Packages changed:
  7zip (26.01 -> 26.02)
  autoyast2 (5.0.8 -> 5.0.10)
  e2fsprogs
  google-noto-fonts (20241201 -> 20260701)
  ipxe (1.21.1+git20250827.61b4585e2 -> 2.0.0+git20260710.58ee55b3c)
  kf6-syntax-highlighting
  kirigami-addons6 (1.12.1 -> 1.13.0)
  libtool (2.5.4 -> 2.6.2)
  multipath-tools (0.15~1+222+suse.cdcde840 -> 0.14.3+212+suse.f5d32098)
  ntfs-3g_ntfsprogs
  openSUSE-release (20260720 -> 20260721)
  perl-Cpanel-JSON-XS (4.420.0 -> 4.430.0)
  python-click (8.4.1 -> 8.4.2)
  rsyslog
  sddm
  sddm-qt6
  sqlite3
  thunar (4.20.8 -> 4.20.9)
  unrar_wrapper
  xclock (1.2.0 -> 1.2.1)
  xmodmap (1.0.11 -> 1.0.12)
  yast2-installation (5.0.19 -> 5.0.21)
  yast2-packager (5.0.11 -> 5.0.13)

=== Details ===

==== 7zip ====
Version update (26.01 -> 26.02)

- Update to 26.02:
  * Some bugs and vulnerabilities were fixed.
  * CVE-2026-14266 / ZDI-26-444 : 7-Zip XZ Decompression Heap-based
    Buffer Overflow Remote Code Execution Vulnerability

==== autoyast2 ====
Version update (5.0.8 -> 5.0.10)
Subpackages: autoyast2-installation

- jsc#PED-14507
  - Removed remaining reference to update-desktop-files embedded
    deeper inside from spec file
  - 5.0.10
- jsc#PED-14507
  - Removed reference to update-desktop-files from spec file
  - 5.0.9

==== e2fsprogs ====
Subpackages: libcom_err2 libcom_err2-32bit libext2fs2

- Drop obsolete BuildRoot tag and no-op %defattr lines
- Package NOTICE as %license unconditionally
- Fix scope of the systemd guard around %preun

==== google-noto-fonts ====
Version update (20241201 -> 20260701)
Subpackages: google-noto-sans-arabic-fonts google-noto-sans-fonts google-noto-sans-symbols-fonts google-noto-sans-symbols2-fonts

- Drop stale file
- Update Source in the spec file to include the download URL
- Update to 20260701
  * Various updates to the font collection, Too many changes to list
  * New fonts :
  - Todhri Fonts (google-noto-serif-todhri-fonts)
  - Hentaigana Fonts (google-noto-serif-hentaigana-fonts)
  - Sunuwar Fonts (google-noto-sans-sunuwar-fonts)

==== ipxe ====
Version update (1.21.1+git20250827.61b4585e2 -> 2.0.0+git20260710.58ee55b3c)

- Packaging cleanups:
  - Drop unused fix-i586.patch and the no_aarch64_cc machinery
  - Version the qemu-ipxe Provides/Obsoletes
  - Add license files to the qemu subpackage
  - Single-source the QEMU NIC list in %build
  - Merge the config/general.h sed calls
  - Drop obsolete %defattr
  - Remove unused ipxe.efi directory creation
  - _service: use mode="manual" instead of the deprecated mode="disabled"
  - Add ipxe-rpmlintrc to filter the bogus no-binary error
- Disable serial. We have -nographic for that, and having both
  enabled causes the output to be mangled (bsc#1271154).
- Update to version 2.0.0+git20260710.58ee55b3c:
  * [image] Make text-based image data usable by string functions
  * [xferbuf] Provide an image-backed data transfer buffer
  * [libc] Add strchrnul()
  * [hermon] Check for failure from pci_ioremap()
  * [tls] Retain a reference in the key schedule to the bound identity
  * [tls] Reject incorrect server names before completing validation
  * [tls] Guard against resuming from an empty resumption master secret
  * [tls] Poison initial resumption master secret
  * [tls] Poison initial key derivation function master secret
  * [tls] Track and check key schedule state
  * [tls] Guard against a premature server Finished
  * [tls] Send closure alert only when we are initiating the closure
  * [tls] Handle key exchange within key schedule
  * [cloud] Use "param" command to provide Google metadata request header
  * [tls] Restructure to use a single key derivation function master secret
  * [tls] Treat session secret as "resumption master secret"
  * [virtio] Allow for long delays in processing transmit queue submissions
  * [virtio] Fix queue size calculations
  * [tls] Move handshake digest within the scope of the key schedule
  * [tls] Clarify TLS key schedule function names
  * [crypto] Define a structure for holding hybrid MD5+SHA1 HMAC keys
  * [crypto] Make maximum TLS version a configurable option
  * [crypto] Re-add missing digestInfo prefix for MD5+SHA1
  * [build] Use dynamic keyboard map by default in UEFI builds
  * [crypto] Allow for the construction of fixed-size HMAC keys
  * [s390x] Add time source based on the architectural Time-of-Day clock
  * [s390x] Add support for the PRNO TRNG as an entropy source
  * [s390x] Provide a mechanism for checking installed CPU facilities
  * [crypto] Remove redundant DHE algorithm
  * [tls] Use generic key exchange algorithm abstraction for DHE
  * [crypto] Allocate FFDHE temporary space on demand
  * [crypto] Allow construction of shared public key to return an error
  * [crypto] Correct maximum length of FFDHE prime modulus
  * [crypto] Generalise implementation of Merkle-Damgård hash algorithms
  * [aqc1xx] Free outstanding receive I/O buffers on close
  * [aqc1xx] Set netdev->dma for operation with an IOMMU
  * [http] Remove knowledge of MD5 digest context internal structure
  * [bnxt] Prevent out-of-bounds memory access
  * [tls] Centralise pseudorandom data generation
  * [crypto] Allow for input keying material to overlap output
  * [crypto] Use private data field for public-key algorithms
  * [crypto] Allow cipher_setiv() to return an error
  * [crypto] Use private data field for cipher algorithms
  * [crypto] Use private data field for digest algorithms
  * [crypto] Generalise notion of uncompressed elliptic curve points
  * [crypto] Use private data field for elliptic curve algorithms
  * [crypto] Use verbs in key exchange method names
  * [tls] Accept only explicitly supported FFDHE groups
  * [crypto] Add TLS named groups for FFDHE key exchange algorithms
  * [tls] Allow for the existence of anonymous named groups
  * [tls] Prefer X25519 as a key exchange mechanism
  * [crypto] Provide a mechanism to check FFDHE group parameters
  * [crypto] Use private data field for key exchange algorithms
  * [crypto] Add RFC 3526 FFDHE key exchange algorithms
  * [crypto] Use inline assembly for bigint_grow() and bigint_shrink()
  * [s390x] Use XOR-in-place to zero small fixed-length blocks
  * [tls] Rename "named curve" to "named group"
  * [virtio] Ignore capabilities that describe inaccessible PCI BARs
  * [settings] Allow system time to be modified via builtin/unixtime
  * [settings] Allow for writable built-in settings
  * [scsi] Use data-transfer buffers for data-in and data-out
  * [s390x] Add optimised TCP/IP checksumming
  * [ci] Add s390x self-tests
  * [s390x] Add support for the IBM s390x CPU architecture
  * [test] Fix RFC 1071 checksum calculation for big-endian targets
  * [linux] Fix console output on big-endian targets
  * [efi] Fix parsing of EFI signature lists on big-endian targets
  * [peerdist] Fix segment identifier constant on big-endian targets
  * [build] Fix building for big-endian targets
  * [crypto] Use generic implementations of slow-path big integer functions
  * [iscsi] Ensure SCSI sense data is present before parsing
  * [crypto] Add RFC 7919 FFDHE key exchange algorithms
  * [test] Allow for large values in key exchange self-tests
  * [test] Verify test vector lengths for key exchange self-tests
  * [crypto] Remove redundant ECDHE algorithm
  * [crypto] Remove elliptic curve abstraction for X25519
  * [tls] Use generic key exchange algorithm abstraction for ECDHE
  * [crypto] Provide Weierstrass curves as generic key exchange algorithms
  * [crypto] Provide X25519 as a generic key exchange algorithm
  * [crypto] Add a generic concept of a key exchange algorithm
  * [nfs] Fix off-by-one heap overflow in nfs_uri_symlink()
  * [linux] Disable implicit linking against libatomic
  * [tg3] Use updated DMA APIs
  * [loong64] Port the RISC-V optimised TCP/IP checksum implementation
  * [riscv] Simplify TCP/IP checksum calculation
  * [ci] Update action versions to silence GitHub warnings
    ... changelog too long, skipping 313 lines ...
  * [libc] Add wcsnlen()

==== kf6-syntax-highlighting ====
Subpackages: kf6-syntax-highlighting-imports libKF6SyntaxHighlighting6 libKF6SyntaxHighlighting6-lang

- Add upstream fix:
  * 0001-Fix-listening-for-language-changes-just-react-on-the.patch

==== kirigami-addons6 ====
Version update (1.12.1 -> 1.13.0)
Subpackages: kirigami-addons6-lang libKirigamiAddonsComponents6 libKirigamiAddonsStatefulApp6 libKirigamiApp6

- Update to 1.13.0
  * Fix reference error in about page program icon
  * Avoid unneeded KCoreAddons version include
  * FormComboBoxDelegate: Forward more ComboBox APIs
  * Add a button to reset a time picker back to the current time
  * Enable KCrash integration on Android
  * AboutPage: Sync with Kirigami changes to program icon
  * Replace image in qml-check-i18n job
  * FormDelegateBackground: Use Kirigami.Units.cornerRadius
  * Do not explicitly link against Qt6::QuickEffect in onboarding module
  * Add explicit linkage against Qt6::QuickEffects for apps using the onboarding module
  * Add org.kde.kirigamiaddons.onboarding module documentation
  * Fix org.kde.kirigamiaddons.onboarding issues on Android/iOS
  * Make KCrash and Linux sandbox integration optional on iOS
  * FormSpinBoxDelegate: Alias more properties and signals
  * Add new org.kde.kirigamiaddons.onboarding module
  * KirigamiAppDefaults: Clean up ifdefs
  * Require Qt 6.9 for unconditional use of the SafeArea API
  * Form*FieldDelegate: Fix text property not yet updated on signal trigger
  * Form*FieldDelegate: Add more aliases to input field
  * FormCard: Fix implicitWidth
  * Add missing QML module dependencies to Qt.labs.qmlmodels

==== libtool ====
Version update (2.5.4 -> 2.6.2)

- update to version 2.6.2
  - Add a new tool, libtool-next-version, to guide users through updating
    library versions.
  - Add tagging for Objective-C and Objective-C++, OBJC and OBJCXX.
  - Increase 5 digit limit on revision value for libraries to 19 digits,
    which is referencing Unix epoch time in nanoseconds.
  - Add configuration options to choose whether to use '-nostdlib' to let
    the compiler frontend decide what standard libraries to link when
    building C++ shared libraries and modules, --enable-cxx-stdlib and
  - -disable-cxx-stdlib.
  - Allow statically linking GCC and Clang compiler support libraries
    into shared libraries.
  - Add linking clang_rt static archives compiler internal libraries by
    their absolute path.
  - Pass '--target' architecture flag for Clang.
  - Pass 'resource-dir=*' flag for Clang.
  - Recognise explicit shared library arguments when linking dependency
    libraries to a shared library, like exists when linking a program.

==== multipath-tools ====
Version update (0.15~1+222+suse.cdcde840 -> 0.14.3+212+suse.f5d32098)
Subpackages: kpartx libmpath0


==== ntfs-3g_ntfsprogs ====
Subpackages: libntfs-3g89 ntfs-3g ntfsprogs

- Adding patch bundle from upstream (download.tuxera.com/opensource)
  re:cve_2026-04 for v2022.10.3
  * bsc#1271104 -> 1_ntfs-3g_2022.10.3-CVE-2026-42618.patch
  * bsc#1271102 -> 2_ntfs-3g_2022.10.3-CVE-2026-42616.patch
  * bsc#1271103 -> 3_ntfs-3g_2022.10.3-CVE-2026-42617.patch
  * bsc#1271105 -> 4_ntfs-3g_2022.10.3-CVE-2026-46569.patch
  * bsc#1271107 -> 5_ntfs-3g_2022.10.3-CVE-2026-46571.patch
  * bsc#1271106 -> 6_ntfs-3g_2022.10.3-CVE-2026-46570.patch
  * bsc#1271108 -> 7_ntfs-3g_2022.10.3-CVE-2026-46572.patch
  - This file is identical to 3_...42617.patch
  * bsc#1271109 -> 8_ntfs-3g_2022.10.3-CVE-2026-56135.patch
  * bsc#1271110 -> 9_ntfs-3g_2022.10.3-CVE-2026-56136.patch
  - This file is identical to 3_...42617.patch

==== openSUSE-release ====
Version update (20260720 -> 20260721)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== perl-Cpanel-JSON-XS ====
Version update (4.420.0 -> 4.430.0)

- updated to 4.430.0 (4.43)
  see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes
  4.43 2026-07-18 (rurban)
  - Fix canonical sort: compare by UTF-16 code units per RFC 8785 (GH #248, leont)
  - Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts
    UTF-8 decoding instead of checking SvUTF8 flag, since older Perls
    may store valid UTF-8 hash keys without the flag set.
  - Fix quadmath encode dropping ".0" for large floats (GH #246, reported by Tux).
    The .0 guard condition that suppressed appending for NV values > UV_MAX was
    incorrect on high-precision FP (quadmath, 128-bit long double on arm64) where
    %g uses fixed-point notation for values like 1.01e30. Guarded with #if NV_DIG < 31
    to skip only on double/80-bit-ld where %g naturally uses %e for large values.

==== python-click ====
Version update (8.4.1 -> 8.4.2)

- Update to 8.4.2
  * Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and
    tabs in option help text are now escaped, keeping the original
    completion format while still supporting multi-line help.
  * Deprecated commands and options with empty or missing help text no
    longer render a stray leading space before the (DEPRECATED) label.
  * A Group with invoke_without_command=True marks its subcommand as
    optional in the usage help, showing [COMMAND] instead of COMMAND.
  * echo_via_pager flushes after each write, so passing a generator
    streams output to the pager incrementally instead of staying hidden
    until the pipe buffer fills.
  * Fix CLI usage symopsis for optional arguments producing double
    square brackets whose type already brackets their metavar.
  * version_option() resolves a package_name that does not match an
    installed distribution as an import (top-level module) name via
    importlib.metadata.packages_distributions().

==== rsyslog ====

- added new rsyslog (imdtls/omdtls) DTLS modules (jsc#PED-16623)

==== sddm ====
Subpackages: sddm-branding-openSUSE sddm-greeter-qt5

- Introduce patch to make the default session configurable
  beyond xsessions/default.desktop and migrate to it:
  * 0001-Introduce-DefaultSession-option-in-sddm.conf.patch
  * 0002-Migrate-from-default.desktop-to-General-DefaultSessi.patch
- Drop then unnecessary hunk from
  0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
- Rebase 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch

==== sddm-qt6 ====
Subpackages: sddm-greeter-qt6

- Introduce patch to make the default session configurable
  beyond xsessions/default.desktop and migrate to it:
  * 0001-Introduce-DefaultSession-option-in-sddm.conf.patch
  * 0002-Migrate-from-default.desktop-to-General-DefaultSessi.patch
- Drop then unnecessary hunk from
  0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
- Rebase 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch

==== sqlite3 ====
Subpackages: libsqlite3-0 libsqlite3-0-x86-64-v3 sqlite3-tcl

- Add sqlite3-tools and sqlite3-tools-tcl subpackages
  * Most other distributions have included a separate -tools
    package with these for a while, but we seemingly haven't been
    packaging them at all in openSUSE.
  * New tools include the ones packaged by debian trixie (showdb,
    showjournal, showstat4, showwal, sqldiff, and sqlite3_analyzer)
    along with sqlite3_rsync, which is recommended in sqlite3 docs
  * All tools are in -tools subpackage except for sqlite3_analyzer
    which is in -tools-tcl

==== thunar ====
Version update (4.20.8 -> 4.20.9)
Subpackages: libthunarx-3-0 thunar-lang

- Update to 4.20.9
  * Prevent use-after-free in list-view (#1861)
  * Fix use-after-free in tree-view-model (#1860)
  * Fix -Wdiscarded-qualifiers compiler warnings (#1859)
  * Remove G_GNUC_CONST qualifiers
  * Check/Update view-type on reload (#1799)
  * Prevent Criticals in some use-cases (#1799)
  * Prevent crash on reload when unmounted (#1799)
  * Fix crash when open unknown gvfs location (#1834)
  * Prevent use-after-free on re-login (#1831)
  * Keep a global ref. to job operation history (#1823)
  * Disconnect from 'action_mgr' on finalize (#1816)
  * Translation Updates

==== unrar_wrapper ====

- Add missing python3-base BR (bsc#1270341).

==== xclock ====
Version update (1.2.0 -> 1.2.1)

- Update to version 1.2.1
  * This release fixes the build on systems like NetBSD that support
    setlocale() but not uselocale(), and adds example app-defaults
    files for the new shapes configurations introduced in the 1.2.0 release.

==== xmodmap ====
Version update (1.0.11 -> 1.0.12)

- Update to version 1.0.12:
  * Accept --help and --version as aliases to -help and -version.
  * Avoid -Wuse-after-free warning from GCC 15 in handle.c.
  * Handle possible NULL return from copy_to_scratch() in parse_keysym.
  * Improve man page formatting and text.
  * Assume target platforms have strncasecmp now (Unix98/SUSv2).
  * Add support for building with Meson.
- Switch to meson build system

==== yast2-installation ====
Version update (5.0.19 -> 5.0.21)

- jsc#PED-14507
  - Removed remaining reference to update-desktop-files embedded
    deeper inside from spec file
  - 5.0.21
- jsc#PED-14507
  - Removed reference to update-desktop-files from spec file
  - 5.0.20

==== yast2-packager ====
Version update (5.0.11 -> 5.0.13)

- Cleaned the changelog entries formatting
- jsc#PED-14507
  - Removed remaining reference to update-desktop-files embedded
    deeper inside from spec file
  - 5.0.13
- jsc#PED-14507
  - Removed reference to update-desktop-files from spec file
  - 5.0.12