Packages changed:
  ImageMagick (7.1.1.3 -> 7.1.1.5)
  Mesa-demo (8.5.0 -> 9.0.0)
  aaa_base (84.87+git20220822.6b9f7a3 -> 84.87+git20230329.b39efbc)
  container-selinux (2.198.0 -> 2.206.0)
  coreutils (9.1 -> 9.2)
  gnome-control-center (44.0+7 -> 44.0+20)
  gnome-shell (44.0+28 -> 44.0+42)
  gobject-introspection
  gstreamer-plugins-bad
  kernel-source (6.2.8 -> 6.2.9)
  ldb (2.7.1 -> 2.7.2)
  libcap (2.67 -> 2.68)
  libheif (1.15.1 -> 1.15.2)
  libnvme (1.3 -> 1.4)
  libstorage-ng (4.5.88 -> 4.5.92)
  libxcrypt
  mutter (44.0+8 -> 44.0+18)
  nfs-utils
  nvme-cli (2.3 -> 2.4)
  open-vm-tools (12.1.5 -> 12.2.0)
  polkit
  python-numpy (1.24.1 -> 1.24.2)
  python-setuptools (65.6.3 -> 67.6.0)
  ruby3.2 (3.2.1 -> 3.2.2)
  samba (4.18.0+git.294.508b693e5c -> 4.18.1+git.298.4ccf830b2a4)
  shared-mime-info
  snapper
  systemd-rpm-macros (19 -> 20)
  timezone (2023b -> 2023c)
  util-linux
  util-linux-systemd
  vim (9.0.1392 -> 9.0.1430)
  vulkan-loader (1.3.239.0 -> 1.3.243.0)
  vulkan-tools (1.3.239.0 -> 1.3.243.0)
  xorg-x11-server (21.1.7 -> 21.1.8)
  xwayland (23.1.0 -> 23.1.1)
  yast2-storage-ng (4.6.2 -> 4.6.3)

=== Details ===

==== ImageMagick ====
Version update (7.1.1.3 -> 7.1.1.5)
Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10

- update to 7.1.1.5:
  https://github.com/ImageMagick/Website/blob/main/ChangeLog.md#711-5---2023-03-26

==== Mesa-demo ====
Version update (8.5.0 -> 9.0.0)
Subpackages: Mesa-demo-egl Mesa-demo-x

- enabled osmesa and libdrm support
- enabled vulkan support (first Vulkan demo: vkgears!)
- Update to version 9.0.0
- supersedes n_install-more-egl-binaries.patch

==== aaa_base ====
Version update (84.87+git20220822.6b9f7a3 -> 84.87+git20230329.b39efbc)
Subpackages: aaa_base-extras

- Update to version 84.87+git20230329.b39efbc:
  * Fix glibc requirement
- Update to version 84.87+git20230309.04eae92:
  * Add conditional glibc requirement back
  * Keep owning /etc/sysctl.conf to avoid rpmsave
- Update to version 84.87+git20230220.2991cfd:
  * Add instructions to build in place
  * Remove pre scriptlet
  * Don't create mtab symlink
  * Don't create /root/.bash_history
  * Don't enable lastlog by default
  * Fix #91: do not accidental unset shell functions
  * Prepare more /etc cleanup

==== container-selinux ====
Version update (2.198.0 -> 2.206.0)

- Update to version 2.206.0:
  * Allow unconfined domains to transition to container_runtime_t
  * Allow container domains to transition to install_t
  * Allow avirt_sandbox_domain to manage container_file_t types
  * Allow containers to watch sysfs_t directories
  * Allow spc_t to transption to rpm_script_t
  * Add support to new user_namespace access check
  * Smaller permission changes for container_init_t
- Drop spc.patch, is now included

==== coreutils ====
Version update (9.1 -> 9.2)
Subpackages: coreutils-doc

- update to 9.2:
  * cksum now accepts the --base64 (-b) option to print
    base64-encoded checksums.  It also accepts/checks such
    checksums.
  * cksum now accepts the --raw option to output a raw binary
    checksum.  No file name or other information is output in
    this mode.
  * cp, mv, and install now accept the --debug option to
    print details on how a file is being copied.
  * factor now accepts the --exponents (-h) option to print
    factors in the form p^e, rather than repeating the prime p, e
    times.
  * ls now supports the --time=modification option, to explicitly
    select the default mtime timestamp for display and sorting.
  * mv now supports the --no-copy option, which causes it to fail
    when asked to move a file to a different file system.
  * split now accepts options like '-n SIZE' that exceed machine
    integer range, when they can be implemented as if they were
    infinity.
  * split -n now accepts piped input even when not in round-robin
    mode, by first copying input to a temporary file to determine its
    size.
  * wc now accepts the --total={auto,never,always,only} option
    to give explicit control over when the total is output.
  * 'cp --reflink=always A B' no longer leaves behind a newly
    created empty file B merely because copy-on-write clones are not
    supported.
  * 'cp -n' and 'mv -n' now exit with nonzero status if they skip
    their action because the destination exists, and likewise for 'cp
  - i', 'ln -i', and 'mv -i' when the user declines.  (POSIX
    specifies this for 'cp -i' and 'mv -i'.)
  * cp, mv, and install again read in multiples of the reported
    block size, to support unusual devices that may have this
    constraint.
  * du --apparent now counts apparent sizes only of regular files
    and symbolic links.  POSIX does not specify the meaning of
    apparent sizes (i.e., st_size) for other file types, and
    counting those sizes could cause confusing and unwanted size
    mismatches.
  * 'ls -v' and 'sort -V' go back to sorting ".0" before ".A",
    reverting to the behavior in coreutils-9.0 and earlier.
    This behavior is now documented.
  * ls --color now matches a file extension case sensitively
    if there are different sequences defined for separate cases.
  * printf unicode \uNNNN, \UNNNNNNNN syntax, now supports all
    valid unicode code points.  Previously is was restricted to
    the C universal character subset, which restricted most points <=
    0x9F.
  * runcon now exits with status 125 for internal errors.
    Previously upon internal errors it would exit with status 1,
    which was less distinguishable
    from errors from the invoked command.
  * 'split -n N' now splits more evenly when the input size is
    not a multiple of N, by creating N output files whose sizes
    differ by at most 1 byte.  Formerly, it did this only when
    the input size was less than N.
  * 'stat -c %s' now prints sizes as unsigned, consistent with
    'ls'.
  * a long list of bugfixes, see included NEWS file for details
- drop gnulib-simple-backup-fix.patch (upstream)
- drop coreutils-tests-workaround-make-fdleak.patch (obsolete)

==== gnome-control-center ====
Version update (44.0+7 -> 44.0+20)
Subpackages: gnome-control-center-color gnome-control-center-goa gnome-control-center-user-faces

- Update to version 44.0+20:
  + datetime: Fix NTP switch getting out of sync.
  + shell/style: Add workaround to make disabled pictures are
    painted as such.
  + illustrated-row, split-row: Add widget name and css class.
  + region: Fix label of formats for the login screen.
  + keyboard: Fix cancel button issue.
  + Updated translations.

==== gnome-shell ====
Version update (44.0+28 -> 44.0+42)
Subpackages: gnome-extensions gnome-shell-calendar

- Update to version 44.0+42:
  + appFavorite:
  - Add missing .desktop extension for simplescan
  - Rename simple-scan.desktop
  + style: Light variant fixes and accommodations
  + extensionDownloader: Check schemadir existence and type
  + status/network: Fix a11y names for VPN connection menu items
  + quickSettings: Fix icon-name construct property in menu toggles
  + screenshot: Fix broken GLib.Error.matches call
  + Updated translations.

==== gobject-introspection ====
Subpackages: girepository-1_0 libgirepository-1_0-1

- Run meson_test only on x86(_64) arches until upstream issue is
  fixed.
  https://gitlab.gnome.org/GNOME/gobject-introspection/-/issues/458

==== gstreamer-plugins-bad ====
Subpackages: libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0

- Move conditional pkgconfig(vo-amrwbenc) BuildRequires to main
  part of spec, now available in distro. Stop passing
  voamrwbenc=disabled to meson.

==== kernel-source ====
Version update (6.2.8 -> 6.2.9)

- Linux 6.2.9 (bsc#1012628).
- interconnect: qcom: osm-l3: fix icc_onecell_data allocation
  (bsc#1012628).
- interconnect: qcom: sm8450: switch to qcom_icc_rpmh_* function
  (bsc#1012628).
- interconnect: qcom: qcm2290: Fix MASTER_SNOC_BIMC_NRT
  (bsc#1012628).
- perf/core: Fix perf_output_begin parameter is incorrectly
  invoked in perf_event_bpf_output (bsc#1012628).
- perf: fix perf_event_context->time (bsc#1012628).
- tracing/hwlat: Replace sched_setaffinity with
  set_cpus_allowed_ptr (bsc#1012628).
- drm/amd/display: fix k1 k2 divider programming for phantom
  streams (bsc#1012628).
- drm/amd/display: Remove OTG DIV register write for Virtual
  signals (bsc#1012628).
- drm/amd/display: Fix DP MST sinks removal issue (bsc#1012628).
- arm64: dts: freescale: imx8-ss-lsio: Fix flexspi clock order
  (bsc#1012628).
- arm64: dts: qcom: sc8280xp: Add label property to vadc channel
  nodes (bsc#1012628).
- arm64: dts: qcom: sm6375: Add missing power-domain-named to CDSP
  (bsc#1012628).
- arm64: dts: qcom: sm8450: correct WSA2 assigned clocks
  (bsc#1012628).
- arm64: dts: qcom: sm8450: Mark UFS controller as cache coherent
  (bsc#1012628).
- power: supply: bq24190: Fix use after free bug in bq24190_remove
  due to race condition (bsc#1012628).
- power: supply: da9150: Fix use after free bug in
  da9150_charger_remove due to race condition (bsc#1012628).
- wifi: mt76: do not run mt76_unregister_device() on unregistered
  hw (bsc#1012628).
- wifi: mt76: connac: do not check WED status for non-mmio devices
  (bsc#1012628).
- efi: earlycon: Reprobe after parsing config tables
  (bsc#1012628).
- arm64: dts: imx8dxl-evk: Disable hibernation mode of AR8031
  for EQOS (bsc#1012628).
- arm64: dts: imx8dxl-evk: Fix eqos phy reset gpio (bsc#1012628).
- ARM: dts: imx6sll: e70k02: fix usbotg1 pinctrl (bsc#1012628).
- ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (bsc#1012628).
- ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
  (bsc#1012628).
- arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes
  (bsc#1012628).
- arm64: dts: imx93: add missing #address-cells and #size-cells
  to i2c nodes (bsc#1012628).
- NFS: Fix /proc/PID/io read_bytes for buffered reads
  (bsc#1012628).
- NFS: Correct timing for assigning access cache timestamp
  (bsc#1012628).
- xsk: Add missing overflow check in xdp_umem_reg (bsc#1012628).
- iavf: fix inverted Rx hash condition leading to disabled hash
  (bsc#1012628).
- iavf: fix non-tunneled IPv6 UDP packet type and hashing
  (bsc#1012628).
- iavf: do not track VLAN 0 filters (bsc#1012628).
- intel/igbvf: free irq on the error path in igbvf_request_msix()
  (bsc#1012628).
- igbvf: Regard vf reset nack as success (bsc#1012628).
- igc: fix the validation logic for taprio's gate list
  (bsc#1012628).
- i2c: imx-lpi2c: check only for enabled interrupt flags
  (bsc#1012628).
- i2c: mxs: ensure that DMA buffers are safe for DMA
  (bsc#1012628).
- i2c: hisi: Only use the completion interrupt to finish the
  transfer (bsc#1012628).
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
  (bsc#1012628).
- nfsd: don't replace page in rq_pages if it's a continuation
  of last page (bsc#1012628).
- net: dsa: b53: mmap: fix device tree support (bsc#1012628).
- net: usb: smsc95xx: Limit packet length to skb->len
  (bsc#1012628).
- qed/qed_sriov: guard against NULL derefs from
  qed_iov_get_vf_info (bsc#1012628).
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
  (bsc#1012628).
- net: phy: Ensure state transitions are processed from phy_stop()
  (bsc#1012628).
- net: mdio: fix owner field for mdio buses registered using
  device-tree (bsc#1012628).
- net: mdio: fix owner field for mdio buses registered using ACPI
  (bsc#1012628).
- net: stmmac: Fix for mismatched host/device DMA address width
  (bsc#1012628).
- thermal/drivers/mellanox: Use generic thermal_zone_get_trip()
  function (bsc#1012628).
- mlxsw: core_thermal: Fix fan speed in maximum cooling state
  (bsc#1012628).
- drm/i915/fbdev: lock the fbdev obj before vma pin (bsc#1012628).
- drm/i915/mtl: Disable MC6 for MTL A step (bsc#1012628).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (bsc#1012628).
- drm/i915/guc: Fix missing ecodes (bsc#1012628).
- drm/i915/gt: perform uc late init after probe error injection
  (bsc#1012628).
    ... changelog too long, skipping 340 lines ...
- commit c9a94ac

==== ldb ====
Version update (2.7.1 -> 2.7.2)
Subpackages: libldb2 python3-ldb

- CVE-2023-0614: Access controlled AD LDAP attributes can be
    discovered  (bso#15270); (bsc#1209485).

==== libcap ====
Version update (2.67 -> 2.68)

- update to 2.68:
  * Force libcap internal functions to be hidden outside the library
  * Expanded the list of man page (links) to all of the supported API
    functions.
  * fixed some formatting issues with the libpsx(3) manpage.
  * Add support for a markdown preamble and postscript when generating
    .md versions of the man pages (Bug 217007)
  * psx package clean up
  * fix some copy-paste errors with TestShared()
  * added a more complete psx testing into this test as well
  * cap package clean up
  * drop an unnecessary use of ", _" in the sources
  * cleaned up cap.NamedCount documentation
  * Converted goapps/web/README to .md format and fixed the
    instructions to indicate go mod tidy is needed.
  * cap_compare test binary now cleans up after itself (Bug 217018)
  * Figured out how to cross compile Go programs for arm (i.e. RPi) that
    use C code, don't use cgo but do use the psx package
  * Eliminate use of vendor directory

==== libheif ====
Version update (1.15.1 -> 1.15.2)
Subpackages: gdk-pixbuf-loader-libheif libheif1

- update to 1.15.2
  * Fixes an incompatibility with AOM v3.6.0.
  * A couple of smaller fixes.

==== libnvme ====
Version update (1.3 -> 1.4)
Subpackages: libnvme-mi1 libnvme1

- Update to version 1.4:
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing

==== libstorage-ng ====
Version update (4.5.88 -> 4.5.92)
Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1

- Translated using Weblate (Portuguese (Brazil)) (bsc#1149754)
- 4.5.92
- merge gh#openSUSE/libstorage-ng#922
- add PCIe as disk transport
- 4.5.91
- merge gh#openSUSE/libstorage-ng#921
- fixed setting sysfs-name for partitions on nvme disks
- 4.5.90
- Translated using Weblate (Georgian) (bsc#1149754)
- 4.5.89

==== libxcrypt ====

- Enable LTO now (boo#1138833) and use FAT LTO objects for static libs.

==== mutter ====
Version update (44.0+8 -> 44.0+18)

- Update to version 44.0+18:
  + backends: Use meta_gamma_lut_new_sized() in a few more places
  + compositor:
  - Drop anchor_window_pos field from MetaWindowDrag
  - Use relative anchor coordinates for window drags
  - Avoid use of variable during resize
  + onscreen/native: Avoid freezing the frame clock on failed
    cursor commits
  + window-actor-x11: Check array bounds before accessing array
  + build: Don't disable checks in release builds
  + tests: Use a more interoperable path to bash
  + backend/nested: Ignore setting pointer constraint
  + Updated translations.
- Clean up spec, drop old disabled and unneeded pkgconfig(gtk+-3.0)
  BuildRequires and move disabled patches to SLE.

==== nfs-utils ====
Subpackages: libnfsidmap1 nfs-client

- Add 0007-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0008-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be sed in sysconfig: NFSD_SCOPE
- Add explicit pkgconfig(libkeyutils) BuildRequires: nfs-utils
  requires this for nfsv4 and we should not rely on the devel
  package being brought in by other deps.

==== nvme-cli ====
Version update (2.3 -> 2.4)
Subpackages: nvme-cli-bash-completion

- Update to version 2.4:
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value

==== open-vm-tools ====
Version update (12.1.5 -> 12.2.0)
Subpackages: libvmtools0 open-vm-tools-desktop

- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).

==== polkit ====
Subpackages: libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec typelib-1_0-Polkit-1_0

- Change permissions for rules folders (bsc#1209282)

==== python-numpy ====
Version update (1.24.1 -> 1.24.2)

- Add patch ignore-pkg_resources-deprecation.patch:
  * Ignore DeprecationWarning from pkg_resources.
- update to 1.24.2:
  just bugfixes, see
  https://github.com/numpy/numpy/releases/tag/v1.24.2
  for details

==== python-setuptools ====
Version update (65.6.3 -> 67.6.0)

- Update to 67.6.0:
  * Deprecations
    + #3434: Added deprecation warning for pkg_resources.declare_namespace.
  * Breaking Changes
    + #3741: Removed patching of distutils._msvccompiler.gen_lib_options for
    compatibility with Numpy < 1.11.2 -- by :user:`mgorny`
    + #2497: Support for PEP 440 non-conforming versions has been removed.
  * Changes
    + #3804: Added caching for supported wheel tags.
    + #3846: Added pruning heuristics to PackageFinder based on exclude.
    + #3843: Although pkg_resources has been discouraged for use, some
    projects still consider pkg_resources viable for usage. This change
    makes it clear that pkg_resources should not be used, emitting a
    DeprecationWarning when imported.
    + #3809: Merge with distutils@8c3c3d29, including fix for
    sysconfig.get_python_inc() (pypa/distutils#178), fix for segfault on
    MinGW (pypa/distutils#196), and better has_function
    support (pypa/distutils#195, #3648).
    + #3795: Ensured that __file__ is an absolute path when executing setup.py
    as part of setuptools.build_meta.
    + #3685: Fix improper usage of deprecated/removed pkgutil APIs in
    Python 3.12+.
    + #3769: Replace 'appdirs' with 'platformdirs'.
  * Misc
    + #3838: Improved error messages for pyproject.toml validations.
    + #3839: Fixed pkg_resources errors caused when parsing metadata of
    packages that are already installed but do not conform with PEP 440.
    + #3823: Fixes egg_info code path triggered during integration with pip.
    + #3782: Fixed problem with file directive in tool.setuptools.dynamic
    when value is a simple string instead of list.

==== ruby3.2 ====
Version update (3.2.1 -> 3.2.2)
Subpackages: libruby3_2-3_2

- update to 3.2.2 (boo#1209891 CVE-2023-28755 boo#1209967 CVE-2023-28756)
  https://www.ruby-lang.org/en/news/2023/03/30/redos-in-time-cve-2023-28756/
  https://www.ruby-lang.org/en/news/2023/03/28/redos-in-uri-cve-2023-28755/
  https://www.ruby-lang.org/en/news/2023/03/30/ruby-3-2-2-released/
- drop ruby-3.1.3-remove-timezone-test.patch
  solved differently upstream

==== samba ====
Version update (4.18.0+git.294.508b693e5c -> 4.18.1+git.298.4ccf830b2a4)
Subpackages: libsamba-policy0-python3 samba-ad-dc-libs samba-client samba-client-libs samba-libs samba-libs-python3 samba-python3

- Update to 4.18.1
  * CVE-2023-0225: AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users.
    (bso#15276);(bsc#1209483).
  * CVE-2023-0614: Access controlled AD LDAP attributes can be
    discovered  (bso#15270); (bsc#1209485).
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends
    passwords in cleartext(bso#15315);(bsc#1209481).
  * ldb wildcard matching makes excessive allocations;
    (bso#15331).
  * large_ldap test is inefficient; (bso#15332).

==== shared-mime-info ====

- Filter out dependency on /usr/bin/pkg-config: this package is
  installed on basically all systems, but it also contains a .pc
  file. Splitting this into a -devel package seems not reasonable.

==== snapper ====
Subpackages: libsnapper6 snapper-zypp-plugin

- use xz compression instead of bzip2 for source tar
  (gh#openSUSE/snapper#277)

==== systemd-rpm-macros ====
Version update (19 -> 20)

- Bump to version 20
- %service_del_postun: make sure to restart services if /etc/sysconfig/service
  is not present.
- Drop support for -n/-f options in %service_del_postun
  These options have been deprecated since a long time and the last package
  relying on them (drkonqi5) in the Factory repository has been updated.

==== timezone ====
Version update (2023b -> 2023c)

- timezone update 2023c:
  * Reverts changes for 2023 Lebanon DST change to 2023a data

==== util-linux ====
Subpackages: libblkid1 libfdisk1 libmount1 libsmartcols1 libuuid1

- login.pamd, remote.pamd: include postlogin-* rules
- runuser.pamd, su.pamd: Include common-session-nonlogin instead
  of common-session

==== util-linux-systemd ====

- login.pamd, remote.pamd: include postlogin-* rules
- runuser.pamd, su.pamd: Include common-session-nonlogin instead
  of common-session

==== vim ====
Version update (9.0.1392 -> 9.0.1430)
Subpackages: vim-data vim-data-common vim-small

- Updated to version 9.0.1430, fixes the following problems
  * The included xdiff code is a bit outdated.
  * Lean files are not recognized.
  * Build failure because SIZE_MAX is not defined.
  * Nu files are not recognized.
  * Sage files are not recognized.
  * WebAssembly Interface Type files are not recognized.
  * Unused macros are defined.
  * "wat" and "wast" files are one filetype.
  * Indent wrong after "export namespace" in C++.
  * Warning for uninitialized variable. (Tony Mechelynck)
  * Cursor in wrong position when leaving insert mode.
  * Invalid memory access when ending insert mode.
  * Livebook files are not recognized.
- Create a standalone package for xxd
  * This is used by non-vim tools too
- Updated to version 9.0.1418, fixes the following problems
- fixes CVE-2023-1355
  * Using NULL pointer with nested :open command.
  * Cairo files are not recognized.
  * Unx Tal files are not recognized.
  * Odin files are not recognized.
  * sort(list, 'N') does not work in Vim9 script context.
  * Highlight for popupmenu kind and extra cannot be set.
  * Profile test repeats the headers many times.
  * Highlight test script has a few problems.
  * find_file_in_path() is not reentrant.
  * Condition is always true.
  * Crash when using null_class.
  * Unused variables and functions.
  * Compilation error with some compilers.
  * Missing check for out-of-memory.
  * ILE RPG files are not recognized.
  * TableGen files are not recognized.
  * QMLdir files are not recognized.
  * Racket files are recognized as scheme.
  * Accuracy of profiling is not optimal.
  * Pony files are not recognized.
  * Compiler warning for unused variable.
  * <M-S-x> in Kitty does not use the Shift modifier.
  * Crystal files are not recognized.
  * Crash when collection is modified when using filter().
  * ESDL files are not recognized.
  * The included xdiff code is a bit outdated.

==== vulkan-loader ====
Version update (1.3.239.0 -> 1.3.243.0)

- Update to release SDK-1.3.243.0
  * Log when VK_LAYER_PATH is ignored
  * Implement VK_LUNARG_direct_driver_loading

==== vulkan-tools ====
Version update (1.3.239.0 -> 1.3.243.0)

- Update to release SDK-1.3.243.0
  * mockicd: Add Support for testing Ray Tracing
  * mockicd: Add Support for testing Video decoding
  * vulkaninfo: Dont enable Direct Driver Loading Ext

==== xorg-x11-server ====
Version update (21.1.7 -> 21.1.8)
Subpackages: xorg-x11-server-Xvfb xorg-x11-server-extra

- Update to version 21.1.8 (CVE-2023-1393):
  * This release contains the fix for CVE-2023-1393
  * composite: Fix use-after-free of the COW
  * xkbUtils: use existing symbol names instead of deleted
    deprecated ones
- Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch:
  Fixed upstream
- Switch back to tarball release, drop source service, add keyring
  and sig files.

==== xwayland ====
Version update (23.1.0 -> 23.1.1)

- Update to version 23.1.1 (CVE-2023-1393):
  + This release contains the fix for CVE-2023-1393.
  + xkbUtils: use existing symbol names instead of deleted
    deprecated ones
  + glamor: Don't glFlush/ctx switch unless any work has been
    performed
  + xwayland:
  - Refactor xwl_present_for_each_frame_callback helper
  - Prevent nested xwl_present_for_each_frame_callback calls
  + composite: Fix use-after-free of the COW
- Drop U_xserver-composite-Fix-use-after-free-of-the-COW.patch:
  Fixed upstream.
- U_xserver-composite-Fix-use-after-free-of-the-COW.patch
  * overlay window use-after-free (CVE-2023-1393, ZDI-CAN-19866,
    bsc#1209543)

==== yast2-storage-ng ====
Version update (4.6.2 -> 4.6.3)

- Fix the translation of widgets titles in the dialog to select
  a partitioning scheme (bsc#1209697).
- 4.6.3