Packages changed: MicroOS-release (20261026 -> 20261027) freetype2 fwupd (2.1.8 -> 2.1.9) krb5 llvm23 (23.1.3 -> 23.1.4) patterns-base pipewire (1.6.9 -> 1.6.10) python-SQLAlchemy (2.0.51 -> 2.1.6) python-alembic (1.18.5 -> 1.20.1) python-certifi (2026.10.19 -> 2026.10.23) python-jsonpatch (1.33 -> 1.37) python-jsonpointer (3.1.1 -> 3.5) python-pycparser (3.0 -> 3.12) sdbootutil (1+git20261007.53bc127 -> 1+git20261026.4e266f0) === Details === ==== MicroOS-release ==== Version update (20261026 -> 20261027) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== freetype2 ==== - fix description ==== fwupd ==== Version update (2.1.8 -> 2.1.9) Subpackages: libfwupd3 typelib-1_0-Fwupd-2_0 - Update to version 2.1.9: * This release adds the following features: + Add an instance ID for each Redfish HPE device class and target pair + Include if the machine is a container or hypervisor in the report data + Require libusb 1.0.27 when building the daemon * This release fixes the following bugs: + Add After=local-fs.target to fwupd.service to fix a CoreOS mount issue + Create a dbx device with version 0 when the variable is missing + Delete the efi helper when using fwupdtool reboot-cleanup + Do not show GPIO devices in the fwupdmgr emulation-tag device list + Do not truncate 64-bit values when exporting firmware as XML + Fix a small memory leak when installing dell-kestrel firmware + Fix the DFU footer size check + Ignore parent battery reports when updating the Jabra GNP child + Process all releases to set the version on a 2023-only dbx + Remove command aliases from bash-completion + Use absolute paths when sending the filename hint * This release adds support for the following hardware: Pixart PID 38CA - Update version dependencies according to meson.build. ==== krb5 ==== - Prevent denial of Service via crafted forwarded credentials * CVE-2026-107778, bsc#1284816 - Prevent denial of Service via malformed PAC in S4U2Proxy * CVE-2026-107778, bsc#1284817 - Add 0014-cve-2026-107708.patch and 0015-cve-2026-107778.patch ==== llvm23 ==== Version update (23.1.3 -> 23.1.4) - Update to version 23.1.4. * This release contains bug-fixes for the LLVM 23.1.0 release. This release is API and ABI compatible with 23.1.0. - Build all targets on ppc64le. - Build SPIRV target also on ARMv6/7 and s390x. - Cleanup parts specific to ppc and ppc64, because we don't build them anymore. - Increase memory for compile jobs to avoid OOM. - Build compiler-rt builtins for wasm32-wasip1 as part of the runtimes build (LLVM_BUILTIN_TARGETS) and ship them in clang23, so that clang can link wasm32-wasip1 binaries with a WASI sysroot. ==== patterns-base ==== Subpackages: patterns-base-base patterns-base-bootloader patterns-base-hardware patterns-base-minimal_base patterns-base-x11 - Modernise the core patterns: * base: drop the Suggests on openssl-1_1: the package was dropped from Factory, and the comment above it still claimed 1.1 was the default openssl, two major versions out of date * console: drop the Suggests on cnetworkmanager: the Python-2-era NetworkManager CLI no longer exists in Factory * console: suggest plocate instead of mlocate: mlocate was dropped from Factory and plocate is its designated successor (it Provides and Obsoletes mlocate); no pattern named plocate before * enhanced_base: drop the Suggests on kerneloops: the package is gone from Factory and the crash submission service it reported to is defunct * x11_enhanced: drop the Suggests on xorg-x11-driver-video-radeonhd and xorg-x11-driver-video-unichrome: both drivers were removed from Factory years ago * enhanced_base: recommend iw and wireless-regdb instead of wireless-tools: wireless-tools is the stalled 30.pre9 pre-release driving the deprecated Wireless Extensions API and iw is its nl80211 successor; wireless-regdb was not pulled in by any installing pattern before, so default installs ran on the kernel's built-in world regulatory domain * enhanced_base: use the current package names update-bootloader and kmod instead of the compat aliases perl-Bootloader and kmod-compat: the alias packages no longer exist and only resolve via the Provides of their successors, so the lines would silently rot if those compat Provides were ever dropped * enhanced_base: drop the Recommends on klogd on openSUSE: journald captures the kernel messages, and the pattern already goes for the journal on Tumbleweed (boo#1143144) * enhanced_base: drop the Recommends on deltarpm: Tumbleweed repositories publish no deltainfo, so the repository infrastructure deltarpm serves no longer exists there * enhanced_base: drop the Recommends on net-snmp: a full SNMP stack does not belong in every default install * enhanced_base: drop the Recommends on mpt-status: it is the status tool for the LSI 1030, a 2002-era SCSI RAID chip * enhanced_base: drop the Recommends on gpart: the 1999-era lost-partition guessing tool * enhanced_base: drop the Recommends on zisofs-tools: tools for the zisofs compressed-ISO extension * enhanced_base: drop the Recommends on procmail: the sendmail-era local delivery agent, upstream dormant since 2001 * pattern-definition-32bit.txt: mirror the enhanced_base changes for the enhanced_base-32bit pattern * enhanced_base: correct the comment above the openSUSE-only block: it claimed the block lists packages missing from SLE-15, but the block is guarded by is_opensuse, so SLE of any version does not get these packages from this pattern ==== pipewire ==== Version update (1.6.9 -> 1.6.10) Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Update to version 1.6.10: * This is a bugfix release that is API and ABI compatible with the previous 1.6.x releases. * Highlights - Fix some potential crashes in the JACK layer. - Fix a regression in the PSD rear delay upmixing code. - Avoid pops and clicks when playing unsigned formats. - More small fixes and backports. * PipeWire - Initialize the error location in all cases when parsing properties. - Don't try to unlink ports without a node. (#5540 (closed)) * Modules - Fix a potential crash in the X11 module because error handlers can be called twice. * SPA - Fix a regression in the PSD rear delay upmixing code. A delay of 0 was not working and would result in a big delay instead. (#5490 (closed)) - Use per audio format clear function to avoid pops when draining on unsigned formats. (#5531 (closed)) * Pulse-server - Avoid queueing an unlimited amount of REQUEST commands for paused clients in some cases. (#5541 (closed)) * Bluetooth - Remove some old deprecated functions. - cancel RegisterApplication calls when adapter goes away. (#5096 (closed)) * JACK - Add locking around the port array and mixer list. (#5499 (closed)) - Avoid possible infinite loop. - Free port and buffers before disconnect. (#5455) * GStreamer - Set the plane strides and offsets correctly. - Avoid setting invalid max resolution values. * ALSA Plugin - Handle the XRUN case better. (#5524 (closed)) * Tools - Support more output formats by letting sndfile choose the byte order. ==== python-SQLAlchemy ==== Version update (2.0.51 -> 2.1.6) - update to 2.1.6: * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.6 * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.5 * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.4 * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.3 * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.2 * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.1 * https://docs.sqlalchemy.org/en/21/changelog/changelog_21.html#change-2.1.0 ==== python-alembic ==== Version update (1.18.5 -> 1.20.1) - update to 1.20.1: * Drop support for SQLAlchemy 1.4; SQLAlchemy >= 2.0.0 is now required. * Add Python 3.14 and 3.15 to trove classifiers; use PEP 604 unions in type annotations. * Autogenerate: - Treat empty string comment as None to prevent repeated diff detections. - Render full set of arguments and dialect prefix for PostgreSQL DOMAIN types. - Strip type casts from PostgreSQL Computed columns to prevent false-positive warnings. - Fix false modified detection on expression-based indexes with type casts. - Detect addition and removal of named CHECK constraints via checkconstraint_byname plugin (now opt-in). - Render dialect-specific kwargs on ForeignKey and CHECK constraints in create_table directives. - Render warning comment above drop_constraint when constraint name is None. - Avoid duplicate CHECK constraints rendered for Enum and Boolean types in SQLAlchemy 2.1. * Batch mode: - Warn when unnamed CHECK constraint on reflected table is omitted from batch recreate. - Fix duplicate CHECK constraint emission and naming convention issues for Boolean/Enum types. - Apply batch_alter_table.naming_convention only to unnamed reflected constraints. * Operations / Engine: - Fix invalid ALTER TABLE on identity columns when existing_server_default is omitted on PostgreSQL. - Fix TypeError when loading plugins pointing to a module in alembic.plugins entrypoint. - Accommodate Float/Numeric and (rand()) expressions in compare_server_default on MySQL. - Offline stamp/downgrade to base no longer emits spurious DROP TABLE alembic_version. - Use target_tokens and target_table_key from SQLAlchemy 2.1 to resolve ForeignKey targets containing dots. ==== python-certifi ==== Version update (2026.10.19 -> 2026.10.23) - update to 2026.10.23 (bsc#1286261, bsc#1287723): * drop eMudhra Inc root CA ==== python-jsonpatch ==== Version update (1.33 -> 1.37) - update to 1.37: * Clean up in-place output after write errors * Reject invalid patch document containers * Use UTF-8 for JSON command-line file I/O * Handle source pointer objects in move location helpers - update to 1.36: * Honor optimization=False when generating patches * Preserve the original file when in-place CLI replacement fails - update to 1.35: * Refactor JsonPatch class and improve documentation * Add pytest configuration for non-standard test file naming * Document JSON Pointer escaping for special characters * Improve list diffing to avoid unnecessary item replacements * Use correct SPDX-Identifer * Improve coverage reporting by combining test runs * ci: run tests on every PR and pushes to master * Add support for Python 3.13 and 3.14 * Improve list diffing with sequence alignment to avoid cascading changes * Handle self-containing values in make_patch and add #180 regression tests * Only reject '-' in replace when it refers to an array * Reject moving any location into its own children, fixes #214 * Compare values in 'test' by JSON equality * Hash patch operations by their 'op' and 'path' * Require jsonpointer>=3.2 * Raise documented exceptions for malformed patches and "from": "/-" * Support whole document operations on scalar documents * Housekeeping: stale links, packaging cleanup, CI action versions * Find moves in make_patch without rewriting all later operations * Close test coverage gaps * Remove unreachable code from make_patch and the jsonpointer < 3.2 shim * Test the index helpers of PatchOperation and MoveOperation * Upload coverage to Coveralls again * Close the original input before in-place replacement * Install the command line programs as console_scripts - update to 1.34: * Update documentation to include a link to the GitHub repo and installation instructions * Support only currently supported Python versions (by @hf- kklein in #155, #156, @CyrilRoelandteNovance in #162, @stefankoegl in #193) * fix: remove unused exception variables (F841) * Avoid usage of unittest.makeSuite, removed from Python 3.13 * Handle the whole-document pointer in the sequence branch * Fix copying from the whole-document pointer * Add property-based tests using Hypothesis * DiffBuilder: fix reindexing of operations involving nested paths * fix: use deterministic comparison ordering * Fix `_compare_lists` treating `1` and `True` as equal in JSON diff by @stefankoegl with @Copilot in https://github.com/stefankoegl/python-json-patch/pull/181 * Update property test counterexamples for fixes from #175 and [#181] * Prevent RFC 6901 pointer indexing into strings * DiffBuilder: fix operation reindexing bug * Fix patch operations to not modify patch object during apply * Refactor DiffBuilder to use tuple paths and simplify operation handling * Fix ReadTheDocs configuration and documentation build * Clarify patch application semantics and fix documentation * Add PyPI publishing workflow and update release process ==== python-jsonpointer ==== Version update (3.1.1 -> 3.5) - update to 3.5: * Handle array-end pointers as CLI resolution errors * Read CLI JSON and pointer files as UTF-8 - update to 3.4: * Add `create` parameter to `set_pointer` for auto-creating missing paths - update to 3.3: * Preserve control-flow exceptions when joining pointer parts * Continue CLI batches after malformed JSON input - update to 3.2.1: * Report test coverage to Coveralls from GitHub Actions * Replace Travis CI link with GitHub Actions badge in README * Preserve trailing member-name spaces in pointer files - update to 3.2.0: * Run unittest discovery in the coverage target * [BUGFIX] JsonPointer should not index into strings * Preserve JsonPointer subclasses when joining * fix: validate assignment target in JsonPointer.set() * Normalize oversized array index conversion errors * Add VERBOSE_EXCEPTIONS flag to suppress doc content in JsonPointerException messages by @stefankoegl with @Copilot in https://github.com/stefankoegl/python-json-pointer/pull/72 * Improve jsonpointer CLI: support positional pointer argument * Add GitHub Actions workflow for PyPI publishing ==== python-pycparser ==== Version update (3.0 -> 3.12) - update to 3.12: * Emit one type definition for declarators that share it * raise ParseError for _Atomic applied to array or function type * Fix code generation for the _Pragma operator * Parse GNU statement expressions as primary expressions * Fix shared type declarations in switch cases * raise ParseError for typedef in a parameter declaration * Scope for loop init declarations to the loop * Enhanced C11 support * Drop an unneeded direct build depndency on wheel * fix: handle integer suffix in #line directive without crashing * Update default branch to main * fix: raise ParseError instead of AssertionError on unmatched '}' * Add support for Python 3.15 * Fix empty compound literal (type){} raising ParseError * Fix compound literal statements in C generator * Keep the contents of adjacent u8 string literals ==== sdbootutil ==== Version update (1+git20261007.53bc127 -> 1+git20261026.4e266f0) Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit - Update to version 1+git20261026.4e266f0: * Add --version parameter * Do not propagate umount to the host * Do not add duplicate cmdline.d entries