Packages changed:
  Mesa (25.3.3 -> 25.3.4)
  Mesa-drivers (25.3.3 -> 25.3.4)
  MozillaFirefox (147.0.1 -> 147.0.2)
  apache2-mod_php8
  aws-lc (1.66.2 -> 1.67.0)
  bind
  cepces (0.3.9 -> 0.3.16)
  dbus-broker
  gcc
  gdk-pixbuf (2.44.4 -> 2.44.5)
  gdm
  glib2
  gnome-mahjongg (49.0.1 -> 49.1.1)
  gnome-maps (49.3 -> 49.4)
  gpg2 (2.5.16 -> 2.5.17)
  groff
  groff-full
  grub2 (2.12 -> 2.14)
  highway
  inkscape
  kernel-firmware-amdgpu (20260126 -> 20260130)
  kernel-firmware-intel (20260123 -> 20260130)
  kernel-firmware-network (20260116 -> 20260130)
  kernel-firmware-platform (20251228 -> 20260128)
  kernel-firmware-qcom (20260114 -> 20260128)
  kernel-firmware-realtek (20251217 -> 20260130)
  kernel-firmware-sound (20260123 -> 20260130)
  kernel-source (6.18.7 -> 6.18.8)
  libHX (5.2 -> 5.3)
  libXmu (1.3.0 -> 1.3.1)
  libshumate (1.5.2 -> 1.5.3)
  libspelling (0.4.9 -> 0.4.10)
  libstorage-ng (4.5.286 -> 4.5.287)
  mariadb
  mdadm (4.4+31.g541b40d3 -> 4.5+39.g1aa6e5de)
  microos-tools (4.0+git19 -> 4.0+git21)
  multipath-tools (0.14.0+207+suse.18c17be5 -> 0.14.1+208+suse.d08f5475)
  open-vm-tools (13.0.5 -> 13.0.10)
  openSUSE-release (20260128 -> 20260202)
  osinfo-db
  patterns-base
  pcr-oracle (0.5.8 -> 0.5.9)
  php8
  pulseaudio
  python-click
  python-greenlet (3.3.0 -> 3.3.1)
  sdbootutil (1+git20260115.cd41d07 -> 1+git20260130.2ae660a)
  shadow
  systemd-presets-common-SUSE
  webkit2gtk3
  webkit2gtk4
  yast2-bootloader (5.0.31 -> 5.0.32)
  yast2-core (5.0.3 -> 5.0.4)
  yast2-storage-ng (5.0.39 -> 5.0.40)

=== Details ===

==== Mesa ====
Version update (25.3.3 -> 25.3.4)
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1

- Update to Mesa 25.3.4
  - -> https://docs.mesa3d.org/relnotes/25.3.4

==== Mesa-drivers ====
Version update (25.3.3 -> 25.3.4)
Subpackages: Mesa-dri Mesa-libva Mesa-vulkan-device-select libvulkan_lvp

- Update to Mesa 25.3.4
  - -> https://docs.mesa3d.org/relnotes/25.3.4

==== MozillaFirefox ====
Version update (147.0.1 -> 147.0.2)
Subpackages: MozillaFirefox-branding-upstream

- Mozilla Firefox 147.0.2
  * Resolved various issues with missing or impaired browser
    functionality when using XDG Base Directories on Linux. (bmo#2011300)
  * Fixed an issue causing excess passkey prompts to appear when
    logging into some sites. (bmo#2010919)
  * Fixed an issue that could lead to sites being incorrectly
    flagged as malicious by SafeBrowsing. (bmo#2010956)
  MFSA 2026-06 (bsc#1257363)
  * CVE-2026-24868 (bmo#2007302)
    Mitigation bypass in the Privacy: Anti-Tracking component
  * CVE-2026-24869 (bmo#2008698)
    Use-after-free in the Layout: Scrolling and Overflow component

==== apache2-mod_php8 ====

- package /var/lib/php8 via tmpfiles
- deleted sources
  * php-fpm.tmpfiles.d (renamed)
- added sources
  * php-fpm-tmpfiles.conf
  * php8-tmpfiles.conf

==== aws-lc ====
Version update (1.66.2 -> 1.67.0)
Subpackages: libcrypto-awslc0 libssl-awslc0

- Update to version 1.67.0:
  * Migrate Wycheproof test vectors for ECDSA, RSA PKCS#1, and some more
  * Rename volatile state/memory to unique state/memory
  * Service Indicator: Add error call trampoline to avoid delocator issue
  * Add support for Big Endian in ACVP tool
  * AES-GCM: Add function pointer trampolines to avoid delocator issue
  * Use already defined macro for no inline
  * Remove Kyber completely
  * Import mldsa-native
  * Use existing session context if new is actually NULL
  * Integrate Wycheproof ML-KEM test vectors
  * Avoid cross-compilation build failure
  * Cleanup pass on Go code in repository
  * Update patch for nmap
- remove vendor-fix.patch, as upstream finally fixed the issue

==== bind ====
Subpackages: bind-doc bind-utils

- Move default config files 127.0.0.zone, localhost.zone and
  root.hint in /var/lib/named to /usr/share/named with a symlink to
  /var/lib/named via systemd-tmpfiles to improve immutable os
  compatibility.

==== cepces ====
Version update (0.3.9 -> 0.3.16)
Subpackages: cepces-certmonger cepces-selinux python3-cepces

- Update to version 0.3.16:
  * Bump version to 0.3.16
  * feat(cepces-submit): Add an --install mode
  * Bump version to 0.3.15
  * fix(certmonger): Skip authentication for operations that don't need it
  * Bump version to 0.3.14
  * fix(github-ci): Fix branch pattern
  * fix(certmonger): Handle None result in Submit operation
  * fix(core): Handle nil policies and CAs in Service properties
  * feat(scripts): Add a script to verify version numbers are in sync
  * fix(xml:binding): Handle xsi:nil="true" in XMLElementList

==== dbus-broker ====
Subpackages: dbus-broker-block-restart

- dbus-broker should require dbus-1-common (bsc#1255655)

==== gcc ====

- Improve go/gofmt alternative removal upon migration to an
  alternative-less system.

==== gdk-pixbuf ====
Version update (2.44.4 -> 2.44.5)
Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0

- Update to version 2.44.5:
  + Make the testsuite work with glycin
  + glycin: Add support for xpm and xbm
  + Updated translations.
- Drop gdk-pixbuf-jpeg-slow.patch, we are not running tests, nor do
  we want to depend on glycin during build as it leads to a cycle.
- Pass test=false to meson setup.
- Drop unused check section and already disabled meson_test macro.

==== gdm ====
Subpackages: gdm-schema gdm-systemd gdm-xdm-integration gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0

- Add gdm-initial-vt-tty1.patch: the greeter session runs on tty1
  when environment variable GDM_INITIAL_VT_TTY1 is defined
  (bsc#1252888).

==== glib2 ====
Subpackages: glib2-tools libgio-2_0-0 libgirepository-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 libgthread-2_0-0 typelib-1_0-GIRepository-3_0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0

- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).

==== gnome-mahjongg ====
Version update (49.0.1 -> 49.1.1)

- Update to version 49.1.1:
  + Update outdated screenshot URLs
- Changes from version 49.1.0:
  + Implement pause menu with 'Resume' and 'Quit' buttons
  + Add Escape keyboard shortcut to pause game
  + Pause game when main window is obscured
  + Pause game when dialogs and menus are visible
  + Don't allow pausing completed games
  + Don't show confirmation dialog for layout change after
    completing game
  + Fix text entry not always receiving focus in Scores dialog
  + Updated translations.

==== gnome-maps ====
Version update (49.3 -> 49.4)

- Update to version 49.4:
  + Fix opening GNOME Settings Privacy panel (after Setting
    rearranging panels)
  + Updated translations.

==== gpg2 ====
Version update (2.5.16 -> 2.5.17)
Subpackages: dirmngr

- Update to 2.5.17:
  * agent: Fix stack buffer overflow when using gpgsm and KEM
    (CVE-2026-24881, boo#1257358)
  * tpm: Fix possible buffer overflow in PKDECRYPT
    (CVE-2026-24882, boo#1257396)
  * gpg: Fix possible NULL-deref with overlong signature packets
    (CVE-2026-24883, boo#1257395)
  * gpg: New export-option "keep-expired-subkeys"
  * gpgsm: Make multiple search patterns work with keyboxd
  * agent: Add accelerator keys for "Wrong" and "Correct"
  * dirmngr: Help detection of bad keyserver configurations

==== groff ====

- Remove update-alternatives usage for roff manpage, mandoc no longer
  provides it. (bsc#1245900)
- Use libalternatives for soelim, fixing conflict with mandoc
  * Add new soelim-common package which provides soelim symlink to alts

==== groff-full ====
Subpackages: gxditview

- Remove update-alternatives usage for roff manpage, mandoc no longer
  provides it. (bsc#1245900)
- Use libalternatives for soelim, fixing conflict with mandoc
  * Add new soelim-common package which provides soelim symlink to alts

==== grub2 ====
Version update (2.12 -> 2.14)
Subpackages: grub2-arm64-efi grub2-arm64-efi-bls grub2-common grub2-snapper-plugin grub2-systemd-sleep-plugin

- Fix sporadic boot failure in 2.14 BLS (bsc#1257547)
  * 0001-blsuki-Fix-linux_cmd-size-calcution-in-bls_get_linux.patch
- Update to 2.14
- New in 2.14
  * libgcrypt 1.11.
  * LVM LV integrity and cachevol support.
  * EROFS support.
  * GRUB environment block inside the Btrfs header support.
  * NX support for EFI platforms.
  * shim loader protocol support.
  * BLS and UKI support.
  * Argon2 KDF support.
  * TPM2 key protector support.
  * Appended Signature Secure Boot Support for PowerPC.
  * New option to block command line interface.
  * Support dates outside of 1901..2038 range.
  * zstdio decompression support.
  * EFI code improvements and fixes.
  * TPM driver fixes.
  * Filesystems fixes.
  * CVE and Coverity fixes.
  * Tests improvements.
  * Documentation improvements.
- New tarball
  * grub-2.14.tar.xz
- Removed tarball
  * grub-2.12.tar.xz
- Patch rediff
  * use-grub2-as-a-package-name.patch
  * grub2-secureboot-add-linuxefi.patch
  * grub2-secureboot-no-insmod-on-sb.patch
  * grub2-secureboot-chainloader.patch
  * grub2-linguas.sh-no-rsync.patch
  * grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  * grub2-s390x-03-output-7-bit-ascii.patch
  * grub2-s390x-04-grub2-install.patch
  * grub2-efi-chainload-harder.patch
  * grub2-emu-4-all.patch
  * grub2-lvm-allocate-metadata-buffer-from-raw-contents.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-03-follow_default.patch
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-btrfs-06-subvol-mount.patch
  * grub2-btrfs-10-config-directory.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-Add-hidden-menu-entries.patch
  * grub2-suse-remove-linux-root-param.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch
  * 0004-arm-arm64-loader-Better-memory-allocation-and-error-.patch
  * 0003-Handle-multi-arch-64-on-32-boot-in-linuxefi-loader.patch
  * 0006-x86-efi-Re-arrange-grub_cmd_linux-a-little-bit.patch
  * 0007-x86-efi-Make-our-own-allocator-for-kernel-stuff.patch
  * 0008-x86-efi-Allow-initrd-params-cmdline-allocations-abov.patch
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0008-linuxefi-Use-common-grub_initrd_load.patch
  * 0009-Add-crypttab_entry-to-obviate-the-need-to-input-pass.patch
  * grub-read-pcr.patch
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch
  * 0001-luks2-Use-grub-tpm2-token-for-TPM2-protected-volume-.patch
  * 0001-ofdisk-enhance-boot-time-by-focusing-on-boot-disk-re.patch
  * 0002-ofdisk-add-early_log-support.patch
  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch
  * 0001-Streamline-BLS-and-improve-PCR-stability.patch
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0001-blscfg-read-fragments-in-order.patch
  * grub2-bls-boot-counting.patch
  * grub2-bls-boot-assessment.patch
  * grub2-bls-boot-show-snapshot.patch
  * grub2-blscfg-set-efivars.patch
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * grub2-bls-loader-entry-oneshot.patch
  * grub2-blsbumpcounter-menu.patch
- Patch removed
  * grub2-getroot-treat-mdadm-ddf-as-simple-device.patch
  * grub2-grubenv-in-btrfs-header.patch
  * 0003-Make-grub_error-more-verbose.patch
  * 0004-Add-suport-for-signing-grub-with-an-appended-signatu.patch
  * 0005-docs-grub-Document-signing-grub-under-UEFI.patch
  * 0006-docs-grub-Document-signing-grub-with-an-appended-sig.patch
  * 0007-dl-provide-a-fake-grub_dl_set_persistent-for-the-emu.patch
  * 0008-pgp-factor-out-rsa_pad.patch
  * 0009-crypto-move-storage-for-grub_crypto_pk_-to-crypto.c.patch
  * 0010-posix_wrap-tweaks-in-preparation-for-libtasn1.patch
  * 0011-libtasn1-import-libtasn1-4.18.0.patch
  * 0012-libtasn1-disable-code-not-needed-in-grub.patch
  * 0013-libtasn1-changes-for-grub-compatibility.patch
  * 0014-libtasn1-compile-into-asn1-module.patch
  * 0015-test_asn1-test-module-for-libtasn1.patch
  * 0016-grub-install-support-embedding-x509-certificates.patch
  * 0017-appended-signatures-import-GNUTLS-s-ASN.1-descriptio.patch
  * 0018-appended-signatures-parse-PKCS-7-signedData-and-X.50.patch
  * 0019-appended-signatures-support-verifying-appended-signa.patch
  * 0020-appended-signatures-verification-tests.patch
    ... changelog too long, skipping 131 lines ...
  with new glibc 2.43

==== highway ====

- Reenable LTO on riscv64, gcc has been fixed

==== inkscape ====
Subpackages: inkscape-extensions-extra inkscape-extensions-gimp

- Fix build with Poppler 26.01.00, add
  Fix_Poppler_26_01_00_compat.patch

==== kernel-firmware-amdgpu ====
Version update (20260126 -> 20260130)

- Update to version 20260130 (git commit 82e3e0e4c96f):
  * amdgpu: DMCUB updates for various ASICs

==== kernel-firmware-intel ====
Version update (20260123 -> 20260130)

- Update to version 20260130 (git commit 4b3f8c411f17):
  * linux-firmware: Add Dell ISH firmware for Intel panther lake systems

==== kernel-firmware-network ====
Version update (20260116 -> 20260130)

- Update to version 20260130 (git commit 4b3f8c411f17):
  * linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading
- Update to version 20260130 (git commit 82e3e0e4c96f):
  * linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1
  * ice: update DDP LAG package to 1.3.2.0

==== kernel-firmware-platform ====
Version update (20251228 -> 20260128)

- Update to version 20260128 (git commit 2e5a8b0550ba):
  * Update firmware for NPU PHX, STX and STX HALO

==== kernel-firmware-qcom ====
Version update (20260114 -> 20260128)

- Update to version 20260128 (git commit 2e5a8b0550ba):
  * qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a
  * qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A

==== kernel-firmware-realtek ====
Version update (20251217 -> 20260130)

- Update to version 20260130 (git commit 82e3e0e4c96f):
  * rtl_nic: add firmware rtl8125cp-1 for RTL8125cp
- Update to version 20260128 (git commit 2e5a8b0550ba):
  * rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC
  * rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC

==== kernel-firmware-sound ====
Version update (20260123 -> 20260130)

- Update to version 20260130 (git commit 82e3e0e4c96f):
  * cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware

==== kernel-source ====
Version update (6.18.7 -> 6.18.8)
Subpackages: kernel-64kb kernel-default

- Linux 6.18.8 (bsc#1012628).
- arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
  (bsc#1012628).
- arm64: dts: qcom: sm8550: Fix compile warnings in USB controller
  node (bsc#1012628).
- arm64: dts: qcom: sm8650: Fix compile warnings in USB controller
  node (bsc#1012628).
- arm64: dts: rockchip: Fix wrong register range of rk3576 gpu
  (bsc#1012628).
- perf parse-events: Fix evsel allocation failure (bsc#1012628).
- Drivers: hv: Always do Hyper-V panic notification in
  hv_kmsg_dump() (bsc#1012628).
- btrfs: fix missing fields in superblock backup with
  BLOCK_GROUP_TREE (bsc#1012628).
- dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
  (bsc#1012628).
- pmdomain: qcom: rpmhpd: Add MXC to SC8280XP (bsc#1012628).
- wifi: ath12k: don't force radio frequency check in freq_to_idx()
  (bsc#1012628).
- ata: ahci: Do not read the per port area for unimplemented ports
  (bsc#1012628).
- ata: libata: Call ata_dev_config_lpm() for ATAPI devices
  (bsc#1012628).
- ata: libata-sata: Improve link_power_management_supported
  sysfs attribute (bsc#1012628).
- ata: libata: Add cpr_log to ata_dev_print_features() early
  return (bsc#1012628).
- ata: libata: Add DIPM and HIPM to ata_dev_print_features()
  early return (bsc#1012628).
- ata: libata: Print features also for ATAPI devices
  (bsc#1012628).
- wifi: ath12k: cancel scan only on active scan vdev
  (bsc#1012628).
- wifi: ath12k: Fix scan state stuck in ABORTING after
  cancel_remain_on_channel (bsc#1012628).
- wifi: ath12k: fix dead lock while flushing management frames
  (bsc#1012628).
- wifi: ath12k: Fix wrong P2P device link id issue (bsc#1012628).
- ice: initialize ring_stats->syncp (bsc#1012628).
- ice: Avoid detrimental cleanup for bond during interface stop
  (bsc#1012628).
- ice: Fix incorrect timeout ice_release_res() (bsc#1012628).
- igc: Restore default Qbv schedule when changing channels
  (bsc#1012628).
- igc: fix race condition in TX timestamp read for register 0
  (bsc#1012628).
- igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue
  (bsc#1012628).
- vsock/virtio: Coalesce only linear skb (bsc#1012628).
- net: usb: dm9601: remove broken SR9700 support (bsc#1012628).
- bonding: limit BOND_MODE_8023AD to Ethernet devices
  (bsc#1012628).
- l2tp: Fix memleak in l2tp_udp_encap_recv() (bsc#1012628).
- selftests: net: fib-onlink-tests: Convert to use namespaces
  by default (bsc#1012628).
- net: freescale: ucc_geth: Return early when TBI PHY can't be
  found (bsc#1012628).
- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (bsc#1012628).
- amd-xgbe: avoid misleading per-packet error log (bsc#1012628).
- gue: Fix skb memleak with inner IP protocol 0 (bsc#1012628).
- tools: ynl: Specify --no-line-number in ynl-regen.sh
  (bsc#1012628).
- fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1012628).
- veth: fix data race in veth_get_ethtool_stats (bsc#1012628).
- pwm: Ensure ioctl() returns a negative errno on error
  (bsc#1012628).
- pwm: max7360: Populate missing .sizeof_wfhw in max7360_pwm_ops
  (bsc#1012628).
- l2tp: avoid one data-race in l2tp_tunnel_del_work()
  (bsc#1012628).
- ipvlan: Make the addrs_lock be per port (bsc#1012628).
- octeontx2: cn10k: fix RX flowid TCAM mask handling
  (bsc#1012628).
- net/sched: Enforce that teql can only be used as root qdisc
  (bsc#1012628).
- net/sched: qfq: Use cl_is_active to determine whether class
  is active in qfq_rm_from_ag (bsc#1012628).
- crypto: authencesn - reject too-short AAD (assoclen<8) to
  match ESP/ESN spec (bsc#1012628).
- wifi: mac80211: don't perform DA check on S1G beacon
  (bsc#1012628).
- serial: 8250_pci: Fix broken RS485 for F81504/508/512
  (bsc#1012628).
- serial: Fix not set tty->port race condition (bsc#1012628).
- comedi: dmm32at: serialize use of paged registers (bsc#1012628).
- w1: therm: Fix off-by-one buffer overflow in alarms_store
  (bsc#1012628).
- w1: fix redundant counter decrement in w1_attach_slave_device()
  (bsc#1012628).
- Revert "nfc/nci: Add the inconsistency check between the input
  data length and count" (bsc#1012628).
- Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
  (bsc#1012628).
- Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
  (bsc#1012628).
- scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1012628).
- scsi: xen: scsiback: Fix potential memory leak in
  scsiback_remove() (bsc#1012628).
    ... changelog too long, skipping 295 lines ...
- commit e21436a

==== libHX ====
Version update (5.2 -> 5.3)

- Update to release 5.3
  * Added the <libHX/tie.hpp> header containing the
    HX::unique_tie function
  * Make HX_isascii work in C23 mode

==== libXmu ====
Version update (1.3.0 -> 1.3.1)
Subpackages: libXmu6 libXmuu1

- Update to version 1.3.1
  * Fix compilation on 32-bit targets
- supersedes u_int-to-pointer-cast.patch

==== libshumate ====
Version update (1.5.2 -> 1.5.3)
Subpackages: libshumate-1_0-1 typelib-1_0-Shumate-1_0

- Update to version 1.5.3:
  + Updated translations.

==== libspelling ====
Version update (0.4.9 -> 0.4.10)

- Update to version 0.4.10:
  + Updated translations.

==== libstorage-ng ====
Version update (4.5.286 -> 4.5.287)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- merge gh#openSUSE/libstorage-ng#1051
- removed unneeded includes
- 4.5.287

==== mariadb ====
Subpackages: libmariadbd19 mariadb-client mariadb-errormessages

- Fix incomplete SELinux labels during database update (bsc#1255024)

==== mdadm ====
Version update (4.4+31.g541b40d3 -> 4.5+39.g1aa6e5de)

- Update to version 4.5+39.g1aa6e5de:
  * fix compilation errors with GCC 16 (bsc#1256973)
  * load md_mod before creating array (bsc#1257330)
- Update to version 4.5+33.g9560967f (bsc#1257009):
- Upstream feature additions in 4.5:
  * Support --logical-block-size in --create
  * Remove --freeze-reshape logic in reshape
  * Create array with sync del gendisk mode
  * Re-enable mdadm --monitor ... for /dev/mdX
  * Don't stop array after creating it during assemble
  * Allow RAID0 to be created with v0.90 metadata
  * Optimize DDF header search for widely used RAID controllers
  Upstream bug fixes from 4.5:
  * Moves memory management into Assemble to avoid null pointer dereference
  * Wait a while before removing a member in Incremental
  * Fix memory leaks
  * Support non-absolute name during monitor scan
  * Enable udev block for Incremental/Assemble to avoid race condition
  * Don't set badblock flag when adding a new disk
  * Fix metadata corruption when managing new imsm array
  * Do not start reshape before switchroot

==== microos-tools ====
Version update (4.0+git19 -> 4.0+git21)

- Update to version 4.0+git21:
  * Add zypp-no-multiversion sub-package
  * Add config snippets for zypp.conf

==== multipath-tools ====
Version update (0.14.0+207+suse.18c17be5 -> 0.14.1+208+suse.d08f5475)
Subpackages: kpartx libmpath0

- Update to version 0.14.1+208+suse.d08f5475:
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * multipathd: make "multipathd show status" busy checker better
  * multipathd: finish initalization of paths added while offline
  * multipathd: don't add removed/partial paths to new maps

==== open-vm-tools ====
Version update (13.0.5 -> 13.0.10)
Subpackages: libvmtools0 open-vm-tools-desktop

- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.

==== openSUSE-release ====
Version update (20260128 -> 20260202)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== osinfo-db ====

- Add support for SLES-16.1 (jsc#PED-14625)
  add-sles16.1-support.patch
- Add support for openSUSE Leap 16.1 (jsc#PED-14625)
  add-opensuse-leap-16.1-support.patch

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-console patterns-base-enhanced_base patterns-base-minimal_base patterns-base-selinux patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced

- rename transactional_base to immutable_base

==== pcr-oracle ====
Version update (0.5.8 -> 0.5.9)

- Update to 0.5.9
  + Fix event skipping due to double increment
  + Add '--persistent-srk' to make SRK persistent (bsc#1248516)

==== php8 ====
Subpackages: php8-ctype php8-dom php8-iconv php8-openssl php8-pdo php8-sqlite php8-tokenizer php8-xmlreader php8-xmlwriter

- package /var/lib/php8 via tmpfiles
- deleted sources
  * php-fpm.tmpfiles.d (renamed)
- added sources
  * php-fpm-tmpfiles.conf
  * php8-tmpfiles.conf

==== pulseaudio ====
Subpackages: libpulse-mainloop-glib0 libpulse0 pulseaudio-setup pulseaudio-utils system-user-pulse

- Remove pulseaudio-rpmlintrc which only had filters for the
  pulseaudio-gdm-hooks subpackage which was moved to the gdm
  package.
- Added permissions for the ghost dir /var/lib/pulseaudio.

==== python-click ====

- Run tests in a subpackage, this allows to exclude build in different
  distributions

==== python-greenlet ====
Version update (3.3.0 -> 3.3.1)

- Update to 3.3.1
  * Publish Windows ARM binary wheels, where available.
  * Fix compilation for 3.14t on Windows.
  * Publish Windows 3.14t binary wheels for Intel.
  * Switch from Appveyor for Windows to Github Actions.
  * Fix compilation on MIPS with GCC 15 and binutils 2.45.
    See PR 487 by Rosen Penev. Note that this is not a
    platform tested by this project’s CI.
  * Move most project metadata into the static pyproject.toml
    file. This updates licensing information to use the modern
    License-Expression field. See PR 480 by mrbean-bremen.
- Update BuildRequires from pyproject.toml

==== sdbootutil ====
Version update (1+git20260115.cd41d07 -> 1+git20260130.2ae660a)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper

- Update to version 1+git20260130.2ae660a:
  * Better support for GRUB2 2.12 / 2.14
  * Drop pcrlock_manual_raw in favor of lock-raw
  * If shim is installed, it will measure the kernel
  * In grub2-bls the kernel also measures initrd and cmdline
  * Instead of hd0, uses the DISK-SEQ order
  * Hide grep error when missing files
  * A non-snapshot is not read-only
- Update to version 1+git20260127.6240918:
  * Correctly replace the boot entry with a new name
- Update to version 1+git20260122.dd5ba5c:
  * Fix boot entries detection when boot counting is enabled
  * [.github]: Improve issue templates

==== shadow ====
Subpackages: libsubid5 login_defs shadow-pw-mgmt

- Add shadow-utils Provides for compatibility with RH/Fedora packages
- Remove --enable-account-tools-setuid build flag:
  This was a leftover. The package builds chgpasswd, chpasswd,
  groupadd, groupdel, groupmod, newusers, useradd, userdel,
  and usermod as setuid binaries via this flag and then strips
  the setuid bit again in the install section.
  See gh/shadow-maint/shadow#1518
- Cleanup PAM config files which are no longer needed:
  groupadd, groupdel, groupmod, useradd, userdel, usermod

==== systemd-presets-common-SUSE ====

- Enable vpdupdate service for lsvpd (jsc#PED-14567).

==== webkit2gtk3 ====
Subpackages: libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles

- Build with Clang. The Skia documentation strongly recommends
  building with Clang, since some of its routines are optimized
  for it. See https://skia.org/docs/user/build/
- Pass -DUSE_64KB_PAGE_BLOCK=ON on aarch64, rather than disabling
  JIT and bmalloc. This should be compatible with both kernel-64kb
  and the normal kernel.

==== webkit2gtk4 ====
Subpackages: libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 typelib-1_0-JavaScriptCore-6_0 typelib-1_0-WebKit-6_0 webkitgtk-6_0-injected-bundles

- Build with Clang. The Skia documentation strongly recommends
  building with Clang, since some of its routines are optimized
  for it. See https://skia.org/docs/user/build/
- Pass -DUSE_64KB_PAGE_BLOCK=ON on aarch64, rather than disabling
  JIT and bmalloc. This should be compatible with both kernel-64kb
  and the normal kernel.

==== yast2-bootloader ====
Version update (5.0.31 -> 5.0.32)

- Fix typo in error message "Cannot create machine-id"
  (jsc#PED-10703)
- 5.0.32

==== yast2-core ====
Version update (5.0.3 -> 5.0.4)

- Immutable packaging fix: Do not package the log directory
  under /var (jsc#PED-14910)
- 5.0.4

==== yast2-storage-ng ====
Version update (5.0.39 -> 5.0.40)

- Adjusted the criteria to check whether TPM-based full-disk
  encryption is available at Agama (bsc#1257315).
- 5.0.40