Packages changed:
  MicroOS-release (20251024 -> 20251027)
  gdk-pixbuf (2.44.3 -> 2.44.4)
  glib2 (2.86.0 -> 2.86.1)
  glycin-loaders (2.0.3 -> 2.0.4)
  grub2
  kernel-source (6.17.4 -> 6.17.5)
  lcms2 (2.16 -> 2.17)
  libglycin (2.0.3 -> 2.0.4)
  librsvg (2.61.1 -> 2.61.2)
  llvm21 (21.1.3 -> 21.1.4)
  python-gobject (3.54.3 -> 3.54.5)
  xen (4.20.1_04 -> 4.20.1_06)

=== Details ===

==== MicroOS-release ====
Version update (20251024 -> 20251027)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== gdk-pixbuf ====
Version update (2.44.3 -> 2.44.4)
Subpackages: gdk-pixbuf-query-loaders libgdk_pixbuf-2_0-0 typelib-1_0-GdkPixbuf-2_0

- Update to version 2.44.4:
  + glycin:
  - Make svgz work
  - Support saving avif
  + docs: Add deprecation tags for GdkPixbufAnimation
  + bmp: Fix loading of bottom-up images

==== glib2 ====
Version update (2.86.0 -> 2.86.1)
Subpackages: glib2-tools libgio-2_0-0 libgirepository-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0 typelib-1_0-GLib-2_0 typelib-1_0-GModule-2_0 typelib-1_0-GObject-2_0 typelib-1_0-Gio-2_0

- Update to version 2.86.1:
  + Bugs fixed:
  - GIRepository: union fields offsets for compiled typelibs all
    have offset 0xffff
  - `gio/tests/socket-listener` requires dlsym
  - GLib.OptionContext's get_help() includes width of invisible
    options
  - Memory leak related to g_get_home_dir
  - Gio.AppInfo.launch_default_for_uri_async crashes with
    non-existent paths
  - GNetworkMonitor's netlink backend doesn't notify connectivity
    change
  - ghash: Fix entry_is_big for CHERI architecture
  - ghash: Handle all table sizes in iterator
  - gbookmarkfile: Escape icon href and mime-type
  - docs: Add Luca Bacci as a co-maintainer of the Windows code
  - tests: Fix clang compilation warnings
  - gmem: Replace SIZE_OVERFLOWS with g_size_checked_mul
  - gstrfuncs: Check string length in g_strescape
  - gutils: Improve load_user_special_dirs' user-dirs.dirs parser
  - gutils: Handle singletons in unlocked functions
  - ghostutils: Treat 0x80 (and above) as non-ASCII
  - various fixes to user-dirs.dirs handling in gutils
  - girnode: Fix computation of union member offsets
  - gopenuriportal: Fix a crash when the file can’t be opened
  - gtype: Use transfer none for types (un)ref functions
  - gnetworkmonitorbase: Add missing notify::connectivity signal
  + Updated translations.

==== glycin-loaders ====
Version update (2.0.3 -> 2.0.4)

- Update to version 2.0.4:
  + This release contains the following new component versions:
  - glycin-heif 2.0.4
  - glycin-image-rs 2.0.4
  - glycin-jpeg2000 2.0.4
  - glycin-jxl 2.0.4
  - glycin-raw 2.0.4
  - glycin-svg 2.0.4
  - glycin-utils 4.0.4
  - glycin 3.0.4
  - libglycin 2.0.4
  - libglycin-gtk4 2.0.4
  + Fixed:
  - D-Bus connections were never completely closed, causing a
    memory and FD leak.
  - Default to loop for animations if no explicit value is set.
    This fixed as backward compatibility issue when
    glycin/libglycin is not a .3 or later.
  - Support having symlinks in a directory that is already a
    symlink and both a explicitly picked up by fontconfig.

==== grub2 ====
Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls

- Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)
  * grub2-grubenv-in-btrfs-header.patch
- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch

==== kernel-source ====
Version update (6.17.4 -> 6.17.5)

- expfs: Fix exportfs_can_encode_fh() for EXPORT_FH_FID
  (bsc#1252541).
- commit 00da826
- Linux 6.17.5 (bsc#1012628).
- vfs: Don't leak disconnected dentries on umount (bsc#1012628).
- ata: libata-core: relax checks in ata_read_log_directory()
  (bsc#1012628).
- arm64/sysreg: Fix GIC CDEOI instruction encoding (bsc#1012628).
- drm/xe/guc: Check GuC running state before deregistering exec
  queue (bsc#1012628).
- ixgbevf: fix getting link speed data for E610 devices
  (bsc#1012628).
- ixgbevf: fix mailbox API compatibility by negotiating supported
  features (bsc#1012628).
- rust: cfi: only 64-bit arm and x86 support CFI_CLANG
  (bsc#1012628).
- smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1012628).
- x86/CPU/AMD: Prevent reset reasons from being retained across
  reboot (bsc#1012628).
- slab: reset slab->obj_ext when freeing and it is
  OBJEXTS_ALLOC_FAIL (bsc#1012628).
- io_uring: protect mem region deregistration (bsc#1012628).
- Revert "drm/amd/display: Only restore backlight after
  amdgpu_dm_init or dm_resume" (bsc#1012628).
- r8152: add error handling in rtl8152_driver_init (bsc#1012628).
- net: usb: lan78xx: Fix lost EEPROM write timeout
  error(-ETIMEDOUT) in lan78xx_write_raw_eeprom (bsc#1012628).
- KVM: arm64: Prevent access to vCPU events before init
  (bsc#1012628).
- f2fs: fix wrong block mapping for multi-devices (bsc#1012628).
- gve: Check valid ts bit on RX descriptor before hw timestamping
  (bsc#1012628).
- jbd2: ensure that all ongoing I/O complete before freeing blocks
  (bsc#1012628).
- ext4: wait for ongoing I/O to complete before freeing blocks
  (bsc#1012628).
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination
  (bsc#1012628).
- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (bsc#1012628).
- btrfs: fix memory leak on duplicated memory in the qgroup
  assign ioctl (bsc#1012628).
- btrfs: only set the device specific options after devices are
  opened (bsc#1012628).
- btrfs: fix incorrect readahead expansion length (bsc#1012628).
- btrfs: fix memory leaks when rejecting a non SINGLE data
  profile without an RST (bsc#1012628).
- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1012628).
- can: gs_usb: gs_make_candev(): populate net_device->dev_port
  (bsc#1012628).
- can: gs_usb: increase max interface to U8_MAX (bsc#1012628).
- cifs: parse_dfs_referrals: prevent oob on malformed input
  (bsc#1012628).
- cxl/acpi: Fix setup of memory resource in
  cxl_acpi_set_cache_size() (bsc#1012628).
- ALSA: hda/intel: Add MSI X870E Tomahawk to denylist
  (bsc#1012628).
- ALSA: hda/realtek: Add quirk entry for HP ZBook 17 G6
  (bsc#1012628).
- ALSA: hda: cs35l41: Fix NULL pointer dereference in
  cs35l41_get_acpi_mute_state() (bsc#1012628).
- ALSA: hda: Fix missing pointer check in
  hda_component_manager_init function (bsc#1012628).
- drm/sched: Fix potential double free in
  drm_sched_job_add_resv_dependencies (bsc#1012628).
- drm/amdgpu: use atomic functions with memory barriers for vm
  fault info (bsc#1012628).
- drm/amdgpu: fix gfx12 mes packet status return check
  (bsc#1012628).
- drm/xe: Increase global invalidation timeout to 1000us
  (bsc#1012628).
- perf/core: Fix address filter match with backing files
  (bsc#1012628).
- perf/core: Fix MMAP event path names with backing files
  (bsc#1012628).
- perf/core: Fix MMAP2 event device with backing files
  (bsc#1012628).
- drm/amd: Check whether secure display TA loaded successfully
  (bsc#1012628).
- PM: hibernate: Add pm_hibernation_mode_is_suspend()
  (bsc#1012628).
- drm/amd: Fix hybrid sleep (bsc#1012628).
- media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
  (bsc#1012628).
- usb: gadget: Store endpoint pointer in usb_request
  (bsc#1012628).
- usb: gadget: Introduce free_usb_request helper (bsc#1012628).
- usb: gadget: f_rndis: Refactor bind path to use __free()
  (bsc#1012628).
- usb: gadget: f_acm: Refactor bind path to use __free()
  (bsc#1012628).
- usb: gadget: f_ecm: Refactor bind path to use __free()
  (bsc#1012628).
- usb: gadget: f_ncm: Refactor bind path to use __free()
  (bsc#1012628).
- HID: multitouch: fix sticky fingers (bsc#1012628).
- dax: skip read lock assertion for read-only filesystems
  (bsc#1012628).
    ... changelog too long, skipping 244 lines ...
- commit 60fe5ed

==== lcms2 ====
Version update (2.16 -> 2.17)

- Enable threads support
  * Drop lcms2-visibility.patch as it was causing linker errors when
    enabling threads
- Update to 2.17:
  * Add fuzzers foundation. Many thanks to Amir Montazery and Open-Source
    Technology Improvement Fund (ostif.org), Google, for funding that.
  * Add ability to disable building tests in meson
  * Fixed gamut warning not working on certain conditions
  * Mac sequoia added to test beds
  * Add the possibility of duplicating a NULL context for cloning defaults.
  * Small cleanup of CGATS parser.
  * Change computation of profile ID to follow actual ICC spec (yes, they
    changed the spec!)
  * Allow to apply color management on memory blocks > 4Gb.
  * Get rid of samples on meson compilation
  * Increase coverage of pre-multiplied alpha.
  * Bug fixing and cosmetical work.
- Refresh lcms2-ocloexec.patch

==== libglycin ====
Version update (2.0.3 -> 2.0.4)

- Update to version 2.0.4:
  + This release contains the following new component versions:
  - glycin-heif 2.0.4
  - glycin-image-rs 2.0.4
  - glycin-jpeg2000 2.0.4
  - glycin-jxl 2.0.4
  - glycin-raw 2.0.4
  - glycin-svg 2.0.4
  - glycin-utils 4.0.4
  - glycin 3.0.4
  - libglycin 2.0.4
  - libglycin-gtk4 2.0.4
  + Fixed:
  - D-Bus connections were never completely closed, causing a
    memory and FD leak.
  - Default to loop for animations if no explicit value is set.
    This fixed as backward compatibility issue when
    glycin/libglycin is not a .3 or later.
  - Support having symlinks in a directory that is already a
    symlink and both a explicitly picked up by fontconfig.

==== librsvg ====
Version update (2.61.1 -> 2.61.2)

- Update to version 2.61.2:
  + librsvg crate version 2.61.2
  + librsvg-rebind crate version 0.2.1
  + Disable compilation of the gdk-pixbuf loader module by default.
    It used to be that if meson detected that
    gdk-pixbuf-query-loaders(1) is available, then it would build
    the gdk-pixbuf loader module. Now that GNOME has switched to
    glycin loaders for images, which are sandboxed, gdk-pixbuf
    loaders are deprecated. You can still compile the gdk-pixbuf
    loader in librsvg by using the "-Dpixbuf-loader=enabled" option
    when invoking meson.
  + Reduce stack usage with deeply nested layers. This should be of
    interest especially for users of Alpine or musl-libc. Librsvg
    should hopefully no longer require users of musl-libc to
    increase the stack size for it; please tell the maintainer if
    that is the case!
  + "rsvg-convert --version" now also outputs the versions of the C
    library dependencies being used at runtime.
  + The build process now checks the version of cargo-cbuild, as it
    needs to be coordinated with the minimum supported Rust
    version. The minimum cargo-cbuild for this release is 0.10.10.
  + Compiling rsvg-convert is now optional, via the
    "-Drsvg-convert=disabled" option for Meson.
  + Update Rust dependencies.
- Run test suite for all non 32bit targets.

==== llvm21 ====
Version update (21.1.3 -> 21.1.4)

- Update to version 21.1.4.
  * This release contains bug-fixes for the LLVM 21.1.0 release.
    This release is API and ABI compatible with 21.1.0.
- Simplify script for building documentation.
- Use %ldconfig_scriptlets to automatically generate post
  scriptlets. This doesn't work with %{multisource} in Leap 15.6
  though, so we leave a fallback for that.
- Drop post scriptlets for gold and polly, which provide only
  plugin libraries that ldconfig doesn't care about.
- Rebase llvm-do-not-install-static-libraries.patch.

==== python-gobject ====
Version update (3.54.3 -> 3.54.5)
Subpackages: python313-gobject python313-gobject-Gdk python313-gobject-cairo

- Update to version 3.54.5:
  + Backport: GLib 2.86/GioUnix compatibility

==== xen ====
Version update (4.20.1_04 -> 4.20.1_06)

- bsc#1251271 - VUL-0: CVE-2025-58147,CVE-2025-58148: xen:
  Incorrect input sanitisation in Viridian hypercalls (XSA-475)
  xsa475-1.patch
  xsa475-2.patch