# changelog

author: Jos de Kloe <josdekloe@gmail.com> - 2.29.0-1
changelog:
  - Upgrade to upstream version 2.29.0
    Note that the source code now uses g++ in stead of gcc for compilation.


author: Miroslav Suchý <msuchy@redhat.com> 1.46-1
changelog:
  - rename LicenseRef-Catharon to Catharon
  - add NCL license
  - add HPND-UC-export-US license
  - Add GPL-2.0-only_WITH_cryptsetup-OpenSSL-exception
  - add Sun-PPP-2000 license
  - add BSD-2-clause-first-lines license
  - add pkgconf license


author: Miroslav Suchý <msuchy@redhat.com> 1.47-1
changelog:
  - add GPL-2.0-or-later WITH RRDtool-FLOSS-exception-2.0
  - add text of ultrapermissive dedication from sublimehq
  - add HPND-export2-US license
  - add Gutmann license
  - add HPND-merchantability-variant license
  - fix case in license id of BSD-2-Clause-first-lines
  - add HPND-export-US-acknowledgement license
  - add HPND-Intel license
  - add loguru public domain dedication
  - add BSD-3-Clause WITH AdditionRef-OpenEXR-Additional-IP-Rights-Grant
  - add HPND-sell-variant-MIT-disclaimer-rev license
  - add GD license
  - Add crc32 license found in libsurvive to UltraPermissive
  - allow lower case variant
  - add any-OSI license
  - document dotnet* packages as exception for LicenseRef-ISO-8879


author: Miroslav Suchý <msuchy@redhat.com> 1.50-1
changelog:
  - include scancode-license-policy.yaml in rpm
  - add BSD-3-Clause-No-Nuclear-Warranty license
  - add unicode-mappiing license as not-allowed
  - add LicenseRef-W3C-Document-2023
  - add W3C-20150513 license
  - add 'make scancode' that produces scancode license policy file
  - Add LicenseRef-framed as allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.52-1
changelog:
  - Add LicenseRef-Frontier-Artistic-1.0 as not-allowed
  - Add LicenseRef-JasPer-1.0 as not-allowed
  - Create missing TOML for Callaway Nmap but reclassify as not-allowed, with
    usage exception
  - Add LicenseRef-NPSL-0.92 as not-allowed, corresponding to Callaway-era NPSL
  - Add LicenseRef-NPSL-0.93 as not-allowed to cover NPSL 0.93 and 0.94
  - Correct TOML files for LicenseRef-NPSL-0.94 and LicenseRef-NPSL-0.95
  - Add LicenseRef-NPSL-0.95 as not-allowed


author: Miroslav Suchý <msuchy@redhat.com> 1.53-1
changelog:
  - add HPND-Netrek license
  - Add license text for py-sdl2 Public Domain license
  - remove LicenseRef-framed as ulem license was extended to allow LicenseRef-
    framed variation
  - add HIDAPI license
  - add Ruby-pty license
  - add LicenseRef-OASIS-spec


author: Miroslav Suchý <msuchy@redhat.com> 1.54-1
changelog:
  - public domain dedication found in mailcap
  - public domain dedications found in web server icons
  - replaced obsolescent command with modern equivalent
  - add LicenseRef-compface
  - Add rijndael from sdl-crypto to public domain
  - add public domain dedication for xz
  - Add sha1 from sdl-crypto to public domain
  - correct location of HPND-Netrek.toml


author: Miroslav Suchý <msuchy@redhat.com> 1.55-1
changelog:
  - Split rpmlint-fedora-license-data-legacy from rpmlint-fedora-license-
    data
  - add LicenseRef-IUPAC-InChI-Trust as not allowed
  - add TrustedQSL
  - add TU-Berlin-1.0 license
  - add DocBook-XML license
  - add DocBook-Schema license
  - add AGPL-3.0-or-later WITH PS-or-PDF-font-exception-20170817
  - Extend ISO-8879 exception to dotnet9.0


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.2-1
changelog:
  - Made cosmetic changes to the RPM spec file
  - Removed the version information from the changelog section of the RPM spec file
  - Removed unnecessary macros from the RPM spec file
  - Removed "pyproject-rpm-macros" from the build requirements section
  - Switched license tag over to an SPDX identifier
  - Raised the upper bound on "cryptography" runtime dependency
  - Updated the dependency lockfile to the most recent versions


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.3-1
changelog:
  - Project moved from GitLab to GitHub (gridhead/firmitas to fedora-infra/firmitas)
  - Add CI workflow for the project
  - Automated dependency update - Bump requests from 2.31.0 to 2.32.2
  - Automated dependency update - Bump urllib3 from 1.26.18 to 1.26.19
  - Automated dependency update - Bump cryptography from 41.0.7 to 42.0.4


author: Akashdeep Dhar <t0xic0der@fedoraproject.org> - 0.1.4-1
changelog:
  - Attempt fixing the FTBFS RHBZ#2307964
  - More information on https://github.com/fedora-infra/firmitas/releases/tag/v0.1.4


author: Ken Dreyer <kdreyer@ibm.com> - 2.9.1-3
changelog:
  - enable general dynamic tls on s390x (Thanks Tom Callaway
    <spot@fedoraproject.org>) (rhbz#2290376)


author: Christian Heimes <cheimes@redhat.com> 0.10-1
changelog:
  - [HMS-1788] Add simple GH CI workflow
  - [HMS-1779] Move secrets and settings to CI/CD variables
  - [HMS-1645] Replace bandit/flake8 with ruff linter
  - Add infrastructure for mypy type checks
  - [HMS-1645] Drop IPA 4.6 compatibility workarounds
  - [HMS-1645] Drop Python 2 compatibility
  - Run integration tests in FIPS mode
  - [HMS-1645] Drop support for RHEL 7


author: Christian Heimes <cheimes@redhat.com> 0.11-1
changelog:
  - HMS-2052 build: Use OpenAPI schema from idm-domains-api
  - HMS-2038 test: catch metadata misconfiguration early
  - fix: Move rpkg output out of .tox directory
  - HMS-2041 fix: Represent org id as string, not int
  - HMS-2038 test: Improve testing with backend compose
  - HMS-1991 fix: Tighten OpenAPI schema
  - HMS-2008 feat: Adopt JSON API error objects
  - Add definitions for missing JSON schemas
  - HMS-1991 feat: Generate schema JSON files from OpenAPI
  - HMS-1991: Refactor JSON schema
  - Add project and build definitions to pyproject.toml
  - HMS-1898: Fix and validate error response
  - HMS-1975: Remove check-host API endpoint
  - Improve CI and test with Python 3.9 (RHEL 9)
  - register: prompt for confirmation
  - HMS-1926: Friendly D-Bus error message
  - ipa-hcc CLI: print human-readable messages
  - Document how to configure for ephemeral
  - logging: pretty print API response
  - Reconcile JSON schema with idm-domains-backend OpenAPI
  - Add verbose logging to ipa-hcc
  - Prepare release 0.11
  - Ephemeral env support with fake headers
  - Improve Makefile and tox runner
  - yamllint: don't apply truthy test to map keys
  - Rename field 'cacerts' to 'ca_certs'
  - Reconcile domain response schema
  - Reconcile register/update domain schema
  - Document how to install build and test deps
  - HMS-1898 Reconcile error result schema
  - Ruff: silence F811 redefined-while-unused


author: Christian Heimes <cheimes@redhat.com> 0.12-1
changelog:
  - fix: use new Quay org for CI images
  - HMS-1789 tests: use @podengo/ipa-hcc COPR
  - fix: Support latest tox on Fedora 38
  - fix: Allow non-compact JWT serialization
  - fix: use OpenAPI from public GitHub repo
  - test: Build SRPM and RPMs on GHA
  - test: update packages in containers
  - fix: Don't hard-code inventory url
  - doc: Add documentation for developers
  - HMS-2195: fix: Use idmsvc as API slug
  - feat: update locations
  - fix: Fix typo in automember rule
  - HMS-2147 fix: use HostConfIpa schema in HostConfResponse
  - refactor: Use setuptools to install Python code
  - fix: store public JWK in separate file
  - HMS-1857 feat: signed assertion for host registration
  - HMS-1857 feat: Add multi-sig and host token
  - HMS-1289 fix: Remove inventory_id from HostConfResponse
  - HMS-1857 feat: Add JWK abstraction and helpers
  - feat: Update JSON schema from latest OpenAPI
  - HMS-2038 test: Smoke tests with idm-domains-backend
  - HMS-2068: Drop support for RHEL without PKINIT


author: Christian Heimes <cheimes@redhat.com> 0.13-1
changelog:
  - feat: Enhance reporting and logging
  - feat: Check remote status with HCC
  - refactor: Use context="hcc" in IPA API
  - infra: Log JSON error information
  - infra: Refresh cache and config file
  - fix: Use LDAP for public JWKs
  - refactor: Run ipa-client-automount
  - fix: Replace legacy with modern Insights API
  - fix: Limit hostname to 63 characters
  - fix: Use UEP CA to access prod cert-api
  - fix: Don't create global DNSResolver
  - feat: Add ipahcc-client-prepare
  - fix: Fake headers can use org_id/cn from RHSM cert
  - refactor: Change to --idmsvc-api-url
  - HMS-2348 feat: Add ephemeral fake header to auto-enrollment
  - test: Run CI on Fedora 39, drop 37
  - fix: Better error reporting for missing RHSM cert
  - fix: Fix typo fdqn -> fqdn
  - Fix: Keycloak SSO provider requires openid scope
  - doc: Add test instructions and hcc.conf info
  - HMS-2814 feat: IPA client installer and automount
  - test: idm-ci now requires local cloud auth
  - feat: Add sso.rh.c IdP provider definitions
  - HMS-2694 fix: Update JWST issuer and docs
  - HMS-2595 feat: Extend ipa-hcc to retrieve+store JWKs
  - test: Fix and improve coverage
  - fix: Update spec file URL
  - fix: Update git repo URL
  - HMS-2594: IPA plugin for HCC JWKs
  - test: Do not install KRA
  - HMS-2532 fix: attach to api commit
  - HMS-2491 test: Enable backend tests again
  - HMS-2491 test: Allow backend test to fail
  - HMS-2491 refactor: Separate GET signing keys
  - HMS-2491 test: Update test infra for DRT
  - HMS-2491 feat: Remove old domain registration
  - HMS-2491 feat: Update for domain token workflow
  - refactor: Remove env patching
  - HMS-2446 feat: New domain reg token
  - fix: Use gssproxy client keytab
  - HMS-2446 refactor: Move IPA API to WSGI framework
  - tests: Add test for deserialize()
  - tests: Check that serializing compact form gives a ValueError
  - feat: Add additional check json deserialization and update docs
  - feat: Rename deserialize_json to deserialize
  - feat: Do not allow compact serialization for MultiJWST
  - test: Enable mypy checker for tests
  - feat: Add domain token to mockapi
  - test: Run CI with Fedora 37 and 38
  - HMS-2070 feat: Remove D-Bus service


author: Christian Heimes <cheimes@redhat.com> 0.14-1
changelog:
  - Prepare ipa-hcc for Fedora packaging
  - infra: Add helper for stage console testing
  - Fix: pylint warning R1737
  - Fix: Typo in ipa-hcc-auto-enrollment sysconfig
  - Fix various infra issues
  - fix HMS-2066: Add timeout to confirmation prompt
  - test: Test on RHEL 9.3 / 8.9


author: Christian Heimes <cheimes@redhat.com> 0.16-1
changelog:
  - HMS-3840 feat: Detect configuration from rhsm.conf
  - ipahcc-stage-console now configures proxy
  - HMS-3821 feat: auto enrollment can set DNS resolver
  - More Fedora packaging fixes
  - Implement testing with Stage Console APIs
  - Implement console proxy settings


author: Christian Heimes <cheimes@redhat.com> 0.17-1
changelog:
  - Don't install /etc/ipa/hcc.conf by default
  - Refactor: Client scripts now use hccplatform
  - refactor: Move all server code to ipahcc.server
  - Feat: Server features detect Console from rhsm.conf
  - feat: SELinux policy for ipa-hcc-server
  - Fix EPEL 8 build


author: Fraser Tweedale <frase@frase.id.au> 0.18-1
changelog:
  - test: use RHEL with golang 1.21 for backend vm
  - test: fix idm-domains-backend-deploy after RBAC changes
  - chore: supress mypy errors in generated stubs
  - fix(HMS-4323): print hcc reponse headers in debug
  - fix(HMS-4323): print request-id header on auto_enrollment error
  - fix(HMS-4128): build container
  - fix: Generic proxy case, formatting
  - test: explicitely disable ipa-hcc-auto-enrollment in hmsidm-rhel93
  - test: print enrollment logs before tests
  - ci: fix artifacts upload
  - ci: make job metadata collect/teardown more robust
  - feat(HMS-4049): enable ipa-hcc-auto-enrollment.service via preset
  - fix: proxy mapping for stage
  - Use sysusers to create system users
  - Tests: Fix eslint and RHEL 8 enrollment problems


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 2.2.6-1
changelog:
  - Update to v2.2.6
  - Add a patch to fix build errors when using the GTK3 widgetset
  - Convert License tag to SPDX
  - Drop Patch1 (fix components explicitly requesting STABS debuginfo - fixed upstream)


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
changelog:
  - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - Enable go plugin only for Fedora 40+


author: Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
changelog:
  - Remove closed source parts from binary rpms
    See https://bugzilla.redhat.com/show_bug.cgi?id=2304167


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Packit <hello@packit.dev> - 0.94.2-1
changelog:
  - Packit previously put the "[packit]" string as a prefix in the subject of pull-from-upstream commits. Now the prefix is no longer there - this is made unnecessary noise in autochangelog. This affects the default. Custom action can still override this behavior. (#2263)
  - We have fixed a race condition that could occur when multiple `copr_build` jobs sharing a Copr project but having different targets were running at the same time. (#2274)
  - Resolves: rhbz#2273977


author: Packit <hello@packit.dev> - 0.95.0-1
changelog:
  - `packit dist-git init` now allows specifying `--version-update-mask` option and also any arbitrary top-level configuration options. (#2288)
  - We have fixed Packit auto-referencing Upstream Release Monitoring bug for release syncing to CentOS Stream. (#2284)
  - Resolves: rhbz#2276194


author: Packit <hello@packit.dev> - 0.97.0-1
changelog:
  - Add a `scan-in-osh` subcommand in the CLI to perform a scan through OpenScanHub. By default, it performs a full scan of the packages and a differential scan can be performed through `--base-srpm` option. (#2301)
  - When running `dist-git init` command from CLI, you can pass a command to specify a git URL of the project. (#2308)


author: Packit <hello@packit.dev> - 0.97.1-1
changelog:
  - We have fixed the behaviour for `dist-git init` command when `upstream-git-url` argument is specified.
  - Resolves: rhbz#2278839


author: Packit <hello@packit.dev> - 0.97.2-1
changelog:
  - We have fixed the syncing of ACLs for `propose-downtream` for CentOS Stream. (#2318)
  - Resolves: rhbz#2290733


author: Packit <hello@packit.dev> - 0.97.3-1
changelog:
  - We have fixed a bug that caused inconsistency between the promised environment variables (from the docs) and the environment that has been actually provided. Now you should have access to `PACKIT_UPSTREAM_REPO` and `PACKIT_DOWNSTREAM_REPO`, if they have been cloned already, in the `post-upstream-clone` action. (#2327)
  - Resolves: rhbz#2293661


author: Packit <hello@packit.dev> - 0.100.0-1
changelog:
  - `packit pull-from-upstream` now allows omitting `upstream_project_url` in the configuration in which case the interaction with the upstream repository is skipped during release syncing. (#2354)
  - We have implemented a CLI support for Koji builds against CBS Koji instance. (#2267)


author: Packit <hello@packit.dev> - 0.100.3-1
changelog:
  - `dist-git init` command now allows `upstream-git-url` not to be specified. (#2387)
  - Resolves: rhbz#2306481


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.3-11
changelog:
  - Assert that the .dist-info directory contains a license file
  - Do not package a duplicate license file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.0-1
changelog:
  - Update to 1.4.0 (close RHBZ#2308262)
  - Re-enable the server_test, which now works properly offline


author: Nils Philippsen <nils@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0
  - Split off man pages for sub-commands
  - Ship scriptlets needed for shell completion


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20240806git39e2663-1
changelog:
  - Update to 0^20240806git39e2663
  - Add `static inline` to `PyUnicodeWriter_WriteStr()` and
    `PyUnicodeWriter_WriteRepr()`.


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-51
changelog:
  - Move bundled required modules to USER_SITE directory
  - Disable bundled dateutil (EPEL provides now 2.8.2)
  - Remove cases for radicale major version 1 and 2
  - Move binaries to libexec and create a wrapper script
  - Align systemd unit file with f38
  - Fix __requires_exclude and fix/add "Requires" entries


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-53
changelog:
  - Update patch release/upstream to d7ce2f0b (2023-04-22)
  - Add radicale-3.1.8-fix-main-component-PR-1252.patch
  - Partially align spec file with Fedora variant


author: Peter Bieringer <pb@bieringer.de> - 3.1.8-55
changelog:
  - Debundle vobject as now available in EPEL9 (#2246219)
  - Skip bundle setup in case of nothing to bundle


author: Peter Bieringer <pb@bieringer.de> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - EL8: update bundled vobject to 0.9.7
  - EL8: update to Python 3.9 (requires update with option --allowerasing)
  - EL8: reenable bundled dateutil (required by Python 3.9)


author: Peter Bieringer <pb@bieringer.de> - 3.2.2-2
changelog:
  - Update to 3.2.2
  - Obsolete radicale-config-storage-hooks-SELinux-note.patch by inject inside spec file
  - Obsolete radicale-httpd by contrib config from upstream
  - Fix group+permissions of /etc/radicale/rights
  - Create an empty file /etc/radicale/users with proper permissions


author: Orion Poplawski <orion@nwra.com> - 1:6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


