Packages changed:
  AppStream
  Mesa (26.1.1 -> 26.1.2)
  Mesa-drivers (26.1.1 -> 26.1.2)
  MicroOS-release (20260603 -> 20260605)
  curl
  dracut (110+suse.31.ga81148a -> 110+suse.32.g36b00ba7)
  fontconfig (2.17.1 -> 2.18.0)
  grub2
  harfbuzz (14.2.0 -> 14.2.1)
  hwdata (0.407 -> 0.408)
  kernel-source (7.0.10 -> 7.0.11)
  libavif (1.4.1 -> 1.4.2)
  libbluray (1.4.0 -> 1.4.1)
  libinput (1.31.2 -> 1.31.3)
  python-semanage
  qalculate (5.10.0 -> 5.11.0)
  sssd
  tpm2.0-tools

=== Details ===

==== AppStream ====
Subpackages: libAppStreamQt3 libappstream5

- Add upstream change:
  * 0001-Explicitly-add-fcfreetype.h-include-to-asc-font.c.patch

==== Mesa ====
Version update (26.1.1 -> 26.1.2)
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1

- Update to 26.1.2 bugfix release
  - -> https://docs.mesa3d.org/relnotes/26.1.2

==== Mesa-drivers ====
Version update (26.1.1 -> 26.1.2)
Subpackages: Mesa-dri Mesa-vulkan-device-select libvulkan_lvp

- Update to 26.1.2 bugfix release
  - -> https://docs.mesa3d.org/relnotes/26.1.2

==== MicroOS-release ====
Version update (20260603 -> 20260605)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== curl ====
Subpackages: libcurl4

- Backport fix for issue gh#curl/curl#21547 and gh#Nheko-Reborn/nheko#2054
  which caused applications to busy loop with 100% CPU usage
  * Add libcurl-fix-wakeup-consumption.patch

==== dracut ====
Version update (110+suse.31.ga81148a -> 110+suse.32.g36b00ba7)
Subpackages: dracut-ima

- Update to version 110+suse.32.g36b00ba7:
  * fix(systemd-*): add new dlopen dependencies to modules lists

==== fontconfig ====
Version update (2.17.1 -> 2.18.0)
Subpackages: libfontconfig1

- Update to 2.18.0
  * test: Fix a build issue with musl libc
  * fc-lang: Add suz.orth for Sunuwar
  * test: add common helper class
  * test: port basic functionality check to Python
  * test: update to pass test cases on Win32
  * do not mix up a slash and a backslash in file object on Win32
  * meson: Add a missing fontconfig architecture test case
  * Add fontconfig version in FcCache
  * Improve a warning message
  * Better error message when missing default config
  * ci: install before test to avoid fontconfig error
  * Fix regex to pick up libtool version
  * Improve performance in FcConfigAdd
  * Improve log header in FcConfigSubstituteWithPat
  * meson: Update WrapDB files for v2 format migration
  * ci: add an option for the address sanitizer
  * Fix "UBSAN null pointer passed" to qsort
  * ci: Enable ASAN and UBSAN
  * Add genericfamily object in FcPattern
  * Add xsi:nil attribute support to limited elements
  * Get out from FcConfigAdd immediately if no valid pointer given
  * Bump the cache version again
  * fc-case: Update CaseFolding.txt to Unicode 17
  * Add obvious namespace to macros for FC_SPACING
  * Improve handling of constant name
  * test: fix pytest error when running on the top project directory
  * meson: Update wrapdb for expat to the latest
  * Use FcStrCopy instead of strdup
  * Fix -Wpointer-sign warnings
  * Do not store duplicate object name into FcObjectSet
  * Fix unused variable warning when iconv support disabled
  * doc: Fix a typo in FcPatternAdd description
  * Add fc-genconf the configuration generator tool
  * test-conf: Correct test results to display at the proper place
  * Fix unexpected priority change when looking up by specific family name
  * Return error code if FcPatternFormat failed
  * Add const converter for pattern format
  * fc-genconf: Add scan pattern to update genericfamily with commandline option
  * Fix dereferencing a null pointer of FcConfig in FcFontSetSort
  * conf.d: Fix a typo in 65-khmer.conf
  * Update doc for xsi:nil attribute support
  * test: add more conditional for bwrap sandbox test cases
  * meson: add tests-bwrap option
  * Avoid locale-dependent float-to-string
  * test-conf: add wrapper setenv for Win32
  * Fix invalid memory access on Win32
  * More fixes for locale-dependent float-to-string conversion
  * Replace strtod() with FcStrtod()
  * Explicitly declare FcPatternObjectCount as a public function
  * Update meson dependency to 1.11.0
- modified patches
  * skip-network-test.patch (refreshed)

==== grub2 ====
Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls

- Fix build with GCC 16
  * gcc16.patch
  * 0001-add-support-for-UEFI-network-protocols.patch

==== harfbuzz ====
Version update (14.2.0 -> 14.2.1)
Subpackages: libharfbuzz-gobject0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0

- Update to version 14.2.1:
  + Various AAT shaping fixes: legacy mort contextual offsets
    (which could produce out-of-font glyph IDs), in-place
    deleted-glyph replacements, and overflow in obsolete offset
    math.
  + Fix Arabic PUA fallback shaping for the isolated
    lam-alef-maksura ligature.
  + Fix float-to-int overflow in avar2 mapping with malformed
    fonts.
  + Harden buffer verification after detecting non-monotone
    clusters.
  + Various COLR v1 fixes: fix handling of .notdef without paint,
    round alpha consistently, and report the root clip under the
    font transform.
  + Various Glyph-extents fixes: inclusive rounding, and
    floating-point scaling before rounding so the reported box
    always covers the glyph.
  + Various Subsetting fixes: keep the palt spacing feature by
    default, raise the repacker MAX_SPACES limit, fix a repacker
    crash on shared LigatureSet nodes, guard gvar size overflow on
    32-bit, and fix the post glyph-name sort comparator on macOS.
  + Replace std::sort with an internal quicksort, removing leaked
    std:: symbols from the libharfbuzz ABI.
  + Harden size computations with saturating arithmetic against
    32-bit overflow.
  + Various improvements to the experimental Rust shaper (HarfRust)
    and font functions (fontations): honor custom font funcs, key
    shape plans on features, faster buffer handling, and update to
    HarfRust 0.8.
  + Various fixes to the experimental harfbuzz-gpu and
    harfbuzz-vector libraries, including a harfbuzz-vector heap
    buffer overflow and Windows build fixes.
  + Map the Hrkt (Katakana or Hiragana) script tag to the kana
    OpenType tag.
  + Build configuration: new HB_CONFIG_OVERRIDE_LAST_H override
    header, decouple HB_NO_DRAW from HB_NO_CFF, and an optional
    hb-allocator Cargo feature.
  + Various build, CI, and fuzzing fixes.

==== hwdata ====
Version update (0.407 -> 0.408)

- Update to version 0.408:
  * Update pci and vendor ids

==== kernel-source ====
Version update (7.0.10 -> 7.0.11)

- Update
  patches.kernel.org/7.0.10-0148-bpf-fix-end-of-list-detection-in-cgroup_stora.patch
  (bsc#1012628 CVE-2026-45838 bsc#1266396).
- Update
  patches.kernel.org/7.0.10-0155-bpf-reject-negative-CO-RE-accessor-indices-in.patch
  (bsc#1012628 CVE-2026-45839 bsc#1266399).
- Update
  patches.kernel.org/7.0.10-0802-openvswitch-cap-upcall-PID-array-size-and-pre.patch
  (bsc#1012628 CVE-2026-45840 bsc#1266397).
- Update
  patches.kernel.org/7.0.10-0805-netfilter-nfnetlink_osf-fix-divide-by-zero-in.patch
  (bsc#1012628 CVE-2026-45841 bsc#1266390).
- Update
  patches.kernel.org/7.0.10-0812-slip-reject-VJ-receive-packets-on-instances-w.patch
  (bsc#1012628 CVE-2026-45842 bsc#1266400).
- Update
  patches.kernel.org/7.0.10-0813-slip-bound-decode-reads-against-the-compresse.patch
  (bsc#1012628 CVE-2026-45843 bsc#1266395).
- Update
  patches.kernel.org/7.0.10-0860-eventpoll-fix-ep_remove-struct-eventpoll-stru.patch
  (bsc#1012628 CVE-2026-46242).
- Update
  patches.kernel.org/7.0.10-0888-netfilter-arp_tables-fix-IEEE1394-ARP-payload.patch
  (bsc#1012628 CVE-2026-45844 bsc#1266392).
- Update
  patches.kernel.org/7.0.10-0939-net-sched-taprio-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2026-45845 bsc#1266393).
- Update
  patches.kernel.org/7.0.10-0981-bareudp-fix-NULL-pointer-dereference-in-bareu.patch
  (bsc#1012628 CVE-2026-45846 bsc#1266394).
- Update
  patches.kernel.org/7.0.10-1139-net-rds-reset-op_nents-when-zerocopy-page-pin.patch
  (bsc#1012628 CVE-2026-43494 bsc#1265626).
- Update
  patches.kernel.org/7.0.10-1142-net-skbuff-preserve-shared-frag-marker-during.patch
  (bsc#1012628 CVE-2026-46300 bsc#1265209).
- Update
  patches.kernel.org/7.0.10-1143-net-skbuff-propagate-shared-frag-marker-throu.patch
  (bsc#1012628 CVE-2026-43503 bsc#1266229).
- Update
  patches.kernel.org/7.0.11-004-smb-client-reject-userspace-cifs.spnego-descri.patch
  (bsc#1012628 CVE-2026-46243).
- Update
  patches.kernel.org/7.0.4-001-ALSA-usb-audio-stop-parsing-UAC2-rates-at-MAX_N.patch
  (bsc#1012628 CVE-2026-46018 bsc#1266751).
- Update
  patches.kernel.org/7.0.4-008-LoongArch-Add-spectre-boundry-for-syscall-dispa.patch
  (bsc#1012628 CVE-2026-45993).
- Update
  patches.kernel.org/7.0.4-009-drm-nouveau-fix-u32-overflow-in-pushbuf-reloc-b.patch
  (bsc#1012628 CVE-2026-46006).
- Update
  patches.kernel.org/7.0.4-012-greybus-gb-beagleplay-fix-sleep-in-atomic-conte.patch
  (bsc#1012628 CVE-2026-46041).
- Update
  patches.kernel.org/7.0.4-013-misc-ibmasm-fix-OOB-MMIO-read-in-ibmasm_handle_.patch
  (bsc#1012628 CVE-2026-46022).
- Update
  patches.kernel.org/7.0.4-014-ibmasm-fix-OOB-reads-in-command_file_write-due-.patch
  (bsc#1012628 CVE-2026-45994).
- Update
  patches.kernel.org/7.0.4-015-ibmasm-fix-heap-over-read-in-ibmasm_send_i2o_me.patch
  (bsc#1012628 CVE-2026-46064).
- Update
  patches.kernel.org/7.0.4-022-fs-afs-revert-mmap_prepare-change.patch
  (bsc#1012628 CVE-2026-46100).
- Update
  patches.kernel.org/7.0.4-029-mm-fix-deferred-split-queue-races-during-migrat.patch
  (bsc#1012628 CVE-2026-46017 bsc#1267241).
- Update
  patches.kernel.org/7.0.4-030-ocfs2-split-transactions-in-dio-completion-to-a.patch
  (bsc#1012628 CVE-2026-46080).
- Update
  patches.kernel.org/7.0.4-031-Input-edt-ft5x06-fix-use-after-free-in-debugfs-.patch
  (bsc#1012628 CVE-2026-46097).
- Update
  patches.kernel.org/7.0.4-032-zram-do-not-forget-to-endio-for-partial-discard.patch
  (bsc#1012628 CVE-2026-46089).
- Update
  patches.kernel.org/7.0.4-033-wifi-rtw88-check-for-PCI-upstream-bridge-existe.patch
  (bsc#1012628 CVE-2026-46092).
- Update
  patches.kernel.org/7.0.4-034-wifi-mwifiex-fix-use-after-free-in-mwifiex_adap.patch
  (bsc#1012628 CVE-2026-46069).
- Update
  patches.kernel.org/7.0.4-038-vfio-cdx-Serialize-VFIO_DEVICE_SET_IRQS-with-a-.patch
  (bsc#1012628 CVE-2026-46036).
- Update
  patches.kernel.org/7.0.4-039-vfio-cdx-Fix-NULL-pointer-dereference-in-interr.patch
  (bsc#1012628 CVE-2026-46034 bsc#1266757).
- Update
  patches.kernel.org/7.0.4-041-thermal-core-Fix-thermal-zone-governor-cleanup-.patch
  (bsc#1012628 CVE-2026-46021 bsc#1267220).
- Update
  patches.kernel.org/7.0.4-042-spi-imx-fix-use-after-free-on-unbind.patch
  (bsc#1012628 CVE-2026-45996).
- Update
  patches.kernel.org/7.0.4-043-spi-ch341-fix-memory-leaks-on-probe-failures.patch
  (bsc#1012628 CVE-2026-46074).
    ... changelog too long, skipping 1593 lines ...
- commit fc624df

==== libavif ====
Version update (1.4.1 -> 1.4.2)

- update to 1.4.2:
  * Added since 1.4.1
  - Add --jobs flag to avifgainmaputil to use multiple worker
    threads when reading/writing AVIF files.
  * Changed since 1.4.1
  - Require C11 for compilation. Public headers will remain C99.
  - Add --jobs flag to avifgainmaputil and enable auto tiling.
  - Use AOM_TUNE_IQ for layered image inter-frame encoding.
  - Update aom.cmd/LocalAom.cmake: v3.14.1
  - Update LocalAvm.cmake: research-v15.0.0
  - Update libjpeg.cmd/LocalJpeg.cmake: 3.1.4.1
  - Update libxml2.cmd/LocalLibXml2.cmake: v2.15.3
  - Update libyuv.cmd/LocalLibyuv.cmake: 644251f25 (1924)
  - Update svt.cmd/svt.sh/LocalSvt.cmake: v4.1.0
  - Update zlibpng.cmd/LocalZlibpng.cmake: libpng 1.6.58
  - Fix memory leak of altICC if avifDecoderFindGainMapItem
    returns early.
  - Avoid MT loop restoration crash in libaom < 3.13.3
  - Fix decoding layered image with multiple scaled alpha layers
  - Fix NaN bypass of AVIF_CLAMP in gain map tone mapping (use
    fminf/fmaxf)
  - Fix null pointer dereference in avifImageCopy() when
    avifImageCreateEmpty() fails to allocate the destination
    gain map image.
  - avifenc: reject mismatched --depth for Y4M input
  - Use libaom AOMD_SET_FRAME_SIZE_LIMIT if available
  - Fix bug in transfer function 11 (used for gain map
    creation/tone mapping)

==== libbluray ====
Version update (1.4.0 -> 1.4.1)

- version update to 1.4.1
  * Fix linking on Windows with Freetype enabled
  * Improve compilation with MSVC
  * Cleaning and improvements in Meson build files
  * Fix build with Java 23 for BD-J
  * Add SSIF files support to bd_open_file_dec()
  * Add player setting for UO restriction level
  * Add all UOs to BD_EVENT_UO_MASK_CHANGED
  * Improve resilence against invalid input
  * Fix memory leak in UHD playlists
  * BD-J: Implement TVTimer, TVTimerSpec
  * BD-J: Improve Java 1.4 compatibility
  * BD-J: Fix MediaPresentedEvent event emission on start
  * BD-J: Fix filesystem hooking in Java 25
  * BD-J: Fix locators from org.bluray.ti.[PlayItemImpl,TitleComponentImpl]
  * BD-J: Multiple compability and performance improvements
- deleted patches
  * libbluray-java25.patch (upstreamed)

==== libinput ====
Version update (1.31.2 -> 1.31.3)

- Update to release 1.31.3
  * libinput-device-group now sanitizes the PHYS value which
    prevents local privilege escalation through udev property
    injection.
  * `libinput record`: the --autorestart interval handling was
    broken for intervals 5s and higher
  * `libinput recor`: added a convenience fix for running with
  - -autorestart.
  * Eraser buttons can now be mapped to any button (previously only
    BTN_STYLUS, BTN_STYULUS2 and BTN_STYLUS3 were permitted).

==== python-semanage ====

- Depend on libso before make pywrap is executed to avoid
  race conditions (bsc#1266385)
  - Add patch: 1266385-libsemanage-Require-LIBSO-before-SWIGSO-and-SWIGRUBY.patch
- Add CFLAGS to %make_install call for consistency with %make_build

==== qalculate ====
Version update (5.10.0 -> 5.11.0)

- Update to version 5.11
  * Add set functions (union, intersect, setdiff, setxor, isMember, isSubset) and operators (∪, ∩, ∖, ⊖, ∈, ⊆, etc.)
  * Add characters(), count(), digitSum(), and digitalRoot(), find(), popCount(), string(), and while() functions
  * Support negative row and column values in element(), row(), and column() functions
  * Support matrix[row][column] syntax
  * Support text objects in sort() function
  * Add third optional argument to interval() function to allow exclusion of exact endpoints
  * Ignore "to" and "where" (and equivalent symbols) inside quotation marks
  * Ignore dot in front of plus or minus (for consistent behavior in line with entrywise operators)
  * Show "Division by zero" warning for all divisions by zero
  * Make display of expressions with time units in time format more consistent
  * Fix support for vector in argument of many functions (erf, mod, exp, etc.)
  * Fix explicit conversion to mixed units for year variants
  * Fix first digit missing in return value of integerDigits() in some cases
  * Fix segfault when Calculator object is destroyed with uninitialized random state
  * Fix infinite loop when referencing subfunction in another subfunction
  * Fix segfault in replace() with variable specified using where expression, e.g. "replace(v, x, 1) where v = x"
  * Fix segfault when data set function name is followed immediately by a single dot
  * Fix v[i]=a syntax for vector element assignment
  * Do not bind escape key (fixes bad behavior with keys that generate escape sequences, e.g function keys) (CLI)
  * Fix use of x, y, z, without backslash, for arguments when using function command (CLI)
  * Fix parse status and calculate-as-you-type when "where" expression defines a new symbol (Gtk, Qt)
  * Convert degree Celsius to Fahrenheit and vice versa in Gnome search provider (Gtk)
  * Fix compilation on macOS (Gtk)
  * Minor bug fixes and feature enhancements

==== sssd ====
Subpackages: libsss_certmap0 libsss_idmap0 sssd-krb5-common sssd-ldap

- The logrotate fragment had a wrong systemd service name in it,
  which was rectified.

==== tpm2.0-tools ====

- Remove dependency to the abrmd broker service