Packages changed:
  Mesa (25.0.1 -> 25.0.2)
  Mesa-drivers (25.0.1 -> 25.0.2)
  MicroOS-release (20250321 -> 20250324)
  crypto-policies (20230920.570ea89 -> 20250124.4d262e7)
  ebook-tools
  gdm
  python-alembic (1.14.1 -> 1.15.1)
  python-bcrypt (4.2.1 -> 4.3.0)
  shadow (4.17.3 -> 4.17.4)

=== Details ===

==== Mesa ====
Version update (25.0.1 -> 25.0.2)
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1

- Update to release 25.0.2
  - -> https://docs.mesa3d.org/relnotes/25.0.2

==== Mesa-drivers ====
Version update (25.0.1 -> 25.0.2)
Subpackages: Mesa-dri Mesa-gallium

- Update to release 25.0.2
  - -> https://docs.mesa3d.org/relnotes/25.0.2

==== MicroOS-release ====
Version update (20250321 -> 20250324)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== crypto-policies ====
Version update (20230920.570ea89 -> 20250124.4d262e7)

- Allow sshd in FIPS mode when using the DEFAULT policy [bsc#1227370]
  * Add crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
- Enable SHA1 sigver in the DEFAULT policy.
  * Add crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch
- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch
- Remove dangling symlink for the libreswan config [bsc#1236858]
- Remove also sequoia config and generator files
- Remove not needed fips bind mount service
- Update to version 20250124.4d262e7: [bsc#1239009, bsc#1236165]
  * openssl: stricter enabling of Ciphersuites
  * openssl: make use of -CBC and -AESGCM keywords
  * openssl: add TLS 1.3 Brainpool identifiers
  * fix warning on using experimental key_exchanges
  * update-crypto-policies: don't output FIPS warning in fips mode
  * openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  * openssh, libssh: refactor kx maps to use tuples
  * alg_lists: mark MLKEM768/SNTRUP kex experimental
  * nss: revert enabling mlkem768secp256r1
  * nss: add mlkem768x25519 and mlkem768secp256r1, remove xyber
  * gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  * openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  * openssh, TEST-PQ: rename MLKEM key_exchange to MLKEM768
  * openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  * openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384...
  * python/update-crypto-policies: pacify pylint
  * fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * fips-mode-setup: small Argon2 detection fix
  * SHA1: add __openssl_block_sha1_signatures = 0
  * fips-mode-setup: block if LUKS devices using Argon2 are detected
  * update-crypto-policies: skip warning on --set=FIPS if bootc
  * fips-setup-helper: skip warning, BTW
  * fips-mode-setup: force --no-bootcfg when UKI is detected
  * fips-setup-helper: add a libexec helper for anaconda
  * fips-crypto-policy-overlay: automount FIPS policy
  * openssh: make dss no longer enableble, support is dropped
  * gnutls: wire GROUP-X25519-KYBER768 to X25519-KYBER768
  * DEFAULT: switch to rh-allow-sha1-signatures = no...
  * java: drop unused javasystem backend
  * java: stop specifying jdk.tls.namedGroups in javasystem
  * ec_min_size: introduce and use in java, default to 256
  * java: use and include jdk.disabled.namedCurves
  * BSI: Update BSI policy for new 2024 minimum recommendations
  * fips-mode-setup: flashy ticking warning upon use
  * fips-mode-setup: add another scary "unsupported"
  * CONTRIBUTING.md: add a small section on updating policies
  * CONTRIBUTING.md: remove trailing punctuation from headers
  * BSI: switch to 3072 minimum RSA key size
  * java: make hash, mac and sign more orthogonal
  * java: specify jdk.tls.namedGroups system property
  * java: respect more key size restrictions
  * java: disable anon ciphersuites, tying them to NULL...
  * java: start controlling / disable DTLSv1.0
  * nss: wire KYBER768 to XYBER768D00
  * nss: unconditionally load p11-kit-proxy.so
  * gnutls: make DTLS0.9 controllable again
  * gnutls: retire GNUTLS_NO_TLS_SESSION_HASH
  * openssh: remove OPENSSH_MIN_RSA_SIZE / OPENSSH_MIN_RSA_SIZE_FORCE
  * gnutls: remove extraneous newline
  * sequoia: move away from subprocess.getstatusoutput
  * python/cryptopolicies/cryptopolicies.py: add trailing commas
  * python, tests: rename MalformedLine to MalformedLineError
  * Makefile: introduce SKIP_LINTING flag for packagers to use
  * Makefile: run ruff
  * tests: use pathlib
  * tests: run(check=True) + CalledProcessError where convenient
  * tests: use subprocess.run
  * tests/krb5.py: check all generated policies
  * tests: print to stderr on error paths
  * tests/nss.py: also use encoding='utf-8'
  * tests/nss.py: also use removesuffix
  * tests/nss.py: skip creating tempfiles
  * tests/java.pl -> tests/java.py
  * tests/gnutls.pl -> tests/gnutls.py
  * tests/openssl.pl -> tests/openssl.py
  * tests/verify-output.pl: remove
  * libreswan: do not use up pfs= / ikev2= keywords for default behaviour
  * Rebase patches:
  - crypto-policies-no-build-manpages.patch
  - crypto-policies-policygenerators.patch
  - crypto-policies-supported.patch
  - crypto-policies-nss.patch
- Update to version 20241010.5930b9a:
  * LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  * nss: be stricter with new purposes
  * nss: rewrite backend for 3.101
  * cryptopolicies: parent scopes for dumping purposes
  * policygenerators: move scoping inside generators
  * TEST-PQ: disable pure Kyber768
  * nss: wire XYBER768D00 to X25519-KYBER768
  * TEST-PQ: update
  * TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
  * TEST-PQ, alg_lists, openssl: enable more experimental `sign` values
  * TEST-PQ, python: add more groups, mark experimental
  * openssl: mark liboqsprovider groups optional with ?
  * Remove patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
- Update to version 20240201.9f501f3:
  * .gitlab-ci.yml: install sequoia-policy-config
    ... changelog too long, skipping 21 lines ...
  * pylintrc: use-implicit-booleaness-not-comparison-to-*

==== ebook-tools ====

- Add patch:
  * ebook-tools-cmake4.patch
- Rebase patches
- Drop unneeded baselibs.conf

==== gdm ====
Subpackages: gdm-schema gdm-xdm-integration gdmflexiserver libgdm1 typelib-1_0-Gdm-1_0

- Rebase/fix gdm-switch-to-tty1.patch to fix build against gcc 15.
- Add gdm-settings-utils_rename-variable.patch: Rename variable to
  fix build with gcc 15
  (https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/273).

==== python-alembic ====
Version update (1.14.1 -> 1.15.1)

- Update to 1.15.1
  * Fixed an issue in the new :pep:`621` ``pyproject.toml`` layout that
    prevented Alembic's template files from being included in the ``.whl``
    file in the distribution.

==== python-bcrypt ====
Version update (4.2.1 -> 4.3.0)

- Update 4.3.0
  * Bump proc-macro2 from 1.0.89 to 1.0.90 in /src/_bcrypt (#916)
  * Bump unicode-ident from 1.0.13 to 1.0.14 in /src/_bcrypt (#915)
  * fixes #917 -- correctly handle a salt that's too short (#918)
  * Bump cpufeatures from 0.2.15 to 0.2.16 in /src/_bcrypt (#919)
  * Bump proc-macro2 from 1.0.90 to 1.0.92 in /src/_bcrypt (#920)
  * Bump syn from 2.0.87 to 2.0.89 in /src/_bcrypt (#921)
  * Fix new ruff warning (#923)
  * Build manylinux 2.34 images (#922)
  * Bump portable-atomic from 1.9.0 to 1.10.0 in /src/_bcrypt (#924)
  * drop py37 (#926)
  * Bump pyo3 from 0.23.1 to 0.23.2 in /src/_bcrypt (#927)
  * Bump libc from 0.2.164 to 0.2.165 in /src/_bcrypt (#928)
  * Bump libc from 0.2.165 to 0.2.166 in /src/_bcrypt (#929)
  * Bump dawidd6/action-download-artifact from 6 to 7 (#932)
  * Bump syn from 2.0.89 to 2.0.90 in /src/_bcrypt (#931)
  * Bump libc from 0.2.166 to 0.2.167 in /src/_bcrypt (#930)
  * Bump pyo3 from 0.23.2 to 0.23.3 in /src/_bcrypt (#933)
  * Bump actions/cache from 4.1.2 to 4.2.0 (#934)
  * Bump libc from 0.2.167 to 0.2.168 in /src/_bcrypt (#935)
  * Bump pypa/gh-action-pypi-publish from 1.12.2 to 1.12.3 (#936)
  * Bump dtolnay/rust-toolchain (#937)
  * Bump actions/upload-artifact from 4.4.3 to 4.5.0 (#938)
  * Bump libc from 0.2.168 to 0.2.169 in /src/_bcrypt (#939)
  * Bump syn from 2.0.90 to 2.0.91 in /src/_bcrypt (#940)
  * Bump quote from 1.0.37 to 1.0.38 in /src/_bcrypt (#942)
  * Bump syn from 2.0.91 to 2.0.92 in /src/_bcrypt (#941)
  * Bump syn from 2.0.92 to 2.0.93 in /src/_bcrypt (#943)
  * Bump syn from 2.0.93 to 2.0.94 in /src/_bcrypt (#944)
  * Bump syn from 2.0.94 to 2.0.95 in /src/_bcrypt (#945)
  * Bump syn from 2.0.95 to 2.0.96 in /src/_bcrypt (#948)
  * Bump actions/upload-artifact from 4.5.0 to 4.6.0 (#947)
  * Bump proc-macro2 from 1.0.92 to 1.0.93 in /src/_bcrypt (#949)
  * Bump pyo3 from 0.23.3 to 0.23.4 in /src/_bcrypt (#950)
  * Support free-threaded Python 3.13 (#925)
  * Switch to nox (#954)
  * use github hosted arm runners in wheel builder (#952)
  * use github hosted arm runners in ci (#951)
  * Bump dawidd6/action-download-artifact from 7 to 8 (#956)
  * Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 (#957)
  * Bump unicode-ident from 1.0.14 to 1.0.15 in /src/_bcrypt (#958)
  * include matrix.PYTHON.VERSION in CI cache keys (#964)
  * Bump cpufeatures from 0.2.16 to 0.2.17 in /src/_bcrypt (#960)
  * Bump unicode-ident from 1.0.15 to 1.0.16 in /src/_bcrypt (#962)
  * Bump actions/setup-python from 5.3.0 to 5.4.0 (#963)
  * Update getrandom and bcrypt (#966)
  * Bump syn from 2.0.96 to 2.0.98 in /src/_bcrypt (#967)
  * Bump quansight-labs/setup-python from 5.3.1 to 5.4.0 (#968)
  * add support for free-threaded wheels (#955)
  * Bump once_cell from 1.20.2 to 1.20.3 in /src/_bcrypt (#970)
  * Bump unicode-ident from 1.0.16 to 1.0.17 in /src/_bcrypt (#972)
  * Bump typenum from 1.17.0 to 1.18.0 in /src/_bcrypt (#973)
  * Bump actions/cache from 4.2.0 to 4.2.1 (#974)
  * Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#975)
  * Bump libc from 0.2.169 to 0.2.170 in /src/_bcrypt (#976)
  * Bump inout from 0.1.3 to 0.1.4 in /src/_bcrypt (#977)
  * Bump portable-atomic from 1.10.0 to 1.11.0 in /src/_bcrypt (#978)
  * Update PyO3 to 0.23.5 (#980)
  * Bump actions/download-artifact from 4.1.8 to 4.1.9 (#982)
  * Add PyPy 3.11 and armv7l to matrix runner (#983)
  * PyPy 3.11 and armv7l wheels (#984)

==== shadow ====
Version update (4.17.3 -> 4.17.4)
Subpackages: libsubid5 login_defs

- Update to 4.17.4:
  * Revert "lib/, src/: Use local time for human-readable dates"
  * lib/getdate.y: Ignore time-zone information and use UTC
  * src/chfn.c: Partially revert "lib/, src/: Use strsep(3) instead of its pattern"
  * src/chfn.c: Use stpsep() instead of its pattern
  * src/chfn.c: Add local variable to refer to the separated field
  * src/chfn.c: copy_field(): Rename local variable
  * lib/commonio.c: Rely on the POSIX.1-2008 behavior of realpath(3)
  * lib/fs/readlink/: readlinknul(): Use ssize_t to simplify
  * autogen.sh: Promote -Wsign-compare to an error
  * lib/sizeof.h: ssizeof(): Add signed variant of sizeof
  * src/lastlog.c: Use ssizeof() to avoid a -Wsign-compare diagnostic
  * tests/unit/test_xasprintf.c: Fix sign-mismatch diagnostic
  * configure.ac: stop checking for utmp location
  * configure.ac: be deterministic about passwd location
  * lib/, src/: update audit messages
  * lib/: audit function for groups
  * src/: update group audit messages
  * doc/: Remove list of distributions