Packages changed:
  cri-o
  haproxy
  installation-images-MicroOS (14.465 -> 14.466)
  kernel-64kb (5.6.2 -> 5.6.4)
  kernel-firmware (20200316 -> 20200413)
  kernel-source (5.6.2 -> 5.6.4)
  kubernetes (1.18.0 -> 1.18.1)
  libssh (0.9.3 -> 0.9.4)
  libtirpc (1.2.5 -> 1.2.6)
  libxml2
  libzypp (17.23.2 -> 17.23.4)
  mozilla-nss (3.51 -> 3.51.1)
  ncurses
  open-iscsi
  open-lldp
  p11-kit (0.23.12 -> 0.23.20)
  patterns-base
  patterns-microos
  podman (1.8.2 -> 1.9.0)
  python-M2Crypto
  python-msgpack (0.6.2 -> 1.0.0)
  python-networkx
  rdma-core (27.0 -> 27.1)
  rpm
  runc
  shared-mime-info (1.12 -> 1.15)
  systemd (244 -> 245)
  util-linux (2.34 -> 2.35.1)
  util-linux-systemd (2.34 -> 2.35.1)
  xfsprogs (5.5.0 -> 5.6.0)
  yast2 (4.2.81 -> 4.2.82)
  zypper (1.14.35 -> 1.14.36)

=== Details ===

==== cri-o ====
Subpackages: cri-o-kubeadm-criconfig

- criconfig: Require kubernetes-kubeadm-provider to be compatable with multi-version kubernetes packaging
- Update apparmor_profile with current cri-o version, bsc#1161056

==== haproxy ====

- use the "profile profilename /path/to/binary" syntax to make
  "ps aufxZ" more readable

==== installation-images-MicroOS ====
Version update (14.465 -> 14.466)

- merge gh#openSUSE/installation-images#370
- avoid python3-numpy
- 14.466

==== kernel-64kb ====
Version update (5.6.2 -> 5.6.4)

- Linux 5.6.4 (bnc#1012628).
- driver core: Reevaluate dev->links.need_for_probe as suppliers
  are added (bnc#1012628).
- io-uring: drop completion when removing file (bnc#1012628).
- fbcon: fix null-ptr-deref in fbcon_switch (bnc#1012628).
- blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
  (bnc#1012628).
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow
  (bnc#1012628).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
  (bnc#1012628).
- RDMA/siw: Fix passive connection establishment (bnc#1012628).
- RDMA/cma: Teach lockdep about the order of rtnl and lock
  (bnc#1012628).
- RDMA/ucma: Put a lock around every call to the rdma_cm layer
  (bnc#1012628).
- ubi: fastmap: Free unused fastmap anchor peb during detach
  (bnc#1012628).
- IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
  (bnc#1012628).
- IB/hfi1: Fix memory leaks in sysfs registration and
  unregistration (bnc#1012628).
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails
  (bnc#1012628).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in
  register (bnc#1012628).
- ASoC: tas2562: Fixed incorrect amp_level setting (bnc#1012628).
- platform/x86: intel_int0002_vgpio: Use
  acpi_register_wakeup_handler() (bnc#1012628).
- ACPI: PM: Add acpi_[un]register_wakeup_handler() (bnc#1012628).
- hwrng: imx-rngc - fix an error path (bnc#1012628).
- tools/accounting/getdelays.c: fix netlink attribute length
  (bnc#1012628).
- slub: improve bit diffusion for freelist ptr obfuscation
  (bnc#1012628).
- usb: dwc3: gadget: Wrap around when skip TRBs (bnc#1012628).
- random: always use batched entropy for get_random_u{32,64}
  (bnc#1012628).
- s390: prevent leaking kernel address in BEAR (bnc#1012628).
- net: phy: at803x: fix clock sink configuration on ATH8030 and
  ATH8035 (bnc#1012628).
- cxgb4: free MQPRIO resources in shutdown path (bnc#1012628).
- r8169: change back SG and TSO to be disabled by default
  (bnc#1012628).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
  (bnc#1012628).
- tun: Don't put_page() for all negative return values from XDP
  program (bnc#1012628).
- slcan: Don't transmit uninitialized stack data in padding
  (bnc#1012628).
- net: stmmac: dwmac1000: fix out-of-bounds mac address reg
  setting (bnc#1012628).
- net_sched: fix a missing refcnt in tcindex_init() (bnc#1012628).
- net_sched: add a temporary refcnt for struct tcindex_data
  (bnc#1012628).
- net: phy: micrel: kszphy_resume(): add delay after
  genphy_resume() before accessing PHY registers (bnc#1012628).
- net: dsa: mt7530: fix null pointer dereferencing in port5 setup
  (bnc#1012628).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed
  (bnc#1012628).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF
  (bnc#1012628).
- ipv6: don't auto-add link-local address to lag ports
  (bnc#1012628).
- cxgb4: fix MPS index overwrite when setting MAC address
  (bnc#1012628).
- commit e42da4f
- constrants: fix malformed XML
  Closing tag of an element is "</foo>", not "<foo/>".
  Fixes: 8b37de2eb835 ("rpm/constraints.in: Increase memory for kernel-docs")
- commit 4a8ca28
- Refresh
  patches.suse/efi-x86-Don-t-remap-text-rodata-gap-read-only-for-mi.patch.
  Update upstream status.
- commit 5b340fd
- efi/x86: Fix the deletion of variables in mixed mode
  (bnc#1167933).
- commit 61c9284
- efi/x86: Don't remap text<->rodata gap read-only for mixed mode
  (bnc#1168645).
- commit fd9c360
- Update config files to disable CONFIG_TRACE_IRQFLAGS (bsc#1169078).
- commit d379575
- rpm/constraints.in: Increase memory for kernel-docs
  References: https://build.opensuse.org/request/show/792664
- commit 8b37de2
- cachefiles: fix corruption of 'ret' (boo#1168841).
- commit 0a79cdc
- Linux 5.6.3 (bnc#1012628).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show
  (bnc#1012628).
- net: dsa: ksz: Select KSZ protocol tag (bnc#1012628).
- net, ip_tunnel: fix interface lookup with no key (bnc#1012628).
- sctp: fix possibly using a bad saddr with a given dst
  (bnc#1012628).
- sctp: fix refcount bug in sctp_wfree (bnc#1012628).
- net: macb: Fix handling of fixed-link node (bnc#1012628).
- net: fix fraglist segmentation reference count leak
  (bnc#1012628).
- udp: initialize is_flist with 0 in udp_gro_receive
  (bnc#1012628).
- padata: fix uninitialized return value in padata_replace()
  (bnc#1012628).
- brcmfmac: abort and release host after error (bnc#1012628).
- XArray: Fix xa_find_next for large multi-index entries
  (bnc#1012628).
- drm/bridge: analogix-anx6345: Avoid duplicate -supply suffix
  (bnc#1012628).
- misc: rtsx: set correct pcr_ops for rts522A (bnc#1012628).
- misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test
  devices (bnc#1012628).
- misc: pci_endpoint_test: Avoid using module parameter to
  determine irqtype (bnc#1012628).
- PCI: sysfs: Revert "rescan" file renames (bnc#1012628).
- coresight: do not use the BIT() macro in the UAPI header
  (bnc#1012628).
- mei: me: add cedar fork device ids (bnc#1012628).
- nvmem: release the write-protect pin (bnc#1012628).
- nvmem: check for NULL reg_read and reg_write before
  dereferencing (bnc#1012628).
- nvmem: sprd: Fix the block lock operation (bnc#1012628).
- extcon: axp288: Add wakeup support (bnc#1012628).
- power: supply: axp288_charger: Add special handling for HP
  Pavilion x2 10 (bnc#1012628).
- Revert "ALSA: uapi: Drop asound.h inclusion from asoc.h"
  (bnc#1012628).
- Revert "dm: always call blk_queue_split() in dm_process_bio()"
  (bnc#1012628).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated
  sound on EVGA X99 Classified motherboard (bnc#1012628).
- soc: mediatek: knows_txdone needs to be set in Mediatek CMDQ
  helper (bnc#1012628).
- perf python: Fix clang detection to strip out options passed
  in $CC (bnc#1012628).
- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (bnc#1012628).
- commit 97c6e99
- s390x: zfcpdump: disable CONFIG_RELOCATABLE (bsc#1168847).
- commit c824449
- Update config files to disable CONFIG_UCLAMP_TASK (bsc#1168888).
- commit 025835f
- net/bpfilter: remove superfluous testing message (bnc#1168664).
- commit 7d8cfa8
- Delete patches.rpmify/powerpc-Blacklist-GCC-5.4-6.1-and-6.2.patch.
- commit daf9f5a
- config: arm64: enable cpufreq driver for Jetson Nano and Jetson TX1
- commit 3187813

==== kernel-firmware ====
Version update (20200316 -> 20200413)
Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network

- Update aliases per 5.6 and 5.7 kernels
- Update to version 20200413 (git commit 64dba0fedb22):
  * linux-firmware: add firmware for MT7663 Wifi/BT combo device
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * qcom: Add SDM845 Adreno ZAP shader firmware
  * qca: Enable transparent WBS for WCN3991
  * QCA: Add Bluetooth firmware for QCA6390
  * mediatek: Add mt8183 SCP firmware

==== kernel-source ====
Version update (5.6.2 -> 5.6.4)

- Linux 5.6.4 (bnc#1012628).
- driver core: Reevaluate dev->links.need_for_probe as suppliers
  are added (bnc#1012628).
- io-uring: drop completion when removing file (bnc#1012628).
- fbcon: fix null-ptr-deref in fbcon_switch (bnc#1012628).
- blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync
  (bnc#1012628).
- RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow
  (bnc#1012628).
- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
  (bnc#1012628).
- RDMA/siw: Fix passive connection establishment (bnc#1012628).
- RDMA/cma: Teach lockdep about the order of rtnl and lock
  (bnc#1012628).
- RDMA/ucma: Put a lock around every call to the rdma_cm layer
  (bnc#1012628).
- ubi: fastmap: Free unused fastmap anchor peb during detach
  (bnc#1012628).
- IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
  (bnc#1012628).
- IB/hfi1: Fix memory leaks in sysfs registration and
  unregistration (bnc#1012628).
- IB/hfi1: Call kobject_put() when kobject_init_and_add() fails
  (bnc#1012628).
- ASoC: jz4740-i2s: Fix divider written at incorrect offset in
  register (bnc#1012628).
- ASoC: tas2562: Fixed incorrect amp_level setting (bnc#1012628).
- platform/x86: intel_int0002_vgpio: Use
  acpi_register_wakeup_handler() (bnc#1012628).
- ACPI: PM: Add acpi_[un]register_wakeup_handler() (bnc#1012628).
- hwrng: imx-rngc - fix an error path (bnc#1012628).
- tools/accounting/getdelays.c: fix netlink attribute length
  (bnc#1012628).
- slub: improve bit diffusion for freelist ptr obfuscation
  (bnc#1012628).
- usb: dwc3: gadget: Wrap around when skip TRBs (bnc#1012628).
- random: always use batched entropy for get_random_u{32,64}
  (bnc#1012628).
- s390: prevent leaking kernel address in BEAR (bnc#1012628).
- net: phy: at803x: fix clock sink configuration on ATH8030 and
  ATH8035 (bnc#1012628).
- cxgb4: free MQPRIO resources in shutdown path (bnc#1012628).
- r8169: change back SG and TSO to be disabled by default
  (bnc#1012628).
- mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
  (bnc#1012628).
- tun: Don't put_page() for all negative return values from XDP
  program (bnc#1012628).
- slcan: Don't transmit uninitialized stack data in padding
  (bnc#1012628).
- net: stmmac: dwmac1000: fix out-of-bounds mac address reg
  setting (bnc#1012628).
- net_sched: fix a missing refcnt in tcindex_init() (bnc#1012628).
- net_sched: add a temporary refcnt for struct tcindex_data
  (bnc#1012628).
- net: phy: micrel: kszphy_resume(): add delay after
  genphy_resume() before accessing PHY registers (bnc#1012628).
- net: dsa: mt7530: fix null pointer dereferencing in port5 setup
  (bnc#1012628).
- net: dsa: bcm_sf2: Ensure correct sub-node is parsed
  (bnc#1012628).
- net: dsa: bcm_sf2: Do not register slave MDIO bus with OF
  (bnc#1012628).
- ipv6: don't auto-add link-local address to lag ports
  (bnc#1012628).
- cxgb4: fix MPS index overwrite when setting MAC address
  (bnc#1012628).
- commit e42da4f
- constrants: fix malformed XML
  Closing tag of an element is "</foo>", not "<foo/>".
  Fixes: 8b37de2eb835 ("rpm/constraints.in: Increase memory for kernel-docs")
- commit 4a8ca28
- Refresh
  patches.suse/efi-x86-Don-t-remap-text-rodata-gap-read-only-for-mi.patch.
  Update upstream status.
- commit 5b340fd
- efi/x86: Fix the deletion of variables in mixed mode
  (bnc#1167933).
- commit 61c9284
- efi/x86: Don't remap text<->rodata gap read-only for mixed mode
  (bnc#1168645).
- commit fd9c360
- Update config files to disable CONFIG_TRACE_IRQFLAGS (bsc#1169078).
- commit d379575
- rpm/constraints.in: Increase memory for kernel-docs
  References: https://build.opensuse.org/request/show/792664
- commit 8b37de2
- cachefiles: fix corruption of 'ret' (boo#1168841).
- commit 0a79cdc
- Linux 5.6.3 (bnc#1012628).
- ipv4: fix a RCU-list lock in fib_triestat_seq_show
  (bnc#1012628).
- net: dsa: ksz: Select KSZ protocol tag (bnc#1012628).
- net, ip_tunnel: fix interface lookup with no key (bnc#1012628).
- sctp: fix possibly using a bad saddr with a given dst
  (bnc#1012628).
- sctp: fix refcount bug in sctp_wfree (bnc#1012628).
- net: macb: Fix handling of fixed-link node (bnc#1012628).
- net: fix fraglist segmentation reference count leak
  (bnc#1012628).
- udp: initialize is_flist with 0 in udp_gro_receive
  (bnc#1012628).
- padata: fix uninitialized return value in padata_replace()
  (bnc#1012628).
- brcmfmac: abort and release host after error (bnc#1012628).
- XArray: Fix xa_find_next for large multi-index entries
  (bnc#1012628).
- drm/bridge: analogix-anx6345: Avoid duplicate -supply suffix
  (bnc#1012628).
- misc: rtsx: set correct pcr_ops for rts522A (bnc#1012628).
- misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test
  devices (bnc#1012628).
- misc: pci_endpoint_test: Avoid using module parameter to
  determine irqtype (bnc#1012628).
- PCI: sysfs: Revert "rescan" file renames (bnc#1012628).
- coresight: do not use the BIT() macro in the UAPI header
  (bnc#1012628).
- mei: me: add cedar fork device ids (bnc#1012628).
- nvmem: release the write-protect pin (bnc#1012628).
- nvmem: check for NULL reg_read and reg_write before
  dereferencing (bnc#1012628).
- nvmem: sprd: Fix the block lock operation (bnc#1012628).
- extcon: axp288: Add wakeup support (bnc#1012628).
- power: supply: axp288_charger: Add special handling for HP
  Pavilion x2 10 (bnc#1012628).
- Revert "ALSA: uapi: Drop asound.h inclusion from asoc.h"
  (bnc#1012628).
- Revert "dm: always call blk_queue_split() in dm_process_bio()"
  (bnc#1012628).
- ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated
  sound on EVGA X99 Classified motherboard (bnc#1012628).
- soc: mediatek: knows_txdone needs to be set in Mediatek CMDQ
  helper (bnc#1012628).
- perf python: Fix clang detection to strip out options passed
  in $CC (bnc#1012628).
- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (bnc#1012628).
- commit 97c6e99
- s390x: zfcpdump: disable CONFIG_RELOCATABLE (bsc#1168847).
- commit c824449
- Update config files to disable CONFIG_UCLAMP_TASK (bsc#1168888).
- commit 025835f
- net/bpfilter: remove superfluous testing message (bnc#1168664).
- commit 7d8cfa8
- Delete patches.rpmify/powerpc-Blacklist-GCC-5.4-6.1-and-6.2.patch.
- commit daf9f5a
- config: arm64: enable cpufreq driver for Jetson Nano and Jetson TX1
- commit 3187813

==== kubernetes ====
Version update (1.18.0 -> 1.18.1)
Subpackages: kubernetes-client kubernetes-kubeadm

- Declare Kubernetes 1.18.1 as default
- Introduce multi-version kubernetes packaging
- Remove fix-spn-prefix-added.patch kubeadm-opensuse-flexvolume.patch, kubeadm-opensuse-registry.patch and opensuse-version-checks.patch; Now located in version specific packages.

==== libssh ====
Version update (0.9.3 -> 0.9.4)
Subpackages: libssh-config libssh4

- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/

==== libtirpc ====
Version update (1.2.5 -> 1.2.6)
Subpackages: libtirpc-netconfig libtirpc3

- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)

==== libxml2 ====
Subpackages: libxml2-2 libxml2-tools

- Do not pull in the non-python deps on the python build
- Revert the previous change and use multibuild to determine
  supported flavors.
  We need to be able to enable/disable pythons in prjconf and
  multibuild directly clashes with that.

==== libzypp ====
Version update (17.23.2 -> 17.23.4)

- Get retracted patch status from updateinfo data (jsc#SLE-8770)
  libsolv injects the indicator provides into packages only.
- remove 'using namespace std;' (bsc#1166610, fixes #218)
- Online doc: add 'Hardware (modalias) dependencies' page
  (fixes #216)
- version 17.23.4 (22)
- Add HistoryLogReader actionFilter to parse only specific
  HistoryActionIDs.
- version 17.23.3 (22)

==== mozilla-nss ====
Version update (3.51 -> 3.51.1)

- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)

==== ncurses ====
Subpackages: libncurses6 ncurses-utils terminfo terminfo-base

- Add check for wide character support in libncursesw

==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0

- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)

==== open-lldp ====
Subpackages: liblldp_clif1

- Use -fcommon in order to fix boo#1160407.

==== p11-kit ====
Version update (0.23.12 -> 0.23.20)
Subpackages: libp11-kit0 p11-kit-tools

- Update to version 0.23.20:
  * Revert "Fix RPC when length-s are 0" changes [PR#276]
- Changes for version 0.23.19:
  * common: add Russian PKCS#11 extensions to pkcs11x.h header [PR#255]
  * Add simple bash completion for provided commands [PR#258]
  * Unbreak list matching in enable-in and disable-in [PR#262]
  * Fix RPC when length-s are 0 [PR#259]
  * rpc: Add vsock transport support [PR#270]
  * trust: Support CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER [PR#265]
  * Build fixes [PR#271, PR#272, PR#273, ...]
- Changes for version 0.23.18:
  * rpc: Allow empty CK_DATE value [PR#253]
  * build: Meson fixes [PR#245]
  * build: Adjust feature parity between meson and autotools [PR#247]
- Changes for version 0.23.17:
  * common: Fix uClibc-ng compilation [PR#237]
  * trust: do not allow daylight to invalidate date validation [PR#236]
  * build: Port to meson build system [PR#231, PR#234]
  * rpc: On UNIX wait on condition variable instead of FD if header is for a different thread [PR#232]
  * doc: Add 'server' command in help [PR#229]
  * Build and test fixes [PR#230]
- Changes for version 0.23.16:
  * proxy: Support C_WaitForSlotEvent() if CKF_DONT_BLOCK is specified [PR#225]
  * conf: Ignore user configuration if the program is running as root [PR#226]
  * proxy: Refresh slot list on every C_GetSlotList call [PR#224]
  * modules: Fix index used in call to p11_dict_remove() [PR#219]
  * Fix Win32 p11_dl_error crash [PR#218]
  * modules: check gl.modules before iterates on it when freeing [PR#217]
  * trust: Ignore unreadable content in anchors [PR#215]
  * extract-jks: Prefer _p11_extract_jks_timestamp to SOURCE_DATE_EPOCH [PR#213]
- Changes for version 0.23.15:
  * trust: Improve error handling if backed trust file is corrupted [PR#206]
  * url: Prefer upper-case letters in hex characters when encoding [PR#193]
  * trust/extract-jks.c: also honor SOURCE_DATE_EPOCH time [PR#202]
  * virtual: Prefer fixed closures to libffi closures [PR#196]
  * Fix issues spotted by coverity and cppcheck [PR#194, PR#204]
  * Build and test fixes [PR#164, PR#191, PR#199, PR#201]
- Changes for version 0.23.14:
  * proxy: Avoid invalid memory access when unloading proxy module [PR#180]
  * Update pkcs11 header to allow SoftHSMv2 to compile [PR#181]
  * build: Restore libpthread dependency [PR#183]
  * Build fixes [PR#188]
- Changes for version 0.23.13:
  * server: Enable socket activation through systemd [PR#173]
  * rpc-server: p11_kit_remote_serve_tokens: Allow exporting all modules [PR#174]
  * proxy: Fail early if there is no slot mapping [PR#175]
  * Remove hard dependency on libpthread [PR#177]
  * Build fixes [PR#170, PR#176]

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-minimal_base

- Add bootloader pattern. Useful for appliances to not repeat the logic
  in kiwi files.

==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-apparmor patterns-microos-base patterns-microos-basesystem patterns-microos-cloud patterns-microos-defaults patterns-microos-hardware patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-selinux patterns-microos-sssd_ldap

- Install branding-openSUSE meta package
- Put apparmor-utils only on DVD, but don't install by default
  (follow Tumbleweed)

==== podman ====
Version update (1.8.2 -> 1.9.0)
Subpackages: podman-cni-config

- Switched to simple `make binaries` for building podman
- Update podman to v1.8.2:
  * Features
  - Experimental support has been added for podman run
  - -userns=auto, which automatically allocates a unique UID and
    GID range for the new container's user namespace
  - The podman play kube command now has a --network flag to
    place the created pod in one or more CNI networks
  - The podman commit command now supports an --iidfile flag to
    write the ID of the committed image to a file
  - Initial support for the new containers.conf configuration
    file has been added. containers.conf allows for much more
    detailed configuration of some Podman functionality
  * Changes
  - There has been a major cleanup of the podman info command
    resulting in breaking changes. Many fields have been renamed
    to better suit usage with APIv2
  - All uses of the --timeout flag have been switched to prefer
    the alternative --time. The --timeout flag will continue to
    work, but man pages and --help will use the --time flag
    instead
  * Bugfixes
  - Fixed a bug where some volume mounts from the host would
    sometimes not properly determine the flags they should use
    when mounting
  - Fixed a bug where Podman was not propagating $PATH to Conmon
    and the OCI runtime, causing issues for some OCI runtimes
    that required it
  - Fixed a bug where rootless Podman would print error messages
    about missing support for systemd cgroups when run in a
    container with no cgroup support
  - Fixed a bug where podman play kube would not properly handle
    container-only port mappings (#5610)
  - Fixed a bug where the podman container prune command was not
    pruning containers in the created and configured states
  - Fixed a bug where Podman was not properly removing CNI IP
    address allocations after a reboot (#5433)
  - Fixed a bug where Podman was not properly applying the
    default Seccomp profile when --security-opt was not given at
    the command line
  * HTTP API
  - Many Libpod API endpoints have been added, including Changes,
    Checkpoint, Init, and Restore
  - Resolved issues where the podman system service command would
    time out and exit while there were still active connections
  - Stability overall has greatly improved as we prepare the API
    for a beta release soon with Podman 2.0
  * Misc
  - The default infra image for pods has been upgraded to
    k8s.gcr.io/pause:3.2 (from 3.1) to address a bug in the
    architecture metadata for non-AMD64 images
  - The slirp4netns networking utility in rootless Podman now
    uses Seccomp filtering where available for improved security
  - Updated Buildah to v1.14.8
  - Updated containers/storage to v1.18.2
  - Updated containers/image to v5.4.3
  - Updated containers/common to v0.8.1

==== python-M2Crypto ====

- Do not pull in py2 pkg on doc subpkg

==== python-msgpack ====
Version update (0.6.2 -> 1.0.0)

- version update to 1.0.0
  * Remove Python 2 support from the msgpack/_cmsgpack. msgpack/fallback still supports Python 2.
  * Remove encoding option from the Packer and Unpacker.
  * Unpacker: The default value of max_buffer_type is changed to 100MiB.
  * Unpacker: strict_map_key is True by default now.
  * Unpacker: String map keys are interned.
  * Drop old buffer protocol support.
  * Support Timestamp type.
  * Support serializing and decerializing datetime object with tzinfo.
  * Unpacker: Fix Unpacker.read_bytes() in fallback implementation. (#352)

==== python-networkx ====

- Add patch to fix matplotlib deprecation:
  * matplotlib.patch
- Skip two tests that keep failing everywhere

==== rdma-core ====
Version update (27.0 -> 27.1)
Subpackages: libefa1 libibverbs libibverbs1 libmlx4-1 libmlx5-1 librdmacm1

- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)

==== rpm ====
Subpackages: librpmbuild9

- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff
- Do not map the index database read-write all the time
  * new patch: ndb_backport2.diff
- Fix name of Packages DB file in rpmconfigcheck

==== runc ====

- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)

==== shared-mime-info ====
Version update (1.12 -> 1.15)

- Update to version 1.15:
  + Add Kindle 8 eBook format.
  + Fix some HTML files being detected as XML.
- Changes from version 1.14:
  + Add mime-type for QCOW images.
  + Fix matching SVG files in some circumstances (again).
- Changes from version 1.13.1:
  + Fix matching SVG files in some circumstances.
- Changes from version 1.13:
  + Add code of conduct document.
  + Use itstool and gettext to generate translations.
  + Add content-tree type for OSTree USB repositories.
  + Add match for MPEG-4 v1 videos.
  + Adjust a lot of user readable mime-type descriptions.
  + Fix WOFF/WOFF2 mime-types.
  + Prefer text/html to XHTML for *.html files.
  + Better magic for text/html files.
  + Fix SVG magic for files embedded in HTML.
  + Add *.sgd as a glob for Mega Drive ROMs.
  + Specification: Mention that sub-class-of can be aliases.
  + Tools: Enable Large File Support in update-mime-database.
  + Test suite:
  - Make test suite failures fatal.
  - Add test for duplicate mime-types.
  - Fix WarpScript test.
  - Generate the specification in the CI, to avoid it becoming
    syntactically invalid.
- Stop using source service, it leads to a undetected build cycle.
- Following this: Drop libtool BuildRequires and stop passing
  autogen.sh to bootstrap, we are now using upstream release
  tarballs.
- Add itstool BuildRequires: New dependency.
- Disable t-u-u, currently breaks the build.
- Stop passing --disable-default-make-check to configure, no longer
  needed, nor recognized.

==== systemd ====
Version update (244 -> 245)
Subpackages: libsystemd0 libudev1 systemd-logger systemd-sysvinit udev

- Switch back to the hybrid hierarchy
  Unfortunately Kubernetes and runc are not yet ready for
  cgroupsv2. Let's reconsider the unified hierarchy in a couple of
  months.
- Import commit c5aa158173ced05201182d1cc18632a25cf43b94 (merge v245.4)
- Add 0001-meson-fix-build-of-udev-path_id_compat-builtin-with-.patch
- Import commit 31f82b39c811b4f731c80c2c2e7c56a0ca924a5b (merge v245.2)
  d1d3f2aa15 docs: Add syntax for templated units to systemd.preset man page
  3c69813c69 man: add a tiny bit of markup
  bf595e788c home: fix segfault when parsing arguments in PAM module
  e110f4dacb test: wait a bit after starting the test service
  e8df08cfdb fix journalctl regression (#15099)
  eb3a38cc23 NEWS: add late note about job trimming issue
  405f0fcfdd systemctl: hide the 'glyph' column when --no-legend is requested
  1c7de81f89 format-table: allow hiding a specific column
  b7f2308bda core: transition to FINAL_SIGTERM state after ExecStopPost=
  2867dfbf70 journalctl: show duplicate entries if they are from the same file (#14898)
  [...]
- Upgrade to v245 (commit 74e2e834b4282c9bbdc12014f6ccf8d86e542b8d)
  See https://github.com/openSUSE/systemd/blob/SUSE/v245/NEWS for
  details.
  The new tools provided by systemd repart, userdb, homed, fdisk,
  pwquality, p11kit feature have been disabled for now as they require
  reviews first.
  Default to the "unified" cgroup hierarchy. Indeed most prominent
  users of cgroup (such as libvirt, kubic) should be ready for such
  change. It's still possible to switch back to the old "hybrid"
  hierarchy by passing "systemd.unified_cgroup_hierarchy=0" option to
  the kernel command line though.
  Added 0001-Revert-job-Don-t-mark-as-redundant-if-deps-are-relev.patch:
  upstream commit 097537f07a2fab3cb73aef7bc59f2a66aa93f533 has been
  reverted for now on as it introduced a behavior change which has
  impacted plymouth at least.
- add systemd-network-generator.service file together with systemd-network-generator binary

==== util-linux ====
Version update (2.34 -> 2.35.1)
Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1

- Update to version 2.35.1:
  * agetty: add --show-issue, support for /run/issue and
  * fdisk: Correct handling of hybrid MBR, cleanup wipe warning,
    use 'r' to return from MBR to GPT.
  * lsblk: FSVER column,
    drop e3bb9bfb76c17b1d05814436ced62c05c4011f48.patch.
  * lscpu: Add HiSilicon aarch64 tsv110 cpupart, add a new columns
    to --cache.
  * mount: add --target-prefix.
  * mountpoint: add --nofollow option.
  * script: add --echo, --log-in, --logging-format, --log-out and
  - -log-timing.
  * scriptlive: new command.
  * scriptreplay: add --log-* options, --cr-mode, --stream,
  - -summary, -T --log-timing.
  * sfdisk: add progress bars.
  * unshare: add --keep-caps and --map-current-user options.
  * Many other fixes and improvements, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35.1-ReleaseNotes
- Refresh libeconf.patch.
- Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
  Avoid triggering autofs in lookup_umount_fs_by_statfs
  (boo#1168389)

==== util-linux-systemd ====
Version update (2.34 -> 2.35.1)

- Update to version 2.35.1:
  * agetty: add --show-issue, support for /run/issue and
  * fdisk: Correct handling of hybrid MBR, cleanup wipe warning,
    use 'r' to return from MBR to GPT.
  * lsblk: FSVER column,
    drop e3bb9bfb76c17b1d05814436ced62c05c4011f48.patch.
  * lscpu: Add HiSilicon aarch64 tsv110 cpupart, add a new columns
    to --cache.
  * mount: add --target-prefix.
  * mountpoint: add --nofollow option.
  * script: add --echo, --log-in, --logging-format, --log-out and
  - -log-timing.
  * scriptlive: new command.
  * scriptreplay: add --log-* options, --cr-mode, --stream,
  - -summary, -T --log-timing.
  * sfdisk: add progress bars.
  * unshare: add --keep-caps and --map-current-user options.
  * Many other fixes and improvements, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.35/v2.35.1-ReleaseNotes
- Refresh libeconf.patch.
- Add libmount-Avoid-triggering-autofs-in-lookup_umount_fs.patch:
  Avoid triggering autofs in lookup_umount_fs_by_statfs
  (boo#1168389)

==== xfsprogs ====
Version update (5.5.0 -> 5.6.0)

- update to v5.6.0:
  * xfs_scrub: don't set WorkingDirectory in systemd job
  * xfsprogs: fix silently broken option parsing
  * xfsprogs: various minor Coverity fixes
  * xfs_repair: fix dir_read_buf use of libxfs_da_read_buf
  * libxfs: check retval of device flush when closing
  * xfs_io: set exitcode on failure appropriately
  * libxfs changes merged from kernel 5.6

==== yast2 ====
Version update (4.2.81 -> 4.2.82)

- Remove ip aliases that were marked to be deleted from the
  interface configuration files (bsc#1146020)
- 4.2.82

==== zypper ====
Version update (1.14.35 -> 1.14.36)
Subpackages: zypper-needs-restarting

- Reformat manpages to workaround asciidoctor shortcomings
  (bsc#1154803, bsc#1167122, bsc#1168990)
- Remove undocumented rug legacy stuff.
- Remove 'using namespace std;' (bsc#1166610)
- patch table: Add 'Since' column if history data are available
  (jsc#SLE-5116)
- version 1.14.36