<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="12">
<package pkgid="5054d7aff433a2e44246da377cb8ef8b497be03300f3d5b2fbbf424d86dbff82" name="helloSUSE" arch="armv7hl">
  <version epoch="0" ver="1.0" rel="2.6"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1685275200">- first version</changelog>
</package>
<package pkgid="af163c0987bf6f6c74bdf55e4e97f5323382e6795c46d125937e2f0dde2afbbe" name="helloSUSE" arch="src">
  <version epoch="0" ver="1.0" rel="2.6"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1685275200">- first version</changelog>
</package>
<package pkgid="703c5f39215cef85424f1ef3a6ee2ad23522125941caf7a96bf31e4032d4febb" name="nexus3" arch="aarch64">
  <version epoch="0" ver="3.61.0.02" rel="240.230"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.47.0.01-1" date="1676030400">- Update to Nexus 3.47.0-01
- Bugfixes:
  * NEXUS-36506: NonResolvableTarballNameException returned for npm group
                 requests if member proxy is unavailable
  * NEXUS-36617: PyPi index not update or generated when importing repository
  * NEXUS-36667: logged execution time of database upgrade steps report as
                 seconds when they are actually milliseconds
- Improvements:
  * NEXUS-34236: Migrate all deletions.indexes, not just the indexes named
                 with the node ID of the instance being migrated to
                 SQL database  (PRO only)
  * Continued UI Improvements: updated HTTPS Settings and SSL Certificates
                               pages visible to all users</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.47.1.01-1" date="1676030401">- Update to Nexus 3.47.1-01
- Bugfixes:
  * NEXUS-37325: MissingBlobException and slow downloads after upgrading
                 to 3.47.0</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.48.0.01-1" date="1677585600">- Update to Nexus 3.48.0-01
- Bugfixes:
  * NEXUS-36573: create a repository of any format triggers a complete Helm
                 index rebuild
  * NEXUS-36998: dotnet add command against nuget v2 group repo is very slow
                 on newDB
  * NEXUS-37617: loading welcome page can make frequent calls to database
                 which may lead to ui latency in some circumstances
  * NEXUS-37810: strict content validation may fail on exe
                 application/x-sharedlib protobuf protoc
- Improvements:
  * NEXUS-37535: Removed Legacy SQL Maven Metadata Builder
  * Improved NuGet v2 Performance on PostgreSQL (PRO Only)
  * New and improved Content Replication (PRO Only)
    While help documentation for legacy replication remains available,
    it will be unavailable for general use, and will be eventually removed.
    Reach out to your CSE if you are still using legacy replication and
    would like to continue using it
- Notes:
  After upgrading to 3.48.0, those using an H2 or PostgreSQL database will
  need to run a task for each existing Apt, Helm, and Yum repository in
  order to rebuild their metadata:
  * Apt: Rebuild Apt metadata for each Apt repository
  * Helm: Rebuild Helm metadata for each Helm repository
  * Repair: Rebuild Yum rebuild metadata (repodata) for each Yum repository</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.49.0.02-1" date="1678190400">- Update to Nexus 3.49.0-02
- Bugfixes:
  * NEXUS-30166: Error responses from roles REST API are not in
                 consistent format
  * NEXUS-30811: Staging move failing for multi-arch docker image due to NPE
  * NEXUS-34600: Unable to add old privileges to role after migrating
                 to postgresql
  * NEXUS-36028: enable async batch deletes by default for Admin Cleanup
                 unused asset blob tasks
  * NEXUS-36244: Security Users view in the UI queries the database for all
                 user role mappings in the entire database
  * NEXUS-36296: Placing proxy repo in offline mode releases
                 quarantined components
  * NEXUS-36555: Component links in Browse UI delimit GAV paths with '%2F'
                 instead of '/'
  * NEXUS-36784: Regression: Download asset from UI, the filename contains
                 group id with underscores and then the artifact name
  * NEXUS-37385: db-migrator fails if the blob store name contains a colon
  * NEXUS-37490: unable to download files when blobstore name contains colon
                 after upgrading to 3.47
- Improvements:
  * Batch delete is now the default for the
    "Admin - Cleanup unused asset blobs" task (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.50.0.01-1" date="1680004800">- Update to Nexus 3.50.0-01
- Bugfixing:
  * NEXUS-22721: UI sign out/logout does not redirect to the default page
  * NEXUS-25037: UNAVAILABLE repository status creates confusing user
                 experiencie
  * NEXUS-27530: proxying nested repodata/repomd.xml from remote YUM
                 repositories causes automatic download attempt of
                 primary.xml.gz at wrong remote path
  * NEXUS-30939: New user token created every time a user clicks the
                 Access token button
  * NEXUS-33794: LogbackLogManager ERROR and WARN messages about missing log
                 files lack context and log at the wrong level
  * NEXUS-34022: Unable to unassign Routing Rules to a repository via Nexus UI
  * NEXUS-35497: Staging move fails if some image layers are contained in a
                 proxy repository
  * NEXUS-36365: Blob store names can contain arbitrary characters and lack
                 full validation leading to blobstores which cannot be used,
                 deleted or accessed using REST API
  * NEXUS-36590: Choco installs a different package when using Nuget V2
                 with PostgreSQL
  * NEXUS-36955: Checksum and size not updated in repomd.xml which can fail
                 yum install due to checksum doesn't match
  * NEXUS-37182: Conan search with hosted repo only works for the _ channel
  * NEXUS-37315: conan search for hosted repository does not work when package
                 has dependencies defined via 'requires'
  * NEXUS-37454: group blobstore UI Transferred Items title lacks context
  * NEXUS-37512: Format specific UI search returns results from
                 different formats
  * NEXUS-37563: conan hosted repo does not allow redeploying different
                 configurations of the same package with disable
                 redeploy option
  * NEXUS-37895: Data Store UI shows required fields with possibly empty
                 values that cannot be edited
- Improvements:
  * High availability deployment options with Amazon Web Services, Azure,
    Kubernetes, or manual setup (PRO Only)
  * Supports for Conan revisions for hosted repositories when using an H2
    or PostgreSQL database (revisions are not supported
    on OrientDB) (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.51.0.01-1" date="1680782400">- Update to Nexus 3.51.0-01
- Bugfixing:
  * NEXUS-31948: Attempting to create Azure blob store with an existing name
                 causes 500 server error
  * NEXUS-34077: scheduled tasks race condition during DB migration can leave
                 tasks without proper schedule
  * NEXUS-34599: Status API execution via Nexus Swagger UI returns
                 Undocumented Error: OK
  * NEXUS-35229: Reconcile task with last X days option checks all
                 properties files
  * NEXUS-35728: kubectl cp and oc cp commands work as expected.
  * NEXUS-36296: Placing proxy repo in offline mode releases
                 quarantined components
  * NEXUS-36416: MissingBlobException for Nuget asset prevents instance
                 from starting
  * NEXUS-36817: Increase default size limit for helm yaml files
  * NEXUS-37005: Blob store UI will not load if s3 blob store host can't
                 be reached
  * NEXUS-37639: Docker manifest upload to a docker hosted repository causes
                 missing "Docker-Content-Digest" in the response when Nexus
                 running with PostgreSQL db
- Improvements:
  * Automatically Rebuild Search Indexes for New High Availability
    (HA) Deployments (PRO Only)
  * UI/UX: Better error messaging when configuring Content (PRO only)
  * UI/UX: Increasing the size of the routing rule preview field on the
           routing rule form so that you can see the full path that you enter
  * UI/UX: Continued conversion of parts of our UI to use React components
           See https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/nexus-repository-3.46.0-release-notes
           for more information on this effort</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.52.0.01-1" date="1681905600">- Update to Nexus 3.52.0-01
- Bugfixing:
  * NEXUS-24266: Trim SAML UI Input Fields
  * NEXUS-27453: The user ID field in "security --&gt; anonymous" allows
                 trailing spaces
  * NEXUS-33918: Deleting tag via REST API UI returns "error: no content"
  * NEXUS-34185: Nexus UI does not show 'Last downloaded' with full time and
                 timezone details
  * NEXUS-34566: Deleting an image tag deletes all tags with the same digest
                 from other images
  * NEXUS-34611: user-token-reset API execution in Nexus Swagger UI returns
                 'Error: No Content'
  * NEXUS-35509: Improve search performance with large Roles
                 and Privileges: OrientDB
  * NEXUS-36480: Improve robustness and logging for Null Pointer handling in
                 Docker.GC task
  * NEXUS-37491: Pypi proxy always does expensive rewrite of simple index pages
  * NEXUS-38412: Resetting the nexus loggers to default levels causes
                 "IllegalArgumentException: The level of the root logger
                 cannot be set to null" with New HA deployments</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.0.01-1" date="1683374400">- Update to Nexus 3.53.0-01
- Bugfixing:
  * NEXUS-17626: rubygems /versions endpoint not implemented resulting in
                 performance issues installing gems
  * NEXUS-20429: incomplete gem metadata returned sometimes from
                /api/v1/dependencies
  * NEXUS-25408: Using 0 in "Authenticated user status interval" disables
                 buttons after logging in
  * NEXUS-31023: npm metadata request fails with "Missing blob and no handler
                 set to recover"
  * NEXUS-31286: nexus.datastore system properties do not overwrite values in
                 nexus-store.properties file
  * NEXUS-31635: Repository REST API allows invalid version policy value for
                 Maven repo
  * NEXUS-35728: New Nexus Repository Manager 3 image breaks "kubectl cp" and
                 "oc cp" commands
  * NEXUS-37958: Blob store health check fails reporting group blobstores as
                 not writable
  * NEXUS-38452: RubyGems.org /api/v1/dependencies API removal may cause empty
                 200 status responses from groups which can then fail builds
  * NEXUS-38579: Expensive search done for deleted assets after repository
                 is removed
  * NEXUS-38585: Conan hosted repo search does not return all deployed
                 components when conan attributes contain special characters
                 and using elasticsearch indexing
  * Upgraded org.apache.karaf.jaas:org.apache.karaf.jaas.modules package from
    4.3.6 to 4.3.9 due to a vulnerability. There are no known exploits of this
    vulnerability, so the this upgrade happens out of an abundance of caution
- Improvements:
  * NEXUS-31225: Add support for rubygems compact_index /info/&lt;gem&gt; endpoint
  * Change in Database Property Evaluation Priority when Using
    PostgreSQL (PRO Only)
    To help you more easily change database connection details, there are
    changes in the way and order in which Sonatype Nexus Repository evaluates
    the mechanism for evaluating this information. You will also need to
    provide all required fields through the same mechanism
  * Fix for RubyGems Dependency API Deprecation: RubyGems will deprecate its
    dependency API as of May 10, 2023. Those using RubyGems will need to
    upgrade to Sonatype Nexus Repository 3.53.0 by May 10 to avoid
    encountering errors caused by this deprecation
  * New Name (Sonatype Nexus Repository) &amp; UI Changes. Functionality is
    not impacted</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.0.01-2" date="1683806400">- There is a known issue in Sonatype Nexus Repository 3.53.0 impacting those
  using community or custom plugins. These plugins will not load from the
  typical install directory and, in some cases, this may prevent Sonatype
  Nexus Repository from starting.
  If you are using community or custom plugins and wish to upgrade,
  remove the plugin before doing so. Otherwise, wait to upgrade until a fix
  is released this issue.
  If you are not using community or custom plugins, upgrading is safe</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.1.02-1" date="1683979200">- Update to Nexus 3.53.1-02
- Bugfixing:
  * NEXUS-39091: Concurrent event handling and asynchronous processing works
                 as expected for RubyGems
  * Fixed an issue that was causing the RubyGems Info API to work with
    incorrect groups
  * Fixed a paging issue on OrientDB for RubyGems upgrade tasks
  * Fixed a GroovyCastException that was occurring when installing the
    nexus gem
  * Resolved an issue for those using OrientDB where, if a package was
    uploaded while a rebuild was in progress, it may result in missing a
    package until the next upload
  * Fixed an issue that was causing an exception when running the
    "Repair - Rebuild Rubygems versions file" task
- It is possible that you may still encounter issues related to the RubyGems
  Dependencies API deprecation even after upgrading to 3.53.1
  Sonatype observed packaging inconsistencies in the RubyGems ecosystem that
  leave required fields missing or with values that are non-conforming to spec
  In these scenarios, Sonatype Nexus Repository is unable to properly store the
  gem or complete normal operations
  In 3.53.0 and earlier, this error would occur with a 500 error and not
  enough data being provided in the log file to identify the specific gem
  In 3.53.1, gems that have this gap will be reported in the "nexus.log" file
  with a log line like the following:
    2023-05-12 12:20:32,043-0500 WARN [quartz-11-thread-2] *SYSTEM org.sonatype.nexus.repository.rubygems.orient.internal.hosted.OrientGemInfoHostedFacet - Could not parse version 0.2.2 from gem gems/nexus-0.2.2.gem 
  Please report such problems to Sonatype so they can properly address
  non-conforming gems in future releases</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.54.1.01-1" date="1688299200">- Update to Nexus 3.54.1-01
- Bugfixing:
  * Added recently provided patch fixing the GroovyCastException that was
    occurring when installing the nexus gem
  * Fixed the known issue from 3.53.0 for those using community or custom
    plugins. These plugins now load as expected.
  * Added validation so that users can only add valid content selector
    privileges
  * NEXUS-37518: Fixed an issue that was causing errors when running the
                 "Docker - Delete unused manifests and images" task
  * NEXUS-38740: Fixed an issue that was preventing NuGet v3 search from
                 returning components with ".&lt;numeral&gt;" in the component name
                 under some search conditions
  * Plugins bundled as .kar files that are installed via $install-dir/deploy
    now start as expected
  * Updated documentation to better explain how metadata is impacted during
    repository import
- Improvements:
  * Refreshed Outreach Page
  * Export Unused Assets (PRO Only)
  * The IQ Audit and Quarantine capability was renamed to Firewall Audit and
    Quarantine and hidden the IQ Server Configuration capability from the
    Capabilities screen. Functionality is not impacted, and you will still
    configure your connection to IQ Server via the IQ Server tab in the
    user interface</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.55.0.01-1" date="1688299201">- Update to Nexus 3.55.0-01
- Bugfixing:
  * The Standard request timeout and Extended request timeout fields in the
    UI:Settings capability are now properly updated when upgrading from
    older versions
  * Sonatype Nexus Repository now supports Yum repositories using the caret
    (^) character in RPM names
  * Staging move respects the Allow redeploy only on 'latest' tag setting
    as expected
  * Subdomain routing now reflects the nexus-context-path
  * NuGet v3 search in non-HA environments now return components that have a
    dot after a digit. Note that search works differently in HA, and we are
    still investigating a fix for HA environments
- Improvements:
  * Fluentbit, External DNS, and the Docker Ingress and service are now all
    optional in the Helm chart for a resilient Sonatype Nexus Repository
    deployment in AWS (PRO Only)
  * /v2/users/authenticate Conan endpoint for hosted Conan repositories on
    Sonatype Nexus Repository deployments using H2 or PostgreSQL
    databases (PRO Only)
  * Streamlined Experience for Those Using Sonatype Repository Firewall
  * Quick Actions on Welcome Page, list of quick actions depends on the
    permissions for each user</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.56.0.01-1" date="1688385600">- Update to Nexus 3.56.0-01
- Bugfixing:
  * The Repair - Rebuild npm metadata task now rebuilds npm package metadata
    as expected
  * When migrating from Sonatype Nexus Repository 2 to 3, broken NuGet assets
    will no longer prevent completing migration. Sonatype Nexus Repository
    will provide an error message and log an exception for broken
    NuGet assets. Migration will continue and Sonatype Nexus Repository 3 will
    migrate valid NuGet assets as expected
  * Enabling the IQ: Audit and Quarantine capability in Sonatype Nexus
    Repository 2 will no longer cause migration to Sonatype Nexus
    Repository 3 to hang
  * PyPI simple index is rebuilt as expected after a staging move
  * Repositories already using a blobstore that is then promoted to a group
    blobstore will continue to function as expected
  * Performing "conan search zlib/*" on a hosted repository in a high
    availability environment works as expected
  * Calling "info/rater_pdf" only returns versions of the rater_pdf gem
    as expected
- Improvements:
  * Search Improvement for High Availability (HA) Enviornments (PRO Only)
    To ensure you receive the most accurate and usable information, a small
    aspect of component search was changed for those using one of our HA
    deployment options. You will now see the latest modification date from
    among all asset blobs assigned to a component in the Last Updated column.
    Previously, the component's creation date appeared in this column
  * In order to prevent unreasonable wait times, a 1-minute timeout was added
    to the Cleanup Policy preview feature

AWs me-central-1 region now appears as an option when creating an S3 blobstore.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.57.0.01-1" date="1688731200">- Update to Nexus 3.57.0-01
- Bugfixing:
  * NEXUS-24088: You can now properly remove an S3 blob store from a group
                 even when it references an S3 bucket that is no
                 longer accessible; such blob stores no longer cause UI errors
  * NEXUS-24726: You can now search for components with an empty group
                 or npm.scope
  * NEXUS-27710: Fixed errors that were sporadically preventing startup in
                 some cases due to a corrupted
                 org.apache.karaf.features.cfg file
  * NEXUS-29638: Downloading a pom.xml that uses unicode characters no longer
                 fails due to calling getBytes without using UTF8
  * NEXUS-31461: Searching for Maven versions now returns versions in
                 alpha-numeric order as expected
  * NEXUS-31492: Raw proxy URL no longer encodes special characters for
                 outbound requests
  * NEXUS-35917: The Repair - Reconcile component database from blob store
                 task with only Integrity Check option selected now removes
                 stale objects from S3 blob stores as expected
  * NEXUS-36599: Browse privileges are no longer required to execute a
                 NuGet search; only Read is needed
  * NEXUS-38662: Deleting large repositories is no longer impeded by errors
                 where Sonatype Nexus Repository looks for
                 repository_blobstore in the component database
  * NEXUS-38791: Running a search for Maven assets in an HA environment now
                 returns the versions in descending order
  * NEXUS-38851: npm exports no longer skip assets with an application/x-tgz
                 content type
  * NEXUS-39169: The permissions required for the search API are now
                 consistent between HA and non-HA environments. Searching a
                 group repository from the API only requires the user to have
                 read permissions for the group
- Improvements:
  * Added a Default Role alert to inform administrators when the Default Role
    capability is enabled and what role is configured as the default role
    granted to all authenticated users
  * Multiple UX enhancements, including a new Blob Store column in the
    Repositories table and a sortable Last Updated column to Search results
  * Improvements in Support of Sonatype Repository Firewall to ensure HA
    Sonatype Nexus Repository deployments can support the new Sonatype
    Repository Firewall SaaS offering. Added validation to ensure that
    Sonatype Nexus Repository and Firewall only exchange information when
    Firewall configuration is enabled to avoid data becoming out of syn
    Renamed the Component IQ and IQ Application fields in the component browse
    view to Sonatype Lifecycle Component and Application respectively
    Modified the policy-compliant component selection checkbox so that it is
    disabled until and unless both the Firewall - Audit and Quarantine
    capability is enabled and the Enable Quarantine checkbox that appears
    within that capability is checked. This is to prevent Sonatype Nexus
    Repository from getting into an inconsistent state with the
    Firewall server</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.58.0.01-1" date="1689681600">- Update to Nexus 3.58.0-01
- Bugfixing:
  * NEXUS-39766: Docker Subdomain connectors work with nGrok again as expected
  * NEXUS-39415: Added logging for and made "Rubygems - Generate SHA256
                 Checksums and Repair - Update attributes for RubyGems"
                 tasks configurable via the user interface. See the Tasks
                 documentation for details on these tasks
- Improvements:
  * Restored "Admin - Change repository blob store"Task for deployments using
    PostgreSQL or H2, after it got disabled in 3.45.0, due to multiple issues
    that could result in data loss (PRO  Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.58.1.01-1" date="1690286400">- Update to Nexus 3.58.1-01
- Bugfixing:
  * Critical Fix for 3.57.0 and 3.58.0 deployments Using Sonatype Repository
    Firewall. This bug could allow for users to unintentionally download
    quarantined components</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.59.0.01-1" date="1692187200">- Update to Nexus 3.59.0-01
- Bugfixing:
  * Apache shiro upgraded from 1.10.0 to 1.12.0 to mitigate CVE-2023-34478
  * SnakeYaml upgraded from 1.33 to 2.0 to mitigate CVE-2022-1471
  * Sonatype recently became aware of a bug impacting those using user tokens
    for authentication. To address potential security concerns, user token
    authentication methods were enhanced to ensure that user tokens are always
    case-sensitive regardless of security realm or database used
  * NEXUS-39797: Resolved an issue that was causing some components to not be
                 indexed for search in HA deployments
  * NEXUS-39774 &amp; 39573: Using the Search API to return Maven assets with an
                         empty maven.classifier now works as expected
  * NEXUS-39255 The Conan v2 remote list command to retrieve revisions
                performs as expected without a 500 error
  * NEXUS-36486 The blobCreated date is now preserved when migrating
                to PostgreSQL
  * NEXUS-36415 Adjusted handling in cases where invalid content violating
                metadata format is cached in a proxy repository
  * NEXUS-35977 Improved error messaging and documentation related to
                requesting files from a R format repository. See our updated
                R repositories documentation for supported file types
- Improvements:
  * Support for password encoders like SHA-256, SHA-384, and SHA-512 for those
    using LDAP authentication
  * To help facilitate debugging outbound network problems, an outbound
    request log that generates an outbound-request.log file in the
    $data-dir/log directory is now provided. The outbound request log rotates
    daily, maintains 90 days of log files by default, and compresses
    old logs. The log includes information such as date/time, authenticated
    user id, method, url, response status code, bytes sent, bytes received,
    and response time
  * To help troubleshoot content selector issues, the audit log
    ($data-dir/log/audit/audit.log) is now expanded to log content selector
    creation, update, or deletion</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.60.0.02-1" date="1694174400">- Update to Nexus 3.60.0-02
- Bugfixing:
  * NEXUS-40141: Fixed the previously reported "Repair - Reconcile component
                 database from blob store task" issue. The bug caused the task
                 to soft-delete the blob .properties and .bytes files for
                 NuGet v2 proxy and hosted repositories. It also failed to
                 restore the desired content for RubyGems, NuGet v2 (proxy or
                 hosted), or P2 repositories; however, there was no soft
                 deletion associated with RubyGems or P2 repositories
  * NEXUS-39918: Clarified search restrictions in high availability
                 environments to explain that searches cannot begin with a
                 special character followed by a wildcard. Attempts to perform
                 such seareches will now result in  appropriate descriptive
                 messaging
  * NEXUS-39825: NuGet v3 search now returns the complete list of component
                 versions even when the component name has a dot after a digit
  * NEXUS-38670: Improved Apt upload performance and speed
  * NEXUS-37537: The lastDownloaded attribute for hosted Helm assets now
                 updates as expected in deployments using PostgreSQL or H2
  * NEXUS-37024: The Global Webhook capability with Audit Type now works
                 as expected
- Improvements:
  * Support for Cocoapods Stored on Google Open Source
  * Refactored caching for deployments using Atlassian Crowd to improve
    performance and avoid calls to Crowd Server every time user information
    is needed. This refactoring also enables caching and improves performance
    for formats using bearer token realms (i.e., Conan, Docker, and
    npm formats). You must enable the Crowd realm for this to
    take effect (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.61.0.02-1" date="1696420800">- Update to Nexus 3.61.0-02
- Bugfixing:
  * NEXUS-40135: Fixed an issue that was causing upgrade errors to 3.59.0 or
                 3.60.0 when user tokens existed in earlier Sonatype Nexus
                 Repository versions with the exact same user ID but different
                 principals (security realms). Noted as a known issue in
                 3.59.0 and 3.60.0
  * NEXUS-39995: Resolved an issue that was preventing administrator users
                 from generating support zips
  * NEXUS-39973: Fixed an issue that was causing Docker proxy or group
                 repositories to return a 404 error even though the remote
                 returned the correct manifest
  * NEXUS-39624: The task for migrating the blobRef assets field now handles
                 blob_ref duplicates correctly
  * NEXUS-38800: AssetBlobCleanupTask now works as expected; the number of
                 threads eventually stays around the same number as expected
  * NEXUS-38530: Blob store metrics now update as expected after HA migration
  * NEXUS-38292: Improved repository import task memory efficiency so that
                 imports will not fail with out-of-memory errors even with
                 large import sets
  * NEXUS-36697: Made changes to the Admin - Delete blob store temporary files
                 task to prevent it accidentally deleting in-use tmp files
  * NEXUS-23185: Made improvements for those using Sonatype Nexus Repository
                 with Sonatype Repository Firewall to prevent overloading IQ
                 Server with asset deletion requests
- Improvements:
  * New OpenShift Operator for PostreSQL and High Availability
    Deployments (PRO Only)
  * Change Repository Blobstore Task Supports Proxy Repositories (PRO Only)
  * Policy-Compliant Component Selection for PyPI (PRO Only)
  * Azure Blob Store Performance Improvements (PRO Only)
  * Sonatype Nexus Repository Usage Metrics (not currently available for
    High Availability deployments)
  * Improved Security When Specifying Credentials as JVM Arguments.
    Ensure that sensitive credentials are always masked in any location where
    they may appear</changelog>
  <changelog author="J. Daniel Schmidt &lt;opensuse@jdsn.de&gt; - 3.61.0.02-2" date="1697112000">- Fix the macro for the service removal so the package builds again for
  openSUSE Tumbleweed and Factory</changelog>
</package>
<package pkgid="13516773a2654ef4c8f270beb83062f2ac5ff98aa50ccf487030560230d95f21" name="nexus3" arch="src">
  <version epoch="0" ver="3.61.0.02" rel="240.230"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.47.0.01-1" date="1676030400">- Update to Nexus 3.47.0-01
- Bugfixes:
  * NEXUS-36506: NonResolvableTarballNameException returned for npm group
                 requests if member proxy is unavailable
  * NEXUS-36617: PyPi index not update or generated when importing repository
  * NEXUS-36667: logged execution time of database upgrade steps report as
                 seconds when they are actually milliseconds
- Improvements:
  * NEXUS-34236: Migrate all deletions.indexes, not just the indexes named
                 with the node ID of the instance being migrated to
                 SQL database  (PRO only)
  * Continued UI Improvements: updated HTTPS Settings and SSL Certificates
                               pages visible to all users</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.47.1.01-1" date="1676030401">- Update to Nexus 3.47.1-01
- Bugfixes:
  * NEXUS-37325: MissingBlobException and slow downloads after upgrading
                 to 3.47.0</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.48.0.01-1" date="1677585600">- Update to Nexus 3.48.0-01
- Bugfixes:
  * NEXUS-36573: create a repository of any format triggers a complete Helm
                 index rebuild
  * NEXUS-36998: dotnet add command against nuget v2 group repo is very slow
                 on newDB
  * NEXUS-37617: loading welcome page can make frequent calls to database
                 which may lead to ui latency in some circumstances
  * NEXUS-37810: strict content validation may fail on exe
                 application/x-sharedlib protobuf protoc
- Improvements:
  * NEXUS-37535: Removed Legacy SQL Maven Metadata Builder
  * Improved NuGet v2 Performance on PostgreSQL (PRO Only)
  * New and improved Content Replication (PRO Only)
    While help documentation for legacy replication remains available,
    it will be unavailable for general use, and will be eventually removed.
    Reach out to your CSE if you are still using legacy replication and
    would like to continue using it
- Notes:
  After upgrading to 3.48.0, those using an H2 or PostgreSQL database will
  need to run a task for each existing Apt, Helm, and Yum repository in
  order to rebuild their metadata:
  * Apt: Rebuild Apt metadata for each Apt repository
  * Helm: Rebuild Helm metadata for each Helm repository
  * Repair: Rebuild Yum rebuild metadata (repodata) for each Yum repository</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.49.0.02-1" date="1678190400">- Update to Nexus 3.49.0-02
- Bugfixes:
  * NEXUS-30166: Error responses from roles REST API are not in
                 consistent format
  * NEXUS-30811: Staging move failing for multi-arch docker image due to NPE
  * NEXUS-34600: Unable to add old privileges to role after migrating
                 to postgresql
  * NEXUS-36028: enable async batch deletes by default for Admin Cleanup
                 unused asset blob tasks
  * NEXUS-36244: Security Users view in the UI queries the database for all
                 user role mappings in the entire database
  * NEXUS-36296: Placing proxy repo in offline mode releases
                 quarantined components
  * NEXUS-36555: Component links in Browse UI delimit GAV paths with '%2F'
                 instead of '/'
  * NEXUS-36784: Regression: Download asset from UI, the filename contains
                 group id with underscores and then the artifact name
  * NEXUS-37385: db-migrator fails if the blob store name contains a colon
  * NEXUS-37490: unable to download files when blobstore name contains colon
                 after upgrading to 3.47
- Improvements:
  * Batch delete is now the default for the
    "Admin - Cleanup unused asset blobs" task (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.50.0.01-1" date="1680004800">- Update to Nexus 3.50.0-01
- Bugfixing:
  * NEXUS-22721: UI sign out/logout does not redirect to the default page
  * NEXUS-25037: UNAVAILABLE repository status creates confusing user
                 experiencie
  * NEXUS-27530: proxying nested repodata/repomd.xml from remote YUM
                 repositories causes automatic download attempt of
                 primary.xml.gz at wrong remote path
  * NEXUS-30939: New user token created every time a user clicks the
                 Access token button
  * NEXUS-33794: LogbackLogManager ERROR and WARN messages about missing log
                 files lack context and log at the wrong level
  * NEXUS-34022: Unable to unassign Routing Rules to a repository via Nexus UI
  * NEXUS-35497: Staging move fails if some image layers are contained in a
                 proxy repository
  * NEXUS-36365: Blob store names can contain arbitrary characters and lack
                 full validation leading to blobstores which cannot be used,
                 deleted or accessed using REST API
  * NEXUS-36590: Choco installs a different package when using Nuget V2
                 with PostgreSQL
  * NEXUS-36955: Checksum and size not updated in repomd.xml which can fail
                 yum install due to checksum doesn't match
  * NEXUS-37182: Conan search with hosted repo only works for the _ channel
  * NEXUS-37315: conan search for hosted repository does not work when package
                 has dependencies defined via 'requires'
  * NEXUS-37454: group blobstore UI Transferred Items title lacks context
  * NEXUS-37512: Format specific UI search returns results from
                 different formats
  * NEXUS-37563: conan hosted repo does not allow redeploying different
                 configurations of the same package with disable
                 redeploy option
  * NEXUS-37895: Data Store UI shows required fields with possibly empty
                 values that cannot be edited
- Improvements:
  * High availability deployment options with Amazon Web Services, Azure,
    Kubernetes, or manual setup (PRO Only)
  * Supports for Conan revisions for hosted repositories when using an H2
    or PostgreSQL database (revisions are not supported
    on OrientDB) (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.51.0.01-1" date="1680782400">- Update to Nexus 3.51.0-01
- Bugfixing:
  * NEXUS-31948: Attempting to create Azure blob store with an existing name
                 causes 500 server error
  * NEXUS-34077: scheduled tasks race condition during DB migration can leave
                 tasks without proper schedule
  * NEXUS-34599: Status API execution via Nexus Swagger UI returns
                 Undocumented Error: OK
  * NEXUS-35229: Reconcile task with last X days option checks all
                 properties files
  * NEXUS-35728: kubectl cp and oc cp commands work as expected.
  * NEXUS-36296: Placing proxy repo in offline mode releases
                 quarantined components
  * NEXUS-36416: MissingBlobException for Nuget asset prevents instance
                 from starting
  * NEXUS-36817: Increase default size limit for helm yaml files
  * NEXUS-37005: Blob store UI will not load if s3 blob store host can't
                 be reached
  * NEXUS-37639: Docker manifest upload to a docker hosted repository causes
                 missing "Docker-Content-Digest" in the response when Nexus
                 running with PostgreSQL db
- Improvements:
  * Automatically Rebuild Search Indexes for New High Availability
    (HA) Deployments (PRO Only)
  * UI/UX: Better error messaging when configuring Content (PRO only)
  * UI/UX: Increasing the size of the routing rule preview field on the
           routing rule form so that you can see the full path that you enter
  * UI/UX: Continued conversion of parts of our UI to use React components
           See https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/nexus-repository-3.46.0-release-notes
           for more information on this effort</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.52.0.01-1" date="1681905600">- Update to Nexus 3.52.0-01
- Bugfixing:
  * NEXUS-24266: Trim SAML UI Input Fields
  * NEXUS-27453: The user ID field in "security --&gt; anonymous" allows
                 trailing spaces
  * NEXUS-33918: Deleting tag via REST API UI returns "error: no content"
  * NEXUS-34185: Nexus UI does not show 'Last downloaded' with full time and
                 timezone details
  * NEXUS-34566: Deleting an image tag deletes all tags with the same digest
                 from other images
  * NEXUS-34611: user-token-reset API execution in Nexus Swagger UI returns
                 'Error: No Content'
  * NEXUS-35509: Improve search performance with large Roles
                 and Privileges: OrientDB
  * NEXUS-36480: Improve robustness and logging for Null Pointer handling in
                 Docker.GC task
  * NEXUS-37491: Pypi proxy always does expensive rewrite of simple index pages
  * NEXUS-38412: Resetting the nexus loggers to default levels causes
                 "IllegalArgumentException: The level of the root logger
                 cannot be set to null" with New HA deployments</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.0.01-1" date="1683374400">- Update to Nexus 3.53.0-01
- Bugfixing:
  * NEXUS-17626: rubygems /versions endpoint not implemented resulting in
                 performance issues installing gems
  * NEXUS-20429: incomplete gem metadata returned sometimes from
                /api/v1/dependencies
  * NEXUS-25408: Using 0 in "Authenticated user status interval" disables
                 buttons after logging in
  * NEXUS-31023: npm metadata request fails with "Missing blob and no handler
                 set to recover"
  * NEXUS-31286: nexus.datastore system properties do not overwrite values in
                 nexus-store.properties file
  * NEXUS-31635: Repository REST API allows invalid version policy value for
                 Maven repo
  * NEXUS-35728: New Nexus Repository Manager 3 image breaks "kubectl cp" and
                 "oc cp" commands
  * NEXUS-37958: Blob store health check fails reporting group blobstores as
                 not writable
  * NEXUS-38452: RubyGems.org /api/v1/dependencies API removal may cause empty
                 200 status responses from groups which can then fail builds
  * NEXUS-38579: Expensive search done for deleted assets after repository
                 is removed
  * NEXUS-38585: Conan hosted repo search does not return all deployed
                 components when conan attributes contain special characters
                 and using elasticsearch indexing
  * Upgraded org.apache.karaf.jaas:org.apache.karaf.jaas.modules package from
    4.3.6 to 4.3.9 due to a vulnerability. There are no known exploits of this
    vulnerability, so the this upgrade happens out of an abundance of caution
- Improvements:
  * NEXUS-31225: Add support for rubygems compact_index /info/&lt;gem&gt; endpoint
  * Change in Database Property Evaluation Priority when Using
    PostgreSQL (PRO Only)
    To help you more easily change database connection details, there are
    changes in the way and order in which Sonatype Nexus Repository evaluates
    the mechanism for evaluating this information. You will also need to
    provide all required fields through the same mechanism
  * Fix for RubyGems Dependency API Deprecation: RubyGems will deprecate its
    dependency API as of May 10, 2023. Those using RubyGems will need to
    upgrade to Sonatype Nexus Repository 3.53.0 by May 10 to avoid
    encountering errors caused by this deprecation
  * New Name (Sonatype Nexus Repository) &amp; UI Changes. Functionality is
    not impacted</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.0.01-2" date="1683806400">- There is a known issue in Sonatype Nexus Repository 3.53.0 impacting those
  using community or custom plugins. These plugins will not load from the
  typical install directory and, in some cases, this may prevent Sonatype
  Nexus Repository from starting.
  If you are using community or custom plugins and wish to upgrade,
  remove the plugin before doing so. Otherwise, wait to upgrade until a fix
  is released this issue.
  If you are not using community or custom plugins, upgrading is safe</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.1.02-1" date="1683979200">- Update to Nexus 3.53.1-02
- Bugfixing:
  * NEXUS-39091: Concurrent event handling and asynchronous processing works
                 as expected for RubyGems
  * Fixed an issue that was causing the RubyGems Info API to work with
    incorrect groups
  * Fixed a paging issue on OrientDB for RubyGems upgrade tasks
  * Fixed a GroovyCastException that was occurring when installing the
    nexus gem
  * Resolved an issue for those using OrientDB where, if a package was
    uploaded while a rebuild was in progress, it may result in missing a
    package until the next upload
  * Fixed an issue that was causing an exception when running the
    "Repair - Rebuild Rubygems versions file" task
- It is possible that you may still encounter issues related to the RubyGems
  Dependencies API deprecation even after upgrading to 3.53.1
  Sonatype observed packaging inconsistencies in the RubyGems ecosystem that
  leave required fields missing or with values that are non-conforming to spec
  In these scenarios, Sonatype Nexus Repository is unable to properly store the
  gem or complete normal operations
  In 3.53.0 and earlier, this error would occur with a 500 error and not
  enough data being provided in the log file to identify the specific gem
  In 3.53.1, gems that have this gap will be reported in the "nexus.log" file
  with a log line like the following:
    2023-05-12 12:20:32,043-0500 WARN [quartz-11-thread-2] *SYSTEM org.sonatype.nexus.repository.rubygems.orient.internal.hosted.OrientGemInfoHostedFacet - Could not parse version 0.2.2 from gem gems/nexus-0.2.2.gem 
  Please report such problems to Sonatype so they can properly address
  non-conforming gems in future releases</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.54.1.01-1" date="1688299200">- Update to Nexus 3.54.1-01
- Bugfixing:
  * Added recently provided patch fixing the GroovyCastException that was
    occurring when installing the nexus gem
  * Fixed the known issue from 3.53.0 for those using community or custom
    plugins. These plugins now load as expected.
  * Added validation so that users can only add valid content selector
    privileges
  * NEXUS-37518: Fixed an issue that was causing errors when running the
                 "Docker - Delete unused manifests and images" task
  * NEXUS-38740: Fixed an issue that was preventing NuGet v3 search from
                 returning components with ".&lt;numeral&gt;" in the component name
                 under some search conditions
  * Plugins bundled as .kar files that are installed via $install-dir/deploy
    now start as expected
  * Updated documentation to better explain how metadata is impacted during
    repository import
- Improvements:
  * Refreshed Outreach Page
  * Export Unused Assets (PRO Only)
  * The IQ Audit and Quarantine capability was renamed to Firewall Audit and
    Quarantine and hidden the IQ Server Configuration capability from the
    Capabilities screen. Functionality is not impacted, and you will still
    configure your connection to IQ Server via the IQ Server tab in the
    user interface</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.55.0.01-1" date="1688299201">- Update to Nexus 3.55.0-01
- Bugfixing:
  * The Standard request timeout and Extended request timeout fields in the
    UI:Settings capability are now properly updated when upgrading from
    older versions
  * Sonatype Nexus Repository now supports Yum repositories using the caret
    (^) character in RPM names
  * Staging move respects the Allow redeploy only on 'latest' tag setting
    as expected
  * Subdomain routing now reflects the nexus-context-path
  * NuGet v3 search in non-HA environments now return components that have a
    dot after a digit. Note that search works differently in HA, and we are
    still investigating a fix for HA environments
- Improvements:
  * Fluentbit, External DNS, and the Docker Ingress and service are now all
    optional in the Helm chart for a resilient Sonatype Nexus Repository
    deployment in AWS (PRO Only)
  * /v2/users/authenticate Conan endpoint for hosted Conan repositories on
    Sonatype Nexus Repository deployments using H2 or PostgreSQL
    databases (PRO Only)
  * Streamlined Experience for Those Using Sonatype Repository Firewall
  * Quick Actions on Welcome Page, list of quick actions depends on the
    permissions for each user</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.56.0.01-1" date="1688385600">- Update to Nexus 3.56.0-01
- Bugfixing:
  * The Repair - Rebuild npm metadata task now rebuilds npm package metadata
    as expected
  * When migrating from Sonatype Nexus Repository 2 to 3, broken NuGet assets
    will no longer prevent completing migration. Sonatype Nexus Repository
    will provide an error message and log an exception for broken
    NuGet assets. Migration will continue and Sonatype Nexus Repository 3 will
    migrate valid NuGet assets as expected
  * Enabling the IQ: Audit and Quarantine capability in Sonatype Nexus
    Repository 2 will no longer cause migration to Sonatype Nexus
    Repository 3 to hang
  * PyPI simple index is rebuilt as expected after a staging move
  * Repositories already using a blobstore that is then promoted to a group
    blobstore will continue to function as expected
  * Performing "conan search zlib/*" on a hosted repository in a high
    availability environment works as expected
  * Calling "info/rater_pdf" only returns versions of the rater_pdf gem
    as expected
- Improvements:
  * Search Improvement for High Availability (HA) Enviornments (PRO Only)
    To ensure you receive the most accurate and usable information, a small
    aspect of component search was changed for those using one of our HA
    deployment options. You will now see the latest modification date from
    among all asset blobs assigned to a component in the Last Updated column.
    Previously, the component's creation date appeared in this column
  * In order to prevent unreasonable wait times, a 1-minute timeout was added
    to the Cleanup Policy preview feature

AWs me-central-1 region now appears as an option when creating an S3 blobstore.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.57.0.01-1" date="1688731200">- Update to Nexus 3.57.0-01
- Bugfixing:
  * NEXUS-24088: You can now properly remove an S3 blob store from a group
                 even when it references an S3 bucket that is no
                 longer accessible; such blob stores no longer cause UI errors
  * NEXUS-24726: You can now search for components with an empty group
                 or npm.scope
  * NEXUS-27710: Fixed errors that were sporadically preventing startup in
                 some cases due to a corrupted
                 org.apache.karaf.features.cfg file
  * NEXUS-29638: Downloading a pom.xml that uses unicode characters no longer
                 fails due to calling getBytes without using UTF8
  * NEXUS-31461: Searching for Maven versions now returns versions in
                 alpha-numeric order as expected
  * NEXUS-31492: Raw proxy URL no longer encodes special characters for
                 outbound requests
  * NEXUS-35917: The Repair - Reconcile component database from blob store
                 task with only Integrity Check option selected now removes
                 stale objects from S3 blob stores as expected
  * NEXUS-36599: Browse privileges are no longer required to execute a
                 NuGet search; only Read is needed
  * NEXUS-38662: Deleting large repositories is no longer impeded by errors
                 where Sonatype Nexus Repository looks for
                 repository_blobstore in the component database
  * NEXUS-38791: Running a search for Maven assets in an HA environment now
                 returns the versions in descending order
  * NEXUS-38851: npm exports no longer skip assets with an application/x-tgz
                 content type
  * NEXUS-39169: The permissions required for the search API are now
                 consistent between HA and non-HA environments. Searching a
                 group repository from the API only requires the user to have
                 read permissions for the group
- Improvements:
  * Added a Default Role alert to inform administrators when the Default Role
    capability is enabled and what role is configured as the default role
    granted to all authenticated users
  * Multiple UX enhancements, including a new Blob Store column in the
    Repositories table and a sortable Last Updated column to Search results
  * Improvements in Support of Sonatype Repository Firewall to ensure HA
    Sonatype Nexus Repository deployments can support the new Sonatype
    Repository Firewall SaaS offering. Added validation to ensure that
    Sonatype Nexus Repository and Firewall only exchange information when
    Firewall configuration is enabled to avoid data becoming out of syn
    Renamed the Component IQ and IQ Application fields in the component browse
    view to Sonatype Lifecycle Component and Application respectively
    Modified the policy-compliant component selection checkbox so that it is
    disabled until and unless both the Firewall - Audit and Quarantine
    capability is enabled and the Enable Quarantine checkbox that appears
    within that capability is checked. This is to prevent Sonatype Nexus
    Repository from getting into an inconsistent state with the
    Firewall server</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.58.0.01-1" date="1689681600">- Update to Nexus 3.58.0-01
- Bugfixing:
  * NEXUS-39766: Docker Subdomain connectors work with nGrok again as expected
  * NEXUS-39415: Added logging for and made "Rubygems - Generate SHA256
                 Checksums and Repair - Update attributes for RubyGems"
                 tasks configurable via the user interface. See the Tasks
                 documentation for details on these tasks
- Improvements:
  * Restored "Admin - Change repository blob store"Task for deployments using
    PostgreSQL or H2, after it got disabled in 3.45.0, due to multiple issues
    that could result in data loss (PRO  Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.58.1.01-1" date="1690286400">- Update to Nexus 3.58.1-01
- Bugfixing:
  * Critical Fix for 3.57.0 and 3.58.0 deployments Using Sonatype Repository
    Firewall. This bug could allow for users to unintentionally download
    quarantined components</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.59.0.01-1" date="1692187200">- Update to Nexus 3.59.0-01
- Bugfixing:
  * Apache shiro upgraded from 1.10.0 to 1.12.0 to mitigate CVE-2023-34478
  * SnakeYaml upgraded from 1.33 to 2.0 to mitigate CVE-2022-1471
  * Sonatype recently became aware of a bug impacting those using user tokens
    for authentication. To address potential security concerns, user token
    authentication methods were enhanced to ensure that user tokens are always
    case-sensitive regardless of security realm or database used
  * NEXUS-39797: Resolved an issue that was causing some components to not be
                 indexed for search in HA deployments
  * NEXUS-39774 &amp; 39573: Using the Search API to return Maven assets with an
                         empty maven.classifier now works as expected
  * NEXUS-39255 The Conan v2 remote list command to retrieve revisions
                performs as expected without a 500 error
  * NEXUS-36486 The blobCreated date is now preserved when migrating
                to PostgreSQL
  * NEXUS-36415 Adjusted handling in cases where invalid content violating
                metadata format is cached in a proxy repository
  * NEXUS-35977 Improved error messaging and documentation related to
                requesting files from a R format repository. See our updated
                R repositories documentation for supported file types
- Improvements:
  * Support for password encoders like SHA-256, SHA-384, and SHA-512 for those
    using LDAP authentication
  * To help facilitate debugging outbound network problems, an outbound
    request log that generates an outbound-request.log file in the
    $data-dir/log directory is now provided. The outbound request log rotates
    daily, maintains 90 days of log files by default, and compresses
    old logs. The log includes information such as date/time, authenticated
    user id, method, url, response status code, bytes sent, bytes received,
    and response time
  * To help troubleshoot content selector issues, the audit log
    ($data-dir/log/audit/audit.log) is now expanded to log content selector
    creation, update, or deletion</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.60.0.02-1" date="1694174400">- Update to Nexus 3.60.0-02
- Bugfixing:
  * NEXUS-40141: Fixed the previously reported "Repair - Reconcile component
                 database from blob store task" issue. The bug caused the task
                 to soft-delete the blob .properties and .bytes files for
                 NuGet v2 proxy and hosted repositories. It also failed to
                 restore the desired content for RubyGems, NuGet v2 (proxy or
                 hosted), or P2 repositories; however, there was no soft
                 deletion associated with RubyGems or P2 repositories
  * NEXUS-39918: Clarified search restrictions in high availability
                 environments to explain that searches cannot begin with a
                 special character followed by a wildcard. Attempts to perform
                 such seareches will now result in  appropriate descriptive
                 messaging
  * NEXUS-39825: NuGet v3 search now returns the complete list of component
                 versions even when the component name has a dot after a digit
  * NEXUS-38670: Improved Apt upload performance and speed
  * NEXUS-37537: The lastDownloaded attribute for hosted Helm assets now
                 updates as expected in deployments using PostgreSQL or H2
  * NEXUS-37024: The Global Webhook capability with Audit Type now works
                 as expected
- Improvements:
  * Support for Cocoapods Stored on Google Open Source
  * Refactored caching for deployments using Atlassian Crowd to improve
    performance and avoid calls to Crowd Server every time user information
    is needed. This refactoring also enables caching and improves performance
    for formats using bearer token realms (i.e., Conan, Docker, and
    npm formats). You must enable the Crowd realm for this to
    take effect (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.61.0.02-1" date="1696420800">- Update to Nexus 3.61.0-02
- Bugfixing:
  * NEXUS-40135: Fixed an issue that was causing upgrade errors to 3.59.0 or
                 3.60.0 when user tokens existed in earlier Sonatype Nexus
                 Repository versions with the exact same user ID but different
                 principals (security realms). Noted as a known issue in
                 3.59.0 and 3.60.0
  * NEXUS-39995: Resolved an issue that was preventing administrator users
                 from generating support zips
  * NEXUS-39973: Fixed an issue that was causing Docker proxy or group
                 repositories to return a 404 error even though the remote
                 returned the correct manifest
  * NEXUS-39624: The task for migrating the blobRef assets field now handles
                 blob_ref duplicates correctly
  * NEXUS-38800: AssetBlobCleanupTask now works as expected; the number of
                 threads eventually stays around the same number as expected
  * NEXUS-38530: Blob store metrics now update as expected after HA migration
  * NEXUS-38292: Improved repository import task memory efficiency so that
                 imports will not fail with out-of-memory errors even with
                 large import sets
  * NEXUS-36697: Made changes to the Admin - Delete blob store temporary files
                 task to prevent it accidentally deleting in-use tmp files
  * NEXUS-23185: Made improvements for those using Sonatype Nexus Repository
                 with Sonatype Repository Firewall to prevent overloading IQ
                 Server with asset deletion requests
- Improvements:
  * New OpenShift Operator for PostreSQL and High Availability
    Deployments (PRO Only)
  * Change Repository Blobstore Task Supports Proxy Repositories (PRO Only)
  * Policy-Compliant Component Selection for PyPI (PRO Only)
  * Azure Blob Store Performance Improvements (PRO Only)
  * Sonatype Nexus Repository Usage Metrics (not currently available for
    High Availability deployments)
  * Improved Security When Specifying Credentials as JVM Arguments.
    Ensure that sensitive credentials are always masked in any location where
    they may appear</changelog>
  <changelog author="J. Daniel Schmidt &lt;opensuse@jdsn.de&gt; - 3.61.0.02-2" date="1697112000">- Fix the macro for the service removal so the package builds again for
  openSUSE Tumbleweed and Factory</changelog>
</package>
<package pkgid="1a8db7c4a541aedf76d256d32112381f1d6ee19ce71fff112486b45feb90c752" name="nexus3" arch="x86_64">
  <version epoch="0" ver="3.61.0.02" rel="240.230"/>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.47.0.01-1" date="1676030400">- Update to Nexus 3.47.0-01
- Bugfixes:
  * NEXUS-36506: NonResolvableTarballNameException returned for npm group
                 requests if member proxy is unavailable
  * NEXUS-36617: PyPi index not update or generated when importing repository
  * NEXUS-36667: logged execution time of database upgrade steps report as
                 seconds when they are actually milliseconds
- Improvements:
  * NEXUS-34236: Migrate all deletions.indexes, not just the indexes named
                 with the node ID of the instance being migrated to
                 SQL database  (PRO only)
  * Continued UI Improvements: updated HTTPS Settings and SSL Certificates
                               pages visible to all users</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.47.1.01-1" date="1676030401">- Update to Nexus 3.47.1-01
- Bugfixes:
  * NEXUS-37325: MissingBlobException and slow downloads after upgrading
                 to 3.47.0</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.48.0.01-1" date="1677585600">- Update to Nexus 3.48.0-01
- Bugfixes:
  * NEXUS-36573: create a repository of any format triggers a complete Helm
                 index rebuild
  * NEXUS-36998: dotnet add command against nuget v2 group repo is very slow
                 on newDB
  * NEXUS-37617: loading welcome page can make frequent calls to database
                 which may lead to ui latency in some circumstances
  * NEXUS-37810: strict content validation may fail on exe
                 application/x-sharedlib protobuf protoc
- Improvements:
  * NEXUS-37535: Removed Legacy SQL Maven Metadata Builder
  * Improved NuGet v2 Performance on PostgreSQL (PRO Only)
  * New and improved Content Replication (PRO Only)
    While help documentation for legacy replication remains available,
    it will be unavailable for general use, and will be eventually removed.
    Reach out to your CSE if you are still using legacy replication and
    would like to continue using it
- Notes:
  After upgrading to 3.48.0, those using an H2 or PostgreSQL database will
  need to run a task for each existing Apt, Helm, and Yum repository in
  order to rebuild their metadata:
  * Apt: Rebuild Apt metadata for each Apt repository
  * Helm: Rebuild Helm metadata for each Helm repository
  * Repair: Rebuild Yum rebuild metadata (repodata) for each Yum repository</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.49.0.02-1" date="1678190400">- Update to Nexus 3.49.0-02
- Bugfixes:
  * NEXUS-30166: Error responses from roles REST API are not in
                 consistent format
  * NEXUS-30811: Staging move failing for multi-arch docker image due to NPE
  * NEXUS-34600: Unable to add old privileges to role after migrating
                 to postgresql
  * NEXUS-36028: enable async batch deletes by default for Admin Cleanup
                 unused asset blob tasks
  * NEXUS-36244: Security Users view in the UI queries the database for all
                 user role mappings in the entire database
  * NEXUS-36296: Placing proxy repo in offline mode releases
                 quarantined components
  * NEXUS-36555: Component links in Browse UI delimit GAV paths with '%2F'
                 instead of '/'
  * NEXUS-36784: Regression: Download asset from UI, the filename contains
                 group id with underscores and then the artifact name
  * NEXUS-37385: db-migrator fails if the blob store name contains a colon
  * NEXUS-37490: unable to download files when blobstore name contains colon
                 after upgrading to 3.47
- Improvements:
  * Batch delete is now the default for the
    "Admin - Cleanup unused asset blobs" task (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.50.0.01-1" date="1680004800">- Update to Nexus 3.50.0-01
- Bugfixing:
  * NEXUS-22721: UI sign out/logout does not redirect to the default page
  * NEXUS-25037: UNAVAILABLE repository status creates confusing user
                 experiencie
  * NEXUS-27530: proxying nested repodata/repomd.xml from remote YUM
                 repositories causes automatic download attempt of
                 primary.xml.gz at wrong remote path
  * NEXUS-30939: New user token created every time a user clicks the
                 Access token button
  * NEXUS-33794: LogbackLogManager ERROR and WARN messages about missing log
                 files lack context and log at the wrong level
  * NEXUS-34022: Unable to unassign Routing Rules to a repository via Nexus UI
  * NEXUS-35497: Staging move fails if some image layers are contained in a
                 proxy repository
  * NEXUS-36365: Blob store names can contain arbitrary characters and lack
                 full validation leading to blobstores which cannot be used,
                 deleted or accessed using REST API
  * NEXUS-36590: Choco installs a different package when using Nuget V2
                 with PostgreSQL
  * NEXUS-36955: Checksum and size not updated in repomd.xml which can fail
                 yum install due to checksum doesn't match
  * NEXUS-37182: Conan search with hosted repo only works for the _ channel
  * NEXUS-37315: conan search for hosted repository does not work when package
                 has dependencies defined via 'requires'
  * NEXUS-37454: group blobstore UI Transferred Items title lacks context
  * NEXUS-37512: Format specific UI search returns results from
                 different formats
  * NEXUS-37563: conan hosted repo does not allow redeploying different
                 configurations of the same package with disable
                 redeploy option
  * NEXUS-37895: Data Store UI shows required fields with possibly empty
                 values that cannot be edited
- Improvements:
  * High availability deployment options with Amazon Web Services, Azure,
    Kubernetes, or manual setup (PRO Only)
  * Supports for Conan revisions for hosted repositories when using an H2
    or PostgreSQL database (revisions are not supported
    on OrientDB) (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.51.0.01-1" date="1680782400">- Update to Nexus 3.51.0-01
- Bugfixing:
  * NEXUS-31948: Attempting to create Azure blob store with an existing name
                 causes 500 server error
  * NEXUS-34077: scheduled tasks race condition during DB migration can leave
                 tasks without proper schedule
  * NEXUS-34599: Status API execution via Nexus Swagger UI returns
                 Undocumented Error: OK
  * NEXUS-35229: Reconcile task with last X days option checks all
                 properties files
  * NEXUS-35728: kubectl cp and oc cp commands work as expected.
  * NEXUS-36296: Placing proxy repo in offline mode releases
                 quarantined components
  * NEXUS-36416: MissingBlobException for Nuget asset prevents instance
                 from starting
  * NEXUS-36817: Increase default size limit for helm yaml files
  * NEXUS-37005: Blob store UI will not load if s3 blob store host can't
                 be reached
  * NEXUS-37639: Docker manifest upload to a docker hosted repository causes
                 missing "Docker-Content-Digest" in the response when Nexus
                 running with PostgreSQL db
- Improvements:
  * Automatically Rebuild Search Indexes for New High Availability
    (HA) Deployments (PRO Only)
  * UI/UX: Better error messaging when configuring Content (PRO only)
  * UI/UX: Increasing the size of the routing rule preview field on the
           routing rule form so that you can see the full path that you enter
  * UI/UX: Continued conversion of parts of our UI to use React components
           See https://help.sonatype.com/repomanager3/product-information/release-notes/2023-release-notes/nexus-repository-3.46.0-release-notes
           for more information on this effort</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.52.0.01-1" date="1681905600">- Update to Nexus 3.52.0-01
- Bugfixing:
  * NEXUS-24266: Trim SAML UI Input Fields
  * NEXUS-27453: The user ID field in "security --&gt; anonymous" allows
                 trailing spaces
  * NEXUS-33918: Deleting tag via REST API UI returns "error: no content"
  * NEXUS-34185: Nexus UI does not show 'Last downloaded' with full time and
                 timezone details
  * NEXUS-34566: Deleting an image tag deletes all tags with the same digest
                 from other images
  * NEXUS-34611: user-token-reset API execution in Nexus Swagger UI returns
                 'Error: No Content'
  * NEXUS-35509: Improve search performance with large Roles
                 and Privileges: OrientDB
  * NEXUS-36480: Improve robustness and logging for Null Pointer handling in
                 Docker.GC task
  * NEXUS-37491: Pypi proxy always does expensive rewrite of simple index pages
  * NEXUS-38412: Resetting the nexus loggers to default levels causes
                 "IllegalArgumentException: The level of the root logger
                 cannot be set to null" with New HA deployments</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.0.01-1" date="1683374400">- Update to Nexus 3.53.0-01
- Bugfixing:
  * NEXUS-17626: rubygems /versions endpoint not implemented resulting in
                 performance issues installing gems
  * NEXUS-20429: incomplete gem metadata returned sometimes from
                /api/v1/dependencies
  * NEXUS-25408: Using 0 in "Authenticated user status interval" disables
                 buttons after logging in
  * NEXUS-31023: npm metadata request fails with "Missing blob and no handler
                 set to recover"
  * NEXUS-31286: nexus.datastore system properties do not overwrite values in
                 nexus-store.properties file
  * NEXUS-31635: Repository REST API allows invalid version policy value for
                 Maven repo
  * NEXUS-35728: New Nexus Repository Manager 3 image breaks "kubectl cp" and
                 "oc cp" commands
  * NEXUS-37958: Blob store health check fails reporting group blobstores as
                 not writable
  * NEXUS-38452: RubyGems.org /api/v1/dependencies API removal may cause empty
                 200 status responses from groups which can then fail builds
  * NEXUS-38579: Expensive search done for deleted assets after repository
                 is removed
  * NEXUS-38585: Conan hosted repo search does not return all deployed
                 components when conan attributes contain special characters
                 and using elasticsearch indexing
  * Upgraded org.apache.karaf.jaas:org.apache.karaf.jaas.modules package from
    4.3.6 to 4.3.9 due to a vulnerability. There are no known exploits of this
    vulnerability, so the this upgrade happens out of an abundance of caution
- Improvements:
  * NEXUS-31225: Add support for rubygems compact_index /info/&lt;gem&gt; endpoint
  * Change in Database Property Evaluation Priority when Using
    PostgreSQL (PRO Only)
    To help you more easily change database connection details, there are
    changes in the way and order in which Sonatype Nexus Repository evaluates
    the mechanism for evaluating this information. You will also need to
    provide all required fields through the same mechanism
  * Fix for RubyGems Dependency API Deprecation: RubyGems will deprecate its
    dependency API as of May 10, 2023. Those using RubyGems will need to
    upgrade to Sonatype Nexus Repository 3.53.0 by May 10 to avoid
    encountering errors caused by this deprecation
  * New Name (Sonatype Nexus Repository) &amp; UI Changes. Functionality is
    not impacted</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.0.01-2" date="1683806400">- There is a known issue in Sonatype Nexus Repository 3.53.0 impacting those
  using community or custom plugins. These plugins will not load from the
  typical install directory and, in some cases, this may prevent Sonatype
  Nexus Repository from starting.
  If you are using community or custom plugins and wish to upgrade,
  remove the plugin before doing so. Otherwise, wait to upgrade until a fix
  is released this issue.
  If you are not using community or custom plugins, upgrading is safe</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.53.1.02-1" date="1683979200">- Update to Nexus 3.53.1-02
- Bugfixing:
  * NEXUS-39091: Concurrent event handling and asynchronous processing works
                 as expected for RubyGems
  * Fixed an issue that was causing the RubyGems Info API to work with
    incorrect groups
  * Fixed a paging issue on OrientDB for RubyGems upgrade tasks
  * Fixed a GroovyCastException that was occurring when installing the
    nexus gem
  * Resolved an issue for those using OrientDB where, if a package was
    uploaded while a rebuild was in progress, it may result in missing a
    package until the next upload
  * Fixed an issue that was causing an exception when running the
    "Repair - Rebuild Rubygems versions file" task
- It is possible that you may still encounter issues related to the RubyGems
  Dependencies API deprecation even after upgrading to 3.53.1
  Sonatype observed packaging inconsistencies in the RubyGems ecosystem that
  leave required fields missing or with values that are non-conforming to spec
  In these scenarios, Sonatype Nexus Repository is unable to properly store the
  gem or complete normal operations
  In 3.53.0 and earlier, this error would occur with a 500 error and not
  enough data being provided in the log file to identify the specific gem
  In 3.53.1, gems that have this gap will be reported in the "nexus.log" file
  with a log line like the following:
    2023-05-12 12:20:32,043-0500 WARN [quartz-11-thread-2] *SYSTEM org.sonatype.nexus.repository.rubygems.orient.internal.hosted.OrientGemInfoHostedFacet - Could not parse version 0.2.2 from gem gems/nexus-0.2.2.gem 
  Please report such problems to Sonatype so they can properly address
  non-conforming gems in future releases</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.54.1.01-1" date="1688299200">- Update to Nexus 3.54.1-01
- Bugfixing:
  * Added recently provided patch fixing the GroovyCastException that was
    occurring when installing the nexus gem
  * Fixed the known issue from 3.53.0 for those using community or custom
    plugins. These plugins now load as expected.
  * Added validation so that users can only add valid content selector
    privileges
  * NEXUS-37518: Fixed an issue that was causing errors when running the
                 "Docker - Delete unused manifests and images" task
  * NEXUS-38740: Fixed an issue that was preventing NuGet v3 search from
                 returning components with ".&lt;numeral&gt;" in the component name
                 under some search conditions
  * Plugins bundled as .kar files that are installed via $install-dir/deploy
    now start as expected
  * Updated documentation to better explain how metadata is impacted during
    repository import
- Improvements:
  * Refreshed Outreach Page
  * Export Unused Assets (PRO Only)
  * The IQ Audit and Quarantine capability was renamed to Firewall Audit and
    Quarantine and hidden the IQ Server Configuration capability from the
    Capabilities screen. Functionality is not impacted, and you will still
    configure your connection to IQ Server via the IQ Server tab in the
    user interface</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.55.0.01-1" date="1688299201">- Update to Nexus 3.55.0-01
- Bugfixing:
  * The Standard request timeout and Extended request timeout fields in the
    UI:Settings capability are now properly updated when upgrading from
    older versions
  * Sonatype Nexus Repository now supports Yum repositories using the caret
    (^) character in RPM names
  * Staging move respects the Allow redeploy only on 'latest' tag setting
    as expected
  * Subdomain routing now reflects the nexus-context-path
  * NuGet v3 search in non-HA environments now return components that have a
    dot after a digit. Note that search works differently in HA, and we are
    still investigating a fix for HA environments
- Improvements:
  * Fluentbit, External DNS, and the Docker Ingress and service are now all
    optional in the Helm chart for a resilient Sonatype Nexus Repository
    deployment in AWS (PRO Only)
  * /v2/users/authenticate Conan endpoint for hosted Conan repositories on
    Sonatype Nexus Repository deployments using H2 or PostgreSQL
    databases (PRO Only)
  * Streamlined Experience for Those Using Sonatype Repository Firewall
  * Quick Actions on Welcome Page, list of quick actions depends on the
    permissions for each user</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.56.0.01-1" date="1688385600">- Update to Nexus 3.56.0-01
- Bugfixing:
  * The Repair - Rebuild npm metadata task now rebuilds npm package metadata
    as expected
  * When migrating from Sonatype Nexus Repository 2 to 3, broken NuGet assets
    will no longer prevent completing migration. Sonatype Nexus Repository
    will provide an error message and log an exception for broken
    NuGet assets. Migration will continue and Sonatype Nexus Repository 3 will
    migrate valid NuGet assets as expected
  * Enabling the IQ: Audit and Quarantine capability in Sonatype Nexus
    Repository 2 will no longer cause migration to Sonatype Nexus
    Repository 3 to hang
  * PyPI simple index is rebuilt as expected after a staging move
  * Repositories already using a blobstore that is then promoted to a group
    blobstore will continue to function as expected
  * Performing "conan search zlib/*" on a hosted repository in a high
    availability environment works as expected
  * Calling "info/rater_pdf" only returns versions of the rater_pdf gem
    as expected
- Improvements:
  * Search Improvement for High Availability (HA) Enviornments (PRO Only)
    To ensure you receive the most accurate and usable information, a small
    aspect of component search was changed for those using one of our HA
    deployment options. You will now see the latest modification date from
    among all asset blobs assigned to a component in the Last Updated column.
    Previously, the component's creation date appeared in this column
  * In order to prevent unreasonable wait times, a 1-minute timeout was added
    to the Cleanup Policy preview feature

AWs me-central-1 region now appears as an option when creating an S3 blobstore.</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.57.0.01-1" date="1688731200">- Update to Nexus 3.57.0-01
- Bugfixing:
  * NEXUS-24088: You can now properly remove an S3 blob store from a group
                 even when it references an S3 bucket that is no
                 longer accessible; such blob stores no longer cause UI errors
  * NEXUS-24726: You can now search for components with an empty group
                 or npm.scope
  * NEXUS-27710: Fixed errors that were sporadically preventing startup in
                 some cases due to a corrupted
                 org.apache.karaf.features.cfg file
  * NEXUS-29638: Downloading a pom.xml that uses unicode characters no longer
                 fails due to calling getBytes without using UTF8
  * NEXUS-31461: Searching for Maven versions now returns versions in
                 alpha-numeric order as expected
  * NEXUS-31492: Raw proxy URL no longer encodes special characters for
                 outbound requests
  * NEXUS-35917: The Repair - Reconcile component database from blob store
                 task with only Integrity Check option selected now removes
                 stale objects from S3 blob stores as expected
  * NEXUS-36599: Browse privileges are no longer required to execute a
                 NuGet search; only Read is needed
  * NEXUS-38662: Deleting large repositories is no longer impeded by errors
                 where Sonatype Nexus Repository looks for
                 repository_blobstore in the component database
  * NEXUS-38791: Running a search for Maven assets in an HA environment now
                 returns the versions in descending order
  * NEXUS-38851: npm exports no longer skip assets with an application/x-tgz
                 content type
  * NEXUS-39169: The permissions required for the search API are now
                 consistent between HA and non-HA environments. Searching a
                 group repository from the API only requires the user to have
                 read permissions for the group
- Improvements:
  * Added a Default Role alert to inform administrators when the Default Role
    capability is enabled and what role is configured as the default role
    granted to all authenticated users
  * Multiple UX enhancements, including a new Blob Store column in the
    Repositories table and a sortable Last Updated column to Search results
  * Improvements in Support of Sonatype Repository Firewall to ensure HA
    Sonatype Nexus Repository deployments can support the new Sonatype
    Repository Firewall SaaS offering. Added validation to ensure that
    Sonatype Nexus Repository and Firewall only exchange information when
    Firewall configuration is enabled to avoid data becoming out of syn
    Renamed the Component IQ and IQ Application fields in the component browse
    view to Sonatype Lifecycle Component and Application respectively
    Modified the policy-compliant component selection checkbox so that it is
    disabled until and unless both the Firewall - Audit and Quarantine
    capability is enabled and the Enable Quarantine checkbox that appears
    within that capability is checked. This is to prevent Sonatype Nexus
    Repository from getting into an inconsistent state with the
    Firewall server</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.58.0.01-1" date="1689681600">- Update to Nexus 3.58.0-01
- Bugfixing:
  * NEXUS-39766: Docker Subdomain connectors work with nGrok again as expected
  * NEXUS-39415: Added logging for and made "Rubygems - Generate SHA256
                 Checksums and Repair - Update attributes for RubyGems"
                 tasks configurable via the user interface. See the Tasks
                 documentation for details on these tasks
- Improvements:
  * Restored "Admin - Change repository blob store"Task for deployments using
    PostgreSQL or H2, after it got disabled in 3.45.0, due to multiple issues
    that could result in data loss (PRO  Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.58.1.01-1" date="1690286400">- Update to Nexus 3.58.1-01
- Bugfixing:
  * Critical Fix for 3.57.0 and 3.58.0 deployments Using Sonatype Repository
    Firewall. This bug could allow for users to unintentionally download
    quarantined components</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.59.0.01-1" date="1692187200">- Update to Nexus 3.59.0-01
- Bugfixing:
  * Apache shiro upgraded from 1.10.0 to 1.12.0 to mitigate CVE-2023-34478
  * SnakeYaml upgraded from 1.33 to 2.0 to mitigate CVE-2022-1471
  * Sonatype recently became aware of a bug impacting those using user tokens
    for authentication. To address potential security concerns, user token
    authentication methods were enhanced to ensure that user tokens are always
    case-sensitive regardless of security realm or database used
  * NEXUS-39797: Resolved an issue that was causing some components to not be
                 indexed for search in HA deployments
  * NEXUS-39774 &amp; 39573: Using the Search API to return Maven assets with an
                         empty maven.classifier now works as expected
  * NEXUS-39255 The Conan v2 remote list command to retrieve revisions
                performs as expected without a 500 error
  * NEXUS-36486 The blobCreated date is now preserved when migrating
                to PostgreSQL
  * NEXUS-36415 Adjusted handling in cases where invalid content violating
                metadata format is cached in a proxy repository
  * NEXUS-35977 Improved error messaging and documentation related to
                requesting files from a R format repository. See our updated
                R repositories documentation for supported file types
- Improvements:
  * Support for password encoders like SHA-256, SHA-384, and SHA-512 for those
    using LDAP authentication
  * To help facilitate debugging outbound network problems, an outbound
    request log that generates an outbound-request.log file in the
    $data-dir/log directory is now provided. The outbound request log rotates
    daily, maintains 90 days of log files by default, and compresses
    old logs. The log includes information such as date/time, authenticated
    user id, method, url, response status code, bytes sent, bytes received,
    and response time
  * To help troubleshoot content selector issues, the audit log
    ($data-dir/log/audit/audit.log) is now expanded to log content selector
    creation, update, or deletion</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.60.0.02-1" date="1694174400">- Update to Nexus 3.60.0-02
- Bugfixing:
  * NEXUS-40141: Fixed the previously reported "Repair - Reconcile component
                 database from blob store task" issue. The bug caused the task
                 to soft-delete the blob .properties and .bytes files for
                 NuGet v2 proxy and hosted repositories. It also failed to
                 restore the desired content for RubyGems, NuGet v2 (proxy or
                 hosted), or P2 repositories; however, there was no soft
                 deletion associated with RubyGems or P2 repositories
  * NEXUS-39918: Clarified search restrictions in high availability
                 environments to explain that searches cannot begin with a
                 special character followed by a wildcard. Attempts to perform
                 such seareches will now result in  appropriate descriptive
                 messaging
  * NEXUS-39825: NuGet v3 search now returns the complete list of component
                 versions even when the component name has a dot after a digit
  * NEXUS-38670: Improved Apt upload performance and speed
  * NEXUS-37537: The lastDownloaded attribute for hosted Helm assets now
                 updates as expected in deployments using PostgreSQL or H2
  * NEXUS-37024: The Global Webhook capability with Audit Type now works
                 as expected
- Improvements:
  * Support for Cocoapods Stored on Google Open Source
  * Refactored caching for deployments using Atlassian Crowd to improve
    performance and avoid calls to Crowd Server every time user information
    is needed. This refactoring also enables caching and improves performance
    for formats using bearer token realms (i.e., Conan, Docker, and
    npm formats). You must enable the Crowd realm for this to
    take effect (PRO Only)</changelog>
  <changelog author="Julio Gonz&#xE1;lez Gil &lt;packages@juliogonzalez.es&gt; - 3.61.0.02-1" date="1696420800">- Update to Nexus 3.61.0-02
- Bugfixing:
  * NEXUS-40135: Fixed an issue that was causing upgrade errors to 3.59.0 or
                 3.60.0 when user tokens existed in earlier Sonatype Nexus
                 Repository versions with the exact same user ID but different
                 principals (security realms). Noted as a known issue in
                 3.59.0 and 3.60.0
  * NEXUS-39995: Resolved an issue that was preventing administrator users
                 from generating support zips
  * NEXUS-39973: Fixed an issue that was causing Docker proxy or group
                 repositories to return a 404 error even though the remote
                 returned the correct manifest
  * NEXUS-39624: The task for migrating the blobRef assets field now handles
                 blob_ref duplicates correctly
  * NEXUS-38800: AssetBlobCleanupTask now works as expected; the number of
                 threads eventually stays around the same number as expected
  * NEXUS-38530: Blob store metrics now update as expected after HA migration
  * NEXUS-38292: Improved repository import task memory efficiency so that
                 imports will not fail with out-of-memory errors even with
                 large import sets
  * NEXUS-36697: Made changes to the Admin - Delete blob store temporary files
                 task to prevent it accidentally deleting in-use tmp files
  * NEXUS-23185: Made improvements for those using Sonatype Nexus Repository
                 with Sonatype Repository Firewall to prevent overloading IQ
                 Server with asset deletion requests
- Improvements:
  * New OpenShift Operator for PostreSQL and High Availability
    Deployments (PRO Only)
  * Change Repository Blobstore Task Supports Proxy Repositories (PRO Only)
  * Policy-Compliant Component Selection for PyPI (PRO Only)
  * Azure Blob Store Performance Improvements (PRO Only)
  * Sonatype Nexus Repository Usage Metrics (not currently available for
    High Availability deployments)
  * Improved Security When Specifying Credentials as JVM Arguments.
    Ensure that sensitive credentials are always masked in any location where
    they may appear</changelog>
  <changelog author="J. Daniel Schmidt &lt;opensuse@jdsn.de&gt; - 3.61.0.02-2" date="1697112000">- Fix the macro for the service removal so the package builds again for
  openSUSE Tumbleweed and Factory</changelog>
</package>
<package pkgid="f2523e971e73715083783a1d570de99df5d2c59f4fac3f99b6d20fc0d0ca6977" name="osc" arch="noarch">
  <version epoch="0" ver="0.177.0" rel="3.159"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1590580800">- 0.169.0
  * improve speed and usability of osc bash completion
  * switch packagequery.py to return only bytes
  * improved some error messages
  * osc add: support git@ (private github) or git:// URLs correctly
  * split dependson and whatdependson commands
  * support for osc build --shell-cmd
  * Fix kiwi build with --prefer-pkgs
  * add pkg-ccache support for osc build
  * fix security issue (bsc#1122675, CVE-2019-3681) do not allow '/' in filename</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1590753600">- 0.169.1
  * add --ccache option to osc getbinaries</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1593691200">- Really fix path for fish completion file to
  /usr/share/fish/vendor_completions.d and fix its permissions.</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1594296000">- 0.170.0
  * fix code for python3.8 and python3.9
  * remove dead code
  * fix tests
  * don't use chardet to guess encoding. utf-8 or latin-1 is now assumed
    This will speed up decoding (bsc#1173926)
  * escape sequences are interpreted correctly on -m
    osc sr -m "1st line\n2nd line"
    results in
    1st line
    2nd line
  * add status filter to osc results
  * add --brief to osc prjresults
    Gives:
    build openSUSE_Leap_15.1 x86_64 succeeded
    build openSUSE_Leap_15.0 x86_64 succeeded
    build openSUSE_Leap_15.0 armv7l unresolvable
    build openSUSE_Factory_ARM armv7l succeeded
    build openSUSE_Factory_ARM aarch64 succeeded
  * osc prjresults -s &lt;status&gt;: status can now be the long text like "succeeded", "failed"
  * improve error message if osc service &lt;servicename&gt; is not run in working directory
  * web links are now also printed for osc mr when print_web_links=1 is set
- Spec:
  * re-enable test suite</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1605009600">- 0.171.1
  * maintainer search: lookup via package name by default and binary as fallback
  * fix crash on console resize when downloading files during build
  * add proper repourls to osc reporuls
  * new command osc releaserequest: This command is used to transfer sources and  
      binaries without rebuilding them.
      It requires defined release targets set to trigger="manual".
  * some improvements on output of help and error messages</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1611748800">- 0.172.0:
  * support --lastsucceeded/--last-succeeded in "osc buildlog", "osc
    remotebuildlog" + friends (perform the corresponding operation on
    the build log of the last successful build)
  * fix pypi deployment via Travis CI
  * several fixes in request related code paths (no double html_escape
    of a request's description etc.)
  * support local builds in a systemd-nspawn container
  * fix potential TypeErrors+UnicodeEncodeErrors in the util.cpio and
    util.ar modules
  * support local flatpak builds (requires a recent build version)
  * "osc init &lt;prj&gt;" works for a non-existent (server-side) project &lt;prj&gt;
  * .old dir support for source services so that some services have access
    to the results of a previous service run</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1611748801">- reformat spec with a recent version of the obs-service-format_spec_file
  service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620216000">- Install macros.osc to %{_rpmmacrodir}, not to /etc/rpm.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1621339200">- 0.173.0:
  * add showlinked command to show all references of packages linking to a given one
  * add build --shell-after-build flag. It can also be set via .oscrc.
  * add build --stage flag. Useful for example for fixing file lists and just
    running the install section to see the result of it (use --stage=i=).
    Check the help for more details.
  * allow to run build script as non-root, by setting su-wrapper empty
    =&gt; osc is not guessing anymore if user builds are wanted
  * add support for cross arch local build using a sysroot
  * support slash notation in "osc creq -a &lt;action type&gt; args"
  * add "--force" option to the "osc add" command (can be used to override
    the exclude_glob config option)
  * support the commit of arbitrary sized files
  * add support for sccache</changelog>
  <changelog author="Atilla &#xD6;NTA&#x15E; &lt;tarakbumba@gmail.com&gt;" date="1624017600">- force Mageia &gt;= 8 builds to python3; python2 is deprecated in Mageia 8 and up.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1626868800">- 0.174.0:
  * fix password deletion via "osc config -d &lt;apiurl&gt; pass"
  * support changing the password store via "osc config &lt;apiurl&gt;
  - -select-password-store")
  * support slash syntax in osc browse ("osc browse prj/pkg" is equivalent to
    "osc browse prj pkg")
  * fix the commit of a frozen package wc
  * fix local product builds using obsrepositories:/ directives
  * print a meaningful message when trying to a commit a non-existent package</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1638446400">- 0.175.0:
  * do not crash when running "osc search --binary --verbose foo"
  * don't run source services when building outside of an OSC package working copy
  * fix XDG_CONFIG_HOME
  * offer a force ("f") choice in metafile.edit's error handling code path
  * fix XPath used in search requests
  * add support for creating a workflow token via "osc token"
  * handle missing os.sysconf more gracefully
  * detachbranch: remove _link when link target got removed
  * improve error message in case of an URLError
  * fix downloading from mirrors
  * avoid sending entire projects on "osc mr"
  * fix hdmrd5 check of local cached files
  * improve logic for conffile mode handling</changelog>
  <changelog author="Matthew Davis &lt;opensuse@virtual.drop.net&gt;" date="1645531200">- 0.175.1:
  * Modified SPEC file to be more compatible with KOJI and COPR.
  * * Modified SPEC file to use python3 for CentOS/RHEL 7
  * * Modified SPEC file use fedora/rhel version macros.
  * * Changed perl to sed in %install section of SPEC file.</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1646049600">- 0.176.0
  * add -F option to osc submitreq
  * add --verbose option to build command
  * fix getbinaries command to fetch also multibuild packages
  * fix getbinaries -M/--multibuild-package option usage
  * skip fetching metadata and logs in the getbinaries command
  * do not download a bdep with a hdrmd5 from the api by default
  * re-download file from API when hdrmd5 doesn't match
  * honor --download-api-only option
  * remove Windows from the supported operating systems
  * fix license in setup.py
  * add py3.10 and py3.11 to the classifiers in setup.py
  * use the latest version of COPYING file from gnu.org
  * fix crash on terminal resize during download
  * do not fail with a traceback in case of a config error
  * preserve oscrc symlink when writing conf file
  * escape % character in binary download URLs
  * fix printing paths to built debian packages</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1650974400">- 0.177.0
  * switch to python3 in osc-wrapper and make python3 explicit
  * allow formatting of the sccache uri
  * show repository state and details
  * a few minor fixes and improvements in credentials handling
  * order credential managers by priority
  * kernel keyring is now supported as credential manager
  * support regex based name filtering in core.get_prj_results()
  * revision parsing parseRevisionOption(): cleanup and make logic consistent
  * use sr_ids[0] for superseding (fixes issues with superseding requests
    containing many packages
  * download logs and metadata in subdirs named by packages when osc getbinaries
    is issued on project level or in multibuild case
- spec file:
  * recommed python-keyring-keyutils for new kernel keyring backend</changelog>
</package>
<package pkgid="5be28e79ce523e802ddf3e78e289392bf6ed5196b897fd07c1ed6034c2c9a9bb" name="osc" arch="src">
  <version epoch="0" ver="0.177.0" rel="3.159"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1590580800">- 0.169.0
  * improve speed and usability of osc bash completion
  * switch packagequery.py to return only bytes
  * improved some error messages
  * osc add: support git@ (private github) or git:// URLs correctly
  * split dependson and whatdependson commands
  * support for osc build --shell-cmd
  * Fix kiwi build with --prefer-pkgs
  * add pkg-ccache support for osc build
  * fix security issue (bsc#1122675, CVE-2019-3681) do not allow '/' in filename</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1590753600">- 0.169.1
  * add --ccache option to osc getbinaries</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1593691200">- Really fix path for fish completion file to
  /usr/share/fish/vendor_completions.d and fix its permissions.</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1594296000">- 0.170.0
  * fix code for python3.8 and python3.9
  * remove dead code
  * fix tests
  * don't use chardet to guess encoding. utf-8 or latin-1 is now assumed
    This will speed up decoding (bsc#1173926)
  * escape sequences are interpreted correctly on -m
    osc sr -m "1st line\n2nd line"
    results in
    1st line
    2nd line
  * add status filter to osc results
  * add --brief to osc prjresults
    Gives:
    build openSUSE_Leap_15.1 x86_64 succeeded
    build openSUSE_Leap_15.0 x86_64 succeeded
    build openSUSE_Leap_15.0 armv7l unresolvable
    build openSUSE_Factory_ARM armv7l succeeded
    build openSUSE_Factory_ARM aarch64 succeeded
  * osc prjresults -s &lt;status&gt;: status can now be the long text like "succeeded", "failed"
  * improve error message if osc service &lt;servicename&gt; is not run in working directory
  * web links are now also printed for osc mr when print_web_links=1 is set
- Spec:
  * re-enable test suite</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1605009600">- 0.171.1
  * maintainer search: lookup via package name by default and binary as fallback
  * fix crash on console resize when downloading files during build
  * add proper repourls to osc reporuls
  * new command osc releaserequest: This command is used to transfer sources and  
      binaries without rebuilding them.
      It requires defined release targets set to trigger="manual".
  * some improvements on output of help and error messages</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1611748800">- 0.172.0:
  * support --lastsucceeded/--last-succeeded in "osc buildlog", "osc
    remotebuildlog" + friends (perform the corresponding operation on
    the build log of the last successful build)
  * fix pypi deployment via Travis CI
  * several fixes in request related code paths (no double html_escape
    of a request's description etc.)
  * support local builds in a systemd-nspawn container
  * fix potential TypeErrors+UnicodeEncodeErrors in the util.cpio and
    util.ar modules
  * support local flatpak builds (requires a recent build version)
  * "osc init &lt;prj&gt;" works for a non-existent (server-side) project &lt;prj&gt;
  * .old dir support for source services so that some services have access
    to the results of a previous service run</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1611748801">- reformat spec with a recent version of the obs-service-format_spec_file
  service</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1620216000">- Install macros.osc to %{_rpmmacrodir}, not to /etc/rpm.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1621339200">- 0.173.0:
  * add showlinked command to show all references of packages linking to a given one
  * add build --shell-after-build flag. It can also be set via .oscrc.
  * add build --stage flag. Useful for example for fixing file lists and just
    running the install section to see the result of it (use --stage=i=).
    Check the help for more details.
  * allow to run build script as non-root, by setting su-wrapper empty
    =&gt; osc is not guessing anymore if user builds are wanted
  * add support for cross arch local build using a sysroot
  * support slash notation in "osc creq -a &lt;action type&gt; args"
  * add "--force" option to the "osc add" command (can be used to override
    the exclude_glob config option)
  * support the commit of arbitrary sized files
  * add support for sccache</changelog>
  <changelog author="Atilla &#xD6;NTA&#x15E; &lt;tarakbumba@gmail.com&gt;" date="1624017600">- force Mageia &gt;= 8 builds to python3; python2 is deprecated in Mageia 8 and up.</changelog>
  <changelog author="Marcus H&#xFC;we &lt;suse-tux@gmx.de&gt;" date="1626868800">- 0.174.0:
  * fix password deletion via "osc config -d &lt;apiurl&gt; pass"
  * support changing the password store via "osc config &lt;apiurl&gt;
  - -select-password-store")
  * support slash syntax in osc browse ("osc browse prj/pkg" is equivalent to
    "osc browse prj pkg")
  * fix the commit of a frozen package wc
  * fix local product builds using obsrepositories:/ directives
  * print a meaningful message when trying to a commit a non-existent package</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1638446400">- 0.175.0:
  * do not crash when running "osc search --binary --verbose foo"
  * don't run source services when building outside of an OSC package working copy
  * fix XDG_CONFIG_HOME
  * offer a force ("f") choice in metafile.edit's error handling code path
  * fix XPath used in search requests
  * add support for creating a workflow token via "osc token"
  * handle missing os.sysconf more gracefully
  * detachbranch: remove _link when link target got removed
  * improve error message in case of an URLError
  * fix downloading from mirrors
  * avoid sending entire projects on "osc mr"
  * fix hdmrd5 check of local cached files
  * improve logic for conffile mode handling</changelog>
  <changelog author="Matthew Davis &lt;opensuse@virtual.drop.net&gt;" date="1645531200">- 0.175.1:
  * Modified SPEC file to be more compatible with KOJI and COPR.
  * * Modified SPEC file to use python3 for CentOS/RHEL 7
  * * Modified SPEC file use fedora/rhel version macros.
  * * Changed perl to sed in %install section of SPEC file.</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1646049600">- 0.176.0
  * add -F option to osc submitreq
  * add --verbose option to build command
  * fix getbinaries command to fetch also multibuild packages
  * fix getbinaries -M/--multibuild-package option usage
  * skip fetching metadata and logs in the getbinaries command
  * do not download a bdep with a hdrmd5 from the api by default
  * re-download file from API when hdrmd5 doesn't match
  * honor --download-api-only option
  * remove Windows from the supported operating systems
  * fix license in setup.py
  * add py3.10 and py3.11 to the classifiers in setup.py
  * use the latest version of COPYING file from gnu.org
  * fix crash on terminal resize during download
  * do not fail with a traceback in case of a config error
  * preserve oscrc symlink when writing conf file
  * escape % character in binary download URLs
  * fix printing paths to built debian packages</changelog>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1650974400">- 0.177.0
  * switch to python3 in osc-wrapper and make python3 explicit
  * allow formatting of the sccache uri
  * show repository state and details
  * a few minor fixes and improvements in credentials handling
  * order credential managers by priority
  * kernel keyring is now supported as credential manager
  * support regex based name filtering in core.get_prj_results()
  * revision parsing parseRevisionOption(): cleanup and make logic consistent
  * use sr_ids[0] for superseding (fixes issues with superseding requests
    containing many packages
  * download logs and metadata in subdirs named by packages when osc getbinaries
    is issued on project level or in multibuild case
- spec file:
  * recommed python-keyring-keyutils for new kernel keyring backend</changelog>
</package>
<package pkgid="4d3ff5411d0ffcef0fd87afa37d1ee9eff07309ee28bd33f6038f07406ece24a" name="osc" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="1.133"/>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1660219200">- fix building on distros that are not openSUSE or SLE</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1660737600">- Fix M2Crypto package name on SLE12
- Do not build with python3.6 - it does not have libraries
    nothing provides python36-M2Crypto &gt; 0.19
    nothing provides python36-chardet</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1662638400">- 0.182.0
  - fix build on SLE12 / python 2.7
  - SSH auth: Fix getallmatchingheaders() output to correspond with headers.get_all()
  - send HTTP header Accept: application/xml
  - git_version: return version from the source code if there's no matching tag
- spec file:
  - Revert to python2 on SLE12
  - Recommend openssh for ssh key auth</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1673956800">1.0.0b3
  - add create-pbuild-config (cpc) command which allows to create a working
    config for pbuild tool based on OBS server side data
  - branch: Add --disable-build option
  - linkpac: Add --disable-build option
  - linkpac: Fix linking a locked package by not copying the lock to the target package
  - sr: Do not error out on using an alias to apiurl
  - rq: Fix the -M/--mine option to show only requests created by the user
  - rq list: Avoid conflict between --all and --state options
  - rq list: Fix traceback when there's no search criteria
  - rq list -i: Enable forwarding requests to the parent projects
  - rq show: Improve output
  - sr accept: Enable forwarding requests to the parent projects
  - setlinkrev: Write a log message on setting a revision
  - buildhistory: Produce proper output using build_table() and a CSV writer
  - buildinfo: Bring the -d/--debug option back
  - build: Bring the --verbose' option back as --verbose-mode=MODE to avoid conflicts with global --verbose
  - service: Add verbose option for running local services
  - service: Fix manual run of source service
  - conf: Avoid crash when deleting a password
  - connection: Fix the '9 - review the server certificate' option in cert trust prompt
  - Handle uncompressed Debian packages
  - Fix osc add for github /archive/ URLs
  - Handle empty EDITOR=/PAGER= env variable properly
  - Mute ssl/tls deprecation warnings
  - Add "--extra-pkgs-from" ("-X") option to osc build.
  - Fix a scenario when OBS sends unexpected md5s
  - Replace core.findpacs() with Package.from_paths() and Package.from_paths_nofail()
  - Always list requests with 'new,review' states by default
  - Change get_request_collection() not to list declined requests by default
  - Add information about osc vc using the EDITOR envar to the help output
  - Improve argument handling in many commands
  - Implement Store class handling '.osc' dirs, migrate some code to it
  - Code cleanups
  - Deprecated:
  - core.get_request_list() function
  - core.store_write_apiurl() function
  - core.store_read_scmurl() function
  - core.store_read_apiurl() function
  1.0.0b2
  - Support ssh-agent forwarding
  - ssh auth: Avoid password prompt when using TransientCredentialsManager
  - Properly handle missing ssh-keygen and ssh-add
  - Add ssh-keygen as a recommends for ssh MFA authentication
  - Print user and apiurl when prompting for a password
  - Pass apiurl to all auth handlers
  - Do not list declined requests by default
  - Fix 'osc up' on project level for scm packages
  - Lock cookiejar to prevent unnecessary signature auth
  - Process input with configurable project separators
  - Add project_separator to config file
  - Fix race condition in using .old directory in Serviceinfo.execute()
  - Send HTTP header Accept: application/xml
  - Print URLs and xpaths in debug rather than verbose mode
  - Inject no-op print() into http.client when http debugging is off
  - Reset "file current position" on errors in HTTP requests
  - Create ~/.config/osc/trusted-certs if not exists
  - conf: Convert defaults to their expected types
  - Document `build` repo selection logic
  - Add debug print for REPO (and desc just in case)
  - Shortened `build` help and add debug prints
  - Replace unmaintained cmdln.py with a custom code
  - Allow intermixing positional and optional args
  - Add global options to subcommands so they can be specified in any place
  - Remove the '-A' option from the 'maintainer' command
  - Replace the '-q/--hide-legend' option in 'prjresults' command with global '-q/--quiet' option
  - Remove duplicated --debug and --verbose options
  - Add version command to print the used version
  - Remove deprecated 'plaintext_passwd' config option
  - Remove deprecated 'GnomeKeyringCredentialsManager' and related code
  - Remove deprecated '--skip-validation' option from the 'commit' command
  - Remove deprecated '--oldpkg', '--oldprj' options from the 'rdiff' command
  - Remove deprecated subcommands 'create', 'list', 'log', 'show', 'decline', 'accept', 'delete', 'revoke' from the 'submitrequest' command
  - Remove deprecated '--seperate-requests' option from the 'submitrequest' command
  - Remove deprecated '--raw' option from the 'develproject' command
  - Remove deprecated '--maintained' option from the 'search' command
  - Remove deprecated 'rlog' command
  - Remove deprecated 'rprjresults' command
  - Remove deprecated 'rresults' command
  - Remove deprecated 'results_meta' command
  - Remove deprecated 'deleteprj' command
  - Remove deprecated 'deletepac' command
  - Remove deprecated 'editmeta' command
  - Remove deprecated Request.get_creator()
  - Remove PROJ_PACK.txt file, move its content to GitHub issue #1099
  - Remove TODO file, move its content to GitHub issue #1098
  - Remove fuse support
  - Remove unused run_bandit.sh
  - Remove obsolete osc_expand_link.pl
  - Remove unused icons
  - Replace imp with importlib
  - Move files from dist/ to contrib/
  - Move osc.fish under contrib/
  - Move python package metadata from setup.py to setup.cfg
  - Move __version__ from osc.core to osc
  - Fix resource warnings (unclosed files)
- 1.0.0b1
  - drop Python 2 support
  - switch http_request() to urllib3 and cryptography (drop M2Crypto dependency)
  - warn when using HTTP connection, Make HTTPS the default
  - add XDG compatible location for osc plugins
  - replace osc-wrapper.py with entry_points.
  - core: add functions for glob matching of multibuild flavors
  - fix multibuild packages in all osc commands where applicable
  - do not ask for login for -h,--help
  - move format_table() to util.helper
  - code cleanups</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674648000">- add 1228.patch to fix regressions in get_request_list
- add 1217.patch to fix correct variable (prj instead of project)</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1675425600">- 1.0.0b4
  - Fix regressions to osc 0.x:
  - mv: Fix traceback due to missing target file name
  - rm: Fix creating a Package object by providing multiple files on the command line
  - copypac: Fix downgrading a package to an old revision
  - buildhist: Fix running from a package checkout
  - rebuild: Fix running from a package checkout
  - rdiff: Fix traceback when new project is not specified
  - rq list: Fix passing values of the --type option
  - build: Fix reading extra-pkgs from oscrc
  - Support withfullhistory in osc.core.get_request_list again
  - Fix osc.get_request_list ignoring the req_type parameter
  - Revert "Do not list declined requests by default"
  - connection: Mute the "Converted retries value" debug message
  - connection: Fix traceback on loading an invalid cookiejar file
  - connection: Save cookiejar only when there's a Set-Cookie header in the response
  - Add oscerr.ProjectError class needed by core.delete_project()
  - Fix all errors reported by pylint
- spec file:
  - drop upstreamed patches:
  - 1217.patch
  - 1228.patch
  - Recommend python3-distro - needed for setting the default editor by distro</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1675944000">- 1.0.0b5
  - rq list: Fix a traceback when --type is not specified
  - core.checkout_package(): Use pathlib.Path
  - connection: Retry all, not just default allowed methods
  - connection: Wait between retries</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1678795200">- 1.0.0
  - Revert "Remove the '-A' option from the 'maintainer' command"
  - core.get_request_list: Remove deprecation warning
  - meta attribute: Add --add option to append values to the existing list
  - Replace arbitrary XML escaping code with xml_escape()
  - build: New option 'disable_hdrmd5_check' to ignore hdrmd5 mismatches
  - commit: Pass --force down to delete_package</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1678795201">- 1.0.0 (full changelog to the latest stable version 0.182.0)
  - Command-line:
  - Use '.' as a wildcard that resolves to a project or a package name from the current working copy, for example 'osc rdiff ./. -c &lt;num&gt;'
  - Add 'create-pbuild-config' (cpc) command
  - Add '--disable-build' option to the 'branch' command
  - Add '--disable-build' option to the 'linkpac' command
  - Add '-X/--extra-pkgs-from' option to the 'build' command
  - Add '--add' option to the 'meta' command that appends new values to the existing values
  - Replace '-q/--hide-legend' option in 'prjresults' command with global '-q/--quiet' option
  - Replace '--debug' option in the 'getbinaries' command with '--debuginfo' to avoid conflicts with the global '--debug'
  - Replace '--verbose' option in the 'build' command with '--verbose-mode' to avoid conflicts with the global '--verbose'
  - Replace '--version' option with 'version' command
  - Enable forwarding requests to the parent projects in 'rq list -i' and 'sr accept' commands
  - Make use of '-M/--multibuild' option consistent across the commands
  - Enhance '--force' option in the 'commit' command to allow deleting packages even if other packages depend on them
  - Print URLs and xpaths in the debug rather than the verbose mode
  - Fix 'add' command for github /archive/ URLs
  - Fix 'buildhistory' command to produce proper output using build_table() and a CSV writer
  - Fix 'linkpac' command to avoid copying a lock from a locked package to the target package
  - Fix 'setlinkrev' command to write a log message on setting a revision
  - Fix 'submitrequest' command not to error out on using an alias to apiurl
  - Fix 'update' command on project level for scm packages
  - Fix '--mine' option in the 'request' command to show only requests created by the user
  - Fix the documentation url in the 'maintenancerequest' and 'createincident' commands
  - Remove '--skip-validation' option from the 'commit' command
  - Remove '--oldpkg', '--oldprj' options from the 'rdiff' command
  - Remove 'create', 'list', 'log', 'show', 'decline', 'accept', 'delete', 'revoke' subcommands from the 'submitrequest' command
  - Remove '--seperate-requests' option from the 'submitrequest' command
  - Remove '--raw' option from the 'develproject' command
  - Remove '--maintained' option from the 'search' command
  - Remove 'deleteprj' command
  - Remove 'deletepac' command
  - Remove 'editmeta' command
  - Remove 'results_meta' command
  - Remove 'rlog' command
  - Remove 'rprjresults' command
  - Remove 'rresults' command
  - Configuration:
  - Add 'project_separator' config option
  - Add 'disable_hdrmd5_check' config option to ignore hdrmd5 mismatches
  - Remove 'plaintext_passwd' config option
  - Library:
  - Add Store class that will replace store_{read,write}* functions
  - Remove 'GnomeKeyringCredentialsManager' and related code
  - Remove Request.get_creator() method
  - Replace unmaintained cmdln.py with a custom code based on argparse
  - Replace core.findpacs() with Package.from_paths() and Package.from_paths_nofail()
  - Drop Python 2 support, Python 3.6 is the lowest supported version
  - Code cleanups, following PEP 8 and the latest best practices now
  - Improve handling of hdrmd5 mismatches
  - Handle uncompressed Debian packages
  - Replace arbitrary XML escaping code with xml_escape()
  - Fix race condition in using .old directory in Serviceinfo.execute()
  - Fix manual run of source service
  - Connection:
  - Switch http_request() to urllib3 and cryptography (drop M2Crypto dependency)
  - Warn when using HTTP connection, make HTTPS the default
  - Send HTTP header Accept: application/xml
  - Wait between retries
  - Authentication:
  - Support signature (ssh) auth including ssh-agent forwarding
  - Lock cookiejar to prevent unnecessary signature auth by waiting for a session cookie
  - Print user and apiurl when prompting for a password
  - Fix a crash when deleting a password
  - Known issues:
  - Commandline option values cannot start with '-', for example: osc build -x -vim
    Background: This is a limitation of underlying Python's argparse
    How to fix: Use '=' to join the option with its value: osc build -x=-vim
    URL: https://github.com/openSUSE/osc/issues/1227
  - Commandline positional arguments no longer recognize '/' as a universal argument separator
    Background: This is an attempt to bring some consistency into argument parsing, reducing number of separators and value combinations
    How to fix: Separate &lt;project&gt;/&lt;package&gt; from &lt;repo&gt;/&lt;arch&gt; with a space
    URL: https://github.com/openSUSE/osc/issues/1272</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1679054400">- 1.0.1
  - Configuration:
  - Fix a cut&amp;paste error in setting 'disable_hdrmd5_check' config option
  - Connection:
  - Set Content-Type of POST requests without data to 'application/x-www-form-urlencoded'</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1680523200">- 1.1.0
  - Command-line:
  - New class-based commands
  - Sort commands before printing help
  - No longer read plugins from /var/lib/osc-plugins
  - Configuration:
  - Do not error out on setting oscrc permissions if the file is owned by another user
  - Library:
  - Restore 'include_request_from_project' conf option functionality
  - Simplify how babysitter works with options and config
  - Prefer f-strings over c-style string expansion</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1681214400">- 1.1.1
  - Command-line:
  - Fix 'creq' command that wasn't working at all
  - Fix 'ls' command when listing all projects by setting project argument to '/'
  - Fix regression: Run interactive config setup on missing config or credentials
  - Append plugin dirs to sys.path to allow loading modules installed next to the plugins
  - Do not recurse into subdirs when loading plugins
  - Configuration:
  - Display apiurl when asking for a username or a password
  - If apiurl is not set in interactive_config_setup(), use apiurl from DEFAULTS
  - Library:
  - Decode entities in HTTPError message body</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1683115200">- 1.1.2
  - Command-line:
  - Add '--buildtool-opt' option passing options to underlying rpmbuild to the 'build' command
  - Fix 'diff' command to support diffing selected files only
  - Identify inherited packages in the 'dependson' command output
  - Bring the '--debug' option back to the 'buildinfo' command
  - Fix 'buildhistory' command by setting the type of the '--limit' option to int
  - Library:
  - Fix a traceback when failed to unlock a keyring
  - Don't retry on 400 HTTP status code in core.server_diff()
  - Clean-up the '.old' folder if an exception happens
  - Document 'popt' attribute in the _link template
  - Fix build.get_repo() to return only directory that contains 'repodata/repomd.xml'
  - Connection:
  - Retry on receiving the following HTTP status codes: 400, 500, 502, 503, 504
  - Allow disabling retry on 400 HTTP status code
  - Fix urlgrab to skip mirrors with invalid scheme</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1683720000">- 1.1.3
  - Command-line:
  - Backup edited messages and notify user about them when osc errors out
  - Consider only open requests when listing requests with a given review state
  - Fix 'diff' command when no files are specified
  - Configuration:
  - Add glob support to the 'trusted_prj' config option
  - Library:
  - Fix core.xmlindent() to work with ElementTree objects</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1684929600">- 1.1.4
  - Command-line:
  - Change 'review list' command to display open requests (state: new, review, declined)
  - Fix running osc in an AppImage by switching to the correct working directory
  - Handle ProtocolError exception
  - Library:
  - Add 'req_states' parameter to osc.core.get_review_list()
  - Connection:
  - Fix grabber to work with old urllib3 versions that do not contain URLSchemeUnknown exception</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1689336000">- 1.2.0
  - Command-line:
  - Add 'repo' command and subcommands for managing repositories in project meta
  - Extend 'browse' command to open requests in a web browser
  - Add highlighting for 'osc diff' and similar commands
  - Fix 'api' command to stream output to avoid running out of memory
  - Fix printing utf-8 characters to stdout
  - Connection:
  - Fix ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled
  - Authentication:
  - Correctly handle passwords with utf-8 characters
  - Library:
  - Fix crash when submiting a SCM package which has no _link
  - Fix local service execution of scmsync packages
  - Detect target package by its full name, instead of assuming its origin is identical to the source package type
  - Other:
  - Spell openSUSE correctly</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1691582400">- 1.3.0
  - Command-line:
  - Add experimental support of Git SCM to the 'build' command
  - Add experimental support of Git SCM to the 'service' command
  - Make 'meta' command capable of editing attributes
  - Change '--add' option in 'meta attribute' command to skip duplicate values
  - Add an interactive option to display build log in 'request list -i' command
  - Add '--setopt' option for setting config options from the command-line
  - Fix '--prefer-pkgs' option for noinstall="1" packages in kiwi builds
  - Change 'checkout' command to print open requests only when running in an interactive terminal
  - Enhance '--force' option description in the 'request' command
  - Connection:
  - Fix crash when HTTP_PROXY env contains no auth
  - Library:
  - Add 'git_scm' module for handling packages that live in git scm rather than usual obs scm
  - Change pop_project_package_from_args() to use get_store() to support Git SCM
  - Change osc.build module to use 'store' object instead of calling core.store_*() functions
  - Use alternative project if specified in parse_repoarchdescr()
  - Fix xml indent() on Python 3.6
  - Fix less pager by adding '-R' to LESS env
  - Improve print_msg() and migrate some arbitrary prints to it</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1693224000">- 1.3.1
  - Command-line:
  - Fix string + int concatenation errors in 'build' command by using f-strings instead
  - Fix '--all' option in 'rebuild' command
  - Fix 'build' command when '--alternative-project' option is specified and the git branch cannot be mapped to a project
  - Stop suggesting that the working directory is git/mercurial/svn/cvs
  - Be helpful in deprecating commands
  - Configuration:
  - Add more config options among integer options
  - Library:
  - Fix GitStore to error out properly if there is no 'origin' remote in the git repo
  - print_buildlog: Remove control characters from build log before printing (CVE-2012-1095)</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1696420800">- 1.4.0
  - Command-line:
  - Add rootless build support to 'build' command for 'kvm' and 'podman' vm types
  - Print a hint to clean the build root after a failed build
  - Avoid adding a newline to prompt in 'wipe' command
  - Fix 'build' command to pass '--vm-type' option to the underlying build tool
  - Add '--just-print-buildroot' option to print build root path and exit to 'build' command
  - Add support for keep_packages_locked on request revoke
  - Import zsh completition made by Holger Macht and improve it
  - Use XDG locations in completion
  - Fix 'search' command to resolve '-B .' to the current project
  - Add '-M/--multibuild-package' option to 'checkconstraints' command
  - Allow constraints file with remote request in 'checkconstraints' command
  - Unify how the 'commit' and 'build' commands work with '--noservice' option
  - Fix 'request show' command to print superseded_by information
  - Fix 'service' command to support already documented 'r' abbreviation for 'run'
  - Configuration:
  - Implement 'exclude_files' and 'include_files' config options that allow skipping files in the 'checkout' command
  - Fix api_host_options for custom CAs (cafile and capath options work again)
  - Switch 'osc.conf.config' from dict to Options class with type checking
  - Rename conf.Options.build_type to vm_type to be consistent with obs build and osc --vm-type option
  - Update list of supported vm_type values in conf.Options.vm_type
  - Remove any duplicated code loading configuration from ENV
  - Library:
  - Add 'osc.util.models' module implementing an alternative pydantic-like data validation
  - Add 'osc.util.xdg' module for handling XDG paths
  - Fix handling empty vm_type in Store.last_buildroot
  - Spec:
  - Install zsh completion
  - Build and install oscrc man page</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1696939200">- 1.4.1
  - Configuration:
  - Always display apiurl when asking for credentials
  - Ask for new credentials when user is missing from an apiurl section in the config file
  - Library:
  - Fix testing revision for being empty
  - Fix core.change_request_state_template() to always return a string
  - Tests:
  - Replace 'git init -b' with 'git init' and 'git checkout -b'
  - Spec:
  - Run fdupes after install
  - List the python sitelib paths explicitly
  - Mark csh completion files as configs
  - Own zsh completion dirs to mute rpmlint errors
  - Move bash completion from /etc to /usr/share</changelog>
</package>
<package pkgid="40d9cc051c4f28704415c5fc1db3d96edd82b8677878dcca1022168497cddbb7" name="osc" arch="src">
  <version epoch="0" ver="1.4.1" rel="1.133"/>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1660219200">- fix building on distros that are not openSUSE or SLE</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1660737600">- Fix M2Crypto package name on SLE12
- Do not build with python3.6 - it does not have libraries
    nothing provides python36-M2Crypto &gt; 0.19
    nothing provides python36-chardet</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1662638400">- 0.182.0
  - fix build on SLE12 / python 2.7
  - SSH auth: Fix getallmatchingheaders() output to correspond with headers.get_all()
  - send HTTP header Accept: application/xml
  - git_version: return version from the source code if there's no matching tag
- spec file:
  - Revert to python2 on SLE12
  - Recommend openssh for ssh key auth</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1673956800">1.0.0b3
  - add create-pbuild-config (cpc) command which allows to create a working
    config for pbuild tool based on OBS server side data
  - branch: Add --disable-build option
  - linkpac: Add --disable-build option
  - linkpac: Fix linking a locked package by not copying the lock to the target package
  - sr: Do not error out on using an alias to apiurl
  - rq: Fix the -M/--mine option to show only requests created by the user
  - rq list: Avoid conflict between --all and --state options
  - rq list: Fix traceback when there's no search criteria
  - rq list -i: Enable forwarding requests to the parent projects
  - rq show: Improve output
  - sr accept: Enable forwarding requests to the parent projects
  - setlinkrev: Write a log message on setting a revision
  - buildhistory: Produce proper output using build_table() and a CSV writer
  - buildinfo: Bring the -d/--debug option back
  - build: Bring the --verbose' option back as --verbose-mode=MODE to avoid conflicts with global --verbose
  - service: Add verbose option for running local services
  - service: Fix manual run of source service
  - conf: Avoid crash when deleting a password
  - connection: Fix the '9 - review the server certificate' option in cert trust prompt
  - Handle uncompressed Debian packages
  - Fix osc add for github /archive/ URLs
  - Handle empty EDITOR=/PAGER= env variable properly
  - Mute ssl/tls deprecation warnings
  - Add "--extra-pkgs-from" ("-X") option to osc build.
  - Fix a scenario when OBS sends unexpected md5s
  - Replace core.findpacs() with Package.from_paths() and Package.from_paths_nofail()
  - Always list requests with 'new,review' states by default
  - Change get_request_collection() not to list declined requests by default
  - Add information about osc vc using the EDITOR envar to the help output
  - Improve argument handling in many commands
  - Implement Store class handling '.osc' dirs, migrate some code to it
  - Code cleanups
  - Deprecated:
  - core.get_request_list() function
  - core.store_write_apiurl() function
  - core.store_read_scmurl() function
  - core.store_read_apiurl() function
  1.0.0b2
  - Support ssh-agent forwarding
  - ssh auth: Avoid password prompt when using TransientCredentialsManager
  - Properly handle missing ssh-keygen and ssh-add
  - Add ssh-keygen as a recommends for ssh MFA authentication
  - Print user and apiurl when prompting for a password
  - Pass apiurl to all auth handlers
  - Do not list declined requests by default
  - Fix 'osc up' on project level for scm packages
  - Lock cookiejar to prevent unnecessary signature auth
  - Process input with configurable project separators
  - Add project_separator to config file
  - Fix race condition in using .old directory in Serviceinfo.execute()
  - Send HTTP header Accept: application/xml
  - Print URLs and xpaths in debug rather than verbose mode
  - Inject no-op print() into http.client when http debugging is off
  - Reset "file current position" on errors in HTTP requests
  - Create ~/.config/osc/trusted-certs if not exists
  - conf: Convert defaults to their expected types
  - Document `build` repo selection logic
  - Add debug print for REPO (and desc just in case)
  - Shortened `build` help and add debug prints
  - Replace unmaintained cmdln.py with a custom code
  - Allow intermixing positional and optional args
  - Add global options to subcommands so they can be specified in any place
  - Remove the '-A' option from the 'maintainer' command
  - Replace the '-q/--hide-legend' option in 'prjresults' command with global '-q/--quiet' option
  - Remove duplicated --debug and --verbose options
  - Add version command to print the used version
  - Remove deprecated 'plaintext_passwd' config option
  - Remove deprecated 'GnomeKeyringCredentialsManager' and related code
  - Remove deprecated '--skip-validation' option from the 'commit' command
  - Remove deprecated '--oldpkg', '--oldprj' options from the 'rdiff' command
  - Remove deprecated subcommands 'create', 'list', 'log', 'show', 'decline', 'accept', 'delete', 'revoke' from the 'submitrequest' command
  - Remove deprecated '--seperate-requests' option from the 'submitrequest' command
  - Remove deprecated '--raw' option from the 'develproject' command
  - Remove deprecated '--maintained' option from the 'search' command
  - Remove deprecated 'rlog' command
  - Remove deprecated 'rprjresults' command
  - Remove deprecated 'rresults' command
  - Remove deprecated 'results_meta' command
  - Remove deprecated 'deleteprj' command
  - Remove deprecated 'deletepac' command
  - Remove deprecated 'editmeta' command
  - Remove deprecated Request.get_creator()
  - Remove PROJ_PACK.txt file, move its content to GitHub issue #1099
  - Remove TODO file, move its content to GitHub issue #1098
  - Remove fuse support
  - Remove unused run_bandit.sh
  - Remove obsolete osc_expand_link.pl
  - Remove unused icons
  - Replace imp with importlib
  - Move files from dist/ to contrib/
  - Move osc.fish under contrib/
  - Move python package metadata from setup.py to setup.cfg
  - Move __version__ from osc.core to osc
  - Fix resource warnings (unclosed files)
- 1.0.0b1
  - drop Python 2 support
  - switch http_request() to urllib3 and cryptography (drop M2Crypto dependency)
  - warn when using HTTP connection, Make HTTPS the default
  - add XDG compatible location for osc plugins
  - replace osc-wrapper.py with entry_points.
  - core: add functions for glob matching of multibuild flavors
  - fix multibuild packages in all osc commands where applicable
  - do not ask for login for -h,--help
  - move format_table() to util.helper
  - code cleanups</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1674648000">- add 1228.patch to fix regressions in get_request_list
- add 1217.patch to fix correct variable (prj instead of project)</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1675425600">- 1.0.0b4
  - Fix regressions to osc 0.x:
  - mv: Fix traceback due to missing target file name
  - rm: Fix creating a Package object by providing multiple files on the command line
  - copypac: Fix downgrading a package to an old revision
  - buildhist: Fix running from a package checkout
  - rebuild: Fix running from a package checkout
  - rdiff: Fix traceback when new project is not specified
  - rq list: Fix passing values of the --type option
  - build: Fix reading extra-pkgs from oscrc
  - Support withfullhistory in osc.core.get_request_list again
  - Fix osc.get_request_list ignoring the req_type parameter
  - Revert "Do not list declined requests by default"
  - connection: Mute the "Converted retries value" debug message
  - connection: Fix traceback on loading an invalid cookiejar file
  - connection: Save cookiejar only when there's a Set-Cookie header in the response
  - Add oscerr.ProjectError class needed by core.delete_project()
  - Fix all errors reported by pylint
- spec file:
  - drop upstreamed patches:
  - 1217.patch
  - 1228.patch
  - Recommend python3-distro - needed for setting the default editor by distro</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1675944000">- 1.0.0b5
  - rq list: Fix a traceback when --type is not specified
  - core.checkout_package(): Use pathlib.Path
  - connection: Retry all, not just default allowed methods
  - connection: Wait between retries</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1678795200">- 1.0.0
  - Revert "Remove the '-A' option from the 'maintainer' command"
  - core.get_request_list: Remove deprecation warning
  - meta attribute: Add --add option to append values to the existing list
  - Replace arbitrary XML escaping code with xml_escape()
  - build: New option 'disable_hdrmd5_check' to ignore hdrmd5 mismatches
  - commit: Pass --force down to delete_package</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1678795201">- 1.0.0 (full changelog to the latest stable version 0.182.0)
  - Command-line:
  - Use '.' as a wildcard that resolves to a project or a package name from the current working copy, for example 'osc rdiff ./. -c &lt;num&gt;'
  - Add 'create-pbuild-config' (cpc) command
  - Add '--disable-build' option to the 'branch' command
  - Add '--disable-build' option to the 'linkpac' command
  - Add '-X/--extra-pkgs-from' option to the 'build' command
  - Add '--add' option to the 'meta' command that appends new values to the existing values
  - Replace '-q/--hide-legend' option in 'prjresults' command with global '-q/--quiet' option
  - Replace '--debug' option in the 'getbinaries' command with '--debuginfo' to avoid conflicts with the global '--debug'
  - Replace '--verbose' option in the 'build' command with '--verbose-mode' to avoid conflicts with the global '--verbose'
  - Replace '--version' option with 'version' command
  - Enable forwarding requests to the parent projects in 'rq list -i' and 'sr accept' commands
  - Make use of '-M/--multibuild' option consistent across the commands
  - Enhance '--force' option in the 'commit' command to allow deleting packages even if other packages depend on them
  - Print URLs and xpaths in the debug rather than the verbose mode
  - Fix 'add' command for github /archive/ URLs
  - Fix 'buildhistory' command to produce proper output using build_table() and a CSV writer
  - Fix 'linkpac' command to avoid copying a lock from a locked package to the target package
  - Fix 'setlinkrev' command to write a log message on setting a revision
  - Fix 'submitrequest' command not to error out on using an alias to apiurl
  - Fix 'update' command on project level for scm packages
  - Fix '--mine' option in the 'request' command to show only requests created by the user
  - Fix the documentation url in the 'maintenancerequest' and 'createincident' commands
  - Remove '--skip-validation' option from the 'commit' command
  - Remove '--oldpkg', '--oldprj' options from the 'rdiff' command
  - Remove 'create', 'list', 'log', 'show', 'decline', 'accept', 'delete', 'revoke' subcommands from the 'submitrequest' command
  - Remove '--seperate-requests' option from the 'submitrequest' command
  - Remove '--raw' option from the 'develproject' command
  - Remove '--maintained' option from the 'search' command
  - Remove 'deleteprj' command
  - Remove 'deletepac' command
  - Remove 'editmeta' command
  - Remove 'results_meta' command
  - Remove 'rlog' command
  - Remove 'rprjresults' command
  - Remove 'rresults' command
  - Configuration:
  - Add 'project_separator' config option
  - Add 'disable_hdrmd5_check' config option to ignore hdrmd5 mismatches
  - Remove 'plaintext_passwd' config option
  - Library:
  - Add Store class that will replace store_{read,write}* functions
  - Remove 'GnomeKeyringCredentialsManager' and related code
  - Remove Request.get_creator() method
  - Replace unmaintained cmdln.py with a custom code based on argparse
  - Replace core.findpacs() with Package.from_paths() and Package.from_paths_nofail()
  - Drop Python 2 support, Python 3.6 is the lowest supported version
  - Code cleanups, following PEP 8 and the latest best practices now
  - Improve handling of hdrmd5 mismatches
  - Handle uncompressed Debian packages
  - Replace arbitrary XML escaping code with xml_escape()
  - Fix race condition in using .old directory in Serviceinfo.execute()
  - Fix manual run of source service
  - Connection:
  - Switch http_request() to urllib3 and cryptography (drop M2Crypto dependency)
  - Warn when using HTTP connection, make HTTPS the default
  - Send HTTP header Accept: application/xml
  - Wait between retries
  - Authentication:
  - Support signature (ssh) auth including ssh-agent forwarding
  - Lock cookiejar to prevent unnecessary signature auth by waiting for a session cookie
  - Print user and apiurl when prompting for a password
  - Fix a crash when deleting a password
  - Known issues:
  - Commandline option values cannot start with '-', for example: osc build -x -vim
    Background: This is a limitation of underlying Python's argparse
    How to fix: Use '=' to join the option with its value: osc build -x=-vim
    URL: https://github.com/openSUSE/osc/issues/1227
  - Commandline positional arguments no longer recognize '/' as a universal argument separator
    Background: This is an attempt to bring some consistency into argument parsing, reducing number of separators and value combinations
    How to fix: Separate &lt;project&gt;/&lt;package&gt; from &lt;repo&gt;/&lt;arch&gt; with a space
    URL: https://github.com/openSUSE/osc/issues/1272</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1679054400">- 1.0.1
  - Configuration:
  - Fix a cut&amp;paste error in setting 'disable_hdrmd5_check' config option
  - Connection:
  - Set Content-Type of POST requests without data to 'application/x-www-form-urlencoded'</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1680523200">- 1.1.0
  - Command-line:
  - New class-based commands
  - Sort commands before printing help
  - No longer read plugins from /var/lib/osc-plugins
  - Configuration:
  - Do not error out on setting oscrc permissions if the file is owned by another user
  - Library:
  - Restore 'include_request_from_project' conf option functionality
  - Simplify how babysitter works with options and config
  - Prefer f-strings over c-style string expansion</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1681214400">- 1.1.1
  - Command-line:
  - Fix 'creq' command that wasn't working at all
  - Fix 'ls' command when listing all projects by setting project argument to '/'
  - Fix regression: Run interactive config setup on missing config or credentials
  - Append plugin dirs to sys.path to allow loading modules installed next to the plugins
  - Do not recurse into subdirs when loading plugins
  - Configuration:
  - Display apiurl when asking for a username or a password
  - If apiurl is not set in interactive_config_setup(), use apiurl from DEFAULTS
  - Library:
  - Decode entities in HTTPError message body</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1683115200">- 1.1.2
  - Command-line:
  - Add '--buildtool-opt' option passing options to underlying rpmbuild to the 'build' command
  - Fix 'diff' command to support diffing selected files only
  - Identify inherited packages in the 'dependson' command output
  - Bring the '--debug' option back to the 'buildinfo' command
  - Fix 'buildhistory' command by setting the type of the '--limit' option to int
  - Library:
  - Fix a traceback when failed to unlock a keyring
  - Don't retry on 400 HTTP status code in core.server_diff()
  - Clean-up the '.old' folder if an exception happens
  - Document 'popt' attribute in the _link template
  - Fix build.get_repo() to return only directory that contains 'repodata/repomd.xml'
  - Connection:
  - Retry on receiving the following HTTP status codes: 400, 500, 502, 503, 504
  - Allow disabling retry on 400 HTTP status code
  - Fix urlgrab to skip mirrors with invalid scheme</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1683720000">- 1.1.3
  - Command-line:
  - Backup edited messages and notify user about them when osc errors out
  - Consider only open requests when listing requests with a given review state
  - Fix 'diff' command when no files are specified
  - Configuration:
  - Add glob support to the 'trusted_prj' config option
  - Library:
  - Fix core.xmlindent() to work with ElementTree objects</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1684929600">- 1.1.4
  - Command-line:
  - Change 'review list' command to display open requests (state: new, review, declined)
  - Fix running osc in an AppImage by switching to the correct working directory
  - Handle ProtocolError exception
  - Library:
  - Add 'req_states' parameter to osc.core.get_review_list()
  - Connection:
  - Fix grabber to work with old urllib3 versions that do not contain URLSchemeUnknown exception</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1689336000">- 1.2.0
  - Command-line:
  - Add 'repo' command and subcommands for managing repositories in project meta
  - Extend 'browse' command to open requests in a web browser
  - Add highlighting for 'osc diff' and similar commands
  - Fix 'api' command to stream output to avoid running out of memory
  - Fix printing utf-8 characters to stdout
  - Connection:
  - Fix ValueError: Cannot set verify_mode to CERT_NONE when check_hostname is enabled
  - Authentication:
  - Correctly handle passwords with utf-8 characters
  - Library:
  - Fix crash when submiting a SCM package which has no _link
  - Fix local service execution of scmsync packages
  - Detect target package by its full name, instead of assuming its origin is identical to the source package type
  - Other:
  - Spell openSUSE correctly</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1691582400">- 1.3.0
  - Command-line:
  - Add experimental support of Git SCM to the 'build' command
  - Add experimental support of Git SCM to the 'service' command
  - Make 'meta' command capable of editing attributes
  - Change '--add' option in 'meta attribute' command to skip duplicate values
  - Add an interactive option to display build log in 'request list -i' command
  - Add '--setopt' option for setting config options from the command-line
  - Fix '--prefer-pkgs' option for noinstall="1" packages in kiwi builds
  - Change 'checkout' command to print open requests only when running in an interactive terminal
  - Enhance '--force' option description in the 'request' command
  - Connection:
  - Fix crash when HTTP_PROXY env contains no auth
  - Library:
  - Add 'git_scm' module for handling packages that live in git scm rather than usual obs scm
  - Change pop_project_package_from_args() to use get_store() to support Git SCM
  - Change osc.build module to use 'store' object instead of calling core.store_*() functions
  - Use alternative project if specified in parse_repoarchdescr()
  - Fix xml indent() on Python 3.6
  - Fix less pager by adding '-R' to LESS env
  - Improve print_msg() and migrate some arbitrary prints to it</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1693224000">- 1.3.1
  - Command-line:
  - Fix string + int concatenation errors in 'build' command by using f-strings instead
  - Fix '--all' option in 'rebuild' command
  - Fix 'build' command when '--alternative-project' option is specified and the git branch cannot be mapped to a project
  - Stop suggesting that the working directory is git/mercurial/svn/cvs
  - Be helpful in deprecating commands
  - Configuration:
  - Add more config options among integer options
  - Library:
  - Fix GitStore to error out properly if there is no 'origin' remote in the git repo
  - print_buildlog: Remove control characters from build log before printing (CVE-2012-1095)</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1696420800">- 1.4.0
  - Command-line:
  - Add rootless build support to 'build' command for 'kvm' and 'podman' vm types
  - Print a hint to clean the build root after a failed build
  - Avoid adding a newline to prompt in 'wipe' command
  - Fix 'build' command to pass '--vm-type' option to the underlying build tool
  - Add '--just-print-buildroot' option to print build root path and exit to 'build' command
  - Add support for keep_packages_locked on request revoke
  - Import zsh completition made by Holger Macht and improve it
  - Use XDG locations in completion
  - Fix 'search' command to resolve '-B .' to the current project
  - Add '-M/--multibuild-package' option to 'checkconstraints' command
  - Allow constraints file with remote request in 'checkconstraints' command
  - Unify how the 'commit' and 'build' commands work with '--noservice' option
  - Fix 'request show' command to print superseded_by information
  - Fix 'service' command to support already documented 'r' abbreviation for 'run'
  - Configuration:
  - Implement 'exclude_files' and 'include_files' config options that allow skipping files in the 'checkout' command
  - Fix api_host_options for custom CAs (cafile and capath options work again)
  - Switch 'osc.conf.config' from dict to Options class with type checking
  - Rename conf.Options.build_type to vm_type to be consistent with obs build and osc --vm-type option
  - Update list of supported vm_type values in conf.Options.vm_type
  - Remove any duplicated code loading configuration from ENV
  - Library:
  - Add 'osc.util.models' module implementing an alternative pydantic-like data validation
  - Add 'osc.util.xdg' module for handling XDG paths
  - Fix handling empty vm_type in Store.last_buildroot
  - Spec:
  - Install zsh completion
  - Build and install oscrc man page</changelog>
  <changelog author="Daniel Mach &lt;daniel.mach@suse.com&gt;" date="1696939200">- 1.4.1
  - Configuration:
  - Always display apiurl when asking for credentials
  - Ask for new credentials when user is missing from an apiurl section in the config file
  - Library:
  - Fix testing revision for being empty
  - Fix core.change_request_state_template() to always return a string
  - Tests:
  - Replace 'git init -b' with 'git init' and 'git checkout -b'
  - Spec:
  - Run fdupes after install
  - List the python sitelib paths explicitly
  - Mark csh completion files as configs
  - Own zsh completion dirs to mute rpmlint errors
  - Move bash completion from /etc to /usr/share</changelog>
</package>
<package pkgid="0c40dbee7106bc261164d59ddbdc27656f1a808eba72f1a00a2c7ab0fe5c8fe5" name="regionset" arch="aarch64">
  <version epoch="0" ver="0.2" rel="1.27"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1713441600">- initial commit</changelog>
</package>
<package pkgid="c7b1c50ebd8ead70bcba28195ddbd1d404c579e657f8bf0c57f69cb75a3e61bf" name="regionset" arch="src">
  <version epoch="0" ver="0.2" rel="1.27"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1713441600">- initial commit</changelog>
</package>
<package pkgid="15f4cc1833ae1360da1cc302e1f31bbbbce7fa6a9379fc25a4dc7d9dde1c5a6c" name="regionset" arch="x86_64">
  <version epoch="0" ver="0.2" rel="1.27"/>
  <changelog author="Marco Strigl &lt;marco.strigl@suse.com&gt;" date="1713441600">- initial commit</changelog>
</package>
</otherdata>