Packages changed:
 MicroOS-release (20250512 -> 20250513)
 grub2
 kernel-source (6.14.5 -> 6.14.6)
 less (668 -> 676)
 ncurses (6.5.20250503 -> 6.5.20250510)
 podman
 python-cryptography (44.0.2 -> 44.0.3)
 python-greenlet (3.2.1 -> 3.2.2)
 python-maturin (1.8.3 -> 1.8.6)
 python313
 python313-core
 rebootmgr (3.2+git20250317.27192cc -> 3.3+git20250512.b6e4e84)

=== Details ===

==== MicroOS-release ====
Version update (20250512 -> 20250513)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== grub2 ====
Subpackages: grub2-common grub2-i386-efi grub2-i386-efi-bls grub2-i386-pc grub2-snapper-plugin grub2-x86_64-efi grub2-x86_64-efi-bls

- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
 * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
 * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
 * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
 * 0004-commands-search-Add-the-diskfilter-support.patch
 * 0005-docs-Document-available-crypto-disks-checks.patch
 * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
 * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
 * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
 * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
 * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
 * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
 * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch

==== kernel-source ====
Version update (6.14.5 -> 6.14.6)

- arm64: proton-pack: Add new CPUs 'k' values for branch
 mitigation (bsc#1242778).
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged
 users (bsc#1242778).
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
 (bsc#1242778).
- arm64: proton-pack: Expose whether the branchy loop k value
 (bsc#1242778).
- arm64: proton-pack: Expose whether the platform is mitigated
 by firmware (bsc#1242778).
- arm64: insn: Add support for encoding DSB (bsc#1242778).
- commit ad69173
- selftest/x86/bugs: Add selftests for ITS (bsc#1242006
 CVE-2024-28956).
- x86/its: Use dynamic thunks for indirect branches (bsc#1242006
 CVE-2024-28956).
- x86/ibt: Keep IBT disabled during alternative patching
 (bsc#1242006 CVE-2024-28956).
- x86/its: Align RETs in BHB clear sequence to avoid thunking
 (bsc#1242006 CVE-2024-28956).
- x86/its: Add support for RSB stuffing mitigation (bsc#1242006
 CVE-2024-28956).
- x86/its: Add "vmexit" option to skip mitigation on some CPUs
 (bsc#1242006 CVE-2024-28956).
- x86/its: Enable Indirect Target Selection mitigation
 (bsc#1242006 CVE-2024-28956).
- x86/its: Add support for ITS-safe return thunk (bsc#1242006
 CVE-2024-28956).
- x86/its: Add support for ITS-safe indirect thunk (bsc#1242006
 CVE-2024-28956).
- Update config files.
- x86/its: Enumerate Indirect Target Selection (ITS) bug
 (bsc#1242006 CVE-2024-28956).
- Documentation: x86/bugs/its: Add ITS documentation (bsc#1242006
 CVE-2024-28956).
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (bsc#1242006
 CVE-2024-28956).
- x86/bpf: Add IBHF call at end of classic BPF (bsc#1242006
 CVE-2024-28956).
- x86/bpf: Call branch history clearing sequence on exit
 (bsc#1242006 CVE-2024-28956).
- commit 820ad28
- Revert "Disable patches.kernel.org/6.14.2-607-e1000e-change-k1-configuration-on-MTP-and-late.patch"
 This reverts commit 607aeebbcf481a6b191013a1846c1eb795213e09. It turns
 out it is some special HW in the report. Let us be in sync with
 upstream.
- commit c36a0e7
- check-for-config-changes: Fix flag name typo
- commit 1046b16
- accel/ivpu: Correct mutex unlock order in job submission
 (git-fixes).
- sch_htb: make htb_deactivate() idempotent (git-fixes).
- commit 7de953d
- Linux 6.14.6 (bsc#1012628).
- Revert "rndis_host: Flag RNDIS modems as WWAN devices"
 (bsc#1012628).
- ALSA: hda/realtek - Add more HP laptops which need mute led
 fixup (bsc#1012628).
- ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
 (bsc#1012628).
- ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
 (bsc#1012628).
- ASoC: renesas: rz-ssi: Use NOIRQ_SYSTEM_SLEEP_PM_OPS()
 (bsc#1012628).
- btrfs: adjust subpage bit start based on sectorsize
 (bsc#1012628).
- btrfs: fix COW handling in run_delalloc_nocow() (bsc#1012628).
- cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
 (bsc#1012628).
- drm/fdinfo: Protect against driver unbind (bsc#1012628).
- drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
 (bsc#1012628).
- EDAC/altera: Test the correct error reg offset (bsc#1012628).
- EDAC/altera: Set DDR and SDMMC interrupt mask before
 registration (bsc#1012628).
- i2c: imx-lpi2c: Fix clock count when probe defers (bsc#1012628).
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
 (bsc#1012628).
- parisc: Fix double SIGFPE crash (bsc#1012628).
- pinctrl: airoha: fix wrong PHY LED mapping and PHY2 LED defines
 (bsc#1012628).
- perf/x86/intel: Only check the group flag for X86 leader
 (bsc#1012628).
- perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with
 vCPU's value (bsc#1012628).
- amd-xgbe: Fix to ensure dependent features are toggled with
 RX checksum offload (bsc#1012628).
- irqchip/qcom-mpm: Prevent crash when trying to handle non-wake
 GPIOs (bsc#1012628).
- mm/memblock: pass size instead of end to memblock_set_node()
 (bsc#1012628).
- mm/memblock: repeat setting reserved region nid if array is
 doubled (bsc#1012628).
- mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
 (bsc#1012628).
- spi: tegra114: Don't fail set_cs_timing when delays are zero
 (bsc#1012628).
- tracing: Do not take trace_event_sem in print_event_fields()
 (bsc#1012628).
   ... changelog too long, skipping 261 lines ...
- commit 2544d32

==== less ====
Version update (668 -> 676)

- Update to 676
 * Treat -r in LESS environment variable as -R.
 * Add ESC-j and ESC-k commands (github #560).
 * Add --no-paste option (github #523).
 * Add --no-edit-warn option (github #513).
 * Add --form-feed option (github #496).
 * Add ESC-b command (github #615).
 * Make TAB complete option name in -- command (github #531).
 * Update the file size on an attempt to go past end of file.
 * Make -R able to pass through any OSC escape sequences, not
   just OSC 8 (github #504).
 * Setting LESS_IS_MORE=0 now disables "more" compatibility even
   if invoked via a file link named "more" (github #500).
 * Pass through escape sequences in prompts even if -R is not
   set.
 * Add LESS_SHELL_LINES to support shell prompts which use more
   than one line (github #514).
 * Add LESSANSIOSCALLOW to define OSC types which may be passed
   through.
 * Add LESSANSIOSCCHARS to define non-standard OSC intro chars.
 * Add LESS_SIGUSR1 to define user signal handler (github #582).
 * Add mouse and mouse6 commands to lesskey (github #569).
 * Improve behavior of ^O^N and ^O^P commands.
 * Fix unexpected behavior when entering a partial command
   followed by a valid command (github #543).
 * Fix bug when coloring prompt string with SGR sequences
   (github #516).
 * Fix bug when searching for text near an invalid UTF-8
   sequence (github #542).
 * Fix display bug when file contains ESC followed by NUL
   (github #550).
 * Fix bug when using +:n +:p +:x or +:d on the command line
   (github #552).
 * Fix bug with --no-number-headers when header is not at start
   of file (github #566).
 * Fix bug where lesstest fails if window is resized (github
   [#570]).
 * Fix bug using "configure --with-secure=no" (github #584).
 * Fix bug using multibyte command chars (github #595).
 * Fix auto_wrap setting on Windows (github #497).
 * Fix two bugs using ^S search modifier (github #605).
 * Fix bug searching for UTF-8 strings with the PCRE2 library
   (github #610).
 * Fix bug highlighting OSC 8 links when opening a new file.
- Remove upstreamed reproducible.patch

==== ncurses ====
Version update (6.5.20250503 -> 6.5.20250510)
Subpackages: libncurses6 ncurses-utils terminfo-base

- Add ncurses patch 20250510
 + add rv/xr codes for domterm, mintty, mlterm -TD
 + add xr code for putty -TD
 + update teraterm to 5.0 -TD
 + add rlogin-color -TD

==== podman ====

- Downgrade criu from Requires to Recommends. It's provides optional
 functionality and shouldn't be a hard requires.
- Added patch to remove using rw as a default mount option (bsc#1239776)
 * 0001-remove-appending-rw-as-the-default-mount-option.patch
- Remove iptables dependency (bsc#1231424)
- Hard require criu for checkpointing functionality.

==== python-cryptography ====
Version update (44.0.2 -> 44.0.3)

- Update to 44.0.3
 * Fixed compilation when using LibreSSL 4.1.0.

==== python-greenlet ====
Version update (3.2.1 -> 3.2.2)

- Update to 3.2.2
 * Make greenlet build and run on Python 3.14 beta 1. It will not run
   on earlier versions of 3.14; it should run on subsequent versions.
   See PR 445.

==== python-maturin ====
Version update (1.8.3 -> 1.8.6)

- Update to 1.8.6
 * Print a message when overriding platform tag from
   `_PYTHON_HOST_PLATFORM`
   gh#PyO3/maturin#2594
 * Use the current python interpreter's version when the abi3
   feature is set with no explicit version
   gh#PyO3/maturin#2597
- Update to 1.8.4
 * Install a Rust toolchain into a temporary directory when building maturin
   itself or a package and a Rust toolchain is missing. Set
   MATURIN_NO_INSTALL_RUST to disable this behavior. #2421
 * Fix broken maturin develop with latest uv in #2584
 * Add PYO3_PYTHON env var support in #2534
 * Sort RECORD file in wheel archives to make them deterministic in #2550
 * Publish wheel for loongarch64 in #2548
 * Add --compression-level option to build command in #2572

==== python313 ====

- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
 since kernel 3.6-rc1)

==== python313-core ====
Subpackages: libpython3_13-1_0 python313-base

- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
 since kernel 3.6-rc1)

==== rebootmgr ====
Version update (3.2+git20250317.27192cc -> 3.3+git20250512.b6e4e84)

- Update to version 3.3+git20250512.b6e4e84:
 * Release version 3.3
 * Fix handling of temporarily disabled reboots