used to wrap errors
  - Docker secrets are now supported for the MaxMind account ID and license
    key (GH#197)
  - The Dockerfile now has a Healthcheck that makes sure the modification date
    of the database directory is within the update period
  - The Docker images are now published to the GitHub Container Registry,
    'ghcr.io'; we will likely stop publishing to Docker Hub in the near future</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.0.0-1" date="1681387200">- Update to 5.0.0
  - Redefined the 'Reader' and 'Writer' interface APIs in
    'pkg/geoipupdate/database'; this change aims to to make it easier to
    introduce custom implementations of these interfaces
  - Changed the signature of 'NewConfig' in 'pkg/geoipupdate' to accept
    optional parameters; this change allows the introduction of new flags or
    config options without making breaking changes to the function's signature
  - Introduced 'Parallelism' as a new flag and config option to enable
    concurrent database updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.0.4-1" date="1681905600">- Update to 5.0.4
  - The 5.0.0 release mistakenly set the file permissions on downloaded
    databases to 0600; this restores the previous behaviour of using 0644
    (GH#217, GH#218)
  - "Database ... up to date" messages are now only shown if the verbose flag
    is set (GH#219)
  - Since version 5.0.0, the default database directory was not being correctly
    set for Debian and RPM package builds -  the directory
    '/usr/local/share/GeoIP' was being used rather than '/usr/share/GeoIP';
    this build restores '/usr/share/GeoIP' as the default directory for these
    builds (GH#222)
  - Since version 4.9.0, the incorrect commit was tagged; this release attempts
    to fix the release process to prevent this issue</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-1" date="1683806400">- Update to 5.1.1
  - Fixed the Docker health-check script to use the correct time of the last
    update attempt (GH#225)
  - Added new '--output' flag to print JSON to standard output describing the
    result of the run
  - Compilation with Go versions before 1.19 is no longer supported</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1" date="1689854401">- Update to 6.0.0
  - 'geoipupdate' now supports configuration via environment variables: any
    configuration set this way will override any value from the config file,
    but still be overridden by any associated command line option (if any)
  - The following new environment variables are supported:
    - GEOIPUPDATE_ACCOUNT_ID
    - GEOIPUPDATE_ACCOUNT_ID_FILE
    - GEOIPUPDATE_CONF_FILE
    - GEOIPUPDATE_DB_DIR
    - GEOIPUPDATE_EDITION_IDS
    - GEOIPUPDATE_HOST
    - GEOIPUPDATE_LICENSE_KEY
    - GEOIPUPDATE_LICENSE_KEY_FILE
    - GEOIPUPDATE_LOCK_FILE
    - GEOIPUPDATE_PARALLELISM
    - GEOIPUPDATE_PRESERVE_FILE_TIMES
    - GEOIPUPDATE_PROXY
    - GEOIPUPDATE_PROXY_USER_PASSWORD
    - GEOIPUPDATE_RETRY_FOR
    - GEOIPUPDATE_VERBOSE
  - Changed the signature of 'NewConfig' in 'pkg/geoipupdate' to no longer
    accept a positional config file path argument, which can now be passed in
    using the option from 'WithConfigFile' along with the other optional
    parameters
  - 'geoipupdate' and 'NewConfig' no longer require a config file to exist
  - The '--stack-trace' flag has been removed; this flag has been broken since
    4.11.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1" date="1704888000">- Update to 6.1.0
  - 'geoipupdate' now sets the version in the 'User-Agent' header to the
    version in the binary; while there were no issues with the version in the
    header, this makes sure it will match the binary (the header also now
    includes build information, such as OS and architecture)
  - White spaces in secret files 'GEOIPUPDATE_ACCOUNT_ID_FILE',
    'GEOIPUPDATE_LICENSE_KEY_FILE' are ignored (GH#262)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-3" date="1706097600">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-4" date="1707825600">- Rebuild for golang 1.22.0</changelog>
</package>
<package pkgid="acc78fc7127bead4346861fbd9ed209fc9dfbd2efb0f9151c1100dee2aa5de73" name="geoipupdate-cron" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.11.1-1" date="1679054400">- Update to 4.11.1
  - 'github.com/pkg/errors' is no longer used to wrap errors
  - Docker secrets are now supported for the MaxMind account ID and license
    key (GH#197)
  - The Dockerfile now has a Healthcheck that makes sure the modification date
    of the database directory is within the update period
  - The Docker images are now published to the GitHub Container Registry,
    'ghcr.io'; we will likely stop publishing to Docker Hub in the near future</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.0.0-1" date="1681387200">- Update to 5.0.0
  - Redefined the 'Reader' and 'Writer' interface APIs in
    'pkg/geoipupdate/database'; this change aims to to make it easier to
    introduce custom implementations of these interfaces
  - Changed the signature of 'NewConfig' in 'pkg/geoipupdate' to accept
    optional parameters; this change allows the introduction of new flags or
    config options without making breaking changes to the function's signature
  - Introduced 'Parallelism' as a new flag and config option to enable
    concurrent database updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.0.4-1" date="1681905600">- Update to 5.0.4
  - The 5.0.0 release mistakenly set the file permissions on downloaded
    databases to 0600; this restores the previous behaviour of using 0644
    (GH#217, GH#218)
  - "Database ... up to date" messages are now only shown if the verbose flag
    is set (GH#219)
  - Since version 5.0.0, the default database directory was not being correctly
    set for Debian and RPM package builds -  the directory
    '/usr/local/share/GeoIP' was being used rather than '/usr/share/GeoIP';
    this build restores '/usr/share/GeoIP' as the default directory for these
    builds (GH#222)
  - Since version 4.9.0, the incorrect commit was tagged; this release attempts
    to fix the release process to prevent this issue</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-1" date="1683806400">- Update to 5.1.1
  - Fixed the Docker health-check script to use the correct time of the last
    update attempt (GH#225)
  - Added new '--output' flag to print JSON to standard output describing the
    result of the run
  - Compilation with Go versions before 1.19 is no longer supported</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1" date="1689854401">- Update to 6.0.0
  - 'geoipupdate' now supports configuration via environment variables: any
    configuration set this way will override any value from the config file,
    but still be overridden by any associated command line option (if any)
  - The following new environment variables are supported:
    - GEOIPUPDATE_ACCOUNT_ID
    - GEOIPUPDATE_ACCOUNT_ID_FILE
    - GEOIPUPDATE_CONF_FILE
    - GEOIPUPDATE_DB_DIR
    - GEOIPUPDATE_EDITION_IDS
    - GEOIPUPDATE_HOST
    - GEOIPUPDATE_LICENSE_KEY
    - GEOIPUPDATE_LICENSE_KEY_FILE
    - GEOIPUPDATE_LOCK_FILE
    - GEOIPUPDATE_PARALLELISM
    - GEOIPUPDATE_PRESERVE_FILE_TIMES
    - GEOIPUPDATE_PROXY
    - GEOIPUPDATE_PROXY_USER_PASSWORD
    - GEOIPUPDATE_RETRY_FOR
    - GEOIPUPDATE_VERBOSE
  - Changed the signature of 'NewConfig' in 'pkg/geoipupdate' to no longer
    accept a positional config file path argument, which can now be passed in
    using the option from 'WithConfigFile' along with the other optional
    parameters
  - 'geoipupdate' and 'NewConfig' no longer require a config file to exist
  - The '--stack-trace' flag has been removed; this flag has been broken since
    4.11.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1" date="1704888000">- Update to 6.1.0
  - 'geoipupdate' now sets the version in the 'User-Agent' header to the
    version in the binary; while there were no issues with the version in the
    header, this makes sure it will match the binary (the header also now
    includes build information, such as OS and architecture)
  - White spaces in secret files 'GEOIPUPDATE_ACCOUNT_ID_FILE',
    'GEOIPUPDATE_LICENSE_KEY_FILE' are ignored (GH#262)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-3" date="1706097600">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-4" date="1707825600">- Rebuild for golang 1.22.0</changelog>
</package>
<package pkgid="efc2bb4fe8f7a9c87f150523222a971c634bbd8c3b15972e4564b7a45573f95d" name="getmail" arch="noarch">
  <version epoch="0" ver="5.16" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.16-1" date="1635768000">- Update to 5.16
  - Add new use_netrc and netrc_file configuration options to support reading
    username/password from a .netrc file
  - Documentation updates
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.16-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="acf3a52b7a0d9169d4d05c4ce623b4b37db081c018afa8930989a12f29f99c97" name="grepmail" arch="noarch">
  <version epoch="0" ver="5.3111" rel="22.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-16.0.cf" date="1674129600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-17.0.cf" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-18.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-20.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-22.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="94de6d32e6d9622a475105d39458a0dd99ccddcec249069c2af2c1ce04dbbd45" name="gtkwave" arch="i686">
  <version epoch="0" ver="3.3.127" rel="1.fc36"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.3.121-5" date="1738584000">- Rebuild for tcl/tk</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.121-6" date="1740830400">- Add dependency on gdk-pixbuf2-modules-extra, needed for XPM support on
  F-41, EL-10 onwards
  (https://github.com/gtkwave/gtkwave/issues/417#issuecomment-2682344768)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.122-1" date="1745323200">- Update to 3.3.122
  - Buffer warning fix in fstVcdIDForFwrite
  - Warning fixes in vzt_read.c and fstapi.c
  - Prototype fixes for port to gcc15
  - Fixes for tcl9 compatibility
  - Added fixes for --saveonexit command line option
  - Fix for convert_real for TR_REAL traces
  - Fix for popen_san() in vcd2fst using fsdb binaries
  - Added fstWriterGetFlushContextPending() to fstapi.c/.h
  - Reenable wayland code for primary and baseline markers in wavewindow.c
  - Unnamed scope fix for fstReader
  - Opaque pointer warning fix for fstapi.c
  - Remove broken pseudo-2D array support in fst.c
  - Fix in fst.c for signals whose MSB/LSB/len mismatch
  - libfst #15: fstReaderOpen should not fail on empty FST file
  - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
    "Fix case of missing newline at EOF for VCD loaders"
  - Fix fstminer not handling string transitions correctly (GH#423)
  - Fix in fst.c for duplicate string values
  - Remove duplicate string values from adjacent value changes
  - libghw: Add from upstream for ghdl_rtik_type_i64
  - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
    (GH#428)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.123-1" date="1746792000">- Update to 3.3.123
  - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
    3.3.122 introduced
  - Fix improper autocoalesce of adjacent duplicate symbols
  - Preserve dimension on integer array element when expanded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.124-1" date="1747224000">- Update to 3.3.124
  - Ensure type name in $var for VCD saver is &gt;0 length
  - Preserve bitblasted vector ordering with VCD saver.
  - Use full type names in VCD saver instead of abbreviations
  - Dump all bits for a bitblasted vector in VCD saver in order to ensure
    stray bit extractions do not cause a failure to reconstruct vectors in
    proper order in the extracted file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.124-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.125-1" date="1755691200">- Update to 3.3.125
  - Added json2stems to distribution to support newer versions of Verilator
  - VCD parser fix for colon in VCD variable name
  - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
    converts 0 size signals to reals
  - Update vcd2fst so that it handles MTI 0 size conversion</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.126-1" date="1767614400">- Update to 3.3.126
  - Added -H --noheader command line option for GTK3
  - Added headerbar rc variable to disable GTK3 headerbars
  - Fix for rendering multiline string constants in dumps
  - Add warning message for missing XPM loader
  - Updated libghw to current version
  - Changed behaviour of X search in pattern search so it is matched by a
    single X bit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.126-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.127-1" date="1776081600">- Update to 3.3.127
  - Fix for fixed point shift that does not disable it on the specify value
    change menu option
  - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
  - Warnings fix in vcd2fst for missing string.h include
  - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
    (gtkwave/libfst#17)
  - Wrote replacement for gdk_pixbuf_new_from_xpm_data
  - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
    FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
  - Added "SV_ST_ARRAY" to exclude file parsing on init
  - Fix use after free of GLOBALS-&gt;entrybox_text in regexp_highlight_generic()
- Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally</changelog>
</package>
<package pkgid="448257dd18b9294ef2477f0941111fe8b981e5d71cb22ab8eec84ec1a2a4ad60" name="libcurl" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="27874eb3be55091354cc938e5376d293e2350d055ef4a41d0840df850871744b" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="c07a56d3ba28121afacdcd80e5e5b9e1b0a7dc74029e0671c99b1d38f3de6bf3" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="76827a75a740434829ef156e3ca18b1db401e97e84ceb62ba626c77f6bee9b1a" name="libgpg-error" arch="i686">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="cce7405dd23259a29882da6f69f7536c104a438c9dcf1dd3f8fc086f501b7b3d" name="libgpg-error-devel" arch="i686">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="f7accc5e62bc7c04250c55999f0e66645bbb4779c55818a0f03cf752a94d43ff" name="libidn" arch="i686">
  <version epoch="0" ver="1.44" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="fc83829a128dc1a646e435d95406483cf10576285c03af7afd5e65fbafce1032" name="libidn-devel" arch="i686">
  <version epoch="0" ver="1.44" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="1e72eeb891fd785cabb5592d320f21595cba8e6d78b49df2fb7ce4380fb321c8" name="libidn-java" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="e623f7dafcd2eadec2d5e175ae93a3155f520d4b027ce3345574436dd95a6f8a" name="libidn-javadoc" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="c86beae54f18849513ec3408edafe28be5826502c7e8e6be68d8d26d7bc27223" name="libmetalink" arch="i686">
  <version epoch="0" ver="0.1.3" rel="31.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="a96881ed3eecfbfbf9bbbeedb09c1b733038db675aafdf785cdb9b43bb7141e7" name="libmetalink-devel" arch="i686">
  <version epoch="0" ver="0.1.3" rel="31.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d5a36c4117f799621a948f6da3187a98320a59d6a932a8159f659a8c7115738b" name="libnet" arch="i686">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="35fd49bda65e9ec1b9ce630ec7dd0b07c62909f92e9d5cb50af3e7eb89cede64" name="libnet-devel" arch="i686">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="42bd3eb4ad581e697f48e46c9cd6a3cfebbf8f965fa16975a1e0f905b281165f" name="libnet-doc" arch="noarch">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="f45636ad22c73b0ae07da37d70ae55a11e136b8c3389068c4d51423abb05a804" name="libssh2" arch="i686">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="99f42bd252c659607bbab70bb1107c62daf6d25ac719ec0f317713c5ae7df89d" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="450a0a5928e1d28b885d7046718df56572208e6e82b0f8a75f973e9001865221" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="b7ba6d00331e764b697b62aebbbe47484f90804620942d11b12b974653d73e47" name="libunrar" arch="i686">
  <version epoch="0" ver="7.23" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.23-1.0.cf" date="1782993600">- Update to 7.23
- Update debian files to 7.2.6-1</changelog>
</package>
<package pkgid="f4c1b8da5697a2f50ea1541b8228e0675ef4d752b623261825cb725e830c704d" name="libunrar-devel" arch="i686">
  <version epoch="0" ver="7.23" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.23-1.0.cf" date="1782993600">- Update to 7.23
- Update debian files to 7.2.6-1</changelog>
</package>
<package pkgid="e1158f1c72a0ed795703ab9dfc3eb4beb8f659e65edd4b4f777d807f76f64040" name="libxml2" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="bc711939e628414e4fcb2d859f8eac697a98a6a76a46dc7ee0814cf0714aef71" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="df7e799eae9b4bb6930ab103a69bda5590968b60d2b4555797f706e160111ff2" name="libxml2-static" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="c2be5cf735cbff887a9ae116fd466fa2c67cbbceaa63a316b2ca238c5a4f9483" name="libxslt" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="0b510151b1bd105f811f139223630ed0b599028d6f0d99a32036e8349e9223b7" name="libxslt-devel" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="85695d4a6153e383c2138529ec2fa9ff0656e6c7f3ffabe1abb467601447c1f5" name="mcrcon" arch="i686">
  <version epoch="0" ver="0.7.3" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-4" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.3-1" date="1733313600">- Update to 0.7.3 (rhbz#2330303)
  - Add support for Valve style rcon authentication (GH#106)
  - Change maximum packet size to correct value (4096 -&gt; 4106) (GH#103)
  - Print auth failed message to stderr instead of stdout
  - Fail immediately if received packet size is out of spec
  - Return proper exit code from run_terminal_mode()
  - Add error messages to rcon_command() function
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="74bca4f8ddfc53e0352cc58311056d38649ffed55d71b0a846a697dfc8d54871" name="metamail" arch="i686">
  <version epoch="0" ver="2.7" rel="54.7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.5" date="1714737600">- Fix for gcc14 compatibility and some other stuff (rightfully) generating
  warnings
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.6" date="1726660800">- Avoid file dependency for fonts after Fedora 38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.7" date="1761825600">- Port from termio.h to termios.h
- Add fixes for c99</changelog>
</package>
<package pkgid="129bb22ad77bbbde6f0d9f7d87ac102ead90fdf794ba6418a40a6970875c78d8" name="mgdiff" arch="i686">
  <version epoch="0" ver="1.0" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0-13" date="1680177600">- License is SPDX: MIT
- Avoid deprecated patch syntax
- Use distribution linker flags
- Replace deprecated _BSD_SOURCE and _SVID_SOURCE with _DEFAULT_SOURCE
  unless we're on EL-7 or Fedora &lt; 21, where it doesn't work</changelog>
</package>
<package pkgid="77032407971957cd09ab1bce7319e825fed03ecfd00fac678fd5b24635e81e32" name="mkisofs" arch="i686">
  <version epoch="10" ver="3.01" rel="5.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="b84f6b76370b92a29f806dcba582de65b111009492c8a00f4a724c668affa343" name="mkisofs" arch="i686">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="1737400c0a1892b3eb7183d519510ac825974b611c22f5d7f86061422a34abb5" name="mod_fastcgi" arch="i686">
  <version epoch="0" ver="2.4.7.1" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-2" date="1705924800">- Drop support for httpd 2.2.x
- Avoid use of deprecated patch syntax
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-3" date="1706184000">- Rebuilt for binutils breakage in Rawhide
  (see https://pagure.io/releng/issue/11888)</changelog>
</package>
<package pkgid="1a8110c0968c409b8b386c03a53d0b8c6110506cb0be08f70a280323e65e9329" name="mod_fcgid" arch="i686">
  <version epoch="0" ver="2.3.9" rel="33.fc36"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-27" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.9-28" date="1661342400">- BR: systemd-rpm-macros for definition of %{_tmpfilesdir}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-31" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-32" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Software Management Team &lt;packaging-team-maint@redhat.com&gt; - 2.3.9-33" date="1720526400">- Eliminate use of obsolete %patchN syntax (#2283636)</changelog>
</package>
<package pkgid="ad7a894669b3946dccb65f5fc049914296b12ce741f05293c4cce6961e6ab52c" name="moin" arch="noarch">
  <version epoch="0" ver="1.9.11" rel="3.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.11-2.0.cf" date="1676635200">- Use SPDX-format license tag
- Assume we have rpm 4.9 or later
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.11-3.0.cf" date="1714737600">- Avoid use of deprecated patch syntax
- Expand %files list to avoid warning about passlib.rpmmoved listed twice</changelog>
</package>
<package pkgid="f11dc9ae29130f403f6b8373b5402299f79ed3015d87cba737467b2811e956a8" name="moin-macro-MiniPage" arch="noarch">
  <version epoch="0" ver="1.9" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-4" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="60336451b45d4d4b741e2f513ab5ed7d2c7350c132f7d6f366d3e0d4a61b082b" name="moin-macro-TitleIndexNonPersonal" arch="noarch">
  <version epoch="0" ver="20060519" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20060519-13" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="171336574e442a5985afd5a6151f0f30ee218760e1e2a8d142007f2031fce145" name="moin-theme-balanced" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="5bf38eb7434936949780541cc4210dea0da58ff9a4e7b56015a0c61ecdf8d02a" name="moin-theme-balanced-kubuntu" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="c3b2d108733dfac5f55285d83f6bd37ccdc244cc05fea929ee07818d3c7554a1" name="moin-theme-balanced-orchard" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="92f90ee21f9aef03ba98f516385e3b30a016c32fe4368ee6730d32f9d0d84721" name="moin-theme-dew" arch="noarch">
  <version epoch="0" ver="0" rel="0.12.20080530.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0-0.12.20080530" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="2f1dca4a9489479251934f6e08a8efac9c4a91174a219d5493c66b009983ea1a" name="moin-theme-hypermodern" arch="noarch">
  <version epoch="0" ver="2006.02.24" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2006.02.24-14" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="dfbc50dd01de170a88902add27887e37d681f5c19e8047060b9339a5631a5cc0" name="moin-theme-mentalwealth" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="6f94108447448149f26de7396bcbdabb6afeebd33d5da00d207ca1e7de67d823" name="moin-theme-mentalwealth-orange" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="f14b34d738f7f01b16887d49c1a021786ad136f2b0e63c2b789c537dd912dc8c" name="moin-theme-mentalwealth-purple" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="6fc13adce9ad9c5da28db252a13ab359af09d2ffe1614a6184f8c82ae7fb730d" name="moin-theme-mentalwealth-red" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="8946062883d6d9482d1996e9b82681660ffa824609dc8e6e39626c733e564793" name="moin-theme-monobook" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="1ef4249d883847c164c920bdda7b97cd12a3d11e1848e622ceb6570b1692c317" name="moin-theme-monomoin" arch="noarch">
  <version epoch="0" ver="0.5" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-14" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="da7c4893be3fc783ebfa55ef5b92a5cd0cf3530b4d3fc81aadb52b14922cde33" name="moin-theme-solenoid" arch="noarch">
  <version epoch="0" ver="2012.12.16" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2012.12.16-6" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="39a35ea0900db0605ee86f6a64c2121286227c6df650c5a9e469a34404eb67c4" name="moin-theme-widget" arch="noarch">
  <version epoch="0" ver="20060807" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20060807-13" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="a65927eb2d73b258943ed1d74496a43b0f6c4b8bdc29f851b7e7421951e48c9b" name="nmap" arch="i686">
  <version epoch="4" ver="7.92" rel="11.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-6.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-8.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-9.0.cf" date="1780488000">- Fix OpenSSL 4.0 compatibility
- Always install appdata
- Drop legacy scriptlets replaced by file triggers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-10.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-11.0.cf" date="1782993600">- Fix CVE-2026-58058 (rhbz#2494410)</changelog>
</package>
<package pkgid="5093a9ce2b59c5c6eb7c7f2caef7f6e6594e5bea1c7a3efecb6ccf133433740b" name="nmap-ncat" arch="i686">
  <version epoch="4" ver="7.92" rel="11.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-6.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-8.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-9.0.cf" date="1780488000">- Fix OpenSSL 4.0 compatibility
- Always install appdata
- Drop legacy scriptlets replaced by file triggers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-10.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-11.0.cf" date="1782993600">- Fix CVE-2026-58058 (rhbz#2494410)</changelog>
</package>
<package pkgid="fdf111b038fd9068957852ab34ac3779bb891008f19f801843185bc6d75ea752" name="perl-Algorithm-C3" arch="noarch">
  <version epoch="0" ver="0.11" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-10" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4f33a864124d2bd2758064cdb4351d745f2bcd6c28eeb23da441ec7f94d28385" name="perl-Algorithm-Diff" arch="noarch">
  <version epoch="0" ver="1.2010" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2010-8" date="1678104000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="152c97a4cd66f4a125c3bd87b99822ee9a55d6473db90f9ad7db0ba0e6ffb95e" name="perl-Algorithm-Diff-XS" arch="i686">
  <version epoch="0" ver="0.04" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-22" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-25" date="1689076800">- Perl 5.38 rebuild</changelog>
</package>
<package pkgid="509f5f5d718a907cd7f87df15b36da4c1bf6457aa24abe15cbe990f58cacd81e" name="perl-Any-Moose" arch="noarch">
  <version epoch="0" ver="0.27" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-27" date="1678104000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1b6138f2b38394ca45b07675a1a64bb84723ccff6aca8fc05ad820e1cfe3ce7f" name="perl-AnyEvent" arch="i686">
  <version epoch="0" ver="7.17" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-11" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-15" date="1678190400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-16" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-18" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="ec5ebd96806ee73388b0954b04319ab87723ba679dd00dee260c4bfae9cac617" name="perl-AnyEvent-AIO" arch="noarch">
  <version epoch="0" ver="1.1" rel="38.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-38" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e4fa30e7655e4d2c1cd167930744866ee8da75eae32b1f170a44998f51a973da" name="perl-AnyEvent-BDB" arch="noarch">
  <version epoch="0" ver="1.1" rel="42.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-42" date="1689336000">- Use SPDX-format license tag
- Use %licence unconditionally</changelog>
</package>
<package pkgid="6fa7c50f260b8067afe46c4f4b8ab37e7ab35e4a23a928c4fa172b7734cda7ac" name="perl-App-Software-License" arch="noarch">
  <version epoch="0" ver="0.11" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-1" date="1782734400">- Initial RPM version</changelog>
</package>
<package pkgid="f1a340c96145543ad1d1ea5b2ce000c995f752d2f9318327072427b167ce2346" name="perl-Archive-Any" arch="noarch">
  <version epoch="0" ver="0.0946" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0946-13" date="1678190400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cb17fdd0e348b3659026c8a60bde3a7240ad05d8d36b3ffd81be192810e55816" name="perl-Archive-Any-Lite" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1678190400">- Use SPDX-format license tag
- BR: perl(Parallel::ForkManager) unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="1167eb7f9d6fdd564df8901b226bac30d6fcc84f779e9cf1b8d6fbcb534ec603" name="perl-Archive-Peek" arch="noarch">
  <version epoch="0" ver="0.37" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1636977600">- Update to 0.37
  - Add repository metadata
  - Port from Moose to Moo and Type::Tiny
  - Make prereqs more specific with respect to phase
  - Add negative test
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-5" date="1678190400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1ee9204305729f15b2e593b88d1a344328a582dcfb470b263082b7be243a2d6e" name="perl-Archive-Tar" arch="noarch">
  <version epoch="0" ver="3.12" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-1" date="1740571200">- Update to 3.04
  - Fix handling filenames with trailing whitespace
  - Allow --format=ustar option for ptar
  - Symlink tests on Windows (https://github.com/Perl/perl5/issues/21402)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.06-1" date="1778414400">- Update to 3.06
  - Hardlinks not extracted by default; added EXTRACT_HARDLINK flag
  - If hardlinks are extracted, they are now subject to the same rules as
    symlinks with regards to chown and chmod</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.08-1" date="1779624000">- Update to 3.08
  - Validate symlink and hardlink linkname in SECURE MODE
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10-1" date="1779796800">- Update to 3.10
  - Added MAX_FILE_SIZE setting, defaulting to 1GB, for extracting files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.12-1" date="1780488000">- Update to 3.12
  - Allow '..' links in secure extract in parent path for symlinks and hardlinks</changelog>
</package>
<package pkgid="5e33b01f168aa3f9cbb8ac4ac19f95ad7a7d64969dfee1dfb3da3a48ffc6fdeb" name="perl-Archive-Zip" arch="noarch">
  <version epoch="0" ver="1.68" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.68-11" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="279d1b730c22c2b8c82a67b2fae29167b5da5617370d9944a6582997beb8055e" name="perl-Array-Compare" arch="noarch">
  <version epoch="0" ver="3.0.8" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.3-1" date="1565697600">- Update to 3.0.3
  - Added NoSkip method to clear Skip setting</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.3-3" date="1593432000">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.7-1" date="1607342400">- Update to 3.0.7
  - Fix documentation typo
  - Add bugtracker info</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.8-1" date="1608552000">- Update to 3.0.8
  - Only support versions 5.10+</changelog>
</package>
<package pkgid="4b2486f3d7e2332b724b504431f9efd68210af6f970506afe2096219909d8b91" name="perl-Array-Diff" arch="noarch">
  <version epoch="1" ver="0.09" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.09-14" date="1678276800">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="e41a3527d831e1c41e3a12917f5821d12c83b26e903023cffe2176369d9de080" name="perl-B-COW" arch="i686">
  <version epoch="0" ver="0.007" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-6" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-1" date="1665835200">- Update to 0.005
  - Add version to Test::More use to ensure correct version
  - Remove useless MIN_PERL_VERSION_FOR_COW
  - Update CI workflow
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-1" date="1666094400">- Update to 0.006
  - Disable prototypes to silence warning</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1666353600">- Update to 0.007
  - Advertise XSLoader dependency in metadata</changelog>
</package>
<package pkgid="cd4a404a33426152e4378eb53add1af714e347cf265a2963f96acb041eecc06f" name="perl-B-Hooks-EndOfScope" arch="noarch">
  <version epoch="0" ver="0.28" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-6" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1709294400">- Update to 0.28
  - Add optional prereqs to metadata to help prereq analysis tools
    (CPAN RT#151992)</changelog>
</package>
<package pkgid="c1d1c1d1f8eca6492a0b58ff14016b41a34a85ae40f878cd17b6a14c8a313c72" name="perl-B-Hooks-OP-Annotation" arch="i686">
  <version epoch="0" ver="0.44" rel="35.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-29" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-33" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-35" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b77895365985d7dc407342aeaa6001ae8581feb6a72594f17754928cdbb37360" name="perl-B-Hooks-OP-Check" arch="i686">
  <version epoch="0" ver="0.22" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-13" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-17" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-19" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9eaf70e7b2b610cdfeb7621925eada5319d3b7f8b1637db08101f7a7631ca185" name="perl-B-Keywords" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1716811200">- Update to 1.27 (rhbz#2283492)
  - Add bareword __CLASS__ since 5.39.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1750939200">- Update to 1.28
  - Add keywords any, all since 5.42.0
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1760875200">- Update to 1.29
  - Fix new 5.43 warning with qw($\) (GH#10)</changelog>
</package>
<package pkgid="38f7433bd3427bb9a5b6f95b3a311be698f9a98360b73a785da380ebc624a06f" name="perl-B-Utils" arch="i686">
  <version epoch="0" ver="0.27" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-19" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-25" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c72c8822688f601151e3f687a38fa0409b849e0e1f2fe45ef6a9310b4c898374" name="perl-BDB" arch="i686">
  <version epoch="0" ver="1.92" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-17" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-20" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-23" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="08c977a2cf0ef7a48d195bd993f61f3d08fad3452f4f98dbd7ccdbe86fd59274" name="perl-BSD-Resource" arch="i686">
  <version epoch="0" ver="1.2911" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-16" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-19" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-21" date="1674302400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e5db36743de4e867782fd2186918b98625d4e783662238ff02f7c38ba8d96f9b" name="perl-BerkeleyDB" arch="i686">
  <version epoch="0" ver="0.67" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-9" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1728907200">- Update to 0.66
  - Bundled Test::More failed with perl 5.41.x (GH#12)
  - Possible precedence problem between ! and string eq (GH#13)
  - Silence clang warnings (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.67-1" date="1770033600">- Update to 0.67 (no functional changes)</changelog>
</package>
<package pkgid="5bb7015faec0e059a3e3a3f00f763f5e9d51e73ad4ea7f4f902846bf89f38e65" name="perl-CPAN-Changes" arch="noarch">
  <version epoch="0" ver="0.500005" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500002-1" date="1698321600">- Update to 0.500002
  - Full rewrite
    - The new version can parse nested entries to an arbitrary depth, rather
      than just groups
    - It can parse many more formats, and can format the outputs more flexibly;
      this means it can better handle the change logs that actually exist on
      CPAN
  - Parsed releases keep their original order
  - Pass given ChangeLog filename for --check
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500003-1" date="1708689600">- Update to 0.500003
  - Fix calling -&gt;name on an unnamed group
  - Fix -&gt;set_changes call on groups</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500004-1" date="1714737600">- Update to 0.500004
  - Fix tests on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500005-1" date="1744977600">- Update to 0.500005
  - Fix Test::CPAN::Changes on perl 5.10 without upgrading version.pm
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="738b94062deb7d9df7f911a3c0f1442aa2bbfb42f8bca8fedf17a72ad54b0e55" name="perl-CPAN-DistnameInfo" arch="noarch">
  <version epoch="0" ver="0.12" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-27" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4590c938af1ef676708e46d86d7e675eda47ad3081c7cf5e061a59ce3e78d268" name="perl-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="2.150013" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150011-1" date="1769169600">- Update to 2.150011 (rhbz#2432163)
  - Improved example of testing a minimum prerequisite version of a module
  - Remove some code meant to handle running on pre-v5.8 perl, even though v5.8
    was already a requirement
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150012-1" date="1769428800">- Update to 2.150012 (rhbz#2432714)
  - Distribution metadata update
- Add workaround for test issues with CPAN::Meta::Requirements ≥ 2.144
  https://github.com/Perl-Toolchain-Gang/CPAN-Meta/issues/145</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150013-1" date="1771675200">- Update to 2.150013 (rhbz#2441425)
  - Fix an incompatibility with newer CPAN::Meta::Requirements (GH#145, GH#147)</changelog>
</package>
<package pkgid="840260aa58f43f384a3855fdc50ee876302392726f911ae2eaf472a146d42556" name="perl-CPAN-Meta-Check" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1672747200">- Update to 0.015
  - Drop Test::Deep prereq
- Use SPDX-format license tag
- Add hack to work around test issue with Scalar::Util 1.50
  (CPAN RT#145766)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1672747201">- Update to 0.017
  - Use Module::Metadata for more accurate testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1689940800">- Update to 0.018
  - Fix version requirement for CPAN::Meta::Prereqs
  - Move issue tracker to GitHub</changelog>
</package>
<package pkgid="a9cbfaf5f1a29e5bbb28a0989eacc8c81e0e6b526309d2877356f27bcb63758e" name="perl-CPAN-Meta-Requirements" arch="noarch">
  <version epoch="0" ver="2.145" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.144-1" date="1769169600">- Update to 2.144 (rhbz#2432229)
  - Remove code meant to cope with running on v5.8, when v5.10 is the minimum
    required perl
  - Normalize away "&gt;= 0" in compount version requirements; it's meaningless
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.145-1" date="1769860800">- Update to 2.145 (rhbz#2435673)
  - Correct "normalization of 0" code to work correctly with vstrings (GH#46)</changelog>
</package>
<package pkgid="393778ecc510e042ce0952c27ed7cf21d0cc63f748b497b4f3e2d11de64aecf5" name="perl-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.020" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-491" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.019-1" date="1734350400">- Update to 0.19
  - Generated from ETHER/YAML-Tiny-1.75.tar.gz
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1734436800">- Update to 0.20
  - Generated from ETHER/YAML-Tiny-1.76.tar.gz</changelog>
</package>
<package pkgid="f9b2e511fee3dc8920ed8c788f5395ab1d806c3427964f59a894c85a5fe74ff1" name="perl-CPAN-Requirements-Dynamic" arch="noarch">
  <version epoch="0" ver="0.003" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-1" date="1744027200">- Update to 0.002
  - Remove unnecessary conditions
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-1" date="1783857600">- Update to 0.003
  - Avoid undefinedness warning in config_defined</changelog>
</package>
<package pkgid="0eb54b9df57291210d5bb8fd92eee72028d6b4e27dae7e996d1305f51dd4ad03" name="perl-Canary-Stability" arch="noarch">
  <version epoch="0" ver="2013" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2013-15" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="d7e394127953b942f9b1ceba98964638724b2ce0fba7be01755129ea230e871a" name="perl-Capture-Tiny" arch="noarch">
  <version epoch="0" ver="0.50" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-16" date="1689422400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1734696000">- Update to 0.50
  - Stringify '$]' for far future compatibility
  - Fixed docs about custom files for capture</changelog>
</package>
<package pkgid="e0cd95b3d2a6c782d6db6ae86cff460bb8bc2cab97fb919393c5009e87c00710" name="perl-Carp-Clan" arch="noarch">
  <version epoch="0" ver="6.08" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.08-14" date="1689422400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="fcc272ae52dbf8919e5185478bf8051bff3c8f6f568f3de4dcaec540aec35114" name="perl-Carp-Fix-1_25" arch="noarch">
  <version epoch="0" ver="1.000001" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000001-30" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a812b2acd5ad87dace5935070db31a2a12eb52c43451590cdda8edc4178d99ab" name="perl-Child" arch="noarch">
  <version epoch="0" ver="0.013" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-21" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6623440860e4587ac997828a08c8e207a2e53478e46abe200de32eb444f59acb" name="perl-Class-Accessor" arch="noarch">
  <version epoch="0" ver="0.51" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-17" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e7f17b25e489446c0c88dbcd89fe4180ffff6f1ee316a4b57f83bcb6cc97e977" name="perl-Class-C3" arch="noarch">
  <version epoch="0" ver="0.35" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="136938e43580e59edb69b089802ece854815bca3efa17b945f4b70b8c7500e1a" name="perl-Class-C3-XS" arch="i686">
  <version epoch="0" ver="0.15" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-5" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-8" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="cc4ec32b8319479dc7730a0fc46a7748335c9106dbb1e57be67e30d3204e31b8" name="perl-Class-Data-Inheritable" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-5" date="1678449600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1729771200">- Update to 0.10
  - Don't use vars, use our</changelog>
</package>
<package pkgid="236b4fcafa5e213ad8ffc6cc941d0d0f49d3eefdf14857436ff84ceab7b162cf" name="perl-Class-Factory-Util" arch="noarch">
  <version epoch="0" ver="1.7" rel="43.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-43" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c4e98c351c191077d710fad72a4cadf65d713ad83af75e8c5f89ca74dbe87c54" name="perl-Class-Inspector" arch="noarch">
  <version epoch="0" ver="1.36" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-13" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f918886e18ef0d38f1d8a269bb39e981c497af7316e33444c34225f5c811818d" name="perl-Class-Load" arch="noarch">
  <version epoch="0" ver="0.25" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-22" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="18e700265b56f96a999eb0db411f05d560f2ed55ddff27cedaec31693f5601f9" name="perl-Class-Load-XS" arch="i686">
  <version epoch="0" ver="0.10" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-20" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5dcf93f01176c117ab7fbabde612790fbc1a8567bb50dcc0ad71f147ab510021" name="perl-Class-Method-Modifiers" arch="noarch">
  <version epoch="0" ver="2.15" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-1" date="1673956800">- Update to 2.14
  - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.15-1" date="1678104000">- Update to 2.15
  - Localize $SIG{__DIE__} before calling eval (CPAN RT#146848)</changelog>
</package>
<package pkgid="7fdc308df03a47caee4ce7e7d044e7e0b2cffa7d26158edd1acda019985fdbae" name="perl-Class-Singleton" arch="noarch">
  <version epoch="0" ver="1.6" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6-8" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
</package>
<package pkgid="8b05cbeb175a8eab3b47dd0bb18f577c532461d28904dce9b0184798ec9a0be5" name="perl-Class-Tiny" arch="noarch">
  <version epoch="0" ver="1.008" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-8" date="1689422400">- Use SPDX-format license tag
- Drop support for building with old perls needing Devel::GlobalDestruction
- Use %license unconditionally</changelog>
</package>
<package pkgid="1ec7b43acc17200ab36c2d11b9e31ed7651ed41fc871824d2191e8d76665d38e" name="perl-Class-XSAccessor" arch="i686">
  <version epoch="0" ver="1.19" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-24" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-27" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-28" date="1664539200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2f4293941318bc2a906a2f14ab116733082bf0a477b5063018d78b987b120bf2" name="perl-Clone" arch="i686">
  <version epoch="0" ver="0.50" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-7" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-1" date="1724068800">- Update to 0.47
  - Stop using quote as package separator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-3" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-1" date="1772539200">- Update to 0.48
  - Performance: Optimize hot paths in Clone.xs
  - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
  - Fix: Don't require MGf_DUP flag for ext magic duplication
  - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
  - Fix t/10-deep_recursion.t for Windows
  - Fix C89 declaration-after-statement violations in Clone.xs
  - Fix deep recursion stack overflow on Windows
  - Fix cloning of Math::BigInt::GMP objects (GH#16)
  - Fix cloning of threads::shared data structures (GH#18)
  - Add thread safety test for Class::DBI-like patterns (GH#14)
  - Add comprehensive documentation with examples and limitations
  - Improve README.md structure and installation instructions
  - Add DBI + DBD::SQLite as recommended test dependencies
  - Fix weakened reference cloning via deferred weakening (GH#15)
  - Fix memory leak when cloning non-existent hash values (GH#42)
  - Fix segfault when cloning DBI database handles (GH#27)
  - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
  - Replace static recursion_depth with stack parameter
  - Fix C++ style comments in Clone.xs for C89 portability
  - Fix memory leak in Clone.xs (GH#42)
  - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
  - Rename tests with more readable names
  - Remove TODO from CoW test</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1774526400">- Update to 0.49
  - Try to exclude macOS extended attributes from dist tarball
  - Fix: Suppress DBI STDERR noise in t/13-io-handle.t (GH#82)
  - Fix: Skip DBI fork tests on Windows
  - Fix: Remove spurious warn output in t/03-scalar.t
  - Add AI_POLICY.md documenting AI-assisted workflow</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1774699200">- Update to 0.50
  - Fix: Deep-copy HVs past MAX_DEPTH instead of aliasing (GH#93)
  - Fix: Strip macOS xattrs from dist directory before packaging
  - Clean-up: Remove unreachable break and empty magic_ref if-body in Clone.xs
  - Docs: Update MAX_DEPTH limits to reflect actual platform values
  - Docs: Add SECURITY.md policy for vulnerability reporting
  - Prefer using gtar in Makefile.PL</changelog>
</package>
<package pkgid="4e1e9c4aff3673f43056b65ce9d3b97d9a6e2bd9f14fcc8e9c0daa40f898d401" name="perl-Compress-Raw-Bzip2" arch="i686">
  <version epoch="0" ver="2.218" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no changes, rhbz#2273784)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277505)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Silence unused variable warnings</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435735)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445591)
  - Add SECURITY.md (GH#18)
  - Fix POD typo</changelog>
</package>
<package pkgid="9f6427e03db9b69e9dc6d45e13deaeaf495717e153034f3b054de9489a2c092c" name="perl-Compress-Raw-Lzma" arch="i686">
  <version epoch="0" ver="2.221" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-2" date="1727956800">- Rebuild against xz 5.6.3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-4" date="1743249600">- Rebuild against xz 5.8.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-5" date="1743768000">- Rebuild against xz 5.8.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-6" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-2" date="1767787200">- Rebuild against xz 5.8.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Test updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1772366400">- Update to 2.219
  - Add PERL_UNUSED_DECL for trace to silence clang warning
  - Fix indentation in Lzma.xs that triggers a clang warning
  - Remove vestigial references to Pod::Markdown (GH#14)
  - Fix POD typo
  - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
    (GH#16)
  - Remove unused constants (GH#17)
  - Documentation improvements (GH#15)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1772971200">- Update to 2.220
  - Remove obsolete TODO comment</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772971201">- Update to 2.221
  - Add SECURITY.md</changelog>
</package>
<package pkgid="ff776795aa7ee7f8f92e07a60440fd856d3bce680a232136640a91106114885e" name="perl-Compress-Raw-Zlib" arch="i686">
  <version epoch="0" ver="2.222" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277504)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - get_Bufsize is correct, but the documentation says get_BufSize (GH#34)
  - Development workflow updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435736)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1770120000">- Update to 2.218 (rhbz#2436314)
  - Fix for regression of GH#34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1771934400">- Update to 2.219 (rhbz#2441964)
  - Update bundled zlib to 1.3.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772280000">- Update to 2.221 (rhbz#2443301)
  - zlib 1.3.2: Update references to zlib 1.3.1 to use zlib 1.3.2
  - zlib 1.3.2: Add "Perl_crz" prefix to "z_errmsg" (GH#32)
  - Fix POD typo
  - Version number wrong in 2.220 Changes file (GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.222-1" date="1772971200">- Update to 2.222 (rhbz#2445592)
  - Add SECURITY.md (GH#40)
  - Fix POD typos</changelog>
</package>
<package pkgid="342a06dd6c6a7cab3e56109eac4091bcfafd3969002fdcf7bc83c4289eb83088" name="perl-Config-Tiny" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1641297600">- Update to 2.28
  - Replace both uses of bareword filehandles with 'my' variables
  - Modernize Makefile.PL
  - Make corresponding patches where appropriate to Tiny.pm and t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-6" date="1678622400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1680696000">- Update to 2.29
  - Edit to remove Test::Pod from TEST_REQUIRES in Makefile.PL, again
  - Update version number in t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1697198400">- Update to 2.30
  - Add support for an array syntax for cases where you wish to assign an array
    of values to a key
    - See the new POD section called ARRAY SYNTAX
    - See also the updated question in the FAQ: What happens if a key is
      repeated?
    - See also the sample code in the Synopsis, in t/02.main.t and in
      t/test.conf
    - In each case, search for the word greetings to find the new code samples</changelog>
</package>
<package pkgid="77f783477c49da08b7af8ffde30042540d14f02c9ffb34a1250d2024632ec048" name="perl-ConfigReader-Simple" arch="noarch">
  <version epoch="0" ver="1.29.8" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.5-2" date="1689508800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.6-1" date="1706011200">- Update to 1.296
  - Refresh distro, update email address, update repo URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.7-1" date="1736078400">- Update to 1.297
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.8-1" date="1744632000">- Update to 1.298
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="6c8193e8ed4c0703efbbdcad613e9d5152490942559391db8e2e2db80c7bf9c1" name="perl-Const-Fast" arch="noarch">
  <version epoch="0" ver="0.014" rel="29.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-29" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="29cd612a5cae74169f0e49c2d136de8474bc34ef2d84d18bbf74c6d7daa60f95" name="perl-Convert-BinHex" arch="noarch">
  <version epoch="0" ver="1.125" rel="24.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.125-24" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
</package>
<package pkgid="38f86503bbf61e021fa7ef952fff42a37f2c4ce5749b56c541c1693fab6aebef" name="perl-Convert-TNEF" arch="noarch">
  <version epoch="0" ver="0.18" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-27" date="1674216000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="86ca0347ee4ae2ed354e44a2b3c7ef6510fef1992c546e12726c21097999810e" name="perl-Convert-UUlib" arch="i686">
  <version epoch="4" ver="1.8" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-7" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-13" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-16" date="1737633600">- Fix for C23 mode (rhbz#2341023)</changelog>
</package>
<package pkgid="3eee813dcd2ef54cdf361247f55280dbfc069c8c8c4ad58a86a4f206193ea30d" name="perl-Coro" arch="i686">
  <version epoch="0" ver="6.570" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-7" date="1676894400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-13" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-17" date="1714737600">- BR: valgrind-devel rather than /usr/include/valgrind/valgrind.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-18" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-21" date="1737720000">- Fix for compiling in C23 mode (CPAN RT#158609, rhbz#2341024)</changelog>
</package>
<package pkgid="a079026d036b47c02184083bc927aaf98709d317aaaec01e86e50cb7dabebdc1" name="perl-Cpanel-JSON-XS" arch="i686">
  <version epoch="0" ver="4.42" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.38-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-1" date="1734091200">- Update to 4.39
  - Fix Windows -Dusequadmath (GH#229, GH#235)
  - Fix inconsistent behavior between decoding escaped and unescaped
    surrogates, and escaped non-characters vs. non-escaped non-characters; now
    aligned to JSON::PP (GH#227, GH#233)
  - Add type_all_string tests (GH#236)
  - Silence UV to char cast warnings (GH#232)
  - Fix MSVC preprocessor errors (GH#232)
  - Fix -Wformat warnings on Windows (GH#228)
  - Clarify BigInt decoding (GH#226)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.40-1" date="1757419200">- Update to 4.40
  - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
  - Detect more malformed numbers, with two decimal points
  - Pin Github actions to latest @v via pinact run -u</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.41-1" date="1779969600">- Update to 4.41
  - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
  - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
  - Fix incr_parse single-quote string delimiter (GH#245)
  - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
    truncated input (GH#244)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.42-1" date="1780833600">- Update to 4.42
  - Ensure encode with a type spec hashref does not change the hashref argument
    (GH#240)
  - Fix -e docs: "written" → "read" (GH#239)
  - Fix Boolean eq overload matching undef (GH#207); Cpanel::JSON::XS::Boolean
    overloaded eq would match undef as equal to false because undef stringifies
    to "" - added defined() guard
  - Fix error messages showing overloaded stringification for blessed objects
    (GH#191); error messages now use ClassName=TYPE(addr) format, bypassing any
    "" overload
  - Fix type_all_string overriding allow_blessed/convert_blessed (GH#175); with
    type_all_string + allow_blessed, blessed objects are now encoded as null
    (not stringified as HASH address)
  - Fix infinite recursion when encode is called from a "" overload (GH#128);
    the recursion guard temporarily clears convert_blessed and allow_stringify
    flags on the JSON object before calling the overload, preventing re-entrant
    encode loops
  - Fix $obj-&gt;new creating a broken object (GH#93); when new() is called on an
    existing object (e.g. $json-&gt;new-&gt;new), the class name is now extracted
    from the object's stash rather than using the stringified reference
  - Change allow_nonref default to true (GH#241, matching JSON::PP and
    JSON::XS 4.0+ and the insecure RFC 7159); encode and decode now accept
    non-reference values by default; decode_json() with an explicit 0/1 second
    argument still works; allow_nonref(0) to disable scalars-only for secure
    JSON
  - Fix minor t/12_blessed.t typo
  - Fix GH#112: encode large whole-number NV values without .0 on 32-bit Perl
    (values exceeding UV_MAX that Perl stores as float)
  - Fix GH#197: prefer IOK over pNOK when encoding values where IV is accurate
    but NV is imprecise (SvNOK not set)</changelog>
</package>
<package pkgid="512c0e1ec5e63e92b116f349bbd1b0e1f79ca3825875a19aff54e3d48e4ae17b" name="perl-Crypt-Cracklib" arch="i686">
  <version epoch="0" ver="1.7" rel="38.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-33" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-36" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-38" date="1678622400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5854ed840e665753c82d75eff1fcb2cf1b509ef4bb9094a89df892a93a6a4961" name="perl-Crypt-PBKDF2" arch="noarch">
  <version epoch="0" ver="0.261630" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.161520-23" date="1752148800">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.261630-1" date="1781265600">- Update to 0.261630
  - Change the default hash algorithm to HMAC-SHA256, and increase the default
    number of iterations to 600,000, in line with current OWASP recommendations
    (CVE-2026-9641)
  - Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
    builtin rand(), which is not cryptographically secure (CVE-2026-9638)
  - Use a constant-time comparison in 'validate' to avoid timing attacks
    (CVE-2017-20240)
- Switch to Module::Build::Tiny flow
- Package new README file</changelog>
</package>
<package pkgid="87b740d39f2a202c0689bed3027071f1c1a6698f1dafd053edfb5801ddf63c15" name="perl-Crypt-SmbHash" arch="noarch">
  <version epoch="0" ver="0.12" rel="48.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-48" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1f6cab0a4dba49f4c4378ad89ad9225ed65c3adb95b70945ff294e540c90ce2c" name="perl-Cwd-Guard" arch="noarch">
  <version epoch="0" ver="0.05" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-21" date="1673611200">- Drop perl(:MODULE_COMPAT*) dependency from Fedora 38 onwards
- Use SPDX-format license tag
- Use %license unconditionally
- Fix permissions verbosely</changelog>
</package>
<package pkgid="0426cdc8e550a623a2030852d4ca886c7826ba711ebf042021b7132221673a07" name="perl-DBD-CSV" arch="noarch">
  <version epoch="0" ver="0.64" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-1" date="1736769600">- Update to 0.62
  - It's 2025
  - Replace "use vars" with "our" (GH#9)
  - Specify recommended versions based on known CVE's
  - Update documentation for groff-1.24
  - Tested with perl-5.40.0
  - Add SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-5" date="1780920000">- Fix test failure with DBI 1.648 onwards
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1782129600">- Update to 0.63 (rhbz#2491316)
  - It's 2026
  - New test for DBI-1.648 CVE fix
  - Minor typo in doc
  - Raise recommended versions for fixed CVE's</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1784030400">- Update to 0.64 (rhbz#2499960)
  - Next version will require perl-5.12, following DBI</changelog>
</package>
<package pkgid="972319743f0335efffa8ecd02497e2618f9a9104ce1f4f4edd4c5a014ddc09b5" name="perl-DBD-SQLite" arch="i686">
  <version epoch="0" ver="1.78" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1729339200">- Update to 1.76
  - Upgraded bundled SQLite to 3.46.1
  - Fix for Windows quadmath builds (GH#115)
  - Omit load_extension if static build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.78-1" date="1767355200">- Update to 1.78
  - Upgraded bundled SQLite to 3.51.1
  - Omit constants for newly-added C-array extension
  - SQLite 3.51.0 has two extensions (C-array and percentile) amalgamated but
    both are disabled by default
  - Make -&gt;column_info() also return generated columns (GH#119)
- Use bundled SQLite unless system SQLite is 3.31.0 or above (needed for
  generated columns)</changelog>
</package>
<package pkgid="7f95d4d20419ac281007ffff9c4a3fe0ca5c9eb804a51422d4378090a54dd738" name="perl-DBI" arch="i686">
  <version epoch="0" ver="1.651" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.648-1" date="1780660800">- Update to 1.648
  - Correct sprintf usage for trace_msg (GH#132)
  - Add DBIXS_VERSION and DBIXS_RELEASE to dbixs_rev.h
  - Remove -Wbad-function-cast
  - Fix possible stack overflow (CVE-2026-9698)
  - Do not allow table source locations outside explicit given folders
  - DBD::Sponge PRECISION handling (GH#12)
  - Fix possible buffer overflow in preparse (CVE-2026-10879)
  - Skip mismatching .so's (GH#81)
  - Fix cast warning in dbi_get_state (GH#182)
- Assume rpm 4.12 or later is always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.649-1" date="1782129600">- Update to 1.649
  - Extra Cwd::abs_path required for Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.650-1" date="1783512000">- Update to 1.650
  - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
  - Fix out-of-bounds read in preparse of SQL that starts with a comment
    (CVE-2026-14740)
  - Fix code injection via Profile DSN attribute or DBI_PROFILE variable
    (CVE-2026-14380)
  - Update dbipport.h to Devel::PPPort-3.73
  - Require Test::More 0.96 (tests will otherwise fail on pristine perl-5.12)
- Package CONTRIBUTING.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.651-1" date="1784030400">- Update to 1.651
  - Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
  - Document that IS NULL matches empty strings in DBI::SQL::Nano
  - Fix DBD::File to ensure that the table is not a symlink outside of f_dir
    (CVE-2026-15392)
  - Fix an out-of-bounds error when a statement handle has no fields but the
    source row is not empty (CVE-2026-60082)
  - Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData
    (CVE-2026-60081)</changelog>
</package>
<package pkgid="d65d91e3da1f9332ae2759ddc8bec1145b486882272c4f0d6f84c1b096713b94" name="perl-DBI-Coro" arch="i686">
  <version epoch="0" ver="1.651" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.648-1" date="1780660800">- Update to 1.648
  - Correct sprintf usage for trace_msg (GH#132)
  - Add DBIXS_VERSION and DBIXS_RELEASE to dbixs_rev.h
  - Remove -Wbad-function-cast
  - Fix possible stack overflow (CVE-2026-9698)
  - Do not allow table source locations outside explicit given folders
  - DBD::Sponge PRECISION handling (GH#12)
  - Fix possible buffer overflow in preparse (CVE-2026-10879)
  - Skip mismatching .so's (GH#81)
  - Fix cast warning in dbi_get_state (GH#182)
- Assume rpm 4.12 or later is always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.649-1" date="1782129600">- Update to 1.649
  - Extra Cwd::abs_path required for Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.650-1" date="1783512000">- Update to 1.650
  - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
  - Fix out-of-bounds read in preparse of SQL that starts with a comment
    (CVE-2026-14740)
  - Fix code injection via Profile DSN attribute or DBI_PROFILE variable
    (CVE-2026-14380)
  - Update dbipport.h to Devel::PPPort-3.73
  - Require Test::More 0.96 (tests will otherwise fail on pristine perl-5.12)
- Package CONTRIBUTING.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.651-1" date="1784030400">- Update to 1.651
  - Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
  - Document that IS NULL matches empty strings in DBI::SQL::Nano
  - Fix DBD::File to ensure that the table is not a symlink outside of f_dir
    (CVE-2026-15392)
  - Fix an out-of-bounds error when a statement handle has no fields but the
    source row is not empty (CVE-2026-60082)
  - Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData
    (CVE-2026-60081)</changelog>
</package>
<package pkgid="2ddb5844b63f4e4897c9b2cb46bf0ae29c55da87b5f2f7fc13b168b6c098b908" name="perl-DBM-Deep" arch="noarch">
  <version epoch="0" ver="2.0019" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-17" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-18" date="1684843200">- Remove use of ' as a package name separator (CPAN RT#148417)
  (fix for Perl 5.38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0017-1" date="1693742400">- Update to 2.0017 (rhbz#2236875)
  - Get rid of old perl4-style ' package separator and use :: instead for
    compatibility with perl 5.38 (CPAN RT#148417)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0018-1" date="1699531200">- Update to 2.0018 (rhbz#2248772)
  - Tiny documentation and metadata fixes to make sure people go to the correct
    issue tracker</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0019-1" date="1699876800">- Update to 2.0019 (rhbz#2249377)
  - Improvement so that when you try to put too much data in you get a useful
    error, and don't corrupt the database</changelog>
</package>
<package pkgid="ba132975fd4401a812023505ed450c03a0f3d637f3161eacbb48ad49c85c1802" name="perl-Data-Alias" arch="i686">
  <version epoch="0" ver="1.30" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-3" date="1752148800">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1770120000">- Update to 1.29
  - Fix compatibility with perl 5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1773316800">- Update to 1.30
  - Use isGV_with_GP_on when available (CPAN RT#173582)</changelog>
</package>
<package pkgid="0a4f20fa610eedd5d764bab82fedd827e1bda0963059c81327c95cccd16906bc" name="perl-Data-Binary" arch="noarch">
  <version epoch="0" ver="0.01" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-14" date="1678795200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="62eb547b3aba21806137a63292fa11f73cadda777f54cbce910bfcf9a2e53413" name="perl-Data-Compare" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1678881600">- Update to 1.28
  - Bug fix: undef values in hashes were treated incorrectly: need to check
    for existence, not definedness before comparing (GH#21)
- Use SPDX-format license tag
- Use %license unconditionally
- Drop NOTES and README files as they provide nothing useful to users</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1682164800">- Update to 1.29
  - Skip taint-mode tests if perl was built without taint support</changelog>
</package>
<package pkgid="f0e887fb778c12d4a9f653e6135c145958c2f400814c418cda9de5f39fc63391" name="perl-Data-Dump" arch="noarch">
  <version epoch="0" ver="1.25" rel="7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1624708800">- Update to 1.25
  - Strings like "NaN" are still strings
  - Update maintainer and repository information
  - New option $Data::Dump::LINEWIDTH controls when to perform a line break
    (default is 60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-7" date="1677844800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="59051ad7c6a211e9bf93a9323c831c948ab4f55effe94c3058def2a3691feed1" name="perl-Data-Dump-Streamer" arch="i686">
  <version epoch="0" ver="2.42" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.40-18" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.40-21" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.41-1" date="1674820800">- Update to 2.41
  - Switch from JSON::XS to Cpanel::JSON::XS as an optional test prereq
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.42-1" date="1676980800">- Update to 2.42
  - Perltidy source to preferred format
  - Fixed issues serializing the global stash
  - Added test to detect if serializing the global stash breaks anything</changelog>
</package>
<package pkgid="7270bd0f1453133a970c405741909bbae59f36c31e63c4e8c52c642b404f63a1" name="perl-Data-Dumper-Names" arch="noarch">
  <version epoch="0" ver="0.03" rel="42.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ae5cc7d1dcc32ff8435f4632b223297ae03856232f674a39ccb367ef6fe7496f" name="perl-Data-OptList" arch="noarch">
  <version epoch="0" ver="0.114" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-1" date="1624881600">- Update to 0.112
  - Update author contact info
  - Add perl version support to docs
  - Replace a "goto" deep in the guts with a sub call, for speed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.113-1" date="1672574400">- Update to 0.113
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-1" date="1683460800">- Update to 0.114
  - Data::OptList now requires perl v5.12.0
  - Tests no longer add "-T" to shebang, so do not invoke taint mode
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="53af2cbb06afd33298935bace2d381910656c3ac239662e3cad6e9a97561dbb2" name="perl-Data-Section" arch="noarch">
  <version epoch="0" ver="0.200008" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-1" date="1672574400">- Update to 0.200008
  - Fix to some example code
  - update packaging and metadata
  - Minimum required Perl is now v5.12
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="47f89ef3f086b1fcc39cf277e86183cb4487f65896a088db189cfb523febeb7a" name="perl-Data-Section-Simple" arch="noarch">
  <version epoch="0" ver="0.07" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-27" date="1679054400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="13c12b001375c8b3da641f1a93fed0e34d1508f3c2db39c1a13d8fad2934a980" name="perl-Data-Tumbler" arch="noarch">
  <version epoch="0" ver="0.010" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-25" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3e4852fc1fe7b521ee62478edfb86777e88c126465b2260e57d7f390123bef11" name="perl-Data-UUID" arch="i686">
  <version epoch="0" ver="1.227" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-9" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-12" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-14" date="1693742400">- Update license to SPDX format</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.227-1" date="1710849600">- Update to 1.227
  - New maintainer, GTERMARS
  - Add basic GitHub Actions setup for testing
  - Typo corrections in POD
  - Eliminated use of state/node files in temp directory (CVE-2013-4184)</changelog>
</package>
<package pkgid="a66695a91f32ebc4dac25083ca7297e49851e4c6716096b4b77e67d80e393f76" name="perl-Data-Visitor" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-8" date="1679486400">- Use SPDX-format license tag
- Use %license unconditionally
- Use Data::Alias unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1682769600">- Update to 0.32
  - Removed an unnecessary use of Sub::Name (GH#1)</changelog>
</package>
<package pkgid="0b0e8e0dd51e4042df8e113abd26ebf69d63bc4a3e0ecea9c0a5955edabd8e0a" name="perl-Date-Range" arch="noarch">
  <version epoch="0" ver="1.41" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1624881600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-2" date="1628251200">- Make Date::Simple a run-time dependency, not just a test dependency (#1977229)
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-6" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f2391e4d973591b4664c7550a6da82b3c4a299842f3e4aeb45fcbd7b42078c37" name="perl-DateTime" arch="i686">
  <version epoch="2" ver="1.66" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.59-4.0.cf" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.63-1.0.cf" date="1698062400">- Update to 1.63
  - Switched to using the 'Perl_isfinite' function instead of trying to
    implement this ourselves in XS code; this should fix quadmath builds on
    Windows (GH#139)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1.0.cf" date="1699272000">- Update to 1.65 (rhbz#2248104)
  - Fix builds on macOS with Perls before 5.22.0; this seems to have the same
    issue as Windows on older Perls (GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-5.0.cf" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.66-1.0.cf" date="1739966400">- Update to 1.66 (rhbz#2346459)
  - Require Specio 0.50
    - That release has a bug fix for validation of integer values
    - Without the fix, DateTime could accept non-integer values for things like
      nanoseconds (GH#145)
- Drop EL-7 support
  - Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="853fc38931d04388dae4293f468cb2e63e0f0e13049c517a24cf976efd61369e" name="perl-DateTime-Calendar-Mayan" arch="noarch">
  <version epoch="0" ver="0.0601" rel="41.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-41" date="1679918400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6254a1a8ff14a1c0e30fb99eecc9fb7700d64ca3ad9dc1e06806d45c2dc52b57" name="perl-DateTime-Format-Builder" arch="noarch">
  <version epoch="1" ver="0.83" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.83-8" date="1673784000">- Use SPDX-format license tag
- Assume we are building with rpm ≥ 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="276d2283087594bf4eee7170f4250d1587d35174f24dae364d8bbe12c446228a" name="perl-DateTime-Format-MySQL" arch="noarch">
  <version epoch="0" ver="0.08" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07.01-7" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1690891200">- Update to 0.08
  - Fix parsing microsecond &lt; 100,000 off DateTime object by zero-padding</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-2" date="1691150400">- Do not use rpmversion macro, which is a new builtin since rpm-4.18.92</changelog>
</package>
<package pkgid="0a6921088d1d4a771647ea7885af00592da2e7d4748949ce1c283474c96608dd" name="perl-DateTime-Format-Strptime" arch="noarch">
  <version epoch="1" ver="1.80" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.80-1" date="1765195200">- Update to 1.80 (rhbz#2419653)
  - Fix the parse_datetime docs to state that it returns either an empty list
    of undef when it cannot parse the given string, depending on the context;
    previously, the docs said it always returned undef, which is not true
    (GH#33)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="33224719897ada07ad9ee2f207f8bab6b24717859fb6c55ad790181aaf0f85cb" name="perl-DateTime-Locale" arch="noarch">
  <version epoch="0" ver="1.45" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1.0.cf" date="1681646400">- Update to 1.38
  - Rebuilt all locale data with the data from CLDR 43.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1.0.cf" date="1685361600">- Update to 1.39
  - Fixed parsing of the 'el-polyton' locale code: this had the same issue as
    'be-tarask', which was fixed in 1.36; this is now fixed in such a way that
    similar language+variant codes will be parsed correctly in the future
    (GH#37)
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-1.0.cf" date="1699358400">- Update to 1.40
  - Rebuilt all locale data with the data from CLDR 44.0.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1.0.cf" date="1712404800">- Update to 1.41
  - Rebuilt all locale data with the data from CLDR 44.1.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0.cf" date="1713528000">- Update to 1.42
  - Rebuilt all locale data with the data from CLDR 45.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0.cf" date="1722168000">- Update to 1.43
  - Fixed the prefers_24_hour_time method, which was incorrectly returning
    false when the locale's time_format_short method contained a quote string
    with "h" or "K" in it, e.g. the fr-CA locale's time_format_short is
    "HH 'h' mm": the quoted 'h' caused this method to return false (GH#39)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0.cf" date="1730203200">- Update to 1.44
  - Rebuilt all locale data with the data from CLDR 46.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1.0.cf" date="1743508800">- Update to 1.45
  - Rebuilt all locale data with the data from CLDR 47.0.0
- Use %{make_build} and %{make_install}
- Drop support for building with List::Util &lt; 1.45</changelog>
</package>
<package pkgid="9deb1800dec8b93f0a52e146b6269449310bfce252228cf3fdf8233dd86771aa" name="perl-DateTime-TimeZone" arch="noarch">
  <version epoch="0" ver="2.69" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.63-1.0.cf" date="1725796800">- Update to 2.63
  - This release is based on version 2024b of the Olson database
  - This release does not include any changes to current or future zones, only
    historical changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.64-1.0.cf" date="1737115200">- Update to 2.64
  - This release is based on version 2025a of the Olson database
  - Contemporary changes for Paraguay</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.65-1.0.cf" date="1742990400">- Update to 2.65
  - This release is based on version 2025b of the Olson database
  - Contemporary changes for Chile</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.66-1.0.cf" date="1765454400">- Update to 2.66
  - This release is based on version 2025c of the Olson database
  - Only historical changes
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.67-1.0.cf" date="1772798400">- Update to 2.67
  - This release is based on version 2026a of the Olson database
  - Contemporary changes for Moldova</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.68-1.0.cf" date="1777291200">- Update to 2.68
  - This release is based on version 2026b of the Olson database
  - Contemporary changes for British Columbia, CA
- Temporarily disable POD spelling test due to dictionary issues in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.69-1.0.cf" date="1783598400">- Update to 2.69
  - This release is based on version 2026c of the Olson database
  - Contemporary changes for Alberta, CA and Morocco
- Package SECURITY.md</changelog>
</package>
<package pkgid="3e8f6b5b22e790511262011b4bff7da1eb81c8e4b4f6a145709381c674d5c462" name="perl-Declare-Constraints-Simple" arch="noarch">
  <version epoch="0" ver="0.03" rel="51.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1679486400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="0235291d8769a977fa08be62beea162c37f789f62ffde952b29b32ca426a3bee" name="perl-Devel-CallChecker" arch="i686">
  <version epoch="0" ver="0.009" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-13" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-16" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1681214400">- Update to 0.009
  - Port to Perl 5.33.1, which defines a PERL_VERSION_GE() macro that clashes
    with the one this module previously had
  - Skip thread tests on some old versions of Perl (around 5.10.0) where a
    core bug makes thread creation violate an internal assertion and causes
    crashes
  - Skip thread tests on pre-5.8.9 Perls where a core bug makes thread creation
    corrupt memory
  - Skip thread tests on pre-5.8.3 Perls where a core bug makes thread
    completion break the global PL_sv_placeholder
  - Put whitespace around C string literals being pasted, for C++11
    compatibility
  - Avoid using C preprocessor directives inside a macro argument list (which
    is not valid)
  - In XS code in the test suite, when croaking, avoid using __FILE__ as part
    of a format string, in case it includes a metacharacter
  - Document the intended scope of this module's backporting effort
  - Fix a documentation wording glitch
  - In XS declare as const some data that never changes
  - Refactor thread tests
  - In XS, refactor Perl version comparisons
  - In XS, rename some macros for better style
  - In XS, better argument parenthesisation in some macros
  - Avoid some compiler warnings
  - In .gitignore, list temporary files produced by test XS compilation
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="496f4a667e4cbfba7cc93e2c437b8762132f0a0cb6ee520367022f0a1e7e5141" name="perl-Devel-Caller" arch="i686">
  <version epoch="0" ver="2.07" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-24" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-28" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-30" date="1680004800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-1" date="1681214400">- Update to 2.07 (rhbz#2185832)
  - Fix compatibility with bleadperl (CPAN RT#144051)
  - Small Pod and Distribution clean-ups (GH#1)</changelog>
</package>
<package pkgid="7201d1be5397ec2ad9e30cda3843c18127cb60b7ff8468d2a7729d4878e27157" name="perl-Devel-CheckBin" arch="noarch">
  <version epoch="0" ver="0.04" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-23" date="1680004800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="471fdc41a99b8a1d81c5b7a04e888b8489f914aed720ae3341a2cfb4b5734367" name="perl-Devel-CheckCompiler" arch="noarch">
  <version epoch="0" ver="0.07" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-21" date="1680004800">- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
</package>
<package pkgid="e615e7c192b9cc2485df540ac4e21d085b8d0991f75e8915eaf88e8324083fb2" name="perl-Devel-Cycle" arch="noarch">
  <version epoch="0" ver="1.12" rel="26.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-26" date="1680004800">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="aabb7d567e059b70c5a5f50f042fa09932ceebf2de5b5928ba8198eea66a585f" name="perl-Devel-EnforceEncapsulation" arch="noarch">
  <version epoch="0" ver="0.51" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-27" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e2b6ae2aa1e9c6f9273322b7eaf49f646a8045d0a0b43eb7aa0d387483911585" name="perl-Devel-GlobalDestruction" arch="noarch">
  <version epoch="0" ver="0.14" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-21" date="1680264000">- Use SPDX-format license tag
- Drop support for old Perl versions needing XS helper</changelog>
</package>
<package pkgid="b6906ab90b65b4593135250a63f5bebb6a465f92913efc1021e3a96ba23b08b1" name="perl-Devel-GlobalDestruction-XS" arch="i686">
  <version epoch="0" ver="0.03" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-13" date="1593000000">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-15" date="1593172800">- Specify all dependencies</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-19" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-20" date="1625486400">- Fix dist tags for Alma and Rocky Linux</changelog>
</package>
<package pkgid="fc09e808294799785efa92155e1787247b47b23b0c34ad800a94a69307b27e81" name="perl-Devel-Hide" arch="noarch">
  <version epoch="0" ver="0.0016" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0016-1" date="1767441600">- Update to 0.0016
  - Drop support for perl 5.6 (deprecated since 0.0012)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="52a5b835d4aa05e4cd13072a051219dbddb82665116cb8bc82034fb2b3820643" name="perl-Devel-Leak" arch="i686">
  <version epoch="0" ver="0.03" rel="51.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-46" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-49" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1680609600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8da3bc3a2f173ac5433ccc8a822ded1246de004e50777ebfa9114252634c5590" name="perl-Devel-LexAlias" arch="i686">
  <version epoch="0" ver="0.05" rel="32.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-26" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-27" date="1639310400">- Fix dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-29" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="27006951753169279a2699f8603de966e9530ebc683d40c694508057055380d0" name="perl-Devel-OverloadInfo" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1755000000">- Update to 0.008
  - Generate README.md in the repository
  - Move git repository to Codeberg
- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="223338fdf0032433d93fc9f32027c7300f30dd0179df8921feb29f38b1da70cb" name="perl-Devel-PartialDump" arch="noarch">
  <version epoch="0" ver="0.20" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1680609600">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="464cdf62742b46f6a959a5ef1cdd9d57f6f5796d45df1a66c03e6ac991395570" name="perl-Devel-StackTrace" arch="noarch">
  <version epoch="1" ver="2.05" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.04-15" date="1689163200">- Use SPDX-format license tag
- Fix permissions verbosely
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.05-1" date="1704715200">- Update to 2.05
  - Added explicit boolean overloading for trace objects
    - Without this, Perl will use the object's string overloading and then
      check the truthiness of the returned string, which is a lot of extra work,
      which can produce significant slowdowns in some cases, as seen in
      https://github.com/plack/Plack/pull/697 (GH#23)</changelog>
</package>
<package pkgid="c41f9676c01ef1e2cb78dafdd3c01ec29001c3d7e031e97a61fa1f938a4155dc" name="perl-Devel-Symdump" arch="noarch">
  <version epoch="1" ver="2.18" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.18-25" date="1689163200">- Use SPDX-format license tag
- Drop support for building with Test::Harness &lt; 3.04</changelog>
</package>
<package pkgid="55e127dcfb376b5e2ee227b0b103c8cea3bba9f865ea56fbd6587fa04399fea9" name="perl-Digest-BubbleBabble" arch="noarch">
  <version epoch="0" ver="0.02" rel="36.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-36" date="1680696000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="5b239d18b8ab4ed21d188dbb24b9896d0a101562c5454d60d7b2a903a7a1072f" name="perl-Digest-MD4" arch="i686">
  <version epoch="0" ver="1.9" rel="41.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-34" date="1680696000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-35" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-39" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-41" date="1724155200">- Drop redundant build requirements libdb-devel and gdbm-devel</changelog>
</package>
<package pkgid="0966f2aac0d315f31e34ad7e25f18a3c55b92c4faee041252d8e4e864dfbdf0a" name="perl-Digest-SHA" arch="i686">
  <version epoch="1" ver="6.04" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.02-477" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.02-488" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.03-1" date="1660046400">- Update to 6.03
  - Corrected addfile to report error when stdin is a directory
    (CPAN RT#143899)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.04-1" date="1677412800">- Update to 6.04
  - Modified SHA_INIT/sharewind to silence warnings from gcc 12
    (CPAN RT#146585)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8dd7942d6a30b5b7a497804ceff1312ddd8bf283ca3321f50cc9e777a09c6983" name="perl-Dir-Self" arch="noarch">
  <version epoch="0" ver="0.11" rel="24.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-24" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1c1442d34fac142bf10c88e700e30fefacf42d48a91696bb145ae1051e32f711" name="perl-Dist-CheckConflicts" arch="noarch">
  <version epoch="0" ver="0.11" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-27" date="1680696000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f69d9b606b730ba26476f900f3c59de92ada5c57e00405093d10512b84da74d5" name="perl-DynaLoader-Functions" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1680868800">- Update to 0.004
  - Port test C code to Perl 5.33.1, which defines a PERL_VERSION_GE() macro
    that clashes with the one this code previously had
  - In test C code, avoid a compiler warning that arises on Perl 5.20
  - In test C code, rename some macros for better style
  - In test C code, better argument parenthesisation in a macro
- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="9766f66e3a401986168d59b33e6171b097aeff0363609c7a22748120b8f10f7b" name="perl-EV" arch="i686">
  <version epoch="0" ver="4.37" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-4" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-7" date="1746619200">- Fix FTBFS with ExtUtils::ParseXS ≥ 3.57 (rhbz#2364628)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.36-1" date="1766750400">- Update to 4.36
  - Work around changes in xsubpp for Perl 5.42
- Add patch to remove unescaped quotes from typemap file (rhbz#2364628)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.37-1" date="1769083200">- Update to 4.37
  - Work around issues with different versions of ExtUtils::ParseXS</changelog>
</package>
<package pkgid="6112ad898cad846f1862f9d533feb40ea23a99810c75bd1fe9deba35bdb0de04" name="perl-Email-Address" arch="noarch">
  <version epoch="0" ver="1.913" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-1" date="1673352000">- Update to 1.913 (rhbz#2159569)
  - This version now requires Perl v5.12
  - Some small tweaks made to the code to take advantage of v5.12
  - Update distribution metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-2" date="1689508800">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="a3ea1f0a83640f5d3ad61c8174df1e89163f21d6199238e135abc7d5f4aadb6d" name="perl-Env-Sanctify" arch="noarch">
  <version epoch="0" ver="1.12" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-28" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3cefc6f0fc81e557d0371e623c8c390dd3f705737ae4c5c6057c0d53b03e165c" name="perl-Error" arch="noarch">
  <version epoch="1" ver="0.17030" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17029-12" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17030-1" date="1739880000">- Update to 0.17030 (rhbz#2346218)
  - Fix die/warn hooks for perl 5.41.9 changes (GH#4)</changelog>
</package>
<package pkgid="9772e53b8a0fefbc46cfe145ad391f9fc88d6f3cf45f9d8a55a26c5f7cce7afb" name="perl-Eval-Closure" arch="noarch">
  <version epoch="0" ver="0.14" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-20" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e523ba273db9ce14bd8f935eb421f207eae74eed0e2dfb19d1a8d06fb24341ef" name="perl-Event" arch="i686">
  <version epoch="0" ver="1.28" rel="7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1619784000">- Update to 1.28
  - Remove C-only restriction on -&gt;Inline method (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-2" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-5" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-7" date="1680868800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e91e611c312756a4b8e17acc87906458fc67fd8a9551e502a03e5f521fd7100e" name="perl-Exception-Base" arch="noarch">
  <version epoch="1" ver="0.25.01" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-13" date="1680868800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-24" date="1689508800">- Fix FTBFS with Perl 5.38 (rhbz#2222742)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-25" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="0837ce2b4db88f4e26f54e9c8045af88c13677e1dfbac18adf0085c104f6a877" name="perl-Exception-Class" arch="noarch">
  <version epoch="0" ver="1.45" rel="7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1620043200">- Update to 1.45
  - The field names for an exception are now checked to ensure that they are
    valid Perl identifiers (GH#13)
- Package new CODE_OF_CONDUCT.md file
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-7" date="1680955200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="19c01853022f86779846956ae8f1509dc7951290fdede67b940a6e02bbcce4de" name="perl-Expect" arch="noarch">
  <version epoch="0" ver="1.38" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-20" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1708776000">- Update to 1.36
  - Made timeouts optional and added qr// regex support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1709899200">- Update to 1.37
  - Fix to timeout code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1" date="1710244800">- Update to 1.38
  - Fix to fix to timeout code</changelog>
</package>
<package pkgid="04480e84d7712428baa9b90dda096562e3bccc1727a0233ba0299d35ddfed332" name="perl-Exporter-Declare" arch="noarch">
  <version epoch="0" ver="0.114" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-22" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ec13195181bee180b3b68467a73ab7eaa64474e427555746fadcf74f7ce4c50c" name="perl-Exporter-Tiny" arch="noarch">
  <version epoch="0" ver="1.006003" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006002-8" date="1747656000">- Drop support for EOL distributions prior to F-28, EL-8:
  - Weak dependencies always available
  - Use %{make_build} and %{make_install}
- Don't pull in Lexical::Var on distributions with Perl 5.37.2 or later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006003-1" date="1765195200">- Update to 1.006003
  Bug Fixes:
  - Support Perl versions &gt;= 10, in theory
  Documentation:
  - Restore documentation about exporting to hashes, which was accidentally
    removed
  - Update copyright dates</changelog>
</package>
<package pkgid="fe9f62662adb8dd9eb5ea84585c47f1f5142e2b89a9e66f4dc0de9334690da06" name="perl-ExtUtils-BuildRC" arch="noarch">
  <version epoch="0" ver="0.005" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="d34e8be2503372fb2c02e3f5084735e35ee7eb27b1e70e12d9cf1cd12e0cc9e0" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.280238" rel="499.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.280238-499" date="1689508800">- Upgrade to 0.280238 as provided in perl-5.37.11
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="762f62df0a832c50e743b13e9b43f0babfcf5bb46c2b64c343a85fa065c006d3" name="perl-ExtUtils-Config" arch="noarch">
  <version epoch="0" ver="0.010" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-28" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1714132800">- Update to 0.009
  - Add a but method
  - Add ExtUtils::Config::MakeMaker
- Release tests moved to xt/, stop running them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1723896000">- Update to 0.010
  - Fix regression in serialize method</changelog>
</package>
<package pkgid="bed7024750579e28b70cf1b91c70c15612847b812823e762e833df5a79af55f7" name="perl-ExtUtils-Depends" arch="noarch">
  <version epoch="0" ver="0.8002" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8001-7" date="1680955200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8002-1" date="1742385600">- Update to 0.8002 (rhbz#2353300)
  - Fix UNC path bug (CPAN RT#102436)
  - Fix get_makefile_vars losing path components if space-quoted and more than
    one dependency, which was breaking CPAN module "true" - dependent on two
    modules
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="2f6a547a5570f3768a02682424cd8fe9f7e26141bb52213897fbf45ffed8d37c" name="perl-ExtUtils-HasCompiler" arch="noarch">
  <version epoch="0" ver="0.025" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1714392000">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1715083200">- Update to 0.025
  - Skip static test on dynamic perls
- BR: gcc and perl-devel for tests</changelog>
</package>
<package pkgid="c3e5561d954e4a9a2003adcf985d00c1278b8290cb31441434ee9ceff7c271d6" name="perl-ExtUtils-Helpers" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-22" date="1681128000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1718798400">- Update to 0.027
  - Revert "Make split_like_shell always unixy"</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1725364800">- Update to 0.028
  - Add ext argument to man1_pagename and man3_pagename</changelog>
</package>
<package pkgid="e07e9fe8a9d8609bfab5546a9323671f819841901a8e147fa4e186d34783d652" name="perl-ExtUtils-InstallPaths" arch="noarch">
  <version epoch="0" ver="0.015" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1714132800">- Update to 0.013
  - Try to install any installable paths</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1725969600">- Update to 0.014
  - Drop 5.006 support
  - Compensate for perls without installsitescript</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1758974400">- Update to 0.015
  - Restore installing non-standard types
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="742e760f076d7fd5b46bc34828af1bbbc32cdc476c26b019f8e77a428787ea16" name="perl-ExtUtils-MakeMaker-CPANfile" arch="noarch">
  <version epoch="0" ver="0.09" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-15" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="26c95d3cdd5e1a9f134c67ba096c8ad2806cf7c6b1736f3a41db186b63d15ff6" name="perl-ExtUtils-ParseXS" arch="noarch">
  <version epoch="1" ver="3.63" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.51-510" date="1718193600">- Add man page perlxs*, which are missing in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.57-1" date="1746187200">- Update to 3.57
  - Rewrite half of the internals to facilitate refcounted stack later on
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.58-1" date="1753099200">- Update to 3.58
  - ExtUtils::ParseXS has been extensively restructured internally; most of
    these changes shouldn't be visible externally, but might affect XS code
    that was using invalid or unsupported syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.59-1" date="1757073600">- Update to 3.59
  - Throw an exception when combining the length operator with a typemap other
    than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.60-1" date="1759060800">- Update to 3.60
  - Fix INTERFACE for C23
  - Support perl package names in INTERFACE
  - Clean up typemap file-finding code and change priority
  - Revert throwing an exception when combining the length operator with a
    typemap other than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.61-1" date="1767960000">- Update to 3.61
  - Allow XS files with no XS again
    https://github.com/Perl/perl5/issues/24016</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.63-1" date="1775476800">- Update to 3.63
  - Allow 'length(foo)' to work with any 'foo' type that has 'SvPV_nolen()' or
    similar in its typemap, not just that it maps to T_PV
  - Use static, not STATIC
  - Rewrite perlxs.pod
  - Finish refactoring to use an Abstract Syntax Tree (AST) internally
  - Improve warning and error messages
  - Improve test coverage
  - Reorganise t/</changelog>
</package>
<package pkgid="89c2da1f0c4b7b3df7e3ff4f05e1567046fb571fc915b01da21b179dc4733a8f" name="perl-ExtUtils-PkgConfig" arch="noarch">
  <version epoch="0" ver="1.16" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-21" date="1681300800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7660b83685ae7e1037a719eb9c836d98de525efc32d86477952f6bd07e199d05" name="perl-Fennec" arch="noarch">
  <version epoch="0" ver="2.018" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-16" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1fb69dc90a1159720aee1dbfa62878f2a6f8495f9bae93c41b1cd1bc321a9463" name="perl-Fennec-Lite" arch="noarch">
  <version epoch="0" ver="0.004" rel="29.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-29" date="1689508800">- Use SPDX-format license tag
- Fix permissions verbosely</changelog>
</package>
<package pkgid="7f12622eff402a2d43de349524f5cc0f862729cdfa913c4fcb220cc3a54bfe64" name="perl-File-Copy-Recursive-Reduced" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1694865600">- Update to 0.007
  - Corrections in tests to better accommodate Windows path separators</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1711368000">- Update to 0.008
  - Encoding directive added to POD
  - Corrections in test files to guard against CPANtesters who run tests with
    PERL_AUTHOR_TESTING turned on</changelog>
</package>
<package pkgid="a059bb6a4224c13128b39e16782c0b197b5b0905539b13e86f5103c707034f7c" name="perl-File-Find-Object" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-1" date="1672660800">- Update to 0.3.7
  - Fix test failures on Windows (GH#2)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.8-1" date="1690027200">- Update to 0.3.8
  - Fix use_ok() call (GH#3)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.9-1" date="1733918400">- Update to 0.3.9 (rhbz#2331637)
  - Avoid implicit symbol imports
    https://perl-begin.org/tutorials/bad-elements/#non_explicitly_imported_symbols
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="0d6077159b5f8b927774aceda3b11b82e2270db133d144d2c5466c6cf40abb55" name="perl-File-Find-Object-Rule" arch="noarch">
  <version epoch="0" ver="0.0313" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-1" date="1630065600">- Update to 0.0313
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-5" date="1681300800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="56fc17e2c1f8e019949ac33af12f1d52a566b51760e0a14309044d64443dbccc" name="perl-File-Find-Rule" arch="noarch">
  <version epoch="0" ver="0.35" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-1" date="1749211200">- Update to 0.35
  - Use 3-argument version of open() to avoid arbitrary code execution
    vulnerability (GH#4, CVE-2011-10007)
- Use %{make_build} and $${make_install}</changelog>
</package>
<package pkgid="5b35dce8935592f9b958ea6c683a98309226fad09bbec7c04a71449f96d7e035" name="perl-File-Find-Rule-Perl" arch="noarch">
  <version epoch="0" ver="1.16" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-1" date="1648641600">- Update to 1.16
  - Fix test when run after 'make clean' (CPAN RT#142008)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-5" date="1689336000">- use SPDX-format license tag</changelog>
</package>
<package pkgid="97379171b19f40e82abe97322696a4f4b4774422a6295cfe4b227c18855f8af4" name="perl-File-Find-Rule-VCS" arch="noarch">
  <version epoch="0" ver="1.09" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-1" date="1682769600">- Update to 1.09
  - Tooling updates
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a8776308854ecf4772b8310784b2334ce7756b558d2396750f7f124bce75813a" name="perl-File-HomeDir" arch="noarch">
  <version epoch="0" ver="1.006" rel="9.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006-9" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="cd4b90863f8c3d7a226e5c9039056c67be23fc86b1b3ab324c2427c1d2b91f18" name="perl-File-MMagic" arch="noarch">
  <version epoch="0" ver="1.30" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-25" date="1624276800">- Correct license to App-s2p and ASL 1.0 and BSD
- Package README.ja
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-30" date="1678795200">- Use SPDX-compatible license tag</changelog>
</package>
<package pkgid="935c533266827a469ebc6d2d857c56617b745d49a56c39ed564a70a321e9f43b" name="perl-File-Remove" arch="noarch">
  <version epoch="0" ver="1.61" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1655208000">- Update to 1.61
  - Symlinks were broken in Windows/msys
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-4" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e215eb0f78a8ec3209d2066ce8d98738af195e05640006f06638e43b126624c9" name="perl-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.118" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-8" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="096820c3489829c36ada7530fe016aece2168d6a659c668b29591b6fbdbfce95" name="perl-File-ShareDir-Install" arch="noarch">
  <version epoch="0" ver="0.14" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-1" date="1656676800">- Update to 0.14
  - Work around a build issue on Windows (CPAN RT#125571)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-3" date="1681473600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1ab84bde3c6cac6660cf8922bf41db1bfafbdda4d589e0ecd950e717c7ca22b4" name="perl-File-ShareDir-ProjectDistDir" arch="noarch">
  <version epoch="0" ver="1.000009" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000009-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b1be90f296c3239aa93aa3756b13fee1514e744305ef69fc57a4baf636820c74" name="perl-File-Slurp" arch="noarch">
  <version epoch="0" ver="9999.32" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 9999.32-10" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3ce9ef34b8448d8165eed57799173556804f42f094d54d6d11bdf8e156922537" name="perl-File-Slurp-Tiny" arch="noarch">
  <version epoch="0" ver="0.004" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-23" date="1681992000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="60dd065d7178f37da6b2e441ce89fd0b19ceb9ccf6962e559bbe0d80cdfdf4a0" name="perl-File-Slurper" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1640779200">- Update to 0.013
  - Always split on newlines in read_lines</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1671364800">- Update to 0.014
  - Always return an empty file as an empty string
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="dce44350b5236254921ddc3bd17c2e4e3557dc4d7883c232589fda9c1d1e8f60" name="perl-File-TreeCreate" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-1" date="1630065600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-6" date="1681992000">- SPDX migration</changelog>
</package>
<package pkgid="6a363d1fec6af5e66b25cc953113cd55840e90a88b7dc3b2a5f2a10d2818429c" name="perl-File-Which" arch="noarch">
  <version epoch="0" ver="1.27" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-8" date="1686312000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7b8f7615f1f3119da8eb1aeed0bd4dbb176b2be01096ccc421b3c17e81fb1768" name="perl-File-chdir" arch="noarch">
  <version epoch="0" ver="0.1011" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1011-21" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="c51ec79dcd8bf6ac3e6b5e3ce774e960d83ca7b3ed7b7f3bb2f8616e1525807d" name="perl-File-pushd" arch="noarch">
  <version epoch="0" ver="1.016" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.016-17" date="1681819200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="56c149910d878ddd9786deb533998e1d6123780a5a9a0431903cbd0d1afc8bb7" name="perl-FileHandle-Fmode" arch="i686">
  <version epoch="0" ver="0.15" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-23" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-28" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1718798400">- Update to 0.15
  - Documentation improvements
  - Avoid win32_fmode() when perl is built by UCRT compiler, as UCRT changes
    struct _iobuf (affects MSWin32 only)
- Remove bogus exec permissions on source files</changelog>
</package>
<package pkgid="8ae84db8abb292707c048313afec703cb803a25ce0486d6cfdb01b76352a82b5" name="perl-FileHandle-Unget" arch="noarch">
  <version epoch="0" ver="0.1634" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1634-16" date="1682078400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="ee2d3f4ccc3c86829a0dca679c8bde1530f9334cc2144bc59a0d2a8c144b2436" name="perl-Filter" arch="i686">
  <version epoch="2" ver="1.65" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-511" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-519" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1" date="1757332800">- Update to 1.65
  - Documentation updates</changelog>
</package>
<package pkgid="3004e66d13360f4072ac736832ef208f1bd34bd31011b48d5b138d9d14e48a13" name="perl-Filter-Simple" arch="noarch">
  <version epoch="0" ver="0.94" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.94-2" date="1689595200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="b11e217b4eb69614ee82ceb3633d107bf4e28f28818d06729780cff02f4eae21" name="perl-FreezeThaw" arch="noarch">
  <version epoch="0" ver="0.5001" rel="41.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5001-41" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5c8f7ed1bef871d629192c7f10b0fff5d24ac2d841a43ba9e3064f6294865ece" name="perl-Function-Parameters" arch="i686">
  <version epoch="0" ver="2.2.6" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-5" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-6" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-1" date="1737288000">- Update to 2.002005 (rhbz#2338807)
  - When debugging (perl -d), skip over invisible (generated) parameter
    initialization
    code even if single-step mode is active
  - Move repository and bugtracker to https://codeberg.org/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-2" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.6-1" date="1755432000">- Update to 2.002006 (rhbz#2388952)
  - Fix a parse-time memory leak with undef or default initializers
    ('fun ($x = undef)' or 'fun ($ =)'); this leak mostly manifests as noise
    from memory checkers because non-leaked ops aren't freed anyway while perl
    is still running
  - Update bugtracker info in README</changelog>
</package>
<package pkgid="1c6d20e923035c4771cb78a743e9f29a9148a4710e06986b706e416ef0710aeb" name="perl-Guard" arch="i686">
  <version epoch="0" ver="1.023" rel="26.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-21" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-26" date="1682078400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c238e7af27c0986f3f02945b54e676c9af1ce1b91de5d5746aefe2ae1ff0f9aa" name="perl-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-10" date="1627128000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-11" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-12" date="1654603200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-13" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-14" date="1669809600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="4056a19ececd4661ca6f5dc5a844720b55c8e74d1436487753d2e604158e3e36" name="perl-HTML-SimpleLinkExtor" arch="noarch">
  <version epoch="0" ver="1.273" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.273-2" date="1689595200">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64
- Use %license unconditionally</changelog>
</package>
<package pkgid="2c6956c77db1feafd28a5a5140dafecd49900e1dcffab24c7c35eb8c17f4d046" name="perl-HTTP-SimpleLinkChecker" arch="noarch">
  <version epoch="0" ver="1.16.8" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16.8-2" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b4c134e62732ac11988a2ad97a4df4936c6d1b4f2e39ce52a5a459a330cb9800" name="perl-HTTP-Size" arch="noarch">
  <version epoch="0" ver="1.153" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.153-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="fbde95b92e74ee7fbe698b716e63fc98bd17289db6d7eaac4d8d2fe7d608f79d" name="perl-HTTP-Tiny" arch="noarch">
  <version epoch="0" ver="0.096" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1731499200">- Update to 0.090
  - Find the certificate bundle via IO::Socket::SSL rather than implementing
    it in HTTP::Tiny
  - When encoding form data, given a hashref with an arrayref value, preserve
    the order of the values in the arrayref rather than sorting
  - Fix internal link to "TLS/SSL SUPPORT" section in POD
- Enable AUTOMATED_TESTING</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.092-1" date="1767009600">- Update to 0.092
  - Added keep_alive_timeout to force keepalive connections to be closed based
    on a timeout
  - Optional tests are always required when releasing
  - Always use TCP_NODELAY option
  - Fixed test incorrectly testing cookie jar interactions multiple times
  - Fixed perl version comparisons to work when not starting with 5
  - Fixed link to LIMITATIONS in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094-1" date="1779105600">- Update to 0.094
  - Fix to prevent invalid characters in all headers, and prevent header
    smuggling (CVE-2026-7010)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.096-1" date="1781697600">- Update to 0.096
  - Caller-supplied Authorization, Cookie and Proxy-Authorization headers are
    now stripped on cross-origin redirects by default; use
    allow_credentialed_redirects to opt out
  - Redirects are no longer automatically followed when going from https to
    http; use allow_downgrade to revert to the original behaviour
- Temporarily disable AUTOMATED_TESTING as badssl.com seems to be unavailable</changelog>
</package>
<package pkgid="64d0d11cd1203b315390e8704782fb2fed69a4d42d17be8aa423be8425a7be85" name="perl-Hash-FieldHash" arch="i686">
  <version epoch="0" ver="0.15" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-17" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-20" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-23" date="1682078400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="4c51b0ac9b4b492db625d59db2a78eaf3006f34ba063f0aab66bd85c76d0a484" name="perl-Hash-StoredIterator" arch="i686">
  <version epoch="0" ver="0.008" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-17" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-20" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-22" date="1682251200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8668cad07372e1ab81c5c6310479571a8cd82e20cfdfd72571602a976832b5a2" name="perl-Hash-Util-FieldHash-Compat" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a2ee24d76c5c431c5d6e9a8e562d4d24b389a42889b566ffc54b1b027510cfd1" name="perl-Hook-LexWrap" arch="noarch">
  <version epoch="0" ver="0.26" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-19" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="828395327b7e0b7130ae91915530e96cc652352da494ce079affc9af7c869ddb" name="perl-IO-AIO" arch="i686">
  <version epoch="0" ver="4.81" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.78-1" date="1662465600">- Update to 4.78
  - Add IO::AIO::mount and IO::AIO::umount
  - Add a bunch of symbols from sys/mount.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-1" date="1664193600">- Update to 4.79
  - The autoconf result of the mount check was not used, so it failed to
    compile on most systems
  - Fix format string usage for croak in extract_stringvec function</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-2" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
</package>
<package pkgid="60f161ead8bf325e4bd92b779e35bf0958aa6860b6a7cd4e261e0244a17407df" name="perl-IO-Capture" arch="noarch">
  <version epoch="0" ver="0.05" rel="41.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-41" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b12dd2033230939931edcc4d46796c4822fb6320ec8b10653864fcd28cf31aea" name="perl-IO-Compress" arch="noarch">
  <version epoch="0" ver="2.223" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Add stub module IO/Compress.pm (GH#57)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - IO::Compress::Gzip accidentally modified the `$EXPORT_TAGS{all}-&gt;@*` of
    other modules (GH#64)
  - Fix typos in streamzip (GH#59)
  - Fix documentation for get_Bufsize in Compress::Raw::Zlib
    (https://github.com/pmqs/Compress-Raw-Zlib/issues/34)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435525)
  - Refresh zipdetails from https://github.com/pmqs/zipdetails
  - Delete GZIP environment variable before running interop tests (GH#24)
  - IO::Compress @2.215: t/006zip.t failed due to missing test files (GH#67)
  - Fix version check in 000prereq.t
  - Enhance _dosToUnixTime to handle zero and invalid datetime values; add
    tests for edge cases (GH#65, CVE-2025-15649)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445605)
  - Add SECURITY.md (GH#69)
  - Fix POD typo
  - Refresh zipdetails from https://github.com/pmqs/zipdetails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1773057600">- Update to 2.219 (rhbz#2445768)
  - Fix a few typos
  - Squash repeated semicolons
  - Make dependent version checking consistent and update module to version
    2.219 (GH#70)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1779019200">- Update to 2.220 (rhbz#2478225)
  - Remove use of eval in globmapper (GH#73, CVE-2026-48962)
  - Update zipdetails to version 4.006 (CVE-2026-48961)
  - Fix typo in fastForward (GH#72, CVE-2026-48959)
  - Fix issue with 'rawdeflate' option in AnyInflate (GH#71)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1781611200">- Update to 2.221 (rhbz#2489325)
  - Update zipdetails to version 4.008
  - Update reference for the info-zip extrafld file
  - Add hex values for utf8 encoding as a comment
  - Fix File::GlobMapper wildcard replacement after ordinary letters
  - IO-Compress: generalize for EBCDIC
  - Remove test for filename when not needed, which helps with EBCDIC support
    (GH#73)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.222-1" date="1783080000">- Update to 2.222 (rhbz#2496861)
  - Tag ':constants' no longer exports all constants (GH#64, GH#78)
- Split depver macro into depver_bzip2 and depver_zlib</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.223-1" date="1783425600">- Update to 2.223
  - Fix typo in Makefile.PL (GH#79)</changelog>
</package>
<package pkgid="960bea6423d2b648e64885181399777c89e2d9a60609499dbfe62cbed08280b1" name="perl-IO-Compress-Lzma" arch="noarch">
  <version epoch="0" ver="2.217" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.207-1" date="1708516800">- Update to 2.207 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - Stop accidentally modifying the '$EXPORT_TAGS{all}-&gt;@*' of other modules
    (IO::Compress GH#64)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Delete XZ environment variable before running interop tests
  - Rework workflow to automatically detect and use all the versions of perl
    available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="d07f9956489c22f59b0d9a2a9962dcb87a14f7dd181fa54ede255f20a2e67341" name="perl-IO-FDPass" arch="i686">
  <version epoch="0" ver="1.3" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-8" date="1682251200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b2c11214fa758c07b9d9f0eade0869b0e5292031843967fa93acedf6477d77fa" name="perl-IO-Multiplex" arch="noarch">
  <version epoch="0" ver="1.16" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-25" date="1682337600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="130c510ab065610cb6b33b8fd2affcb3a6d9361f1d0f1a8f63b5e6b015a2ffa3" name="perl-IO-Socket-INET6" arch="noarch">
  <version epoch="0" ver="2.73" rel="6.fc36"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 2.72-23" date="1621339200">- Patch for bad code in test and random test fail (#1207174)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-1" date="1639137600">- Update to 2.73
  - Deprecate in favour of IO::Socket::IP
- Fix dist tags for Alma, Rocky and CentOS Stream Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-6" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="75e88a4dd38972f36ee3269283bf34b7d13edb0b725468a517bb2fafc4dba2f6" name="perl-IO-Socket-IP" arch="noarch">
  <version epoch="0" ver="0.44" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-1" date="1732536000">- Update to 0.43
  - Swapped unit tests from `Test::More` to `Test2::V0`
  - Fixed some documentation typos (CPAN RT#157201)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-1" date="1778760000">- Update to 0.44
  - Can 'use parent' rather than 'use base' (CPAN RT#177570)</changelog>
</package>
<package pkgid="cc0add2678596416f5fbdf0d0e3ca618ea550b12cea0e6e1b959a65abe5abd58" name="perl-IO-Socket-SSL" arch="noarch">
  <version epoch="0" ver="2.099" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.089-1" date="1724932800">- Update to 2.089
  - New option SSL_force_fingerprint to enforce fingerprint matching even if
    certificate validation would be successful without
  - Document _get_ssl_object and _get_ctx_object for cases where direct use of
    Net::SSLeay functions is needed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.090-1" date="1748952000">- Update to 2.090
  - Fix OCSP live test after Let's Encrypt has disabled OCSP support (GH#169)
  - public_suffix now preserves trailing dot (GH#167)
- Apply Crypto Policy patches unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.091-1" date="1749729600">- Update to 2.091
  - Fix behaviour on one-sided SSL shutdown; if the application continued to
    read after half-closing the SSL connection, this could result in reading
    encrypted data (i.e. close notify, SSL session tickets...)
  - See documentation of stop_SSL for detailed description of handling
    half-closed SSL connections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.093-1" date="1750161600">- Update to 2.093
  - Rework for one-sided SSL shutdown, to implement a useful and secure
    behaviour without affecting existing applications</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.094-1" date="1750334400">- Update to 2.094
  - Fix memory leak introduced in 2.092</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.095-1" date="1752235200">- Update to 2.095
  - Regression: make sysread set buffer to empty string again when returning EOF
    (GH#171)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1767614400">- Update to 2.096
  - Allow stacking TLS layers with SSL_usebio; this also allows LWP (after
    patches) to access https site through TLS-enabled proxy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.098-1" date="1767787200">- Update to 2.098
  - Fix GH#175 with upgrading from plain socket (no object) by using correct
    fdopen mode +&lt; instead of &lt;+
  - Another fix for GH#175 to make sure that an unblessed socket gets blessed
    in place instead of using new_from_fd; document that it will not retain
    original class with unblessed sockets on error, since this never worked
    anyway (there is no native unbless)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.098-3" date="1780488000">- BR: procps-ng rather than procps for the test suite
  (procps has been provided by procps-ng since Fedora 18)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.099-1" date="1782475200">- Update to 2.099
  - Close socket by default on failed SSL handshake when created with new, but
    keep open when upgrading from existing socket with start_SSL; this restores
    old behaviour that was accidentally broken</changelog>
</package>
<package pkgid="60a22174ca135d5aa041ce2276d876657b9afa44588634c03607aea3b028ac31" name="perl-IO-Socket-Socks" arch="noarch">
  <version epoch="0" ver="0.74" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-17" date="1682337600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="caee024106cf71565837844fa03985f56dd74364b48c37a19fcb0c00e0039d02" name="perl-IO-String" arch="noarch">
  <version epoch="0" ver="1.08" rel="47.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-47" date="1689422400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f2cfefb44efd5a35d1a23f1aa0b3b87b07d362907f8dfa4cb89f2f01532d0d5c" name="perl-IO-Tty" arch="i686">
  <version epoch="0" ver="1.31" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20-7" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.21-1" date="1774267200">- Update to 1.21
  Bug Fixes:
  - Fix slave fd leak on IO::Pty destruction; the slave pty file descriptor was
    not closed when the IO::Pty object was destroyed, leaking file descriptors
    until process exit (GH#14, GH#39)
  - Fix set_raw() to modify cflag for proper raw mode on BSD/macOS; set_raw()
    was not clearing CSIZE|PARENB or setting CS8 in cflag, causing incomplete
    raw mode on macOS, OpenBSD, and NetBSD (GH#12, GH#40)
  - Modernize function detection to use proper system headers instead of
    fragile K&amp;R-style forward declarations; the old approach conflicted with
    real prototypes on modern compilers (especially FreeBSD/Clang), causing all
    function checks to fail (GH#38, GH#41)
  Improvements:
  - Add BSD CI testing for FreeBSD, OpenBSD, and NetBSD via
    cross-platform-actions; also bumps actions/checkout from v2 to v4 (GH#42)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1774440000">- Update to 1.23 (rhbz#2450189)
  Bug Fixes:
  - Fix function detection on Solaris by adding __EXTENSIONS__ to expose BSD
    extensions (like strlcpy) that are hidden when _XOPEN_SOURCE is defined
    (GH#47, GH#48)
  - Fix file descriptor leaks in open_slave() error paths; the master pty fd
    was not closed on several early-return error paths, causing fd leaks when
    falling through multiple pty allocation methods (GH#49)
  - Replace deprecated indirect object syntax (e.g. 'new IO::Pty') with direct
    method calls ('IO::Pty-&gt;new'); Perl 5.36+ disables indirect object calls,
    so this fixes forward compatibility (GH#52)
  Improvements:
  - Add unit tests for ttyname(), slave()/close_slave() lifecycle,
    set_winsize()/get_winsize() round-trips, pack_winsize/unpack_winsize, and
    constant importing (28 new tests) (GH#50)
  - Replace DynaLoader with XSLoader and bump minimum perl version to 5.8.8;
    XSLoader is simpler and has been in core since perl 5.6 (GH#51)
  - Add clone_winsize_from() test coverage (7 new tests) covering basic clone
    between slave ttys, non-tty master fast path, croak on non-tty source, and
    pixel dimension preservation (GH#53)
  Maintenance:
  - Fix stale POD versions, add Perl 5.38/5.40 to CI, and update repository
    URLs from toddr/IO-Tty to cpan-authors/IO-Tty (GH#44)
  - Remove dead Perl 5.003 compatibility code, modernize XS (Nullch to NULL,
    perl_get_sv to get_sv, sprintf to snprintf) (GH#45)
  - Modernize CI with dynamic perl version discovery via
    perl-actions/perl-versions and add a disttest job (GH#46)
  - Regenerate README from POD to fix stale version (GH#52)
  - Modernize 'use vars' to 'our' declarations in Tty.pm and Pty.pm; add
    missing 'use warnings' to Pty.pm (GH#53)
  - Add AI_POLICY.md for transparency on AI-assisted contributions
  - Convert README to Markdown and update MANIFEST</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-1" date="1774612800">- Update to 1.24 (rhbz#2452300)
  Bug Fixes:
  - Fix slave pty reopening on Solaris/illumos; after close_slave(), reopening
    with plain Perl open() skipped pushing STREAMS modules (ptem, ldterm,
    ttcompat), causing isatty() to return false - added _open_tty() XS function
    that opens the device and pushes STREAMS modules on platforms that support
    I_PUSH (GH#54, GH#55)
  - Fix undef warnings on Perl 5.8.8 by removing the undef operator on
    localized $SIG{__DIE__}, and fix XS ttyname() on older Perls by avoiding
    the InOutStream typemap, which can return NULL for filehandles created via
    new_from_fd (GH#56, GH#58)
  - Add __BSD_VISIBLE for FreeBSD in function probes; the _XOPEN_SOURCE
    definition hid BSD extensions like strlcpy, causing probe failures and
    subsequent compile errors from conflicting static/non-static declarations
    (GH#57, GH#59)
  Maintenance:
  - Modernize Makefile.PL: replace BUILD_REQUIRES with TEST_REQUIRES
    (EUMM 6.64+), add CONFIGURE_REQUIRES, upgrade META_MERGE to meta-spec v2,
    modernize generated Constant.pm to use 'our' instead of 'use vars', and
    remove dead PPD postamble (GH#60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1775131200">- Update to 1.25 (rhbz#2454158)
  Bug Fixes:
  - Fix IO::Pty DESTROY force-closing the slave pty: the DESTROY method (added
    in 1.21) explicitly closed the cached slave handle, breaking consumers like
    IPC::Run that hold a reference to the slave via $pty-&gt;slave() and expect it
    to survive master destruction; now just deletes the internal reference and
    lets Perl's refcounting handle fd closure correctly (GH#62, GH#64)
  Maintenance:
  - Simplify version variables to a single source of truth: extract version
    from Tty.pm in Makefile.PL using MM-&gt;parse_version() instead of hardcoding
    it, use VERSION_FROM in WriteMakefile, and remove $XS_VERSION from Tty.pm
    (GH#61)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1775131201">- Update to 1.26 (rhbz#2454517)
  Bug Fixes:
  - Fix strlcpy detection on DragonFly BSD to avoid static/non-static
    declaration conflict; added __DragonFly__ guard to the function test
    (paralleling __FreeBSD__) and added a belt-and-suspenders check for
    perl's own HAS_STRLCPY in Tty.xs (GH#67)
  Maintenance:
  - Add 5-minute timeout to all CI test steps to prevent hung tests from
    consuming CI resources indefinitely (GH#66)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1775304000">- Update to 1.27 (rhbz#2454942)
  Bug Fixes:
  - Fix build on OpenBSD by including termios.h to detect openpty reliably and
    setting _BSD_SOURCE to find strlcpy in includes (GH#68)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1776945600">- Update to 1.29 (rhbz#2461125)
  Bug Fixes:
  - Fix make_slave_controlling_terminal() on Solaris/HP-UX to use _open_tty()
    instead of IO::Tty-&gt;open(), ensuring STREAMS modules (ptem, ldterm,
    ttcompat) are pushed via I_PUSH when the slave is opened for controlling
    terminal setup - parallel fix to the slave() method fix in 1.24 (GH#69)
  - Fix Perl 5.40+ "Possible memory corruption: ioctl overflowed 3rd argument"
    warning in clone_winsize_from() and get_winsize(); use
    pack_winsize(0,0,0,0) to pre-allocate the ioctl buffer with SvCUR matching
    sizeof(struct winsize) instead of an empty string (GH#74)
  - Fix diagnostic warnings being silently suppressed when callers use lexical
    "use warnings" (the modern standard since Perl 5.6); $^W and PL_dowarn only
    fire under perl -w - replaced with warnings::enabled() in IO::Tty and
    IO::Pty (GH#76) and ckWARN(WARN_IO) in Tty.xs (GH#79)
  - Fix file descriptor leak in IO::Pty when new_from_fd() fails after
    pty_allocate() or _open_tty() returns raw C-level fds; added POSIX::close()
    calls on the raw fds before croaking at three sites in new() and slave()
    (GH#77)
  - Fix openpty() detection on Alpine Linux and other musl-based systems where
    openpty() has moved from libutil into libc (glibc 2.34+); probe libc first
    before falling back to -lutil (GH#78)
  - Fix -Wsign-compare compiler warnings: change namebuflen parameter type from
    int to size_t in open_slave() and allocate_pty() to match the return type
    of strlcpy() and the size argument of snprintf() (GH#80)
  - Fix spurious "_FORTIFY_SOURCE requires compiling with optimization"
    warnings during configure probes when $Config{optimize} (e.g. -Os) is
    separate from $Config{ccflags}; include optimize flags in all configure
    probe compilations (GH#81)
  - Fix header probes in Makefile.PL missing platform extension defines
    (_GNU_SOURCE, _BSD_VISIBLE, etc.) that function probes already included;
    bare #includes could cause HAVE_PTY_H and similar to be unset on strict
    POSIX systems even when the header exists (GH#84)
  - Fix configure-time function detection probes being broken by compiler
    optimization:
    - The probes stored function pointers in local variables that -O2/-Os
      (added to probe flags in GH#81) eliminated as dead stores, so the linker
      never saw the function reference; on systems where openpty() lives in
      -lutil (older glibc, BSDs), the probe falsely succeeded without -lutil,
      producing "undefined symbol: openpty" at runtime
    - Fixed by storing the function pointer in a file-scope global variable
      that the optimizer cannot eliminate (GH#87, GH#88)
  Improvements:
  - Use L&lt;&gt; instead of C&lt;&gt; for cross-module POD references in Tty.pm and Pty.pm
    so MetaCPAN renders IO::Pty, IO::Handle, and IO::Stty as clickable links
    (GH#86)
  Maintenance:
  - Modernize POD in Tty.pm and Pty.pm: remove stale platform version
    references (FreeBSD 4.4, OpenBSD 2.8, HPUX 10.20, Solaris 2.6), replace
    defunct SourceForge/mailing list URLs with GitHub issue tracker (GH#70)
  - Modernize the 'try' example script: add strict/warnings, my declarations,
    3-arg open, and lexical filehandles; the script is shipped to CPAN and
    referenced in POD as the canonical usage example (GH#73)
  - Strengthen test coverage for set_raw() and winsize: verify all termios
    flags set by cfmakeraw (iflag, oflag, PARENB, CSIZE, CS8, VMIN, VTIME) and
    add a test for the unpack_winsize() length-validation croak (GH#75)
  - Update GitHub Actions to Node.js 24 versions: actions/checkout v6,
    cross-platform-actions/action v1, perl-actions/install-with-cpm v2;
    required before GitHub forces Node.js 24 in June 2026 (GH#85)
  - Add Ubuntu LTS version matrix (20.04, 22.04, 24.04) to the GitHub Actions
    test suite; exercises the system perl on each current Ubuntu LTS release
    via Docker containers, running after the main ubuntu job (GH#89)
- Add patch to fix detection of openpty() in libutil on older Fedora releases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1779710400">- Update to 1.31 (rhbz#2481113)
  Bug Fixes:
  - Fix v1.27 regression where _open_tty() always passed O_NOCTTY, preventing
    make_slave_controlling_terminal() from acquiring a controlling terminal via
    the POSIX-standard open-without-O_NOCTTY mechanism (it was forced to fall
    through to an explicit TIOCSCTTY ioctl) (GH#91, GH#94)
    - _open_tty() now takes an optional noctty flag (default 1 for backward
      compatibility)
    - make_slave_controlling_terminal() passes 0
  - Fix openpty() detection on Fedora 33-34 / glibc 2.32-2.33 where LTO flags
    (-flto=auto) caused the libc-only compile probe to falsely succeed,
    producing "undefined symbol: openpty" at runtime; try -lutil before libc;
    harmless on systems where openpty lives in libc (glibc 2.34+, musl) and
    necessary where it doesn't (GH#92, GH#93)
  Maintenance:
  - Address CPANTS kwalitee issues: add LICENSE, SECURITY.md, and
    CONTRIBUTING.md; add META 'provides' for IO::Tty, IO::Pty, and
    IO::Tty::Constant; use --format=ustar in TARFLAGS to prevent PaxHeader
    entries in distribution tarballs (GH#90)
  - Clean up MANIFEST.SKIP: add #!include_default so ExtUtils::Manifest's
    built-in skip list is in effect, drop five entries that duplicate those
    defaults, and add a ^\.claude/ rule
- Package CONTRIBUTING.md, LICENSE and SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-2" date="1780401600">- Fix for rhbz#2463168 (perl-IO-Tty-1.24 or newer break coreutils test-suite)
  (GH#91, GH#95)</changelog>
</package>
<package pkgid="485f094e01fb39555b6c0c5c389f1dfd89e5203d2bc088e8b8720a5ce506eff2" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.15" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.12-1" date="1672401600">- Update to 1.12
  - Use a distinct test file, with pid in it, for each test
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.13-1" date="1673092800">- Update to 1.13 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-1" date="1673438400">- Update to 1.14
  - Fix INSTALLDIRS option for newer perls</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.15-1" date="1709294400">- Update to 1.15 (rhbz#2267126)
  - Specify license in module metadata</changelog>
</package>
<package pkgid="693773f1ea1f20ebd76556a583b3e3f25c0b73d0e73a4d8f55302bebcfaae0e7" name="perl-IO-stringy" arch="noarch">
  <version epoch="0" ver="2.113" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.113-11" date="1682337600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c53140e84e835b0830b36ee1d3592e2fd6849c0d8e7296d6e7bb4679b5e52ff6" name="perl-IPC-Cmd" arch="noarch">
  <version epoch="2" ver="1.04" rel="500.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.04-500" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="48257e95c6152caa99c896350140c2b1e8e9ceaee9312cee4f105588361e3a4b" name="perl-IPC-Run" arch="noarch">
  <version epoch="0" ver="20260402.0" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250809.0-1" date="1754913600">- Update to 20250809.0 (rhbz#2387443)
  - Reduce delays in detecting child exit (GH#172)
  - Add quickstart section at the top of the docs (GH#174)
  - Retry _read() on EINTR instead of losing pipe contents (GH#177)
  - In test suite, work around bug in NetBSD 10
- Use %{make_build] and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260322.0-1" date="1774267200">- Update to 20260322.0 (rhbz#2450190)
  Bug fixes:
  - Handle EAGAIN in _write() for non-blocking pipe writes (GH#126, GH#221)
  - Prevent fd leak in _do_kid_and_exit when TFD == KFD (GH#149, GH#218)
  - Suppress spurious "Filehandle STDIN reopened" warnings in child when $^W=1
    with pty redirection (GH#131, GH#219)
  - Make binmode the default on Win32 to prevent newline mangling of
    binary data (GH#116, GH#192)
  - Avoid undef warning in _cleanup when fork fails (GH#82, GH#197)
  - Wrap coderef in eval in _do_kid_and_exit to prevent child process from
    escaping into parent code path on die() (GH#97, GH#193)
  - Propagate CODE ref exceptions back to parent via error pipe
    (GH#122, GH#224)
  - Close external input handles in parent after fork to prevent hangs when
    child exits early (GH#57, GH#226)
  - Preserve $cur_kid when a Timer is encountered in harness(), fixing
    "No command before 'init'" errors (GH#134, GH#187)
  - Restore compat for bare undef params in harness() (GH#124, GH#190)
  - Passing undef as stdin/stdout/stderr no longer dies (GH#141, GH#184)
  - Avoid "Modification of a read-only value" when passing undef stdin
    (GH#139, GH#185)
  - Reject empty/undef command name in _search_path (GH#162, GH#182)
  - Limit input buffer chunk size to prevent exponential memory growth when
    streaming data to slow consumers (GH#154, GH#183)
  - Silently ignore undef arguments passed as timeout to harness()
    (GH#128, GH#189)
  - Correct two minor documentation issues in Run.pm (GH#133, GH#188)
  - Skip win32_compile.t when getprotobyname('tcp') is unavailable
    (GH#137, GH#186)
  - Survive SIGPIPE when child exits before consuming all stdin (GH#35, GH#204)
  - Handle EPIPE when child exits before consuming stdin (GH#92, GH#195)
  - Handle tied STDERR without FILENO in _debug_fd (GH#93, GH#194)
  - Invalidate path cache on $PATH change, add clearcache() (GH#82, GH#196)
  - Support scalar ref for '&gt;pipe' and '&lt;pipe' operators (GH#50, GH#201)
  - Use $type in IO::new error message instead of $_ (GH#49, GH#202)
  - Fix &lt;pipe documentation example order and equivalent pipe example
    (GH#66, GH#198)
  - Suppress spurious numeric warning in result() and results() (GH#65, GH#199)
  - Suppress numeric warnings from result() when SIGCHLD is IGNORE
    (GH#29, GH#205)
  - Handle scalar refs in Win32IO pipe operators (GH#213, GH#214)
  - Remove blanket TODO from win32_newlines.t, keep only for still-failing
    tests (GH#215, GH#216)
  - Prevent handle inheritance of caller-owned fds on Win32
    (GH#169, GH#181, GH#211)
  - Enable kill_kill test 1 on Win32 (CPAN RT#11215, GH#207)
  - Suppress filehandle warning during global destruction in tied_stderr.t
    (GH#237, GH#239)
  - Resolve File::Temp cleanup warning on Windows CI (GH#236, GH#238)
  - Suppress Socket::IPPROTO_TCP redefined warning in win32_compile.t
    (GH#230, GH#235)
  - Prevent tied_stderr.t from hanging on Win32 CI (GH#222, GH#225)
  Improvements:
  - Add env option to set child process environment variables without modifying
    parent %ENV (GH#178, GH#179)
  - Add started() method to query harness run state (GH#171, GH#180)
  - Add finished() method to distinguish exit-0 from not-yet-exited
    (GH#169, GH#181)
  - Add pid(), pids(), is_running(), full_path(), full_paths() convenience
    methods (GH#44, GH#203)
  - Add &lt;blocking_pipe operator for blocking writes to child stdin
    (GH#64, GH#200)
  - Add close_stdin() method to prevent unbounded memory growth when streaming
    to long-running children (GH#212)
  Maintenance:
  - Consolidate CI into single testsuite.yml with dynamic Perl version matrix
    (GH#208, GH#209)
  - Add CLAUDE.md with project guidelines for AI-assisted development (GH#220)
  - Add 5-minute timeout to all CI workflow steps
  - Remove TODO from Win32 autoflush test and align with Unix branch
    (GH#228, GH#234)
  - Clean up resolved TODO tests in win32_newlines.t (GH#223, GH#227)
  - Skip t/eintr.t early on Win32 to avoid SIGUSR1 warning (GH#231, GH#233)
  - Suppress File::Temp version-string warnings in test suite (GH#229, GH#232)
- Apply upstream fixes for compatibility with IO::Tty 1.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260401.0-1" date="1775131200">- Update to 20260401.0 (rhbz#2454159)
  Bug fixes:
  - Require IO::Pty 1.25, which fixes stale pty slave fd after close_terminal
    in child, replacing defensive workarounds (GH#240, GH#241, GH#266)
  - Close Win32IO socket/pipe handles explicitly in _cleanup to prevent handle
    leaks (GH#237, GH#246)
  - Handle $SIG{PIPE} set to 'DEFAULT' in _select_loop instead of crashing
    (GH#242, GH#244)
  - Handle $SIG{CHLD} set to '' or 'DEFAULT' in _select_loop (GH#262)
  - Fix PTYS typo in adopt() and missing TIMERS init in harness constructor
    (GH#260)
  - Handle PTY allocation failure gracefully in start() instead of dying with
    an unhelpful error (GH#267)
  - Correct Timer.pm POD typos, _parse_time error message, and remove redundant
    parse call (GH#251)
  - Prevent noexec probe from leaking TAP output in search_path_cache.t (GH#247)
  Improvements:
  - Correct broken POD links and code examples in documentation (GH#252)
  Maintenance:
  - Update GitHub URLs from toddr/IPC-Run to cpan-authors/IPC-Run (GH#263)
  - Replace GPL v2 full text with standard "same terms as Perl" license (GH#268)
  - Add AI policy document (GH#248)
  - Use File::Spec-&gt;devnull in autoflush.t for portability (GH#250)
  - Skip search_path_cache.t on noexec temp filesystems (GH#247)
  - Remove dead code from Run.pm (GH#266)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260402.0-1" date="1775217600">- Update to 20260402.0 (rhbz#2454677)
  Bug fixes:
  - Detect undefined command in arrayref at harness parse time instead of
    deferring to start() (GH#164, GH#271, GH#272)
  - pipe_writer dropped input when data is the string "0" due to redundant
    boolean test on input buffer (GH#264)
  - Callback filter evaluates return in list context to distinguish empty
    return from the string "0", preventing infinite loop on Win32 (GH#264)
  - Skip pty output assertions on BSD/Darwin due to known pty drain timing
    issues on short-lived children (GH#240, GH#274)
  - Implement proper Windows command-line parsing per Microsoft C/C++ rules,
    fixing argument parsing failures with single-quoted strings containing
    whitespace (GH#273)
  Maintenance:
  - Add shebang to eg/synopsis_scripting (GH#275)</changelog>
</package>
<package pkgid="413dd00d8f9258f64d9a7266195a8ce69cfda9c4ebca4f1a4068baba2d79b551" name="perl-IPC-Run3" arch="noarch">
  <version epoch="0" ver="0.049" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-28" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1705838400">- Update to 0.049
  - Avoid some uninitialized warnings in ProfLogReader
  - Improve errno handling on Windows
  - Avoid leaking fds
  - Fix typos in docs</changelog>
</package>
<package pkgid="18b7fba91ffebd71775399d6eea822a5d8818e4740f10555698a7753808465f8" name="perl-IPC-System-Simple" arch="noarch">
  <version epoch="0" ver="1.30" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-10" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ff74e02455f42da5eaf8f748de7ad7cd42a751c75b69808fc6549776dce02f0d" name="perl-Import-Into" arch="noarch">
  <version epoch="0" ver="1.002005" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.002005-23" date="1682424000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b26b6d9663c0779ef034bfc3c72f46e6461da5dfaf937e973633173aff06cd46" name="perl-Importer" arch="noarch">
  <version epoch="0" ver="0.026" rel="9.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-9" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f6c19e69b2e296054075ad62ab0e756909c8ae42a4bb9018bcb4b33acb304b02" name="perl-JSON" arch="noarch">
  <version epoch="0" ver="4.11" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.11-1" date="1774180800">- Update to 4.11
  - Updated backportPP with JSON::PP 4.18
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ba2e22b56047868b59df25f0e5851829ae6d9f326ddbb3572537f6ec45a5997d" name="perl-JSON-MaybeXS" arch="noarch">
  <version epoch="0" ver="1.004008" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004004-1" date="1663675200">- Update to 1.004004
  - Slight speed optimization for is_bool()
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004005-1" date="1682856000">- Update to 1.004005
  - to_json and from_json are now documented (GH#2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004007-1" date="1722772800">- Update to 1.004007
  - is_bool() now recognizes core booleans (perl 5.36+); note that JSON::PP
   4.11 and Cpanel::JSON::XS 4.38 are required to properly encode them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-1" date="1723377600">- Update to 1.004008
  - Improved boolean testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-2" date="1723550400">- Fix runtime dependency on Cpanel::JSON::XS 4.38 (rhbz#2304277)</changelog>
</package>
<package pkgid="62294882b66044c959cb3fe8712032c9ccb81ca8a531d697dac2a141d32b41b8" name="perl-JSON-PP" arch="noarch">
  <version epoch="1" ver="4.18" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.16-522" date="1766491200">- Silence Getopt::Long warning (rhbz#2417867, PR#1, GH#88, GH#93)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.18-1" date="1774008000">- Update to 4.18
  - Fix duplicate specification warning (GH#88, GH#93)
  - Fix typo (GH#92, GH#96)
  - Fix decode_json prototype
  - Fix space_after (GH#89)
  - Fix a reentrancy issue (GH#61, GH#87)</changelog>
</package>
<package pkgid="bc79ec19e6ef7f3b6e4cd9d33f410dab7fbb39aefab565c2a54d087573a5db6d" name="perl-JSON-XS" arch="i686">
  <version epoch="1" ver="4.04" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-14" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-17" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.04-1" date="1757419200">- Update to 4.03
  - Fix heap overflow causing crashes, possibly information disclosure or worse
    (CVE-2025-40928), and causes JSON::XS to accept invalid JSON texts as valid
    in some cases</changelog>
</package>
<package pkgid="479765cc95bca7b4c3028ef97af20f4fe56164ef5b7d9340068fa780c10393ee" name="perl-Jcode" arch="noarch">
  <version epoch="0" ver="2.07" rel="40.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-40" date="1682424000">- Use SPDX-format license tag
- Avoid use of deprecated patch tag</changelog>
</package>
<package pkgid="96b324b5eed23dd47c2eb7bfbaac1499572ce3ca059d9f79efdf10cc9f93548e" name="perl-LMAP-CID2SPF" arch="noarch">
  <version epoch="0" ver="0.9" rel="18.fc36"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 0.9-18" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="08ea7e41eca4c3a29294aa995ddc914c676fe4cc0f67c567e0a6334889c49c3e" name="perl-Lingua-EN-Inflect" arch="noarch">
  <version epoch="0" ver="1.905" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.905-8" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="dd320580b4c606eac634a551263143dc044157f7e1893e4178ffe86788790c36" name="perl-List-MoreUtils" arch="noarch">
  <version epoch="0" ver="0.430" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="356b499114ade586495ec7d12522b8c133a6d80c855b3463ba14eb7157de7497" name="perl-List-MoreUtils-XS" arch="i686">
  <version epoch="0" ver="0.430" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-6" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682510400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="baa95a127c568a94e5bad65f44a815aaf0338aa34648f5b126fbff8c0d4f8b34" name="perl-List-SomeUtils" arch="noarch">
  <version epoch="0" ver="0.59" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-1" date="1670846400">- Update to 0.59
  - Require Module::Implementation 0.04; without this tests fail (GH#11)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-2" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="250eaa3519ea7e75e4af741baf10eb1c3c9d409e05512d25ee55685503b76a39" name="perl-List-SomeUtils-XS" arch="i686">
  <version epoch="0" ver="0.59" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.58-25" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-1" date="1782129600">- Update to 0.59
  - Fix a heap buffer overflow in the pairwise function when it would return a
    very large list
- Package CODE_OF_CONDUCT.md</changelog>
</package>
<package pkgid="04b36b514935a746b5340b788e7b7550113c7836d0eb9398a192a794bc2b4209" name="perl-Locale-Maketext-Lexicon" arch="noarch">
  <version epoch="0" ver="1.00" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.00-30" date="1689595200">- Drop support for building with rpm &lt; 4.9
- Use Lingua::EN::Sentence unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="46828327c7daac84fd8fbffe839bc68d30022617274716f43428049c850dfcfc" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="499.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-486" date="1647604800">- Work around package note files breaking t/0-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="c313df1d09e9c49c07a4d258a5c5b837031c318a7e32c2d5f7ccef1822b3928f" name="perl-Locale-US" arch="noarch">
  <version epoch="0" ver="3.04" rel="24.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-24" date="1682510400">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally
  - Don't package kruft2codes.pl as documentation; it's a maintainer script
    that is installed alongside the module itself</changelog>
</package>
<package pkgid="22958bcfc3d7c57f96f20d8b93b67cdb7e450065c494fdf66a319eb75b7ad594" name="perl-MCE" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="5d8fcd681786487c4a1738a5064c7758c1d707f530aa5fac8ac519b4b55963c5" name="perl-MCE-Shared" arch="noarch">
  <version epoch="0" ver="1.893" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.884-1" date="1686225600">- Update to 1.884
  - Add missing return statement(s) in Condvar and Queue
  - Move tests for condvar timedwait to xt/condvar_timedwait.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.885-1" date="1686312000">- Update to 1.885
  - Fix typo in Queue dequeue_timed documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.886-1" date="1694692800">- Update to 1.886
  - Add Android support; this required moving MCE::Shared::Base::Common out of
    MCE::Shared::Base to separate file MCE::Shared::Common
  - Bump MCE dependency to 1.889</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.887-1" date="1716724800">- Update to 1.887
  - Improve reaping of completed workers in MCE::Hobo</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.888-1" date="1717675200">- Update to 1.888
  - Apply workaround for PDL::srand in MCE::Hobo
    (https://www.perlmonks.org/?node_id=11159773)
  - Add PDL::srand (v2.062~v2.089) and PDL::srandom (v2.089_01+)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.889-1" date="1718020800">- Update to 1.889
  - Improve support for PDL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.890-1" date="1718107200">- Update to 1.890
  - Revert back to calling CORE::rand() to set the internal seed; MCE::Hobo
    cannot assume the srand or setter function used by the application for
    predictability
    - https://perlmonks.org/?node_id=11159834
    - https://perlmonks.org/?node_id=11159827
  - Add class method MCE::Hobo-&gt;seed to retrieve the seed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.891-1" date="1718884800">- Update to 1.891
  - In scalar context, MCE::Hobo-&gt;init returns a guard to call finish
    automatically upon leaving the { scope } (i.e. omitting finish)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.892-1" date="1724328000">- Update to 1.892
  - Fix for MCE::Hobo, Can't call method "len" on an undefined value during
    global destruction</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.893-1" date="1725969600">- Update to 1.893
  - Improve MCE::Hobo exiting when signaled</changelog>
</package>
<package pkgid="afb41b84389bf0838d48586a8530ffaf2369ffc9537efc72ad0bc58be3af7747" name="perl-MCE-tools" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="7092957b880709f8b47494023077a49ef2017c839026583885c59355f07150df" name="perl-MIME-Base32" arch="noarch">
  <version epoch="0" ver="1.303" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.303-17" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="39f9f20b21c289d0b47ad843b226f920fcbab00a67a4edf4230640275da7e3ad" name="perl-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="a066dc4544b2d293d6154a0713946350300b02ed67a8e4b44d5ee9918b0e187a" name="perl-MIME-tools" arch="noarch">
  <version epoch="1" ver="5.517" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-1" date="1714132800">- Update to 5.515
  -  Fix the "version" setting in META.yml (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.517-1" date="1770811200">- Update to 5.517
  - Handle MIME parameters of the form param= better (i.e. a parameter with no
    value at all); it's treated the same as param="" rather than aborting the
    parse
  - Diagnose additional types of malformed MIME as ambiguous; specifically, an
    empty boundary parameter like boundary= or boundary="" is treated as
    ambiguous</changelog>
</package>
<package pkgid="1f2cfea9ae22a61f7826fd61ed1afea9321e90a51d7381287121d23b83a91482" name="perl-MLDBM" arch="noarch">
  <version epoch="0" ver="2.05" rel="34.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-29" date="1682510400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-32" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-34" date="1726574400">- Drop optional test dependency perl(DB_File) from Fedora 33 onwards due to
  deprecation of libdb</changelog>
</package>
<package pkgid="8707eeb23315b38c52d1d0a2b7d680982ebb6f8bf885bd46f8c2823ed92ffdcc" name="perl-MRO-Compat" arch="noarch">
  <version epoch="0" ver="0.15" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1641643200">- Update to 0.15
  - Optimize pure perl DFS inheritance calculation on perl 5.8
  - Fix function prototypes to match core functions
  - Pod formatting fix
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-6" date="1679486400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="255cd2922d4f2e1524e5f89aa1ff5ea18a9a9b68c6c82c674c30acf28ce39b80" name="perl-Mail-IMAPClient" arch="noarch">
  <version epoch="0" ver="3.43" rel="7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.43-7" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="85b6d9e570050245378acdffc9204393ede7ab42f65b8917404fda7208559a51" name="perl-Mail-Mbox-MessageParser" arch="noarch">
  <version epoch="0" ver="1.5111" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5111-16" date="1682596800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="c7adad8a18b5b99698a399e3ce7d6631ddef72c2a23c01a871b515e0330a178a" name="perl-Mail-SPF" arch="noarch">
  <version epoch="0" ver="3.20260331" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240617-1" date="1718625600">- Update to 3.20240617
  - Update INSTALL file for Dist::Zilla changes
  - Fix memory leak in Mail::SPF::Server when cacheing a Mail::SPF::MacroString
  - When mfrom is empty, create a synthetic mfrom (postmaster@helo) and check
    that identity using the mfrom scope as specified in RFC7208
  - Fix missing declare in Mail::SPF::Server
  - Require Mail::SPF::Mech when needed
  - Correctly handle empty labels
  - Use "try" instead of "eval"
  - Error out if the lookup fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240827-1" date="1724760000">- Update to 3.20240827
  - Do not try to parse an IPv4 address unnecessarily
  - Import RFC7208 tests
  - Referencing the same TXT record through multiple CNAME aliases is not
    permitted by RFC7208
  - Make it clear that BlackMagic module is not available
  - Fix checks for IPv4-mapped IPv6 connections
  - Cache DNS results
  - Misc dzil/build/ci improvements
  - SPF explanation text is restricted to 7-bit ascii</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240923-1" date="1727092800">- Update to 3.20240923
  - Fix issue where certain DNS results would cause an exception to be thrown</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20250505-1" date="1746446400">- Update to 3.20250505
  - Avoid an 'Attempt to reload Mail/SPF/Mech.pm aborted' error
  - Remove empty record structure in order to stringify it correctly
  - Redirect all references to openspf.org to open-spf.org
  - Fix pod test errors
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20260331-1" date="1775044800">- Update to 3.20260331
  - Do not check for multiple CNAMEs if the included domain is a macro
- Drop build dependency on broken, dead upstream module Mail::SPF::Test</changelog>
</package>
<package pkgid="f19ca959f6e0691834705072b712ff12fda63e4934816988815efa0043015206" name="perl-Mail-SPF-Test" arch="noarch">
  <version epoch="0" ver="1.001" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001-11" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e900912678a0cd2f1c51d675a6e31f88572625800d19305faf111b7aa3bd8298" name="perl-Mail-SRS" arch="noarch">
  <version epoch="0" ver="0.31" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-15" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="ec5b8e2bcf85319b001f0e86b3409558e1d0ad732d1144f8cbd12224bc6e2090" name="perl-Mail-Sender" arch="noarch">
  <version epoch="1" ver="0.903" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903-21" date="1686312000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="6d6c704c01e856922c0458e47e64f24fc4f872ece8736e967cc0657538562567" name="perl-Mail-Sendmail" arch="noarch">
  <version epoch="0" ver="0.83" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.82-1" date="1752580800">- Update to 0.82
  - Fixed typos (CPAN RT#88351, CPAN RT#119000)
 - Improvement to use Sys::Hostname::Long (CPAN RT#36112, GH#2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.83-1" date="1783512000">- Update to 0.83
  - Strip CR/LF from header values, to prevent insertion of rogue headers
    (GH#11, CVE-2026-13092)
  - Switched to a new test Sendmail server for t/original.t, as the old one
    was no longer accepting connections
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="edaceed5951c2358dd08ad0dc422e9e3997c6dca68034eb4db48593e0380422f" name="perl-MailTools" arch="noarch">
  <version epoch="0" ver="2.22" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.21-13" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.22-1" date="1731931200">- Update to 2.22 (rhbz#2326982)
  - To/Cc/Bcc/From fields may appear only once (GH#4)</changelog>
</package>
<package pkgid="73508c3569d79dc70c96ad01e07de8afa065741f86593f94bf326195190102e8" name="perl-Math-Base-Convert" arch="noarch">
  <version epoch="0" ver="0.13" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-1" date="1758024000">- Update to 0.13
  - Fix precedence issue highlighted by perl 5.42 (CPAN RT#168226)
  - Correct typo: 96 ASCII characters should be 95
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="98aec3b91f1a25fefca9611fd3e46d2d748e5d8f1ab7ec8f6df6a09fe17303df" name="perl-Math-Round" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-25" date="1682596800">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1696939200">- Update to 0.08
  - NEILB has taken over maintenance
  - Added usual directory structure with lib/ and t/
  - Converted test.pl to traditional Test::More suite
  - Added LICENSE to doc and ensured metadata has license
  - Switched to dzil</changelog>
</package>
<package pkgid="78c2066fbf3fb812d7a4e4bd3426c0ce3b62ed6b46478d09ab5a11829ea7e985" name="perl-Meta-Builder" arch="noarch">
  <version epoch="0" ver="0.004" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-14" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0bb9d97ba764f1260188921da6dac82d18491cbd1f620d704335440e56dbb9dc" name="perl-MetaCPAN-Client" arch="noarch">
  <version epoch="0" ver="2.044000" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.033000-2" date="1752148800">- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker ≤ 7.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.034000-1" date="1764849600">- Update to 2.034000
  - Add distribution to list of known fields in DownloadURL response (GH#129)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.035000-1" date="1767787200">- Update to 2.035000
  - Fix a compatibility issue for ES 8 in scroller setting (GH#131)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.037000-1" date="1767873600">- Update to 2.037000
  - Fix es_filter to merge into query (GH#132)
  - More ES 8 related fixes (GH#133)
  - Updated scripts in examples/ (GH#133)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.038000-1" date="1769774400">- Update to 2.038000
  - Support CVE index</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.039000-1" date="1772280000">- Update to 2.039000
  - Add more types that can be scrolled (GH#134)
  - Fix 'all' fetching from CVE and example scripts (GH#135)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.040000-1" date="1773057600">- Update to 2.040000
  - Use a boolean in reverse_deps term (GH#136)
  - Allow JSON-&gt;true and JSON-&gt;false (GH#137)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.042000-1" date="1777291200">- Update to 2.042000
  - Rating: Fail instead of silent empty response (GH#141)
  - CVE: Clean-up and updated (GH#142)
  - CVE: Fixed search + unbroke 'all' method (GH#144)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.043000-1" date="1777550400">- Update to 2.043000
  - Cleaned up code references to 'type' (GH#148)
  - Support count method (GH#147)
  - Fixed author fields list (GH#145)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.044000-1" date="1782216000">- Update to 2.044000
  - ResultSet: items return an arrayref (GH#151, GH#152)
  - Documentation updates (GH#150)</changelog>
</package>
<package pkgid="c096e3ce92482aa67a9931cbd8a4927f994adbc82d2681436acb09cf57d45cd7" name="perl-Mixin-Linewise" arch="noarch">
  <version epoch="0" ver="0.111" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-1" date="1672574400">- Update to 0.111
  - Update author information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="835dacbae9a7f08085b0c9a54801a929d867cad483d884547654964897efe3f1" name="perl-Mock-Quick" arch="noarch">
  <version epoch="0" ver="1.111" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.111-20" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a0d0a6eef56254b6166ccf5a4e86b0429c8146757d07ead2815c02ec15a9f44a" name="perl-Module-Build" arch="noarch">
  <version epoch="2" ver="0.42.34" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.31-12" date="1648555200">- Handle missing ExtUtils::CBuilder as a missing compiler (#1547165)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.32-1" date="1670587200">- Update to 0.4232
  - Drop Pod::Man dependency for 5.8 compatibility
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.34-1" date="1682683200">- Update to 0.4234
  - PodParser now respects =encoding directives
  - Don't use libraries in t/bundled for Build.PL
  - make_tarball: workaround for broken tar on Darwin
  - Respect $Config{man1ext}/$Config{man3ext}
  - Do not require a compiler if c_source is an empty list
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f7117a61844eefadb09274642fbbad971caaaed8e077150d299d569e8a0ea0f6" name="perl-Module-Build-Deprecated" arch="noarch">
  <version epoch="0" ver="0.4210" rel="26.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4210-26" date="1689681600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="22642c24eed3f2ff47ad1bfe1e8e4ef8278a50933215d2919e08edab037c044c" name="perl-Module-Build-Tiny" arch="noarch">
  <version epoch="0" ver="0.053" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-1" date="1714392000">- Update to 0.048
  - Implement dynamic prerequisites</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1725451200">- Update to 0.049
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.050-1" date="1725451201">- Update to 0.050
  - Revert "Make CPAN::Requirements::Dynamic an optional dependency"
    (GH#36)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051-1" date="1725624000">- Update to 0.051
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use
- Run tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1747137600">- Update to 0.052
  - Add extra_compiler_flags and extra_linker_flags command line arguments</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.053-1" date="1772625600">- Update to 0.053
  - Always set dynamic_config=0 in MYMETA
  - Set PERL_DL_NONLAZY=1 during testing</changelog>
</package>
<package pkgid="fee5acba1d8cbc25eec5a831f8862bdeb7f687d2994d1991392d19f9356cfc4c" name="perl-Module-Build-XSUtil" arch="noarch">
  <version epoch="0" ver="0.19" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-17" date="1674561600">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally
  - Fix permissions of installed files
  - Avoid redundant perl(:MODULE_COMPAT_*) dependency</changelog>
</package>
<package pkgid="02480efe7a9f5f6b36e28cab4cfc68d900829a57de50b6173a7363c1748a06fb" name="perl-Module-CPANTS-Analyse" arch="noarch">
  <version epoch="0" ver="1.03" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-2" date="1780056000">- Use relative symlinks rather than absolute symlinks in test (GH#51)
- Assume List::Util 1.33 is always available
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-1" date="1782302400">- Update to 1.03
  - Fix tests to work with newer Archive::Tar (GH#51)
  - Check link errors and warnings while extracting an archive</changelog>
</package>
<package pkgid="fe718a5df14c2b4f8f14197657085339fdc05e0162f6c30948f95e9fdc14072a" name="perl-Module-CPANfile" arch="noarch">
  <version epoch="0" ver="1.1004" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-12" date="1631534400">- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-16" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9a8c8681b69307e18dbd787bb840f0a1dc1444847a55c1e916d62d9c1ac05d13" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="5.20260708" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251120-1" date="1763726400">- Update to 5.20251120
  - Updated for v5.43.5</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251220-1" date="1766404800">- Update to 5.20251220
  - Updated for v5.43.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260119-1" date="1768910400">- Update to 5.20260119
  - Updated for v5.43.7</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260220-1" date="1771675200">- Update to 5.20260220
  - Updated for v5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260308-1" date="1773057600">- Update to 5.20260308
  - Updated for v5.42.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260320-1" date="1774180800">- Update to 5.20260320
  - Updated for v5.43.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260330-1" date="1774872000">- Update to 5.20260330
  - Updated for v5.42.2
  - Updated for v5.40.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260420-1" date="1776686400">- Update to 5.20260420
  - Updated for v5.43.10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260601-1" date="1780401600">- Update to 5.20260601
  - Updated for v5.43.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260708-1" date="1784203200">- Update to 5.20260708
  - Updated for v5.44.0</changelog>
</package>
<package pkgid="eb8810667e98991ce5ce862aeaa10cb4bd101f08b77185e99ed65ac1e7d7b5b0" name="perl-Module-Extract-Namespaces" arch="noarch">
  <version epoch="0" ver="1.026" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-4" date="1682683200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.024-1" date="1707652800">- Update to 1.024
  - Refresh distro, update email address, release under new PAUSE ID BRIANDFOY</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.025-1" date="1737979200">- Update to 1.025
  - Refresh distro
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.026-1" date="1744632000">- Update to 1.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="28528b73b2520203c4b64daa3020efcc6008821328d5875c4b9ebdadc6d21e80" name="perl-Module-Extract-Use" arch="noarch">
  <version epoch="0" ver="1.055" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.053-1" date="1723896000">- Update to 1.053
  - More upstream metadata changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.054-1" date="1744632000">- Update to 1.054
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.055-1" date="1776600000">- Update to 1.055
  - extract_modules can now search PATH for file</changelog>
</package>
<package pkgid="f3446ad37a3304385fc1d53133b00d0e1984dd8f77883c1d7caf15801004894f" name="perl-Module-Extract-VERSION" arch="noarch">
  <version epoch="0" ver="1.121" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-1" date="1737547200">- Update to 1.118
  - Refresh dist
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-1" date="1744718400">- Update to 1.119
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.121-1" date="1782129600">- Update to 1.121
  - Support the old qv() syntax from version.pm</changelog>
</package>
<package pkgid="d48a384db7af9fc3a133e9aef6da10449eb3b80c7b5034f02b8caa24b28df076" name="perl-Module-ExtractUse" arch="noarch">
  <version epoch="0" ver="0.345" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.344-1" date="1630929600">- Update to 0.344
  - Fixed some spelling errors in the Pod
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.345-1" date="1673956800">- Update to 0.345
  - Auto generate meta_yml_has_provides experimental Kwalitee
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="230f0da9fe5f334888b7123c8a3a9329e721568fccc0a2ea79df74038503b78c" name="perl-Module-Find" arch="noarch">
  <version epoch="0" ver="0.17" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-3" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-1" date="1739793600">- Update to 0.17
  - Avoid warnings when extracting the distribution tarball, which prevented
    installation under cpanm and other tools (GH#13, CPAN RT#148978)</changelog>
</package>
<package pkgid="d55393a1381ccdd52a38e0000035a186e7005ee411144cdb331a9dfa5ea44f00" name="perl-Module-Implementation" arch="noarch">
  <version epoch="0" ver="0.09" rel="36.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-36" date="1682856000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a2503f04d867c4c2f229376d26caaded51cc26c6bae3dd959b0f5c01d7db0ed1" name="perl-Module-Info" arch="noarch">
  <version epoch="0" ver="0.39" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-22" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.39-1" date="1724846400">- Update to 0.39
  - Get rid of ' as package namespace separator
  - Fixed compatibility with 5.8.1 (CPAN RT#129677)</changelog>
</package>
<package pkgid="14ba40f68c2df49a12ca069ee5a18cd4997507ecaacf1454cb86766b1e46ce42" name="perl-Module-Load" arch="noarch">
  <version epoch="1" ver="0.36" rel="499.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.36-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="01198f1bea4716a58480db87d5874eb2374df18fe687616366b5c9851ab75851" name="perl-Module-Load-Conditional" arch="noarch">
  <version epoch="0" ver="0.74" rel="499.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9d32db284d90068bb6d6852ab657d183edc34e6b35cf5d5aebae88fe6a3a4052" name="perl-Module-Manifest" arch="noarch">
  <version epoch="0" ver="1.09" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-18" date="1689681600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="2aa85336f3ae18d1cb1cac297eab37a475e0e2c5410c15eba69ef1f7cb680795" name="perl-Module-Metadata" arch="noarch">
  <version epoch="0" ver="1.000039" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000039-1" date="1775304000">- Update to 1.000039
  - Adds recognition of attributes in "class" declarations (GH#39)
- User %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="10c5cdf924cfe126bc2e70edd19e46f32b1bf1b3903675d517b3780425bff986" name="perl-Module-Pluggable" arch="noarch">
  <version epoch="2" ver="6.3" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:5.2-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.1-1" date="1729684800">- Update to 6.1
  - Fix typo in examples
  - Fix spelling of "FatPacker"
  - Add before_instantiate and after_instantiate hooks
  - Use explicit test plan instead of done_testing
  - Don't use vars, use our
  - Ignore the .AppleDouble
  - Improve vim swapfile patterns
  - Fix behaviour of File::Find and symlinks on certain versions of Win32
  - Skip unreadable files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-1" date="1729857600">- Update to 6.2
  - Add search_dirs, searching filesystem, different from search_path,
    searching namespace</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-2" date="1730030400">- Fix clean-up of temporary directory in test (CPAN RT#156362)
- Work around failure of unreadable file test when running as root (CPAN RT#156367)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.3-1" date="1736596800">- Update to 6.3
  - Fix make_path() in t/29unreadable.t (CPAN RT#156362)
  - Fix t/29unreadable.t tests failing as root (CPAN RT#156367)</changelog>
</package>
<package pkgid="55571ed5ea5799a3c90f3abd7913ee11c038d4e788d5e32a39b4d6d956c3ca62" name="perl-Module-Refresh" arch="noarch">
  <version epoch="0" ver="0.18" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1652184000">- Update to 0.18
  - Fix uninitialized warnings when modules were not successfully loaded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-5" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="9b4bb93885247fe168fccb6357428c5e6e9f77bdd112320cc19ed988ebe3ad66" name="perl-Module-Runtime" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-19" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1743940800">- Update to 0.017 (rhbz#2357698)
  - Fixed internal Pod links
  - Various internal formatting changes
  - Check for eval failures via return value, not $@
  - Update packaging to remove Module::Build and set x_static_install
  - Remove broken SIGNATURE file
- Switch to ExtUtils::MakeMaker flow
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1745236800">- Update to 0.018
  - Avoid xattr headers in release tarball
  - Minor code reformatting</changelog>
</package>
<package pkgid="113b78007b2ca4992af7045402f8952bd7605f463c79b26578cb393616ea6b9e" name="perl-Module-Runtime-Conflicts" arch="noarch">
  <version epoch="0" ver="0.003" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-20" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="fa32022ea10a57624098fc08a63c347cb52cde6717a95b33ce5fb3994570b64f" name="perl-Module-Signature" arch="noarch">
  <version epoch="0" ver="0.96" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-1" date="1726488000">- Update to 0.89
  - Replace keyserver with keyserver.ubuntu.com (GH#34, GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.90-1" date="1749816000">- Update to 0.90
  - Fix fail on signature file with an unexpected empty line (CPAN RT#166901)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.92-1" date="1751025600">- Update to 0.92
 - Add SECURITY.md policy
 - Move to three-arg open
 - Remove spaces from eol
 - Change build process to Dist::Zilla
- Recommend perldoc and PAR::Dist, needed for some cpansign functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.93-1" date="1751112000">- Update to 0.93
  - The cpansign script was not installed with version 0.92 (GH#44)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.95-1" date="1777291200">- Update to 0.95 (rhbz#2461945)
  - Announce deprecation of the module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-1" date="1777377600">- Update to 0.96
  - Fix issue from last release where search keys is interactive
- SECURITY.md no longer shipped</changelog>
</package>
<package pkgid="10dc12f4bcd6fc8e1bbc7158ba5c673dff1ef40de77c18456759f715f1f3503c" name="perl-MojoX-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="1f948c56784f89a72a552cda090d15284072aeb49d300d98b161ac4f6e286e63" name="perl-Moo" arch="noarch">
  <version epoch="0" ver="2.005005" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005005-11" date="1768996800">- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="99252ae61bf2bda44a7f95b7024f6c62306e82d7a7992b47998f584eb91d82dc" name="perl-Moose" arch="i686">
  <version epoch="0" ver="2.4000" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="32ae3a90d2f72feb747bfd231b4df22a4ef9f51734afe8344af804973cfbcf26" name="perl-MooseX-GlobRef" arch="noarch">
  <version epoch="0" ver="0.0701" rel="35.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0701-35" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="33d2a7f81693ebca51d2799e820baf21a96587b732a7547094f011db6f8e0876" name="perl-MooseX-InsideOut" arch="noarch">
  <version epoch="0" ver="0.106" rel="35.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.106-35" date="1682942400">- Use SPDX-format license tag
- Use author-independent source URL
- Use %license unconditionally</changelog>
</package>
<package pkgid="dde6a3b561f7535c07ae17a943e06b023a9f94a4383d83d8b6d8c51e5b852c6d" name="perl-MooseX-NonMoose" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-26" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1735905600">- Update to 0.27
  - Drop dependency on List::MoreUtils
  - New maintainer and repository: https://github.com/uperl/MooseX-NonMoose</changelog>
</package>
<package pkgid="58abc0832acb72e4d27ba23f43d1117b2eba28cdea50613a7149125e9d1fd9fd" name="perl-MooseX-Role-Parameterized" arch="noarch">
  <version epoch="0" ver="1.11" rel="12.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-12" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="07f8330a95034c6ae381ca708ea4a19069a11d9fe54a6a9d778f0d58c668777c" name="perl-MooseX-Role-WithOverloading" arch="i686">
  <version epoch="0" ver="0.17" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-20" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-23" date="1654257600">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1682942400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3da82caa028a27d83f6b57b8ab9c62cbf085fdaf92401f3b5ebcc54f25fb0da4" name="perl-MooseX-Types" arch="noarch">
  <version epoch="0" ver="0.51" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-19" date="1683028800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1745150400">- Update to 0.51
  - Use Sub::Util rather than Sub::Name, since Sub::Util is in core</changelog>
</package>
<package pkgid="55cf13a8e5eb81ea90db961c6f35a10ad57218e012e4e645e00e6e8cb6ac2668" name="perl-Mouse" arch="i686">
  <version epoch="0" ver="2.6.2" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="915070387a275daf9be0cfdfe928ed96aa10426aa7d8119512ec66bec8b76e75" name="perl-Net-CIDR" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1741521600">- Update to 0.22
  - Improve several error messages
  - Allow unabbreviated IPv6 addresses
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1741608000">- Update to 0.23
  - Allow unabbreviated IPv6 addresses</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1747742400">- Update to 0.24 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24.1-1" date="1747828800">- Update to 0.24.1
  - Strip extra leading zeros from octets in addr2cidr (GH#4)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1748088000">- Update to 0.25
  - Fix warning with Perl 5.40</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1750593600">- Update to 0.26
  - cidrvalidate() should accept IPv6 addresses with one uncompressed 0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1755086400">- Update to 0.27
  - cidrvalidate() bug fix (GH#9)</changelog>
</package>
<package pkgid="8cff9db3d0fce093645303fa28df3cd000e7cae0777c8dbc1b72f26c1d00076b" name="perl-Net-CIDR-Lite" arch="noarch">
  <version epoch="0" ver="0.24" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1775908800">- Update to 0.23
  - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
  - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1778500800">- Update to 0.24
  - Reject Unicode digits and trailing newlines in parser inputs
    (CVE-2026-45190)
  - Reject zero-padded CIDR masks (CVE-2026-45191)</changelog>
</package>
<package pkgid="432c3c436a2e7ef2c6f80a6935a3472353a76d826442fb9cda0e649bb8a7f705" name="perl-Net-DNS" arch="noarch">
  <version epoch="0" ver="1.55" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-2.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.50-1.0.cf" date="1740139200">- Update to 1.50
  - Minor code improvements in Resolver::Base
  - Add RESINFO package for resolver information
  - Documentation revision and reformatting
  - IPv4 loopback may be disabled in IPv6-only configuration (CPAN RT#158714)
  - Fix use of uninitialized value in _send_udp (CPAN RT#158706)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Backport DELEG parser to SVCB</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1781179200">- Update to 1.55
  - Fix UDP truncation tests that relied on large RSA RRSIGs
  - Fix unhelpful TAINT error (CPAN RT#178183)
  - TCP read loop treated 1-byte recv() of "0" (0x30) as EOF, corrupting AXFRs
    (CPAN RT#177003)
  - UNIX.pm: Avoid `backticks` that depend on shell (CPAN RT#176900)</changelog>
</package>
<package pkgid="4cde6e714c3f1117d8d5c7626e79c6b030e2fb1d3e30ebc672099ce3fc0954f7" name="perl-Net-DNS-Nameserver" arch="noarch">
  <version epoch="0" ver="1.55" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-2.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.50-1.0.cf" date="1740139200">- Update to 1.50
  - Minor code improvements in Resolver::Base
  - Add RESINFO package for resolver information
  - Documentation revision and reformatting
  - IPv4 loopback may be disabled in IPv6-only configuration (CPAN RT#158714)
  - Fix use of uninitialized value in _send_udp (CPAN RT#158706)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Backport DELEG parser to SVCB</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1781179200">- Update to 1.55
  - Fix UDP truncation tests that relied on large RSA RRSIGs
  - Fix unhelpful TAINT error (CPAN RT#178183)
  - TCP read loop treated 1-byte recv() of "0" (0x30) as EOF, corrupting AXFRs
    (CPAN RT#177003)
  - UNIX.pm: Avoid `backticks` that depend on shell (CPAN RT#176900)</changelog>
</package>
<package pkgid="14b0362e8f8fd43b1981e93d024efa4d9996a6276f0843ac00d0ed73ef04cd67" name="perl-Net-DNS-Resolver-Programmable" arch="noarch">
  <version epoch="0" ver="0.009" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-17" date="1680091200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="8fdfed92b23d38304aea25aae8bfb2afcd248ff8251c08af2495534a054a3242" name="perl-Net-Daemon" arch="noarch">
  <version epoch="0" ver="0.52" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1774267200">- Update to 0.51
  Bug fixes:
  - Fix Socket::INADDR_ANY constant for unix socket client auth (GH#1, GH#27)
  - Fix post_clone() hook - Clone() never called new(), so the
    $self-&gt;{'parent'} check in new() was dead code; added post_clone() method
    that Clone() calls after creating the new object (GH#2, GH#26)
  - Open logfile when filename string is provided via --logfile; OpenLog()
    previously returned the logfile value as-is when it was a defined string,
    causing Log() to fall through to STDERR (CPAN RT#76133, GH#3, GH#25)
  - Reap forked child processes to prevent zombie accumulation; SigChildHandler
    now uses a proper waitpid reaper instead of returning 'IGNORE', fixing
    zombie buildup on Windows/Strawberry Perl after ~64 connections
    (GH#5, GH#23)
  - Fix ReadConfigFile implementation traversing @INC (CPAN RT#123213, GH#8)
  - Detach threads in ChildFunc to prevent memory leaks; thread objects were
    never joined or detached, causing leftover thread mappings to accumulate
    (GH#12, GH#22)
  - Only load threads if forks hasn't already been loaded and threads exists
    (GH#16)
  Improvements:
  - Add post_clone() hook for per-connection initialization; sub-classes can
    override to perform per-connection setup (GH#2, GH#26)
  - Add --listen option to Options() to allow overriding the default listen
    backlog of 10 (GH#4, GH#24)
  Maintenance:
  - Modernize Makefile.PL metadata: add LICENSE, MIN_PERL_VERSION,
    TEST_REQUIRES, upgrade META_MERGE to meta-spec v2, update GitHub URLs
    (GH#28)
  - Modernize CI workflow: upgrade actions/checkout to v4, use
    perldocker/perl-tester images, dynamic Perl version matrix covering 5.8
    through devel, add disttest job (GH#29)
  - Disable t/ithreadm.t for Windows (GH#19)
  - Improve skip messages and detection of ithreads/forks in tests
  - Convert t/base.t to Test::More
  - Apply consistent perltidy formatting
  - Add strict/warnings, replace 'use vars' with 'our'
  - Remove perl 4-ish subroutine calls
- Use %{make_build} and %{make_install}
- Note that Net::Daemon::Test is GPL-2.0-or-later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1775476800">- Update to 0.52
  Bug fixes:
  - Fix dead $RegExpLock that was never acquired in ithreads mode; the lock
    variable existed but was never actually locked before regexp compilation,
    leaving ithreads unprotected; also fix share() call to pass explicit ref
    for runtime-loaded prototype (GH#33)
  - Fix ithreads auto-detection to gate on Perl 5.10+ and exclude Windows; on
    Perl 5.8.x threads::shared is never loaded, making lock() a no-op; on
    Windows, DuplicateHandle() corrupts Winsock sockets - WSADuplicateSocket()
    is required instead (GH#19, GH#30, GH#34, GH#35, GH#50)
  - Correct $eventId hash key typo in Log.pm that prevented event IDs from
    being logged (GH#36)
  - Fix Done() call in test server Loop method - was called without arguments,
    preventing proper server shutdown (GH#38)
  - Clean up stale test artifacts (log, ndtest.cnt) (GH#40)
  - Harden ReadConfigFile against $@ contamination and $! errors (GH#44)
  - Skip pidfile write when pidfile option is not set, preventing spurious
    empty pidfile creation (GH#45)
  - Close cloned listening socket in ithreads handler threads; Perl ithreads
    dup every open handle into new threads; on Windows closing these at thread
    exit invalidated the parent's handle; also re-add Windows skip with
    root-cause documentation (GH#19, GH#30, GH#46)
  - Address CPAN testers failures in t/reap.t and t/fork.t (GH#48)
  - Skip ithread-detach.t on Perl &lt; 5.10 (GH#49)
  - Verify privilege drop succeeded in Bind(); assigning to $&gt;/$) silently
    fails without permission - the daemon would continue running as root (GH#51)
  - Use POSIX::setuid/setgid for permanent privilege drop in Bind(); the
    previous $&lt; = ($&gt; = $user) left saved-set-user-ID as root, allowing a
    compromised process to regain privileges (GH#55)
  Improvements:
  - Modernize open() calls to 3-arg form with lexical filehandles throughout
    the codebase (GH#41)
  Maintenance:
  - Fix POD typos and remove outdated alpha warning (GH#37)
  - Fix stale --mode=threads references and config example syntax in
    documentation (GH#39)
  - Update ancient FSF address in Net::Daemon::Test copyright (GH#35)
  - Convert server tests from raw TAP to Test::More (GH#42)
  - Convert ithreads tests to Test::More and fix Test.pm fd leak (GH#43)
  - Convert remaining tests (loop.t, loop-child.t, unix_clients.t, forkm.t) to
    Test::More (GH#47)</changelog>
</package>
<package pkgid="7f3d123a98a4a29a640df33108d40b03cf186e5bfb622ac16704026756f8d5ab" name="perl-Net-FTPSSL" arch="noarch">
  <version epoch="0" ver="0.42" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-2" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="41cd1f5b2601c89585d89017bf52666353a546fa5ba816a8a5ec3b4534b6bd0e" name="perl-Net-HTTPTunnel" arch="noarch">
  <version epoch="0" ver="0.51" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-4" date="1689681600">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="be8212f6387767c769829d3cbaa2cc96974ad6d22fb70afe3bc06677be4052c5" name="perl-Net-IDN-Encode" arch="i686">
  <version epoch="0" ver="2.500" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-13" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-17" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-21" date="1714737600">- Adapt to perl-5.38.0 and stricter GCC (rhbz#2241714)</changelog>
</package>
<package pkgid="9cab98cba355d269de8a7bb0cdde1d1c3d173394d8d5f12ee5460737fb959e61" name="perl-Net-IP" arch="noarch">
  <version epoch="0" ver="1.26" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-30" date="1683288000">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package README file</changelog>
</package>
<package pkgid="31409d78b0795946347d48acd93db5a3216fc7cfb279e9a6a6ff5984fffbb1e0" name="perl-Net-LibIDN" arch="i686">
  <version epoch="0" ver="0.12" rel="46.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-43" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-46" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="1e60c7a439a143287aed827e6ad1f6205b5a66ed64f8fed7639315ceccfb78ed" name="perl-Net-SMTP-SSL" arch="noarch">
  <version epoch="0" ver="1.04" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-20" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="37c3cc024c532928298dc58db9dacecefd87d49484d91d225f90417eb0ca40a4" name="perl-Net-SMTP-TLS" arch="noarch">
  <version epoch="0" ver="0.12" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-2" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="572cabc477a10f615b58f3d05a6af4007b1fa89149e64e24f290b31f1a6e0ac4" name="perl-Net-SSLeay" arch="i686">
  <version epoch="0" ver="1.96" rel="2.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-4.0.cf" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-5.0.cf" date="1720526400">- BR: openssl-devel-engine on Fedora 41 onwards, at least for now, as the
  build fails in the absence of &lt;openssl/engine.h&gt; (rhbz#2295331)
  (https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-7.0.cf" date="1721736000">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-9.0.cf" date="1742990400">- Fix for test suite compatibility with OpenSSL 3.4
  (https://github.com/radiator-software/p5-net-ssleay/pull/514)
- Drop support for old distributions prior to F-28, EL-8
  - Drop F-26 compatibility patch
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-10.0.cf" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.96-1.0.cf" date="1774180800">- Update to 1.96
  - Skip NPN tests when NPN is disabled in OpenSSL instead of assuming NPN is
    always enabled
  - Update GitHub Actions CI workflow; a number of test jobs were broken
    because some GitHub runners were discontinued, changes in QEMU setup,
    changes in Cygwin, etc.
  - Adjust test 32_x509_get_cert_info.t to match formatting changes in
    OpenSSL 3.4.0 and 3.4.1
  - OpenSSL 3.9.0 and later remove EVP_add_digest()
  - Increase timeout in 62_threads-ctx_new-deadlock.t to allow the test to pass
    on very slow platforms
  - Add missing documentation for STACK_OF() free functions sk_X509_free and
    sk_X509_INFO_free
  - Add $prefx/lib/64 to lib paths in Makefile.PL for Illumos
  - Support vendor-supplied OpenSSL 3.x on VMS and update %ENV modification in
    test 10_rand.t to work on VMS
  - Compiler -D switches Makefile.PL sets are no longer added to the MakeMaker
    CCFLAG attribute because of portability reasons; the switches are now
    passed either via WriteMakefile() or appending them to the
    'perl Makefile.PL ...' DEFINE argument
  - Update GitHub Actions CI testing:
    - Perl on Ubuntu 24.04: Add Perl 5.38, 5.40 and 5.42, add OpenSSL 3.3, 3.4
      and 3.5 minor releases, add LibreSSL 3.9, 4.0 and 4.1 release branches
    - Alpine Linux: Remove 3.15, 3.16 and 3.17; Add 3.19, 3.20, 3.21 and 3.22
    - Freebsd: Add 14.3 and replace 13.2 with 13.5
    - OpenBSD: Add 7.6 and 7.7. Remove 7.2 and 7.3
    - NetBSD: Add 10.1 and replace 9.3 with 9.4
  - Update test 62_threads-ctx_new-deadlock.t to work with LibreSSL 4.1.0
  - Support SSL_CTX_set1_sigalgs_list and SSL_CTX_set1_client_sigalgs_list
  - Support SSL_set1_sigalgs_list, SSL_set1_client_sigalgs_list,
    SSL_get_sigalgs and SSL_get_shared_sigalgs, and add the function
    SSL_CTX_set_cert_cb
  - Add test file 67_sigalgs.t for the sigalgs functions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.96-2.0.cf" date="1781092800">- Add support for OpenSSL 4.0.0 (rhbz#2458197, GH#553)</changelog>
</package>
<package pkgid="df8c5562e92395b8d20b4f4b9abbc0b3403c34869d9cc9ddf877379c274aa4f2" name="perl-Net-Server" arch="noarch">
  <version epoch="0" ver="2.018" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.014-6" date="1726574400">- Only initialize existing Net::SSLeay methods
  - https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - https://rt.cpan.org/Public/Bug/Display.html?id=154333
  - https://github.com/rhandom/perl-net-server/pull/38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.015-1" date="1769083200">- Update to 2.015
  - Compatibility fix to work with MakeMaker prior to 6.58 (GH#35)
  - Update META info from dzil (CPAN RT#94977)
  - Compatibility fix to work with Net::SSLeay prior to 1.34 (GH#38)
  - Multiplex fix for Perl 5.40.x (CPAN RT#172029)
  - Compatibility fix to work with Socket.pm prior to 1.93
  - Remove all bindv6only sniffing; always use setsockopt to set IPV6_V6ONLY
    flag appropriately based on {ipv}
  - Honour {ipv6_package} preference, if specified
  - Fix to work without deprecated "Socket6.pm" module (IO::Socket::IP can
    handle everything now)
  - Fix {reverse_lookups} with {udp_true}
  - Fix tests where "localhost" is not listed as IPv6 loopback
  - Add more various {ipv} and NO_IPV6 tests
  - Fix comments, wordings, messages, and POD (CPAN RT#85052)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.016-1" date="1769688000">- Update to 2.016
  - Honour platform-provided IPV6_V6ONLY value
  - Fix $xflags NIx_* logic emulation
  - Make stub honour wantarray context invocation
  - Don't require ipv6_package to run routines
  - Show correct line number if stub routine dies
  - Warn clean safe_* routines
  - Avoid "string" eval
  - Allow caller to import any Proto routine
  - Allow to import all exportable Socket macros</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.017-1" date="1770638400">- Update to 2.017
  - Address IO::Socket rudely force-importing random symbols
  - Warn-clean IO::Socket::INET6 "Subroutine redefined" spewage
  - Various patches generated with the help of Grok4 xAI
  - Various test suite framework improvements
    - Make test suites return non-zero upon failure
    - Fix IPv6 pre-check for tests
    - Timeout test server if client crashes, instead of rudely mooching on the
      listen port forever in the background
  - Warn-clean for older MakeMaker, such as 6.30
  - Fix POD errors
  - Allow static Proto methods to be imported as normal routines
  - Create Net::Server::IP compatibility wrapper module
  - Honour {ipv6_package} config preference more reliably
  - GetAddrInfoFlags compatibility patch for systems with spoofed networks on
    loopback interfaces using IO::Socket::IP
    - Now IPv4 and IPv6 finally work with OpenVZ or fake loopback or venet0 or
      even on IPv6-only machines even without public routability for that AF_*
      Address Family (these used to fail)
  - Handle special IPv6 behaviours, like OpenBSD and WinXP
  - Emulate IO::Socket::IP {V6Only} behaviour for IO:Socket::INET6
  - Fall back to IO::Socket::INET if no IPv6 module available
  - Various SSLEAY fixes:
    - Add more SSLEAY tests to help with debugging
    - Fixed errors on older Net::SSLeay &lt; 1.49
    - Fix tied SYSREAD $scalar input syntax instead of only ref \$scalar
      sysread FILEHANDLE,SCALAR,LENGTH,OFFSET
    - Fix SSLEAY-&gt;read_until logic
    - Fixed some errors with newer Net::SSLeay &amp; OpenSSL 3.x:
      167772454. error:0A000126:SSL routines::unexpected eof while reading
      167772567. error:0A000197:SSL routines::shutdown while in init
  - Get test suite to pass cleanly on all variations tested:
    - Linux Kernel: 2.6.18, 3.10.0, 4.18.0, 5.14.0, 6.2.16, 6.8.0
    - Flavour: Ubuntu 24.04, Debian 12, Fedora 42, RHEL5/6/7/8/9
    - Windows: Cygwin, MinGW64, WinXP, Win7, Win10, Win11, GitBash
    - Other OS: OpenBSD, Darwin, MacOSX, FreeBSD
    - OpenSSL 0.9.8e, 1.0.1e, 1.0.2k, 1.1.1k, 3.2.2, 3.5.1
    - Hypervisor: OpenVZ, KVM, VirtualBox, VirtIO, VMWare, Docker
    - Dual-Stack Networks: IPv4, IPv6, IPv*, IPv4-Only, IPv6-Only
    - Perl: 5.8.8 5.10.1 5.16.3 5.26.3 5.32.1 5.34.1 5.36.0 5.38.2 5.40.2
    - Net::SSLeay: 1.30, 1.35, 1.55, 1.88, 1.94
    - Socket: 1.78, 1.82, 1.97, 1.99, 2.010, 2.027, 2.031, 2.040
    - Socket6: None, 0.19, 0.23, 0.28, 0.29
    - IO::Socket::IP: None, 0.21, 0.38, 0.41
    - IO::Socket::INET6: None 2.51 2.56 2.66 2.67 2.69 2.72 2.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-1" date="1771416000">- Update to 2.018
  - Add more ipv6_package tests
  - Fix t/Options.t to expect 0.0.0.0 on IPv4-only systems
  - Get rid of requires_ipv6() sniffing
  - Make Proto-&gt;object always return a single object
  - Honour {ipv6_package} config preference even for IPv*</changelog>
</package>
<package pkgid="5e37838470fa0dafb4a48b39d27dc7c89165052ca8fb45f53bf1b940f27c148e" name="perl-Net-Telnet" arch="noarch">
  <version epoch="0" ver="3.05" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.05-6" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f7a2299485ee9ea160260e75e799abe63d5deebe278ddd5ddf50bd6c84241a40" name="perl-NetAddr-IP" arch="i686">
  <version epoch="0" ver="4.079" rel="26.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-20" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-23" date="1686139200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-26" date="1705233600">- Socket6 will be dropped by Fedora from Fedora 40 onwards</changelog>
</package>
<package pkgid="e9ce536d713c8d446db2171279d28bcf9df63cde2cbcfd2270aa81b8fad9fc61" name="perl-Number-Compare" arch="noarch">
  <version epoch="0" ver="0.03" rel="35.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-35" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c7a4cd4ba374b9be584e048b4f7fda8060ecbddcafe7fca7e8e1de58c20cf1ae" name="perl-Object-HashBase" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-1" date="1778587200">- Update to 0.016
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Add '@Class::Name' parent prefix to import (shortcut for `use parent`)
  - Add '&amp;Role::Name' role prefix to import (compose Role::Tiny role)
  - Skip 'new' injection when Object::HashBase is imported into a Role::Tiny
    role
  - Role::Tiny is a soft requirement, loaded only when '&amp;' prefix used
  - '&amp;' prefix requires Perl 5.10+</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1780920000">- Update to 0.017
  - List Role::Tiny (1.003000+) and Class::Method::Modifiers as RuntimeSuggests
    in dist.ini
  - Skip role tests when Role::Tiny is missing or older than 1.003000
    (no is_role), so install is not blocked
  - Move 'around' modifier test to its own file (t/role_modifiers.t) that skips
    when Class::Method::Modifiers is unavailable; Role::Tiny loads it lazily
    only for method modifiers (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1781006400">- Update to 0.018
  - Fix bogus parent/role croaks losing their message on perl &lt; 5.14: croak now
    happens outside the local($@) scope, so the exception is no longer
    clobbered when the local is restored during unwind
  - Replace '//=' (perl 5.10+) with a defined check so the module compiles on
    perl 5.8.x as declared by MIN_PERL_VERSION 5.008001</changelog>
</package>
<package pkgid="140383fc1a16b5f2e193857063acb3a1eafee4e50b9efa231f416c351f726819" name="perl-Object-HashBase-tools" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-1" date="1778587200">- Update to 0.016
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Add '@Class::Name' parent prefix to import (shortcut for `use parent`)
  - Add '&amp;Role::Name' role prefix to import (compose Role::Tiny role)
  - Skip 'new' injection when Object::HashBase is imported into a Role::Tiny
    role
  - Role::Tiny is a soft requirement, loaded only when '&amp;' prefix used
  - '&amp;' prefix requires Perl 5.10+</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1780920000">- Update to 0.017
  - List Role::Tiny (1.003000+) and Class::Method::Modifiers as RuntimeSuggests
    in dist.ini
  - Skip role tests when Role::Tiny is missing or older than 1.003000
    (no is_role), so install is not blocked
  - Move 'around' modifier test to its own file (t/role_modifiers.t) that skips
    when Class::Method::Modifiers is unavailable; Role::Tiny loads it lazily
    only for method modifiers (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1781006400">- Update to 0.018
  - Fix bogus parent/role croaks losing their message on perl &lt; 5.14: croak now
    happens outside the local($@) scope, so the exception is no longer
    clobbered when the local is restored during unwind
  - Replace '//=' (perl 5.10+) with a defined check so the module compiles on
    perl 5.8.x as declared by MIN_PERL_VERSION 5.008001</changelog>
</package>
<package pkgid="c106e8d345286afd32ed7e2a01a6c871ad2dcba6730de7ca83a5ca353450b413" name="perl-Object-ID" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.2-28" date="1683288000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="edcb2b27f8ca6268f85746f9995bd6f4b96acbe544f53282585f073e60b1b46f" name="perl-PAR-Dist" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1683460800">- Update to 0.52
  - Change bug tracker to GitHub issues
  - Quote all version numbers in META.yml files in test *.par files
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1718798400">- Update to 0.53
  - PAR::Dist::blib_to_par quoted the version number of the dist when making
    the PAR file (GH#2)
  - Quote value of "version" in generated META.yml (if there is no (MY)META.yml)</changelog>
</package>
<package pkgid="7f5eb0dc9517f8bd9dd8d305d4b5b2677a1c2ec103b21ae645ed3e2313b4eb5c" name="perl-PPI" arch="noarch">
  <version epoch="0" ver="1.291" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.279-1" date="1724414400">- Update to 1.279
  - Implemented a cache to speed up sibling iteration (GH#287)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.281-1" date="1735387200">- Update to 1.281
  - Framework for recognition of parsing feature activation via:
    - 'use $PERL_VERSION' in code
    - 'use feature' in code
    - 'use $Common::CPAN::Module' in code
    - PPI::Document-&gt;new( feature_mods =&gt; ... )
    - PPI::Document-&gt;new( custom_feature_includes =&gt; ... )
    - PPI::Document-&gt;new( custom_feature_include_cb =&gt; ... )
    - $ENV{PPI_CUSTOM_FEATURE_INCLUDES}
  - Added ability to parse features:
    - signatures, as PPI::Structure::Signature
    - try catch, as PPI::Statement::Compound
- Drop support for using old List::Util versions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.283-1" date="1746360000">- Update to 1.283
  - Allow zero byte documents to have a location
  - Handle simple lists in feature arg decomposing
  - Warn on unknown feature arg decompose instead of die
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.284-1" date="1762257600">- Update to 1.284
  - Fix regex anchors in PPI::Statement::Compound-&gt;type (GH#316)
  - Fix author tests: pod-no404s.t (GH#315)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.286-1" date="1777291200">- Update to 1.286
  - Add support for dotted bitwise operators (GH#322)
  - File opening errors are now reported usefully by PPI::Document
  - Remove the executable bit on several files (GH#323)
  - Fix for performance degradation on initial parse (GH#318)
  - Better reporting of Document-&gt;new input errors</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.291-1" date="1780056000">- Update to 1.291 (rhbz#2483210)
  - Improve parse performance impact of feature tracking even more with a parse
    stack cache (GH#318)
  - Fix two misbehaviors of location indexing code (GH#326)
  - Documentation fixes
  - Fail parse on double-referenced input</changelog>
</package>
<package pkgid="49f35c41c18e7a9b753411bc55451f47fe0f9a56d86c99e68446443ef1bcccff" name="perl-PPIx-QuoteLike" arch="noarch">
  <version epoch="0" ver="0.024" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1781352000">- Update to 0.024
  - Remove references to the RT bug tracking system
  - Replace wyant@cpan.org with harryfmudd@comcast.net
  - Repackage licenses so that GitHub can find them (maybe)
  - Add SECURITY policy
  - No functional changes
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="a480c62343b594ce522805304fa83c83fb2d5572af1e8b7aa43b278ca391f647" name="perl-PPIx-Regexp" arch="noarch">
  <version epoch="0" ver="0.092" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.089-1" date="1747656000">- Update to 0.089
  - The /x modifier should not affect the parse of the replacement string in a
    substitution operator, i.e. the '#' in s/x/#/x does NOT introduce a comment
  - Correct POD link in PPIx::Regexp::Token::Literal
  - Annotate sub class(), since with Perl 5.38 it is a built-in
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1758542400">- Update to 0.090
  - Explain s///eee... more than 2 'e' modifiers are permitted, and cause the
    result of the expression to be eval-ed n-1 times, where n is the number of
    'e' modifiers
  - Fix typo in comment
- Package new SECURITY policy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.091-1" date="1759924800">- Update to 0.091
  - Avoid "Possible attempt to escape whitespace" warning, which is emitted in
    perl-5.43.2 and forward
  - Revise internal usage of 'PPI::Document'</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.092-1" date="1781352000">- Update to 0.092
  - Remove references to the RT bug tracking system
  - Replace wyant@cpan.org with harryfmudd@comcast.net
  - Correct documentation errors
  - No functional changes</changelog>
</package>
<package pkgid="ec01b089048b781ff9c71f06d7b4b57bb09ac43a4ae4ba01b393fb93cb0a012f" name="perl-PPIx-Utilities" arch="noarch">
  <version epoch="0" ver="1.001000" rel="48.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001000-48" date="1683547200">- Use SPDX-format license tag
- Extra tests no longer include spell checks
- Use %license unconditionally</changelog>
</package>
<package pkgid="06858b8fae7faa79d97231823407a71c843fd535c8d7d2896c4171574a088aa2" name="perl-PPIx-Utils" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-9" date="1688731200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1746360000">- Update to 0.004
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="dc578d79ef143865feccca92eeca541ed14de37d5925262fd754de0b5ae43038" name="perl-Package-Anon" arch="i686">
  <version epoch="0" ver="0.05" rel="34.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-29" date="1621771200">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-34" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b396a04e1ed089fd8662a1f4c4117a59970461b82c9dffc3fe939026eb7db91f" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.06" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.06-27" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="b52646b825689088ea043f6fb86740f7f2cebc76292befb0538000218cd02fd0" name="perl-Package-DeprecationManager" arch="noarch">
  <version epoch="0" ver="0.18" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1676894400">- Update to 0.18
  - Use Sub::Util instead of Sub::Name, which is part of Scalar-List-Utils,
    which itself is already a dependency (GH#3)
- Use SPDX-format license tag
- Use %license unconditionally
- Package CODE_OF_CONDUCT.md
- Drop support for building with List::Util &lt; 1.33 since we require Sub::Util,
  which became available at the same time as List::Util 1.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="2e9bfe9d7811885be714ff2ccc33ae19e81f2ba377424d9bdf987a87b7cb4bbf" name="perl-Package-Generator" arch="noarch">
  <version epoch="0" ver="1.106" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.106-28" date="1680264000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="563121336e5670badfe1e6307024766a3fc45998fcfac0b7cac82fc31641e227" name="perl-Package-Stash" arch="noarch">
  <version epoch="0" ver="0.40" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-1" date="1645444800">- Update to 0.40
  - Update bundled version of ExtUtils::HasCompiler, for new new Apple include
    paths
- Drop support for EOL distributions prior to EL-7:
  - BR: optional test dependency perl(Package::Anon) unconditionally
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-4" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="56e319cbcb97ae17061be3a1c2c9a3c9b8b3de81336ac59188d73a37ae1b4090" name="perl-Package-Stash-XS" arch="i686">
  <version epoch="0" ver="0.30" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-10" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-13" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-1" date="1655121600">- Update to 0.30
  - Miscellaneous tooling updates
  - Fixed redundant argument in sprintf in tests (CPAN RT#143205)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-3" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="38b5a1794dc466470ed765ea3145f8fc01ed0577975f4298ca8a1e5f2ee9184d" name="perl-PadWalker" arch="i686">
  <version epoch="0" ver="2.5" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-6" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-8" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d73cf5b6a0607ab789c1e75b510effed8aa5483b59b8a720262cb98670c95dbf" name="perl-Parallel-Runner" arch="noarch">
  <version epoch="0" ver="0.014" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-30" date="1681128000">- Use SPDX-format license tag
- Use https:// source URL
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1714132800">- Update to 0.014
  - Move to Dist::Zilla
  - Switch to Test2::V0</changelog>
</package>
<package pkgid="54717bd81152cd7fe070897ceff5adb78efc6d2db3b459079706adc8ad1a6af8" name="perl-Params-Check" arch="noarch">
  <version epoch="1" ver="0.38" rel="491.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.38-491" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5065c62d17814f0a72a28a7bc81a01f42b726fed5b8fbf15fdf169eab0d72113" name="perl-Params-Classify" arch="i686">
  <version epoch="0" ver="0.015" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-13" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-16" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-18" date="1681214400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c5f142e7c5a67fdf48e29778d344902bd330db415d1f6c5519d146743c4ef0a2" name="perl-Params-Coerce" arch="noarch">
  <version epoch="0" ver="0.15" rel="9.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-9" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7eec071a64ead6dc877d9f4d21c9d8fdf81da8ba22abc1a4da1eca2cb5126116" name="perl-Params-Util" arch="i686">
  <version epoch="0" ver="1.102" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-7" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-11" date="1689076800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0feed20340be0ebb8dec7275bff4992e9d8ca93f7cc5796399ead6e6b331dde2" name="perl-Params-Validate" arch="i686">
  <version epoch="0" ver="1.31" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-3" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-6" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1666526400">- Update to 1.31
  - Include Devel::PPPort 3.68 for compatibility with Perls ≤ 5.8.5 (GH#25)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a2e5aa7ab4cd416d9d4bc03ed89c45bbc9efc002005960ac815af41c392958e9" name="perl-Params-ValidationCompiler" arch="noarch">
  <version epoch="0" ver="0.31" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1673179200">- Update to 0.31
  - Require Class::XSAccessor 1.17+ when trying to load it; earlier versions
    cause test failures (GH#27)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="2db3c445d62b2c4f99941f55022407cd181c6c42cc1c41b958a6acc96724e828" name="perl-Parse-Distname" arch="noarch">
  <version epoch="0" ver="0.05" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-1" date="1649419200">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1651147200">- Incorporate feedback from package review (#2073377)
  - perl(strict) is a run-time dependency, not just a test dependency
  - Don't package the tests as documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-5" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="67ccc98faac6822dfe378e0b92ad7c8118826fc05f7f005959e5df0df1600c55" name="perl-Parse-RecDescent" arch="noarch">
  <version epoch="0" ver="1.967015" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.967015-19" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.58</changelog>
</package>
<package pkgid="ef4d61553d7ff80184597c65b9832b2e6d27846d70bcaa6e9e7ce69aa31848d7" name="perl-Path-Class" arch="noarch">
  <version epoch="0" ver="0.37" rel="24.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-24" date="1683633600">- Use SPDX-format license tag
- Switch to ExtUtils::MakeMaker flow
- Use %license unconditionally</changelog>
</package>
<package pkgid="ffd62cbc5e8dc92e46bc3a0875b31d3f4ec8ce6832084112fe60617e75015dac" name="perl-Path-FindDev" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.3-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="0545dc1be901fdb1e68a7ff9503657b1d1e15cbc64859d34ed10d470913b5609" name="perl-Path-IsDev" arch="noarch">
  <version epoch="0" ver="1.001003" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001003-19" date="1688990400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ed334b06b54e9bae55f0ae42d0f00a41c924ea25299d71924afd3a494d6ced09" name="perl-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.150" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.146-1" date="1715342400">- Update to 0.146
  - Improved error message spewing to a file in a non-existent directory</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.148-1" date="1742212800">- Update to 0.148
  - Invalid arguments when hash references are expected throw exceptions
  - Fixed problems with exceptions
  - Cross-referenced slurp and lines in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.150-1" date="1753099200">- Update to 0.150
  - Released with newest Dist::Zilla to avoid xattrs in the tarball</changelog>
</package>
<package pkgid="b08b3d805d272776e8935daea7b42c217e8c00419504959821db530b89270327" name="perl-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.156" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-5" date="1780315200">- Run tests with LANG=en_US.UTF-8 to fix pod spelling test on Rawhide</changelog>
</package>
<package pkgid="e749d1bbe3c7de99fa20dfe569900b5cf6999c1c1f4312cc4f0720751006c06a" name="perl-Perl-Critic-Deprecated" arch="noarch">
  <version epoch="0" ver="1.119" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-22" date="1641038400">- Dictionary aspell-en no longer needed for spelling check
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-27" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- No longer need to set LANG for spell check</changelog>
</package>
<package pkgid="9fb38d6171c0dff8d22069bdf3edf997b9866d8d96a21e28442d533226201bdc" name="perl-Perl-Critic-Lax" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1672574400">- Update to 0.014
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689768000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="8202118d8315b09b0e343863d9f4341a5e355e5748a27bf74ee260e105fd5c38" name="perl-Perl-Critic-More" arch="noarch">
  <version epoch="0" ver="1.003" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.003-27" date="1688990400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="7d4b9aa1f0373ee9561a8ab5efd323d9d5823b13679ad01f7849265be65da52b" name="perl-Perl-Critic-Pulp" arch="noarch">
  <version epoch="0" ver="100" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 100-1" date="1760356800">- Update to 100
  - ProhibitUnknownBackslash allow \F new in Perl 5.16
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="cb4f18432b499da574af5a32f039141267a5d0c099d79e769aa68cf524577e58" name="perl-Perl-Destruct-Level" arch="i686">
  <version epoch="0" ver="0.02" rel="35.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-30" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-33" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-35" date="1683720000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2a85b9a8b79d52608906da4db15c751154c1187722bbacf72392919acd7d2767" name="perl-Perl-MinimumVersion" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-9" date="1688990400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1746360000">- Update to 1.44
  - Remove detection for Perl versions older than 5.008, which means that 5.006
    is now the minimum required version that will be reported (GH#7)
  - Fix formatting of the summary printed by the perlver script (GH#14)
  - Recognize the minimum required version for the tr///r flag (GH#25) and
    indented heredocs (GH#27)
  - Recognize the minimum required Perl versions for:
    - The "use re '/flags'" pragma (GH#29)
    - Postfix dereferences (GH#30)
    - The &lt;&lt;&gt;&gt; operator (GH#31)
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="f1c42ec17e64bbf96dae6cd4f25cd9c0928e770d46e452c5f61380ff63a5ccb6" name="perl-Perl-OSType" arch="noarch">
  <version epoch="0" ver="1.010" rel="491.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.010-491" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="1fd7efce422476cfd954fdbaab97b43c663002d4bf4345998f296dea32b08513" name="perl-Perl-PrereqScanner-NotQuiteLite" arch="noarch">
  <version epoch="0" ver="0.9918" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.9918-1" date="1775390400">- Update to 0.9918</changelog>
</package>
<package pkgid="40af0013dd18361eaebd0fad1324b0ad7a5b87a5d50e80c1a78b31faf4fad67d" name="perl-Perl-Tidy" arch="noarch">
  <version epoch="0" ver="20260705" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250214-1" date="1739448000">- Update to 20250214 (see CHANGES.md for details) (rhbz#2345575)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250311-1" date="1741780800">- Update to 20250311 (see CHANGES.md for details) (rhbz#2351446)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250616-1" date="1750075200">- Update to 20250616 (see CHANGES.md for details)
- Use %{make_build} and %{make_install}
- Drop workaround for issue with EL-7 dependency generator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-1" date="1752494400">- Update to 20250711 (see CHANGES.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250912-1" date="1757764800">- Update to 20250912 (see CHANGES.md for details) (rhbz#2394876)
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-1" date="1767873600">- Update to 20260109 (see CHANGES.md for details) (rhbz#2428067)
- Change Pod::Html dependency to Pod::Simple::XHTML, which is now the preferred
  back-end option for HTML generation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260204-1" date="1770120000">- Update to 20260204 (see CHANGES.md for details) (rhbz#2436356)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260705-1" date="1783425600">- Update to 20260705 (see CHANGES.md for details) (rhbz#2497057)</changelog>
</package>
<package pkgid="b3a155380cf313fee8b8e88bde4084e0ffb3039b04f603226c1fb82a2492ad90" name="perl-Perl6-Caller" arch="noarch">
  <version epoch="0" ver="0.100" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d64b59be76d6306245650444a27000205077be2da9ea808865f99f99a53f163c" name="perl-Perl6-Junction" arch="noarch">
  <version epoch="0" ver="1.60000" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60000-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="14d0b18297f6211b7ab035de571a9db513e3f3050d740e678c669e073bbb482c" name="perl-Perl6-Slurp" arch="noarch">
  <version epoch="0" ver="0.051005" rel="28.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051005-28" date="1683806400">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="661a6f556fc23724f0280a69d29ad562b7e6f8303d8675aeae1992ad99ee344d" name="perl-PerlIO-gzip" arch="i686">
  <version epoch="0" ver="0.20" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-15" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-21" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="725919705de8f734c77363904d4958b96276efa7868706b74b7b7ec5f62a9c3d" name="perl-PerlIO-utf8_strict" arch="i686">
  <version epoch="0" ver="0.010" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-3" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1641643200">- Update to 0.009
  - Mark functions that croak as noreturn</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-3" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1666872000">- Update to 0.010
  - Re-release with updated ppport.h for 5.8.5 compatibility
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="bd2c1141afb82e169ac8d9e7a341b5eba8e3a439c420e7c59b5d41c9c5a918c4" name="perl-PlRPC" arch="noarch">
  <version epoch="0" ver="0.2020" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-15" date="1674561600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-16" date="1695297600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="22d2c7e265b51f7475d01c54ab88c5d5f3cba45c206de6489cf7ed910f8ad60e" name="perl-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="0.23" rel="29.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-29" date="1688990400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="5d2d7968dbee140be3e7405bfb92135622c20d77ee14388066e0465837d284c0" name="perl-Pod-Coverage-Moose" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-23" date="1683720000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Additional build requirements for optional tests
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1693051200">- Update to 0.08
  - Fix "Attempt to call undefined import method with arguments" error on
    perl 5.39.1
- Add patch to use US English spelling of LICENSE in pod</changelog>
</package>
<package pkgid="4bbc3647b089e49e81b05b81b715182fdef175973def331803a1d0664f6c8e56" name="perl-Pod-Coverage-TrustMe" arch="noarch">
  <version epoch="0" ver="0.002002" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002001-1" date="1743249600">- Update to 0.002001
  - Encode test output when needed to avoid wide character warnings
  - Fix tests when Pod::Coverage is installed but not Test::Pod::Coverage
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002002-1" date="1781611200">- Update to 0.002002
  - Fix passing options to all_pod_coverage_ok</changelog>
</package>
<package pkgid="6bbe7ff1755bd558a782682133c02e982f69154ae3f7ce5031dce453b19593ec" name="perl-Pod-Coverage-TrustPod" arch="noarch">
  <version epoch="0" ver="0.100006" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-1" date="1672574400">- Update to 0.100006
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Always assume we have rpm ≥ 4.9
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f26397f504a4de0f08b03c8cfe3af08ec75ceed183d63b3326d3c505610bb132" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.07" rel="490.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.07-490" date="1688731200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="cb27d9eed7bec57ea50458d8715d96fec4025029372db9c2e90610f094aed3ef" name="perl-Pod-Eventual" arch="noarch">
  <version epoch="0" ver="0.094003" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-1" date="1672574400">- Update to 0.094003
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="73cc1796bd705a048085db9dd66098bd906509e16b7231b8ac48db83ab513670" name="perl-Pod-MinimumVersion" arch="noarch">
  <version epoch="0" ver="50" rel="37.fc36"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 50-37" date="1689768000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6a7ecbd3ce00834ed0dd7a6003a2b90540dd529f5925229b9381b574d6a1559f" name="perl-Pod-Readme" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="14.fc36"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 1.2.3-14" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="96a224d3357bb10359917e9bc6cf206b2f10459876d8ead69972aab9fcd8e818" name="perl-Pod-Simple" arch="noarch">
  <version epoch="1" ver="3.48" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1747051200">- Update to 3.46
  - XHTML: =over without =item should render as a blockquote
  - Add support for underlined text U&lt;&gt; formatting
  - Make 'temp' name checking more succinct
  - GitHub: Fix and add tests
  - Makefile.PL: Add missing 'warnings' prereq
  - Add select method compatible with Pod::Select
  - Modernize htmlbat.t, corpus.t
  - Fix links, typos, acknowledgments
  - Add documentation on subclassing
  - Fix version checking
  - Fix version number
  - Use rel2abs instead of abs_path
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1747396800">- Update to 3.47
  - No git-related files in MANIFEST (GH#183)
  - Rename method and field to avoid conflicts (GH#185)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1775476800">- Update to 3.48
  - Add sections to manpage URLs (GH#193)
  - Better fallback when no HTML::Entities (GH#189)
  - Don't call each on an anonymous hash (GH#191)
  - Fix encoding of Unicode URL fragments (GH#194)</changelog>
</package>
<package pkgid="b7a3c22cd1ba223101c69f852c413b5feda73159d09c2dd02d9d965fd5389310" name="perl-Pod-Spell" arch="noarch">
  <version epoch="0" ver="1.27" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1678795200">- Update to 1.26
  - Encode output as UTF-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1729512000">- Update to 1.27
  - Fix encoding of output as UTF-8
  - Fix link in Pod</changelog>
</package>
<package pkgid="1c906bc7476ecd1485062ebf48a2a1cb9d8334345cb81a57a37ca90041c537b1" name="perl-Pod-Strip" arch="noarch">
  <version epoch="0" ver="1.100" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100-8" date="1683892800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="415270805a1d7a4a38e904cae8778d979c3300efddeb3369ce8226cef0d6e301" name="perl-Probe-Perl" arch="noarch">
  <version epoch="0" ver="0.03" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-27" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="9b946a7dbb63b98443ea357e611a50c6e7e37a65d4eeaf7b4fcd4ff2bd5cc002" name="perl-Readonly" arch="noarch">
  <version epoch="0" ver="2.05" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-21" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop ancient obsoletes/provides for old tests sub-package</changelog>
</package>
<package pkgid="89ad58daa18a1853f15942e043d8bb1027ba0f3781aaad44b7a57930840e665c" name="perl-Readonly-XS" arch="i686">
  <version epoch="0" ver="1.05" rel="46.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-40" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-43" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-46" date="1683633600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="207cbbc62321c7bb07308e44cb1c907a314f8447ea01912cee8229dcc1da59e2" name="perl-Ref-Util" arch="noarch">
  <version epoch="0" ver="0.204" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.204-17" date="1683720000">- SPDX migration
- Use %license unconditionally</changelog>
</package>
<package pkgid="e5c0efe6d986ecc01087c3293bda75d0fc1fc31465e9e0317d33d71069d60be6" name="perl-Ref-Util-XS" arch="i686">
  <version epoch="0" ver="0.117" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-12" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-15" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-18" date="1683806400">- SPDX migration</changelog>
</package>
<package pkgid="a0e4bc98916ac843830b22fda3a3594d00bc402918ddc21f49d563bb4ef25f7c" name="perl-Regexp-Common" arch="noarch">
  <version epoch="0" ver="2024080801" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017060201-21" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2024080801-1" date="1723204800">- Update to 2024080801
  + Eliminate 'use vars'
  + Update the MySQL comment pattern</changelog>
</package>
<package pkgid="8f6792501444f5d9ccdd6eb2df9395409b44b8b5f424aeff4aad90748181334d" name="perl-Regexp-Parser" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1774008000">- Update to 0.24
  Features:
  - Add support for Perl 5.10+ regex constructs (GH#8):
    \K (keep), \R (linebreak), \h/\H, \v/\V, named captures (?&lt;name&gt;...),
    named backrefs \k&lt;name&gt;, possessive quantifiers
  - Add \g{N} and \g{-N} backreference syntax from Perl 5.10+ (GH#16)
  - Add /a, /d, /l, /u charset modifier flags from Perl 5.14+ (GH#16)
  - Add /n no-capture flag from Perl 5.22 (GH#16)
  - Support Perl 5.14+ (?^:...) caret flag reset syntax (GH#4)
  - Add optional flags parameter to regex() method (GH#5)
  Bug Fixes:
  - Treat trailing dash in character class as literal (GH#6)
  - Compare character values numerically in range validation (GH#3)
  - Support POSIX character classes with visual method (GH#7)
  Maintenance:
  - Migrate test suite from deprecated Test.pm to Test::More (GH#15)
  - Add round-trip and error rejection test suites; tests 200 -&gt; 409 (GH#19)
  - Modernize CI: consolidate into single testsuite.yml, update actions, use
    perldocker containers (GH#17)
  - Set minimum Perl version to 5.16
  - Add CLAUDE.md for AI-assisted development (GH#19)
  - Switch to GitHub Actions for CI
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1774180800">- Update to 0.25
  Features:
  - Add recursive pattern support: (?R), (?0), (?1), (?+1), (?-1), (?&amp;name) for
    named subpattern recursion (GH#22)
  - Add Python-compatible regex syntax: (?P&lt;name&gt;...) named capture, (?P=name)
    named backref, (?P&gt;name) named recursion (GH#22)
  - Add \o{NNN} octal escape support from Perl 5.14+ (GH#20)
  - Add (*VERB) backtracking control verbs: FAIL, F, ACCEPT, SKIP, PRUNE,
    COMMIT, THEN, MARK with optional :arg (GH#20)
  - Add (?|...) branch reset groups from Perl 5.10+ (GH#20)
  - Add (*positive_lookahead:...) and other alphabetic assertion forms from
    Perl 5.28+ (GH#20)
  - Add (*script_run:...), (*sr:...), (*atomic_script_run:...), (*asr:...)
    script run assertions from Perl 5.28+ (GH#20)
  - Add /xx flag support via (?xx:...) from Perl 5.26+ (GH#20)
  Maintenance:
  - Migrate t/08regex_flags.t and t/09backref_flags.t from deprecated Test.pm
    to Test::More - all test files now use Test::More (GH#21)
  - Update CLAUDE.md and modernize Parser.pm POD (GH#21)
  - Add CLAUDE.md and MANIFEST.SKIP to MANIFEST
  - Tests now 620 across 16 test files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1774267200">- Update to 0.26
  Features:
  - Add \Q...\E (quotemeta) support for literal quoting in regular expressions
    (GH#23)
  - Add \b{type}/\B{type} extended boundary support including \b{gcb}, \b{wb},
    \b{sb}, and \b{lb} from Perl 5.22+ (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1774526400">- Update to 0.27
  Features:
  - Add (?(DEFINE)...) definition-only groups for defining named subpatterns
    without matching (GH#27)
  - Add (?(&lt;name&gt;)...) and (?('name')...) named capture conditions with new
    'define' and 'grouppn' object types (GH#27)
  Maintenance:
  - Replace `use base 'Exporter'` with `use parent 'Exporter'`; base is
    discouraged since Perl 5.12 (GH#25)
  - Remove unused 'use NEXT' from Objects.pm; recommend 'next::method' from mro
    (core since 5.10) instead (GH#25)
  - Remove duplicate 'use strict; use warnings;' in Parser.pm (GH#25)
  - Fix META_MERGE URLs to point to cpan-authors/Regexp-Parser with HTTPS and
    fix dead wiki.github homepage URL (GH#25)
  - Expand t/11errors.t from 17 to 240 tests covering all 28 RPe_* error codes
    in Diagnostics.pm (GH#26)
  - Add AI_POLICY.md for transparency</changelog>
</package>
<package pkgid="e36207c801637dc7dbe3695cc390d12eaf69b75c1c403f684f2f51375bedc7ad" name="perl-Regexp-Trie" arch="noarch">
  <version epoch="0" ver="0.02" rel="15.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-15" date="1684238400">- Use SPDX-format license tag
- Drop support for building with ancient distributions prior to EL-7
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="aace76c20a9574240cf72d670c7fa065de9e45247251c83b468d3155f4bbbdc0" name="perl-Role-Tiny" arch="noarch">
  <version epoch="0" ver="2.002005" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002005-1" date="1779105600">- Update to 2.002005 (rhbz#2478347)
  - Split role initialization from setting pragmas to allow more flexibility
    for subclasses
  - Ensure consistent internal handling of Class::C3 versus mro
  - Reduced Exporter dependency to 0 (any version)
- Use %{make-build} and %{make_install}</changelog>
</package>
<package pkgid="d4b1ee8727ea209b0cccc84d834cde0f8fad8aef9593707757ea779205a203ba" name="perl-SQL-Statement" arch="noarch">
  <version epoch="0" ver="1.414" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.414-10" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3e211d6a98b7b7eaea1bddc5b0c62f5630d642b1443504dae03d57157d1b0e0c" name="perl-SUPER" arch="noarch">
  <version epoch="0" ver="1.20190531" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20190531-14" date="1683201600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="11d501dc07b91a50aedc665aa95948c31553696f2a536435a608b01ebcb7cb6f" name="perl-SVN-Notify" arch="noarch">
  <version epoch="0" ver="2.87" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.87-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="78693b643c1fd058a5369e867a686c29babe621d4ba99f8d86268d91fd51df98" name="perl-Safe-Isa" arch="noarch">
  <version epoch="0" ver="1.000010" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000010-16" date="1684238400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c02cd9fd39fe0d86f1b62d660c51f365f4564c70fc6b24cad95d865fa85609d5" name="perl-Scalar-Properties" arch="noarch">
  <version epoch="0" ver="1.100860" rel="34.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-31" date="1646913600">- Work around package note files breaking t/release-dist-manifest.t (#2062685)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-34" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f1adeaad876f9218572cb01a91e23bc11832bb586b8c9371e1fc6f3b501a2f67" name="perl-Scope-Guard" arch="noarch">
  <version epoch="0" ver="0.21" rel="24.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-24" date="1680264000">- Use SPDX-format license tag
- Use author-indepentdent source URL</changelog>
</package>
<package pkgid="1f75ba1d6e57b8c6eb61f4247c0ae4cc04ec3f9450077250a534346bd8c93121" name="perl-Search-Elasticsearch" arch="noarch">
  <version epoch="0" ver="8.12" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.717-1" date="1659009600">- Update to 7.717
  - Stable release for Elasticsearch 7.17</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-1" date="1672315200">- Update to 8.00
  - Stable release for Elasticsearch 8.5
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12-1" date="1706184000">- Update to 8.12
  - Stable release for Elasticsearch 8.12</changelog>
</package>
<package pkgid="be7c6dfdfd4316d94992b9bf497241b827cbcb8d43a6ef32dfbfa41ca5db603b" name="perl-Sendmail-AccessDB" arch="noarch">
  <version epoch="0" ver="1.04" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-4" date="1688644800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with ancient db4 packages
- Use %license unconditionally</changelog>
</package>
<package pkgid="46ca7cdb33ea2e207e5c90fa8dc7bff318e0ce0099e8f5d2f16d28ebe3e60cef" name="perl-Sendmail-PMilter" arch="noarch">
  <version epoch="0" ver="1.28" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1783080000">- Update to 1.28
  - Proper handling of NULL mail-from (CPAN RT#179844)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="6c802a209fa341bec98dffc8d5ab1b184e9ffab21df871d2fb48c712e7b834b3" name="perl-Set-Scalar" arch="noarch">
  <version epoch="0" ver="1.29" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-25" date="1688644800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="97f846d5651d9c92e198a1c2405465bedc40c73c3692c4ec9a66f7d6def43f73" name="perl-Socket6" arch="i686">
  <version epoch="0" ver="0.29" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-10" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-11" date="1625659200">- Drop support for deprecated gethostbyname2
  https://src.fedoraproject.org/rpms/perl-Socket6/pull-request/2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-14" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-17" date="1679659200">- Use SPDX-format license tag
- Aviod deprecated patch syntax</changelog>
</package>
<package pkgid="126577b63e0455d0a0fd98f7ca6c6b3dba9b1d217d7797bfbef361ab9544ee42" name="perl-Software-License" arch="noarch">
  <version epoch="0" ver="0.104007" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104003-1" date="1684497600">- Update to 0.104003
  - Add Artistic 1.0 Perl license and make Perl license use it
  - Remove extra "59" from LGPL-2.1
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104004-1" date="1684929600">- Update to 0.104004
  - Rename Perl Artistic License to avoid confusion in detecting license</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104005-1" date="1700568000">- Update to 0.104005
  - Explictly require perl v5.12.0, which was already effectively required
    because of upstream libraries
  - Update author metadata
- This release by RJBS ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104006-1" date="1707652800">- Update to 0.104006
  - Use valid SPDX identifier for BSD license
  - Undefine SSLeay spdx_expression
  - Update URL to SSLeay license
- This release by LEONT ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104007-1" date="1746360000">- Update to 0.104007 (rhbz#2363949)
  - Update GPL v1 text to current version
  - CPAN::Meta v1 "gpl" license is explicitly GPL v2
  - Improve recognition for Apache 1.1 and 2.0+
- Use %{make_build} and %{make_install}
- Drop explicit provides for support of old dependency generator</changelog>
</package>
<package pkgid="4f357b6218ab4fb99be7bd3a2a1d6cb11844d9d2d7bb1ebc229ea45c56a899a2" name="perl-Software-License-CCpack" arch="noarch">
  <version epoch="0" ver="1.11" rel="39.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-34" date="1684238400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-38" date="1706270400">- Drop test dependency Test::Vars from Fedora 39 onwards since Test::Vars is
  FTBFS with Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-39" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="a27d49bcbaa0571a2738af5596f07e365c64a76a927aa10e721a31ec303697ab" name="perl-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="c08cafb7d543dbc43486bdb1acf120ca5a6a777542f456012312ab3684c01d4a" name="perl-Spellunker" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="7902418fc58b3531c4c4b77a1189fa83e76ab19f792461d422b61d1a78269e7b" name="perl-Spiffy" arch="noarch">
  <version epoch="0" ver="0.46" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="ceb8ac372281833ce76c1c6845f1724242ab4b8e142f832eecc48080f2506de8" name="perl-String-Escape" arch="noarch">
  <version epoch="0" ver="2010.002" rel="39.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2010.002-39" date="1688472000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4ea5075df5ccc82356d2273de9f09dc4308620751bbb583ef524b8bb95c099f4" name="perl-String-Format" arch="noarch">
  <version epoch="0" ver="1.18" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.18-16" date="1684584000">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.5702
- Use %license unconditionally</changelog>
</package>
<package pkgid="4e933016c85fa1636bb69f3fdffd42be4deee0c2078b5106f3479af0a0d6f912" name="perl-Sub-Exporter" arch="noarch">
  <version epoch="0" ver="0.991" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.991-8" date="1780401600">- Remove unused dependency on perl(blib)
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78
- Drop manual provides for old rpm versions
- Drop redundant doc-file-dependency filter
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="843e88ccf22b10dba493abdcea613e7cd752b3d291ba0f9a7690d57deb93ef8d" name="perl-Sub-Exporter-ForMethods" arch="noarch">
  <version epoch="0" ver="0.100055" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-1" date="1672574400">- Update to 0.100055
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="dc6751d8e9b3125c2f5cadacad2d57338e9835e34789cdbdd63d8bc67fa8135c" name="perl-Sub-Exporter-Progressive" arch="noarch">
  <version epoch="0" ver="0.001013" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.001013-21" date="1683892800">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally</changelog>
</package>
<package pkgid="b465ea19faad8a47c838c00504cf21e29f12ebf92bc3b7d851c005a32517e832" name="perl-Sub-Identify" arch="i686">
  <version epoch="0" ver="0.14" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-16" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-19" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-22" date="1680523200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="84fb595c47764491f578a37299b5c8d8e3ba8fa9ce0b81000e2d59e5ca176896" name="perl-Sub-Info" arch="noarch">
  <version epoch="0" ver="0.002" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-21" date="1688299200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="fcf3a42afbb0ce99bc8b9784c5b8f8598cfc64e2c55b4e2f40832a91a34e31c6" name="perl-Sub-Install" arch="noarch">
  <version epoch="0" ver="0.929" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-1" date="1672574400">- Update to 0.929
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="fe170c39842a5770a05386f41992b62e3f5c419e24a42868ad5ebb68a4202477" name="perl-Sub-Name" arch="i686">
  <version epoch="0" ver="0.28" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-12" date="1678104000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1682769600">- Update to 0.27
  - Skip quote-separator tests on newer perls that deprecate this behaviour</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-6" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1734350400">- Update to 0.28
  - Fix version comparison logic for forward compatibility
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="a7cccfa0ee70f03ec137d16699d7d17b959a27c022177adbc1573733b6584817" name="perl-Sub-Quote" arch="noarch">
  <version epoch="0" ver="2.006009" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.006009-1" date="1755777600">- Update to 2.006009
  - Fix new warning for bare \ in qw()
  - Fix documentation for hintshash option
- Use %{make_build} and %{make_install}
- Assume Sub::Util always available</changelog>
</package>
<package pkgid="2d32a7af7ae4e522eae2fab57ded343885a2dc6d6d94b4681c7947437b8d5687" name="perl-Sub-Uplevel" arch="noarch">
  <version epoch="1" ver="0.2800" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.2800-19" date="1683979200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package examples</changelog>
</package>
<package pkgid="b0e482af8616ebfae2a18b402782eff5a7144c81271fae32830a675c93ec8e0e" name="perl-Symbol-Util" arch="noarch">
  <version epoch="0" ver="0.0203" rel="32.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0203-32" date="1684584000">- Use SPDX-format license tag
- Drop workaround for ancient hunspell versions prior to Fedora 14
- Use %license unconditionally</changelog>
</package>
<package pkgid="4ed52c1d4f28510b18343b0404cfe53ddfe1f0d4277bbf48ba5545c805e0ef8d" name="perl-Sys-HostAddr" arch="noarch">
  <version epoch="0" ver="0.993" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.993-4" date="1689768000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="0f2fb1f12e7f7ca963d106be168b4590bee6fcef7cdfd52dc2415cfaab85cec4" name="perl-Sys-Hostname-Long" arch="noarch">
  <version epoch="0" ver="1.5" rel="26.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5-26" date="1684670400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="b34f6980352d8d3b5d64cad84820c014c9ce2a2620078e030a9517d19c6a61b6" name="perl-Taint-Runtime" arch="i686">
  <version epoch="0" ver="0.03" rel="48.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-45" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-48" date="1683979200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ffc1cfd3b9c9fa54f2c68a7192d3e0bf5644cd4dc7edbf596e687e5acb3d955a" name="perl-Taint-Util" arch="i686">
  <version epoch="0" ver="0.08" rel="32.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-30" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-32" date="1684756800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- BR: Pod::Man ≥ 2.26 to avoid man page issue (#998447)</changelog>
</package>
<package pkgid="2d0434f6a291cc7e1421e7c1916fdd0cd5454c327b80e282e659256c5a64d5f6" name="perl-Task-Weaken" arch="noarch">
  <version epoch="0" ver="1.06" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-16" date="1684065600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c60f36b789984424c9c1dc3aa418e4b494a1285587198413ef85feb0750dbe79" name="perl-Term-ReadKey" arch="i686">
  <version epoch="0" ver="2.38" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-10" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-13" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-16" date="1684065600">- Port Configure.pm to C99</changelog>
</package>
<package pkgid="71ccc236302f1ea2ddd0dad66ad10f861cf4b18df7aed95ac2561fc954815177" name="perl-Term-ReadLine-Gnu" arch="i686">
  <version epoch="0" ver="1.47" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-7" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-8" date="1737633600">- Fix for C23 compatibility (GH#32, rhbz#2341037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1751889600">- Update to 1.46
  - Add readline-8.3 support
    - New functions: rl_reparse_colors, rl_print_keybinding
    - New variables: rl_full_quoting_desired, rl_macro_display_hook,
      rl_completion_rewrite_hook
    - New state values for rl_readline_state: RL_STATE_READSTR
  - Sample code updates
    - Import almost all examples from the GNU Readline Library
    - Use "/usr/bin/env" for sh-bang
    - Add eg/README.md
  - Make the check for being in emacs to be more like bash (GH#28)
  - Add a wrap function on every function that has Keymap as an argument
  - Add some constant functions
    - Add macro functions for rl_readline_state: RL_SETSTATE(),
      RL_UNSETSTATE(), RL_ISSTATE()
    - Export READERR
  - Fix for compilation in C23 mode (GH#32)
  - POD updates
    - Fix description of add_defun() in BUGS section (GH#23)
    - Fix formatting
  - GitHub actions: update OS and perl-version matrix</changelog>
</package>
<package pkgid="badf91048450e2229df6f4ac73f82edd00febfa713b1b5ca173f93444a535ad7" name="perl-Term-Table" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1722945600">- Update to 0.020
  - Fix use cycle between Test-Simple and Term::Table now that Test2::Suite was
    merged into Test-Simple
  - Fix test broken on Test::More</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.022-1" date="1723032000">- Update to 0.022
  - Fix warnings in HashBase.t
  - Some initial support for non-ASCII systems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-1" date="1730030400">- Update to 0.023
  - t/honor_env_in_non_tty.t requires Test2::Tools::Tiny &gt;= 1.302097; use
    Test::More if not available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-2" date="1731240000">- Don't unbundle Object::HashBase from F-41 onwards (module in Perl Core)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1735387200">- Update to 0.024
  - Additional changes to t/honor_env_in_non_tty.t, and adding debugging</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-519" date="1751976000">- Use %{make_build} and %{make_install}
- Assume that weak dependencies are always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1756900800">- Update to 0.025
  - Typo fix in comment
  - Hide some diagnostics when tests run in perl core</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1763380800">- Update to 0.027
  - Fix terminal size detection
- Run the test suite within expect so that we get usable IO handles</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1764244800">- Update to 0.028
  - Replace '//' with '||' for 5.8 support</changelog>
</package>
<package pkgid="0bd4a97e581300ccc6aab3bd86d3e389cf1b10abbba514bd5992d08c34259a4f" name="perl-Test-API" arch="noarch">
  <version epoch="0" ver="0.010" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-17" date="1684756800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e695afd50b9172c231becf6a765981b3994b6b75a4b437888e1ee211a7cbdf11" name="perl-Test-Assert" arch="noarch">
  <version epoch="0" ver="0.0504" rel="39.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-36" date="1647000000">- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-39" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1e38381f3457cfb0ee0d570c6bd0a5e34a0e6eaa7fdaff24f5003c03466a4de6" name="perl-Test-Base" arch="noarch">
  <version epoch="0" ver="0.89" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-16" date="1688212800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1dfe4c3bc7247f925b7758ffc07b8d289feb5544c2724381fe71869f0eec128d" name="perl-Test-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="0.25" rel="33.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-33" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="13755f9ca9a0f4a8d53f6b7cb4250ec7d1594efc4b36ed9f3fa21b1fee0e145a" name="perl-Test-CPAN-Meta-JSON" arch="noarch">
  <version epoch="0" ver="0.16" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-25" date="1684065600">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally</changelog>
</package>
<package pkgid="bfcb2cea00ebd65c9e32ba61761ebc3f066c95715442de1707761383b1c3f295" name="perl-Test-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.25" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-25" date="1684843200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b950e3ac689a52a95a5be1a650636a8145c4de45e3d7a4d3670fe33ea043e3b8" name="perl-Test-CheckChanges" arch="noarch">
  <version epoch="0" ver="0.14" rel="38.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-38" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="24ca91a9f794f746e159d39153246f5054b982ed819771d4103bf0a4f6b6d3b0" name="perl-Test-CheckDeps" arch="noarch">
  <version epoch="0" ver="0.010" rel="37.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-37" date="1684843200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f9d17a91bcb0072e5f174f83c1c4a69a0df0f926abc3436f3d9207c9bc742f77" name="perl-Test-ClassAPI" arch="noarch">
  <version epoch="0" ver="1.07" rel="24.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-24" date="1688212800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4f3fc184a70d3268c3dfcc3849b7032e69d00a8f289333fc5228d2862170498e" name="perl-Test-CleanNamespaces" arch="noarch">
  <version epoch="0" ver="0.24" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-19" date="1684065600">- Use SPDX-format license tag
- Weaken dependency on Role::Tiny where possible
- Use %license unconditionally</changelog>
</package>
<package pkgid="33a26c3c2e29319017f5056313bf3da1101ac14d2ede78b4a12f798f31d1b9d2" name="perl-Test-Deep" arch="noarch">
  <version epoch="0" ver="1.205" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.204-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.205-1" date="1743508800">- Update to 1.205
  - Add "use v5.12" to Test::Deep, just for clarity
  - Fix a test so that if an "A" module is in @INC, the tests still pass
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="630cf648b0c1c7f0e1fb95d3d9a74187c196ada7463244363975dc2b84fae4f1" name="perl-Test-Differences" arch="noarch">
  <version epoch="0" ver="0.7200" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-1" date="1697198400">- Update to 0.71
  - Stop pointless use of taint mode in tests, so tests pass when perl is
    built without taint support
  - Document and test different behaviour regarding Booleans in perl 5.38.0
    compared to earlier versions (GH#21)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-5" date="1724155200">- Fix version handling for build with different locales set</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7200-1" date="1751889600">- Update to 0.72
  - Changes to tests only, so tests pass when you have a new perl that supports
    bools, but an old Data::Dumper that doesn't
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="8003192902062e00e967df95f672635cdb109fe339e8c23cd306ca66e9cda252" name="perl-Test-Directory" arch="noarch">
  <version epoch="0" ver="0.052" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1677499200">- Update to 0.052
  - Fix error message on failure to remove directory in 'clean'
    (GH#2, CPAN RT#130570)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="126478cd379699b99995a78aca3fe6767a8d64ecad581d309ce9ed79b874359b" name="perl-Test-DistManifest" arch="noarch">
  <version epoch="0" ver="1.014" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-23" date="1646136000">- Work around package note files breaking t/02manifest.t (#2059504)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-25" date="1662465600">- Drop workaround for package note files from Fedora 37 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-27" date="1688126400">- Use SPDX-format license file</changelog>
</package>
<package pkgid="e0decdccb2c6fc51e0cdfe383891d87c5af8ae74f7e78410ea86cccb6a735d13" name="perl-Test-Distribution" arch="noarch">
  <version epoch="0" ver="2.00" rel="42.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.00-42" date="1684929600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d56c60fcda780e1ff8f01582a2a6dfc59eccf3d61e1c1db646087cfbaf96bcb1" name="perl-Test-EOL" arch="noarch">
  <version epoch="0" ver="2.02" rel="8.fc36"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 2.02-8" date="1684929600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ca9ed010a74ce73e7dacfa2d653f432f3653906d0feb2ba7b0c9cfaf25275c0c" name="perl-Test-Exception" arch="noarch">
  <version epoch="0" ver="0.43" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-23" date="1684152000">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="ec1285eab9b15032c58972714e28f0edf81887ad00d8220db688d0edbf8e6085" name="perl-Test-FailWarnings" arch="noarch">
  <version epoch="0" ver="0.008" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-30" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f81dd7959a615e94f6c77f3fa50a6a9a5a0c9610c6b1980953cd98aeaad56bb9" name="perl-Test-Fatal" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1762516800">- Update to 0.018
  - Now requires perl v5.12.0
  - Now tolerant of false exceptions coming from a boolean-overloaded object
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="9ed05651b2f54abed11420260e7311227fab3ada4226def9dbc4020a31f563db" name="perl-Test-File" arch="noarch">
  <version epoch="0" ver="1.99.5" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-4" date="1691496000">- Fix FTBFS in Rawhide due to %rpmversion macro becoming an rpm built-in
  (rhbz#2229872)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.4-1" date="1735905600">- Update to 1.994
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.5-1" date="1744632000">- Update to 1.995
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="8dee68450790642fa6add3fbaac80f25981493f7dbe13c358ef59189e174551f" name="perl-Test-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.001002" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001002-19" date="1688126400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="7546f95d6fad3c8b472166fbe12eb268cc2a749b1c21aa9e1c49f7bc46f1d42f" name="perl-Test-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-10" date="1627128000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-11" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-12" date="1654603200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-13" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-14" date="1669809600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="e7fd61f7b010b979de28ad7f966ab26a6054b4f2b3b0c56fa51d14f195484eab" name="perl-Test-Harness" arch="noarch">
  <version epoch="1" ver="3.52" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.44-491" date="1688126400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1691496000">- Update to 3.46
  - Colour the "ok"s as well
  - Skip symlink tests on msys2
  - Use absolute path for executable tests
  - Space-quote executable if it has spaces
  - Avoid using Errno::EINTR directly for platforms without it
  - Stop calling import on App::Prove plugins</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1691928000">- Update to 3.47
  - Add missing negation in EINTR check
  - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1696334400">- Update to 3.48
  - Accept TAP version 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.50-1" date="1723636800">- Update to 3.50
  - Simplify runtests for easier extension
  - Tidy up core dump file
  - Simplify injecting of @INC paths
  - Prevent double summary on bail-out
  - Prevent bail_out summary when no handler for it is defined
  - Better check for t/ directory in Perl handler</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.52-1" date="1746360000">- Update to 3.52
  - Support additional indicators on block scalars in YAML
  - Fix string comparisons with $] to use numeric comparison instead
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ddfca7b13705dcaa102419d997375810a1db0827559f09e61d69ec31386cff4e" name="perl-Test-HasVersion" arch="noarch">
  <version epoch="0" ver="0.014" rel="27.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-22" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-27" date="1725624000">- Add manpage for test_version</changelog>
</package>
<package pkgid="a4a60620251236c75ef4c2022bce707059ceaad815874ecb164a591312d5145e" name="perl-Test-InDistDir" arch="noarch">
  <version epoch="0" ver="1.112071" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.112071-21" date="1689768000">- Use %license unconditionally</changelog>
</package>
<package pkgid="b914c58e69746a9c5feabf3ac23730c56915b8b6407e489beec68dcd975c8e6f" name="perl-Test-Kwalitee" arch="noarch">
  <version epoch="0" ver="1.28" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-13" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-14" date="1727956800">- Avoid pulling in aspell</changelog>
</package>
<package pkgid="bbc1ed320ae27a5f7ad0206e92a6a6e8d6c917ccdcfb7f7f3856fe0173da69d2" name="perl-Test-Kwalitee-Extra" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-20" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="e89da4ee5777b6997406c4178c0130a09c18800cc6bcfb87285c7a0bbb6cfaa8" name="perl-Test-LeakTrace" arch="i686">
  <version epoch="0" ver="0.17" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-7" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-11" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="01481056c170b5eadf1b63d78744486f335f3752033cba6c1570fa53ce08fe1f" name="perl-Test-LongString" arch="noarch">
  <version epoch="0" ver="0.17" rel="26.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-26" date="1688040000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="2bfb72400432645149a3c2121b370e90f3885cd4b4e99a2e3de0085ace1a9f89" name="perl-Test-Manifest" arch="noarch">
  <version epoch="0" ver="2.026" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.023-5" date="1684152000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.024-1" date="1704801600">- Update to 2.024
  - Refresh distro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.025-1" date="1736078400">- Update to 2.025
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.026-1" date="1744632000">- Update to 2.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="efa2bfb77ff722d7db9f60f129a607d1289950e147e9c9932e380ab099a7444e" name="perl-Test-Memory-Cycle" arch="noarch">
  <version epoch="0" ver="1.06" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-23" date="1684152000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cf27a97ba0d3cdc5bf102f1166baca1733dbaf56393d1ec93f3eb643447434a0" name="perl-Test-MinimumVersion" arch="noarch">
  <version epoch="0" ver="0.101083" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-1" date="1672574400">- Update to 0.101083
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="6b85f6968e2f66bdb55451e249739225b2731136829cb8b8953535cc25840aae" name="perl-Test-MockModule" arch="noarch">
  <version epoch="0" ver="0.185.3" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.179.0-1" date="1725019200">- Update to 0.179.0
  - Bump Module::Build requirement (GH#65)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.180.0-1" date="1751544000">- Update to 0.180.0
  - Remove Software::License from runtime dependencies (GH#67, GH#68)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.182.0-1" date="1777636800">- Update to 0.182.0
  - See https://github.com/geofffranks/test-mockmodule/releases for details
  - Highlight: Moose and Mouse meta-class aware mocking (GH#55)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.183.0-1" date="1777809600">- Update to 0.183.0
  - Drop unused weaken import
  - Fix: new() returns distinct objects per package (GH#48)
  - Fix: Correct stacking edge cases in mock-layer restore (follow-up to GH#48)
  - Refactor: integrate stacking with Moose/Mouse meta layer and re-mock
    corners (follow-up to GH#77)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.184.0-1" date="1778068800">- Update to 0.184.0
  - Fix: Restore noop() to return 1 for backward compatibility (GH#80)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.0-1" date="1778155200">- Update to 0.185.0
  - Revert to pre-v0.181.0 behaviour: new() returns singleton-per-package by
    default again; pass distinct =&gt; 1 for v0.181's fresh-object-per-call
    behaviour (GH#83)
  - New: Test::MockModule-&gt;original_for($pkg, $sub): Call the original sub from
    inside a mock closure without capturing $mock</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.1-1" date="1779883200">- Update to 0.185.1
  - Gate author-perlcritic.t behind AUTHOR_TESTING (GH#87, GH#88)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.2-1" date="1780142400">- Update to 0.185.2
  - Fix optional Moose test dependencies (GH#91)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.3-1" date="1781611200">- Update to 0.185.3
  - Don't require Moose when mocking Moo (GH#93, GH#94)</changelog>
</package>
<package pkgid="9f79fea4efda72767a1799aaef095e93089511d298f4f3a63af488fbca717969" name="perl-Test-Modern" arch="noarch">
  <version epoch="0" ver="0.013" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-25" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="15928ea3d4a240f911ab20c43261aa1e2dff607b601c911881c6000cbf7a57f9" name="perl-Test-Mojibake" arch="noarch">
  <version epoch="0" ver="1.3" rel="32.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-27" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-31" date="1706270400">- Drop BR: perl(Test::Vars) from Fedora 39 onwards as Test::Vars is FTBFS with
  Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-32" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="f6e995ccb3d9ff6ab0ea61eedd5796005cbbb17eafbd0c14f2e8a5f3a9890776" name="perl-Test-Moose" arch="i686">
  <version epoch="0" ver="2.4000" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="6b28a4c85cfffb314c81a9f7339a56c8f1a66ff0e27ef2edbd419d1643b96a34" name="perl-Test-More-UTF8" arch="noarch">
  <version epoch="0" ver="0.05" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1687867200">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="7e16a963b11d742024ec76b039725343ea1dc32e7ad6f387b265aea05f6e7157" name="perl-Test-Most" arch="noarch">
  <version epoch="0" ver="0.42" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.41-1" date="1777550400">- Update to 0.41
  - Prevent strange import behaviour caused by @EXPORT twiddling
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-1" date="1778241600">- Update to 0.42 (rhbz#2467785)
  - Restore support for 'use Test::Most import =&gt; [...]' to select which
    symbols to export; the 0.39 export rework broke it (GH#18)</changelog>
</package>
<package pkgid="8d355c03813b13cb29ad1dbf1d396fd498792d636c597cd102d36365eac5a945" name="perl-Test-Mouse" arch="i686">
  <version epoch="0" ver="2.6.2" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="f178946eadd017a119b4aedbd0561563edeaef341f983d2f007e0a6e7bfe4a6e" name="perl-Test-Needs" arch="noarch">
  <version epoch="0" ver="0.002010" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002009-1" date="1622030400">- Update to 0.002009
  - Fix tests when @INC includes directories that shouldn't have their archname
    or version subdirectories added
  - Fix test compatibility with Windows
  - Fix warnings from Test::Builder if Test::Needs is loaded first, and is used
    to check for a Test module
  - Fix location in code reported when a module check fails
  - Support short forms of perl versions
  - Support perl versions greater than 5
  - Fix handling of v-string versions on perl 5.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002010-1" date="1674475200">- Update to 0.002010
  - Split main test into three separate scripts
  - Avoid outputting multiple plans if used with no_plan
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3e0927c441ae05976323c1e7454cf23384f564f0f02cb18c101a5f3b9b879cd6" name="perl-Test-NoTabs" arch="noarch">
  <version epoch="0" ver="2.02" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.02-17" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b1c882634543907521d5cb5da9d56e0d48b6b4c917af168bbc9fa49ed3118a07" name="perl-Test-NoWarnings" arch="noarch">
  <version epoch="0" ver="1.06" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-1" date="1627473600">- Update to 1.06
  - Clarify docs around tests without a plan
  - Documentation cleanups and typo fixes
  - Minor code cleanups
  - use warnings in tests
  - Skip fork test if perl can't fork
  - Note conflicts with Carp::Always in documentation
  - Made had_no_warnings turn off the checking at END time for use with
    done_testing based tests with no test count; also added docs
- Use %license unconditionally
- Distribution no longer includes Extra Tests
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-5" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b04cbf00a2f63450009d94dc1c631b4820a83b92a4cb0cb271acd03585df051c" name="perl-Test-Object" arch="noarch">
  <version epoch="0" ver="0.08" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-17" date="1687867200">- Use SPDX-format license tag
-0 Use %license unconditionally</changelog>
</package>
<package pkgid="b2c82a0c03c45a6eefa897a72e74dabf0b7b5e58291a3931f33eb9a7898e5b43" name="perl-Test-Output" arch="noarch">
  <version epoch="0" ver="1.036" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-1" date="1688558400">- Update to 1.034
  - Remove unnecessary -T from pod tests: now that v5.38 allows you to compile
    without taint support and those perls won't run if they see a -T, these
    tests needlessly fail there
  - Correct spelling mistakes (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.035-1" date="1735905600">- Update to 1.035
  - Distro refresh and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.036-1" date="1744718400">- Update to 1.036
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="2c7c6353e217b182d640d7c0fd521e150b7eae4d6237dca4bb5bb62d3e59b837" name="perl-Test-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.04" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1640952000">- Use %license unconditionally
- No spell checking done in package build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-19" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9ad701db9b1fc4d6be3418a64a201569707904d85aa0942d116ca945c43fc2d1" name="perl-Test-Perl-Critic-Policy" arch="noarch">
  <version epoch="0" ver="1.156" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-5" date="1780315200">- Run tests with LANG=en_US.UTF-8 to fix pod spelling test on Rawhide</changelog>
</package>
<package pkgid="95842abfd346606bb4c95ee67d481ecf990095d976b452a52cf489a60cd282a7" name="perl-Test-Pod" arch="noarch">
  <version epoch="0" ver="1.52" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-16" date="1687867200">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org</changelog>
</package>
<package pkgid="8aaa040dad50265caa0596960cb7d6fcf4e705b574f7dc1493cce476bd22af09" name="perl-Test-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="1.10" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-25" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3faeae81a298ecaa45c39e38293dcf83126c1174339ffb4d4f933e0c361f4f23" name="perl-Test-Portability-Files" arch="noarch">
  <version epoch="0" ver="0.10" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1714737600">- Test::Vars unavailable after Fedora 39</changelog>
</package>
<package pkgid="4c14c16f311df00568896f0eeaa157d9b35853929ca00bf7e89136fead668032" name="perl-Test-Prereq" arch="noarch">
  <version epoch="0" ver="2.005" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003-11" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005-1" date="1735905600">- Update to 2.005
  - Refresh distro
  - Move to BRIANDFOY user
  - Add SECURITY.md policy
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ed35c040b347e37490aa33ef7b41e6347dd017cb530b60140c416e4e99aa68f3" name="perl-Test-Regexp" arch="noarch">
  <version epoch="0" ver="2017040101" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017040101-21" date="1684152000">- SPDX migration</changelog>
</package>
<package pkgid="6296d8c8a373a3a7d55d700163a2be3bf4752b78d0192a1015e54fdd6cf6cc5d" name="perl-Test-Requires" arch="noarch">
  <version epoch="0" ver="0.11" rel="11.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-11" date="1678104000">- Use SPDX-format license tag
- Drop decade-old obsoletes/provides for old tests sub-package
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="24b9773b9a660cde7932e02e03fd47c9ed5bd05d3ab2a5d61a843a1d9d409d93" name="perl-Test-RequiresInternet" arch="noarch">
  <version epoch="0" ver="0.05" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-25" date="1684238400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8f512a0180d42a48842ca3c0e2ab9f5ccd7775841c38b39f6d4b773ff7415c10" name="perl-Test-Script" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1754395200">- Update to 1.30
  - Documentation improvements (GH#42)
  - Fix bug where implicit function export would happen regardless of which
    functions were explicitly exported (GH#45, GH#46)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1755000000">- Update to 1.31
  - Fix bug introduced in 1.30 where exports were not happening correctly in
    legacy mode (GH#47)</changelog>
</package>
<package pkgid="989da8fbf976aadf3e60fcf59bb22b29845ad5032d5be334502eb111db9fc672" name="perl-Test-Signature" arch="noarch">
  <version epoch="0" ver="1.11" rel="29.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-26" date="1647000000">- Work around FTBFS triggered by package note feature</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-29" date="1685102400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3b93b0619506354b1bf55d5cded18712713cceff6a54060acd0033e1b48e8bd5" name="perl-Test-Simple" arch="noarch">
  <version epoch="3" ver="1.302222" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302212-1" date="1747569600">- Update to 1.302212
  - Add a workaround for Test::Class::Moose</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302213-1" date="1747656000">- Update to 1.302213
  - Fix duplicate words in Changes file (GH#1044)
  - Fix spelling issue (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-1" date="1748174400">- Update to 1.302214
  - Fix typo in documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302216-1" date="1763294400">- Update to 1.302216
  - Fix typos
  - Fix undef string bug in Test::Tester</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302218-1" date="1765195200">- Update to 1.302218
  - Add Test2::V1 bundle</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302219-1" date="1765368000">- Update to 1.302219
  - Fix downstream test not to install Test2::Suite
  - Fix documentation mistakes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302220-1" date="1781179200">- Update to 1.302220
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Remove Net::BitTorrent from broken list
  - Amend tests to adapt to more accurate line number reporting in core
    (GH#1080)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302221-1" date="1781524800">- Update to 1.302221
  - Prevent the new EBCDIC support from breaking 5.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302222-1" date="1781611200">- Update to 1.302222
  - Add missing Changes entry
  - Fix test that fails on some Windows versions due to path separators</changelog>
</package>
<package pkgid="e75b091a1c6aa158b2925c5caaaaeac266bd2df2fa483724d9899ca686634425" name="perl-Test-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="0465fb72da386e81e5f3cca2874ea18a33f63b5ed5493809611e3844f21f41e5" name="perl-Test-Spelling" arch="noarch">
  <version epoch="0" ver="0.25" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-13" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="820026e8352bed5dd24e8aceaf2c83939d85f67adcb9a1493b3e5a744135a88c" name="perl-Test-SubCalls" arch="noarch">
  <version epoch="0" ver="1.10" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-17" date="1685188800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3e1e128e0046408f50a366dfea2dc1f30f343d7b0af234aca62e43784442733c" name="perl-Test-Synopsis" arch="noarch">
  <version epoch="0" ver="0.18" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-12" date="1751976000">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1783944000">- Update to 0.18
  - Fix: =for test_synopsis directives are now applied regardless of their
    position relative to the SYNOPSIS code block (GH#20, regression since 0.14)</changelog>
</package>
<package pkgid="be4e1bc97c4ab8c82281308c2c7e22c95862a369c1534f6dc6ea730e336c7c85" name="perl-Test-Taint" arch="i686">
  <version epoch="0" ver="1.08" rel="13.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-10" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-13" date="1687780800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c34b5bbe4fd9c3464871409e62c9a5a485709a8d82c13e80a9de193245c36df7" name="perl-Test-TrailingSpace" arch="noarch">
  <version epoch="0" ver="0.0601" rel="6.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-1" date="1630065600">- Update to 0.0601
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-6" date="1685361600">- SPDX migration</changelog>
</package>
<package pkgid="8232f1f2b804d33c712a80e1281a8caecf06b281d4c36193d02dfda68a18d779" name="perl-Test-TypeTiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="7454a584863510a3bc49d2517f9d7cf26a22dc218e14bcaa91397d7bff4fa67f" name="perl-Test-Unit-Lite" arch="noarch">
  <version epoch="1" ver="0.12.02" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-1" date="1665144000">- Make rpm version reflect upstream version better (rhbz#2132720)
- Assume build with rpm ≥ 4.9
- Use SPDX-format license tag
- Use %license unconditionally
- Use mktemp to create GNUPGHOME</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="c76e55ccaf81a68d44cbb6c07691d6a9b9b5b7186c2424bf81adf789128c0bac" name="perl-Test-UseAllModules" arch="noarch">
  <version epoch="0" ver="0.17" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1685448000">- Use SPDX-format license tag
- Line endings don't need fixing</changelog>
</package>
<package pkgid="50cf408f88fef287cb984e00e851b379e331168b0117cf9d3bb18f2a0a406a12" name="perl-Test-Valgrind" arch="noarch">
  <version epoch="0" ver="1.19" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-22" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-23" date="1690718400">- Fix FTBFS in Fedora 39 due to failing t/20-bad.t (rhbz#2222854)</changelog>
</package>
<package pkgid="1538b25bb0ac82e25d925cd3c352ea364155416b69a3634df2f2da582b5c5624" name="perl-Test-Vars" arch="noarch">
  <version epoch="0" ver="0.017" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-9" date="1685448000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1726574400">- Update to 0.017
  - Support new opcodes introduced in 5.37 development cycle: PADSV_STORE
    and AELEMFASTLEX_STORE (GH#52)
  - Return build system to ExtUtils::MakeMaker (GH#54)
- Switch to ExtUtils::MakeMaker flow</changelog>
</package>
<package pkgid="5b49f1bb9a2829418e89fe9cc382a56063c3358f45b9676e2e870f5e19bee67c" name="perl-Test-Version" arch="noarch">
  <version epoch="0" ver="2.09" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.09-21" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="dbf9f58303003d9d1931f4e7e59c18f5b43201b6d847ce1e1a85f20afbe93764" name="perl-Test-Warn" arch="noarch">
  <version epoch="0" ver="0.37" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1660392000">- Update to 0.37
  - Allow duplicate warnings when using warnings_exist (GH#8)
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="092c63378868f9ba6ce537c9134fed9fbb6b73100ce91d8b030273ceada08399" name="perl-Test-Warnings" arch="noarch">
  <version epoch="0" ver="0.038" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.031-6" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.032-1" date="1696161600">- Update to 0.032
  - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
    temporarily turning failures into reports</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.033-1" date="1706011200">- Update to 0.033
  - Add Test2 compatibility in the test triggered by done_testing()
  - New long-awaited feature (!!!) "allow_patterns", to either
    temporarily or globally exempt particular warning patterns</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.034-1" date="1735905600">- Update to 0.034
  - Fix Test2 compatibility for done_testing()
  - Test2::Warnings added as a simple wrapper (for now)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.036-1" date="1736078400">- Update to 0.036
  - Allow tests to pass even when Import::Into is not installed (CPAN RT#158296)
  - Add backcompat shim for cases where Test::More is loaded in tests after
    Test::Warnings
  - Avoid redefinition warnings when $^W is enabled in tests (CPAN RT#158297)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.037-1" date="1736164800">- Update to 0.037
  - Remove unneeded use of Import::Into
  - Fix for tests that invoke Test::Warnings-&gt;import directly</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.038-1" date="1738497600">- Update to 0.038
  - Refrain from swapping out done_testing method if :no_end_test is configured</changelog>
</package>
<package pkgid="6545a9868ae1309d5c71ecc9ae18a6d68b12e0ee5aae938557c03a67aa6423a6" name="perl-Test-Without-Module" arch="noarch">
  <version epoch="0" ver="0.23" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-1" date="1670846400">- Update to 0.21
  - Harden test suite against changed error message coming with 5.38
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1720267200">- Update to 0.22
  - Fix test suite to not skip a failing test
- License changed to Artistic-2.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1721044800">- Update to 0.23
  - Lower minimum required Perl version back to 5.006 (GH#5)</changelog>
</package>
<package pkgid="bb0af20bbfee79928ae86bedcb4d70ce82722c3226e0aeec14709000eda121f6" name="perl-Test-WriteVariants" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1687694400">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="e447e43e426d2e20824741f1fcb7878d98bdc603bc85cdcb1dd905b4f2ec5b75" name="perl-Test-YAML" arch="noarch">
  <version epoch="0" ver="1.07" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-16" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="040fb8dc31446974a893ba27305733db3d94c16b7a976bb195c8b64f461c25e7" name="perl-Test-YAML-Valid" arch="noarch">
  <version epoch="0" ver="0.04" rel="39.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-39" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="cfaaa983c98574b154d16c73ecd2e011f1f598b42cb4f3fba302aec00bf61c35" name="perl-Test-utf8" arch="noarch">
  <version epoch="0" ver="1.03" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-10" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-1" date="1731672000">- Update to 1.03
  - Fix tests to adapt to Perl removing apostrophe as package separator
    (CPAN RT#154915)
  - Upgraded distro files like packaged Module::Install version and META.yml,
    to avoid other looming Perl deprecation issues
- Switch source URL from cpan.metacpan.org to www.cpan.org to work around
  ongoing issues with metacpan</changelog>
</package>
<package pkgid="8596054f60e68b899b65eeed6d50ff175e01ee5f57ae4265c95132ec5ff47514" name="perl-Test2-Plugin-NoWarnings" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-9" date="1684324800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1712491200">- Update to 0.10
  - Previously, when tests were run via prove without the verbose flag and
    there was a warning that caused a test failure, there was no output
    indicating that a warning caused the failure; this has now been corrected
    and you'll see output that includes "Unexpected warning"</changelog>
</package>
<package pkgid="d93dd649c759fbb0b64b6fb26e9daa60a1ab665c4ded02e38682ae62c0bf224d" name="perl-Test2-Tools-Explain" arch="noarch">
  <version epoch="0" ver="0.02" rel="12.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-12" date="1685534400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="425e2cc292308e403483c524aa8f66387aab6e26bddc798f9fdee57fb8db97ff" name="perl-Text-CSV_XS" arch="i686">
  <version epoch="0" ver="1.64" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1" date="1723377600">- Update to 1.56 (rhbz#2303862)
  - Yet another strict/comment_str conflict (GH#57)
  - Strict affected by column_names</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1" date="1731412800">- Update to 1.57 (rhbz#2325504)
  - Add on_error callback to csv()
  - Retain runtime error from csv()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1" date="1735560000">- Update to 1.58 (rhbz#2334923)
  - Add strict_eol (warnings default in csv())
  - Add XS line number in errors
  - Add streaming support (not set in stone)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1" date="1736078400">- Update to 1.59 (rhbz#2335660)
  - Fixed EOL test for Windows with crnl layer
  - It is 2025</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1738324800">- Update to 1.60 (rhbz#2343165)
  - Add SECURITY.md
  - CR/NL/CRNL inside quoted fields not affected by strict_eol
  - Fix incorrect error 2014 (GH#62)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1753617600">- Update to 1.61 (rhbz#2383739)
  - Add love letter to CSV from xan project with reference
  - Bugtracker to Github (long overdue) (GH#63)
  - Update to Devel::PPPort-3.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.62-1" date="1777464000">- Update to 1.62 (rhbz#2463743)
  - It is 2026
  - Fix possible stack corruption (GH#65, CVE-2026-7111)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.63-1" date="1782129600">- Update to 1.63
  - Check attribute lengths (memory protection)
  - Minor code consistencies (not user-visible)
  - Dropped support for 5.6.x and 5.8.0; minimum perl is now 5.8.1
  - Fix special str setting consistency for types, undef_str and comment_str
  - Characters []:*/\ are not allowed in XLSX sheet names</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.64-1" date="1782129601">- Update to 1.64 (rhbz#2491334)
  - Fix syntax error in csv2xlsx</changelog>
</package>
<package pkgid="8d7634645945fb013fba83129878b2120f82a7b431fbeac0d76c744576b65132" name="perl-Text-Diff" arch="noarch">
  <version epoch="0" ver="1.45" rel="18.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-18" date="1686225600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="06c1fb8ba64ae141b671783b697618aefd218313c9efa0024f9de8e9e80d37d8" name="perl-Text-Glob" arch="noarch">
  <version epoch="0" ver="0.11" rel="20.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-20" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="398ed80acd614e8814770cd3d8ffca9b90d830c88fa6a4e5d2af98699727bb3c" name="perl-Text-Haml" arch="noarch">
  <version epoch="0" ver="0.990118" rel="21.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.990118-21" date="1689595200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="32860baaaf364f4e93f49ca3fb45dec099c664f5b5c7a0b4edb69bc8d2722455" name="perl-Text-Hunspell" arch="i686">
  <version epoch="0" ver="2.16" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-25" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-1" date="1657886400">- Update to 2.16
  - Documentation improvements (GH#16, GH#18)
  - Add LICENSE file (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-3" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.52</changelog>
</package>
<package pkgid="da0b145e1cf81e1e9913eaa23884c98ac8e0acc852a9595e48893c62e2a868f5" name="perl-Text-Template" arch="noarch">
  <version epoch="0" ver="1.61" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1630843200">- Update to 1.60
  - Fix another POD syntax error
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1647604800">- Work around package note files breaking t/author-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1651233600">- Update to 1.61
  - Skip taint tests if perl was compiled with taint disabled (GH#20)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6e7627e12cec43bae1da086f407e58f4c56ab0ba4e010c526e8f01c7c1cad5cf" name="perl-Text-Trac" arch="noarch">
  <version epoch="0" ver="0.24" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-2" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="b44975a067198750303074a75efb12ddcd531d32291cce1d7a9b81e70784d0c9" name="perl-Tie-IxHash" arch="noarch">
  <version epoch="0" ver="1.23" rel="35.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-35" date="1686225600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="81baa6392550f2c426669ea869267b9a06402d5b464f462ea581fd0d5b790bad" name="perl-Tie-RefHash-Weak" arch="noarch">
  <version epoch="0" ver="0.09" rel="41.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-41" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e9524ea91f6f9170c990501121d7b56eb75da86134c73a5b86cd781792d87d69" name="perl-Tie-ToObject" arch="noarch">
  <version epoch="0" ver="0.03" rel="44.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-44" date="1682596800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9a464dee7b41e1732f53d36bb1531593046fed0acb21641983e96ea104cc2764" name="perl-Time-y2038" arch="i686">
  <version epoch="0" ver="20100403" rel="31.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-29" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-31" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="37ff9680c6675de508199cdc2e4293782433cf7d71256dfae98e762d683af7e3" name="perl-TimeDate" arch="noarch">
  <version epoch="1" ver="2.35" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.34-1" date="1772366400">- Update to 2.34
  - Increase coverage in documentation
  - Refactor: Extract _build_lookups helper, remove hash-building duplication
  - Correct language data bugs and minor code review fixes
  - Fix up utf8 and add tests
  - Use Dist::Zilla for the distro
  - Rebase: Apply review feedback on GH#49 and GH#52
  - Fix: Uncomment Indian Standard timezone (IST)
  - Feature: Support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)
  - Correct typos across documentation and comments
  - Stop using 'use vars'
  - Remove limitation from Date::Parse
  - Create Arabic.pm
- Use %{make_build} and %{make_install}
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.35-1" date="1774180800">- Update to 2.35
  - Test: Document and pin CPAN RT#84075/GH#12 fix in regression suite
  - Fix: Add NST, NFT, and NDT (Newfoundland) timezone support
  - Fix: Add ICT and PHT timezone support
  - Fix: Restore rebase regressions and clarify first-century limitation
  - Fix: Normalize two-digit years in str2time to avoid Time::Local windowing
    mismatch
  - Fix: Use standard 2-letter German weekday abbreviations
  - Fix: Detect timegm/timelocal overflow for far-future dates (CPAN RT#88777)
  - Test: Add regression tests for CPAN RT#88777 (negative epoch for far-future
    dates)
  - Fix: Use stored epoch in format_Z/format_z to fix DST fall-back timezone
    name
  - Fix: Document MSK timezone history and add regression test (CPAN RT#98949)
  - Fix: strftime %s with timezone now returns correct epoch (CPAN RT#52387)
  - Test: Add POD validity regression test for CPAN RT#53557
  - Fix: Include day in year-inference for dates without an explicit year
  - Fix: Document MSK timezone history and add regression test (CPAN RT#81350)
  - CI: Install Pod::Checker via cpm in Linux CI
  - Docs: Add SECURITY.md with vulnerability reporting policy
  - Test: Add regression tests for CPAN RT#57800/GH#3 (numeric m/d/yyyy
    pre-1970 dates)
  - Fix: Normalize year offset for dates before 1901 in strptime
    (CPAN RT#106105)
  - Fix: Reject timezone-only inputs in strptime (CPAN RT#70650)
  - Test: Add failing tests for CPAN RT#70650 (ludicrous date parsing)
  - Fix: Prevent negative month from strptime for 6-digit inputs like '199001'
  - Test: Add Portuguese format and round-trip tests from GH#61
  - Fix: Treat number &gt; 31 after month name as year, not day (GH#2)
  - Fix: Translate timezone abbreviations (%Z) in language-specific formatting
  - Fix: tz_name() offset in seconds was treated as minutes (CPAN RT#59298)
  - Docs: Fix ISO-8601 example date in Date::Parse POD (GH#6)
  - Feat: Add optional LANGUAGE parameter to time2str()
  - Feat: Allow str2time() to accept a custom reference epoch (CPAN RT#64789)
  - Docs: Clarify strptime() return format for ISO 8601 dates (GH#44)
  - Feat: Add Portuguese language module
  - Fix: Prefer CEST over MEST as canonical Central European Summer Time name
  - Fix: Add ICT and PHT timezone abbreviations to Time::Zone (CPAN RT#123247)
  - Fix: Standardize Greek.pm to use native Unicode instead of \x{} escapes
  - Test: Add regression test for CPAN RT#105031/GH#17 (1965-12-31 maps to 2065)
  - Fix: Declare Carp as runtime prerequisite in Makefile.PL
  - Fix: Infer current year for future months when no year given (CPAN RT#92611)
  - Test: Add regression tests for CPAN RT#53413 (4-digit year mangling)
  - Fix: Handle leap day in year-only date parsing test
  - Fix: Support IANA timezone names in tz2zone and tz_offset (CPAN RT#76968)
  - Fix: Preserve comma as ISO 8601 decimal separator in strptime
  - Fix: Add French day ordinal suffix in format_o
  - Fix: Make tz_name tests deterministic across DST transitions</changelog>
</package>
<package pkgid="6cab21bfc173752683cc8417851f5e8b3fe083cab42137e1f58c8ac05dabec9b" name="perl-Tree-DAG_Node" arch="noarch">
  <version epoch="0" ver="1.39" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33-1" date="1743336000">- Update to 1.33
  - Replace the discouraged File::Slurp::Tiny with File::Slurper
  - Add a security policy file SECURITY.md
  - Update Makefile.PL to include both ExtUtils::MakeMaker and perl
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34-1" date="1745841600">- Update to 1.34
  - Fix test failures due to line endings on Windows (GH#4)
  - The 2 test files t/tree.with*.txt ship as ISO-8859-1, while
    t/tree.utf8.attributes.txt ships as UTF-8; so...
    - Don't explicitly use UTF-8 encoding in DAG_Node.pm's sub read_tree();
      rather, use a regexp to standardize line endings after reading, and
      likewise, in t/read.tree.t, do the same
    - Un-comment the 2 extra tests at the end of t/read.tree.t; specifically,
      line 50 was 'for (qw/utf8/)# with without/)' and now says
      'for (qw/utf8 with without/)'
    - Reformat test data files t/tree.*.attributes.txt; this was done with the
      new files share/read.write.tree.(pl, sh), and it was done because some of
      the test data files had been written by old code with slightly different
      indenting
  - Add a new test data file, t/metag.cooked.tree.txt; it's a copy of
    MarpaX::Grammar::Parser's share/metag.cooked.tree, and the test program
    t/read.tree.t was edited to include this new file
  - Patch tree::DAG_Node.format_node() to output 'Attributes: {}' and not just
    'Attributes:' when the user does not want attributes reported; this makes
    the code match the sample trees shipped in t/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-1" date="1747051200">- Update to 1.35
  - Change sub hashref2string() so it does not generate an error or warning when
    the node or node name is '' (empty string), undef or 0 (zero)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1782648000">- Update to 1.36
  - No functional changes
  - Fix typo in the 2nd FAQ: "How to process every node in tree?"
  - Add new version of LICENSE to the distro
  - Add new files LICENSE-Artistic-2.0 and LICENSE-GPL-3 to the distro
  - Add Data::Dumper, Getopt::Long, perl to Makefile.PL
  - Remove open from Makefile.PL
  - Modernize MANIFEST.SKIP</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1782734400">- Update to 1.37
  - No functional changes
  - Replace the body of the LICENSE file with what is recommended at
    https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html
  - Patch the source code reference to refer to this LICENSE file
  - Remove the excess and confusing files LICENSE-Artistic-2.0 and LICENSE-GPL-3
  - Reset the required version of Data::Dumper back to 0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1" date="1783425600">- Update to 1.38
  - Replace LICENCE file content with the Perl_5 license from Software::License
  - Add AI_POLICY.md file
  - Modernize MANIFEST.SKIP again</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1783512000">- Update to 1.39
  - Regenerate LICENSE using latest Software::License (GH#1)</changelog>
</package>
<package pkgid="6580e92ea8b26a45b75af9066fc2f2682c27c904f4b3fa22745f7e4b6c1ada31" name="perl-Try-Tiny" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-5" date="1680523200">- Avoid use of deprecated patch syntax
- Note that license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-6" date="1689249600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1723896000">- Update to 0.32
  - Skip given, when tests on perls ≥ 5.41.3 which removed these constructs</changelog>
</package>
<package pkgid="38514a938e1b0c05e7f17054bfef1b49bdaf7de61a7d47e1cbf17eb3d3c692d1" name="perl-Type-Tiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="a7e63ff7cf184052ef8427ea81d15d024ca4b6920e4dc4e0f8361186aed9bdb5" name="perl-Types-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.006" rel="17.fc36"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.006-12" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-13" date="1636977600">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="80ce6496c64f0f3706fe54c8fa187c07c11acdb6db9cb7496c97dc32a926fb7c" name="perl-Types-Serialiser" arch="noarch">
  <version epoch="0" ver="1.01" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.01-8" date="1684324800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="39d94bbd71834ed8ab9aca46fee346cda4af090775ca9d74ec9d1476e4207b1c" name="perl-UNIVERSAL-require" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-7" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="a30d7463a4760ebbd645c721e52dedfcb39899529fc2432db87375658a56310c" name="perl-URI-cpan" arch="noarch">
  <version epoch="0" ver="1.009" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-1" date="1640088000">- Update to 1.008
  - Fix prereqs to rely on URI, not the unindexed URI::_generic
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-4" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.009-1" date="1693742400">- Update to 1.009
  - Updates to dist metadata only</changelog>
</package>
<package pkgid="b78da3f6415d98846ab4d72fd8d1f15a1d26bedb3cd92e12fb2b72f12de43892" name="perl-Unicode-CheckUTF8" arch="i686">
  <version epoch="0" ver="1.03" rel="42.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-37" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-39" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-41" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-42" date="1726574400">- Correct URL
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/1)
- Use SPDX-format license tag
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/2)</changelog>
</package>
<package pkgid="2b43f940e5afd000b77b218662059a1a39cf9025e179192bc8d816d04b03ec60" name="perl-Unicode-Map" arch="i686">
  <version epoch="0" ver="0.112" rel="59.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-57" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-59" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="82fdf624644a5be4a6ef3f8c475c2f2e5e649184fc4a1638832764df86adf400" name="perl-Unicode-Map8" arch="i686">
  <version epoch="0" ver="0.13" rel="43.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-41" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-43" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="451c31f6b94e93b3549655fece917a0d6901b3fb7883ead9c09b6df028c17753" name="perl-Unicode-MapUTF8" arch="noarch">
  <version epoch="0" ver="1.14" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.14-10" date="1685707200">- SPDX license migration</changelog>
</package>
<package pkgid="17dc500bbfcf2a0bdcead8b41378883e2dc32bbc119baed89249d90f2cd1abab" name="perl-Unicode-String" arch="i686">
  <version epoch="0" ver="2.10" rel="22.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-20" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-22" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="36982b2a243a81b09d6eb7307d76e9c9d872344e9b4f2ee87c5ed6f42a646cdf" name="perl-Unicode-UTF8" arch="i686">
  <version epoch="0" ver="0.75" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-28" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1766404800">- Update to 0.63
  - Remove the non-portable tests for Perl's "super" code points; testing
    values beyond 0x7FFF_FFFF isn’t necessary
  - Documentation typo corrections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1771848000">- Update to 0.64
  - Unicode::UTF8 now allows noncharacters; they receive no special handling
    and are processed like any other code point
  - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
    (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
    reserved but should be allowed in interchange:
    https://www.unicode.org/versions/corrigendum9.html</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-1" date="1771934400">- Update to 0.65
  - C99-compliant compiler is now required for Unicode::UTF8
  - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
    validation for non-ASCII input; this approach resulted in a 900% throughput
    improvement on English text and a 200% improvement on Swedish text compared
    with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1772020800">- Update to 0.66
  - Rewrote the UTF-8 validator using a shift-based DFA from
    https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
    up to 10x faster decoding compared with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.68-1" date="1772452800">- Update to 0.68
  - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
    builds
  - Use Dist::Zilla for the distro
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.70-1" date="1774008000">- Update to 0.70
  - Update the c-utf8 library code: improved GCC code generation, including
    with -O2, resulting in higher throughput
  - Use utf8_check_ascii with a 16-byte ASCII fast path</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.72-1" date="1783425600">- Update to 0.72
  - read_utf8() now takes a single-pass fast path on PerlIO fast-gets layers,
    validating/copying/counting straight out of the layer buffer (up to ~11%
    faster on multibyte-heavy input; see benchmarks/)
  - Fixed read_utf8() on non-buffered handles stranding the trailing incomplete
    sequence that was read to satisfy the requested length: the pending bytes
    are now pushed back with PerlIO_unread() so the following read sees them,
    matching decode_utf8() when drained to end of file
- Add patch to avoid trying to use 64-bit SSE2 on ix86 (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-1" date="1784030400">- Update to 0.74
  - Added slurp_utf8($filename), which reads an entire file and returns its
    contents decoded from UTF-8 as a character string
  - Added support for older MSVC C compilers by using __inline in place of the
    C99 inline keyword on pre-Visual Studio 2015 builds
  - Fixed SSE2 detection to only enable the SIMD implementation on 64-bit x86
    targets, which prevents unsupported SSE2 code from being selected on 32-bit
    x86 builds (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.75-1" date="1784116800">- Update to 0.75
  - Fixed slurp_utf8() leaking the file descriptor if a fatal "utf8" warning
    (e.g. warnings FATAL =&gt; 'utf8') was thrown while reading an ill-formed file</changelog>
</package>
<package pkgid="1650a5ef65346741d88c8bc2dff28638d322326e51f08ce2c482282cbefb7ece" name="perl-Unix-Syslog" arch="i686">
  <version epoch="0" ver="1.1" rel="45.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-40" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-43" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-45" date="1684411200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8f788fa5829155c838489b6946916882f1378d5686408ffaf3a90b2361e5c0c9" name="perl-Variable-Magic" arch="i686">
  <version epoch="0" ver="0.64" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-16" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1663761600">- Update to 0.63
  - Add support for 5.37.3's PADSV_STORE optimization; B.pm-related tests have
    been taught about this new thing (CPAN RT#144052)
  - Updated contact information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1710849600">- Update to 0.64
  - This is a maintenance release; the code contains no functional change
  - Contributing guidelines are now listed in the new CONTRIBUTING file
  - Fix for t/18-opinfo.t broken under blead (CPAN RT#151104)</changelog>
</package>
<package pkgid="a3be7fad5212a53a98cccf713bea048049cc7652e182d790f8422955179ab6b2" name="perl-Variable-OnDestruct" arch="i686">
  <version epoch="0" ver="0.09" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-1" date="1709121600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1711540800">- Update to 0.08
  - Revert not catching exceptions from destruct handlers
  - Restore functionality on perl ≤ 5.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-1" date="1711800000">- Update to 0.09
  - Further fix on older perls</changelog>
</package>
<package pkgid="a7d96f8313b01134e9bb18b3fd55a50800958c43b466874024059cf538e9a5a5" name="perl-Version-Requirements" arch="noarch">
  <version epoch="0" ver="0.101023" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101023-25" date="1685707200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="3531c448aef5c29ea4f69a4b7464140390557b919a0db3e5a7c1a4a706d7cb73" name="perl-WeakRef" arch="i686">
  <version epoch="0" ver="0.01" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-25" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="cf78f89b231c05b93803745d57fd1cf67178f670c761fb00df8371707793a95c" name="perl-XML-DTDParser" arch="noarch">
  <version epoch="0" ver="2.01" rel="34.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.01-34" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="846b046a909bc2fa43238d10f970a260cf85025de924a774fad9f38f354b3f63" name="perl-XML-LibXML" arch="i686">
  <version epoch="1" ver="2.0213" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-2.0" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-5.0" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0212-1.0" date="1779278400">- Update to 2.0212
  Security/Bug Fixes:
  - Prevent out-of-bounds UTF-8 read in domParseChar by replacing it with
    libxml2's xmlValidateName; truncated multi-byte sequences could cause heap
    reads past the NUL terminator across five DOM entry points (createElement,
    createAttribute, setNodeName, etc.) (GH#146, GH#149)
  - Enforce no_network even when a global externalEntityLoader is set;
    previously, XML_PARSE_NONET was silently ignored once a global callback was
    installed, enabling SSRF in multi-module applications that combine a
    third-party entity loader with no_network parsers (GH#133, GH#143)
  - Prevent integer overflow in SAX CBuffer length tracking; total character
    data exceeding INT_MAX (~2GB) overflowed the accumulator causing xmlMalloc
    to under-allocate and the subsequent memcpy to write past the buffer
    (GH#135, GH#142)
  - Proper lifecycle management for externalEntityLoader: the global loader can
    now be cleared or replaced safely, the previous handler SV is no longer
    leaked, the returned value is a safe copy rather than the internal global
    SV, and per-parser ext_ent_handler state is separated from the global slot
    (GH#138)
  - Add NULL checks after xmlMalloc returns in SAX CBuffer operations,
    converting OOM segfaults into catchable Perl exceptions (GH#136, GH#140)
  - Add NULL check after xmlCopyNamespace in _domReconcileNs, matching the
    existing guard in _domReconcileNsAttr (GH#137, GH#139)
  - Plug 11 memory leaks across XS/C code, including setBaseURI,
    URI/documentURI accessors, load_catalog, PSaxCharactersFlush,
    createAttributeNS, XPathContext::_find, _newForIO, _toStringC14N,
    lookupNamespacePrefix, _setNamespace, and the generic XPath extension
    function dispatcher (GH#131, GH#132)
  - Handle Apple's local libxml2 patch where xmlSAX2ResolveEntity throws on a
    NULL URI, so t/13dtd.t no longer dies on macOS (GH#94)
  - Skip t/50devel.t when mem_used() reports 0 bytes, which happens on Apple's
    libxml2 (system malloc bypasses the tracking wrappers)
    (CPAN RT#165193, GH#94)
  - Ship POD files in the CPAN tarball
    - The per-class .pod files generated from docs/libxml.dbk were gitignored,
      and nothing in the dist chain was producing them, so recent tarballs
      shipped without POD
    - The .pod files are now tracked in git (bison-style), so 'make dist'
      includes them via MANIFEST and the documentation reaches CPAN consumers
      again
    - Also eliminates the bootstrap problem of needing XML::LibXML installed to
      build XML::LibXML's docs, and silences the "kit incomplete" warning from
      'perl Makefile.PL' on a fresh checkout
  Improvements:
  - Resolve Windows CI test failures and compiler warnings: use the file size
    (-s) for the byteConsumed test instead of a hardcoded 488 (CRLF inflates
    the file to 507 bytes), use Perl UV/PTR2UV in PmmRegistryName to avoid
    pointer truncation under Win64 LLP64, and use const xmlError* for
    xmlCtxtGetLastError to match the libxml2 2.12+ API (GH#122)
  - Silence macOS build warnings cleanly by gating the libxml2 memory tracking
    API behind a HAVE_LIBXML_MEMORY_DEBUG feature macro
    - The deprecated calls are no longer compiled on systems where the API is
      gone (Apple SDK, libxml2 &gt;= 2.14), mem_used is only exported when
      actually defined, and t/50devel.t skips with a clear reason
    - Also strip the bogus "-L/lib" entries Alien::Base::Wrapper injects into
      LDFLAGS on macOS (GH#127)
  - Add a minimal hello-world HTML example (example/hello-world.pl) and add
    createInternalSubset("html", ...) to both HTML examples so they emit a
    proper &lt;!DOCTYPE html&gt; declaration (GH#66, GH#121)
  - Standardize XPath parameter naming to $xpath_expression throughout the
    DocBook source, matching the XML::LibXML::XPathExpression class name
    (GH#64, GH#125)
  - Update outdated and dead references in README.md: point repository URLs at
    the canonical cpan-authors/XML-LibXML home, drop the defunct ActiveState
    mailing list, replace the long Windows nmake recipe with a Strawberry Perl
    note, refresh the macOS section, and bring the Package History up to date
  - Remove the stale "Known Issues" note about push-parser leaks; the leaks it
    referenced were fixed by Nick Wellnhofer in 2014
  - Point distribution metadata at the cpan-authors GitHub repo and add an
    explicit bugtracker entry so MetaCPAN's "Issues" link goes to GitHub Issues
    instead of falling back to rt.cpan.org
  - Add NamedNodeMap.pod to MANIFEST so the generated POD ships in the CPAN
    tarball; the L&lt;XML::LibXML::NamedNodeMap&gt; link in Node.pod now resolves on
    MetaCPAN (GH#115, GH#118)
  - Update ppport.h and adopt its suggestions to reduce build issues
  - Fix test suite with libxml2 2.13.0 and 2.14.0
  - Remove tests that disable line numbers (always enabled since libxml2 2.15.0)
  - Use 'our $VERSION' instead of 'use vars'
  - Fix formatting in docs/libxml.dbk (GH#85)
  Maintenance:
  - Modernize the CI workflow with a dynamic Perl version matrix, centralized
    cpanfile, and updated action versions (GH#108)
  - Use cpanm instead of cpm for the Linux CI matrix so jobs on Perl &lt; 5.24
    (down through 5.8) no longer fail to install dependencies (GH#117, GH#119)
  - Expand CI platform coverage: FreeBSD 14.2, OpenBSD 7.6, NetBSD 10.1,
    Strawberry Perl on Windows, Fedora 43 container, AddressSanitizer,
    Devel::Cover + Codecov coverage upload, and a downstream XML::LibXSLT
    compatibility job (GH#120)
  - Fix BSD CI: use the correct OpenBSD package name ('libxml', not 'libxml2')
    and install Perl dependencies explicitly instead of relying on META.json
    autodiscovery (GH#124)
  - Parallelize 'make' compilation across CI jobs with platform-appropriate CPU
    detection (GH#128)
  - Temporarily disable OpenBSD 7.6 CI due to unreliable runners (GH#130)
  - Re-enable OpenBSD CI on version 7.8 once the runner situation stabilized
    (GH#144)
  - Add a CLAUDE.md describing project layout, build/test commands, libxml2
    version landscape, and coding conventions (GH#116)
  - Add contributing guidelines covering CI, scope, MANIFEST, and
    version/release handling (GH#126)
  - Add AI_POLICY.md documenting how AI tools are used (and not used) in this
    project
  - Add MANIFEST.SKIP so local files (.hgignore, .tidyallrc, CLAUDE.md, etc.)
    are kept out of 'make manifest' output
  - Drop unused dev helper ('tester.sh') and the stale TODO file
  - Rename README to README.md and remove the obsolete Travis CI references
  - Add a 'pod-drift' CI job that runs 'make pod_docs' and fails on any diff,
    catching forgotten POD regenerations after edits to docs/libxml.dbk
  - Move xmllibxmldocs.pl from example/ to scripts/; it is a maintenance tool
    that emits source files (POD), not a usage example of XML::LibXML; scripts/
    already houses similar build/dev tooling
  - Skip t/release-kwalitee.t outside a dist tarball
    - The Test::Kwalitee 'has_meta_yml' check was failing under 'make test' in
      author mode because META.yml is only generated by 'make dist'
    - The test now skips cleanly when META.yml is absent and still runs the
      full 18-check suite under 'make disttest' against the unpacked tarball
- Re-enable threads tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0213-1.0" date="1779364800">- Update to 2.0213
  Security/Bug Fixes:
  - Revert GH#143 per the libxml2 author's request (GH#168)
    - GH#143 added a URL-scheme filter inside LibXML_load_external_entity and
      removed the EXTERNAL_ENTITY_LOADER_FUNC == NULL guards on the five
      Schema/RelaxNG NONET swap sites, on the premise that no_network on one
      parser should override a user-installed global externalEntityLoader
    - Nick Wellnhofer clarified that this contradicts upstream intent:
      XML_PARSE_NONET only polices libxml2's default loader; a user who
      installs a global loader is explicitly opting out of that policy, and the
      http/https/ftp allowlist was never a real security boundary
    - Reverted in full; GH#138's lifecycle/memory-safety fixes are kept
  Bug Fixes:
  - Fix latent SEGV in _externalEntityLoader
    - The XS code returned &amp;PL_sv_undef as RETVAL when no previous global
      loader existed
    - Since xsubpp auto-mortalizes SV* RETVAL, each call mortalized the
      PL_sv_undef singleton, eventually driving its refcount negative and
      producing "Attempt to free unreferenced scalar" followed by SEGV under
      repeated invocation
    - Now returns newSV(0) so RETVAL is always a fresh refcount-1 SV safe to
      mortalize
    - The bug shipped in 2.0212 with GH#138's lifecycle fixes; this is a
      single-line correction to that code path
  Maintenance:
  - Add t/49global_extent_with_no_network.t, 17 subtests locking in the
    entity-loader contract restored by the GH#168 revert: a user-installed
    global loader takes precedence over no_network across plain XML parse,
    RelaxNG, and XML Schema, while no_network without any loader still blocks
    via libxml2's default loader
  - Document the entity-loader contract in CLAUDE.md ("Entity loaders,
    no_network, and XML_PARSE_NONET") plus a "Verifying audit-flagged
    security findings" checklist to keep pattern-matched "security fixes"
    like GH#143 from shipping again</changelog>
</package>
<package pkgid="65d663976ea3b705612c4cea7e2c1918ac053e5265969810478d4c95f18626c7" name="perl-XML-LibXSLT" arch="i686">
  <version epoch="0" ver="2.003000" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-1" date="1676030400">- Update to 2.002001
  - Corrections and refactorings in Makefile.PL
- Use author-independent source URL
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-6" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003000-1" date="1718452800">- Update to 2.003000
  - lib/XML/LibXSLT/Quick.pm:
    - Add an 'implicit' type to $dest
    - Correct a type spelling ('file' instead of 'path')</changelog>
</package>
<package pkgid="75adf0914ecd9fc35ca92527724b43b879519fcb22021a3d1380f11931f339b4" name="perl-XML-NamespaceSupport" arch="noarch">
  <version epoch="0" ver="1.12" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b17160ec9b835e822ffc74b36cdcd84bb7f4e808cd5abb05439b3094ae71bd1b" name="perl-XML-Rules" arch="noarch">
  <version epoch="0" ver="1.16" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-30" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="e53ce7160af411c4675d4aa48543779047b898772603671f128f6842b6b96bdc" name="perl-XML-SAX" arch="noarch">
  <version epoch="0" ver="1.02" rel="12.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-12" date="1687435200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="596957c0c8137b71050873d2acd472327ea9584a58a0e76b02d8e9af5818ea50" name="perl-XML-SAX-Base" arch="noarch">
  <version epoch="0" ver="1.09" rel="19.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="095ab19cdac65d1c35a6bc106dba1339c6f7509a57a9a5311f1258745cbfb130" name="perl-XML-SAX-Expat" arch="noarch">
  <version epoch="0" ver="0.51" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-5" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="478b3a1b41558598106e04cb0b70137ceb343935e859b5518a0a759e13da80f0" name="perl-XML-Simple" arch="noarch">
  <version epoch="0" ver="2.25" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.25-17" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="53511b530d8e3a9610d7d6aa8879e437e90b663bcfb5750950dce896ae628b29" name="perl-XString" arch="i686">
  <version epoch="0" ver="0.005" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-8" date="1684411200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2da3533aee8df46881b17a512a95c44ba125d941c7c417cee3cfd6cf6ced2c48" name="perl-YAML" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-15" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1703764800">- Update to 1.31 (rhbz#2255994)
  - Update docs to recommend YAML::PP
- Package description updated as per upstream documentation</changelog>
</package>
<package pkgid="4fee1b9bb35bcda9e47547ad08cb9ca3832d297b75ed03d13c987ac09e12865d" name="perl-YAML-LibYAML" arch="i686">
  <version epoch="1" ver="0.910.0" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.902.0-1" date="1727092800">- Update to 0.902.0 (rhbz#2313873)
  - Loaded builtin booleans are no longer readonly for perl ≥ v5.36</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903.0-1" date="1738584000">- Update to 0.903.0 (rhbz#2343445)
  - Security fix: use 3-arg form of open in LoadFile (GH#120. GH#121)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-1" date="1746705600">- Update to 0.904.0 (rhbz#2365093)
  - Add experimental OOP interface, YAML 1.2
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-2" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.906.0-1" date="1777291200">- Update to 0.906.0
  - Fix memory leak for trailing UTF8 octets (GH#123)
  - Fix detecting floats in YAML 1.2 Core Schema (GH#125)
- Package new document SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.907.0-1" date="1778500800">- Update to 0.907.0
  - Turn off cyclic references by default</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.907.0-2" date="1779364800">- Safely check for JSON::PP in 13-utf8.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.908.0-1" date="1782043200">- Update to 0.908.0 (rhbz#2491093)
  - Fix for OOP interface: improve handling of mapping keys, for example
    numbers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.909.0-1" date="1782993600">- Update to 0.909.0 (rhbz#2496586)
  - OOP interface test: Do not crash on missing JSON::PP dependency
  - OOP interface: Fix for quadmath builds of perl
  - Add YAML::XS::LibYAML back to list of provided modules
  - OOP interface: Add boolean option</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.910.0-1" date="1783080000">- Update to 0.910.0
  - OOP interface: Fix default boolean option (missing default lead to random
    default on some architectures) (GH#133)</changelog>
</package>
<package pkgid="37f552a419cac25db705e9c8ed423de38cf3ac02ad37784f3c6fc088cc5f2f99" name="perl-YAML-Old" arch="noarch">
  <version epoch="0" ver="1.23" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-4" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="35ef22e71730cdeab865d72966d886992c49f104a2e9c76c0409328f0555ef3c" name="perl-YAML-Syck" arch="i686">
  <version epoch="0" ver="1.47" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1760184000">- Update to 1.36
  - Address memory corruption leading to 'str' value being set on empty keys</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1773921600">- Update to 1.37
  Features:
  - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
  Fixes:
  - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
  - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
  - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
  - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
  - Fix dumping of tied hashes (GH#31)
  - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
  - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
  - Fix double-dash YAML parsing (RT#34073, GH#35)
  - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
  - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
  - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
    (GH#40)
  - Fix growing !!perl/regexp objects in round-trips (GH#43)
  - Fix quoted '=' being transformed into 'str' (GH#45)
  - Fix backslash-space escape in double-quoted YAML strings (GH#61)
  - Fix flow sequence comma separator not recognized without trailing space
    (GH#60)
  - Fix wide character warning in DumpFile (GH#28)
  - Fix inline arrays without space after comma (GH#25)
  - Fix: quote strings matching YAML implicit types to prevent round-trip
    failures (GH#26)
  - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
  - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
  - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
  - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
  - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
  - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
  - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
  - Fix: correct $SortKeys POD default from false to true (GH#100)
  - Fix: correct POD documentation errors (GH#103)
  Maintenance:
  - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
  - Silence macOS compiler warnings (GH#92)
  - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
  - Guard stdint.h include in syck_st.h for portability (GH#24)
  - Update ppport.h to 3.68
  - Add regression tests for magical variable dumping (GH#32)
  - CI: modernize GitHub Actions workflow (GH#123, GH#124)
  - CI: add disttest job to validate MANIFEST completeness
- Use %{make_build} and %{make_install}
- Drop workaround for C23 incompatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1774180800">- Update to 1.39
  Bug Fixes:
  - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
    (GH#125, GH#130)
  - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
  - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
  - Fix: guard against NULL type from strtok in tag parsing (GH#135)
  - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
  - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
    (GH#138, GH#139)
  Improvements:
  - Resolve TODO tests for empty/invalid YAML to match actual behaviour
    (GH#127, GH#129)
  Maintenance:
  - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
  - Add comprehensive implicit type resolution test suite (GH#137)
  - Update MANIFEST to include all unit tests
  - Clean up test names to remove unnecessary numbering</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1774267200">- Update to 1.41
  Bug Fixes:
  - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
    strtod() so that floats like -3.14 are not corrupted by double-precision
    rounding artifacts (GH#140, GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1" date="1774612800">- Update to 1.42
  Bug Fixes:
  - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
    perl_syck.h (GH#145)
  - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
  - Fix: Skip %TAG and %YAML directives in document header (GH#151)
  - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
  - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
  - Fix: Remove spurious %type &lt;nodeId&gt; for indent_open in gram.y
    (GH#157, GH#158)
  - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
  Improvements:
  - Implement YAML merge key (&lt;&lt;) support (GH#149)
  Maintenance:
  - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
  - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
  - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
  - Remove unneeded TODO in t/json-basic.t (GH#154)
  - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
  - Do not require a .y file to build YAML::Syck; add brew support for bison
  - Don't ship docs/ directory in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1" date="1775131200">- Update to 1.43
  Bug Fixes:
  - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
  - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
  - Fix: Load() in list context returns empty list for empty/undef input; also
    applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
  - Fix: DumpCode serializes prototype string instead of code body (GH#168)
  - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
    (GH#170)
  - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
    (GH#175, GH#176)
  - Fix: Add TODO guard for eval_pv leak on Perl &lt; 5.14 (GH#179, GH#180)
  - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
  - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
  Improvements:
  - Modernize META_MERGE for CPANTS compliance (GH#162)
  - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
  Maintenance:
  - Restore TODO guard for Dump code leak test on Perl &lt; 5.26 (GH#167)
  - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
  - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1775217600">- Update to 1.44
  Bug Fixes:
  - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
  - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1777291200">- Update to 1.45
  Bug Fixes:
  - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
    base64 encode/decode buffers; also plugs a memory leak (GH#189)
  - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
    no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
  - Fix: Negative float#base60 values produce wrong results; strip sign before
    accumulating and avoid negative zero for portable stringification (GH#191)
  - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
  Maintenance:
  - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
  - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
  - Update README</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-1" date="1779710400">- Update to 1.46
  Bug Fixes:
  - Preserve string nature of numeric-looking values in Dump; pure strings (POK
    only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
    (GH#199, GH#200)
  - Accept trailing commas in flow sequences and mappings ([a, b,] and
    {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
  Maintenance:
  - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
    prior to 5.24 in perldocker containers (GH#197, GH#198)
  - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
    exclude .claude/ from distribution</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1784030400">- Update to 1.47
  Security:
  - Fix four libsyck memory-safety CVEs reachable from the default
    YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
    - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
      caused by signed-char indexing of the decode table on !!binary input
    - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
      between the node and the anchors table
    - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
      newline scan during block-scalar parsing (incomplete-fix follow-on
      to CVE-2025-11683)
    - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
      anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
  - Harden syck_base64dec() to bounds-check each read so it cannot run past a
    non-NUL-terminated input buffer (defense-in-depth for callers passing raw
    buffers; GH#213)
  Bug Fixes:
  - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
    nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
    matching Dump (GH#204)
  - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
    Dump so they roundtrip with ImplicitTyping instead of reloading as plain
    strings (GH#201)
  Maintenance:
  - CI: add an AddressSanitizer job that builds the XS with
    -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
    libsyck memory-safety defects; de-pin the libasan version so it tracks the
    runner's GCC (GH#213)</changelog>
</package>
<package pkgid="d00ba0bd38f4890d51216d2527e4a7ac13e22ec40a0e8190df7ab2dad90836d6" name="perl-YAML-Tiny" arch="noarch">
  <version epoch="0" ver="1.76" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-1" date="1679572800">- Update to 1.74
  - A few documentation tweaks
- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.75-1" date="1734350400">- Update to 1.75 (rhbz#2332503)
  - Fixed regression in %QUOTE (GH#60)
  - Fix version comparison logic for forward compatibility (GH#63)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1734350401">- Update to 1.76
  - Revert change from GH#60: "yes", "y", etc. are not actually booleans (GH#66)</changelog>
</package>
<package pkgid="441369cbc2e28c75874d15257f5c39a6fe0768ee6aa75f57d947d2c2dc245447" name="perl-aliased" arch="noarch">
  <version epoch="0" ver="0.34" rel="25.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1683633600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f378e2bcd8ff1cdb0d5fe4ca84c2223e19d923bc0bc194859848e4f0aea4ed2b" name="perl-autodie" arch="noarch">
  <version epoch="0" ver="2.37" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.35-1" date="1674907200">- Update to 2.35
  - Prepare for 5.38 changes to deprecate smartmatch
  - Remove +x bit from pm and t files
  - CI - Turn off Pod coverage and critic tests below 5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.36-1" date="1675166400">- Update to 2.36
  - Remove the use of ' as a package separator
  - Fix spelling errors in POD</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.37-1" date="1703851200">- Update to 2.37
  - Deprecate smartmatch handling (GH#117)
  - Remove mention of cpanratings.perl.org (GH#118)
  - Fix typo in changelog (GH#119)</changelog>
</package>
<package pkgid="979bd0f2c82e9af8053029b34021f1db350df4783676d49d1619e775df21089d" name="perl-common-sense" arch="i686">
  <version epoch="0" ver="3.7.5" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-12" date="1683201600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-13" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-14" date="1691582400">- Fix FTBFS due to %rpmversion macro being built-in in rpm-4.18.92</changelog>
</package>
<package pkgid="2d60f97323c49fff217366141c26f7e0b215e17a7ed61b690ac4915d6870ee65" name="perl-constant-boolean" arch="noarch">
  <version epoch="0" ver="0.02" rel="37.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-37" date="1685707200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b75736084369a3069637a94d6b955ba264f9c42ccd6af17b05622ceaf57e5ec4" name="perl-namespace-autoclean" arch="noarch">
  <version epoch="0" ver="0.31" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-15" date="1683115200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1728820800">- Update to 0.31
  - Switch from Sub::Identify to Sub::Util (core in modern perls), falling back
    to B.pm as needed</changelog>
</package>
<package pkgid="2a28eec4571fd14e63ad3a16b00b69051a0a6d20d4e17895e163bb63b8c83503" name="perl-namespace-clean" arch="noarch">
  <version epoch="0" ver="0.27" rel="23.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1683115200">- Use SPDX-format license tag
- Drop support for building with perl &lt; 5.14
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="45af553d2a30f1fdcdbe1ed926f69af4c01cc99f2874774bbd8ad2f808ade926" name="perl-parent" arch="noarch">
  <version epoch="1" ver="0.244" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.240-1" date="1676376000">- Update to 0.240
  - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
    deprecated, as ' isn't allowed as package separator in an upcoming version
    of Perl (GH#13)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.241-1" date="1676462400">- Update to 0.241
  - Actually include the changes documented for version 0.240</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.242-1" date="1723636800">- Update to 0.242
  - Don't test for apostrophe as package separator on Perl versions after 5.41
  - Protect against modules changing @_</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.243-1" date="1732881600">- Update to 0.243
  - Reinstate test for apostrophe as package separator, as that package
    separator is allowed again (no code change, only tests have been amended)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.244-1" date="1734091200">- Update to 0.244
  - Update (commented) comparison with $] to use quotes</changelog>
</package>
<package pkgid="00f88d9670e3e1bb08d07efd1733e8c4ce78598debe84cb8e6f93e51ce59321c" name="perl-strictures" arch="noarch">
  <version epoch="0" ver="2.000006" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.000006-16" date="1688558400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="72788d8b2421c738fc0706d8206891aff054bf4fa7ebaa3de665d2742a36b2fe" name="perl-superclass" arch="noarch">
  <version epoch="0" ver="0.003" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-4" date="1688299200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3e59370815984e16a250e318ccc32bf812d1f5946f0330f39eb04d74538adf0c" name="perl-true" arch="i686">
  <version epoch="0" ver="1.0.2" rel="8.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-6" date="1654257600">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-8" date="1685966400">- Use SPDX-format license tag
- Drop support for building with EOL distributions prior to EL-7</changelog>
</package>
<package pkgid="f4203d0ae058a6384cffec36d12fbbd30b07963458ad444bf524c4609a1efbc0" name="perl-version" arch="i686">
  <version epoch="8" ver="0.99.34" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-1" date="1714305600">- Update to 0.9932
  - Add to_decimal and to_dotted_decimal methods
  - Add tuple and from_tuple methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-1" date="1724760000">- Update to 0.9933
  - Fix two warnings in recent code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-519" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.34-1" date="1776081600">- Update to 0.9934
  - Reorder "v" check to avoid forward goto
  - Fix string comparisons with $] to use numeric comparison instead
  - Remove unnecessary shebang in version.pm</changelog>
</package>
<package pkgid="d42ad2fb8c512cce5438d3766fe2a4cee8e13fd30035a7ac69dcf41d71fb17fa" name="php-Smarty" arch="noarch">
  <version epoch="0" ver="3.1.48" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.40-1" date="1642507200">- Update to 3.1.40 (see CHANGELOG.md for details)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.44-1" date="1642507201">- Update to 3.1.44 (see CHANGELOG.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.48-1" date="1680177600">- Update to 3.1.48 (see CHANGELOG.md for details)
- License corrected to LGPL-3.0-or-later</changelog>
</package>
<package pkgid="849e7bc31b4d52d8c7f8aa0cdf757ab4aaedb22b0607711acb49528a62fc1b47" name="plusnet-fttc" arch="noarch">
  <version epoch="0" ver="0.10" rel="3.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-2" date="1651060800">- Add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6d42e72c56d9feeba85465818b946b7cd93637f272c49f957d70bfa5024a4417" name="pptp" arch="i686">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-16.0.cf" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="45caca54b0472278e058e699c7d16797a2e038b4df2369f64c824a68e41bbe3a" name="pptp-setup" arch="i686">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-16.0.cf" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="9be64b1c3abafac726859c7efd0f849b478bd9aab106d050da45cea134a85d0f" name="proftpd" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="70d200e627dffd5d7c910193d2fba783ef14e2e03d32855bb7adb94d64144d9a" name="proftpd-devel" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="4990211428358cedf8bc11a5e24bc3f27f594e31c6ddc14f531f927854550fc8" name="proftpd-ldap" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="faa52c24774be1a3e4add473cfe126780ac4fb84d89cdffd5b1c888dafa5be12" name="proftpd-mysql" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="be08b2fcd393d5b79e3cd85d8a6243abe60d95cc6028721817f9ed4eba9b0aa8" name="proftpd-postgresql" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="c63d0e6c0003005f85ed7a04270b31f0488216c018f5c69826c840d87a1971cb" name="proftpd-proxy" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="f26c91a35bbbfdd0e882682b9610b5a1cc79def969c2b89bbc68348ef0fdbc6d" name="proftpd-sqlite" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="8453570f3dfcb093ab8c0e84561c445cbbfa6ebacd4c61c18fd031648ca0cb2b" name="proftpd-utils" arch="i686">
  <version epoch="0" ver="1.3.9c" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="449de3d329608f245010378e05b9bf0a23d04057b36cc4aa07073dacc728a27e" name="python2-bcrypt" arch="i686">
  <version epoch="0" ver="3.1.7" rel="4.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-3" date="1597665600">- Create python2-bcrypt package from last python-bcrypt package version that
  supported Python 2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-4" date="1658836800">- Use %license unconditionally</changelog>
</package>
<package pkgid="51367983173b6f97b960acd30aee4245da24dcdf418c078d70c522141198e6d5" name="python2-cffi" arch="i686">
  <version epoch="0" ver="1.15.0" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12.3-3" date="1617624000">- Explicitly add python2.7dist(cffi) provide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.15.0-1" date="1648555200">- Update to 1.15.0</changelog>
</package>
<package pkgid="c497e20bdac3658f6d6e8dbd765157ef11cec028584f5990251a67e6063633fe" name="python2-mod_wsgi" arch="i686">
  <version epoch="0" ver="4.9.4" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.9.0-1" date="1631534400">- Update to 4.9.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.9.4-1" date="1680091200">- Update to 4.9.4
- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Avoid use of deprecated provides filter</changelog>
</package>
<package pkgid="dbd3f71213e467c5cf8f3243646e2f37eef27252a780842daa2b2fbb4906ea93" name="python2-nose" arch="noarch">
  <version epoch="0" ver="1.3.7" rel="30.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.7-29" date="1676376000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.7-30" date="1718280000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3f3c2dcb6cf7d89ab0e8aba929248993de2f767512e2f70fb8b0ba535818cff8" name="python2-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="e550d43edf15bdc1dfd3d05faee158fd90c69b22a5a52fceb38c583715df8797" name="python2-pycparser" arch="noarch">
  <version epoch="0" ver="2.20" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-22" date="1617624000">- Explicitly add python2.7dist(pycparser) provide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.20-1" date="1648555200">- Update to 2.20</changelog>
</package>
<package pkgid="588cd4dcc41af4656225b6d56095c9767fc65db64ec62249cd929a30a2de4b04" name="python2-setuptools" arch="noarch">
  <version epoch="0" ver="41.6.0" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 41.6.0-1" date="1680091200">- Update to 41.6.0
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0a7e136d5016ab1726cafc0a35f8cc692537ad24b0d6777acdc4d3ee707cc465" name="python2-six" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16.0-1" date="1680091200">- Update to 1.16.0
  - Port _SixMetaPathImporter to Python 3.10 (GH#341, GH#343, GH#349)
- Note: license is SPDX MIT</changelog>
</package>
<package pkgid="c76d875c5a60f8925b80f585b4635dbcafbd5d8166e5ec007e94893575bb114d" name="python2-xapian" arch="i686">
  <version epoch="0" ver="1.4.20" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.17-2" date="1612267200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-1" date="1615204800">- Update to 1.4.18</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-2" date="1623153600">- Sync with xapian-bindings-1.4.18-2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-3" date="1624881600">- Rebuild with C++ 11.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-4" date="1627300800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-5" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-6" date="1643544000">- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.19-1" date="1648641600">- Update to 1.4.19</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.19-2" date="1655726400">- Sync with xapian-bindings-1.4.19-2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.20-1" date="1659528000">- Update to 1.4.20</changelog>
</package>
<package pkgid="ab12ee269289871eeac68e316670544a481350eb88e3c72f9071633cffebaa8e" name="python3-bcrypt" arch="i686">
  <version epoch="0" ver="3.2.2" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-5" date="1590926400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.2.0-1" date="1597665600">- Update to 3.2.0
  - Added typehints for library functions
  - Dropped support for Python versions less than 3.6 (2.7, 3.4, 3.5)
  - Shipped 'abi3' Windows wheels (requires pip ≥ 20)
- Drop python2 sub-package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.2.2-1" date="1651492800">- Update to 3.2.2
  - Added support for compilation on z/OS
  - The next release of 'bcrypt' with be 4.0 and it will require Rust at
    compile time, for users building from source; the minimum supported Rust
    version will be 1.56.0
  - This will be the final release for which we ship 'manylinux2010' wheels;
    going forward the minimum supported manylinux ABI for our wheels will be
    'manylinux2014'
  - Fixed packaging of 'py.typed' files in wheels so that 'mypy' works
- Use %license unconditionally
- Avoid use of "python setup.py test", which no longer works</changelog>
</package>
<package pkgid="4b4f35bc22d0ce4ac6753fed6ee0e4d883bd2feba27e15ed9756275f411def1a" name="python3-libxml2" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="27f36c2bff637627ded95648475bf4ff0167dd41c7d10c9d920ba8f9e20edbf5" name="python3-passlib+argon2" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="7cdcf89ec8a58ef263cdc6f9cc6a41f70986dda1c7f45f6b2dc367f812551570" name="python3-passlib+bcrypt" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="b007444bd5080ddcc4554523b8e7dc08a29b7ca3b44f55619de410e45c822fa6" name="python3-passlib+totp" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="82858e19f90e7610d08d83fae998b64588a01e859bcd667599d7f0d17132c122" name="python3-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="7f1961243134789d93d8b12233ceca69ba7503fae30ea541eda98805d8673fdc" name="rbldnsd" arch="i686">
  <version epoch="0" ver="0.998b" rel="20.fc36"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-14" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-15" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-16" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-17" date="1739361600">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-18" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-19" date="1758888000">- Fix base template replacement issue (GH#18, GH#19, GH#22, rhbz#2398024)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-20" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="f70fe7bd3f79fd0e1a108654a566c80be85db072261221327b44a42c341ac72c" name="sendmail" arch="i686">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="8f6fcdbe41c5f6574fcb4042e112e0bf7837c3c4d5b968bbaa21fbe97bbaf3d0" name="sendmail-cf" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="7414708fe3e8778d5521670a54720ab328eefaa64b9cc8c126a6890cffa8fd20" name="sendmail-doc" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="06dd1551ac489dfffd118bc247ea2f496496200d2a81389df8cf0b3c7c50fb23" name="sendmail-milter" arch="i686">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="0c1ab49f272dc843b0448324f08f606f5bbdbd913c9a76f9058c3ccda610e87b" name="sendmail-milter-devel" arch="i686">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="2796513b9d16164ea9d250a1e662b16c72c086fed446670f77b48fbb27bcd98b" name="shorten" arch="i686">
  <version epoch="0" ver="3.6.1" rel="5.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.6.1-5" date="1680177600">- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="23e4c614bfd768ba43350c45f3dbddf09e9ef790b68987324535e82320d2fc0f" name="smbldap-tools" arch="noarch">
  <version epoch="0" ver="0.9.11" rel="28.fc36"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-24" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-27" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-28" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="6cd1f02eaf1f083c2b7e95b58001223be309b0b05c52e666882b5d183e01915f" name="smf-sav" arch="i686">
  <version epoch="0" ver="2.1" rel="7.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-6" date="1730289600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-7" date="1761739200">- Build with -DSM_CONF_STDBOOL_H=1 to avoid issues with libmilter API</changelog>
</package>
<package pkgid="298619915b2e32afad7304b2e83f1920d727b973c536fdfc08cf587cf04c01ce" name="smf-spf" arch="i686">
  <version epoch="0" ver="2.5.1" rel="2.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-1" date="1690027200">- Switch upstream to https://github.com/jcbf/smf-spf/
- Update to 2.5.1 (see README.md for details)
- Don't package ChangeLog, which refers to original unmaintained version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-2" date="1744632000">- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)
- Build with -std=gnu17 due to issues with milter API (#2336394)</changelog>
</package>
<package pkgid="d41c5e0079afd13ac16dc509ec4b1a7d82893cf519820aa5c55583eed1ef6630" name="spamass-milter" arch="i686">
  <version epoch="0" ver="0.4.0" rel="30.fc36"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="0c8cf1b7de83d458568bcabb60285435d96e0eb2f1109cfaf869f6628a647104" name="spamass-milter-postfix" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="30.fc36"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="fb4afa5df345b04784142cfbdb1c65942ec6107f96ea432448dfe25f88adec6f" name="symlinks" arch="i686">
  <version epoch="0" ver="1.7" rel="2.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-2.0.cf" date="1744632000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0f67174ece909febc687acef4574d0b5e33032cfa4cd0ab4304e3babaae32d69" name="treescan" arch="noarch">
  <version epoch="0" ver="4.81" rel="1.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.78-1" date="1662465600">- Update to 4.78
  - Add IO::AIO::mount and IO::AIO::umount
  - Add a bunch of symbols from sys/mount.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-1" date="1664193600">- Update to 4.79
  - The autoconf result of the mount check was not used, so it failed to
    compile on most systems
  - Fix format string usage for croak in extract_stringvec function</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-2" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
</package>
<package pkgid="410bcc68585c93b9d8b375f518e56a73757cee95f86cc45ee8ba7c67dadabd2c" name="tzip" arch="i686">
  <version epoch="0" ver="1.12" rel="14.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-14" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use distribution linker flags</changelog>
</package>
<package pkgid="eed5cfa65e8d0947d9b17cd5689f27222c1f96ebabe0e70b3af45bcecbf3e10a" name="ud" arch="i686">
  <version epoch="0" ver="0.7.1" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.1-10" date="1744632000">- Drop redundant initscript patch
- Always assume signal handlers are void functions (configure test gets this
  wrong)
- Use systemd scriptlet macros</changelog>
</package>
<package pkgid="846210562df6f8277118f626b45093bfd427744ef562ebcd76b7b01dfd53e3c1" name="unrar" arch="i686">
  <version epoch="0" ver="7.23" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.23-1.0.cf" date="1782993600">- Update to 7.23
- Update debian files to 7.2.6-1</changelog>
</package>
<package pkgid="5b628f0c1f9d7ee12f4f2daf875f36d4058f7d4206b4cead0e7711138868351a" name="weblint++" arch="noarch">
  <version epoch="0" ver="1.15" rel="10.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.15-10" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="eeb37e5c90111fc006e5e1cea69d1565def7d6f2dc36df615c42f90822930337" name="weblint" arch="noarch">
  <version epoch="0" ver="1.9.3" rel="16.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.3-16" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="8aa29601d38a8a6e34465fe40d5773e0bfdca6d4e5d8fc4bd598ffc44231a8e5" name="xv" arch="i686">
  <version epoch="0" ver="6.2.0" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.0-1.0" date="1719403200">- Update to 5.2.0
  - Made some improvements to WEBP support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1.0" date="1723550400">- Update to 6.0.0
  - Add basic HiDPI support
  - Improve the compatibility of the source code with more modern C standards
    (e.g., C23)
  - Fix the build with link-time optimization (GH#25)
  - Fix many other bugs
- Package NEWS.txt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.1-1.0" date="1727179200">- Update to 6.0.1
  - xvjpeg.c, xvpng.c: Fix gcc warnings on -Wclobbered
  - xvjpeg.c: Fix a bad memory access on jpegs with inverted data
  - Fix xvtext.c overwrite exposed by the link-time optimization fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.2-1.0" date="1728993600">- Update to 6.0.2
  - Added -isize option to control the icon size in the browser: the syntax is
    -isize &lt;width&gt; or -isize &lt;width&gt;x&lt;height&gt;
    If the height is omitted, it defaults to the width * 3/4
  - xv now checks the XV_OPTIONS environment variable before reading the
    command line; xv splits it into words and parses it like command line
    options
    Use XV_OPTIONS to set default options</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.4-1.0" date="1755864000">- Update to 6.0.4
  - Updated URLs for the xv website
  - Fix crash when freeing JPEG comments (GH#37)
- Drop redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1.0" date="1764590400">- Update to 6.1.0
  - Add support for EXIF orientation tags (GH#40)
  - Add support for depth 30, or 10bit/colour, for compatibility with modern
    graphics stack (GH#39)
  - Fix wasJpegUp → wasJp2kUp (GH#38)
- Build with EXIF (orientation) and XRANDR support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.2.0-1.0" date="1772452800">- Update to 6.2.0
  - Make EXIF orientation support generic rather than being tied to JPEG
  - Add orientation support to WebP images
  - Add sample WebP image with EXIF orientation flags set (not packaged)</changelog>
</package>
<package pkgid="9f5d4f31fcea33afae97c5768c1e73701ad65c2e73958141b8dd199e3ba85b85" name="xv-doc" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="1.0.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.0-1.0" date="1719403200">- Update to 5.2.0
  - Made some improvements to WEBP support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1.0" date="1723550400">- Update to 6.0.0
  - Add basic HiDPI support
  - Improve the compatibility of the source code with more modern C standards
    (e.g., C23)
  - Fix the build with link-time optimization (GH#25)
  - Fix many other bugs
- Package NEWS.txt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.1-1.0" date="1727179200">- Update to 6.0.1
  - xvjpeg.c, xvpng.c: Fix gcc warnings on -Wclobbered
  - xvjpeg.c: Fix a bad memory access on jpegs with inverted data
  - Fix xvtext.c overwrite exposed by the link-time optimization fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.2-1.0" date="1728993600">- Update to 6.0.2
  - Added -isize option to control the icon size in the browser: the syntax is
    -isize &lt;width&gt; or -isize &lt;width&gt;x&lt;height&gt;
    If the height is omitted, it defaults to the width * 3/4
  - xv now checks the XV_OPTIONS environment variable before reading the
    command line; xv splits it into words and parses it like command line
    options
    Use XV_OPTIONS to set default options</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.4-1.0" date="1755864000">- Update to 6.0.4
  - Updated URLs for the xv website
  - Fix crash when freeing JPEG comments (GH#37)
- Drop redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1.0" date="1764590400">- Update to 6.1.0
  - Add support for EXIF orientation tags (GH#40)
  - Add support for depth 30, or 10bit/colour, for compatibility with modern
    graphics stack (GH#39)
  - Fix wasJpegUp → wasJp2kUp (GH#38)
- Build with EXIF (orientation) and XRANDR support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.2.0-1.0" date="1772452800">- Update to 6.2.0
  - Make EXIF orientation support generic rather than being tied to JPEG
  - Add orientation support to WebP images
  - Add sample WebP image with EXIF orientation flags set (not packaged)</changelog>
</package>
<package pkgid="6a96f38254eefef908511ae6eba5276398e4fd27104338e5a2dd697fe8727e62" name="xz" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="4cc983c88a4c8447105ec2c06046efd5635baab6cb4bf85d1afe1016c269f955" name="xz-devel" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="fe8a02937912b700bc98722957ba52b1afc0e568d70938c2971548a99a4916c3" name="xz-libs" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="7dea01640081bcc5dbd2909c611209b88cb03f009a3890d645e5b6e348993536" name="xz-lzma-compat" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="258984bce763f742cbf22556de878d6af169727e7186c099d730316cee9851c3" name="xz-static" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc36"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
</otherdata>