Packages changed:
  Mesa (26.2.4 -> 26.2.5)
  Mesa-drivers (26.2.4 -> 26.2.5)
  MicroOS-release (20261017 -> 20261018)
  containerd (1.7.33 -> 2.3.3)
  dracut (112+suse.54.g5c7a104 -> 112+suse.57.g23bbfee)
  ffado (2.4.9 -> 2.5.0)
  freetype2 (2.14.3 -> 2.15.0)
  libX11 (1.8.13 -> 1.8.14)
  libXi (1.8.3 -> 1.8.4)
  libXpm (3.5.18 -> 3.5.20)
  libXrender (0.9.12 -> 0.9.13)
  libXtst (1.2.5 -> 1.2.6)
  open-vm-tools
  pipewire
  polkit-default-privs (1550+20261014.754cdd0 -> 1550+20261016.b8e1631)
  qt6-base (6.11.2 -> 6.12.0)
  qt6-declarative (6.11.2 -> 6.12.0)
  qt6-imageformats (6.11.2 -> 6.12.0)
  qt6-location (6.11.2 -> 6.12.0)
  qt6-multimedia (6.11.2 -> 6.12.0)
  qt6-positioning (6.11.2 -> 6.12.0)
  qt6-qt5compat (6.11.2 -> 6.12.0)
  qt6-quick3d (6.11.2 -> 6.12.0)
  qt6-quicktimeline (6.11.2 -> 6.12.0)
  qt6-shadertools (6.11.2 -> 6.12.0)
  qt6-speech (6.11.2 -> 6.12.0)
  qt6-svg (6.11.2 -> 6.12.0)
  qt6-tools (6.11.2 -> 6.12.0)
  qt6-virtualkeyboard (6.11.2 -> 6.12.0)
  qt6-webchannel (6.11.2 -> 6.12.0)
  qt6-webengine
  qt6-webview (6.11.2 -> 6.12.0)
  sof-firmware (2026.09.1 -> 2026.09.2)
  tesseract-ocr
  tesseract-ocr-traineddata
  vid_stab (1.1.1 -> 1.1.2)
  vim (9.2.1161 -> 9.2.1202)
  wtmpdb (0.76.0+git20260730.89c0861 -> 0.76.0+git20261016.cab5ed0)
  zix (0.8.0 -> 0.8.2)

=== Details ===

==== Mesa ====
Version update (26.2.4 -> 26.2.5)
Subpackages: Mesa-libEGL1 Mesa-libGL1 libgbm1

- Mesa-libRusticlOpenCL: no longer require libclc(llvmN); see
  changes during update of libclc to version 23.1.0 ...
- Update to 26.2.5 bugfix release
  - -> https://docs.mesa3d.org/relnotes/26.2.5
- Add n_hardcode-libclc-path.patch to work around missing libclc.pc
  with libclc 23. Upstream might solve this via config option.
- Downport upstream patches so that we find newer libclc files:
  * U_nir-load_libclc-do-not-compare-sys_path-against-NULL.patch
  * U_nir-load_libclc-turn-sys_path-into-an-array.patch
  * U_nir-load_libclc-add-llvm-23-libclc-paths.patch

==== Mesa-drivers ====
Version update (26.2.4 -> 26.2.5)
Subpackages: Mesa-dri Mesa-vulkan-device-select libvulkan_lvp

- Mesa-libRusticlOpenCL: no longer require libclc(llvmN); see
  changes during update of libclc to version 23.1.0 ...
- Update to 26.2.5 bugfix release
  - -> https://docs.mesa3d.org/relnotes/26.2.5
- Add n_hardcode-libclc-path.patch to work around missing libclc.pc
  with libclc 23. Upstream might solve this via config option.
- Downport upstream patches so that we find newer libclc files:
  * U_nir-load_libclc-do-not-compare-sys_path-against-NULL.patch
  * U_nir-load_libclc-turn-sys_path-into-an-array.patch
  * U_nir-load_libclc-add-llvm-23-libclc-paths.patch

==== MicroOS-release ====
Version update (20261017 -> 20261018)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== containerd ====
Version update (1.7.33 -> 2.3.3)

- Update to containerd v2.3.3, a major version upgrade from 1.7.33:
  * https://github.com/containerd/containerd/releases/tag/v2.3.3
- Bump minimum Go version to 1.26, required by upstream go.mod (go 1.26.3)
- Update Go import path to github.com/containerd/containerd/v2 to match
  the module path change in containerd 2.x, and own the resulting
  intermediate go_contribsrcdir directory in the devel package
- Drop 0002-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch and
  0003-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch: both
  fixes are already included upstream in v2.3.3 (golang.org/x/net is
  pinned to the fixed v0.55.0, and the required go 1.26.3 toolchain
  carries the http2 stdlib fix)
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Remove invalid patch
  * 0002-CVE-2026-33186-containerd-google.golang.org-grpc-aut.patch
- Add patches
  * 0002-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0003-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch
- Drop patches
  * 0004-CVE-2026-39821-idna-update-from-x-text-fix-ToUnicode.patch
  * 0005-CVE-2026-33814-http2-prevent-hanging-Transport-due-t.patch

==== dracut ====
Version update (112+suse.54.g5c7a104 -> 112+suse.57.g23bbfee)
Subpackages: dracut-ima

- Update to version 112+suse.57.g23bbfee:
  * test(FULL-SYSTEMD): remove unnecessary checks for openSUSE
  * test: prefer test_marker_check over check_qemu_log
  * fix: replace /boot/dracut with /var/lib/dracut/images in dracut-rpm-tmpfiles.conf

==== ffado ====
Version update (2.4.9 -> 2.5.0)

- Update to version 2.5.0:
  * ffado-mixer: visual and functional improvements; window geometry
    and state are restored on start, device state can auto-restore.
  * Fix crossbar router state restoration and setting restoration
    with multiple devices present.
  * Support multiple M-Audio ProFire 2626 devices simultaneously
    via unique GUIDs, with corrected routing tables.
  * Python type-mismatch and device-nickname fixes.

==== freetype2 ====
Version update (2.14.3 -> 2.15.0)

- Update to 2.15.0
- Important changes
  * Support for the ISO Open Font Format, Edition 5, including
    the new 'VARC' table and mixed cubic and conic outline segments
  * OpenType fonts with more than 65536 glyphs can now be handled
  * The anti-aliased rasterizer now uses dynamic heap memory for
    large glyphs, improving performance at sizes above 40 ppem
  * TrueType version 40 interpreter ClearType rendering improvements
- Important security fixes
  * CVE-2026-27171, bsc#1258392: apply the upstream zlib security
    fix to the internal gzip code (upstream issue #1468)
  * More bugs with potential security implications were found and
    fixed, all users should update
- Dropped patches (fixed upstream)
  * freetype-CVE-2026-50811.patch

==== libX11 ====
Version update (1.8.13 -> 1.8.14)
Subpackages: libX11-6 libX11-data libX11-xcb1

- Update to 1.8.13; this release includes:
  * ximcp: bound XIM_OPEN_REPLY attribute lengths (CVE-2026-94283) (!310)
  * ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths (CVE-2026-94284) (!310)
  * lcGenConv: bound byteM_parse_codeset() reads (CVE-2026-94285) (!310)
  * xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806) (!309)
  * OpenDisplay: avoid NULL dereference in out-of-memory error path (!307)
  * XSetFontPath: zero-initialize packed font path buffer (#248, !306)
  * _XSend: treat xcb_writev returning 0 as failure (!305)
  * _XSend: discard the output buffer after an I/O error (!305)
  * XkbSetIndicatorMap: avoid undefined behavior due to left shift (#246, !304)
  * nls: Add ca_ES.UTF-8@valencia locale (#234, !303)
  * Xutil.h: add include of Xresource.h (#242, !302)
  * xkb: fix incorrect size check when growing doodads in a section (!300)
  * XlibInt.c: use correct type for Win32 in SocketBytesReadable() (!299)
  * XlibInt.h: prevent Win32 CreateWindow macro from leaking into our code (!299)
- superseded the following patches:
  * 0001-1281653_CVE-2026-94283_ximcp-bound-XIM_OPEN_REPLY-attribute-lengths-to-the-.patch
  * 0002-1281657_CVE-2026-94284_ximcp-bound-XIM_REGISTER_TRIGGERKEYS-keylist-lengths.patch
  * 0003-1281661_CVE-2026-94285_lcGenConv-bound-byteM_parse_codeset-reads-to-remaini.patch
  * u_xkb-Check-the-keysym-range-in-_XkbReadKeyActions-CVE.patch

==== libXi ====
Version update (1.8.3 -> 1.8.4)

- Update to version 1.8.4
  * This release includes the fixes for the issues listed in
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
    as well as additional hardening and bug fixes.
- supersedes the following patches:
  * 0001-boo1281605_CVE-2026-93541_XQueryDeviceState-check-ValuatorClass-num_valuators-.patch
  * 0002-boo1281606_CVE-2026-93542_size_classes-copy_classes-bound-XI2-class-lengths-to.patch
  * 0003-boo1281608_CVE-2026-93543_size_classes-copy_classes-enforce-XI2-per-type-class.patch
  * 0004-boo1281609_CVE-2026-93544_XIQueryDevice-keep-padded-name-and-class-bytes-withi.patch
  * 0005-boo1281612_CVE-2026-93545_XListInputDevices-validate-device-name-lengths-again.patch
  * 0006-boo1281615_CVE-2026-94281_XListInputDevices-validate-class-lengths-cumulativel.patch
  * 0007-boo1281651_CVE-2026-94282_wireToEnterLeave-validate-buttons_len-against-the-re.patch
  * boo1285084_CVE-2026-109089_XGetDeviceControl-require-reply-control-to-match-the.patch
  * boo1285085_CVE-2026-109090_XGetDeviceControl-size-DEVICE_ENABLE-replies-for-XDe.patch

==== libXpm ====
Version update (3.5.18 -> 3.5.20)

- Update to 3.5.20
  * This release fixes CVE-2026-94287.  For more information, see the advisory:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
- supersedes the following patches
  * 0001-boo1281669_CVE-2026-94287_ParsePixels-reject-zero-dimension-XPM-images.patch
  * 0001-Fix-CVE-2026-4367-Out-of-bounds-read-in-xpmNextWord.patch

==== libXrender ====
Version update (0.9.12 -> 0.9.13)

- Update to version 0.9.13
  * This release fixes CVE-2026-88807.  For more information, see the advisory:
    https://lists.x.org/archives/xorg-announce/2026-October/003752.html
- supersedes u_Check-numSubpixel-against-numScreens-to-avoid-OOB-wr.patch

==== libXtst ====
Version update (1.2.5 -> 1.2.6)

- Update to version 1.2.6
  * This release provides fixes for CVE-2026-94286 & CVE-2026-109088
- supersedes the following patches:
  * 0001-boo1281665_CVE-2026-94286_parse_reply_call_callback-check-element-size-against.patch
  * boo1285083_CVE-2026-109088_parse_reply_call_callback-reject-zero-progress-RECOR.patch

==== open-vm-tools ====
Subpackages: libvmtools0

- Fix build with containerd 2.3.3 (boo#1284086):
  Update detect-suse-location.patch to locate the containerd grpc
  protobuf definitions in the new github.com/containerd/containerd/v2
  module directory, and to no longer require the gogo protobuf
  extensions, which were dropped in containerd 2.
  The previous containerd 1.x layout is still detected and supported.

==== pipewire ====
Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools

- Move the Recommends: alsa-ucm-conf to the -modules subpackage,
  which is always installed unlike pipewire-alsa.
- Add alsa-ucm-conf Recommends to pipewire-alsa sub-package. Pull
  in alsa-ucm-conf by default.

==== polkit-default-privs ====
Version update (1550+20261014.754cdd0 -> 1550+20261016.b8e1631)

- Update to version 1550+20261016.b8e1631:
  * profiles: add "meta" action for ksysguard processlisthelper (bsc#1281596)

==== qt6-base ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6WaylandClient6 libQt6Widgets6 libQt6WlShellIntegration6 libQt6Xml6 qt6-network-tls qt6-networkinformation-connman qt6-networkinformation-glib qt6-networkinformation-nm qt6-printsupport-cups qt6-sql-sqlite qt6-wayland

- Add upstream changes:
  * 6.12.0_Fix_touchpad_scrolling.patch
  * build_with_md4c_0_6_0.patch
- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released
- Drop patches:
  * 0001-CMake-Handle-generated-headers-in-syncqt-scan-all-mo.patch
  * 0001-QIconLoader-Don-t-consider-fallbackThemeName-in-them.patch
  * 0001-Use-newer-GCC-on-Leap.patch

==== qt6-declarative ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsPlatform6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsStyleKit6 libQt6LabsSynchronizer6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlMeta6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickVectorImage6 libQt6QuickWidgets6 qt6-declarative-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released
- Drop patch:
  * 0001-QML-engine-Correctly-compare-composites-when-multipl.patch

==== qt6-imageformats ====
Version update (6.11.2 -> 6.12.0)

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-location ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6Location6

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-multimedia ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6MultimediaWidgets6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-positioning ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6Positioning6 libQt6PositioningQuick6 qt6-positioning-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-qt5compat ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-quick3d ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 libQt6Quick3DXr6 qt6-quick3d-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-quicktimeline ====
Version update (6.11.2 -> 6.12.0)

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-shadertools ====
Version update (6.11.2 -> 6.12.0)

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-speech ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6TextToSpeech6 qt6-texttospeech

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-svg ====
Version update (6.11.2 -> 6.12.0)

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-tools ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6UiTools6 qt6-tools-qdbus

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released
- Drop patches:
  * 0001-QDoc-Add-LLVM-22-implementation-to-QualTypeNames-for.patch
  * 0002-CMake-Add-LLVM-22-to-supported-QDoc-Clang-versions.patch
  * 0001-QDoc-Use-deterministic-tiebreaker-for-shared-notifie.patch
  * 0003-CMake-Add-LLVM-23-to-supported-QDoc-Clang-versions.patch

==== qt6-virtualkeyboard ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 libQt6VirtualKeyboardQml6 qt6-virtualkeyboard-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-webchannel ====
Version update (6.11.2 -> 6.12.0)
Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== qt6-webengine ====
Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports

- Prepare package for upcoming 6.140.0 release

==== qt6-webview ====
Version update (6.11.2 -> 6.12.0)

- Update to 6.12.0
  https://www.qt.io/blog/qt-6.12-released

==== sof-firmware ====
Version update (2026.09.1 -> 2026.09.2)

- Update to version 2026.09.2:
  * Updated v2.15.1 topology binaries for Intel targets, fixing
    SoundWire digital microphones
  * New topology sof-cht-rt5677.tplg

==== tesseract-ocr ====
Subpackages: libtesseract5 tesseract-ocr-common

- Remove unused BuildRequires: libxslt-tools, plantuml and
  pkgconfig(fontconfig) are not used by the build (fontconfig is
  pulled in via pkgconfig(pangoft2) anyway); verified by a full
  rebuild without them

==== tesseract-ocr-traineddata ====

- Remove unused BuildRequires: python3-packaging; nothing in the
  spec uses Python and the built packages are unchanged
- Rewrap the generated descriptions of the language, script and
  doc subpackages so no line exceeds the length limit
  (description-line-too-long)
- Add the missing Provides for the pre-rename names
  tesseract-traineddata-orientation_and_script_detection and
  tesseract-traineddata-math_equation to the osd and equ
  subpackages, matching the language subpackages
  (obsolete-not-provided)

==== vid_stab ====
Version update (1.1.1 -> 1.1.2)

- Update to version 1.1.2:
  * Fix asymmetry between writing and reading of the binary
    transformation file, which corrupted subsequent reads
  * Drop remaining ORC references
  * ARM support via sse2neon; fix serialisation on Darwin PPC and
    on architectures with unsigned char by default
  * Fix build with CMake 4 and respect CMAKE_OSX_ARCHITECTURES

==== vim ====
Version update (9.2.1161 -> 9.2.1202)
Subpackages: vim-data-common vim-small

- Update to 9.2.1202:
  * Arbitrary code execution via Ruby omni-completion, Rmd syntax
    highlighting and Cargo quickfix hooks
    (GHSA-4xgr-vqh2-xfx8, GHSA-x2w5-pj55-7hpc, GHSA-4vf6-278g-hq7j)
  * Revert the experimental ":source ++dryrun" feature
  * Fix cursor position with 'linebreak' and a large 'tabstop';
    gj/gk no longer lose a column with virtual text above a line
  * Fix regexp matches ending inside a UTF-8 character and missed
    case-folded literal matches
  * Fix Vim9 crashes (long "implements" lists, lambdas split over
    lines or assigning to an enclosing argument, object method
    calls, long tuple types) and memory leaks on sixel quantize
    errors and with 'quickfixtextfunc'
  * Fix fixed-size windows growing when others close, :autocmd
    completion after ++args, CTRL-W with a pending CursorHold, the
    message pager dropping blank separators, unstable fuzzy
    completion order, and setreg() widths for unprintable chars
  * Many more fixes and improvements; see upstream's release notes
    for the full list
- Spec cleanup:
  * Use %make_build for the autoconf regeneration step

==== wtmpdb ====
Version update (0.76.0+git20260730.89c0861 -> 0.76.0+git20261016.cab5ed0)
Subpackages: libwtmpdb0

- Update to version 0.76.0+git20261016.cab5ed0:
  * Try first varlink to get soft_reboots_count, increase count size
  * Use DefaultDependencies=no [bsc#1284234]

==== zix ====
Version update (0.8.0 -> 0.8.2)

- Update to version 0.8.2:
  * Fix build with configure checks disabled
  * Fix handling of invalid ring size parameters
  * Fix potential out of bounds access on error
- Drop unneeded cmake BuildRequires.
- Use autosetup and ldconfig_scriptlets macros.