Packages changed: Imath (3.2.1 -> 3.2.2) MicroOS-release (20251223 -> 20251224) aardvark-dns (1.16.0 -> 1.17.0) double-conversion (3.3.1 -> 3.4.0) ncurses (6.5.20251206 -> 6.5.20251213) netavark (1.16.1 -> 1.17.1) openexr (3.4.3 -> 3.4.4) permissions (1699_20251002 -> 1699_20251217) podman (5.6.2 -> 5.7.1) === Details === ==== Imath ==== Version update (3.2.1 -> 3.2.2) - version update to 3.2.2 * fix build problem with newer versions of cmake ==== MicroOS-release ==== Version update (20251223 -> 20251224) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== aardvark-dns ==== Version update (1.16.0 -> 1.17.0) - Update to version 1.17.0: * release v1.17.0 * release notes for v1.17.0 * update MSRV to 1.86 * run cargo update * fix download artifact action * [skip-ci] Update GitHub Artifact Actions * fix(deps): update rust crate clap to ~4.5.51 * rotate key of imgt for meta_task * rotate aws creds * fix(deps): update rust crate tokio to 1.48.0 * fix(deps): update rust crate clap to ~4.5.48 * fix(deps): update rust crate libc to 0.2.177 * Update nameservers when resolv.conf is modified. * chore(deps): update rust crate chrono to 0.4.42 * fix(deps): update rust crate log to 0.4.28 * update CI images * rpm: tests require socat instead of ncat now * test: replace ncat with socat * Packit: fetch copr rpm version from Cargo.toml * bump to v1.17.0-dev ==== double-conversion ==== Version update (3.3.1 -> 3.4.0) - update to 3.4.0 * Add pkg-config. * Add alias double-conversion::double-conversion. * Documentation improvements. * Minor code cleanups, avoiding spurious warnings. * Increase CMake minimum required version to 3.29. * Makefile improvements. * Bazel build improvements. ==== ncurses ==== Version update (6.5.20251206 -> 6.5.20251213) Subpackages: libncurses6 ncurses-utils terminfo-base - Add ncurses patch 20251213 + in-progress work to merge MinGW/Windows port. + add a null-pointer check in tic -c option. + add a limit-check in infocmp -i option (report/example by Yixuan Cao). ==== netavark ==== Version update (1.16.1 -> 1.17.1) - Update to version 1.17.1: * release v1.17.1 * release notes for v1.17.1 * bump mozim to v0.3.1 * release v1.17.0 * release notes for v1.17.0 * sync release notes from v1.16.1 * refactor(netlink): Generalize socket for multi-protocol support * run cargo update * test-dhcp: use /24 subnet for bridge * update serde and serde_json * varktables: remove use of private serde type * fix(deps): update rust crate iptables to 0.6.0 * fix(deps): update rust crate clap to ~4.5.51 * fix download artifact action * Upgrade to mozim 0.3.0 * rotating aws metadata task key * [skip-ci] Update GitHub Artifact Actions * rotate aws keys * fix(deps): update rust crate zbus to 5.12.0 * fix(deps): update rust crate tokio to 1.48.0 * chore(deps): update rust crate tempfile to 3.23.0 * fix(deps): update rust crate netlink-packet-core to 0.8.1 * fix(deps): update rust crate hyper-util to 0.1.17 * fix(deps): update rust crate serde_json to 1.0.144 * chore(deps): update rust crate tempfile to 3.22.0 * update netlink-package-{core, route} * fix(deps): update rust crate zbus to 5.11.0 * feat(dhcp): Send DHCPRELEASE on container teardown * bump MSRV to 1.86 * update tonic and prost to 0.14 * chore(deps): update rust crate chrono to 0.4.42 * fix(deps): update rust crate log to 0.4.28 * fix(deps): update rust crate zbus to 5.10.0 * Revert "[skip-ci] Update actions/download-artifact action to v5" * chore(deps): update rust crate tempfile to 3.21.0 * Packit: fetch copr rpm version from Cargo.toml * bridge: bind ip for aardvark-dns in unmanaged mode if gateway ip is not on the host * fix(deps): update rust crate serde_json to 1.0.143 * feat: Add firewall-reload command for nftables systems * test: coverage for firewalld's StrictForwardPorts configuration feature. * update nftables to v0.6.3 * fix(deps): update rust crate mozim to 0.2.7 * bump to v1.17.0-dev ==== openexr ==== Version update (3.4.3 -> 3.4.4) Subpackages: libIex-3_4-33 libIlmThread-3_4-33 libOpenEXR-3_4-33 libOpenEXRCore-3_4-33 - version update to 3.4.4 * OpenEXRCore: fix ILMTHREAD_THREADING_ENABLED checks * OpenEXRCore: avoid direct dependency on imath * Bump github/codeql-action from 4.31.2 to 4.31.3 * Add missing copywrite comments * Bump pypa/cibuildwheel from 3.2 to 3.3 * Bump github/codeql-action from 3.27.9 to 4.31.2 * Bump msys2/setup-msys2 from 2.27.0 to 2.29.0 * Bump actions/download-artifact from 4.1.8 to 6.0.0 * Bump ossf/scorecard-action from 2.4.0 to 2.4.3 * Bump pypa/cibuildwheel from 2.23 to 3.2 * Bump actions/cache from 4.2.0 to 4.3.0 * Bump actions/upload-artifact from 4 to 5 * Bump actions/checkout from 2.7.0 to 5.0.0 * Add recent CVEs to SECURITY.md * Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.1.0 * Bump actions/setup-python from 5.3.0 to 6.0.0 * Bump snyk/actions from 0.4.0 to 1.0.0 * Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.13.0 * Imporve Bazel support * Converts asserts in internal_ht.cpp to if statement that throws an exception. * DWA: initialize linear/nonlinear tables at runtime * Update macos-13 to macos-15-intel * Properly set OpenEXR_error in legacy python API * B44: initialize exp/log tables at runtime ==== permissions ==== Version update (1699_20251002 -> 1699_20251217) Subpackages: permctl permissions-config - Update to version 1699_20251217: * profiles: drop shadow related entries (bsc#1254844) ==== podman ==== Version update (5.6.2 -> 5.7.1) - Update to version 5.7.1: * Bump to v5.7.1 * Final release notes update for v5.7.1 * kube play: Fix fd leak when handling symlinks * Update release notes for v5.7.1 * avoid potential nil ptr deref in image rm * fix: check err returned by newGenericDecompressor * pkg/specgen/generate: Fix adding host devices on FreeBSD * Replace FindExecutablePeer with FindHelperBinary * [v5.7] Bump common to v0.66.1 * libpod: simplify resolveWorkDir() * libpod: fix workdir MkdirAll() all check * [v5.7] Bump Buildah to v1.42.2, runc to v1.3.4 * rootless_linux.c: use shortcut for system commands * SetupRootless handle case where conmon pid are not valid * preallocate paths in SetupRootless * fix noMoveProcess in SetupRootless * use return error handling in SetupRootless * pkg/machine: make mount units hook into local-fs * docs: fix redoc swagger URL * Bump Podman to v5.7.1-dev * Bump to v5.7.0 * Create release notes for v5.7.0 * hack/bats: port it to use the new remote support * test/system: fix broken podman_runtime * test/system: fix artifact test cleanup * test/system: merge artifact tests into single file * test/system: rework artifact created test * test/system: remove 701-artifact-created.bats * test/system: do not run artifact test in parallel * test/system: skip flaky restore test on debian * test/e2e: try to fix clean up after terminated build flake * [v5.7] Packit/TMT: remove podman-next repos from release branches * [v5.7] fix lint issues with github.com/cyphar/filepath-securejoin * [v5.7] Bump to runc v1.3.3 - CVE-2025-52881 * rotate aws meta_task keys * rotate aws key * Bump Podman to v5.7.0-dev * Bump to v5.7.0-rc3 * Update release notes for v5.7.0-rc3 * Fix cache misses when pulling WSL machine image * test: organize search tests with BeforeEach/AfterEach patterns * test: refactor search_test.go to use helper functions and PodmanExitCleanly * test: Replace external registry deps with mock server in search tests * Add tmt integration plan * Bump bundled krunkit from 1.1.0 to 1.1.1 * Allow RC Windows Installer to be built * Allow failures on WSL machine tests * Bump Podman to v5.7.0-dev * Bump to v5.7.0-rc2 * Add release notes for v5.7.0-rc2 * Bump bundled krunkit from 0.2.2 to 1.1.0 * Fix Windows Installer GH release * Add CreatedAt format option to podman artifact ls * Bump Podman to v5.7.0-dev * Bump to v5.7.0-rc1 * Add release notes for v5.7.0-rc1 * quadlet: add `cat` alias for `print` * Bump Buidah to v1.42.0 for Podman v5.7 * fix: failing tests * feat(quadlet: kube): support multiple Yaml entries * Warn on boltdb use * fix artifact inspect issues * feat(cmd): podman kube play support multiple arguments * cmd/podman: add replace flag to quadlet install * fix: typo in uidmap option doc * RPM: build with sequoia for F43+ * feat: add `--format` flag to artifact inspect * artifact: added CREATED column to artifact ls Fixes: #27314 * fix remote command parameters * Add a test for containers.conf runtime options * docs: introduce custom version selector in api.html * add test for container name without Pod name prefix feature * Allow artifact add to override org.opencontainers.image.title annotation * Vendor in latest go.podman.io/common * fileperms: newer Go 1.13+ octal literal format * Quadlet build - add support for IgnoreFile key * Add default runtime flags in config * remove libartifact from podman * chore: remove repetitive word in cmd/podman/README.md * add option to remove Pod name prefix in resulting container name * Add a new Windows installer supporting user scope * docs: initialize redoc via JS API * docs: generate Reference version list from json file * fix: system prune JSON unmarshalling error in remote client * [skip-ci] Update actions/setup-node action to v6 * docs: add missing manifest parameter to build API endpoints * Add BuildArg example into documentation * Add artifact quadlet unit type support * Fix flaky sysctl completion by handling /proc/sys errors gracefully * Run `make validatepr` * Update docs/source/markdown/podman-systemd.unit.5.md * Iterate through all machine providers in FindMachineByPort * Add local build API for direct filesystem builds on MacOS and Windows (only WSL) * fix(deps): update module golang.org/x/term to v0.36.0 * Update docs for StopTimeOut * SECURITY.md: point to container-libs * Update documentation to include BuildArg key * Test for multiple key/val arguments ... changelog too long, skipping 230 lines ... * compat: RepoTags and RepoDigest return [] and not null