Packages changed:
  Mesa (26.1.3 -> 26.1.4)
  Mesa-drivers (26.1.3 -> 26.1.4)
  MicroOS-release (20260701 -> 20260707)
  NetworkManager
  SDL3 (3.4.10 -> 3.4.12)
  aardvark-dns (1.17.1 -> 2.0.0)
  at-spi2-core (2.60.4 -> 2.60.5)
  attr (2.5.2 -> 2.6.0)
  aurorae6 (6.7.1 -> 6.7.2)
  baloo-widgets (26.04.2 -> 26.04.3)
  blog (2.42 -> 2.45)
  bluedevil6 (6.7.1 -> 6.7.2)
  breeze6 (6.7.1 -> 6.7.2)
  breeze6-gtk (6.7.1 -> 6.7.2)
  cloud-init
  container-selinux (2.249.0 -> 2.250.0)
  dhcp (4.4.2.P1 -> 4.4.3.P1)
  discover6 (6.7.1 -> 6.7.2)
  dolphin (26.04.2 -> 26.04.3)
  falkon (26.04.2 -> 26.04.3)
  ffmpegthumbs (26.04.2 -> 26.04.3)
  flatpak-kcm6 (6.7.1 -> 6.7.2)
  fwupd (2.1.5 -> 2.1.6)
  gdk-pixbuf (2.44.6 -> 2.44.7)
  glibmm2_4 (2.66.8 -> 2.66.9)
  glycin-loaders (2.1.1 -> 2.1.5)
  grub2
  gtk3
  gzip
  hwdata (0.408 -> 0.409)
  json-c (0.18 -> 0.19)
  kaccounts-integration (26.04.2 -> 26.04.3)
  kaccounts-providers (26.04.2 -> 26.04.3)
  kactivitymanagerd6 (6.7.1 -> 6.7.2)
  kate (26.04.2 -> 26.04.3)
  kde-cli-tools6 (6.7.1 -> 6.7.2)
  kde-gtk-config6 (6.7.1 -> 6.7.2)
  kdecoration6 (6.7.1 -> 6.7.2)
  kdegraphics-mobipocket (26.04.2 -> 26.04.3)
  kdegraphics-thumbnailers (26.04.2 -> 26.04.3)
  kdenetwork-filesharing (26.04.2 -> 26.04.3)
  kdeplasma6-addons (6.7.1 -> 6.7.2)
  kdialog (26.04.2 -> 26.04.3)
  kernel-source (7.0.12 -> 7.1.2)
  kgamma6 (6.7.1 -> 6.7.2)
  kglobalacceld6 (6.7.1 -> 6.7.2)
  kinfocenter6 (6.7.1 -> 6.7.2)
  kio-extras (26.04.2 -> 26.04.3)
  kio-gdrive (26.04.2 -> 26.04.3)
  kmenuedit6 (6.7.1 -> 6.7.2)
  knighttime6 (6.7.1 -> 6.7.2)
  konsole (26.04.2 -> 26.04.3)
  kpipewire6 (6.7.1 -> 6.7.2)
  kpmcore (26.04.2 -> 26.04.3)
  kquickimageeditor6 (0.6.2 -> 0.6.2.1)
  krb5
  kscreen6 (6.7.1 -> 6.7.2)
  kscreenlocker6 (6.7.1 -> 6.7.2)
  ksshaskpass6 (6.7.1 -> 6.7.2)
  ksystemstats6 (6.7.1 -> 6.7.2)
  kwalletmanager (26.04.2 -> 26.04.3)
  kwayland-integration6 (6.7.1 -> 6.7.2)
  kwayland6 (6.7.1 -> 6.7.2)
  kwin6 (6.7.1 -> 6.7.2)
  layer-shell-qt6 (6.7.1 -> 6.7.2)
  libglycin (2.1.1 -> 2.1.5)
  libjansson (2.15.0 -> 2.15.1)
  libkdcraw (26.04.2 -> 26.04.3)
  libkexiv2-qt6 (26.04.2 -> 26.04.3)
  libkgapi6 (26.04.2 -> 26.04.3)
  libkscreen6 (6.7.1 -> 6.7.2)
  libksysguard6 (6.7.1 -> 6.7.2)
  libplasma6 (6.7.1 -> 6.7.2)
  libpsl (0.21.5 -> 0.22.0)
  libwacom (2.18.0 -> 2.19.0)
  lilv (0.26.4 -> 0.28.0)
  live-langset-data
  milou6 (6.7.1 -> 6.7.2)
  netavark (1.17.2 -> 2.0.0)
  pam
  pam-full-src
  partitionmanager (26.04.2 -> 26.04.3)
  pinentry (1.3.2 -> 1.3.3)
  pinentry-gui (1.3.2 -> 1.3.3)
  plasma5support6 (6.7.1 -> 6.7.2)
  plasma6-activities (6.7.1 -> 6.7.2)
  plasma6-activities-stats (6.7.1 -> 6.7.2)
  plasma6-browser-integration (6.7.1 -> 6.7.2)
  plasma6-desktop (6.7.1 -> 6.7.2)
  plasma6-integration (6.7.1 -> 6.7.2)
  plasma6-nm (6.7.1 -> 6.7.2)
  plasma6-openSUSE
  plasma6-pa (6.7.1 -> 6.7.2)
  plasma6-print-manager (6.7.1 -> 6.7.2)
  plasma6-systemmonitor (6.7.1 -> 6.7.2)
  plasma6-workspace (6.7.1 -> 6.7.2)
  polkit-kde-agent-6 (6.7.1 -> 6.7.2)
  powerdevil6 (6.7.1 -> 6.7.2)
  python-alembic (1.18.4 -> 1.18.5)
  python-greenlet
  qqc2-breeze-style6 (6.7.1 -> 6.7.2)
  qrca (26.04.2 -> 26.04.3)
  rpm
  sddm-kcm6 (6.7.1 -> 6.7.2)
  signon-kwallet-extension (26.04.2 -> 26.04.3)
  spectacle (6.7.1 -> 6.7.2)
  systemd (260.2 -> 260.3)
  systemsettings6 (6.7.1 -> 6.7.2)
  taglib (2.2.1 -> 2.3)
  tbb (2022.3.0 -> 2023.0.0)
  upower (1.91.2 -> 1.91.3)
  vim (9.2.0725 -> 9.2.0780)
  xdg-desktop-portal-kde6 (6.7.1 -> 6.7.2)
  xdg-user-dirs

=== Details ===

==== Mesa ====
Version update (26.1.3 -> 26.1.4)
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1

- Update to 26.1.4 bugfix release
  - -> https://docs.mesa3d.org/relnotes/26.1.4

==== Mesa-drivers ====
Version update (26.1.3 -> 26.1.4)
Subpackages: Mesa-dri Mesa-vulkan-device-select libvulkan_lvp

- Update to 26.1.4 bugfix release
  - -> https://docs.mesa3d.org/relnotes/26.1.4

==== MicroOS-release ====
Version update (20260701 -> 20260707)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== NetworkManager ====
Subpackages: NetworkManager-bluetooth NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0

- Modify nfs: Exit gracefully if /etc/fstab is missing
  (bsc#1185815).

==== SDL3 ====
Version update (3.4.10 -> 3.4.12)

- Update to release 3.4.12
  * Improved support for external surfaces under Wayland
  * Fixed visual artifacts when switching render targets with the
    Vulkan renderer
  * Fixed crash rendering YUV textures on NVIDIA drivers with the
    Vulkan renderer
  * Added SDL_HINT_ENABLE_STEAM_SCREEN_KEYBOARD to customize
    behavior on Steam Deck and Steam Machine
  * Added hotplug detection support when using libusb for HIDAPI
    controllers
  * Fixed truncated long text input sequences when using
    sdl2-compat

==== aardvark-dns ====
Version update (1.17.1 -> 2.0.0)

- Update to version 2.0.0:
  * This is major release to keep the version aligned with netavark,
    however it brings no breaking changes
  * The MSRV has been bumped to v1.88
  * Dependency updates

==== at-spi2-core ====
Version update (2.60.4 -> 2.60.5)
Subpackages: libatk-1_0-0 libatk-bridge-2_0-0 libatspi0 typelib-1_0-Atk-1_0 typelib-1_0-Atspi-2_0

- Update to version 2.60.5:
  + Fix a possible crash in atk_bridge_adaptor_cleanup.
  + Attempt to fix event listeners still being wrongly deregistered
    in some cases.

==== attr ====
Version update (2.5.2 -> 2.6.0)
Subpackages: libattr1

- Update to 2.6.0:
  Major Issues Fixed:
  - The libacl library functions acl_get_file(), acl_set_file(),
    acl_extended_file(), and acl_delete_def_file() take a pathname argument
    and follow symbolic links.  When a privileged user calls one of those
    functions, an attacker that controls a pathname component can replace a
    file or directory with a symbolic link and redirect the operation to a
    different file.  This can lead to local privilege escalation.
    The library functions cannot be fixed without breaking compatibility; the
    described behaviour is by design.
    Instead, version 2.4.0 of the acl package introduces the additional
    functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and
    acl_delete_def_file_at().  These functions each take a dirfd file
    descriptor argument and an at_flags argument and accept the
    AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags.  Use these functions to
    control when to follow symbolic links.
    In addition, the libacl functions acl_get_fd(), acl_set_fd(), and
    acl_extended_fd() functions always operate on the access ACL; the library
    previously did not offer a way to operate on the default ACL of a directory
    file descriptor.  The new functions remove that restriction.
    It will be up to each individual program to start using these new library
    functions where appropriate.
  - When walking directory trees, the getfacl, setfacl, chacl, and getfattr
    utilities constructed the full pathname of each file in the tree
  and use that
    pathname to access the file.  When a privileged user used those utilities,
    an attacker that controlled a pathname component could replace a
  directory with
    a symbolic link and redirect the operation to a different file, leading to
    a local privilege escalation.
    This is fixed by using directory file descriptors and operating relative to
    those directory file descriptors.
  - When resolving the final pathname component, the getfacl, setfacl, chacl,
    getfattr, and setfattr utilities in some cases used functions that resolve
    symbolic links.  This includes the above mentioned libacl functions, but
    also stat(), chmod(), and chown().
    This is fixed by using symlink-safe functions throughout the code.
  - When restoring a backup, the setfacl and setfattr utilities read the full
    pathnames of files from the backup.  When those pathnames were resolved,
    pathname components that are symbolic links were traversed.  An attacker
    that controlled a pathname component could replace it with a symbolic link,
    causing a privileged user to operate on a file other than the one intended.
    This could lead to the same kind of local privilege escalation as discussed
    before.
    This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the
    directory components of a pathname, but see Compatibility Notes below for
    the details.
  Minor Issues Fixed:
  - When a symbolic link was specified on the command line but symbolic link
    traversal was disabled using option -P (--physical), the getfacl and
    setfacl utilities previously silently ignored the symlink.  Now, an ELOOP
    ("Too many levels of symbolic links") error will result instead.
  - acl_delete_entry() now verifies that the specified entry belongs to the
    specified acl.
  - Numeric uids and gids that cannot be represented in types uid_t and gid_t
    are checked more carefully and invalid numbers are rejected.
  - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry
    several times when the size of an ACL grows unexpectedly; previously, they
    only grew the allocated buffer once before giving up.
  - When passed a directory file descriptor, function perm_copy_fd() didn't
    copy the default ACL from one directory to the other.  It now does.
  - setfacl --restore accidentally ignored leading whitespace in filenames.  It
    no longer does.
  - setfacl --restore accidentally called chmod() when in --test mode.  It no
    longer does.
  - When the setfattr --restore option was used multiple times, a buffer was
    accessed after being freed. This no longer happens.
  - When the setfattr -h (--no-dereference) option was given after --restore,
    it was ignored.  Now, the options can be passed in any order.
  - The -h (--no-dereference) option of getfattr prevented getfattr from
    recursing into "symbolic link directories".  This is wrong.  When dirlink
    is a symbolic link that refers to a directory, "getfattr -Rh
  dirlink" will now
    visit that directory.  The -P (--physical) option can be used to prevent
    that.
  - Similarly, when a symbolic link referring to a directory was specified on
    the getfacl or setfacl command line, the -R option did not cause that
    directory to be visited.  This has been fixed so that those directories
    will now be visited.  The -P (--physical) option can be used to prevent
    that.

==== aurorae6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== baloo-widgets ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- Changes since 26.04.2:
  * tagsfileitemaction: fix crash on empty selection (kde#521325)

==== blog ====
Version update (2.42 -> 2.45)
Subpackages: libblogger2

- Update to version 2.45
  Fix early boot LUKS prompt on s390x and resolve memory corruptions
  This update addresses several critical issues in the early boot phase,
  especially on s390x architectures, and hardens the daemon's architecture:
  - Initrd/Dracut: Properly include `systemd-ask-password-blog.path` in
    sysinit.target.wants during the initrd phase to ensure LUKS password
    prompts are captured early in the zipl phase.
  - Systemd Units: Drop restrictive `ConditionKernelCommandLine=!plymouth.enable=0`
    to prevent the agent from being disabled by standard mainframe boot parameters.
  - Memory Corruption: Fix a critical heap corruption by renaming the conflicting
    `alignof()` macro to `ALIGNED_SIZEOF()` and zeroing allocated memory for
    `struct request` (memset) to prevent reading uninitialized pointers #5.
  - Kernel Command Line: Improve `parse_cmdline()` to support boolean parameters
    without an explicit value (e.g., `blog.silent` defaults to `blog.silent=1`).
  - New Features: Introduce `blog.silent` to suppress console I/O and `blog.coldboot`
    to explicitly trigger the early coldstart password query.
  - Lifecycle: Switch `KillMode=none` to `KillMode=mixed` to comply with modern
    systemd process lifecycle management.
  Fixes: gh#bitstreamout/showconsole#5
  Fixes: gh#bitstreamout/showconsole#6
  Fixes: bsc#1264176
- Update to version 2.44
  Harden blog and use shims units to handle plymouth
  Disable coldstart requests via epoll
  Avoid handling fd twice in epoll loop
- Correct latest changes of 2.43
- Update to version 2.43
  Make sure that if blog is running it is identified as plymouth Latest
  also add conflicts to systemd-ask-password-console units in the
  systemd-ask-password-blog units. This should avoid conflicting password
  agents asking the same question in s390x.

==== bluedevil6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== breeze6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-wallpapers

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== breeze6-gtk ====
Version update (6.7.1 -> 6.7.2)
Subpackages: gtk3-metatheme-breeze6 metatheme-breeze6-common

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== cloud-init ====

- Re-add cloud-init-write-routes.patch (bsc#1267422) incorrectly dropped

==== container-selinux ====
Version update (2.249.0 -> 2.250.0)

- Update to version 2.250.0:
  * Allow rpmdb to manage files on mounted container filesystems
  * Add the container_runtime_signull() interface
  * give container_domain perms on container_file_t fifo_files
  * Suppress mmap_zero denials for container_runtime_t
  * rpm: Require policycoreutils >= 3.10 for policydb version 24 support
  * Add the container_spc_signull() interface
  * Allow spc_t execstack and execmem (bsc#1268490)
- Drop allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch: included upstream
- Introduce container_can_execstack boolean for older Java applications
  and allow execmem (bsc#1268490)
  - Add patch: allow-spc_t-execstack-via-boolean-and-execmem-bsc-1268490.patch

==== dhcp ====
Version update (4.4.2.P1 -> 4.4.3.P1)
Subpackages: dhcp-client

- Update dhcrelay script and service.
  Due to some leftover calls to sysvinit tools the script no longer
  worked. Now the script is a lot leaner and only implements the
  sysconfig arg parsing and makes it more of a native systemd
  service.
  [bsc#1269228]
- Update to version 4.4.3-P1:
  * Corrected reference count leak in leasequery packets (CVE-2022-2928).
  * Corrected memory leak in FQDN option unpacking (CVE-2022-2929).
  * Added OMAPI timed function calls.
  * Updated BIND libraries to version 9.11.36.
  * Added support for DHCPv4 option v6-only-preferred (RFC 8925).
- Drop obsolete patches already included in version 4.4.3-P1:
  * dhcp-CVE-2022-2928.patch
  * dhcp-CVE-2022-2929.patch
- Refresh patches:
  * 0009-dhcp-4.2.6-close-on-exec.patch
  * 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch
  * 0016-infiniband-support.patch

==== discover6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-notifier

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== dolphin ====
Version update (26.04.2 -> 26.04.3)
Subpackages: dolphin-part libdolphinvcs6

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- Changes since 26.04.2:
  * search/chip: Draw chip with QStyle instead of hardcoding Breeze
  * viewproperties: ensure not to remove defaults view properties

==== falkon ====
Version update (26.04.2 -> 26.04.3)
Subpackages: falkon-kde

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- Changes since 26.04.2:
  * Drop QTEST_DISABLE_KEYPAD_NAVIGATION from tests

==== ffmpegthumbs ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== flatpak-kcm6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- No code changes since 6.7.1

==== fwupd ====
Version update (2.1.5 -> 2.1.6)
Subpackages: libfwupd3 typelib-1_0-Fwupd-2_0

- Update to version 2.1.6:
  + This release adds the following features:
  - Add --filter-protocol to fwupdmgr and fwupdtool
  - Add a new HSI attribute for coreboot verified boot
  - Add hashes for the latest DBX for offline machines
  - Allow parsing Hayden Bridge Thunderbolt firmware
  - Handle HPE Redfish reset-required updates
  - Ignore efivar free space on VMWare, GCE and EC2 VMs
  - Prevent FwupdClient from downloading the same file multiple times
  - Split UEFI Memory Protection HSI from NX Compat
  + This release fixes the following bugs:
  - Avoid an integer overflow in the ifwi-cpd manifest length check
  - Avoid truncating the AMD Kria FRU board area offset
  - Block dbx updates on ASUSTeK GL553VD
  - Check SMEE hardware bit directly for AMD SME detection
  - Create the ESP OS directory if not found
  - Detect the BCR device on Celeron LPC SPI controllers
  - Fall back to a binary firmware when no specific MTD image type is set
  - Fix AI table clear behavior of the elantp boot code.
  - Fix errors with fwupd-refresh service not working properly
  - Fix Genesys GL32xx device locker crash due to argument mismatch
  - Fix installing KEK updates when using snapd by sending the correct blob
  - Fix integer underflow when Elan firmware is smaller than one page
  - Fix possible NULL pointer dereference when updating SteelSeries firmware
  - Fix the display of the HP UEFI db certificate
  - Improved usi-dock progress reporting behavior
  - Increase the parser item limit from 100 to 1000 for large KEKs
  - Log out of the Redfish session when required on HPE hardware
  - Only show 'authenticating' after a short delay
  - Re-process the device metadata when required after all devices are added
  - Require sealed memfd input to prevent possible TOCTOU attacks
  - Sanitise the Jabra GNP device version in a more secure way
  - Validate raydium-tp buffer size before direct index access
  - Validate that Lenovo dock device-reported program sizes are valid
  + This release adds support for the following hardware:
  - Lenovo dual-bank accessory dongle and paired peripherals

==== gdk-pixbuf ====
Version update (2.44.6 -> 2.44.7)
Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0

- Update to version 2.44.7:
  + xpm: Fix loading the xpm module if built-in
  + glycin:
  - Fix the build on 32bit
  - Use fwrite to avoid problems with saving
  - Add signature for webp
  - Make filename tricks work in pid namespaces
  + Updated translations.

==== glibmm2_4 ====
Version update (2.66.8 -> 2.66.9)

- Update to version 2.66.9:
  + Documentation:
  - Remove obsolete FSF (Free Software Foundation) address
  - README.win32.md: Mention Visual Studio 2026, update build
    info
  - NMake Makefiles: Update build info again
  + Build:
  - Meson build: Make Visual Studio 2026 builds distinct
  - NMake Makefiles:
    . Make Visual Studio 2026 builds distinct
    . Reorganize, fix, and clean up a bit
    . Make m4 detection more flexible and robust
    . Make build process more robust
    . More consolidations
    . Update gmmproc install location
    . NMake Makefiles: Build generate_defs_[glib|gio]
  - Meson build: Don't require the 'dot' command when creating
    documentation with Doxygen.

==== glycin-loaders ====
Version update (2.1.1 -> 2.1.5)

- Update to version 2.1.5:
  + Fixed: image-rs/jpeg: Support RGB for editing. There are
    actually images that don't use ycbcr.

==== grub2 ====
Subpackages: grub2-arm64-efi grub2-common grub2-snapper-plugin

- grub2.spec: Use unnumbered patch tag
  https://rpm.org/docs/4.20.x/manual/spec.html#patch

==== gtk3 ====
Subpackages: gtk3-data gtk3-schema gtk3-tools libgtk-3-0 typelib-1_0-Gtk-3_0

- Add gtk3-fix-xi2-xatom.patch: Fix wrong display when handling xi2
  xatom. (bsc#1269225, glgo#GNOME/gtk!10105)

==== gzip ====

- Add CVE-2026-41991.patch: fix insecure temporary file
  handling in the gzexe utility (and zdiff) when the mktemp
  utility is not available in the user's PATH. Backport of upstream commit
  4e6f8b24ab823146ab8776f0b7fe486ab34d4269.
  (CVE-2026-41991, bsc#1269622)

==== hwdata ====
Version update (0.408 -> 0.409)

- Update to version 0.409:
  * Update pci, usb and vendor ids

==== json-c ====
Version update (0.18 -> 0.19)

- Add no-xxd.patch and bring back the full testsuite.
- Name the -devel and -doc subpackages based on the SRPM and
  nothing else.
- Drop xxd BuildRequires to break an OBS build cycle; exclude the
  test_json_parse_cli test (its only consumer) from %check.
- Update to 0.19:
  New features
  - -----------
  * Add support for Commodore Amiga and MorphOS
  * Allow builds with CMake 4 - sync minimum version across all
    CMakeLists.txt files
  * Update openssl command to work for newer versions of openssl.
  * Add support for building json-c with meson
  * Support MSVC in packages that use GNU Autoconf.
  * Add VERSIONINFO to libjson-c.dll
  * Make json_tokener_free(NULL) a no-op, to simplify cleanup paths.
  * Explicitly handle NaN values when converting to int
  * Set errno=RANGE in json_object_get_int/int64/uint64() when the
    source value can't be represented in the target type.
  * Make json_parse a bit more useful by adding -u (validate UTF8)
    and -P (specify arbitrary tokener parse flags), and read from
    stdin if no filename is provided.
  * Fix the apps/json_parse "-s" (strict) option so it actually does
    something, and default to non-strict.
  Significant changes and bug fixes
  - --------------------------------
  * Issue #867 - also disallow control characters in keys in
    JSON_TOKENER_STRICT mode
  * Issue #875: cast to unsigned char so bytes above 0x7f aren't
    interpreted as negative, which was causing the strict-mode
    control characters check to incorrectly trigger.
  * Issue #881: don't allow json_tokener_new_ex() with a depth < 1
  * Fix linkhash breaking -std=c89
  * Fixing Cmake build when using clang-cl, avoids errors about
    redefining existing symbols
  * Fix AIX build failure - Add CMake detection for getopt.h
  * Fix bug involving supplemental code points that look like high
    surrogates
  * Fix runtime issue with test_util_file.c in Windows (add O_BINARY)
  * Fix macro WIN32_LEAN_AND_MEAN redefined
  * Issue #914: Fix Memory usage regression due to newlocale() on
    macOS
  * Issue #916: Fix OOM via large array index in json_pointer_set
  * Issue #923: Avoid stack recursion in json_object_put()
  * Issue #927: CVE-2026-9146 - update json_object_iterator
    documentation
  * Issue #929: CVE-2026-11322 - fix information disclosure bug in
    apps/json_parse (not installed by default)
  * Issue #930: fix locale-dependent strtod in json_object_get_double
  * Issue #931: deep copy values in json_patch copy op to avoid
    aliasing and cycles

==== kaccounts-integration ====
Version update (26.04.2 -> 26.04.3)
Subpackages: libkaccounts6-2

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kaccounts-providers ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kactivitymanagerd6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kate ====
Version update (26.04.2 -> 26.04.3)
Subpackages: kate-plugins

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kde-cli-tools6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * kstart: Unset desktop file name (kde#521679)
  * Update version for new release 6.7.2

==== kde-gtk-config6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: kde-gtk-config6-gtk3

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kdecoration6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libkdecorations3-6 libkdecorations3private2

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kdegraphics-mobipocket ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kdegraphics-thumbnailers ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kdenetwork-filesharing ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kdeplasma6-addons ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * [Vietnamese Lunar Calendar] Fix midnight JDE rounding in getLocalDayIndex (kde#522099)
  * applets/colorpicker: Fix sizing
  * Update version for new release 6.7.2
- Enable Kameleon QMK integration, got whitelisted

==== kdialog ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kernel-source ====
Version update (7.0.12 -> 7.1.2)
Subpackages: kernel-64kb kernel-default

- Update
  patches.kernel.org/7.1.1-006-arm64-errata-Mitigate-TLBI-errata-on-various-Ar.patch
  (bsc#1012628 CVE-2026-53354).
- Update
  patches.kernel.org/7.1.2-004-agp-amd64-Fix-broken-error-propagation-in-agp_a.patch
  (bsc#1012628 CVE-2026-53325 bsc#1269726).
  suse-add-cves
- commit 992f18c
- KVM: x86/tdx: Do not print error message on non-present feature
  (bsc#1270053).
- commit 15c3ef6
- Update
  patches.kernel.org/7.1.1-001-fs-fcntl-fix-SOFTIRQ-unsafe-lock-order-in-fasyn.patch
  (bsc#1012628 CVE-2026-52946 bsc#1269113).
- commit 9476022
- Linux 7.1.2 (bsc#1012628).
- virtiofs: fix UAF on submount umount (bsc#1012628).
- media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
  (bsc#1012628).
- ksmbd: reject non-VALID session in compound request branch
  (bsc#1012628).
- drivers/base/memory: set mem->altmap after successful device
  registration (bsc#1012628).
- serial: 8250_dw: unregister 8250 port if clk_notifier_register()
  fails (bsc#1012628).
- serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is
  zero (bsc#1012628).
- vc_screen: fix null-ptr-deref in vcs_notifier() during
  concurrent vcs_write (bsc#1012628).
- crypto: qat - remove unused character device and IOCTLs
  (bsc#1012628).
- iio: adc: ti-ads1298: add bounds check to pga_settings index
  (bsc#1012628).
- iio: light: veml6075: add bounds check to veml6075_it_ms index
  (bsc#1012628).
- agp/amd64: Fix broken error propagation in agp_amd64_probe()
  (bsc#1012628).
- Revert "NFSD: Defer sub-object cleanup in export put callbacks"
  (bsc#1012628).
- fuse: re-lock request before replacing page cache folio
  (bsc#1012628).
- io_uring/net: Avoid msghdr on op_connect/op_bind async data
  (bsc#1012628).
- commit 8d2f9d1
- Update config files.
  Enable PSI measurement (jsc#PED-15418).
  Align with upstream default and allow simpler usage of PSI data.
- commit 1f56042
- Refresh
  patches.suse/apparmor-don-t-audit-files-pointing-to-aa_null.dentr.patch.
- Refresh
  patches.suse/apparmor-fix-uninitialised-pointer-passed-to-audit_l.patch.
- Refresh
  patches.suse/apparmor-fix-use-after-free-in-rawdata-dedup-loop.patch.
- Refresh
  patches.suse/ima-return-error-early-if-file-xattr-cannot-be-changed.patch.
  Update upstream status by: ./scripts/series_sort -u
- commit 594ea34
- Refresh
  patches.suse/ACPICA-Unbreak-tools-build-after-switching-over-to-s.patch.
  Update upstream status.
- commit c4d22cc
- selftests/bpf: Tolerate missing files during install
  (poo#202224).
- selftests/bpf: Provide weak definitions for cross-test functions
  (poo#202224).
- selftests/bpf: Tolerate benchmark build failures (poo#202224).
- selftests/bpf: Allow test_progs to link with a partial object
  set (poo#202224).
- selftests/bpf: Skip tests whose objects were not built
  (poo#202224).
- selftests/bpf: Tolerate test file compilation failures
  (poo#202224).
- selftests/bpf: Make skeleton headers order-only prerequisites
  of .test.d (poo#202224).
- selftests/bpf: Avoid rebuilds when running emit_tests
  (poo#202224).
- selftests/bpf: Tolerate BPF and skeleton generation failures
  (poo#202224).
- selftests/bpf: Fix test_kmods KDIR to honor O= and distro
  kernels (poo#202224).
- selftests/bpf: Add BPF_STRICT_BUILD toggle (poo#202224).
- commit 58110d9
- ACPICA: Unbreak tools build after switching over to
  strscpy_pad() (bsc#1268472).
- Delete
  patches.suse/Revert-ACPICA-Replace-strncpy-with-strscpy_pad-in-ac.patch.
  Replace by a v2 -- the revert was dropped upstream.
- commit 37bbff8
- Linux 7.1.1 (bsc#1012628).
- fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
  (bsc#1012628).
- driver core: faux: fix root device registration (bsc#1012628).
- driver core: reject devices with unregistered buses
  (bsc#1012628).
- arm64: cputype: Add C1-Ultra definitions (bsc#1012628).
- arm64: cputype: Add C1-Premium definitions (bsc#1012628).
- arm64: errata: Mitigate TLBI errata on various Arm CPUs
  (bsc#1012628).
    ... changelog too long, skipping 98 lines ...
- commit 3512c44

==== kgamma6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kglobalacceld6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libKGlobalAccelD6-0

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kinfocenter6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2
  * about: prevent loading more than 2 devices on nvidia (kde#521295)
  * Update version for new release 6.7.2

==== kio-extras ====
Version update (26.04.2 -> 26.04.3)
Subpackages: libkioarchive6-6 trash_kcm

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kio-gdrive ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kmenuedit6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== knighttime6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libKNightTime0

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== konsole ====
Version update (26.04.2 -> 26.04.3)
Subpackages: konsole-part

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- Changes since 26.04.2:
  * Fix warnings from PreviewJob

==== kpipewire6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireRecord6

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kpmcore ====
Version update (26.04.2 -> 26.04.3)
Subpackages: libkpmcore13

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kquickimageeditor6 ====
Version update (0.6.2 -> 0.6.2.1)
Subpackages: kquickimageeditor6-imports libKQuickImageEditor1

- Udpate to 0.6.2.1
  * Fix a crash caused by lack of ARGB32 support when built with
    OpenCV

==== krb5 ====

- Prevent read overrun in kdb-ldap:
  * CVE-2026-11850, bsc#1268131
- Add patch 0013-Prevent-read-overrun-in-libkdb_ldap.patch

==== kscreen6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kscreenlocker6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libKScreenLocker6

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== ksshaskpass6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== ksystemstats6 ====
Version update (6.7.1 -> 6.7.2)

- Prepare for CAP_PERFMON on ksystemstats_intel_helper
- Add patch for hardening (boo#1262779):
  * 0001-Guard-ksystemstats_intel_helper-against-path-travers.patch
- Remove workaroud for Leap 16, works meanwhile
- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kwalletmanager ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== kwayland-integration6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kwayland6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libKWaylandClient6

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== kwin6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libkwin6

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * backends/drm: disable hardware rotation on older AMD GPUs (kde#521764)
  * backends/drm: fix SDR MHC2 profiles with a calibration matrix (kde#522301)
  * multigpuswapchain: force linear target buffers for AMD multi-gpu copies
  * Move "mouse to focus" and "mouse to center" shortcuts to kwin core (kde#522070)
  * backends/drm: correctly transform damage to buffer-local (kde#521878)
  * Optimize querying X window shape (kde#522005)
  * scene/workspacescene: don't ignore forced software cursor for direct scanout (kde#521953)
  * wayland/outputdevice: delay done event until the output has a UUID (kde#521826)
  * backends/drm: use the native colorimetry again (kde#521759)
  * kcm_*: fix BugReportUrl
  * plugins/eis: Do not send events from release warp to capture (kde#521486)
  * backends/drm: disable unused objects even when the last output is removed
  * scene: Properly crop opaque region of subsurfaces
  * backends/drm: pre-emptively filter out udev events for non-KMS nodes
  * scene/surfaceitem_wayland: immediately update the release point of the texture (kde#521687,kde#521960)
  * Update version for new release 6.7.2

==== layer-shell-qt6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libLayerShellQtInterface6

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== libglycin ====
Version update (2.1.1 -> 2.1.5)

- Update to version 2.1.5:
  + Fixed: image-rs/jpeg: Support RGB for editing. There are
    actually images that don't use ycbcr.

==== libjansson ====
Version update (2.15.0 -> 2.15.1)

- Update to 2.15.1:
  * Include the object key or array index in unpack type mismatch error
    messages (@cwalther in #731)
  * Reject negative string length in the json_pack s# and +# formats
    (@akheron in #740)
  * Limit recursion depth in dump, equal and deep copy to prevent stack
    overflow (@akheron in #741)

==== libkdcraw ====
Version update (26.04.2 -> 26.04.3)
Subpackages: libKDcrawQt6-5 libkdcraw-qt6

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== libkexiv2-qt6 ====
Version update (26.04.2 -> 26.04.3)
Subpackages: libKExiv2Qt6-0

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== libkgapi6 ====
Version update (26.04.2 -> 26.04.3)
Subpackages: libKPim6GAPICore6 libKPim6GAPIDrive6 libkgapi6-sasl2-kdexoauth2

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== libkscreen6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== libksysguard6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== libplasma6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libPlasma7 libplasma6-components libplasma6-desktoptheme

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== libpsl ====
Version update (0.21.5 -> 0.22.0)

- Update to version 0.22.0:
  * Can now be built from the release tarball without Python
  * Drop an external dependency by implementing the IPv4/IPv6
    address checks internally
  * Avoid using alloca() and improve general portability
  * Add support for native ICU on Windows and libcucore on Apple
    systems
  * Improve the meson and autotools builds and the installed
    libpsl.pc pkg-config file
  * Documentation improvements
  * No soname change (still libpsl.so.5)

==== libwacom ====
Version update (2.18.0 -> 2.19.0)
Subpackages: libwacom-data libwacom9

- update to 2.19.0:
  * libwacom_list_styli_from_database() provides a WacomStylus
    list of all known styli
  * libwacom_database_ref() and libwacom_database_unref() to
    simplify callers having
  * libwacom_get_width_mm() and libwacom_get_height_mm() for
    the tablet dimensions in mm. The .tablet files switched to
    mm too.
  * New generic 3 button + eraser tool, assigned to some Huion
    devices by default
  * New devices:
  - Gaomon M5 V2
  - HP Envy x360 15-fh0xxx
  - Huion Inspiroy Frego S (L310), Kamvas Pro 27 (GT2701), H610
    Pro V2
  - Lenovo ThinkBook 14s Yoga ITL
  - Wacom HID 53FD
  - Xencelabs Pen Display 16

==== lilv ====
Version update (0.26.4 -> 0.28.0)

- update to 0.28.0:
  * Add early assertions for non-null parameters in public API
  * Add lilv_state_get_bundle_path()
  * Always create state files with O_CLOEXEC on glibc >= 2.7
  * Clarify relative symbolic link creation when saving state
  * Fix build with dynmanifest support
  * Fix crash when loading plugin classes on Windows
  * Fix potential file loss when saving state with no link
    directory
  * Fix potential iterator leaks and resulting log message flood
  * Fix replacing links when saving over state
  * Fix test build when no C++ compiler is available
  * Improve error handling when writing and deleting state

==== live-langset-data ====

- Add missing BR of python3-base.

==== milou6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== netavark ====
Version update (1.17.2 -> 2.0.0)

- Update to version 2.0.0:
  * This version is required for podman 6.0 and buildah 1.44
    and only supported to be used together with them
  * Removed iptables support
  * The bridge network driver now defaults to strict isolation mode;
    this means different networks can no longer talk to each by default.
    To restore the previous behavior the network must set
    the `isolate=false` option.
  * The macvlan network driver now use a default mtu of 99
  * Added network create support, podman now calls netavark create
    to create a network config.
  * The bridge network driver now supports the `outbound_addr4`
  and `outbound_addr6` options to specify the outgoing NAT source address.
  * Netavark now supports assigning multiple static ip addresses per subnet.
  * The MSRV has been bumped to v1.88.
  * Dependency updates.

==== pam ====

- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch

==== pam-full-src ====

- Fix password comparison timing leak from pam_userdb
  [CVE-2026-54411], [bsc#1268290]
  * pam_userdb-fix-password-comparison-timing-leak.patch

==== partitionmanager ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== pinentry ====
Version update (1.3.2 -> 1.3.3)

- Update to 1.3.3:
  * gtk,curses: Add --focus=ok option to CONFIRM command. [T8315]
  * tty: Discard input on timeout. [rP4c72137885]
  * Various build fixes.

==== pinentry-gui ====
Version update (1.3.2 -> 1.3.3)

- Update to 1.3.3:
  * gtk,curses: Add --focus=ok option to CONFIRM command. [T8315]
  * tty: Discard input on timeout. [rP4c72137885]
  * Various build fixes.

==== plasma5support6 ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libPlasma5Support6

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== plasma6-activities ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libPlasmaActivities7 plasma6-activities-imports

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== plasma6-activities-stats ====
Version update (6.7.1 -> 6.7.2)
Subpackages: libPlasmaActivitiesStats1

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== plasma6-browser-integration ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== plasma6-desktop ====
Version update (6.7.1 -> 6.7.2)
Subpackages: plasma6-desktop-emojier

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2
  * KCMMouse: fix some layout issues (kde#521992)
  * Don't make warnings fatal in kcm_kded test
  * Don't import desktoptest in kcm_kded appium test
  * Drop bug482267 test
  * FolderView: More robust drop url generation (kde#521713)
  * WorkspaceOPtions: fix warnings
  * applets/kickoff: add selection highlight for SectionView (kde#522154)
  * applets/kickoff: correctly show highlight in the Places page
  * Update version for new release 6.7.2

==== plasma6-integration ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== plasma6-nm ====
Version update (6.7.1 -> 6.7.2)
Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Fix overflow in network details (kde#522333)
  * Bump QtKeychain dependency
  * vpn/openconnect: Make Connect button more obvious
  * kded: Do not try to send DBus errors when handling a no reply request
  * Update version for new release 6.7.2
- Explicitly require QtKeychain >= 0.16.0

==== plasma6-openSUSE ====

- Update to 6.7.2

==== plasma6-pa ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== plasma6-print-manager ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2
  * [print-queue] Elide job processing message
  * Update version for new release 6.7.2

==== plasma6-systemmonitor ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2
  * processtable: Remove unnecessary separator
  * table: Hide the icon for processes in tree mode if it is empty (kde#442095)
  * Update version for new release 6.7.2

==== plasma6-workspace ====
Version update (6.7.1 -> 6.7.2)
Subpackages: plasma6-session plasma6-workspace-libs

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * plasma-windowed: Check for SNI being null
  * applets/devicenotifier: Check StorageAccess being null (kde#522051)
  * runners/bookmarks: Set minimum letter count to 2
  * runners/bookmarks: Recreate cache dir if it was removed before
  * runners/bookmarks: Load favicon only when match actually matches
  * Update version for new release 6.7.2

==== polkit-kde-agent-6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== powerdevil6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== python-alembic ====
Version update (1.18.4 -> 1.18.5)

- update to 1.18.5:
  * **[usecase] [commands]** Added `--splice` support to the
    `merge()` command. Previously, the merge command would suggest
    using `--splice` when attempting to merge non-head revisions,
    but the flag was not actually accepted by
    the command.
  * The `splice` parameter is now available in both the command-
    line interface and the `command.merge()` function, matching the
    existing support in `command.revision()`.
  * **[usecase] [environment]** Added
    `ScriptDirectory.get_heads.consider_depends_on`
    parameter to `ScriptDirectory.get_heads()`. When set to
    `True`, head revisions that are also a dependency of another
    revision via `depends_on` are excluded from the result,
    matching the effective heads that would be present in the
    `alembic_version` table after running all upgrades.
  * producing invalid Python in the generated migration scripts.
    Column objects within list or tuple values are now correctly
    rendered as their string column names.
  * **[bug] [mysql]** Implemented type comparison for `ENUM`
    datatypes on MySQL, which checks that the individual enum
    values are equivalent.  If additional entries are on either
    side, this generates a diff.  Changes of order do not
    generate a diff.  Pull request courtesy Furkan Köykıran.
  * **[bug] [operations]** Fixed bug where the
    `inline_references` parameter of `Operations.add_column()` did
    not include foreign key referential actions such as `ON DELETE`,
    `ON UPDATE`, `DEFERRABLE`, `INITIALLY`, and `MATCH` when
    rendering the inline `REFERENCES` clause.

==== python-greenlet ====


==== qqc2-breeze-style6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== qrca ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== rpm ====

- Add Requires: (rpm-plugin-selinux if selinux-policy)
- harden ndb code [bsc#1269584] [CVE-2026-44605]
  * new patch: ndbharden.diff
- split all plugins into subpackages
  * this allows for an easy way to get rid of a plugin, it's also
    what other distributions do
- make the imaevmsign plugin build in a multibuild flavor
  * updated patch: imaevmsignplugin.diff
- rpm2archive: use size 0 for hardlinked files as bnew versions of
  gnu tar reject non-zero sizes [bsc#1269150]
  * updated patch: rpm2archive.diff
- backport fix for add_sysuser macro [bsc#1269571]
  * updated patch: macrosin.diff
- backport rpmuncompress security fix [bsc#1268747] [CVE-2026-44604]
  * new patch: rpmuncompress.diff
- switch from rpmpgp_legacy to libpgpr
  * multiple bug fixes, support for v5 and v6 signatures
  * updated patch: pgpreleasemtime.diff
- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff

==== sddm-kcm6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== signon-kwallet-extension ====
Version update (26.04.2 -> 26.04.3)

- Update to 26.04.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/gear/26.04.3/
- No code change since 26.04.2

==== spectacle ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== systemd ====
Version update (260.2 -> 260.3)
Subpackages: libsystemd0 libudev1 systemd-boot systemd-container udev

- Import commit a6ea105861b47842aed56242325ac1f33603c9c6 (merge of v260.3)
  This update includes the following fix:
    91873ca3d7 nss-systemd: avoid ELF TLS for recursion guard (bsc#1254924)
- Drop 1001-units-drop-Before-sockets.target-from-networkd-resol.patch and
  1002-nss-systemd-avoid-ELF-TLS-for-recursion-guard.patch, both are part of
  v260.3.

==== systemsettings6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * Update version for new release 6.7.2

==== taglib ====
Version update (2.2.1 -> 2.3)

- update to 2.3:
  * MP4: Support for chapters (Nero and QuickTime).
  * WAV: Support for BEXT and iXML chunks.
  * FLAC: Support for BEXT and iXML application blocks.
  * Opus: New audio property `outputGain()`.
  * Speed up Matroska reading by using seek head for element
    lookup.
  * Speed up Matroska writing by offering multiple write style
    modes.
  * More tolerant handling of files with oversized RIFF chunks,
    zero size ID3v2
  * frames and Matroska chapters without edition.
  * Avoid wrong content-based detection as MPEG files.
  * Fix bitrate calculations for MPEG ADTS and MP4 ESDS.
  * Fix data race with multi-threaded use of `MP4::ItemFactory`.
  * Fix unbounded recursion in EBML/Matroska `MasterElement` and
    MP4 atoms.
  * Limit number of MP4 atoms at top level.
  * Fix writing too many offsets when updating MP4 stco/co64
    atoms.
  * Fix k bounds in Shorten Rice-Golomb coding.

==== tbb ====
Version update (2022.3.0 -> 2023.0.0)

- update to 2023.0.0:
  * [Preview] Introduced ability to wait for a single task in a
    ``task_group`` instead of waiting for all tasks to finish.
    This increases reactivity and decreases latency in key user
    workloads.
  * [Preview] Introduced ``flow::resource_limited_node`` and
    ``flow::resource_limiter`` classes. These nodes only execute
    when they can successfully acquire the necessary resources
    from the resource limiters associated with the node. This
    feature is used to guard access to shared resources, while
    maximizing available parallelism in the graph.
  * [Preview] Introduced ``task_arena`` core type selector to
    better support hybrid architectures with several core types.
    Users use this new flexible API to more tightly constrain
    execution to set preferences for the specific core types that
    match their workload.
  * [Preview] Added global control parameter to set default block
    time behavior on server HW. This allows developers to revert
    to older blocking behavior if their applications are not able
    to fully utilize all cores, thereby reducing idle spinning.
  * Added new API to create a set of NUMA bound task arenas,
    simplifying common patterns used to optimize for NUMA
    architectures.
  * Extended Flow Graph functional node deduction guides to
    support non-static member function and member object pointers
    as a node bodies.
  * The Flow Graph join_node and indexer_node now support 10 or
    more input ports.
  * Explicit deduction guides for ``blocked_nd_range`` are now a
    fully supported feature.
  * Added native WASM exception handling support.
- tbb-python-setuptools.patch (upstream)

==== upower ====
Version update (1.91.2 -> 1.91.3)
Subpackages: libupower-glib3

- Update to version 1.91.3:
  + Feature: up-device-battery: Prefer "Standard" over "Fast"
    charging
  + Fix: Resolve potential leaks
  + Fix: Potential out-of-bound access
  + Fix: Improve access control
  + Fix: Remove unused codes
  + Fix: Fix for Asus Battery Charge Threshold Detection
- Drop 25303ba52771ee514b70fb1a5318a8313889ac31.patch: Added
  upstream.

==== vim ====
Version update (9.2.0725 -> 9.2.0780)
Subpackages: vim-data-common vim-small

- update to 9.2.0780
  patch 9.2.0780: Memory leak in evalvars.c on alloc failure
  patch 9.2.0779: Memory leak in type_name_func() on alloc failure
  patch 9.2.0778: Memory Leak in compile_dict() on alloc failure
  patch 9.2.0777: Memory leak in add_defer() on alloc failure
  patch 9.2.0776: Memory leak in sign_getlist() on alloc failure
  patch 9.2.0775: Memory Leak in highlight_get_info() on alloc failure
  patch 9.2.0774: Memory leak in f_getscriptinfo() on alloc failure
  patch 9.2.0773: Memory leak in evalfunc.c on alloc failure
  patch 9.2.0772: Vim9: Null dereference inside alloc_type()
  patch 9.2.0771: dict_add_list() has inconsistent ownership on failure
  patch 9.2.0770: dict_add_dict() has inconsistent ownership on failure
  translation(zh_CN): Add Chinese man pages
  patch 9.2.0769: conversion to utf-16be using iconv is inconsistent
  patch 9.2.0768: legacy/vim9cmd modifiers are not exclusive
  patch 9.2.0767: legacy/vim9cmd modifiers do not set script version for options values
  patch 9.2.0766: quick_tab entries for empty letters point to the wrong index
  patch 9.2.0765: popup: opacity popup over a terminal is not cleared when moved
  patch 9.2.0764: Compiler warning about unused function
  translation(sr): Update Serbian translation
  patch 9.2.0763: tests: style issue in test_plugin_netrw
  runtime(xml): Update xml syntax file
  runtime(doc): regenerate help tags
  patch 9.2.0762: duplicated sub-option name check in :set completion
  runtime(screen): Bring the syntax up to version 5
  runtime(typst): Improve ftplugin, and syntax file
  patch 9.2.0761: runtime(netrw): Unix: unable to open '\' file
  patch 9.2.0760: Compiler warning for using potentially uninitialized var
  patch 9.2.0759: Some code for 'autocompletedelay' is no longer needed
  runtime(autoload/dist): gx may use xdg-open on macOS
  patch 9.2.0758: pum: No opacity when background not set for Popup menu group
  patch 9.2.0757: tests: test_popupwin fails with zsh because of the prompt
  patch 9.2.0756: Session with multiple tabpages sets 'winminheight' to 0
  patch 9.2.0755: 'autocomplete' behaves inconsistently when recording
  patch 9.2.0754: repeated completion length lookup in search_for_exact_line
  patch 9.2.0753: GTK GUI deferred redraw skipped on 'lazyredraw'
  runtime: add missing fnameescape()/shellescape() in a few runtime files
  patch 9.2.0752: GTK4: drag-and-drop does not support HTML
  patch 9.2.0751: GTK3 GUI is slow under Wayland
  translation(ru): Updated message files
  patch 9.2.0750: completion: 'autocompletedelay' deferral leaks state
  patch 9.2.0749: 'autocompletedelay' interferes with i_CTRL-K
  patch 9.2.0748: 'autocompletedelay' interferes with CTRL-G U
  runtime(netrw): Use consistent forward slashes
  patch 9.2.0747: cscope: connection leak when growing the array fails
  patch 9.2.0746: NULL pointer dereference in gui_photon
  patch 9.2.0745: Crash with truncated spellfile
  patch 9.2.0744: popup_atcursor() closes immediately on white space
  runtime(odin): Update indent script, add indent tests
  patch 9.2.0743: string macros silently accept a size of the wrong type
  runtime(vim): Fix heredoc triggering misidentifcation of Vim9 script
  patch 9.2.0742: filetype: SSH keys and related filetypes not recognized
  runtime(css): add more missing CSS properties
  patch 9.2.0741: complete_check() does not return TRUE for mapped input
  patch 9.2.0740: GTK4: scrollbar wrongly displayed
  patch 9.2.0739: completion: 'autocompletedelay' blocks the main loop and drops autocommands
  runtime: guard recommended style settings consistently
  patch 9.2.0738: ml_recover() may write beyond block buffer
  CI: Bump actions/checkout in the github-actions group across 1 directory
  patch 9.2.0737: tests: comment test can be improved
  patch 9.2.0736: potential command execution in PHP omni-completion
  patch 9.2.0735: [security]: arbitrary Ex command execution during C omni-completion
  runtime(doc): Tweak documentation style and typo
  patch 9.2.0734: function pointer passed to STRNCMP() instead of a length
  runtime(cabal): Update compiler, ftplugin, syntax, add indent script
  patch 9.2.0733: GTK3: GUI slow on X11 since dropping the alpha channel
  patch 9.2.0732: session: terminal restored using absolute columns/rows
  patch 9.2.0731: GTK4 GUI scrollbar size not updated when restoring a session
  patch 9.2.0730: GTK4 GUI tabline is not updated
  patch 9.2.0729: % skips parens on continued quoted lines
  runtime(doc): Add installer updates to version9.txt
  patch 9.2.0728: filetype: supertux info pattern is relative to current dir
  patch 9.2.0727: popup images not rendered correctly when unfocused
  patch 9.2.0726: filetype detect missing from completion

==== xdg-desktop-portal-kde6 ====
Version update (6.7.1 -> 6.7.2)

- Update to 6.7.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.7.2
- Changes since 6.7.1:
  * screencast: connect stream closed() on m_streams, not the moved-from vector
  * Update version for new release 6.7.2

==== xdg-user-dirs ====

- Add drop-x-gnome-autostart.patch: Allow systemd to manage the
  start of xdg-user-dirs user service. When X-GNOME-Autostart-Phase
  is set in a .desktop file, systemd ignores it, and since
  gnome-session stopped handling services, we ended up with it
  never beeing started.
  https://gitlab.freedesktop.org/xdg/xdg-user-dirs/-/work_items/52