# changelog

author: Tomas Kopecek <tkopecek at redhat.com> - 1.33.1-1
changelog:
  - PR#3834: wait with writing timestamps after results dir is created
  - PR#3836: add support for sw_64 and loongarch64
  - PR#3839: basic vim syntax highlighting for hub policy
  - PR#3840: doc: readTaggedRPMS/Builds API documentation
  - PR#3846: cli: streamline python/json options in call command
  - PR#3857: Fix duplicate build link on CG taskinfo page
  - PR#3864: drop stray typing hint


author: Tomas Kopecek <tkopecek at redhat.com> - 1.34.0-1
changelog:
  - PR#3537: Switch to WatchedFileHandler for logger
  - PR#3726: fix docstring getTaskInfo
  - PR#3761: doc: More XMLRPC-related docs
  - PR#3772: Scheduler part 1
  - PR#3794: Unify getSessionInfo output
  - PR#3813: list-history: fix [still active] display for edit entries
  - PR#3817: Remove get_sequence_value in 1.34
  - PR#3818: Remove koji.AUTHTYPE_* in 1.34
  - PR#3828: better handling of deleted tags in kojiweb
  - PR#3830: kojira no_repo_effective_age setting
  - PR#3832: fix release notes version
  - PR#3835: explain _ord() method
  - PR#3838: distrepo will not skip rpm stat by default
  - PR#3841: create initial repo for sidetag
  - PR#3842: Don't spawn createrepo if not needed
  - PR#3843: Package migration scripts to koji-hub
  - PR#3850: Inherit group permissions
  - PR#3851: sidetag: extend is_sidetag_owner for untag ops
  - PR#3855: Extend getUser to get user groups
  - PR#3859: Fix user_in_group policy test
  - PR#3861: tox: Don't install coverage every run
  - PR#3865: fix tests/flake8
  - PR#3873: disable use_bootstrap_image if bot requested
  - PR#3876: fix param in createImageBuild docstring
  - PR#3879: Example of how to enable a module via mock.module_setup_commands
  - PR#3882: Sort image rpm components before inserting
  - PR#3884: short option for watch-logs --follow
  - PR#3886: Raise an error on missing build directory
  - PR#3888: kojid: Fix mock_bootstrap_image parameter name in the default config
  - PR#3889: cli: handle hub w/o getKojiVersion in cancel tasks
  - PR#3893: Clean rpm db directory of broken symlinks
  - PR#3894: Sort channels on hosts page
  - PR#3895: hub: new_build: build in error should be the old one
  - PR#3897: Retrieve task_id for older OSBS builds
  - PR#3898: Update Containerfiles
  - PR#3902: queryOpts for queryHistory
  - PR#3904: Update docstring for listPackages
  - PR#3905: More general CG import logging
  - PR#3911: Display two decimal points for the task load in hosts page
  - PR#3913: draft builds
  - PR#3915: cli: fix wait-repo message when missing builds
  - PR#3917: fix tests
  - PR#3920: Move migration script to new location
  - PR#3924: fix return type
  - PR#3927: more getSessionInfo updates
  - PR#3929: Read config file on image build indirection
  - PR#3935: fix task_id extraction for missing extra
  - PR#3938: Update the CERN koji description
  - PR#3940: Remove six.configparser.SafeConfingParser from tests
  - PR#3946: fix flake8 errors
  - PR#3948: fix arg passing in exclusiveSession
  - PR#3949: docstring typo
  - PR#3957: Fix test
  - PR#3960: cli: [list-permissions] backward compatibility for getUserPermsInheritance call
  - PR#3965: Fix unittests for python-mock-5.x
  - PR#3977: handle new task refs in clean_scratch_tasks
  - PR#3980: task assign overrides
  - PR#3983: test_cg_importer.py: avoid creating temp files in checkout


author: Tomas Kopecek <tkopecek at redhat.com> - 1.34.1-1
changelog:
  - PR#3931: web: add some handy links for module builds
  - PR#3942: policy_data_from_task_args: set target to None when it doesn't exist
  - PR#3975: Bandit [B411]: use defusedxml to prevent remote XML attacks
  - PR#3989: Oz: don't hardcode the image size unit as 'G'
  - PR#3992: Remove rpm-py-installer, update test docs and update Dockerfiles
  - PR#3996: Document draft builds
  - PR#3998: typo in set_refusal
  - PR#3999: Have builders refuse repo tasks if they can't access /mnt/koji
  - PR#4005: Fix bandit "nosec" comments
  - PR#4012: rmtree: use fork
  - PR#4015: provide draft flag to build policy
  - PR#4018: Fix scheduler log ordering
  - PR#4032: implicit task refusals
  - PR#4037: Fix temporary cg_import.log file path
  - PR#4041: Use host maxtasks if available
  - PR#4043: --limit from scheduler-logs/info
  - PR#4052: fix formatting of rpm in title
  - PR#4056: avoid explicit rowlock in taskWaitCheck
  - PR#4069: add requirement: defusedxml in setup.py
  - PR#4088: tests: py3 versions compatibility fixes


author: Tomas Kopecek <tkopecek at redhat.com> - 1.35.0-1
changelog:
  - PR#3891: Don't try to resolve server version for old hubs
  - PR#3912: anonymous getGroupMembers and getUserGroups
  - PR#3944: Backup signature headers in delete_rpm_sig
  - PR#3953: Stop lowercasing the policy failure reason
  - PR#3969: New scmpolicy plugin
  - PR#3970: Add CLI with users with given permission
  - PR#3974: Use dnf5-compatible "group install" command
  - PR#4000: Fix remove-tag-inheritance with priority
  - PR#4008: CLI list-users with filters from listUsers
  - PR#4011: Show only active channels at clusterhealth
  - PR#4013: let tag.extra override tag arches for noarch
  - PR#4023: split out buildroot log watching logic
  - PR#4025: docs: mock's configuration
  - PR#4026: Better index for rpm lookup
  - PR#4033: kojira on demand
  - PR#4044: Update getNextTask for scheduler
  - PR#4046: kiwi: Generate full logs with debug information
  - PR#4051: fixes for list-users
  - PR#4060: auto arch refusal for noarch tasks
  - PR#4063: kiwi: Only add buildroot repo if user repositories are not defined
  - PR#4066: fix errors in channel policy
  - PR#4068: Rework mocking of QueryProcessor in DBQueryTestCase
  - PR#4073: sort checksums before inserting
  - PR#4075: taskinfo CLI and webUI info message why output is not in the list
  - PR#4076: log if a restart is pending
  - PR#4082: More mocking cleanup
  - PR#4083: refuse image tasks when required deps are missing
  - PR#4086: Drop part of code related to host without update_ts
  - PR#4087: Increase index.py unit tests
  - PR#4090: Koji 1.34.1 release notes
  - PR#4092: handle volumes when clearing stray build dirs
  - PR#4093: don't ignore files in uploadFile
  - PR#4095: drop unused DBHandler class
  - PR#4097: stop suggesting that users need repo permission
  - PR#4100: setup.py: Fix version retrieval on Python 3.13+
  - PR#4103: make clean - more files
  - PR#4104: Add external koji dev environments' links
  - PR#4107: Drop unused auth options
  - PR#4110: DBHandler class dropped from API test
  - PR#4111: fix flake8
  - PR#4113: cg import updates
  - PR#4115: fix tz mismatch issues with various queries
  - PR#4117: RetryError is subclass of AuthError
  - PR#4118: basic unit test for kojid main
  - PR#4121: Provide tag data in policy_data_from_task_args
  - PR#4127: handle cases where there is no event before our ts
  - PR#4132: check-api: only warn for external type changes
  - PR#4133: more missing tearDowns
  - PR#4141: Keep schema upgrade transactional
  - PR#4158: Fix asserts in unit tests
  - PR#4164: better default handling for getMultiArchInfo
  - PR#4181: Fix a typo in the kiwi image type attribute override patch
  - PR#4184: kiwi: Add support for overriding version and releasever
  - PR#4186: Basic tests for kiwi plugin
  - PR#4192: allow None in repoInfo for backwards compat


author: Mike McLean <mikem at redhat.com> - 1.35.1-1
changelog:
  - Fix CVE-2024-9427: New XSS attack on kojiweb
  - PR#4154: Reformat watchlogs.js indentation for consistency
  - PR#4197: migration notes for repo generation


author: Mátyás Selmeci <mselmeci@wisc.edu> - 1.35.3-1.1.osg
changelog:
  - **** OSG CHANGELOG ****
      * Thu Jun 12 2025 Mátyás Selmeci <mselmeci@wisc.edu> - 1.35.3-1.1.osg
      - Update to 1.35.3 and merge OSG changes (SOFTWARE-6169)

      * Thu Jun 12 2025 Mátyás Selmeci <mselmeci@wisc.edu> - 1.34.3-1.1.osg
      - Update to 1.34.3 and merge OSG changes (SOFTWARE-6169)
      - Switch to spec file from upstream pagure

      * Fri Sep 15 2023 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.33.0-1.1.osg
      - Update to 1.33.0 and merge OSG changes
      - Tentatively drop Fix-type-in-add-group-pkg.patch (doesn't apply, not sure it's needed)

      * Tue Aug 29 2023 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.21.1-1.1.osg
      - Update to 1.21.1 and merge OSG changes
      - Drop kojicli_setup_dns.patch (don't need that feature anymore)

      * Fri Dec 30 2022 Carl Edquist <edquist@cs.wisc.edu> - 1.20.1-2.4.osg
      - Bump and rebuild for new gpg key (SOFTWARE-5422)

      * Thu Jan 21 2021 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.20.1-2.3.osg
      - Add 2652-web-input-validation.patch and 2652a-python2.patch to fix XSS vulnerability
          - https://pagure.io/koji/pull-request/2652

      * Fri May 01 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.20.1-2.1.osg
      - Update to 1.20.1-2 from Fedora
      - Drop Fix-1.15-1.16-schema-upgrade-script.patch (upstream)

      * Fri May 01 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.19.1-4.1.osg
      - Update to 1.19.1-4 from Fedora
      - Drop kojid_setup_dns.patch (no longer applies; can do the same thing with editing /etc/mock/site-defaults.cfg instead of a patch)

      * Thu Apr 30 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.18.1-1.1.osg
      - Update to 1.18.1-1 from Fedora
      - Drop 1524-1-set-module_hotfixes-1.patch (upstream)
      - Drop Restore-Python-2.6-compatibility-to-kojid.patch (no longer applies; not needed for EL7, EL8)

      * Thu Apr 23 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.17.0-10.3.osg
      - Apply patches from Koji 1.18.0 to avoid "missing module metadata" error for EL8 builds
          - https://pagure.io/koji/pull-request/1524 (1st commit)

      * Sat Apr 04 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.17.0-10.2.osg
      - Fix kojid to use Python 2.6-compatible gzip (gzip.GzipFile did not support the 'with' statement)
        (Restore-Python-2.6-compatibility-to-kojid.patch)

      * Fri Mar 27 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.17.0-10.osg
      - Update to 1.17.0-10 from Fedora
      - Drop CVE-2019-17109.patch (upstream)

      * Tue Mar 24 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.16.2-1.3.osg
      - Backport CVE-2019-17109 patch from 1.16.3; this replaces the 1635-os_path_join.patch
      - Fix 1.15->1.16 schema upgrade script
        (Fix-1.15-1.16-schema-upgrade-script.patch)
      - Replace kojira-accept-sleeptime-option.patch with kojira-add-sleeptime-to-conf.patch
        (partially upstreamed)

      * Mon Mar 23 2020 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.16.2-1.1.osg
      - Update to 1.16.2-1 from Fedora/EPEL

        Drop OSG patches that no longer apply:
        - Don-t-warn-on-compatrequests.patch
        - Don-t-warn-on-use_old_ssl-OSG-still-relies-on-it.patch
        - koji_passwd_cache.patch
        - koji_passwd_retry.patch
        - koji_proxy_cert.patch

      * Fri Dec 06 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.15.3-1.2.osg
      - Update based on Fedora's 1.15.1-3 spec file and upstream's 1.15.3 tarball.

      * Fri Nov 22 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.14.3-1.2.osg
      - Update based on Fedora's 1.14.0-4 spec file and upstream's 1.14.3 tarball.

      * Fri Nov 22 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.13.2-1.1.osg
      - Update based on Fedora's spec file and upstream's 1.13.2 tarball.

      * Fri Nov 22 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.12.2-1.1.osg
      - Add missing python-multilib and python-psycopg2 dependencies

      * Fri Nov 15 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.12.2-1.osg
      - Update to 1.12.2

      * Wed Oct 09 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.1-1.2.osg
      - Add patch for https://pagure.io/koji/pull-request/1635
        (1635-os_path_join.patch)

      * Thu Mar 14 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.1-1.1.osg
      - Drop python-libcomps requirement

      * Thu Feb 21 2019 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.1-1.osg
      - Update to 1.11.1 (SOFTWARE-3595)
      - Build from developer tarball

      * Tue Oct 30 2018 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.7
      - Add kojira-accept-sleeptime-option.patch

      * Fri Dec 22 2017 Mátyás Selmeci <matyas@cs.wisc.edu> - (no build)
      - Drop el5-isms (SOFTWARE-3050)
      - Drop createrepo_sha1.patch -- was only required for el5

      * Wed Aug 23 2017 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.6
      - Fix `koji add-group-pkg` to set the correct type (SOFTWARE-2870)
        (Fix-type-in-add-group-pkg.patch)

      * Thu Jan 19 2017 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.5
      - Require python-requests-2.6.0 (fixes "call 8 (rawUpload) failed: syntax error: line 1, column 49" error in kojid)

      * Thu Jan 12 2017 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.4
      - Add db-upgrade-1.10-to-1.11.patch to fix a failing constraint in DB upgrade
        script from 1.10 to 1.11

      * Wed Jan 11 2017 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.2
      - Add kojiweb_getfile_nontext_fix.patch to fix an error with 'getfile' kojiweb
        URLs

      * Tue Jan 03 2017 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.1
      - Merge OSG changes

      * Tue Oct 04 2016 Mátyás Selmeci <matyas@cs.wisc.edu> - 1.10.1-10.1
      - Merge OSG changes
          - Drop koji_no_sslv3.patch
          - Drop pkgorigins_filename.patch
          - Update other OSG patches

      * Fri Jan 30 2015 Mátyás Selmeci <matyas@cs.wisc.edu> 1.6.0-10
      - Patch kojid to request sha1 when running createrepo, for el5 compatibility
        (SOFTWARE-1442)

      * Thu Jan 29 2015 Carl Edquist <edquist@cs.wisc.edu> - 1.6.0-9
      - Bring in upstream fix to parse repomd.xml for pkgorigins filename,
        required for el6 koji upgrade (SOFTWARE-1442)
        (pkgorigins_filename.patch)

      * Thu Oct 16 2014 Carl Edquist <edquist@cs.wisc.edu> - 1.6.0-8
      - Add patch to allow using TLSv1 instead of SSLv3 (SOFTWARE-1637)
        (koji_no_sslv3.patch)

      * Wed May 22 2013 Matyas Selmeci <matyas@cs.wisc.edu> - 1.6.0-7
      - Add use_host_resolv to opts in koji cli so koji --mock-config makes configs with DNS set up
        (kojicli_setup_dns.patch)

      * Wed Oct 31 2012 Matyas Selmeci <matyas@cs.wisc.edu> - 1.6.0-6
      - Add Brian Bockelman's patch to allow using proxy certs
        (koji_proxy_cert.patch)

      * Wed Jun 13 2012 Matyas Selmeci <matyas@cs.wisc.edu> - 1.6.0-5
      - Allow user to retry entering SSL key password
        (koji_passwd_retry.patch)

      * Fri Oct 28 2011 Matyas Selmeci <matyas@cs.wisc.edu> - 1.6.0-4
      - add patch to check for spec file only after running source_cmd in a build from an scm
        (kojid_scmbuild_check_spec_after_running_sourcecmd.patch)

      * Tue Oct 11 2011 Matyas Selmeci <matyas@cs.wisc.edu> - 1.6.0-3
      - add setup_dns to rootopts in kojid
        (kojid_setup_dns.patch)

      * Mon Aug 08 2011 Brian Bockelman <bbockelm@cse.unl.edu> - 1.6.0-2
      - Cache passwords to decrypt SSL key in memory.
        (koji_passwd_cache.patch)


author: Dave Dykstra <dwd@fnal.gov> - 3.9-1
changelog:
  - Update cvmfs & cvmfs-server to 2.10.1, including removing the use
    of the sem command for snapshots since limiting parallelism is 
    now built in to cvmfs-server.
  - Update frontier-squid to 5.7


author: Dave Dykstra <dwd@fnal.gov> - 3.10-1
changelog:
  - Make python3 usable on both el7 & el8 by converting python tools from
    libxml2 to lxml.
  - Require python3-lxml on all hosts.
  - Make each of the subpackages require the main package.


author: Dave Dykstra <dwd@fnal.gov> - 3.11-1
changelog:
  - Remove the "-c" from manage-replicas in generate_replicas, so it will
    cleanup from failed adds of new repository and so avoid "initial
    snapshot in progress" warnings from monitoring.


author: Mátyás Selmeci <mselmeci@wisc.edu> - 6-1
changelog:
  - Update requirements for kerberos-based auth
  - Turn quilt into a soft dependency because it is not yet available on EL10


