Packages changed:
 colord (1.4.6 -> 1.4.8)
 cryptsetup (2.8.0 -> 2.8.1)
 gnome-shell
 gstreamer-plugins-libav (1.26.4 -> 1.26.5)
 gstreamer-plugins-ugly (1.26.4 -> 1.26.5)
 kernel-source (6.16.1 -> 6.16.3)
 kmod
 libgnome-games-support (2.0.1 -> 2.0.2)
 mozjs128 (128.13.0 -> 128.14.0)
 mtools (4.0.45 -> 4.0.49)
 myrlyn (0.9.7 -> 0.9.8)

=== Details ===

==== colord ====
Version update (1.4.6 -> 1.4.8)
Subpackages: colord-color-profiles colord-lang libcolord2 libcolorhug2

- Update to version 1.4.8:
 + New Features:
 - Add AppStream metainfo XML with hardware provide info.
 - Add support for -Dsystemd_root_prefix to make local building
   easier.
 - Install sysusers.d config file if configured user is not
   root.
 + Bugfixes:
 - Add the source attribute for each man page.
 - Drop component type from AppStream metadata XML to avoid
   parsing error.
 - Fix a critical warning when running the self tests.
 - Fix USB scanners not working with RestrictAddressFamilies.
 - Fix writing to the database with ProtectSystem=strict.
 - Properly set the status to CD_SESSION_STATUS_RUNNING.
 - Use g_ascii_strtod instead of atof().
 - Use sqlite3_errmsg() to avoid getting a mutable error
   message.
- Changes from version 1.4.7:
 + Bugfixes:
 - Add various hardenings to the systemd service.
 - Always close the ICC profile when loading fails.
 - Avoid destructing LCMS plugin twice with lcms 2.14.
 - Do not make state files executable in tmpfiles.d/colord.conf.
 - Fix a double free spotted by Coverity.
 - Fix an error check when parsing the DTP94 data.
 - Fix a -Wincompatible-pointer-types warning.
 - Fix potential crash when reading from broken Huey hardware.
 - Set FILE_OFFSET_BITS explicitly.
 - Use a 64-bit time_t.
 - Use thread context for Gamut Alarm codes.
- Drop colord-CVE-2021-42523.patch and
 harden_colord.service.patch: fixed upstream.

==== cryptsetup ====
Version update (2.8.0 -> 2.8.1)
Subpackages: cryptsetup-doc cryptsetup-lang libcryptsetup12

- Update to 2.8.1:
 * Fix status and deactivation of TCRYPT (VeraCrypt compatible) devices that use chained ciphers.
 * Fix unlocking BITLK (BitLocker compatible) devices with multibyte UTF8 characters in the passphrase.
 * Do not allow activation of the LUKS2 device if the used keyslot is not encrypted (it uses a null cipher).
 - Such a configuration cannot be created by cryptsetup, but can be crafted outside of it.
 - Null cipher is sometimes used to create an empty container for later reencryption.
 - Only an empty passphrase can activate such a container (the same as in LUKS1).
 * Do not silently decrease PBKDF parallel cost (threads) if set by an option.
 - The maximum parallel cost is limited to 4 threads.
 * Fixes to configuration and installation scripts.
 - Meson and autoconf tools now properly support --prefix option for temporary directory installation.
 - Multiple fixes and cleanups to config.h for compatibility between Meson and autoconf.
 - Fix the luks2-external-tokens-path Meson option to work the same as in autoconf.
 - Fix Meson install for tool binaries, install fvault2Open man page and include test/fuzz/meson.build in release.
 * Major update to manual pages.
 - Try to explain the PBKDF hardcoded limits.
 - Add a better explanation for automatic integrity tag recalculation.
 - Mention crypt/verity/integritytab.
 - Remove or reformulate some misleading warnings present only with old and no longer supported kernels.
 - Clarify that some commands do not wipe data and unify OPAL reset wording.
 - Clarify the --label option.
 - There are also many other grammar and stylistic fixes to unify the man-page style.
 * Fixes for false-positive and annoying (optional) warnings added in recent compilers.

==== gnome-shell ====
Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang

- Add gnome-shell-can-not-load-calendars.patch: Avoid error log
 when can't load calendars (bsc#1247037).

==== gstreamer-plugins-libav ====
Version update (1.26.4 -> 1.26.5)

- Update to version 1.26.5:
 + No changes, stable versionbump only.

==== gstreamer-plugins-ugly ====
Version update (1.26.4 -> 1.26.5)
Subpackages: gstreamer-plugins-ugly-lang

- Update to version 1.26.5:
 + No changes, stable bump only.

==== kernel-source ====
Version update (6.16.1 -> 6.16.3)

- Revert "Move pesign-obs-integration requirement from kernel-syms to kernel devel"
 This reverts commit e707e417d3bfa5ccc25557bcf1566ab05d56d43b.
 See:
 https://bugzilla.suse.com/show_bug.cgi?id=1248108#c20
 and earlier.
- commit b954ff4
- Linux 6.16.3 (bsc#1012628).
- ext4: replace ext4_writepage_trans_blocks() (bsc#1012628).
- ext4: reserved credits for one extent during the folio writeback
 (bsc#1012628).
- ext4: correct the reserved credits for extent conversion
 (bsc#1012628).
- ext4: enhance tracepoints during the folios writeback
 (bsc#1012628).
- ext4: restart handle if credits are insufficient during
 allocating blocks (bsc#1012628).
- ext4: refactor the block allocation process of
 ext4_page_mkwrite() (bsc#1012628).
- ext4: fix stale data if it bail out of the extents mapping loop
 (bsc#1012628).
- ext4: move the calculation of wbc->nr_to_write to
 mpage_folio_done() (bsc#1012628).
- ext4: process folios writeback in bytes (bsc#1012628).
- commit a0f1db3
- ixgbe: prevent from unwanted interface name changes
 (<[email protected]>).
- devlink: let driver opt out of automatic phys_port_name
 generation (<[email protected]>).
- commit 4419082
- Linux 6.16.2 (bsc#1012628).
- io_uring: don't use int for ABI (bsc#1012628).
- io_uring: export io_[un]account_mem (bsc#1012628).
- io_uring/zcrx: account area memory (bsc#1012628).
- io_uring/memmap: cast nr_pages to size_t before shifting
 (bsc#1012628).
- io_uring/net: commit partial buffers on retry (bsc#1012628).
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too
 (bsc#1012628).
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
 (bsc#1012628).
- ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (bsc#1012628).
- ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300)
 to quirks (bsc#1012628).
- smb3: fix for slab out of bounds on mount to ksmbd
 (bsc#1012628).
- smb: client: remove redundant lstrp update in negotiate protocol
 (bsc#1012628).
- gpio: virtio: Fix config space reading (bsc#1012628).
- arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C
 (bsc#1012628).
- media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW
 (bsc#1012628).
- gpio: mlxbf2: use platform_get_irq_optional() (bsc#1012628).
- Revert "gpio: pxa: Make irq_chip immutable" (bsc#1012628).
- Revert "gpio: mlxbf3: only get IRQ for device instance 0"
 (bsc#1012628).
- gpio: mlxbf3: use platform_get_irq_optional() (bsc#1012628).
- leds: flash: leds-qcom-flash: Fix registry access after re-bind
 (bsc#1012628).
- Revert "leds: trigger: netdev: Configure LED blink interval
 for HW offload" (bsc#1012628).
- netlink: avoid infinite retry looping in netlink_unicast()
 (bsc#1012628).
- net: phy: micrel: fix KSZ8081/KSZ8091 cable test (bsc#1012628).
- net: ftgmac100: fix potential NULL pointer access in
 ftgmac100_phy_disconnect (bsc#1012628).
- net: gianfar: fix device leak when querying time stamp info
 (bsc#1012628).
- net: enetc: fix device and OF node leak at probe (bsc#1012628).
- net: mtk_eth_soc: fix device leak at probe (bsc#1012628).
- net: ti: icss-iep: fix device and OF node leaks at probe
 (bsc#1012628).
- net: dpaa: fix device leak when querying time stamp info
 (bsc#1012628).
- net: usb: asix_devices: add phy_mask for ax88772 mdio bus
 (bsc#1012628).
- net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio
 composition (bsc#1012628).
- fhandle: raise FILEID_IS_DIR in handle_type (bsc#1012628).
- nfsd: handle get_client_locked() failure in
 nfsd4_setclientid_confirm() (bsc#1012628).
- NFSD: detect mismatch of file handle and delegation stateid
 in OPEN op (bsc#1012628).
- NFS: Fix the setting of capabilities when automounting a new
 filesystem (bsc#1012628).
- PCI: Extend isolated function probing to LoongArch
 (bsc#1012628).
- LoongArch: BPF: Fix jump offset calculation in tailcall
 (bsc#1012628).
- LoongArch: Don't use %pK through printk() in unwinder
 (bsc#1012628).
- LoongArch: Make relocate_new_kernel_size be a .quad value
 (bsc#1012628).
- LoongArch: Avoid in-place string operation on FDT content
 (bsc#1012628).
- LoongArch: vDSO: Remove -nostdlib complier flag (bsc#1012628).
- sunvdc: Balance device refcount in vdc_port_mpgroup_check
 (bsc#1012628).
- clk: samsung: exynos850: fix a comment (bsc#1012628).
   ... changelog too long, skipping 916 lines ...
- commit f9359c1

==== kmod ====
Subpackages: libkmod2

- kmod-testsuite
 * BuildIgnore pesign-obs-integration (new runtime requirement
   of kernel-default-devel): we don't need it for the kmod
   testsuite, and it also breaks the build as we aren't
   producting any binaries. (bsc#1248108)

==== libgnome-games-support ====
Version update (2.0.1 -> 2.0.2)
Subpackages: libgnome-games-support-2-4 libgnome-games-support-lang

- Update to version 2.0.2:
 + This library is becoming a copylib! The master branch will no
   longer have releases. This 2.0.2 release might well be the
   last.
 + Bugs fixed:
 - High score name reverts to the user's real name
 - Circular ref between Context and Context.category_request

==== mozjs128 ====
Version update (128.13.0 -> 128.14.0)

- Update to version 128.14.0:
 + CVE-2025-9179: Sandbox escape due to invalid pointer in the
   Audio/Video: GMP component
 + CVE-2025-9180: Same-origin policy bypass in the Graphics:
   Canvas2D component
 + CVE-2025-9181: Uninitialized memory in the JavaScript Engine
   component
 + CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27,
   Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2,
   Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142

==== mtools ====
Version update (4.0.45 -> 4.0.49)

- version update to 4.0.49
 * 4.0.49
 - Correctly detect overlong file names, especially when
   multibyte (UTF-8) strings are concerned
 - Fix off-by-one error in 2 calls to native_to_wchar
 - When changing disk label, ignore any plain file which would
   match label
 - Added missing newlines in error messages about disk geometry
 - Do not print error message if getting geometry is simply not
   supported by device type (such as for loop devices)
 - If full geometry of a device is not available (such as for
   loop devices), at least make use of the size
 * 4.0.48
 - portability fixes, mostly for Watcom compiler
 - cleaned up some other warnings
 - various runtime fixes for windows (/dev/tty vs CONIN$)
 - use correct mtools (sub)command name in usage() when using -c
 - other usage() spelling/wording fixes
 - fix mtype'ing multiple files at once
 - integrate mkmanpages into make system, clean it, and credit
   texi2roff's original developer and others
 - document compilation on less usual environments in INSTALL
 - uninitialized buffer fix in mformat
 - fix parameter counting error in mcd, and document that image
   file name is not remembered
 * 4.0.47
 - fixed some of the manpage issues reported by manpage-l10n
 - unix-dir copying on Windows fix
 - new no-daemon mode for floppyd to make testing easier
 - make floppyd independant of XauFileName (portability)
 - autoconf fixes
 * 4.0.46
 - iconv buffer overflow fixes
 - removed references to mread and mwrite (obsolete subcommands
   from mcopy)
 - documented mdoctorfat, and addressed 2 bugs/oversights
 - removed references to obsolete mread and mwrite
 - portability fixes (dietlibc and MacOS X) & simplification

==== myrlyn ====
Version update (0.9.7 -> 0.9.8)

- Update to version 0.9.8:
 * Version bump to 0.9.8
 * Don't write a default for useRpmGroups for now (Closes #112)
 * Make the default for "useRpmGroups" compile-time configurable
 * Make "useRpmGroups" configurable in config file
 * Use textdomain "rpm-groups" for RPM groups
 * Removed redundant initial selection
 * Class rename for consistency
 * Lazy RPM tree init for startup performance
 * Filter correcty for empty RPM groups
 * Removed ancient fallback RPM groups
 * Consistent terminology
 * Open only the first two levels of the RPM groups tree
 * Suppress Qt logging spam
 * First hacky version of RPM groups (#112)
 * Translate RPM groups and suppress 'Unspecified'
 * Show RPM group in technical details view (#112)
 * Use non-breaking hyphen in read‑only
 * Don't consider ignored missing RPM signature as failed task (Closes #110)
 * GitHub config
 * Added Leap 16.x community repos