Packages changed:
  MicroOS-release (20260519 -> 20260520)
  cockpit (360 -> 361)
  kernel-firmware-amdgpu (20260505 -> 20260514)
  kernel-firmware-i915 (20260416 -> 20260514)
  kernel-firmware-platform (20260505 -> 20260514)
  kernel-firmware-qcom (20260505 -> 20260514)
  kernel-source (7.0.7 -> 7.0.9)
  libXi (1.8.2 -> 1.8.3)
  libopenmpt (0.8.6 -> 0.8.7)
  libusb-1_0 (1.0.29 -> 1.0.30)
  libzypp (17.38.8 -> 17.38.9)
  ncurses (6.6.20260509 -> 6.6.20260516)
  patterns-containers
  python-alembic
  python-decorator (5.2.1 -> 5.3.0)
  python-idna (3.13 -> 3.15)
  sdbus-cpp (2.1.0 -> 2.3.1)

=== Details ===

==== MicroOS-release ====
Version update (20260519 -> 20260520)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== cockpit ====
Version update (360 -> 361)
Subpackages: cockpit-bridge cockpit-networkmanager cockpit-packagekit cockpit-system cockpit-ws cockpit-ws-selinux

- Add CVE-2026-4802.patch to backport upstreams fix for bsc#1265040/CVE-2026-4802
- Update to 361
  * 361
  - Remove all "Mount" actions in Anaconda mode
  - Dependency updates
- Add 0011-Warn-root-login-disabled.patch jsc#PED-15706/jsc#CPT-183

==== kernel-firmware-amdgpu ====
Version update (20260505 -> 20260514)

- Update to version 20260514 (git commit 5b2bc2e7d14c):
  * amdgpu: rembrandt DMCUB v4.0.74.0
  * amdgpu: update SMU 14.0.3 kicker firmware
  * amdgpu: update navy flounder firmware
  * amdgpu: update SDMA 6.1.3 firmware
  * amdgpu: update PSP 14.0.5 firmware
  * amdgpu: update GC 11.5.3 firmware
  * amdgpu: update yellow carp firmware
  * amdgpu: update VCN 5.0.0 firmware
  * amdgpu: update PSP 14.0.3 firmware
  * amdgpu: update GC 12.0.1 firmware
  * amdgpu: update VPE 6.1.3 firmware
  * amdgpu: update SDMA 6.1.2 firmware
  * amdgpu: update PSP 14.0.4 firmware
  * amdgpu: update GC 11.5.2 firmware
  * amdgpu: update PSP 14.0.2 firmware
  * amdgpu: update GC 12.0.0 firmware
  * amdgpu: update sienna cichlid firmware
  * amdgpu: update VCN 3.1.2 firmware
  * amdgpu: update PSP 13.0.5 firmware
  * amdgpu: update GC 10.3.6 firmware
  * amdgpu: update VCN 4.0.4 firmware
  * amdgpu: update SDMA 6.0.2 firmware
  * amdgpu: update PSP 13.0.7 firmware
  * amdgpu: update GC 11.0.2 firmware
  * amdgpu: update navi14 firmware
  * amdgpu: update SDMA 6.0.3 firmware
  * amdgpu: update PSP 13.0.10 firmware
  * amdgpu: update GC 11.0.3 firmware
  * amdgpu: update navi12 firmware
  * amdgpu: update vangogh firmware
  * amdgpu: update navi10 firmware
  * amdgpu: update green sardine firmware
  * amdgpu: update PSP 13.0.0 kicker firmware
  * amdgpu: update VCN 4.0.0 firmware
  * amdgpu: update SDMA 6.0.0 firmware
  * amdgpu: update PSP 13.0.0 firmware
  * amdgpu: update GC 11.0.0 firmware
  * amdgpu: update SDMA 4.4.4 firmware
  * amdgpu: update VCN 5.0.1 firmware
  * amdgpu: update PSP 13.0.12 firmware
  * amdgpu: update GC 9.5.0 firmware
  * amdgpu: update SDMA 4.4.5 firmware
  * amdgpu: update PSP 13.0.14 firmware
  * amdgpu: update VPE 6.1.1 firmware
  * amdgpu: update VCN 4.0.6 firmware
  * amdgpu: update SDMA 6.1.1 firmware
  * amdgpu: update PSP 14.0.1 firmware
  * amdgpu: update GC 11.5.1 firmware
  * amdgpu: update PSP 13.0.11 firmware
  * amdgpu: update GC 11.0.4 firmware
  * amdgpu: update beige goby firmware
  * amdgpu: update VCN 4.0.3 firmware
  * amdgpu: update SDMA 4.4.2 firmware
  * amdgpu: update PSP 13.0.6 firmware
  * amdgpu: update GC 9.4.3 firmware
  * amdgpu: update VPE 6.1.0 firmware
  * amdgpu: update VCN 4.0.5 firmware
  * amdgpu: update SDMA 6.1.0 firmware
  * amdgpu: update PSP 14.0.0 firmware
  * amdgpu: update GC 11.5.0 firmware
  * amdgpu: update VCN 4.0.2 firmware
  * amdgpu: update SDMA 6.0.1 firmware
  * amdgpu: update PSP 13.0.4 firmware
  * amdgpu: update GC 11.0.1 firmware
  * amdgpu: update dimgrey cavefish firmware
  * amdgpu: update renoir firmware
  * amdgpu: update aldebaran firmware

==== kernel-firmware-i915 ====
Version update (20260416 -> 20260514)

- Update to version 20260514 (git commit 5b2bc2e7d14c):
  * xe: Update GUC to v70.65.0 for LNL, BMG, PTL

==== kernel-firmware-platform ====
Version update (20260505 -> 20260514)

- Update to version 20260514 (git commit 5b2bc2e7d14c):
  * lt*_fw.bin: move to Lontium subdir
  * linux-firmware: Add firmware for Lontium LT9611C

==== kernel-firmware-qcom ====
Version update (20260505 -> 20260514)

- Update to version 20260514 (git commit 5b2bc2e7d14c):
  * qcom: update ADSP firmware for x1e80100 platform
  * qcom: Add cdsp1r.jsn for sa8775p platform

==== kernel-source ====
Version update (7.0.7 -> 7.0.9)

- drm: Replace old pointer to new idr (git-fixes).
- commit 9b5964b
- Linux 7.0.9 (bsc#1012628).
- HID: playstation: Clamp num_touch_reports (bsc#1012628).
- HID: appletb-kbd: fix UAF in inactivity-timer cleanup path
  (bsc#1012628).
- HID: appletb-kbd: run inactivity autodim from workqueues
  (bsc#1012628).
- HID: pidff: Fix integer overflow in pidff_rescale (bsc#1012628).
- media: uvcvideo: Enable VB2_DMABUF for metadata stream
  (bsc#1012628).
- drm/msm/hdmi: Fix wrong CTRL1 register used in writing info
  frames (bsc#1012628).
- media: rzv2h-ivc: Avoid double job scheduling (bsc#1012628).
- media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0
  (bsc#1012628).
- media: rzv2h-ivc: Write AXIRX_PIXFMT once (bsc#1012628).
- media: rzv2h-ivc: Fix FM_STOP register write (bsc#1012628).
- media: rzv2h-ivc: Fix concurrent buffer list access
  (bsc#1012628).
- media: mali-c55: Initialize the ISP in enable_streams()
  (bsc#1012628).
- media: mali-c55: Fix Iridix bypass macros (bsc#1012628).
- media: renesas: vsp1: Fix NULL pointer deref on module unload
  (bsc#1012628).
- media: renesas: vin: Fix RAW8 (again) (bsc#1012628).
- media: i2c: ov8856: free control handler on error in
  ov8856_init_controls() (bsc#1012628).
- media: dt-bindings: rockchip,vdec: Add alternative reg-names
  order for RK35{76,88} (bsc#1012628).
- media: dt-bindings: rockchip,vdec: Mark reg-names required
  for RK35{76,88} (bsc#1012628).
- media: chips-media: wave5: fix a potential memory leak in
  wave5_vdi_init() (bsc#1012628).
- media: chips-media: wave5: add missing spinlock protection
  for send_eos_event() (bsc#1012628).
- media: chips-media: wave5: add missing spinlock protection
  for handle_dynamic_resolution_change() (bsc#1012628).
- arm64: dts: freescale: imx95-toradex-smarc: fix PMIC_SD2_VSEL
  label position (bsc#1012628).
- drm/gpusvm: Allow device pages to be mapped in mixed mappings
  after system pages (bsc#1012628).
- drm/gpusvm: Force unmapping on error in drm_gpusvm_get_pages
  (bsc#1012628).
- spi: bcm63xx: fix controller deregistration (bsc#1012628).
- spi: atmel: fix controller deregistration (bsc#1012628).
- arm64: dts: lx2160a-cex7/lx2162a-sr-som: fix usd-cd & gpio
  pinmux (bsc#1012628).
- staging: media: atomisp: Disallow all private IOCTLs
  (bsc#1012628).
- regulator: mt6357: fix OF node reference imbalance
  (bsc#1012628).
- spi: st-ssc4: fix controller deregistration (bsc#1012628).
- regulator: max77650: fix OF node reference imbalance
  (bsc#1012628).
- media: ti: vpe: Add missing v4l2_device_unregister in
  vip_remove() (bsc#1012628).
- media: rc: xbox_remote: heed DMA restrictions (bsc#1012628).
- media: rc: streamzap: Error handling in probe (bsc#1012628).
- media: i2c: ov5647: Fix runtime PM refcount leak in s_ctrl
  (bsc#1012628).
- media: i2c: imx283: Enter full standby when stopping streaming
  (bsc#1012628).
- regulator: bq257xx: fix OF node reference imbalance
  (bsc#1012628).
- regulator: rk808: fix OF node reference imbalance (bsc#1012628).
- media: videobuf2: Set vma_flags in vb2_dma_sg_mmap
  (bsc#1012628).
- media: rockchip: rkcif: Add missing MUST_CONNECT flag to pads
  (bsc#1012628).
- media: mali-c55: Fully reset the ISP configuration
  (bsc#1012628).
- media: intel/ipu6: fix error pointer dereference (bsc#1012628).
- media: i2c: imx283: Fix hang when going from large to small
  resolution (bsc#1012628).
- regulator: act8945a: fix OF node reference imbalance
  (bsc#1012628).
- regulator: s2dos05: fix OF node reference imbalance
  (bsc#1012628).
- regulator: bd9571mwv: fix OF node reference imbalance
  (bsc#1012628).
- spi: lantiq-ssc: fix controller deregistration (bsc#1012628).
- spi: meson-spicc: fix controller deregistration (bsc#1012628).
- spi: qup: fix controller deregistration (bsc#1012628).
- arm64: dts: ti: k3-am69-aquila-clover: Fix DP regulator enable
  GPIO (bsc#1012628).
- spi: at91-usart: fix controller deregistration (bsc#1012628).
- media: saa7164: add ioremap return checks and cleanups
  (bsc#1012628).
- spi: amlogic-spisg: fix controller deregistration (bsc#1012628).
- spi: aspeed-smc: fix controller deregistration (bsc#1012628).
- drm/colorop: Preserve bypass value in duplicate_state()
  (bsc#1012628).
- drm/atomic: Add affected colorops with affected planes
  (bsc#1012628).
- platform/x86: hp-wmi: Ignore backlight and FnLock events
  (bsc#1012628).
- vsock/virtio: fix MSG_PEEK ignoring skb offset when calculating
  bytes to copy (bsc#1012628).
    ... changelog too long, skipping 240 lines ...
- commit ce3b8c5

==== libXi ====
Version update (1.8.2 -> 1.8.3)

- Update to version 1.8.3
  * This release fixes an issue with potentially uninitialized
    memory if auxiliary events (DeviceValuatorNotify,
    KeyStateNotify, ButtonStateNotify) are received when the event
    they are supposed to follow got lost.

==== libopenmpt ====
Version update (0.8.6 -> 0.8.7)

- Update to version 0.8.7:
  * ULT: Sustain loops were stopped after a portamento.

==== libusb-1_0 ====
Version update (1.0.29 -> 1.0.30)

- Update to version 1.0.30
  * Add new API libusb_get_device_string() to access device
    strings without opening the device.
  * Add new API libusb_get_session_data() which returns the
    OS-specific handle.
  * Fix device removal races on non-hotplug builds.
  * Improve descriptor parsing memory safety.
  * Fix various compiler warnings, improved tests and examples.

==== libzypp ====
Version update (17.38.8 -> 17.38.9)

- Prevent configured scripts from escaping the sigcheck directory
  (bsc#1265223, CVE-2026-44933)
- StringV: guard hasPrefix/hasPrefixCI against reading past the
  view end (fixes #735)
- version 17.38.9 (35)

==== ncurses ====
Version update (6.6.20260509 -> 6.6.20260516)
Subpackages: libncurses6 ncurses-utils terminfo-base

- Add ncurses patch 20260516
  + defer initialization of magic-cookies, which disables some
    capabilities, until the first screen update using a video attribute
    which might introduce a magic cookie (report by Frank Palazzolo).
  + correct buffer limit in recur_wgetnstr() (report by Daniel Anderson).
  + correct logic in safe_name() function of infocmp, used in -E/-e
    options (report/patch by Daniel Anderson).

==== patterns-containers ====

- Always require distrobox in place of toolbox in SLES 16.1+
  (jsc#PED-14656)

==== python-alembic ====

- fix dependency on tzdata

==== python-decorator ====
Version update (5.2.1 -> 5.3.0)

- update to 5.3.0:
  * Added official support for Python 3.14
  * Fixed a bug with "return await"
  * Moved decorator.py to a package structure
  * added a stub file (decorator/__init__.pyi)

==== python-idna ====
Version update (3.13 -> 3.15)

- update to 3.15 (bsc#1265413, CVE-2026-45409):
  * Enforce DNS-length cap on individual labels early in
    `check_label`, short-circuiting contextual-rule processing for
    oversized input while staying compatible with UTS 46 usage.
  * Tidy core helpers: hoist bidi category sets to module-level
  * frozensets (avoiding per-codepoint list construction),
    simplify length checks, and reuse the shared `_unicode_dots_re`
    from `idna.core` in the codec module.
  * Use `raise ... from err` for proper exception chaining and
    switch internal string formatting to f-strings.
  * Allow `flit_core` 4.x in the build backend.
  * Expand the ruff lint set (flake8-bugbear, flake8-simplify,
  * pyupgrade, perflint) and apply the surfaced fixes; pin lint
    to Python 3.14.
  * Reference CVE-2026-45409 for the 3.14 advisory in place of
    the initial GHSA identifier.
  * Removed opportunity to process long inputs into quadratic
  * time by rejecting oversize inputs up-front. Closes a bypass
  * of the CVE-2024-3651 mitigation. [CVE-2026-45409]

==== sdbus-cpp ====
Version update (2.1.0 -> 2.3.1)

- Update to version 2.3.1:
  * Fix ABI compat issue by moving new virtual functions to the end of the class
- Update to version 2.3.0:
  * Add coroutine support for client-side async calls
  * Add support for dumping variant to string
  * Introduce clang-tidy for static analysis and fix issues
  * Add deduction guides for Struct from std::tuple
  * Other fixes and improvements