# changelog

author: Paul Howarth <paul@city-fan.org> - 1.6.10-1
changelog:
  - Update to 1.6.10
    - GeoIP_database_info now returns the full version string rather than
      incorrectly truncating it (GH#79)
    - This API is now distributed with a small test copy of GeoIP.dat rather than
      a full copy
    - Fix issue where Visual Studio 2015 was optimizing out initialization code
      (GH#81)
    - Fix test/benchmark on Windows (GH#75)


author: Paul Howarth <paul@city-fan.org> - 1.6.11-1
changelog:
  - Update to 1.6.11
    - Fix use of a NULL pointer when opening a corrupt database with 'GeoIP_open'
      (GH#87)
  - Drop EL-5 support
    - Drop redundant BuildRoot: and Group: tags
    - Drop EL5-only dependency on GeoIP-GeoLite-data
    - Drop explicit pkgconfig dependency in devel package
    - Drop buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.6.12-1
changelog:
  - Update to 1.6.12
    - Populate metro and area code when performing lookups in IPv6 City
      databases; previously this was only done when using IPv4 City
      databases


author: Rex Dieter <rdieter@fedoraproject.org> - 4.12.1-10
changelog:
  - use %make_build %license
  - -devel: drop dep on -webkit
  - unified sipdir on f29+
  - s/dbus-python/python2-dbus/
  - update sip-related build deps


author: RPM Fusion Release Engineering <leigh123linux@gmail.com> - 6.0.10-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
  - Fixes warning with: "It's not recommended to have unversioned Obsoletes: Obsoletes:  VirtualBox-qt"


author: David Juran <david@juran.se> - 0.7.4-11
changelog:
  - Fix Licence tag to be GPLv2
  - Drop 
    echo "warning: %makeinstall is deprecated, try %make_install instead" 1>&2
    /usr/bin/make \
  	prefix=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr \
  	exec_prefix=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr \
  	bindir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/bin \
  	sbindir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/sbin \
  	sysconfdir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/etc \
  	datadir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/share \
  	includedir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/include \
  	libdir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/lib64 \
  	libexecdir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/libexec \
  	localstatedir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/var \
  	sharedstatedir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/var/lib \
  	mandir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/share/man \
  	infodir=/builddir/build/BUILDROOT/a52dec-0.7.4-15.el8.x86_64/usr/share/info \
    install macro
  - Drop static archive
  - Drop djbfft


author: Danila Vershinin <info@getpagespeed.com> - 1.62.1-1
changelog:
  - Implemented ecparam CLI tool for enhanced functionality.
  - Added Docker image build workflows for improved CI.
  - Introduced OPENSSL_NO_UI_CONSOLE macro for better control.
  - Fixed Windows CI job to ensure stability.
  - Consolidated GitHub CodeBuild projects for efficiency.
  - Scoped down GitHub Token permissions for security.
  - Added more options for x509 and genrsa CLI tools.


author: Danila Vershinin <info@getpagespeed.com> - 1.63.0-1
changelog:
  - Fixed tpm2-tss CI integration issues.
  - Resolved Ruby integration CI failures.
  - Migrated Windows Omnibus to GitHub Workflow.
  - Added compiler to 24.04 docker image.
  - Introduced rpmbuild job in CI.
  - Implemented no-op functions for several UI components.
  - Improved AES-XTS performance on AArch64.


author: Danila Vershinin <info@getpagespeed.com> - 1.64.0-1
changelog:
  - Update max polyz value for improved performance.
  - Support additional options for 'openssl rsa' and 'openssl c_client'.
  - Remove outdated Python codebuild patches.
  - Add support for 'openssl dhparam'.
  - Migrate to macos-15-intel for better compatibility.
  - Ensure proper reinitialization in HMAC_Init_ex function.
  - Support for NetBSD added.


author: Danila Vershinin <info@getpagespeed.com> - 1.65.0-1
changelog:
  - Updated fuzzing and x509 images for improved testing.
  - Disabled outdated Windows CI jobs for better performance.
  - Removed unused Wycheproof test vectors.
  - Fixed openldap and regenerated configure script.
  - Setup OIDC for GitHub Token exchange with AWS.
  - Fixed various CI failures including bind9 and OCSP.
  - Bumped OpenSSL version for enhanced security.


author: Iryna Shcherbina <ishcherb@redhat.com> - 0.30-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Juerg Haefliger <juergh@gmail.com> - 0.31-1
changelog:
  - Requires python3 instead of python2 [bz#1530224].
  - Drop python2-paramiko dependency (no longer required).
  - Drop cloud-run-instances manpage (script no longer included).
  - Rebase to upstream release 0.31
  - mount-image-callback: mount with -o 'rw' or -o 'ro' (LP: #1663722)
  - mount-image-callback: run blockdev and udevadm settle on nbd devices. (LP: #1741096, 1741300)
  - mount-image-callback: Drop support for mounting lxd containers. (LP: #1715994)
  - growpart: fix bug that stopped GPT disks from being grown past 2TB. (LP: #1762748)
  - mount-image-callback: mention --help and -C/--cd-mountpoint in Usage
  - growpart: fix bug when resizing a middle partition with sgdisk (LP: #1706751) [Fred De Backer]
  - growpart: Resolve symbolic links before operating. [Kevin Locke] (LP: #1744406)
  - growpart: fix bug occurring if start sector and size were the same. [Lars Kellogg-Stedman] (LP: #1807171)
  - debian/control: drop Suggests on lxc1
  - debian/tests/control: add test growpart-start-matches-size.
  - White space cleanup.  Remove trailing space and tabs.


author: Logan Praneis <lpraneis@cloudflare.com> - 2023.7.40
changelog:
  - Added support for "SWG without DNS Filtering" mode. All DNS functionality
  	  from the WARP client is disabled while in this service mode
    - Added support for distribution name and version to be used in OS Version
  	  device posture checks
    - Improved performance of the client when in "Proxy Only" service mode
    - Improved performance of domain-based split tunneling when the IP was already
      split tunneled (seen frequently with Zoom domains and IPs being used)
    - Modified warp-cli settings to show if the applied settings came from local (mdm) or
  	  network (warp settings profile) policy to make debugging profile issues easier
    - Fixed an issue that could result in increased latency when resolving queries
    - Optimized the performance of DNS queries to prevent minor memory leaks
    - Fixed an issue when service token information was removed from an mdm.xml file
      the client would not prompt for user authentication as expected
    - Fixed an issue where localhost DNS proxy could not be set properly in certain VPN and VM configuration
    - Fixed an issue where the client would attempt to connect even when the "AUTO CONNECT" setting
      was Disabled in WARP Settings or not specified either in an MDM file
    - Fixed an issue where the client would not correctly detect and apply alternate network configuration between network changes


author: Naga Tripirineni <naga@cloudflare.com> - 2023.9.301
changelog:
  - Added initial implementation of Linux UI for Ubuntu with things like toggle switch, status, ability to switch vnets and better support for joining a Zero Trust organization
    - Added new posture type: Client certificate
    - Added support for IPv6 DEX Traceroute tests (previously only IPv4 addresses could be used)
    - Improved reliability and efficiency in configurating split tunnel rules. Most "error petting the dog" errors should now be gone and organizations with large split tunnel configuration should see reliability improvements.
    - Fixed an issue with DEX traceroutes tests where not all hops were correctly reported
    - Fixed an issue where DEX tests would not properly run immediately after a device came out of sleep
    - Fixed an issue where DEX tests would execute simultaneously causing performance issues for accounts with a large number of tests configured
    - Fixed an issue where DoH requests could take too long to timeout causes DNS reliability issues
    - Fixed an issue where DNS could temporarily fail when DHCP updates were processed
    - Fixed an issue on initial device registration that could sometimes cause it to fail and try again
    - Fixed an issue where short DNS timeouts were causing issues with some captive portals (United in particular)
    - Fixed an issue where managed network detection could fail when our firewall rules were not correctly removed under certain disconnect scenarios
    - Fixed an issue with Managed Networks where if the managed endpoint overlapped with your exclude split tunnel configuration, the split tunnel would only be open for IP traffic destined to the same port as your managed TLS endpoint
    - Fixed an issue where IPv6 traffic could be incorrectly sent down the tunnel in exclude mode
    - Fixed an issue where root CA would not be installed if enabled by admin because we were missing ca-certificates dependency
    - Fixed an issue where the client could be stuck on connecting

    Known issues
    - Not all UI features are in place yet, more will be coming in future releases
    - ZT Org name not visible in GUI when upgrading from previous GA while under mdm control
    - Sometimes the Icon will remain gray (disconnected state) while in dark


author: Keehun Nam <keehun@cloudflare.com> - 2024.2.62
changelog:
  - Added support for the arm64 architecture.
    - Added the ability for administrators to allow their end users to temporarily obtain access to local network resources in the event their home IP space overlaps with traffic normally routed through the WARP tunnel. Users on Linux interact with this feature via the warp-cli.
    - Added the ability for administrators to specify multiple configurations in MDM files that users can toggle between. This allows users to more easily switch between production and test environments or for China users to switch between their override endpoints within the UI. Users on Linux interact with this feature via the warp-cli. Refer to the help text from "warp-cli mdm --help". GUI integration of this feature will be released in the future.
    - Added the collection of firewall log information and other data to warp-diag to provide additional information for troubleshooting.
    - Added support to run a DHCP server on the same machine as the client (useful in virtual machine scenarios).
    - Added support for os_version_extra on Linux to enhance the OS device posture check.
    - Fixed an issue with sleep notifications making the client more reactive to sleep/wake-up scenarios.
    - Fixed an issue to ensure DEX tests only run when the client is connected.
    - Fixed an issue where IPv6 being disabled at boot time was not detected, leading to errors when the client attempts to set IPv6 addresses.

    Known issues
    - The Linux client GUI does not yet support all GUI features found in the Windows and macOS clients. Future releases of the Linux client will be adding these GUI features.
    - ZT Org name not visible in GUI when upgrading from previous GA while under mdm control
    - Sometimes the Icon will remain gray (disconnected state) while in dark


author: Tochukwu Nkemdilim <tochukwu@cloudflare.com> - 2024.4.133
changelog:
  - Linux client downloads will now contain version numbers in the file name to allow easy identification.
    - Improved the re-connection logic to minimize impact to existing tunneled TCP sessions.
    - Increased the data collected by warp-diag to improve debugging capabilities.

    Known issues
    - The Linux client GUI does not yet support all GUI features found in the Windows and macOS clients. Future releases of the Linux client will be adding these GUI features.
    - ZT Org name not visible in GUI when upgrading from previous GA while under mdm control.
    - Sometimes the Icon will remain gray (disconnected state) while in dark mode.


author: Shrey Amin <samin@cloudflare.com> - 2024.6.497
changelog:
  New Features
    - The WARP client now supports operation on Ubuntu 24.04.
    - Admins can now elect to have ZT WARP clients connect using the MASQUE protocol; this setting is in Device Profiles. Note: before MASQUE can be used, the global setting for Override local interface IP must be enabled. For more detail, see https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#device-tunnel-protocol. This feature will be rolled out to customers in stages over approximately the next month.
    - The Device Posture client certificate check has been substantially enhanced. The primary enhancement is the ability to check for client certificates that have unique common names, made unique by the inclusion of the device serial number or host name (for example, CN = 123456.mycompany, where 123456 is the device serial number). Additional details can be found here:  https://developers.cloudflare.com/cloudflare-one/identity/devices/warp-client-checks/client-certificate/
    - TCP MSS clamping is now used where necessary to meet the MTU requirements of the tunnel interface. This will be especially helpful in docker use cases.

    Warnings
    - Ubuntu 16.04 and 18.04 are not supported by this version of the client.
    - This is the last GA release that will be supporting older, deprecated warp-cli commands. There are two methods to identify these commands. One, when used in this release, the command will work but will also return a deprecation warning. And two, the deprecated commands do not appear in the output of `warp-cli -h`.

    Known issues
    - There are certain known limitations preventing the use of the MASQUE tunnel protocol in certain scenarios. Do not use the MASQUE tunnel protocol if:
      - A Magic WAN integration is on the account and does not have the latest packet flow path for WARP traffic. Please check migration status with your account team.
      - Your account has Regional Services enabled.
    - The Linux client GUI does not yet support all GUI features found in the Windows and macOS clients. Future releases of the Linux client will be adding these GUI features.
    - ZT Org name not visible in GUI when upgrading from previous GA while under mdm control.
    - Sometimes the Icon will remain gray (disconnected state) while in dark mode.


author: Tochukwu Nkemdilim <tochukwu@cloudflare.com> - 2024.9.342
changelog:
  Changes and improvements
    - Added list targets to the warp-cli to enhance the user experience with the Access for Infrastructure SSH solution.
    - Added the ability to customize PCAP options in the warp-cli.
    - Added a list of installed applications in warp-diag.
    - Added a tunnel reset mtu subcommand to the warp-cli.
    - Added the ability for warp-cli to use the team provided in the MDM file for initial registration.
    - Added a JSON output option to the warp-cli.
    - Added the ability to execute a pcap on multiple interfaces with warp-cli.
    - Added MASQUE tunnel protocol support for Consumer WARP.
    - Improved the performance of firewall operations when enforcing split tunnel configuration.
    - Fixed an issue where device posture certificate checks were unexpectedly failing.
    - Fixed an issue where the Linux GUI fails to open the browser login window when registering a new ZT organization.
    - Fixed an issue where clients using service tokens failed to retry after a network change.
    - Fixed an issue where the client, when switching between WireGuard and MASQUE protocols, sometimes required a manual tunnel key reset.
    - Fixed a known issue which required users to re-register when an older single configuration MDM file was deployed after deploying the newer, multiple configuration format.
    - Deprecated warp-cli commands have been removed. If you have any workflows that use the deprecated commands, please update to the new commands where necessary.

    Known issues
    - Using MASQUE as the tunnel protocol may be incompatible if your organization has Regional Services enabled.


author: Paul Tillotson <ptillotson@cloudflare.com> - 2024.10.279
changelog:
  Changes and improvements
    - Fixed an issue where SSH sessions and other connections were dropped when using MASQUE and the device network interface changed.
    - Improvement made so that device posture client certificate checks now support private keys with the ‘RSA PRIVATE KEY’ label (pkcs#1).
    - Fixed an issue to ensure the managed certificate is installed in the trust store if not already there.


author: Shrey Amin <samin@cloudflare.com> - 2024.10.537
changelog:
  New Features
    - Added ability for administrators to initiate remote packet capture (PCAP) and warp-diag collection

    Changes and improvements
    - Reduced unnecessary log messages when resolv.conf has no owner
    - Fixed an issue with warp-diag printing benign TLS certificate errors
    - Improved reliability of connection establishment logic under degraded network conditions
    - Improved captive portal detection behavior by forcing captive portal checks outside the tunnel
    - Allow the ability to configure tunnel protocol for consumer registrations
    - Fixed an issue with the WARP client becoming unresponsive during startup
    - Extended diagnostics collection time in warp-diag to ensure logs are captured reliably


author: Paul Tillotson <ptillotson@cloudflare.com> - 2024.11.150
changelog:
  Changes and improvements
    - Fixed an issue where SSH sessions and other connections were dropped when using MASQUE and the device's network interface changed.
    - Improvement made so that device posture client certificate checks now support PKCS#1.
    - Fixed an issue to ensure the managed certificate is installed in the trust store if not already there.
    - Reduced unnecessary log messages when resolv.conf has no owner.
    - Fixed an issue with warp-diag printing benign TLS certificate errors.
    - Improved reliability of connection establishment logic under degraded network conditions.
    - Improved captive portal detection behavior by forcing captive portal checks outside the tunnel.
    - Allow the ability to configure tunnel protocol for consumer registrations.
    - Fixed an issue with the WARP client becoming unresponsive during startup.
    - Extended diagnostics collection time in warp-diag to ensure logs are captured reliably.
    - Fixed an issue that was preventing proper operation of DNS-over-TLS (DoT) for consumer users.


author: Logan Praneis <lpraneis@cloudflare.com> - 2024.12.492
changelog:
  Changes and improvements
    - Consumers can now set the tunnel protocol using "warp-cli tunnel protocol set <proto>".
    - Extended diagnostics collection time in warp-diag to ensure logs are captured reliably.
    - Improved captive portal support by disabling the firewall during captive portal login flows.
    - Improved reliability of connection establishment logic under degraded network conditions.
    - Improved reconnection speed when a Cloudflare server is in a degraded state.
    - Improved captive portal detection on certain public networks.
    - Fixed an issue where admin override displayed an incorrect override end time.
    - Reduced connectivity interruptions on WireGuard include split tunnel configurations.
    - Fixed connectivity issues switching between managed network profiles with different configured protocols
    - QLOGs are now disabled by default and can be enabled with `warp-cli debug qlog enable`. The qlog setting from previous releases will no longer be respected.


author: Tochukwu Nkemdilim <tochukwu@cloudflare.com> - 2024.12.554
changelog:
  Changes and improvements
    - Adds support for installing all available custom gateway certificates from an account to the system store.
    - Users can now get a list of installed certificates by running `warp-cli certs`.


author: Keehun Nam <keehun@cloudflare.com> - 2024.11.309
changelog:
  Changes and improvements
    - Fixed an issue where SSH sessions and other connections were dropped when using MASQUE and the device's network interface changed.
    - Improvement made so that device posture client certificate checks now support PKCS#1.c
    - Fixed an issue to ensure the managed certificate is installed in the trust store if not already there.
    - Reduced unnecessary log messages when resolv.conf has no owner.
    - Fixed an issue with warp-diag printing benign TLS certificate errors.
    - Fixed an issue with the WARP client becoming unresponsive during startup.
    - Extended diagnostics collection time in warp-diag to ensure logs are captured reliably.
    - Fixed an issue that was preventing proper operation of DNS-over-TLS (DoT) for consumer users.


author: Tochukwu Nkemdilim <tochukwu@cloudflare.com> - 2025.1.861
changelog:
  Changes and improvements
    - Improved command line interface for Zero Trust Access for Infrastructure with added function for filtering and ordering.
    - Fixed client connectivity issues when switching between managed network profiles that use different WARP protocols.
    - Added support for WARP desktop to use additional DoH endpoints to help reduce NAT congestion.
    - Improved Wireguard connection stability on reconnections.
    - Added additional HTTP/3 QUIC connectivity test to warp-diag.
    - Added support for collection of system health metrics for enhanced device Digital Experience Monitoring.
    - Automated the removal of active registrations for devices with multiple registrations with the same Zero Trust organization.


author: Logan Praneis <lpraneis@cloudflare.com> - 2025.2.600
changelog:
  Changes and improvements
    - Improved captive portal experience to make more public networks compatible and have faster detection.
    - WARP tunnel protocol details can now be viewed by `warp-cli tunnel stats` command
    - Fixed issue with device revocation and re-registration when switching configurations
    - Added a new Global WARP Override setting. This setting puts account admins in control of disabling and enabling WARP across all devices registered to an account from the dashboard. Global WARP Override is disabled by default.


author: Rhett Griggs <rhett@cloudflare.com> - 2025.4.589
changelog:
  Changes and improvements
    - Fixed an issue where the managed network policies could incorrectly report network location beacons as missing.
    - Improved DEX Test Error reporting.
    - Fixed an issue causing client notifications to fail in IPv6 only environments which prevented the client from receiving configuration changes to settings like device profile.
    - Added a TCP fallback for the MASQUE tunnel protocol to improve compatibility with networks on MASQUE.
    - Added new IPs for Client Orchestration API for operations like tunnel connectivity checks. If your organization uses a firewall or other policies you will need to exempt these IPs.
    - Fixed an issue where frequent network changes could cause WARP to become unresponsive.
    - DNS over HTTPS traffic is now included in the WARP tunnel by default.


author: Tochukwu Nkemdilim <tochukwu@cloudflare.com> - 2025.4.929
changelog:
  This release contains two significant changes all customers should be aware of:
    1. All DNS traffic now flows inside the WARP tunnel. Customers are no longer required to configure their local Firewall rules to allow our DoH IP Address or domains.
    2. When using MASQUE, the connection will fall back to HTTP/2 (TCP) when we detect that HTTP/3 traffic is blocked. This allows for a much more reliable connection on some public WiFi networks.

    - Fixed an issue where the managed network policies could incorrectly report network location beacons as missing.
    - Improved DEX Test Error reporting.
    - Fixed an issue causing client notifications to fail in IPv6 only environments which prevented the client from receiving configuration changes to settings like device profile.
    - Added a TCP fallback for the MASQUE tunnel protocol to improve connectivity on networks that block UDP or http/3 specifically.
    - Added new IPs for Client Orchestration API for operations like tunnel connectivity checks. If your organization uses a firewall or other policies you will need to exempt these IPs.
    - Fixed an issue where frequent network changes could cause WARP to become unresponsive.
    - DNS over HTTPS traffic is now included in the WARP tunnel by default.
    - Improvement for WARP to check if tunnel connectivity fails or times out at device wake before attempting to reconnect.
    - Fixed an issue causing WARP connection disruptions after network changes.


author: Shrey Amin <samin@cloudflare.com> - 2025.4.943
changelog:
  This release contains a hotfix for Managed Networks for the 2025.4.929.0 release.

    - Fixed an issue where it could take up to 3 minutes for the correct profile to be applied in some circumstances. In the worst case, it should now only take up to 40 seconds. This will be improved further in a future release.


author: Rhett Griggs <rhett@cloudflare.com> - 2025.5.828
changelog:
  This release contains improvements and new exciting features, including post-quantum cryptography. By tunnelling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems.

    - Fixed a device registration issue causing WARP connection failures when changing networks.
    - Captive portal improvements including showing connectivity status in the client and sending system notifications for captive portal sign in
    - The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be enabled by MDM.
    - Improvement to gracefully handle changes made by MDM while WARP is not running.
    - Fixed an issue affecting split tunnel include mode, where traffic outside the tunnel was blocked when switching between Wifi and ethernet networks.


author: Rhett Griggs <rhett@cloudflare.com> - 2025.5.893
changelog:
  This release contains improvements and new exciting features, including  post-quantum cryptography. By tunnelling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems.

    - Fixed a device registration issue causing WARP connection failures when changing networks.
    - Captive portal improvements and fixes. Captive portal sign in notifications will now be sent through operating system notification services. Fix for firewall configuration issue affecting clients in DoH only mode.
    - Improved the connectivity status message in the client GUI.
    - The WARP client now applies post-quantum cryptography end-to-end on enabled devices accessing resources behind a Cloudflare Tunnel. This feature can be enabled by MDM.
    - Improvement to handle client configuration changes made by MDM during disconnection upon reconnection.
    - Fixed an issue affecting split tunnel include mode, where traffic outside the tunnel was blocked when switching between Wifi and ethernet networks.


author: Shrey Amin <samin@cloudflare.com> - 2025.5.924
changelog:
  This release contains minor fixes and improvements.

    - Fixed an issue preventing devices from reaching split-tunneled traffic even when WARP was disconnected.
    - Fix to prevent the firewall being re-enabled after user initiated client disconnection.
    - Improvement to managed network detection checks for faster switching between managed networks.

    Known issues
    - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To learn more about configuring a fallback server, please reference the [Zero Trust documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server).


author: Shrey Amin <samin@cloudflare.com> - 2025.6.1335
changelog:
  This release contains minor fixes and improvements.

    - Fixed an issue preventing devices from reaching split-tunneled traffic even when WARP was disconnected.
    - Fix to prevent the firewall being re-enabled after user initiated client disconnection.
    - Improvement for faster client connectivity on high-latency captive portal networks.
    - Fixed an issue where recursive CNAME records could cause intermittent WARP connectivity issues.


author: Shrey Amin <samin@cloudflare.com> - 2025.7.176
changelog:
  This release contains minor fixes and improvements including an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025. Instructions to make this update are available at pkg.cloudflareclient.com .

    - The MASQUE protocol is now the default protocol for all new WARP device profiles.
    - Improvement to limit idle connections in DoH mode to avoid unnecessary resource usage that can lead to DoH requests not resolving.
    - Improvements to maintain Global WARP Override settings when switching between organization configurations. 
    - Improvements to maintain client connectivity during network changes.


author: Rhett Griggs <rhett@cloudflare.com> - 2025.10.186
changelog:
  This release contains minor fixes, improvements, and new features including a new feature to manage WARP client connectivity for all devices in your fleet using an external signal.

    WARP client version 2025.8.779.0 introduced an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025. Instructions to make this update are available at pkg.cloudflareclient.com.

    - The Local Domain Fallback feature has been fixed for devices running WARP client version 2025.4.929.0 and newer. Previously, these devices could experience failures with Local Domain Fallback unless a fallback server was explicitly configured. This configuration is no longer a requirement for the feature to function correctly.
    - Improvement for WARP client posture check. Linux device posture for encrypted drives now also supports non-filesystem encryption types like dm-crypt.
    - Improvement for WARP modes, proxy mode now supports transparent HTTP proxying in addition to CONNECT-based proxying.
    - Fixed an issue where the GUI becomes unresponsive when the "Re-Authenticate in browser" button is clicked.
    - Added a new feature to Manage device connection using an external signal. This feature allows administrators to send a global signal from an on prem HTTPS endpoint that force disconnects or reconnects all WARP clients in an account based on configuration set on the endpoint.


author: Shrey Amin <samin@cloudflare.com> - 2025.5.943
changelog:
  This release contains minor fixes and improvements.

    - WARP proxy mode now uses the operating system’s DNS settings. Changes made to system DNS settings while in proxy mode require the client to be turned off then back on to take effect.
    - Fixed an issue preventing devices from reaching split-tunneled traffic even when WARP was disconnected.

    Known issues
    - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To learn more about configuring a fallback server, please reference the [Zero Trust documentation](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server).


author: Shrey Amin <samin@cloudflare.com> - 2025.5.924
changelog:
  This release contains minor fixes and improvements.

    - WARP proxy mode now uses the operating system’s DNS settings.


author: Shrey Amin <samin@cloudflare.com> - 2025.7.176
changelog:
  This release contains minor fixes and improvements including an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025. Instructions to make this update are available at pkg.cloudflareclient.com .

    - The MASQUE protocol is now the default protocol for all new WARP device profiles.
    - Improvement to limit idle connections in DoH mode to avoid unnecessary resource usage that can lead to DoH requests not resolving.
    - Improvements to maintain Global WARP Override settings when switching between organization configurations.
    - Improvements to maintain client connectivity during network changes.


author: Logan Praneis <lpraneis@cloudflare.com> - 2025.8.779
changelog:
  This release contains minor fixes and improvements including including an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025. Instructions to make this update are available at pkg.cloudflareclient.com.

    This release contains enhancements to Proxy mode for even faster resolution. The MASQUE protocol is now the only protocol that can use Proxy mode. If you previously configured a device profile to use Proxy mode with Wireguard, you will need to select a new WARP mode or all devices matching the profile will lose connectivity.


author: Shrey Amin <samin@cloudflare.com> - 2025.9.558
changelog:
  This release contains minor fixes, improvements, and new features including Path Maximum Transmission Unit Discovery (PMTUD). When PMTUD is enabled, the client will dynamically adjust packet sizing to optimize connection performance. There is also a new connection status message in the GUI to inform users that the local network connection may be unstable. This will make it easier to debug connectivity issues.

    WARP client version 2025.8.779.0 introduced an updated public key for Linux packages. The public key must be updated if it was installed before September 12, 2025 to ensure the repository remains functional after December 4, 2025. Instructions to make this update are available at pkg.cloudflareclient.com.

    - The UI now displays the health of the tunnel and DNS connections by showing a connection status message when the network may be unstable. This will make it easier to debug connectivity issues.
    - Fixed an issue where deleting a registration was erroneously reported as having failed. 
    - Path Maximum Transmission Unit Discovery (PMTUD) may now be used to discover the effective MTU of the connection. This allows the WARP client to improve connectivity optimized for each network. PMTUD is disabled by default. To enable it, refer to our developer [documentation](https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/warp/deployment/mdm-deployment/path-mtu-discovery/#enable-path-mtu-discovery).


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2o-5
changelog:
  - Keep the compat-openssl10-devel for Fedora 30
  - Generate missing build notes for assembler sources


author: Danila Vershinin <info@getpagespeed.com> - 8.17.0-1
changelog:
  - upstream release v8.17.0
  - enable HTTP/3 support via quictls and bundled nghttp3/ngtcp2
  - enable Zstd compression support
  - enable SCP/SFTP support via bundled libssh2
  - include wcurl utility and shell completions for zsh/fish


author: Danila Vershinin <info@getpagespeed.com> - 8.18.0-1
changelog:
  - Added support for HTTP/3 protocol.
  - Improved performance for large file transfers.
  - Fixed security vulnerabilities in TLS handling.
  - Updated documentation for new features.
  - Enhanced compatibility with recent OpenSSL versions.
  - Resolved build issues on certain Linux distributions.
  - Improved error messages for better debugging.


author: alarrosa@suse.com
changelog:
  - Don't unset the _unpackaged_files_terminate_build test,
    which was forgotten from the original spec file. Instead,
    set --docdir correctly for configure and remove an unwanted
    file after make install.
  - Add the %doc line to the library package so it also installs the license


author: alarrosa@suse.com
changelog:
  - Use the sources as distributed in github, which is different from
    the sources in rockowitz's OBS project
  - Use automake/autoconf/libtool


author: Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 1.1.9-1
changelog:
  - Update to 1.1.9
  - Fix startup issue when an invalid soundfont file name is given as a command
    line argument RHBZ#1399896


author: Owen Taylor <otaylor@redhat.com> - 1.1.11-3
changelog:
  - Disable hack for Flatpak builds - JACK isn't useful inside a sandbox, since
    there won't be enough privileges.


author: Kefu Chai <tchaikov@gmail.com> - 5.2.1-1
changelog:
  - Update to 5.2.1
  - Build using python3 packages on fedora
  - Remove links in document accessing network
  - Package ChangeLog.rst and README.rst
  - Drop fmt-static package


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Tom Callaway <spot@fedoraproject.org> - 2.6.1-4
changelog:
  - add configure option to disable generic dynamic tls model
  - disable generic dynamic tls model on s390x and aarch64


author: Kalev Lember <kalevlember@gmail.com> - 3.12.0-1
changelog:
  - Update to 3.12.0
  - Minor spec file cleanup
  - Don't ship large ChangeLog file
  - Use license macro for the COPYING file


author: Danila Vershinin <info@getpagespeed.com> 1.0.1-4
changelog:
  - correct license tagging
  - compare program subpackage with fixes for platform Python in EL8
  - stop compiling butteraugli (in another package)
  - man page


author: Timotheus Pokorra <timotheus.pokorra@solidcharity.com> - 5.18.1-4
changelog:
  - add symbolic link from /usr/lib/mono/4.5-api to 4.7.1-api to fix build issues for other packages depending on Mono


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 4.5.0-4
changelog:
  - Rather use ifarch than checking builder kernel for thp support
  - Cleanup; removed unnecessary patch for atomic ops on arm, pulled el5 support,
    use ix86 macro for ifarch i386 and friends


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-1
changelog:
  - New upstream release
  - Added patch for upstream issue #979 "Test suite segv on arm64"
  - Moved jeprof util to jemalloc-devel, to give less dependencies
    on the library package, closes bz #1519586
  - Respun the patch removing explicit altivec usage. Not all
    ppc64 have altive


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Peter Oliver <rpm@mavit.org.uk> - 2.41-3
changelog:
  - Build against framework version 4.7.1 for Mono 5.18.  Fixes #1680388.
  - Require mono-winforms.  Works around #1700892.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 12.10.0-17
changelog:
  - Python 2 binary package renamed to python2-appindicator
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Gergely Gombos <gombosg@gmail.com> - 2.0.2.3-3
changelog:
  - Move unversioned symlinks to the base package. Linked packages dynamically load (dlopen) this module with the name libldacBT_enc.so.


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-6
changelog:
  - Adding libmaxminddb as a new package to RHEL-8 (rhbz#1607927)
  - Adding Recommends tag for geolite2 databases


author: Danila Vershinin <info@getpagespeed.com> 3.0.4-5
changelog:
  - fixed upstream issue by setting proper location for shared-collections
  - better SELinux compatibility
  - ghost shared-collections


author: Danila Vershinin <info@getpagespeed.com> 3.0.4-11
changelog:
  - Moved cautionary scriplet for initial SELinux application to %pre
  - Fix up cautionary scriplet via echo statements to ensure printing
  - SELinux: mute fixfiles as on initial install it has nothing to fix
  - Take priority over EPEL's lousy libmodsecurity
  - Use luajit2


author: Adam Williamson <awilliam@redhat.com> - 1.3.2-1
changelog:
  - Update to 1.3.2 final (belatedly)
  - Drop patches merged upstream
  - Backport proposed fix for upstream #227 (RHBZ #1673293)
  - Backport proposed fix for CVE-2019-16378 (RHBZ #1753082 and #1753081)
  - Ship database schema and rddmarc bits (#1415753)


author: Hillwood Yang <hillwood@opensuse.org>
changelog:
  - Update version to 3.3.0
    * Enlarge the socket buffer size to 16KB.
    * Fix the empty list bug in ss-manager.
    * Fix the IPv6 address parser.


author: Michael Du <duyizhaozj321@yahoo.com>
changelog:
  - Update version to 3.3.1
    * Fix a high CPU bug introduced in 3.3.0. (#2449)
    * Fix MinGW build. (#2438)
    * Minor bug fixes. (#2402, #2412, #2427, #2443)


author: Hillwood Yang <hillwood@opensuse.org>
changelog:
  - Update version to 3.3.3
    * Refine the handling of suspicious connections.
    * Fix exploitable denial-of-service vulnerability exists in the
      UDPRelay functionality (boo#1158251, CVE-2019-5163)
    * Fix code execution vulnerability in the ss-manager binary
      (boo#1158365, CVE-2019-5164)


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
    shortcut through the -mini flavors.


author: opensuse-packaging <opensuse-packaging@opensuse.org>
changelog:
  - Update Recommends tag: use shadowsocks-v2ray-plugin instead of simple-obfs
  - Fix build on Tumbleweed: don't use gcc10!


author: Dominique Leuenberger <dimstar@opensuse.org>
changelog:
  - Revert back to the distro default compiler (i.e. GCC 10.1 on TW):
    + export CFLAGS+="-fcommon" until upstream makes this code
      compatible to GCC10.


author: opensuse-packaging <opensuse-packaging@opensuse.org>
changelog:
  - Update version to 3.3.5
    * Remove the SNI proxy function.
    * Minor bug fixes. (#2581, #2582, #2590, #2595, #2599,
      [#2600], #2620, #2687, #2692)


author: Phil Wyett <philwyett@kathenas.org> - 1.0.3-1
changelog:
  - Use %autosetup.
  - Use %exclude rather than rm for static lib files.
  - Clean-ups and small lib need not wildcard for one file in a folder etc.
  - Update to 1.0.3.


author: Nicolas Chauvet <kwizart@gmail.com> - 1.8.0-1
changelog:
  - Update to 1.8.0
  - Move to 01.org
  - Add Virtual Provides as the project change it's name
  - Drop Group


author: Nicolas Chauvet <kwizart@gmail.com> - 2.1.0-3
changelog:
  - Fix https://github.com/intel/intel-vaapi-driver/issues/419
    Backport a patch to fix compatibility with mesa 18.3 in F29
    Sent by Pete Walter <pwalter@fedoraproject.org>


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-17
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-19
changelog:
  - IBM CRC32 optimalization for POWER 8+ architectures re-add
  - fixed firefox crash duer to zlib (#1741266)
  - added test for crc32


author: Jorge A Gallegos <kad@blegh.net> - 2.0.16-1
changelog:
  - Conditionally disable router-access for tcp_wrappers deprecation (Jorge Gallegos)
  - Updated to 2.0.16 which includes fix for CVE-2018-6758 (Jorge Gallegos)


author: Till Maas <opensource@till.name> - 2.0.16-2
changelog:
  - Fix building in Rawhide (#1556525) (Jakub Jelen)
  - Disable tcp_wrappers for Fedora 28 and newer (Jakub Jelen)


author: Tadej Janež <tadej.j@nez.si> - 2.0.16-4
changelog:
  - Modernize and generalize building of Python subpackages:
    - replace python with python2
    - use appropriate macros for when refering to Python 3
    - prefix Python-dependent plugins with the version of Python they are built
      with
  - Also build Python 3 subpackages for the other Python 3 version in EPEL7


author: Tadej Janež <tadej.j@nez.si> - 2.0.16-5
changelog:
  - Build Python 3 version(s) of gevent plugin on Fedora and EPEL7
  - Build Python 3 version of greenlet plugin on Fedora and EPEL7
  - Build Python 2 version of greenlet plugin on EPEL7
  - Always build Python 3 version of tornado plugin when building with Python 3
    (drop python3_tornado build conditional)


author: Carl George <carl@george.computer> - 2.0.17.1-1
changelog:
  - Latest upstream (rhbz#1549354)
  - Enable uwsgi-plugin-coroae on EL7
  - Use systemd tmpfiles to create /run/uwsgi with group write permissions (rhbz#1427303)
  - Use /var/run/uwsgi when not using systemd
  - Build with versioned python command
  - Remove %config from systemd unit file
  - Disable greenlet plugin on EL7


author: Danila Vershinin <info@getpagespeed.com> - 0-0.7.20180829git
changelog:
  - systemd: added service restart upon package upgrade 
  - systemd: service is stopped upon package removal
  - initial release - includes padding feature


author: Danila Vershinin <info@getpagespeed.com> - 1-4
changelog:
  - allow specifying DAEMON_OPTS in configuration file to pass any extra switches
  - install Telegram server data files where they belong better
  - name binary as mtproxy instead of mtproto-proxy to better match with upstream
  - build with GCC 7


author: Danila Vershinin <info@getpagespeed.com> - 1-9
changelog:
  - make those Telegram server data files as symlinks to initial snapshots
  - so that they can be easily updated by cron while still having initial packages
  - files and update weekly
  - update configuration upon first install
  - show key upon generation


author: Danila Vershinin <info@getpagespeed.com> - 1-14
changelog:
  - integrates timeout patch from #100
  - display dd prefixed secrets for client side config
  - build with GCC 8


author: Danila Vershinin <info@getpagespeed.com> - 1-15.2.20190531git
changelog:
  - post release based on latest git commit
  - package with working init script for EL6
  - compat with EL6 i386!


author: Danila Vershinin <info@getpagespeed.com> - 0-0.7.20180829git
changelog:
  - systemd: added service restart upon package upgrade
  - systemd: service is stopped upon package removal
  - initial release - includes padding feature


author: Danila Vershinin <info@getpagespeed.com> - 3.0.7-1
changelog:
  - Fixes security vulnerability in proxy handling.
  - Improved compatibility with recent server configurations.
  - Updated dependencies for better performance.
  - Enhanced logging for easier debugging.
  - Minor bug fixes and stability improvements.


author: Andrei Belov <defan@nginx.com> 1.7.0-5
changelog:
  - improved nginx-plus status URL discovery method
  - updated crossplane, psutil, and requests modules
  - init script fixed for Debian 10 "buster"


author: GetPageSpeed <info@getpagespeed.com> 1.8.4-1
changelog:
  - 1.8.4-1
  - Replace asyncore with selectors for Python 3.12+ compatibility
  - Add GitHub Actions CI with Python 3.8-3.13 test matrix


author: Danila Vershinin <info@getpagespeed.com> 1.14.0.0.1.2-1
changelog:
  - upstream version auto-updated to 1.14.0.0.1.2
  - Previously some filters / modules would keep connections unclosed.


author: Danila Vershinin <info@getpagespeed.com> 1.14.1.0.1.2-1
changelog:
  - upstream version auto-updated to 1.14.1.0.1.2
  - Previously some filters / modules would keep connections unclosed.


author: Danila Vershinin <info@getpagespeed.com> 1.14.2.0.1.2-1
changelog:
  - upstream version auto-updated to 1.14.2.0.1.2
  - Previously some filters / modules would keep connections unclosed.


author: Danila Vershinin <info@getpagespeed.com> 1.16.0.0.1.2-1
changelog:
  - upstream version auto-updated to 1.16.0.0.1.2
  - Previously some filters / modules would keep connections unclosed.


author: Danila Vershinin <info@getpagespeed.com> 1.14.2.1.13.35.2-1
changelog:
  - upstream version auto-updated to 1.14.2.1.13.35.2
  - Release 1.9.32.10-beta
  ======================
  - This bug-fix release was made October 8th, 2015.
  - Issues Resolved
  ---------------
  -   Issue 1048 Apache stuck indefinitely waiting for PSOL (https://github.com/pagespeed/mod_pagespeed/commit/84a9deaf9c4df13ae707f44d06f577321de46e8c)  
  -   Issue 1152 boringssl build fails on suse tumbleweed/archlinux (https://github.com/pagespeed/mod_pagespeed/commit/b12e7774ba1a4c58acdba2e9040269508baefbb3)
  - Source tarball: https://dl.google.com/dl/linux/mod-pagespeed/tar/beta/mod-pagespeed-beta-1.9.32.10-r7423.tar.bz2  
  - Source tarball signature: https://dl.google.com/dl/linux/mod-pagespeed/tar/beta/mod-pagespeed-beta-1.9.32.10-r7423.tar.bz2.asc
  - PSOL binary: https://dl.google.com/dl/page-speed/psol/1.9.32.10.tar.gz


author: Danila Vershinin <info@getpagespeed.com>
changelog:
  - removed selinux-policy strict version dependency as it breaks package installation across various
  - non-binary compatible distros like Oracle Linux


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.1-35
changelog:
  - Python 2 binary package renamed to python2-notify
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kamil Páral <kparal@redhat.com> - 2:2017.3.23-10
changelog:
  - add Recommends: ntfs-3g-system-compression. That allows people with
    Windows 10 to read system files.


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4.6-15
changelog:
  - Fix FBTFS by adding firebird header path to CPPFLAGS, since firebird-devel
    package no longer includes top level symlinks (BZ#1424018)


author: Andrea Musuruane <musuruan@gmail.com> - 1.6-11
changelog:
  - Added gcc dependency
  - Added license tag
  - Used new AppData directory
  - Removed obsolete scriptlets
  - Spec file clean up


author: Leigh Scott <leigh123linux@googlemail.com> - 0.105-14
changelog:
  - Fix source url
  - Remove build requires desktop-file-utils
  - Add version to PolicyKit-authentication-agent provides
  - Spec file clean up


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.3-12
changelog:
  - Subpackage python2-py-radix has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Owen Taylor <otaylor@redhat.com> - 1.17.1-3
changelog:
  - Disable xpyb support - this is only for Python2, and was originally added
    for qtile, which uses Python3 now.


author: Kalev Lember <klember@redhat.com> - 3.34.0-2
changelog:
  - Drop Python 3 conditionals
  - Split pygobject3-devel into python2-gobject-devel and python3-gobject-devel
    (#1749589)


author: Miro Hrončok <mhroncok@redhat.com> - 4.5.4-2
changelog:
  - Make /usr/bin/coverage Python 3
  - Remove /usr/bin/python*-coverage links to cleanse tab completion results
  - Drop no longer needed Obsoletes for platform-python-coverage


author: Sandro Mani <manisandro@gmail.com> - 6.2.1-2
changelog:
  - Add full description
  - %{python2_sitearch}/* -> %{python2_sitearch}/PIL/
  - Remove files instead of using %exclude
  - Don't provide python-imaging


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.0.2.0-16
changelog:
  - Main Python 2 binary package renamed to python2-wxpython,
    and wxPython-webview renamed to python2-wxpython-webview.
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Than Ngo <than@redhat.com> - 4.8.7-47
changelog:
  - fixed #1691638 - CVE-2018-19872 qt: malformed PPM image causing division by zero and crash in qppmhandler.cpp


author: Carl George <carl@george.computer> - 0.8.0-1
changelog:
  - Latest upstream
  - Man page is now generated during build
  - Bash completion filename updated
  - Include new guide and FAQ files


author: Daniel Axelrod <daxelrod@datto.com> - 1:7.0-6
changelog:
  - Remove unused patches
  - Drop pre script for migrating from unsupported Fedora versions
  - Replace sed with configure switch


author: Danila Vershinin <info@getpagespeed.com> - 6.3.1-1
changelog:
  - Reordered saved music in My Profile.
  - Fixed cover overlapping information in My Profile.
  - Resolved issues opening stories from My Profile.
  - Fixed media viewer breaking after Live Stories.
  - Addressed several potential crashes.


author: Danila Vershinin <info@getpagespeed.com> - 6.3.2-1
changelog:
  - Improved support for gift auctions.
  - Reordered stories in My Profile albums.
  - Fixed bugs in new profile cover design.
  - Added Saved Music to data export.


author: Danila Vershinin <info@getpagespeed.com> - 6.3.4-1
changelog:
  - Show active auctions above chats list.
  - Add star sending effects in live stories.
  - Fix back button in group member profile view.
  - Export separate topics message history.
  - Export audio files saved to profile.
  - Implement various crash fixes.


author: Danila Vershinin <info@getpagespeed.com> - 6.4.0-1
changelog:
  - Added AI Summaries feature for channel posts.
  - Improved performance and stability across the application.
  - Fixed various bugs affecting user experience.
  - Enhanced security measures for user data protection.
  - Updated dependencies for better compatibility.
  - Minor UI improvements for better usability.


author: Danila Vershinin <info@getpagespeed.com> - 6.4.2-1
changelog:
  - Fixed non-closing popup menu items.
  - Resolved crash during profile section resizing.
  - Corrected text glitches from render optimizations.


author: Danila Vershinin <info@getpagespeed.com> - 39.0.0-1
changelog:
  - Initial support for WebAssembly-level debugging introduced.
  - Pooling allocator now provides metrics on unused slots.
  - Wizer and component-init projects merged into Wasmtime.
  - C API now exposes wasm exceptions proposal support.
  - New custom-sync-primitives feature for no_std targets.
  - Support for unsafe intrinsics added for compile-time builtins.
  - Wasmtime now requires Rust 1.89.0 or later.


author: Danila Vershinin <info@getpagespeed.com> - 40.0.0-1
changelog:
  - Added WASIp3 support for `wasi:http` with new response conversion.
  - Cranelift introduces a patchable ABI for better runtime flexibility.
  - WebAssembly `threads` support is now tier 2 by default.
  - Optimizations added to Cranelift's optimization passes.
  - Component model async support updated; recompilation required for historical binaries.
  - Initial groundwork for graceful OOM handling added.
  - Fixed various compilation and panic issues across platforms.


author: Danila Vershinin <info@getpagespeed.com> - 40.0.1-1
changelog:
  - Tested CI-based crate publishing infrastructure.
  - Transitioned to crates.io for trusted publishing.


author: Danila Vershinin <info@getpagespeed.com> - 40.0.2-1
changelog:
  - Fixed potential stack overflow in x64 backend during cmp emission.
  - Corrected ISLE optimization rules for vector inputs.
  - Resolved x64 lowering issues for shld in edge cases.


