Packages changed:
  MicroOS-release (20251031 -> 20251106)
  NetworkManager
  SDL3 (3.2.24 -> 3.2.26)
  aurorae6 (6.5.1 -> 6.5.2)
  bluedevil6 (6.5.1 -> 6.5.2)
  breeze6 (6.5.1 -> 6.5.2)
  breeze6-gtk (6.5.1 -> 6.5.2)
  dav1d (1.5.1 -> 1.5.2)
  discover6 (6.5.1 -> 6.5.2)
  distrobox (1.8.1.2 -> 1.8.2.1)
  dracut (059+suse.762.g8903c5e2 -> 059+suse.769.g693ea004)
  flatpak-kcm6 (6.5.1 -> 6.5.2)
  health-checker (1.12+git20241105.2e2832f15742 -> 1.13+git20251028.c9a2249)
  kactivitymanagerd6 (6.5.1 -> 6.5.2)
  kde-cli-tools6 (6.5.1 -> 6.5.2)
  kde-gtk-config6 (6.5.1 -> 6.5.2)
  kdecoration6 (6.5.1 -> 6.5.2)
  kdeplasma6-addons (6.5.1 -> 6.5.2)
  kernel-firmware-amdgpu (20251024 -> 20251031)
  kernel-firmware-bluetooth (20251024 -> 20251029)
  kernel-firmware-mediatek (20251024 -> 20251029)
  kernel-source (6.17.6 -> 6.17.7)
  kgamma6 (6.5.1 -> 6.5.2)
  kglobalacceld6 (6.5.1 -> 6.5.2)
  kinfocenter6 (6.5.1 -> 6.5.2)
  kmenuedit6 (6.5.1 -> 6.5.2)
  knighttime6 (6.5.1 -> 6.5.2)
  kpipewire6 (6.5.1 -> 6.5.2)
  kscreen6 (6.5.1 -> 6.5.2)
  kscreenlocker6 (6.5.1 -> 6.5.2)
  ksshaskpass6 (6.5.1 -> 6.5.2)
  ksystemstats6 (6.5.1 -> 6.5.2)
  kwayland-integration6 (6.5.1 -> 6.5.2)
  kwayland6 (6.5.1 -> 6.5.2)
  kwin6 (6.5.1 -> 6.5.2)
  layer-shell-qt6 (6.5.1 -> 6.5.2)
  libb2
  libdrm (2.4.127 -> 2.4.128)
  libkscreen6 (6.5.1 -> 6.5.2)
  libksysguard6 (6.5.1 -> 6.5.2)
  libplasma6 (6.5.1 -> 6.5.2)
  libqt5-qtbase (5.15.17+kde122 -> 5.15.18+kde109)
  libqt5-qtdeclarative (5.15.17+kde21 -> 5.15.18+kde22)
  libqt5-qtgraphicaleffects (5.15.17+kde0 -> 5.15.18+kde0)
  libqt5-qtimageformats (5.15.17+kde2 -> 5.15.18+kde2)
  libqt5-qtmultimedia (5.15.17+kde2 -> 5.15.18+kde2)
  libqt5-qtquickcontrols (5.15.17+kde0 -> 5.15.18+kde0)
  libqt5-qtquickcontrols2 (5.15.17+kde5 -> 5.15.18+kde5)
  libqt5-qtspeech (5.15.17+kde1 -> 5.15.18+kde1)
  libqt5-qtsvg (5.15.17+kde5 -> 5.15.18+kde5)
  libqt5-qtwayland (5.15.17+kde57 -> 5.15.18+kde55)
  libqt5-qtx11extras (5.15.17+kde0 -> 5.15.18+kde0)
  librsvg (2.61.2 -> 2.61.3)
  mdadm (4.4 -> 4.4+10.g7b1f399e)
  milou6 (6.5.1 -> 6.5.2)
  openjph (0.24.4 -> 0.24.5)
  openssh (10.0p2 -> 10.2p1)
  pam-config (2.13+git.20251003 -> 2.13+git.20251105)
  plasma5support6 (6.5.1 -> 6.5.2)
  plasma6-activities (6.5.1 -> 6.5.2)
  plasma6-activities-stats (6.5.1 -> 6.5.2)
  plasma6-browser-integration (6.5.1 -> 6.5.2)
  plasma6-desktop (6.5.1 -> 6.5.2)
  plasma6-integration (6.5.1 -> 6.5.2)
  plasma6-nm (6.5.1 -> 6.5.2)
  plasma6-openSUSE
  plasma6-pa (6.5.1 -> 6.5.2)
  plasma6-print-manager (6.5.1 -> 6.5.2)
  plasma6-systemmonitor (6.5.1 -> 6.5.2)
  plasma6-workspace (6.5.1 -> 6.5.2)
  polkit
  polkit-default-privs (1550+20251002.f34bfbd -> 1550+20251031.036888e)
  polkit-kde-agent-6 (6.5.1 -> 6.5.2)
  powerdevil6 (6.5.1 -> 6.5.2)
  python-charset-normalizer (3.4.3 -> 3.4.4)
  python-psutil (7.1.1 -> 7.1.2)
  qalculate (5.8.0 -> 5.8.1)
  qqc2-breeze-style6 (6.5.1 -> 6.5.2)
  runc (1.3.2 -> 1.3.3)
  sddm-kcm6 (6.5.1 -> 6.5.2)
  sdl2-compat (2.32.56 -> 2.32.58)
  selinux-policy (20251021 -> 20251106)
  spectacle (6.5.1 -> 6.5.2)
  suse-module-tools (16.0.61 -> 16.0.62)
  systemsettings6 (6.5.1 -> 6.5.2)
  sysuser-tools
  ucode-amd (20251028 -> 20251031)
  xdg-desktop-portal-kde6 (6.5.1 -> 6.5.2)
  xkeyboard-config (2.45 -> 2.46)

=== Details ===

==== MicroOS-release ====
Version update (20251031 -> 20251106)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== NetworkManager ====
Subpackages: NetworkManager-bluetooth NetworkManager-tui NetworkManager-wwan libnm0 typelib-1_0-NM-1_0

- Add patch 2298.patch to fix issue with SELinux labeling. Is already
  upstream via
  https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2298
  and can be removed next release (bsc#1248136)

==== SDL3 ====
Version update (3.2.24 -> 3.2.26)

- Update to release 3.2.26
  * Fixed a delay at shutdown when the mouse is grabbed under X11
  * Fixed destination coordinates when using scale with the
    software renderer
  * Fixed the Moonlander MK1 Keyboard being detected as a
    controller
  * Fixed the 8BitDo Ultimate 2C Wireless Controller showing up
    twice on some systems
  * Added a Linux mapping for the 8BitDo Pro 3 controller
  * Added support for the Zenaim Arcade Controller

==== aurorae6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== bluedevil6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== breeze6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-wallpapers

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== breeze6-gtk ====
Version update (6.5.1 -> 6.5.2)
Subpackages: gtk3-metatheme-breeze6 metatheme-breeze6-common

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== dav1d ====
Version update (1.5.1 -> 1.5.2)

- Update to version 1.5.2
  * minor speed improvement in recon
  * improvements on loongarch symboles visibility and asm
  * mark C globals with small code model
  * reduce the code size of the frame header parsing (OBU)
  * minor fixes on tools and CI
  * fix compilation with nasm 3.00

==== discover6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-notifier

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * pk: Some distros distribute firmwares (kde#510173)
  * Update version for new release 6.5.2

==== distrobox ====
Version update (1.8.1.2 -> 1.8.2.1)
Subpackages: distrobox-bash-completion

- Update to 1.8.2.1:
  * fix: Alt -> ALT by @x1z53 (gh#89luca89/distrobox#1868)
  * init: fix wrong $HOME when using --init by @Kamorst (gh#89luca89/distrobox#1871)
  * chore: bump version to 1.8.2.1 by @dottorblaster (gh#89luca89/distrobox#1872)
- Update to 1.8.2.0:
  * Decommission Clearlinux
  * assemble:
  - add unshare-groups support (gh#89luca89/distrobox#1675)
  - extend manifest definitions with include
    (gh#89luca89/distrobox#1860)
  - fix accidental file globbing during parsing
    (gh#89luca89/distrobox#1713)
  * completion:
  - Bash completion enhancements (gh#89luca89/distrobox#1848)
  * create:
  - Support --userns=keep-id:size= (gh#89luca89/distrobox#1667)
  - explicitly prefer using crun if present
  - indentation for --root usage in distrobox-create
    (gh#89luca89/distrobox#1846)
  - fix formatting and quoting issues
    (gh#89luca89/distrobox#1862)
  * enter:
  - Allow whitespaces in environment variables
    (gh#89luca89/distrobox#1811)
  * export:
  - fix doas case, fix missing sudo_prefix when local execution
  * host-exec:
  - fail for HTTP response codes >= 400 (curl --fail)
    (gh#89luca89/distrobox#1787)
  * init:
  - Support Chimera Linux guests (gh#89luca89/distrobox#1778)
  - Fixes Vulcan ICD config files for NVIDIA driver host
    integration (openSUSE, Fedora) (gh#89luca89/distrobox#1688)
  - add altlinux in distrobox (gh#89luca89/distrobox#1512)
  - create xdg-open distrobox-host-exec symlink only if --init
    not used (gh#89luca89/distrobox#1818)
  - exclude schroot mountpoint from socket search, improve
    performance (gh#89luca89/distrobox#1836)
  - fix formatting on /etc/shaddow stat-ing
    (gh#89luca89/distrobox#1836)
  - fix missing sudo binary on doas distro, make export aware of
    it
  - fix on systemd, we don't do remount in containers
  - fix passwordless doas
  - improve nvidia symlinks resolution
    (gh#89luca89/distrobox#1668)
  - make the default fish_prompt an autoloaded function
    (gh#89luca89/distrobox#1672)
  - mask systemd-resolved in case we use host's network
  - setup correct chimera base-full-man dep
    (gh#89luca89/distrobox#1826)
  * install:
  - add option to suppress color (gh#89luca89/distrobox#1709)
  * upgrade:
  - fix upgrade command when on doas systems
  * Many updates to Documentation

==== dracut ====
Version update (059+suse.762.g8903c5e2 -> 059+suse.769.g693ea004)
Subpackages: dracut-ima

- Update to version 059+suse.769.g693ea004:
  * fix(multipath): add udev rule 99-z-dm-mpath-late.rules
  * fix(dmsquash-live): install required stat binary
  * fix(systemd): install new dlopened libraries

==== flatpak-kcm6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- No code changes since 6.5.1

==== health-checker ====
Version update (1.12+git20241105.2e2832f15742 -> 1.13+git20251028.c9a2249)
Subpackages: health-checker-plugins-MicroOS

- Update to version 1.13+git20251028.c9a2249:
  * Release version 1.13
  * Use Automatic Boot Assessment for systemd-boot/grub2-bls
  * README: clearify services in After section

==== kactivitymanagerd6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kde-cli-tools6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kde-gtk-config6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: kde-gtk-config6-gtk3

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Use prefer light in light mode (kde#511081)
  * Update version for new release 6.5.2

==== kdecoration6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libkdecorations3-6 libkdecorations3private2

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kdeplasma6-addons ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * [applets/weather] Fix QML warning when no feelslike temperature is available
  * applets/notes: save text more frequently (kde#510087)
  * [applets/quicklaunch] Initialize all required properties when creating popup (kde#511048)
  * Update version for new release 6.5.2

==== kernel-firmware-amdgpu ====
Version update (20251024 -> 20251031)

- Update to version 20251031 (git commit 04b323bb64f9):
  * amdgpu: DMCUB updates for various ASICs

==== kernel-firmware-bluetooth ====
Version update (20251024 -> 20251029)

- Update to version 20251029 (git commit bfc84303530a):
  * rtl_bt: Add firmware and config files for RTL8761CUV

==== kernel-firmware-mediatek ====
Version update (20251024 -> 20251029)

- Update to version 20251029 (git commit bfc84303530a):
  * linux-firmware: update firmware for MT7925 WiFi device
  * mediatek MT7925: update bluetooth firmware to 20251015213201

==== kernel-source ====
Version update (6.17.6 -> 6.17.7)

- Update
  patches.kernel.org/6.17.1-015-ASoC-qcom-audioreach-fix-potential-null-pointe.patch
  (bsc#1012628 CVE-2025-40013 bsc#1252348).
- Update
  patches.kernel.org/6.17.2-013-binder-fix-double-free-in-dbitmap.patch
  (bsc#1012628 CVE-2025-40028 bsc#1252762).
- Update
  patches.kernel.org/6.17.2-023-net-9p-fix-double-req-put-in-p9_fd_cancelled.patch
  (bsc#1012628 CVE-2025-40027 bsc#1252763).
- Update
  patches.kernel.org/6.17.2-024-KVM-x86-Don-t-re-check-L1-intercepts-when-comp.patch
  (bsc#1012628 CVE-2025-40026 bsc#1252764).
- Update
  patches.kernel.org/6.17.2-025-f2fs-fix-to-do-sanity-check-on-node-footer-for.patch
  (bsc#1012628 CVE-2025-40025 bsc#1252766).
- Update
  patches.kernel.org/6.17.3-011-hfsplus-fix-slab-out-of-bounds-read-in-hfsplus.patch
  (bsc#1012628 CVE-2025-40082 bsc#1252775).
- Update
  patches.kernel.org/6.17.3-027-perf-arm_spe-Prevent-overflow-in-PERF_IDX2OFF.patch
  (bsc#1012628 CVE-2025-40081 bsc#1252776).
- Update
  patches.kernel.org/6.17.3-113-nbd-restrict-sockets-to-TCP-and-UDP.patch
  (bsc#1012628 CVE-2025-40080 bsc#1252774).
- Update
  patches.kernel.org/6.17.3-161-riscv-bpf-Sign-extend-struct-ops-return-values.patch
  (bsc#1012628 CVE-2025-40079 bsc#1252786).
- Update
  patches.kernel.org/6.17.3-173-bpf-Explicitly-check-accesses-to-bpf_sock_addr.patch
  (bsc#1012628 CVE-2025-40078 bsc#1252789).
- Update
  patches.kernel.org/6.17.3-225-f2fs-fix-to-avoid-overflow-while-left-shift-op.patch
  (bsc#1012628 CVE-2025-40077 bsc#1252782).
- Update
  patches.kernel.org/6.17.3-270-PCI-rcar-host-Pass-proper-IRQ-domain-to-generi.patch
  (bsc#1012628 CVE-2025-40076 bsc#1252792).
- Update
  patches.kernel.org/6.17.3-289-tcp_metrics-use-dst_dev_net_rcu.patch
  (bsc#1012628 CVE-2025-40075 bsc#1252795).
- Update
  patches.kernel.org/6.17.3-290-ipv4-start-using-dst_dev_rcu.patch
  (bsc#1012628 CVE-2025-40074 bsc#1252794).
- Update
  patches.kernel.org/6.17.3-311-drm-msm-Do-not-validate-SSPP-when-it-is-not-re.patch
  (bsc#1012628 CVE-2025-40073 bsc#1252798).
- Update
  patches.kernel.org/6.17.3-316-fanotify-Validate-the-return-value-of-mnt_ns_f.patch
  (bsc#1012628 CVE-2025-40072 bsc#1252796).
- Update
  patches.kernel.org/6.17.3-320-tty-n_gsm-Don-t-block-input-queue-by-waiting-M.patch
  (bsc#1012628 CVE-2025-40071 bsc#1252797).
- Update
  patches.kernel.org/6.17.3-322-pps-fix-warning-in-pps_register_cdev-when-regi.patch
  (bsc#1012628 CVE-2025-40070 bsc#1252836).
- Update
  patches.kernel.org/6.17.3-323-drm-msm-Fix-obj-leak-in-VM_BIND-error-path.patch
  (bsc#1012628 CVE-2025-40069 bsc#1252831).
- Update
  patches.kernel.org/6.17.3-337-fs-ntfs3-Fix-integer-overflow-in-run_unpack.patch
  (bsc#1012628 CVE-2025-40068 bsc#1252843).
- Update
  patches.kernel.org/6.17.3-338-fs-ntfs3-reject-index-allocation-if-BITMAP-is-.patch
  (bsc#1012628 CVE-2025-40067 bsc#1252840).
- Update
  patches.kernel.org/6.17.3-356-wifi-mt76-mt7996-Check-phy-before-init-msta_li.patch
  (bsc#1012628 CVE-2025-40066 bsc#1252842).
- Update
  patches.kernel.org/6.17.3-369-RISC-V-KVM-Write-hgatp-register-with-valid-mod.patch
  (bsc#1012628 CVE-2025-40065 bsc#1252846).
- Update
  patches.kernel.org/6.17.3-377-smc-Fix-use-after-free-in-__pnet_find_base_nde.patch
  (bsc#1012628 CVE-2025-40064 bsc#1252845).
- Update
  patches.kernel.org/6.17.3-406-crypto-comp-Use-same-definition-of-context-all.patch
  (bsc#1012628 CVE-2025-40063 bsc#1252844).
- Update
  patches.kernel.org/6.17.3-407-crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_di.patch
  (bsc#1012628 CVE-2025-40062 bsc#1252850).
- Update
  patches.kernel.org/6.17.3-411-RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (bsc#1012628 CVE-2025-40061 bsc#1252849).
- Update
  patches.kernel.org/6.17.3-430-coresight-trbe-Return-NULL-pointer-for-allocat.patch
  (bsc#1012628 CVE-2025-40060 bsc#1252848).
- Update
  patches.kernel.org/6.17.3-432-coresight-Fix-incorrect-handling-for-return-va.patch
  (bsc#1012628 CVE-2025-40059 bsc#1252809).
- Update
  patches.kernel.org/6.17.3-435-ipvs-Defer-ip_vs_ftp-unregister-during-netns-c.patch
  (bsc#1012628 CVE-2025-40018 bsc#1252688).
- Update
  patches.kernel.org/6.17.3-445-iommu-vt-d-Disallow-dirty-tracking-if-incohere.patch
  (bsc#1012628 CVE-2025-40058 bsc#1252854).
- Update
  patches.kernel.org/6.17.3-450-ptp-Add-a-upper-bound-on-max_vclocks.patch
  (bsc#1012628 CVE-2025-40057 bsc#1252825).
- Update
  patches.kernel.org/6.17.3-451-vhost-vringh-Fix-copy_to_iter-return-value-che.patch
  (bsc#1012628 CVE-2025-40056 bsc#1252826).
    ... changelog too long, skipping 222 lines ...
- commit acbcf44

==== kgamma6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kglobalacceld6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libKGlobalAccelD6-0

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kinfocenter6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kmenuedit6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== knighttime6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libKNightTime0

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * Fix daylight duration with flipped morning and evening times (kde#511293)
  * Update version for new release 6.5.2

==== kpipewire6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWireDmaBuf6 libKPipeWireRecord6

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kscreen6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kscreenlocker6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libKScreenLocker6

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== ksshaskpass6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== ksystemstats6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kwayland-integration6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kwayland6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libKWaylandClient6

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== kwin6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libkwin6

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Fix kwin_wayland crash on FreeBSD
  * Update version for new release 6.5.2
  * dpmsinputeventfilter: Disable proximity sensor and add null check
  * plugins/showfps,-compositing: apply vertical offset to geometry (kde#511232)
  * plugins/blur: Make contrast opt-in (kde#510818)
  * Revert "Only keep the saturation component from the old contrast effect"
  * compositor: fix KWIN_FORCE_SW_CURSOR
  * plugins/screenshot: filter out decoration and shadows to match the options (kde#510982,kde#511171)
  * plugins/screencast: on close, reset screencast sources instead of just pausing (kde#511150)
  * backends/drm: handle changing output layers of virtual outputs correctly
  * backends/drm: fix warnings when the virtual output is used
  * backends/drm: fix implicit modifier fallback (kde#511216)
  * xwayland: Initialize Selection::m_timestamp
  * xwayland: Drop Selection::setWindow()
  * xwayland: Avoid potentially creating an X11 source for own proxy data
  * xwayland: Drop Selection::m_disownPending
  * scene/cursoritem: always reset the surface item if the surface is nullptr (kde#511075)
  * backends/drm: prevent using the same cursor plane on multiple screens (kde#511281)
  * Update version for new release 6.5.2
  * xwayland: Update clipboard when active window changes (kde#511063)
  * plugins/mousekeys: Do not release the pointer button on key repeat events (kde#510248)

==== layer-shell-qt6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libLayerShellQtInterface6

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== libb2 ====

- Add patch to make sure optflags are used:
  * fix-cflags.patch

==== libdrm ====
Version update (2.4.127 -> 2.4.128)
Subpackages: libdrm2 libdrm_amdgpu1 libdrm_intel1

- Update to 2.4.128
  * Versions 2.4.126 and 2.4.127 contain an ABI breakage in
    libdrm_amdgpu. Depending on which Mesa version or commit you
    use, you may see stack smashing resulting in crashes of AMD
    Mesa drivers. It's recommended to never package versions
    2.4.126 and 2.4.127.

==== libkscreen6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libKF6Screen8 libKF6ScreenDpms8 libkscreen6-plugin

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== libksysguard6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== libplasma6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libPlasma6 libplasma6-components libplasma6-desktoptheme

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== libqt5-qtbase ====
Version update (5.15.17+kde122 -> 5.15.18+kde109)
Subpackages: libQt5Core5 libQt5DBus5 libQt5Gui5 libQt5Network5 libQt5PrintSupport5 libQt5Sql5 libQt5Sql5-sqlite libQt5Test5 libQt5Widgets5 libQt5Xml5

- Update to version 5.15.18+kde109, rebased upstream:
  * Revert "xcb: handle XI2 input button and motion events from slave devices"
  * Update the opensource lisence to .sh file
  * Revert "SQLite: Update SQLite to v3.45.3"
  * Revert "Update Harfbuzz to 8.4.0"
  * Update to Harfbuzz 10.0.1
  * Update bundled libpng to version 1.6.44
  * Update bundled libjpeg-turbo to version 3.0.4
  * Update to Harfbuzz 9.0.0
  * xcb: handle XI2 input button and motion events from slave devices
  * Document the potential widening effect of upper-casing
  * Correct documentation of QDateTime's comparisons
  * Skip 'off-by-one' adjustment in block length during undo operation
  * tst_QThread: add a test for self-cancellation
  * Add QTZ::displayName() benchmarks
  * Remove an unfounded assertion, add the test-case that tripped it
  * Update Freetype to 2.13.3
  * Android: enable building AIDL for AGP 4.2.0+
  * SQLite: Update SQLite to v3.46.1
  * SQLite: Update SQLite to v3.46.0
  * SQLite: Update identified license
  * QTest::formatFailMessage(): fix use of std::mbstowcs()
  * macOS: Be honest about the system locale
  * macOS: Initialize standard NSUserDefaults as early as possible
  * PCRE: upgrade to 10.44
  * Gui: compile fix with -qreal float
  * testlib: Share more code between formatFailMessage() implementations
  * Fix -Wformat issues in our headers
  * QTest::toString(): Fix format specifier for q(u)int64 on Windows
  * xcb: fix QWindow::startSystemMove()/Resize() triggered by touch
  * xcb: fix QWindow::startSystemMove()/Resize() triggered by mouse
  * QMimeDatabase: pick up XML mimetypes from :/qt-project.org/mime/packages
  * Change the mimetype database embedded into QtCore
  * [doc] Q(Persistent)ModelIndex: document behavior of data() on invalid Q(P)MIs
  * QThread: fix race condition between parallel terminate() calls
  * tst_QtConcurrentThreadEngine: fix UB (uninitialized boolean)
  * q(v)snprintf(): mark the functions as obsolete
  * uic: Prepare for encountering fully qualified enum values in new .ui files
  * HTTP2: use temporary keychain in the abortOnEncrypted test function
  * xcb: try to repopulate xinput2 devices when needed
  * QObject: fix installEventFilterOrder() test flakiness
  * QObject: add unittest to check the order of eventFilter() calls
  * Fix leak of QWindowsUiaMainProvider instances
  * Call VariantClear to free BSTR owned by VARIANT instance
  * Make it possible to create distance field with specific size
  * qIsEffectiveTLD: Fix chunk calculation code
  * generateTLDs: Fix the chunkSize check
  * QFontEngineFT::alphaMapForGlyph: ask for Format_A8 if glyphs are color
  * tst_QGlobal: fix -Wmaybe-uninitialized
  * tst_QDir: fix -Wunused-result
  * Bump version to 5.15.18
  * Enable harfbuzz-ng on old macOS versions
  * Update to Harfbuzz 8.5.0
  * xcb: Correctly report whether QInternalMimeData::retrieveData_sys() fails
  * Fix qt_attribution file for libjpeg
  * Update bundled libjpeg-turbo to version 3.0.3
  * Android: QtEditText support for full-screen soft keyboard
  * configure: Fix summary shown standard when passing -c++std c++14
  * Make it possible to override autodetection of Harfbuzz-NG
  * Android: Register displayListener after QtLayout initialization
  * QBitArray: fix potential truncation in QDataStream op>>()
  * QBitArray: avoid overflow in size-to-storage calculations
  * QMainWindowLayout: rewrite validateToolBarArea() to return by value
  * androiddeplyqt: fix more missing pclose() on early returns
  * androiddeplyqt: fix missing pclose() on early return
  * QTextLayout: keep strong reference on font engine in a layout loop
- Rebase big-endian-scroll.patch
- Update to version 5.15.17+kde123:
  * qDecodeDataUrl(): fix precondition violation in call to QByteArrayView::at()
- Drop patch, now included:
  * CVE-2025-5455.patch

==== libqt5-qtdeclarative ====
Version update (5.15.17+kde21 -> 5.15.18+kde22)

- Update to version 5.15.18+kde22, rebased upstream:
  * Avoid undefined behavior in the JIT
  * Update opensource license to .frag and .vert files
  * Doc: Add information about Felgo QML Hot Reload tool
  * doc: fix reference to nonexistent DragHandler.SnapNever
  * Fix crash in distance field cache with some glyphs
  * QQmlListModel: Invalidate ModelObject when necessary
  * doc: Stop telling users that DragHandler is not for DnD
  * QQuickAnimation: Fix setting running property
  * Bump version to 5.15.18
  * Fix compilation with C++11
  * Fix documentation of List/GridView count
  * GridView: add missing properties and signals to the documentation
  * Fix heap-buffer-overflow in ESTable::remove
  * V4: Don't call methods on nullptr

==== libqt5-qtgraphicaleffects ====
Version update (5.15.17+kde0 -> 5.15.18+kde0)

- Update to version 5.15.18+kde0, rebased upstream:
  * Bump version to 5.15.18

==== libqt5-qtimageformats ====
Version update (5.15.17+kde2 -> 5.15.18+kde2)

- Update to version 5.15.18+kde2, rebased upstream:
  * Update bundled libtiff to version 4.7.0
  * Bump version to 5.15.18

==== libqt5-qtmultimedia ====
Version update (5.15.17+kde2 -> 5.15.18+kde2)

- Update to version 5.15.18+kde2, rebased upstream:
  * Fix stopping of just started sound effect from pending underrun notification
  * Bump version to 5.15.18
  * Put private helper classes in unnamed namespace

==== libqt5-qtquickcontrols ====
Version update (5.15.17+kde0 -> 5.15.18+kde0)

- Update to version 5.15.18+kde0, rebased upstream:
  * Bump version to 5.15.18

==== libqt5-qtquickcontrols2 ====
Version update (5.15.17+kde5 -> 5.15.18+kde5)
Subpackages: libQt5QuickControls2-5 libQt5QuickTemplates2-5

- Update to version 5.15.18+kde5, rebased upstream:
  * SwipeView: position the pages adjacent to each other initially
  * Bump version to 5.15.18

==== libqt5-qtspeech ====
Version update (5.15.17+kde1 -> 5.15.18+kde1)

- Update to version 5.15.18+kde1, rebased upstream:
  * Bump version to 5.15.18

==== libqt5-qtsvg ====
Version update (5.15.17+kde5 -> 5.15.18+kde5)

- Update to version 5.15.18+kde5, rebased upstream:
  * Bump version to 5.15.18

==== libqt5-qtwayland ====
Version update (5.15.17+kde57 -> 5.15.18+kde55)
Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5

- Update to version 5.15.18+kde55, rebased upstream:
  * Bump version to 5.15.18
  * Make wheel operations compatible with xcb

==== libqt5-qtx11extras ====
Version update (5.15.17+kde0 -> 5.15.18+kde0)

- Update to version 5.15.18+kde0, rebased upstream:
  * Bump version to 5.15.18

==== librsvg ====
Version update (2.61.2 -> 2.61.3)

- Update to version 2.61.3:
  + librsvg crate version 2.61.3
  + librsvg-rebind crate version 0.2.1
  + Reject file: URIs or UNC paths with hostnames in href
    references, to avoid NTLM hash leaks on Windows.
  + Make loading limits work with libxml2 2.15.0 and later.
  + Make the rsvg-convert test suite not depend on having fonts
    installed in the system. This helps build systems which
    otherwise had to disable some of the PDF tests.
  + rsvg-convert: Fix build when PDF support is disabled in Cairo.
- Drop adwaita-fonts BuildRequires: Fixed upstream, workaround for
  tests no longer needed.

==== mdadm ====
Version update (4.4 -> 4.4+10.g7b1f399e)

- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo

==== milou6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * Shadow Resultsmodel::getMimeData
  * Update version for new release 6.5.2

==== openjph ====
Version update (0.24.4 -> 0.24.5)

- Update to 0.24.5:
  * Address openexr oss-fuzz 5747129672073216 #225

==== openssh ====
Version update (10.0p2 -> 10.2p1)
Subpackages: openssh-clients openssh-common openssh-server

- Update to openssh 10.2p1:
  = Future deprecation warning
  * A future release of OpenSSH will deprecate support for SHA1
    SSHFP records due to weaknesses in the SHA1 hash function.
    SHA1 SSHFP DNS records will be ignored and ssh-keygen -r
    will generate only SHA256 SSHFP records.
    The SHA256 hash algorithm, which has no known weaknesses, has
    been supported for SSHFP records since OpenSSH 6.1, released
    in 2012.
  = Bugfixes
  * ssh(1): fix mishandling of terminal connections when
    ControlPersist was active that rendered the session unusable.
    bz3872
  * ssh-keygen(1): fix download of keys from PKCS#11 tokens.
  * ssh-keygen(1): fix CA signing operations when the CA key is
    held in a ssh-agent(1). bz3877
  = Portability
  * All: support platforms without mmap(2), e.g. WASM builds such
    as https://hterm.org
  * All: fix builds on FreeBSD for missing fnctl.h include.
  * All: fix builds on MacOS <10.12 Sierra, which lacks
    clock_gettime(3)
  * sshd(8): don't PAM_RHOST if the remote host is the "UNKNOWN"
    placeholder name. Avoids potential hangs in some PAM modules
    as they try to resolve it. Note, sshd(8) only uses the
    "UNKNOWN" name when the connection is not on an IPv4 or
    IPv6 socket.
- Update to openssh 10.1p1:
  = Potentially-incompatible changes
  * ssh(1): add a warning when the connection negotiates a non-post
    quantum key agreement algorithm.
    This warning has been added due to the risk of "store now,
    decrypt later" attacks. More details at
    https://openssh.com/pq.html
    This warning may be controlled via a new WarnWeakCrypto
    ssh_config option, defaulting to on. This option is likely to
    control additional weak crypto warnings in the future.
  * ssh(1), sshd(8): major changes to handling of
    DSCP marking/IPQoS. In both client and server the default DSCP
    (a.k.a IPQoS) values were revised and the way these values are
    used during runtime has changed.
    Interactive traffic is now assigned to the EF (Expedited
    Forwarding) class by default. This provides more appropriate
    packet prioritisation information for the intermediate network,
    such as wireless media (cf. RFC 8325). Non-interactive traffic
    will now use the operating system default DSCP marking. Both
    the interactive and non-interactive DSCP values may be
    overridden via the IPQoS keyword, described in ssh_config(5)
    and sshd_config(5).
    The appropriate DSCP marking is now automatically selected and
    updated as needed over the course of a connection's lifetime.
    ssh(1) and sshd(8) will switch between the interactive and
    non-interactive IPQoS values depending on the type of SSH
    channels open at the time. For example, if an sftp session is
    using the connection alongside a shell session, then the non-
    interactive value will be used for the duration of the sftp. A
    connection which contains only interactive sessions is marked
    EF.
  * ssh(1), sshd(8): deprecate support for IPv4 type-of-service
    (ToS) keywords in the IPQoS configuration directive.
    Type of Service (ToS) was deprecated in the late nineties and
    replaced with the Differentiated Services architecture, which
    has significant advantages for operators because it offers more
    granularity.
    OpenSSH switched its default IPQoS from ToS to DSCP values in
    2018 (openssh-7.7).
    IPQoS configurations with 'lowdelay', 'reliability', or
    'throughput' will be ignored and will instead use the system
    default QoS settings. Additionally, a debug message will be
    logged about the deprecation with a suggestion to use DSCP QoS
    instead.
  * ssh-add(1): when adding certificates to an agent, set the
    expiry to the certificate expiry time plus a short (5 min)
    grace period.
    This will cause the agent to automatically remove certificates
    shortly after they expire. A new ssh-add -N option disables
    this behaviour.
  * All: remove experimental support for XMSS keys. This was never
    enabled by default. We expect to implement a new post-quantum
    signature scheme in the near future.
  * ssh-agent(1), sshd(8): move agent listener sockets from /tmp to
    under ~/.ssh/agent for both ssh-agent(1) and forwarded sockets
    in sshd(8).
    This ensures processes that have restricted filesystem access
    that includes /tmp do not ambiently have the ability to use
    keys in an agent.
    Moving the default directory has the consequence that the OS
    will no longer clean up stale agent sockets, so ssh-agent now
    gains this ability.
    To support $HOME on NFS, the socket path includes a truncated
    hash of the hostname. ssh-agent will, by default, only clean up
    sockets from the same hostname.
    ssh-agent(1) gains some new flags: -U suppresses the automatic
    cleanup of stale sockets when it starts. -u forces a cleanup
    without keeping a running agent, -uu forces a cleanup that
    ignores the hostname. -T makes ssh-agent put the socket back
    in /tmp.
  = Security
  * ssh(1): disallow control characters in usernames passed via the
    ... changelog too long, skipping 159 lines ...
  * openssh-10.0p2-relax-openssl-version-check.patch

==== pam-config ====
Version update (2.13+git.20251003 -> 2.13+git.20251105)

- Update to version 2.13+git.20251105:
  * Disable SELinux for nonlogin session config, too
- Update to version 2.13+git.20251104:
  * pam_selinux: fix counter for session stacks

==== plasma5support6 ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libPlasma5Support6

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-activities ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libPlasmaActivities7 plasma6-activities-imports

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * Don't leak the future watcher

==== plasma6-activities-stats ====
Version update (6.5.1 -> 6.5.2)
Subpackages: libPlasmaActivitiesStats1

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-browser-integration ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-desktop ====
Version update (6.5.1 -> 6.5.2)
Subpackages: plasma6-desktop-emojier

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * sddm-theme: Avoid rendering invisible contents
  * Update version for new release 6.5.2

==== plasma6-integration ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-nm ====
Version update (6.5.1 -> 6.5.2)
Subpackages: plasma6-nm-openconnect plasma6-nm-openvpn

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * kded: Ignore loopback and special connections on no wakeup notification
  * Return to not exposing loopback interfaces to the user (kde#511030)
  * Update version for new release 6.5.2

==== plasma6-openSUSE ====

- Update to 6.5.2

==== plasma6-pa ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-print-manager ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-systemmonitor ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== plasma6-workspace ====
Version update (6.5.1 -> 6.5.2)
Subpackages: plasma6-session plasma6-workspace-libs

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * shutdown: Stop graphical-session.target directly
  * servicerunnertest: make sure welcome center doesn't skew results
  * servicerunner: aggressively expand scoring system (kde#511078,kde#511235,kde#511237)
  * wallpapers/image: prevent checkbox from overlapping with day/night icon
  * kcms/kfontints: Install kfontviewpart.rc in the right location (kde#446207)
  * [components/timezoneselector] Explicitly pass translation domain (kde#511404)
  * Fix WidgetExplorer::addApplet (kde#511413)
  * wallpapers/image: Don't use QUrlQuery for preview
  * Update version for new release 6.5.2

==== polkit ====
Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 typelib-1_0-Polkit-1_0

- Backport for NoNewPrivs support:
  - systemd-socket-activation.patch: start agent via socket, no setuid
- Backport of patches for better run0 usability:
  - auth_keep.patch: do not ask for reauth if new process shares same UID/parent/cgroup/tty
  - sudo_uid.patch: also set $SUDO_UID/$SUDO_GID for compat with sudo

==== polkit-default-privs ====
Version update (1550+20251002.f34bfbd -> 1550+20251031.036888e)

- Update to version 1550+20251031.036888e:
  * profiles: budgie-desktop backlight (bsc#1252691)

==== polkit-kde-agent-6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== powerdevil6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== python-charset-normalizer ====
Version update (3.4.3 -> 3.4.4)

- Update to 3.4.4
  * Bound `setuptools` to a specific constraint `setuptools>=68,<=81`.
  * Raised upper bound of mypyc for the optional pre-built extension to v1.18.2
  * `setuptools-scm` as a build dependency.
  * Enforced hashes in `dev-requirements.txt` and created `ci-requirements.txt`
    for security purposes.
  * Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  * Restore ` multiple.intoto.jsonl` in GitHub releases in addition to individual
    attestation file per wheel.

==== python-psutil ====
Version update (7.1.1 -> 7.1.2)

- Update to 7.1.2
  * 2657_: stop publishing prebuilt Linux and Windows wheels for 32-bit Python.
    32-bit CPython is still supported, but psutil must now be built from source.
  * 2565_: produce wheels for free-thread cPython 3.13 and 3.14 (patch by
    Lysandros Nikolaou)
  * 2650_, [macOS]: `Process.cmdline()`_ and `Process.environ()`_ may incorrectly
    raise `NoSuchProcess`_ instead of `ZombieProcess`_.
  * 2658_, [macOS]: double ``free()`` in `Process.environ()`_ when it fails
    internally. This posed a risk of segfault.
  * 2662_, [macOS]: massive C code cleanup to guard against possible segfaults
    which were (not so) sporadically spotted on CI.
  * 2657_: stop publishing prebuilt Linux and Windows wheels for 32-bit Python.

==== qalculate ====
Version update (5.8.0 -> 5.8.1)

- Update to version 5.8.1
  * Show error when function or variable disabled by
    "--disable-insecure" is used
  * New completion method with matches selectable from numbered
    list.
  * Configurable completion.
  * Improve interpretation of function expressions with x, y, or z
    in object names (e.g. "x year"), or within quotation marks.
  * Fix compilation with -fsanitize=undefined.
  * Fix make check with --disable-insecure.
  * Fix crash after factorization or in RPN mode, with
    calculate-as-you-type enabled.
  * Fix unable to write preferences because of missing
    configuration directory.
  * Fixes for character encodings other than UTF-8.
  * Minor bug fixes and feature enhancements.

==== qqc2-breeze-style6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== runc ====
Version update (1.3.2 -> 1.3.3)

- Update to runc v1.3.3. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch
[ This update was only released for SLE 12 and 15. ]
- Update to runc v1.2.8. Upstream changelog is available from
  <https://github.com/opencontainers/runc/releases/tag/v1.2.8>. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
- Remove upstreamed patches for bsc#1252232:
  - 2025-11-05-CVEs.patch
[ This update was only released for SLE 12 and 15. ]
- Backport patches for three CVEs. All three vulnerabilities ultimately allow
  (through different methods) for full container breakouts by bypassing runc's
  restrictions for writing to arbitrary /proc files. bsc#1252232
  * CVE-2025-31133
  * CVE-2025-52565
  * CVE-2025-52881
  + 2025-11-05-CVEs.patch

==== sddm-kcm6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== sdl2-compat ====
Version update (2.32.56 -> 2.32.58)

- Update to release 2.32.58
  * Fixed a crash at startup in Hearts of Iron IV
  * Fixed mouse movement in Heroes of Might and Magic III
  * Fixed crash under Wayland with Heavy Gear 2
  * Fixed crash at shutdown in Sim City 3000
  * Fixed stuck mouse cursor in Seven Kingdoms
  * Added a fast path for SDL_MapRGB() and SDL_MapRGBA()
  * Fixed the colorspace for YUV to RGB conversion
  * Fixed deadlock when opening audio on some systems

==== selinux-policy ====
Version update (20251021 -> 20251106)
Subpackages: selinux-policy-targeted

- Update to version 20251106:
  * Allow pcscd_t to search cgroup (bsc#1253098)
- Update to version 20251104:
  * Fix syntax error in userdomain.if
  * Allow nnp_transition for OpenSMTPD (bsc#1252431)
  * Allow ras-mc-ctl get attributes of the kmod executable
  * Define file equivalency for /var/opt
  * Allow virtnodedev_t the perfmon capability
  * Allow nut_upsdrvctl_t the sys_ptrace capability
  * Label /usr/lib/systemd/user/graphical-session-pre.target with xdm_unit_file_t
  * systemd-sysctl: allow rw on binfm_misc_fs_t to set binfmt_misc status
  * Allow cupsd to manage cupsd_rw_etc_t lnk_files
  * Set temporary no-stub resolv.conf file from NetworkManager as net_conf_t
  * Allow spamc read aliases file
  * Mark configfs_t as mountpoint (bsc#1246080)
  * Allow systemd-machined watch cgroup files
  * Allow sshd-auth read generic proc files
  * Allow sshd-auth read and write user domain ptys
  * Allow logwatch read and write sendmail unix stream sockets
  * Allow logwatch domain transition on rpm execution
  * Allow thumb_t mounton its private tmpfs files
  * Allow thumb_t create permission in the user namespace
  * Allow corenet_unconfined_type name_bind to icmp_socket
  * Allow systemd-networkd to manage systemd_networkd_var_lib_t files
  * Allow sshd-session get attributes of sshd vsock socket
- Syncing with upstream rawhide selinux-policy up to:
  * 95151e3c777301fd291f4db363a6bb24cad8c414

==== spectacle ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== suse-module-tools ====
Version update (16.0.61 -> 16.0.62)
Subpackages: suse-module-tools-scriptlets

- Update to version 16.0.62:
  * spec file: remove %udev_rules_update call (bsc#1250664)

==== systemsettings6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2

==== sysuser-tools ====

- Remove dependency on chage

==== ucode-amd ====
Version update (20251028 -> 20251031)

- Update to version 20251031 (git commit 04b323bb64f9):
  * linux-firmware: Update AMD cpu microcode

==== xdg-desktop-portal-kde6 ====
Version update (6.5.1 -> 6.5.2)

- Update to 6.5.2:
  * New bugfix release
  * For more details see https://kde.org/announcements/plasma/6/6.5.2
- Changes since 6.5.1:
  * Update version for new release 6.5.2
  * screencasting: Let the compositor pick the scale of a region stream (kde#511039)
  * Update version for new release 6.5.2

==== xkeyboard-config ====
Version update (2.45 -> 2.46)

- replaced hotfix u_ua-winkeysenhanced-fix.patch with official fix
  U_Make-ua-winkeysenhanced-compatible-with-ckbcomp.patch
- refreshed patches
  * n_disable-2xalt_2xctrl-toggle.diff
  * n_fi-kotoistus-metainfo.patch
  * python-3.11.patch
- added u_ua-winkeysenhanced-fix.patch in order to fix kbd build
  '/usr/bin/ckbcomp: garbage in a key definition:
  "symbols=[Ukrainian_ghe_with_upturn,Ukrainian_GHE_WITH_UPTURN],"'
- update to 2.46
  * New Layouts
  • Added Manoonchai layout for Thai as documented in Github repository.
  • Added ISO/international variants of ANSI and Dvorak US Macintosh layouts.
  • Added the Ukrainian (Windows Enhanced) keyboard layout variant
    (winkeysenhanced) which matches the Windows 11 default.
  • Add pk(pak_urdu_phonetic) variant This layout provides phonetic typing for
    Urdu, mapping English phonetic equivalents to Urdu script. It is a port of
    the widely-used Windows-only “Pak Urdu Installer” by mBilalm. Includes
    comprehensive character coverage with over 160 custom key mappings. Adds
    support for full Urdu typography including diacritics, punctuation, and
    special symbols. Introduces U+FDFB (ﷻ) mapped to AltGr+Shift+X.
  • Added an alternative variant for Gothic in the Ancient layout.
  * Fixes
  • Fixed a regression in us(mac) layout resulting in the grave/tilde key
    inverted with the section key.
  • Fixed shift:break_caps resulting in rEVERSE cAPS if some keys were operated
    simultaneously with the Shift keys when trying to unlock Caps. (#74
    (closed))
  • Fixed CTRL+ALT incomplete key type, which prevented using some key
    combinations: e.g. Control+Backspace.
  * Options
  • Added hyper:mod2 compatibility option, to maps the virtual modifier Hyper
    to Mod2; conflicts with NumLock.
    Use this option if using Hyper, Super and LevelFive, e.g. for layouts with
    5+ levels. The option numpad:mac should be activated as well, in order to
    enable the numpad.
  * Misc
  • inet: Added mapping to the following new keysyms:
    □ XF86OK
    □ XF86Select
    □ XF86GoTo
    □ XF86Clear
    □ XF86Option
    □ XF86Time
    □ XF86VendorLogo
    □ XF86MediaSelectProgramGuide
    □ XF86NextFavorite
    □ XF86MediaSelectProgramGuide
    □ XF86MediaSelectHome
    □ XF86MediaLanguageMenu
    □ XF86MediaTitleMenu
    □ XF86Subtitle
    □ XF86AudioChannelMode
    □ XF86MediaSelectPC
    □ XF86MediaSelectTV
    □ XF86MediaSelectCable
    □ XF86MediaSelectVCR
    □ XF86MediaSelectVCRPlus
    □ XF86MediaSelectSatellite
    □ XF86MediaSelectCD
    □ XF86MediaSelectTape
    □ XF86MediaSelectRadio
    □ XF86MediaSelectTuner
    □ XF86MediaPlayer
    □ XF86MediaSelectTeletext
    □ XF86MediaSelectAuxiliary
    Relevant upstream merge request: xorgproto-93.
  * Build system/Breaking changes
  • Remove the build option xkb-base, which was ineffectual since the migration
    from autotools to meson in xkeyboard-config 2.35, published 3 years ago. (#
    532 (closed))
- remove ineffectual xkb-base build option