- antlr
-
- Build antlr-manual package without examples files [bsc#1120360]
- Remove not needed files
- apache-commons-cli
-
- Rebased patch CLI-253-workaround.patch to new version.
- Updated build XML file to new version.
- Harmonized the use of X.Y.X strings everywhere.
- Updated new source locations from Apache.
- Added 'apache-commons-cli-rpmlintrc' to silence 'package-with-huge-docs' warning (Javadoc generates many files...)
- Update to 1.5:
* New features:
- (CLI-217) Accommodate toggling partial matching in DefaultParser. Thanks to Rubin Simons.
- (CLI-274) Option parser type EXISTING_FILE_VALUE not check file existing Thanks to Béla Schaum.
- (CLI-271) CommandLine.getXXX and CommandLine.hasXXX should accept an Option as a parameter Thanks to Christoph Läubrich.
- (CLI-276) Adjust access-modifier of checkRequiredOptions() to protected. Thanks to Jason Dillon.
- (CLI-282) TypeHandler should throw ParseException for an unsupported class. Thanks to Alex Nordlund.
- Added setter for Builder.option #33. Thanks to Waldemar Sojka, Gary Gregory.
- Add Option unit tests #76. Thanks to Waldemar Sojka, Gary Gregory.
* Fixed bugs:
- Fix NPE in DefaultParser.isLongOption(String). Thanks to Gary Gregory.
- (CLI-279) @param or @return lines should end with a period in CommandLine.java Thanks to Krishna Mohan Rao Kandunoori.
- Replace deprecated FindBugs with SpotBugs. Thanks to Gary Gregory.
- Replace CLIRR with JApiCmp. Thanks to Gary Gregory.
- Option Javadocs grammar nits #55. Thanks to Elliotte Rusty Harold.
- Minor Improvements #57, #61. Thanks to Arturo Bernal, Gary Gregory.
- (CLI-254) Input "test" gets parsed as test, quotes die #58. Thanks to stoty.
- (CLI-287) Allow whitespace-only header and footer #26. Thanks to MrQubo, Gary Gregory.
* Updates:
- (CLI-294) Update Java from version 5 to 7.
- Docs: Replace OptionBuilder in usage page #30. Thanks to Mincong Huang.
- Remove deprecated sudo setting. #36. Thanks to dengliming.
- Bump junit:junit from 4.12 to 4.13.2, #53, #60. Thanks to Gary Gregory, Dependabot.
- Bump commons-parent from 48 to 52. Thanks to Dependabot.
- Bump maven-pmd-plugin from 3.12.0 to 3.15.0, #44, #54, #67. Thanks to Dependabot.
- Bump actions/checkout from v2.3.1 to v2.3.5 #46, #72. Thanks to Dependabot.
- Bump actions/setup-java from v1.4.2 to v2 #50. Thanks to Dependabot, Gary Gregory.
- Bump maven-antrun-plugin from 1.7 to 3.0.0 #43. Thanks to Dependabot.
- Bump maven-checkstyle-plugin from 2.15 to 3.1.2 #41. Thanks to Gary Gregory.
- Bump checkstyle to 9.0.1 #68. Thanks to Gary Gregory.
- Bump actions/cache from 2 to 2.1.6 #64, #65. Thanks to Dependabot.
- Bump commons.animal-sniffer.version 1.19 -> 1.20. Thanks to Gary Gregory.
- Bump maven-bundle-plugin 5.1.1 -> 5.1.2. Thanks to Gary Gregory.
- Bump biz.aQute.bndlib.version 5.1.2 -> 6.0.0. Thanks to Gary Gregory.
- Bump spotbugs from 4.4.1 to 4.4.2 #70. Thanks to Dependabot.
- Bump spotbugs-maven-plugin from 4.4.1 to 4.4.2.2 #71. Thanks to Dependabot.-
- Add OSGi manifest to the build files.
- Set java source/target levels to 6
- apache-commons-codec
-
- Do not alias the artifact to itself
- Update to 1.15
* Fix: MurmurHash3: Ensure hash128 maintains the sign extension bug.
* Update: Base32/Base64/BCodec: Added strict decoding property to
control handling of trailing bits. Default lenient mode discards
them without error. Strict mode raise an exception.
* Update: Base32/Base64 Input/OutputStream: Added strict decoding
property to control handling of trailing bits. Default lenient
mode discards them without error. Strict mode raise an exception.
* Update: Update tests from JUnit 4.12 to 4.13.
* Add: Base16Codec and Base16Input/OutputStream.
* Add: Hex encode/decode with existing arrays.
* Update: Update actions/checkout from v1 to v2.3.2.
* Update: Update actions/setup-java from v1.4.0 to v1.4.1.
- Remove timeout.patch
- Update to version 1.14
* Release 1.14 - 2019-12-30
- Fix: Hex: Allow encoding read-only ByteBuffer.
- Fix: Hex: Only use an available ByteBuffer backing array if
the length equals the remaining byte count.
- Update: MurmurHash3: Deprecate hash64 methods and hash methods
accepting a String that use the default encoding.
- Fix: BaseNCodec to expand buffer using overflow conscious code.
- Fix: Base32/64: Fixed decoding check that all the final trailing
bits to discard are zero.
- Add: Add MurmurHash3.hash128x64 methods to fix sign extension error
during seeding in hash128 methods.
- Add: Add MurmurHash3.hash32x86 methods and IncrementalHash32x86 to
fix sign extension error in hash32 methods.
- Fix: Allow repeat calls to MurmurHash3.IncrementalHash32.end() to
generate the same value.
- Add: Add RandomAccessFile digest methods #31.
- Add: Add Path APIs to org.apache.commons.codec.digest.DigestUtils
similar to File APIs.
- Add: Add SHA-512/224 and SHA-512/256 to DigestUtils for Java 9 and up.
- Add: Add missing note in javadoc when sign extension error is present #34.
- Fix: Reliance on default encoding in MurmurHash2 and MurmurHash3.
- Update: Don't reload standard Charsets in org.apache.commons.codec.Charsets.
- Update: Deprecate Charset constants in org.apache.commons.codec.Charsets
in favor of java.nio.charset.StandardCharsets.
* Release 1.13 - 2019-07-20
- Fix: ColognePhonetic handles x incorrectly.
- Fix: ColognePhonetic does not treat the letter H correctly.
- Fix: Reject any decode request for a value that is impossible to
encode to for Base32/Base64 rather than blindly decoding.
- Add: MurmurHash2 for 32-bit or 64-bit value.
- Add: MurmurHash3 for 32-bit or 128-bit value.
- Update: Broken direct java.nio.ByteBuffer support in
org.apache.commons.codec.binary.Hex.
* Release 1.12 - 2019-02-04
- Fix: B64 salt generator: Random -> ThreadLocalRandom.
- Fix: Wrong value calculated by Cologne Phonetic if a special character
is placed between equal letters.
- Update: Update from Java 6 to Java 7.
- Add: Add Percent-Encoding Codec (described in RFC3986 and RFC7578).
- Fix: ColognePhoneticTest.testIsEncodeEquals missing assertions.
- Add: Add SHA-3 methods in DigestUtils.
- apache-commons-collections
-
- Do not use a dummy pom that only declares dependencies for the
testframework artifact
- Clean up the spec file
- apache-commons-daemon
-
- Update to 1.3.2:
* Fixes:
- Procrun. Remove noisy INFO log message that triggered logging
once per minute while the service was running.
- Fix typos in Javadoc and comments.
- Procrun. The DependsOn parameter is no longer ignored when
updating the service configuration.
- Fix crash and provide an error level log message when the
user attempts to start the service without configuring a
JVM and none is available via the registry.
* Updates:
- Bump actions/cache from 3.0.3 to 3.0.8.
- Bump actions/checkout from 3 to 3.0.2.
- Bump commons-parent from 53 to 54.
- Bump spotbugs-maven-plugin from 4.6.0.0 to 4.7.2.0.
- Bump jacoco-maven-plugin from 0.8.7 to 0.8.8.
- Bump japicmp-maven-plugin from 0.15.4 to 0.16.0.
- Bump JUnit 4 to 5 vintage.
* Remove apache-commons-daemon-riscv64.patch already upstream
- Build with source/target levels 8
- Define %%make_build for systems where it is not defined in
rpm macros
- Update to 1.2.4
* Procrun. Ensure that log messages written to stdout and stderr
are not lost during start-up.
* Procrun. Correct a regression introduced in 1.2.3. Enable the
service to start if the Options value is not present in the
registry.
* jsvc. Don't fail if the CAP_DAC_READ_SEARCH capability is not
available. Fall back to using argv[0] rather than
/proc/self/exe to determine the path for the current binary.
* Improved JRE/JDK detection to support increased range of both
JVM versions and vendors
- Update to 1.2.3
* Fix: Procrun. Correct multiple issues related to enabling a
service to interact with the desktop. Provide a better error
message if this option is used with an invalid user, install
the service with the option enabled if requested and correctly
save the setting if it is enabled in the GUI.
* Fix: jsvc. Update the list of paths searched for libjvm.so to
include the path used by OpenJDK 11.
* Add: Procrun. Add additional debug logging for Java start mode.
* Fix: jsvc. Remove incorrect definition 'supported_os' which
defined in psupport.m4 file to fix jsvc build error on s390,
arm, aarch64, mipsel and mips.
* Add: More debug logging in prunsrv.c and javajni.c.
* Add: Update arguments.c to support Java 11 --enable-preview.
* Add: jsvc and Procrun. Add support for Java native memory tracking.
* Add: Procrun. Add a new command, print, that outputs the command to
(re-)configure the service with the current settings. This is
intended to be used to save settings such as before an upgrade.
- Rebase apache-commons-daemon-riscv64.patch
- Remove apache-commons-daemon-s390x.patch fixed upstream
- Generate ant build file and customize it in order to be able to
build this ring package without cycles. Ring packages cannot be
built using maven.
- Modified patches:
* apache-commons-daemon-JAVA_OS.patch
* apache-commons-daemon-riscv64.patch
* apache-commons-daemon-s390x.patch
+ Do not patch configure file itself, since we generate it
during the build
- Update to 1.2.2
* Release 1.2.2 - 2019-10-04
- Fix: Procrun. Correct a regression in the fix for DAEMON-401
that prevented the service from starting unless support for the
universal C runtime had been installed.
- Update: Update Commons-Parent to version 49.
* Release 1.2.1 - 2019-09-09
- Fix: jsvc. Correct debug log message that reports change in umask.
- Fix: Procrun. Correct a regression in the previous fix for this
issue that caused 32-bit services to crash on start-up. Fixes DAEMON-401.
- Fix: Procrun. Correct a regression in the fix for DAEMON-391
that caused the GUI to mix-up the WARN and INFO logging levels.
* Release 1.2.0 - 2019-07-02
- Fix: Procrun. Only set the global shutdown event if the event is created.
- Fix: Unable to build with Java 9 using ant; dropped Ant build files.
- Fix: Procrun. prunsrv stopping with error due to hard-coded timeout.
- Fix: Update config.guess and config.sub.
- Fix: Jsvc. Set the sun.java.command system property when starting via jsvc
so that tools like jconsole show something meaningful for the process name.
- Fix: Procrun. Correct the level name used in the GUI for WARN so that
changes made via the GUI are recognised. Order the log levels in the
drop-down from ERROR to DEBUG.
- Fix: Procrun. Correct reversed code comments for JRE and JDK locations
in the registry.
- Fix: Procrun. Fix a bug that meant a value provided for LibraryPath
replaced the value of the PATH environment variable rather than prepended to it.
- Fix: Procrun. Ensure that the java.library.path environment variable is
correctly configured when running on a JRE that depends on the Universal CRT.
- Add: Procrun. Log the error code returned if JVM creation fails to aid debugging.
- Fix: Procrun. Ensure that environment variables set via prunsrv are visible
to native libraries that depend on the Universal CRT.
- Fix: Procrun. Remove the code that removed quotes from configured Java and
Java 9 Options.
- Add: Procrun. Add an option to configure the service to use the 'Automatic
(Delayed Start)' startup mode.
- Add: Procrun. When running in jre mode, if the standard Java registry
entries for JavaHome and RuntimeLib are not present, attempt to use the
Procrun JavaHome key to find the runtime library.
- Add: jsvc. Include the full path to the jsvc executable in the debug log.
* Release 1.1.0 - 2017-11-15
- Update: Update the minimum Java requirement from version 5 to 6.
- Update: Add AArch64 support to src/native/unix/support/apsupport.m4.
- Fix: Remove calls to explicit garbage collection during daemon start and stop.
- Fix: Update config.guess and config.sub to add support, amongst others,
for the 64-bit PowerPC Little-Endian architecture.
- Update: Update Commons-Parent to version 41.
- Fix: Update apsupport.m4 add support for 64-bit PowerPC architectures.
- Fix: Suppress spurious "The data area passed to a system call is too small"
error message in the log when Procrun fails to stop the service.
- Fix: Enable jsvc to start when running on Java 9.
- Fix: Fix a resource leak opening the JVM configuration file.
_ Fix: Improve the jsvc code that restarts the process if the JVM crashes so
that if the JVM crashes after a signal has been received to shut down jsvc
does not attempt to restart the JVM.
- Fix: Ensure that the child process is started with the correct umask.
- Fix: Correct conflicting information for the behaviour of Procrun when
using jvm mode.
- Fix: Ensure that, when using Procrun in java or exe mode, the service
process waits for the stop process to complete before starting clean-up
to avoid a crash in the stop process.
- Fix: Enable jsvc to find the jvm when running on AIX.
- Fix: Ensure that Procrun treats JVM crashes as service failures so the
recovery options will apply.
- Fix: Ensure that the //MQ command closes the prunmgr process even if
the configuration dialog is open when the //MQ command is used.
- Fix: Add support for Java 9 command line arguments to jsvc.
- Add: Add a restarts options to jsvc to control the number of permitted
restarts after a system crash.
- Remove: Remove support for building Procrun for the Itanium platform.
- Fix: Fix race conditions in PID file handling in jsvc.
- Remove patches:
* apache-commons-daemon-ppc64.patch
* apache-commons-daemon-aarch64.patch
- Refresh patches:
* apache-commons-daemon-riscv64.patch
* apache-commons-daemon-JAVA_OS.patch
- Update project keyring.
- apache-commons-digester
-
- Build with java source and target levels 8
- Fixed SPEC file: Replaced broken URL.
- apache-commons-el
-
- Build with java source and target levels 8
- apache-commons-fileupload
-
- Upgrade to upstream version 1.5
* New features:
+ Add a configurable limit (disabled by default) for the number
of files to upload per request (bsc#1208513, CVE-2023-24998).
The new configuration option (FileUploadBase#setFileCountMax)
is not enabled by default and must be explicitly configured.
* Fixed Bugs:
+ FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
use FileUtils.moveFile internally, preventing an existing file
as the target.
+ Improve parsing speed.
* Changes:
+ Bump Commons IO to 2.11.0
+ FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
code coverage.
+ Bump JUnit to 4.13.2
- Build with java source and target levels 8
- apache-commons-jexl
-
- Build with java source and target levels 8
- apache-commons-lang3
-
- Remove the junit bom dependency for now as it breaks the build of
other packages like log4j.
* Add apache-commons-lang3-junit-bom.patch
- Fix component version in default.properties to 3.12
- Updated download URL.
- Update to 3.12.0:
- New features:
* Add BooleanUtils.booleanValues().
* Add BooleanUtils.primitiveValues().
* Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
* Add StopWatch.getStopTime().
* More test coverage for CharSequenceUtils.
* Add fluent-style ArraySorter.
* Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
* Add FailableShortSupplier, handy for JDBC APIs.
* Add JavaVersion.JAVA_17.
* Add missing boolean[] join method.
* Add StringUtils.substringBefore(String, int).
* Add Range.INTEGER.
* Add DurationUtils.
* Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
* Add and use true and false String constants.
* Add and use ObjectUtils.requireNonEmpty().
- Fixed Bugs:
* Correct implementation of RandomUtils.nextLong(long, long).
* Restore handling of collections for non-JSON ToStringStyle.
* ContextedException Javadoc add missing semicolon.
* Resolve JUnit pioneer transitive dependencies using JUnit BOM.
* NumberUtilsTest - incorrect types in min/max tests.
* Improve StringUtils.stripAccents conversion of remaining accents.
* StringUtils.countMatches - clarify Javadoc.
* Remove redundant argument from substring call.
* BigDecimal is created when you pass it the min and max values.
* ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
* ArrayUtils contains() and indexOf() fail to handle Float.NaN.
* Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type>).
* TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
* testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
* Fix Javadoc for SystemUtils.isJavaVersionAtMost().
* Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
* Fix formatting of isAnyBlank() and isAnyEmpty().
* TypeUtils. containsTypeVariables does not support GenericArrayType.
* Javadoc of some methods incorrectly refers to another method.
* Refine StringUtils.lastIndexOfIgnoreCase.
* Refine StringUtils.abbreviate.
* Refine StringUtils.isNumericSpace.
* Refine StringUtils.deleteWhitespace.
* Correction in Javadoc of some methods.
* Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
* Correct markup in Javadoc for unbalanced braces.
* MethodUtils.invokeMethod NullPointerException in case of null in args list.
* Fix 2 digit week year formatting.
* Fix broken Javadoc links to commons-text.
* Add and use ThreadUtils.sleep(Duration).
* Add and use ThreadUtils.join(Thread, Duration).
* Add ObjectUtils.wait(Duration).
- Changes:
* ArrayUtils.toPrimitive(Object) does not support boolean and other types.
* Enable Dependabot.
* Bump junit-jupiter from 5.6.2 to 5.7.0.
* Bump spotbugs from 4.1.2 to 4.2.1.
* Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
* Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
* Bump junit-pioneer from 0.6.0 to 1.1.0.
* Bump checkstyle from 8.34 to 8.40.
* Bump actions/checkout from v2.3.1 to v2.3.4.
* Bump actions/setup-java from v1.4.0 to v1.4.2.
* Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
* Update maven-surefire-plugin 2.22.2 -> 3.0.0-M5.
* Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
* Bump jmh.version from 1.21 to 1.27.
* Update commons.japicmp.version 0.14.3 -> 0.15.2.
* Processor.java: check enum equality with == instead of .equals() method.
* Bump junit-pioneer from 1.1.0 to 1.3.0.
* Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
* Bump actions/cache from v2 to v2.1.4.
* Bump junit-bom from 5.7.0 to 5.7.1.
* Minor Improvements.
* Minor Improvement: Add final variable.try to make the code read-only.
* Minor Improvement: Remove redundant initializer.
* Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
- New features:
* Add ArrayUtils.isSameLength() to compare more array types.
* Added the Locks class as a convenient possibility to deal with locked objects.
* Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
* Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
* Add JavaVersion enum constants for Java 14 and 15.
* Add JavaVersion enum constants for Java 16.
* Use Java 8 lambdas and Map operations.
* Change removeLastFieldSeparator to use endsWith.
* Change a Pattern to a static final field, for not letting it compile each time the function invoked.
* Add ImmutablePair factory methods left() and right().
* Add ObjectUtils.toString(Object, Supplier<String>).
* Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
* Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
- Fixed Bugs:
* Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
* Refine Javadoc.
* Fix typos
* Ignored exception `ignored`, should not be called so.
* StringUtils.replaceEachRepeatedly gives IllegalStateException.
* [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
* Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
* Add allNull() and anyNull() methods to ObjectUtils.
- Changes:
* Refine test output for FastDateParserTest
* CharSequenceUtils.lastIndexOf : remake it
* remove encoding and docEncoding and use inherited values from commons-parent
* Simplify null checks in Pair.hashCode() using Objects.hashCode().
* Simplify null checks in Triple.hashCode() using Objects.hashCode().
* Simplify some if statements in StringUtils.
* Simplify a null check in the private replaceEach() method of StringUtils.
* Replace some usages of the ternary operator with calls to Math.max() and Math.min().
* (Javadoc) Fix return tag for throwableOf*() methods.
* CharSequenceUtils.regionMatches is wrong dealing with Georgian.
* Optimize ArrayUtils::isArrayIndexValid method.
* Use List.sort instead of Collection.sort.
* Use StandardCharsets.UTF_8.
* Use Collections.singletonList insteadof Arrays.asList when there be only one element.
* Change array style from `int a[]` to `int[] a`.
* Change from addAll to constructors for some List.
* Simplify if as some conditions are covered by others.
* Fixed Javadocs for setTestRecursive().
* ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
* Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
* org.apache.commons:commons-parent 50 -> 51.
* org.junit-pioneer:junit-pioneer 0.5.4 -> 0.6.0.
* org.junit.jupiter:junit-jupiter 5.6.0 -> 5.6.2.
* com.github.spotbugs:spotbugs 4.0.0 -> 4.0.6.
* com.puppycrawl.tools:checkstyle 8.29 -> 8.34.
* commons.surefire.version 3.0.0-M4 -> 3.0.0-M5..
- From 3.10 Update:
- New features:
* Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
* Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
* Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
* Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
* Add ArrayUtils.addFirst() methods.
* Add Range.fit(T) to fit a value into a range.
* Added Functions.as*, and tests thereof, as suggested by Peter Verhas
* Add getters for lhs and rhs objects in DiffResult.
* Generify builder classes Diffable, DiffBuilder, and DiffResult.
* Add ClassLoaderUtils with toString() implementations.
* Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
* Add org.apache.commons.lang3.time.Calendars.
* Add EnumUtils getEnum() methods with default values.
* Added indexesOf methods and simplified removeAllOccurences.
* Add support of lambda value evaluation for defaulting methods.
* Add factory methods to Pair classes with Map.Entry input.
* Add StopWatch convenience APIs to format times and create a simple instance.
* Allow a StopWatch to carry an optional message.
* Add ComparableUtils.
* Add org.apache.commons.lang3.SystemUtils.getUserName().
* Add ObjectToStringComparator.
* Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
* Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
* ObjectUtils: Get first non-null supplier value.
* Added the Streams class, and Functions.stream() as an accessor thereof.
- Fixed Bugs:
* Make test more stable by wrapping assertions in hashset.
* Generate Javadoc jar on build.
* Trivial: year of release for 3.9 says 2018, should be 2019.
* Use synchronize on a set created with Collections.synchronizedSet before iterating.
* StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
* StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
* StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
* Corrected usage examples in Javadocs.
* StringUtils abbreviate returns String of length greater than maxWidth.
* Test may fail due to a different order of fields returned by reflection api.
* Sort fields in ReflectionToStringBuilder for deterministic order.
* MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
* MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
- Changes:
* Remove redundant if statements in join methods.
* commons.japicmp.version 0.13.1 -> 0.14.1.
* junit-jupiter 5.5.0 -> 5.5.1.
* junit-jupiter 5.5.1 -> 5.5.2.
* Improve Javadoc based on the discussion of the GitHub PR.
* maven-checkstyle-plugin 3.0.0 -> 3.1.0.
* Update documentation related to the issue LANG-696.
* AnnotationUtils little cleanup.
* Update test dependency: org.easymock:easymock 4.0.2 -> 4.1.
* Update test dependency: org.hamcrest:hamcrest 2.1 -> 2.2.
* Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -> 0.4.2.
* Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -> 8.27.
* Update POM parent: org.apache.commons:commons-parent 48 -> 50.
* BooleanUtils Javadoc.
* Functions Javadoc.
* org.easymock:easymock 4.1 -> 4.2.
* org.junit-pioneer:junit-pioneer 0.4.2 -> 0.5.4.
* org.junit.jupiter:junit-jupiter 5.5.2 -> 5.6.0.
* Use Javadoc {@code} instead of pre tags.
* ExceptionUtilsTest to 100%.
* Reuse own code in Functions.java.
* Avoid unnecessary allocation in StringUtils.wrapIfMissing.
* Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
* Add 1 and 0 in toBooleanObject(final String str).
* Remove an redundant argument check in NumberUtils.
* Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).
- Fixed SPEC file: Replaced broken URL
- Update to 3.9
* Requires jdk >= 1.8
* Fixed issues with java 12
* Add more SystemUtils.IS_JAVA_XX variants
* Adding the Functions class
* Add @FunctionalInterface to ThreadPredicate and ThreadGroupPredicate
* Add isEmpty method to ObjectUtils
* null-safe StringUtils.valueOf(char[]) to delegate to
String.valueOf(char[]).
* Add API org.apache.commons.lang3.SystemUtils.isJavaVersionAtMost(JavaVersion)
* Consolidate the StringUtils equals and equalsIgnoreCase
- Add OSGi manifest
- apache-commons-logging
-
- Do not build against the log4j12 packages, use the new reload4j
- Disable tests everywhere, not only for arm6
- Added patch
* no-tests.patch
+ ignore failing tests for arm6
- apache2
-
- Security update:
* fix CVE-2023-27522 [bsc#1209049], mod_proxy_uwsgi HTTP response splitting
+ Added patch apache2-CVE-2023-27522.patch
* fix CVE-2023-25690 [bsc#1209047], HTTP request splitting with mod_rewrite and mod_proxy
+ Added patch apache2-CVE-2023-25690.patch
- Rename patches to use proper naming:
* Rename patch:
- Removed bsc1207327-fix-mod_proxy-handling-long-urls.patch
- Added apache2-bsc1207327-fix-mod_proxy-handling-long-urls.patch
- [bsc#1208708] fix passing health check does not recover worker
from its error state:
* Added: apache2-bsc1208708-fix-passing-health-check-recover-worker-from-error-state.patch
- [bsc#1207327] fix mod_proxy handling of very long urls
+ bsc1207327-fix-mod_proxy-handling-long-urls.patch
- autofs
-
- autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
Fix off-by-one error in recursive map handling. (bsc#1209653)
- autoyast2
-
- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.3.106
- Properly install the selected products, do not lose them after
resetting the package manager internally (bsc#1202234)
- 4.3.105
- aws-cli
-
- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Update to version 1.27.89
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.78
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.71
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.66
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.60
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.58
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.52
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.52/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.41
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.41/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.26
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.26/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.21
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.21/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.8
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.8/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.27.2
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.27.2/CHANGELOG.rst
- Relax upper version constraint for python-colorama in
BuildRequires and Requires to 0.5.0 (bsc#1204917)
- Update Requires in spec file from setup.py
- Update in SLE-15 (bsc#1204537, jsc#PED-2333)
- Update to version 1.26.0
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.26.0/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.91
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.91/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.85
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.85/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.76
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.76/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.72
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.72/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.64
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.64/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.60
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.60/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.55
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.55/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.45
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.45/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.37
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.37/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.20
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.20/CHANGELOG.rst
- Update Requires in spec file from setup.py
- Update to version 1.25.2
+ For detailed changes see
https://github.com/aws/aws-cli/blob/1.25.2/CHANGELOG.rst
- Update Requires in spec file from setup.py
- bind
-
- Security Fix:
* The overmem cleaning process has been improved, to prevent the
cache from significantly exceeding the configured
max-cache-size limit.
[bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]
- binutils
-
- Add binutils-disable-dt-relr.sh for an compatibility problem
caused by binutils-revert-rela.diff in SLE codestreams.
Needed for update of glibc as that would otherwise pick up
the broken relative relocs support. [bsc#1213282, PED-1435]
- blog
-
- Add patch blog.dif
* Fix big endian cast problems to be able to read commands
and ansers (blogctl) as well as passphrases (blogd)
- ca-certificates-mozilla
-
- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
Added:
- Atos TrustedRoot Root CA ECC G2 2020
- Atos TrustedRoot Root CA ECC TLS 2021
- Atos TrustedRoot Root CA RSA G2 2020
- Atos TrustedRoot Root CA RSA TLS 2021
- BJCA Global Root CA1
- BJCA Global Root CA2
- LAWtrust Root CA2 (4096)
- Sectigo Public Email Protection Root E46
- Sectigo Public Email Protection Root R46
- Sectigo Public Server Authentication Root E46
- Sectigo Public Server Authentication Root R46
- SSL.com Client ECC Root CA 2022
- SSL.com Client RSA Root CA 2022
- SSL.com TLS ECC Root CA 2022
- SSL.com TLS RSA Root CA 2022
Removed CAs:
- Chambers of Commerce Root
- E-Tugra Certification Authority
- E-Tugra Global Root CA ECC v3
- E-Tugra Global Root CA RSA v3
- Hongkong Post Root CA 1
- cal10n
-
- Fetch sources using source service from ch.qos git
- Upgrade to the 10th commit after 0.8.1 calling it 0.8.1.10
- Redo completely the packaging including the possibility to run
tests if --with tests is specified
- Add the cal10n-ant-task to built artifacts
- Removed patch:
* cal10n-0.7.7-sourcetarget.patch
+ changes factored into the build system
- Update to 0.8.1:
* This release adds JSR-269 support. In other words, verification
of bundles can be performed at compilation time. See the related
documentation for more details.
* Fix issue with Eclipse not finding existing resources. With
release 0.8.1, Eclipse will find bundles located under
"src/main/resources" but still fail to find bundles located
under "src/test/resources/".
* When reading in bundles, the verify method in MessageKeyVerifier
now uses the locale passed as parameter instead of always
Locale.FR. This bug was reported by Dale Wijnand who also
provided the releavant patch.
- Update build.xml-0.7.7.tar.xz to build.xml-0.8.1.tar.xz with
references to version 0.8.1 to build correctly versioned jar
files.
- cglib
-
- Remove links between artifacts and their parent since we are
not building with maven
- Don't inject <optional>true</optional> in cglib pom, as 3.3.0
already provides that option and it makes the POM xml incorrect.
- Update to upstream 3.3.0
* emits code compatible with java 1.8, so we can call static
interface methods.
* minor fix for allowing a fastclass to call static interface
methods.
* update to asm 7.1
* make ant dependency optional
* add Automatic Module Names
* Expose non-bridge methods more frequently.
* Drop support for Java6. (It may continue to work, but continuous
integration tests will no longer validate it does.)
* Fix #115: Release resources eagerly.
* Deprecated TinyBitSet.
* Add workarounds for changes coming from Jigsaw.
* Fix #89 / #90 (generated incorrect code for bridge methods sometimes)
- Update project url to new github site (old one redirects there)
- cloud-init
-
- Update cloud-init-write-routes.patch (bsc#1212879)
+ Add necessary import statement
- Enable flake8 linting, fix up patches
+ cloud-init-cve-2023-1786-redact-instance-data-json-main.patch
+ cloud-init-power-rhel-only.patch
+ cloud-init-write-routes.patch
+ datasourceLocalDisk.patch
- Add cloud-init-power-rhel-only.patch (bsc#1210273)
+ Config module cc_refresh_rmc_and_interface is implemented such that
it will only work on RH distros. Set the module availability accordingly.
- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
+ Add hidesensitivedata
+ Add cloud-init-cve-2023-1786-redact-inst-data.patch
+ Do not expose sensitive data gathered from the CSP
- Update to version 23.1
+ Remove patches included upstream:
- cloud-init-btrfs-queue-resize.patch
- cloud-init-micro-is-suse.patch
- cloud-init-suse-afternm.patch
- cloud-init-prefer-nm.patch
- cloud-init-transact-up.patch
+ Forward port
- cloud-init-write-routes.patch
+ Added
- cloud-init-fix-ca-test.patch
+ Support transactional-updates for SUSE based distros (#1997)
[Robert Schweikert]
+ Set ownership for new folders in Write Files Module (#1980)
[Jack] (LP: #1990513)
+ add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
+ lxd: Retry if the server isn't ready (#2025)
+ test: switch pycloudlib source to pypi (#2024)
+ test: Fix integration test deprecation message (#2023)
+ Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
+ sources/azure: refactor imds handler into own module (#1977)
[Chris Patterson]
+ docs: deprecation generation support [1/2] (#2013)
+ add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
+ cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
+ Fix minor schema validation regression and fixup typing (#2017)
+ doc: Reword user data debug section (#2019)
+ Overhaul/rewrite of certificate handling as follows: (#1962)
[dermotbradley] (LP: #1931174)
+ disk_setup: use byte string when purging the partition table (#2012)
[Stefan Prietl]
+ cli: schema also validate vendordata*.
+ ci: sort and add checks for cla signers file [Stefan Prietl]
+ Add "ederst" as contributor (#2010) [Stefan Prietl]
+ readme: add reference to packages dir (#2001)
+ docs: update downstream package list (#2002)
+ docs: add google search verification (#2000) [s-makin]
+ docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
+ Fix OpenStack datasource detection on bare metal (#1923)
[Alexander Birkner] (LP: #1815990)
+ docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
+ schema: fix gpt labels, use type string for GUID (#1995)
+ cc_disk_setup: code cleanup (#1996)
+ netplan: keep custom strict perms when 50-cloud-init.yaml exists
+ cloud-id: better handling of change in datasource files
[d1r3ct0r] (LP: #1998998)
+ tests: Remove restart check from test
+ Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
+ Warn on empty network key (#1990)
+ Fix Vultr cloud_interfaces usage (#1986) [eb3095]
+ cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
+ docs: Clarify networking docs (#1987)
+ lint: remove httpretty (#1985) [sxt1001]
+ cc_set_passwords: Prevent traceback when restarting ssh (#1981)
+ tests: fix lp1912844 (#1978)
+ tests: Skip ansible test on bionic (#1984)
+ Wait for NetworkManager (#1983) [Robert Schweikert]
+ docs: minor polishing (#1979) [s-makin]
+ CI: migrate integration-test to GH actions (#1969)
+ Fix permission of SSH host keys (#1971) [Ron Gebauer]
+ Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
+ doc: fix path in net_convert command (#1975)
+ docs: update net_convert docs (#1974)
+ doc: fix dead link
+ cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
(#1967) [Emanuele Giuseppe Esposito]
+ distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
[Mark Mielke]
+ integration tests: add IBM VPC support (SC-1352) (#1915)
+ machine-id: set to uninitialized to trigger regeneration on clones
(LP: #1999680)
+ sources/azure: retry on connection error when fetching metdata (#1968)
[Chris Patterson]
+ Ensure ssh state accurately obtained (#1966)
+ bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
+ doc: fix `config formats` link in cloudsigma.rst (#1960)
+ Fix wrong subp syntax in cc_set_passwords.py (#1961)
+ docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
+ ci: switch unittests to gh actions (#1956)
+ Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
+ sources/azure: minor refactor for metadata source detection logic
(#1936) [Chris Patterson]
+ add "CalvoM" as contributor (#1955) [d1r3ct0r]
+ ci: doc to gh actions (#1951)
+ lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
+ docs: Diataxis overhaul (#1933) [s-makin]
+ vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
+ cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
(LP: #1998526)
+ Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
+ network/netplan: add gateways as on-link when necessary (#1931)
[Louis Sautier] (LP: #2000596)
+ tests: test_lxd assert features.networks.zones when present (#1939)
+ Use btrfs enquque when available (#1926) [Robert Schweikert]
+ sources/azure: drop description for report_failure_to_fabric() (#1934)
[Chris Patterson]
+ cc_disk_setup.py: fix MBR single partition creation (#1932)
[dermotbradley] (LP: #1851438)
+ Fix typo with package_update/package_upgrade (#1927) [eb3095]
+ sources/azure: fix device driver matching for net config (#1914)
[Chris Patterson]
+ BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
+ test: mock dns calls (#1922)
+ pycloudlib: add lunar support for integration tests (#1928)
+ nocloud: add support for dmi variable expansion for seedfrom URL
(LP: #1994980)
+ tools: read-version drop extra call to git describe --long
+ doc: improve cc_write_files doc (#1916)
+ read-version: When insufficient tags, use cloudinit.version.get_version
+ mounts: document weird prefix in schema (#1913)
+ add utility function test cases (#1910) [sxt1001]
+ test: mock file deletion in dhcp tests (#1911)
+ Ensure network ready before cloud-init service runs on RHEL (#1893)
(LP: #1998655)
+ docs: add copy button to code blocks (#1890) [s-makin]
+ netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
+ azure: fix support for systems without az command installed (#1908)
+ Networking Clarification (#1892)
+ Fix the distro.osfamily output problem in the openEuler system. (#1895)
[sxt1001] (LP: #1999042)
+ pycloudlib: bump commit dropping azure api smoke test
+ net: netplan config root read-only as wifi config can contain creds
+ autoinstall: clarify docs for users
+ sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
+ Add back gateway4/6 deprecation to docs (#1898)
+ networkd: Add support for multiple [Route] sections (#1868)
[Nigel Kukard]
+ doc: add qemu tutorial (#1863)
+ lint: fix tip-flake8 and tip-mypy (#1896)
+ Add support for setting uid when creating users on FreeBSD (#1888)
[einsibjarni]
+ Fix exception in BSD networking code-path (#1894) [Mina Galić]
+ Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
+ FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
+ feat: add support aliyun metadata security harden mode (#1865)
[Manasseh Zhou]
+ docs: uprate analyze to performance page [s-makin]
+ test: fix lxd preseed managed network config (#1881)
+ Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
+ Make 3.12 failures not fail the build (#1873)
+ Docs: adding relative links [s-makin]
+ Update read-version
+ Fix setup.py to align with PEP 440 versioning replacing trailing
+ travis: promote 3.11-dev to 3.11 (#1866)
+ test_cloud_sigma: delete useless test (#1828) [sxt1001]
+ Add "nkukard" as contributor (#1864) [Nigel Kukard]
+ tests: ds-id mocks for vmware-rpctool as utility may not exist in env
+ doc: add how to render new module doc (#1855)
+ doc: improve module creation explanation (#1851)
+ Add Support for IPv6 metadata to OpenStack (#1805)
[Marvin Vogt] (LP: #1906849)
+ add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
+ network: Deprecate gateway{4,6} keys in network config v2 (#1794)
(LP: #1992512)
+ VMware: Move Guest Customization transport from OVF to VMware (#1573)
[PengpengSun]
+ doc: home page links added (#1852) [s-makin]
From 22.4.2
+ status: handle ds not defined in status.json (#1876) (LP: #1997559)
From 22.4.1
+ net: skip duplicate mac check for netvsc nic and its VF (#1853)
[Anh Vo] (LP: #1844191)
+ ChangeLog: whitespace cleanup (#1850)
+ changelog: capture 22.3.1-4 releases
- Add cloud-init-transact-up.patch to support transactional-updates
- Add cloud-init-prefer-nm.patch
+ Prefer NetworkManager of sysconfig when available
- Update to version 22.4
+ Remove patches included upstream:
- cloud-init-vmware-test.patch
- cloud-init-sysctl-not-in-bin.patch
+ Forward port:
- cloud-init-write-routes.patch
- cloud-init-break-resolv-symlink.patch
- cloud-init-sysconf-path.patch
- cloud-init-no-tempnet-oci.patch
+ Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
+ Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
+ Add cloud-init-suse-afternm.patch
+ test: fix pro integration test [Alberto Contreras]
+ cc_disk_setup: pass options in correct order to utils (#1829)
[dermotbradley]
+ tests: text_lxd basic_preseed verify_clean_log (#1826)
+ docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
+ tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
[Alberto Contreras]
+ tests: test_lxd assert features.storage.buckets when present (#1827)
+ tests: replace missed ansible install-method with underscore (#1825)
+ tests: replace ansible install-method with underscore
+ ansible: standardize schema keys
+ ci: run json tool on 22.04 rather than 20.04 (#1823)
+ Stop using devices endpoint for LXD network config (#1819)
+ apport: address new curtin log and config locations (#1812)
+ cc_grub: reword docs for clarity (#1818)
+ tests: Fix preseed test (#1820)
+ Auto-format schema (#1810)
+ Ansible Control Module (#1778)
+ Fix last reported event possibly not being sent (#1796) (LP: #1993836)
+ tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
+ udevadm settle should handle non-udev system gracefully (#1806)
[dermotbradley]
+ add mariner support (#1780) [Minghe Ren]
+ Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
+ adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
+ Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
+ Update .github-cla-signers (#1811) [Guillaume Gay]
+ alpine.py: Add Alpine-specific manage_service function and update tests
(#1804) [dermotbradley]
+ test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
+ add NWCS datasource (#1793) [shell-skrimp]
+ Adding myself as CLA signer (#1799) [s-makin]
+ apport: fix some data collection failures due to symlinks (#1797)
[Dan Bungert]
+ read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
+ lxd: add support for lxd preseed config(#1789)
+ Enable hotplug for LXD datasource (#1787)
+ cli: collect logs and apport subiquity support
+ add support for Container-Optimized OS (#1748) [vteratipally]
+ test: temporarily disable failing integration test (#1792)
+ Fix LXD/nocloud detection on lxd vm tests (#1791)
+ util: Implement __str__ and __iter__ for Version (#1790)
+ cc_ua: consume ua json api for enable commands [Alberto Contreras]
+ Add clarity to cc_final_message docs (#1788)
+ cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
+ make Makefile make agnostic (#1786) [Mina Galić]
+ Remove hardcoding and unnecessary overrides in Makefile (#1783)
[Joseph Mingrone]
+ Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
+ Temporarily remove broken test (#1781)
+ Create reference documentation for base config
+ cc_ansible: add support for galaxy install (#1736)
+ distros/manage_services: add support to disable service (#1772)
[Mina Galić] (LP: #1991024)
+ OpenBSD: remove pkg_cmd_environ function (#1773)
[Mina Galić] (LP: 1991567)
+ docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
+ tests: Use LXD metadata to determine NoCloud status (#1776)
+ analyze: use init-local as start of boot record (#1767) [Chris Patterson]
+ docs: use opensuse for distro name in package doc (#1771)
+ doc: clarify packages as dev only (#1769) [Alberto Contreras]
+ Distro manage service: Improve BSD support (#1758)
[Mina Galić] (LP: #1990070)
+ testing: check logs for critical errors (#1765) [Chris Patterson]
+ cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
+ doc: Add configuration explanation (SC-1169)
+ Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
+ style: prefer absolute imports over relative imports [Mina Galić]
+ tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
+ cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
+ apt configure: sources write/append mode (#1738)
[Fabian Lichtenegger-Lukas]
+ networkd: Add test and improve typing. (#1747) [Alberto Contreras]
+ pycloudlib: bump commit for gce cpu architecture support (#1750)
+ commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
+ testing: workaround LXD vendor data (#1740)
+ support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
+ tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
+ cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
[Alberto Contreras]
+ Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
+ testing: focal lxd datasource discovery (#1734)
+ cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
+ docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
+ net: set dhclient lease and pid files (#1715)
+ cli: status machine-readable output --format yaml/json (#1663)
(LP: #1883122)
+ tests: Simplify does_not_raise (#1731) [Alberto Contreras]
+ Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
+ testing: LXD datasource now supported on Focal (#1732)
+ Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
+ sources/azure: ensure instance id is always correct (#1727)
[Chris Patterson]
+ azure: define new attribute for pre-22.3 pickles (#1725)
+ doc: main page Diátaxis rewording (SC-967) (#1701)
+ ubuntu advantage: improved idempotency, enable list is now strict
+ [Fabian Lichtenegger-Lukas]
+ test: bump pycloudlib (#1724) [Alberto Contreras]
+ cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
(#1639) [Emanuele Giuseppe Esposito]
+ lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
+ Update docs according to ad8f406a (#1719)
+ testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
+ doc: Fix rtd builds. (#1718) [Alberto Contreras]
+ testing: fully mock noexec calls (#1717) [Alberto Contreras]
+ typing: Add types to cc_<module>.handle (#1700) [Alberto Contreras]
+ Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
+ config: enable bootstrapping pip in ansible (#1707)
+ Fix cc_chef typing issue (#1716)
+ Refactor instance json files to use Paths (SC-1238) (#1709)
+ tools: read-version check GITHUB_REF and git branch --show-current
(#1677)
+ net: Ensure a tmp with exec permissions for dhcp (#1690)
[Alberto Contreras] (LP: #1962343)
+ testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
+ Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
+ doc: add reporting suggestion to FAQ (SC-1236) (#1698)
From 22.3
+ sources: obj.pkl cache should be written anyime get_data is run (#1669)
+ schema: drop release number from version file (#1664)
+ pycloudlib: bump to quiet azure HTTP info logs (#1668)
+ test: fix wireguard integration tests (#1666)
+ Github is deprecating the 18.04 runner starting 12.1 (#1665)
+ integration tests: Ensure one setup for all tests (#1661)
+ tests: ansible test fixes (#1660)
+ Prevent concurrency issue in test_webhook_hander.py (#1658)
+ Workaround net_setup_link race with udev (#1655) (LP: #1983516)
+ test: drop erroneous lxd assertion, verify command succeeded (#1657)
+ Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
+ sources/azure: handle network unreachable errors for savable PPS (#1642)
[Chris Patterson]
+ Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
+ test: Collect integration test time by default (#1638)
+ test: Drop forced package install hack in lxd integration test (#1649)
+ schema: Resolve user-data if --system given (#1644)
[Alberto Contreras] (LP: #1983306)
+ test: use fake filesystem to avoid file removal (#1647)
[Alberto Contreras]
+ tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
+ config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
+ tests: can run without azure-cli, tests expect inactive ansible (#1643)
+ typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
+ testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
+ ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
+ schema: Enable deprecations in cc_update_etc_hosts (#1631)
[Alberto Contreras]
+ Add Ansible Config Module (#1579)
+ util: Support Idle process state in get_proc_ppid() (#1637)
+ schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
+ schema: Enable deprecations in cc_users_groups (#1627)
[Alberto Contreras]
+ util: Fix error path and parsing in get_proc_ppid()
+ main: avoid downloading full contents cmdline urls (#1606)
[Alberto Contreras] (LP: #1937319)
+ schema: Enable deprecations in cc_scripts_vendor (#1629)
[Alberto Contreras]
+ schema: Enable deprecations in cc_set_passwords (#1630)
[Alberto Contreras]
+ sources/azure: add experimental support for preprovisioned os disks
(#1622) [Chris Patterson]
+ Remove configobj a_to_u calls (#1632) [Stefano Rivera]
+ cc_debug: Drop this module (#1614) [Alberto Contreras]
+ schema: add aggregate descriptions in anyOf/oneOf (#1636)
+ testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
+ testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
+ testing: add support for pycloudlib's pro images (#1604)
[Alberto Contreras]
+ testing: migrate test_cc_set_passwords to pytest (#1615)
[Alberto Contreras]
+ network: add system_info network activator cloud.cfg overrides (#1619)
(LP: #1958377)
+ docs: Align git remotes with uss-tableflip setup (#1624)
[Alberto Contreras]
+ testing: cover active config module checks (#1609) [Alberto Contreras]
+ lxd: lvm avoid thinpool when kernel module absent
+ lxd: enable MTU configuration in cloud-init
+ doc: pin doc8 to last passing version
+ cc_set_passwords fixes (#1590)
+ Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
+ config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
+ config: define activate_by_schema_keys for p-r mods (#1611)
[Alberto Contreras]
+ clean: add param to remove /etc/machine-id for golden image creation
+ config: define `activate_by_schema_keys` for a-f mods (#1608)
[Alberto Contreras]
+ config: define activate_by_schema_keys for s mods (#1612)
[Alberto Contreras]
+ sources/azure: reorganize tests for network config (#1586)
+ [Chris Patterson]
+ config: Define activate_by_schema_keys for g-n mods (#1610)
[Alberto Contreras]
+ meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
+ sources/azure: don't set cfg["password"] for default user pw (#1592)
[Chris Patterson]
+ schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
+ docs: clarify user password purposes (#1593)
+ cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
+ archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
+ cc_ubuntu_autoinstall: support live-installer autoinstall config
+ clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
+ sources/azure: refactor chassis asset tag handling (#1574)
[Chris Patterson]
+ Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
+ testing: drop impish support (#1596) [Alberto Contreras]
+ black: fix missed formatting issue which landed in main (#1594)
+ bsd: Don't assume that root user is in root group (#1587)
+ docs: Fix comment typo regarding use of packages (#1582)
[Peter Mescalchin]
+ Update govc command in VMWare walkthrough (#1576) [manioo8]
+ Update .github-cla-signers (#1588) [Daniel Mullins]
+ Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
+ sources/azure: increase read-timeout to 60 seconds for wireserver
(#1571) [Chris Patterson]
+ Resource leak cleanup (#1556)
+ testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
+ Fix expire passwords for hashed passwords (#1577)
[Sadegh Hayeri] (LP: #1979065)
+ mounts: fix suggested_swapsize for > 64GB hosts (#1569) [Steven Stallion]
+ Update chpasswd schema to deprecate password parsing (#1517)
+ tox: Remove entries from default envlist (#1578) (LP: #1980854)
+ tests: add test for parsing static dns for existing devices (#1557)
[Jonas Konrad]
+ testing: port cc_ubuntu_advantage test to pytest (#1559)
[Alberto Contreras]
+ Schema deprecation handling (#1549) [Alberto Contreras]
+ Enable pytest to run in parallel (#1568)
+ sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
+ schema: Force stricter validation (#1547)
+ ubuntu advantage config: http_proxy, https_proxy (#1512)
[Fabian Lichtenegger-Lukas]
+ net: fix interface matching support (#1552) (LP: #1979877)
+ Fuzz testing jsonchema (#1499) [Alberto Contreras]
+ testing: Wait for changed boot-id in test_status.py (#1548)
+ CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
+ Typo fix (#1560) [Jaime Hablutzel]
+ tests: mock dns lookup that causes long timeouts (#1555)
+ tox: add unpinned env for do_format and check_format (#1554)
+ cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
+ Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
+ Update WebHookHandler to run as background thread (SC-456) (#1491)
(LP: #1910552)
+ testing: Don't run custom cloud dir test on Bionic (#1542)
+ bash completion: update schema command (#1543) (LP: #1979547)
+ CI: add non-blocking run against the linters tip versions (#1531)
[Paride Legovini]
+ Change groups within the users schema to support lists and strings
(#1545) [RedKrieg]
+ make it clear which username should go in the contributing doc (#1546)
+ Pin setuptools for Travis (SC-1136) (#1540)
+ Fix LXD datasource crawl when BOOT enabled (#1537)
+ testing: Fix wrong path in dual stack test (#1538)
+ cloud-config: honor cloud_dir setting (#1523)
[Alberto Contreras] (LP: #1976564)
+ Add python3-debconf to pkg-deps.json Build-Depends (#1535)
[Alberto Contreras]
+ redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
(#1536)
+ tests/azure: add test coverage for DisableSshPasswordAuthentication
(#1534) [Chris Patterson]
+ summary: Add david-caro to the cla signers (#1527) [David Caro]
+ Add support for OpenMandriva (https://openmandriva.org/) (#1520)
[Bernhard Rosenkraenzer]
+ tests/azure: refactor ovf creation (#1533) [Chris Patterson]
+ Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
+ tox: integration-tests-jenkins: softfail if only some test failed
(#1528) [Paride Legovini]
+ CI: drop linters from Travis CI (moved to GH Actions) (#1530)
[Paride Legovini]
+ sources/azure: remove unused encoding support for customdata (#1526)
[Chris Patterson]
+ sources/azure: remove unused metadata captured when parsing ovf (#1524)
[Chris Patterson]
+ sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
[Chris Patterson]
+ Remove extra space from ec2 dual stack crawl message (#1521)
+ tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
[Chris Patterson]
+ setup.py: adjust udev/rules default path (#1513)
[Emanuele Giuseppe Esposito]
+ Add python3-deconf dependency (#1506) [Alberto Contreras]
+ Change match macadress param for network v2 config (#1518)
[Henrique Caricatti Capozzi]
+ sources/azure: remove unused userdata property from ovf (#1516)
[Chris Patterson]
+ sources/azure: minor refactoring to network config generation (#1497)
[Chris Patterson]
+ net: Implement link-local ephemeral ipv6
+ Rename function to avoid confusion (#1501)
+ Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
+ datasources: replace networking functions with stdlib and cloudinit.net
+ code
+ Remove xenial references (#1472) [Alberto Contreras]
+ Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
+ improve runcmd docs (#1498)
+ add 3.11-dev to Travis CI (#1493)
+ Only run github actions on pull request (#1496)
+ Fix integration test client creation (#1494) [Alberto Contreras]
+ tox: add link checker environment, fix links (#1480)
+ cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
+ cc_yum_add_repo: Fix repo id canonicalization (#1489)
[Alberto Contreras] (LP: #1975818)
+ Add linitio as contributor in the project (#1488) [Kevin Allioli]
+ net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
(LP: #1975907)
+ test_schema: no relative $ref URLs, replace $ref with local path (#1486)
+ cc_set_hostname: do not write "localhost" when no hostname is given
+ (#1453) [Emanuele Giuseppe Esposito]
+ Update .github-cla-signers (#1478) [rong]
+ schema: write_files defaults, versions $ref full URL and add vscode
(#1479)
+ docs: fix external links, add one more to the list (#1477)
+ doc: Document how to change module frequency (#1481)
+ tests: bump pycloudlib (#1482)
+ tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
+ testing: fix test_status.py (#1475)
+ integration tests: If KEEP_INSTANCE = True, log IP (#1473)
+ Drop mypy excluded files (#1454) [Alberto Contreras]
+ Docs additions (#1470)
+ Add "formatting tests" to Github Actions
+ Remove unused arguments in function signature (#1471)
+ Changelog: correct errant classification of LP issues as GH (#1464)
+ Use Network-Manager and Netplan as default renderers for RHEL and Fedora
(#1465) [Emanuele Giuseppe Esposito]
From 22.2
+ Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
+ Align rhel custom files with upstream (#1431)
[Emanuele Giuseppe Esposito]
+ cc_write_files: Improve schema. (#1460) [Alberto Contreras]
+ cli: Redact files with permission errors in commands (#1440)
+ [Alberto Contreras] (LP: #1953430)
+ Improve cc_set_passwords. (#1456) [Alberto Contreras]
+ testing: make fake cloud-init wait actually wait (#1459)
+ Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
[Maxime Corbin]
+ Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
+ schema: version schema-cloud-config-v1.json (#1424)
+ cc_modules: set default meta frequency value when no config available
(#1457)
+ Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
+ cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
[Alberto Contreras]
+ Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
+ testing: Fix console_log tests (#1437)
+ tests: cc_set_passoword update for systemd, non-systemd distros (#1449)
+ Fix bug in url_helper/dual_stack() logging (#1426)
+ schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
+ testing: Make integration tests kinetic friendly (#1441)
+ Handle error if SSH service no present. (#1422)
[Alberto Contreras] (LP: #1969526)
+ Fix network-manager activator availability and order (#1438)
+ sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
+ upstart: drop vestigial support for upstart (#1421)
+ testing: Ensure NoCloud detected in test (#1439)
+ Update .github-cla-signers kallioli [Kevin Allioli]
+ Consistently strip top-level network key (#1417) (LP: #1906187)
+ testing: Fix LXD VM metadata test (#1430)
+ testing: Add NoCloud setup for NoCloud test (#1425)
+ Update linters and adapt code for compatibility (#1434) [Paride Legovini]
+ run-container: add support for LXD VMs (#1428) [Paride Legovini]
+ integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
+ Fix NoCloud docs (#1423)
+ Docs fixes (#1406)
+ docs: Add docs for module creation (#1415)
+ Remove cheetah from templater (#1416)
+ tests: verify_ordered_items fallback to re.escape if needed (#1420)
+ Misc module cleanup (#1418)
+ docs: Fix doc warnings and enable errors (#1419)
[Alberto Contreras] (LP: #1876341)
+ Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
[Alberto Contreras] (LP: #1874875)
+ Don't fail if IB and Ethernet devices 'collide' (#1411)
+ Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
+ Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
+ Promote cloud-init schema from devel to top level subcommand (#1402)
+ mypy: disable missing imports warning for httpretty (#1412)
[Chris Patterson]
+ users: error when home should not be created AND ssh keys provided
[Jeffrey 'jf' Lim]
+ Allow growpart to resize encrypted partitions (#1316)
+ Fix typo in integration_test.rst (#1405) [Alberto Contreras]
+ cloudinit.net refactor: apply_network_config_names (#1388)
[Alberto Contreras] (LP: #1884602)
+ tests/azure: add fixtures for hardcoded paths (markers and data_dir)
(#1399) [Chris Patterson]
+ testing: Add responses workaround for focal/impish (#1403)
+ cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
+ Fix ds-identify not detecting NoCloud seed in config (#1381)
(LP: #1876375)
+ sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
+ Move notes about refactorization out of CONTRIBUTING.rst (#1389)
+ Shave ~8ms off generator runtime (#1387)
+ Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
+ schema: module example strict testing fix seed_random
+ cc_set_hostname: examples small typo (perserve vs preserve)
[Wouter Schoot]
+ sources/azure: refactor http_with_retries to remove **kwargs (#1392)
[Chris Patterson]
+ declare dependency on ssh-import-id (#1334)
+ drop references to old dependencies and old centos script
+ sources/azure: only wait for primary nic to be attached during restore
(#1378) [Anh Vo]
+ cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
+ Network functions refactor and bugfixes (#1383)
+ schema: add JSON defs for modules cc_users_groups (#1379)
(LP: #1858930)
+ Fix doc typo (#1382) [Alberto Contreras]
+ Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
+ Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
+ Return a namedtuple from subp() (#1376)
+ Mypy stubs and other tox maintenance (SC-920) (#1374)
+ Distro Compatibility Fixes (#1375)
+ Pull in Gentoo patches (#1372)
+ schema: add json defs for modules U-Z (#1360)
(LP: #1858928, #1858929, #1858931, #1858932)
+ util: atomically update sym links to avoid Suppress FileNotFoundError
+ when reading status (#1298) [Adam Collard] (LP: #1962150)
+ schema: add json defs for modules scripts-timezone (SC-801) (#1365)
+ docs: Add first tutorial (SC-900) (#1368)
+ BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
(#1340) [Andrew Lee] (LP: #1473527)
+ add arch hosts template (#1371)
+ ds-identify: detect LXD for VMs launched from host with > 5.10 kernel
(#1370) (LP: #1968085)
+ Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
+ schema: add json defs for modules e-install (SC-651) (#1366)
+ Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
+ Expose https_proxy env variable to ssh-import-id cmd (#1333)
[Michael Rommel]
+ sources/azure: remove bind/unbind logic for hot attached nic (#1332)
[Chris Patterson]
+ tox: add types-* packages to check_format env (#1362)
+ tests: python 3.10 is showing up in cloudimages (#1364)
+ testing: add additional mocks to test_net tests (#1356) [yangzz-97]
+ schema: add JSON schema for mcollective, migrator and mounts modules
(#1358)
+ Honor system locale for RHEL (#1355) [Wei Shi]
+ doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
+ ds-identify: also discover LXD by presence from DMI board_name = LXD
(#1311)
+ black: bump pinned version to 22.3.0 to avoid click dependency issues
(#1357)
+ Various doc fixes (#1330)
+ testing: Add missing is_FreeBSD mock to networking test (#1353)
+ Add --no-update to add-apt-repostory call (SC-880) (#1337)
+ schema: add json defs for modules K-L (#1321)
(LP: #1858899, #1858900, #1858901, #1858902)
+ docs: Re-order readthedocs install (#1354)
+ Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
[Jeffrey 'jf' Lim]
+ docs: add jinja2 pin (#1352)
+ Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
+ sources/azure: move get_ip_from_lease_value out of shim (#1324)
[Chris Patterson]
+ Fix cloud-init status --wait when no datasource found (#1349)
(LP: #1966085)
+ schema: add JSON defs for modules resize-salt (SC-654) (#1341)
+ Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
+ Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
+ add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
+ file (#1335) [yangzz-97]
+ Fix sysconfig render when set-name is missing (#1327)
[Andrew Kutz] (LP: #1855945)
+ Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
+ url_helper: add tuple support for readurl timeout (#1328)
[Chris Patterson]
+ Make fs labels match for ds-identify and docs (#1329)
+ Work around bug in LXD VM detection (#1325)
+ Remove redundant generator logs (#1318)
+ tox: set verbose flags for integration tests (#1323) [Chris Patterson]
+ net: introduce find_candidate_nics() (#1313) [Chris Patterson]
+ Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
(#1326)
+ Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
+ Make VMWare data source test host independent and expand testing (#1308)
[Robert Schweikert]
+ Add json schemas for modules starting with P
+ sources/azure: remove lease file parsing (#1302) [Chris Patterson]
+ remove flaky test from ci (#1322)
+ ci: Switch to python 3.10 in Travis CI (#1320)
+ Better interface handling for Vultr, expect unexpected DHCP servers
(#1297) [eb3095]
+ Remove unused init local artifact (#1315)
+ Doc cleanups (#1317)
+ docs improvements (#1312)
+ add support for jinja do statements, add unit test (#1314)
[Paul Bruno] (LP: #1962759)
+ sources/azure: prevent tight loops for DHCP retries (#1285)
[Chris Patterson]
+ net/dhcp: surface type of DHCP lease failure to caller (#1276)
[Chris Patterson]
+ Stop hardcoding systemctl location (#1278) [Robert Schweikert]
+ Remove python2 syntax from docs (#1310)
+ [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
[Adam Collard]
+ redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
+ Add native NetworkManager support (#1224) [Lubomir Rintel]
+ Fix link in CLA check to point to contribution guide. (#1299)
[Adam Collard]
+ check for existing symlink while force creating symlink (#1281)
[Shreenidhi Shedi]
+ Do not silently ignore integer uid (#1280) (LP: #1875772)
+ tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
+ Integration test fix ppa (#1296)
+ tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
+ test_ppa_source: accept both http and https URLs (#1292)
[Paride Legovini]
+ Fix apt test on azure
+ add "lkundrak" as contributor [Lubomir Rintel]
+ Holmanb/integration test fix ppa (#1287)
+ Include missing subcommand in manpage (#1279)
+ Clean up artifacts from pytest, packaging, release with make clean
(#1277)
+ sources/azure: ensure retries on IMDS request failure (#1271)
[Chris Patterson]
+ sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
+ integration tests: fix Azure failures (#1269)
From 22.1
+ sources/azure: report ready in local phase (#1265) [Chris Patterson]
+ sources/azure: validate IMDS network configuration metadata (#1257)
[Chris Patterson]
+ docs: Add more details to runcmd docs (#1266)
+ use PEP 589 syntax for TypeDict (#1253)
+ mypy: introduce type checking (#1254) [Chris Patterson]
+ Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
+ tests: when generating crypted password, generate in target env (#1252)
+ sources/azure: address mypy/pyright typing complaints (#1245)
[Chris Patterson]
+ Docs for x-shellscript* userdata (#1260)
+ test_apt_security: azure platform has specific security URL overrides
(#1263)
+ tests: lsblk --json output changes mountpoint key to mountpoinst []
(#1261)
+ mounts: fix mount opts string for ephemeral disk (#1250)
[Chris Patterson]
+ Shell script handlers by freq (#1166) [Chris Lalos]
+ minor improvements to documentation (#1259) [Mark Esler]
+ cloud-id: publish /run/cloud-init/cloud-id-<cloud-type> files (#1244)
+ add "eslerm" as contributor (#1258) [Mark Esler]
+ sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
+ bump pycloudlib (#1256)
+ sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
(#1251) [Markus Schade]
+ bump pycloudlib version (#1255)
+ Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
+ sources/azure: drop debug print (#1249) [Chris Patterson]
+ tests: do not check instance.pull_file().ok() (#1246)
+ sources/azure: consolidate ephemeral DHCP configuration (#1229)
[Chris Patterson]
+ cc_salt_minion freebsd fix for rc.conf (#1236)
+ sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
[Chris Patterson]
+ Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
+ testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
+ Integration test changes (#1240)
+ Fix Gentoo Locales (#1205)
+ Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
+ integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
+ Integration testing docs and refactor (#1231)
+ vultr: Return metadata immediately when found (#1233) [eb3095]
+ spell check docs with spellintian (#1223)
+ docs: include upstream python version info (#1230)
+ Schema a d (#1211)
+ Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
+ fix parallel tox execution (#1214)
+ sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
[Chris Patterson]
+ Do not support setting up archive.canonical.com as a source (#1219)
[Steve Langasek] (LP: #1959343)
+ Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
+ sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
(#1206) [Chris Patterson]
+ update ssh logs to show ssh private key gens pub and simplify code
(#1221) [Steve Weber]
+ Remove mitechie from stale PR github action (#1217)
+ Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
+ Add json parsing of ip addr show (SC-723) (#1210)
+ cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
+ Update .github-cla-signers (#1204) [Chris Lalos]
+ sources/azure: drop unused case in _report_failure() (#1200)
[Chris Patterson]
+ sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
[Chris Patterson]
+ Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
+ sources/azure: unpack ret tuple in crawl_metadata() (#1194)
[Chris Patterson]
+ tests: focal caplog has whitespace indentation for multi-line logs
(#1201)
+ Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
+ integration: test against the Ubuntu daily images (#1198)
[Paride Legovini]
+ cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
+ tox: pass PYCLOUDLIB_* env vars into integration tests when present
(#1196)
+ sources/azure: set ovf_is_accessible when OVF is read successfully
(#1193) [Chris Patterson]
+ Enable OVF environment transport via ISO in example (#1195) [Megian]
+ sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
(#1190) [Chris Patterson]
+ Single JSON schema validation in early boot (#1175)
+ Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
[Megian]
+ testing: support pycloudlib config file (#1189)
+ Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
(LP: #1956788)
+ Test Optimization Proposal (SC-736) (#1188)
+ cli: cloud-id report not-run or disabled state as cloud-id (#1162)
+ Remove distutils usage (#1177) [Shreenidhi Shedi]
+ add .python-version to gitignore (#1186)
+ print error if datasource import fails (#1170)
[Emanuele Giuseppe Esposito]
+ Add new config module to set keyboard layout (#1176)
[maxnet] (LP: #1951593)
+ sources/azure: rename metadata_type -> MetadataType (#1181)
[Chris Patterson]
+ Remove 3.5 and xenial support (SC-711) (#1167)
+ tests: mock LXD datasource detection in ds-identify on LXD containers
(#1178)
+ pylint: silence errors on compat code for old jsonschema (#1172)
[Paride Legovini]
+ testing: Add 3.10 Test Coverage (#1173)
+ Remove unittests from integration test job in travis (#1141)
+ Don't throw exceptions for empty cloud config (#1130)
+ bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
+ sources/azure: do not persist failed_desired_api_version flag (#1159)
[Chris Patterson]
+ Update cc_ubuntu_advantage calls to assume-yes (#1158)
[John Chittum] (LP: #1954842)
+ openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
+ Add .git-blame-ignore-revs (#1161)
+ Adopt Black and isort (SC-700) (#1157)
+ Include dpkg frontend lock in APT_LOCK_FILES (#1153)
+ tests/cmd/query: fix test run as root and add coverage for defaults
(#1156) [Chris Patterson] (LP: #1825027)
+ Schema processing changes (SC-676) (#1144)
+ Add dependency workaround for impish in bddeb (#1148)
+ netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
+ find_devs_with_openbsd: ensure we return the last entry (#1149)
[Gonéri Le Bouder]
+ sources/azure: remove unnecessary hostname bounce (#1143)
[Chris Patterson]
+ find_devs/openbsd: accept ISO on disk (#1132)
[Gonéri Le Bouder]
+ Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
+ add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
+ travis - don't run integration tests if no deb (#1139)
+ factor out function for getting top level directory of cloudinit (#1136)
+ testing: Add deterministic test id (#1138)
+ mock sleep() in azure test (#1137)
+ Add miraclelinux support (#1128) [Haruki TSURUMOTO]
+ docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
+ Add Strict Metaschema Validation (#1101)
+ update dead link (#1133)
+ cloudinit/net: handle two different routes for the same ip (#1124)
[Emanuele Giuseppe Esposito]
+ docs: pin mistune dependency (#1134)
+ Reorganize unit test locations under tests/unittests (#1126)
+ Fix exception when no activator found (#1129) (LP: #1948681)
+ jinja: provide and document jinja-safe key aliases in instance-data
(SC-622) (#1123)
+ testing: Remove date from final_message test (SC-638) (#1127)
+ Move GCE metadata fetch to init-local (SC-502) (#1122)
+ Fix missing metadata routes for vultr (#1125) [eb3095]
+ cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
(#1081) [dermotbradley]
+ sources/azure: remove unused remnants related to agent command (#1119)
[Chris Patterson]
+ github: update PR template's contributing URL (#1120) [Chris Patterson]
+ docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
+ testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
+ Fix Vultr timeout and wait values (#1113) [eb3095]
+ lxd: add preference for LXD cloud-init.* config keys over user keys
(#1108)
+ VMware: source /etc/network/interfaces.d/* on Debian
[chengcheng-chcheng] (LP: #1950136)
+ Add cjp256 as contributor (#1109) [Chris Patterson]
+ integration_tests: Ensure log directory exists before symlinking to it
(#1110)
+ testing: add growpart integration test (#1104)
+ integration_test: Speed up CI run time (#1111)
+ Some miscellaneous integration test fixes (SC-606) (#1103)
+ tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
+ Add convenience symlink to integration test output (#1105)
+ Fix for set-name bug in networkd renderer (#1100)
[Andrew Kutz] (LP: #1949407)
+ Wait for apt lock (#1034) (LP: #1944611)
+ testing: stop chef test from running on openstack (#1102)
+ alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]
- cloud-netconfig
-
- Update to version 1.8:
+ Fix Azure metadata check (bsc#1214715)
+ Fix cleanup on ifdown
- cloud-regionsrv-client
-
- Update to version 10.1.2 (bsc#1211282)
+ Properly handle Ipv6 when checking update server responsiveness. If not
available fall back and use IPv4 information
+ Use systemd_ordered to allow use in a container without pulling systemd
into the container as a requirement
- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
+ Clean up the system if baseproduct registraion fails to leave the
system in prestine state
+ Log when the registercloudguest command is invoked with --clean
- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
- Removes a warning about system_token entry present in the credentials
file.
- Adds logrotate configuration for log rotation.
- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
- Removes a warning about system_token entry present in the credentials
file.
- Adds logrotate configuration for log rotation.
- cobbler
-
- Fix S390X auto-installation for cases where kernel options are longer
than 79 characters (bsc#1207308)
- Switch packaging from patch based to Git tree based development
- All patches that are being removed in this revision are contained in
the new Git tree.
- Removed:
* better-string-replacement-performance.diff
* cgi_parse_qs_is_deprecated.diff
* fix-for-cve-2022-0860-fixup.patch
* fix-for-cve-2022-0860.diff
* fix-for-old-str.join-usage.diff
* fix-string-replacement.diff
* fix-trail-stripping-utf8.diff
* fix_issue_when_inherited_boot_loader_bsc1185679.patch
* load_module_apache_suse_fix.diff
* patch_logrotate_service_condrestart.patch
* prevent-race-condition-writting-tftpboot-files-bsc1186124.patch
* refactored_auth_module.diff
* remove-redundant-json-suffix.diff
* v3-1-2-arbitrary-file-read-write-plus-RCE.patch
* v3-1-2-fix-failing-test-after-cve-fix.patch
* v3-1-2-incomplete-template-sanatization.patch
* v3-1-2-log-pollution-1.patch
* v3-1-2-log-pollution-2.patch
* v3-1-2-log-pollution-3.patch
* v3-1-2-mongodb-sanatiy-check.patch
* v3-1-2-remove-testing-auth.patch
- Unbreak PAM authentication due to missing encode of user input in the PAM
auth module of Cobbler (bsc#1197027, CVE-2022-0860)
- Added:
- fix-for-cve-2022-0860-fixup.patch
- gcc7
-
- Add gcc7-aarch64-bsc1214052.patch to fix -fstack-protector issues
with variable length stack allocations on aarch64.
Fixes CVE-2023-4039. [bsc#1214052]
- Add gcc7-aarch64-untyped_call.patch to fix issue with __builtin_apply
- Add gcc7-lra-elim.patch to fix internal compiler error when forming
paired loads and stores on aarch64.
- Disable multilib and go on riscv64
- libgcc-riscv-div.patch: Backport of r12-5799-g45116f342057b7 to fix
build with current binutils
- Backport _multibuild auto-generation. Remove redundant
.changes files.
- Add _multibuild to define 2nd spec file as additional flavor.
Eliminates the need for source package links in OBS.
- Add gcc7-pr89124.patch to fix KASAN kernel compile. [bsc#1205145]
- Add gcc7-pr72764.patch to fix ICE with C++17 code as reported
in [bsc#1204505]
- Add gcc7-libsanitizer-cherry-pick-9cf13067cb5088626ba7-from-u.patch
and gcc7-libgo-don-t-include-linux-fs.h-when-building-gen-sys.patch
in order to support glibc 2.36.
- Enable format_spec_file otherwise one gets huge diff after
running change_spec.
- Remove fixed sys/mount.h.
- Add patch from upstream to fix altivec.h redefining bool in C++
which makes bool unusable (boo#1195517):
* gcc7-pr78263.patch
- Add gcc7-ada-Target_Name.patch to adjust gnats idea of the
target, fixing the build of gprbuild. [bsc#1196861]
- Remove include-fixed/sys/rseq.h to fix build on openSUSE:Factory.
- Avoid duplicate license in cross packages.
- cpu-mitigations-formula
-
- Update to version 0.5.0:
* Mark all SUSE Linux Enterprise 15 SP4 and newer and
openSUSE 15.4 and newer as supported (bsc#1210835)
- cups
-
- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
"CUPS PostScript Parsing Heap Overflow"
https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
bsc#1215204
- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
"Information leak through Cups-Get-Document operation"
by requiring authentication for CUPS-Get-Document in cupsd.conf
https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
of cups-2.0.3-additional_policies.patch that replaces it
to add the 'allowallforanybody' policy to cupsd.conf
after cups-2.2.7-CVE-2023-32360.patch was applied
- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
"use-after-free in cupsdAcceptClient()"
https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
bsc#1212230
- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
"Heap buffer overflow in cupsd"
https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
bsc#1211643
- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
that fixes bsc#1191467, bsc#1198932:
"lpr reports 'No such file or directory' for missing catalogue files"
"/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
is derived from https://github.com/apple/cups/issues/5550 with its
https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
to add "After=network.target sssd.service" to the systemd unit
source files cupsd.service.in and cups.cups-lpdAT.service.in
to fix bsc#1201234, bsc#1200321:
"Missing network dependency in systemd unit for cups-2.2.7"
"CUPS may not always start if sssd is in use"
- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
which belongs to https://github.com/OpenPrinting/cups/issues/308
that fixes bsc#1191525, bsc#1203446:
"Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
"/usr/bin/lpr: Error - The printer or class does not exist."
- curl
-
- Security fixes:
* [bsc#1211231, CVE-2023-28320] siglongjmp race condition
- Add curl-CVE-2023-28320.patch
* [bsc#1211232, CVE-2023-28321] IDN wildcard matching
- Add curl-CVE-2023-28321.patch [bsc#1211339]
* [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
- Add curl-CVE-2023-28322.patch
- Security fixes:
* [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
* [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
Add curl-CVE-2023-27534.patch curl-CVE-2023-27534-dynbuf.patch
* [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
Add curl-CVE-2023-27535.patch
* [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
Add curl-CVE-2023-27536.patch
* [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
Add curl-CVE-2023-27538.patch
- Security Fix: [bsc#1207992, CVE-2023-23916]
* HTTP multi-header compression denial of service
* Add curl-CVE-2023-23916.patch
- dbus-1
-
- Sometimes unprivileged users were able to crash dbus-daemon
(CVE-2023-34969, bsc#1212126)
* fix-upstream-CVE-2023-34969.patch
- lvm2
-
- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
+ bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch
- dmidecode
-
- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
which would prevent root from using the --from-dump option since
the latest security fixes (bsc#1210418).
Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
Clean up function dmi_table so that it does only one thing
(bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
- -dump-bin is used, write the whole dump file at once, instead of
opening and closing the file separately for the table and then
for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
Make sure that the file passed to option --dump-bin does not
already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
check on the type of the mem device file we are asked to read
from, if we are root (bsc#1210418).
3 recommended fixes from upstream:
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
the SMBIOS entry point is long enough to include all the fields
we need.
- dmidecode-fix-the-alignment-of-type-25-name.patch: Drop a stray
tabulation before the name of DMI record type 25.
- dmidecode-print-type-33-name-unconditionally.patch: Display the
name of DMI record type 33 even if we can't decode it.
- docker
-
- update to Docker 24.0.5-ce. See upstream changelong online at
<https://docs.docker.com/engine/release-notes/24.0/#2405>. bsc#1213229
- Update to Docker 24.0.4-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/24.0/#2404>. bsc#1213500
- Update to Docker 24.0.3-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/24.0/#2403>. bsc#1213120
- Rebase patches:
* cli-0001-docs-include-required-tools-in-source-tree.patch
- Recommend docker-rootless-extras instead of Require(ing) it, given
it's an additional functionality and not inherently required for
docker to function.
- Add docker-rootless-extras subpackage
(https://docs.docker.com/engine/security/rootless)
- Update to Docker 24.0.2-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/24.0/#2402>. bsc#1212368
* Includes the upstreamed fix for the mount table pollution issue.
bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
being provided by this package.
- Rebase patches:
* 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
* 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
* cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to Docker 23.0.6-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/23.0/#2306>. bsc#1211578
- Rebase patches:
* cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
(the uapi headers in SLE-12 are too old).
+ 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
- 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
+ 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`
- Update to Docker 23.0.5-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/23.0/#2305>.
- Rebase patches:
* cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to Docker 23.0.4-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/23.0/#2304>. bsc#1208074
- Fixes:
* bsc#1214107 - CVE-2023-28840
* bsc#1214108 - CVE-2023-28841
* bsc#1214109 - CVE-2023-28842
- Rebase patches:
* 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
- 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
- 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport <https://github.com/docker/cli/pull/4228> to allow man pages to be
built without internet access in OBS.
+ cli-0001-docs-include-required-tools-in-source-tree.patch
- update to 20.10.23-ce.
* see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
- Update to Docker 20.10.21-ce. See upstream changelog online at
<https://docs.docker.com/engine/release-notes/#201021>. bsc#1206065
bsc#1205375 CVE-2022-36109
- Rebase patches:
* 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
* 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
* 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
* 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
* 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
* 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
* 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
preparation for removing the feature). This feature was never meant to be
used by users directly (and is only available in the -kubic/CaaSP version of
the package anyway) and thus should not affect any users.
- Fix wrong After: in docker.service, fixes bsc#1188447
- Add apparmor-parser as a Recommends to make sure that most users will end up
with it installed even if they are primarily running SELinux.
- Fix syntax of boolean dependency
- Allow to install container-selinux instead of apparmor-parser.
- Change to using systemd-sysusers
- dom4j
-
- Build against the standalone JavaEE modules unconditionally
- Add alias to the new artifact coordinates org.dom4j:dom4j
- Simplify the spec file a bit
- Add jaxb-api dependency for relevant distribution versions so that
we can build with JDKs that do not include the JavaEE modules
- dracut
-
- Update to version 049.1+suse.255.g19bd61fd:
* fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
- Update to version 049.1+suse.253.g1008bf13:
* fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
- Update to version 049.1+suse.251.g0b8dad5:
* fix(dracut.sh): omission is an addition to other omissions in conf files (bsc#1208929)
* fix(nfs): chown using rpc default group (bsc#1204929)
- ecj
-
- Added patch:
* encoding.patch
+ the encoding needs to be set for all JDK versions
- Modified patch:
* ecj-rpmdebuginfo.patch
+ rediff
* javaAPI.patch
+ extract the encoding part to a separate patch
- Upgrade to eclipse 4.18 ecj
- Switch java14api to java15api to be compatible to JDK 15
- Upgrade to eclipse 4.17 ecj
* No changelog was made available.
- Removed patches:
* ecj-encoding.patch
* jdk10u-jdk8compat.patch
- Switch to JDK 11 for build a JDK 8 is not supported anymore by ecj
- Switch java10api to java14api to be compatible to JDK 14
- elfutils
-
- 0001-libelf-Fixup-SHF_COMPRESSED-sh_addralign-in-elf_upda.patch:
make debuginfo extraction from go1.19 built binaries work again.
(bsc#1203599)
- firewalld
-
- Fix firewalld does not longer understand IPv4 network masks
of type `255.255.255.0`
Added following patch (boo#1212974)
[+ 0004-fix_rich_source_address_with_netmask.patch]
- Fix firewall-offline-cmd fails with ERROR: Calling pre func
Added following patch (bsc#1206928)
[+ 0003-firewall-offline-cmd-fail-fix.patch]
- fonts-config
-
- get the homedir from getpwuid when no $ENV{"HOME"} set
- added patches
fix bsc#1210700
+ fonts-config-homedir-getpwuid.patch
- gawk
-
- format-tree-positional-arg.patch: Validate index into argument list
(CVE-2023-4156, bsc#1214025)
- geronimo-specs
-
- On supported platforms, avoid building with OpenJ9, in order to
prevent build cycles.
- Set version for the specs comming from tag 1_1_1 in order to
avoid unexpanded version macros in pom files.
- glib2
-
- Update glib2-fix-normal-form-handling-in-gvariant.patch:
Backported from upstream to fix regression on s390x.
(bsc#1210135, glgo#GNOME/glib!2978)
- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
from upstream to fix normal form handling in GVariant.
(CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
glgo#GNOME/glib!3125)
- glibc
-
- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
(bsc#1211828, BZ #30527)
- ulp-prologue-into-asm-functions.patch: Add support for livepatches
in ASM written functions (bsc#1211726)
- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
is unset (bsc#1209229, BZ #30235)
- Exclude static archives from preparation for live patching (bnc#1208721)
- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
(bsc#1207957)
- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
(CVE-2023-0687, bsc#1207975, BZ #29444)
- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
check (bsc#1208358, BZ #25933)
- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
(bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
with recent GCC
- grub2
-
- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)
- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
(bsc#1209234)
* 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
(bsc#1187810) (bsc#1209667) (bsc#1209372)
* 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch
- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
btrfs filesystem. (bsc#1209165)
* grub2-btrfs-05-grub2-mkconfig.patch
- Make grub more robust against storage race condition causing system boot
failures (bsc#1189036)
* 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch
- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
* grub2-secureboot-provide-linuxefi-config.patch
* grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
* grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
* grub2-btrfs-05-grub2-mkconfig.patch
* grub2-efi-xen-cmdline.patch
* grub2-s390x-05-grub2-mkconfig.patch
* grub2-suse-remove-linux-root-param.patch
- Move unsupported zfs modules into 'extras' packages
(bsc#1205554) (PED-2947)
- httpcomponents-client
-
- Build with source/target levels 8
- Update to version 4.5.12
- httpcomponents-core
-
- Build with source/target levels 8
- Upgraded to version 4.4.13
- Removed patch:
* 0001-Re-generated-expired-test-certificates.patch
+ included in this version
- Modified patch:
* httpcomponents-core-java8compat.patch
+ rediffed to changed context
- hwdata
-
- update to 0.371:
* Update pci, usb and vendor ids
- update to 0.370:
* Update pci, usb and vendor ids
- update to 0.369:
* Update pci, usb and vendor ids
- update to 0.368:
* Update pci, usb and vendor ids
- update to 0.367:
* Update pci, usb and vendor ids
- update to 0.366:
* Update pci, usb and vendor ids
- hwinfo
-
- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85
- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84
- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83
- icu4j
-
- Upgrade to version 71.1
* Updates to CLDR 41 locale data with various additions and
corrections.
* Adds phrase-based line breaking for Japanese. Existing line
breaking methods follow standards and conventions for body text
but do not work well for short Japanese text, such as in titles
and headings. This new feature is optimized for these use
cases.
* Adds support for Hindi written in Latin letters (hi_Latn). The
CLDR data for this increasingly popular locale has been
significantly revised and expanded. Note that based on user
expectations, hi_Latn incorporates a large amount of English,
and can also be referred to as “Hinglish”.
* ICU 71 and CLDR 41 are minor releases, mostly focused on bug
fixes and small enhancements.
* Updates to the time zone data version 2022a. Note that pre-1970
data for a number of time zones has been removed, as has been
the case in the upstream tzdata release since 2021b.
- Remove obsolete stuff from spec file
- Reformat the changes file to fit to 67 chars width
- Upgrade to verison 70.1
- Modified patches:
* icu4j-66.1-java8compat.patch -> icu4j-70.1-java8compat.patch
* icu4j-jdk10plus.patch
+ rediff to changed context
* improve-osgi-manifest.patch
+ replace also DATAVERSION token during the build
- Added patch:
* icu4j-javadoc.patch
+ fix invalid html entities
- Update to version 67.1
* Unicode 13 (ICU-20893, same as in ICU 66)
+ Total of 5930 new characters
+ 4 new scripts
+ 55 new emoji characters, plus additional new sequences
+ New CJK extension, first characters in plane 3: U+30000..U+3134A
* CLDR 37
+ New language at Modern coverage: Nigerian Pidgin
+ New languages at Basic coverage: Fulah (Adlam), Maithili,
Manipuri, Santali, Sindhi (Devanagari), Sundanese
+ Region containment: EU no longer includes GB
+ Unicode 13 root collation data and Chinese data for collation
and transliteration
* DateTimePatternGenerator now obeys the "hc" preference in the
locale identifier (ICU-20442)
* Various other improvements for ECMA-402 conformance
* Number skeletons have a new "concise" form that can be used in
MessageFormat strings (ICU-20418)
* Currency formatting options for formal and other currency
display name variants (ICU-20854)
* ListFormatter: new public API to select the style & type
(ICU-12863)
* ListFormatter now selects the proper “and”/“or” form for
Spanish & Hebrew (ICU-21016)
* Locale ID canonicalization upgraded to implement the complete
CLDR spec (ICU-20834, ICU-20272)
* LocaleMatcher: New option to ignore one-way matches
(ICU-20936), and other tweaks to the code (ICU-20916,
ICU-20917) and data (from CLDR)
* acceptLanguage() reimplemented via LocaleMatcher (ICU-20700)
* Data build tool: tzdbNames.res moved from the "zone_tree"
category to the "zone_supplemental" category (ICU-21073)
- Version update to 66.1
- Changed patches:
* icu4j-jdk10plus.patch
* improve-osgi-manifest.patch
* icu4j-63.1-java8compat.patch -> icu4j-66.1-java8compat.patch
+ rediff to changed context
- Remove build-dependency on java-javadoc, since it is not
necessary with this version.
- open-iscsi
-
- Branched SLE-15-SP3 from Factory. No longer in sync with
Tumbleweed.
- Backported upstream commit, which sets 'safe_logout' and
'startup' in iscsid.conf, to address bsc#1207157
- Updated year in SPEC file
- isorelax
-
- Build with java target and source version 1.8
- issue-generator
-
- Update to version 1.13
- SELinux: Do not call agetty --reload [bsc#1186178]
- Update to version 1.12
- Update manual page
- Use python3 instead of python 2.x
- Update to version 1.11
- Don't display issue.d/*.issue files, agetty will do that [bsc#1177891]
- Ignore /run/issue.d in issue-generator.path, else issue-generator will
be called too fast too often [bsc#1177865]
- Ignore *.bak, *~ and *.rpm* files [bsc#1118862]
- Handle the .path unit in scriptlets as well
- Update to version 1.10
- Display wlan interfaces [bsc#1169070]
- Update to version 1.9
- Fix path for systemd files
- Update to version 1.8
- Handle network interface renames
- jakarta-commons-discovery
-
- Update to 0.5:
* Breaking changes: The minimum JDK requirement is now JDK 1.5.
The provided binaries will not work on lower JDKs. The source
has been updated to leverage Generics and other JDK 1.5 features
where possible, and requires JDK 1.5 to compile.
* Dependencies: Commons Discovery depends on Commons Logging.
It is built against version 1.1.1.
* New features: Discovery APIs use Java5 Generics.
* Known bugs/limitations: resource.classes.DiscoverClasses doesn't
work with Oracle embedded JVM in DBMS, see DISCOVERY-13:
- https://issues.apache.org/jira/browse/DISCOVERY-13
* Deprecations:
- Classes in org.apache.commons.discovery.log package
have been deprecated, depending on Apache Commons Logging 1.1.1
there is no more circular dependency between Apache Commons
Discovery and Apache Commons Logging.
- setLog(org.apache.commons.logging.Log) methods have been
deprecated too, they are not thread-safe.
- Build with source and target levels 8
- Distribute commons-discovery as maven artifact
- Added build support for Enterprise Linux.
- java-11-openjdk
-
- Update to upstream tag jdk-11.0.20.1+1 (August 2023 emergency
release fixing a regression in July 2023 CPU)
* Changes:
+ JDK-8313765: Invalid CEN header (invalid zip64 extra data
field size)
+ JDK-8314678: Bump update version for OpenJDK: jdk-11.0.20.1
- Added patch:
* reproducible-javadoc-timestamp.patch
+ use SOURCE_DATE_EPOCH in javadoc and make the javadoc
generation more reproducible
- Upgrade to upstream tag jdk-11.0.20+8 (July 2023 CPU)
* CVEs
+ CVE-2023-22006, bsc#1213473
+ CVE-2023-22036, bsc#1213474
+ CVE-2023-22041, bsc#1213475
+ CVE-2023-22044, bsc#1213479
+ CVE-2023-22045, bsc#1213481
+ CVE-2023-22049, bsc#1213482
+ CVE-2023-25193, bsc#1207922
* Security fixes
+ JDK-8298676: Enhanced Look and Feel
+ JDK-8300285: Enhance TLS data handling
+ JDK-8300596: Enhance Jar Signature validation
+ JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
+ JDK-8302475: Enhance HTTP client file downloading
+ JDK-8302483: Enhance ZIP performance
+ JDK-8303376: Better launching of JDI
+ JDK-8304468: Better array usages
+ JDK-8305312: Enhanced path handling
+ JDK-8308682: Enhance AES performance
* Other changes
+ JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with
Stream closed
+ JDK-8178806: Better exception logging in crypto code
+ JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed
out
+ JDK-8209167: Use CLDR's time zone mappings for Windows
+ JDK-8209546: Make sun/security/tools/keytool/autotest.sh to
support macosx
+ JDK-8209880: tzdb.dat is not reproducibly built
+ JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
fails
+ JDK-8214459: NSS source should be removed
+ JDK-8214807: Improve handling of very old class files
+ JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from
tests
+ JDK-8215575: C2 crash: assert(get_instanceKlass()->is_loaded())
failed: must be at least loaded
+ JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle
+ JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
fails with AssertionError
+ JDK-8232853: AuthenticationFilter.Cache::remove may throw
ConcurrentModificationException
+ JDK-8243936: NonWriteable system properties are actually
writeable
+ JDK-8246383: NullPointerException in
JceSecurity.getVerificationResult when using Entrust provider
+ JDK-8248701: On Windows generated modules-deps.gmk can
contain backslash-r (CR) characters
+ JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
version updates
+ JDK-8259530: Generated docs contain MIT/GPL-licenced works
without reproducing the licence
+ JDK-8263420: Incorrect function name in
NSAccessibilityStaticText native peer implementation
+ JDK-8264290: Create implementation for
NSAccessibilityComponentGroup protocol peer
+ JDK-8264304: Create implementation for NSAccessibilityToolbar
protocol peer
+ JDK-8265486: ProblemList javax/sound/midi/Sequencer/
/Recording.java on macosx-aarch64
+ JDK-8268558: [TESTBUG] Case 2 in
TestP11KeyFactoryGetRSAKeySpec is skipped
+ JDK-8269746: C2: assert(!in->is_CFG()) failed: CFG Node with
no controlling input?
+ JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
+ JDK-8275233: Incorrect line number reported in exception
stack trace thrown from a lambda expression
+ JDK-8275721: Name of UTC timezone in a locale changes
depending on previous code
+ JDK-8275735: [linux] Remove deprecated Metrics api (kernel
memory limit)
+ JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
as unnecessary
+ JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
add 4357905
+ JDK-8278434: timeouts in test java/time/test/java/time/format/
/TestZoneTextPrinterParser.java
+ JDK-8280703: CipherCore.doFinal(...) causes potentially
massive byte[] allocations during decryption
+ JDK-8282077: PKCS11 provider C_sign() impl should handle
CKR_BUFFER_TOO_SMALL error
+ JDK-8282201: Consider removal of expiry check in
VerifyCACerts.java test
+ JDK-8282467: add extra diagnostics for JDK-8268184
+ JDK-8282600: SSLSocketImpl should not use user_canceled
workaround when not necessary
+ JDK-8283059: Uninitialized warning in check_code.c with GCC
11.2
+ JDK-8285497: Add system property for Java SE specification
maintenance version
+ JDK-8286398: Address possibly lossy conversions in
jdk.internal.le
+ JDK-8287007: [cgroups] Consistently use stringStream
throughout parsing code
+ JDK-8287246: DSAKeyValue should check for missing params
instead of relying on KeyFactory provider
+ JDK-8287876: The recently de-problemlisted
TestTitledBorderLeak test is unstable
+ JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
with information on 4th party dependencies
+ JDK-8289301: P11Cipher should not throw out of bounds
exception during padding
+ JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
+ JDK-8291226: Create Test Cases to cover scenarios for
JDK-8278067
+ JDK-8291637: HttpClient default keep alive timeout not
followed if server sends invalid value
+ JDK-8291638: Keep-Alive timeout of 0 should close connection
immediately
+ JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
is lower than expected
+ JDK-8293232: Fix race condition in pkcs11 SessionManager
+ JDK-8293815: P11PSSSignature.engineUpdate should not print
debug messages during normal operation
+ JDK-8294548: Problem list SA core file tests on macosx-x64
due to JDK-8294316
+ JDK-8294906: Memory leak in PKCS11 NSS TLS server
+ JDK-8295974: jni_FatalError and Xcheck:jni warnings should
print the native stack when there are no Java frames
+ JDK-8296934: Write a test to verify whether Undecorated Frame
can be iconified or not
+ JDK-8297000: [jib] Add more friendly warning for proxy issues
+ JDK-8297450: ScaledTextFieldBorderTest.java fails when run
with -show parameter
+ JDK-8298887: On the latest macOS+XCode the Robot API may
report wrong colors
+ JDK-8299259: C2: Div/Mod nodes without zero check could be
split through iv phi of loop resulting in SIGFPE
+ JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
due to constant NULL src argument
+ JDK-8300205: Swing test bug8078268 make latch timeout
configurable
+ JDK-8300490: Spaces in name of MacOS Code Signing Identity
are not correctly handled after JDK-8293550
+ JDK-8301119: Support for GB18030-2022
+ JDK-8301170: perfMemory_windows.cpp add free_security_attr to
early returns
+ JDK-8301401: Allow additional characters for GB18030-2022
support
+ JDK-8302151: BMPImageReader throws an exception reading BMP
images
+ JDK-8302791: Add specific ClassLoader object to Proxy
IllegalArgumentException message
+ JDK-8303102: jcmd: ManagementAgent.status truncates the text
longer than O_BUFLEN
+ JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
needs CFRelease call in early potential CHECK_NULL return
+ JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20
+ JDK-8303440: The "ZonedDateTime.parse" may not accept the
"UTC+XX" zone id
+ JDK-8303465: KeyStore of type KeychainStore, provider Apple
does not show all trusted certificates
+ JDK-8303476: Add the runtime version in the release file of a
JDK image
+ JDK-8303482: Update LCMS to 2.15
+ JDK-8303564: C2: "Bad graph detected in build_loop_late"
after a CMove is wrongly split thru phi
+ JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
CFRelease call in early potential CHECK_NULL return
+ JDK-8303822: gtestMain should give more helpful output
+ JDK-8303861: Error handling step timeouts should never be
blocked by OnError and others
+ JDK-8303937: Corrupted heap dumps due to missing retries for
os::write()
+ JDK-8304134: jib bootstrapper fails to quote filename when
checking download filetype
+ JDK-8304291: [AIX] Broken build after JDK-8301998
+ JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
+ JDK-8304350: Font.getStringBounds calculates wrong width for
TextAttribute.TRACKING other than 0.0
+ JDK-8304760: Add 2 Microsoft TLS roots
+ JDK-8305113: (tz) Update Timezone Data to 2023c
+ JDK-8305400: ISO 4217 Amendment 175 Update
+ JDK-8305528: [11u] Backport of JDK-8259530 breaks build with
JDK10 bootstrap VM
+ JDK-8305682: Update the javadoc in the Character class to
state support for GB 18030-2022 Implementation Level 2
+ JDK-8305711: Arm: C2 always enters slowpath for monitorexit
+ JDK-8305721: add `make compile-commands` artifacts to
.gitignore
+ JDK-8305975: Add TWCA Global Root CA
+ JDK-8306543: GHA: MSVC installation is failing
+ JDK-8306658: GHA: MSVC installation could be optional since
it might already be pre-installed
+ JDK-8306664: GHA: Update MSVC version to latest stepping
+ JDK-8306768: CodeCache Analytics reports wrong threshold
+ JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
+ JDK-8307134: Add GTS root CAs
+ JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest
fails after backport of JDK-8303861
+ JDK-8308006: Missing NMT memory tagging in CMS
+ JDK-8308884: [17u/11u] Backout JDK-8297951
+ JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java
fails intermittently
+ JDK-8311465: [11u] Remove designator
DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20
- Removed patch:
* system-crypto-policy.patch
+ folded into modified fips.patch
- Modified patch:
* fips.patch
+ fold in the system-crypto-policy.patch
+ regenerate to changed context
- Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU)
* Security fixes:
+ JDK-8287404: Improve ping times
+ JDK-8288436: Improve Xalan supports
+ JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
+ JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
improvements
+ JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
platform support
+ JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
platform support
+ JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
platform support
+ JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
platform support
+ JDK-8297371: Improve UTF8 representation redux
+ JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
reclamation process
+ JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
negotiation
+ JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
handling
+ JDK-8299129: Enhance NameService lookups
* Fixes:
+ JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
+ JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
/Receiver/bug6186488.java fails
+ JDK-8035787: SourcePositions are wrong for Strings
concatenated with '+' operator
+ JDK-8065097: [macosx] javax/swing/Popup/
/TaskbarPositionTest.java fails because Popup is one pixel off
+ JDK-8065422: Trailing dot in hostname causes TLS handshake to
fail with SNI disabled
+ JDK-8129315: java/net/Socket/LingerTest.java and
java/net/Socket/ShutdownBoth.java timeout intermittently
+ JDK-8144030: [macosx] test java/awt/Frame/
/ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
+ JDK-8170705: sun/net/www/protocol/http/StackTraceTest.java
fails intermittently with Invalid Http response
+ JDK-8171405: java/net/URLConnection/ResendPostBody.java
failed with "Error while cleaning up threads after test"
+ JDK-8179317: [TESTBUG] rewrite runtime shell tests in java
+ JDK-8247741: Test test/hotspot/jtreg/runtime/7162488/
/TestUnrecognizedVmOption.java fails when
- XX:+IgnoreUnrecognizedVMOptions is set
+ JDK-8190492: Remove SSLv2Hello and SSLv3 from default enabled
TLS protocols
+ JDK-8192931: Regression test java/awt/font/TextLayout/
/CombiningPerf.java fails
+ JDK-8195057: java/util/concurrent/CountDownLatch/Basic.java
failed w/ Xcomp
+ JDK-8195716: BootstrapLoggerTest : Executor still alive
+ JDK-8202621: bad test with broken links needs to be updated
+ JDK-8207248: Reduce incidence of
compiler.warn.source.no.bootclasspath in javac tests
+ JDK-8208077: File.listRoots performance degradation
+ JDK-8209023: fix 2 compiler tests to avoid JDK-8208690
+ JDK-8209115: adjust libsplashscreen linux ppc64le builds for
easier libpng update
+ JDK-8209774: Refactor shell test
javax/xml/jaxp/common/8035437/run.sh to java
+ JDK-8209935: Test to cover CodeSource.getCodeSigners()
+ JDK-8210373: Deadlock in libj2gss.so when loading "j2gss" and
"net" libraries in parallel.
+ JDK-8212165: JGSS: Fix cut/paste error in NativeUtil.c
+ JDK-8212216: JGSS: Fix leak in exception cases in getJavaOID()
+ JDK-8213130: Update ProblemList after verification of jtreg
tests in Win 7
+ JDK-8213265: fix missing newlines at end of files
+ JDK-8213932: [TESTBUG] assertEquals is invoked with the
arguments in the wrong order
+ JDK-8214445: [test] java/net/URL/HandlerLoop has illegal
reflective access
+ JDK-8215372: test/jdk/java/nio/file/DirectoryStream/Basic.java
not correct when using a glob
+ JDK-8215759: [test] java/math/BigInteger/ModPow.java can
throw an ArithmeticException
+ JDK-8217353: java/util/logging/LogManager/Configuration/
/updateConfiguration/HandlersOnComplexResetUpdate.java fails
with Unexpected reference: java.lang.ref.WeakReference
+ JDK-8217730: Split up MakeBase.gmk
+ JDK-8218133: sun/net/www/protocol/http/ProtocolRedirect.java
failed with "java.net.ConnectException"
+ JDK-8218431: Improved platform checking in makefiles
+ JDK-8221098: Run java/net/URL/HandlerLoop.java in othervm mode
+ JDK-8221168: java/util/concurrent/CountDownLatch/Basic.java
fails
+ JDK-8221351: Crash in
KlassFactory::check_shared_class_file_load_hook
+ JDK-8221621: FindTests.gmk cannot handle "=" in TEST.groups
comments
+ JDK-8222430: Add tests for ElementKind predicates
+ JDK-8223463: Replace wildcard address with loopback or local
host in tests - part 2
+ JDK-8223716: sun/net/www/http/HttpClient/MultiThreadTest.java
should be more resilient to unexpected traffic
+ JDK-8223736: jvmti/scenarios/contention/TC04/tc04t001/
/TestDescription.java fails due to wrong number of
MonitorContendedEntered events
+ JDK-8224024: java/util/concurrent/BlockingQueue/
/DrainToFails.java testBounded fails intermittently
+ JDK-8226595: jvmti/scenarios/contention/TC04/tc04t001/
/TestDescription.java still fails due to wrong number of
MonitorContendedEntered events
+ JDK-8226917: jvmti/scenarios/contention/TC04/tc04t001/
/TestDescription.java fails on jvmti->InterruptThread
(JVMTI_ERROR_THREAD_NOT_ALIVE)
+ JDK-8227422: sun/net/www/protocol/file/
/DirPermissionDenied.java failed on Windows 2016 because
DirPermissionDenied directory has no read permission
+ JDK-8230374: maxOutputSize, instead of
javatest.maxOutputSize, should be used in TEST.properties
+ JDK-8230731: SA tests fail with "Windbg Error: ReadVirtual
failed"
+ JDK-8231595: [TEST] develop a test case for SuspendThreadList
including current thread
+ JDK-8233462: serviceability/tmtools/jstat tests times out
with -Xcomp
+ JDK-8235448: code cleanup in SSLContextImpl.java
+ JDK-8238936: The crash in XRobotPeer when the custom
GraphicsDevice is used
+ JDK-8241806: The sun/awt/shell/FileSystemViewMemoryLeak.java
is unstable
+ JDK-8244592: Start supporting SOURCE_DATE_EPOCH
+ JDK-8245245: WebSocket can lose the URL encoding of URI query
parameters
+ JDK-8298588: WebSockets: HandshakeUrlEncodingTest
unnecessarily depends on a response body
+ JDK-8245654: Add Certigna Root CA
+ JDK-8248306: gc/stress/gclocker/
/TestExcessGCLockerCollections.java does not compile
+ JDK-8249691: jdk/lambda/vm/StrictfpDefault.java file can be
removed
+ JDK-8252401: Introduce Utils.TEST_NATIVE_PATH
+ JDK-8252532: use Utils.TEST_NATIVE_PATH instead of
System.getProperty("test.nativepath")
+ JDK-8252715: Problem list java/awt/event/KeyEvent/KeyTyped/
/CtrlASCII.java on Linux
+ JDK-8254267: javax/xml/crypto/dsig/LogParameters.java failed
with "RuntimeException: Unexpected log output:"
+ JDK-8255710: Opensource unit/regression tests for CMM
+ JDK-8256110: Create implementation for NSAccessibilityStepper
protocol
+ JDK-8256111: Create implementation for
NSAccessibilityStaticText protocol
+ JDK-8256126: Create implementation for NSAccessibilityImage
protocol peer
+ JDK-8256240: Reproducible builds should turn on the
"deterministic" flag for Visual Studio
+ JDK-8281262: Windows builds in different directories are not
fully reproducible
+ JDK-8256934: C2: assert(C->live_nodes() <=
C->max_node_limit()) failed: Live Node limit exceeded limit
+ JDK-8257928: Test image build failure with clang-10 due to
- Wmisleading-indentation
+ JDK-8258005: JDK build fails with incorrect fixpath script
+ JDK-8259265: Refactor UncaughtExceptions shell test as java
test.
+ JDK-8259267: Refactor LoaderLeak shell test as java test.
+ JDK-8225648: [TESTBUG] java/lang/annotation/loaderLeak/
/Main.java fails with -Xcomp
+ JDK-8260576: Typo in compiler/runtime/safepoints/
/TestRegisterRestoring.java
+ JDK-8261270: MakeMethodNotCompilableTest fails with
- XX:TieredStopAtLevel={1,2,3}
+ JDK-8261279: sun/util/resources/cldr/TimeZoneNamesTest.java
timed out
+ JDK-8261350: Create implementation for
NSAccessibilityCheckBox protocol peer
+ JDK-8261351: Create implementation for
NSAccessibilityRadioButton protocol
+ JDK-8261352: Create implementation for component peer for all
the components who should be ignored in a11y interactions
+ JDK-8262060: compiler/whitebox/BlockingCompilation.java timed
out
+ JDK-8264200: java/nio/channels/DatagramChannel/SRTest.java
fails intermittently
+ JDK-8264299: Create implementation of native accessibility
peer for ScrollPane and ScrollBar Java Accessibility roles
+ JDK-8264512: jdk/test/jdk/java/util/prefs/ExportNode.java
relies on default platform encoding
+ JDK-8266974: duplicate property key in java.sql.rowset
resource bundle
+ JDK-8267038: Update IANA Language Subtag Registry to Version
2022-03-02
+ JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
does not show instruction
+ JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
fails with -XX:TieredStopAtLevel=1
+ JDK-8271506: Add ResourceHashtable support for deleting
selected entries
+ JDK-8272985: Reference discovery is confused about atomicity
and degree of parallelism
+ JDK-8273497: building.md should link to both md and html
+ JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
test for CPU feature explicitly
+ JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
due to wrong data size with TieredStopAtLevel=2,3
+ JDK-8274939: Incorrect size of the pixel storage is used by
the robot on macOS
+ JDK-8277346: ProblemList 7 serviceability/sa tests on
macosx-x64
+ JDK-8277351: ProblemList runtime/jni/checked/
/TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
+ JDK-8279614: The left line of the TitledBorder is not painted
on 150 scale factor
+ JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
due to unexpected GC
+ JDK-8279941: sun/security/pkcs11/Signature/
/TestDSAKeyLength.java fails when NSS version detection fails
+ JDK-8280048: Missing comma in copyright header
+ JDK-8280391: NMT: Correct NMT tag on CollectedHeap
+ JDK-8280401: [sspi] gss_accept_sec_context leaves
output_token uninitialized
+ JDK-8280896: java/nio/file/Files/probeContentType/Basic.java
fails on Windows 11
+ JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
to stop HttpServer cleanly in case of exceptions
+ JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
AIX
+ JDK-8282398: EndingDotHostname.java test fails because SSL
cert expired
+ JDK-8282511: Use fixed certificate validation date in
SSLExampleCert template
+ JDK-8282958: Rendering Issues with Borders on Windows
High-DPI systems
+ JDK-8283606: Tests may fail with zh locale on MacOS
+ JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
/thread001 failed due to SocketTimeoutException
+ JDK-8283719: java/util/logging/CheckZombieLockTest.java
failing intermittently
+ JDK-8283870: jdeprscan --help causes an exception when the
locale is ja, zh_CN or de
+ JDK-8284023: java.sun.awt.X11GraphicsDevice
.getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
+ JDK-8284165: Add pid to process reaper thread name
+ JDK-8285093: Introduce UTIL_ARG_WITH
+ JDK-8285755: JDK-8285093 changed the default for
- -with-output-sync
+ JDK-8285919: Remove debug printout from JDK-8285093
+ JDK-8285399: JNI exception pending in awt_GraphicsEnv.c:1432
+ JDK-8285690: CloneableReference subtest should not throw
CloneNotSupportedException
+ JDK-8285835: SIGSEGV in
PhaseIdealLoop::build_loop_late_post_work
+ JDK-8286030: Avoid JVM crash when containers share the same
/tmp dir
+ JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is too
strong
+ JDK-8286962: java/net/httpclient/ServerCloseTest.java failed
once with ConnectException
+ JDK-8287011: Improve container information
+ JDK-8287180: Update IANA Language Subtag Registry to Version
2022-08-08
+ JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
+ JDK-8288499: Restore cancel-in-progress in GHA
+ JDK-8288332: Tier1 validate-source fails after 8279614
+ JDK-8289562: Change bugs.java.com and bugreport.java.com
URL's to https
+ JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
cgroups v2 and crun
+ JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
/Basic.java fails on some systems for the ".rar" extension
+ JDK-8290899: java/lang/String/StringRepeat.java test requests
too much heap on windows x86
+ JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
false
+ JDK-8290964: C2 compilation fails with assert "non-reduction
loop contains reduction nodes"
+ JDK-8292863: assert(_print_inlining_stream->size() > 0)
failed: missing inlining msg
+ JDK-8292877: java/util/concurrent/atomic/Serial.java uses
{Double,Long}Accumulator incorrectly
+ JDK-8293550: Optionally add get-task-allow entitlement to
macos binaries
+ JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
markings
+ JDK-8293996: C2: fix and simplify
IdealLoopTree::do_remove_empty_loop
+ JDK-8294378: URLPermission constructor exception when using
tr locale
+ JDK-8294580: frame::interpreter_frame_print_on() crashes if
free BasicObjectLock exists in frame
+ JDK-8294705: Disable an assertion in
test/jdk/java/util/DoubleStreamSums/CompensatedSums.java
+ JDK-8294947: Use 64bit atomics in patch_verified_entry on
x86_64
+ JDK-8295116: C2: assert(dead->outcnt() == 0 &&
!dead->is_top()) failed: node must be dead
+ JDK-8295211: Fix autoconf 2.71 warning "AC_CHECK_HEADERS: you
should use literals"
+ JDK-8295405: Add cause in a couple of
IllegalArgumentException and InvalidParameterException shown
by sun/security/pkcs11 tests
+ JDK-8295412: support latest VS2022 MSC_VER in
abstract_vm_version.cpp
+ JDK-8295530: Update Zlib Data Compression Library to Version
1.2.13
+ JDK-8295685: Update Libpng to 1.6.38
+ JDK-8295774: Write a test to verify List sends
ItemEvent/ActionEvent
+ JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
should not rely on system resolver
+ JDK-8295788: C2 compilation hits "assert((mode ==
ControlAroundStripMined && use == sfpt) ||
!use->is_reachable_from_root()) failed: missed a node"
+ JDK-8296239: ISO 4217 Amendment 174 Update
+ JDK-8296611: Problemlist several sun/security tests until
+ JDK-8295343 is resolved
+ JDK-8296619: Upgrade jQuery to 3.6.1
+ JDK-8296675: Exclude linux-aarch64 in NSS tests
+ JDK-8296878: Document Filter attached to JPasswordField and
setText("") is not cleared instead inserted characters
replaced with unicode null characters
+ JDK-8296904: Improve handling of macos xcode toolchain
+ JDK-8296912: C2: CreateExNode::Identity fails with assert(i <
_max) failed: oob: i=1, _max=1
+ JDK-8296924: C2:
assert(is_valid_AArch64_address(dest.target())) failed: bad
address
+ JDK-8297088: Update LCMS to 2.14
+ JDK-8297257: Bump update version for OpenJDK: jdk-11.0.19
+ JDK-8297264: C2: Cast node is not processed again in CCP and
keeps a wrong too narrow type which is later replaced by top
+ JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG misses
result - NULL check
+ JDK-8297489: Modify TextAreaTextEventTest.java as to verify
the content change of TextComponent sends TextEvent
+ JDK-8297569: URLPermission constructor throws
IllegalArgumentException: Invalid characters in hostname
after JDK-8294378
+ JDK-8297951: C2: Create skeleton predicates for all If nodes
in loop predication
+ JDK-8297963: Partially fix string expansion issues in
UTIL_DEFUN_NAMED and related macros
+ JDK-8298027: Remove SCCS id's from awt jtreg tests
+ JDK-8298073: gc/metaspace/
/CompressedClassSpaceSizeInJmapHeap.java causes test task
timeout on macosx
+ JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
after 8 minutes
+ JDK-8298093: improve cleanup and error handling of
awt_parseColorModel in awt_parseImage.c
+ JDK-8298108: Add a regression test for JDK-8297684
+ JDK-8298129: Let checkpoint event sizes grow beyond u4 limit
+ JDK-8298271: java/security/SignedJar/spi-calendar-provider/
/TestSPISigned.java failing on Windows
+ JDK-8298459: Fix msys2 linking and handling out of tree build
directory for source zip creation
+ JDK-8298527: Cygwin's uname -m returns different string than
before
+ JDK-8299194: CustomTzIDCheckDST.java may fail at future date
+ JDK-8299296: Write a test to verify the components selection
sends ItemEvent
+ JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
fails for hr_HR
+ JDK-8299483: ProblemList java/text/Format/NumberFormat/
/CurrencyFormat.java
+ JDK-8299445: EndingDotHostname.java fails because of
compilation errors
+ JDK-8299520: TestPrintXML.java output error messages in case
compare fails
+ JDK-8299596: [11u] Remove designator
DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.19
+ JDK-8299616: [11u] Bootcycle build fails after JDK-8257679
backport
+ JDK-8299789: Compilation of gtest causes build to fail if
runtime libraries are in different dirs
+ JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
invalid results on 32 bit systems
+ JDK-8300424: [11u] Chunk lost in backport of 8297569
+ JDK-8300642: [17u,11u] Fix DEFAULT_PROMOTED_VERSION_PRE=ea
for -dev
+ JDK-8300742: jstat's CGCT is 5 percent higher than the pause
time in -Xlog:gc.
+ JDK-8300773: Address the inconsistency between the constant
array and pool size
+ JDK-8301397: [11u, 17u] Bump jtreg to fix issue with build
JDK 11.0.18
+ JDK-8301760: Fix possible leak in SpNegoContext dispose
+ JDK-8301842: JFR: increase checkpoint event size for
stacktrace and string pool
+ JDK-8302000: [11u] A subtle race condition during jdk11u
build
+ JDK-8218460: Test generation scripts do not invoke stream
preprocessor correctly
+ JDK-8302657: [11u] Add missing '(' in makefile after backport
of 8218431
+ JDK-8302694: [11u] Update GHA Boot JDK to 11.0.18
+ JDK-8302903: [11u] Add modified test snippet after backport
of JDK-8221871
+ JDK-8303075: [11u] Add CompileClassWithDebugTest to
ProblemList for 8303074
+ JDK-8304389: [11u] Crash on Windows in C2 compiled code after
8248238 and 8218431
- Modified patch:
* fips.patch
+ adapt to changed context
- javamail
-
- Add alias to com.sun.mail:jakarta.mail needed by ant-javamail
- Remove all parents, since this package is not built with maven
- Assure that every dependency has a version, or at least "any"
* fixes use with gradle
- Build against the standalone JavaEE modules unconditionally
- Build with source/target levels 8
- Add glassfish-activation-api dependency for relevant distribution
versions to make buildable with JDK that does not contain the
JavaEE modules
- javapackages-tools
-
- Update to upstream version 6.1.0
* Release version 6.1.0
* Introduce common and extra subpackages
* Update documentation
* Add lua interpreter to check and GH actions
* Remove license headers from wrapper scripts
* Make scripts compatible with rpmlua
* Add more tests, fix behaviour
* Implement separate simple class name matching
* Minor changes
* Modularize Lua scripts
* Add Lua scripts for removing annotations
* Update build status badge in README.md
* Migrate CI from TravisCI to GitHub Actions
* Fix running tests without coverage
* Update ivy-local-classpath
* Release version 6.0.0
* Fix extra XML handling of pom_change_dep
* Add reproducer for #82
* Respect %jpb_env RPM macro
* Add bootstrap metadata to XMvn resolver config
* Delete run_tests.py
* Replace nose by pytest
* [install] Make glob pattern work with Python 3.10
* Adding ppc64le architecture support on travis-ci
* Drop deprecated add_maven_depmap macro
* Drop SCL support
* Fix provides matching
* Fix builddep snippet generation
* [test] Add test for builddep snippet generation
* Add location of java binary used by the java-1.8.0-openjdk
(JRE) package so that setting JAVA_HOME will work correctly
* Use XMvn Javadoc MOJO by default
* Remove explicit import of Python 3 features
* Remove dependency on Six compatibility library
* Fix invalid <skippedPlugins> in XMvn configuration
* [test] Don't try to kill PID 1 during tests
* [travis] Drop Python 2 from test matrix
* Add separate subpackage with RPM generators
* mvn_build: replace inline shell scriptlet with native python
code
* [test] Don't use networking during tests
* Add apache-rat-plugin to skippedPlugins
* Skip execution of various Maven plugins
* Remove Python 3.5 from .travis.yml
* Make generated javadoc package noarch
- Added patch:
* javapackages-6.1.0-maven-depmap.patch
+ Bulk patch correspoding to our pull request
https://github.com/fedora-java/javapackages/pull/92 which
brings back some of the removed tools that we depend on
heavily
- Modified patches:
* python-optional.patch
* suse-use-libdir.patch
+ Rediff to changed context
- Removed patches:
* 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
* 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
* 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
+ Already part of the above-mentioned bulk patch
* 0004-Remove-dependency-on-Six-compatibility-library.patch
+ Upstream patch already integrated in the 6.x code-line
- Fix wrong conditioning of the python-six require.
- Added patch:
* 0004-Remove-dependency-on-Six-compatibility-library.patch
+ remove dependency on python-six for newer distributions
- Added patches:
* 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
* 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
* 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
+ Let maven_depmap.py generate metadata with dependencies under
certain circumstances
- Fix typo in suse-use-libdir.patch:
%{_libdir}/jvm-commmon -> %{_libdir}/jvm-common
- Do not run tests on SLE12, since python3-test is not accessible
- Can't assume non-existence of python38 macros in Leap.
gh#openSUSE/python-rpm-macros#107
Test for suse_version instead. Only Tumbleweed has and needs the
python_subpackage_only support.
- Fix typo in spec file sitearch -> sitelib
- Fix the python subpackage generation
gh#openSUSE/python-rpm-macros#79
- Support python subpackages for each flavor
gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86
- when building extra flavor, BuildRequire javapackages-filesystem:
/etc/java is being cleaned out of the filesystems package.
- Upgrade to version 5.3.1
- Modified patch:
* suse-use-libdir.patch
+ rediff to changed context
- Define _rpmmacrodir for distributions that don't have it
- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
just happens to overlap in some distros.
- javassist
-
- Clean up the spec file and make it actually build on a vanilla
SLE-12-SP5
- Modified patch:
* javassist-java8-compat.patch
+ make remove functions that are not available in java 8
- Version update to 3.29.2:
* Include` Automatic-Module-Name in MANIFEST.MF
- Rebased javassist-osgi.patch and corrected version numbers in
the patch.
- Version update to 3.29.1:
* `Readme.html` was deleted.
- Rebased javassist-osgi.patch and corrected version numbers in
the patch.
- Requires java >= 1.8
- Rebased patches:
* javassist-osgi.patch
- Version update to 3.29.0:
* removes an unused import declaration as PR 384 mentions.
* Merge pull request #382 from tim-hoffman/PR_RemoveStringBuffer
* Merge pull request #383 from tim-hoffman/PR_ArrayCopyPerformance
* uncomments test code suggested by PR405
* cancels PR#391, which does not pass all the tests
* fixes a wrong indentation
* Merge pull request #391 from derklaro/fix-method-naming-syntax
* does refactoring
* fixes a bug in SignatureAttribute.renameClass().
* fixs a compilation problem although one test still fails.
* Merge pull request #299 from pietrobraione/master
* Merge branch 'master' into master
* Merge pull request #278 from ximsfei/master
* Merge pull request #390 from derklaro/master
* changes test code because package
java.rmi.activation.ActivationGroupDesc does not exist any
longer.
* deletes src/test/test2/*.class
* Merge pull request #399 from carldea/master
* Merge pull request #409 from aschleck/patch-1
* Remove redundant type check
* Using TCK Tested JDK builds of OpenJDK
* Merge pull request #395 from aburaksahin/master
* Fix for NullPointerException on detach()
* Only wrap the method name if the method doesn't come from the
same decl class
* Lower requirement for an extra type in constructor to Java 7-
* Replace array copy loop with System.arraycopy
* Replace remaining StringBuffer uses with StringBuilder
* Replace StringBuffer with StringBuilder and other minor String
optimizations
* fixes GitHub Issue 378 (wrong link for apache license)
* updates javassist.Loader to exclude jdk.internal.
* Fixes to support the full syntax of possible signatures
* Fix renaming of classes in presence of generic signatures and
nested classes.
* add unit test
* fixes a bug of ClassFile#renameClass(), some imports could not
be successfully renamed
- Rebased osgi patch: javassist-osgi.patch
- Rebased java8 compat patch: javassist-java8-compat.patch
- Requires Java API >= 1.7
- Added patch:
* javassist-osgi.patch
+ Add OSGi manifest to the javassist.jar
- jdom
-
- Security fix: [bsc#1187446, CVE-2021-33813]
* XXE issue in SAXBuilder can cause a denial of service via
a crafted HTTP request
- Add jdom-CVE-2021-33813.patch
- Remove unneeded dependency on glassfish-jaxb-api.
- Build against the standalone JavaEE modules unconditionally
- Modified patch:
* jdom-1.1-build.xml.patch
+ Build with source/target levels 8
- Build against standalone jaxb-api on distributions that have
JDK without the JavaEE modules
- Alias the xom artifact to the new com.io7m.xom groupId
- Update jaxen to version 1.1.6
* Bug fixes
- Increase java stack size to avoid overflow
- joda-time
-
- Build with java source and target levels 8
- jzlib
-
- Build with java source and target levels 8
- kernel-default
-
- Refresh patches.suse/powerpc-Move-DMA64_PROPNAME-define-to-a-header.patch.
- commit d263157
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit a3ff58c
- drm/vmwgfx: Test shader type against SVGA3d_SHADERTYPE_MIN (bsc#1203517 CVE-2022-36402)
- commit 5b2dbae
- powerpc/rtas: remove ibm_suspend_me_token (bsc#1023051).
- commit 4f01e57
- Do not add and remove genksyms ifdefs
- Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch.
- Refresh patches.suse/lockdown-also-lock-down-previous-kgdb-use.patch.
- commit e497b88
- powerpc/rtas: move syscall filter setup into separate function
(bsc#1023051).
- commit a36442d
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- commit 5d94fff
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
- commit 5ab0096
- blacklist.conf: Blacklist redundant docu patch
- commit 1c6d737
- Sort recent hw security-related patches
Move them to the sorted section and adjust patches accordingly.
- Refresh patches.suse/kvm-add-gds_no-support-to-kvm.patch.
- Refresh
patches.suse/x86-speculation-add-force-option-to-gds-mitigation.patch.
- Refresh
patches.suse/x86-speculation-add-gather-data-sampling-mitigation.patch.
- Refresh
patches.suse/x86-speculation-add-kconfig-option-for-gds.patch.
- Refresh
patches.suse/x86-srso-add-a-speculative-ras-overflow-mitigation.patch.
- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
- commit 5c87dd7
- Input: cyttsp4_core - change del_timer_sync() to
timer_shutdown_sync() (bsc#1213971 CVE-2023-4134).
- commit 3ffe891
- powerpc/rtas: block error injection when locked down
(bsc#1023051).
Refresh patches.kabi/lockdown-kABI-workaround-for-lockdown_reason-changes.patch
- commit 3bd253d
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- commit 3251f7a
- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297
ltc#197503).
- commit c36e5b8
- x86/CPU/AMD: Fix the DIV(0) initial fix attempt (bsc#1213927, CVE-2023-20588).
- commit 48fc5d8
- x86/CPU/AMD: Do not leak quotient data after a division by 0 (bsc#1213927, CVE-2023-20588).
- commit 5e5738e
- net: vmxnet3: fix possible NULL pointer dereference in
vmxnet3_rq_cleanup() (bsc#1214451 CVE-2023-4459).
- commit 1ac9015
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
(bsc#1213601 CVE-2023-3863).
- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
CVE-2023-3863).
- nfc: llcp: nullify llcp_sock->dev on connect() error paths
(bsc#1213601 CVE-2023-3863).
- commit 9d4529d
- kabi/severities: Ignore newly added SRSO mitigation functions
- commit 95ed32f
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- commit 309af7f
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- commit fa09ab7
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- commit 5038558
- x86/cpu: Cleanup the untrain mess (git-fixes).
- commit eda7e6d
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- commit 6e5dea6
- xfrm: add NULL check in xfrm_update_ae_params (bsc#1213666
CVE-2023-3772).
- commit fdc40c6
- x86/cpu: Rename original retbleed methods (git-fixes).
- commit 554babe
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- commit a99796e
- x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (git-fixes).
- commit 2b91cd9
- Update config files. Drop the dpt_i2o kernel module.
For: jsc#PED-4579, CVE-2023-2007
- commit 6a43698
- fs: jfs: fix possible NULL pointer dereference in dbFree() (bsc#1214348 CVE-2023-4385).
- commit ee83171
- xfs: fix sb write verify for lazysbcount (bsc#1214275).
- commit 37c728c
- xfs: update superblock counters correctly for !lazysbcount
(bsc#1214275).
- commit 2b6e01d
- xfs: gut error handling in xfs_trans_unreserve_and_mod_sb()
(bsc#1214275).
- commit e55f7c6
- pseries/iommu/ddw: Fix kdump to work in absence of
ibm,dma-window (bsc#1214297 ltc#197503).
- commit ea499bc
- net: vmxnet3: fix possible use-after-free bugs in
vmxnet3_rq_alloc_rx_buf() (bsc#1214350 CVE-2023-4387).
- commit 0fa208f
- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
- commit dfa3fd7
- intel/e1000:fix repeated words in comments (jsc#PED-5738).
- commit e5d93d0
- e1000: Fix typos in comments (jsc#PED-5738).
- commit 64fd6bc
- e1000: switch to napi_consume_skb() (jsc#PED-5738).
- commit 1ad8d9c
- intel: remove checker warning (jsc#PED-5738).
- commit c3ad152
- net: e1000: remove repeated words for e1000_hw.c (jsc#PED-5738).
- commit ace3bf9
- net: e1000: remove repeated word "slot" for e1000_main.c
(jsc#PED-5738).
- commit cfd4849
- e1000: Fix fall-through warnings for Clang (jsc#PED-5738).
- commit 7817f78
- e1000: drop unneeded assignment in e1000_set_itr()
(jsc#PED-5738).
- commit d2ba4db
- io_uring: Acquire completion_lock around io_get_deferred_req
(bsc#1213272 CVE-2023-21400).
- commit 84db304
- md/raid0: Fix performance regression for large sequential writes
(bsc#1213916).
- md/raid0: Factor out helper for mapping and submitting a bio
(bsc#1213916).
- commit b0544bd
- media: usb: siano: Fix warning due to null work_func_t function
pointer (bsc#1213969 CVE-2023-4132).
- commit c44d7c3
- media: usb: siano: Fix use after free bugs caused by
do_submit_urb (bsc#1213969 CVE-2023-4132).
- commit a27f430
- net/sched: cls_route: No longer copy tcf_result on update to
avoid use-after-free (bsc#1214149 CVE-2023-4128).
- net/sched: cls_fw: No longer copy tcf_result on update to
avoid use-after-free (bsc#1214149 CVE-2023-4128).
- net/sched: cls_u32: No longer copy tcf_result on update to
avoid use-after-free (bsc#1214149 CVE-2023-4128).
- commit ea3bad4
- exfat: check if filename entries exceeds max filename length
(bsc#1214120 CVE-2023-4273).
- commit d8c4244
- series.conf: resort
- commit b2ee92a
- netfilter: nf_tables: disallow rule addition to bound chain
via NFTA_RULE_CHAIN_ID (CVE-2023-4147 bsc#1213968).
- commit 1258138
- cxgb4: fix use after free bugs caused by circular dependency
problem (bsc#1213970 CVE-2023-4133).
- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
- timers: Add shutdown mechanism to the internal functions
(bsc#1213970).
- timers: Split [try_to_]del_timer[_sync]() to prepare for
shutdown mode (bsc#1213970).
- timers: Silently ignore timers with a NULL function
(bsc#1213970).
- timers: Rename del_timer() to timer_delete() (bsc#1213970).
- timers: Rename del_timer_sync() to timer_delete_sync()
(bsc#1213970).
- timers: Use del_timer_sync() even on UP (bsc#1213970).
- timers: Update kernel-doc for various functions (bsc#1213970).
- timers: Replace BUG_ON()s (bsc#1213970).
- clocksource/drivers/sp804: Do not use timer namespace for
timer_shutdown() function (bsc#1213970).
- clocksource/drivers/arm_arch_timer: Do not use timer namespace
for timer_shutdown() function (bsc#1213970).
- ARM: spear: Do not use timer namespace for timer_shutdown()
function (bsc#1213970).
- commit 6a1c404
- xen/netback: Fix buffer overrun triggered by unusual packet
(CVE-2023-34319, XSA-432, bsc#1213546).
- commit 3617080
- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 3f35ab4
- net: tun_chr_open(): set sk_uid from current_fsuid()
(CVE-2023-4194 bsc#1214019).
- commit 25c979d
- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194
bsc#1214019).
- commit b03d1d8
- x86/microcode/AMD: Make stub function static inline
(bsc#1213868).
- Refresh patches.suse/x86-cpu-amd-add-a-zenbleed-fix.patch.
- commit f587833
- mm: Move mm_cachep initialization to mm_init() (bsc#1206418, CVE-2022-40982).
- commit 487512d
- bpf: add missing header file include (bsc#1211738
CVE-2023-0459).
- commit 0e6ab49
- locking/rwsem: Add __always_inline annotation to
__down_read_common() and inlined callers (bsc#1207270
jsc#PED-4567).
- commit 9e46337
- locking/rwsem: Disable preemption in all down_write*() and
up_write() code paths (bsc#1207270 jsc#PED-4567).
- commit e8b39d0
- locking/rwsem: Disable preemption in all down_read*() and
up_read() code paths (bsc#1207270 jsc#PED-4567).
- commit f20a53f
- locking/rwsem: Prevent non-first waiter from spinning in
down_write() slowpath (bsc#1207270 jsc#PED-4567).
- commit 9c40fdf
- locking/rwsem: Disable preemption while trying for rwsem lock
(bsc#1207270 jsc#PED-4567).
- commit d6741e8
- locking/rwsem: Allow slowpath writer to ignore handoff bit if
not set by first waiter (bsc#1207270 jsc#PED-4567).
- commit 22681e5
- locking/rwsem: Always try to wake waiters in out_nolock path
(bsc#1207270 jsc#PED-4567).
- commit 2dd13e8
- locking/rwsem: Conditionally wake waiters in reader/writer
slowpaths (bsc#1207270 jsc#PED-4567).
- commit c20a7d3
- locking/rwsem: No need to check for handoff bit if wait queue
empty (bsc#1207270 jsc#PED-4567).
- commit 7d6a2e9
- locking: Add missing __sched attributes (bsc#1207270
jsc#PED-4567).
- commit 0f7a2d1
- locking/rwsem: Optimize down_read_trylock() under highly
contended case (bsc#1207270 jsc#PED-4567).
- commit 46658e6
- locking/rwsem: Make handoff bit handling more consistent
(bsc#1207270 jsc#PED-4567).
- commit e47427d
- locking/rwsem: Fix comments about reader optimistic lock
stealing conditions (bsc#1207270 jsc#PED-4567).
- commit 4a0d7cf
- locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able()
(bsc#1207270 jsc#PED-4567).
- commit ee007db
- lockdep: Add preemption enabled/disabled assertion APIs
(bsc#1207270 jsc#PED-4567).
- commit 1386d93
- locking/rwsem: Disable preemption for spinning region
(bsc#1207270 jsc#PED-4567).
- commit 0fad749
- locking/rwsem: Remove an unused parameter of rwsem_wake()
(bsc#1207270 jsc#PED-4567).
- commit b255b46
- locking/rwsem: Fix comment typo (bsc#1207270 jsc#PED-4567).
- commit 0ac673a
- locking/rwsem: Remove reader optimistic spinning (bsc#1207270
jsc#PED-4567).
- commit 4b129c1
- locking/rwsem: Enable reader optimistic lock stealing
(bsc#1207270 jsc#PED-4567).
- commit 7c0e82a
- locking/rwsem: Prevent potential lock starvation (bsc#1207270
jsc#PED-4567).
- commit 00b076e
- locking/rwsem: Pass the current atomic count to
rwsem_down_read_slowpath() (bsc#1207270 jsc#PED-4567).
- commit 1d2b5fa
- locking/rwsem: Fold __down_{read,write}*() (bsc#1207270
jsc#PED-4567).
- commit fd0b8b5
- locking/rwsem: Introduce rwsem_write_trylock() (bsc#1207270
jsc#PED-4567).
- commit daa9d5f
- locking/rwsem: Better collate rwsem_read_trylock() (bsc#1207270
jsc#PED-4567).
- commit 23252c2
- rwsem: Implement down_read_interruptible (bsc#1207270
jsc#PED-4567).
- commit 07e26fd
- rwsem: Implement down_read_killable_nested (bsc#1207270
jsc#PED-4567).
- commit 42f4ca4
- locking/rwsem: Prepare for a rwsem backport
The rwsem backport will enable the kernel to run on large VMs in Azure
(M416v2, M832v2). The rwsem code is going to be updated with newest
features one of which disables optimistic spinning for readers.
- blacklist.conf: Remove an entry that is part of the backported
patch set.
- Delete
patches.suse/locking-rwsem-Disable-reader-optimistic-spinning.patch.
- commit d354394
- ipv6: rpl: Fix Route of Death (CVE-2023-2156 bsc#1211131).
- commit 5601bfa
- x86/srso: Add IBPB on VMEXIT (bsc#1213287, CVE-2023-20569).
- commit f2c709c
- x86/srso: Add IBPB (bsc#1213287, CVE-2023-20569).
- commit ef6bc71
- x86/srso: Add SRSO_NO support (bsc#1213287, CVE-2023-20569).
- commit a905016
- x86/cpu, kvm: Add support for CPUID_80000021_EAX (bsc#1213287, CVE-2023-20569).
- Refresh patches.suse/x86-cpufeatures-add-kabi-padding.patch.
- commit f39cd8f
- x86/srso: Add IBPB_BRTYPE support (bsc#1213287, CVE-2023-20569).
- commit 5d6a6a0
- x86: Sanitize linker script (bsc#1213287, CVE-2023-20569).
- commit 8ff4f99
- x86/retbleed: Add __x86_return_thunk alignment checks (bsc#1213287, CVE-2023-20569).
- commit e623809
- x86/srso: Add a Speculative RAS Overflow mitigation (bsc#1213287, CVE-2023-20569).
- commit 707be59
- kernel-binary.spec.in: Remove superfluous %% in Supplements
Fixes: 02b7735e0caf ("rpm/kernel-binary.spec.in: Add Enhances and Supplements tags to in-tree KMPs")
- commit 264db74
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
(CVE-2023-3611 bsc#1213585).
- net/sched: sch_qfq: refactor parsing of netlink parameters
(bsc#1213585).
- blacklist follow-up commit 158810b261d0 ("net/sched: sch_qfq: reintroduce
lmax bound check for MTU") as unlike the original upstream commit, our
backport does not remove the check
- commit 609da2e
- net/sched: cls_u32: Fix reference counter leak leading to
overflow (CVE-2023-3609 bsc#1213586).
- commit b22e9b9
- net/sched: cls_fw: Fix improper refcount update leads to
use-after-free (CVE-2023-3776 bsc#1213588).
- commit b7fc513
- vc_screen: don't clobber return value in vcs_read (bsc#1213167
CVE-2023-3567).
- vc_screen: modify vcs_size() handling in vcs_read() (bsc#1213167
CVE-2023-3567).
- vc_screen: move load of struct vc_data pointer in vcs_read()
to avoid UAF (bsc#1213167 CVE-2023-3567).
- commit da930b7
- block, bfq: Fix division by zero error on zero wsum
(bsc#1213653).
- commit 67879a5
- x86/xen: Fix secondary processors' FPU initialization (bsc#1206418, CVE-2022-40982).
- commit 8a9c409
- x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1206418, CVE-2022-40982).
- commit d9e45bd
- x86/fpu: Mark init functions __init (bsc#1206418, CVE-2022-40982).
- commit 613212d
- x86/fpu: Remove cpuinfo argument from init functions (bsc#1206418).
- commit 82c61db
- init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1206418).
- commit 6fb5f8f
- init: Invoke arch_cpu_finalize_init() earlier (bsc#1206418).
- commit 8ef61c6
- init: Remove check_bugs() leftovers (bsc#1206418).
- commit a639423
- ARM: cpu: Switch to arch_cpu_finalize_init() (bsc#1206418).
- commit cbb96e9
- x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1206418).
- commit 7fa4777
- x86/mm: Initialize text poking earlier (bsc#1206418, CVE-2022-40982).
- Refresh patches.suse/init-provide-arch_cpu_finalize_init.patch.
- commit 9784a5e
- init: Provide arch_cpu_finalize_init() (bsc#1206418).
- commit f81d332
- x86/mm: fix poking_init() for Xen PV guests (bsc#1206418, CVE-2022-40982).
- commit b12d1bf
- x86/mm: Use mm_alloc() in poking_init() (bsc#1206418, CVE-2022-40982).
- commit 9a1d45f
- net: tun: fix bugs for oversize packet when napi frags enabled
(bsc#1213543 CVE-2023-3812).
- commit 5e9be17
- netfilter: nf_tables: do not ignore genmask when looking up
chain by id (CVE-2023-31248 bsc#1213061).
- commit 414921d
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
(CVE-2023-35001 bsc#1213059).
- commit b0acbe2
- uaccess: Add speculation barrier to copy_from_user()
(bsc#1211738 CVE-2023-0459).
- commit 93eec59
- netfilter: nf_tables: incorrect error path handling with
NFT_MSG_NEWRULE (CVE-2023-3390 CVE-2023-3117 bsc#1212846
bsc#1213245).
- commit 176a7df
- KVM: Add GDS_NO support to KVM (bsc#1206418, CVE-2022-40982).
- commit 6550823
- x86/speculation: Add Kconfig option for GDS (bsc#1206418, CVE-2022-40982).
- commit eb94624
- x86/speculation: Add force option to GDS mitigation (bsc#1206418, CVE-2022-40982).
- commit 79691d3
- x86/speculation: Add Gather Data Sampling mitigation (bsc#1206418, CVE-2022-40982).
- commit 74a70bc
- ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304).
- ocfs2: fix a deadlock when commit trans (bsc#1199304).
- jbd2: export jbd2_journal_[grab|put]_journal_head (bsc#1199304).
- ocfs2: fix race between searching chunks and release
journal_head from buffer_head (bsc#1199304).
- commit f86bdfe
- Refresh
patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s-asso.patch.
- commit d8b8cf8
- x86/cpu/amd: Add a Zenbleed fix (bsc#1213286, CVE-2023-20593).
- commit c2a9155
- x86/cpu/amd: Move the errata checking functionality up (bsc#1213286, CVE-2023-20593).
- commit d7a9bc3
- rpm: Update dependency to match current kmod.
- commit d687dc3
- keys: Do not cache key in task struct if key is requested from
kernel thread (bsc#1213354).
- commit 0121b9a
- net: mana: Add support for vlan tagging (bsc#1212301).
- commit 613e87e
- fs: hfsplus: fix UAF issue in hfsplus_put_super (bsc#1211867, CVE-2023-2985).
- commit e01b911
- rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME
They depend on CONFIG_TOOLCHAIN_HAS_*.
- commit 1007103
- ubi: Fix failure attaching when vid_hdr offset equals to
(sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size <= alloc,
size (bsc#1210584).
- commit 8f5f025
- Remove more packaging cruft for SLE < 12 SP3
- commit a16781c
- Get module prefix from kmod (bsc#1212835).
- commit f6691b0
- rpm/check-for-config-changes: ignore also PAHOLE_HAS_*
We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE.
- commit 86b52c1
- usrmerge: Adjust module path in the kernel sources (bsc#1212835).
With the module path adjustment applied as source patch only
ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to
non-usrmerged.
- commit dd9a820
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (bsc#1212842
CVE-2023-3090).
- commit ddb6922
- x86/build: Avoid relocation information in final vmlinux
(bsc#1187829).
- commit 88b515e
- Refresh
patches.suse/cifs-fix-open-leaks-in-open_cached_dir.patch.
s/sync_hdr/hdr/ - fix build breakage on CONFIG_CIFS_DEBUG2=y.
- commit c3cb631
- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- commit 95a40a6
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (git-fixes
bsc#1212606 CVE-2023-3358).
- commit 7077c4f
- usb: gadget: udc: renesas_usb3: Fix use after free bug
in renesas_usb3_remove due to race condition (bsc#1212513
CVE-2023-35828).
- commit 1f06f62
- binfmt_elf: Take the mmap lock when walking the VMA list
(bsc#1209039 CVE-2023-1249).
- commit 3f46ff2
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
(bsc#1210533 CVE-2023-2002).
- commit cb86eb0
- relayfs: fix out-of-bounds access in relay_file_read
(bsc#1212502 CVE-2023-3268).
- kernel/relay.c: fix read_pos error when multiple readers
(bsc#1212502 CVE-2023-3268).
- commit 73e4027
- media: dm1105: Fix use after free bug in dm1105_remove due to
race condition (bsc#1212501 CVE-2023-35824).
- commit 0c9d507
- media: saa7134: fix use after free bug in saa7134_finidev due
to race condition (bsc#1212494 CVE-2023-35823).
- commit 61b38d8
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
(CVE-2023-35788 bsc#1212504).
- commit 865936b
- Drop a buggy dvb-core fix patch (bsc#1205758)
Also the kabi workaround is dropped, too
- commit 7ace3fb
- cifs: fix open leaks in open_cached_dir() (bsc#1209342).
- commit 82c30e2
- kernel-docs: Add buildrequires on python3-base when using python3
The python3 binary is provided by python3-base.
- commit c5df526
- fbcon: Check font dimension limits (CVE-2023-3161 bsc#1212154).
- commit 6f6d21f
- Move setting %%build_html to config.sh
- commit 3f65cd5
- memstick: r592: Fix UAF bug in r592_remove due to race condition
(CVE-2023-3141 bsc#1212129 bsc#1211449).
- commit 4d760e7
- firewire: fix potential uaf in outbound_phy_packet_callback()
(CVE-2023-3159 bsc#1212128).
- commit 444321d
- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5
- Move setting %%split_optional to config.sh
- commit 4519250
- Move setting %%supported_modules_check to config.sh
- commit d9c64aa
- rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
- commit 799f050
- rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
- commit 334fb4d
- Also include kernel-docs build requirements for ALP
- commit 114d088
- Move the kernel-binary conflicts out of the spec file.
Thie list of conflicting packages varies per release.
To reduce merge conflicts move the list out of the spec file.
- commit 4d81125
- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit a8f82d0
- Avoid unsuported tar parameter on SLE12
- commit f11765a
- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
(bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
(bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
(bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -> "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit 5088617
- Move obsolete KMP list into a separate file.
The list of obsoleted KMPs varies per release, move it out of the spec
file.
- commit 016bc55
- Trim obsolete KMP list.
SLE11 is out of support, we do not need to handle upgrading from SLE11
SP1.
- commit 08819bb
- Generalize kernel-doc build requirements.
- commit 23b058f
- kernel-binary: Add back kernel-default-base guarded by option
Add configsh option for splitting off kernel-default-base, and for
not signing the kernel on non-efi
- commit 28c22af
- net: rpl: fix rpl header size calculation (CVE-2023-2156
bsc#1211131).
- commit 884cd15
- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- commit 6cf7013
- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32
- Fix usrmerge error (boo#1211796)
- commit da84579
- Update References
patches.suse/x86-speculation-restore-speculation-related-msrs-during-s3-resume.patch
(bsc#1198400 bsc#1209779 CVE-2023-1637).
- commit 23e11e7
- tcp: Fix data races around icsk->icsk_af_ops (bsc#1204405
CVE-2022-3566).
- commit d1f836b
- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
Requires corresponding patch to kmod.
- commit b8e00c5
- Update
patches.suse/netfilter-x_tables-use-correct-memory-barriers.patch
(bsc#1184208 CVE-2021-29650 bsc#1211596 CVE-2020-36694).
- commit 0092ed2
- HID: asus: use spinlock to safely schedule workers (bsc#1208604
CVE-2023-1079).
- commit df4ce9a
- HID: asus: use spinlock to protect concurrent accesses
(bsc#1208604 CVE-2023-1079).
- commit 4b7a2e4
- ipv6: sr: fix out-of-bounds read when setting HMAC data
(bsc#1211592).
- commit f37c1a1
- power: supply: bq24190: Fix use after free bug in bq24190_remove
due to race condition (CVE-2023-33288 bsc#1211590).
- commit 3e2047c
- kernel-source: Remove unused macro variant_symbols
- commit 915ac72
- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
bsc#1205758).
- commit c99685c
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
(CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
dvb_frontend (CVE-2022-45885 bsc#1205758).
- commit f5d1bea
- media: dvbdev: fix error logic at dvb_register_device()
(CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
(CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
implementation (CVE-2022-45884 bsc#1205756).
- commit fa580d0
- net: sched: sch_qfq: prevent slab-out-of-bounds in
qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit eeb865d
- i2c: xgene-slimpro: Fix out-of-bounds bug in
xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit e9b03ca
- netrom: Fix use-after-free caused by accept on already
connected socket (bsc#1211186 CVE-2023-32269).
- commit e76516d
- SUNRPC: Ensure the transport backchannel association
(bsc#1211203).
- commit db18275
- rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
- commit 1c1a4cd
- netfilter: nf_tables: deactivate anonymous set from preparation
phase (CVE-2023-32233 bsc#1211043).
- commit 8d253dc
- act_mirred: use the backlog for nested calls to mirred ingress
(CVE-2022-4269 bsc#1206024).
- net/sched: act_mirred: better wording on protection against
excessive stack growth (CVE-2022-4269 bsc#1206024).
- net/sched: act_mirred: refactor the handle of xmit
(CVE-2022-4269 bsc#1206024).
- commit c36d39a
- wifi: brcmfmac: slab-out-of-bounds read in
brcmf_get_assoc_ies() (bsc#1209287 CVE-2023-1380).
- commit 238a208
- Remove obsolete rpm spec constructs
defattr does not need to be specified anymore
buildroot does not need to be specified anymore
- commit c963185
- kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate
obsoletes correctly (boo#1172073 bsc#1191731).
rpm only supports full length release, no provides
- commit c9b5bc4
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
(bsc#1206878 bsc#1211105 CVE-2023-2513).
- commit 2a8658b
- ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878
bsc#1211105 CVE-2023-2513).
- commit 880db90
- kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
- commit d6c8c20
- net: qcom/emac: Fix use after free bug in emac_remove due to
race condition (bsc#1211037 CVE-2023-2483).
- commit d3abec2
- Update patches.suse/io_uring-prevent-race-on-registering-fixed-files.patch
Fix the missing the bsc# prefix for the bug number in the References tag.
- commit 704a6c4
- timens: Forbid changing time namespace for an io_uring process
(bsc#1208474 CVE-2023-23586).
- commit 89cf4b3
- s390,dcssblk,dax: Add dax zero_page_range operation to dcssblk
driver (bsc#1199636).
- commit 6a9faa3
- xfs: verify buffer contents when we skip log replay (bsc#1210498
CVE-2023-2124).
- commit 8eed3d3
- io_uring: prevent race on registering fixed files (1210414
CVE-2023-1872).
- commit e53cfa3
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
(bsc#1206992 CVE-2022-2196).
- commit f66a218
- keys: Fix linking a duplicate key to a keyring's assoc_array
(bsc#1207088).
- commit 527a5be
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
(bsc#1209871 CVE-2023-1670).
- commit cfec974
- Drivers: vmbus: Check for channel allocation before looking
up relids (git-fixes).
- commit de13f74
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost
ipaddress (bsc#1210647 CVE-2023-2162).
- commit d0a859e
- RDMA/core: Refactor rdma_bind_addr (bsc#1210629 CVE-2023-2176)
- commit 5886145
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests (bsc#1210629 CVE-2023-2176)
- commit 8b6288f
- RDMA/cma: Do not change route.addr.src_addr outside state checks (bsc#1210629 CVE-2023-2176)
- commit c706a03
- RDMA/cma: Make the locking for automatic state transition more clear (bsc#1210629 CVE-2023-2176)
- commit 7a43827
- vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
- commit f513a6e
- x86/speculation: Allow enabling STIBP with legacy IBRS
(bsc#1210506 CVE-2023-1998).
- commit d03ef09
- cifs: fix negotiate context parsing (bsc#1210301).
- commit 5d87bbe
- power: supply: da9150: Fix use after free bug in
da9150_charger_remove due to race condition (CVE-2023-30772
bsc#1210329).
- commit 61aa622
- k-m-s: Drop Linux 2.6 support
- commit 22b2304
- Remove obsolete KMP obsoletes (bsc#1210469).
- commit 7f325c6
- udmabuf: add back sanity check (git-fixes bsc#1210453
CVE-2023-2008).
- commit b2b9158
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove
due to race condition (CVE-2023-1855 bsc#1210202).
- commit 4401c6f
- netlink: limit recursion depth in policy validation
(CVE-2020-36691 bsc#1209613).
- Refresh
patches.suse/netlink-prevent-potential-spectre-v1-gadgets.patch.
- commit 374a1af
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race
condition (git-fixes bsc#1210337 CVE-2023-1990).
- commit 775e632
- Bluetooth: btsdio: fix use after free bug in btsdio_remove
due to unfinished work (CVE-2023-1989 bsc#1210336).
- commit e27c00d
- Update
patches.suse/NFSD-Protect-against-send-buffer-overflow-in-NFSv2-R.patch
(bsc#1205128 CVE-2022-43945 bsc#1210124).
- Update
patches.suse/NFSD-Protect-against-send-buffer-overflow-in-NFSv3-R.patch
(bsc#1205128 CVE-2022-43945 bsc#1210124).
- Update
patches.suse/NFSD-Protect-against-send-buffer-overflow-in-NFSv3-Rdir.patch
(bsc#1205128 CVE-2022-43945 bsc#1210124).
Fix performance problem with these patches - bsc@1210124
- commit 4dbd22d
- btrfs: fix race between quota disable and quota assign ioctls
(CVE-2023-1611 bsc#1209687).
- commit 3fdcd22
- Fix double fget() in vhost_net_set_backend() (bsc#1210203
CVE-2023-1838).
- commit 7e671a8
- Define kernel-vanilla as source variant
The vanilla_only macro is overloaded. It is used for determining if
there should be two kernel sources built as well as for the purpose of
determmioning if vanilla kernel should be used for kernel-obs-build.
While the former can be determined at build time the latter needs to be
baked into the spec file template. Separate the two while also making
the latter more generic.
$build_dtbs is enabled on every single rt and azure branch since 15.3
when the setting was introduced, gate on the new $obs_build_variant
setting as well.
- commit 36ba909
- series.conf: cleanup
- update upstream references and resort:
- patches.suse/wifi-cfg80211-avoid-nontransmitted-BSS-list-corrupti.patch
- commit 9bae747
- net/ulp: use consistent error code when blocking ULP
(CVE-2023-0461 bsc#1208787).
- net/ulp: prevent ULP without clone op from entering the LISTEN
status (CVE-2023-0461 bsc#1208787).
- commit 028f0fd
- rpm/constraints.in: increase the disk size for armv6/7 to 24GB
It grows and the build fails recently on SLE15-SP4/5.
- commit 41ac816
- rpm/check-for-config-changes: add TOOLCHAIN_NEEDS_* to IGNORED_CONFIGS_RE
This new form was added in commit e89c2e815e76 ("riscv: Handle
zicsr/zifencei issues between clang and binutils").
- commit 234baea
- seq_buf: Fix overflow in seq_buf_putmem_hex() (bsc#1209549
CVE-2023-28772).
- commit 5c5e4d3
- PCI: hv: Add a per-bus mutex state_lock (bsc#1209785).
- Revert "PCI: hv: Fix a timing issue which causes kdump to fail
occasionally" (bsc#1209785).
- PCI: hv: Remove the useless hv_pcichild_state from struct
hv_pci_dev (bsc#1209785).
- PCI: hv: Fix a race condition in hv_irq_unmask() that can
cause panic (bsc#1209785).
- PCI: hv: fix a race condition bug in hv_pci_query_relations()
(bsc#1209785).
- commit 6b9e385
- kvm: initialize all of the kvm_debugregs structure before
sending it to userspace (bsc#1209532 CVE-2023-1513).
- commit bd9c11d
- Bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052
CVE-2023-28464).
- commit 677d920
- net: tls: fix possible race condition between
do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
(bsc#1209366 CVE-2023-28466).
- commit 5f7c4a6
- Move ENA upstream fix to sorted section.
- commit aff6c71
- RDMA/core: Don't infoleak GRH fields (bsc#1209778 CVE-2021-3923)
- commit 50ba48b
- tipc: fix NULL deref in tipc_link_xmit() (bsc#1209289
CVE-2023-1390).
- commit b2c1533
- tun: avoid double free in tun_free_netdev (bsc#1209635
CVE-2022-4744).
- commit c5cf205
- net/sched: tcindex: update imperfect hash filters respecting
rcu (CVE-2023-1281 bsc#1209634).
- commit 97b3f9d
- fs/proc: task_mmu.c: don't read mapcount for migration entry
(CVE-2023-1582, bsc#1209636).
- commit 35d5c42
- af_unix: Get user_ns from in_skb in unix_diag_get_exact()
(bsc#1209290 CVE-2023-28327).
- commit 000517c
- netlink: prevent potential spectre v1 gadgets (bsc#1209547
CVE-2017-5753).
- commit cec3f24
- tipc: add an extra conn_get in tipc_conn_alloc (bsc#1209288
CVE-2023-1382).
- commit 6a58da4
- tipc: set con sock in tipc_conn_alloc (bsc#1209288
CVE-2023-1382).
- commit 06eaf34
- Refresh
patches.suse/sctp-fail-if-no-bound-addresses-can-be-used-for-a-gi.patch.
- commit 890554b
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
(bsc#1209291 CVE-2023-28328).
- commit af7b7eb
- rpm/group-source-files.pl: Fix output difference when / is in location
While previous attempt to fix group-source-files.pl in 6d651362c38
"rpm/group-source-files.pl: Deal with {pre,post}fixed / in location"
breaks the infinite loop, it does not properly address the issue. Having
prefixed and/or postfixed forward slash still result in different
output.
This commit changes the script to use the Perl core module File::Spec
for proper path manipulation to give consistent output.
- commit 4161bf9
- Require suse-kernel-rpm-scriptlets at all times.
The kernel packages call scriptlets for each stage, add the dependency
to make it clear to libzypp that the scriptlets are required.
There is no special dependency for posttrans, these scriptlets run when
transactions are resolved. The plain dependency has to be used to
support posttrans.
- commit 56c4dbe
- Replace mkinitrd dependency with dracut (bsc#1202353).
Also update mkinitrd refrences in documentation and comments.
- commit e356c9b
- prlimit: do_prlimit needs to have a speculation check
(bsc#1209256 CVE-2017-5753).
- commit a2ac7fb
- rpm/kernel-obs-build.spec.in: Remove SLE11 cruft
- commit 871eeb4
- rds: rds_rm_zerocopy_callback() correct order for
list_add_tail() (CVE-2023-1078 bsc#1208601).
- rds: rds_rm_zerocopy_callback() use list_first_entry()
(CVE-2023-1078 bsc#1208601).
- commit ec0c93c
- net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075
bsc#1208598).
- commit d651270
- tap: tap_open(): correctly initialize socket uid (CVE-2023-1076
bsc#1208599).
- tun: tun_chr_open(): correctly initialize socket uid
(CVE-2023-1076 bsc#1208599).
- net: add sock_init_data_uid() (CVE-2023-1076 bsc#1208599).
- netfilter: nf_tables: fix null deref due to zeroed list head
(CVE-2023-1095 bsc#1208777).
- commit b65b67b
- cifs: fix use-after-free caused by invalid pointer `hostname`
(bsc#1208971).
- commit d1a37f1
- HID: bigben: use spinlock to safely schedule workers
(CVE-2023-25012 bsc#1207560).
- HID: bigben_worker() remove unneeded check on report_field
(CVE-2023-25012 bsc#1207560).
- HID: bigben: use spinlock to protect concurrent accesses
(CVE-2023-25012 bsc#1207560).
- commit 3c79258
- malidp: Fix NULL vs IS_ERR() checking (bsc#1208843
CVE-2023-23004).
- commit a8f9557
- Do not sign the vanilla kernel (bsc#1209008).
- commit cee4d89
- rpm/group-source-files.pl: Deal with {pre,post}fixed / in location
When the source file location provided with -L is either prefixed or
postfixed with forward slash, the script get stuck in a infinite loop
inside calc_dirs() where $path is an empty string.
user@localhost:/tmp> perl "$HOME/group-source-files.pl" -D devel.files -N nondevel.files -L /usr/src/linux-5.14.21-150500.41/
...
path = /usr/src/linux-5.14.21-150500.41/Documentation/Kconfig
path = /usr/src/linux-5.14.21-150500.41/Documentation
path = /usr/src/linux-5.14.21-150500.41
path = /usr/src
path = /usr
path =
path =
path =
... # Stuck in an infinite loop
This workarounds the issue by breaking out the loop once path is an
empty string. For a proper fix we'd want something that
filesystem-aware, but this workaround should be enough for the rare
occation that this script is ran manually.
Link: http://mailman.suse.de/mlarch/SuSE/kernel/2023/kernel.2023.03/msg00024.html
- commit 6d65136
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
(CVE-2023-1118 bsc#1208837).
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node
function (CVE-2023-23000 bsc#1208816).
- commit 52c897a
- scsi: qla2xxx: Add option to disable FC2 Target support
(bsc#1198438 bsc#1206103).
- Delete
patches.suse/revert-scsi-qla2xxx-Changes-to-support-FCP2-Target.patch.
- commit 5959f82
- drm/virtio: Fix NULL vs IS_ERR checking in
virtio_gpu_object_shmem_init (bsc#1208776 CVE-2023-22998).
- commit 2fd8a08
- net/mlx5: DR, Fix NULL vs IS_ERR checking in
dr_domain_init_resources (bsc#1208845 CVE-2023-23006).
- commit 14082ec
- mm/slub: fix panic in slab_alloc_node() (bsc#1208023).
- commit b092aa9
- kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179).
When -b is specified the script is prefixed with KMP_NEEDS_MKINITRD=1
which sets the variable for a simple command.
However, the script is no longer a simple command. Export the variable
instead.
- commit 152a069
- README.BRANCH: Update
Relieve Ivan Ivanov of his duties as branch maintainer as I am back.
- commit 1da55f1
- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in
dwc3_qcom_acpi_register_core (bsc#1208741 CVE-2023-22995).
- commit 7a31d48
- net: mpls: fix stale pointer if allocation fails during device
rename (bsc#1208700 CVE-2023-26545).
- commit 18d9ec7
- s390/kexec: fix ipl report address for kdump (bsc#1207575).
- commit 7a62f13
- x86/mm: Randomize per-cpu entry area (bsc#1207845
CVE-2023-0597).
- commit 3a695c7
- vmxnet3: move rss code block under eop descriptor (bsc#1208212).
- commit f589074
- usb: rndis_host: Secure rndis_query check against int overflow
(CVE-2023-23559 bsc#1207051).
- commit d9a137b
- net: mana: Assign interrupts to CPUs based on NUMA nodes
(bsc#1208153).
- Refresh
patches.suse/net-mana-Fix-IRQ-name-add-PCI-and-queue-number.patch.
- commit 342fb4d
- net: mana: Fix accessing freed irq affinity_hint (bsc#1208153).
- genirq: Provide new interfaces for affinity hints (bsc#1208153).
- commit 4d24191
- drm/vmwgfx: Avoid NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331 CVE-2022-38096)
- commit 1f21d95
- module: Don't wait for GOING modules (bsc#1196058, bsc#1186449,
bsc#1204356, bsc#1204662).
- commit 77af0b0
- drm/vmwgfx: Validate the box size for the snooped cursor (bsc#1203332 CVE-2022-36280)
- commit f246cad
- Refresh
patches.kabi/scsi-kABI-fix-for-eh_should_retry_cmd.patch (bsc#1206351).
The former kABI fix only move the newly added member to scsi_host_template to
the end of the struct. But that is usually allocated statically, even by 3rd
party modules relying on kABI. Before we use the member we need to signalize
that it is to be expected. As we only expect it to be allocated by in-tree
modules that we can control, we can use a space in the bitfield to signalize
that.
- commit 0e772e8
- net: mana: Fix IRQ name - add PCI and queue number
(bsc#1207875).
- commit f2c8c19
- x86/bugs: Flush IBP in ib_prctl_set() (bsc#1207773
CVE-2023-0045).
- commit baf6bec
- net: ena: optimize data access in fast-path code (bsc#1208137).
- commit 09cfdc0
- net: sched: fix race condition in qdisc_graft() (CVE-2023-0590
bsc#1207795).
- net_sched: add __rcu annotation to netdev->qdisc (CVE-2023-0590
bsc#1207795).
- commit c6f042b
- Update
patches.suse/net-mlx5-Allocate-individual-capability.patch
(bsc#1195175).
- Update
patches.suse/net-mlx5-Dynamically-resize-flow-counters-query-buff.patch
(bsc#1195175).
- Update
patches.suse/net-mlx5-Fix-flow-counters-SF-bulk-query-len.patch
(bsc#1195175).
- Update
patches.suse/net-mlx5-Reduce-flow-counters-bulk-query-buffer-size.patch
(bsc#1195175).
- Update
patches.suse/net-mlx5-Reorganize-current-and-maximal-capabilities.patch
(bsc#1195175).
- Update
patches.suse/net-mlx5-Use-order-0-allocations-for-EQs.patch
(bsc#1195175).
Fixed bugzilla reference.
- commit e56868b
- krb5
-
- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
(CVE-2023-36054);
- Added patches:
* 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch
- libX11
-
- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
* Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)
- gcc12
-
- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
with variable length stack allocations on aarch64.
Fixes CVE-2023-4039. [bsc#1214052]
- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
* includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
from the branch after the release.
- Speed up builds with --enable-link-serialization.
- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749
- Don't rely on %usrmerged, set it based on standard %suse_version
- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
* remove gcc12-fifo-jobserver-support.patch which is now
included upstream
- avoid trailing backslashes at the end of post install scripts
- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537
- Update embedded newlib to version 4.2.0
* includes newlib-4.1.0-aligned_alloc.patch
- add gcc12-riscv-inline-atomics.patch,
gcc12-riscv-pthread.patch: handle subword size inline atomics
(needed by several openSUSE packages)
- avahi
-
- Add avahi-CVE-2023-1981.patch: emit error if requested service
is not found (boo#1210328 CVE-2023-1981).
- util-linux
-
- Add upstream patch fix-lib-internal-cache-size.patch
bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9
- libcap
-
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
(bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch
- c-ares
-
- Update to version 1.19.1
Security:
* CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
(bsc#1211604)
* CVE-2023-31147 Moderate. Insufficient randomness in generation
of DNS query IDs (bsc#1211605)
* CVE-2023-31130. Moderate. Buffer Underwrite in
ares_inet_net_pton() (bsc#1211606)
* CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
during cross compilation (bsc#1211607)
Bug fixes:
* Fix uninitialized memory warning in test
* ares_getaddrinfo() should allow a port of 0
* Fix memory leak in ares_send() on error
* Fix comment style in ares_data.h
* Fix typo in ares_init_options.3
* Sync ax_pthread.m4 with upstream
* Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support
- cryptsetup
-
- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
* Check for physical memory available also in PBKDF benchmark.
* Try to avoid OOM killer on low-memory systems without swap.
* Use only half of detected free memory on systems without swap.
* Add patches:
- cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
- cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
- cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch
- libdb-4_8
-
- Fix incomplete license tag. [bsc#1099695]
- libeconf
-
- Additional info for version 0.5.2:
* Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
* Fixed a stack-buffer-overflow vulnerability in "read_file"
function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)
- Update to version 0.5.2:
* Fixed build for aarch64 and gcc13.
* Making the output verbose when a test fails.
* Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
function.
* Fixed a stack-buffer-overflow vulnerability in "read_file"
function.
* Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
Sets a list of directory structures (with order) which describes
the directories in which the files have to be parsed.
E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
directories will be parsed:
"<default_dirs>/<project_name>.<suffix>.d/"
"<default_dirs>/<project_name>/conf.d/"
"<default_dirs>/<project_name>.d/"
"<default_dirs>/<project_name>/"
The entry "<default_dirs>/<project_name>.<suffix>.d/" will be added
automatically.
* General code cleanup.
- Update to version 0.5.1:
* Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
there is a /etc/_example_._suffix_ file. (#175)
- Update to version 0.5.0:
* API calls econf_read*WithCallback supporting a general (void *)
argument for user defined data with which the callback function is
called.
* Tagged following functions deprecated:
econf_requireOwner, econf_requireGroup, econf_requirePermissions,
econf_followSymlinks, econf_reset_security_settings
Use one of the econf_read*WithCallback functions instead.
- Update to version 0.4.9:
* libeconf.h: added missing sys/types.h header (#171)
* new API calls: econf_readFileWithCallback,
econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
* Checking NULL comment parameter in the parsing functions.
- Update to version 0.4.8+git20221114.7ff7704:
* Parsing files which are containing keys only (#170)
All delimiters are allowed now : "", " =", " ", "=". But the
user should use "" in order to be distinct.
* /usr/etc/shells.d/<file_name> will not be parsed if
/etc/shells.d/<file_name> is defined too.
* Lto build fixed (#168)
* New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
econf_set_delimiter_tag
* Checking UID,GroupID, permissions,... of the parsed files (#165)
New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
econf_followSymlinks
* Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
* Error handling improved for nums and booleans (#163)
- Update to version 0.4.6+git20220427.3016f4e:
* econftool:
* * Parsing error: Reporting file and line nr.
* * --delimeters=spaces Taking all kind of spaces for delimiter
* libeconf:
Fixed bsc#1198165: Parsing files correctly which have space characters
AND none space characters as delimiters.
- Update to version 0.4.5+git20220406.c9658f2:
* econftool:
* * New call "syntax" for checking the configuration files only.
Returns an error string with line number if an error occurs.
* * New options "--comment" and "--delimeters"
* * Parsing one file only if needed.
- mozilla-nss
-
- update to NSS 3.90
* bmo#1623338 - ride along: remove a duplicated doc page
* bmo#1623338 - remove a reference to IRC
* bmo#1831983 - clang-format lib/freebl/stubs.c
* bmo#1831983 - Add a constant time select function
* bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
* bmo#1830973 - output early build errors by default
* bmo#1804505 - Update the technical constraints for KamuSM
* bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
* bmo#1790763 - Enable default UBSan Checks
* bmo#1786018 - Add explicit handling of zero length records
* bmo#1829391 - Tidy up DTLS ACK Error Handling Path
* bmo#1786018 - Refactor zero length record tests
* bmo#1829112 - Fix compiler warning via correct assert
* bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
* bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
* bmo#1784163 - Fix reading raw negative numbers
* bmo#1748237 - Repairing unreachable code in clang built with gyp
* bmo#1783647 - Integrate Vale Curve25519
* bmo#1799468 - Removing unused flags for Hacl*
* bmo#1748237 - Adding a better error message
* bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
* bmo#1782980 - Fall back to the softokn when writing certificate trust
* bmo#1806010 - FIPS-104-3 requires we restart post programmatically
* bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
* bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
* bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
* bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
* bmo#1822076 - fix rst warnings in nss doc
* bmo#1821997 - Fix incorrect pygment style
* bmo#1821292 - Change GYP directive to apply across platforms
* Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
* bmo#1804505 - Update the technical constraints for KamuSM.
* bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
* bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
* bmo#1820175 - PR_STATIC_ASSERT is cursed
* bmo#1767883 - Need to add policy control to keys lengths for signatures
* bmo#1820175 - Fix unreachable code warning in fuzz builds
* bmo#1820175 - Fix various compiler warnings in NSS
* bmo#1820175 - Enable various compiler warnings for clang builds
* bmo#1815136 - set PORT error after sftk_HMACCmp failure
* bmo#1767883 - Need to add policy control to keys lengths for signatures
* bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
* bmo#1804660 - Make high tag number assertion failure an error
* bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
length from 284 to 384
* bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
* bmo#1789436 - Fix build failure on Windows
* bmo#1811337 - migrate Win 2012 tasks to Azure
* bmo#1810702 - fix title length in doc
* bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
* bmo#1570615 - Add presence/absence tests for TLS GREASE
* bmo#1804688 - Correct addition of GREASE value to ALPN xtn
* bmo#1789436 - CH extension permutation
* bmo#1570615 - TLS GREASE (RFC8701)
* bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
* bmo#1815870 - use a different treeherder symbol for each docker
image build task
* bmo#1815868 - pin an older version of the ubuntu:18.04 and
20.04 docker images
* bmo#1810702 - remove nested table in rst doc
* bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
* bmo#1812671 - build failure while implicitly casting SECStatus
to PRUInt32
- update to NSS 3.88.1
* bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
* bmo#1815870 - use a different treeherder symbol for each docker
image build task
* bmo#1815868 - pin an older version of the ubuntu:18.04 and
20.04 docker images
* bmo#1810702 - remove nested table in rst doc
* bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
* bmo#1812671 - build failure while implicitly casting SECStatus
to PRUInt32
* bmo#1212915 - Add check for ClientHello SID max length
* bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
* bmo#1790357 - ECH client - Discard resumption TLS < 1.3
Session(IDs|Tickets) if ECH configs are setup
* bmo#1714245 - On HRR skip PSK incompatible with negotiated
ciphersuites hash algorithm
* bmo#1789410 - ECH client: Send ech_required alert on server
negotiating TLS 1.2. Fixed misleading Gtest,
enabled corresponding BoGo test
* bmo#1771100 - Added Bogo ECH rejection test support
* bmo#1771100 - Added ECH 0Rtt support to BoGo shim
* bmo#1747957 - RSA OAEP Wycheproof JSON
* bmo#1747957 - RSA decrypt Wycheproof JSON
* bmo#1747957 - ECDSA Wycheproof JSON
* bmo#1747957 - ECDH Wycheproof JSON
* bmo#1747957 - PKCS#1v1.5 wycheproof json
* bmo#1747957 - Use X25519 wycheproof json
* bmo#1766767 - Move scripts to python3
* bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
* bmo#1805907 - Extending RSA-PSS bltest test coverage
(Adding SHA-256 and SHA-384)
* bmo#1804091 - NSS needs to move off of DSA for integrity checks
* bmo#1805815 - Add initial testing with ACVP vector sets using
acvp-rust
* bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
* bmo#1803226 - NULL password encoding incorrect
* bmo#1804071 - Fix rng stub signature for fuzzing builds
* bmo#1803595 - Updating the compiler parsing for build
* bmo#1749030 - Modification of supported compilers
* bmo#1774654 - tstclnt crashes when accessing gnutls server
without a user cert in the database.
* bmo#1751707 - Add configuration option to enable source-based
coverage sanitizer
* bmo#1751705 - Update ECCKiila generated files.
* bmo#1730353 - Add support for the LoongArch 64-bit architecture
* bmo#1798823 - add checks for zero-length RSA modulus to avoid
memory errors and failed assertions later
* bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
* bmo#1803190 - conscious language removal in NSS
* bmo#1794506 - Set nssckbi version number to 2.60
* bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
CKA_NSS_EMAIL_DISTRUST_AFTER for 3
TrustCor Root Certificates
* bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
* bmo#1797559 - Remove EC-ACC root cert from NSS
* bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
* bmo#1794495 - Remove Network Solutions Certificate Authority
* bmo#1802331 - compress docker image artifact with zstd
* bmo#1799315 - Migrate nss from AWS to GCP
* bmo#1800989 - Enable static builds in the CI
* bmo#1765759 - Removing SAW docker from the NSS build system
* bmo#1783231 - Initialising variables in the rsa blinding code
* bmo#320582 - Implementation of the double-signing of the message
for ECDSA
* bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
* bmo#1792821 - Modification of the primes.c and dhe-params.c in
order to have better looking tables
* bmo#1796815 - Update zlib in NSS to 1.2.13
* bmo#1796504 - Skip building modutil and shlibsign when building
in Firefox
* bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
* bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
* bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
and -Wtype-limits warnings
* bmo#1796281 - Followup: add missing stdint.h include
* bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
* bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
warnings on Windows
* bmo#1796079 - Fix -Wstring-conversion warnings
* bmo#1796075 - Fix -Wempty-body warnings
* bmo#1795242 - Fix unused-but-set-parameter warning
* bmo#1795241 - Fix unreachable-code warnings
* bmo#1795222 - Mark _nss_version_c unused on clang-cl
* bmo#1795668 - Remove redundant variable definitions in lowhashtest
* Add note about python executable to build instructions.
- update to NSS 3.84
* bmo#1791699 - Bump minimum NSPR version to 4.35
* bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
* bmo#1788875 - Remove set-but-unused variables from
SEC_PKCS12DecoderValidateBags
* bmo#1563221 - remove older oses that are unused part3/ BeOS
* bmo#1563221 - remove older unix support in NSS part 3 Irix
* bmo#1563221 - remove support for older unix in NSS part 2 DGUX
* bmo#1563221 - remove support for older unix in NSS part 1 OSF
* bmo#1778413 - Set nssckbi version number to 2.58
* bmp#1785297 - Add two SECOM root certificates to NSS
* bmo#1787075 - Add two DigitalSign root certificates to NSS
* bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
* bmo#1771100 - Added bug reference and description to disabled
UnsolicitedServerNameAck bogo ECH test
* bmo#1779361 - Removed skipping of ECH on equality of private and
public server name
* bmo#1779357 - Added comment and bug reference to
ECHRandomHRRExtension bogo test
* bmo#1779370 - Added Bogo shim client HRR test support. Fixed
overwriting of CHInner.random on HRR
* bmo#1779234 - Added check for server only sending ECH extension
with retry configs in EncryptedExtensions and if not
accepting ECH. Changed config setting behavior to
skip configs with unsupported mandatory extensions
instead of failing
* bmo# 1771100 - Added ECH client support to BoGo shim. Changed
CHInner creation to skip TLS 1.2 only extensions to
comply with BoGo
* bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
server accept_confirmation bugs
* bmo#1771100 - Update BoGo tests to recent BoringSSL version
* bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
* bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
* bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
* bmo#1784724 - Initialize local variables in
TlsConnectTestBase::ConnectAndCheckCipherSuite
* bmo#1784191 - Cast the result of GetProcAddress
* bmo#1681099 - pk11wrap: Tighten certificate lookup based on
PKCS #11 URI.
- update to NSS 3.81
* bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
* bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
* bmo#1779285 - Add no_application_protocol alert handler and
test client error code is set
* bmo#1777672 - Gracefully handle null nickname in
CERT_GetCertNicknameWithValidity
* required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
sufficient (boo#1202118)
- update to NSS 3.80
* bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
* bmo#1617956 - Add support for asynchronous client auth hooks.
* bmo#1497537 - nss-policy-check: make unknown keyword check optional.
* bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
by allocating it on initialization. Replaced
redundant code with assert. Debug builds: Added
buffer freeing/allocation for each record.
* bmo#1773022 - Mark 3.79 as an ESR release.
* bmo#1764206 - Bump nssckbi version number for June.
* bmo#1759815 - Remove Hellenic Academic 2011 Root.
* bmo#1770267 - Add E-Tugra Roots.
* bmo#1768970 - Add Certainly Roots.
* bmo#1764392 - Add DigitCert Roots.
* bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
* bmo#1366464 - Compare signature and signatureAlgorithm fields in
legacy certificate verifier.
* bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
* bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
* bmo#1771498 - Uninitialized value in cert_ComputeCertType.
* bmo#1760998 - Avoid data race on primary password change.
* bmo#1769063 - Replace ppc64 dcbzl intrinisic.
* bmo#1771036 - Allow LDFLAGS override in makefile builds.
- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
fixes to PBKDF2 parameter validation.
- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
validate extra PBKDF2 parameters according to FIPS 140-3.
- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
update session->lastOpWasFIPS before destroying the key after
derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
excess code.
- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).
- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
checks. Thanks to Martin for the DHKey parts.
- Add manpages to mozilla-nss-tools (bsc#1208242)
- freetype2
-
- Added patch:
* CVE-2023-2004.patch
+ fixes bsc#1210419, CVE-2023-2004: Integer overflow
- harfbuzz
-
- Add CVE-2023-25193.patch: limit how far we skip when looking
back (bsc#1207922 CVE-2023-25193).
- libjansson
-
- Update to 2.14 (boo#1201817):
* New Features:
+ Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
corresponding `nocheck` functions.
+ Add jansson_version_str() and jansson_version_cmp() for runtime
version checking
+ Add json_object_update_new(), json_object_update_existing_new()
and json_object_update_missing_new() functions
+ Add json_object_update_recursive()
+ Add `json_pack()` format specifiers s*, o* and O* for values
that can be omitted if null (#339).
+ Add `json_error_code()` to retrieve numeric error codes
(#365, #380, #381).
+ Enable thread safety for `json_dump()` on all systems.
Enable thread safe `json_decref()` and `json_incref()` for
modern compilers (#389).
+ Add `json_sprintf()` and `json_vsprintf()` (#393).
* Fixes:
+ Handle `sprintf` corner cases.
+ Add infinite loop check in json_deep_copy()
+ Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
+ Update version detection for sphinx-build
+ Fix error message in `json_pack()` for NULL object (#409).
+ Avoid invalid memory read in `json_pack()` (#421).
+ Call va_end after va_copy in `json_vsprintf()` (#427).
+ Improve handling of formats with '?' and '*' in `json_pack()`
(#438).
+ Remove inappropriate `jsonp_free()` which caused
segmentation fault in error handling (#444).
+ Fix incorrect report of success from `json_dump_file()` when
an error is returned by `fclose()` (#359).
+ Make json_equal() const-correct (#344).
+ Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.
- openldap2
-
- bsc#1212260 - crash in libldap when non-ldap data responds
* 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch
- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
* 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch
- ldb
-
- Remove no longer needed ldb-memory-bug-15096-4.15-ldbonly.patch
- Add cve-2023-0614.patch: Address CVE-2023-0614
- CVE-2023-0614: samba: Access controlled AD LDAP attributes can be
discovered; (bsc#1209485); (bso#15270);
- Update to version 2.4.4
+ CVE-2022-32746 ldb: db: Use-after-free occurring in
database audit logging module; (bso#15009); (bsc#1201490).
- liblognorm
-
- Upgrade to liblognorm v2.0.6 (jsc#PED-4883)
* 2018-11-02: nitfixes: issues deteced by CodeFactor.com
* 2018-11-01: more cleanup of shell scripting
* 2018-10-31: cleanup shell scripting
* 2018-10-26: implement Checkpoint LEA transfer format
* 2018-10-31: fix mising shebangs in test scripts
* 2018-10-30: fix some bash style nits
* 2018-07-15: fix very theoretic misadressing (gcc-8 warning)
* 2018-06-26: string parser: add "lazy" matching mode
* 2018-05-30: Update lognormalizer.c
* 2018-05-30: Update lognormalizer.c to support case fallthrough
* 2018-05-30: Update README
* 2018-05-10: Fix for #229 (cisco-interface-spec at end of line)
* 2018-03-21: Suppress invalid param error for name to fix #270
- Upgrade to liblognorm v2.0.5
* 2018-04-25: fix potential NULL pointer addressing
* 2018-04-07: Add test for nested user types
* 2018-04-07: Fix use after free with nested user types (#235)
* 2018-04-25: build system: fix gcc warning
* 2018-04-25: make "make check" "succeed" on solaris 10
* 2018-04-16: fix build warnings with some newer compilers
* 2018-04-16: remove dead code
* 2018-04-16: fix potential memory leaks during config processing
* 2018-04-16: fix memory leak during config processing
* 2018-04-16: csv encoder: fix format error when processing arrays
* 2018-03-29: Explicitly list supported whitespace characters
* 2018-03-28: "fix" return type of unused dummy function
- replaces liblognorm-2.0.4-no-return-in-nonvoid-function.patch
* 2018-03-21: Suppress invalid param error for name to fix #270
* 2018-03-19: fix header guard
* 2018-03-06: Correct CLI options in the docs
* 2018-01-13: AIX port : added compatibility and modified lognormalizer for AIX.
* 2017-11-29: codestyle: correct line length to 120
* 2017-11-29: codestyle: set max line length to 120
* 2017-11-25: fix some very bad line length violations
* 2017-11-25: travis: temporarily permit longer line length
* 2017-10-19: make build with gcc7
* 2017-10-05: es_str2cstr leak in string-to v1 parse
- ncurses
-
- Modify patch ncurses-6.1.dif
* Secure writing terminfo entries by setfs[gu]id in s[gu]id
(boo#1210434, CVE-2023-29491)
* Reading is done since 2000/01/17
- nftables
-
- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
fixes a crash in nftables if layer2 reject rules are processed (e.g.
Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).
- openssl-1_1
-
- Security fix: (bsc#1213853, CVE-2023-3817)
* Fix excessive time spent checking DH q parameter value
(bsc#1213853, CVE-2023-3817). The function DH_check() performs
various checks on DH parameters. After fixing CVE-2023-3446 it
was discovered that a large q parameter value can also trigger
an overly long computation during some of these checks. A
correct q value, if present, cannot be larger than the modulus
p parameter, thus it is unnecessary to perform these checks if
q is larger than p. If DH_check() is called with such q parameter
value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
computationally intensive checks are skipped.
* Add openssl-1_1-CVE-2023-3817.patch
- Dont pass zero length input to EVP_Cipher because assembler
optimized AES cannot handle zero size. [bsc#1213517]
* Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch
- Security fix: [bsc#1213487, CVE-2023-3446]
* Fix DH_check() excessive time with over sized modulus.
* The function DH_check() performs various checks on DH parameters.
One of those checks confirms that the modulus ("p" parameter) is
not too large. Trying to use a very large modulus is slow and
OpenSSL will not normally use a modulus which is over 10,000 bits
in length.
However the DH_check() function checks numerous aspects of the
key or parameters that have been supplied. Some of those checks
use the supplied modulus value even if it has already been found
to be too large.
A new limit has been added to DH_check of 32,768 bits. Supplying
a key/parameters with a modulus over this size will simply cause
DH_check() to fail.
* Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
* Reworked the Fix for the Timing Oracle in RSA Decryption
The previous fix for this timing side channel turned out to cause
a severe 2-3x performance regression in the typical use case
compared to 1.1.1s.
* Add openssl-CVE-2022-4304.patch
* Removed patches:
- openssl-CVE-2022-4304-1of2.patch
- openssl-CVE-2022-4304-2of2.patch
* Refreshed openssl-CVE-2023-0286.patch
- Update further expiring certificates that affect tests [bsc#1201627]
* Add openssl-Update-further-expiring-certificates.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
* Possible DoS translating ASN.1 object identifiers
* Add openssl-CVE-2023-2650.patch
- Security Fix: [CVE-2023-0465, bsc#1209878]
* Invalid certificate policies in leaf certificates are silently ignored
* Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
* Certificate policy check not enabled
* Add openssl-CVE-2023-0466.patch
- Security Fix: [CVE-2023-0464, bsc#1209624]
* Excessive Resource Usage Verifying X.509 Policy Constraints
* Add openssl-CVE-2023-0464.patch
- parted
-
- fix null pointer dereference (bsc#1193412)
- add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
- add: parted-mkpart-manpage.patch
- pcre2
-
- Security fix: [bsc#1213514, CVE-2022-41409]
* Integer overflow vulnerability in pcre2test before 10.41
allows attackers to cause a denial of service or other
unspecified impacts via negative input.
* Add pcre2-CVE-2022-41409.patch
- postgresql15
-
- Update to 15.4:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
owner name into an extension script if the name contains a
quote, backslash, or dollar sign.
* bsc#1214061, CVE-2023-39418: Fix MERGE to enforce row security
policies properly.
* https://www.postgresql.org/docs/15/release-15-4.html
- Update to 15.3:
* bsc#1211228, CVE-2023-2454:
Prevent CREATE SCHEMA from defeating changes in search_path
* bsc#1211229, CVE-2023-2455: Enforce row-level security
policies correctly after inlining a set-returning function
* https://www.postgresql.org/docs/15/release-15-3.html
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.
- Include -mini in Name: to avoid conflicts in the source package
name and OBS internal dependency tracking.
- procps
-
- Add patch CVE-2023-4016.patch
* CVE-2023-4016: ps buffer overflow (bsc#1214290)
- Add patch bsc1209122-a6c0795d.patch
* Fix for bsc#1209122 to allow `-´ as leading character to ignore
possible errors on systctl entries
- python-base
-
- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.
- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built
- The condition around libnsl-devel BuildRequires is NOT
switching off NIS support on SLE < 15, support for NIS used to
be in the glibc itself. Partial revert of sr#1061583.
- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
the documentation even with the current Sphinx. (SUSE-ONLY
PATCH, DO NOT SEND UPSTREAM!)
- Enable --with-system-ffi for non-standard architectures.
- SLE-12 builds nis.so as well.
- python3
-
- Add 99366-patch.dict-can-decorate-async.patch fixing
gh#python/cpython#98086 (backport from Python 3.10 patch in
gh#python/cpython!99366), fixing bsc#1211158.
- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
CVE-2007-4559 (bsc#1203750) by adding the filter for
tarfile.extractall (PEP 706).
- Use python3 modules to build the documentation.
- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
which eliminates unnecessary and dangerous calls to
PyThread_exit_thread() (bsc#1203355).
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
bsc#1208471) blocklists bypass via the urllib.parse component
when supplying a URL that starts with blank characters
- snapper
-
- improved responsiveness of snapperd when a btrfs quota rescan
is running (see bsc#1211459)
* added pr821.patch
- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
* added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
* added pr790.patch
- libsolv
-
- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
[bsc#1195633]
- bump version to 0.7.24
- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23
- libxml2
-
- Security update:
* [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
buffer overflow
- Added file libxml2-CVE-2023-39615.patch
- Security update:
* [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
isn't deterministic
- Added patch libxml2-CVE-2023-29469.patch
* [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
xmlSchemaFixupComplexType
- Added patch libxml2-CVE-2023-28484-1.patch
- Added patch libxml2-CVE-2023-28484-2.patch
- Fix changelog entries in both .changes files.
- Apply al patches correctly for libxml2 and python-libxml2.
- libyajl
-
- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)
- zlib
-
- Fix deflateBound() before deflateInit(), bsc#1210593
bsc1210593.patch
- Add DFLTCC support for using inflate() with a small window,
fixes bsc#1206513
* bsc1206513.patch
- zstd
-
- Fix CVE-2022-4899, bsc#1209533
* Disallow empty --output-dir-flat=
- Added patch:
* Disallow-empty-output-directory.patch
- libzypp
-
- Fixup changes for 17.31.16. Remove faulty reference to a bug
actually fixed in 2019.
- version 17.31.20 (22)
- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
Clang seems to have issues with picking the overload in
std::men_fn if there is a static overload of a member function.
We need to explicitely specify the correct type of the function
pointer. To make sure this would not break compiling a
application with clang that builds against libzypp this patch
works around the problem.
- version 17.31.19 (22)
- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)
- Fix wrong filesize exceeded dl abort in zyppng::Downloader
(bsc#1213673)
In some cases when downloading very small files we can run into
issues when the URL is protected by credentials.
- version 17.31.17 (22)
- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
(bsc#1210740)
- version 17.31.16 (22)
- Fix build against protobuf >= 22 (fixes #465, closes #466)
Port away from protobuf_generate_cpp. Upstream protobuf does not
export protobuf_generate_cpp by default anymore.
Use protobuf_generate instead, which is also available on older
versions.
- Remove SUSE < SLE11 constructs (fixes #464).
- version 17.31.15 (22)
- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
HTTP/2 RFC 9113 forbids fields ending with a space. So we make
sure all custom headers are trimmed. This also includes headers
returned by URL-Resolver plugins.
- version 17.31.14 (22)
- curl: Trim user agent string (bsc#1212187)
HTTP/2 RFC 9113 forbids fields ending with a space. Violation
results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)
- Do not unconditionally release a medium if provideFile failed
(bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)
- MediaCurl: Fix endless loop if wrong credentials are stored in
credentials.cat (bsc#1210870)
Since libzypp-17.31.7 wrong credentials stored in credentials.cat
may lead to an endless loop. Rather than asking for the right
credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
(bsc#1208329)
Maximum time in seconds that you allow the connection phase to
the server to take. This only limits the connection phase, it has
no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)
- fix build with boost 1.82
- BuildRequires: libsolv-devel >= 0.7.24 for x86_64_v[234]
support.
- version 17.31.10 (22)
- Workround bsc#1195633 while libsolv <= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
(boo#1127591)
Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
[#439])
Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)
- ProgressData: enforce reporting the INIT||END state
(bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
(bsc#1205636)
- version 17.31.8 (22)
- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
(bsc#1203248)
Without enabled repos, the dependent PTF-packages would be
removed (not replaced!) as well. To remove a PTF "zypper install
- - -PTF" or a dedicated "zypper removeptf PTF" should be used.
This will update the installed PTF packages to theit latest
version.
- version 17.31.7 (22)
- Avoid calling getsockopt when we know the info already.
This patch hopefully fixes logging on WSL, getsockopt seems to
not be fully supported but the code required it when accepting
new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
falling back.
- version 17.31.6 (22)
- Create '.no_auto_prune' in the package cache dir to prevent auto
cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)
- Do not clean up MediaSetAccess before using the geoip file
(fixes #424)
- version 17.31.4 (22)
- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
settings.
- Implement geoIP feature for zypp.
This patch adds a feature to rewrite request URLs to the repo
servers by querying a geoIP file from download.opensuse.org. This
file can return a redirection target depending on the clients IP
adress, this way we can directly contact a local mirror of d.o.o
instead. The redir target stays valid for 24hrs.
This feature can be disabled in zypp.conf by setting
'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
When not receiving a blocklist via metalink file from the server
MediaMultiCurl used to fallback to a fixed, relatively small
BLKSIZE. This patch changes the fallback into a dynamic value
based on the filesize using a similar metric as the MirrorCache
implementation on the server side.
- Skip media.1/media download for http repo status calc.
This patch allows zypp to skip a extra media.1/media download to
calculate if a repository needs to be refreshed. This
optimisation only takes place if the repo does specify only
downloading base urls.
- version 17.31.3 (22)
- log4j
-
- Do not package the *.zip artifacts whose content is part of the
multi-release jars already
- Added patch:
* log4j-java8compat.patch
+ maintain ByteBuffer and CharBuffer compatibility with java 8
- Build as multi-release jar.
- Add some logging providers which we can build with the existing
dependencies and without cycles.
- Add dependency on standalone javax.activation-api that is not
included in newer JDKs
- Update to 2.17.2
* New Features
- Limit loading of configuration via a url to https by default.
- Require log4j2.Script.enableLanguages to be specified to
enable scripting for specific languages.
- Add TB support to FileSize.
- Add the log4j-to-jul JDK Logging Bridge.
- Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
- Add Configurator.setLevel(Logger, Level),
setLevel(String, String), and setLevel(Class, Level).
- Add shorthand syntax for properties configuration format for
specifying a logger level and appender refs.
- Add optional additional fields to NoSQLAppender.
* Fixed Bugs
- Flag LogManager as initiialized if the LoggerFactory is
provided as a property.
- Fix DefaultConfiguration leak in PatternLayout.
- Document that the Spring Boot Lookup requires the
log4j-spring-boot dependency.
- Fix RoutingAppender backcompat and disallow recursive
evaluation of lookup results outside of configuration
properties.
- Fix ThreadContextDataInjector initialization deadlock.
- Fix substitutions when programmatic configuration is used.
- OptionConverter could cause a StackOverflowError.
- Log4j 1.2 bridge class ConsoleAppender should extend
WriterAppender and provide better compatibility with custom
appenders.
- Log4j 1.2 bridge method NDC.inherit(Stack) should not use
generics to provide source compatibility.
- Log4j 1.2 bridge class PatternLayout is missing constants
DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
- Log4j 1.2 bridge class PropertyConfigurator should implement
Configurator.
- Log4j 1.2 bridge interface Configurator doConfigure() methods
should use LoggerRepository, not LoggerContext.
- Log4j 1.2 bridge class OptionConverter is missing
selectAndConfigure() methods.
- Log4j 1.2 bridge class Category should implement
AppenderAttachable.
- Log4j 1.2 bridge method Category.exists(String) should be
static.
- Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
- Log4j 1.2 bridge class LogManager default constructor should
be public.
- Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
was in the wrong package and incomplete.
- Log4j 1.2 bridge interfaces missing from package
org.apache.log4j.spi: ThrowableRenderer,
ThrowableRendererSupport, TriggeringEventEvaluator.
- Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
- Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
adding filters to custom appender.
- Log4j 1.2 bridge should ignore case in properties file keys.
- Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
- Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
- Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
- Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
- Log4j 1.2 bridge class Category is missing some protected
instance variables.
- Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
- Log4j 1.2 bridge methods Category.getChainedPriority() and
getEffectiveLevel() should not be final.
- Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
and NOPLogger.
- Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
- Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
fully.
- Log4j 1.2 bridge fixes parsing filters in properties
configuration file #680.
- Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
Properties, String, Class, Object).
- Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
missing constructors and public instance variable.
- Log4j 1.2 bridge does not support system properties in log4j.xml.
- Log4j 1.2 bridge now logs a warning instead of throwing an
NullPointerException when building a Syslog appender with a
missing "SyslogHost" param.
- Log4j 1.2 bridge should allow property and XML attributes to
start with either an upper-case or lower-case letter.
- Log4j 1.2 bridge uses the wrong default values for a
TTCCLayout.
- Log4j 1.2 bridge throws ClassCastException when using
SimpleLayout and others.
- Log4j 1.2 bridge uses the wrong file pattern for rolling file
appenders.
- Log4j 1.2 bridge throws ClassCastException when using
SimpleLayout and others.
- Log4j 1.2 bridge creates a SocketAppender instead of a
SyslogAppender.
- Log4j 1.2 bridge uses some incorrect default property values
in some appenders.
- Log4j 1.2 bridge supports the SocketAppender.
- Log4j 1.2 bridge missing DefaultThrowableRenderer.
- Log4j 1.2 bridge missing some ThrowableInformation constructors.
- Log4j 1.2 bridge missing some LocationInfo constructors.
- Log4j 1.2 bridge missed
- Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
- Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
- Log4j 1.2 bridge missing UtilLoggingLevel.
- Log4j 1.2 bridge missing FormattingInfo.
- Log4j 1.2 bridge missing PatternConverter.
- Log4j 1.2 bridge missing PatternParser.
- Log4j 1.2 bridge issues with filters.
- Log4j 1.2 bridge implements most of DOMConfigurator.
- JndiManager reverts to 2.17.0 behavior: Read the system
property for each call.
- Configurator.setLevel not fetching the correct LoggerContext.
- Fix DTD error: Add missing ELEMENT for Marker.
- Fix log4j-jakarta-web service file.
- AppenderLoggingException logging any exception to a MongoDB
Appender.
- Possible NullPointerException in MongoDb4DocumentObject,
MongoDbDocumentObject, DefaultNoSqlObject.
- Trim whitespace before parsing a String into an Integer.
- Log4j 1.2 bridge throws a ClassCastException when logging a
Map with non-String keys.
- Log4j 1.2 bridge Check for non-existent appender when parsing
properties #761. Thanks to Kenny MacLeod.
- Log4j 1.2 bridge supports global threshold.
* Changes
- Change modifier of method
org.apache.logging.log4j.core.tools.Generate#generate to
public (was package private) to facilitate automated code
generation.
- shadow
-
- bsc#1213189: Change lock mechanism to file locking to prevent
lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch
- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch
- bsc#1210507 (CVE-2023-29383):
Check for control characters
- Add shadow-CVE-2023-29383.patch
- man
-
- Use inverted exit status in exec option of find command to
avoid refreshing man database (boo#1155879)
- Minor corrections on %ghost /var/cache/man
- mgr-libmod
-
- version 4.2.8-1
* Ignore extra metadata fields for Liberty Linux (bsc#1208908)
- mozilla-nspr
-
- update to version 4.35
* fixes for building with clang
* use the number of online processors for the
PR_GetNumberOfProcessors() API on some platforms
* fix build on mips+musl libc
* Add support for the LoongArch 64-bit architecture
- nekohtml
-
- Use the security patched fork at
https://github.com/sparklemotion/nekohtml
- Upgrade to version 1.9.22.neko2
* fixes bsc#1198739, CVE-2022-28366, bsc#1198404, CVE-2022-24839
- Fetch tarball using source service
- Modified patches:
* 0002-Jar-paths.patch -> 0001-Jar-paths.patch
* 0003-Add-OSGi-attributes.patch -> 0002-Add-OSGi-attributes.patch
+ rebase to changed context
- Build with source and target levels 8
- nfs-utils
-
- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
Inconsistencies in /etc/exports shouldn't be fatal.
(bsc#1212594)
- Add 0030-systemd-use-correct-modprobe-d-directory
SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
(bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed
- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE
- Rename all drop-in options.conf files as 10-options.conf
This makes it easier for other packages to over-ride
with a drop-in with a later sequence number.
resource-agents does this.
(bsc#1207843)
- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
Avoid modprobe errors when sysctl is not installed.
(bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
config.
(bsc#1203746)
- objectweb-asm
-
- Upgrade to version 9.3
* new Opcodes.V19 constant for Java 19
* new size() method in ByteVector
* checkDataFlow option in CheckClassAdapter can now be used
without valid maxStack and maxLocals values
* new Maven BOM
* bug fixes
+ 317949: fix javadoc errors
+ remap invokedynamic field handles properly
+ add missing left curly brace in ASMifier output of visitModule
- Build asm as modular jar files to be used as such by java >= 9
- Leave asm-all.jar as a non-modular jar
- Upgrade to version 9.2
* Up to JDK 18 support
* ClassReader.readStream() performance improvements
* Add some input validations in ClassReader
* Replace -debug flag in Printer with -nodebug (-debug continues
to work)
* new V15 constant
* experimental support for PermittedSubtypes and RecordComponent
* Javadoc fixes
* bug fixes
+ 317942: ClassCheckAdaptor output represents reference arrays
as only their "root" component type
+ 317921: Make Analyzer not require correct maxs or calculate
maxs fast
+ 317922: InstructionAdapter shall throw consistent exceptions
+ 317923: Incorrect documentation on ClassReader's use of
AnnotationVisitor
+ 317929: ClassRemapper doesn't remap annotation values
+ 317930: Can CheckClassAdapter.checkTypeRef throw a more
specific exception?
+ 317931: Shall CheckMethodAdapter.Method.visitLabel throw
IllegalStateException?
+ Tests that requires preview features should only run if the
preview features of the right JDK are enabled
+ 317897: AdviceAdapter incorrectly emits onMethodEnter from a
try-catch block in a constructor
+ 317900: Javadoc of ClassVisitor does not specify order of
visitRecordComponent
+ 317904: Bug with constructors in AdviceAdapter
+ 317910: Iterating over a InsnList with an iterator traverses
the list twice
+ 317898: ASM 8 does not support writing of empty records
+ 317896: Performance degradation when using dynamic constants
as a static paramet to another InDy/ConDy
+ 317885: SKIP_DEBUG now skips MethodParameters attributes
- openssh
-
- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
requested to load a PKCS#11 provider that isnt a PKCS#11
provider (bsc#1213504,CVE-2023-38408)
- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)
- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
This caused invalid and irrelevant environment assignments (bsc#1207014).
- oro
-
- Build with source/target levels 8
- perl-Bootloader
-
- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944
- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
(bsc#1210799, bsc#1201399)
- 0.943
- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
UEFI platforms (bsc#1208003)
- 0.942
- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941
- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940
- perl-Satcon
-
- version 4.2.3-1
* Accept keys with dots
- perl
-
- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
new patch: perl-cpan_verify_cert.diff
- postgresql13
-
- Update to 13.12:
* bsc#1214059, CVE-2023-39417: Disallow substituting a schema or
owner name into an extension script if the name contains a
quote, backslash, or dollar sign.
* https://www.postgresql.org/docs/13/release-13-12.html
- Update to 13.11:
* bsc#1211228, CVE-2023-2454:
Prevent CREATE SCHEMA from defeating changes in search_path
* bsc#1211229, CVE-2023-2455: Enforce row-level security
policies correctly after inlining a set-returning function
* https://www.postgresql.org/docs/13/release-13-11.html
- bsc#1210303: Stop using the obsolete internal %_restart_on_update
macro and drop support for sysv init to simplify the scriptlets.
- Include -mini in Name: to avoid conflicts in the source package
name and OBS internal dependency tracking.
- publicsuffix
-
- Update to version 20230607:
* util: gTLD data autopull updates for 2023-06-07T15:13:30 UTC (#1772)
* Add test workflow (#1750)
* Update of gov.pl labels (#1752)
- Update to version 20230426:
* Update public_suffix_list.dat (#1747)
* Update README.md - added link to sorting
- Update to version 20230414:
* util: gTLD data autopull updates for 2023-04-14T15:13:16 UTC (#1738)
* Change - update comments/policy for the French ccTLDs (`.fr`, `.pm`, `.re`, `.tf`, `.wf`, `.yt`) by Administrator (#1732)
* New policy for .museum, without all the SLD (Second-Level Domains) (#1729)
* Add ladesk.com (#1538)
* util: gTLD data autopull updates for 2023-03-18T15:13:12 UTC (#1723)
* util: gTLD data autopull updates for 2023-03-08T15:15:40 UTC (#1714)
* Additional ngrok domains - more `ngrok.io` from #48 + `ngrok.app` `ngrok-free.app` `ngrok.dev` `ngrok-free.dev` `ngrok.pizza` (#1653)
* Add `ie.ua` (#1597)
- Update to version 20230226:
* TLD and gTLD data updated
* add SAKURA Internet Inc. domains
* Add 3.azurestaticapps.net DNS suffix
* Add subset of Akamai domains to the PSL
* Add it.com
* Add Snowflake private domains
* add canva-apps.com and canva-apps.cn
* add fastly-edge.com
* Add Adobe Developer Platform domains
* Add autocode.dev
* update .bj
- Update to version 20221129:
* util: gTLD data autopull updates for 2022-11-29T15:14:18 UTC (#1658)
* Add activetrail.biz (#1655)
* Add `cf-ipfs.com`, `cloudflare-ipfs.com`, and `r2.dev` (#1582)
* Added mytabit.co.il; mytabit.com; (#1499)
* removing tbits.me from public suffix list (#1642)
- Update to version 20221107:
* Add myamaze.net (#1602)
* Remove gwiddle.co.uk (#1638)
* Removing domain that expired and is not used (#1643)
* util: gTLD data autopull updates for 2022-11-02T15:17:39 UTC (#1641)
* Fix typos in pull request template (#1639)
* util: gTLD data autopull updates for 2022-10-29T15:16:24 UTC (#1636)
* util: gTLD data autopull updates for 2022-10-20T15:22:14 UTC (#1632)
* util: gTLD data autopull updates for 2022-10-15T15:17:50 UTC (#1631)
* Use CentralNic model for Amazon suffixes (#1629)
* Names.of.London is no longer operating the service (#1630)
* Domains from simplesite.com used for subdomain style webhosting of individual customer websites. (#1623)
* Add Fastmail user content domain user.fm (#1601)
* util: gTLD data autopull updates for 2022-10-11T15:20:32 UTC (#1626)
* util: gTLD data autopull updates for 2022-10-07T15:19:56 UTC (#1624)
* Add *.on-acorn.io (#1578)
* Update existing Replit entries, add `firewalledreplit.co` (#1568)
* Add 2.azurestaticapps.net DNS suffix (#1604)
* Update Pull Request Form to address #1619
* Add rules for AWS Cloud9 (#1590)
* util: gTLD data autopull updates for 2022-09-15T15:17:33 UTC (#1615)
- purge-kernels-service
-
- Change service type to exec (boo#1198668).
- python-cryptography
-
- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
* Don't allow update_into to mutate immutable objects
- python-pyasn1
-
- To avoid users of this package having to recompile bytecode
files, change the mtime of any __init__.py. (bsc#1207805)
- python-requests
-
- Add CVE-2023-32681.patch to fix unintended leak of
Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
Upstream commit: gh#psf/requests@74ea7cf7a6a2
- python-urllib3
-
- Add %dir declaration for %{_licensedir}
- python-PyJWT
-
- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)
- Drop CVE-2022-29217-non-blocked-pubkeys.patch since the issue
was fixed upstream in version 2.4.0
- python-boto3
-
- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Update to 1.26.89
* api-change:``ivschat``: [``botocore``] This release adds a new exception returned when calling
AWS IVS chat UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return
ConflictException when invalid updates are made in sequence to Logging Configurations.
* api-change:``secretsmanager``: [``botocore``] The type definitions of SecretString and
SecretBinary now have a minimum length of 1 in the model to match the exception thrown when you
pass in empty values.
- from version 1.26.88
* api-change:``codeartifact``: [``botocore``] This release introduces the generic package format, a
mechanism for storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to
allow for publishing generic packages.
* api-change:``connect``: [``botocore``] This release adds a new API, GetMetricDataV2, which
returns metric data for Amazon Connect.
* api-change:``evidently``: [``botocore``] Updated entity override documentation
* api-change:``networkmanager``: [``botocore``] This update provides example usage for
TransitGatewayRouteTableArn.
* api-change:``quicksight``: [``botocore``] This release has two changes: add state persistence
feature for embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties
for hidden collapsed row dimensions in PivotTableOptions.
* api-change:``redshift-data``: [``botocore``] Added support for Redshift Serverless workgroup-arn
wherever the WorkgroupName parameter is available.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Inference now allows SSM access to
customer's model container by setting the "EnableSSMAccess" parameter for a ProductionVariant in
CreateEndpointConfig API.
* api-change:``servicediscovery``: [``botocore``] Updated all AWS Cloud Map APIs to provide
consistent throttling exception (RequestLimitExceeded)
* api-change:``sesv2``: [``botocore``] This release introduces a new recommendation in Virtual
Deliverability Manager Advisor, which detects missing or misconfigured Brand Indicator for Message
Identification (BIMI) DNS records for customer sending identities.
- from version 1.26.87
* api-change:``athena``: [``botocore``] A new field SubstatementType is added to GetQueryExecution
API, so customers have an error free way to detect the query type and interpret the result.
* api-change:``dynamodb``: [``botocore``] Adds deletion protection support to DynamoDB tables.
Tables with deletion protection enabled cannot be deleted. Deletion protection is disabled by
default, can be enabled via the CreateTable or UpdateTable APIs, and is visible in
TableDescription. This setting is not replicated for Global Tables.
* api-change:``ec2``: [``botocore``] Introducing Amazon EC2 C7g, M7g and R7g instances, powered by
the latest generation AWS Graviton3 processors and deliver up to 25% better performance over
Graviton2-based instances.
* api-change:``lakeformation``: [``botocore``] This release adds two new API support
"GetDataCellsFiler" and "UpdateDataCellsFilter", and also updates the corresponding documentation.
* api-change:``mediapackage-vod``: [``botocore``] This release provides the date and time VOD
resources were created.
* api-change:``mediapackage``: [``botocore``] This release provides the date and time live
resources were created.
* api-change:``route53resolver``: [``botocore``] Add dual-stack and IPv6 support for Route 53
Resolver Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
* api-change:``sagemaker``: [``botocore``] There needs to be a user identity to specify the
SageMaker user who perform each action regarding the entity. However, these is a not a unified
concept of user identity across SageMaker service that could be used today.
- from version 1.26.86
* api-change:``dms``: [``botocore``] This release adds DMS Fleet Advisor Target Recommendation APIs
and exposes functionality for DMS Fleet Advisor. It adds functionality to start Target
Recommendation calculation.
* api-change:``location``: [``botocore``] Documentation update for the release of 3 additional map
styles for use with Open Data Maps: Open Data Standard Dark, Open Data Visualization Light & Open
Data Visualization Dark.
- from version 1.26.85
* api-change:``account``: [``botocore``] AWS Account alternate contact email addresses can now have
a length of 254 characters and contain the character "|".
* api-change:``ivs``: [``botocore``] Updated text description in DeleteChannel, Stream, and
StreamSummary.
- from version 1.26.84
* api-change:``dynamodb``: [``botocore``] Documentation updates for DynamoDB.
* api-change:``ec2``: [``botocore``] This release adds support for a new boot mode for EC2
instances called 'UEFI Preferred'.
* api-change:``macie2``: [``botocore``] Documentation updates for Amazon Macie
* api-change:``mediaconvert``: [``botocore``] The AWS Elemental MediaConvert SDK has improved
handling for different input and output color space combinations.
* api-change:``medialive``: [``botocore``] AWS Elemental MediaLive adds support for Nielsen
watermark timezones.
* api-change:``transcribe``: [``botocore``] Amazon Transcribe now supports role access for these
API operations: CreateVocabulary, UpdateVocabulary, CreateVocabularyFilter, and
UpdateVocabularyFilter.
- from version 1.26.83
* api-change:``iot``: [``botocore``] A recurring maintenance window is an optional configuration
used for rolling out the job document to all devices in the target group observing a predetermined
start time, duration, and frequency that the maintenance window occurs.
* api-change:``migrationhubstrategy``: [``botocore``] This release updates the File Import API to
allow importing servers already discovered by customers with reduced pre-requisites.
* api-change:``organizations``: [``botocore``] This release introduces a new reason code,
ACCOUNT_CREATION_NOT_COMPLETE, to ConstraintViolationException in CreateOrganization API.
* api-change:``pi``: [``botocore``] This release adds a new field PeriodAlignment to allow the
customer specifying the returned timestamp of time periods to be either the start or end time.
* api-change:``pipes``: [``botocore``] This release fixes some input parameter range and patterns.
* api-change:``sagemaker``: [``botocore``] Add a new field "EndpointMetrics" in SageMaker Inference
Recommender "ListInferenceRecommendationsJobSteps" API response.
- from version 1.26.82
* api-change:``codecatalyst``: [``botocore``] Published Dev Environments StopDevEnvironmentSession
API
* api-change:``pricing``: [``botocore``] This release adds 2 new APIs - ListPriceLists which
returns a list of applicable price lists, and GetPriceListFileUrl which outputs a URL to retrieve
your price lists from the generated file from ListPriceLists
* api-change:``s3outposts``: [``botocore``] S3 on Outposts introduces a new API ListOutpostsWithS3,
with this API you can list all your Outposts with S3 capacity.
- from version 1.26.81
* enhancement:Documentation: Splits service documentation into multiple sub-pages for better
organization and faster loading time.
* enhancement:Documentation: [``botocore``] Splits service documentation into multiple sub-pages
for better organization and faster loading time.
* api-change:``comprehend``: [``botocore``] Amazon Comprehend now supports flywheels to help you
train and manage new model versions for custom models.
* api-change:``ec2``: [``botocore``] This release allows IMDS support to be set to v2-only on an
existing AMI, so that all future instances launched from that AMI will use IMDSv2 by default.
* api-change:``kms``: [``botocore``] AWS KMS is deprecating the RSAES_PKCS1_V1_5 wrapping algorithm
option in the GetParametersForImport API that is used in the AWS KMS Import Key Material feature.
AWS KMS will end support for this wrapping algorithm by October 1, 2023.
* api-change:``lightsail``: [``botocore``] This release adds Lightsail for Research feature
support, such as GUI session access, cost estimates, stop instance on idle, and disk auto mount.
* api-change:``managedblockchain``: [``botocore``] This release adds support for tagging to the
accessor resource in Amazon Managed Blockchain
* api-change:``omics``: [``botocore``] Minor model changes to accomodate batch imports feature
- from version 1.26.80
* api-change:``devops-guru``: [``botocore``] This release adds the description field on
ListAnomaliesForInsight and DescribeAnomaly API responses for proactive anomalies.
* api-change:``drs``: [``botocore``] New fields were added to reflect availability zone data in
source server and recovery instance description commands responses, as well as source server launch
status.
* api-change:``internetmonitor``: [``botocore``] CloudWatch Internet Monitor is a a new service
within CloudWatch that will help application developers and network engineers continuously monitor
internet performance metrics such as availability and performance between their AWS-hosted
applications and end-users of these applications
* api-change:``lambda``: [``botocore``] This release adds the ability to create ESMs with Document
DB change streams as event source. For more information see
https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html.
* api-change:``mediaconvert``: [``botocore``] The AWS Elemental MediaConvert SDK has added support
for HDR10 to SDR tone mapping, and animated GIF video input sources.
* api-change:``timestream-write``: [``botocore``] This release adds the ability to ingest batched
historical data or migrate data in bulk from S3 into Timestream using CSV files.
- from version 1.26.79
* api-change:``connect``: [``botocore``] StartTaskContact API now supports linked task creation
with a new optional RelatedContactId parameter
* api-change:``connectcases``: [``botocore``] This release adds the ability to delete domains
through the DeleteDomain API. For more information see
https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
* api-change:``redshift``: [``botocore``] Documentation updates for Redshift API bringing it in
line with IAM best practices.
* api-change:``securityhub``: [``botocore``] New Security Hub APIs and updates to existing APIs
that help you consolidate control findings and enable and disable controls across all supported
standards
* api-change:``servicecatalog``: [``botocore``] Documentation updates for Service Catalog
- Update BuildRequires and Requires from setup.py
- Update to 1.26.78
* api-change:``appflow``: [``botocore``] This release enables the customers to choose whether to
use Private Link for Metadata and Authorization call when using a private Salesforce connections
* api-change:``ecs``: [``botocore``] This release supports deleting Amazon ECS task definitions
that are in the INACTIVE state.
* api-change:``grafana``: [``botocore``] Doc-only update. Updated information on attached role
policies for customer provided roles
* api-change:``guardduty``: [``botocore``] Updated API and data types descriptions for
CreateFilter, UpdateFilter, and TriggerDetails.
* api-change:``iotwireless``: [``botocore``] In this release, we add additional capabilities for
the FUOTA which allows user to configure the fragment size, the sending interval and the redundancy
ratio of the FUOTA tasks
* api-change:``location``: [``botocore``] This release adds support for using Maps APIs with an API
Key in addition to AWS Cognito. This includes support for adding, listing, updating and deleting
API Keys.
* api-change:``macie2``: [``botocore``] This release adds support for a new finding type,
Policy:IAMUser/S3BucketSharedWithCloudFront, and S3 bucket metadata that indicates if a bucket is
shared with an Amazon CloudFront OAI or OAC.
* api-change:``wafv2``: [``botocore``] You can now associate an AWS WAF v2 web ACL with an AWS App
Runner service.
- from version 1.26.77
* api-change:``chime-sdk-voice``: [``botocore``] This release introduces support for Voice
Connector media metrics in the Amazon Chime SDK Voice namespace
* api-change:``cloudfront``: [``botocore``] CloudFront now supports block lists in origin request
policies so that you can forward all headers, cookies, or query string from viewer requests to the
origin *except* for those specified in the block list.
* api-change:``datasync``: [``botocore``] AWS DataSync has relaxed the minimum length constraint of
AccessKey for Object Storage locations to 1.
* api-change:``opensearch``: [``botocore``] This release lets customers configure Off-peak window
and software update related properties for a new/existing domain. It enhances the capabilities of
StartServiceSoftwareUpdate API; adds 2 new APIs - ListScheduledActions & UpdateScheduledAction; and
allows Auto-tune to make use of Off-peak window.
* api-change:``rum``: [``botocore``] CloudWatch RUM now supports CloudWatch Custom Metrics
* api-change:``ssm``: [``botocore``] Document only update for Feb 2023
- from version 1.26.76
* api-change:``quicksight``: [``botocore``] S3 data sources now accept a custom IAM role.
* api-change:``resiliencehub``: [``botocore``] In this release we improved resilience hub
application creation and maintenance by introducing new resource and app component crud APIs,
improving visibility and maintenance of application input sources and added support for additional
information attributes to be provided by customers.
* api-change:``securityhub``: [``botocore``] Documentation updates for AWS Security Hub
* api-change:``tnb``: [``botocore``] This is the initial SDK release for AWS Telco Network Builder
(TNB). AWS Telco Network Builder is a network automation service that helps you deploy and manage
telecom networks.
- from version 1.26.75
* bugfix:SSO: [``botocore``] Fixes aws/aws-cli`#7496
<https://github.com/aws/aws-cli/issues/7496>`__ by using the correct profile name rather than the
one set in the session.
* api-change:``auditmanager``: [``botocore``] This release introduces a
ServiceQuotaExceededException to the UpdateAssessmentFrameworkShare API operation.
* api-change:``connect``: [``botocore``] Reasons for failed diff has been approved by SDK Reviewer
- from version 1.26.74
* api-change:``apprunner``: [``botocore``] This release supports removing MaxSize limit for
AutoScalingConfiguration.
* api-change:``glue``: [``botocore``] Release of Delta Lake Data Lake Format for Glue Studio Service
- from version 1.26.73
* api-change:``emr``: [``botocore``] Update emr client to latest version
* api-change:``grafana``: [``botocore``] With this release Amazon Managed Grafana now supports
inbound Network Access Control that helps you to restrict user access to your Grafana workspaces
* api-change:``ivs``: [``botocore``] Doc-only update. Updated text description in DeleteChannel,
Stream, and StreamSummary.
* api-change:``wafv2``: [``botocore``] Added a notice for account takeover prevention (ATP). The
interface incorrectly lets you to configure ATP response inspection in regional web ACLs in Region
US East (N. Virginia), without returning an error. ATP response inspection is only available in web
ACLs that protect CloudFront distributions.
- from version 1.26.72
* api-change:``cloudtrail``: [``botocore``] This release adds an
InsufficientEncryptionPolicyException type to the StartImport endpoint
* api-change:``efs``: [``botocore``] Update efs client to latest version
* api-change:``frauddetector``: [``botocore``] This release introduces Lists feature which allows
customers to reference a set of values in Fraud Detector's rules. With Lists, customers can
dynamically manage these attributes in real time. Lists can be created/deleted and its contents can
be modified using the Fraud Detector API.
* api-change:``glue``: [``botocore``] Fix DirectJDBCSource not showing up in CLI code gen
* api-change:``privatenetworks``: [``botocore``] This release introduces a new
StartNetworkResourceUpdate API, which enables return/replacement of hardware from a NetworkSite.
* api-change:``rds``: [``botocore``] Database Activity Stream support for RDS for SQL Server.
* api-change:``wafv2``: [``botocore``] For protected CloudFront distributions, you can now use the
AWS WAF Fraud Control account takeover prevention (ATP) managed rule group to block new login
attempts from clients that have recently submitted too many failed login attempts.
- Update BuildRequires and Requires from setup.py
- Update to 1.26.71
* api-change:``appconfig``: [``botocore``] AWS AppConfig now offers the option to set a version
label on hosted configuration versions. Version labels allow you to identify specific hosted
configuration versions based on an alternate versioning scheme that you define.
* api-change:``datasync``: [``botocore``] With this launch, we are giving customers the ability to
use older SMB protocol versions, enabling them to use DataSync to copy data to and from their
legacy storage arrays.
* api-change:``ec2``: [``botocore``] With this release customers can turn host maintenance on or
off when allocating or modifying a supported dedicated host. Host maintenance is turned on by
default for supported hosts.
- from version 1.26.70
* api-change:``account``: [``botocore``] This release of the Account Management API enables
customers to view and manage whether AWS Opt-In Regions are enabled or disabled for their Account.
For more information, see
https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
* api-change:``appconfigdata``: [``botocore``] AWS AppConfig now offers the option to set a version
label on hosted configuration versions. If a labeled hosted configuration version is deployed, its
version label is available in the GetLatestConfiguration response.
* api-change:``snowball``: [``botocore``] Adds support for EKS Anywhere on Snowball. AWS Snow
Family customers can now install EKS Anywhere service on Snowball Edge Compute Optimized devices.
- from version 1.26.69
* api-change:``autoscaling``: [``botocore``] You can now either terminate/replace, ignore, or wait
for EC2 Auto Scaling instances on standby or protected from scale in. Also, you can also roll back
changes from a failed instance refresh.
* api-change:``connect``: [``botocore``] This update provides the Wisdom session ARN for contacts
enabled for Wisdom in the chat channel.
* api-change:``ec2``: [``botocore``] Adds support for waiters that automatically poll for an
imported snapshot until it reaches the completed state.
* api-change:``polly``: [``botocore``] Amazon Polly adds two new neural Japanese voices - Kazuha,
Tomoko
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Autopilot adds support for selecting
algorithms in CreateAutoMLJob API.
* api-change:``sns``: [``botocore``] This release adds support for SNS X-Ray active tracing as well
as other updates.
- from version 1.26.68
* api-change:``chime-sdk-meetings``: [``botocore``] Documentation updates for Chime Meetings SDK
* api-change:``emr-containers``: [``botocore``] EMR on EKS allows configuring retry policies for
job runs through the StartJobRun API. Using retry policies, a job cause a driver pod to be
restarted automatically if it fails or is deleted. The job's status can be seen in the
DescribeJobRun and ListJobRun APIs and monitored using CloudWatch events.
* api-change:``evidently``: [``botocore``] Updated entity overrides parameter to accept up to 2500
overrides or a total of 40KB.
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``lexv2-runtime``: [``botocore``] Update lexv2-runtime client to latest version
* api-change:``lightsail``: [``botocore``] Documentation updates for Lightsail
* api-change:``migration-hub-refactor-spaces``: [``botocore``] This release adds support for
creating environments with a network fabric type of NONE
* api-change:``workdocs``: [``botocore``] Doc only update for the WorkDocs APIs.
* api-change:``workspaces``: [``botocore``] Removed Windows Server 2016 BYOL and made changes based
on IAM campaign.
- from version 1.26.67
* api-change:``backup``: [``botocore``] This release added one attribute (resource name) in the
output model of our 9 existing APIs in AWS backup so that customers will see the resource name at
the output. No input required from Customers.
* api-change:``cloudfront``: [``botocore``] CloudFront Origin Access Control extends support to AWS
Elemental MediaStore origins.
* api-change:``glue``: [``botocore``] DirectJDBCSource + Glue 4.0 streaming options
* api-change:``lakeformation``: [``botocore``] This release removes the LFTagpolicyResource
expression limits.
- Update BuildRequires and Requires from setup.py
- Update to 1.26.66
* api-change:``transfer``: [``botocore``] Updated the documentation for the ImportCertificate API
call, and added examples.
- from version 1.26.65
* api-change:``compute-optimizer``: [``botocore``] AWS Compute optimizer can now infer if Kafka is
running on an instance.
* api-change:``customer-profiles``: [``botocore``] This release deprecates the PartyType and Gender
enum data types from the Profile model and replaces them with new PartyTypeString and GenderString
attributes, which accept any string of length up to 255.
* api-change:``frauddetector``: [``botocore``] My AWS Service (Amazon Fraud Detector) - This
release introduces Cold Start Model Training which optimizes training for small datasets and adds
intelligent methods for treating unlabeled data. You can now train Online Fraud Insights or
Transaction Fraud Insights models with minimal historical-data.
* api-change:``mediaconvert``: [``botocore``] The AWS Elemental MediaConvert SDK has added improved
scene change detection capabilities and a bandwidth reduction filter, along with video quality
enhancements, to the AVC encoder.
* api-change:``outposts``: [``botocore``] Adds OrderType to Order structure. Adds PreviousOrderId
and PreviousLineItemId to LineItem structure. Adds new line item status REPLACED. Increases maximum
length of pagination token.
- from version 1.26.64
* enhancement:AWSCRT: [``botocore``] Upgrade awscrt version to 0.16.9
* api-change:``proton``: [``botocore``] Add new GetResourcesSummary API
* api-change:``redshift``: [``botocore``] Corrects descriptions of the parameters for the API
operations RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
- from version 1.26.63
* api-change:``appconfig``: [``botocore``] AWS AppConfig introduces KMS customer-managed key (CMK)
encryption of configuration data, along with AWS Secrets Manager as a new configuration data
source. S3 objects using SSE-KMS encryption and SSM Parameter Store SecureStrings are also now
supported.
* api-change:``connect``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``ec2``: [``botocore``] Documentation updates for EC2.
* api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version
* api-change:``keyspaces``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``quicksight``: [``botocore``] QuickSight support for Radar Chart and Dashboard
Publish Options
* api-change:``redshift``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``sso-admin``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.26.62
* bugfix:``s3``: [``botocore``] boto3 no longer overwrites user supplied `Content-Encoding` with
`aws-chunked` when user also supplies `ChecksumAlgorithm`.
* api-change:``devops-guru``: [``botocore``] This release adds filter support ListAnomalyForInsight
API.
* api-change:``forecast``: [``botocore``] This release will enable customer select INCREMENTAL as
ImportModel in Forecast's CreateDatasetImportJob API. Verified latest SDK containing required
attribute, following https://w.amazon.com/bin/view/AWS-Seer/Launch/Trebuchet/
* api-change:``iam``: [``botocore``] Documentation updates for AWS Identity and Access Management
(IAM).
* api-change:``mediatailor``: [``botocore``] The AWS Elemental MediaTailor SDK for Channel Assembly
has added support for program updates, and the ability to clip the end of VOD sources in programs.
* api-change:``sns``: [``botocore``] Additional attributes added for set-topic-attributes.
- from version 1.26.61
* api-change:``accessanalyzer``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in
SDK.
* api-change:``appsync``: [``botocore``] This release introduces the feature to support EventBridge
as AppSync data source.
* api-change:``cloudtrail-data``: [``botocore``] Add CloudTrail Data Service to enable users to
ingest activity events from non-AWS sources into CloudTrail Lake.
* api-change:``cloudtrail``: [``botocore``] Add new "Channel" APIs to enable users to manage
channels used for CloudTrail Lake integrations, and "Resource Policy" APIs to enable users to
manage the resource-based permissions policy attached to a channel.
* api-change:``codeartifact``: [``botocore``] This release introduces a new DeletePackage API,
which enables deletion of a package and all of its versions from a repository.
* api-change:``connectparticipant``: [``botocore``] Enabled FIPS endpoints for GovCloud (US)
regions in SDK.
* api-change:``ec2``: [``botocore``] This launch allows customers to associate up to 8 IP addresses
to their NAT Gateways to increase the limit on concurrent connections to a single destination by
eight times from 55K to 440K.
* api-change:``groundstation``: [``botocore``] DigIF Expansion changes to the Customer APIs.
* api-change:``iot``: [``botocore``] Added support for IoT Rules Engine Cloudwatch Logs action
batch mode.
* api-change:``kinesis``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``opensearch``: [``botocore``] Amazon OpenSearch Service adds the option for a VPC
endpoint connection between two domains when the local domain uses OpenSearch version 1.3 or 2.3.
You can now use remote reindex to copy indices from one VPC domain to another without a reverse
proxy.
* api-change:``outposts``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``polly``: [``botocore``] Amazon Polly adds two new neural American English voices -
Ruth, Stephen
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Automatic Model Tuning now supports
more completion criteria for Hyperparameter Optimization.
* api-change:``securityhub``: [``botocore``] New fields have been added to the AWS Security Finding
Format. Compliance.SecurityControlId is a unique identifier for a security control across
standards. Compliance.AssociatedStandards contains all enabled standards in which a security
control is enabled.
* api-change:``support``: [``botocore``] This fixes incorrect endpoint construction when a customer
is explicitly setting a region.
- Update BuildRequires and Requires from setup.py
- Update to 1.26.60
* api-change:``clouddirectory``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in
SDK.
* api-change:``cloudformation``: [``botocore``] This feature provides a method of obtaining which
regions a stackset has stack instances deployed in.
* api-change:``discovery``: [``botocore``] Update ImportName validation to 255 from the current
length of 100
* api-change:``dlm``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``ec2``: [``botocore``] We add Prefix Lists as a new route destination option for
LocalGatewayRoutes. This will allow customers to create routes to Prefix Lists. Prefix List routes
will allow customers to group individual CIDR routes with the same target into a single route.
* api-change:``imagebuilder``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in
SDK.
* api-change:``kafka``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``mediaconvert``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in
SDK.
* api-change:``swf``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.26.59
* api-change:``application-autoscaling``: [``botocore``] Enabled FIPS endpoints for GovCloud (US)
regions in SDK.
* api-change:``appstream``: [``botocore``] Fixing the issue where Appstream waiters hang for
fleet_started and fleet_stopped.
* api-change:``elasticbeanstalk``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions
in SDK.
* api-change:``fis``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``glacier``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``greengrass``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``greengrassv2``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) in SDK.
* api-change:``mediatailor``: [``botocore``] This release introduces the As Run logging type, along
with API and documentation updates.
* api-change:``outposts``: [``botocore``] Adding support for payment term in GetOrder, CreateOrder
responses.
* api-change:``sagemaker-runtime``: [``botocore``] Update sagemaker-runtime client to latest version
* api-change:``sagemaker``: [``botocore``] This release supports running SageMaker Training jobs
with container images that are in a private Docker registry.
* api-change:``serverlessrepo``: [``botocore``] Enabled FIPS endpoints for GovCloud (US) regions in
SDK.
- Update BuildRequires and Requires from setup.py
- Update to 1.26.58
* api-change:``events``: [``botocore``] Update events client to latest version
* api-change:``iotfleetwise``: [``botocore``] Add model validation to BatchCreateVehicle and
BatchUpdateVehicle operations that invalidate requests with an empty vehicles list.
* api-change:``s3``: [``botocore``] Allow FIPS to be used with path-style URLs.
- from version 1.26.57
* api-change:``cloudformation``: [``botocore``] Enabled FIPS aws-us-gov endpoints in SDK.
* api-change:``ec2``: [``botocore``] This release adds new functionality that allows customers to
provision IPv6 CIDR blocks through Amazon VPC IP Address Manager (IPAM) as well as allowing
customers to utilize IPAM Resource Discovery APIs.
* api-change:``m2``: [``botocore``] Add returnCode, batchJobIdentifier in GetBatchJobExecution
response, for user to view the batch job execution result & unique identifier from engine. Also
removed unused headers from REST APIs
* api-change:``polly``: [``botocore``] Add 5 new neural voices - Sergio (es-ES), Andres (es-MX),
Remi (fr-FR), Adriano (it-IT) and Thiago (pt-BR).
* api-change:``redshift-serverless``: [``botocore``] Added query monitoring rules as possible
parameters for create and update workgroup operations.
* api-change:``s3control``: [``botocore``] Add additional endpoint tests for S3 Control. Fix
missing endpoint parameters for PutBucketVersioning and GetBucketVersioning. Prior to this fix,
those operations may have resulted in an invalid endpoint being resolved.
* api-change:``sagemaker``: [``botocore``] SageMaker Inference Recommender now decouples from Model
Registry and could accept Model Name to invoke inference recommendations job; Inference Recommender
now provides CPU/Memory Utilization metrics data in recommendation output.
* api-change:``sts``: [``botocore``] Doc only change to update wording in a key topic
- from version 1.26.56
* api-change:``databrew``: [``botocore``] Enabled FIPS us-gov-west-1 endpoints in SDK.
* api-change:``route53``: [``botocore``] Amazon Route 53 now supports the Asia Pacific (Melbourne)
Region (ap-southeast-4) for latency records, geoproximity records, and private DNS for Amazon VPCs
in that region.
* api-change:``ssm-sap``: [``botocore``] This release provides updates to documentation and support
for listing operations performed by AWS Systems Manager for SAP.
- from version 1.26.55
* api-change:``lambda``: [``botocore``] Release Lambda RuntimeManagementConfig, enabling customers
to better manage runtime updates to their Lambda functions. This release adds two new APIs,
GetRuntimeManagementConfig and PutRuntimeManagementConfig, as well as support on existing
Create/Get/Update function APIs.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Inference now supports P4de instance
types.
- from version 1.26.54
* api-change:``ec2``: [``botocore``] C6in, M6in, M6idn, R6in and R6idn instances are powered by 3rd
Generation Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of
3.5 GHz.
* api-change:``ivs``: [``botocore``] API and Doc update. Update to arns field in BatchGetStreamKey.
Also updates to operations and structures.
* api-change:``quicksight``: [``botocore``] This release adds support for data bars in QuickSight
table and increases pivot table field well limit.
- from version 1.26.53
* api-change:``appflow``: [``botocore``] Adding support for Salesforce Pardot connector in Amazon
AppFlow.
* api-change:``codeartifact``: [``botocore``] Documentation updates for CodeArtifact
* api-change:``connect``: [``botocore``] Amazon Connect Chat introduces Persistent Chat, allowing
customers to resume previous conversations with context and transcripts carried over from previous
chats, eliminating the need to repeat themselves and allowing agents to provide personalized
service with access to entire conversation history.
* api-change:``connectparticipant``: [``botocore``] This release updates Amazon Connect
Participant's GetTranscript api to provide transcripts of past chats on a persistent chat session.
* api-change:``ec2``: [``botocore``] Adds SSM Parameter Resource Aliasing support to EC2 Launch
Templates. Launch Templates can now store parameter aliases in place of AMI Resource IDs.
CreateLaunchTemplateVersion and DescribeLaunchTemplateVersions now support a convenience flag,
ResolveAlias, to return the resolved parameter value.
* api-change:``glue``: [``botocore``] Release Glue Studio Hudi Data Lake Format for SDK/CLI
* api-change:``groundstation``: [``botocore``] Add configurable prepass and postpass times for
DataflowEndpointGroup. Add Waiter to allow customers to wait for a contact that was reserved
through ReserveContact
* api-change:``logs``: [``botocore``] Bug fix - Removed the regex pattern validation from
CoralModel to avoid potential security issue.
* api-change:``medialive``: [``botocore``] AWS Elemental MediaLive adds support for SCTE 35
preRollMilliSeconds.
* api-change:``opensearch``: [``botocore``] This release adds the enhanced dry run option, that
checks for validation errors that might occur when deploying configuration changes and provides a
summary of these errors, if any. The feature will also indicate whether a blue/green deployment
will be required to apply a change.
* api-change:``panorama``: [``botocore``] Added AllowMajorVersionUpdate option to OTAJobConfig to
make appliance software major version updates opt-in.
* api-change:``sagemaker``: [``botocore``] HyperParameterTuningJobs now allow passing environment
variables into the corresponding TrainingJobs
- Update BuildRequires and Requires from setup.py
- Update to 1.26.52
* api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version
* api-change:``efs``: [``botocore``] Update efs client to latest version
* api-change:``ivschat``: [``botocore``] Updates the range for a Chat Room's
maximumMessageRatePerSecond field.
* api-change:``wafv2``: [``botocore``] Improved the visibility of the guidance for updating AWS WAF
resources, such as web ACLs and rule groups.
- from version 1.26.51
* api-change:``billingconductor``: [``botocore``] This release adds support for SKU Scope for
pricing plans.
* api-change:``cloud9``: [``botocore``] Added minimum value to AutomaticStopTimeMinutes parameter.
* api-change:``imagebuilder``: [``botocore``] Add support for AWS Marketplace product IDs as input
during CreateImageRecipe for the parent-image parameter. Add support for listing third-party
components.
* api-change:``network-firewall``: [``botocore``] Network Firewall now allows creation of dual
stack endpoints, enabling inspection of IPv6 traffic.
- from version 1.26.50
* api-change:``connect``: [``botocore``] This release updates the responses of
UpdateContactFlowContent, UpdateContactFlowMetadata, UpdateContactFlowName and DeleteContactFlow
API with empty responses.
* api-change:``ec2``: [``botocore``] Documentation updates for EC2.
* api-change:``outposts``: [``botocore``] This release adds POWER_30_KVA as an option for
PowerDrawKva. PowerDrawKva is part of the RackPhysicalProperties structure in the CreateSite
request.
* api-change:``resource-groups``: [``botocore``] AWS Resource Groups customers can now turn on
Group Lifecycle Events in their AWS account. When you turn this on, Resource Groups monitors your
groups for changes to group state or membership. Those changes are sent to Amazon EventBridge as
events that you can respond to using rules you create.
- from version 1.26.49
* api-change:``cleanrooms``: [``botocore``] Initial release of AWS Clean Rooms
* api-change:``lambda``: [``botocore``] Add support for MaximumConcurrency parameter for SQS event
source. Customers can now limit the maximum concurrent invocations for their SQS Event Source
Mapping.
* api-change:``logs``: [``botocore``] Bug fix: logGroupName is now not a required field in
GetLogEvents, FilterLogEvents, GetLogGroupFields, and DescribeLogStreams APIs as logGroupIdentifier
can be provided instead
* api-change:``mediaconvert``: [``botocore``] The AWS Elemental MediaConvert SDK has added support
for compact DASH manifest generation, audio normalization using TruePeak measurements, and the
ability to clip the sample range in the color corrector.
* api-change:``secretsmanager``: [``botocore``] Update documentation for new ListSecrets and
DescribeSecret parameters
- from version 1.26.48
* api-change:``kendra``: [``botocore``] This release adds support to new document types - RTF, XML,
XSLT, MS_EXCEL, CSV, JSON, MD
- from version 1.26.47
* api-change:``location``: [``botocore``] This release adds support for two new route travel
models, Bicycle and Motorcycle which can be used with Grab data source.
* api-change:``rds``: [``botocore``] This release adds support for configuring allocated storage on
the CreateDBInstanceReadReplica, RestoreDBInstanceFromDBSnapshot, and
RestoreDBInstanceToPointInTime APIs.
- from version 1.26.46
* api-change:``ecr-public``: [``botocore``] This release for Amazon ECR Public makes several change
to bring the SDK into sync with the API.
* api-change:``kendra-ranking``: [``botocore``] Introducing Amazon Kendra Intelligent Ranking, a
new set of Kendra APIs that leverages Kendra semantic ranking capabilities to improve the quality
of search results from other search services (i.e. OpenSearch, ElasticSearch, Solr).
* api-change:``network-firewall``: [``botocore``] Network Firewall now supports the Suricata rule
action reject, in addition to the actions pass, drop, and alert.
* api-change:``ram``: [``botocore``] Enabled FIPS aws-us-gov endpoints in SDK.
* api-change:``workspaces-web``: [``botocore``] This release adds support for a new portal
authentication type: AWS IAM Identity Center (successor to AWS Single Sign-On).
- from version 1.26.45
* api-change:``acm-pca``: [``botocore``] Added revocation parameter validation: bucket names must
match S3 bucket naming rules and CNAMEs conform to RFC2396 restrictions on the use of special
characters in URIs.
* api-change:``auditmanager``: [``botocore``] This release introduces a new data retention option
in your Audit Manager settings. You can now use the DeregistrationPolicy parameter to specify if
you want to delete your data when you deregister Audit Manager.
- from version 1.26.44
* api-change:``amplifybackend``: [``botocore``] Updated GetBackendAPIModels response to include
ModelIntrospectionSchema json string
* api-change:``apprunner``: [``botocore``] This release adds support of securely referencing
secrets and configuration data that are stored in Secrets Manager and SSM Parameter Store by adding
them as environment secrets in your App Runner service.
* api-change:``connect``: [``botocore``] Documentation update for a new Initiation Method value in
DescribeContact API
* api-change:``emr-serverless``: [``botocore``] Adds support for customized images. You can now
provide runtime images when creating or updating EMR Serverless Applications.
* api-change:``lightsail``: [``botocore``] Documentation updates for Amazon Lightsail.
* api-change:``mwaa``: [``botocore``] MWAA supports Apache Airflow version 2.4.3.
* api-change:``rds``: [``botocore``] This release adds support for specifying which certificate
authority (CA) to use for a DB instance's server certificate during DB instance creation, as well
as other CA enhancements.
- from version 1.26.43
* api-change:``application-autoscaling``: [``botocore``] Customers can now use the existing
DescribeScalingActivities API to also see the detailed and machine-readable reasons for Application
Auto Scaling not scaling their resources and, if needed, take the necessary corrective actions.
* api-change:``logs``: [``botocore``] Update to remove sequenceToken as a required field in
PutLogEvents calls.
* api-change:``ssm``: [``botocore``] Adding support for QuickSetup Document Type in Systems Manager
- Update BuildRequires and Requires from setup.py
- update to 1.26.42:
* api-change:``securitylake``: [``botocore``] Allow CreateSubscriber API
to take string input that allows setting more descriptive
SubscriberDescription field. Make souceTypes field required in model
level for UpdateSubscriberRequest as it is required for every API call
on the backend. Allow ListSubscribers take any String as nextToken
param.
- Update to version 1.26.41
* api-change:``cloudfront``: [``botocore``] Extend response headers policy to support removing
headers from viewer responses
* api-change:``iotfleetwise``: [``botocore``] Update documentation - correct the epoch constant
value of default value for expiryTime field in CreateCampaign request.
- from version 1.26.40
* api-change:``apigateway``: [``botocore``] Documentation updates for Amazon API Gateway
* api-change:``emr``: [``botocore``] Update emr client to latest version
* api-change:``secretsmanager``: [``botocore``] Added owning service filter, include planned
deletion flag, and next rotation date response parameter in ListSecrets.
* api-change:``wisdom``: [``botocore``] This release extends Wisdom CreateContent and
StartContentUpload APIs to support PDF and MicrosoftWord docx document uploading.
- from version 1.26.39
* api-change:``elasticache``: [``botocore``] This release allows you to modify the encryption in
transit setting, for existing Redis clusters. You can now change the TLS configuration of your
Redis clusters without the need to re-build or re-provision the clusters or impact application
availability.
* api-change:``network-firewall``: [``botocore``] AWS Network Firewall now provides status messages
for firewalls to help you troubleshoot when your endpoint fails.
* api-change:``rds``: [``botocore``] This release adds support for Custom Engine Version (CEV) on
RDS Custom SQL Server.
* api-change:``route53-recovery-control-config``: [``botocore``] Added support for Python
paginators in the route53-recovery-control-config List* APIs.
- from version 1.26.38
* api-change:``memorydb``: [``botocore``] This release adds support for MemoryDB Reserved nodes
which provides a significant discount compared to on-demand node pricing. Reserved nodes are not
physical nodes, but rather a billing discount applied to the use of on-demand nodes in your account.
* api-change:``transfer``: [``botocore``] Add additional operations to throw ThrottlingExceptions
- from version 1.26.37
* api-change:``connect``: [``botocore``] Support for Routing Profile filter, SortCriteria, and
grouping by Routing Profiles for GetCurrentMetricData API. Support for RoutingProfiles,
UserHierarchyGroups, and Agents as filters, NextStatus and AgentStatusName for GetCurrentUserData.
Adds ApproximateTotalCount to both APIs.
* api-change:``connectparticipant``: [``botocore``] Amazon Connect Chat introduces the Message
Receipts feature. This feature allows agents and customers to receive message delivered and read
receipts after they send a chat message.
* api-change:``detective``: [``botocore``] This release adds a missed AccessDeniedException type to
several endpoints.
* api-change:``fsx``: [``botocore``] Fix a bug where a recent release might break certain existing
SDKs.
* api-change:``inspector2``: [``botocore``] Amazon Inspector adds support for scanning NodeJS 18.x
and Go 1.x AWS Lambda function runtimes.
- from version 1.26.36
* api-change:``compute-optimizer``: [``botocore``] This release enables AWS Compute Optimizer to
analyze and generate optimization recommendations for ecs services running on Fargate.
* api-change:``connect``: [``botocore``] Amazon Connect Chat introduces the Idle
Participant/Autodisconnect feature, which allows users to set timeouts relating to the activity of
chat participants, using the new UpdateParticipantRoleConfig API.
* api-change:``iotdeviceadvisor``: [``botocore``] This release adds the following new features: 1)
Documentation updates for IoT Device Advisor APIs. 2) Updated required request parameters for IoT
Device Advisor APIs. 3) Added new service feature: ability to provide the test endpoint when
customer executing the StartSuiteRun API.
* api-change:``kinesis-video-webrtc-storage``: [``botocore``] Amazon Kinesis Video Streams offers
capabilities to stream video and audio in real-time via WebRTC to the cloud for storage, playback,
and analytical processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable
real-time streaming, as well as media ingestion to the cloud.
* api-change:``rds``: [``botocore``] Add support for managing master user password in AWS Secrets
Manager for the DBInstance and DBCluster.
* api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager
- from version 1.26.35
* api-change:``connect``: [``botocore``] Amazon Connect Chat now allows for JSON (application/json)
message types to be sent as part of the initial message in the StartChatContact API.
* api-change:``connectparticipant``: [``botocore``] Amazon Connect Chat now allows for JSON
(application/json) message types to be sent in the SendMessage API.
* api-change:``license-manager-linux-subscriptions``: [``botocore``] AWS License Manager now offers
cross-region, cross-account tracking of commercial Linux subscriptions on AWS. This includes
subscriptions purchased as part of EC2 subscription-included AMIs, on the AWS Marketplace, or
brought to AWS via Red Hat Cloud Access Program.
* api-change:``macie2``: [``botocore``] This release adds support for analyzing Amazon S3 objects
that use the S3 Glacier Instant Retrieval (Glacier_IR) storage class.
* api-change:``sagemaker``: [``botocore``] This release enables adding RStudio Workbench support to
an existing Amazon SageMaker Studio domain. It allows setting your RStudio on SageMaker environment
configuration parameters and also updating the RStudioConnectUrl and RStudioPackageManagerUrl
parameters for existing domains
* api-change:``scheduler``: [``botocore``] Updated the ListSchedules and ListScheduleGroups APIs to
allow the NamePrefix field to start with a number. Updated the validation for executionRole field
to support any role name.
* api-change:``ssm``: [``botocore``] Doc-only updates for December 2022.
* api-change:``support``: [``botocore``] Documentation updates for the AWS Support API
* api-change:``transfer``: [``botocore``] This release adds support for Decrypt as a workflow step
type.
- from version 1.26.34
* api-change:``batch``: [``botocore``] Adds isCancelled and isTerminated to DescribeJobs response.
* api-change:``ec2``: [``botocore``] Adds support for pagination in the EC2 DescribeImages API.
* api-change:``lookoutequipment``: [``botocore``] This release adds support for listing inference
schedulers by status.
* api-change:``medialive``: [``botocore``] This release adds support for two new features to AWS
Elemental MediaLive. First, you can now burn-in timecodes to your MediaLive outputs. Second, we now
now support the ability to decode Dolby E audio when it comes in on an input.
* api-change:``nimble``: [``botocore``] Amazon Nimble Studio now supports configuring session
storage volumes and persistence, as well as backup and restore sessions through launch profiles.
* api-change:``resource-explorer-2``: [``botocore``] Documentation updates for AWS Resource
Explorer.
* api-change:``route53domains``: [``botocore``] Use Route 53 domain APIs to change owner,
create/delete DS record, modify IPS tag, resend authorization. New:
AssociateDelegationSignerToDomain, DisassociateDelegationSignerFromDomain, PushDomain,
ResendOperationAuthorization. Updated: UpdateDomainContact, ListOperations,
CheckDomainTransferability.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Autopilot adds support for new
objective metrics in CreateAutoMLJob API.
* api-change:``transcribe``: [``botocore``] Enable our batch transcription jobs for Swedish and
Vietnamese.
- from version 1.26.33
* api-change:``athena``: [``botocore``] Add missed InvalidRequestException in
GetCalculationExecutionCode,StopCalculationExecution APIs. Correct required parameters (Payload and
Type) in UpdateNotebook API. Change Notebook size from 15 Mb to 10 Mb.
* api-change:``ecs``: [``botocore``] This release adds support for alarm-based rollbacks in ECS, a
new feature that allows customers to add automated safeguards for Amazon ECS service rolling
updates.
* api-change:``kinesis-video-webrtc-storage``: [``botocore``] Amazon Kinesis Video Streams offers
capabilities to stream video and audio in real-time via WebRTC to the cloud for storage, playback,
and analytical processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable
real-time streaming, as well as media ingestion to the cloud.
* api-change:``kinesisvideo``: [``botocore``] Amazon Kinesis Video Streams offers capabilities to
stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
as well as media ingestion to the cloud.
* api-change:``rds``: [``botocore``] Add support for --enable-customer-owned-ip to RDS
create-db-instance-read-replica API for RDS on Outposts.
* api-change:``sagemaker``: [``botocore``] AWS Sagemaker - Sagemaker Images now supports Aliases as
secondary identifiers for ImageVersions. SageMaker Images now supports additional metadata for
ImageVersions for better images management.
- from version 1.26.32
* enhancement:s3: s3.transfer methods accept path-like objects as input
* api-change:``appflow``: [``botocore``] This release updates the ListConnectorEntities API action
so that it returns paginated responses that customers can retrieve with next tokens.
* api-change:``cloudfront``: [``botocore``] Updated documentation for CloudFront
* api-change:``datasync``: [``botocore``] AWS DataSync now supports the use of tags with task
executions. With this new feature, you can apply tags each time you execute a task, giving you
greater control and management over your task executions.
* api-change:``efs``: [``botocore``] Update efs client to latest version
* api-change:``guardduty``: [``botocore``] This release provides the valid characters for the
Description and Name field.
* api-change:``iotfleetwise``: [``botocore``] Updated error handling for empty resource names in
"UpdateSignalCatalog" and "GetModelManifest" operations.
* api-change:``sagemaker``: [``botocore``] AWS sagemaker - Features: This release adds support for
random seed, it's an integer value used to initialize a pseudo-random number generator. Setting a
random seed will allow the hyperparameter tuning search strategies to produce more consistent
configurations for the same tuning job.
- from version 1.26.31
* api-change:``backup-gateway``: [``botocore``] This release adds support for VMware vSphere tags,
enabling customer to protect VMware virtual machines using tag-based policies for AWS tags mapped
from vSphere tags. This release also adds support for customer-accessible gateway-hypervisor
interaction log and upload bandwidth rate limit schedule.
* api-change:``connect``: [``botocore``] Added support for "English - New Zealand" and "English -
South African" to be used with Amazon Connect Custom Vocabulary APIs.
* api-change:``ecs``: [``botocore``] This release adds support for container port ranges in ECS, a
new capability that allows customers to provide container port ranges to simplify use cases where
multiple ports are in use in a container. This release updates TaskDefinition mutation APIs and the
Task description APIs.
* api-change:``eks``: [``botocore``] Add support for Windows managed nodes groups.
* api-change:``glue``: [``botocore``] This release adds support for AWS Glue Crawler with native
DeltaLake tables, allowing Crawlers to classify Delta Lake format tables and catalog them for query
engines to query against.
* api-change:``kinesis``: [``botocore``] Added StreamARN parameter for Kinesis Data Streams APIs.
Added a new opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when
accessing Kinesis Data Streams.
* api-change:``location``: [``botocore``] This release adds support for a new style,
"VectorOpenDataStandardLight" which can be used with the new data source, "Open Data Maps
(Preview)".
* api-change:``m2``: [``botocore``] Adds an optional create-only `KmsKeyId` property to Environment
and Application resources.
* api-change:``sagemaker``: [``botocore``] SageMaker Inference Recommender now allows customers to
load tests their models on various instance types using private VPC.
* api-change:``securityhub``: [``botocore``] Added new resource details objects to ASFF, including
resources for AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and
AwsWafv2RuleGroup.
* api-change:``translate``: [``botocore``] Raised the input byte size limit of the Text field in
the TranslateText API to 10000 bytes.
- from version 1.26.30
* api-change:``ce``: [``botocore``] This release supports percentage-based thresholds on Cost
Anomaly Detection alert subscriptions.
* api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version
* api-change:``networkmanager``: [``botocore``] Appliance Mode support for AWS Cloud WAN.
* api-change:``redshift-data``: [``botocore``] This release adds a new --client-token field to
ExecuteStatement and BatchExecuteStatement operations. Customers can now run queries with the
additional client token parameter to ensures idempotency.
* api-change:``sagemaker-metrics``: [``botocore``] Update SageMaker Metrics documentation.
- from version 1.26.29
* api-change:``cloudtrail``: [``botocore``] Merging mainline branch for service model into mainline
release branch. There are no new APIs.
* api-change:``rds``: [``botocore``] This deployment adds ClientPasswordAuthType field to the Auth
structure of the DBProxy.
- from version 1.26.28
* bugfix:Endpoint provider: [``botocore``] Updates ARN parsing ``resourceId`` delimiters
* api-change:``customer-profiles``: [``botocore``] This release allows custom strings in PartyType
and Gender through 2 new attributes in the CreateProfile and UpdateProfile APIs: PartyTypeString
and GenderString.
* api-change:``ec2``: [``botocore``] This release updates DescribeFpgaImages to show supported
instance types of AFIs in its response.
* api-change:``kinesisvideo``: [``botocore``] This release adds support for public preview of
Kinesis Video Stream at Edge enabling customers to provide configuration for the Kinesis Video
Stream EdgeAgent running on an on-premise IoT device. Customers can now locally record from cameras
and stream videos to the cloud on configured schedule.
* api-change:``lookoutvision``: [``botocore``] This documentation update adds kms:GenerateDataKey
as a required permission to StartModelPackagingJob.
* api-change:``migration-hub-refactor-spaces``: [``botocore``] This release adds support for Lambda
alias service endpoints. Lambda alias ARNs can now be passed into CreateService.
* api-change:``rds``: [``botocore``] Update the RDS API model to support copying option groups
during the CopyDBSnapshot operation
* api-change:``rekognition``: [``botocore``] Adds support for "aliases" and "categories", inclusion
and exclusion filters for labels and label categories, and aggregating labels by video segment
timestamps for Stored Video Label Detection APIs.
* api-change:``sagemaker-metrics``: [``botocore``] This release introduces support SageMaker
Metrics APIs.
* api-change:``wafv2``: [``botocore``] Documents the naming requirement for logging destinations
that you use with web ACLs.
- from version 1.26.27
* api-change:``iotfleetwise``: [``botocore``] Deprecated assignedValue property for actuators and
attributes. Added a message to invalid nodes and invalid decoder manifest exceptions.
* api-change:``logs``: [``botocore``] Doc-only update for CloudWatch Logs, for Tagging Permissions
clarifications
* api-change:``medialive``: [``botocore``] Link devices now support buffer size (latency)
configuration. A higher latency value means a longer delay in transmitting from the device to
MediaLive, but improved resiliency. A lower latency value means a shorter delay, but less
resiliency.
* api-change:``mediapackage-vod``: [``botocore``] This release provides the approximate number of
assets in a packaging group.
- Update BuildRequires and Requires from setup.py
- Update to version 1.26.26
* enhancement:Endpoint Provider Standard Library: [``botocore``] Correct spelling of 'library' in
``StandardLibrary`` class
* api-change:``autoscaling``: [``botocore``] Adds support for metric math for target tracking
scaling policies, saving you the cost and effort of publishing a custom metric to CloudWatch. Also
adds support for VPC Lattice by adding the Attach/Detach/DescribeTrafficSources APIs and a new
health check type to the CreateAutoScalingGroup API.
* api-change:``iottwinmaker``: [``botocore``] This release adds the following new features: 1) New
APIs for managing a continuous sync of assets and asset models from AWS IoT SiteWise. 2) Support
user friendly names for component types (ComponentTypeName) and properties (DisplayName).
* api-change:``migrationhubstrategy``: [``botocore``] This release adds known application
filtering, server selection for assessments, support for potential recommendations, and indications
for configuration and assessment status. For more information, see the AWS Migration Hub
documentation at https://docs.aws.amazon.com/migrationhub/index.html
- from version 1.26.25
* api-change:``ce``: [``botocore``] This release adds the LinkedAccountName field to the
GetAnomalies API response under RootCause
* api-change:``cloudfront``: [``botocore``] Introducing UpdateDistributionWithStagingConfig that
can be used to promote the staging configuration to the production.
* api-change:``eks``: [``botocore``] Adds support for EKS add-ons configurationValues fields and
DescribeAddonConfiguration function
* api-change:``kms``: [``botocore``] Updated examples and exceptions for External Key Store (XKS).
- from version 1.26.24
* api-change:``billingconductor``: [``botocore``] This release adds the Tiering Pricing Rule
feature.
* api-change:``connect``: [``botocore``] This release provides APIs that enable you to
programmatically manage rules for Contact Lens conversational analytics and third party
applications. For more information, see
https://docs.aws.amazon.com/connect/latest/APIReference/rules-api.html
* api-change:``dynamodb``: [``botocore``] Endpoint Ruleset update: Use http instead of https for
the "local" region.
* api-change:``dynamodbstreams``: [``botocore``] Update dynamodbstreams client to latest version
* api-change:``rds``: [``botocore``] This release adds the BlueGreenDeploymentNotFoundFault to the
AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource operations.
* api-change:``sagemaker-featurestore-runtime``: [``botocore``] For online + offline Feature
Groups, added ability to target PutRecord and DeleteRecord actions to only online store, or only
offline store. If target store parameter is not specified, actions will apply to both stores.
- from version 1.26.23
* api-change:``ce``: [``botocore``] This release introduces two new APIs that offer a 1-click
experience to refresh Savings Plans recommendations. The two APIs are
StartSavingsPlansPurchaseRecommendationGeneration and
ListSavingsPlansPurchaseRecommendationGeneration.
* api-change:``ec2``: [``botocore``] Documentation updates for EC2.
* api-change:``ivschat``: [``botocore``] Adds PendingVerification error type to messaging APIs to
block the resource usage for accounts identified as being fraudulent.
* api-change:``rds``: [``botocore``] This release adds the InvalidDBInstanceStateFault to the
RestoreDBClusterFromSnapshot operation.
* api-change:``transcribe``: [``botocore``] Amazon Transcribe now supports creating custom language
models in the following languages: Japanese (ja-JP) and German (de-DE).
- from version 1.26.22
* api-change:``appsync``: [``botocore``] Fixes the URI for the evaluatecode endpoint to include the
/v1 prefix (ie. "/v1/dataplane-evaluatecode").
* api-change:``ecs``: [``botocore``] Documentation updates for Amazon ECS
* api-change:``fms``: [``botocore``] AWS Firewall Manager now supports Fortigate Cloud Native
Firewall as a Service as a third-party policy type.
* api-change:``mediaconvert``: [``botocore``] The AWS Elemental MediaConvert SDK has added support
for configurable ID3 eMSG box attributes and the ability to signal them with InbandEventStream tags
in DASH and CMAF outputs.
* api-change:``medialive``: [``botocore``] Updates to Event Signaling and Management (ESAM) API and
documentation.
* api-change:``polly``: [``botocore``] Add language code for Finnish (fi-FI)
* api-change:``proton``: [``botocore``] CreateEnvironmentAccountConnection RoleArn input is now
optional
* api-change:``redshift-serverless``: [``botocore``] Add Table Level Restore operations for Amazon
Redshift Serverless. Add multi-port support for Amazon Redshift Serverless endpoints. Add Tagging
support to Snapshots and Recovery Points in Amazon Redshift Serverless.
* api-change:``sns``: [``botocore``] This release adds the message payload-filtering feature to the
SNS Subscribe, SetSubscriptionAttributes, and GetSubscriptionAttributes API actions
- Update BuildRequires and Requires from setup.py
- Update to version 1.26.21
* api-change:``codecatalyst``: [``botocore``] This release adds operations that support customers
using the AWS Toolkits and Amazon CodeCatalyst, a unified software development service that helps
developers develop, deploy, and maintain applications in the cloud. For more information, see the
documentation.
* api-change:``comprehend``: [``botocore``] Comprehend now supports semi-structured documents (such
as PDF files or image files) as inputs for custom analysis using the synchronous APIs
(ClassifyDocument and DetectEntities).
* api-change:``gamelift``: [``botocore``] GameLift introduces a new feature, GameLift Anywhere.
GameLift Anywhere allows you to integrate your own compute resources with GameLift. You can also
use GameLift Anywhere to iteratively test your game servers without uploading the build to GameLift
for every iteration.
* api-change:``pipes``: [``botocore``] AWS introduces new Amazon EventBridge Pipes which allow you
to connect sources (SQS, Kinesis, DDB, Kafka, MQ) to Targets (14+ EventBridge Targets) without any
code, with filtering, batching, input transformation, and an optional Enrichment stage (Lambda,
StepFunctions, ApiGateway, ApiDestinations)
* api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version
- from version 1.26.20
* api-change:``accessanalyzer``: [``botocore``] This release adds support for S3 cross account
access points. IAM Access Analyzer will now produce public or cross account findings when it
detects bucket delegation to external account access points.
* api-change:``athena``: [``botocore``] This release includes support for using Apache Spark in
Amazon Athena.
* api-change:``dataexchange``: [``botocore``] This release enables data providers to license direct
access to data in their Amazon S3 buckets or AWS Lake Formation data lakes through AWS Data
Exchange. Subscribers get read-only access to the data and can use it in downstream AWS services,
like Amazon Athena, without creating or managing copies.
* api-change:``docdb-elastic``: [``botocore``] Launched Amazon DocumentDB Elastic Clusters. You can
now use the SDK to create, list, update and delete Amazon DocumentDB Elastic Cluster resources
* api-change:``glue``: [``botocore``] This release adds support for AWS Glue Data Quality, which
helps you evaluate and monitor the quality of your data and includes the API for creating,
deleting, or updating data quality rulesets, runs and evaluations.
* api-change:``s3control``: [``botocore``] Amazon S3 now supports cross-account access points. S3
bucket owners can now allow trusted AWS accounts to create access points associated with their
bucket.
* api-change:``sagemaker-geospatial``: [``botocore``] This release provides Amazon SageMaker
geospatial APIs to build, train, deploy and visualize geospatial models.
* api-change:``sagemaker``: [``botocore``] Added Models as part of the Search API. Added Model
shadow deployments in realtime inference, and shadow testing in managed inference. Added support
for shared spaces, geospatial APIs, Model Cards, AutoMLJobStep in pipelines, Git repositories on
user profiles and domains, Model sharing in Jumpstart.
- from version 1.26.19
* api-change:``ec2``: [``botocore``] This release adds support for AWS Verified Access and the
Hpc6id Amazon EC2 compute optimized instance type, which features 3rd generation Intel Xeon
Scalable processors.
* api-change:``firehose``: [``botocore``] Allow support for the Serverless offering for Amazon
OpenSearch Service as a Kinesis Data Firehose delivery destination.
* api-change:``kms``: [``botocore``] AWS KMS introduces the External Key Store (XKS), a new feature
for customers who want to protect their data with encryption keys stored in an external key
management system under their control.
* api-change:``omics``: [``botocore``] Amazon Omics is a new, purpose-built service that can be
used by healthcare and life science organizations to store, query, and analyze omics data. The
insights from that data can be used to accelerate scientific discoveries and improve healthcare.
* api-change:``opensearchserverless``: [``botocore``] Publish SDK for Amazon OpenSearch Serverless
* api-change:``securitylake``: [``botocore``] Amazon Security Lake automatically centralizes
security data from cloud, on-premises, and custom sources into a purpose-built data lake stored in
your account. Security Lake makes it easier to analyze security data, so you can improve the
protection of your workloads, applications, and data
* api-change:``simspaceweaver``: [``botocore``] AWS SimSpace Weaver is a new service that helps
customers build spatial simulations at new levels of scale - resulting in virtual worlds with
millions of dynamic entities. See the AWS SimSpace Weaver developer guide for more details on how
to get started. https://docs.aws.amazon.com/simspaceweaver
- from version 1.26.18
* api-change:``arc-zonal-shift``: [``botocore``] Amazon Route 53 Application Recovery Controller
Zonal Shift is a new service that makes it easy to shift traffic away from an Availability Zone in
a Region. See the developer guide for more information:
https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route53-recovery.html
* api-change:``compute-optimizer``: [``botocore``] Adds support for a new recommendation preference
that makes it possible for customers to optimize their EC2 recommendations by utilizing an external
metrics ingestion service to provide metrics.
* api-change:``config``: [``botocore``] With this release, you can use AWS Config to evaluate your
resources for compliance with Config rules before they are created or updated. Using Config rules
in proactive mode enables you to test and build compliant resource templates or check resource
configurations at the time they are provisioned.
* api-change:``ec2``: [``botocore``] Introduces ENA Express, which uses AWS SRD and dynamic routing
to increase throughput and minimize latency, adds support for trust relationships between
Reachability Analyzer and AWS Organizations to enable cross-account analysis, and adds support for
Infrastructure Performance metric subscriptions.
* api-change:``eks``: [``botocore``] Adds support for additional EKS add-ons metadata and filtering
fields
* api-change:``fsx``: [``botocore``] This release adds support for 4GB/s / 160K PIOPS FSx for ONTAP
file systems and 10GB/s / 350K PIOPS FSx for OpenZFS file systems (Single_AZ_2). For FSx for ONTAP,
this also adds support for DP volumes, snapshot policy, copy tags to backups, and Multi-AZ route
table updates.
* api-change:``glue``: [``botocore``] This release allows the creation of Custom Visual Transforms
(Dynamic Transforms) to be created via AWS Glue CLI/SDK.
* api-change:``inspector2``: [``botocore``] This release adds support for Inspector to scan AWS
Lambda.
* api-change:``lambda``: [``botocore``] Adds support for Lambda SnapStart, which helps improve the
startup performance of functions. Customers can now manage SnapStart based functions via
CreateFunction and UpdateFunctionConfiguration APIs
* api-change:``license-manager-user-subscriptions``: [``botocore``] AWS now offers fully-compliant,
Amazon-provided licenses for Microsoft Office Professional Plus 2021 Amazon Machine Images (AMIs)
on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to
launch instances on-demand without any long-term licensing commitments.
* api-change:``macie2``: [``botocore``] Added support for configuring Macie to continually sample
objects from S3 buckets and inspect them for sensitive data. Results appear in statistics,
findings, and other data that Macie provides.
* api-change:``quicksight``: [``botocore``] This release adds new Describe APIs and updates Create
and Update APIs to support the data model for Dashboards, Analyses, and Templates.
* api-change:``s3control``: [``botocore``] Added two new APIs to support Amazon S3 Multi-Region
Access Point failover controls: GetMultiRegionAccessPointRoutes and
SubmitMultiRegionAccessPointRoutes. The failover control APIs are supported in the following
Regions: us-east-1, us-west-2, eu-west-1, ap-southeast-2, and ap-northeast-1.
* api-change:``securityhub``: [``botocore``] Adding StandardsManagedBy field to DescribeStandards
API response
- from version 1.26.17
* bugfix:dynamodb: Fixes duplicate serialization issue in DynamoDB BatchWriter
* api-change:``backup``: [``botocore``] AWS Backup introduces support for legal hold and
application stack backups. AWS Backup Audit Manager introduces support for cross-Region,
cross-account reports.
* api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version
* api-change:``drs``: [``botocore``] Non breaking changes to existing APIs, and additional APIs
added to support in-AWS failing back using AWS Elastic Disaster Recovery.
* api-change:``ecs``: [``botocore``] This release adds support for ECS Service Connect, a new
capability that simplifies writing and operating resilient distributed applications. This release
updates the TaskDefinition, Cluster, Service mutation APIs with Service connect constructs and also
adds a new ListServicesByNamespace API.
* api-change:``efs``: [``botocore``] Update efs client to latest version
* api-change:``iot-data``: [``botocore``] This release adds support for MQTT5 properties to AWS IoT
HTTP Publish API.
* api-change:``iot``: [``botocore``] Job scheduling enables the scheduled rollout of a Job with
start and end times and a customizable end behavior when end time is reached. This is available for
continuous and snapshot jobs. Added support for MQTT5 properties to AWS IoT TopicRule Republish
Action.
* api-change:``iotwireless``: [``botocore``] This release includes a new feature for customers to
calculate the position of their devices by adding three new APIs: UpdateResourcePosition,
GetResourcePosition, and GetPositionEstimate.
* api-change:``kendra``: [``botocore``] Amazon Kendra now supports preview of table information
from HTML tables in the search results. The most relevant cells with their corresponding rows,
columns are displayed as a preview in the search result. The most relevant table cell or cells are
also highlighted in table preview.
* api-change:``logs``: [``botocore``] Updates to support CloudWatch Logs data protection and
CloudWatch cross-account observability
* api-change:``mgn``: [``botocore``] This release adds support for Application and Wave management.
We also now support custom post-launch actions.
* api-change:``oam``: [``botocore``] Amazon CloudWatch Observability Access Manager is a new
service that allows configuration of the CloudWatch cross-account observability feature.
* api-change:``organizations``: [``botocore``] This release introduces delegated administrator for
AWS Organizations, a new feature to help you delegate the management of your Organizations
policies, enabling you to govern your AWS organization in a decentralized way. You can now allow
member accounts to manage Organizations policies.
* api-change:``rds``: [``botocore``] This release enables new Aurora and RDS feature called
Blue/Green Deployments that makes updates to databases safer, simpler and faster.
* api-change:``textract``: [``botocore``] This release adds support for classifying and splitting
lending documents by type, and extracting information by using the Analyze Lending APIs. This
release also includes support for summarized information of the processed lending document package,
in addition to per document results.
* api-change:``transcribe``: [``botocore``] This release adds support for 'inputType' for post-call
and real-time (streaming) Call Analytics within Amazon Transcribe.
- from version 1.26.16
* api-change:``grafana``: [``botocore``] This release includes support for configuring a Grafana
workspace to connect to a datasource within a VPC as well as new APIs for configuring Grafana
settings.
* api-change:``rbin``: [``botocore``] This release adds support for Rule Lock for Recycle Bin,
which allows you to lock retention rules so that they can no longer be modified or deleted.
- from version 1.26.15
* bugfix:Endpoints: [``botocore``] Resolve endpoint with default partition when no region is set
* bugfix:s3: [``botocore``] fixes missing x-amz-content-sha256 header for s3 object lambda
* api-change:``appflow``: [``botocore``] Adding support for Amazon AppFlow to transfer the data to
Amazon Redshift databases through Amazon Redshift Data API service. This feature will support the
Redshift destination connector on both public and private accessible Amazon Redshift Clusters and
Amazon Redshift Serverless.
* api-change:``kinesisanalyticsv2``: [``botocore``] Support for Apache Flink 1.15 in Kinesis Data
Analytics.
- from version 1.26.14
* api-change:``route53``: [``botocore``] Amazon Route 53 now supports the Asia Pacific (Hyderabad)
Region (ap-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in
that region.
- from version 1.26.13
* api-change:``appflow``: [``botocore``] AppFlow provides a new API called
UpdateConnectorRegistration to update a custom connector that customers have previously registered.
With this API, customers no longer need to unregister and then register a connector to make an
update.
* api-change:``auditmanager``: [``botocore``] This release introduces a new feature for Audit
Manager: Evidence finder. You can now use evidence finder to quickly query your evidence, and add
the matching evidence results to an assessment report.
* api-change:``chime-sdk-voice``: [``botocore``] Amazon Chime Voice Connector, Voice Connector
Group and PSTN Audio Service APIs are now available in the Amazon Chime SDK Voice namespace. See
https://docs.aws.amazon.com/chime-sdk/latest/dg/sdk-available-regions.html for more details.
* api-change:``cloudfront``: [``botocore``] CloudFront API support for staging distributions and
associated traffic management policies.
* api-change:``connect``: [``botocore``] Added AllowedAccessControlTags and TagRestrictedResource
for Tag Based Access Control on Amazon Connect Webpage
* api-change:``dynamodb``: [``botocore``] Updated minor fixes for DynamoDB documentation.
* api-change:``dynamodbstreams``: [``botocore``] Update dynamodbstreams client to latest version
* api-change:``ec2``: [``botocore``] This release adds support for copying an Amazon Machine
Image's tags when copying an AMI.
* api-change:``glue``: [``botocore``] AWSGlue Crawler - Adding support for Table and Column level
Comments with database level datatypes for JDBC based crawler.
* api-change:``iot-roborunner``: [``botocore``] AWS IoT RoboRunner is a new service that makes it
easy to build applications that help multi-vendor robots work together seamlessly. See the IoT
RoboRunner developer guide for more details on getting started.
https://docs.aws.amazon.com/iotroborunner/latest/dev/iotroborunner-welcome.html
* api-change:``quicksight``: [``botocore``] This release adds the following: 1) Asset management
for centralized assets governance 2) QuickSight Q now supports public embedding 3) New Termination
protection flag to mitigate accidental deletes 4) Athena data sources now accept a custom IAM role
5) QuickSight supports connectivity to Databricks
* api-change:``sagemaker``: [``botocore``] Added DisableProfiler flag as a new field in
ProfilerConfig
* api-change:``servicecatalog``: [``botocore``] This release 1. adds support for Principal Name
Sharing with Service Catalog portfolio sharing. 2. Introduces repo sourced products which are
created and managed with existing SC APIs. These products are synced to external repos and auto
create new product versions based on changes in the repo.
* api-change:``ssm-sap``: [``botocore``] AWS Systems Manager for SAP provides simplified operations
and management of SAP applications such as SAP HANA. With this release, SAP customers and partners
can automate and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
* api-change:``stepfunctions``: [``botocore``] Update stepfunctions client to latest version
* api-change:``transfer``: [``botocore``] Adds a NONE encryption algorithm type to AS2 connectors,
providing support for skipping encryption of the AS2 message body when a HTTPS URL is also
specified.
- from version 1.26.12
* api-change:``amplify``: [``botocore``] Adds a new value (WEB_COMPUTE) to the Platform enum that
allows customers to create Amplify Apps with Server-Side Rendering support.
* api-change:``appflow``: [``botocore``] AppFlow simplifies the preparation and cataloging of SaaS
data into the AWS Glue Data Catalog where your data can be discovered and accessed by AWS analytics
and ML services. AppFlow now also supports data field partitioning and file size optimization to
improve query performance and reduce cost.
* api-change:``appsync``: [``botocore``] This release introduces the APPSYNC_JS runtime, and adds
support for JavaScript in AppSync functions and AppSync pipeline resolvers.
* api-change:``dms``: [``botocore``] Adds support for Internet Protocol Version 6 (IPv6) on DMS
Replication Instances
* api-change:``ec2``: [``botocore``] This release adds a new optional parameter "privateIpAddress"
for the CreateNatGateway API. PrivateIPAddress will allow customers to select a custom Private IPv4
address instead of having it be auto-assigned.
* api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version
* api-change:``emr-serverless``: [``botocore``] Adds support for AWS Graviton2 based applications.
You can now select CPU architecture when creating new applications or updating existing ones.
* api-change:``ivschat``: [``botocore``] Adds LoggingConfiguration APIs for IVS Chat - a feature
that allows customers to store and record sent messages in a chat room to S3 buckets, CloudWatch
logs, or Kinesis firehose.
* api-change:``lambda``: [``botocore``] Add Node 18 (nodejs18.x) support to AWS Lambda.
* api-change:``personalize``: [``botocore``] This release provides support for creation and use of
metric attributions in AWS Personalize
* api-change:``polly``: [``botocore``] Add two new neural voices - Ola (pl-PL) and Hala (ar-AE).
* api-change:``rum``: [``botocore``] CloudWatch RUM now supports custom events. To use custom
events, create an app monitor or update an app monitor with CustomEvent Status as ENABLED.
* api-change:``s3control``: [``botocore``] Added 34 new S3 Storage Lens metrics to support
additional customer use cases.
* api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager.
* api-change:``securityhub``: [``botocore``] Added SourceLayerArn and SourceLayerHash field for
security findings. Updated AwsLambdaFunction Resource detail
* api-change:``servicecatalog-appregistry``: [``botocore``] This release adds support for tagged
resource associations, which allows you to associate a group of resources with a defined resource
tag key and value to the application.
* api-change:``sts``: [``botocore``] Documentation updates for AWS Security Token Service.
* api-change:``textract``: [``botocore``] This release adds support for specifying and extracting
information from documents using the Signatures feature within Analyze Document API
* api-change:``workspaces``: [``botocore``] The release introduces CreateStandbyWorkspaces, an API
that allows you to create standby WorkSpaces associated with a primary WorkSpace in another Region.
DescribeWorkspaces now includes related WorkSpaces properties. DescribeWorkspaceBundles and
CreateWorkspaceBundle now return more bundle details.
- from version 1.26.11
* api-change:``batch``: [``botocore``] Documentation updates related to Batch on EKS
* api-change:``billingconductor``: [``botocore``] This release adds a new feature BillingEntity
pricing rule.
* api-change:``cloudformation``: [``botocore``] Added UnsupportedTarget HandlerErrorCode for use
with CFN Resource Hooks
* api-change:``comprehendmedical``: [``botocore``] This release supports new set of entities and
traits. It also adds new category (BEHAVIORAL_ENVIRONMENTAL_SOCIAL).
* api-change:``connect``: [``botocore``] This release adds a new MonitorContact API for initiating
monitoring of ongoing Voice and Chat contacts.
* api-change:``eks``: [``botocore``] Adds support for customer-provided placement groups for
Kubernetes control plane instances when creating local EKS clusters on Outposts
* api-change:``elasticache``: [``botocore``] for Redis now supports AWS Identity and Access
Management authentication access to Redis clusters starting with redis-engine version 7.0
* api-change:``iottwinmaker``: [``botocore``] This release adds the following: 1) ExecuteQuery API
allows users to query their AWS IoT TwinMaker Knowledge Graph 2) Pricing plan APIs allow users to
configure and manage their pricing mode 3) Support for property groups and tabular property values
in existing AWS IoT TwinMaker APIs.
* api-change:``personalize-events``: [``botocore``] This release provides support for creation and
use of metric attributions in AWS Personalize
* api-change:``proton``: [``botocore``] Add support for sorting and filtering in
ListServiceInstances
* api-change:``rds``: [``botocore``] This release adds support for container databases (CDBs) to
Amazon RDS Custom for Oracle. A CDB contains one PDB at creation. You can add more PDBs using
Oracle SQL. You can also customize your database installation by setting the Oracle base, Oracle
home, and the OS user name and group.
* api-change:``ssm-incidents``: [``botocore``] Add support for PagerDuty integrations on
ResponsePlan, IncidentRecord, and RelatedItem APIs
* api-change:``ssm``: [``botocore``] This release adds support for cross account access in
CreateOpsItem, UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for
SSM resources: PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
* api-change:``transfer``: [``botocore``] Allow additional operations to throw ThrottlingException
* api-change:``xray``: [``botocore``] This release adds new APIs - PutResourcePolicy,
DeleteResourcePolicy, ListResourcePolicies for supporting resource based policies for AWS X-Ray.
- from version 1.26.10
* bugfix:s3: [``botocore``] fixes missing x-amz-content-sha256 header for s3 on outpost
* enhancement:sso: [``botocore``] Add support for loading sso-session profiles from the aws config
* api-change:``connect``: [``botocore``] This release updates the APIs: UpdateInstanceAttribute,
DescribeInstanceAttribute, and ListInstanceAttributes. You can use it to programmatically
enable/disable enhanced contact monitoring using attribute type ENHANCED_CONTACT_MONITORING on the
specified Amazon Connect instance.
* api-change:``greengrassv2``: [``botocore``] Adds new parent target ARN paramater to
CreateDeployment, GetDeployment, and ListDeployments APIs for the new subdeployments feature.
* api-change:``route53``: [``botocore``] Amazon Route 53 now supports the Europe (Spain) Region
(eu-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
region.
* api-change:``ssmsap``: [``botocore``] AWS Systems Manager for SAP provides simplified operations
and management of SAP applications such as SAP HANA. With this release, SAP customers and partners
can automate and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
* api-change:``workspaces``: [``botocore``] This release introduces
ModifyCertificateBasedAuthProperties, a new API that allows control of certificate-based auth
properties associated with a WorkSpaces directory. The DescribeWorkspaceDirectories API will now
additionally return certificate-based auth properties in its responses.
- from version 1.26.9
* api-change:``customer-profiles``: [``botocore``] This release enhances the SearchProfiles API by
providing functionality to search for profiles using multiple keys and logical operators.
* api-change:``lakeformation``: [``botocore``] This release adds a new parameter "Parameters" in
the DataLakeSettings.
* api-change:``managedblockchain``: [``botocore``] Updating the API docs data type:
NetworkEthereumAttributes, and the operations DeleteNode, and CreateNode to also include the
supported Goerli network.
* api-change:``proton``: [``botocore``] Add support for CodeBuild Provisioning
* api-change:``rds``: [``botocore``] This release adds support for restoring an RDS Multi-AZ DB
cluster snapshot to a Single-AZ deployment or a Multi-AZ DB instance deployment.
* api-change:``workdocs``: [``botocore``] Added 2 new document related operations,
DeleteDocumentVersion and RestoreDocumentVersions.
* api-change:``xray``: [``botocore``] This release enhances GetServiceGraph API to support new type
of edge to represent links between SQS and Lambda in event-driven applications.
- Update BuildRequires and Requires from setup.py
- Update to version 1.26.8
* api-change:``glue``: [``botocore``] Added links related to enabling job bookmarks.
* api-change:``iot``: [``botocore``] This release add new api listRelatedResourcesForAuditFinding
and new member type IssuerCertificates for Iot device device defender Audit.
* api-change:``license-manager``: [``botocore``] AWS License Manager now supports onboarded
Management Accounts or Delegated Admins to view granted licenses aggregated from all accounts in
the organization.
* api-change:``marketplace-catalog``: [``botocore``] Added three new APIs to support tagging and
tag-based authorization: TagResource, UntagResource, and ListTagsForResource. Added optional
parameters to the StartChangeSet API to support tagging a resource while making a request to create
it.
* api-change:``rekognition``: [``botocore``] Adding support for ImageProperties feature to detect
dominant colors and image brightness, sharpness, and contrast, inclusion and exclusion filters for
labels and label categories, new fields to the API response, "aliases" and "categories"
* api-change:``securityhub``: [``botocore``] Documentation updates for Security Hub
* api-change:``ssm-incidents``: [``botocore``] RelatedItems now have an ID field which can be used
for referencing them else where. Introducing event references in TimelineEvent API and increasing
maximum length of "eventData" to 12K characters.
- from version 1.26.7
* api-change:``autoscaling``: [``botocore``] This release adds a new price capacity optimized
allocation strategy for Spot Instances to help customers optimize provisioning of Spot Instances
via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare
capacity availability and Spot Instance price.
* api-change:``ec2``: [``botocore``] This release adds a new price capacity optimized allocation
strategy for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto
Scaling, EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity
availability and Spot Instance price.
* api-change:``ecs``: [``botocore``] This release adds support for task scale-in protection with
updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a
service managed task from being terminated by scale-in events and getTaskProtection API to get the
scale-in protection status of a task.
* api-change:``es``: [``botocore``] Amazon OpenSearch Service now offers managed VPC endpoints to
connect to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This
feature allows you to privately access OpenSearch Service domain without using public IPs or
requiring traffic to traverse the Internet.
* api-change:``resource-explorer-2``: [``botocore``] Text only updates to some Resource Explorer
descriptions.
* api-change:``scheduler``: [``botocore``] AWS introduces the new Amazon EventBridge Scheduler.
EventBridge Scheduler is a serverless scheduler that allows you to create, run, and manage tasks
from one central, managed service.
- from version 1.26.6
* api-change:``connect``: [``botocore``] This release adds new fields SignInUrl, UserArn, and
UserId to GetFederationToken response payload.
* api-change:``connectcases``: [``botocore``] This release adds the ability to disable templates
through the UpdateTemplate API. Disabling templates prevents customers from creating cases using
the template. For more information see
https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
* api-change:``ec2``: [``botocore``] Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are
purpose built for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge
High Memory instances are purpose-built to run large in-memory databases.
* api-change:``groundstation``: [``botocore``] This release adds the preview of customer-provided
ephemeris support for AWS Ground Station, allowing space vehicle owners to provide their own
position and trajectory information for a satellite.
* api-change:``mediapackage-vod``: [``botocore``] This release adds "IncludeIframeOnlyStream" for
Dash endpoints.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
- from version 1.26.5
* api-change:``acm``: [``botocore``] Support added for requesting elliptic curve certificate key
algorithm types P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
* api-change:``billingconductor``: [``botocore``] This release adds the Recurring Custom Line Item
feature along with a new API ListCustomLineItemVersions.
* api-change:``ec2``: [``botocore``] This release enables sharing of EC2 Placement Groups across
accounts and within AWS Organizations using Resource Access Manager
* api-change:``fms``: [``botocore``] AWS Firewall Manager now supports importing existing AWS
Network Firewall firewalls into Firewall Manager policies.
* api-change:``lightsail``: [``botocore``] This release adds support for Amazon Lightsail to
automate the delegation of domains registered through Amazon Route 53 to Lightsail DNS management
and to automate record creation for DNS validation of Lightsail SSL/TLS certificates.
* api-change:``opensearch``: [``botocore``] Amazon OpenSearch Service now offers managed VPC
endpoints to connect to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private
Cloud (VPC). This feature allows you to privately access OpenSearch Service domain without using
public IPs or requiring traffic to traverse the Internet.
* api-change:``polly``: [``botocore``] Amazon Polly adds new voices: Elin (sv-SE), Ida (nb-NO),
Laura (nl-NL) and Suvi (fi-FI). They are available as neural voices only.
* api-change:``resource-explorer-2``: [``botocore``] This is the initial SDK release for AWS
Resource Explorer. AWS Resource Explorer lets your users search for and discover your AWS resources
across the AWS Regions in your account.
* api-change:``route53``: [``botocore``] Amazon Route 53 now supports the Europe (Zurich) Region
(eu-central-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
region.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
- from version 1.26.4
* api-change:``athena``: [``botocore``] Adds support for using Query Result Reuse
* api-change:``autoscaling``: [``botocore``] This release adds support for two new attributes for
attribute-based instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
* api-change:``cloudtrail``: [``botocore``] This release includes support for configuring a
delegated administrator to manage an AWS Organizations organization CloudTrail trails and event
data stores, and AWS Key Management Service encryption of CloudTrail Lake event data stores.
* api-change:``ec2``: [``botocore``] This release adds support for two new attributes for
attribute-based instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
* api-change:``elasticache``: [``botocore``] Added support for IPv6 and dual stack for Memcached
and Redis clusters. Customers can now launch new Redis and Memcached clusters with IPv6 and dual
stack networking support.
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``mediaconvert``: [``botocore``] The AWS Elemental MediaConvert SDK has added support
for setting the SDR reference white point for HDR conversions and conversion of HDR10 to
DolbyVision without mastering metadata.
* api-change:``ssm``: [``botocore``] This release includes support for applying a CloudWatch alarm
to multi account multi region Systems Manager Automation
* api-change:``wafv2``: [``botocore``] The geo match statement now adds labels for country and
region. You can match requests at the region level by combining a geo match statement with label
match statements.
* api-change:``wellarchitected``: [``botocore``] This release adds support for integrations with
AWS Trusted Advisor and AWS Service Catalog AppRegistry to improve workload discovery and speed up
your workload reviews.
* api-change:``workspaces``: [``botocore``] This release adds protocols attribute to workspaces
properties data type. This enables customers to migrate workspaces from PC over IP (PCoIP) to
WorkSpaces Streaming Protocol (WSP) using create and modify workspaces public APIs.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
- from version 1.26.3
* api-change:``ec2``: [``botocore``] This release adds API support for the recipient of an AMI
account share to remove shared AMI launch permissions.
* api-change:``emr-containers``: [``botocore``] Adding support for Job templates. Job templates
allow you to create and store templates to configure Spark applications parameters. This helps you
ensure consistent settings across applications by reusing and enforcing configuration overrides in
data pipelines.
* api-change:``logs``: [``botocore``] Doc-only update for bug fixes and support of export to
buckets encrypted with SSE-KMS
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
- Update BuildRequires and Requires from setup.py
- Update to version 1.26.2
* api-change:``memorydb``: [``botocore``] Adding support for r6gd instances for MemoryDB Redis with
data tiering. In a cluster with data tiering enabled, when available memory capacity is exhausted,
the least recently used data is automatically tiered to solid state drives for cost-effective
capacity scaling with minimal performance impact.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker now supports running training jobs on
ml.trn1 instance types.
* api-change:``endpoint-rules``: [``botocore``] Update endpoint-rules client to latest version
- from version 1.26.1
* api-change:``iotsitewise``: [``botocore``] This release adds the ListAssetModelProperties and
ListAssetProperties APIs. You can list all properties that belong to a single asset model or asset
using these two new APIs.
* api-change:``s3control``: [``botocore``] S3 on Outposts launches support for Lifecycle
configuration for Outposts buckets. With S3 Lifecycle configuration, you can mange objects so they
are stored cost effectively. You can manage objects using size-based rules and specify how many
noncurrent versions bucket will retain.
* api-change:``sagemaker``: [``botocore``] This release updates Framework model regex for
ModelPackage to support new Framework version xgboost, sklearn.
* api-change:``ssm-incidents``: [``botocore``] Adds support for tagging replication-set on creation.
- from version 1.26.0
* feature:Endpoints: [``botocore``] Migrate all services to use new AWS Endpoint Resolution
framework
* Enhancement:Endpoints: [``botocore``] Discontinued use of `sslCommonName` hosts as detailed in
1.27.0 (see `#2705 <https://github.com/boto/botocore/issues/2705>`__ for more info)
* api-change:``rds``: [``botocore``] Relational Database Service - This release adds support for
configuring Storage Throughput on RDS database instances.
* api-change:``textract``: [``botocore``] Add ocr results in AnalyzeIDResponse as blocks
- from version 1.25.5
* api-change:``apprunner``: [``botocore``] This release adds support for private App Runner
services. Services may now be configured to be made private and only accessible from a VPC. The
changes include a new VpcIngressConnection resource and several new and modified APIs.
* api-change:``connect``: [``botocore``] Amazon connect now support a new API DismissUserContact to
dismiss or remove terminated contacts in Agent CCP
* api-change:``ec2``: [``botocore``] Elastic IP transfer is a new Amazon VPC feature that allows
you to transfer your Elastic IP addresses from one AWS Account to another.
* api-change:``iot``: [``botocore``] This release adds the Amazon Location action to IoT Rules
Engine.
* api-change:``logs``: [``botocore``] SDK release to support tagging for destinations and log
groups with TagResource. Also supports tag on create with PutDestination.
* api-change:``sesv2``: [``botocore``] This release includes support for interacting with the
Virtual Deliverability Manager, allowing you to opt in/out of the feature and to retrieve
recommendations and metric data.
* api-change:``textract``: [``botocore``] This release introduces additional support for 30+
normalized fields such as vendor address and currency. It also includes OCR output in the response
and accuracy improvements for the already supported fields in previous version
- from version 1.25.4
* api-change:``apprunner``: [``botocore``] AWS App Runner adds .NET 6, Go 1, PHP 8.1 and Ruby 3.1
runtimes.
* api-change:``appstream``: [``botocore``] This release includes CertificateBasedAuthProperties in
CreateDirectoryConfig and UpdateDirectoryConfig.
* api-change:``cloud9``: [``botocore``] Update to the documentation section of the Cloud9 API
Reference guide.
* api-change:``cloudformation``: [``botocore``] This release adds more fields to improves
visibility of AWS CloudFormation StackSets information in following APIs: ListStackInstances,
DescribeStackInstance, ListStackSetOperationResults, ListStackSetOperations,
DescribeStackSetOperation.
* api-change:``gamesparks``: [``botocore``] Add LATEST as a possible GameSDK Version on snapshot
* api-change:``mediatailor``: [``botocore``] This release introduces support for SCTE-35
segmentation descriptor messages which can be sent within time signal messages.
- from version 1.25.3
* api-change:``ec2``: [``botocore``] Feature supports the replacement of instance root volume using
an updated AMI without requiring customers to stop their instance.
* api-change:``fms``: [``botocore``] Add support NetworkFirewall Managed Rule Group Override flag
in GetViolationDetails API
* api-change:``glue``: [``botocore``] Added support for custom datatypes when using custom csv
classifier.
* api-change:``redshift``: [``botocore``] This release clarifies use for the ElasticIp parameter of
the CreateCluster and RestoreFromClusterSnapshot APIs.
* api-change:``sagemaker``: [``botocore``] This change allows customers to provide a custom
entrypoint script for the docker container to be run while executing training jobs, and provide
custom arguments to the entrypoint script.
* api-change:``wafv2``: [``botocore``] This release adds the following: Challenge rule action, to
silently verify client browsers; rule group rule action override to any valid rule action, not just
Count; token sharing between protected applications for challenge/CAPTCHA token; targeted rules
option for Bot Control managed rule group.
- from version 1.25.2
* api-change:``iam``: [``botocore``] Doc only update that corrects instances of CLI not using an
entity.
* api-change:``kafka``: [``botocore``] This release adds support for Tiered Storage. UpdateStorage
allows you to control the Storage Mode for supported storage tiers.
* api-change:``neptune``: [``botocore``] Added a new cluster-level attribute to set the capacity
range for Neptune Serverless instances.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Automatic Model Tuning now supports
specifying Grid Search strategy for tuning jobs, which evaluates all hyperparameter combinations
exhaustively based on the categorical hyperparameters provided.
- from version 1.25.1
* api-change:``accessanalyzer``: [``botocore``] This release adds support for six new resource
types in IAM Access Analyzer to help you easily identify public and cross-account access to your
AWS resources. Updated service API, documentation, and paginators.
* api-change:``location``: [``botocore``] Added new map styles with satellite imagery for map
resources using HERE as a data provider.
* api-change:``mediatailor``: [``botocore``] This release is a documentation update
* api-change:``rds``: [``botocore``] Relational Database Service - This release adds support for
exporting DB cluster data to Amazon S3.
* api-change:``workspaces``: [``botocore``] This release adds new enums for supporting Workspaces
Core features, including creating Manual running mode workspaces, importing regular Workspaces Core
images and importing g4dn Workspaces Core images.
- Update BuildRequires and Requires from setup.py
- Update in SLE-15 (bsc#1204537, jsc#PED-2333)
- Update to version 1.25.0
* feature:Endpoints: [``botocore``] Implemented new endpoint ruleset system to dynamically derive
endpoints and settings for services
* api-change:``acm-pca``: [``botocore``] AWS Private Certificate Authority (AWS Private CA) now
offers usage modes which are combination of features to address specific use cases.
* api-change:``batch``: [``botocore``] This release adds support for AWS Batch on Amazon EKS.
* api-change:``datasync``: [``botocore``] Added support for self-signed certificates when using
object storage locations; added BytesCompressed to the TaskExecution response.
* api-change:``sagemaker``: [``botocore``] SageMaker Inference Recommender now supports a new API
ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an
inference recommendation job.
- from version 1.24.96
* api-change:``cognito-idp``: [``botocore``] This release adds a new "DeletionProtection" field to
the UserPool in Cognito. Application admins can configure this value with either ACTIVE or INACTIVE
value. Setting this field to ACTIVE will prevent a user pool from accidental deletion.
* api-change:``sagemaker``: [``botocore``] CreateInferenceRecommenderjob API now supports passing
endpoint details directly, that will help customers to identify the max invocation and max latency
they can achieve for their model and the associated endpoint along with getting recommendations on
other instances.
- from version 1.24.95
* api-change:``devops-guru``: [``botocore``] This release adds information about the resources
DevOps Guru is analyzing.
* api-change:``globalaccelerator``: [``botocore``] Global Accelerator now supports AddEndpoints and
RemoveEndpoints operations for standard endpoint groups.
* api-change:``resiliencehub``: [``botocore``] In this release, we are introducing support for
regional optimization for AWS Resilience Hub applications. It also includes a few documentation
updates to improve clarity.
* api-change:``rum``: [``botocore``] CloudWatch RUM now supports Extended CloudWatch Metrics with
Additional Dimensions
- from version 1.24.94
* api-change:``chime-sdk-messaging``: [``botocore``] Documentation updates for Chime Messaging SDK
* api-change:``cloudtrail``: [``botocore``] This release includes support for exporting CloudTrail
Lake query results to an Amazon S3 bucket.
* api-change:``config``: [``botocore``] This release adds resourceType enums for AppConfig,
AppSync, DataSync, EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
* api-change:``connect``: [``botocore``] This release adds API support for managing phone numbers
that can be used across multiple AWS regions through telephony traffic distribution.
* api-change:``events``: [``botocore``] Update events client to latest version
* api-change:``managedblockchain``: [``botocore``] Adding new Accessor APIs for Amazon Managed
Blockchain
* api-change:``s3``: [``botocore``] Updates internal logic for constructing API endpoints. We have
added rule-based endpoints and internal model parameters.
* api-change:``s3control``: [``botocore``] Updates internal logic for constructing API endpoints.
We have added rule-based endpoints and internal model parameters.
* api-change:``support-app``: [``botocore``] This release adds the
RegisterSlackWorkspaceForOrganization API. You can use the API to register a Slack workspace for an
AWS account that is part of an organization.
* api-change:``workspaces-web``: [``botocore``] WorkSpaces Web now supports user access logging for
recording session start, stop, and URL navigation.
- from version 1.24.93
* api-change:``frauddetector``: [``botocore``] Documentation Updates for Amazon Fraud Detector
* api-change:``sagemaker``: [``botocore``] This change allows customers to enable data capturing
while running a batch transform job, and configure monitoring schedule to monitoring the captured
data.
* api-change:``servicediscovery``: [``botocore``] Updated the ListNamespaces API to support the
NAME and HTTP_NAME filters, and the BEGINS_WITH filter condition.
* api-change:``sesv2``: [``botocore``] This release allows subscribers to enable Dedicated IPs
(managed) to send email via a fully managed dedicated IP experience. It also adds identities'
VerificationStatus in the response of GetEmailIdentity and ListEmailIdentities APIs, and ImportJobs
counts in the response of ListImportJobs API.
- from version 1.24.92
* api-change:``greengrass``: [``botocore``] This change allows customers to specify
FunctionRuntimeOverride in FunctionDefinitionVersion. This configuration can be used if the runtime
on the device is different from the AWS Lambda runtime specified for that function.
* api-change:``sagemaker``: [``botocore``] This release adds support for C7g, C6g, C6gd, C6gn, M6g,
M6gd, R6g, and R6gn Graviton instance types in Amazon SageMaker Inference.
- Update BuildRequires and Requires from setup.py
- Remove version constraint for python-pytest in BuildRequires
- Update to version 1.24.91
* api-change:``mediaconvert``: [``botocore``] MediaConvert now supports specifying the minimum
percentage of the HRD buffer available at the end of each encoded video segment.
- from version 1.24.90
* api-change:``amplifyuibuilder``: [``botocore``] We are releasing the ability for fields to be
configured as arrays.
* api-change:``appflow``: [``botocore``] With this update, you can choose which Salesforce API is
used by Amazon AppFlow to transfer data to or from your Salesforce account. You can choose the
Salesforce REST API or Bulk API 2.0. You can also choose for Amazon AppFlow to pick the API
automatically.
* api-change:``connect``: [``botocore``] This release adds support for a secondary email and a
mobile number for Amazon Connect instance users.
* api-change:``ds``: [``botocore``] This release adds support for describing and updating AWS
Managed Microsoft AD set up.
* api-change:``ecs``: [``botocore``] Documentation update to address tickets.
* api-change:``guardduty``: [``botocore``] Add UnprocessedDataSources to CreateDetectorResponse
which specifies the data sources that couldn't be enabled during the CreateDetector request. In
addition, update documentations.
* api-change:``iam``: [``botocore``] Documentation updates for the AWS Identity and Access
Management API Reference.
* api-change:``iotfleetwise``: [``botocore``] Documentation update for AWS IoT FleetWise
* api-change:``medialive``: [``botocore``] AWS Elemental MediaLive now supports forwarding SCTE-35
messages through the Event Signaling and Management (ESAM) API, and can read those SCTE-35 messages
from an inactive source.
* api-change:``mediapackage-vod``: [``botocore``] This release adds SPEKE v2 support for
MediaPackage VOD. Speke v2 is an upgrade to the existing SPEKE API to support multiple encryption
keys, based on an encryption contract selected by the customer.
* api-change:``panorama``: [``botocore``] Pause and resume camera stream processing with
SignalApplicationInstanceNodeInstances. Reboot an appliance with CreateJobForDevices. More
application state information in DescribeApplicationInstance response.
* api-change:``rds-data``: [``botocore``] Doc update to reflect no support for schema parameter on
BatchExecuteStatement API
* api-change:``ssm-incidents``: [``botocore``] Update RelatedItem enum to support Tasks
* api-change:``ssm``: [``botocore``] Support of AmazonLinux2022 by Patch Manager
* api-change:``transfer``: [``botocore``] This release adds an option for customers to configure
workflows that are triggered when files are only partially received from a client due to premature
session disconnect.
* api-change:``translate``: [``botocore``] This release enables customers to specify multiple
target languages in asynchronous batch translation requests.
* api-change:``wisdom``: [``botocore``] This release updates the GetRecommendations API to include
a trigger event list for classifying and grouping recommendations.
- from version 1.24.89
* api-change:``codeguru-reviewer``: [``botocore``] Documentation update to replace broken link.
* api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version
* api-change:``greengrassv2``: [``botocore``] This release adds error status details for
deployments and components that failed on a device and adds features to improve visibility into
component installation.
* api-change:``quicksight``: [``botocore``] Amazon QuickSight now supports SecretsManager Secret
ARN in place of CredentialPair for DataSource creation and update. This release also has some minor
documentation updates and removes CountryCode as a required parameter in GeoSpatialColumnGroup
- from version 1.24.88
* api-change:``resiliencehub``: [``botocore``] Documentation change for AWS Resilience Hub.
Doc-only update to fix Documentation layout
- from version 1.24.87
* api-change:``glue``: [``botocore``] This SDK release adds support to sync glue jobs with source
control provider. Additionally, a new parameter called SourceControlDetails will be added to Job
model.
* api-change:``network-firewall``: [``botocore``] StreamExceptionPolicy configures how AWS Network
Firewall processes traffic when a network connection breaks midstream
* api-change:``outposts``: [``botocore``] This release adds the Asset state information to the
ListAssets response. The ListAssets request supports filtering on Asset state.
- from version 1.24.86
* api-change:``connect``: [``botocore``] Updated the CreateIntegrationAssociation API to support
the CASES_DOMAIN IntegrationType.
* api-change:``connectcases``: [``botocore``] This release adds APIs for Amazon Connect Cases.
Cases allows your agents to quickly track and manage customer issues that require multiple
interactions, follow-up tasks, and teams in your contact center. For more information, see
https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
* api-change:``ec2``: [``botocore``] Added EnableNetworkAddressUsageMetrics flag for
ModifyVpcAttribute, DescribeVpcAttribute APIs.
* api-change:``ecs``: [``botocore``] Documentation updates to address various Amazon ECS tickets.
* api-change:``s3control``: [``botocore``] S3 Object Lambda adds support to allow customers to
intercept HeadObject and ListObjects requests and introduce their own compute. These requests were
previously proxied to S3.
* api-change:``workmail``: [``botocore``] This release adds support for impersonation roles in
Amazon WorkMail.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.85
* api-change:``accessanalyzer``: [``botocore``] AWS IAM Access Analyzer policy validation
introduces new checks for role trust policies. As customers author a policy, IAM Access Analyzer
policy validation evaluates the policy for any issues to make it easier for customers to author
secure policies.
* api-change:``ec2``: [``botocore``] Adding an imdsSupport attribute to EC2 AMIs
* api-change:``snowball``: [``botocore``] Adds support for V3_5C. This is a refreshed AWS Snowball
Edge Compute Optimized device type with 28TB SSD, 104 vCPU and 416GB memory (customer usable).
- from version 1.24.84
* api-change:``codedeploy``: [``botocore``] This release allows you to override the alarm
configurations when creating a deployment.
* api-change:``devops-guru``: [``botocore``] This release adds filter feature on
AddNotificationChannel API, enable customer to configure the SNS notification messages by Severity
or MessageTypes
* api-change:``dlm``: [``botocore``] This release adds support for archival of single-volume
snapshots created by Amazon Data Lifecycle Manager policies
* api-change:``sagemaker-runtime``: [``botocore``] Update sagemaker-runtime client to latest version
* api-change:``sagemaker``: [``botocore``] A new parameter called ExplainerConfig is added to
CreateEndpointConfig API to enable SageMaker Clarify online explainability feature.
* api-change:``sso-oidc``: [``botocore``] Documentation updates for the IAM Identity Center OIDC
CLI Reference.
- from version 1.24.83
* api-change:``acm``: [``botocore``] This update returns additional certificate details such as
certificate SANs and allows sorting in the ListCertificates API.
* api-change:``ec2``: [``botocore``] u-3tb1 instances are powered by Intel Xeon Platinum 8176M
(Skylake) processors and are purpose-built to run large in-memory databases.
* api-change:``emr-serverless``: [``botocore``] This release adds API support to debug Amazon EMR
Serverless jobs in real-time with live application UIs
* api-change:``fsx``: [``botocore``] This release adds support for Amazon File Cache.
* api-change:``migrationhuborchestrator``: [``botocore``] Introducing AWS MigrationHubOrchestrator.
This is the first public release of AWS MigrationHubOrchestrator.
* api-change:``polly``: [``botocore``] Added support for the new Cantonese voice - Hiujin. Hiujin
is available as a Neural voice only.
* api-change:``proton``: [``botocore``] This release adds an option to delete pipeline provisioning
repositories using the UpdateAccountSettings API
* api-change:``sagemaker``: [``botocore``] SageMaker Training Managed Warm Pools let you retain
provisioned infrastructure to reduce latency for repetitive training workloads.
* api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager
* api-change:``translate``: [``botocore``] This release enables customers to access control rights
on Translate resources like Parallel Data and Custom Terminology using Tag Based Authorization.
* api-change:``workspaces``: [``botocore``] This release includes diagnostic log uploading feature.
If it is enabled, the log files of WorkSpaces Windows client will be sent to Amazon WorkSpaces
automatically for troubleshooting. You can use modifyClientProperty api to enable/disable this
feature.
- from version 1.24.82
* api-change:``ce``: [``botocore``] This release is to support retroactive Cost Categories. The new
field will enable you to retroactively apply new and existing cost category rules to previous
months.
* api-change:``kendra``: [``botocore``] My AWS Service (placeholder) - Amazon Kendra now provides a
data source connector for DropBox. For more information, see
https://docs.aws.amazon.com/kendra/latest/dg/data-source-dropbox.html
* api-change:``location``: [``botocore``] This release adds place IDs, which are unique identifiers
of places, along with a new GetPlace operation, which can be used with place IDs to find a place
again later. UnitNumber and UnitType are also added as new properties of places.
- from version 1.24.81
* api-change:``cur``: [``botocore``] This release adds two new support
regions(me-central-1/eu-south-2) for OSG.
* api-change:``iotfleetwise``: [``botocore``] General availability (GA) for AWS IoT Fleetwise. It
adds AWS IoT Fleetwise to AWS SDK. For more information, see
https://docs.aws.amazon.com/iot-fleetwise/latest/APIReference/Welcome.html.
* api-change:``ssm``: [``botocore``] This release includes support for applying a CloudWatch alarm
to Systems Manager capabilities like Automation, Run Command, State Manager, and Maintenance
Windows.
- from version 1.24.80
* api-change:``apprunner``: [``botocore``] AWS App Runner adds a Node.js 16 runtime.
* api-change:``ec2``: [``botocore``] Letting external AWS customers provide ImageId as a Launch
Template override in FleetLaunchTemplateOverridesRequest
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``lightsail``: [``botocore``] This release adds Instance Metadata Service (IMDS)
support for Lightsail instances.
* api-change:``nimble``: [``botocore``] Amazon Nimble Studio adds support for on-demand Amazon
Elastic Compute Cloud (EC2) G3 and G5 instances, allowing customers to utilize additional GPU
instance types for their creative projects.
* api-change:``ssm``: [``botocore``] This release adds new SSM document types
ConformancePackTemplate and CloudFormation
* api-change:``wafv2``: [``botocore``] Add the default specification for ResourceType in
ListResourcesForWebACL.
- from version 1.24.79
* api-change:``backup-gateway``: [``botocore``] Changes include: new GetVirtualMachineApi to fetch
a single user's VM, improving ListVirtualMachines to fetch filtered VMs as well as all VMs, and
improving GetGatewayApi to now also return the gateway's MaintenanceStartTime.
* api-change:``devicefarm``: [``botocore``] This release adds the support for VPC-ENI based
connectivity for private devices on AWS Device Farm.
* api-change:``ec2``: [``botocore``] Documentation updates for Amazon EC2.
* api-change:``glue``: [``botocore``] Added support for S3 Event Notifications for Catalog Target
Crawlers.
* api-change:``identitystore``: [``botocore``] Documentation updates for the Identity Store CLI
Reference.
- from version 1.24.78
* api-change:``comprehend``: [``botocore``] Amazon Comprehend now supports synchronous mode for
targeted sentiment API operations.
* api-change:``s3control``: [``botocore``] S3 on Outposts launches support for object versioning
for Outposts buckets. With S3 Versioning, you can preserve, retrieve, and restore every version of
every object stored in your buckets. You can recover from both unintended user actions and
application failures.
* api-change:``sagemaker``: [``botocore``] SageMaker now allows customization on Canvas Application
settings, including enabling/disabling time-series forecasting and specifying an Amazon Forecast
execution role at both the Domain and UserProfile levels.
- from version 1.24.77
* api-change:``ec2``: [``botocore``] This release adds support for blocked paths to Amazon VPC
Reachability Analyzer.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.76
* api-change:``cloudtrail``: [``botocore``] This release includes support for importing existing
trails into CloudTrail Lake.
* api-change:``ec2``: [``botocore``] This release adds CapacityAllocations field to
DescribeCapacityReservations
* api-change:``mediaconnect``: [``botocore``] This change allows the customer to use the SRT Caller
protocol as part of their flows
* api-change:``rds``: [``botocore``] This release adds support for Amazon RDS Proxy with SQL Server
compatibility.
- from version 1.24.75
* api-change:``codestar-notifications``: [``botocore``] This release adds tag based access control
for the UntagResource API.
* api-change:``ecs``: [``botocore``] This release supports new task definition sizes.
- from version 1.24.74
* api-change:``dynamodb``: [``botocore``] Increased DynamoDB transaction limit from 25 to 100.
* api-change:``ec2``: [``botocore``] This feature allows customers to create tags for
vpc-endpoint-connections and vpc-endpoint-service-permissions.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Automatic Model Tuning now supports
specifying Hyperband strategy for tuning jobs, which uses a multi-fidelity based tuning strategy to
stop underperforming hyperparameter configurations early.
- from version 1.24.73
* api-change:``amplifyuibuilder``: [``botocore``] Amplify Studio UIBuilder is introducing forms
functionality. Forms can be configured from Data Store models, JSON, or from scratch. These forms
can then be generated in your project and used like any other React components.
* api-change:``ec2``: [``botocore``] This update introduces API operations to manage and create
local gateway route tables, CoIP pools, and VIF group associations.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.72
* api-change:``customer-profiles``: [``botocore``] Added isUnstructured in response for Customer
Profiles Integration APIs
* api-change:``drs``: [``botocore``] Fixed the data type of lagDuration that is returned in
Describe Source Server API
* api-change:``ec2``: [``botocore``] Two new features for local gateway route tables: support for
static routes targeting Elastic Network Interfaces and direct VPC routing.
* api-change:``evidently``: [``botocore``] This release adds support for the client-side evaluation
- powered by AWS AppConfig feature.
* api-change:``kendra``: [``botocore``] This release enables our customer to choose the option of
Sharepoint 2019 for the on-premise Sharepoint connector.
* api-change:``transfer``: [``botocore``] This release introduces the ability to have multiple
server host keys for any of your Transfer Family servers that use the SFTP protocol.
- from version 1.24.71
* api-change:``eks``: [``botocore``] Adding support for local Amazon EKS clusters on Outposts
- from version 1.24.70
* api-change:``cloudtrail``: [``botocore``] This release adds CloudTrail getChannel and
listChannels APIs to allow customer to view the ServiceLinkedChannel configurations.
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``lexv2-runtime``: [``botocore``] Update lexv2-runtime client to latest version
* api-change:``pi``: [``botocore``] Increases the maximum values of two RDS Performance Insights
APIs. The maximum value of the Limit parameter of DimensionGroup is 25. The MaxResult maximum is
now 25 for the following APIs: DescribeDimensionKeys, GetResourceMetrics,
ListAvailableResourceDimensions, and ListAvailableResourceMetrics.
* api-change:``redshift``: [``botocore``] This release updates documentation for AQUA features and
other description updates.
- from version 1.24.69
* api-change:``ec2``: [``botocore``] This release adds support to send VPC Flow Logs to
kinesis-data-firehose as new destination type
* api-change:``emr-containers``: [``botocore``] EMR on EKS now allows running Spark SQL using the
newly introduced Spark SQL Job Driver in the Start Job Run API
* api-change:``lookoutmetrics``: [``botocore``] Release dimension value filtering feature to allow
customers to define dimension filters for including only a subset of their dataset to be used by
LookoutMetrics.
* api-change:``medialive``: [``botocore``] This change exposes API settings which allow Dolby Atmos
and Dolby Vision to be used when running a channel using Elemental Media Live
* api-change:``route53``: [``botocore``] Amazon Route 53 now supports the Middle East (UAE) Region
(me-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
region.
* api-change:``sagemaker``: [``botocore``] This release adds Mode to AutoMLJobConfig.
* api-change:``ssm``: [``botocore``] This release adds support for Systems Manager State Manager
Association tagging.
- from version 1.24.68
* api-change:``dataexchange``: [``botocore``] Documentation updates for AWS Data Exchange.
* api-change:``ec2``: [``botocore``] Documentation updates for Amazon EC2.
* api-change:``eks``: [``botocore``] Adds support for EKS Addons ResolveConflicts "preserve" flag.
Also adds new update failed status for EKS Addons.
* api-change:``fsx``: [``botocore``] Documentation update for Amazon FSx.
* api-change:``inspector2``: [``botocore``] This release adds new fields like fixAvailable,
fixedInVersion and remediation to the finding model. The requirement to have vulnerablePackages in
the finding model has also been removed. The documentation has been updated to reflect these
changes.
* api-change:``iotsitewise``: [``botocore``] Allow specifying units in Asset Properties
* api-change:``sagemaker``: [``botocore``] SageMaker Hosting now allows customization on ML
instance storage volume size, model data download timeout and inference container startup ping
health check timeout for each ProductionVariant in CreateEndpointConfig API.
* api-change:``sns``: [``botocore``] Amazon SNS introduces the Data Protection Policy APIs, which
enable customers to attach a data protection policy to an SNS topic. This allows topic owners to
enable the new message data protection feature to audit and block sensitive data that is exchanged
through their topics.
- from version 1.24.67
* api-change:``identitystore``: [``botocore``] Documentation updates for the Identity Store CLI
Reference.
* api-change:``sagemaker``: [``botocore``] This release adds HyperParameterTuningJob type in Search
API.
- from version 1.24.66
* api-change:``cognito-idp``: [``botocore``] This release adds a new "AuthSessionValidity" field to
the UserPoolClient in Cognito. Application admins can configure this value for their users'
authentication duration, which is currently fixed at 3 minutes, up to 15 minutes. Setting this
field will also apply to the SMS MFA authentication flow.
* api-change:``connect``: [``botocore``] This release adds search APIs for Routing Profiles and
Queues, which can be used to search for those resources within a Connect Instance.
* api-change:``mediapackage``: [``botocore``] Added support for AES_CTR encryption to CMAF origin
endpoints
* api-change:``sagemaker``: [``botocore``] This release enables administrators to attribute user
activity and API calls from Studio notebooks, Data Wrangler and Canvas to specific users even when
users share the same execution IAM role. ExecutionRoleIdentityConfig at Sagemaker domain level
enables this feature.
- from version 1.24.65
* api-change:``codeguru-reviewer``: [``botocore``] Documentation updates to fix formatting issues
in CLI and SDK documentation.
* api-change:``controltower``: [``botocore``] This release contains the first SDK for AWS Control
Tower. It introduces a new set of APIs: EnableControl, DisableControl, GetControlOperation, and
ListEnabledControls.
* api-change:``route53``: [``botocore``] Documentation updates for Amazon Route 53.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.64
* api-change:``cloudfront``: [``botocore``] Update API documentation for CloudFront origin access
control (OAC)
* api-change:``identitystore``: [``botocore``] Expand IdentityStore API to support Create, Read,
Update, Delete and Get operations for User, Group and GroupMembership resources.
* api-change:``iotthingsgraph``: [``botocore``] This release deprecates all APIs of the ThingsGraph
service
* api-change:``ivs``: [``botocore``] IVS Merge Fragmented Streams. This release adds support for
recordingReconnectWindow field in IVS recordingConfigurations. For more information see
https://docs.aws.amazon.com/ivs/latest/APIReference/Welcome.html
* api-change:``rds-data``: [``botocore``] Documentation updates for RDS Data API
* api-change:``sagemaker``: [``botocore``] SageMaker Inference Recommender now accepts Inference
Recommender fields: Domain, Task, Framework, SamplePayloadUrl, SupportedContentTypes,
SupportedInstanceTypes, directly in our CreateInferenceRecommendationsJob API through
ContainerConfig
- from version 1.24.63
* enhancement:Endpoints: [``botocore``] Deprecate SSL common name
* api-change:``greengrassv2``: [``botocore``] Adds topologyFilter to ListInstalledComponentsRequest
which allows filtration of components by ROOT or ALL (including root and dependency components).
Adds lastStatusChangeTimestamp to ListInstalledComponents response to show the last time a
component changed state on a device.
* api-change:``identitystore``: [``botocore``] Documentation updates for the Identity Store CLI
Reference.
* api-change:``lookoutequipment``: [``botocore``] This release adds new apis for providing labels.
* api-change:``macie2``: [``botocore``] This release of the Amazon Macie API adds support for using
allow lists to define specific text and text patterns to ignore when inspecting data sources for
sensitive data.
* api-change:``sso-admin``: [``botocore``] Documentation updates for the AWS IAM Identity Center
CLI Reference.
* api-change:``sso``: [``botocore``] Documentation updates for the AWS IAM Identity Center Portal
CLI Reference.
- from version 1.24.62
* api-change:``fsx``: [``botocore``] Documentation updates for Amazon FSx for NetApp ONTAP.
* api-change:``voice-id``: [``botocore``] Amazon Connect Voice ID now detects voice spoofing. When
a prospective fraudster tries to spoof caller audio using audio playback or synthesized speech,
Voice ID will return a risk score and outcome to indicate the how likely it is that the voice is
spoofed.
- from version 1.24.61
* api-change:``mediapackage``: [``botocore``] This release adds Ads AdTriggers and
AdsOnDeliveryRestrictions to describe calls for CMAF endpoints on MediaPackage.
* api-change:``rds``: [``botocore``] Removes support for RDS Custom from DBInstanceClass in
ModifyDBInstance
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.60
* enhancement:Identity: [``botocore``] TokenProvider added for bearer auth support
* api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version
* api-change:``gamelift``: [``botocore``] This release adds support for eight EC2 local zones as
fleet locations; Atlanta, Chicago, Dallas, Denver, Houston, Kansas City (us-east-1-mci-1a), Los
Angeles, and Phoenix. It also adds support for C5d, C6a, C6i, and R5d EC2 instance families.
* api-change:``iotwireless``: [``botocore``] This release includes a new feature for the customers
to enable the LoRa gateways to send out beacons for Class B devices and an option to select one or
more gateways for Class C devices when sending the LoRaWAN downlink messages.
* api-change:``ivschat``: [``botocore``] Documentation change for IVS Chat API Reference. Doc-only
update to add a paragraph on ARNs to the Welcome section.
* api-change:``panorama``: [``botocore``] Support sorting and filtering in ListDevices API, and add
more fields to device listings and single device detail
* api-change:``sso-oidc``: [``botocore``] Updated required request parameters on IAM Identity
Center's OIDC CreateToken action.
- from version 1.24.59
* api-change:``cloudfront``: [``botocore``] Adds support for CloudFront origin access control
(OAC), making it possible to restrict public access to S3 bucket origins in all AWS Regions, those
with SSE-KMS, and more.
* api-change:``config``: [``botocore``] AWS Config now supports ConformancePackTemplate documents
in SSM Docs for the deployment and update of conformance packs.
* api-change:``iam``: [``botocore``] Documentation updates for AWS Identity and Access Management
(IAM).
* api-change:``ivs``: [``botocore``] Documentation Change for IVS API Reference - Doc-only update
to type field description for CreateChannel and UpdateChannel actions and for Channel data type.
Also added Amazon Resource Names (ARNs) paragraph to Welcome section.
* api-change:``quicksight``: [``botocore``] Added a new optional property DashboardVisual under
ExperienceConfiguration parameter of GenerateEmbedUrlForAnonymousUser and
GenerateEmbedUrlForRegisteredUser API operations. This supports embedding of specific visuals in
QuickSight dashboards.
* api-change:``transfer``: [``botocore``] Documentation updates for AWS Transfer Family
- from version 1.24.58
* api-change:``rds``: [``botocore``] RDS for Oracle supports Oracle Data Guard switchover and read
replica backups.
* api-change:``sso-admin``: [``botocore``] Documentation updates to reflect service rename - AWS
IAM Identity Center (successor to AWS Single Sign-On)
- from version 1.24.57
* api-change:``docdb``: [``botocore``] Update document for volume clone
* api-change:``ec2``: [``botocore``] R6a instances are powered by 3rd generation AMD EPYC (Milan)
processors delivering all-core turbo frequency of 3.6 GHz. C6id, M6id, and R6id instances are
powered by 3rd generation Intel Xeon Scalable processor (Ice Lake) delivering all-core turbo
frequency of 3.5 GHz.
* api-change:``forecast``: [``botocore``] releasing What-If Analysis APIs and update ARN regex
pattern to be more strict in accordance with security recommendation
* api-change:``forecastquery``: [``botocore``] releasing What-If Analysis APIs
* api-change:``iotsitewise``: [``botocore``] Enable non-unique asset names under different
hierarchies
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``securityhub``: [``botocore``] Added new resource details objects to ASFF, including
resources for AwsBackupBackupVault, AwsBackupBackupPlan and AwsBackupRecoveryPoint. Added
FixAvailable, FixedInVersion and Remediation to Vulnerability.
* api-change:``support-app``: [``botocore``] This is the initial SDK release for the AWS Support
App in Slack.
- from version 1.24.56
* api-change:``connect``: [``botocore``] This release adds SearchSecurityProfiles API which can be
used to search for Security Profile resources within a Connect Instance.
* api-change:``ivschat``: [``botocore``] Documentation Change for IVS Chat API Reference - Doc-only
update to change text/description for tags field.
* api-change:``kendra``: [``botocore``] This release adds support for a new authentication type -
Personal Access Token (PAT) for confluence server.
* api-change:``lookoutmetrics``: [``botocore``] This release is to make GetDataQualityMetrics API
publicly available.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.55
* api-change:``chime-sdk-media-pipelines``: [``botocore``] The Amazon Chime SDK now supports live
streaming of real-time video from the Amazon Chime SDK sessions to streaming platforms such as
Amazon IVS and Amazon Elemental MediaLive. We have also added support for concatenation to create a
single media capture file.
* api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version
* api-change:``cognito-idp``: [``botocore``] This change is being made simply to fix the public
documentation based on the models. We have included the PasswordChange and ResendCode events, along
with the Pass, Fail and InProgress status. We have removed the Success and Failure status which are
never returned by our APIs.
* api-change:``dynamodb``: [``botocore``] This release adds support for importing data from S3 into
a new DynamoDB table
* api-change:``ec2``: [``botocore``] This release adds support for VPN log options , a new feature
allowing S2S VPN connections to send IKE activity logs to CloudWatch Logs
* api-change:``networkmanager``: [``botocore``] Add TransitGatewayPeeringAttachmentId property to
TransitGatewayPeering Model
- from version 1.24.54
* api-change:``appmesh``: [``botocore``] AWS App Mesh release to support Multiple Listener and
Access Log Format feature
* api-change:``connectcampaigns``: [``botocore``] Updated exceptions for Amazon Connect Outbound
Campaign api's.
* api-change:``kendra``: [``botocore``] This release adds Zendesk connector (which allows you to
specify Zendesk SAAS platform as data source), Proxy Support for Sharepoint and Confluence Server
(which allows you to specify the proxy configuration if proxy is required to connect to your
Sharepoint/Confluence Server as data source).
* api-change:``lakeformation``: [``botocore``] This release adds a new API support
"AssumeDecoratedRoleWithSAML" and also release updates the corresponding documentation.
* api-change:``lambda``: [``botocore``] Added support for customization of Consumer Group ID for
MSK and Kafka Event Source Mappings.
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``rds``: [``botocore``] Adds support for Internet Protocol Version 6 (IPv6) for RDS
Aurora database clusters.
* api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager.
- from version 1.24.53
* api-change:``rekognition``: [``botocore``] This release adds APIs which support copying an Amazon
Rekognition Custom Labels model and managing project policies across AWS account.
* api-change:``servicecatalog``: [``botocore``] Documentation updates for Service Catalog
- from version 1.24.52
* enhancement:AWSCRT: [``botocore``] Upgrade awscrt version to 0.14.0
* api-change:``cloudfront``: [``botocore``] Adds Http 3 support to distributions
* api-change:``identitystore``: [``botocore``] Documentation updates to reflect service rename -
AWS IAM Identity Center (successor to AWS Single Sign-On)
* api-change:``sso``: [``botocore``] Documentation updates to reflect service rename - AWS IAM
Identity Center (successor to AWS Single Sign-On)
* api-change:``wisdom``: [``botocore``] This release introduces a new API PutFeedback that allows
submitting feedback to Wisdom on content relevance.
- from version 1.24.51
* api-change:``amp``: [``botocore``] This release adds log APIs that allow customers to manage
logging for their Amazon Managed Service for Prometheus workspaces.
* api-change:``chime-sdk-messaging``: [``botocore``] The Amazon Chime SDK now supports channels
with up to one million participants with elastic channels.
* api-change:``ivs``: [``botocore``] Updates various list api MaxResults ranges
* api-change:``personalize-runtime``: [``botocore``] This release provides support for promotions
in AWS Personalize runtime.
* api-change:``rds``: [``botocore``] Adds support for RDS Custom to DBInstanceClass in
ModifyDBInstance
- from version 1.24.50
* api-change:``backupstorage``: [``botocore``] This is the first public release of AWS Backup
Storage. We are exposing some previously-internal APIs for use by external services. These APIs are
not meant to be used directly by customers.
* api-change:``glue``: [``botocore``] Add support for Python 3.9 AWS Glue Python Shell jobs
* api-change:``privatenetworks``: [``botocore``] This is the initial SDK release for AWS Private
5G. AWS Private 5G is a managed service that makes it easy to deploy, operate, and scale your own
private mobile network at your on-premises location.
- from version 1.24.49
* api-change:``dlm``: [``botocore``] This release adds support for excluding specific data
(non-boot) volumes from multi-volume snapshot sets created by snapshot lifecycle policies
* api-change:``ec2``: [``botocore``] This release adds support for excluding specific data
(non-root) volumes from multi-volume snapshot sets created from instances.
- from version 1.24.48
* api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version
* api-change:``location``: [``botocore``] Amazon Location Service now allows circular geofences in
BatchPutGeofence, PutGeofence, and GetGeofence APIs.
* api-change:``sagemaker-a2i-runtime``: [``botocore``] Fix bug with parsing ISO-8601 CreationTime
in Java SDK in DescribeHumanLoop
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Automatic Model Tuning now supports
specifying multiple alternate EC2 instance types to make tuning jobs more robust when the preferred
instance type is not available due to insufficient capacity.
- from version 1.24.47
* api-change:``glue``: [``botocore``] Add an option to run non-urgent or non-time sensitive Glue
Jobs on spare capacity
* api-change:``identitystore``: [``botocore``] Documentation updates to reflect service rename -
AWS IAM Identity Center (successor to AWS Single Sign-On)
* api-change:``iotwireless``: [``botocore``] AWS IoT Wireless release support for sidewalk data
reliability.
* api-change:``pinpoint``: [``botocore``] Adds support for Advance Quiet Time in Journeys. Adds
RefreshOnSegmentUpdate and WaitForQuietTime to JourneyResponse.
* api-change:``quicksight``: [``botocore``] A series of documentation updates to the QuickSight API
reference.
* api-change:``sso-admin``: [``botocore``] Documentation updates to reflect service rename - AWS
IAM Identity Center (successor to AWS Single Sign-On)
* api-change:``sso-oidc``: [``botocore``] Documentation updates to reflect service rename - AWS IAM
Identity Center (successor to AWS Single Sign-On)
* api-change:``sso``: [``botocore``] Documentation updates to reflect service rename - AWS IAM
Identity Center (successor to AWS Single Sign-On)
- from version 1.24.46
* enhancement:Lambda: [``botocore``] Add support for Trace ID in Lambda environments
* api-change:``chime-sdk-meetings``: [``botocore``] Adds support for Tags on Amazon Chime SDK
WebRTC sessions
* api-change:``config``: [``botocore``] Add resourceType enums for Athena, GlobalAccelerator,
Detective and EC2 types
* api-change:``dms``: [``botocore``] Documentation updates for Database Migration Service (DMS).
* api-change:``iot``: [``botocore``] The release is to support attach a provisioning template to
CACert for JITP function, Customer now doesn't have to hardcode a roleArn and templateBody during
register a CACert to enable JITP.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.45
* api-change:``cognito-idp``: [``botocore``] Add a new exception type, ForbiddenException, that is
returned when request is not allowed
* api-change:``wafv2``: [``botocore``] You can now associate an AWS WAF web ACL with an Amazon
Cognito user pool.
- from version 1.24.44
* api-change:``license-manager-user-subscriptions``: [``botocore``] This release supports user
based subscription for Microsoft Visual Studio Professional and Enterprise on EC2.
* api-change:``personalize``: [``botocore``] This release adds support for incremental bulk
ingestion for the Personalize CreateDatasetImportJob API.
- from version 1.24.43
* api-change:``config``: [``botocore``] Documentation update for PutConfigRule and
PutOrganizationConfigRule
* api-change:``workspaces``: [``botocore``] This release introduces ModifySamlProperties, a new API
that allows control of SAML properties associated with a WorkSpaces directory. The
DescribeWorkspaceDirectories API will now additionally return SAML properties in its responses.
- from version 1.24.42
* bugfix:TraceId: [``botocore``] Rollback bugfix for obeying _X_AMZN_TRACE_ID env var
- from version 1.24.41
* bugfix:Config: [``botocore``] Obey _X_AMZN_TRACE_ID environment variable instead of
_X_AMZ_TRACE_ID
* api-change:``ec2``: [``botocore``] Documentation updates for Amazon EC2.
* api-change:``fsx``: [``botocore``] Documentation updates for Amazon FSx
* api-change:``shield``: [``botocore``] AWS Shield Advanced now supports filtering for
ListProtections and ListProtectionGroups.
- from version 1.24.40
* api-change:``ec2``: [``botocore``] Documentation updates for VM Import/Export.
* api-change:``es``: [``botocore``] This release adds support for gp3 EBS (Elastic Block Store)
storage.
* api-change:``lookoutvision``: [``botocore``] This release introduces support for image
segmentation models and updates CPU accelerator options for models hosted on edge devices.
* api-change:``opensearch``: [``botocore``] This release adds support for gp3 EBS (Elastic Block
Store) storage.
- from version 1.24.39
* api-change:``auditmanager``: [``botocore``] This release adds an exceeded quota exception to
several APIs. We added a ServiceQuotaExceededException for the following operations:
CreateAssessment, CreateControl, CreateAssessmentFramework, and UpdateAssessmentStatus.
* api-change:``chime``: [``botocore``] Chime VoiceConnector will now support ValidateE911Address
which will allow customers to prevalidate their addresses included in their SIP invites for
emergency calling
* api-change:``config``: [``botocore``] This release adds ListConformancePackComplianceScores API
to support the new compliance score feature, which provides a percentage of the number of compliant
rule-resource combinations in a conformance pack compared to the number of total possible
rule-resource combinations in the conformance pack.
* api-change:``globalaccelerator``: [``botocore``] Global Accelerator now supports dual-stack
accelerators, enabling support for IPv4 and IPv6 traffic.
* api-change:``marketplace-catalog``: [``botocore``] The SDK for the StartChangeSet API will now
automatically set and use an idempotency token in the ClientRequestToken request parameter if the
customer does not provide it.
* api-change:``polly``: [``botocore``] Amazon Polly adds new English and Hindi voice - Kajal. Kajal
is available as Neural voice only.
* api-change:``ssm``: [``botocore``] Adding doc updates for OpsCenter support in Service Setting
actions.
* api-change:``workspaces``: [``botocore``] Added CreateWorkspaceImage API to create a new
WorkSpace image from an existing WorkSpace.
- from version 1.24.38
* api-change:``appsync``: [``botocore``] Adds support for a new API to evaluate mapping templates
with mock data, allowing you to remotely unit test your AppSync resolvers and functions.
* api-change:``detective``: [``botocore``] Added the ability to get data source package information
for the behavior graph. Graph administrators can now start (or stop) optional datasources on the
behavior graph.
* api-change:``guardduty``: [``botocore``] Amazon GuardDuty introduces a new Malware Protection
feature that triggers malware scan on selected EC2 instance resources, after the service detects a
potentially malicious activity.
* api-change:``lookoutvision``: [``botocore``] This release introduces support for the automatic
scaling of inference units used by Amazon Lookout for Vision models.
* api-change:``macie2``: [``botocore``] This release adds support for retrieving (revealing) sample
occurrences of sensitive data that Amazon Macie detects and reports in findings.
* api-change:``rds``: [``botocore``] Adds support for using RDS Proxies with RDS for MariaDB
databases.
* api-change:``rekognition``: [``botocore``] This release introduces support for the automatic
scaling of inference units used by Amazon Rekognition Custom Labels models.
* api-change:``securityhub``: [``botocore``] Documentation updates for AWS Security Hub
* api-change:``transfer``: [``botocore``] AWS Transfer Family now supports Applicability Statement
2 (AS2), a network protocol used for the secure and reliable transfer of critical
Business-to-Business (B2B) data over the public internet using HTTP/HTTPS as the transport
mechanism.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.37
* api-change:``autoscaling``: [``botocore``] Documentation update for Amazon EC2 Auto Scaling.
- from version 1.24.36
* api-change:``account``: [``botocore``] This release enables customers to manage the primary
contact information for their AWS accounts. For more information, see
https://docs.aws.amazon.com/accounts/latest/reference/API_Operations.html
* api-change:``ec2``: [``botocore``] Added support for EC2 M1 Mac instances. For more information,
please visit aws.amazon.com/mac.
* api-change:``iotdeviceadvisor``: [``botocore``] Added new service feature (Early access only) -
Long Duration Test, where customers can test the IoT device to observe how it behaves when the
device is in operation for longer period.
* api-change:``medialive``: [``botocore``] Link devices now support remote rebooting. Link devices
now support maintenance windows. Maintenance windows allow a Link device to install software
updates without stopping the MediaLive channel. The channel will experience a brief loss of input
from the device while updates are installed.
* api-change:``rds``: [``botocore``] This release adds the "ModifyActivityStream" API with support
for audit policy state locking and unlocking.
* api-change:``transcribe``: [``botocore``] Remove unsupported language codes for
StartTranscriptionJob and update VocabularyFileUri for UpdateMedicalVocabulary
- from version 1.24.35
* api-change:``athena``: [``botocore``] This feature allows customers to retrieve runtime
statistics for completed queries
* api-change:``cloudwatch``: [``botocore``] Update cloudwatch client to latest version
* api-change:``dms``: [``botocore``] Documentation updates for Database Migration Service (DMS).
* api-change:``docdb``: [``botocore``] Enable copy-on-write restore type
* api-change:``ec2-instance-connect``: [``botocore``] This release includes a new exception type
"EC2InstanceUnavailableException" for SendSSHPublicKey and SendSerialConsoleSSHPublicKey APIs.
* api-change:``frauddetector``: [``botocore``] The release introduces Account Takeover Insights
(ATI) model. The ATI model detects fraud relating to account takeover. This release also adds
support for new variable types: ARE_CREDENTIALS_VALID and SESSION_ID and adds new structures to
Model Version APIs.
* api-change:``iotsitewise``: [``botocore``] Added asynchronous API to ingest bulk historical and
current data into IoT SiteWise.
* api-change:``kendra``: [``botocore``] Amazon Kendra now provides Oauth2 support for SharePoint
Online. For more information, see
https://docs.aws.amazon.com/kendra/latest/dg/data-source-sharepoint.html
* api-change:``network-firewall``: [``botocore``] Network Firewall now supports referencing dynamic
IP sets from stateful rule groups, for IP sets stored in Amazon VPC prefix lists.
* api-change:``rds``: [``botocore``] Adds support for creating an RDS Proxy for an RDS for MariaDB
database.
- from version 1.24.34
* api-change:``acm-pca``: [``botocore``] AWS Certificate Manager (ACM) Private Certificate
Authority (PCA) documentation updates
* api-change:``iot``: [``botocore``] GA release the ability to enable/disable IoT Fleet Indexing
for Device Defender and Named Shadow information, and search them through IoT Fleet Indexing APIs.
This includes Named Shadow Selection as a part of the UpdateIndexingConfiguration API.
- from version 1.24.33
* api-change:``devops-guru``: [``botocore``] Added new APIs for log anomaly detection feature.
* api-change:``glue``: [``botocore``] Documentation updates for AWS Glue Job Timeout and Autoscaling
* api-change:``sagemaker-edge``: [``botocore``] Amazon SageMaker Edge Manager provides lightweight
model deployment feature to deploy machine learning models on requested devices.
* api-change:``sagemaker``: [``botocore``] Fixed an issue with cross account QueryLineage
* api-change:``workspaces``: [``botocore``] Increased the character limit of the login message from
850 to 2000 characters.
- from version 1.24.32
* api-change:``discovery``: [``botocore``] Add AWS Agentless Collector details to the
GetDiscoverySummary API response
* api-change:``ec2``: [``botocore``] Documentation updates for Amazon EC2.
* api-change:``elasticache``: [``botocore``] Adding AutoMinorVersionUpgrade in the
DescribeReplicationGroups API
* api-change:``kms``: [``botocore``] Added support for the SM2 KeySpec in China Partition Regions
* api-change:``mediapackage``: [``botocore``] This release adds "IncludeIframeOnlyStream" for Dash
endpoints and increases the number of supported video and audio encryption presets for Speke v2
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Edge Manager provides lightweight model
deployment feature to deploy machine learning models on requested devices.
* api-change:``sso-admin``: [``botocore``] AWS SSO now supports attaching customer managed policies
and a permissions boundary to your permission sets. This release adds new API operations to manage
and view the customer managed policies and the permissions boundary for a given permission set.
- from version 1.24.31
* api-change:``datasync``: [``botocore``] Documentation updates for AWS DataSync regarding
configuring Amazon FSx for ONTAP location security groups and SMB user permissions.
* api-change:``drs``: [``botocore``] Changed existing APIs to allow choosing a dynamic volume type
for replicating volumes, to reduce costs for customers.
* api-change:``evidently``: [``botocore``] This release adds support for the new segmentation
feature.
* api-change:``wafv2``: [``botocore``] This SDK release provide customers ability to add
sensitivity level for WAF SQLI Match Statements.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.30
* api-change:``athena``: [``botocore``] This release updates data types that contain either
QueryExecutionId, NamedQueryId or ExpectedBucketOwner. Ids must be between 1 and 128 characters and
contain only non-whitespace characters. ExpectedBucketOwner must be 12-digit string.
* api-change:``codeartifact``: [``botocore``] This release introduces Package Origin Controls, a
mechanism used to counteract Dependency Confusion attacks. Adds two new APIs,
PutPackageOriginConfiguration and DescribePackage, and updates the ListPackage,
DescribePackageVersion and ListPackageVersion APIs in support of the feature.
* api-change:``config``: [``botocore``] Update ResourceType enum with values for Route53Resolver,
Batch, DMS, Workspaces, Stepfunctions, SageMaker, ElasticLoadBalancingV2, MSK types
* api-change:``ec2``: [``botocore``] This release adds flow logs for Transit Gateway to allow
customers to gain deeper visibility and insights into network traffic through their Transit
Gateways.
* api-change:``fms``: [``botocore``] Adds support for strict ordering in stateful rule groups in
Network Firewall policies.
* api-change:``glue``: [``botocore``] This release adds an additional worker type for Glue
Streaming jobs.
* api-change:``inspector2``: [``botocore``] This release adds support for Inspector V2 scan
configurations through the get and update configuration APIs. Currently this allows configuring ECR
automated re-scan duration to lifetime or 180 days or 30 days.
* api-change:``kendra``: [``botocore``] This release adds AccessControlConfigurations which allow
you to redefine your document level access control without the need for content re-indexing.
* api-change:``nimble``: [``botocore``] Amazon Nimble Studio adds support for IAM-based access to
AWS resources for Nimble Studio components and custom studio components. Studio Component scripts
use these roles on Nimble Studio workstation to mount filesystems, access S3 buckets, or other
configured resources in the Studio's AWS account
* api-change:``outposts``: [``botocore``] This release adds the ShipmentInformation and
AssetInformationList fields to the GetOrder API response.
* api-change:``sagemaker``: [``botocore``] This release adds support for G5, P4d, and C6i instance
types in Amazon SageMaker Inference and increases the number of hyperparameters that can be
searched from 20 to 30 in Amazon SageMaker Automatic Model Tuning
- from version 1.24.29
* api-change:``appconfig``: [``botocore``] Adding Create, Get, Update, Delete, and List APIs for
new two new resources: Extensions and ExtensionAssociations.
- from version 1.24.28
* api-change:``networkmanager``: [``botocore``] This release adds general availability API support
for AWS Cloud WAN.
- from version 1.24.27
* api-change:``ec2``: [``botocore``] Build, manage, and monitor a unified global network that
connects resources running across your cloud and on-premises environments using the AWS Cloud WAN
APIs.
* api-change:``redshift-serverless``: [``botocore``] Removed prerelease language for GA launch.
* api-change:``redshift``: [``botocore``] This release adds a new --snapshot-arn field for
describe-cluster-snapshots, describe-node-configuration-options, restore-from-cluster-snapshot,
authorize-snapshot-acsess, and revoke-snapshot-acsess APIs. It allows customers to give a Redshift
snapshot ARN or a Redshift Serverless ARN as input.
- from version 1.24.26
* api-change:``backup``: [``botocore``] This release adds support for authentication using IAM user
identity instead of passed IAM role, identified by excluding the IamRoleArn field in the
StartRestoreJob API. This feature applies to only resource clients with a destructive restore
nature (e.g. SAP HANA).
- from version 1.24.25
* api-change:``chime-sdk-meetings``: [``botocore``] Adds support for AppKeys and TenantIds in
Amazon Chime SDK WebRTC sessions
* api-change:``dms``: [``botocore``] New api to migrate event subscriptions to event bridge rules
* api-change:``iot``: [``botocore``] This release adds support to register a CA certificate without
having to provide a verification certificate. This also allows multiple AWS accounts to register
the same CA in the same region.
* api-change:``iotwireless``: [``botocore``] Adds 5 APIs: PutPositionConfiguration,
GetPositionConfiguration, ListPositionConfigurations, UpdatePosition, GetPosition for the new
Positioning Service feature which enables customers to configure solvers to calculate position of
LoRaWAN devices, or specify position of LoRaWAN devices & gateways.
* api-change:``sagemaker``: [``botocore``] Heterogeneous clusters: the ability to launch training
jobs with multiple instance types. This enables running component of the training job on the
instance type that is most suitable for it. e.g. doing data processing and augmentation on CPU
instances and neural network training on GPU instances
- from version 1.24.24
* api-change:``cloudformation``: [``botocore``] My AWS Service (placeholder) - Add a new feature
Account-level Targeting for StackSet operation
* api-change:``synthetics``: [``botocore``] This release introduces Group feature, which enables
users to group cross-region canaries.
- from version 1.24.23
* api-change:``config``: [``botocore``] Updating documentation service limits
* api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version
* api-change:``quicksight``: [``botocore``] This release allows customers to programmatically
create QuickSight accounts with Enterprise and Enterprise + Q editions. It also releases
allowlisting domains for embedding QuickSight dashboards at runtime through the embedding APIs.
* api-change:``rds``: [``botocore``] Adds waiters support for DBCluster.
* api-change:``rolesanywhere``: [``botocore``] IAM Roles Anywhere allows your workloads such as
servers, containers, and applications to obtain temporary AWS credentials and use the same IAM
roles and policies that you have configured for your AWS workloads to access AWS resources.
* api-change:``ssm-incidents``: [``botocore``] Adds support for tagging incident-record on creation
by providing incident tags in the template within a response-plan.
- from version 1.24.22
* api-change:``dms``: [``botocore``] Added new features for AWS DMS version 3.4.7 that includes new
endpoint settings for S3, OpenSearch, Postgres, SQLServer and Oracle.
* api-change:``rds``: [``botocore``] Adds support for additional retention periods to Performance
Insights.
- from version 1.24.21
* api-change:``athena``: [``botocore``] This feature introduces the API support for Athena's
parameterized query and BatchGetPreparedStatement API.
* api-change:``customer-profiles``: [``botocore``] This release adds the optional
MinAllowedConfidenceScoreForMerging parameter to the CreateDomain, UpdateDomain, and
GetAutoMergingPreview APIs in Customer Profiles. This parameter is used as a threshold to influence
the profile auto-merging step of the Identity Resolution process.
* api-change:``emr``: [``botocore``] Update emr client to latest version
* api-change:``glue``: [``botocore``] This release adds tag as an input of CreateDatabase
* api-change:``kendra``: [``botocore``] Amazon Kendra now provides a data source connector for
alfresco
* api-change:``mwaa``: [``botocore``] Documentation updates for Amazon Managed Workflows for Apache
Airflow.
* api-change:``pricing``: [``botocore``] Documentation update for GetProducts Response.
* api-change:``wellarchitected``: [``botocore``] Added support for UpdateGlobalSettings API. Added
status filter to ListWorkloadShares and ListLensShares.
* api-change:``workmail``: [``botocore``] This release adds support for managing user availability
configurations in Amazon WorkMail.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.20
* api-change:``appstream``: [``botocore``] Includes support for StreamingExperienceSettings in
CreateStack and UpdateStack APIs
* api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version
* api-change:``emr``: [``botocore``] Update emr client to latest version
* api-change:``medialive``: [``botocore``] This release adds support for automatic renewal of
MediaLive reservations at the end of each reservation term. Automatic renewal is optional. This
release also adds support for labelling accessibility-focused audio and caption tracks in HLS
outputs.
* api-change:``redshift-serverless``: [``botocore``] Add new API operations for Amazon Redshift
Serverless, a new way of using Amazon Redshift without needing to manually manage provisioned
clusters. The new operations let you interact with Redshift Serverless resources, such as create
snapshots, list VPC endpoints, delete resource policies, and more.
* api-change:``sagemaker``: [``botocore``] This release adds: UpdateFeatureGroup,
UpdateFeatureMetadata, DescribeFeatureMetadata APIs; FeatureMetadata type in Search API;
LastModifiedTime, LastUpdateStatus, OnlineStoreTotalSizeBytes in DescribeFeatureGroup API.
* api-change:``translate``: [``botocore``] Added ListLanguages API which can be used to list the
languages supported by Translate.
- from version 1.24.19
* api-change:``datasync``: [``botocore``] AWS DataSync now supports Amazon FSx for NetApp ONTAP
locations.
* api-change:``ec2``: [``botocore``] This release adds a new spread placement group to EC2
Placement Groups: host level spread, which spread instances between physical hosts, available to
Outpost customers only. CreatePlacementGroup and DescribePlacementGroups APIs were updated with a
new parameter: SpreadLevel to support this feature.
* api-change:``finspace-data``: [``botocore``] Release new API GetExternalDataViewAccessDetails
* api-change:``polly``: [``botocore``] Add 4 new neural voices - Pedro (es-US), Liam (fr-CA),
Daniel (de-DE) and Arthur (en-GB).
- from version 1.24.18
* api-change:``iot``: [``botocore``] This release ease the restriction for the input of tag value
to align with AWS standard, now instead of min length 1, we change it to min length 0.
- from version 1.24.17
* api-change:``glue``: [``botocore``] This release enables the new ListCrawls API for viewing the
AWS Glue Crawler run history.
* api-change:``rds-data``: [``botocore``] Documentation updates for RDS Data API
- from version 1.24.16
* api-change:``lookoutequipment``: [``botocore``] This release adds visualizations to the scheduled
inference results. Users will be able to see interference results, including diagnostic results
from their running inference schedulers.
* api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has released support
for automatic DolbyVision metadata generation when converting HDR10 to DolbyVision.
* api-change:``mgn``: [``botocore``] New and modified APIs for the Post-Migration Framework
* api-change:``migration-hub-refactor-spaces``: [``botocore``] This release adds the new API
UpdateRoute that allows route to be updated to ACTIVE/INACTIVE state. In addition, CreateRoute API
will now allow users to create route in ACTIVE/INACTIVE state.
* api-change:``sagemaker``: [``botocore``] SageMaker Ground Truth now supports Virtual Private
Cloud. Customers can launch labeling jobs and access to their private workforce in VPC mode.
- from version 1.24.15
* api-change:``apigateway``: [``botocore``] Documentation updates for Amazon API Gateway
* api-change:``pricing``: [``botocore``] This release introduces 1 update to the GetProducts API.
The serviceCode attribute is now required when you use the GetProductsRequest.
* api-change:``transfer``: [``botocore``] Until today, the service supported only RSA host keys and
user keys. Now with this launch, Transfer Family has expanded the support for ECDSA and ED25519
host keys and user keys, enabling customers to support a broader set of clients by choosing RSA,
ECDSA, and ED25519 host and user keys.
- from version 1.24.14
* api-change:``ec2``: [``botocore``] This release adds support for Private IP VPNs, a new feature
allowing S2S VPN connections to use private ip addresses as the tunnel outside ip address over
Direct Connect as transport.
* api-change:``ecs``: [``botocore``] Amazon ECS UpdateService now supports the following
parameters: PlacementStrategies, PlacementConstraints and CapacityProviderStrategy.
* api-change:``wellarchitected``: [``botocore``] Adds support for lens tagging, Adds support for
multiple helpful-resource urls and multiple improvement-plan urls.
- from version 1.24.13
* api-change:``ds``: [``botocore``] This release adds support for describing and updating AWS
Managed Microsoft AD settings
* api-change:``kafka``: [``botocore``] Documentation updates to use Az Id during cluster creation.
* api-change:``outposts``: [``botocore``] This release adds the AssetLocation structure to the
ListAssets response. AssetLocation includes the RackElevation for an Asset.
- from version 1.24.12
* api-change:``connect``: [``botocore``] This release updates these APIs: UpdateInstanceAttribute,
DescribeInstanceAttribute and ListInstanceAttributes. You can use it to programmatically
enable/disable High volume outbound communications using attribute type HIGH_VOLUME_OUTBOUND on the
specified Amazon Connect instance.
* api-change:``connectcampaigns``: [``botocore``] Added Amazon Connect high volume outbound
communications SDK.
* api-change:``dynamodb``: [``botocore``] Doc only update for DynamoDB service
* api-change:``dynamodbstreams``: [``botocore``] Update dynamodbstreams client to latest version
- from version 1.24.11
* api-change:``redshift-data``: [``botocore``] This release adds a new --workgroup-name field to
operations that connect to an endpoint. Customers can now execute queries against their serverless
workgroups.
* api-change:``redshiftserverless``: [``botocore``] Add new API operations for Amazon Redshift
Serverless, a new way of using Amazon Redshift without needing to manually manage provisioned
clusters. The new operations let you interact with Redshift Serverless resources, such as create
snapshots, list VPC endpoints, delete resource policies, and more.
* api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager
* api-change:``securityhub``: [``botocore``] Added Threats field for security findings. Added new
resource details for ECS Container, ECS Task, RDS SecurityGroup, Kinesis Stream, EC2
TransitGateway, EFS AccessPoint, CloudFormation Stack, CloudWatch Alarm, VPC Peering Connection and
WAF Rules
- from version 1.24.10
* api-change:``finspace-data``: [``botocore``] This release adds a new set of APIs,
GetPermissionGroup, DisassociateUserFromPermissionGroup, AssociateUserToPermissionGroup,
ListPermissionGroupsByUser, ListUsersByPermissionGroup.
* api-change:``guardduty``: [``botocore``] Adds finding fields available from GuardDuty Console.
Adds FreeTrial related operations. Deprecates the use of various APIs related to Master Accounts
and Replace them with Administrator Accounts.
* api-change:``servicecatalog-appregistry``: [``botocore``] This release adds a new API
ListAttributeGroupsForApplication that returns associated attribute groups of an application. In
addition, the UpdateApplication and UpdateAttributeGroup APIs will not allow users to update the
'Name' attribute.
* api-change:``workspaces``: [``botocore``] Added new field "reason" to
OperationNotSupportedException. Receiving this exception in the DeregisterWorkspaceDirectory API
will now return a reason giving more context on the failure.
- from version 1.24.9
* api-change:``budgets``: [``botocore``] Add a budgets ThrottlingException. Update the CostFilters
value pattern.
* api-change:``lookoutmetrics``: [``botocore``] Adding filters to Alert and adding new UpdateAlert
API.
* api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has added support for
rules that constrain Automatic-ABR rendition selection when generating ABR package ladders.
- from version 1.24.8
* api-change:``outposts``: [``botocore``] This release adds API operations AWS uses to install
Outpost servers.
- from version 1.24.7
* api-change:``frauddetector``: [``botocore``] Documentation updates for Amazon Fraud Detector
(AWSHawksNest)
- from version 1.24.6
* api-change:``chime-sdk-meetings``: [``botocore``] Adds support for live transcription in AWS
GovCloud (US) Regions.
- from version 1.24.5
* api-change:``dms``: [``botocore``] This release adds DMS Fleet Advisor APIs and exposes
functionality for DMS Fleet Advisor. It adds functionality to create and modify fleet advisor
instances, and to collect and analyze information about the local data infrastructure.
* api-change:``iam``: [``botocore``] Documentation updates for AWS Identity and Access Management
(IAM).
* api-change:``m2``: [``botocore``] AWS Mainframe Modernization service is a managed mainframe
service and set of tools for planning, migrating, modernizing, and running mainframe workloads on
AWS
* api-change:``neptune``: [``botocore``] This release adds support for Neptune to be configured as
a global database, with a primary DB cluster in one region, and up to five secondary DB clusters in
other regions.
* api-change:``redshift-serverless``: [``botocore``] Add new API operations for Amazon Redshift
Serverless, a new way of using Amazon Redshift without needing to manually manage provisioned
clusters. The new operations let you interact with Redshift Serverless resources, such as create
snapshots, list VPC endpoints, delete resource policies, and more.
* api-change:``redshift``: [``botocore``] Adds new API GetClusterCredentialsWithIAM to return
temporary credentials.
- from version 1.24.4
* api-change:``auditmanager``: [``botocore``] This release introduces 2 updates to the Audit
Manager API. The roleType and roleArn attributes are now required when you use the CreateAssessment
or UpdateAssessment operation. We also added a throttling exception to the RegisterAccount API
operation.
* api-change:``ce``: [``botocore``] Added two new APIs to support cost allocation tags operations:
ListCostAllocationTags, UpdateCostAllocationTagsStatus.
- from version 1.24.3
* api-change:``chime-sdk-messaging``: [``botocore``] This release adds support for searching
channels by members via the SearchChannels API, removes required restrictions for Name and Mode in
UpdateChannel API and enhances CreateChannel API by exposing member and moderator list as well as
channel id as optional parameters.
* api-change:``connect``: [``botocore``] This release adds a new API, GetCurrentUserData, which
returns real-time details about users' current activity.
- Update BuildRequires and Requires from setup.py
- Update to version 1.24.2
* api-change:``codeartifact``: [``botocore``] Documentation updates for CodeArtifact
* api-change:``voice-id``: [``botocore``] Added a new attribute ServerSideEncryptionUpdateDetails
to Domain and DomainSummary.
* api-change:``proton``: [``botocore``] Add new "Components" API to enable users to Create, Delete
and Update AWS Proton components.
* api-change:``connect``: [``botocore``] This release adds the following features: 1) New APIs to
manage (create, list, update) task template resources, 2) Updates to startTaskContact API to
support task templates, and 3) new TransferContact API to programmatically transfer in-progress
tasks via a contact flow.
* api-change:``application-insights``: [``botocore``] Provide Account Level onboarding support
through CFN/CLI
* api-change:``kendra``: [``botocore``] Amazon Kendra now provides a data source connector for
GitHub. For more information, see
https://docs.aws.amazon.com/kendra/latest/dg/data-source-github.html
- from version 1.24.1
* api-change:``backup-gateway``: [``botocore``] Adds GetGateway and UpdateGatewaySoftwareNow API
and adds hypervisor name to UpdateHypervisor API
* api-change:``forecast``: [``botocore``] Added Format field to Import and Export APIs in Amazon
Forecast. Added TimeSeriesSelector to Create Forecast API.
* api-change:``chime-sdk-meetings``: [``botocore``] Adds support for centrally controlling each
participant's ability to send and receive audio, video and screen share within a WebRTC session.
Attendee capabilities can be specified when the attendee is created and updated during the session
with the new BatchUpdateAttendeeCapabilitiesExcept API.
* api-change:``route53``: [``botocore``] Add new APIs to support Route 53 IP Based Routing
- from version 1.24.0
* api-change:``iotsitewise``: [``botocore``] This release adds the following new optional field to
the IoT SiteWise asset resource: assetDescription.
* api-change:``lookoutmetrics``: [``botocore``] Adding backtest mode to detectors using the
Cloudwatch data source.
* api-change:``transcribe``: [``botocore``] Amazon Transcribe now supports automatic language
identification for multi-lingual audio in batch mode.
* feature:Python: Dropped support for Python 3.6
* feature:Python: [``botocore``] Dropped support for Python 3.6
* api-change:``cognito-idp``: [``botocore``] Amazon Cognito now supports IP Address propagation for
all unauthenticated APIs (e.g. SignUp, ForgotPassword).
* api-change:``drs``: [``botocore``] Changed existing APIs and added new APIs to accommodate using
multiple AWS accounts with AWS Elastic Disaster Recovery.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Notebook Instances now support Jupyter
Lab 3.
- from version 1.23.10
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Notebook Instances now allows
configuration of Instance Metadata Service version and Amazon SageMaker Studio now supports G5
instance types.
* api-change:``appflow``: [``botocore``] Adding the following features/changes: Parquet output that
preserves typing from the source connector, Failed executions threshold before deactivation for
scheduled flows, increasing max size of access and refresh token from 2048 to 4096
* api-change:``datasync``: [``botocore``] AWS DataSync now supports TLS encryption in transit, file
system policies and access points for EFS locations.
* api-change:``emr-serverless``: [``botocore``] This release adds support for Amazon EMR
Serverless, a serverless runtime environment that simplifies running analytics applications using
the latest open source frameworks such as Apache Spark and Apache Hive.
- from version 1.23.9
* api-change:``lightsail``: [``botocore``] Amazon Lightsail now supports the ability to configure a
Lightsail Container Service to pull images from Amazon ECR private repositories in your account.
* api-change:``emr-serverless``: [``botocore``] This release adds support for Amazon EMR
Serverless, a serverless runtime environment that simplifies running analytics applications using
the latest open source frameworks such as Apache Spark and Apache Hive.
* api-change:``ec2``: [``botocore``] C7g instances, powered by the latest generation AWS Graviton3
processors, provide the best price performance in Amazon EC2 for compute-intensive workloads.
* api-change:``forecast``: [``botocore``] Introduced a new field in Auto Predictor as Time
Alignment Boundary. It helps in aligning the timestamps generated during Forecast exports
- from version 1.23.8
* api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager
* api-change:``fsx``: [``botocore``] This release adds root squash support to FSx for Lustre to
restrict root level access from clients by mapping root users to a less-privileged user/group with
limited permissions.
* api-change:``lookoutmetrics``: [``botocore``] Adding AthenaSourceConfig for MetricSet APIs to
support Athena as a data source.
* api-change:``voice-id``: [``botocore``] VoiceID will now automatically expire Speakers if they
haven't been accessed for Enrollment, Re-enrollment or Successful Auth for three years. The Speaker
APIs now return a "LastAccessedAt" time for Speakers, and the EvaluateSession API returns
"SPEAKER_EXPIRED" Auth Decision for EXPIRED Speakers.
* api-change:``cloudformation``: [``botocore``] Add a new parameter statusReason to
DescribeStackSetOperation output for additional details
* api-change:``apigateway``: [``botocore``] Documentation updates for Amazon API Gateway
* api-change:``apprunner``: [``botocore``] Documentation-only update added for CodeConfiguration.
* api-change:``sagemaker``: [``botocore``] Amazon SageMaker Autopilot adds support for manually
selecting features from the input dataset using the CreateAutoMLJob API.
- from version 1.23.7
* api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has added support for
rules that constrain Automatic-ABR rendition selection when generating ABR package ladders.
* api-change:``cognito-idp``: [``botocore``] Amazon Cognito now supports requiring attribute
verification (ex. email and phone number) before update.
* api-change:``networkmanager``: [``botocore``] This release adds Multi Account API support for a
TGW Global Network, to enable and disable AWSServiceAccess with AwsOrganizations for Network
Manager service and dependency CloudFormation StackSets service.
* api-change:``ivschat``: [``botocore``] Doc-only update. For MessageReviewHandler structure, added
timeout period in the description of the fallbackResult field
* api-change:``ec2``: [``botocore``] Stop Protection feature enables customers to protect their
instances from accidental stop actions.
- from version 1.23.6
* api-change:``elasticache``: [``botocore``] Added support for encryption in transit for Memcached
clusters. Customers can now launch Memcached cluster with encryption in transit enabled when using
Memcached version 1.6.12 or later.
* api-change:``forecast``: [``botocore``] New APIs for Monitor that help you understand how your
predictors perform over time.
* api-change:``personalize``: [``botocore``] Adding modelMetrics as part of DescribeRecommender API
response for Personalize.
- from version 1.23.5
* api-change:``comprehend``: [``botocore``] Comprehend releases 14 new entity types for
DetectPiiEntities and ContainsPiiEntities APIs.
* api-change:``logs``: [``botocore``] Doc-only update to publish the new valid values for log
retention
- Update BuildRequires and Requires from setup.py
- python-botocore
-
- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Remove version constraint on python-pytest in BuildRequires
- Revert changes to Requires that introduced new incompatible syntax
- Update to 1.29.89
* api-change:``ivschat``: This release adds a new exception returned when calling AWS IVS chat
UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return ConflictException when
invalid updates are made in sequence to Logging Configurations.
* api-change:``secretsmanager``: The type definitions of SecretString and SecretBinary now have a
minimum length of 1 in the model to match the exception thrown when you pass in empty values.
- from version 1.29.88
* api-change:``codeartifact``: This release introduces the generic package format, a mechanism for
storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to allow for
publishing generic packages.
* api-change:``connect``: This release adds a new API, GetMetricDataV2, which returns metric data
for Amazon Connect.
* api-change:``evidently``: Updated entity override documentation
* api-change:``networkmanager``: This update provides example usage for TransitGatewayRouteTableArn.
* api-change:``quicksight``: This release has two changes: add state persistence feature for
embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties for hidden
collapsed row dimensions in PivotTableOptions.
* api-change:``redshift-data``: Added support for Redshift Serverless workgroup-arn wherever the
WorkgroupName parameter is available.
* api-change:``sagemaker``: Amazon SageMaker Inference now allows SSM access to customer's model
container by setting the "EnableSSMAccess" parameter for a ProductionVariant in
CreateEndpointConfig API.
* api-change:``servicediscovery``: Updated all AWS Cloud Map APIs to provide consistent throttling
exception (RequestLimitExceeded)
* api-change:``sesv2``: This release introduces a new recommendation in Virtual Deliverability
Manager Advisor, which detects missing or misconfigured Brand Indicator for Message Identification
(BIMI) DNS records for customer sending identities.
- from version 1.29.87
* api-change:``athena``: A new field SubstatementType is added to GetQueryExecution API, so
customers have an error free way to detect the query type and interpret the result.
* api-change:``dynamodb``: Adds deletion protection support to DynamoDB tables. Tables with
deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be
enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting
is not replicated for Global Tables.
* api-change:``ec2``: Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest
generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based
instances.
* api-change:``lakeformation``: This release adds two new API support "GetDataCellsFiler" and
"UpdateDataCellsFilter", and also updates the corresponding documentation.
* api-change:``mediapackage-vod``: This release provides the date and time VOD resources were
created.
* api-change:``mediapackage``: This release provides the date and time live resources were created.
* api-change:``route53resolver``: Add dual-stack and IPv6 support for Route 53 Resolver
Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
* api-change:``sagemaker``: There needs to be a user identity to specify the SageMaker user who
perform each action regarding the entity. However, these is a not a unified concept of user
identity across SageMaker service that could be used today.
- from version 1.29.86
* api-change:``dms``: This release adds DMS Fleet Advisor Target Recommendation APIs and exposes
functionality for DMS Fleet Advisor. It adds functionality to start Target Recommendation
calculation.
* api-change:``location``: Documentation update for the release of 3 additional map styles for use
with Open Data Maps: Open Data Standard Dark, Open Data Visualization Light & Open Data
Visualization Dark.
- from version 1.29.85
* api-change:``account``: AWS Account alternate contact email addresses can now have a length of
254 characters and contain the character "|".
* api-change:``ivs``: Updated text description in DeleteChannel, Stream, and StreamSummary.
- from version 1.29.84
* api-change:``dynamodb``: Documentation updates for DynamoDB.
* api-change:``ec2``: This release adds support for a new boot mode for EC2 instances called 'UEFI
Preferred'.
* api-change:``macie2``: Documentation updates for Amazon Macie
* api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has improved handling for
different input and output color space combinations.
* api-change:``medialive``: AWS Elemental MediaLive adds support for Nielsen watermark timezones.
* api-change:``transcribe``: Amazon Transcribe now supports role access for these API operations:
CreateVocabulary, UpdateVocabulary, CreateVocabularyFilter, and UpdateVocabularyFilter.
- from version 1.29.83
* api-change:``iot``: A recurring maintenance window is an optional configuration used for rolling
out the job document to all devices in the target group observing a predetermined start time,
duration, and frequency that the maintenance window occurs.
* api-change:``migrationhubstrategy``: This release updates the File Import API to allow importing
servers already discovered by customers with reduced pre-requisites.
* api-change:``organizations``: This release introduces a new reason code,
ACCOUNT_CREATION_NOT_COMPLETE, to ConstraintViolationException in CreateOrganization API.
* api-change:``pi``: This release adds a new field PeriodAlignment to allow the customer specifying
the returned timestamp of time periods to be either the start or end time.
* api-change:``pipes``: This release fixes some input parameter range and patterns.
* api-change:``sagemaker``: Add a new field "EndpointMetrics" in SageMaker Inference Recommender
"ListInferenceRecommendationsJobSteps" API response.
- from version 1.29.82
* api-change:``codecatalyst``: Published Dev Environments StopDevEnvironmentSession API
* api-change:``pricing``: This release adds 2 new APIs - ListPriceLists which returns a list of
applicable price lists, and GetPriceListFileUrl which outputs a URL to retrieve your price lists
from the generated file from ListPriceLists
* api-change:``s3outposts``: S3 on Outposts introduces a new API ListOutpostsWithS3, with this API
you can list all your Outposts with S3 capacity.
- from version 1.29.81
* enhancement:Documentation: Splits service documentation into multiple sub-pages for better
organization and faster loading time.
* api-change:``comprehend``: Amazon Comprehend now supports flywheels to help you train and manage
new model versions for custom models.
* api-change:``ec2``: This release allows IMDS support to be set to v2-only on an existing AMI, so
that all future instances launched from that AMI will use IMDSv2 by default.
* api-change:``kms``: AWS KMS is deprecating the RSAES_PKCS1_V1_5 wrapping algorithm option in the
GetParametersForImport API that is used in the AWS KMS Import Key Material feature. AWS KMS will
end support for this wrapping algorithm by October 1, 2023.
* api-change:``lightsail``: This release adds Lightsail for Research feature support, such as GUI
session access, cost estimates, stop instance on idle, and disk auto mount.
* api-change:``managedblockchain``: This release adds support for tagging to the accessor resource
in Amazon Managed Blockchain
* api-change:``omics``: Minor model changes to accomodate batch imports feature
- from version 1.29.80
* api-change:``devops-guru``: This release adds the description field on ListAnomaliesForInsight
and DescribeAnomaly API responses for proactive anomalies.
* api-change:``drs``: New fields were added to reflect availability zone data in source server and
recovery instance description commands responses, as well as source server launch status.
* api-change:``internetmonitor``: CloudWatch Internet Monitor is a a new service within CloudWatch
that will help application developers and network engineers continuously monitor internet
performance metrics such as availability and performance between their AWS-hosted applications and
end-users of these applications
* api-change:``lambda``: This release adds the ability to create ESMs with Document DB change
streams as event source. For more information see
https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html.
* api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for HDR10 to
SDR tone mapping, and animated GIF video input sources.
* api-change:``timestream-write``: This release adds the ability to ingest batched historical data
or migrate data in bulk from S3 into Timestream using CSV files.
- from version 1.29.79
* api-change:``connect``: StartTaskContact API now supports linked task creation with a new
optional RelatedContactId parameter
* api-change:``connectcases``: This release adds the ability to delete domains through the
DeleteDomain API. For more information see
https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
* api-change:``redshift``: Documentation updates for Redshift API bringing it in line with IAM best
practices.
* api-change:``securityhub``: New Security Hub APIs and updates to existing APIs that help you
consolidate control findings and enable and disable controls across all supported standards
* api-change:``servicecatalog``: Documentation updates for Service Catalog
- Update to 1.29.78
* api-change:``appflow``: This release enables the customers to choose whether to use Private Link
for Metadata and Authorization call when using a private Salesforce connections
* api-change:``ecs``: This release supports deleting Amazon ECS task definitions that are in the
INACTIVE state.
* api-change:``grafana``: Doc-only update. Updated information on attached role policies for
customer provided roles
* api-change:``guardduty``: Updated API and data types descriptions for CreateFilter, UpdateFilter,
and TriggerDetails.
* api-change:``iotwireless``: In this release, we add additional capabilities for the FUOTA which
allows user to configure the fragment size, the sending interval and the redundancy ratio of the
FUOTA tasks
* api-change:``location``: This release adds support for using Maps APIs with an API Key in
addition to AWS Cognito. This includes support for adding, listing, updating and deleting API Keys.
* api-change:``macie2``: This release adds support for a new finding type,
Policy:IAMUser/S3BucketSharedWithCloudFront, and S3 bucket metadata that indicates if a bucket is
shared with an Amazon CloudFront OAI or OAC.
* api-change:``wafv2``: You can now associate an AWS WAF v2 web ACL with an AWS App Runner service.
- from version 1.29.77
* api-change:``chime-sdk-voice``: This release introduces support for Voice Connector media metrics
in the Amazon Chime SDK Voice namespace
* api-change:``cloudfront``: CloudFront now supports block lists in origin request policies so that
you can forward all headers, cookies, or query string from viewer requests to the origin *except*
for those specified in the block list.
* api-change:``datasync``: AWS DataSync has relaxed the minimum length constraint of AccessKey for
Object Storage locations to 1.
* api-change:``opensearch``: This release lets customers configure Off-peak window and software
update related properties for a new/existing domain. It enhances the capabilities of
StartServiceSoftwareUpdate API; adds 2 new APIs - ListScheduledActions & UpdateScheduledAction; and
allows Auto-tune to make use of Off-peak window.
* api-change:``rum``: CloudWatch RUM now supports CloudWatch Custom Metrics
* api-change:``ssm``: Document only update for Feb 2023
- from version 1.29.76
* api-change:``quicksight``: S3 data sources now accept a custom IAM role.
* api-change:``resiliencehub``: In this release we improved resilience hub application creation and
maintenance by introducing new resource and app component crud APIs, improving visibility and
maintenance of application input sources and added support for additional information attributes to
be provided by customers.
* api-change:``securityhub``: Documentation updates for AWS Security Hub
* api-change:``tnb``: This is the initial SDK release for AWS Telco Network Builder (TNB). AWS
Telco Network Builder is a network automation service that helps you deploy and manage telecom
networks.
- from version 1.29.75
* bugfix:SSO: Fixes aws/aws-cli`#7496 <https://github.com/aws/aws-cli/issues/7496>`__ by using the
correct profile name rather than the one set in the session.
* api-change:``auditmanager``: This release introduces a ServiceQuotaExceededException to the
UpdateAssessmentFrameworkShare API operation.
* api-change:``connect``: Reasons for failed diff has been approved by SDK Reviewer
- from version 1.29.74
* api-change:``apprunner``: This release supports removing MaxSize limit for
AutoScalingConfiguration.
* api-change:``glue``: Release of Delta Lake Data Lake Format for Glue Studio Service
- from version 1.29.73
* api-change:``emr``: Update emr client to latest version
* api-change:``grafana``: With this release Amazon Managed Grafana now supports inbound Network
Access Control that helps you to restrict user access to your Grafana workspaces
* api-change:``ivs``: Doc-only update. Updated text description in DeleteChannel, Stream, and
StreamSummary.
* api-change:``wafv2``: Added a notice for account takeover prevention (ATP). The interface
incorrectly lets you to configure ATP response inspection in regional web ACLs in Region US East
(N. Virginia), without returning an error. ATP response inspection is only available in web ACLs
that protect CloudFront distributions.
- from version 1.29.72
* api-change:``cloudtrail``: This release adds an InsufficientEncryptionPolicyException type to the
StartImport endpoint
* api-change:``efs``: Update efs client to latest version
* api-change:``frauddetector``: This release introduces Lists feature which allows customers to
reference a set of values in Fraud Detector's rules. With Lists, customers can dynamically manage
these attributes in real time. Lists can be created/deleted and its contents can be modified using
the Fraud Detector API.
* api-change:``glue``: Fix DirectJDBCSource not showing up in CLI code gen
* api-change:``privatenetworks``: This release introduces a new StartNetworkResourceUpdate API,
which enables return/replacement of hardware from a NetworkSite.
* api-change:``rds``: Database Activity Stream support for RDS for SQL Server.
* api-change:``wafv2``: For protected CloudFront distributions, you can now use the AWS WAF Fraud
Control account takeover prevention (ATP) managed rule group to block new login attempts from
clients that have recently submitted too many failed login attempts.
- Update to 1.29.71
* api-change:``appconfig``: AWS AppConfig now offers the option to set a version label on hosted
configuration versions. Version labels allow you to identify specific hosted configuration versions
based on an alternate versioning scheme that you define.
* api-change:``datasync``: With this launch, we are giving customers the ability to use older SMB
protocol versions, enabling them to use DataSync to copy data to and from their legacy storage
arrays.
* api-change:``ec2``: With this release customers can turn host maintenance on or off when
allocating or modifying a supported dedicated host. Host maintenance is turned on by default for
supported hosts.
- from version 1.29.70
* api-change:``account``: This release of the Account Management API enables customers to view and
manage whether AWS Opt-In Regions are enabled or disabled for their Account. For more information,
see https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
* api-change:``appconfigdata``: AWS AppConfig now offers the option to set a version label on
hosted configuration versions. If a labeled hosted configuration version is deployed, its version
label is available in the GetLatestConfiguration response.
* api-change:``snowball``: Adds support for EKS Anywhere on Snowball. AWS Snow Family customers can
now install EKS Anywhere service on Snowball Edge Compute Optimized devices.
- from version 1.29.69
* api-change:``autoscaling``: You can now either terminate/replace, ignore, or wait for EC2 Auto
Scaling instances on standby or protected from scale in. Also, you can also roll back changes from
a failed instance refresh.
* api-change:``connect``: This update provides the Wisdom session ARN for contacts enabled for
Wisdom in the chat channel.
* api-change:``ec2``: Adds support for waiters that automatically poll for an imported snapshot
until it reaches the completed state.
* api-change:``polly``: Amazon Polly adds two new neural Japanese voices - Kazuha, Tomoko
* api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for selecting algorithms in
CreateAutoMLJob API.
* api-change:``sns``: This release adds support for SNS X-Ray active tracing as well as other
updates.
- from version 1.29.68
* api-change:``chime-sdk-meetings``: Documentation updates for Chime Meetings SDK
* api-change:``emr-containers``: EMR on EKS allows configuring retry policies for job runs through
the StartJobRun API. Using retry policies, a job cause a driver pod to be restarted automatically
if it fails or is deleted. The job's status can be seen in the DescribeJobRun and ListJobRun APIs
and monitored using CloudWatch events.
* api-change:``evidently``: Updated entity overrides parameter to accept up to 2500 overrides or a
total of 40KB.
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version
* api-change:``lightsail``: Documentation updates for Lightsail
* api-change:``migration-hub-refactor-spaces``: This release adds support for creating environments
with a network fabric type of NONE
* api-change:``workdocs``: Doc only update for the WorkDocs APIs.
* api-change:``workspaces``: Removed Windows Server 2016 BYOL and made changes based on IAM
campaign.
- from version 1.29.67
* api-change:``backup``: This release added one attribute (resource name) in the output model of
our 9 existing APIs in AWS backup so that customers will see the resource name at the output. No
input required from Customers.
* api-change:``cloudfront``: CloudFront Origin Access Control extends support to AWS Elemental
MediaStore origins.
* api-change:``glue``: DirectJDBCSource + Glue 4.0 streaming options
* api-change:``lakeformation``: This release removes the LFTagpolicyResource expression limits.
- Update to 1.29.66
* api-change:``transfer``: Updated the documentation for the ImportCertificate API call, and added
examples.
- from version 1.29.65
* api-change:``compute-optimizer``: AWS Compute optimizer can now infer if Kafka is running on an
instance.
* api-change:``customer-profiles``: This release deprecates the PartyType and Gender enum data
types from the Profile model and replaces them with new PartyTypeString and GenderString
attributes, which accept any string of length up to 255.
* api-change:``frauddetector``: My AWS Service (Amazon Fraud Detector) - This release introduces
Cold Start Model Training which optimizes training for small datasets and adds intelligent methods
for treating unlabeled data. You can now train Online Fraud Insights or Transaction Fraud Insights
models with minimal historical-data.
* api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added improved scene change
detection capabilities and a bandwidth reduction filter, along with video quality enhancements, to
the AVC encoder.
* api-change:``outposts``: Adds OrderType to Order structure. Adds PreviousOrderId and
PreviousLineItemId to LineItem structure. Adds new line item status REPLACED. Increases maximum
length of pagination token.
- from version 1.29.64
* enhancement:AWSCRT: Upgrade awscrt version to 0.16.9
* api-change:``proton``: Add new GetResourcesSummary API
* api-change:``redshift``: Corrects descriptions of the parameters for the API operations
RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
- from version 1.29.63
* api-change:``appconfig``: AWS AppConfig introduces KMS customer-managed key (CMK) encryption of
configuration data, along with AWS Secrets Manager as a new configuration data source. S3 objects
using SSE-KMS encryption and SSM Parameter Store SecureStrings are also now supported.
* api-change:``connect``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``ec2``: Documentation updates for EC2.
* api-change:``elbv2``: Update elbv2 client to latest version
* api-change:``keyspaces``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``quicksight``: QuickSight support for Radar Chart and Dashboard Publish Options
* api-change:``redshift``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``sso-admin``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.62
* bugfix:``s3``: boto3 no longer overwrites user supplied `Content-Encoding` with `aws-chunked`
when user also supplies `ChecksumAlgorithm`.
* api-change:``devops-guru``: This release adds filter support ListAnomalyForInsight API.
* api-change:``forecast``: This release will enable customer select INCREMENTAL as ImportModel in
Forecast's CreateDatasetImportJob API. Verified latest SDK containing required attribute, following
https://w.amazon.com/bin/view/AWS-Seer/Launch/Trebuchet/
* api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
* api-change:``mediatailor``: The AWS Elemental MediaTailor SDK for Channel Assembly has added
support for program updates, and the ability to clip the end of VOD sources in programs.
* api-change:``sns``: Additional attributes added for set-topic-attributes.
- from version 1.29.61
* api-change:``accessanalyzer``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``appsync``: This release introduces the feature to support EventBridge as AppSync
data source.
* api-change:``cloudtrail-data``: Add CloudTrail Data Service to enable users to ingest activity
events from non-AWS sources into CloudTrail Lake.
* api-change:``cloudtrail``: Add new "Channel" APIs to enable users to manage channels used for
CloudTrail Lake integrations, and "Resource Policy" APIs to enable users to manage the
resource-based permissions policy attached to a channel.
* api-change:``codeartifact``: This release introduces a new DeletePackage API, which enables
deletion of a package and all of its versions from a repository.
* api-change:``connectparticipant``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``ec2``: This launch allows customers to associate up to 8 IP addresses to their NAT
Gateways to increase the limit on concurrent connections to a single destination by eight times
from 55K to 440K.
* api-change:``groundstation``: DigIF Expansion changes to the Customer APIs.
* api-change:``iot``: Added support for IoT Rules Engine Cloudwatch Logs action batch mode.
* api-change:``kinesis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``opensearch``: Amazon OpenSearch Service adds the option for a VPC endpoint
connection between two domains when the local domain uses OpenSearch version 1.3 or 2.3. You can
now use remote reindex to copy indices from one VPC domain to another without a reverse proxy.
* api-change:``outposts``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``polly``: Amazon Polly adds two new neural American English voices - Ruth, Stephen
* api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports more completion
criteria for Hyperparameter Optimization.
* api-change:``securityhub``: New fields have been added to the AWS Security Finding Format.
Compliance.SecurityControlId is a unique identifier for a security control across standards.
Compliance.AssociatedStandards contains all enabled standards in which a security control is
enabled.
* api-change:``support``: This fixes incorrect endpoint construction when a customer is explicitly
setting a region.
- Update to 1.29.60
* api-change:``clouddirectory``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``cloudformation``: This feature provides a method of obtaining which regions a
stackset has stack instances deployed in.
* api-change:``discovery``: Update ImportName validation to 255 from the current length of 100
* api-change:``dlm``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``ec2``: We add Prefix Lists as a new route destination option for LocalGatewayRoutes.
This will allow customers to create routes to Prefix Lists. Prefix List routes will allow customers
to group individual CIDR routes with the same target into a single route.
* api-change:``imagebuilder``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``kafka``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``mediaconvert``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``swf``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.59
* api-change:``application-autoscaling``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``appstream``: Fixing the issue where Appstream waiters hang for fleet_started and
fleet_stopped.
* api-change:``elasticbeanstalk``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``fis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``glacier``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``greengrass``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
* api-change:``greengrassv2``: Enabled FIPS endpoints for GovCloud (US) in SDK.
* api-change:``mediatailor``: This release introduces the As Run logging type, along with API and
documentation updates.
* api-change:``outposts``: Adding support for payment term in GetOrder, CreateOrder responses.
* api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version
* api-change:``sagemaker``: This release supports running SageMaker Training jobs with container
images that are in a private Docker registry.
* api-change:``serverlessrepo``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- Update to 1.29.58
* api-change:``events``: Update events client to latest version
* api-change:``iotfleetwise``: Add model validation to BatchCreateVehicle and BatchUpdateVehicle
operations that invalidate requests with an empty vehicles list.
* api-change:``s3``: Allow FIPS to be used with path-style URLs.
- from version 1.29.57
* api-change:``cloudformation``: Enabled FIPS aws-us-gov endpoints in SDK.
* api-change:``ec2``: This release adds new functionality that allows customers to provision IPv6
CIDR blocks through Amazon VPC IP Address Manager (IPAM) as well as allowing customers to utilize
IPAM Resource Discovery APIs.
* api-change:``m2``: Add returnCode, batchJobIdentifier in GetBatchJobExecution response, for user
to view the batch job execution result & unique identifier from engine. Also removed unused headers
from REST APIs
* api-change:``polly``: Add 5 new neural voices - Sergio (es-ES), Andres (es-MX), Remi (fr-FR),
Adriano (it-IT) and Thiago (pt-BR).
* api-change:``redshift-serverless``: Added query monitoring rules as possible parameters for
create and update workgroup operations.
* api-change:``s3control``: Add additional endpoint tests for S3 Control. Fix missing endpoint
parameters for PutBucketVersioning and GetBucketVersioning. Prior to this fix, those operations may
have resulted in an invalid endpoint being resolved.
* api-change:``sagemaker``: SageMaker Inference Recommender now decouples from Model Registry and
could accept Model Name to invoke inference recommendations job; Inference Recommender now provides
CPU/Memory Utilization metrics data in recommendation output.
* api-change:``sts``: Doc only change to update wording in a key topic
- from version 1.29.56
* api-change:``databrew``: Enabled FIPS us-gov-west-1 endpoints in SDK.
* api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Melbourne) Region
(ap-southeast-4) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
region.
* api-change:``ssm-sap``: This release provides updates to documentation and support for listing
operations performed by AWS Systems Manager for SAP.
- from version 1.29.55
* api-change:``lambda``: Release Lambda RuntimeManagementConfig, enabling customers to better
manage runtime updates to their Lambda functions. This release adds two new APIs,
GetRuntimeManagementConfig and PutRuntimeManagementConfig, as well as support on existing
Create/Get/Update function APIs.
* api-change:``sagemaker``: Amazon SageMaker Inference now supports P4de instance types.
- from version 1.29.54
* api-change:``ec2``: C6in, M6in, M6idn, R6in and R6idn instances are powered by 3rd Generation
Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz.
* api-change:``ivs``: API and Doc update. Update to arns field in BatchGetStreamKey. Also updates
to operations and structures.
* api-change:``quicksight``: This release adds support for data bars in QuickSight table and
increases pivot table field well limit.
- from version 1.29.53
* api-change:``appflow``: Adding support for Salesforce Pardot connector in Amazon AppFlow.
* api-change:``codeartifact``: Documentation updates for CodeArtifact
* api-change:``connect``: Amazon Connect Chat introduces Persistent Chat, allowing customers to
resume previous conversations with context and transcripts carried over from previous chats,
eliminating the need to repeat themselves and allowing agents to provide personalized service with
access to entire conversation history.
* api-change:``connectparticipant``: This release updates Amazon Connect Participant's
GetTranscript api to provide transcripts of past chats on a persistent chat session.
* api-change:``ec2``: Adds SSM Parameter Resource Aliasing support to EC2 Launch Templates. Launch
Templates can now store parameter aliases in place of AMI Resource IDs. CreateLaunchTemplateVersion
and DescribeLaunchTemplateVersions now support a convenience flag, ResolveAlias, to return the
resolved parameter value.
* api-change:``glue``: Release Glue Studio Hudi Data Lake Format for SDK/CLI
* api-change:``groundstation``: Add configurable prepass and postpass times for
DataflowEndpointGroup. Add Waiter to allow customers to wait for a contact that was reserved
through ReserveContact
* api-change:``logs``: Bug fix - Removed the regex pattern validation from CoralModel to avoid
potential security issue.
* api-change:``medialive``: AWS Elemental MediaLive adds support for SCTE 35 preRollMilliSeconds.
* api-change:``opensearch``: This release adds the enhanced dry run option, that checks for
validation errors that might occur when deploying configuration changes and provides a summary of
these errors, if any. The feature will also indicate whether a blue/green deployment will be
required to apply a change.
* api-change:``panorama``: Added AllowMajorVersionUpdate option to OTAJobConfig to make appliance
software major version updates opt-in.
* api-change:``sagemaker``: HyperParameterTuningJobs now allow passing environment variables into
the corresponding TrainingJobs
- Update to 1.29.52
* api-change:``cloudwatch``: Update cloudwatch client to latest version
* api-change:``efs``: Update efs client to latest version
* api-change:``ivschat``: Updates the range for a Chat Room's maximumMessageRatePerSecond field.
* api-change:``wafv2``: Improved the visibility of the guidance for updating AWS WAF resources,
such as web ACLs and rule groups.
- from version 1.29.51
* api-change:``billingconductor``: This release adds support for SKU Scope for pricing plans.
* api-change:``cloud9``: Added minimum value to AutomaticStopTimeMinutes parameter.
* api-change:``imagebuilder``: Add support for AWS Marketplace product IDs as input during
CreateImageRecipe for the parent-image parameter. Add support for listing third-party components.
* api-change:``network-firewall``: Network Firewall now allows creation of dual stack endpoints,
enabling inspection of IPv6 traffic.
- update to 1.29.50:
* api-change:``connect``: This release updates the responses of
UpdateContactFlowContent, UpdateContactFlowMetadata, UpdateContactFlowName
and DeleteContactFlow API with empty responses.
* api-change:``ec2``: Documentation updates for EC2.
* api-change:``outposts``: This release adds POWER_30_KVA as an option for
PowerDrawKva. PowerDrawKva is part of the RackPhysicalProperties structure
in the CreateSite request.
* api-change:``resource-groups``: AWS Resource Groups customers can now turn
on Group Lifecycle Events in their AWS account. When you turn this on,
Resource Groups monitors your groups for changes to group state or
membership. Those changes are sent to Amazon EventBridge as events that you
can respond to using rules you create.
* api-change:``cleanrooms``: Initial release of AWS Clean Rooms
* api-change:``lambda``: Add support for MaximumConcurrency parameter for SQS
event source. Customers can now limit the maximum concurrent invocations
for their SQS Event Source Mapping.
* api-change:``logs``: Bug fix: logGroupName is now not a required field in
GetLogEvents, FilterLogEvents, GetLogGroupFields, and DescribeLogStreams
APIs as logGroupIdentifier can be provided instead
* api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added
support for compact DASH manifest generation, audio normalization using
TruePeak measurements, and the ability to clip the sample range in the
color corrector.
* api-change:``secretsmanager``: Update documentation for new ListSecrets and DescribeSecret parameters
* api-change:``kendra``: This release adds support to new document types -
RTF, XML, XSLT, MS_EXCEL, CSV, JSON, MD
* api-change:``location``: This release adds support for two new route travel
models, Bicycle and Motorcycle which can be used with Grab data source.
* api-change:``rds``: This release adds support for configuring allocated
storage on the CreateDBInstanceReadReplica,
RestoreDBInstanceFromDBSnapshot, and RestoreDBInstanceToPointInTime APIs.
* api-change:``ecr-public``: This release for Amazon ECR Public makes several
change to bring the SDK into sync with the API.
* api-change:``kendra-ranking``: Introducing Amazon Kendra Intelligent
Ranking, a new set of Kendra APIs that leverages Kendra semantic ranking
capabilities to improve the quality of search results from other search
services (i.e. OpenSearch, ElasticSearch, Solr).
* api-change:``network-firewall``: Network Firewall now supports the Suricata
rule action reject, in addition to the actions pass, drop, and alert.
* api-change:``ram``: Enabled FIPS aws-us-gov endpoints in SDK.
* api-change:``workspaces-web``: This release adds support for a new portal
authentication type: AWS IAM Identity Center (successor to AWS Single
Sign-On).
- correct requires
- update to 1.29.45:
* api-change:``acm-pca``: Added revocation parameter validation: bucket names
must match S3 bucket naming rules and CNAMEs conform to RFC2396 restrictions
on the use of special characters in URIs.
* api-change:``auditmanager``: This release introduces a new data retention
option in your Audit Manager settings. You can now use the
DeregistrationPolicy parameter to specify if you want to delete your data
when you deregister Audit Manager.
* api-change:``amplifybackend``: Updated GetBackendAPIModels response to
include ModelIntrospectionSchema json string
* api-change:``apprunner``: This release adds support of securely referencing
secrets and configuration data that are stored in Secrets Manager and SSM
Parameter Store by adding them as environment secrets in your App Runner
service.
* api-change:``connect``: Documentation update for a new Initiation Method
value in DescribeContact API
* api-change:``emr-serverless``: Adds support for customized images. You can
now provide runtime images when creating or updating EMR Serverless
Applications.
* api-change:``lightsail``: Documentation updates for Amazon Lightsail.
* api-change:``mwaa``: MWAA supports Apache Airflow version 2.4.3.
* api-change:``rds``: This release adds support for specifying which
certificate authority (CA) to use for a DB instance's server certificate
during DB instance creation, as well as other CA enhancements.
* api-change:``application-autoscaling``: Customers can now use the existing
DescribeScalingActivities API to also see the detailed and machine-readable
reasons for Application Auto Scaling not scaling their resources and, if
needed, take the necessary corrective actions.
* api-change:``logs``: Update to remove sequenceToken as a required field in
PutLogEvents calls.
* api-change:``ssm``: Adding support for QuickSetup Document Type in Systems
Manager
* api-change:``securitylake``: Allow CreateSubscriber API to take string input
that allows setting more descriptive SubscriberDescription field. Make
souceTypes field required in model level for UpdateSubscriberRequest as it is
required for every API call on the backend. Allow ListSubscribers take any
String as nextToken param.
- Update to 1.29.41
* api-change:``cloudfront``: Extend response headers policy to support removing headers from viewer
responses
* api-change:``iotfleetwise``: Update documentation - correct the epoch constant value of default
value for expiryTime field in CreateCampaign request.
- from version 1.29.40
* api-change:``apigateway``: Documentation updates for Amazon API Gateway
* api-change:``emr``: Update emr client to latest version
* api-change:``secretsmanager``: Added owning service filter, include planned deletion flag, and
next rotation date response parameter in ListSecrets.
* api-change:``wisdom``: This release extends Wisdom CreateContent and StartContentUpload APIs to
support PDF and MicrosoftWord docx document uploading.
- from version 1.29.39
* api-change:``elasticache``: This release allows you to modify the encryption in transit setting,
for existing Redis clusters. You can now change the TLS configuration of your Redis clusters
without the need to re-build or re-provision the clusters or impact application availability.
* api-change:``network-firewall``: AWS Network Firewall now provides status messages for firewalls
to help you troubleshoot when your endpoint fails.
* api-change:``rds``: This release adds support for Custom Engine Version (CEV) on RDS Custom SQL
Server.
* api-change:``route53-recovery-control-config``: Added support for Python paginators in the
route53-recovery-control-config List* APIs.
- from version 1.29.38
* api-change:``memorydb``: This release adds support for MemoryDB Reserved nodes which provides a
significant discount compared to on-demand node pricing. Reserved nodes are not physical nodes, but
rather a billing discount applied to the use of on-demand nodes in your account.
* api-change:``transfer``: Add additional operations to throw ThrottlingExceptions
- from version 1.29.37
* api-change:``connect``: Support for Routing Profile filter, SortCriteria, and grouping by Routing
Profiles for GetCurrentMetricData API. Support for RoutingProfiles, UserHierarchyGroups, and Agents
as filters, NextStatus and AgentStatusName for GetCurrentUserData. Adds ApproximateTotalCount to
both APIs.
* api-change:``connectparticipant``: Amazon Connect Chat introduces the Message Receipts feature.
This feature allows agents and customers to receive message delivered and read receipts after they
send a chat message.
* api-change:``detective``: This release adds a missed AccessDeniedException type to several
endpoints.
* api-change:``fsx``: Fix a bug where a recent release might break certain existing SDKs.
* api-change:``inspector2``: Amazon Inspector adds support for scanning NodeJS 18.x and Go 1.x AWS
Lambda function runtimes.
- from version 1.29.36
* api-change:``compute-optimizer``: This release enables AWS Compute Optimizer to analyze and
generate optimization recommendations for ecs services running on Fargate.
* api-change:``connect``: Amazon Connect Chat introduces the Idle Participant/Autodisconnect
feature, which allows users to set timeouts relating to the activity of chat participants, using
the new UpdateParticipantRoleConfig API.
* api-change:``iotdeviceadvisor``: This release adds the following new features: 1) Documentation
updates for IoT Device Advisor APIs. 2) Updated required request parameters for IoT Device Advisor
APIs. 3) Added new service feature: ability to provide the test endpoint when customer executing
the StartSuiteRun API.
* api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
as well as media ingestion to the cloud.
* api-change:``rds``: Add support for managing master user password in AWS Secrets Manager for the
DBInstance and DBCluster.
* api-change:``secretsmanager``: Documentation updates for Secrets Manager
- from version 1.29.35
* api-change:``connect``: Amazon Connect Chat now allows for JSON (application/json) message types
to be sent as part of the initial message in the StartChatContact API.
* api-change:``connectparticipant``: Amazon Connect Chat now allows for JSON (application/json)
message types to be sent in the SendMessage API.
* api-change:``license-manager-linux-subscriptions``: AWS License Manager now offers cross-region,
cross-account tracking of commercial Linux subscriptions on AWS. This includes subscriptions
purchased as part of EC2 subscription-included AMIs, on the AWS Marketplace, or brought to AWS via
Red Hat Cloud Access Program.
* api-change:``macie2``: This release adds support for analyzing Amazon S3 objects that use the S3
Glacier Instant Retrieval (Glacier_IR) storage class.
* api-change:``sagemaker``: This release enables adding RStudio Workbench support to an existing
Amazon SageMaker Studio domain. It allows setting your RStudio on SageMaker environment
configuration parameters and also updating the RStudioConnectUrl and RStudioPackageManagerUrl
parameters for existing domains
* api-change:``scheduler``: Updated the ListSchedules and ListScheduleGroups APIs to allow the
NamePrefix field to start with a number. Updated the validation for executionRole field to support
any role name.
* api-change:``ssm``: Doc-only updates for December 2022.
* api-change:``support``: Documentation updates for the AWS Support API
* api-change:``transfer``: This release adds support for Decrypt as a workflow step type.
- from version 1.29.34
* api-change:``batch``: Adds isCancelled and isTerminated to DescribeJobs response.
* api-change:``ec2``: Adds support for pagination in the EC2 DescribeImages API.
* api-change:``lookoutequipment``: This release adds support for listing inference schedulers by
status.
* api-change:``medialive``: This release adds support for two new features to AWS Elemental
MediaLive. First, you can now burn-in timecodes to your MediaLive outputs. Second, we now now
support the ability to decode Dolby E audio when it comes in on an input.
* api-change:``nimble``: Amazon Nimble Studio now supports configuring session storage volumes and
persistence, as well as backup and restore sessions through launch profiles.
* api-change:``resource-explorer-2``: Documentation updates for AWS Resource Explorer.
* api-change:``route53domains``: Use Route 53 domain APIs to change owner, create/delete DS record,
modify IPS tag, resend authorization. New: AssociateDelegationSignerToDomain,
DisassociateDelegationSignerFromDomain, PushDomain, ResendOperationAuthorization. Updated:
UpdateDomainContact, ListOperations, CheckDomainTransferability.
* api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for new objective metrics in
CreateAutoMLJob API.
* api-change:``transcribe``: Enable our batch transcription jobs for Swedish and Vietnamese.
- from version 1.29.33
* api-change:``athena``: Add missed InvalidRequestException in
GetCalculationExecutionCode,StopCalculationExecution APIs. Correct required parameters (Payload and
Type) in UpdateNotebook API. Change Notebook size from 15 Mb to 10 Mb.
* api-change:``ecs``: This release adds support for alarm-based rollbacks in ECS, a new feature
that allows customers to add automated safeguards for Amazon ECS service rolling updates.
* api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
as well as media ingestion to the cloud.
* api-change:``kinesisvideo``: Amazon Kinesis Video Streams offers capabilities to stream video and
audio in real-time via WebRTC to the cloud for storage, playback, and analytical processing.
Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming, as well as
media ingestion to the cloud.
* api-change:``rds``: Add support for --enable-customer-owned-ip to RDS
create-db-instance-read-replica API for RDS on Outposts.
* api-change:``sagemaker``: AWS Sagemaker - Sagemaker Images now supports Aliases as secondary
identifiers for ImageVersions. SageMaker Images now supports additional metadata for ImageVersions
for better images management.
- from version 1.29.32
* api-change:``appflow``: This release updates the ListConnectorEntities API action so that it
returns paginated responses that customers can retrieve with next tokens.
* api-change:``cloudfront``: Updated documentation for CloudFront
* api-change:``datasync``: AWS DataSync now supports the use of tags with task executions. With
this new feature, you can apply tags each time you execute a task, giving you greater control and
management over your task executions.
* api-change:``efs``: Update efs client to latest version
* api-change:``guardduty``: This release provides the valid characters for the Description and Name
field.
* api-change:``iotfleetwise``: Updated error handling for empty resource names in
"UpdateSignalCatalog" and "GetModelManifest" operations.
* api-change:``sagemaker``: AWS sagemaker - Features: This release adds support for random seed,
it's an integer value used to initialize a pseudo-random number generator. Setting a random seed
will allow the hyperparameter tuning search strategies to produce more consistent configurations
for the same tuning job.
- from version 1.29.31
* api-change:``backup-gateway``: This release adds support for VMware vSphere tags, enabling
customer to protect VMware virtual machines using tag-based policies for AWS tags mapped from
vSphere tags. This release also adds support for customer-accessible gateway-hypervisor interaction
log and upload bandwidth rate limit schedule.
* api-change:``connect``: Added support for "English - New Zealand" and "English - South African"
to be used with Amazon Connect Custom Vocabulary APIs.
* api-change:``ecs``: This release adds support for container port ranges in ECS, a new capability
that allows customers to provide container port ranges to simplify use cases where multiple ports
are in use in a container. This release updates TaskDefinition mutation APIs and the Task
description APIs.
* api-change:``eks``: Add support for Windows managed nodes groups.
* api-change:``glue``: This release adds support for AWS Glue Crawler with native DeltaLake tables,
allowing Crawlers to classify Delta Lake format tables and catalog them for query engines to query
against.
* api-change:``kinesis``: Added StreamARN parameter for Kinesis Data Streams APIs. Added a new
opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when accessing
Kinesis Data Streams.
* api-change:``location``: This release adds support for a new style, "VectorOpenDataStandardLight"
which can be used with the new data source, "Open Data Maps (Preview)".
* api-change:``m2``: Adds an optional create-only `KmsKeyId` property to Environment and
Application resources.
* api-change:``sagemaker``: SageMaker Inference Recommender now allows customers to load tests
their models on various instance types using private VPC.
* api-change:``securityhub``: Added new resource details objects to ASFF, including resources for
AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and AwsWafv2RuleGroup.
* api-change:``translate``: Raised the input byte size limit of the Text field in the TranslateText
API to 10000 bytes.
- from version 1.29.30
* api-change:``ce``: This release supports percentage-based thresholds on Cost Anomaly Detection
alert subscriptions.
* api-change:``cloudwatch``: Update cloudwatch client to latest version
* api-change:``networkmanager``: Appliance Mode support for AWS Cloud WAN.
* api-change:``redshift-data``: This release adds a new --client-token field to ExecuteStatement
and BatchExecuteStatement operations. Customers can now run queries with the additional client
token parameter to ensures idempotency.
* api-change:``sagemaker-metrics``: Update SageMaker Metrics documentation.
- from version 1.29.29
* api-change:``cloudtrail``: Merging mainline branch for service model into mainline release
branch. There are no new APIs.
* api-change:``rds``: This deployment adds ClientPasswordAuthType field to the Auth structure of
the DBProxy.
- from version 1.29.28
* bugfix:Endpoint provider: Updates ARN parsing ``resourceId`` delimiters
* api-change:``customer-profiles``: This release allows custom strings in PartyType and Gender
through 2 new attributes in the CreateProfile and UpdateProfile APIs: PartyTypeString and
GenderString.
* api-change:``ec2``: This release updates DescribeFpgaImages to show supported instance types of
AFIs in its response.
* api-change:``kinesisvideo``: This release adds support for public preview of Kinesis Video Stream
at Edge enabling customers to provide configuration for the Kinesis Video Stream EdgeAgent running
on an on-premise IoT device. Customers can now locally record from cameras and stream videos to the
cloud on configured schedule.
* api-change:``lookoutvision``: This documentation update adds kms:GenerateDataKey as a required
permission to StartModelPackagingJob.
* api-change:``migration-hub-refactor-spaces``: This release adds support for Lambda alias service
endpoints. Lambda alias ARNs can now be passed into CreateService.
* api-change:``rds``: Update the RDS API model to support copying option groups during the
CopyDBSnapshot operation
* api-change:``rekognition``: Adds support for "aliases" and "categories", inclusion and exclusion
filters for labels and label categories, and aggregating labels by video segment timestamps for
Stored Video Label Detection APIs.
* api-change:``sagemaker-metrics``: This release introduces support SageMaker Metrics APIs.
* api-change:``wafv2``: Documents the naming requirement for logging destinations that you use with
web ACLs.
- from version 1.29.27
* api-change:``iotfleetwise``: Deprecated assignedValue property for actuators and attributes.
Added a message to invalid nodes and invalid decoder manifest exceptions.
* api-change:``logs``: Doc-only update for CloudWatch Logs, for Tagging Permissions clarifications
* api-change:``medialive``: Link devices now support buffer size (latency) configuration. A higher
latency value means a longer delay in transmitting from the device to MediaLive, but improved
resiliency. A lower latency value means a shorter delay, but less resiliency.
* api-change:``mediapackage-vod``: This release provides the approximate number of assets in a
packaging group.
- Update to 1.29.26
* enhancement:Endpoint Provider Standard Library: Correct spelling of 'library' in
``StandardLibrary`` class
* api-change:``autoscaling``: Adds support for metric math for target tracking scaling policies,
saving you the cost and effort of publishing a custom metric to CloudWatch. Also adds support for
VPC Lattice by adding the Attach/Detach/DescribeTrafficSources APIs and a new health check type to
the CreateAutoScalingGroup API.
* api-change:``iottwinmaker``: This release adds the following new features: 1) New APIs for
managing a continuous sync of assets and asset models from AWS IoT SiteWise. 2) Support user
friendly names for component types (ComponentTypeName) and properties (DisplayName).
* api-change:``migrationhubstrategy``: This release adds known application filtering, server
selection for assessments, support for potential recommendations, and indications for configuration
and assessment status. For more information, see the AWS Migration Hub documentation at
https://docs.aws.amazon.com/migrationhub/index.html
- from version 1.29.25
* api-change:``ce``: This release adds the LinkedAccountName field to the GetAnomalies API response
under RootCause
* api-change:``cloudfront``: Introducing UpdateDistributionWithStagingConfig that can be used to
promote the staging configuration to the production.
* api-change:``eks``: Adds support for EKS add-ons configurationValues fields and
DescribeAddonConfiguration function
* api-change:``kms``: Updated examples and exceptions for External Key Store (XKS).
- from version 1.29.24
* api-change:``billingconductor``: This release adds the Tiering Pricing Rule feature.
* api-change:``connect``: This release provides APIs that enable you to programmatically manage
rules for Contact Lens conversational analytics and third party applications. For more information,
see https://docs.aws.amazon.com/connect/latest/APIReference/rules-api.html
* api-change:``dynamodb``: Endpoint Ruleset update: Use http instead of https for the "local"
region.
* api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
* api-change:``rds``: This release adds the BlueGreenDeploymentNotFoundFault to the
AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource operations.
* api-change:``sagemaker-featurestore-runtime``: For online + offline Feature Groups, added ability
to target PutRecord and DeleteRecord actions to only online store, or only offline store. If target
store parameter is not specified, actions will apply to both stores.
- from version 1.29.23
* api-change:``ce``: This release introduces two new APIs that offer a 1-click experience to
refresh Savings Plans recommendations. The two APIs are
StartSavingsPlansPurchaseRecommendationGeneration and
ListSavingsPlansPurchaseRecommendationGeneration.
* api-change:``ec2``: Documentation updates for EC2.
* api-change:``ivschat``: Adds PendingVerification error type to messaging APIs to block the
resource usage for accounts identified as being fraudulent.
* api-change:``rds``: This release adds the InvalidDBInstanceStateFault to the
RestoreDBClusterFromSnapshot operation.
* api-change:``transcribe``: Amazon Transcribe now supports creating custom language models in the
following languages: Japanese (ja-JP) and German (de-DE).
- from version 1.29.22
* api-change:``appsync``: Fixes the URI for the evaluatecode endpoint to include the /v1 prefix
(ie. "/v1/dataplane-evaluatecode").
* api-change:``ecs``: Documentation updates for Amazon ECS
* api-change:``fms``: AWS Firewall Manager now supports Fortigate Cloud Native Firewall as a
Service as a third-party policy type.
* api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for
configurable ID3 eMSG box attributes and the ability to signal them with InbandEventStream tags in
DASH and CMAF outputs.
* api-change:``medialive``: Updates to Event Signaling and Management (ESAM) API and documentation.
* api-change:``polly``: Add language code for Finnish (fi-FI)
* api-change:``proton``: CreateEnvironmentAccountConnection RoleArn input is now optional
* api-change:``redshift-serverless``: Add Table Level Restore operations for Amazon Redshift
Serverless. Add multi-port support for Amazon Redshift Serverless endpoints. Add Tagging support to
Snapshots and Recovery Points in Amazon Redshift Serverless.
* api-change:``sns``: This release adds the message payload-filtering feature to the SNS Subscribe,
SetSubscriptionAttributes, and GetSubscriptionAttributes API actions
- Update to 1.29.21
* api-change:``codecatalyst``: This release adds operations that support customers using the AWS
Toolkits and Amazon CodeCatalyst, a unified software development service that helps developers
develop, deploy, and maintain applications in the cloud. For more information, see the
documentation.
* api-change:``comprehend``: Comprehend now supports semi-structured documents (such as PDF files
or image files) as inputs for custom analysis using the synchronous APIs (ClassifyDocument and
DetectEntities).
* api-change:``gamelift``: GameLift introduces a new feature, GameLift Anywhere. GameLift Anywhere
allows you to integrate your own compute resources with GameLift. You can also use GameLift
Anywhere to iteratively test your game servers without uploading the build to GameLift for every
iteration.
* api-change:``pipes``: AWS introduces new Amazon EventBridge Pipes which allow you to connect
sources (SQS, Kinesis, DDB, Kafka, MQ) to Targets (14+ EventBridge Targets) without any code, with
filtering, batching, input transformation, and an optional Enrichment stage (Lambda, StepFunctions,
ApiGateway, ApiDestinations)
* api-change:``stepfunctions``: Update stepfunctions client to latest version
- from version 1.29.20
* api-change:``accessanalyzer``: This release adds support for S3 cross account access points. IAM
Access Analyzer will now produce public or cross account findings when it detects bucket delegation
to external account access points.
* api-change:``athena``: This release includes support for using Apache Spark in Amazon Athena.
* api-change:``dataexchange``: This release enables data providers to license direct access to data
in their Amazon S3 buckets or AWS Lake Formation data lakes through AWS Data Exchange. Subscribers
get read-only access to the data and can use it in downstream AWS services, like Amazon Athena,
without creating or managing copies.
* api-change:``docdb-elastic``: Launched Amazon DocumentDB Elastic Clusters. You can now use the
SDK to create, list, update and delete Amazon DocumentDB Elastic Cluster resources
* api-change:``glue``: This release adds support for AWS Glue Data Quality, which helps you
evaluate and monitor the quality of your data and includes the API for creating, deleting, or
updating data quality rulesets, runs and evaluations.
* api-change:``s3control``: Amazon S3 now supports cross-account access points. S3 bucket owners
can now allow trusted AWS accounts to create access points associated with their bucket.
* api-change:``sagemaker-geospatial``: This release provides Amazon SageMaker geospatial APIs to
build, train, deploy and visualize geospatial models.
* api-change:``sagemaker``: Added Models as part of the Search API. Added Model shadow deployments
in realtime inference, and shadow testing in managed inference. Added support for shared spaces,
geospatial APIs, Model Cards, AutoMLJobStep in pipelines, Git repositories on user profiles and
domains, Model sharing in Jumpstart.
- from version 1.29.19
* api-change:``ec2``: This release adds support for AWS Verified Access and the Hpc6id Amazon EC2
compute optimized instance type, which features 3rd generation Intel Xeon Scalable processors.
* api-change:``firehose``: Allow support for the Serverless offering for Amazon OpenSearch Service
as a Kinesis Data Firehose delivery destination.
* api-change:``kms``: AWS KMS introduces the External Key Store (XKS), a new feature for customers
who want to protect their data with encryption keys stored in an external key management system
under their control.
* api-change:``omics``: Amazon Omics is a new, purpose-built service that can be used by healthcare
and life science organizations to store, query, and analyze omics data. The insights from that data
can be used to accelerate scientific discoveries and improve healthcare.
* api-change:``opensearchserverless``: Publish SDK for Amazon OpenSearch Serverless
* api-change:``securitylake``: Amazon Security Lake automatically centralizes security data from
cloud, on-premises, and custom sources into a purpose-built data lake stored in your account.
Security Lake makes it easier to analyze security data, so you can improve the protection of your
workloads, applications, and data
* api-change:``simspaceweaver``: AWS SimSpace Weaver is a new service that helps customers build
spatial simulations at new levels of scale - resulting in virtual worlds with millions of dynamic
entities. See the AWS SimSpace Weaver developer guide for more details on how to get started.
https://docs.aws.amazon.com/simspaceweaver
- from version 1.29.18
* api-change:``arc-zonal-shift``: Amazon Route 53 Application Recovery Controller Zonal Shift is a
new service that makes it easy to shift traffic away from an Availability Zone in a Region. See the
developer guide for more information:
https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route53-recovery.html
* api-change:``compute-optimizer``: Adds support for a new recommendation preference that makes it
possible for customers to optimize their EC2 recommendations by utilizing an external metrics
ingestion service to provide metrics.
* api-change:``config``: With this release, you can use AWS Config to evaluate your resources for
compliance with Config rules before they are created or updated. Using Config rules in proactive
mode enables you to test and build compliant resource templates or check resource configurations at
the time they are provisioned.
* api-change:``ec2``: Introduces ENA Express, which uses AWS SRD and dynamic routing to increase
throughput and minimize latency, adds support for trust relationships between Reachability Analyzer
and AWS Organizations to enable cross-account analysis, and adds support for Infrastructure
Performance metric subscriptions.
* api-change:``eks``: Adds support for additional EKS add-ons metadata and filtering fields
* api-change:``fsx``: This release adds support for 4GB/s / 160K PIOPS FSx for ONTAP file systems
and 10GB/s / 350K PIOPS FSx for OpenZFS file systems (Single_AZ_2). For FSx for ONTAP, this also
adds support for DP volumes, snapshot policy, copy tags to backups, and Multi-AZ route table
updates.
* api-change:``glue``: This release allows the creation of Custom Visual Transforms (Dynamic
Transforms) to be created via AWS Glue CLI/SDK.
* api-change:``inspector2``: This release adds support for Inspector to scan AWS Lambda.
* api-change:``lambda``: Adds support for Lambda SnapStart, which helps improve the startup
performance of functions. Customers can now manage SnapStart based functions via CreateFunction and
UpdateFunctionConfiguration APIs
* api-change:``license-manager-user-subscriptions``: AWS now offers fully-compliant,
Amazon-provided licenses for Microsoft Office Professional Plus 2021 Amazon Machine Images (AMIs)
on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to
launch instances on-demand without any long-term licensing commitments.
* api-change:``macie2``: Added support for configuring Macie to continually sample objects from S3
buckets and inspect them for sensitive data. Results appear in statistics, findings, and other data
that Macie provides.
* api-change:``quicksight``: This release adds new Describe APIs and updates Create and Update APIs
to support the data model for Dashboards, Analyses, and Templates.
* api-change:``s3control``: Added two new APIs to support Amazon S3 Multi-Region Access Point
failover controls: GetMultiRegionAccessPointRoutes and SubmitMultiRegionAccessPointRoutes. The
failover control APIs are supported in the following Regions: us-east-1, us-west-2, eu-west-1,
ap-southeast-2, and ap-northeast-1.
* api-change:``securityhub``: Adding StandardsManagedBy field to DescribeStandards API response
- from version 1.29.17
* api-change:``backup``: AWS Backup introduces support for legal hold and application stack
backups. AWS Backup Audit Manager introduces support for cross-Region, cross-account reports.
* api-change:``cloudwatch``: Update cloudwatch client to latest version
* api-change:``drs``: Non breaking changes to existing APIs, and additional APIs added to support
in-AWS failing back using AWS Elastic Disaster Recovery.
* api-change:``ecs``: This release adds support for ECS Service Connect, a new capability that
simplifies writing and operating resilient distributed applications. This release updates the
TaskDefinition, Cluster, Service mutation APIs with Service connect constructs and also adds a new
ListServicesByNamespace API.
* api-change:``efs``: Update efs client to latest version
* api-change:``iot-data``: This release adds support for MQTT5 properties to AWS IoT HTTP Publish
API.
* api-change:``iot``: Job scheduling enables the scheduled rollout of a Job with start and end
times and a customizable end behavior when end time is reached. This is available for continuous
and snapshot jobs. Added support for MQTT5 properties to AWS IoT TopicRule Republish Action.
* api-change:``iotwireless``: This release includes a new feature for customers to calculate the
position of their devices by adding three new APIs: UpdateResourcePosition, GetResourcePosition,
and GetPositionEstimate.
* api-change:``kendra``: Amazon Kendra now supports preview of table information from HTML tables
in the search results. The most relevant cells with their corresponding rows, columns are displayed
as a preview in the search result. The most relevant table cell or cells are also highlighted in
table preview.
* api-change:``logs``: Updates to support CloudWatch Logs data protection and CloudWatch
cross-account observability
* api-change:``mgn``: This release adds support for Application and Wave management. We also now
support custom post-launch actions.
* api-change:``oam``: Amazon CloudWatch Observability Access Manager is a new service that allows
configuration of the CloudWatch cross-account observability feature.
* api-change:``organizations``: This release introduces delegated administrator for AWS
Organizations, a new feature to help you delegate the management of your Organizations policies,
enabling you to govern your AWS organization in a decentralized way. You can now allow member
accounts to manage Organizations policies.
* api-change:``rds``: This release enables new Aurora and RDS feature called Blue/Green Deployments
that makes updates to databases safer, simpler and faster.
* api-change:``textract``: This release adds support for classifying and splitting lending
documents by type, and extracting information by using the Analyze Lending APIs. This release also
includes support for summarized information of the processed lending document package, in addition
to per document results.
* api-change:``transcribe``: This release adds support for 'inputType' for post-call and real-time
(streaming) Call Analytics within Amazon Transcribe.
- from version 1.29.16
* api-change:``grafana``: This release includes support for configuring a Grafana workspace to
connect to a datasource within a VPC as well as new APIs for configuring Grafana settings.
* api-change:``rbin``: This release adds support for Rule Lock for Recycle Bin, which allows you to
lock retention rules so that they can no longer be modified or deleted.
- from version 1.29.15
* bugfix:Endpoints: Resolve endpoint with default partition when no region is set
* bugfix:s3: fixes missing x-amz-content-sha256 header for s3 object lambda
* api-change:``appflow``: Adding support for Amazon AppFlow to transfer the data to Amazon Redshift
databases through Amazon Redshift Data API service. This feature will support the Redshift
destination connector on both public and private accessible Amazon Redshift Clusters and Amazon
Redshift Serverless.
* api-change:``kinesisanalyticsv2``: Support for Apache Flink 1.15 in Kinesis Data Analytics.
- from version 1.29.14
* api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Hyderabad) Region
(ap-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
region.
- from version 1.29.13
* api-change:``appflow``: AppFlow provides a new API called UpdateConnectorRegistration to update a
custom connector that customers have previously registered. With this API, customers no longer need
to unregister and then register a connector to make an update.
* api-change:``auditmanager``: This release introduces a new feature for Audit Manager: Evidence
finder. You can now use evidence finder to quickly query your evidence, and add the matching
evidence results to an assessment report.
* api-change:``chime-sdk-voice``: Amazon Chime Voice Connector, Voice Connector Group and PSTN
Audio Service APIs are now available in the Amazon Chime SDK Voice namespace. See
https://docs.aws.amazon.com/chime-sdk/latest/dg/sdk-available-regions.html for more details.
* api-change:``cloudfront``: CloudFront API support for staging distributions and associated
traffic management policies.
* api-change:``connect``: Added AllowedAccessControlTags and TagRestrictedResource for Tag Based
Access Control on Amazon Connect Webpage
* api-change:``dynamodb``: Updated minor fixes for DynamoDB documentation.
* api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
* api-change:``ec2``: This release adds support for copying an Amazon Machine Image's tags when
copying an AMI.
* api-change:``glue``: AWSGlue Crawler - Adding support for Table and Column level Comments with
database level datatypes for JDBC based crawler.
* api-change:``iot-roborunner``: AWS IoT RoboRunner is a new service that makes it easy to build
applications that help multi-vendor robots work together seamlessly. See the IoT RoboRunner
developer guide for more details on getting started.
https://docs.aws.amazon.com/iotroborunner/latest/dev/iotroborunner-welcome.html
* api-change:``quicksight``: This release adds the following: 1) Asset management for centralized
assets governance 2) QuickSight Q now supports public embedding 3) New Termination protection flag
to mitigate accidental deletes 4) Athena data sources now accept a custom IAM role 5) QuickSight
supports connectivity to Databricks
* api-change:``sagemaker``: Added DisableProfiler flag as a new field in ProfilerConfig
* api-change:``servicecatalog``: This release 1. adds support for Principal Name Sharing with
Service Catalog portfolio sharing. 2. Introduces repo sourced products which are created and
managed with existing SC APIs. These products are synced to external repos and auto create new
product versions based on changes in the repo.
* api-change:``ssm-sap``: AWS Systems Manager for SAP provides simplified operations and management
of SAP applications such as SAP HANA. With this release, SAP customers and partners can automate
and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
* api-change:``stepfunctions``: Update stepfunctions client to latest version
* api-change:``transfer``: Adds a NONE encryption algorithm type to AS2 connectors, providing
support for skipping encryption of the AS2 message body when a HTTPS URL is also specified.
- from version 1.29.12
* api-change:``amplify``: Adds a new value (WEB_COMPUTE) to the Platform enum that allows customers
to create Amplify Apps with Server-Side Rendering support.
* api-change:``appflow``: AppFlow simplifies the preparation and cataloging of SaaS data into the
AWS Glue Data Catalog where your data can be discovered and accessed by AWS analytics and ML
services. AppFlow now also supports data field partitioning and file size optimization to improve
query performance and reduce cost.
* api-change:``appsync``: This release introduces the APPSYNC_JS runtime, and adds support for
JavaScript in AppSync functions and AppSync pipeline resolvers.
* api-change:``dms``: Adds support for Internet Protocol Version 6 (IPv6) on DMS Replication
Instances
* api-change:``ec2``: This release adds a new optional parameter "privateIpAddress" for the
CreateNatGateway API. PrivateIPAddress will allow customers to select a custom Private IPv4 address
instead of having it be auto-assigned.
* api-change:``elbv2``: Update elbv2 client to latest version
* api-change:``emr-serverless``: Adds support for AWS Graviton2 based applications. You can now
select CPU architecture when creating new applications or updating existing ones.
* api-change:``ivschat``: Adds LoggingConfiguration APIs for IVS Chat - a feature that allows
customers to store and record sent messages in a chat room to S3 buckets, CloudWatch logs, or
Kinesis firehose.
* api-change:``lambda``: Add Node 18 (nodejs18.x) support to AWS Lambda.
* api-change:``personalize``: This release provides support for creation and use of metric
attributions in AWS Personalize
* api-change:``polly``: Add two new neural voices - Ola (pl-PL) and Hala (ar-AE).
* api-change:``rum``: CloudWatch RUM now supports custom events. To use custom events, create an
app monitor or update an app monitor with CustomEvent Status as ENABLED.
* api-change:``s3control``: Added 34 new S3 Storage Lens metrics to support additional customer use
cases.
* api-change:``secretsmanager``: Documentation updates for Secrets Manager.
* api-change:``securityhub``: Added SourceLayerArn and SourceLayerHash field for security findings.
Updated AwsLambdaFunction Resource detail
* api-change:``servicecatalog-appregistry``: This release adds support for tagged resource
associations, which allows you to associate a group of resources with a defined resource tag key
and value to the application.
* api-change:``sts``: Documentation updates for AWS Security Token Service.
* api-change:``textract``: This release adds support for specifying and extracting information from
documents using the Signatures feature within Analyze Document API
* api-change:``workspaces``: The release introduces CreateStandbyWorkspaces, an API that allows you
to create standby WorkSpaces associated with a primary WorkSpace in another Region.
DescribeWorkspaces now includes related WorkSpaces properties. DescribeWorkspaceBundles and
CreateWorkspaceBundle now return more bundle details.
- from version 1.29.11
* api-change:``batch``: Documentation updates related to Batch on EKS
* api-change:``billingconductor``: This release adds a new feature BillingEntity pricing rule.
* api-change:``cloudformation``: Added UnsupportedTarget HandlerErrorCode for use with CFN Resource
Hooks
* api-change:``comprehendmedical``: This release supports new set of entities and traits. It also
adds new category (BEHAVIORAL_ENVIRONMENTAL_SOCIAL).
* api-change:``connect``: This release adds a new MonitorContact API for initiating monitoring of
ongoing Voice and Chat contacts.
* api-change:``eks``: Adds support for customer-provided placement groups for Kubernetes control
plane instances when creating local EKS clusters on Outposts
* api-change:``elasticache``: for Redis now supports AWS Identity and Access Management
authentication access to Redis clusters starting with redis-engine version 7.0
* api-change:``iottwinmaker``: This release adds the following: 1) ExecuteQuery API allows users to
query their AWS IoT TwinMaker Knowledge Graph 2) Pricing plan APIs allow users to configure and
manage their pricing mode 3) Support for property groups and tabular property values in existing
AWS IoT TwinMaker APIs.
* api-change:``personalize-events``: This release provides support for creation and use of metric
attributions in AWS Personalize
* api-change:``proton``: Add support for sorting and filtering in ListServiceInstances
* api-change:``rds``: This release adds support for container databases (CDBs) to Amazon RDS Custom
for Oracle. A CDB contains one PDB at creation. You can add more PDBs using Oracle SQL. You can
also customize your database installation by setting the Oracle base, Oracle home, and the OS user
name and group.
* api-change:``ssm-incidents``: Add support for PagerDuty integrations on ResponsePlan,
IncidentRecord, and RelatedItem APIs
* api-change:``ssm``: This release adds support for cross account access in CreateOpsItem,
UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for SSM resources:
PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
* api-change:``transfer``: Allow additional operations to throw ThrottlingException
* api-change:``xray``: This release adds new APIs - PutResourcePolicy, DeleteResourcePolicy,
ListResourcePolicies for supporting resource based policies for AWS X-Ray.
- from version 1.29.10
* bugfix:s3: fixes missing x-amz-content-sha256 header for s3 on outpost
* enhancement:sso: Add support for loading sso-session profiles from the aws config
* api-change:``connect``: This release updates the APIs: UpdateInstanceAttribute,
DescribeInstanceAttribute, and ListInstanceAttributes. You can use it to programmatically
enable/disable enhanced contact monitoring using attribute type ENHANCED_CONTACT_MONITORING on the
specified Amazon Connect instance.
* api-change:``greengrassv2``: Adds new parent target ARN paramater to CreateDeployment,
GetDeployment, and ListDeployments APIs for the new subdeployments feature.
* api-change:``route53``: Amazon Route 53 now supports the Europe (Spain) Region (eu-south-2) for
latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
* api-change:``workspaces``: This release introduces ModifyCertificateBasedAuthProperties, a new
API that allows control of certificate-based auth properties associated with a WorkSpaces
directory. The DescribeWorkspaceDirectories API will now additionally return certificate-based auth
properties in its responses.
- from version 1.29.9
* api-change:``customer-profiles``: This release enhances the SearchProfiles API by providing
functionality to search for profiles using multiple keys and logical operators.
* api-change:``lakeformation``: This release adds a new parameter "Parameters" in the
DataLakeSettings.
* api-change:``managedblockchain``: Updating the API docs data type: NetworkEthereumAttributes, and
the operations DeleteNode, and CreateNode to also include the supported Goerli network.
* api-change:``proton``: Add support for CodeBuild Provisioning
* api-change:``rds``: This release adds support for restoring an RDS Multi-AZ DB cluster snapshot
to a Single-AZ deployment or a Multi-AZ DB instance deployment.
* api-change:``workdocs``: Added 2 new document related operations, DeleteDocumentVersion and
RestoreDocumentVersions.
* api-change:``xray``: This release enhances GetServiceGraph API to support new type of edge to
represent links between SQS and Lambda in event-driven applications.
- Update to 1.29.8
* api-change:``glue``: Added links related to enabling job bookmarks.
* api-change:``iot``: This release add new api listRelatedResourcesForAuditFinding and new member
type IssuerCertificates for Iot device device defender Audit.
* api-change:``license-manager``: AWS License Manager now supports onboarded Management Accounts or
Delegated Admins to view granted licenses aggregated from all accounts in the organization.
* api-change:``marketplace-catalog``: Added three new APIs to support tagging and tag-based
authorization: TagResource, UntagResource, and ListTagsForResource. Added optional parameters to
the StartChangeSet API to support tagging a resource while making a request to create it.
* api-change:``rekognition``: Adding support for ImageProperties feature to detect dominant colors
and image brightness, sharpness, and contrast, inclusion and exclusion filters for labels and label
categories, new fields to the API response, "aliases" and "categories"
* api-change:``securityhub``: Documentation updates for Security Hub
* api-change:``ssm-incidents``: RelatedItems now have an ID field which can be used for referencing
them else where. Introducing event references in TimelineEvent API and increasing maximum length of
"eventData" to 12K characters.
- from version 1.29.7
* api-change:``autoscaling``: This release adds a new price capacity optimized allocation strategy
for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling,
EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability
and Spot Instance price.
* api-change:``ec2``: This release adds a new price capacity optimized allocation strategy for Spot
Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2
Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and
Spot Instance price.
* api-change:``ecs``: This release adds support for task scale-in protection with
updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a
service managed task from being terminated by scale-in events and getTaskProtection API to get the
scale-in protection status of a task.
* api-change:``es``: Amazon OpenSearch Service now offers managed VPC endpoints to connect to your
Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature allows
you to privately access OpenSearch Service domain without using public IPs or requiring traffic to
traverse the Internet.
* api-change:``resource-explorer-2``: Text only updates to some Resource Explorer descriptions.
* api-change:``scheduler``: AWS introduces the new Amazon EventBridge Scheduler. EventBridge
Scheduler is a serverless scheduler that allows you to create, run, and manage tasks from one
central, managed service.
- from version 1.29.6
* api-change:``connect``: This release adds new fields SignInUrl, UserArn, and UserId to
GetFederationToken response payload.
* api-change:``connectcases``: This release adds the ability to disable templates through the
UpdateTemplate API. Disabling templates prevents customers from creating cases using the template.
For more information see https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
* api-change:``ec2``: Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are purpose built
for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge High Memory
instances are purpose-built to run large in-memory databases.
* api-change:``groundstation``: This release adds the preview of customer-provided ephemeris
support for AWS Ground Station, allowing space vehicle owners to provide their own position and
trajectory information for a satellite.
* api-change:``mediapackage-vod``: This release adds "IncludeIframeOnlyStream" for Dash endpoints.
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.5
* api-change:``acm``: Support added for requesting elliptic curve certificate key algorithm types
P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
* api-change:``billingconductor``: This release adds the Recurring Custom Line Item feature along
with a new API ListCustomLineItemVersions.
* api-change:``ec2``: This release enables sharing of EC2 Placement Groups across accounts and
within AWS Organizations using Resource Access Manager
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
* api-change:``fms``: AWS Firewall Manager now supports importing existing AWS Network Firewall
firewalls into Firewall Manager policies.
* api-change:``lightsail``: This release adds support for Amazon Lightsail to automate the
delegation of domains registered through Amazon Route 53 to Lightsail DNS management and to
automate record creation for DNS validation of Lightsail SSL/TLS certificates.
* api-change:``opensearch``: Amazon OpenSearch Service now offers managed VPC endpoints to connect
to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature
allows you to privately access OpenSearch Service domain without using public IPs or requiring
traffic to traverse the Internet.
* api-change:``polly``: Amazon Polly adds new voices: Elin (sv-SE), Ida (nb-NO), Laura (nl-NL) and
Suvi (fi-FI). They are available as neural voices only.
* api-change:``resource-explorer-2``: This is the initial SDK release for AWS Resource Explorer.
AWS Resource Explorer lets your users search for and discover your AWS resources across the AWS
Regions in your account.
* api-change:``route53``: Amazon Route 53 now supports the Europe (Zurich) Region (eu-central-2)
for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
- from version 1.29.4
* api-change:``athena``: Adds support for using Query Result Reuse
* api-change:``autoscaling``: This release adds support for two new attributes for attribute-based
instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
* api-change:``cloudtrail``: This release includes support for configuring a delegated
administrator to manage an AWS Organizations organization CloudTrail trails and event data stores,
and AWS Key Management Service encryption of CloudTrail Lake event data stores.
* api-change:``ec2``: This release adds support for two new attributes for attribute-based instance
type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
* api-change:``elasticache``: Added support for IPv6 and dual stack for Memcached and Redis
clusters. Customers can now launch new Redis and Memcached clusters with IPv6 and dual stack
networking support.
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for setting the
SDR reference white point for HDR conversions and conversion of HDR10 to DolbyVision without
mastering metadata.
* api-change:``ssm``: This release includes support for applying a CloudWatch alarm to multi
account multi region Systems Manager Automation
* api-change:``wafv2``: The geo match statement now adds labels for country and region. You can
match requests at the region level by combining a geo match statement with label match statements.
* api-change:``wellarchitected``: This release adds support for integrations with AWS Trusted
Advisor and AWS Service Catalog AppRegistry to improve workload discovery and speed up your
workload reviews.
* api-change:``workspaces``: This release adds protocols attribute to workspaces properties data
type. This enables customers to migrate workspaces from PC over IP (PCoIP) to WorkSpaces Streaming
Protocol (WSP) using create and modify workspaces public APIs.
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.3
* api-change:``ec2``: This release adds API support for the recipient of an AMI account share to
remove shared AMI launch permissions.
* api-change:``emr-containers``: Adding support for Job templates. Job templates allow you to
create and store templates to configure Spark applications parameters. This helps you ensure
consistent settings across applications by reusing and enforcing configuration overrides in data
pipelines.
* api-change:``logs``: Doc-only update for bug fixes and support of export to buckets encrypted
with SSE-KMS
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- Add psuffix on the name to have the multibuild flavor packages identify themselves by a different name
- Update to 1.29.2
* api-change:``memorydb``: Adding support for r6gd instances for MemoryDB Redis with data tiering.
In a cluster with data tiering enabled, when available memory capacity is exhausted, the least
recently used data is automatically tiered to solid state drives for cost-effective capacity
scaling with minimal performance impact.
* api-change:``sagemaker``: Amazon SageMaker now supports running training jobs on ml.trn1 instance
types.
* api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.1
* api-change:``iotsitewise``: This release adds the ListAssetModelProperties and
ListAssetProperties APIs. You can list all properties that belong to a single asset model or asset
using these two new APIs.
* api-change:``s3control``: S3 on Outposts launches support for Lifecycle configuration for
Outposts buckets. With S3 Lifecycle configuration, you can mange objects so they are stored cost
effectively. You can manage objects using size-based rules and specify how many noncurrent versions
bucket will retain.
* api-change:``sagemaker``: This release updates Framework model regex for ModelPackage to support
new Framework version xgboost, sklearn.
* api-change:``ssm-incidents``: Adds support for tagging replication-set on creation.
- from version 1.29.0
* feature:Endpoints: Migrate all services to use new AWS Endpoint Resolution framework
* Enhancement:Endpoints: Discontinued use of `sslCommonName` hosts as detailed in 1.27.0 (see
`#2705 <https://github.com/boto/botocore/issues/2705>`__ for more info)
* api-change:``rds``: Relational Database Service - This release adds support for configuring
Storage Throughput on RDS database instances.
* api-change:``textract``: Add ocr results in AnalyzeIDResponse as blocks
- from version 1.28.5
* api-change:``apprunner``: This release adds support for private App Runner services. Services may
now be configured to be made private and only accessible from a VPC. The changes include a new
VpcIngressConnection resource and several new and modified APIs.
* api-change:``connect``: Amazon connect now support a new API DismissUserContact to dismiss or
remove terminated contacts in Agent CCP
* api-change:``ec2``: Elastic IP transfer is a new Amazon VPC feature that allows you to transfer
your Elastic IP addresses from one AWS Account to another.
* api-change:``iot``: This release adds the Amazon Location action to IoT Rules Engine.
* api-change:``logs``: SDK release to support tagging for destinations and log groups with
TagResource. Also supports tag on create with PutDestination.
* api-change:``sesv2``: This release includes support for interacting with the Virtual
Deliverability Manager, allowing you to opt in/out of the feature and to retrieve recommendations
and metric data.
* api-change:``textract``: This release introduces additional support for 30+ normalized fields
such as vendor address and currency. It also includes OCR output in the response and accuracy
improvements for the already supported fields in previous version
- from version 1.28.4
* api-change:``apprunner``: AWS App Runner adds .NET 6, Go 1, PHP 8.1 and Ruby 3.1 runtimes.
* api-change:``appstream``: This release includes CertificateBasedAuthProperties in
CreateDirectoryConfig and UpdateDirectoryConfig.
* api-change:``cloud9``: Update to the documentation section of the Cloud9 API Reference guide.
* api-change:``cloudformation``: This release adds more fields to improves visibility of AWS
CloudFormation StackSets information in following APIs: ListStackInstances, DescribeStackInstance,
ListStackSetOperationResults, ListStackSetOperations, DescribeStackSetOperation.
* api-change:``gamesparks``: Add LATEST as a possible GameSDK Version on snapshot
* api-change:``mediatailor``: This release introduces support for SCTE-35 segmentation descriptor
messages which can be sent within time signal messages.
- from version 1.28.3
* api-change:``ec2``: Feature supports the replacement of instance root volume using an updated AMI
without requiring customers to stop their instance.
* api-change:``fms``: Add support NetworkFirewall Managed Rule Group Override flag in
GetViolationDetails API
* api-change:``glue``: Added support for custom datatypes when using custom csv classifier.
* api-change:``redshift``: This release clarifies use for the ElasticIp parameter of the
CreateCluster and RestoreFromClusterSnapshot APIs.
* api-change:``sagemaker``: This change allows customers to provide a custom entrypoint script for
the docker container to be run while executing training jobs, and provide custom arguments to the
entrypoint script.
* api-change:``wafv2``: This release adds the following: Challenge rule action, to silently verify
client browsers; rule group rule action override to any valid rule action, not just Count; token
sharing between protected applications for challenge/CAPTCHA token; targeted rules option for Bot
Control managed rule group.
- from version 1.28.2
* api-change:``iam``: Doc only update that corrects instances of CLI not using an entity.
* api-change:``kafka``: This release adds support for Tiered Storage. UpdateStorage allows you to
control the Storage Mode for supported storage tiers.
* api-change:``neptune``: Added a new cluster-level attribute to set the capacity range for Neptune
Serverless instances.
* api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying Grid
Search strategy for tuning jobs, which evaluates all hyperparameter combinations exhaustively based
on the categorical hyperparameters provided.
- from version 1.28.1
* api-change:``accessanalyzer``: This release adds support for six new resource types in IAM Access
Analyzer to help you easily identify public and cross-account access to your AWS resources. Updated
service API, documentation, and paginators.
* api-change:``location``: Added new map styles with satellite imagery for map resources using HERE
as a data provider.
* api-change:``mediatailor``: This release is a documentation update
* api-change:``rds``: Relational Database Service - This release adds support for exporting DB
cluster data to Amazon S3.
* api-change:``workspaces``: This release adds new enums for supporting Workspaces Core features,
including creating Manual running mode workspaces, importing regular Workspaces Core images and
importing g4dn Workspaces Core images.
- Update in SLE-15 (bsc#1204537, jsc#PED-2333)
- Update to 1.28.0
* feature:Endpoints: Implemented new endpoint ruleset system to dynamically derive endpoints and
settings for services
* api-change:``acm-pca``: AWS Private Certificate Authority (AWS Private CA) now offers usage modes
which are combination of features to address specific use cases.
* api-change:``batch``: This release adds support for AWS Batch on Amazon EKS.
* api-change:``datasync``: Added support for self-signed certificates when using object storage
locations; added BytesCompressed to the TaskExecution response.
* api-change:``sagemaker``: SageMaker Inference Recommender now supports a new API
ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an
inference recommendation job.
- from version 1.27.96
* api-change:``cognito-idp``: This release adds a new "DeletionProtection" field to the UserPool in
Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting
this field to ACTIVE will prevent a user pool from accidental deletion.
* api-change:``sagemaker``: CreateInferenceRecommenderjob API now supports passing endpoint details
directly, that will help customers to identify the max invocation and max latency they can achieve
for their model and the associated endpoint along with getting recommendations on other instances.
- from version 1.27.95
* api-change:``devops-guru``: This release adds information about the resources DevOps Guru is
analyzing.
* api-change:``globalaccelerator``: Global Accelerator now supports AddEndpoints and
RemoveEndpoints operations for standard endpoint groups.
* api-change:``resiliencehub``: In this release, we are introducing support for regional
optimization for AWS Resilience Hub applications. It also includes a few documentation updates to
improve clarity.
* api-change:``rum``: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional
Dimensions
- from version 1.27.94
* api-change:``chime-sdk-messaging``: Documentation updates for Chime Messaging SDK
* api-change:``cloudtrail``: This release includes support for exporting CloudTrail Lake query
results to an Amazon S3 bucket.
* api-change:``config``: This release adds resourceType enums for AppConfig, AppSync, DataSync,
EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
* api-change:``connect``: This release adds API support for managing phone numbers that can be used
across multiple AWS regions through telephony traffic distribution.
* api-change:``events``: Update events client to latest version
* api-change:``managedblockchain``: Adding new Accessor APIs for Amazon Managed Blockchain
* api-change:``s3``: Updates internal logic for constructing API endpoints. We have added
rule-based endpoints and internal model parameters.
* api-change:``s3control``: Updates internal logic for constructing API endpoints. We have added
rule-based endpoints and internal model parameters.
* api-change:``support-app``: This release adds the RegisterSlackWorkspaceForOrganization API. You
can use the API to register a Slack workspace for an AWS account that is part of an organization.
* api-change:``workspaces-web``: WorkSpaces Web now supports user access logging for recording
session start, stop, and URL navigation.
- from version 1.27.93
* api-change:``frauddetector``: Documentation Updates for Amazon Fraud Detector
* api-change:``sagemaker``: This change allows customers to enable data capturing while running a
batch transform job, and configure monitoring schedule to monitoring the captured data.
* api-change:``servicediscovery``: Updated the ListNamespaces API to support the NAME and HTTP_NAME
filters, and the BEGINS_WITH filter condition.
* api-change:``sesv2``: This release allows subscribers to enable Dedicated IPs (managed) to send
email via a fully managed dedicated IP experience. It also adds identities' VerificationStatus in
the response of GetEmailIdentity and ListEmailIdentities APIs, and ImportJobs counts in the
response of ListImportJobs API.
- from version 1.27.92
* api-change:``greengrass``: This change allows customers to specify FunctionRuntimeOverride in
FunctionDefinitionVersion. This configuration can be used if the runtime on the device is different
from the AWS Lambda runtime specified for that function.
* api-change:``sagemaker``: This release adds support for C7g, C6g, C6gd, C6gn, M6g, M6gd, R6g, and
R6gn Graviton instance types in Amazon SageMaker Inference.
- Remove version constraint for python-pytest in BuildRequires
- Update to 1.27.91
* api-change:``mediaconvert``: MediaConvert now supports specifying the minimum percentage of the
HRD buffer available at the end of each encoded video segment.
- from version 1.27.90
* api-change:``amplifyuibuilder``: We are releasing the ability for fields to be configured as
arrays.
* api-change:``appflow``: With this update, you can choose which Salesforce API is used by Amazon
AppFlow to transfer data to or from your Salesforce account. You can choose the Salesforce REST API
or Bulk API 2.0. You can also choose for Amazon AppFlow to pick the API automatically.
* api-change:``connect``: This release adds support for a secondary email and a mobile number for
Amazon Connect instance users.
* api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD
set up.
* api-change:``ecs``: Documentation update to address tickets.
* api-change:``guardduty``: Add UnprocessedDataSources to CreateDetectorResponse which specifies
the data sources that couldn't be enabled during the CreateDetector request. In addition, update
documentations.
* api-change:``iam``: Documentation updates for the AWS Identity and Access Management API
Reference.
* api-change:``iotfleetwise``: Documentation update for AWS IoT FleetWise
* api-change:``medialive``: AWS Elemental MediaLive now supports forwarding SCTE-35 messages
through the Event Signaling and Management (ESAM) API, and can read those SCTE-35 messages from an
inactive source.
* api-change:``mediapackage-vod``: This release adds SPEKE v2 support for MediaPackage VOD. Speke
v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, based on an
encryption contract selected by the customer.
* api-change:``panorama``: Pause and resume camera stream processing with
SignalApplicationInstanceNodeInstances. Reboot an appliance with CreateJobForDevices. More
application state information in DescribeApplicationInstance response.
* api-change:``rds-data``: Doc update to reflect no support for schema parameter on
BatchExecuteStatement API
* api-change:``ssm-incidents``: Update RelatedItem enum to support Tasks
* api-change:``ssm``: Support of AmazonLinux2022 by Patch Manager
* api-change:``transfer``: This release adds an option for customers to configure workflows that
are triggered when files are only partially received from a client due to premature session
disconnect.
* api-change:``translate``: This release enables customers to specify multiple target languages in
asynchronous batch translation requests.
* api-change:``wisdom``: This release updates the GetRecommendations API to include a trigger event
list for classifying and grouping recommendations.
- from version 1.27.89
* api-change:``codeguru-reviewer``: Documentation update to replace broken link.
* api-change:``elbv2``: Update elbv2 client to latest version
* api-change:``greengrassv2``: This release adds error status details for deployments and
components that failed on a device and adds features to improve visibility into component
installation.
* api-change:``quicksight``: Amazon QuickSight now supports SecretsManager Secret ARN in place of
CredentialPair for DataSource creation and update. This release also has some minor documentation
updates and removes CountryCode as a required parameter in GeoSpatialColumnGroup
- from version 1.27.88
* api-change:``resiliencehub``: Documentation change for AWS Resilience Hub. Doc-only update to fix
Documentation layout
- from version 1.27.87
* api-change:``glue``: This SDK release adds support to sync glue jobs with source control
provider. Additionally, a new parameter called SourceControlDetails will be added to Job model.
* api-change:``network-firewall``: StreamExceptionPolicy configures how AWS Network Firewall
processes traffic when a network connection breaks midstream
* api-change:``outposts``: This release adds the Asset state information to the ListAssets
response. The ListAssets request supports filtering on Asset state.
- from version 1.27.86
* api-change:``connect``: Updated the CreateIntegrationAssociation API to support the CASES_DOMAIN
IntegrationType.
* api-change:``connectcases``: This release adds APIs for Amazon Connect Cases. Cases allows your
agents to quickly track and manage customer issues that require multiple interactions, follow-up
tasks, and teams in your contact center. For more information, see
https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
* api-change:``ec2``: Added EnableNetworkAddressUsageMetrics flag for ModifyVpcAttribute,
DescribeVpcAttribute APIs.
* api-change:``ecs``: Documentation updates to address various Amazon ECS tickets.
* api-change:``s3control``: S3 Object Lambda adds support to allow customers to intercept
HeadObject and ListObjects requests and introduce their own compute. These requests were previously
proxied to S3.
* api-change:``workmail``: This release adds support for impersonation roles in Amazon WorkMail.
- drop remove-six.patch, rejected by upstream and breaks
all dependent projects of botocore
- Add remove-six.patch, which eliminates need for the six dependency.
- Update to 1.27.85
* api-change:``accessanalyzer``: AWS IAM Access Analyzer policy validation introduces new checks
for role trust policies. As customers author a policy, IAM Access Analyzer policy validation
evaluates the policy for any issues to make it easier for customers to author secure policies.
* api-change:``ec2``: Adding an imdsSupport attribute to EC2 AMIs
* api-change:``snowball``: Adds support for V3_5C. This is a refreshed AWS Snowball Edge Compute
Optimized device type with 28TB SSD, 104 vCPU and 416GB memory (customer usable).
- from version 1.27.84
* api-change:``codedeploy``: This release allows you to override the alarm configurations when
creating a deployment.
* api-change:``devops-guru``: This release adds filter feature on AddNotificationChannel API,
enable customer to configure the SNS notification messages by Severity or MessageTypes
* api-change:``dlm``: This release adds support for archival of single-volume snapshots created by
Amazon Data Lifecycle Manager policies
* api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version
* api-change:``sagemaker``: A new parameter called ExplainerConfig is added to CreateEndpointConfig
API to enable SageMaker Clarify online explainability feature.
* api-change:``sso-oidc``: Documentation updates for the IAM Identity Center OIDC CLI Reference.
- from version 1.27.83
* api-change:``acm``: This update returns additional certificate details such as certificate SANs
and allows sorting in the ListCertificates API.
* api-change:``ec2``: u-3tb1 instances are powered by Intel Xeon Platinum 8176M (Skylake)
processors and are purpose-built to run large in-memory databases.
* api-change:``emr-serverless``: This release adds API support to debug Amazon EMR Serverless jobs
in real-time with live application UIs
* api-change:``fsx``: This release adds support for Amazon File Cache.
* api-change:``migrationhuborchestrator``: Introducing AWS MigrationHubOrchestrator. This is the
first public release of AWS MigrationHubOrchestrator.
* api-change:``polly``: Added support for the new Cantonese voice - Hiujin. Hiujin is available as
a Neural voice only.
* api-change:``proton``: This release adds an option to delete pipeline provisioning repositories
using the UpdateAccountSettings API
* api-change:``sagemaker``: SageMaker Training Managed Warm Pools let you retain provisioned
infrastructure to reduce latency for repetitive training workloads.
* api-change:``secretsmanager``: Documentation updates for Secrets Manager
* api-change:``translate``: This release enables customers to access control rights on Translate
resources like Parallel Data and Custom Terminology using Tag Based Authorization.
* api-change:``workspaces``: This release includes diagnostic log uploading feature. If it is
enabled, the log files of WorkSpaces Windows client will be sent to Amazon WorkSpaces automatically
for troubleshooting. You can use modifyClientProperty api to enable/disable this feature.
- from version 1.27.82
* api-change:``ce``: This release is to support retroactive Cost Categories. The new field will
enable you to retroactively apply new and existing cost category rules to previous months.
* api-change:``kendra``: My AWS Service (placeholder) - Amazon Kendra now provides a data source
connector for DropBox. For more information, see
https://docs.aws.amazon.com/kendra/latest/dg/data-source-dropbox.html
* api-change:``location``: This release adds place IDs, which are unique identifiers of places,
along with a new GetPlace operation, which can be used with place IDs to find a place again later.
UnitNumber and UnitType are also added as new properties of places.
- from version 1.27.81
* api-change:``cur``: This release adds two new support regions(me-central-1/eu-south-2) for OSG.
* api-change:``iotfleetwise``: General availability (GA) for AWS IoT Fleetwise. It adds AWS IoT
Fleetwise to AWS SDK. For more information, see
https://docs.aws.amazon.com/iot-fleetwise/latest/APIReference/Welcome.html.
* api-change:``ssm``: This release includes support for applying a CloudWatch alarm to Systems
Manager capabilities like Automation, Run Command, State Manager, and Maintenance Windows.
- from version 1.27.80
* api-change:``apprunner``: AWS App Runner adds a Node.js 16 runtime.
* api-change:``ec2``: Letting external AWS customers provide ImageId as a Launch Template override
in FleetLaunchTemplateOverridesRequest
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``lightsail``: This release adds Instance Metadata Service (IMDS) support for
Lightsail instances.
* api-change:``nimble``: Amazon Nimble Studio adds support for on-demand Amazon Elastic Compute
Cloud (EC2) G3 and G5 instances, allowing customers to utilize additional GPU instance types for
their creative projects.
* api-change:``ssm``: This release adds new SSM document types ConformancePackTemplate and
CloudFormation
* api-change:``wafv2``: Add the default specification for ResourceType in ListResourcesForWebACL.
- from version 1.27.79
* api-change:``backup-gateway``: Changes include: new GetVirtualMachineApi to fetch a single user's
VM, improving ListVirtualMachines to fetch filtered VMs as well as all VMs, and improving
GetGatewayApi to now also return the gateway's MaintenanceStartTime.
* api-change:``devicefarm``: This release adds the support for VPC-ENI based connectivity for
private devices on AWS Device Farm.
* api-change:``ec2``: Documentation updates for Amazon EC2.
* api-change:``glue``: Added support for S3 Event Notifications for Catalog Target Crawlers.
* api-change:``identitystore``: Documentation updates for the Identity Store CLI Reference.
- from version 1.27.78
* api-change:``comprehend``: Amazon Comprehend now supports synchronous mode for targeted sentiment
API operations.
* api-change:``s3control``: S3 on Outposts launches support for object versioning for Outposts
buckets. With S3 Versioning, you can preserve, retrieve, and restore every version of every object
stored in your buckets. You can recover from both unintended user actions and application failures.
* api-change:``sagemaker``: SageMaker now allows customization on Canvas Application settings,
including enabling/disabling time-series forecasting and specifying an Amazon Forecast execution
role at both the Domain and UserProfile levels.
- from version 1.27.77
* api-change:``ec2``: This release adds support for blocked paths to Amazon VPC Reachability
Analyzer.
- Update to 1.27.76
* api-change:``cloudtrail``: This release includes support for importing existing trails into
CloudTrail Lake.
* api-change:``ec2``: This release adds CapacityAllocations field to DescribeCapacityReservations
* api-change:``mediaconnect``: This change allows the customer to use the SRT Caller protocol as
part of their flows
* api-change:``rds``: This release adds support for Amazon RDS Proxy with SQL Server compatibility.
- from version 1.27.75
* api-change:``codestar-notifications``: This release adds tag based access control for the
UntagResource API.
* api-change:``ecs``: This release supports new task definition sizes.
- from version 1.27.74
* api-change:``dynamodb``: Increased DynamoDB transaction limit from 25 to 100.
* api-change:``ec2``: This feature allows customers to create tags for vpc-endpoint-connections and
vpc-endpoint-service-permissions.
* api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying
Hyperband strategy for tuning jobs, which uses a multi-fidelity based tuning strategy to stop
underperforming hyperparameter configurations early.
- from version 1.27.73
* api-change:``amplifyuibuilder``: Amplify Studio UIBuilder is introducing forms functionality.
Forms can be configured from Data Store models, JSON, or from scratch. These forms can then be
generated in your project and used like any other React components.
* api-change:``ec2``: This update introduces API operations to manage and create local gateway
route tables, CoIP pools, and VIF group associations.
- Update to 1.27.72
* api-change:``customer-profiles``: Added isUnstructured in response for Customer Profiles
Integration APIs
* api-change:``drs``: Fixed the data type of lagDuration that is returned in Describe Source Server
API
* api-change:``ec2``: Two new features for local gateway route tables: support for static routes
targeting Elastic Network Interfaces and direct VPC routing.
* api-change:``evidently``: This release adds support for the client-side evaluation - powered by
AWS AppConfig feature.
* api-change:``kendra``: This release enables our customer to choose the option of Sharepoint 2019
for the on-premise Sharepoint connector.
* api-change:``transfer``: This release introduces the ability to have multiple server host keys
for any of your Transfer Family servers that use the SFTP protocol.
- from version 1.27.71
* api-change:``eks``: Adding support for local Amazon EKS clusters on Outposts
- from version 1.27.70
* api-change:``cloudtrail``: This release adds CloudTrail getChannel and listChannels APIs to allow
customer to view the ServiceLinkedChannel configurations.
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version
* api-change:``pi``: Increases the maximum values of two RDS Performance Insights APIs. The maximum
value of the Limit parameter of DimensionGroup is 25. The MaxResult maximum is now 25 for the
following APIs: DescribeDimensionKeys, GetResourceMetrics, ListAvailableResourceDimensions, and
ListAvailableResourceMetrics.
* api-change:``redshift``: This release updates documentation for AQUA features and other
description updates.
- from version 1.27.69
* api-change:``ec2``: This release adds support to send VPC Flow Logs to kinesis-data-firehose as
new destination type
* api-change:``emr-containers``: EMR on EKS now allows running Spark SQL using the newly introduced
Spark SQL Job Driver in the Start Job Run API
* api-change:``lookoutmetrics``: Release dimension value filtering feature to allow customers to
define dimension filters for including only a subset of their dataset to be used by LookoutMetrics.
* api-change:``medialive``: This change exposes API settings which allow Dolby Atmos and Dolby
Vision to be used when running a channel using Elemental Media Live
* api-change:``route53``: Amazon Route 53 now supports the Middle East (UAE) Region (me-central-1)
for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
* api-change:``sagemaker``: This release adds Mode to AutoMLJobConfig.
* api-change:``ssm``: This release adds support for Systems Manager State Manager Association
tagging.
- from version 1.27.68
* api-change:``dataexchange``: Documentation updates for AWS Data Exchange.
* api-change:``ec2``: Documentation updates for Amazon EC2.
* api-change:``eks``: Adds support for EKS Addons ResolveConflicts "preserve" flag. Also adds new
update failed status for EKS Addons.
* api-change:``fsx``: Documentation update for Amazon FSx.
* api-change:``inspector2``: This release adds new fields like fixAvailable, fixedInVersion and
remediation to the finding model. The requirement to have vulnerablePackages in the finding model
has also been removed. The documentation has been updated to reflect these changes.
* api-change:``iotsitewise``: Allow specifying units in Asset Properties
* api-change:``sagemaker``: SageMaker Hosting now allows customization on ML instance storage
volume size, model data download timeout and inference container startup ping health check timeout
for each ProductionVariant in CreateEndpointConfig API.
* api-change:``sns``: Amazon SNS introduces the Data Protection Policy APIs, which enable customers
to attach a data protection policy to an SNS topic. This allows topic owners to enable the new
message data protection feature to audit and block sensitive data that is exchanged through their
topics.
- from version 1.27.67
* api-change:``identitystore``: Documentation updates for the Identity Store CLI Reference.
* api-change:``sagemaker``: This release adds HyperParameterTuningJob type in Search API.
- from version 1.27.66
* api-change:``cognito-idp``: This release adds a new "AuthSessionValidity" field to the
UserPoolClient in Cognito. Application admins can configure this value for their users'
authentication duration, which is currently fixed at 3 minutes, up to 15 minutes. Setting this
field will also apply to the SMS MFA authentication flow.
* api-change:``connect``: This release adds search APIs for Routing Profiles and Queues, which can
be used to search for those resources within a Connect Instance.
* api-change:``mediapackage``: Added support for AES_CTR encryption to CMAF origin endpoints
* api-change:``sagemaker``: This release enables administrators to attribute user activity and API
calls from Studio notebooks, Data Wrangler and Canvas to specific users even when users share the
same execution IAM role. ExecutionRoleIdentityConfig at Sagemaker domain level enables this
feature.
- from version 1.27.65
* api-change:``codeguru-reviewer``: Documentation updates to fix formatting issues in CLI and SDK
documentation.
* api-change:``controltower``: This release contains the first SDK for AWS Control Tower. It
introduces a new set of APIs: EnableControl, DisableControl, GetControlOperation, and
ListEnabledControls.
* api-change:``route53``: Documentation updates for Amazon Route 53.
- Update to 1.27.64
* api-change:``cloudfront``: Update API documentation for CloudFront origin access control (OAC)
* api-change:``identitystore``: Expand IdentityStore API to support Create, Read, Update, Delete
and Get operations for User, Group and GroupMembership resources.
* api-change:``iotthingsgraph``: This release deprecates all APIs of the ThingsGraph service
* api-change:``ivs``: IVS Merge Fragmented Streams. This release adds support for
recordingReconnectWindow field in IVS recordingConfigurations. For more information see
https://docs.aws.amazon.com/ivs/latest/APIReference/Welcome.html
* api-change:``rds-data``: Documentation updates for RDS Data API
* api-change:``sagemaker``: SageMaker Inference Recommender now accepts Inference Recommender
fields: Domain, Task, Framework, SamplePayloadUrl, SupportedContentTypes, SupportedInstanceTypes,
directly in our CreateInferenceRecommendationsJob API through ContainerConfig
- from version 1.27.63
* enhancement:Endpoints: Deprecate SSL common name
* api-change:``greengrassv2``: Adds topologyFilter to ListInstalledComponentsRequest which allows
filtration of components by ROOT or ALL (including root and dependency components). Adds
lastStatusChangeTimestamp to ListInstalledComponents response to show the last time a component
changed state on a device.
* api-change:``identitystore``: Documentation updates for the Identity Store CLI Reference.
* api-change:``lookoutequipment``: This release adds new apis for providing labels.
* api-change:``macie2``: This release of the Amazon Macie API adds support for using allow lists to
define specific text and text patterns to ignore when inspecting data sources for sensitive data.
* api-change:``sso-admin``: Documentation updates for the AWS IAM Identity Center CLI Reference.
* api-change:``sso``: Documentation updates for the AWS IAM Identity Center Portal CLI Reference.
- from version 1.27.62
* api-change:``fsx``: Documentation updates for Amazon FSx for NetApp ONTAP.
* api-change:``voice-id``: Amazon Connect Voice ID now detects voice spoofing. When a prospective
fraudster tries to spoof caller audio using audio playback or synthesized speech, Voice ID will
return a risk score and outcome to indicate the how likely it is that the voice is spoofed.
- from version 1.27.61
* api-change:``mediapackage``: This release adds Ads AdTriggers and AdsOnDeliveryRestrictions to
describe calls for CMAF endpoints on MediaPackage.
* api-change:``rds``: Removes support for RDS Custom from DBInstanceClass in ModifyDBInstance
- Update to 1.27.60
* enhancement:Identity: TokenProvider added for bearer auth support
* api-change:``elbv2``: Update elbv2 client to latest version
* api-change:``gamelift``: This release adds support for eight EC2 local zones as fleet locations;
Atlanta, Chicago, Dallas, Denver, Houston, Kansas City (us-east-1-mci-1a), Los Angeles, and
Phoenix. It also adds support for C5d, C6a, C6i, and R5d EC2 instance families.
* api-change:``iotwireless``: This release includes a new feature for the customers to enable the
LoRa gateways to send out beacons for Class B devices and an option to select one or more gateways
for Class C devices when sending the LoRaWAN downlink messages.
* api-change:``ivschat``: Documentation change for IVS Chat API Reference. Doc-only update to add a
paragraph on ARNs to the Welcome section.
* api-change:``panorama``: Support sorting and filtering in ListDevices API, and add more fields to
device listings and single device detail
* api-change:``sso-oidc``: Updated required request parameters on IAM Identity Center's OIDC
CreateToken action.
- from version 1.27.59
* api-change:``cloudfront``: Adds support for CloudFront origin access control (OAC), making it
possible to restrict public access to S3 bucket origins in all AWS Regions, those with SSE-KMS, and
more.
* api-change:``config``: AWS Config now supports ConformancePackTemplate documents in SSM Docs for
the deployment and update of conformance packs.
* api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
* api-change:``ivs``: Documentation Change for IVS API Reference - Doc-only update to type field
description for CreateChannel and UpdateChannel actions and for Channel data type. Also added
Amazon Resource Names (ARNs) paragraph to Welcome section.
* api-change:``quicksight``: Added a new optional property DashboardVisual under
ExperienceConfiguration parameter of GenerateEmbedUrlForAnonymousUser and
GenerateEmbedUrlForRegisteredUser API operations. This supports embedding of specific visuals in
QuickSight dashboards.
* api-change:``transfer``: Documentation updates for AWS Transfer Family
- from version 1.27.58
* api-change:``rds``: RDS for Oracle supports Oracle Data Guard switchover and read replica backups.
* api-change:``sso-admin``: Documentation updates to reflect service rename - AWS IAM Identity
Center (successor to AWS Single Sign-On)
- from version 1.27.57
* api-change:``docdb``: Update document for volume clone
* api-change:``ec2``: R6a instances are powered by 3rd generation AMD EPYC (Milan) processors
delivering all-core turbo frequency of 3.6 GHz. C6id, M6id, and R6id instances are powered by 3rd
generation Intel Xeon Scalable processor (Ice Lake) delivering all-core turbo frequency of 3.5 GHz.
* api-change:``forecast``: releasing What-If Analysis APIs and update ARN regex pattern to be more
strict in accordance with security recommendation
* api-change:``forecastquery``: releasing What-If Analysis APIs
* api-change:``iotsitewise``: Enable non-unique asset names under different hierarchies
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``securityhub``: Added new resource details objects to ASFF, including resources for
AwsBackupBackupVault, AwsBackupBackupPlan and AwsBackupRecoveryPoint. Added FixAvailable,
FixedInVersion and Remediation to Vulnerability.
* api-change:``support-app``: This is the initial SDK release for the AWS Support App in Slack.
- from version 1.27.56
* api-change:``connect``: This release adds SearchSecurityProfiles API which can be used to search
for Security Profile resources within a Connect Instance.
* api-change:``ivschat``: Documentation Change for IVS Chat API Reference - Doc-only update to
change text/description for tags field.
* api-change:``kendra``: This release adds support for a new authentication type - Personal Access
Token (PAT) for confluence server.
* api-change:``lookoutmetrics``: This release is to make GetDataQualityMetrics API publicly
available.
- Update to 1.27.55
* api-change:``chime-sdk-media-pipelines``: The Amazon Chime SDK now supports live streaming of
real-time video from the Amazon Chime SDK sessions to streaming platforms such as Amazon IVS and
Amazon Elemental MediaLive. We have also added support for concatenation to create a single media
capture file.
* api-change:``cloudwatch``: Update cloudwatch client to latest version
* api-change:``cognito-idp``: This change is being made simply to fix the public documentation
based on the models. We have included the PasswordChange and ResendCode events, along with the
Pass, Fail and InProgress status. We have removed the Success and Failure status which are never
returned by our APIs.
* api-change:``dynamodb``: This release adds support for importing data from S3 into a new DynamoDB
table
* api-change:``ec2``: This release adds support for VPN log options , a new feature allowing S2S
VPN connections to send IKE activity logs to CloudWatch Logs
* api-change:``networkmanager``: Add TransitGatewayPeeringAttachmentId property to
TransitGatewayPeering Model
- from version 1.27.54
* api-change:``appmesh``: AWS App Mesh release to support Multiple Listener and Access Log Format
feature
* api-change:``connectcampaigns``: Updated exceptions for Amazon Connect Outbound Campaign api's.
* api-change:``kendra``: This release adds Zendesk connector (which allows you to specify Zendesk
SAAS platform as data source), Proxy Support for Sharepoint and Confluence Server (which allows you
to specify the proxy configuration if proxy is required to connect to your Sharepoint/Confluence
Server as data source).
* api-change:``lakeformation``: This release adds a new API support "AssumeDecoratedRoleWithSAML"
and also release updates the corresponding documentation.
* api-change:``lambda``: Added support for customization of Consumer Group ID for MSK and Kafka
Event Source Mappings.
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``rds``: Adds support for Internet Protocol Version 6 (IPv6) for RDS Aurora database
clusters.
* api-change:``secretsmanager``: Documentation updates for Secrets Manager.
- from version 1.27.53
* api-change:``rekognition``: This release adds APIs which support copying an Amazon Rekognition
Custom Labels model and managing project policies across AWS account.
* api-change:``servicecatalog``: Documentation updates for Service Catalog
- from version 1.27.52
* enhancement:AWSCRT: Upgrade awscrt version to 0.14.0
* api-change:``cloudfront``: Adds Http 3 support to distributions
* api-change:``identitystore``: Documentation updates to reflect service rename - AWS IAM Identity
Center (successor to AWS Single Sign-On)
* api-change:``sso``: Documentation updates to reflect service rename - AWS IAM Identity Center
(successor to AWS Single Sign-On)
* api-change:``wisdom``: This release introduces a new API PutFeedback that allows submitting
feedback to Wisdom on content relevance.
- from version 1.27.51
* api-change:``amp``: This release adds log APIs that allow customers to manage logging for their
Amazon Managed Service for Prometheus workspaces.
* api-change:``chime-sdk-messaging``: The Amazon Chime SDK now supports channels with up to one
million participants with elastic channels.
* api-change:``ivs``: Updates various list api MaxResults ranges
* api-change:``personalize-runtime``: This release provides support for promotions in AWS
Personalize runtime.
* api-change:``rds``: Adds support for RDS Custom to DBInstanceClass in ModifyDBInstance
- from version 1.27.50
* api-change:``backupstorage``: This is the first public release of AWS Backup Storage. We are
exposing some previously-internal APIs for use by external services. These APIs are not meant to be
used directly by customers.
* api-change:``glue``: Add support for Python 3.9 AWS Glue Python Shell jobs
* api-change:``privatenetworks``: This is the initial SDK release for AWS Private 5G. AWS Private
5G is a managed service that makes it easy to deploy, operate, and scale your own private mobile
network at your on-premises location.
- from version 1.27.49
* api-change:``dlm``: This release adds support for excluding specific data (non-boot) volumes from
multi-volume snapshot sets created by snapshot lifecycle policies
* api-change:``ec2``: This release adds support for excluding specific data (non-root) volumes from
multi-volume snapshot sets created from instances.
- from version 1.27.48
* api-change:``cloudwatch``: Update cloudwatch client to latest version
* api-change:``location``: Amazon Location Service now allows circular geofences in
BatchPutGeofence, PutGeofence, and GetGeofence APIs.
* api-change:``sagemaker-a2i-runtime``: Fix bug with parsing ISO-8601 CreationTime in Java SDK in
DescribeHumanLoop
* api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying
multiple alternate EC2 instance types to make tuning jobs more robust when the preferred instance
type is not available due to insufficient capacity.
- from version 1.27.47
* api-change:``glue``: Add an option to run non-urgent or non-time sensitive Glue Jobs on spare
capacity
* api-change:``identitystore``: Documentation updates to reflect service rename - AWS IAM Identity
Center (successor to AWS Single Sign-On)
* api-change:``iotwireless``: AWS IoT Wireless release support for sidewalk data reliability.
* api-change:``pinpoint``: Adds support for Advance Quiet Time in Journeys. Adds
RefreshOnSegmentUpdate and WaitForQuietTime to JourneyResponse.
* api-change:``quicksight``: A series of documentation updates to the QuickSight API reference.
* api-change:``sso-admin``: Documentation updates to reflect service rename - AWS IAM Identity
Center (successor to AWS Single Sign-On)
* api-change:``sso-oidc``: Documentation updates to reflect service rename - AWS IAM Identity
Center (successor to AWS Single Sign-On)
* api-change:``sso``: Documentation updates to reflect service rename - AWS IAM Identity Center
(successor to AWS Single Sign-On)
- from version 1.27.46
* enhancement:Lambda: Add support for Trace ID in Lambda environments
* api-change:``chime-sdk-meetings``: Adds support for Tags on Amazon Chime SDK WebRTC sessions
* api-change:``config``: Add resourceType enums for Athena, GlobalAccelerator, Detective and EC2
types
* api-change:``dms``: Documentation updates for Database Migration Service (DMS).
* api-change:``iot``: The release is to support attach a provisioning template to CACert for JITP
function, Customer now doesn't have to hardcode a roleArn and templateBody during register a
CACert to enable JITP.
- Update to 1.27.45
* api-change:``cognito-idp``: Add a new exception type, ForbiddenException, that is returned when
request is not allowed
* api-change:``wafv2``: You can now associate an AWS WAF web ACL with an Amazon Cognito user pool.
- from version 1.27.44
* api-change:``license-manager-user-subscriptions``: This release supports user based subscription
for Microsoft Visual Studio Professional and Enterprise on EC2.
* api-change:``personalize``: This release adds support for incremental bulk ingestion for the
Personalize CreateDatasetImportJob API.
- from version 1.27.43
* api-change:``config``: Documentation update for PutConfigRule and PutOrganizationConfigRule
* api-change:``workspaces``: This release introduces ModifySamlProperties, a new API that allows
control of SAML properties associated with a WorkSpaces directory. The DescribeWorkspaceDirectories
API will now additionally return SAML properties in its responses.
- from version 1.27.42
* bugfix:TraceId: Rollback bugfix for obeying _X_AMZN_TRACE_ID env var
- from version 1.27.41
* bugfix:Config: Obey _X_AMZN_TRACE_ID environment variable instead of _X_AMZ_TRACE_ID
* api-change:``ec2``: Documentation updates for Amazon EC2.
* api-change:``fsx``: Documentation updates for Amazon FSx
* api-change:``shield``: AWS Shield Advanced now supports filtering for ListProtections and
ListProtectionGroups.
- from version 1.27.40
* api-change:``ec2``: Documentation updates for VM Import/Export.
* api-change:``es``: This release adds support for gp3 EBS (Elastic Block Store) storage.
* api-change:``lookoutvision``: This release introduces support for image segmentation models and
updates CPU accelerator options for models hosted on edge devices.
* api-change:``opensearch``: This release adds support for gp3 EBS (Elastic Block Store) storage.
- from version 1.27.39
* api-change:``auditmanager``: This release adds an exceeded quota exception to several APIs. We
added a ServiceQuotaExceededException for the following operations: CreateAssessment,
CreateControl, CreateAssessmentFramework, and UpdateAssessmentStatus.
* api-change:``chime``: Chime VoiceConnector will now support ValidateE911Address which will allow
customers to prevalidate their addresses included in their SIP invites for emergency calling
* api-change:``config``: This release adds ListConformancePackComplianceScores API to support the
new compliance score feature, which provides a percentage of the number of compliant rule-resource
combinations in a conformance pack compared to the number of total possible rule-resource
combinations in the conformance pack.
* api-change:``globalaccelerator``: Global Accelerator now supports dual-stack accelerators,
enabling support for IPv4 and IPv6 traffic.
* api-change:``marketplace-catalog``: The SDK for the StartChangeSet API will now automatically set
and use an idempotency token in the ClientRequestToken request parameter if the customer does not
provide it.
* api-change:``polly``: Amazon Polly adds new English and Hindi voice - Kajal. Kajal is available
as Neural voice only.
* api-change:``ssm``: Adding doc updates for OpsCenter support in Service Setting actions.
* api-change:``workspaces``: Added CreateWorkspaceImage API to create a new WorkSpace image from an
existing WorkSpace.
- from version 1.27.38
* api-change:``appsync``: Adds support for a new API to evaluate mapping templates with mock data,
allowing you to remotely unit test your AppSync resolvers and functions.
* api-change:``detective``: Added the ability to get data source package information for the
behavior graph. Graph administrators can now start (or stop) optional datasources on the behavior
graph.
* api-change:``guardduty``: Amazon GuardDuty introduces a new Malware Protection feature that
triggers malware scan on selected EC2 instance resources, after the service detects a potentially
malicious activity.
* api-change:``lookoutvision``: This release introduces support for the automatic scaling of
inference units used by Amazon Lookout for Vision models.
* api-change:``macie2``: This release adds support for retrieving (revealing) sample occurrences of
sensitive data that Amazon Macie detects and reports in findings.
* api-change:``rds``: Adds support for using RDS Proxies with RDS for MariaDB databases.
* api-change:``rekognition``: This release introduces support for the automatic scaling of
inference units used by Amazon Rekognition Custom Labels models.
* api-change:``securityhub``: Documentation updates for AWS Security Hub
* api-change:``transfer``: AWS Transfer Family now supports Applicability Statement 2 (AS2), a
network protocol used for the secure and reliable transfer of critical Business-to-Business (B2B)
data over the public internet using HTTP/HTTPS as the transport mechanism.
- Update to 1.27.37
* api-change:``autoscaling``: Documentation update for Amazon EC2 Auto Scaling.
- from version 1.27.36
* api-change:``account``: This release enables customers to manage the primary contact information
for their AWS accounts. For more information, see
https://docs.aws.amazon.com/accounts/latest/reference/API_Operations.html
* api-change:``ec2``: Added support for EC2 M1 Mac instances. For more information, please visit
aws.amazon.com/mac.
* api-change:``iotdeviceadvisor``: Added new service feature (Early access only) - Long Duration
Test, where customers can test the IoT device to observe how it behaves when the device is in
operation for longer period.
* api-change:``medialive``: Link devices now support remote rebooting. Link devices now support
maintenance windows. Maintenance windows allow a Link device to install software updates without
stopping the MediaLive channel. The channel will experience a brief loss of input from the device
while updates are installed.
* api-change:``rds``: This release adds the "ModifyActivityStream" API with support for audit
policy state locking and unlocking.
* api-change:``transcribe``: Remove unsupported language codes for StartTranscriptionJob and update
VocabularyFileUri for UpdateMedicalVocabulary
- from version 1.27.35
* api-change:``athena``: This feature allows customers to retrieve runtime statistics for completed
queries
* api-change:``cloudwatch``: Update cloudwatch client to latest version
* api-change:``dms``: Documentation updates for Database Migration Service (DMS).
* api-change:``docdb``: Enable copy-on-write restore type
* api-change:``ec2-instance-connect``: This release includes a new exception type
"EC2InstanceUnavailableException" for SendSSHPublicKey and SendSerialConsoleSSHPublicKey APIs.
* api-change:``frauddetector``: The release introduces Account Takeover Insights (ATI) model. The
ATI model detects fraud relating to account takeover. This release also adds support for new
variable types: ARE_CREDENTIALS_VALID and SESSION_ID and adds new structures to Model Version APIs.
* api-change:``iotsitewise``: Added asynchronous API to ingest bulk historical and current data
into IoT SiteWise.
* api-change:``kendra``: Amazon Kendra now provides Oauth2 support for SharePoint Online. For more
information, see https://docs.aws.amazon.com/kendra/latest/dg/data-source-sharepoint.html
* api-change:``network-firewall``: Network Firewall now supports referencing dynamic IP sets from
stateful rule groups, for IP sets stored in Amazon VPC prefix lists.
* api-change:``rds``: Adds support for creating an RDS Proxy for an RDS for MariaDB database.
- from version 1.27.34
* api-change:``acm-pca``: AWS Certificate Manager (ACM) Private Certificate Authority (PCA)
documentation updates
* api-change:``iot``: GA release the ability to enable/disable IoT Fleet Indexing for Device
Defender and Named Shadow information, and search them through IoT Fleet Indexing APIs. This
includes Named Shadow Selection as a part of the UpdateIndexingConfiguration API.
- from version 1.27.33
* api-change:``devops-guru``: Added new APIs for log anomaly detection feature.
* api-change:``glue``: Documentation updates for AWS Glue Job Timeout and Autoscaling
* api-change:``sagemaker-edge``: Amazon SageMaker Edge Manager provides lightweight model
deployment feature to deploy machine learning models on requested devices.
* api-change:``sagemaker``: Fixed an issue with cross account QueryLineage
* api-change:``workspaces``: Increased the character limit of the login message from 850 to 2000
characters.
- from version 1.27.32
* api-change:``discovery``: Add AWS Agentless Collector details to the GetDiscoverySummary API
response
* api-change:``ec2``: Documentation updates for Amazon EC2.
* api-change:``elasticache``: Adding AutoMinorVersionUpgrade in the DescribeReplicationGroups API
* api-change:``kms``: Added support for the SM2 KeySpec in China Partition Regions
* api-change:``mediapackage``: This release adds "IncludeIframeOnlyStream" for Dash endpoints and
increases the number of supported video and audio encryption presets for Speke v2
* api-change:``sagemaker``: Amazon SageMaker Edge Manager provides lightweight model deployment
feature to deploy machine learning models on requested devices.
* api-change:``sso-admin``: AWS SSO now supports attaching customer managed policies and a
permissions boundary to your permission sets. This release adds new API operations to manage and
view the customer managed policies and the permissions boundary for a given permission set.
- from version 1.27.31
* api-change:``datasync``: Documentation updates for AWS DataSync regarding configuring Amazon FSx
for ONTAP location security groups and SMB user permissions.
* api-change:``drs``: Changed existing APIs to allow choosing a dynamic volume type for replicating
volumes, to reduce costs for customers.
* api-change:``evidently``: This release adds support for the new segmentation feature.
* api-change:``wafv2``: This SDK release provide customers ability to add sensitivity level for WAF
SQLI Match Statements.
- Update to 1.27.30
* api-change:``athena``: This release updates data types that contain either QueryExecutionId,
NamedQueryId or ExpectedBucketOwner. Ids must be between 1 and 128 characters and contain only
non-whitespace characters. ExpectedBucketOwner must be 12-digit string.
* api-change:``codeartifact``: This release introduces Package Origin Controls, a mechanism used to
counteract Dependency Confusion attacks. Adds two new APIs, PutPackageOriginConfiguration and
DescribePackage, and updates the ListPackage, DescribePackageVersion and ListPackageVersion APIs in
support of the feature.
* api-change:``config``: Update ResourceType enum with values for Route53Resolver, Batch, DMS,
Workspaces, Stepfunctions, SageMaker, ElasticLoadBalancingV2, MSK types
* api-change:``ec2``: This release adds flow logs for Transit Gateway to allow customers to gain
deeper visibility and insights into network traffic through their Transit Gateways.
* api-change:``fms``: Adds support for strict ordering in stateful rule groups in Network Firewall
policies.
* api-change:``glue``: This release adds an additional worker type for Glue Streaming jobs.
* api-change:``inspector2``: This release adds support for Inspector V2 scan configurations through
the get and update configuration APIs. Currently this allows configuring ECR automated re-scan
duration to lifetime or 180 days or 30 days.
* api-change:``kendra``: This release adds AccessControlConfigurations which allow you to redefine
your document level access control without the need for content re-indexing.
* api-change:``nimble``: Amazon Nimble Studio adds support for IAM-based access to AWS resources
for Nimble Studio components and custom studio components. Studio Component scripts use these roles
on Nimble Studio workstation to mount filesystems, access S3 buckets, or other configured resources
in the Studio's AWS account
* api-change:``outposts``: This release adds the ShipmentInformation and AssetInformationList
fields to the GetOrder API response.
* api-change:``sagemaker``: This release adds support for G5, P4d, and C6i instance types in Amazon
SageMaker Inference and increases the number of hyperparameters that can be searched from 20 to 30
in Amazon SageMaker Automatic Model Tuning
- from version 1.27.29
* api-change:``appconfig``: Adding Create, Get, Update, Delete, and List APIs for new two new
resources: Extensions and ExtensionAssociations.
- from version 1.27.28
* api-change:``networkmanager``: This release adds general availability API support for AWS Cloud
WAN.
- from version 1.27.27
* api-change:``ec2``: Build, manage, and monitor a unified global network that connects resources
running across your cloud and on-premises environments using the AWS Cloud WAN APIs.
* api-change:``redshift-serverless``: Removed prerelease language for GA launch.
* api-change:``redshift``: This release adds a new --snapshot-arn field for
describe-cluster-snapshots, describe-node-configuration-options, restore-from-cluster-snapshot,
authorize-snapshot-acsess, and revoke-snapshot-acsess APIs. It allows customers to give a Redshift
snapshot ARN or a Redshift Serverless ARN as input.
- from version 1.27.26
* api-change:``backup``: This release adds support for authentication using IAM user identity
instead of passed IAM role, identified by excluding the IamRoleArn field in the StartRestoreJob
API. This feature applies to only resource clients with a destructive restore nature (e.g. SAP
HANA).
- from version 1.27.25
* api-change:``chime-sdk-meetings``: Adds support for AppKeys and TenantIds in Amazon Chime SDK
WebRTC sessions
* api-change:``dms``: New api to migrate event subscriptions to event bridge rules
* api-change:``iot``: This release adds support to register a CA certificate without having to
provide a verification certificate. This also allows multiple AWS accounts to register the same CA
in the same region.
* api-change:``iotwireless``: Adds 5 APIs: PutPositionConfiguration, GetPositionConfiguration,
ListPositionConfigurations, UpdatePosition, GetPosition for the new Positioning Service feature
which enables customers to configure solvers to calculate position of LoRaWAN devices, or specify
position of LoRaWAN devices & gateways.
* api-change:``sagemaker``: Heterogeneous clusters: the ability to launch training jobs with
multiple instance types. This enables running component of the training job on the instance type
that is most suitable for it. e.g. doing data processing and augmentation on CPU instances and
neural network training on GPU instances
- from version 1.27.24
* api-change:``cloudformation``: My AWS Service (placeholder) - Add a new feature Account-level
Targeting for StackSet operation
* api-change:``synthetics``: This release introduces Group feature, which enables users to group
cross-region canaries.
- from version 1.27.23
* api-change:``config``: Updating documentation service limits
* api-change:``lexv2-models``: Update lexv2-models client to latest version
* api-change:``quicksight``: This release allows customers to programmatically create QuickSight
accounts with Enterprise and Enterprise + Q editions. It also releases allowlisting domains for
embedding QuickSight dashboards at runtime through the embedding APIs.
* api-change:``rds``: Adds waiters support for DBCluster.
* api-change:``rolesanywhere``: IAM Roles Anywhere allows your workloads such as servers,
containers, and applications to obtain temporary AWS credentials and use the same IAM roles and
policies that you have configured for your AWS workloads to access AWS resources.
* api-change:``ssm-incidents``: Adds support for tagging incident-record on creation by providing
incident tags in the template within a response-plan.
- from version 1.27.22
* api-change:``dms``: Added new features for AWS DMS version 3.4.7 that includes new endpoint
settings for S3, OpenSearch, Postgres, SQLServer and Oracle.
* api-change:``rds``: Adds support for additional retention periods to Performance Insights.
- from version 1.27.21
* api-change:``athena``: This feature introduces the API support for Athena's parameterized query
and BatchGetPreparedStatement API.
* api-change:``customer-profiles``: This release adds the optional
MinAllowedConfidenceScoreForMerging parameter to the CreateDomain, UpdateDomain, and
GetAutoMergingPreview APIs in Customer Profiles. This parameter is used as a threshold to influence
the profile auto-merging step of the Identity Resolution process.
* api-change:``emr``: Update emr client to latest version
* api-change:``glue``: This release adds tag as an input of CreateDatabase
* api-change:``kendra``: Amazon Kendra now provides a data source connector for alfresco
* api-change:``mwaa``: Documentation updates for Amazon Managed Workflows for Apache Airflow.
* api-change:``pricing``: Documentation update for GetProducts Response.
* api-change:``wellarchitected``: Added support for UpdateGlobalSettings API. Added status filter
to ListWorkloadShares and ListLensShares.
* api-change:``workmail``: This release adds support for managing user availability configurations
in Amazon WorkMail.
- Update to 1.27.20
* api-change:``appstream``: Includes support for StreamingExperienceSettings in CreateStack and
UpdateStack APIs
* api-change:``elbv2``: Update elbv2 client to latest version
* api-change:``emr``: Update emr client to latest version
* api-change:``medialive``: This release adds support for automatic renewal of MediaLive
reservations at the end of each reservation term. Automatic renewal is optional. This release also
adds support for labelling accessibility-focused audio and caption tracks in HLS outputs.
* api-change:``redshift-serverless``: Add new API operations for Amazon Redshift Serverless, a new
way of using Amazon Redshift without needing to manually manage provisioned clusters. The new
operations let you interact with Redshift Serverless resources, such as create snapshots, list VPC
endpoints, delete resource policies, and more.
* api-change:``sagemaker``: This release adds: UpdateFeatureGroup, UpdateFeatureMetadata,
DescribeFeatureMetadata APIs; FeatureMetadata type in Search API; LastModifiedTime,
LastUpdateStatus, OnlineStoreTotalSizeBytes in DescribeFeatureGroup API.
* api-change:``translate``: Added ListLanguages API which can be used to list the languages
supported by Translate.
- from version 1.27.19
* api-change:``datasync``: AWS DataSync now supports Amazon FSx for NetApp ONTAP locations.
* api-change:``ec2``: This release adds a new spread placement group to EC2 Placement Groups: host
level spread, which spread instances between physical hosts, available to Outpost customers only.
CreatePlacementGroup and DescribePlacementGroups APIs were updated with a new parameter:
SpreadLevel to support this feature.
* api-change:``finspace-data``: Release new API GetExternalDataViewAccessDetails
* api-change:``polly``: Add 4 new neural voices - Pedro (es-US), Liam (fr-CA), Daniel (de-DE) and
Arthur (en-GB).
- from version 1.27.18
* api-change:``iot``: This release ease the restriction for the input of tag value to align with
AWS standard, now instead of min length 1, we change it to min length 0.
- from version 1.27.17
* api-change:``glue``: This release enables the new ListCrawls API for viewing the AWS Glue Crawler
run history.
* api-change:``rds-data``: Documentation updates for RDS Data API
- from version 1.27.16
* api-change:``lookoutequipment``: This release adds visualizations to the scheduled inference
results. Users will be able to see interference results, including diagnostic results from their
running inference schedulers.
* api-change:``mediaconvert``: AWS Elemental MediaConvert SDK has released support for automatic
DolbyVision metadata generation when converting HDR10 to DolbyVision.
* api-change:``mgn``: New and modified APIs for the Post-Migration Framework
* api-change:``migration-hub-refactor-spaces``: This release adds the new API UpdateRoute that
allows route to be updated to ACTIVE/INACTIVE state. In addition, CreateRoute API will now allow
users to create route in ACTIVE/INACTIVE state.
* api-change:``sagemaker``: SageMaker Ground Truth now supports Virtual Private Cloud. Customers
can launch labeling jobs and access to their private workforce in VPC mode.
- from version 1.27.15
* api-change:``apigateway``: Documentation updates for Amazon API Gateway
* api-change:``pricing``: This release introduces 1 update to the GetProducts API. The serviceCode
attribute is now required when you use the GetProductsRequest.
* api-change:``transfer``: Until today, the service supported only RSA host keys and user keys. Now
with this launch, Transfer Family has expanded the support for ECDSA and ED25519 host keys and user
keys, enabling customers to support a broader set of clients by choosing RSA, ECDSA, and ED25519
host and user keys.
- from version 1.27.14
* api-change:``ec2``: This release adds support for Private IP VPNs, a new feature allowing S2S VPN
connections to use private ip addresses as the tunnel outside ip address over Direct Connect as
transport.
* api-change:``ecs``: Amazon ECS UpdateService now supports the following parameters:
PlacementStrategies, PlacementConstraints and CapacityProviderStrategy.
* api-change:``wellarchitected``: Adds support for lens tagging, Adds support for multiple
helpful-resource urls and multiple improvement-plan urls.
- from version 1.27.13
* api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD
settings
* api-change:``kafka``: Documentation updates to use Az Id during cluster creation.
* api-change:``outposts``: This release adds the AssetLocation structure to the ListAssets
response. AssetLocation includes the RackElevation for an Asset.
- from version 1.27.12
* api-change:``connect``: This release updates these APIs: UpdateInstanceAttribute,
DescribeInstanceAttribute and ListInstanceAttributes. You can use it to programmatically
enable/disable High volume outbound communications using attribute type HIGH_VOLUME_OUTBOUND on the
specified Amazon Connect instance.
* api-change:``connectcampaigns``: Added Amazon Connect high volume outbound communications SDK.
* api-change:``dynamodb``: Doc only update for DynamoDB service
* api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
- from version 1.27.11
* api-change:``redshift-data``: This release adds a new --workgroup-name field to operations that
connect to an endpoint. Customers can now execute queries against their serverless workgroups.
* api-change:``secretsmanager``: Documentation updates for Secrets Manager
* api-change:``securityhub``: Added Threats field for security findings. Added new resource details
for ECS Container, ECS Task, RDS SecurityGroup, Kinesis Stream, EC2 TransitGateway, EFS
AccessPoint, CloudFormation Stack, CloudWatch Alarm, VPC Peering Connection and WAF Rules
- from version 1.27.10
* api-change:``finspace-data``: This release adds a new set of APIs, GetPermissionGroup,
DisassociateUserFromPermissionGroup, AssociateUserToPermissionGroup, ListPermissionGroupsByUser,
ListUsersByPermissionGroup.
* api-change:``guardduty``: Adds finding fields available from GuardDuty Console. Adds FreeTrial
related operations. Deprecates the use of various APIs related to Master Accounts and Replace them
with Administrator Accounts.
* api-change:``servicecatalog-appregistry``: This release adds a new API
ListAttributeGroupsForApplication that returns associated attribute groups of an application. In
addition, the UpdateApplication and UpdateAttributeGroup APIs will not allow users to update the
'Name' attribute.
* api-change:``workspaces``: Added new field "reason" to OperationNotSupportedException. Receiving
this exception in the DeregisterWorkspaceDirectory API will now return a reason giving more context
on the failure.
- from version 1.27.9
* api-change:``budgets``: Add a budgets ThrottlingException. Update the CostFilters value pattern.
* api-change:``lookoutmetrics``: Adding filters to Alert and adding new UpdateAlert API.
* api-change:``mediaconvert``: AWS Elemental MediaConvert SDK has added support for rules that
constrain Automatic-ABR rendition selection when generating ABR package ladders.
- from version 1.27.8
* api-change:``outposts``: This release adds API operations AWS uses to install Outpost servers.
- from version 1.27.7
* api-change:``frauddetector``: Documentation updates for Amazon Fraud Detector (AWSHawksNest)
- from version 1.27.6
* api-change:``chime-sdk-meetings``: Adds support for live transcription in AWS GovCloud (US)
Regions.
- from version 1.27.5
* api-change:``dms``: This release adds DMS Fleet Advisor APIs and exposes functionality for DMS
Fleet Advisor. It adds functionality to create and modify fleet advisor instances, and to collect
and analyze information about the local data infrastructure.
* api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
* api-change:``m2``: AWS Mainframe Modernization service is a managed mainframe service and set of
tools for planning, migrating, modernizing, and running mainframe workloads on AWS
* api-change:``neptune``: This release adds support for Neptune to be configured as a global
database, with a primary DB cluster in one region, and up to five secondary DB clusters in other
regions.
* api-change:``redshift``: Adds new API GetClusterCredentialsWithIAM to return temporary
credentials.
- from version 1.27.4
* api-change:``auditmanager``: This release introduces 2 updates to the Audit Manager API. The
roleType and roleArn attributes are now required when you use the CreateAssessment or
UpdateAssessment operation. We also added a throttling exception to the RegisterAccount API
operation.
* api-change:``ce``: Added two new APIs to support cost allocation tags operations:
ListCostAllocationTags, UpdateCostAllocationTagsStatus.
- from version 1.27.3
* api-change:``chime-sdk-messaging``: This release adds support for searching channels by members
via the SearchChannels API, removes required restrictions for Name and Mode in UpdateChannel API
and enhances CreateChannel API by exposing member and moderator list as well as channel id as
optional parameters.
* api-change:``connect``: This release adds a new API, GetCurrentUserData, which returns real-time
details about users' current activity.
- Update to 1.27.2
* api-change:``codeartifact``: Documentation updates for CodeArtifact
* api-change:``voice-id``: Added a new attribute ServerSideEncryptionUpdateDetails to Domain and
DomainSummary.
* api-change:``proton``: Add new "Components" API to enable users to Create, Delete and Update AWS
Proton components.
* api-change:``connect``: This release adds the following features: 1) New APIs to manage (create,
list, update) task template resources, 2) Updates to startTaskContact API to support task
templates, and 3) new TransferContact API to programmatically transfer in-progress tasks via a
contact flow.
* api-change:``application-insights``: Provide Account Level onboarding support through CFN/CLI
* api-change:``kendra``: Amazon Kendra now provides a data source connector for GitHub. For more
information, see https://docs.aws.amazon.com/kendra/latest/dg/data-source-github.html
- from version 1.27.1
* api-change:``backup-gateway``: Adds GetGateway and UpdateGatewaySoftwareNow API and adds
hypervisor name to UpdateHypervisor API
* api-change:``forecast``: Added Format field to Import and Export APIs in Amazon Forecast. Added
TimeSeriesSelector to Create Forecast API.
* api-change:``chime-sdk-meetings``: Adds support for centrally controlling each participant's
ability to send and receive audio, video and screen share within a WebRTC session. Attendee
capabilities can be specified when the attendee is created and updated during the session with the
new BatchUpdateAttendeeCapabilitiesExcept API.
* api-change:``route53``: Add new APIs to support Route 53 IP Based Routing
- from version 1.27.0
* api-change:``iotsitewise``: This release adds the following new optional field to the IoT
SiteWise asset resource: assetDescription.
* api-change:``lookoutmetrics``: Adding backtest mode to detectors using the Cloudwatch data source.
* api-change:``transcribe``: Amazon Transcribe now supports automatic language identification for
multi-lingual audio in batch mode.
* feature:Python: Dropped support for Python 3.6
* api-change:``cognito-idp``: Amazon Cognito now supports IP Address propagation for all
unauthenticated APIs (e.g. SignUp, ForgotPassword).
* api-change:``drs``: Changed existing APIs and added new APIs to accommodate using multiple AWS
accounts with AWS Elastic Disaster Recovery.
* api-change:``sagemaker``: Amazon SageMaker Notebook Instances now support Jupyter Lab 3.
- from version 1.26.10
* api-change:``sagemaker``: Amazon SageMaker Notebook Instances now allows configuration of
Instance Metadata Service version and Amazon SageMaker Studio now supports G5 instance types.
* api-change:``appflow``: Adding the following features/changes: Parquet output that preserves
typing from the source connector, Failed executions threshold before deactivation for scheduled
flows, increasing max size of access and refresh token from 2048 to 4096
* api-change:``datasync``: AWS DataSync now supports TLS encryption in transit, file system
policies and access points for EFS locations.
* api-change:``emr-serverless``: This release adds support for Amazon EMR Serverless, a serverless
runtime environment that simplifies running analytics applications using the latest open source
frameworks such as Apache Spark and Apache Hive.
- from version 1.26.9
* api-change:``lightsail``: Amazon Lightsail now supports the ability to configure a Lightsail
Container Service to pull images from Amazon ECR private repositories in your account.
* api-change:``emr-serverless``: This release adds support for Amazon EMR Serverless, a serverless
runtime environment that simplifies running analytics applications using the latest open source
frameworks such as Apache Spark and Apache Hive.
* api-change:``ec2``: C7g instances, powered by the latest generation AWS Graviton3 processors,
provide the best price performance in Amazon EC2 for compute-intensive workloads.
* api-change:``forecast``: Introduced a new field in Auto Predictor as Time Alignment Boundary. It
helps in aligning the timestamps generated during Forecast exports
- from version 1.26.8
* api-change:``secretsmanager``: Documentation updates for Secrets Manager
* api-change:``fsx``: This release adds root squash support to FSx for Lustre to restrict root
level access from clients by mapping root users to a less-privileged user/group with limited
permissions.
* api-change:``lookoutmetrics``: Adding AthenaSourceConfig for MetricSet APIs to support Athena as
a data source.
* api-change:``voice-id``: VoiceID will now automatically expire Speakers if they haven't been
accessed for Enrollment, Re-enrollment or Successful Auth for three years. The Speaker APIs now
return a "LastAccessedAt" time for Speakers, and the EvaluateSession API returns "SPEAKER_EXPIRED"
Auth Decision for EXPIRED Speakers.
* api-change:``cloudformation``: Add a new parameter statusReason to DescribeStackSetOperation
output for additional details
* api-change:``apigateway``: Documentation updates for Amazon API Gateway
* api-change:``apprunner``: Documentation-only update added for CodeConfiguration.
* api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for manually selecting features
from the input dataset using the CreateAutoMLJob API.
- from version 1.26.7
* api-change:``mediaconvert``: AWS Elemental MediaConvert SDK has added support for rules that
constrain Automatic-ABR rendition selection when generating ABR package ladders.
* api-change:``cognito-idp``: Amazon Cognito now supports requiring attribute verification (ex.
email and phone number) before update.
* api-change:``networkmanager``: This release adds Multi Account API support for a TGW Global
Network, to enable and disable AWSServiceAccess with AwsOrganizations for Network Manager service
and dependency CloudFormation StackSets service.
* api-change:``ivschat``: Doc-only update. For MessageReviewHandler structure, added timeout period
in the description of the fallbackResult field
* api-change:``ec2``: Stop Protection feature enables customers to protect their instances from
accidental stop actions.
- from version 1.26.6
* api-change:``elasticache``: Added support for encryption in transit for Memcached clusters.
Customers can now launch Memcached cluster with encryption in transit enabled when using Memcached
version 1.6.12 or later.
* api-change:``forecast``: New APIs for Monitor that help you understand how your predictors
perform over time.
* api-change:``personalize``: Adding modelMetrics as part of DescribeRecommender API response for
Personalize.
- from version 1.26.5
* api-change:``comprehend``: Comprehend releases 14 new entity types for DetectPiiEntities and
ContainsPiiEntities APIs.
* api-change:``logs``: Doc-only update to publish the new valid values for log retention
- python-configobj
-
- Add CVE-2023-26112.patch (bsc#1210070)
- python3-ec2metadata
-
- Update to version 5.0.0 (bsc#1214215)
+ Remove the --use-token command line option. Aws is deprecating access
to instance metadata without authentication token. Ability to access
metadat without token has been removed
+ Support access to the metadata server over IPv6. If the customer
enables the IPv6 endpoint for an instance it will be preferred over the
IPv4 endpoint
- python-libxml2-python
-
- Security update:
* [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
buffer overflow
- Added file libxml2-CVE-2023-39615.patch
- Security update:
* [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
isn't deterministic
- Added patch libxml2-CVE-2023-29469.patch
* [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
xmlSchemaFixupComplexType
- Added patch libxml2-CVE-2023-28484-1.patch
- Added patch libxml2-CVE-2023-28484-2.patch
- Fix changelog entries in both .changes files.
- Apply al patches correctly for libxml2 and python-libxml2.
- Add W3C conformance tests to the testsuite (bsc#1204585):
* Added file xmlts20080827.tar.gz
- python-s3transfer
-
- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Update in SLE-15 (bsc#1204537, jsc#PED-2333)
- Update to 0.6.0
* feature:Python: Dropped support for Python 3.6
- from version 0.5.2
* enhancement:``s3``: Added support for flexible checksums
when uploading or downloading objects.
- from version 0.5.1
* enhancement:Python: Officially add Python 3.10 support
- Drop unused python-mock dependency from BuildRequires
- Refresh patches for new version
+ no-bundled-packages.patch
- salt
-
- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
* 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
* fix-some-issues-detected-in-salt-support-cli-module-.patch
* tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
* make-master_tops-compatible-with-salt-3000-and-older.patch
- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
* define-__virtualname__-for-transactional_update-modu.patch
- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
* avoid-conflicts-with-dependencies-versions-bsc-12116.patch
- Update to Salt release version 3006.0 (jsc#PED-4360)
* See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata>=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
* 3005.1-implement-zypper-removeptf-573.patch
* control-the-collection-of-lvm-grains-via-config.patch
* fix-version-detection-and-avoid-building-and-testing.patch
* make-sure-the-file-client-is-destroyed-upon-used.patch
* skip-package-names-without-colon-bsc-1208691-578.patch
* use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
* activate-all-beacons-sources-config-pillar-grains.patch
* add-custom-suse-capabilities-as-grains.patch
* add-environment-variable-to-know-if-yum-is-invoked-f.patch
* add-migrated-state-and-gpg-key-management-functions-.patch
* add-publish_batch-to-clearfuncs-exposed-methods.patch
* add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
* add-sleep-on-exception-handling-on-minion-connection.patch
* add-standalone-configuration-file-for-enabling-packa.patch
* add-support-for-gpgautoimport-539.patch
* allow-vendor-change-option-with-zypper.patch
* async-batch-implementation.patch
* avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
* bsc-1176024-fix-file-directory-user-and-group-owners.patch
* change-the-delimeters-to-prevent-possible-tracebacks.patch
* debian-info_installed-compatibility-50453.patch
* dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
* do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
* don-t-use-shell-sbin-nologin-in-requisites.patch
* drop-serial-from-event.unpack-in-cli.batch_async.patch
* early-feature-support-config.patch
* enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
* enhance-openscap-module-add-xccdf_eval-call-386.patch
* fix-bsc-1065792.patch
* fix-for-suse-expanded-support-detection.patch
* fix-issue-2068-test.patch
* fix-missing-minion-returns-in-batch-mode-360.patch
* fix-ownership-of-salt-thin-directory-when-using-the-.patch
* fix-regression-with-depending-client.ssh-on-psutil-b.patch
* fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
* fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
* fix-the-regression-for-yumnotify-plugin-456.patch
* fix-traceback.print_exc-calls-for-test_pip_state-432.patch
* fixes-for-python-3.10-502.patch
* include-aliases-in-the-fqdns-grains.patch
* info_installed-works-without-status-attr-now.patch
* let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
* make-aptpkg.list_repos-compatible-on-enabled-disable.patch
* make-setup.py-script-to-not-require-setuptools-9.1.patch
* pass-the-context-to-pillar-ext-modules.patch
* prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
* prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
* prevent-shell-injection-via-pre_flight_script_args-4.patch
* read-repo-info-without-using-interpolation-bsc-11356.patch
* restore-default-behaviour-of-pkg-list-return.patch
* return-the-expected-powerpc-os-arch-bsc-1117995.patch
* revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
* run-salt-api-as-user-salt-bsc-1064520.patch
* run-salt-master-as-dedicated-salt-user.patch
* save-log-to-logfile-with-docker.build.patch
* switch-firewalld-state-to-use-change_interface.patch
* temporary-fix-extend-the-whitelist-of-allowed-comman.patch
* update-target-fix-for-salt-ssh-to-process-targets-li.patch
* use-adler32-algorithm-to-compute-string-checksums.patch
* use-salt-bundle-in-dockermod.patch
* x509-fixes-111.patch
* zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
* 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
* 3003.3-postgresql-json-support-in-pillar-423.patch
* add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
* add-missing-ansible-module-functions-to-whitelist-in.patch
* add-rpm_vercmp-python-library-for-version-comparison.patch
* add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
* adds-explicit-type-cast-for-port.patch
* align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
* backport-syndic-auth-fixes.patch
* batch.py-avoid-exception-when-minion-does-not-respon.patch
* check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
* clarify-pkg.installed-pkg_verify-documentation.patch
* detect-module.run-syntax.patch
* do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
* enhance-logging-when-inotify-beacon-is-missing-pyino.patch
* fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
* fix-crash-when-calling-manage.not_alive-runners.patch
* fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
* fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
* fix-for-cve-2022-22967-bsc-1200566.patch
* fix-inspector-module-export-function-bsc-1097531-481.patch
* fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
* fix-issues-with-salt-ssh-s-extra-filerefs.patch
* fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
* fix-multiple-security-issues-bsc-1197417.patch
* fix-salt-call-event.send-call-with-grains-and-pillar.patch
* fix-salt.states.file.managed-for-follow_symlinks-tru.patch
* fix-state.apply-in-test-mode-with-file-state-module-.patch
* fix-test_ipc-unit-tests.patch
* fix-the-regression-in-schedule-module-releasded-in-3.patch
* fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
* fixes-56144-to-enable-hotadd-profile-support.patch
* fopen-workaround-bad-buffering-for-binary-mode-563.patch
* force-zyppnotify-to-prefer-packages.db-than-packages.patch
* ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
* ignore-extend-declarations-from-excluded-sls-files.patch
* ignore-non-utf8-characters-while-reading-files-with-.patch
* implementation-of-held-unheld-functions-for-state-pk.patch
* implementation-of-suse_ip-execution-module-bsc-10999.patch
* improvements-on-ansiblegate-module-354.patch
* include-stdout-in-error-message-for-zypperpkg-559.patch
* make-pass-renderer-configurable-other-fixes-532.patch
* make-sure-saltcacheloader-use-correct-fileclient-519.patch
* mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
* normalize-package-names-once-with-pkg.installed-remo.patch
* notify-beacon-for-debian-ubuntu-systems-347.patch
* refactor-and-improvements-for-transactional-updates-.patch
* retry-if-rpm-lock-is-temporarily-unavailable-547.patch
* set-default-target-for-pip-from-venv_pip_target-envi.patch
* state.apply-don-t-check-for-cached-pillar-errors.patch
* state.orchestrate_single-does-not-pass-pillar-none-4.patch
* support-transactional-systems-microos.patch
* wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
* skip-package-names-without-colon-bsc-1208691-578.patch
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
* fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
* 3004-implement-zypper-removeptf-574.patch
- spacewalk-certs-tools
-
- version 4.2.20-1
* Update translations
- spacewalk-client-tools
-
- version 4.2.23-1
* Update translation strings
- python-tornado
-
- Add tornado-Fix-an-open-redirect-in-StaticFileHandler.patch:
Backport from upstream, Fix an open redirect in StaticFileHandler.
Under some configurations the default_filename redirect could be
exploited to redirect to an attacker-controlled site. This change
refuses to redirect to URLs that could be misinterpreted
(CVE-2023-28370 bsc#1211741).
- uyuni-common-libs
-
- version 4.2.10-1
* Allow default component for context manager.
- python
-
- Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.
- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built
- The condition around libnsl-devel BuildRequires is NOT
switching off NIS support on SLE < 15, support for NIS used to
be in the glibc itself. Partial revert of sr#1061583.
- Add PygmentsBridge-trime_doctest_flags.patch to allow build of
the documentation even with the current Sphinx. (SUSE-ONLY
PATCH, DO NOT SEND UPSTREAM!)
- Enable --with-system-ffi for non-standard architectures.
- SLE-12 builds nis.so as well.
- regexp
-
- Build with source/target levels 8
- relaxngDatatype
-
- Build with source/target levels 8
- release-notes-sles
-
- 15.3.20230301 (tracked in bsc#933411)
- Added note about silencing killmode=none (jsc#PED-407)
- Added note about by-id/wwn- change (bsc#1188762)
- Added note about frr (jsc#SLE-13591)
- Added note about ssh-import-id GitHub support (jsc#SLE-20079)
- Added note about adcli --dont-expire-password (jsc#SLE-21224)
- Added note about NVMe-oF in dracut (jsc#SLE-17091)
- Added note about vPMU optimization (jsc#SLE-12687)
- Added note about snapper btrfs snapshot cleanup (jsc#SLE-16031)
- Added note about redis and bindings (jsc#SLE-11036)
- Added note about zram on low-mem devices (jsc#SLE-17630)
- Added note about wsmancli moving to basesystem (jsc#SLE-22844)
- Added note about scap-security-guide (jsc#SLE-20292)
- Added note about libreiserfs removal (jsc#SLE-17723)
- Added note about icu 69.1 (jsc#SLE-17893)
- Added note about blog 2.26 (jsc#SLE-23233)
- Added note about libpwquality-tools (jsc#SLE-23623)
- Added note about DFS share failover (jsc#SLE-20042)
- Added note about git 2.35.3 (jsc#SLE-23332)
- Added note about tcl 8.6.12 (jsc#SLE-21016)
- Added note about Rust developer tools (jsc#SLE-23381)
- Added note about PostgreSQL 14 (jsc#SLE-20675)
- Added note about NodeJS 16 (jsc#SLE-21235)
- Added note about strongSwan namespace support (jsc#SLE-17756)
- Added note about mariadb-galera (jsc#SLE-22242)
- rsync
-
- Drop rsync-fix-external-compression.patch, rsync-iconv-segfault.patch
- Fix --delay-updates never updates after interruption [bsc#1204538]
* Added patch rsync-fix-delay-updates-never-updates-after-interruption.patch
- rsyslog
-
- fix segfaults in modExit() of imklog.c (bsc#1211757)
* add 0001-imklog-fix-invalid-memory-adressing-could-cause-abor.patch
- fix removal of imfile state files (bsc#1213212)
* add 0001-fixing-the-deleteStateOnFileDelete-option.patch
- samba
-
- Move libcluster-samba4.so from samba-libs to samba-client-libs;
(bsc#1213940);
- secure channel faulty since Windows 10/11 update 07/2023;
(bso#15418); (bsc#1213384).
- CVE-2022-2127: lm_resp_len not checked properly in
winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
(bso#15388); (bsc#1213171).
- CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
in cleartext; (bso#15315); (bsc#1209481).
- CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
deleted by unprivileged authenticated users; (bso#15276);
(bsc#1209483).
- CVE-2023-0614: samba: Access controlled AD LDAP attributes can
be discovered; (bso#15270); (bsc#1209485).
- Prevent use after free of messaging_ctdb_fde_ev structs;
(bso#15293); (bsc#1207416).
- 000release-packages:sle-module-basesystem-release
-
n/a
- 000release-packages:sle-module-public-cloud-release
-
n/a
- 000release-packages:sle-module-server-applications-release
-
n/a
- 000product:sle-module-suse-manager-server-release
-
n/a
- 000release-packages:sle-module-web-scripting-release
-
n/a
- slf4j
-
- Add symlink to reload4j -> log4j12 for applications that expect
that name.
- Build with source/target levels 8
- Upgrade to 1.7.36
* Changes in 1.7.36:
+ Correct corrupt "Export-Package" declaration in MANIFEST.MF
in log4j-over-slf4j module
+ Starting with version 1.7.36, slf4j releases will be
reproducible. By reproducible we mean that anyone checking out
the code corresponding to the release version from source code
repository and building that local copy, will obtain an
identical binary to the published binary.
* Changes 1.7.35
+ In this release, the "slf4j-log4j12" artifact automatically
instructs Maven to use the "slf4j-reload4j" artifact instead.
As you might have guessed, the "slf4j-reload4j" binding
delegates log processing to the reload4j logging framework.
+ Fix incorrect version number in the relocation element in
slf4j-log4j12/pom.ml
* Changes in 1.7.34
+ The relocation element in slf4j-log4j12 had incorrect version
number. Version 1.7.34 should not be used.
* Changes in 1.7.33
+ SLF4J now ships with the slf4j-reload4j module delegating to
the reload4j backend.
+ SimpleLogger now prints the thread Id if instructed to do so.
This fixes SLF4J-499.
- Added patch:
* slf4j-reload4j-bundlename.patch
+ fix a typo in source reload4k -> reload4j
- Do not use a separate spec file for sources, since now they
can be built in the same run as the other artifacts
- Removed patch:
* slf4j-reload4j.patch
+ the incompatibility is now handled in reload4j itself
- Fetch sources using source service
- Depend for build on reload4j
- Fix dependencies of the module slf4j-log4j12
- Added patch:
* slf4j-reload4j.patch
+ fix build against reload4j
- Update to upstream version 1.7.32
* In the slf4j-simple module, SimpleLogger now caters for
concurrent access.
- Update to upstream version 1.7.31
* In the jcl-over-slf4j module avoid Object to String conversion.
* In the log4j-over-slf4j module added empty constructors for
ConsoleAppender.
- Don't use %%mvn_artifact, but %%add_maven_depmap for the
sources artifacts, so that they don't suck in half of the xmvn*
stack in order to build
- snakeyaml
-
- Fix --with tests build
- Upgrade to upstream release 1.33
* Fixes
+ bsc#1204173
+ bsc#1203154 (CVE-2022-38752)
* Changes of 1.33
+ Remove some deprecated unused methods
+ Fix #555: Fixed Github actions
+ Fix #553: LoaderOptions.setCodePointLimit() not honored by
loadAll()
+ Fix #554: Always emit numberish strings with quotes
* Changes of 1.32
+ Fix #543: show the configuration in the test
+ Fix #531: provide configuration to fail early
+ Fix #547: Set the limit for incoming data to prevent a CVE
report in NIST. By default it is 3MB
+ Fix #544: Support unescaped unicode characters for
double-quoted scalars
- Modified patches:
* 0001-replace-bundled-base64coder-with-java.util.Base64.patch
* 0002-Replace-bundled-gdata-java-client-classes-with-commo.patch
+ rebase
- Added patch:
* 0003-Fix-ReaderBomTest.patch
+ remove two tests that require unicode boms
- spacecmd
-
- version 4.2.24-1
* Update the translations from Weblate
- version 4.2.23-1
* Fix argument parsing of distribution_update (bsc#1210458)
- version 4.2.22-1
* Display activation key details after executing the corresponding command (bsc#1208719)
* Show targetted packages before actually removing them (bsc#1207830)
* Fix spacecmd not showing any output for softwarechannel_diff
and softwarechannel_errata_diff (bsc#1207352)
- spacewalk-backend
-
- version 4.2.29-1
* Use a constant to get the product name in python code rather than reading rhn.conf (bsc#1212943)
* Only show missing /root/.curlrc error with log_level = 5 (bsc#1212507)
- version 4.2.28-1
* Filter CLM modular packages using release strings (bsc#1207814)
* Add package details to reposync error logging
- version 4.2.27-1
* Fix the mgr-inter-sync not creating valid repository metadata when dealing
with empty channels (bsc#1207829)
* fix repo sync for cloud payg connected repositories (bsc#1208772)
* Fix issues with kickstart syncing on mirrorlist repositories
* Do not sync .mirrorlist and other non needed files
* reposync: catch local file not found urlgrabber error properly (bsc#1208288)
- spacewalk-web
-
- version 4.2.36-1
* Update the translations from weblate
* Fix VHM CPU and RAM display when 0 (bsc#1175823)
* Fix parsing error when showing notification message details (bsc#1211469)
- version 4.2.35-1
* Show loading indicator on formula details pages (bsc#1179747)
* Increase datetimepicker font sizes (bsc#1210437)
* Fix an issue where the datetimepicker shows wrong date (bsc#1209231)
- version 4.2.34-1
* Fix datetime picker appearing behind modal edge (bsc#1209703)
- version 4.2.33-1
* Deprecate jQuery datepicker, integrate React datepicker (bsc#1209689)
* Fix CLM environments UI for environment labels containing dots (bsc#1207838)
- spacewalk-java
-
- version 4.2.55-1
* Set swap memory value if available
* Set primary FQDN to hostname if none is set (bsc#1209156, bsc#1214333)
- version 4.2.54-1
* Consider venv-salt-minion package update as salt update to prevent
backtraces on upgrading salt with itself (bsc#1211884)
- version 4.2.53-1
* Fix "more then one method candidate found" for API function (bsc#1211100)
* Fixed a bug that caused the tab Autoinstallation to hide when clicking on Power
Management Management/Operations on SSM -> Provisioning
* Update copyright year (bsc#1212106)
* Disable jinja processing for the roster file (bsc#1211650)
- version 4.2.52-1
* Update jetty-util to version 9.4.51
- version 4.2.51-1
* Update version of Tomcat build dependencies
- version 4.2.50-1
* Fix misleading error message regarding SCC credentials removal (bsc#1207941)
* Fix issue with `aclChannelTypeCapable` that prevented errata view in
deb arch
* Refresh pillars after setting custom values via SSM (bsc#1210659)
* Report SSM power management errors in 'rhn_web_ui' (bsc#1210406)
* Filter CLM modular packages using release strings (bsc#1207814)
* Allow processing big state results (bsc#1210957)
* Use glassfish-activation-api instead of gnu-jaf
* Fix session information leak CVE-2023-22644 (bsc#1210107)
* Fix Intenal Server Error when URI contains invalid sysid (bsc#1186011)
* kernel options: only add quotes if there is a space in the value (bsc#1209926)
* Fix link to Knowledge Base articles (bsc#1210311)
* Do not output Cobbler xmlrpc token in debug logs CVE-2023-22644 (bsc#1210162)
* Remove channels from client after transfer to a different
organization (bsc#1209220)
* Fix displaying system channels when no base product is installed
(bsc#1206423)
* Fix broken ifcfg grub option on reinstallation (bsc#1210232)
* Fix NPE in Cobbler system sync when server has no creator set
* Fix credentials and other secrets disclosure when debug log is enabled
CVE-2023-22644 (bsc#1210154)
* Do not output URL parameters for tiny urls CVE-2023-22644 (bsc#1210101)
* Remove web session swap secrets output in logs CVE-2023-22644 (bsc#1210086)
* Add listSystemEvents missing API endpoint (bsc#1209877)
- version 4.2.49-1
* Refactor Java notification synchronize to avoid dead locks (bsc#1209369)
- version 4.2.48-1
* Prevent logging formula data (bsc#1209386, bsc#1209434, CVE-2023-22644)
* Use gnu-jaf instead of jaf
* Use reload4j instead of log4j or log4j12
* Save scheduler user when creating Patch actions manually (bsc#1208321)
* Use slf4j-reload4j and jaf
* Add `mgr_server_is_uyuni` minion pillar item
* Do not execute immediately Package Refresh action for the SSH minion (bsc#1208325)
* Mark as failed actions that cannot be scheduled because earliest
date is too old
* Update earliest date when rescheduling failed actions (bsc#1206562)
* Fix reconnection of postgres event stream
* fix NumberFormatException when syncing ubuntu errata (bsc#1207883)
* Fix duplicate keys in image tables (bsc#1207799)
* Fix CLM environments UI for environment labels containing dots (bsc#1207838)
- spacewalk-reports
-
- version 4.2.8-1
* Drop Python2 compatibility (bsc#1212589)
- spacewalk-search
-
- version 4.2.10-1
* Use reload4j instead of log4j or log4j12
- spacewalk-setup
-
- version 4.2.13-1
* Drop usage of salt.ext.six in embedded_diskspace_check
- version 4.2.12-1
* Enable netapi clients in master configuration (required for Salt 3006)
- spacewalk-utils
-
- version 4.2.20-1
* Drop Python2 compatibility
- version 4.2.19-1
* spacewalk-hostname-rename remains stuck at refreshing pillars (bsc#1207550)
- subscription-matcher
-
- Relax antlr version requirement
- sudo
-
- Fix CVE-2023-28486, sudo does not escape control characters in
log messages, (CVE-2023-28486, bsc#1209362)
* Add sudo-CVE-2023-28486.patch
- Fix CVE-2023-28487, sudo does not escape control characters in
sudoreplay output (CVE-2023-28487, bsc#1209361)
- sudo-dont-enable-read-after-pty_finish.patch
* bsc#1203201
* Do not re-enable the reader when flushing the buffers as part
of pty_finish().
* While sudo-observe-SIGCHLD patch applied earlier prevents a
race condition from happening, this fixes a related buffer hang.
- Added sudo-fix_NULL_deref_RunAs.patch
* bsc#1206483
* Fix a situation where "sudo -U otheruser -l" would dereference
a NULL pointer.
- supportutils-plugin-suse-public-cloud
-
- Update to version 1.0.8 (bsc#1213951)
+ Capture CSP billing adapter config and log (issue#13)
+ Accept upper case Amazon string in DMI table (issue#12)
- Update to version 1.0.7 (bsc#1209026)
+ Include information about the cached registration data
+ Collect the data that is sent to the update infrastructure during
registration
- supportutils-plugin-susemanager
-
- version 4.2.7-1
* Fix property name to tune for salt events queue processing
- version 4.2.6-1
* fix db connection check tool (bsc#1208586)
- supportutils
-
- Changes to supportconfig version 3.1.11-46.3
+ Added missed sanitation check on crash.txt (bsc#1203818)
- Changes to supportconfig.rc version 3.1.11-30
+ Added check to _sanitize_file
+ Using variable for replement text in _sanitize_file
- susemanager-build-keys
-
- Version 15.3.9
* add SUSE Liberty v2 key (bsc#1212096)
+ Added: RPM-GPG-KEY-SUSE-Liberty-v2
* add Debian 12 (bookworm) GPG keys (bsc#1212363)
+ Added:
debian-archive-key-12-security-254CF3B5AEC0A8F0.asc
debian-archive-key-12-B7C5D7D6350947F8.asc
debian-release-12-F8D2585B8783D481.asc
* add new 4096 bit RSA package hub key
+ Added: packagehub-gpg-pubkey-8A49EB0325DB7AE0.asc
- Version 15.3.8
* fix installation of sle15 RSA reserve build key
* add new 4096 bit RSA openSUSE build key gpg-pubkey-29b700a4.asc
- Version 15.3.7 (jsc#PED-2777):
* add new 4096 bit RSA build key gpg-pubkey-3fa1d6ce-63c9481c.asc
* add new 4096 bit RSA reserve build key gpg-pubkey-d588dc46-63c939db.asc
* add 2022 2048 bit RSA PTF key suse_ptf_key-6F5DA62B.asc
* add new 4096 bit RSA PTF key suse_ptf_key_2023.asc
- susemanager-doc-indexes
-
- Typo correction for Cobbler buildiso command in Client
Configuration Guide
- Replaced plain text with dedicated attribute for AutoYaST
- Added a note about Oracle Unbreakable Linux Network mirroring
requirements in Client Configuration Guide (bsc#1212032)
- Added SUSE Linux Enterprise 15 SP5 and openSUSE Leap 15.5
as supported clients in the Client Configuration Guide
- Fixed missing tables of content in the Reference Guide
(bsc#1208577)
- Fixed instruction for Single sign-on implementation example
in the Administration Guide (bsc#1210103)
- Removed reference to non-exitent files in Reference Guide
(bsc#1208528)
- Salt version changed to 3006.0
- Added note for clarification between self-installed and cloud
instances of Ubuntu
- Improved Pay-as-you-go documentation in the Install and Upgrade
Guide (bsc#1208984)
- Added comment about activation keys for LTSS clients in Client
Configuration Guide (bsc#1210011)
- Updated API script examples to Python 3 in Administration Guide
and Large Deployment Guide
- Change cleanup Salt Client description
- Added instruction for Cobbler to use the correct label in Client
Configuration Guide distro label (bsc#1205600)
- Added updated options for rhn.conf file in the Administration Guide
(bsc#1209508)
- Fixed calculation of DB max-connections and align it with the
supportconfig checking tool in the Tuning Guide
- Removed z196 and z114 from listing in System Z chapter of the
Installation and Upgrade Guide (bsc#1206973)
- Branding updated for 2023
- New search engine optimization improvements for documentation
- Translations are now included in the webui help documentation
- Local search is now provided with the webui help documentation
- susemanager-docs_en
-
- Typo correction for Cobbler buildiso command in Client
Configuration Guide
- Replaced plain text with dedicated attribute for AutoYaST
- Added a note about Oracle Unbreakable Linux Network mirroring
requirements in Client Configuration Guide (bsc#1212032)
- Added SUSE Linux Enterprise 15 SP5 and openSUSE Leap 15.5
as supported clients in the Client Configuration Guide
- Fixed missing tables of content in the Reference Guide
(bsc#1208577)
- Fixed instruction for Single sign-on implementation example
in the Administration Guide (bsc#1210103)
- Removed reference to non-exitent files in Reference Guide
(bsc#1208528)
- Salt version changed to 3006.0
- Added note for clarification between self-installed and cloud
instances of Ubuntu
- Improved Pay-as-you-go documentation in the Install and Upgrade
Guide (bsc#1208984)
- Added comment about activation keys for LTSS clients in Client
Configuration Guide (bsc#1210011)
- Updated API script examples to Python 3 in Administration Guide
and Large Deployment Guide
- Change cleanup Salt Client description
- Added instruction for Cobbler to use the correct label in Client
Configuration Guide distro label (bsc#1205600)
- Added updated options for rhn.conf file in the Administration Guide
(bsc#1209508)
- Fixed calculation of DB max-connections and align it with the
supportconfig checking tool in the Tuning Guide
- Removed z196 and z114 from listing in System Z chapter of the
Installation and Upgrade Guide (bsc#1206973)
- Branding updated for 2023
- New search engine optimization improvements for documentation
- Translations are now included in the webui help documentation
- Local search is now provided with the webui help documentation
- susemanager-schema
-
- version 4.2.29-1
* Add schema directory for susemanager-schema-4.2.29
- version 4.2.28-1
* Filter CLM modular packages using release strings (bsc#1207814)
* Repeat schema migrations for module metadata storage (bsc#1209915)
- susemanager-sls
-
- version 4.2.35-1
* Do not disable salt-minion on salt-ssh managed clients
* Use venv-salt-minion instead of salt for docker states (bsc#1212416)
- version 4.2.34-1
* trust new Liberty Linux v2 key (bsc#1212096)
- version 4.2.33-1
* Include automatic migration from Salt 3000 to Salt bundle in highstate
* Disable salt-minion and remove its config file on cleanup (bsc#1209277)
* To update everything on a debian system, call dist-upgrade to
be able to install and remove packages
- version 4.2.32-1
* Improve error handling in mgr_events.py (bsc#1208687)
- susemanager
-
- version 4.2.44-1
* Require LTSS channels for SUSE Linux Enterprise 15 SP1/SP2/SP3
and SUSE Manager Proxy 4.2 (bsc#1214187)
- version 4.2.43-1
* Add missing Salt 3006.0 dependencies to bootstrap repo definitions (bsc#1212700)
* Make mgr-salt-ssh to properly fix HOME environment to avoid issues with gitfs (bsc#1210994)
- version 4.2.42-1
* Use newest venv-salt-minion version available to generate the
venv-enabled-*.txt file in bootstrap repos (bsc#1211958)
- version 4.2.41-1
* Add bootstrap repository definitions for openSUSE Leap 15.5
* Add bootstrap repository definitions for SUSE Linux Enterprise Server 15 SP5
- systemd-presets-common-SUSE
-
- Enable systemd-pstore.service by default (jsc#PED-2663)
- systemd-rpm-macros
-
- Bump version to 13
- Fix %sysctl_apply() and %binfmt_apply() so they are disabled when called from
a chroot (bsc#1211272)
- Bump version to 12
- Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not
present as it's expected (bsc#1208079).
- tagsoup
-
- Condition for SLE-12 to avoid accidental use of modular java
with javapackages-tools 2.x
- Compile with source and target levels 8
- timezone
-
- timezone update 2023c:
* Revert changes made in 2023b
- timezone update 2023b:
* Lebanon delays the start of DST this year.
- timezone update 2023a:
* Egypt now uses DST again, from April through October.
* This year Morocco springs forward April 23, not April 30.
* Palestine delays the start of DST this year.
* Much of Greenland still uses DST from 2024 on.
* America/Yellowknife now links to America/Edmonton.
* tzselect can now use current time to help infer timezone.
* The code now defaults to C99 or later.
- Refresh tzdata-china.diff
- tomcat
-
- Update to Tomcat 9.0.75.
* See changelog at
https://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.75_(markt)
* Fixes:
+ bsc#1211608, CVE-2023-28709
+ bsc#1208513, CVE-2023-24998 (previous incomplete fix)
- Remove patches:
* tomcat-9.0-CVE-2021-30640.patch
* tomcat-9.0-CVE-2021-33037.patch
* tomcat-9.0-CVE-2021-41079.patch
* tomcat-9.0-CVE-2022-23181.patch
* tomcat-9.0-NPE-JNDIRealm.patch
* tomcat-9.0-hardening_getResources.patch
* tomcat-9.0.43-CVE-2021-43980.patch
* tomcat-9.0.43-CVE-2022-42252.patch
* tomcat-9.0.43-CVE-2022-45143.patch
* tomcat-9.0.43-CVE-2023-24998.patch
* tomcat-9.0.43-CVE-2023-28708.patch
+ integrated in this version
* tomcat-9.0.43-java8compat.patch
+ problem with Java 8 compatibility solved in this version
- Modified patch:
* tomcat-9.0.31-secretRequired-default.patch
- > tomcat-9.0.75-secretRequired-default.patch
+ rediffed to changed context
* tomcat-9.0-javadoc.patch
+ drop integrated hunks
* tomcat-9.0-osgi-build.patch
+ fix to work with current version
- Added patch:
* tomcat-9.0-jdt.patch
+ fix build against our ecj
- Fixed CVEs:
* CVE-2022-45143: JsonErrorReportValve: add escape for type, message or description (bsc#1206840)
- Added patches:
* tomcat-9.0.43-CVE-2022-45143.patch
- Fixed CVEs:
* CVE-2023-28708: tomcat: not including the secure attribute
causes information disclosure (bsc#1209622)
- Added patches:
* tomcat-9.0.43-CVE-2023-28708.patch
- Fixed CVEs:
* CVE-2023-24998: tomcat,tomcat6: FileUpload DoS with excessive parts (bsc#1208513)
- Added patches:
* tomcat-9.0.43-CVE-2023-24998.patch
- set logrotate for localhost.log, manager.log, host-manager.log and localhost_access_log.txt
- use logrotate for catalina.out
* update tomcat-serverxml-tool and spec to configure server.xml
- Added patch:
* tomcat-9.0-logrotate_everything.patch
* tomcat-serverxml-tool.tar.gz
- Removed:
* tomcat-serverxml-tool-1.0.tar.gz
- Use catalina.out for logging (bsc#1205647)
- Added patches:
* tomcat-9.0-fix_catalina.patch
- Fixed CVEs:
* CVE-2022-42252: reject invalid content-length requests. (bsc#1204918)
- Added patches:
* tomcat-9.0.43-CVE-2022-42252.patch
- Fixed CVEs:
* CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868)
- Added patches:
* tomcat-9.0.43-CVE-2021-43980.patch
- Do not hardcode /usr/libexec but use %%_libexecdir during the
build
* Fixes for platforms, where /usr/libexec and %%_libexecdir are
different
- Fix bsc#1201081 by building with release=8 all files that can be
built this way. The one file remaining, build it with source=8 and
target=8
- Modified patch:
* tomcat-9.0.43-java8compat.patch
+ Do not cast ByteBuffer to Buffer to call the Java 8 compatible
methods. Build with release=8 instead
- util-linux-systemd
-
- Add upstream patch fix-lib-internal-cache-size.patch
bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9
- vim
-
- Updated to version 9.0 with patch level 1572, fixes the following security problems
* Fixing bsc#1210996 (CVE-2023-2426) - VUL-0: CVE-2023-2426: vim: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
* Fixing bsc#1211256 (CVE-2023-2609) - VUL-1: CVE-2023-2609: vim: NULL Pointer Dereference prior to 9.0.1531
* Fixing bsc#1211257 (CVE-2023-2610) - VUL-1: CVE-2023-2610: vim: Integer Overflow or Wraparound prior to 9.0.1532
- for the complete list of changes see
https://github.com/vim/vim/compare/v9.0.1443...v9.0.1572
- Fixing bsc#1211461 - L3: vim "eats" first character from prompt in xterm
* Add: reorder-exit-raw-mode.patch
* Swaps out_str_t_TE() and cursor_on() during exit to prevent missing characters in xterm prompt on exit.
- Fixing bsc#1211144 - [Build 96.1] openQA test fails in zypper_migration - conflict between xxd and vim
* Revert the creation standalone xxd packages
- Updated to version 9.0 with patch level 1443, fixes the following security problems
* Fixing bsc#1209042 (CVE-2023-1264) - VUL-0: CVE-2023-1264: vim: NULL Pointer Dereference vim prior to 9.0.1392
* Fixing bsc#1209187 (CVE-2023-1355) - VUL-0: CVE-2023-1355: vim: NULL Pointer Dereference prior to 9.0.1402.
* Fixing bsc#1208828 (CVE-2023-1127) - VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- drop vim-8.0-ttytype-test.patch as it changes test_options.vim which we
remove during %prep anyway. And this breaks quilt setup.
- for the complete list of changes see
https://github.com/vim/vim/compare/v9.0.1386...v9.0.1443
- Updated to version 9.0 with patch level 1386, fixes the following security problems
* Fixing bsc#1207780 - (CVE-2023-0512) VUL-0: CVE-2023-0512: vim: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247
* Fixing bsc#1208957 - (CVE-2023-1175) VUL-0: CVE-2023-1175: vim: Incorrect Calculation of Buffer Size
* Fixing bsc#1208959 - (CVE-2023-1170) VUL-0: CVE-2023-1170: vim: Heap-based Buffer Overflow in vim prior to 9.0.1376
* Fixing bsc#1208828 - (CVE-2023-1127) VUL-1: CVE-2023-1127: vim: divide by zero in scrolldown()
- for the complete list of changes see
https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386
- virtual-host-gatherer
-
- version 1.0.26-1
* fix cpu calculation in the libvirt module and enhance the data
structure by os value
- version 1.0.25-1
* Report total CPU numbers in the libvirt module
- wicked
-
- ifconfig: fix arp notify loop (boo#1212806) and burst sending
[+ 0001-fix_arp_notify_loop_and_burst_sending.patch]
- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- bond: workaround 6.1 kernel enslave regression (boo#1206674)
- update to version 0.6.72
- client: add `wicked firmware extensions|interfaces|enable|disable`
command to improve `ibft`,`nbft`,`redfish` firmware extension and
interface handling.
- client: improve error handling in netif firmware discovery
extension execution and extension definition overrides in
the wicked-config.
- nanny: fix use-after-free in debug mode (bsc#1206447)
- spec: replace transitional `%usrmerged` macro with regular
version check (boo#1206798)
- client: improve to show `no-carrier` in ifstatus output
- linux: cleanup inclusions and update uapi header to 6.0
- ethtool: link mode nwords cleanup and new advertise mode names
- update to version 0.6.71
- dhcp: enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)
- schema: fix the ip rule to-selector to handle network prefixes
- spec: Add /etc/sysconfig/network to file list, no longer in the
default list of a cleaned up filesystem package on tumbleweed
(https://github.com/openSUSE/wicked/pull/939).
- ws-jaxme
-
- Build against the standalone JavaEE modules unconditionally
- Modified patch:
* ws-jaxme-sourcetarget.patch
+ Build with source/target levels 8
- On relevant distributions, build against the standalone jaxb-api
- Do not build against the log4j12 packages, use the new reload4j
- xalan-j2
-
- Build with source/target levels 8
- Do not link to the java_cup* compatibility links, but to the
java-cup* ones
- Remove parent from the pom files, since we are not building
with maven
- Clean-up packaging
- xen
-
- Update to Xen 4.14.6 bug fix release (bsc#1027519)
xen-4.14.6-testing-src.tar.bz2
* No upstream changelog found in sources or webpage
- bsc#1214082 - VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative
Return Stack Overflow (XSA-434)
- bsc#1214083 - VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data
Sampling (XSA-435)
- Dropped patches contained in new tarball
62a1e594-x86-clean-up-_get_page_type.patch
62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
62a1e649-x86-track-and-flush-non-coherent.patch
62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
62cc31ee-cmdline-extend-parse_boolean.patch
62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
62cd91d0-x86-spec-ctrl-rework-context-switching.patch
62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
62cd91d5-x86-cpuid-BTC_NO-enum.patch
62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
62dfe40a-x86-mm-gpt-TLB-flush-condition.patch
62f27ebd-x86-expose-more-MSR_ARCH_CAPS-to-hwdom.patch
62f51e16-x86-spec-ctrl-enum-PBRSB_NO.patch
62f523da-AMD-setup_force_cpu_cap-BSP-only.patch
63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
63455fe4-x86-HAP-monitor-table-error-handling.patch
63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
6345601d-x86-tolerate-shadow_prealloc-failure.patch
6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
63456075-x86-P2M-free-paging-pool-preemptively.patch
63456090-x86-p2m_teardown-preemption.patch
63456175-libxl-per-arch-extra-default-paging-memory.patch
63456177-Arm-construct-P2M-pool-for-guests.patch
6345617a-Arm-XEN_DOMCTL_shadow_op.patch
6345617c-Arm-take-P2M-pages-P2M-pool.patch
634561aa-gnttab-locking-on-transitive-copy-error-path.patch
6351095c-Arm-rework-p2m_init.patch
6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
63569723-x86-shadow-replace-bogus-assertions.patch
636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch
xsa326-01.patch
xsa326-02.patch
xsa326-03.patch
xsa326-04.patch
xsa326-05.patch
xsa326-06.patch
xsa326-07.patch
xsa326-08.patch
xsa326-09.patch
xsa326-10.patch
xsa326-11.patch
xsa326-12.patch
xsa326-13.patch
xsa326-14.patch
xsa326-15.patch
xsa326-16.patch
xsa403.patch
xsa414.patch
xsa415.patch
xsa416.patch
xsa417.patch
xsa418-01.patch
xsa418-02.patch
xsa418-03.patch
xsa418-04.patch
xsa418-05.patch
xsa418-06.patch
xsa419-01.patch
xsa419-02.patch
xsa419-03.patch
xsa421-01.patch
xsa421-02.patch
xsa427.patch
xsa428-1.patch
xsa428-2.patch
xsa429.patch
xsa433.patch
- Handle potential off-by-one errors in libxc-sr-xg_sr_bitmap.patch
A bit is an index in bitmap, while bits is the allocated size
of the bitmap.
- bsc#1213616 - VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed
(XSA-433)
xsa433.patch
- Updated fix for XSA-417 (bsc#1204489)
64ba268b-xenstore-fix-XSA-417.patch
- bsc#1209017 - VUL-0: CVE-2022-42332: xen: x86 shadow plus
log-dirty mode use-after-free (XSA-427)
xsa427.patch
- bsc#1209018 - VUL-0: CVE-2022-42333,CVE-2022-42334: xen: x86/HVM
pinned cache attributes mis-handling (XSA-428)
xsa428-1.patch
xsa428-2.patch
- bsc#1209019 - VUL-0: CVE-2022-42331: xen: x86: speculative
vulnerability in 32bit SYSCALL path (XSA-429)
xsa429.patch
- xerces-j2
-
- Build with source/target levels 8
- xml-commons-apis
-
- Build with source/target levels 8
- xml-commons-resolver
-
- Build with source/target levels 8
- xpp2
-
- Modified patch:
* xpp2-build_xml.patch
+ Build with source/target levels 8
- Added pom file
- xpp3
-
- Modified patch:
* xpp3-sourcetarget.patch
+ Build with source/target levels 8
- xstream
-
- Upgrade to 1.4.20
* Security fixes
+ This maintenance release addresses the security
vulnerabilities CVE-2022-40151 (bsc#1203520) and
CVE-2022-41966 (bsc#1206729), causing a Denial of Service by
raising a stack overflow. It also provides new converters for
Optional and Atomic types.
* Major changes
+ #308: Add converter for AtomicBoolean, AtomicInteger,
AtomicLong, and AtomicReference of package
java.util.concurrent.atomic.
+ #293: Add converter for Optional, OptionalDouble, OptionalInt,
and OptionalLong of package java.util.
* Minor changes
+ #287: Close stream opened from provided URL.
+ #284: Fix disabling check against hash code attack with
XStream.setCollectionUpdateLimit(0).
* Stream compatibility
+ The atomic types with new converters of package
java.util.concurrent.atomic, that have been written with
previous versions of XStream, can still be deserialized.
+ The Optional types with new converters of package java.util,
that have been written with previous versions of XStream,
can still be deserialized.
+ The WildcardTypePermission allows by default no longer
anonymous class types.
* API changes
+ Added c.t.x.converters.extended.AtomicBooleanConverter.
+ Added c.t.x.converters.extended.AtomicIntegerConverter.
+ Added c.t.x.converters.extended.AtomicLongConverter.
+ Added c.t.x.converters.extended.AtomicReferenceConverter.
+ Added c.t.x.converters.extended.OptionalConverter.
+ Added c.t.x.converters.extended.OptionalDoubleConverter.
+ Added c.t.x.converters.extended.OptionalIntConverter.
+ Added c.t.x.converters.extended.OptionalLongConverter.
+ Added c.t.x.security.WildcardTypePermission
.WildcardTypePermission(boolean,String[]).
- Build against the standalone JavaEE modules unconditionally
- Build against standalone activation-api and jaxb-api on systems
where the JavaEE modules are not part of JDK
- yast2-network
-
- Fix typo when writing the wireless channel (bsc#1212976)
- 4.3.88
- bsc#1211431
- Do not crash installation when storing vlan configuration into
NetworkManager
- 4.3.87
- yast2-online-update
-
- Fix showing of release notes when we update a rubygem
(bsc#1205913)
- 4.2.3
- yast2-pkg-bindings
-
- Pkg.TargetInitializeOptions() - added a new option for
rebuilding the RPM database (--rebuilddb) (bsc#1209565)
- 4.3.12
- yast2-transfer
-
- Fixed TFTP download, truncate the target file to avoid garbage
at the end of the file when saving to an already existing file
(bsc#1208754)
- 4.1.1
- yast2-update
-
- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.3.5
- zypper
-
- Changed location of bash-complication (bsc#1213854).
This changes the location of zypper.sh bash completion script
from /usr/share/bash-completion/completions/.
- version 1.14.63
- man: revised explanation of --force-resolution (bsc#1213557)
Point out that the option not only allows to remove packages but
may also violate any other active policy if there is no other way
to resolve the job.
- Print summary hint if policies were violated due to
- -force-resolution (bsc#1213557)
- BuildRequires: libzypp-devel >= 17.31.16 (for zypp-tui)
- version 1.14.62
- targetos: Add an error note if XPath:/product/register/target
is not defined in /etc/products.d/baseproduct (bsc#1211261)
- targetos: Update help and man page (bsc#1211261)
- version 1.14.61
- Fix selecting installed patterns from picklist (bsc#1209406)
- man: better explanation of --priority (fixes #480)
- version 1.14.60
- BuildRequires: libzypp-devel >= 17.31.7.
- Provide "removeptf" command (bsc#1203249)
A remove command which prefers replacing dependant packages to
removing them as well.
A PTF is typically removed as soon as the fix it provides is
applied to the latest official update of the dependant packages.
But you don't want the dependant packages to be removed together
with the PTF, which is what the remove command would do. The
removeptf command however will aim to replace the dependant
packages by their official update versions.
- patterns: Avoid dispylaing superfluous @System entries
(bsc#1205570)
- version 1.14.59
- Update man page and explain '.no_auto_prune' (bsc#1204956)
- Allow to (re)add a service with the same URL (bsc#1203715)
- Explain outdatedness of repos (fixes #463)
- BuildRequires: libzypp-devel >= 17.31.5
- version 1.14.58