Packages changed:
  MicroOS-release (20250423 -> 20250424)
  PackageKit-Qt6 (1.1.1 -> 1.1.2)
  augeas
  btrfsprogs
  crypto-policies
  ethtool
  gnome-shell
  grub2
  iptables
  libedit (20210910.3.1 -> 20250104.3.1)
  libgcrypt
  libraw (0.21.3 -> 0.21.4)
  nghttp2 (1.64.0 -> 1.65.0)
  sdbootutil (1+git20250421.7ffd25a -> 1+git20250423.61ca94f)

=== Details ===

==== MicroOS-release ====
Version update (20250423 -> 20250424)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== PackageKit-Qt6 ====
Version update (1.1.1 -> 1.1.2)

- Update to 1.1.2
  * offline: Make sure we allow for interactive authorization
  * Allow Transaction::setHints before the transaction has started
  * Fix check for PackageKit D-Bus specs
  * Add missing info enum values

==== augeas ====
Subpackages: libaugeas0 libfa1

- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch

==== btrfsprogs ====
Subpackages: btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1

- Fix name clash of parse_range between common/parse-utils.c and
  libblkid.a from util-linux-2.41
  (btrfsprogs-libblkid-static-lib-clash.patch).

==== crypto-policies ====

- Update crypto-policies-enable-SHA1-sigver-in-DEFAULT.patch

==== ethtool ====

- fix AppStream metainfo XML file
  * misc-fix-AppStream-metainfo-XML.patch

==== gnome-shell ====
Subpackages: gnome-shell-calendar

- Drop gnome-shell-executable-path-not-absolute.patch: The original
  patch did not work as expected, and assuming gsettings is in the
  bin dir of gnome-shell is not correct, so keep relative path
  (bsc#1241666).

==== grub2 ====
Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls

- Fix reading bls fragments in file-system dependent order that is not
  predictable (bsc#1241046)
  * 0001-blscfg-read-fragments-in-order.patch
- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch

==== iptables ====
Subpackages: libip4tc2 libip6tc2 libxtables12 xtables-plugins

- Remove legacy backend from SLES16

==== libedit ====
Version update (20210910.3.1 -> 20250104.3.1)

- update to 20250104:
  * all: sync with upstream source
  * doc/Makefile.am: fix regression.  Name all manpage links as
    el_* (e.g. el_history.3) to avoid conflicts.
  * src/chartype.c: Add missing stdint.h
  * src/sys.h, src/reallocarr.c: Remove unused sys/cdefs.h
    include, to compile against musl libc
  * src/sys.h: Add __sun guard around sys/types.h in sys.h
- drop libedit-20180525-manpage-conflicts.patch and
  libedit-hidden-symbols.patch: upstreamed
- no need for autoreconf and it's BuildRequires:

==== libgcrypt ====

- Differentiate use of SHA1 in the service level indicator [jsc#PED-12227]
  * Include upstream SLI revamp and fips certification fixes
  * Add patches:
  - libgcrypt-fips-Introduce-an-internal-API-for-FIPS-service-indicator.patch
  - libgcrypt-fips-Introduce-GCRYCTL_FIPS_SERVICE_INDICATOR-and-the-macro.patch
  - libgcrypt-fips-kdf-Implement-new-FIPS-service-indicator-for-gcry_kdf_derive.patch
  - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_hash_.patch
  - libgcrypt-fips-tests-Add-t-digest.patch
  - libgcrypt-fips-Change-the-internal-API-for-new-FIPS-service-indicator.patch
  - libgcrypt-fips-md-Implement-new-FIPS-service-indicator-for-gcry_md_open-API.patch
  - libgcrypt-fips-tests-Add-tests-for-md_open-write-read-close-for-t-digest.patch
  - libgcrypt-fips-mac-Implement-new-FIPS-service-indicator-for-gcry_mac_open.patch
  - libgcrypt-fips-cipher-Implement-new-FIPS-service-indicator-for-cipher_open.patch
  - libgcrypt-tests-fips-Add-gcry_mac_open-tests.patch
  - libgcrypt-tests-fips-Rename-t-fips-service-ind.patch
  - libgcrypt-tests-fips-Move-KDF-tests-to-t-fips-service-ind.patch
  - libgcrypt-tests-fips-Add-gcry_cipher_open-tests.patch
  - libgcrypt-fips-md-gcry_md_copy-should-care-about-FIPS-service-indicator.patch
  - libgcrypt-fips-cipher-Implement-FIPS-service-indicator-for-gcry_pk_hash_-API.patch
  - libgcrypt-fips-Introduce-GCRYCTL_FIPS_REJECT_NON_FIPS.patch
  - libgcrypt-Fix-the-previous-change.patch
  - libgcrypt-fips-Rejection-by-GCRYCTL_FIPS_REJECT_NON_FIPS-not-by-open-flags.patch
  - libgcrypt-fips-cipher-Add-behavior-not-to-reject-but-mark-non-compliant.patch
  - libgcrypt-fips-ecc-Add-rejecting-or-marking-for-gcry_pk_get_curve.patch
  - libgcrypt-tests-Add-more-tests-to-tests-t-fips-service-ind.patch
  - libgcrypt-fips-ecc-Check-DATA-in-gcry_pk_sign-verify-in-FIPS-mode.patch
  - libgcrypt-fips-cipher-Fix-memory-leak-for-gcry_pk_hash_sign.patch
  - libgcrypt-build-Improve-__thread-specifier-check.patch
  - libgcrypt-cipher-Check-and-mark-non-compliant-cipher-modes-in-the-SLI.patch
  - libgcrypt-cipher-Rename-_gcry_cipher_is_mode_fips_compliant.patch
  - libgcrypt-cipher-Don-t-differentiate-GCRY_CIPHER_MODE_CMAC-in-FIPS-mode.patch
  - libgcrypt-cipher-rsa-Mark-reject-SHA1-unknown-with-RSA-signature-generation.patch
  - libgcrypt-md-Fix-gcry_md_algo_info-to-mark-reject-under-FIPS-mode.patch
  - libgcrypt-md-Use-check_digest_algo_spec-in-_gcry_md_selftest.patch
  - libgcrypt-tests-Update-t-fips-service-ind-using-GCRY_MD_SHA256-for-KDF-tests.patch
  - libgcrypt-fips-cipher-Do-the-computation-when-marking-non-compliant.patch
  - libgcrypt-tests-Allow-tests-with-USE_RSA.patch
  - libgcrypt-cipher-Add-KAT-for-non-rfc6979-ECDSA-with-fixed-k.patch
  - libgcrypt-cipher-Differentiate-use-of-label-K-in-the-SLI.patch
  - libgcrypt-cipher-Differentiate-igninvflag-in-the-SLI.patch
  - libgcrypt-cipher-Differentiate-no-blinding-flag-in-the-SLI.patch
  - libgcrypt-fips-cipher-Add-GCRY_FIPS_FLAG_REJECT_PK_FLAGS.patch
  - libgcrypt-cipher-ecc-Fix-for-supplied-K.patch
  - libgcrypt-cipher-visibility-Differentiate-use-of-random-override-in-the-SLI.patch
  - libgcrypt-cipher-fips-Fix-for-random-override.patch
  - libgcrypt-md-Make-SHA-1-non-FIPS-internally-for-1.12-API.patch
  - libgcrypt-fips-Fix-GCRY_FIPS_FLAG_REJECT_MD.patch
  - libgcrypt-doc-Add-about-GCRYCTL_FIPS_SERVICE_INDICATOR.patch
  - libgcrypt-doc-Fix-syntax-error.patch
  * Rebase patches:
  - libgcrypt-FIPS-SLI-kdf-leylength.patch

==== libraw ====
Version update (0.21.3 -> 0.21.4)

- version update to 0.21.4
  * additional checks in PhaseOne correction tag 0x412 processing
  * Do not apply canon metadata crop to DNG files
  * Make sure the profile_length is the same size as the allocated memory.
  * fix: remove duplicated supported camera
  * check split_col/split_row values in phase_one_correct
  * Prevent out-of-bounds read in fuji 0xf00c tag parser
  * prevent OOB reads in phase_one_correct
- modified sources
  % baselibs.conf
- fixes:
  * CVE-2025-43964 [bsc#1241584]
  * CVE-2025-43962 [bsc#1241585]
  * CVE-2025-43961 [bsc#1241643]
  * CVE-2025-43963 [bsc#1241642]

==== nghttp2 ====
Version update (1.64.0 -> 1.65.0)

- version update to 1.65.0
  * Change clang-format options by @tatsuhiro-t in #2240
  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
  * fix race condition on h1 connection close by @TuxInvader in #2249
  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
  * Remove extra semicolons by @tatsuhiro-t in #2260
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265

==== sdbootutil ====
Version update (1+git20250421.7ffd25a -> 1+git20250423.61ca94f)
Subpackages: sdbootutil-dracut-measure-pcr sdbootutil-snapper sdbootutil-tukit

- Update to version 1+git20250423.61ca94f:
  * Revert "Use filesystem order in grub2-bls" (bsc#1241046)
- Update to version 1+git20250423.7e34390:
  * Check if TPM2 is in lockout (bsc#1241168)
  * Retry password when mismatch