Packages changed:
  GraphicsMagick (1.3.40 -> 1.3.42)
  Mesa (23.1.8 -> 23.2.0)
  Mesa-drivers (23.1.8 -> 23.2.0)
  SDL2 (2.28.3 -> 2.28.4)
  container-selinux (2.215.0 -> 2.222.0)
  crypto-policies (20230614.5f3458e -> 20230920.570ea89)
  dLeyna (0.8.2 -> 0.8.3)
  glib2
  gnome-remote-desktop (45.rc -> 45.0)
  grub2
  gtk4 (4.12.2 -> 4.12.3)
  kbd (2.6.2 -> 2.6.3)
  kdepim-runtime
  libblockdev (3.0.2 -> 3.0.3)
  libdecor (0.1.1 -> 0.2.0)
  libsigc++2 (2.12.0 -> 2.12.1)
  libsigc++3 (3.2.0 -> 3.6.0)
  libwebp
  mozjs115 (115.2.1 -> 115.3.1)
  python-argparse-manpage (4.3 -> 4.5)
  qalculate (4.8.0 -> 4.8.1)
  qpdf (11.6.0 -> 11.6.1)
  qt6-base (6.5.2 -> 6.5.3)
  qt6-declarative (6.5.2 -> 6.5.3)
  qt6-imageformats (6.5.2 -> 6.5.3)
  qt6-translations (6.5.2 -> 6.5.3)
  qt6-wayland (6.5.2 -> 6.5.3)
  screen (4.9.0 -> 4.9.1)
  shadow
  systemd (254.3 -> 254.5)
  tracker-miners (3.6.0 -> 3.6.1)
  webkit2gtk3 (2.42.0 -> 2.42.1)
  webkit2gtk3-soup2 (2.42.0 -> 2.42.1)
  xdg-dbus-proxy (0.1.4 -> 0.1.5)
  yast2-trans (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a)

=== Details ===

==== GraphicsMagick ====
Version update (1.3.40 -> 1.3.42)
Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config

- version update to 1.3.42
  Bug fixes:
  * TIFF: Default the alpha channel to type EXTRASAMPLE_UNASSALPHA(2).
  * BMP: Many fixes for reading esoteric BMP sub-formats.
  * TranslateTextEx(): Revert change so now a NULL pointer is returned
    when given an empty string.  Some algorithms (e.g. montage) were
    depending on this!.
  * PAM: Fix reading comments.
  * PNG: Added Add missing module aliases "PNG00", "PNG48", "PNG64", so
    it is again possible to request these subformats directly.
  * TIFF: For common formats with the required number of channels, but
    one is an 'unspecified' channel, promote unspecified alpha to
    unassociated alpha so that the alpha channel is not ignored.
  * "Magick" command line emulation: Eliminate duplicate utility name
    output in error messages
  New Features:
  * BMP: Added the ability to read and write BMP using JPEG compression.
  Use '-define bmp:allow-jpeg' to allow use of JPEG compression.
  * BMP: Added support for BI_ALPHABITFIELDS compression
  * BMP: Added support for reading BMP with PNG compression.
- modified patches
  % GraphicsMagick-disable-insecure-coders.patch (refreshed)
- deleted patches
  - strlcpy-wrong-sizing.patch (upstreamed)

==== Mesa ====
Version update (23.1.8 -> 23.2.0)
Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libOSMesa8 libgbm1

- Update to Mesa 23.2.0-rc4
  - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.html
- supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch
- disabled u_fix-build-on-ppc64le.patch (no longer needed?)
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch

==== Mesa-drivers ====
Version update (23.1.8 -> 23.2.0)
Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2

- Update to Mesa 23.2.0-rc4
  - -> https://lists.freedesktop.org/archives/mesa-announce/2023-September/000731.html
- supersedes U_llvmpipe-only-include-old-Transform-includes-when-ne.patch
- disabled u_fix-build-on-ppc64le.patch (no longer needed?)
- adjusted n_drirc-disable-rgb10-for-chromium-on-amd.patch

==== SDL2 ====
Version update (2.28.3 -> 2.28.4)

- Update to release 2.28.4
  * Enable clipping for zero sized rectangles in the SDL renderer
  * Notify X11 clipboard managers when the clipboard changes
  * Fixed sensor timestamps for third-party PS5 controllers
  * Added detection for Logitech and Simagic racing wheels

==== container-selinux ====
Version update (2.215.0 -> 2.222.0)

- Update to version 2.222:
  * Allow containers to read/write inherited dri devices
- Update to version 2.221:
  * Allow containers to shutdown sockets inherited from container
    runtimes
  * Allow spc_t to use execmod libraries on container file systems
  * Add boolean to allow containers to read all cert files
  * More MLS Policy allow rules
  * Allow container runtimes using pasta bind icmp_socket to port_t
  * Fix spc_t transitions from container_runtime_domain

==== crypto-policies ====
Version update (20230614.5f3458e -> 20230920.570ea89)
Subpackages: crypto-policies-scripts

- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]
- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch
- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]

==== dLeyna ====
Version update (0.8.2 -> 0.8.3)

- Update to version 0.8.3:
  + Build: Fix compatibility with Meson 1.2
  + Renderer: Fix locale initialization
  + Server:
  - Fix locate initialization
  - Fix uninitialized variable warning
  - Properly handle optional actions
  - Fix browse not working properly
- Drop 61d24fdc.patch: Fixed upstream.
- Change compression of tarball in service and spec to zst from xz.

==== glib2 ====
Subpackages: glib2-lang glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0

- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch

==== gnome-remote-desktop ====
Version update (45.rc -> 45.0)
Subpackages: gnome-remote-desktop-lang

- Update to version 45.0:
  + vnc: Also include DRM format modifiers when resizing PipeWire
    stream.
  + rdp: Also include DRM format modifiers when resizing PipeWire
    stream.
  + Updated translations.
- Change compression of tarball in service and spec to zst from xz.
- Drop dbus-1-daemon Requires, only needed for tests, and we are
  not building them currently.

==== grub2 ====
Subpackages: grub2-i386-pc grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi grub2-x86_64-xen

- Only build with fde-tpm-helper-rpm-macros for the architectures
  supporting the newer UEFI and TPM 2.0.
  * Also correct the location of %fde_tpm_update_requires
- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch
- Add the new BuildRequires for EFI builds for the better FDE
  support: fde-tpm-helper-rpm-macros
  + Also add the the macros to %post and %posttrans
- Correct the type of allocated EFI pages for ARM64 kernel (bsc#1215151)
  * arm64-Use-proper-memory-type-for-kernel-allocation.patch

==== gtk4 ====
Version update (4.12.2 -> 4.12.3)
Subpackages: gtk4-lang gtk4-schema gtk4-tools libgtk-4-1 typelib-1_0-Gtk-4_0

- Update to version 4.12.3:
  + GtkWindow: Don't assume titlebars are GtkHeaderBar
  + GtkTreeView: Fix a crash in gtk_tree_view_is_blank_at_pos
  + printing: Fix some issues with the portal implementation
  + GSK:
  - Some optimizations in the GL renderer
  - Fix memory leaks in the Broadway renderer
  + demos: Fix a crash in gtk4-demo
  + Updated translations.

==== kbd ====
Version update (2.6.2 -> 2.6.3)
Subpackages: kbd-legacy

- Update to version 2.6.3:
  - libkfont:
  * Don't look for fonts in the current directory.
  - showkey:
  * Add parameter to allow to change timeout.
  - po:
  * Update po files.

==== kdepim-runtime ====
Subpackages: kdepim-runtime-lang

- Add libetebase-devel to BuildRequires to enable the etesync resource for
  factory builds

==== libblockdev ====
Version update (3.0.2 -> 3.0.3)
Subpackages: libbd_btrfs3 libbd_crypto3 libbd_fs3 libbd_loop3 libbd_lvm3 libbd_mdraid3 libbd_nvme3 libbd_part3 libbd_swap3 libbd_utils3 libblockdev3

- Update to version 3.0.3:
  * Always use "--fs ignore" with lvresize
  * nvme:
  - Use interim buffer for nvme_get_log_sanitize()
  - Generate HostID when missing
  * tests:
  - Specificy required versions when importing GLib and BlockDev
    introspection
  - Minor NVMe HostNQN fixes
  - Replace deprecated unittest assert calls
  * fs:
  - Fix leaking directories with temporary mounts
  - Fix memory leak
  * crypto: Correctly convert passphrases from Python to C

==== libdecor ====
Version update (0.1.1 -> 0.2.0)
Subpackages: libdecor-0-0

- Update to version 0.2.0:
  * Various bug and leak fixes.
  * New gtk plugin.
- Update URL and source to new home.
- Add pkgconfig(gtk-3.0) BuildRequires, new dependency.
- Use ldconfig_scriptlets macro for post(un) handling.

==== libsigc++2 ====
Version update (2.12.0 -> 2.12.1)

- Update to version 2.12.1:
  + Documentation:
  - slot, signal: Describe the slot<void(int)> syntax more
  - connection: Improve the class documentation
  - Improve Visual Studio build documentation
  - Remove AUTHORS and add general information to README.md
  + Build:
  - Meson:
    . Don't copy files with configure_file()
    . Fix the evaluation of is_git_build on Windows
  - Visual Studio: Support static builds
- Use ldconfig_scriptlets macro for post(un) handling.
- Update URL to new home.

==== libsigc++3 ====
Version update (3.2.0 -> 3.6.0)

- Update to version 3.6.0:
  + sigc++config.h.*: Update and clean up a bit for Visual Studio
  + scoped_connection: New wrapper to auto-disconnect a slot
  + signal: Add connect_first()
  + Documentation:
  - connection: Improve the class documentation
  - Improve Visual Studio build documentation
  - Remove AUTHORS and add general information to README.md
  - manual: Add paragraph about new scoped_connection
  + Tests: Add test_scoped_connection
  + Build:
  - Meson:
    . Don't copy files with configure_file()
    . Fix the evaluation of is_git_build on Windows
    . Don't require the 'dot' command to build the documentation
  - CMake: Prevent multiple target declaration for uninstall
  - Visual Studio: Support static builds
- Use autosetup macro.
- Update to version 3.4.0:
  + Add track_object(), deprecate track_obj()
  + Add trackable_signal_with_accumulator and trackable_signal
  + Examples, tests:
  - examples/member_method: Make on_print() non-virtual
  - test_accumulated.cc: clang++ requires another 'template'
  - test_limit_reference.cc: Don't use auto where a slot is
    required
  + Documentation: signal::make_slot(): Note that signal does not
    derive from trackable
  + Build:
  - Meson, MSVC: Compensate for the lack of
    msvc_recommended_pragmas.h
  - Fix build with -Dbuild-deprecated-api=false
  - Meson:
    . Avoid configuration warnings
    . Detect if we build from a git subtree
    . Simplify lookup of python command
    . Add build_tests option
- Use ldconfig_scriptlets macro for post(un) handling.
- Update URL to new home.

==== libwebp ====
Subpackages: libsharpyuv0 libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3

- Add 0001-Fix-invalid-incremental-decoding-check.patch
  A fuzzing finding fixed in the SLE/Leap updates

==== mozjs115 ====
Version update (115.2.1 -> 115.3.1)

- Update to version 115.3.1:
  + Security fix: CVE-2023-5217: Heap buffer overflow in libvpx.
- Changes from version 115.3.0:
  + Various security fixes and other quality improvements.
  + CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1
  + CVE-2023-5169: Out-of-bounds write in PathOps
  + CVE-2023-5171: Use-after-free in Ion Compiler
  + CVE-2023-5174: Double-free in process spawning on Windows
  + CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox
    ESR 115.3, and Thunderbird 115.3

==== python-argparse-manpage ====
Version update (4.3 -> 4.5)

- update to 4.5:
  * We newly provide build_manpages.build_py and build_manpages.install
    command classes that are re-usable from pyproject.toml.
    No need to provide setup.py because of argparse-manpage.
  * The prog= specifier (in setup.py/setup.cfg/pyproject.toml) is
    now better handled so it doesn't conflict with
    ArgumentParser(prog=..).

==== qalculate ====
Version update (4.8.0 -> 4.8.1)
Subpackages: libqalculate22 qalculate-data

- version update to 4.8.1
  * Fix besselj() and bessely()
  * Fix display of matrices and vectors with complex number form other than
    rectangular (default)
  * Fix conflict between decibel units (e.g. "0dB") and duodecimal 0d… syntax
    (now requires at least two digits)
  * Fixes for title options in plot() function
  * Add additional buttons and button menus to general keypad (Qt)
  * Add option to show all functions, units, and variables in tool button
    menus (Qt)
  * Add recently used objects to functions, units, and variables menus (Qt)
  * Add option to bypass dialog for functions in menu (Qt)
  * Add option, in context menu, to display text for tool buttons (Qt)
  * Open functions, units, and variables tool button menus using long-press
    or right-click (in addition to arrow button), and add keyboard shortcuts (Qt)
  * Use keypad tool button menu as context menu and show keypad type in
    title bar of keypad (Qt)
  * Auto-update number bases above programming keypad when entering simple
    integers, even if calculate-as-you-type is deactivated (GTK)

==== qpdf ====
Version update (11.6.0 -> 11.6.1)

- version update to 11.6.1
  * Bug fixes:
  - Fix a logic error introduced in 11.6.0 in the fix to copyForeignObject.
    The bug could result in some pages not being copied.

==== qt6-base ====
Version update (6.5.2 -> 6.5.3)
Subpackages: libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Sql6 libQt6Test6 libQt6Widgets6 qt6-network-tls qt6-platformtheme-gtk3

- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released
- Drop patch, merged upstream:
  * CVE-2023-38197-qtbase-6.5.diff
- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.

==== qt6-declarative ====
Version update (6.5.2 -> 6.5.3)
Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 qt6-declarative-imports

- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released

==== qt6-imageformats ====
Version update (6.5.2 -> 6.5.3)

- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released

==== qt6-translations ====
Version update (6.5.2 -> 6.5.3)

- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released

==== qt6-wayland ====
Version update (6.5.2 -> 6.5.3)
Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6

- Update to 6.5.3
  * https://www.qt.io/blog/qt-6.5.3-released

==== screen ====
Version update (4.9.0 -> 4.9.1)

- update to 4.9.1 (bsc#1210272, CVE-2023-24626):
  * Support stop/parity bits on serial port
  * Add needed system headers in checks and return values
    for implicit function declarations
  * Avoid zombies after shell exit
  * Missed signal sending permission check on failed
    query messages (CVE-2023-24626)
  * manpage fixes
  * source code fixes during cleanup
  * UTF-8 encoding can emit invalid UTF-8 sequences
  * for out of range unicode values

==== shadow ====
Subpackages: libsubid4 login_defs

- Add shadow-4.14.0-selinux-labels.patch:
  Set proper SELinux labels for new homedirs.
  See gh/shadow-maint/shadow#812.

==== systemd ====
Version update (254.3 -> 254.5)
Subpackages: libsystemd0 libsystemd0-32bit libudev1 systemd-32bit systemd-container systemd-coredump systemd-lang udev

- Import commit 9674bb256205e6c643feadbcccfd1ee8feeee684 (merge of v254.5)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/6ed5b11298005e07509832881a0c5ff1a80bf225...9674bb256205e6c643feadbcccfd1ee8feeee684
- Make sure to call %sysusers_create only when transfiletrigger is disabled.
- systemd.spec: switch to %ldconfig_scriptlets
- systemd.spec: add `%tmpfiles_create systemd-resolve`
  It's only needed by SLE distros since systemd packages rely on
  transtriggerfiles in Factory.
- Import commit 6ed5b11298005e07509832881a0c5ff1a80bf225 (merge of v254.4)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b6b4e5a8a82d1f13f265a4ef170f2d13be82789a...6ed5b11298005e07509832881a0c5ff1a80bf225

==== tracker-miners ====
Version update (3.6.0 -> 3.6.1)
Subpackages: tracker-miner-files tracker-miners-lang

- Update to version 3.6.1:
  + Avoid the special thread in tracker-extract-3, and extend the
    seccomp jail to the full process.
  + Updated translations.
- Add a tracker_basever define, and set it to 3.6. We have a hard
  Requires on what tracker version is needed and it is currently
  set at the same or newer version, change this to tracker_basever
  (tracker-miners have never been at a higher patch version
  before).

==== webkit2gtk3 ====
Version update (2.42.0 -> 2.42.1)
Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles

- Update to version 2.42.1:
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)

==== webkit2gtk3-soup2 ====
Version update (2.42.0 -> 2.42.1)
Subpackages: WebKitGTK-4.0-lang libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 webkit2gtk-4_0-injected-bundles

- Update to version 2.42.1:
  + Fix enable-html5-database setting to properly enable/disable
    IndexedDB API.
  + Fix the build with GBM disabled.
  + Fix several crashes and rendering issues.
- switch to pkgconfig(icu-i18n) instead of libicu-devel, to allow
  switching to a different libicu*-devel (jsc#PED-6193)

==== xdg-dbus-proxy ====
Version update (0.1.4 -> 0.1.5)

- Update to version 0.1.5:
  + Fix handling of object paths > 255 bytes
  + Print better errors when message parsing fails
  + Optionally install tests for "as-installed" testing

==== yast2-trans ====
Version update (84.87.20230922.91d997adab -> 84.87.20230930.5f9e01162a)
Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sr yast2-trans-sv yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu

- Update to version 84.87.20230930.5f9e01162a:
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Italian)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Spanish)
  * Translated using Weblate (Spanish)
  * New POT for text domain 'storage'.