<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="37">
<package pkgid="eb5fb3d80098b2c3f0b505f6e2287dfb0037560e92b38fb98a9b8009a1620b0b" name="aws-iam-authenticator" arch="aarch64">
  <version epoch="0" ver="0.7.18" rel="150400.2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1669896000">- Update to version 0.5.10
  * Bump Version in Makefile
  * Automated cherry pick of #491: Bump aws sdk go to v1.44.107 (#493)
  * Remove vendor from release-0.5 (#498)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680264000">- Update to version 0.6.2
  * Add automatic release creation
  * Add tag workflow to release-0.6 branch
  * Remove dependency from PR #416
  * Revert "Add SSO Role suffix support (#416)
- from version 0.6.1
  * Test release tagging
  * Fix file permissions
  * Tag release on update to version.txt
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Added Issue and PR templates (#517)
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
- from version 0.6.0
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Update go.mod and go.sum for tests/integrations
  * Replace tabs with spaces in go.mod
  * Bump aws sdk go to v1.44.107
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Initialize metrics in NewVerifier() if needed
  * Simplify featuregate flag parsing for SSORoleMatch
  * Added ConfiguredInitDirectories featuregate for init command
  * rm more v1alpha1 version
  * Bump 0.6 (#471)
  * Bump version in Makefile
  * Add query parameter validation for multiple parameters
  * Replace deprecated seccomp annotation with seccompProfile.
  * Replace deprecated critical pod annotation with priorityClassName.
  * Whitespace consistency fixes.
  * Use rbac.authorization.k8s.io/v1 instead of v1beta1 in example manifest.
  * Add SSO Role suffix support (#416)
  * Lowercase the ARN keys
  * Remove vendor directory
  * linux/amd64 only for image target
  * Don't push on image target
- from version 0.5.16
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread leak
    checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod)
- from version 0.5.15
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.5.14
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.5.13
  * Fix file permissions
  * Tag release on update to version.txt
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.5.12
  * Bump aws sdk go to v1.44.145
  * Add go mod for E2E
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Fix Makefile on branch release-0.5 (#520)
  * rm more v1alpha1 version (#516)
- from version 0.5.11
  * Add end to end test for mountfile mode in kind Update
    Makefile to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Added ConfiguredInitDirectories featuregate for init command</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 0.6.10
  * Update go.sum
  * Only replace x/net
  * Add build-all-images make target
  * Enable cross-compilation in Dockerfile
- from version 0.6.9
  * Add DynamicFileError Metric
- from version 0.6.8
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread
    leak checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod) (bsc#1200528, CVE-2022-1996)
- from version 0.6.7
  * (no changes)
- from version 0.6.6
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.6.5
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.6.4
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.6.3
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from https://gallery.ecr.aws/ \
    eks-distro-build-tooling/golang to avoid reaching pull
    rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Add end to end test for dynamicfile backend</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 0.6.11
  * Optimize only rebuild mapper when the actual backend modes change
  * Add int test for dynamic backend mode
  * Add DynamicBackendMode
  * Allow running create release from Github UI</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701777600">- Update to version 0.6.13
  * Cherry-pick:  Fix federated user ID parsing #644 (#654)
  * Fix issue 606: use latest version of aws-sdk-go (#650)
  * Change s3 bucket for e2e tests, current default exists somewhere (#653)
- from version 0.6.12
  * Avoid parsing single quote empty inputs
  * Avoid parsing known empty inputs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 0.6.14
  * Check ARN for user ID strict check (#660) (#664)
  * Update go to 1.21.5 (#663)
  * Update go to 1.21.4 (#648) (#659)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 0.6.21
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
- from version 0.6.20
  * Merge pull request #713 from jaidevmane/updating-otelgrpc-to-v0.51.0
  * Merge pull request #709 from bryantbiggs/chore/update-ci-versions
  * Merge pull request #708 from jaidevmane/updating-deps
  * Merge pull request #707 from jaidevmane/adding-new-approvers
  * Merge pull request #687 from bryantbiggs/chore/update-app-k8s-dependencies
- from version 0.6.19
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4,
    google.golang.org/protobuf v1.33.0
- from version 0.6.18
  * Fix time formatting
  * Refactor structs for dynamic file load
  * Add support for adoption rate metrics for cam
  * Add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
- from version 0.6.17
  * Fix base image to use latest and release v0.6.17
- from version 0.6.16
  * Minor fix the IAM user arn verification
- from version 0.6.15
  * Fix role ARN comparison for user ID strict check (#669) (#671)
- Bump minimum Go version to 1.22 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722427200">- Update to version 0.6.22
  * Update the go version to 1.22.5
  * Add unit test
  * Skip service validation to get the default regions endpoint</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730808000">- Update to 0.6.27
  * Use protobuf content type instead of json for k8s client
- from version 0.6.26
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
- from version 0.6.25
  * Cleanup to use composite literals
  * Update to sig.k8s.io namespace
  * Retain original field
  * Add a namespaced field
- from version 0.6.24
  * Update the image to latest to fix CVE-2024-3968
- from version 0.6.23
  * Update upstream dependencies to v1.31.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 0.6.29
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * Handle scenario when the file is created but doesn't have content
- from version 0.6.28
  * Update owners list to sync master branch
  * Update owners list to sync master branch
  * Remove nnmin-aws from approver list
  * Add kmala to the owners list
  * Update code and add tests
  * Update code and add tests
  * Update metrics dimention to stsregion
  * Log sts host instead of global/regional
  * Log sts host instead of global/regional
  * Lpdate log
  * Remove typo and log line
  * Remove typo and log line
  * Remove typo
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Bump test go versions
  * Bump go minor version
  * Add default timeout for http client
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Replace deprecated `ioutil` package
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Add configurable Now time for signature generation
  * Return 429 for STS throttling</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 0.6.31
  * Adds http2 support
- from version 0.6.30
  * Small fixes missed during cherrypicking
  * Cherry-picked file changes from commit
    https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/554/commits
  * Remove no-op err assignment
  * Fix credential expirability check
  * Simplify featuregate flag parsing for SSORoleMatch
  * Support un-canonicalized ARNs in filemapper
  * Add SSO Role suffix support (#416)
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Chore: Update golang x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Fix: Correct codgen script due to deprecated script removal
  * Update RELEASE.md
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * Update RELEASE.md
- Add -buildmode=pie to go build command line (bsc#1239947)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760011200">- Update to version 0.7.8
  * chore: Bump indirect Kubernetes dependencies to latest
  * chore: Bump Kubernetes dependencies to latest
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Fix CVE-2025-47910
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the misc-dependencies group across 3 directories with 10 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
- from version 0.7.7
  * add support for aws-eusc partition
  * chore: Commit changes from `make codegen`
  * fix: Use `.go-version` for the go version
  * feat: Add `golanglint-ci` pull request review; resolve all findings
  * Add haoranleo as approver
  * Bump the observability-dependencies group across 3 directories with 3 updates
  * Bump actions/setup-go from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump github.com/coreos/go-oidc
  * Bump the observability-dependencies group across 3 directories with 12 updates
- from version 0.7.6
  * feat: Update go version to `1.25`; update dependencies to latest
    to patch reported vulnerabilities
  * Force TCP URLs for etcd compatibility
  * Update go dependencies with 1.34.0
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump actions/checkout from 4 to 5 in the actions group
  * Bump the aws-dependencies group across 2 directories with 13 updates
- from version 0.7.5
  * migrate hostname verification to sdk go v2
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
- from version 0.7.4
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * chore: Move observability dependencies to separate dependabot update group
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
- from version 0.7.3
  * update Approvers/reviewers
  * update go version to 1.24.4
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * added logs for global region fallback
  * added global region fallback to imds
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * bumps kops and k8s versions, replaced node label "master" with "control-plane"
  * added imds logic back in, with EC2_METADATA enabled by default
  * removed headersourceacct from ststest, return err if no region cfg
  * added context chaining, cleanup
  * add context chaining, client config fixes
  * Move non problematic cache logs into debug
  * Rename log-level to log-verbosity, remove AutomaticEnv
  * lint fixes
  * get region from imds if not in config
  * added go.sum entries for tests/integration, fixed imds nil pointer dereference
  * Revert "Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
  * added some context chaining, fixed region config in GetWithOptions
  * updated arn, deleted v1-v2 creds converter
  * updated pkg/token to v2
  * updated pkg/filecache
  * updated arn in pkg/server to use v2
  * updated pkg/server to use v2
  * upgraded ec2provider
  * Bump the misc-dependencies group across 3 directories with 5 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the misc-dependencies group across 3 directories with 6 updates
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Use logrus for filecache logs
  * Add quiet mode (cache only)
- from version 0.7.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 43 updates
  * Bump the k8s-dependencies group across 3 directories with 2 updates
- from version 0.7.1
  * Revert "Add 2 more tag validation checks"
  * Update the gorunner to v0.18.0-eks-1-32-latest
  * update the go version to 1.24.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * adding yue9944882 to owner
  * adds http2 support
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Update configmap.go
  * release authenticator from mainline with 0.7.0
  * release authenticator from mainline with 0.7.0
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump goreleaser/goreleaser-action from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Remove no-op err assignment
  * Fix credential expirability check
  * chore: Update golan x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * fix: Correct codgen script due to deprecated script removal
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * chore: Add dependabot configuration to automatically check for package updates weekly
  * handle scenario when the file is created but doesn't have content
  * update code and add tests
  * update code and add tests
  * remove nnmin-aws from approver list
  * add kmala to the owners list
  * update metrics dimention to stsregion
  * add default timeout for http client
  * log sts host instead of global/regional
  * log sts host instead of global/regional
  * update log
  * remove typo and log line
  * remove typo and log line
  * remove typo
  * Bump test go versions
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Bump go minor version
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Update aws-iam-authenticator installation command
  * use protobuf content type instead of json for k8s client
  * Update RELEASE.md
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * update RELEASE.md
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
  * Add configurable Now time for signature generation
  * cleanup to use composite literals
  * update to sig.k8s.io namespace
  * retain original field
  * update the image to latest to fix CVE-2024-39689
  * add a namespaced field
  * Update upstream dependencies to v1.31.0
  * update the go version to 1.22.5
  * Add unit test
  * skip service validation to get the default regions endpoint
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Add random string to e2e test role to avoid pipeline run conflicts
  * fix: Run `go mod tidy` from `tests/integration` directory
  * chore: Update CLI dependencies `cobra` and `viper`
  * updating google.golang.org/grpc/otelgrpc to v0.47.0
  * chore: Update CI action versions, remove `push` trigger
  * chore: Align go versions and remove unused files
  * updating k8s client libraries and go version
  * adding new approvers - nnmin-aws
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
  * chore: Re-update to latest patch version of K8s packages
  * fix time formatting
  * refactor structs for dynamic file load
  * add support for adoption rate metrics for cam
  * add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
  * chore: Re-update and align
  * fix semantic error
  * feat: Re-update K8s packages to latest release
  * fix: Use `SIGDescribe`
  * fix: Use `framework.WithDisruptive()`
  * fix: [Disruptive] in plain text is deprecated and must be added through WithDisruptive instead
  * chore: Update dependencies for `e2e` tests
  * fix: Add context to `StartTestServer`
  * fix: Align integration test `replace` versions in `go.mod`
  * fix: Fix codegen and update `replace` test integration dependencies
  * fix: Integration test dependencies run `go mod tidy`
  * fix: Downgrade `k8s.io/sample-controller` which requires updating context handling
  * chore: Update app K8s dependencies
  * adding nnmin-aws into reviewers
  * Replace deprecated `ioutil` package
  * fix base image to use latest
  * minor fix the IAM user arn verification
  * Fix role ARN comparison for user ID strict check (#669)
  * Check ARN for user ID strict check (#660)
  * Update go to 1.21.5
  * Change s3 bucket for e2e tests, current default exists somewhere (#652)
- Bump minimum Go version to 1.25 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Update to version 0.7.9
  * Creating PR to update Go version to 1.25.4
  * chore(deps): Bump the aws-dependencies group across 2 directories with 13 updates
  * chore(deps): Bump golangci/golangci-lint-action in the actions group
  * chore(deps): Bump the observability-dependencies group across 3 directories with 2 updates
  * chore(deps): Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * chore(deps): Bump the aws-dependencies group across 2 directories with 14 updates
  * bump golang version to 1.25.3
  * Creating PR to update Go version to 1.25.3
  * chore(deps): Bump github.com/onsi/ginkgo/v2
  * chore(deps): Bump the observability-dependencies group across 3 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 11 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 5 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 3 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 0.7.10:
  * 1.35.0 dependency update
  * Creating PR to update Go version to 1.25.5
  * chore(deps): Bump the observability-dependencies group across 2 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 13 updates
  * chore(deps): Bump the observability-dependencies group across 1 directory with 2 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 27 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 11 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 2 directories with 17 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771848000">- Update to version 0.7.11
  * Merge pull request #988 from dstdfx/bump-version
  * Bump version to 0.7.11
  * Merge pull request #985 from dstdfx/bump-go-version-1.25.7
  * Update go.mod for e2e/int tests
  * Update go.mod
  * Merge pull request #986 from ShiriNmi1520/master
  * Clarify README "Run the server" deployment instructions
  * Bump go to 1.25.7
  * Merge pull request #983 from eks-distro-pr-bot/eks-distro-pr-bot/go-version-bumps
  * Creating PR to update Go version to 1.25.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776168000">- Update to version 0.7.12
  * Update OWNERS in reviewers and approvers list
  * Release 0.7.12
  * ci: add verify job to catch unrun gofmt and go mod tidy
  * chore(lint): harden linter config and fix coverage gaps
  * fix(lint): add revive and unparam linters with full compliance
  * ci: add unit test job, expand golangci config, add make update/verify
  * docs(e2e): fix Go version, remove non-existent make target, fix typo
  * docs(release): remove stale ECR image update instructions and fix asset version placeholders
  * fix: address code review findings in repo cleanup branch
  * docs: rewrite development.md as a practical local dev guide
  * chore: repo cleanup, developer experience improvements
  * chore: reduce binary size by 59% (80 MB → 33 MB)
  * fix(lint): replace deprecated NewSimpleClientset and fix embedded field selector
  * fix(tests): address code review findings in integration test framework
  * fix(tests): address post-refactor issues and add go workspace
  * refactor(tests): remove k8s.io/kubernetes dependency from test modules
  * chore: update all dependencies to latest versions
- Set GOWORK=off to make building with vendored dependencies work</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779451200">- Update to 0.7.16
  * Merge pull request #1041 from ronaldngounou/rngounou/bump-go-1.26.3
  * Pin GitHub Actions to full-length commit SHAs
  * fix: bump go version to 1.26.3 for CVEs
- from version 0.7.15
  * Merge pull request #1035 from Ganiredi/bump-version-0.7.15
  * Bump version to 0.7.15
  * Merge pull request #1030 from Ganiredi/1.36-k8s-deps
  * 1.36.0 dependency update
- from version 0.7.14
  * Merge pull request #1029 from CaidenBorrego/caidenb-gorunner-bump
  * Bump version to 0.7.14
  * Bumping gorunner image tag in Dockerfile for CVE mitigation
- from version 0.7.13
  * Merge pull request #1020 from dheeraj-coding/master
  * feat: add manual dispatch function for create-release.yml
  * Merge pull request #1019 from dheeraj-coding/master
  * fix: create-release workflow failures
  * Merge pull request #1017 from Ganiredi/1.36-k8s-deps
  * Merge pull request #1018 from dheeraj-coding/master
  * fix: build failure due to stale gcb image by updating to latest
  * Release 0.7.13
  * Merge pull request #1016 from Ganiredi/1.36-k8s-deps
  * Merge branch 'master' into 1.36-k8s-deps
  * Merge pull request #1013 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-be00ae3611
  * 1.36.rc release
  * Merge pull request #1015 from dheeraj-coding/master
  * fix: bump go version 1.26.2 for CVEs
  * chore(deps): Bump the misc-dependencies group across 3 directories with 6 updates
    (bsc#1265842, CVE-2026-33814)
  * Merge pull request #1011 from kubernetes-sigs/dependabot/go_modules/observability-dependencies-9e34dd3c34
  * Merge pull request #1009 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-b5e1eeb2d5
  * Merge pull request #1004 from bryantbiggs/chore/fix-goreleaser-deprecations
  * Merge pull request #1010 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-7118f1d525
  * chore(deps): Bump the observability-dependencies group across 2 directories with 2 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 2 updates
  * Merge pull request #1008 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-3ce7b5fcac
  * chore(deps): Bump the aws-dependencies group across 2 directories with 12 updates
  * Merge pull request #1006 from kubernetes-sigs/dependabot/go_modules/k8s-dependencies-09346e948b
  * chore(deps): Bump the k8s-dependencies group across 3 directories with 8 updates
  * Merge pull request #1005 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-508cd0fd8e
  * chore(deps): Bump the aws-dependencies group across 2 directories with 15 updates
  * fix: update Makefile goreleaser target for v2 compatibility
  * fix: resolve goreleaser v2 deprecations</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780574400">- Update to 0.7.17
  * Merge pull request #1051 from CaidenBorrego/caidenb-versionbump
  * bumping version from 0.7.16-&gt;0.7.17
  * Merge pull request #1047 from CaidenBorrego/caidenb-reservedprefix-fix
  * fix: honor reservedPrefixConfig for ConfigMap and CRD backends
  * Merge pull request #1046 from CaidenBorrego/caidenb-gorunner-bump
  * fix: reject malformed mapping ARN in userIDStrict mode for dynamic files</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780920000">- Add missing Bugzilla and CVE reference in changelog
- Increase Golang API version to 1.26</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 0.7.18
  * Merge pull request (#1062) from CaidenBorrego/new-release
  * Creating new release for CVE mitigation
  * Merge pull request (#1057) from CaidenBorrego/caidenb-versionbump
  * Merge remote-tracking branch 'upstream/master' into caidenb-versionbump
  * Bump x/net and x/sys to remediate CVEs (bsc#1266651, CVE-2026-39821)</changelog>
</package>
<package pkgid="1270fe671a0958c3f3c07e392aaa265aec94011dd16e7f6325ac2df385876cf3" name="aws-iam-authenticator" arch="ppc64le">
  <version epoch="0" ver="0.7.18" rel="150400.2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1669896000">- Update to version 0.5.10
  * Bump Version in Makefile
  * Automated cherry pick of #491: Bump aws sdk go to v1.44.107 (#493)
  * Remove vendor from release-0.5 (#498)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680264000">- Update to version 0.6.2
  * Add automatic release creation
  * Add tag workflow to release-0.6 branch
  * Remove dependency from PR #416
  * Revert "Add SSO Role suffix support (#416)
- from version 0.6.1
  * Test release tagging
  * Fix file permissions
  * Tag release on update to version.txt
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Added Issue and PR templates (#517)
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
- from version 0.6.0
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Update go.mod and go.sum for tests/integrations
  * Replace tabs with spaces in go.mod
  * Bump aws sdk go to v1.44.107
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Initialize metrics in NewVerifier() if needed
  * Simplify featuregate flag parsing for SSORoleMatch
  * Added ConfiguredInitDirectories featuregate for init command
  * rm more v1alpha1 version
  * Bump 0.6 (#471)
  * Bump version in Makefile
  * Add query parameter validation for multiple parameters
  * Replace deprecated seccomp annotation with seccompProfile.
  * Replace deprecated critical pod annotation with priorityClassName.
  * Whitespace consistency fixes.
  * Use rbac.authorization.k8s.io/v1 instead of v1beta1 in example manifest.
  * Add SSO Role suffix support (#416)
  * Lowercase the ARN keys
  * Remove vendor directory
  * linux/amd64 only for image target
  * Don't push on image target
- from version 0.5.16
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread leak
    checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod)
- from version 0.5.15
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.5.14
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.5.13
  * Fix file permissions
  * Tag release on update to version.txt
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.5.12
  * Bump aws sdk go to v1.44.145
  * Add go mod for E2E
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Fix Makefile on branch release-0.5 (#520)
  * rm more v1alpha1 version (#516)
- from version 0.5.11
  * Add end to end test for mountfile mode in kind Update
    Makefile to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Added ConfiguredInitDirectories featuregate for init command</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 0.6.10
  * Update go.sum
  * Only replace x/net
  * Add build-all-images make target
  * Enable cross-compilation in Dockerfile
- from version 0.6.9
  * Add DynamicFileError Metric
- from version 0.6.8
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread
    leak checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod) (bsc#1200528, CVE-2022-1996)
- from version 0.6.7
  * (no changes)
- from version 0.6.6
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.6.5
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.6.4
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.6.3
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from https://gallery.ecr.aws/ \
    eks-distro-build-tooling/golang to avoid reaching pull
    rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Add end to end test for dynamicfile backend</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 0.6.11
  * Optimize only rebuild mapper when the actual backend modes change
  * Add int test for dynamic backend mode
  * Add DynamicBackendMode
  * Allow running create release from Github UI</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701777600">- Update to version 0.6.13
  * Cherry-pick:  Fix federated user ID parsing #644 (#654)
  * Fix issue 606: use latest version of aws-sdk-go (#650)
  * Change s3 bucket for e2e tests, current default exists somewhere (#653)
- from version 0.6.12
  * Avoid parsing single quote empty inputs
  * Avoid parsing known empty inputs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 0.6.14
  * Check ARN for user ID strict check (#660) (#664)
  * Update go to 1.21.5 (#663)
  * Update go to 1.21.4 (#648) (#659)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 0.6.21
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
- from version 0.6.20
  * Merge pull request #713 from jaidevmane/updating-otelgrpc-to-v0.51.0
  * Merge pull request #709 from bryantbiggs/chore/update-ci-versions
  * Merge pull request #708 from jaidevmane/updating-deps
  * Merge pull request #707 from jaidevmane/adding-new-approvers
  * Merge pull request #687 from bryantbiggs/chore/update-app-k8s-dependencies
- from version 0.6.19
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4,
    google.golang.org/protobuf v1.33.0
- from version 0.6.18
  * Fix time formatting
  * Refactor structs for dynamic file load
  * Add support for adoption rate metrics for cam
  * Add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
- from version 0.6.17
  * Fix base image to use latest and release v0.6.17
- from version 0.6.16
  * Minor fix the IAM user arn verification
- from version 0.6.15
  * Fix role ARN comparison for user ID strict check (#669) (#671)
- Bump minimum Go version to 1.22 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722427200">- Update to version 0.6.22
  * Update the go version to 1.22.5
  * Add unit test
  * Skip service validation to get the default regions endpoint</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730808000">- Update to 0.6.27
  * Use protobuf content type instead of json for k8s client
- from version 0.6.26
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
- from version 0.6.25
  * Cleanup to use composite literals
  * Update to sig.k8s.io namespace
  * Retain original field
  * Add a namespaced field
- from version 0.6.24
  * Update the image to latest to fix CVE-2024-3968
- from version 0.6.23
  * Update upstream dependencies to v1.31.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 0.6.29
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * Handle scenario when the file is created but doesn't have content
- from version 0.6.28
  * Update owners list to sync master branch
  * Update owners list to sync master branch
  * Remove nnmin-aws from approver list
  * Add kmala to the owners list
  * Update code and add tests
  * Update code and add tests
  * Update metrics dimention to stsregion
  * Log sts host instead of global/regional
  * Log sts host instead of global/regional
  * Lpdate log
  * Remove typo and log line
  * Remove typo and log line
  * Remove typo
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Bump test go versions
  * Bump go minor version
  * Add default timeout for http client
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Replace deprecated `ioutil` package
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Add configurable Now time for signature generation
  * Return 429 for STS throttling</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 0.6.31
  * Adds http2 support
- from version 0.6.30
  * Small fixes missed during cherrypicking
  * Cherry-picked file changes from commit
    https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/554/commits
  * Remove no-op err assignment
  * Fix credential expirability check
  * Simplify featuregate flag parsing for SSORoleMatch
  * Support un-canonicalized ARNs in filemapper
  * Add SSO Role suffix support (#416)
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Chore: Update golang x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Fix: Correct codgen script due to deprecated script removal
  * Update RELEASE.md
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * Update RELEASE.md
- Add -buildmode=pie to go build command line (bsc#1239947)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760011200">- Update to version 0.7.8
  * chore: Bump indirect Kubernetes dependencies to latest
  * chore: Bump Kubernetes dependencies to latest
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Fix CVE-2025-47910
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the misc-dependencies group across 3 directories with 10 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
- from version 0.7.7
  * add support for aws-eusc partition
  * chore: Commit changes from `make codegen`
  * fix: Use `.go-version` for the go version
  * feat: Add `golanglint-ci` pull request review; resolve all findings
  * Add haoranleo as approver
  * Bump the observability-dependencies group across 3 directories with 3 updates
  * Bump actions/setup-go from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump github.com/coreos/go-oidc
  * Bump the observability-dependencies group across 3 directories with 12 updates
- from version 0.7.6
  * feat: Update go version to `1.25`; update dependencies to latest
    to patch reported vulnerabilities
  * Force TCP URLs for etcd compatibility
  * Update go dependencies with 1.34.0
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump actions/checkout from 4 to 5 in the actions group
  * Bump the aws-dependencies group across 2 directories with 13 updates
- from version 0.7.5
  * migrate hostname verification to sdk go v2
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
- from version 0.7.4
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * chore: Move observability dependencies to separate dependabot update group
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
- from version 0.7.3
  * update Approvers/reviewers
  * update go version to 1.24.4
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * added logs for global region fallback
  * added global region fallback to imds
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * bumps kops and k8s versions, replaced node label "master" with "control-plane"
  * added imds logic back in, with EC2_METADATA enabled by default
  * removed headersourceacct from ststest, return err if no region cfg
  * added context chaining, cleanup
  * add context chaining, client config fixes
  * Move non problematic cache logs into debug
  * Rename log-level to log-verbosity, remove AutomaticEnv
  * lint fixes
  * get region from imds if not in config
  * added go.sum entries for tests/integration, fixed imds nil pointer dereference
  * Revert "Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
  * added some context chaining, fixed region config in GetWithOptions
  * updated arn, deleted v1-v2 creds converter
  * updated pkg/token to v2
  * updated pkg/filecache
  * updated arn in pkg/server to use v2
  * updated pkg/server to use v2
  * upgraded ec2provider
  * Bump the misc-dependencies group across 3 directories with 5 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the misc-dependencies group across 3 directories with 6 updates
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Use logrus for filecache logs
  * Add quiet mode (cache only)
- from version 0.7.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 43 updates
  * Bump the k8s-dependencies group across 3 directories with 2 updates
- from version 0.7.1
  * Revert "Add 2 more tag validation checks"
  * Update the gorunner to v0.18.0-eks-1-32-latest
  * update the go version to 1.24.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * adding yue9944882 to owner
  * adds http2 support
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Update configmap.go
  * release authenticator from mainline with 0.7.0
  * release authenticator from mainline with 0.7.0
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump goreleaser/goreleaser-action from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Remove no-op err assignment
  * Fix credential expirability check
  * chore: Update golan x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * fix: Correct codgen script due to deprecated script removal
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * chore: Add dependabot configuration to automatically check for package updates weekly
  * handle scenario when the file is created but doesn't have content
  * update code and add tests
  * update code and add tests
  * remove nnmin-aws from approver list
  * add kmala to the owners list
  * update metrics dimention to stsregion
  * add default timeout for http client
  * log sts host instead of global/regional
  * log sts host instead of global/regional
  * update log
  * remove typo and log line
  * remove typo and log line
  * remove typo
  * Bump test go versions
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Bump go minor version
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Update aws-iam-authenticator installation command
  * use protobuf content type instead of json for k8s client
  * Update RELEASE.md
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * update RELEASE.md
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
  * Add configurable Now time for signature generation
  * cleanup to use composite literals
  * update to sig.k8s.io namespace
  * retain original field
  * update the image to latest to fix CVE-2024-39689
  * add a namespaced field
  * Update upstream dependencies to v1.31.0
  * update the go version to 1.22.5
  * Add unit test
  * skip service validation to get the default regions endpoint
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Add random string to e2e test role to avoid pipeline run conflicts
  * fix: Run `go mod tidy` from `tests/integration` directory
  * chore: Update CLI dependencies `cobra` and `viper`
  * updating google.golang.org/grpc/otelgrpc to v0.47.0
  * chore: Update CI action versions, remove `push` trigger
  * chore: Align go versions and remove unused files
  * updating k8s client libraries and go version
  * adding new approvers - nnmin-aws
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
  * chore: Re-update to latest patch version of K8s packages
  * fix time formatting
  * refactor structs for dynamic file load
  * add support for adoption rate metrics for cam
  * add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
  * chore: Re-update and align
  * fix semantic error
  * feat: Re-update K8s packages to latest release
  * fix: Use `SIGDescribe`
  * fix: Use `framework.WithDisruptive()`
  * fix: [Disruptive] in plain text is deprecated and must be added through WithDisruptive instead
  * chore: Update dependencies for `e2e` tests
  * fix: Add context to `StartTestServer`
  * fix: Align integration test `replace` versions in `go.mod`
  * fix: Fix codegen and update `replace` test integration dependencies
  * fix: Integration test dependencies run `go mod tidy`
  * fix: Downgrade `k8s.io/sample-controller` which requires updating context handling
  * chore: Update app K8s dependencies
  * adding nnmin-aws into reviewers
  * Replace deprecated `ioutil` package
  * fix base image to use latest
  * minor fix the IAM user arn verification
  * Fix role ARN comparison for user ID strict check (#669)
  * Check ARN for user ID strict check (#660)
  * Update go to 1.21.5
  * Change s3 bucket for e2e tests, current default exists somewhere (#652)
- Bump minimum Go version to 1.25 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Update to version 0.7.9
  * Creating PR to update Go version to 1.25.4
  * chore(deps): Bump the aws-dependencies group across 2 directories with 13 updates
  * chore(deps): Bump golangci/golangci-lint-action in the actions group
  * chore(deps): Bump the observability-dependencies group across 3 directories with 2 updates
  * chore(deps): Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * chore(deps): Bump the aws-dependencies group across 2 directories with 14 updates
  * bump golang version to 1.25.3
  * Creating PR to update Go version to 1.25.3
  * chore(deps): Bump github.com/onsi/ginkgo/v2
  * chore(deps): Bump the observability-dependencies group across 3 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 11 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 5 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 3 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 0.7.10:
  * 1.35.0 dependency update
  * Creating PR to update Go version to 1.25.5
  * chore(deps): Bump the observability-dependencies group across 2 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 13 updates
  * chore(deps): Bump the observability-dependencies group across 1 directory with 2 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 27 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 11 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 2 directories with 17 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771848000">- Update to version 0.7.11
  * Merge pull request #988 from dstdfx/bump-version
  * Bump version to 0.7.11
  * Merge pull request #985 from dstdfx/bump-go-version-1.25.7
  * Update go.mod for e2e/int tests
  * Update go.mod
  * Merge pull request #986 from ShiriNmi1520/master
  * Clarify README "Run the server" deployment instructions
  * Bump go to 1.25.7
  * Merge pull request #983 from eks-distro-pr-bot/eks-distro-pr-bot/go-version-bumps
  * Creating PR to update Go version to 1.25.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776168000">- Update to version 0.7.12
  * Update OWNERS in reviewers and approvers list
  * Release 0.7.12
  * ci: add verify job to catch unrun gofmt and go mod tidy
  * chore(lint): harden linter config and fix coverage gaps
  * fix(lint): add revive and unparam linters with full compliance
  * ci: add unit test job, expand golangci config, add make update/verify
  * docs(e2e): fix Go version, remove non-existent make target, fix typo
  * docs(release): remove stale ECR image update instructions and fix asset version placeholders
  * fix: address code review findings in repo cleanup branch
  * docs: rewrite development.md as a practical local dev guide
  * chore: repo cleanup, developer experience improvements
  * chore: reduce binary size by 59% (80 MB → 33 MB)
  * fix(lint): replace deprecated NewSimpleClientset and fix embedded field selector
  * fix(tests): address code review findings in integration test framework
  * fix(tests): address post-refactor issues and add go workspace
  * refactor(tests): remove k8s.io/kubernetes dependency from test modules
  * chore: update all dependencies to latest versions
- Set GOWORK=off to make building with vendored dependencies work</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779451200">- Update to 0.7.16
  * Merge pull request #1041 from ronaldngounou/rngounou/bump-go-1.26.3
  * Pin GitHub Actions to full-length commit SHAs
  * fix: bump go version to 1.26.3 for CVEs
- from version 0.7.15
  * Merge pull request #1035 from Ganiredi/bump-version-0.7.15
  * Bump version to 0.7.15
  * Merge pull request #1030 from Ganiredi/1.36-k8s-deps
  * 1.36.0 dependency update
- from version 0.7.14
  * Merge pull request #1029 from CaidenBorrego/caidenb-gorunner-bump
  * Bump version to 0.7.14
  * Bumping gorunner image tag in Dockerfile for CVE mitigation
- from version 0.7.13
  * Merge pull request #1020 from dheeraj-coding/master
  * feat: add manual dispatch function for create-release.yml
  * Merge pull request #1019 from dheeraj-coding/master
  * fix: create-release workflow failures
  * Merge pull request #1017 from Ganiredi/1.36-k8s-deps
  * Merge pull request #1018 from dheeraj-coding/master
  * fix: build failure due to stale gcb image by updating to latest
  * Release 0.7.13
  * Merge pull request #1016 from Ganiredi/1.36-k8s-deps
  * Merge branch 'master' into 1.36-k8s-deps
  * Merge pull request #1013 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-be00ae3611
  * 1.36.rc release
  * Merge pull request #1015 from dheeraj-coding/master
  * fix: bump go version 1.26.2 for CVEs
  * chore(deps): Bump the misc-dependencies group across 3 directories with 6 updates
    (bsc#1265842, CVE-2026-33814)
  * Merge pull request #1011 from kubernetes-sigs/dependabot/go_modules/observability-dependencies-9e34dd3c34
  * Merge pull request #1009 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-b5e1eeb2d5
  * Merge pull request #1004 from bryantbiggs/chore/fix-goreleaser-deprecations
  * Merge pull request #1010 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-7118f1d525
  * chore(deps): Bump the observability-dependencies group across 2 directories with 2 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 2 updates
  * Merge pull request #1008 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-3ce7b5fcac
  * chore(deps): Bump the aws-dependencies group across 2 directories with 12 updates
  * Merge pull request #1006 from kubernetes-sigs/dependabot/go_modules/k8s-dependencies-09346e948b
  * chore(deps): Bump the k8s-dependencies group across 3 directories with 8 updates
  * Merge pull request #1005 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-508cd0fd8e
  * chore(deps): Bump the aws-dependencies group across 2 directories with 15 updates
  * fix: update Makefile goreleaser target for v2 compatibility
  * fix: resolve goreleaser v2 deprecations</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780574400">- Update to 0.7.17
  * Merge pull request #1051 from CaidenBorrego/caidenb-versionbump
  * bumping version from 0.7.16-&gt;0.7.17
  * Merge pull request #1047 from CaidenBorrego/caidenb-reservedprefix-fix
  * fix: honor reservedPrefixConfig for ConfigMap and CRD backends
  * Merge pull request #1046 from CaidenBorrego/caidenb-gorunner-bump
  * fix: reject malformed mapping ARN in userIDStrict mode for dynamic files</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780920000">- Add missing Bugzilla and CVE reference in changelog
- Increase Golang API version to 1.26</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 0.7.18
  * Merge pull request (#1062) from CaidenBorrego/new-release
  * Creating new release for CVE mitigation
  * Merge pull request (#1057) from CaidenBorrego/caidenb-versionbump
  * Merge remote-tracking branch 'upstream/master' into caidenb-versionbump
  * Bump x/net and x/sys to remediate CVEs (bsc#1266651, CVE-2026-39821)</changelog>
</package>
<package pkgid="9934ac761ba1a78be4eda2967d6583d277494b476822a21311656840c2dcbb66" name="aws-iam-authenticator" arch="s390x">
  <version epoch="0" ver="0.7.18" rel="150400.2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1669896000">- Update to version 0.5.10
  * Bump Version in Makefile
  * Automated cherry pick of #491: Bump aws sdk go to v1.44.107 (#493)
  * Remove vendor from release-0.5 (#498)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680264000">- Update to version 0.6.2
  * Add automatic release creation
  * Add tag workflow to release-0.6 branch
  * Remove dependency from PR #416
  * Revert "Add SSO Role suffix support (#416)
- from version 0.6.1
  * Test release tagging
  * Fix file permissions
  * Tag release on update to version.txt
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Added Issue and PR templates (#517)
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
- from version 0.6.0
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Update go.mod and go.sum for tests/integrations
  * Replace tabs with spaces in go.mod
  * Bump aws sdk go to v1.44.107
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Initialize metrics in NewVerifier() if needed
  * Simplify featuregate flag parsing for SSORoleMatch
  * Added ConfiguredInitDirectories featuregate for init command
  * rm more v1alpha1 version
  * Bump 0.6 (#471)
  * Bump version in Makefile
  * Add query parameter validation for multiple parameters
  * Replace deprecated seccomp annotation with seccompProfile.
  * Replace deprecated critical pod annotation with priorityClassName.
  * Whitespace consistency fixes.
  * Use rbac.authorization.k8s.io/v1 instead of v1beta1 in example manifest.
  * Add SSO Role suffix support (#416)
  * Lowercase the ARN keys
  * Remove vendor directory
  * linux/amd64 only for image target
  * Don't push on image target
- from version 0.5.16
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread leak
    checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod)
- from version 0.5.15
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.5.14
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.5.13
  * Fix file permissions
  * Tag release on update to version.txt
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.5.12
  * Bump aws sdk go to v1.44.145
  * Add go mod for E2E
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Fix Makefile on branch release-0.5 (#520)
  * rm more v1alpha1 version (#516)
- from version 0.5.11
  * Add end to end test for mountfile mode in kind Update
    Makefile to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Added ConfiguredInitDirectories featuregate for init command</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 0.6.10
  * Update go.sum
  * Only replace x/net
  * Add build-all-images make target
  * Enable cross-compilation in Dockerfile
- from version 0.6.9
  * Add DynamicFileError Metric
- from version 0.6.8
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread
    leak checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod) (bsc#1200528, CVE-2022-1996)
- from version 0.6.7
  * (no changes)
- from version 0.6.6
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.6.5
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.6.4
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.6.3
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from https://gallery.ecr.aws/ \
    eks-distro-build-tooling/golang to avoid reaching pull
    rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Add end to end test for dynamicfile backend</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 0.6.11
  * Optimize only rebuild mapper when the actual backend modes change
  * Add int test for dynamic backend mode
  * Add DynamicBackendMode
  * Allow running create release from Github UI</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701777600">- Update to version 0.6.13
  * Cherry-pick:  Fix federated user ID parsing #644 (#654)
  * Fix issue 606: use latest version of aws-sdk-go (#650)
  * Change s3 bucket for e2e tests, current default exists somewhere (#653)
- from version 0.6.12
  * Avoid parsing single quote empty inputs
  * Avoid parsing known empty inputs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 0.6.14
  * Check ARN for user ID strict check (#660) (#664)
  * Update go to 1.21.5 (#663)
  * Update go to 1.21.4 (#648) (#659)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 0.6.21
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
- from version 0.6.20
  * Merge pull request #713 from jaidevmane/updating-otelgrpc-to-v0.51.0
  * Merge pull request #709 from bryantbiggs/chore/update-ci-versions
  * Merge pull request #708 from jaidevmane/updating-deps
  * Merge pull request #707 from jaidevmane/adding-new-approvers
  * Merge pull request #687 from bryantbiggs/chore/update-app-k8s-dependencies
- from version 0.6.19
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4,
    google.golang.org/protobuf v1.33.0
- from version 0.6.18
  * Fix time formatting
  * Refactor structs for dynamic file load
  * Add support for adoption rate metrics for cam
  * Add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
- from version 0.6.17
  * Fix base image to use latest and release v0.6.17
- from version 0.6.16
  * Minor fix the IAM user arn verification
- from version 0.6.15
  * Fix role ARN comparison for user ID strict check (#669) (#671)
- Bump minimum Go version to 1.22 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722427200">- Update to version 0.6.22
  * Update the go version to 1.22.5
  * Add unit test
  * Skip service validation to get the default regions endpoint</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730808000">- Update to 0.6.27
  * Use protobuf content type instead of json for k8s client
- from version 0.6.26
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
- from version 0.6.25
  * Cleanup to use composite literals
  * Update to sig.k8s.io namespace
  * Retain original field
  * Add a namespaced field
- from version 0.6.24
  * Update the image to latest to fix CVE-2024-3968
- from version 0.6.23
  * Update upstream dependencies to v1.31.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 0.6.29
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * Handle scenario when the file is created but doesn't have content
- from version 0.6.28
  * Update owners list to sync master branch
  * Update owners list to sync master branch
  * Remove nnmin-aws from approver list
  * Add kmala to the owners list
  * Update code and add tests
  * Update code and add tests
  * Update metrics dimention to stsregion
  * Log sts host instead of global/regional
  * Log sts host instead of global/regional
  * Lpdate log
  * Remove typo and log line
  * Remove typo and log line
  * Remove typo
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Bump test go versions
  * Bump go minor version
  * Add default timeout for http client
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Replace deprecated `ioutil` package
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Add configurable Now time for signature generation
  * Return 429 for STS throttling</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 0.6.31
  * Adds http2 support
- from version 0.6.30
  * Small fixes missed during cherrypicking
  * Cherry-picked file changes from commit
    https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/554/commits
  * Remove no-op err assignment
  * Fix credential expirability check
  * Simplify featuregate flag parsing for SSORoleMatch
  * Support un-canonicalized ARNs in filemapper
  * Add SSO Role suffix support (#416)
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Chore: Update golang x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Fix: Correct codgen script due to deprecated script removal
  * Update RELEASE.md
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * Update RELEASE.md
- Add -buildmode=pie to go build command line (bsc#1239947)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760011200">- Update to version 0.7.8
  * chore: Bump indirect Kubernetes dependencies to latest
  * chore: Bump Kubernetes dependencies to latest
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Fix CVE-2025-47910
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the misc-dependencies group across 3 directories with 10 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
- from version 0.7.7
  * add support for aws-eusc partition
  * chore: Commit changes from `make codegen`
  * fix: Use `.go-version` for the go version
  * feat: Add `golanglint-ci` pull request review; resolve all findings
  * Add haoranleo as approver
  * Bump the observability-dependencies group across 3 directories with 3 updates
  * Bump actions/setup-go from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump github.com/coreos/go-oidc
  * Bump the observability-dependencies group across 3 directories with 12 updates
- from version 0.7.6
  * feat: Update go version to `1.25`; update dependencies to latest
    to patch reported vulnerabilities
  * Force TCP URLs for etcd compatibility
  * Update go dependencies with 1.34.0
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump actions/checkout from 4 to 5 in the actions group
  * Bump the aws-dependencies group across 2 directories with 13 updates
- from version 0.7.5
  * migrate hostname verification to sdk go v2
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
- from version 0.7.4
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * chore: Move observability dependencies to separate dependabot update group
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
- from version 0.7.3
  * update Approvers/reviewers
  * update go version to 1.24.4
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * added logs for global region fallback
  * added global region fallback to imds
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * bumps kops and k8s versions, replaced node label "master" with "control-plane"
  * added imds logic back in, with EC2_METADATA enabled by default
  * removed headersourceacct from ststest, return err if no region cfg
  * added context chaining, cleanup
  * add context chaining, client config fixes
  * Move non problematic cache logs into debug
  * Rename log-level to log-verbosity, remove AutomaticEnv
  * lint fixes
  * get region from imds if not in config
  * added go.sum entries for tests/integration, fixed imds nil pointer dereference
  * Revert "Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
  * added some context chaining, fixed region config in GetWithOptions
  * updated arn, deleted v1-v2 creds converter
  * updated pkg/token to v2
  * updated pkg/filecache
  * updated arn in pkg/server to use v2
  * updated pkg/server to use v2
  * upgraded ec2provider
  * Bump the misc-dependencies group across 3 directories with 5 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the misc-dependencies group across 3 directories with 6 updates
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Use logrus for filecache logs
  * Add quiet mode (cache only)
- from version 0.7.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 43 updates
  * Bump the k8s-dependencies group across 3 directories with 2 updates
- from version 0.7.1
  * Revert "Add 2 more tag validation checks"
  * Update the gorunner to v0.18.0-eks-1-32-latest
  * update the go version to 1.24.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * adding yue9944882 to owner
  * adds http2 support
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Update configmap.go
  * release authenticator from mainline with 0.7.0
  * release authenticator from mainline with 0.7.0
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump goreleaser/goreleaser-action from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Remove no-op err assignment
  * Fix credential expirability check
  * chore: Update golan x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * fix: Correct codgen script due to deprecated script removal
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * chore: Add dependabot configuration to automatically check for package updates weekly
  * handle scenario when the file is created but doesn't have content
  * update code and add tests
  * update code and add tests
  * remove nnmin-aws from approver list
  * add kmala to the owners list
  * update metrics dimention to stsregion
  * add default timeout for http client
  * log sts host instead of global/regional
  * log sts host instead of global/regional
  * update log
  * remove typo and log line
  * remove typo and log line
  * remove typo
  * Bump test go versions
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Bump go minor version
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Update aws-iam-authenticator installation command
  * use protobuf content type instead of json for k8s client
  * Update RELEASE.md
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * update RELEASE.md
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
  * Add configurable Now time for signature generation
  * cleanup to use composite literals
  * update to sig.k8s.io namespace
  * retain original field
  * update the image to latest to fix CVE-2024-39689
  * add a namespaced field
  * Update upstream dependencies to v1.31.0
  * update the go version to 1.22.5
  * Add unit test
  * skip service validation to get the default regions endpoint
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Add random string to e2e test role to avoid pipeline run conflicts
  * fix: Run `go mod tidy` from `tests/integration` directory
  * chore: Update CLI dependencies `cobra` and `viper`
  * updating google.golang.org/grpc/otelgrpc to v0.47.0
  * chore: Update CI action versions, remove `push` trigger
  * chore: Align go versions and remove unused files
  * updating k8s client libraries and go version
  * adding new approvers - nnmin-aws
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
  * chore: Re-update to latest patch version of K8s packages
  * fix time formatting
  * refactor structs for dynamic file load
  * add support for adoption rate metrics for cam
  * add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
  * chore: Re-update and align
  * fix semantic error
  * feat: Re-update K8s packages to latest release
  * fix: Use `SIGDescribe`
  * fix: Use `framework.WithDisruptive()`
  * fix: [Disruptive] in plain text is deprecated and must be added through WithDisruptive instead
  * chore: Update dependencies for `e2e` tests
  * fix: Add context to `StartTestServer`
  * fix: Align integration test `replace` versions in `go.mod`
  * fix: Fix codegen and update `replace` test integration dependencies
  * fix: Integration test dependencies run `go mod tidy`
  * fix: Downgrade `k8s.io/sample-controller` which requires updating context handling
  * chore: Update app K8s dependencies
  * adding nnmin-aws into reviewers
  * Replace deprecated `ioutil` package
  * fix base image to use latest
  * minor fix the IAM user arn verification
  * Fix role ARN comparison for user ID strict check (#669)
  * Check ARN for user ID strict check (#660)
  * Update go to 1.21.5
  * Change s3 bucket for e2e tests, current default exists somewhere (#652)
- Bump minimum Go version to 1.25 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Update to version 0.7.9
  * Creating PR to update Go version to 1.25.4
  * chore(deps): Bump the aws-dependencies group across 2 directories with 13 updates
  * chore(deps): Bump golangci/golangci-lint-action in the actions group
  * chore(deps): Bump the observability-dependencies group across 3 directories with 2 updates
  * chore(deps): Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * chore(deps): Bump the aws-dependencies group across 2 directories with 14 updates
  * bump golang version to 1.25.3
  * Creating PR to update Go version to 1.25.3
  * chore(deps): Bump github.com/onsi/ginkgo/v2
  * chore(deps): Bump the observability-dependencies group across 3 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 11 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 5 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 3 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 0.7.10:
  * 1.35.0 dependency update
  * Creating PR to update Go version to 1.25.5
  * chore(deps): Bump the observability-dependencies group across 2 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 13 updates
  * chore(deps): Bump the observability-dependencies group across 1 directory with 2 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 27 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 11 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 2 directories with 17 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771848000">- Update to version 0.7.11
  * Merge pull request #988 from dstdfx/bump-version
  * Bump version to 0.7.11
  * Merge pull request #985 from dstdfx/bump-go-version-1.25.7
  * Update go.mod for e2e/int tests
  * Update go.mod
  * Merge pull request #986 from ShiriNmi1520/master
  * Clarify README "Run the server" deployment instructions
  * Bump go to 1.25.7
  * Merge pull request #983 from eks-distro-pr-bot/eks-distro-pr-bot/go-version-bumps
  * Creating PR to update Go version to 1.25.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776168000">- Update to version 0.7.12
  * Update OWNERS in reviewers and approvers list
  * Release 0.7.12
  * ci: add verify job to catch unrun gofmt and go mod tidy
  * chore(lint): harden linter config and fix coverage gaps
  * fix(lint): add revive and unparam linters with full compliance
  * ci: add unit test job, expand golangci config, add make update/verify
  * docs(e2e): fix Go version, remove non-existent make target, fix typo
  * docs(release): remove stale ECR image update instructions and fix asset version placeholders
  * fix: address code review findings in repo cleanup branch
  * docs: rewrite development.md as a practical local dev guide
  * chore: repo cleanup, developer experience improvements
  * chore: reduce binary size by 59% (80 MB → 33 MB)
  * fix(lint): replace deprecated NewSimpleClientset and fix embedded field selector
  * fix(tests): address code review findings in integration test framework
  * fix(tests): address post-refactor issues and add go workspace
  * refactor(tests): remove k8s.io/kubernetes dependency from test modules
  * chore: update all dependencies to latest versions
- Set GOWORK=off to make building with vendored dependencies work</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779451200">- Update to 0.7.16
  * Merge pull request #1041 from ronaldngounou/rngounou/bump-go-1.26.3
  * Pin GitHub Actions to full-length commit SHAs
  * fix: bump go version to 1.26.3 for CVEs
- from version 0.7.15
  * Merge pull request #1035 from Ganiredi/bump-version-0.7.15
  * Bump version to 0.7.15
  * Merge pull request #1030 from Ganiredi/1.36-k8s-deps
  * 1.36.0 dependency update
- from version 0.7.14
  * Merge pull request #1029 from CaidenBorrego/caidenb-gorunner-bump
  * Bump version to 0.7.14
  * Bumping gorunner image tag in Dockerfile for CVE mitigation
- from version 0.7.13
  * Merge pull request #1020 from dheeraj-coding/master
  * feat: add manual dispatch function for create-release.yml
  * Merge pull request #1019 from dheeraj-coding/master
  * fix: create-release workflow failures
  * Merge pull request #1017 from Ganiredi/1.36-k8s-deps
  * Merge pull request #1018 from dheeraj-coding/master
  * fix: build failure due to stale gcb image by updating to latest
  * Release 0.7.13
  * Merge pull request #1016 from Ganiredi/1.36-k8s-deps
  * Merge branch 'master' into 1.36-k8s-deps
  * Merge pull request #1013 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-be00ae3611
  * 1.36.rc release
  * Merge pull request #1015 from dheeraj-coding/master
  * fix: bump go version 1.26.2 for CVEs
  * chore(deps): Bump the misc-dependencies group across 3 directories with 6 updates
    (bsc#1265842, CVE-2026-33814)
  * Merge pull request #1011 from kubernetes-sigs/dependabot/go_modules/observability-dependencies-9e34dd3c34
  * Merge pull request #1009 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-b5e1eeb2d5
  * Merge pull request #1004 from bryantbiggs/chore/fix-goreleaser-deprecations
  * Merge pull request #1010 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-7118f1d525
  * chore(deps): Bump the observability-dependencies group across 2 directories with 2 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 2 updates
  * Merge pull request #1008 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-3ce7b5fcac
  * chore(deps): Bump the aws-dependencies group across 2 directories with 12 updates
  * Merge pull request #1006 from kubernetes-sigs/dependabot/go_modules/k8s-dependencies-09346e948b
  * chore(deps): Bump the k8s-dependencies group across 3 directories with 8 updates
  * Merge pull request #1005 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-508cd0fd8e
  * chore(deps): Bump the aws-dependencies group across 2 directories with 15 updates
  * fix: update Makefile goreleaser target for v2 compatibility
  * fix: resolve goreleaser v2 deprecations</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780574400">- Update to 0.7.17
  * Merge pull request #1051 from CaidenBorrego/caidenb-versionbump
  * bumping version from 0.7.16-&gt;0.7.17
  * Merge pull request #1047 from CaidenBorrego/caidenb-reservedprefix-fix
  * fix: honor reservedPrefixConfig for ConfigMap and CRD backends
  * Merge pull request #1046 from CaidenBorrego/caidenb-gorunner-bump
  * fix: reject malformed mapping ARN in userIDStrict mode for dynamic files</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780920000">- Add missing Bugzilla and CVE reference in changelog
- Increase Golang API version to 1.26</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 0.7.18
  * Merge pull request (#1062) from CaidenBorrego/new-release
  * Creating new release for CVE mitigation
  * Merge pull request (#1057) from CaidenBorrego/caidenb-versionbump
  * Merge remote-tracking branch 'upstream/master' into caidenb-versionbump
  * Bump x/net and x/sys to remediate CVEs (bsc#1266651, CVE-2026-39821)</changelog>
</package>
<package pkgid="af51524aaf73de417da7bc3eca35ed97d75988d0e7636cfafc4477b7bcde6e1b" name="aws-iam-authenticator" arch="src">
  <version epoch="0" ver="0.7.18" rel="150400.2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1669896000">- Update to version 0.5.10
  * Bump Version in Makefile
  * Automated cherry pick of #491: Bump aws sdk go to v1.44.107 (#493)
  * Remove vendor from release-0.5 (#498)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680264000">- Update to version 0.6.2
  * Add automatic release creation
  * Add tag workflow to release-0.6 branch
  * Remove dependency from PR #416
  * Revert "Add SSO Role suffix support (#416)
- from version 0.6.1
  * Test release tagging
  * Fix file permissions
  * Tag release on update to version.txt
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Added Issue and PR templates (#517)
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
- from version 0.6.0
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Update go.mod and go.sum for tests/integrations
  * Replace tabs with spaces in go.mod
  * Bump aws sdk go to v1.44.107
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Initialize metrics in NewVerifier() if needed
  * Simplify featuregate flag parsing for SSORoleMatch
  * Added ConfiguredInitDirectories featuregate for init command
  * rm more v1alpha1 version
  * Bump 0.6 (#471)
  * Bump version in Makefile
  * Add query parameter validation for multiple parameters
  * Replace deprecated seccomp annotation with seccompProfile.
  * Replace deprecated critical pod annotation with priorityClassName.
  * Whitespace consistency fixes.
  * Use rbac.authorization.k8s.io/v1 instead of v1beta1 in example manifest.
  * Add SSO Role suffix support (#416)
  * Lowercase the ARN keys
  * Remove vendor directory
  * linux/amd64 only for image target
  * Don't push on image target
- from version 0.5.16
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread leak
    checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod)
- from version 0.5.15
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.5.14
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.5.13
  * Fix file permissions
  * Tag release on update to version.txt
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.5.12
  * Bump aws sdk go to v1.44.145
  * Add go mod for E2E
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Fix Makefile on branch release-0.5 (#520)
  * rm more v1alpha1 version (#516)
- from version 0.5.11
  * Add end to end test for mountfile mode in kind Update
    Makefile to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Added ConfiguredInitDirectories featuregate for init command</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 0.6.10
  * Update go.sum
  * Only replace x/net
  * Add build-all-images make target
  * Enable cross-compilation in Dockerfile
- from version 0.6.9
  * Add DynamicFileError Metric
- from version 0.6.8
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread
    leak checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod) (bsc#1200528, CVE-2022-1996)
- from version 0.6.7
  * (no changes)
- from version 0.6.6
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.6.5
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.6.4
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.6.3
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from https://gallery.ecr.aws/ \
    eks-distro-build-tooling/golang to avoid reaching pull
    rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Add end to end test for dynamicfile backend</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 0.6.11
  * Optimize only rebuild mapper when the actual backend modes change
  * Add int test for dynamic backend mode
  * Add DynamicBackendMode
  * Allow running create release from Github UI</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701777600">- Update to version 0.6.13
  * Cherry-pick:  Fix federated user ID parsing #644 (#654)
  * Fix issue 606: use latest version of aws-sdk-go (#650)
  * Change s3 bucket for e2e tests, current default exists somewhere (#653)
- from version 0.6.12
  * Avoid parsing single quote empty inputs
  * Avoid parsing known empty inputs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 0.6.14
  * Check ARN for user ID strict check (#660) (#664)
  * Update go to 1.21.5 (#663)
  * Update go to 1.21.4 (#648) (#659)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 0.6.21
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
- from version 0.6.20
  * Merge pull request #713 from jaidevmane/updating-otelgrpc-to-v0.51.0
  * Merge pull request #709 from bryantbiggs/chore/update-ci-versions
  * Merge pull request #708 from jaidevmane/updating-deps
  * Merge pull request #707 from jaidevmane/adding-new-approvers
  * Merge pull request #687 from bryantbiggs/chore/update-app-k8s-dependencies
- from version 0.6.19
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4,
    google.golang.org/protobuf v1.33.0
- from version 0.6.18
  * Fix time formatting
  * Refactor structs for dynamic file load
  * Add support for adoption rate metrics for cam
  * Add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
- from version 0.6.17
  * Fix base image to use latest and release v0.6.17
- from version 0.6.16
  * Minor fix the IAM user arn verification
- from version 0.6.15
  * Fix role ARN comparison for user ID strict check (#669) (#671)
- Bump minimum Go version to 1.22 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722427200">- Update to version 0.6.22
  * Update the go version to 1.22.5
  * Add unit test
  * Skip service validation to get the default regions endpoint</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730808000">- Update to 0.6.27
  * Use protobuf content type instead of json for k8s client
- from version 0.6.26
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
- from version 0.6.25
  * Cleanup to use composite literals
  * Update to sig.k8s.io namespace
  * Retain original field
  * Add a namespaced field
- from version 0.6.24
  * Update the image to latest to fix CVE-2024-3968
- from version 0.6.23
  * Update upstream dependencies to v1.31.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 0.6.29
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * Handle scenario when the file is created but doesn't have content
- from version 0.6.28
  * Update owners list to sync master branch
  * Update owners list to sync master branch
  * Remove nnmin-aws from approver list
  * Add kmala to the owners list
  * Update code and add tests
  * Update code and add tests
  * Update metrics dimention to stsregion
  * Log sts host instead of global/regional
  * Log sts host instead of global/regional
  * Lpdate log
  * Remove typo and log line
  * Remove typo and log line
  * Remove typo
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Bump test go versions
  * Bump go minor version
  * Add default timeout for http client
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Replace deprecated `ioutil` package
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Add configurable Now time for signature generation
  * Return 429 for STS throttling</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 0.6.31
  * Adds http2 support
- from version 0.6.30
  * Small fixes missed during cherrypicking
  * Cherry-picked file changes from commit
    https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/554/commits
  * Remove no-op err assignment
  * Fix credential expirability check
  * Simplify featuregate flag parsing for SSORoleMatch
  * Support un-canonicalized ARNs in filemapper
  * Add SSO Role suffix support (#416)
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Chore: Update golang x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Fix: Correct codgen script due to deprecated script removal
  * Update RELEASE.md
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * Update RELEASE.md
- Add -buildmode=pie to go build command line (bsc#1239947)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760011200">- Update to version 0.7.8
  * chore: Bump indirect Kubernetes dependencies to latest
  * chore: Bump Kubernetes dependencies to latest
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Fix CVE-2025-47910
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the misc-dependencies group across 3 directories with 10 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
- from version 0.7.7
  * add support for aws-eusc partition
  * chore: Commit changes from `make codegen`
  * fix: Use `.go-version` for the go version
  * feat: Add `golanglint-ci` pull request review; resolve all findings
  * Add haoranleo as approver
  * Bump the observability-dependencies group across 3 directories with 3 updates
  * Bump actions/setup-go from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump github.com/coreos/go-oidc
  * Bump the observability-dependencies group across 3 directories with 12 updates
- from version 0.7.6
  * feat: Update go version to `1.25`; update dependencies to latest
    to patch reported vulnerabilities
  * Force TCP URLs for etcd compatibility
  * Update go dependencies with 1.34.0
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump actions/checkout from 4 to 5 in the actions group
  * Bump the aws-dependencies group across 2 directories with 13 updates
- from version 0.7.5
  * migrate hostname verification to sdk go v2
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
- from version 0.7.4
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * chore: Move observability dependencies to separate dependabot update group
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
- from version 0.7.3
  * update Approvers/reviewers
  * update go version to 1.24.4
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * added logs for global region fallback
  * added global region fallback to imds
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * bumps kops and k8s versions, replaced node label "master" with "control-plane"
  * added imds logic back in, with EC2_METADATA enabled by default
  * removed headersourceacct from ststest, return err if no region cfg
  * added context chaining, cleanup
  * add context chaining, client config fixes
  * Move non problematic cache logs into debug
  * Rename log-level to log-verbosity, remove AutomaticEnv
  * lint fixes
  * get region from imds if not in config
  * added go.sum entries for tests/integration, fixed imds nil pointer dereference
  * Revert "Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
  * added some context chaining, fixed region config in GetWithOptions
  * updated arn, deleted v1-v2 creds converter
  * updated pkg/token to v2
  * updated pkg/filecache
  * updated arn in pkg/server to use v2
  * updated pkg/server to use v2
  * upgraded ec2provider
  * Bump the misc-dependencies group across 3 directories with 5 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the misc-dependencies group across 3 directories with 6 updates
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Use logrus for filecache logs
  * Add quiet mode (cache only)
- from version 0.7.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 43 updates
  * Bump the k8s-dependencies group across 3 directories with 2 updates
- from version 0.7.1
  * Revert "Add 2 more tag validation checks"
  * Update the gorunner to v0.18.0-eks-1-32-latest
  * update the go version to 1.24.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * adding yue9944882 to owner
  * adds http2 support
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Update configmap.go
  * release authenticator from mainline with 0.7.0
  * release authenticator from mainline with 0.7.0
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump goreleaser/goreleaser-action from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Remove no-op err assignment
  * Fix credential expirability check
  * chore: Update golan x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * fix: Correct codgen script due to deprecated script removal
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * chore: Add dependabot configuration to automatically check for package updates weekly
  * handle scenario when the file is created but doesn't have content
  * update code and add tests
  * update code and add tests
  * remove nnmin-aws from approver list
  * add kmala to the owners list
  * update metrics dimention to stsregion
  * add default timeout for http client
  * log sts host instead of global/regional
  * log sts host instead of global/regional
  * update log
  * remove typo and log line
  * remove typo and log line
  * remove typo
  * Bump test go versions
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Bump go minor version
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Update aws-iam-authenticator installation command
  * use protobuf content type instead of json for k8s client
  * Update RELEASE.md
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * update RELEASE.md
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
  * Add configurable Now time for signature generation
  * cleanup to use composite literals
  * update to sig.k8s.io namespace
  * retain original field
  * update the image to latest to fix CVE-2024-39689
  * add a namespaced field
  * Update upstream dependencies to v1.31.0
  * update the go version to 1.22.5
  * Add unit test
  * skip service validation to get the default regions endpoint
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Add random string to e2e test role to avoid pipeline run conflicts
  * fix: Run `go mod tidy` from `tests/integration` directory
  * chore: Update CLI dependencies `cobra` and `viper`
  * updating google.golang.org/grpc/otelgrpc to v0.47.0
  * chore: Update CI action versions, remove `push` trigger
  * chore: Align go versions and remove unused files
  * updating k8s client libraries and go version
  * adding new approvers - nnmin-aws
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
  * chore: Re-update to latest patch version of K8s packages
  * fix time formatting
  * refactor structs for dynamic file load
  * add support for adoption rate metrics for cam
  * add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
  * chore: Re-update and align
  * fix semantic error
  * feat: Re-update K8s packages to latest release
  * fix: Use `SIGDescribe`
  * fix: Use `framework.WithDisruptive()`
  * fix: [Disruptive] in plain text is deprecated and must be added through WithDisruptive instead
  * chore: Update dependencies for `e2e` tests
  * fix: Add context to `StartTestServer`
  * fix: Align integration test `replace` versions in `go.mod`
  * fix: Fix codegen and update `replace` test integration dependencies
  * fix: Integration test dependencies run `go mod tidy`
  * fix: Downgrade `k8s.io/sample-controller` which requires updating context handling
  * chore: Update app K8s dependencies
  * adding nnmin-aws into reviewers
  * Replace deprecated `ioutil` package
  * fix base image to use latest
  * minor fix the IAM user arn verification
  * Fix role ARN comparison for user ID strict check (#669)
  * Check ARN for user ID strict check (#660)
  * Update go to 1.21.5
  * Change s3 bucket for e2e tests, current default exists somewhere (#652)
- Bump minimum Go version to 1.25 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Update to version 0.7.9
  * Creating PR to update Go version to 1.25.4
  * chore(deps): Bump the aws-dependencies group across 2 directories with 13 updates
  * chore(deps): Bump golangci/golangci-lint-action in the actions group
  * chore(deps): Bump the observability-dependencies group across 3 directories with 2 updates
  * chore(deps): Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * chore(deps): Bump the aws-dependencies group across 2 directories with 14 updates
  * bump golang version to 1.25.3
  * Creating PR to update Go version to 1.25.3
  * chore(deps): Bump github.com/onsi/ginkgo/v2
  * chore(deps): Bump the observability-dependencies group across 3 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 11 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 5 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 3 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 0.7.10:
  * 1.35.0 dependency update
  * Creating PR to update Go version to 1.25.5
  * chore(deps): Bump the observability-dependencies group across 2 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 13 updates
  * chore(deps): Bump the observability-dependencies group across 1 directory with 2 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 27 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 11 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 2 directories with 17 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771848000">- Update to version 0.7.11
  * Merge pull request #988 from dstdfx/bump-version
  * Bump version to 0.7.11
  * Merge pull request #985 from dstdfx/bump-go-version-1.25.7
  * Update go.mod for e2e/int tests
  * Update go.mod
  * Merge pull request #986 from ShiriNmi1520/master
  * Clarify README "Run the server" deployment instructions
  * Bump go to 1.25.7
  * Merge pull request #983 from eks-distro-pr-bot/eks-distro-pr-bot/go-version-bumps
  * Creating PR to update Go version to 1.25.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776168000">- Update to version 0.7.12
  * Update OWNERS in reviewers and approvers list
  * Release 0.7.12
  * ci: add verify job to catch unrun gofmt and go mod tidy
  * chore(lint): harden linter config and fix coverage gaps
  * fix(lint): add revive and unparam linters with full compliance
  * ci: add unit test job, expand golangci config, add make update/verify
  * docs(e2e): fix Go version, remove non-existent make target, fix typo
  * docs(release): remove stale ECR image update instructions and fix asset version placeholders
  * fix: address code review findings in repo cleanup branch
  * docs: rewrite development.md as a practical local dev guide
  * chore: repo cleanup, developer experience improvements
  * chore: reduce binary size by 59% (80 MB → 33 MB)
  * fix(lint): replace deprecated NewSimpleClientset and fix embedded field selector
  * fix(tests): address code review findings in integration test framework
  * fix(tests): address post-refactor issues and add go workspace
  * refactor(tests): remove k8s.io/kubernetes dependency from test modules
  * chore: update all dependencies to latest versions
- Set GOWORK=off to make building with vendored dependencies work</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779451200">- Update to 0.7.16
  * Merge pull request #1041 from ronaldngounou/rngounou/bump-go-1.26.3
  * Pin GitHub Actions to full-length commit SHAs
  * fix: bump go version to 1.26.3 for CVEs
- from version 0.7.15
  * Merge pull request #1035 from Ganiredi/bump-version-0.7.15
  * Bump version to 0.7.15
  * Merge pull request #1030 from Ganiredi/1.36-k8s-deps
  * 1.36.0 dependency update
- from version 0.7.14
  * Merge pull request #1029 from CaidenBorrego/caidenb-gorunner-bump
  * Bump version to 0.7.14
  * Bumping gorunner image tag in Dockerfile for CVE mitigation
- from version 0.7.13
  * Merge pull request #1020 from dheeraj-coding/master
  * feat: add manual dispatch function for create-release.yml
  * Merge pull request #1019 from dheeraj-coding/master
  * fix: create-release workflow failures
  * Merge pull request #1017 from Ganiredi/1.36-k8s-deps
  * Merge pull request #1018 from dheeraj-coding/master
  * fix: build failure due to stale gcb image by updating to latest
  * Release 0.7.13
  * Merge pull request #1016 from Ganiredi/1.36-k8s-deps
  * Merge branch 'master' into 1.36-k8s-deps
  * Merge pull request #1013 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-be00ae3611
  * 1.36.rc release
  * Merge pull request #1015 from dheeraj-coding/master
  * fix: bump go version 1.26.2 for CVEs
  * chore(deps): Bump the misc-dependencies group across 3 directories with 6 updates
    (bsc#1265842, CVE-2026-33814)
  * Merge pull request #1011 from kubernetes-sigs/dependabot/go_modules/observability-dependencies-9e34dd3c34
  * Merge pull request #1009 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-b5e1eeb2d5
  * Merge pull request #1004 from bryantbiggs/chore/fix-goreleaser-deprecations
  * Merge pull request #1010 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-7118f1d525
  * chore(deps): Bump the observability-dependencies group across 2 directories with 2 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 2 updates
  * Merge pull request #1008 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-3ce7b5fcac
  * chore(deps): Bump the aws-dependencies group across 2 directories with 12 updates
  * Merge pull request #1006 from kubernetes-sigs/dependabot/go_modules/k8s-dependencies-09346e948b
  * chore(deps): Bump the k8s-dependencies group across 3 directories with 8 updates
  * Merge pull request #1005 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-508cd0fd8e
  * chore(deps): Bump the aws-dependencies group across 2 directories with 15 updates
  * fix: update Makefile goreleaser target for v2 compatibility
  * fix: resolve goreleaser v2 deprecations</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780574400">- Update to 0.7.17
  * Merge pull request #1051 from CaidenBorrego/caidenb-versionbump
  * bumping version from 0.7.16-&gt;0.7.17
  * Merge pull request #1047 from CaidenBorrego/caidenb-reservedprefix-fix
  * fix: honor reservedPrefixConfig for ConfigMap and CRD backends
  * Merge pull request #1046 from CaidenBorrego/caidenb-gorunner-bump
  * fix: reject malformed mapping ARN in userIDStrict mode for dynamic files</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780920000">- Add missing Bugzilla and CVE reference in changelog
- Increase Golang API version to 1.26</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 0.7.18
  * Merge pull request (#1062) from CaidenBorrego/new-release
  * Creating new release for CVE mitigation
  * Merge pull request (#1057) from CaidenBorrego/caidenb-versionbump
  * Merge remote-tracking branch 'upstream/master' into caidenb-versionbump
  * Bump x/net and x/sys to remediate CVEs (bsc#1266651, CVE-2026-39821)</changelog>
</package>
<package pkgid="23991ff8313ce7675bc802809335f1cd8b67c1812c078103093fa2e7d2272dcc" name="aws-iam-authenticator" arch="x86_64">
  <version epoch="0" ver="0.7.18" rel="150400.2.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1669896000">- Update to version 0.5.10
  * Bump Version in Makefile
  * Automated cherry pick of #491: Bump aws sdk go to v1.44.107 (#493)
  * Remove vendor from release-0.5 (#498)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680264000">- Update to version 0.6.2
  * Add automatic release creation
  * Add tag workflow to release-0.6 branch
  * Remove dependency from PR #416
  * Revert "Add SSO Role suffix support (#416)
- from version 0.6.1
  * Test release tagging
  * Fix file permissions
  * Tag release on update to version.txt
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Added Issue and PR templates (#517)
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
- from version 0.6.0
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Update go.mod and go.sum for tests/integrations
  * Replace tabs with spaces in go.mod
  * Bump aws sdk go to v1.44.107
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Initialize metrics in NewVerifier() if needed
  * Simplify featuregate flag parsing for SSORoleMatch
  * Added ConfiguredInitDirectories featuregate for init command
  * rm more v1alpha1 version
  * Bump 0.6 (#471)
  * Bump version in Makefile
  * Add query parameter validation for multiple parameters
  * Replace deprecated seccomp annotation with seccompProfile.
  * Replace deprecated critical pod annotation with priorityClassName.
  * Whitespace consistency fixes.
  * Use rbac.authorization.k8s.io/v1 instead of v1beta1 in example manifest.
  * Add SSO Role suffix support (#416)
  * Lowercase the ARN keys
  * Remove vendor directory
  * linux/amd64 only for image target
  * Don't push on image target
- from version 0.5.16
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread leak
    checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod)
- from version 0.5.15
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.5.14
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.5.13
  * Fix file permissions
  * Tag release on update to version.txt
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.5.12
  * Bump aws sdk go to v1.44.145
  * Add go mod for E2E
  * Update Dockerfile to pull from
    https://gallery.ecr.aws/eks-distro-build-tooling/golang
    to avoid reaching pull rate limit from docker.io
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Fix Makefile on branch release-0.5 (#520)
  * rm more v1alpha1 version (#516)
- from version 0.5.11
  * Add end to end test for mountfile mode in kind Update
    Makefile to support run e2e from either kind or kops.
  * Remove dependency from PR #416
  * Update Dockerfile to use Golang as builder
  * Add end to end test for dynamicfile backend
  * Print CommitID too on startup
  * Print version on startup
  * Add new backend mode DYNAMICFILE
  * Minor fix on the script to solve permission
    denied issue when run make start-dev
  * Working E2E tests in prow
  * Non-blocking E2E tests
  * Add e2e recipe to Makefile
  * Basic E2E testing for authenticator
  * Added ConfiguredInitDirectories featuregate for init command</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688472000">- Update to version 0.6.10
  * Update go.sum
  * Only replace x/net
  * Add build-all-images make target
  * Enable cross-compilation in Dockerfile
- from version 0.6.9
  * Add DynamicFileError Metric
- from version 0.6.8
  * Add comments explicitly on what we need to do later
  * Shutdown gracefully and avoid the extra thread
    leak checks that EtcdMain barfs on
  * Switch to newer ginkgo v2
  * Bump dependencies and go version (in go.mod) (bsc#1200528, CVE-2022-1996)
- from version 0.6.7
  * (no changes)
- from version 0.6.6
  * Add Username Prefix Enforce for DynamicFile mode
- from version 0.6.5
  * Update the aws sdk go version to latest
  * Update base image in Docker file
- from version 0.6.4
  * Loop up RoleMapping with UserId in dynamocfile mode
  * Install kind if it doesn't exist to _output
  * Update server_test for expose principal ID in audit log
  * Update server_test for expose principal ID in audit log
  * Expose Principal Id to audit log
  * Migrate away from google.com gcp project k8s-testimages
  * Build s390x/ppc64le binaries
  * Add default instance region in sts hostname
- from version 0.6.3
  * Bump aws sdk go to v1.44.145
  * Update Dockerfile to pull from https://gallery.ecr.aws/ \
    eks-distro-build-tooling/golang to avoid reaching pull
    rate limit from docker.io
  * Add go mod for E2E
  * Add install kind into e2e script
  * Move e2e test from start dev script + minor fix for run.sh
  * Add end to end test for mountfile mode in kind Update Makefile
    to support run e2e from either kind or kops.
  * Add end to end test for dynamicfile backend</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1692273600">- Update to version 0.6.11
  * Optimize only rebuild mapper when the actual backend modes change
  * Add int test for dynamic backend mode
  * Add DynamicBackendMode
  * Allow running create release from Github UI</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1701777600">- Update to version 0.6.13
  * Cherry-pick:  Fix federated user ID parsing #644 (#654)
  * Fix issue 606: use latest version of aws-sdk-go (#650)
  * Change s3 bucket for e2e tests, current default exists somewhere (#653)
- from version 0.6.12
  * Avoid parsing single quote empty inputs
  * Avoid parsing known empty inputs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1707825600">- Update to version 0.6.14
  * Check ARN for user ID strict check (#660) (#664)
  * Update go to 1.21.5 (#663)
  * Update go to 1.21.4 (#648) (#659)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 0.6.21
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
- from version 0.6.20
  * Merge pull request #713 from jaidevmane/updating-otelgrpc-to-v0.51.0
  * Merge pull request #709 from bryantbiggs/chore/update-ci-versions
  * Merge pull request #708 from jaidevmane/updating-deps
  * Merge pull request #707 from jaidevmane/adding-new-approvers
  * Merge pull request #687 from bryantbiggs/chore/update-app-k8s-dependencies
- from version 0.6.19
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4,
    google.golang.org/protobuf v1.33.0
- from version 0.6.18
  * Fix time formatting
  * Refactor structs for dynamic file load
  * Add support for adoption rate metrics for cam
  * Add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
- from version 0.6.17
  * Fix base image to use latest and release v0.6.17
- from version 0.6.16
  * Minor fix the IAM user arn verification
- from version 0.6.15
  * Fix role ARN comparison for user ID strict check (#669) (#671)
- Bump minimum Go version to 1.22 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1722427200">- Update to version 0.6.22
  * Update the go version to 1.22.5
  * Add unit test
  * Skip service validation to get the default regions endpoint</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1730808000">- Update to 0.6.27
  * Use protobuf content type instead of json for k8s client
- from version 0.6.26
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
- from version 0.6.25
  * Cleanup to use composite literals
  * Update to sig.k8s.io namespace
  * Retain original field
  * Add a namespaced field
- from version 0.6.24
  * Update the image to latest to fix CVE-2024-3968
- from version 0.6.23
  * Update upstream dependencies to v1.31.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1736510400">- Update to version 0.6.29
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * Handle scenario when the file is created but doesn't have content
- from version 0.6.28
  * Update owners list to sync master branch
  * Update owners list to sync master branch
  * Remove nnmin-aws from approver list
  * Add kmala to the owners list
  * Update code and add tests
  * Update code and add tests
  * Update metrics dimention to stsregion
  * Log sts host instead of global/regional
  * Log sts host instead of global/regional
  * Lpdate log
  * Remove typo and log line
  * Remove typo and log line
  * Remove typo
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Add logs and metrics dimentions to find sts call
    success/failures on global/regional endpoints
  * Bump test go versions
  * Bump go minor version
  * Add default timeout for http client
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Replace deprecated `ioutil` package
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Add configurable Now time for signature generation
  * Return 429 for STS throttling</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 0.6.31
  * Adds http2 support
- from version 0.6.30
  * Small fixes missed during cherrypicking
  * Cherry-picked file changes from commit
    https://github.com/kubernetes-sigs/aws-iam-authenticator/pull/554/commits
  * Remove no-op err assignment
  * Fix credential expirability check
  * Simplify featuregate flag parsing for SSORoleMatch
  * Support un-canonicalized ARNs in filemapper
  * Add SSO Role suffix support (#416)
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Chore: Update golang x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Fix: Correct codgen script due to deprecated script removal
  * Update RELEASE.md
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * Update RELEASE.md
- Add -buildmode=pie to go build command line (bsc#1239947)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760011200">- Update to version 0.7.8
  * chore: Bump indirect Kubernetes dependencies to latest
  * chore: Bump Kubernetes dependencies to latest
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Fix CVE-2025-47910
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump go.opentelemetry.io/auto/sdk
  * Bump the misc-dependencies group across 3 directories with 10 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
- from version 0.7.7
  * add support for aws-eusc partition
  * chore: Commit changes from `make codegen`
  * fix: Use `.go-version` for the go version
  * feat: Add `golanglint-ci` pull request review; resolve all findings
  * Add haoranleo as approver
  * Bump the observability-dependencies group across 3 directories with 3 updates
  * Bump actions/setup-go from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump github.com/coreos/go-oidc
  * Bump the observability-dependencies group across 3 directories with 12 updates
- from version 0.7.6
  * feat: Update go version to `1.25`; update dependencies to latest
    to patch reported vulnerabilities
  * Force TCP URLs for etcd compatibility
  * Update go dependencies with 1.34.0
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump actions/checkout from 4 to 5 in the actions group
  * Bump the aws-dependencies group across 2 directories with 13 updates
- from version 0.7.5
  * migrate hostname verification to sdk go v2
  * Bump the aws-dependencies group across 2 directories with 11 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the aws-dependencies group across 2 directories with 1 update
- from version 0.7.4
  * Bump the k8s-dependencies group across 3 directories with 1 update
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 18 updates
  * chore: Move observability dependencies to separate dependabot update group
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
- from version 0.7.3
  * update Approvers/reviewers
  * update go version to 1.24.4
  * Bump the aws-dependencies group across 2 directories with 12 updates
  * added logs for global region fallback
  * added global region fallback to imds
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * bumps kops and k8s versions, replaced node label "master" with "control-plane"
  * added imds logic back in, with EC2_METADATA enabled by default
  * removed headersourceacct from ststest, return err if no region cfg
  * added context chaining, cleanup
  * add context chaining, client config fixes
  * Move non problematic cache logs into debug
  * Rename log-level to log-verbosity, remove AutomaticEnv
  * lint fixes
  * get region from imds if not in config
  * added go.sum entries for tests/integration, fixed imds nil pointer dereference
  * Revert "Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client"
  * added some context chaining, fixed region config in GetWithOptions
  * updated arn, deleted v1-v2 creds converter
  * updated pkg/token to v2
  * updated pkg/filecache
  * updated arn in pkg/server to use v2
  * updated pkg/server to use v2
  * upgraded ec2provider
  * Bump the misc-dependencies group across 3 directories with 5 updates
  * Bump the k8s-dependencies group across 3 directories with 8 updates
  * Bump the misc-dependencies group across 3 directories with 6 updates
  * Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Use logrus for filecache logs
  * Add quiet mode (cache only)
- from version 0.7.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * Bump the misc-dependencies group across 3 directories with 43 updates
  * Bump the k8s-dependencies group across 3 directories with 2 updates
- from version 0.7.1
  * Revert "Add 2 more tag validation checks"
  * Update the gorunner to v0.18.0-eks-1-32-latest
  * update the go version to 1.24.2
  * Bump the aws-dependencies group across 2 directories with 1 update
  * adding yue9944882 to owner
  * adds http2 support
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * Update configmap.go
  * release authenticator from mainline with 0.7.0
  * release authenticator from mainline with 0.7.0
  * Bump the misc-dependencies group across 3 directories with 9 updates
  * Bump goreleaser/goreleaser-action from 5 to 6 in the actions group
  * Bump the misc-dependencies group across 3 directories with 41 updates
  * Remove no-op err assignment
  * Fix credential expirability check
  * chore: Update golan x package transitive dependencies
  * Bump the aws-dependencies group across 2 directories with 3 updates
  * fix: Correct codgen script due to deprecated script removal
  * Update configmap test per 1.32.0 change in client-go
  * Update upstream dependencies to v1.32.0
  * chore: Update to go `1.23.4`
  * deps: Update `golang.org/x/crypto` library to remediate high CVE
  * chore: Add dependabot configuration to automatically check for package updates weekly
  * handle scenario when the file is created but doesn't have content
  * update code and add tests
  * update code and add tests
  * remove nnmin-aws from approver list
  * add kmala to the owners list
  * update metrics dimention to stsregion
  * add default timeout for http client
  * log sts host instead of global/regional
  * log sts host instead of global/regional
  * update log
  * remove typo and log line
  * remove typo and log line
  * remove typo
  * Bump test go versions
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Bump go minor version
  * add logs and metrics dimentions to find sts call success/failures on global/regional endpoints
  * Update aws-iam-authenticator installation command
  * use protobuf content type instead of json for k8s client
  * Update RELEASE.md
  * Bump go-restful in e2e and integration tests
  * Bump go-restful
  * Remove outdated changelog artifacts
  * Bump deploy/example.yaml version
  * update RELEASE.md
  * Update filecache to use AWS SDK Go V2 with wrappers
  * Refactored token filecache
  * Fix x-amz-expires header value
  * Remove parameterized AWS session from token.go
  * Parse source account from sourceARN
  * Add sourceArn to sts through headers
  * Add configurable Now time for signature generation
  * cleanup to use composite literals
  * update to sig.k8s.io namespace
  * retain original field
  * update the image to latest to fix CVE-2024-39689
  * add a namespaced field
  * Update upstream dependencies to v1.31.0
  * update the go version to 1.22.5
  * Add unit test
  * skip service validation to get the default regions endpoint
  * fix: Run `go mod tidy` to fix `go.sum` files
  * fix: Update goreleaser workflow to fix warnings and artifact generation
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * update aws go sdk to 1.54.6
  * chore: Remove emeritus reviewers from `SECURITY_CONTACTS`
  * fix: Add random string to e2e test role to avoid pipeline run conflicts
  * fix: Run `go mod tidy` from `tests/integration` directory
  * chore: Update CLI dependencies `cobra` and `viper`
  * updating google.golang.org/grpc/otelgrpc to v0.47.0
  * chore: Update CI action versions, remove `push` trigger
  * chore: Align go versions and remove unused files
  * updating k8s client libraries and go version
  * adding new approvers - nnmin-aws
  * Bump go version to 1.21.8
  * Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0
  * chore: Re-update to latest patch version of K8s packages
  * fix time formatting
  * refactor structs for dynamic file load
  * add support for adoption rate metrics for cam
  * add support for e2e latency for dynamic mode
  * Switch to GOTOOLCHAIN env setting from gimme
  * Switch back to use go-version from go-image-tag
  * Switch to use go-image-tag from go-version
  * Repo controlled build go version
  * chore: Re-update and align
  * fix semantic error
  * feat: Re-update K8s packages to latest release
  * fix: Use `SIGDescribe`
  * fix: Use `framework.WithDisruptive()`
  * fix: [Disruptive] in plain text is deprecated and must be added through WithDisruptive instead
  * chore: Update dependencies for `e2e` tests
  * fix: Add context to `StartTestServer`
  * fix: Align integration test `replace` versions in `go.mod`
  * fix: Fix codegen and update `replace` test integration dependencies
  * fix: Integration test dependencies run `go mod tidy`
  * fix: Downgrade `k8s.io/sample-controller` which requires updating context handling
  * chore: Update app K8s dependencies
  * adding nnmin-aws into reviewers
  * Replace deprecated `ioutil` package
  * fix base image to use latest
  * minor fix the IAM user arn verification
  * Fix role ARN comparison for user ID strict check (#669)
  * Check ARN for user ID strict check (#660)
  * Update go to 1.21.5
  * Change s3 bucket for e2e tests, current default exists somewhere (#652)
- Bump minimum Go version to 1.25 in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1763467200">- Update to version 0.7.9
  * Creating PR to update Go version to 1.25.4
  * chore(deps): Bump the aws-dependencies group across 2 directories with 13 updates
  * chore(deps): Bump golangci/golangci-lint-action in the actions group
  * chore(deps): Bump the observability-dependencies group across 3 directories with 2 updates
  * chore(deps): Bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client
  * chore(deps): Bump the aws-dependencies group across 2 directories with 14 updates
  * bump golang version to 1.25.3
  * Creating PR to update Go version to 1.25.3
  * chore(deps): Bump github.com/onsi/ginkgo/v2
  * chore(deps): Bump the observability-dependencies group across 3 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 11 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 5 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 3 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 0.7.10:
  * 1.35.0 dependency update
  * Creating PR to update Go version to 1.25.5
  * chore(deps): Bump the observability-dependencies group across 2 directories with 1 update
  * chore(deps): Bump the misc-dependencies group across 3 directories with 13 updates
  * chore(deps): Bump the observability-dependencies group across 1 directory with 2 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 27 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 11 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 2 directories with 17 updates</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771848000">- Update to version 0.7.11
  * Merge pull request #988 from dstdfx/bump-version
  * Bump version to 0.7.11
  * Merge pull request #985 from dstdfx/bump-go-version-1.25.7
  * Update go.mod for e2e/int tests
  * Update go.mod
  * Merge pull request #986 from ShiriNmi1520/master
  * Clarify README "Run the server" deployment instructions
  * Bump go to 1.25.7
  * Merge pull request #983 from eks-distro-pr-bot/eks-distro-pr-bot/go-version-bumps
  * Creating PR to update Go version to 1.25.6</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1776168000">- Update to version 0.7.12
  * Update OWNERS in reviewers and approvers list
  * Release 0.7.12
  * ci: add verify job to catch unrun gofmt and go mod tidy
  * chore(lint): harden linter config and fix coverage gaps
  * fix(lint): add revive and unparam linters with full compliance
  * ci: add unit test job, expand golangci config, add make update/verify
  * docs(e2e): fix Go version, remove non-existent make target, fix typo
  * docs(release): remove stale ECR image update instructions and fix asset version placeholders
  * fix: address code review findings in repo cleanup branch
  * docs: rewrite development.md as a practical local dev guide
  * chore: repo cleanup, developer experience improvements
  * chore: reduce binary size by 59% (80 MB → 33 MB)
  * fix(lint): replace deprecated NewSimpleClientset and fix embedded field selector
  * fix(tests): address code review findings in integration test framework
  * fix(tests): address post-refactor issues and add go workspace
  * refactor(tests): remove k8s.io/kubernetes dependency from test modules
  * chore: update all dependencies to latest versions
- Set GOWORK=off to make building with vendored dependencies work</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1779451200">- Update to 0.7.16
  * Merge pull request #1041 from ronaldngounou/rngounou/bump-go-1.26.3
  * Pin GitHub Actions to full-length commit SHAs
  * fix: bump go version to 1.26.3 for CVEs
- from version 0.7.15
  * Merge pull request #1035 from Ganiredi/bump-version-0.7.15
  * Bump version to 0.7.15
  * Merge pull request #1030 from Ganiredi/1.36-k8s-deps
  * 1.36.0 dependency update
- from version 0.7.14
  * Merge pull request #1029 from CaidenBorrego/caidenb-gorunner-bump
  * Bump version to 0.7.14
  * Bumping gorunner image tag in Dockerfile for CVE mitigation
- from version 0.7.13
  * Merge pull request #1020 from dheeraj-coding/master
  * feat: add manual dispatch function for create-release.yml
  * Merge pull request #1019 from dheeraj-coding/master
  * fix: create-release workflow failures
  * Merge pull request #1017 from Ganiredi/1.36-k8s-deps
  * Merge pull request #1018 from dheeraj-coding/master
  * fix: build failure due to stale gcb image by updating to latest
  * Release 0.7.13
  * Merge pull request #1016 from Ganiredi/1.36-k8s-deps
  * Merge branch 'master' into 1.36-k8s-deps
  * Merge pull request #1013 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-be00ae3611
  * 1.36.rc release
  * Merge pull request #1015 from dheeraj-coding/master
  * fix: bump go version 1.26.2 for CVEs
  * chore(deps): Bump the misc-dependencies group across 3 directories with 6 updates
    (bsc#1265842, CVE-2026-33814)
  * Merge pull request #1011 from kubernetes-sigs/dependabot/go_modules/observability-dependencies-9e34dd3c34
  * Merge pull request #1009 from kubernetes-sigs/dependabot/go_modules/misc-dependencies-b5e1eeb2d5
  * Merge pull request #1004 from bryantbiggs/chore/fix-goreleaser-deprecations
  * Merge pull request #1010 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-7118f1d525
  * chore(deps): Bump the observability-dependencies group across 2 directories with 2 updates
  * chore(deps): Bump the aws-dependencies group across 2 directories with 6 updates
  * chore(deps): Bump the misc-dependencies group across 3 directories with 2 updates
  * Merge pull request #1008 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-3ce7b5fcac
  * chore(deps): Bump the aws-dependencies group across 2 directories with 12 updates
  * Merge pull request #1006 from kubernetes-sigs/dependabot/go_modules/k8s-dependencies-09346e948b
  * chore(deps): Bump the k8s-dependencies group across 3 directories with 8 updates
  * Merge pull request #1005 from kubernetes-sigs/dependabot/go_modules/aws-dependencies-508cd0fd8e
  * chore(deps): Bump the aws-dependencies group across 2 directories with 15 updates
  * fix: update Makefile goreleaser target for v2 compatibility
  * fix: resolve goreleaser v2 deprecations</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780574400">- Update to 0.7.17
  * Merge pull request #1051 from CaidenBorrego/caidenb-versionbump
  * bumping version from 0.7.16-&gt;0.7.17
  * Merge pull request #1047 from CaidenBorrego/caidenb-reservedprefix-fix
  * fix: honor reservedPrefixConfig for ConfigMap and CRD backends
  * Merge pull request #1046 from CaidenBorrego/caidenb-gorunner-bump
  * fix: reject malformed mapping ARN in userIDStrict mode for dynamic files</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1780920000">- Add missing Bugzilla and CVE reference in changelog
- Increase Golang API version to 1.26</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 0.7.18
  * Merge pull request (#1062) from CaidenBorrego/new-release
  * Creating new release for CVE mitigation
  * Merge pull request (#1057) from CaidenBorrego/caidenb-versionbump
  * Merge remote-tracking branch 'upstream/master' into caidenb-versionbump
  * Bump x/net and x/sys to remediate CVEs (bsc#1266651, CVE-2026-39821)</changelog>
</package>
<package pkgid="55850eef772ba5415453569bf689d5d485c2f4b1f4cbc367daa6e64828db5ca1" name="google-guest-agent-fallback" arch="aarch64">
  <version epoch="0" ver="20260108.00" rel="150400.3.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241018.01 (bsc#1231775, bsc#1231776)
  * Add support for including agent manager in guest-agent package (#456)
  * plugin manager: Introduce the systemd service file (#455)
  * documentation: Update metadata script runner details (#453)
- from version 20241013.00
  * Update OWNERS (#452)
- from version 20241011.01
  * SUSE no overwrite bug fix, Ubuntu 18.04 exception (#451)
- from version 20241011.00
  * Skip MDS setup by default for this release (#450)
- from version 20241010.01
  * Revert "network/netplan: Adjust link-local accordingly (#443)" (#448)
  * Set enable regardless of previous check failed or not (#447)
- from version 20241009.03
  * Avoid unnecessary reloads, check before overwriting configs (#446)
- from version 20241009.02
  * network/netplan: Do generate instead of apply (#445)
- from version 20241009.01
  * Skip SetupInterfaces if configs are already applied (#444)
  * network/netplan: Adjust link-local accordingly (#443)
  * Repeated logging could be mistaken for a recurring issue,
    log mds mtls endpoint error only once (#439)
  * Retry MDS PUT operation, reload netplan/networkctl
    only if configs are changed (#438)
  * Log interface state after setting up network (#437)
  * network: Debian 12 rollback only if default netplan is ok (#436)
- from version 20240930.01
  * Change mtls mds defaults, update log message to assure error is harmless (#434)
- from version 20240930.00
  * network: Restore Debian 12 netplan configuration. (#433)
  * network: Remove primary NIC left over configs. (#432)
  * Update VLAN interfaces format to match with MDS (#431)
  * Fix panics in agent when setting up VLAN with netplan (#430)
  * Add VLAN NIC support for NetworkManager (#429)
  * Fix debian12 netplan config issue, use ptr receiver (#428)
  * Update README to reflect new network manager changes (#427)
  * Introduce a configuration toggle for enabling/disabling cloud logging (#413)
  * Adapt and update config key to be consistent with MDS (#426)
  * Allow users to enable/disable the mds mtls via metadata key (#423)
  * Make primary nic management config consistent across all network managers (#422)
  * Document disabling account manager on AD (#421)
  * Update README with MDS MTLS docs (#418)
  * Avoid writing configuration files when they already exist on wicked and (#410)
  * Update golang.org/x/net dependencies to catch up on CVEs (#412)
  * Get rid of deperecated dependencies in snapshot service generate code (#411)
  * Fix where agent panics on nil event (#409)
  * Configure primary nic if only set in cfg file (#408)
  * Update NIC management strategy (#402)
  * Only release dhclient leases for an interface if the
    respective dhclient is still running (#407)
  * Disable OS Login without pruning off any extra suffix. (#400)
  * Skip root cert rotation if installed once (#405)
  * Add ipv6 support to guest agent (#404)
  * Update Accounts documentation (#403)
  * Update google-startup-scripts.service to enable logging (#399)
  * Network subsystem remove os rules (#396)
  * oslogin: Don't remove sshca watcher when oslogin is disabled (#398)
  * Update dependencies to catch up on CVE fixes (#397)
  * Network manager netplan implementation (#386)
  * Update dependencies to catch up on CVE fixes (#391)
  * Log current available routes on error (#388)
  * Fix command monitor bugs (#389)
  * windows account: Ignore "user already belogs to group" error (#387)
  * Add more error logging in snapshot handling requests, use common retry util (#384)
  * All non-200 status code from MDS should raise error (#383)
  * Change metadata key to enable-oslogin-certificates (#382)
  * Update dhclient pid/lease file directory to abide apparmor rules (#381)
  * Add COS homedir-gid patch to upstream. (#365)
  * Add require-oslogin-certificates logic to disable keys (#368)
  * systemd-networkd: Support Debian 12's version (#372)
  * Minor update typo in comment (#380)
  * NetworkManager: Only set secondary interfaces as up (#378)
  * address manager: Make sure we check for oldMetadata (#375)
  * network: Early setup network (#374)
  * NetworkManager: Fix ipv6 and ipv4 mode attribute (#373)
  * Network Manager: Make sure we clean up ifcfg files (#371)
  * metadata script runner: Fix script download (#370)
  * oslogin: Avoid adding extra empty line at the end of /etc/security/group.conf (#369)
  * Dynamic vlan (#361)
  * Check for nil response (#366)
  * Create NetworkManager implementation (#362)
  * Skip interface manager on Windows (#363)
  * network: Remove ignore setup (#360)
  * Create wicked network service implementation and its respective unit (#356)
  * Update metadata script runner, add tests (#357)
  * Refactor guest-agent to use common retry util (#355)
  * Flush logs before exiting #358 (#359)
  * Create systemd-networkd unit tests. (#354)
  * Update network manager unit tests (#351)
  * Implement retry util (#350)
  * Refactor utils package to not dump everything unrelated into one file (#352)
  * Set version on metadata script runner (#353)
  * Implement cleanup of deprecated configuration directives (#348)
  * Ignore DHCP offered routes only for secondary nics (#347)
  * Deprecate DHClient in favor of systemd-networkd (#342)
  * Generate windows and linux licenses (#346)
  * Remove quintonamore from OWNERS (#345)
  * Delete integration tests (#343)</changelog>
  <changelog author="rjschwei@suse.com" date="1736769600">- Update to version 20241209.01: (bsc#1235664)
  * readme: add notes about plugin manager (#476)
  * Update metadata script runner to honor cloud logging config flag (#475)
  * Fixing fallback from systemd-networkd to dhclient (#471)
  * network: fix nmcli check pattern (#472)
  * Update readme with guest agent manager (#469)
  * Add missing packaging spec (#466)
  * Bring back side-by-side packaging (#464)
  * Avoid changing permissions of directory if parent is / (#463)
  * network: force NetworkManager to connect to primary nic (#461)
  * Revert plugin manager packaging (#460)
  * Add GOPATH to PATH in debian build (#459)
  * Add plugin manager to debian build (#457)
  * rpm packaging: fix plugin manager assumptions (#458)
  * packaging: add plugin manager to rhel packaging (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1738756800">- Update to version 20250116.00: (bsc#1236403)
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to remove
    only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741694400">- Add patch to fix unexpected memory consumption during token
  parsing in golang.org/x/oauth2 (bsc#1239197, CVE-2025-22868)
  * CVE-2025-22868.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1743422400">- Update to version 20250327.01 (bsc#1239763, bsc#1239866)
  * Remove error messages from gce_workload_cert_refresh and
    metadata script runner (#527)
- from version 20250327.00
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250326.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250324.00
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250317.00
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250312.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250305.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250304.01
  * Fix typo in windows build script (#501)
- from version 20250214.01
  * Include core plugin binary for all packages (#500)
- from version 20250214.00
  * Update crypto library to fix  CVE-2024-45337 (#499)
- from version 20250212.00
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
- from version 20250211.00
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250207.00
  * vlan: toggle vlan configuration in debian packaging (#495)
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
  * Include interfaces in lists even if it has an invalid MAC. (#489)
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250204.02
  * force concourse to move version forward.
- from version 20250204.01
  * vlan: toggle vlan configuration in debian packaging (#495)
- from version 20250204.00
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
- from version 20250203.01
  * Include interfaces in lists even if it has an invalid MAC. (#489)
- from version 20250203.00
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250122.00
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to
    remove only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 20250411.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- Add -buildmode=pie to go build command line (bsc#1239944)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1747137600">- Update to version 20250508.00
  * Preparing stable build.
- from version 20250506.01
  * Make sure agent added connections are activated by NM (#534)
- from version 20250506.00
  * wrap NSS cache refresh in a goroutine (#533)
- from version 20250502.01
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
- from version 20250502.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250418.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250414.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1749038400">- Update to version 20250604.00
  * Preparing stable build.
- from version 20250602.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250521.00
  * Preparing stable build.
- from version 20250515.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250611.01
  * prepare stable release.
- from version 20250611.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250609.00
  * prepare stable release.
- from version 20250605.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are
    written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata
    script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250709.02
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250709.01
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250709.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250702.00
  * Update adapt script to run on startup/shutdown both (#561)
- from version 20250701.01
  * Update agent_uninstall.ps1 (#558)
- from version 20250701.00
  * Stop core plugin before removing agent package (#554)
- from version 20250628.00
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
- from version 20250626.00
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
- from version 20250625.00
  * prepare stable release.
- Install google_metadata_script_runner_adapt script (bsc#1245759)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250718.00
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250901.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.03
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250831.02
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250831.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250830.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250830.01
  * Update go version to 1.25 (#565)
- from version 20250830.00
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250828.00
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
- from version 20250826.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250821.01
  * Remove routes script from packaging (#566)
- Drop CVE-2025-22868.patch, merged upstream
- Update Go API version to 1.25</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757419200">- Update to version 20250908.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250907.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250905.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250905.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250902.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- Build and install new gce_workload_cert_refresh binary
- Fix installation source of google_metadata_script_runner_adapt script
- Install new systemd service file
  * gce-workload-cert-refresh.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758628800">- Update to version 20250923.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250923.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250921.00
  * Add extra debug logging around toggling OS Login (#572)
- from version 20250920.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250920.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250918.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250917.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250917.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250916.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250915.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- Add disable_google_guest_agent_manager.patch to disable missing daemon
  google_guest_agent_manager referenced by google-startup-scripts.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Update to version 20251007.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251006.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20251006.00
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251005.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250930.01
  * Honor core plugin setting on windows package update (#576)
- from version 20250929.01
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250929.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250926.00
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250924.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764158400">- Update to version 20251120.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251120.00
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251117.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251115.00
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251108.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251107.01
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251031.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.02
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251030.01
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251011.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251009.01
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251009.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- Drop disable_google_guest_agent_manager.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251208.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list is passed
    to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251206.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251205.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767614400">- Update to version 20251223.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251218.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251218.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251216.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251215.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251210.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251209.00
  * Force remove core plugin configuration for windows (#587)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1768305600">- Update to version 20260108.00
  * Source the contents of /var/google-users.d config files. (#586)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771502400">- Rename google-guest-agent package to google-guest-agent-fallback
  to provide a fallback package for the new package (jsc#PED-15389)</changelog>
</package>
<package pkgid="30cb15562d412f4a1cb19e2dd5ab91ecb74135c402a2c52591db52eaba09781f" name="google-guest-agent-fallback" arch="ppc64le">
  <version epoch="0" ver="20260108.00" rel="150400.3.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241018.01 (bsc#1231775, bsc#1231776)
  * Add support for including agent manager in guest-agent package (#456)
  * plugin manager: Introduce the systemd service file (#455)
  * documentation: Update metadata script runner details (#453)
- from version 20241013.00
  * Update OWNERS (#452)
- from version 20241011.01
  * SUSE no overwrite bug fix, Ubuntu 18.04 exception (#451)
- from version 20241011.00
  * Skip MDS setup by default for this release (#450)
- from version 20241010.01
  * Revert "network/netplan: Adjust link-local accordingly (#443)" (#448)
  * Set enable regardless of previous check failed or not (#447)
- from version 20241009.03
  * Avoid unnecessary reloads, check before overwriting configs (#446)
- from version 20241009.02
  * network/netplan: Do generate instead of apply (#445)
- from version 20241009.01
  * Skip SetupInterfaces if configs are already applied (#444)
  * network/netplan: Adjust link-local accordingly (#443)
  * Repeated logging could be mistaken for a recurring issue,
    log mds mtls endpoint error only once (#439)
  * Retry MDS PUT operation, reload netplan/networkctl
    only if configs are changed (#438)
  * Log interface state after setting up network (#437)
  * network: Debian 12 rollback only if default netplan is ok (#436)
- from version 20240930.01
  * Change mtls mds defaults, update log message to assure error is harmless (#434)
- from version 20240930.00
  * network: Restore Debian 12 netplan configuration. (#433)
  * network: Remove primary NIC left over configs. (#432)
  * Update VLAN interfaces format to match with MDS (#431)
  * Fix panics in agent when setting up VLAN with netplan (#430)
  * Add VLAN NIC support for NetworkManager (#429)
  * Fix debian12 netplan config issue, use ptr receiver (#428)
  * Update README to reflect new network manager changes (#427)
  * Introduce a configuration toggle for enabling/disabling cloud logging (#413)
  * Adapt and update config key to be consistent with MDS (#426)
  * Allow users to enable/disable the mds mtls via metadata key (#423)
  * Make primary nic management config consistent across all network managers (#422)
  * Document disabling account manager on AD (#421)
  * Update README with MDS MTLS docs (#418)
  * Avoid writing configuration files when they already exist on wicked and (#410)
  * Update golang.org/x/net dependencies to catch up on CVEs (#412)
  * Get rid of deperecated dependencies in snapshot service generate code (#411)
  * Fix where agent panics on nil event (#409)
  * Configure primary nic if only set in cfg file (#408)
  * Update NIC management strategy (#402)
  * Only release dhclient leases for an interface if the
    respective dhclient is still running (#407)
  * Disable OS Login without pruning off any extra suffix. (#400)
  * Skip root cert rotation if installed once (#405)
  * Add ipv6 support to guest agent (#404)
  * Update Accounts documentation (#403)
  * Update google-startup-scripts.service to enable logging (#399)
  * Network subsystem remove os rules (#396)
  * oslogin: Don't remove sshca watcher when oslogin is disabled (#398)
  * Update dependencies to catch up on CVE fixes (#397)
  * Network manager netplan implementation (#386)
  * Update dependencies to catch up on CVE fixes (#391)
  * Log current available routes on error (#388)
  * Fix command monitor bugs (#389)
  * windows account: Ignore "user already belogs to group" error (#387)
  * Add more error logging in snapshot handling requests, use common retry util (#384)
  * All non-200 status code from MDS should raise error (#383)
  * Change metadata key to enable-oslogin-certificates (#382)
  * Update dhclient pid/lease file directory to abide apparmor rules (#381)
  * Add COS homedir-gid patch to upstream. (#365)
  * Add require-oslogin-certificates logic to disable keys (#368)
  * systemd-networkd: Support Debian 12's version (#372)
  * Minor update typo in comment (#380)
  * NetworkManager: Only set secondary interfaces as up (#378)
  * address manager: Make sure we check for oldMetadata (#375)
  * network: Early setup network (#374)
  * NetworkManager: Fix ipv6 and ipv4 mode attribute (#373)
  * Network Manager: Make sure we clean up ifcfg files (#371)
  * metadata script runner: Fix script download (#370)
  * oslogin: Avoid adding extra empty line at the end of /etc/security/group.conf (#369)
  * Dynamic vlan (#361)
  * Check for nil response (#366)
  * Create NetworkManager implementation (#362)
  * Skip interface manager on Windows (#363)
  * network: Remove ignore setup (#360)
  * Create wicked network service implementation and its respective unit (#356)
  * Update metadata script runner, add tests (#357)
  * Refactor guest-agent to use common retry util (#355)
  * Flush logs before exiting #358 (#359)
  * Create systemd-networkd unit tests. (#354)
  * Update network manager unit tests (#351)
  * Implement retry util (#350)
  * Refactor utils package to not dump everything unrelated into one file (#352)
  * Set version on metadata script runner (#353)
  * Implement cleanup of deprecated configuration directives (#348)
  * Ignore DHCP offered routes only for secondary nics (#347)
  * Deprecate DHClient in favor of systemd-networkd (#342)
  * Generate windows and linux licenses (#346)
  * Remove quintonamore from OWNERS (#345)
  * Delete integration tests (#343)</changelog>
  <changelog author="rjschwei@suse.com" date="1736769600">- Update to version 20241209.01: (bsc#1235664)
  * readme: add notes about plugin manager (#476)
  * Update metadata script runner to honor cloud logging config flag (#475)
  * Fixing fallback from systemd-networkd to dhclient (#471)
  * network: fix nmcli check pattern (#472)
  * Update readme with guest agent manager (#469)
  * Add missing packaging spec (#466)
  * Bring back side-by-side packaging (#464)
  * Avoid changing permissions of directory if parent is / (#463)
  * network: force NetworkManager to connect to primary nic (#461)
  * Revert plugin manager packaging (#460)
  * Add GOPATH to PATH in debian build (#459)
  * Add plugin manager to debian build (#457)
  * rpm packaging: fix plugin manager assumptions (#458)
  * packaging: add plugin manager to rhel packaging (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1738756800">- Update to version 20250116.00: (bsc#1236403)
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to remove
    only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741694400">- Add patch to fix unexpected memory consumption during token
  parsing in golang.org/x/oauth2 (bsc#1239197, CVE-2025-22868)
  * CVE-2025-22868.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1743422400">- Update to version 20250327.01 (bsc#1239763, bsc#1239866)
  * Remove error messages from gce_workload_cert_refresh and
    metadata script runner (#527)
- from version 20250327.00
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250326.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250324.00
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250317.00
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250312.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250305.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250304.01
  * Fix typo in windows build script (#501)
- from version 20250214.01
  * Include core plugin binary for all packages (#500)
- from version 20250214.00
  * Update crypto library to fix  CVE-2024-45337 (#499)
- from version 20250212.00
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
- from version 20250211.00
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250207.00
  * vlan: toggle vlan configuration in debian packaging (#495)
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
  * Include interfaces in lists even if it has an invalid MAC. (#489)
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250204.02
  * force concourse to move version forward.
- from version 20250204.01
  * vlan: toggle vlan configuration in debian packaging (#495)
- from version 20250204.00
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
- from version 20250203.01
  * Include interfaces in lists even if it has an invalid MAC. (#489)
- from version 20250203.00
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250122.00
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to
    remove only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 20250411.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- Add -buildmode=pie to go build command line (bsc#1239944)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1747137600">- Update to version 20250508.00
  * Preparing stable build.
- from version 20250506.01
  * Make sure agent added connections are activated by NM (#534)
- from version 20250506.00
  * wrap NSS cache refresh in a goroutine (#533)
- from version 20250502.01
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
- from version 20250502.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250418.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250414.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1749038400">- Update to version 20250604.00
  * Preparing stable build.
- from version 20250602.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250521.00
  * Preparing stable build.
- from version 20250515.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250611.01
  * prepare stable release.
- from version 20250611.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250609.00
  * prepare stable release.
- from version 20250605.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are
    written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata
    script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250709.02
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250709.01
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250709.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250702.00
  * Update adapt script to run on startup/shutdown both (#561)
- from version 20250701.01
  * Update agent_uninstall.ps1 (#558)
- from version 20250701.00
  * Stop core plugin before removing agent package (#554)
- from version 20250628.00
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
- from version 20250626.00
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
- from version 20250625.00
  * prepare stable release.
- Install google_metadata_script_runner_adapt script (bsc#1245759)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250718.00
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250901.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.03
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250831.02
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250831.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250830.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250830.01
  * Update go version to 1.25 (#565)
- from version 20250830.00
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250828.00
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
- from version 20250826.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250821.01
  * Remove routes script from packaging (#566)
- Drop CVE-2025-22868.patch, merged upstream
- Update Go API version to 1.25</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757419200">- Update to version 20250908.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250907.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250905.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250905.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250902.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- Build and install new gce_workload_cert_refresh binary
- Fix installation source of google_metadata_script_runner_adapt script
- Install new systemd service file
  * gce-workload-cert-refresh.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758628800">- Update to version 20250923.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250923.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250921.00
  * Add extra debug logging around toggling OS Login (#572)
- from version 20250920.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250920.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250918.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250917.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250917.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250916.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250915.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- Add disable_google_guest_agent_manager.patch to disable missing daemon
  google_guest_agent_manager referenced by google-startup-scripts.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Update to version 20251007.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251006.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20251006.00
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251005.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250930.01
  * Honor core plugin setting on windows package update (#576)
- from version 20250929.01
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250929.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250926.00
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250924.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764158400">- Update to version 20251120.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251120.00
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251117.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251115.00
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251108.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251107.01
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251031.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.02
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251030.01
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251011.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251009.01
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251009.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- Drop disable_google_guest_agent_manager.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251208.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list is passed
    to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251206.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251205.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767614400">- Update to version 20251223.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251218.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251218.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251216.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251215.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251210.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251209.00
  * Force remove core plugin configuration for windows (#587)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1768305600">- Update to version 20260108.00
  * Source the contents of /var/google-users.d config files. (#586)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771502400">- Rename google-guest-agent package to google-guest-agent-fallback
  to provide a fallback package for the new package (jsc#PED-15389)</changelog>
</package>
<package pkgid="22f671306801db9ac46ee87faa638f265b0e0a733e99bad3651640345d535ff2" name="google-guest-agent-fallback" arch="src">
  <version epoch="0" ver="20260108.00" rel="150400.3.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241018.01 (bsc#1231775, bsc#1231776)
  * Add support for including agent manager in guest-agent package (#456)
  * plugin manager: Introduce the systemd service file (#455)
  * documentation: Update metadata script runner details (#453)
- from version 20241013.00
  * Update OWNERS (#452)
- from version 20241011.01
  * SUSE no overwrite bug fix, Ubuntu 18.04 exception (#451)
- from version 20241011.00
  * Skip MDS setup by default for this release (#450)
- from version 20241010.01
  * Revert "network/netplan: Adjust link-local accordingly (#443)" (#448)
  * Set enable regardless of previous check failed or not (#447)
- from version 20241009.03
  * Avoid unnecessary reloads, check before overwriting configs (#446)
- from version 20241009.02
  * network/netplan: Do generate instead of apply (#445)
- from version 20241009.01
  * Skip SetupInterfaces if configs are already applied (#444)
  * network/netplan: Adjust link-local accordingly (#443)
  * Repeated logging could be mistaken for a recurring issue,
    log mds mtls endpoint error only once (#439)
  * Retry MDS PUT operation, reload netplan/networkctl
    only if configs are changed (#438)
  * Log interface state after setting up network (#437)
  * network: Debian 12 rollback only if default netplan is ok (#436)
- from version 20240930.01
  * Change mtls mds defaults, update log message to assure error is harmless (#434)
- from version 20240930.00
  * network: Restore Debian 12 netplan configuration. (#433)
  * network: Remove primary NIC left over configs. (#432)
  * Update VLAN interfaces format to match with MDS (#431)
  * Fix panics in agent when setting up VLAN with netplan (#430)
  * Add VLAN NIC support for NetworkManager (#429)
  * Fix debian12 netplan config issue, use ptr receiver (#428)
  * Update README to reflect new network manager changes (#427)
  * Introduce a configuration toggle for enabling/disabling cloud logging (#413)
  * Adapt and update config key to be consistent with MDS (#426)
  * Allow users to enable/disable the mds mtls via metadata key (#423)
  * Make primary nic management config consistent across all network managers (#422)
  * Document disabling account manager on AD (#421)
  * Update README with MDS MTLS docs (#418)
  * Avoid writing configuration files when they already exist on wicked and (#410)
  * Update golang.org/x/net dependencies to catch up on CVEs (#412)
  * Get rid of deperecated dependencies in snapshot service generate code (#411)
  * Fix where agent panics on nil event (#409)
  * Configure primary nic if only set in cfg file (#408)
  * Update NIC management strategy (#402)
  * Only release dhclient leases for an interface if the
    respective dhclient is still running (#407)
  * Disable OS Login without pruning off any extra suffix. (#400)
  * Skip root cert rotation if installed once (#405)
  * Add ipv6 support to guest agent (#404)
  * Update Accounts documentation (#403)
  * Update google-startup-scripts.service to enable logging (#399)
  * Network subsystem remove os rules (#396)
  * oslogin: Don't remove sshca watcher when oslogin is disabled (#398)
  * Update dependencies to catch up on CVE fixes (#397)
  * Network manager netplan implementation (#386)
  * Update dependencies to catch up on CVE fixes (#391)
  * Log current available routes on error (#388)
  * Fix command monitor bugs (#389)
  * windows account: Ignore "user already belogs to group" error (#387)
  * Add more error logging in snapshot handling requests, use common retry util (#384)
  * All non-200 status code from MDS should raise error (#383)
  * Change metadata key to enable-oslogin-certificates (#382)
  * Update dhclient pid/lease file directory to abide apparmor rules (#381)
  * Add COS homedir-gid patch to upstream. (#365)
  * Add require-oslogin-certificates logic to disable keys (#368)
  * systemd-networkd: Support Debian 12's version (#372)
  * Minor update typo in comment (#380)
  * NetworkManager: Only set secondary interfaces as up (#378)
  * address manager: Make sure we check for oldMetadata (#375)
  * network: Early setup network (#374)
  * NetworkManager: Fix ipv6 and ipv4 mode attribute (#373)
  * Network Manager: Make sure we clean up ifcfg files (#371)
  * metadata script runner: Fix script download (#370)
  * oslogin: Avoid adding extra empty line at the end of /etc/security/group.conf (#369)
  * Dynamic vlan (#361)
  * Check for nil response (#366)
  * Create NetworkManager implementation (#362)
  * Skip interface manager on Windows (#363)
  * network: Remove ignore setup (#360)
  * Create wicked network service implementation and its respective unit (#356)
  * Update metadata script runner, add tests (#357)
  * Refactor guest-agent to use common retry util (#355)
  * Flush logs before exiting #358 (#359)
  * Create systemd-networkd unit tests. (#354)
  * Update network manager unit tests (#351)
  * Implement retry util (#350)
  * Refactor utils package to not dump everything unrelated into one file (#352)
  * Set version on metadata script runner (#353)
  * Implement cleanup of deprecated configuration directives (#348)
  * Ignore DHCP offered routes only for secondary nics (#347)
  * Deprecate DHClient in favor of systemd-networkd (#342)
  * Generate windows and linux licenses (#346)
  * Remove quintonamore from OWNERS (#345)
  * Delete integration tests (#343)</changelog>
  <changelog author="rjschwei@suse.com" date="1736769600">- Update to version 20241209.01: (bsc#1235664)
  * readme: add notes about plugin manager (#476)
  * Update metadata script runner to honor cloud logging config flag (#475)
  * Fixing fallback from systemd-networkd to dhclient (#471)
  * network: fix nmcli check pattern (#472)
  * Update readme with guest agent manager (#469)
  * Add missing packaging spec (#466)
  * Bring back side-by-side packaging (#464)
  * Avoid changing permissions of directory if parent is / (#463)
  * network: force NetworkManager to connect to primary nic (#461)
  * Revert plugin manager packaging (#460)
  * Add GOPATH to PATH in debian build (#459)
  * Add plugin manager to debian build (#457)
  * rpm packaging: fix plugin manager assumptions (#458)
  * packaging: add plugin manager to rhel packaging (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1738756800">- Update to version 20250116.00: (bsc#1236403)
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to remove
    only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741694400">- Add patch to fix unexpected memory consumption during token
  parsing in golang.org/x/oauth2 (bsc#1239197, CVE-2025-22868)
  * CVE-2025-22868.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1743422400">- Update to version 20250327.01 (bsc#1239763, bsc#1239866)
  * Remove error messages from gce_workload_cert_refresh and
    metadata script runner (#527)
- from version 20250327.00
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250326.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250324.00
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250317.00
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250312.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250305.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250304.01
  * Fix typo in windows build script (#501)
- from version 20250214.01
  * Include core plugin binary for all packages (#500)
- from version 20250214.00
  * Update crypto library to fix  CVE-2024-45337 (#499)
- from version 20250212.00
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
- from version 20250211.00
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250207.00
  * vlan: toggle vlan configuration in debian packaging (#495)
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
  * Include interfaces in lists even if it has an invalid MAC. (#489)
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250204.02
  * force concourse to move version forward.
- from version 20250204.01
  * vlan: toggle vlan configuration in debian packaging (#495)
- from version 20250204.00
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
- from version 20250203.01
  * Include interfaces in lists even if it has an invalid MAC. (#489)
- from version 20250203.00
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250122.00
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to
    remove only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 20250411.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- Add -buildmode=pie to go build command line (bsc#1239944)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1747137600">- Update to version 20250508.00
  * Preparing stable build.
- from version 20250506.01
  * Make sure agent added connections are activated by NM (#534)
- from version 20250506.00
  * wrap NSS cache refresh in a goroutine (#533)
- from version 20250502.01
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
- from version 20250502.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250418.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250414.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1749038400">- Update to version 20250604.00
  * Preparing stable build.
- from version 20250602.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250521.00
  * Preparing stable build.
- from version 20250515.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250611.01
  * prepare stable release.
- from version 20250611.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250609.00
  * prepare stable release.
- from version 20250605.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are
    written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata
    script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250709.02
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250709.01
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250709.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250702.00
  * Update adapt script to run on startup/shutdown both (#561)
- from version 20250701.01
  * Update agent_uninstall.ps1 (#558)
- from version 20250701.00
  * Stop core plugin before removing agent package (#554)
- from version 20250628.00
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
- from version 20250626.00
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
- from version 20250625.00
  * prepare stable release.
- Install google_metadata_script_runner_adapt script (bsc#1245759)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250718.00
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250901.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.03
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250831.02
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250831.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250830.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250830.01
  * Update go version to 1.25 (#565)
- from version 20250830.00
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250828.00
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
- from version 20250826.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250821.01
  * Remove routes script from packaging (#566)
- Drop CVE-2025-22868.patch, merged upstream
- Update Go API version to 1.25</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757419200">- Update to version 20250908.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250907.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250905.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250905.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250902.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- Build and install new gce_workload_cert_refresh binary
- Fix installation source of google_metadata_script_runner_adapt script
- Install new systemd service file
  * gce-workload-cert-refresh.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758628800">- Update to version 20250923.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250923.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250921.00
  * Add extra debug logging around toggling OS Login (#572)
- from version 20250920.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250920.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250918.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250917.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250917.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250916.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250915.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- Add disable_google_guest_agent_manager.patch to disable missing daemon
  google_guest_agent_manager referenced by google-startup-scripts.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Update to version 20251007.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251006.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20251006.00
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251005.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250930.01
  * Honor core plugin setting on windows package update (#576)
- from version 20250929.01
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250929.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250926.00
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250924.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764158400">- Update to version 20251120.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251120.00
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251117.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251115.00
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251108.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251107.01
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251031.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.02
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251030.01
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251011.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251009.01
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251009.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- Drop disable_google_guest_agent_manager.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251208.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list is passed
    to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251206.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251205.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767614400">- Update to version 20251223.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251218.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251218.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251216.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251215.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251210.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251209.00
  * Force remove core plugin configuration for windows (#587)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1768305600">- Update to version 20260108.00
  * Source the contents of /var/google-users.d config files. (#586)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771502400">- Rename google-guest-agent package to google-guest-agent-fallback
  to provide a fallback package for the new package (jsc#PED-15389)</changelog>
</package>
<package pkgid="f1fdc5b7bc1ae35564b2191ccaec4c8b5f98af31ad01797615c672357a6c65d7" name="google-guest-agent-fallback" arch="x86_64">
  <version epoch="0" ver="20260108.00" rel="150400.3.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241018.01 (bsc#1231775, bsc#1231776)
  * Add support for including agent manager in guest-agent package (#456)
  * plugin manager: Introduce the systemd service file (#455)
  * documentation: Update metadata script runner details (#453)
- from version 20241013.00
  * Update OWNERS (#452)
- from version 20241011.01
  * SUSE no overwrite bug fix, Ubuntu 18.04 exception (#451)
- from version 20241011.00
  * Skip MDS setup by default for this release (#450)
- from version 20241010.01
  * Revert "network/netplan: Adjust link-local accordingly (#443)" (#448)
  * Set enable regardless of previous check failed or not (#447)
- from version 20241009.03
  * Avoid unnecessary reloads, check before overwriting configs (#446)
- from version 20241009.02
  * network/netplan: Do generate instead of apply (#445)
- from version 20241009.01
  * Skip SetupInterfaces if configs are already applied (#444)
  * network/netplan: Adjust link-local accordingly (#443)
  * Repeated logging could be mistaken for a recurring issue,
    log mds mtls endpoint error only once (#439)
  * Retry MDS PUT operation, reload netplan/networkctl
    only if configs are changed (#438)
  * Log interface state after setting up network (#437)
  * network: Debian 12 rollback only if default netplan is ok (#436)
- from version 20240930.01
  * Change mtls mds defaults, update log message to assure error is harmless (#434)
- from version 20240930.00
  * network: Restore Debian 12 netplan configuration. (#433)
  * network: Remove primary NIC left over configs. (#432)
  * Update VLAN interfaces format to match with MDS (#431)
  * Fix panics in agent when setting up VLAN with netplan (#430)
  * Add VLAN NIC support for NetworkManager (#429)
  * Fix debian12 netplan config issue, use ptr receiver (#428)
  * Update README to reflect new network manager changes (#427)
  * Introduce a configuration toggle for enabling/disabling cloud logging (#413)
  * Adapt and update config key to be consistent with MDS (#426)
  * Allow users to enable/disable the mds mtls via metadata key (#423)
  * Make primary nic management config consistent across all network managers (#422)
  * Document disabling account manager on AD (#421)
  * Update README with MDS MTLS docs (#418)
  * Avoid writing configuration files when they already exist on wicked and (#410)
  * Update golang.org/x/net dependencies to catch up on CVEs (#412)
  * Get rid of deperecated dependencies in snapshot service generate code (#411)
  * Fix where agent panics on nil event (#409)
  * Configure primary nic if only set in cfg file (#408)
  * Update NIC management strategy (#402)
  * Only release dhclient leases for an interface if the
    respective dhclient is still running (#407)
  * Disable OS Login without pruning off any extra suffix. (#400)
  * Skip root cert rotation if installed once (#405)
  * Add ipv6 support to guest agent (#404)
  * Update Accounts documentation (#403)
  * Update google-startup-scripts.service to enable logging (#399)
  * Network subsystem remove os rules (#396)
  * oslogin: Don't remove sshca watcher when oslogin is disabled (#398)
  * Update dependencies to catch up on CVE fixes (#397)
  * Network manager netplan implementation (#386)
  * Update dependencies to catch up on CVE fixes (#391)
  * Log current available routes on error (#388)
  * Fix command monitor bugs (#389)
  * windows account: Ignore "user already belogs to group" error (#387)
  * Add more error logging in snapshot handling requests, use common retry util (#384)
  * All non-200 status code from MDS should raise error (#383)
  * Change metadata key to enable-oslogin-certificates (#382)
  * Update dhclient pid/lease file directory to abide apparmor rules (#381)
  * Add COS homedir-gid patch to upstream. (#365)
  * Add require-oslogin-certificates logic to disable keys (#368)
  * systemd-networkd: Support Debian 12's version (#372)
  * Minor update typo in comment (#380)
  * NetworkManager: Only set secondary interfaces as up (#378)
  * address manager: Make sure we check for oldMetadata (#375)
  * network: Early setup network (#374)
  * NetworkManager: Fix ipv6 and ipv4 mode attribute (#373)
  * Network Manager: Make sure we clean up ifcfg files (#371)
  * metadata script runner: Fix script download (#370)
  * oslogin: Avoid adding extra empty line at the end of /etc/security/group.conf (#369)
  * Dynamic vlan (#361)
  * Check for nil response (#366)
  * Create NetworkManager implementation (#362)
  * Skip interface manager on Windows (#363)
  * network: Remove ignore setup (#360)
  * Create wicked network service implementation and its respective unit (#356)
  * Update metadata script runner, add tests (#357)
  * Refactor guest-agent to use common retry util (#355)
  * Flush logs before exiting #358 (#359)
  * Create systemd-networkd unit tests. (#354)
  * Update network manager unit tests (#351)
  * Implement retry util (#350)
  * Refactor utils package to not dump everything unrelated into one file (#352)
  * Set version on metadata script runner (#353)
  * Implement cleanup of deprecated configuration directives (#348)
  * Ignore DHCP offered routes only for secondary nics (#347)
  * Deprecate DHClient in favor of systemd-networkd (#342)
  * Generate windows and linux licenses (#346)
  * Remove quintonamore from OWNERS (#345)
  * Delete integration tests (#343)</changelog>
  <changelog author="rjschwei@suse.com" date="1736769600">- Update to version 20241209.01: (bsc#1235664)
  * readme: add notes about plugin manager (#476)
  * Update metadata script runner to honor cloud logging config flag (#475)
  * Fixing fallback from systemd-networkd to dhclient (#471)
  * network: fix nmcli check pattern (#472)
  * Update readme with guest agent manager (#469)
  * Add missing packaging spec (#466)
  * Bring back side-by-side packaging (#464)
  * Avoid changing permissions of directory if parent is / (#463)
  * network: force NetworkManager to connect to primary nic (#461)
  * Revert plugin manager packaging (#460)
  * Add GOPATH to PATH in debian build (#459)
  * Add plugin manager to debian build (#457)
  * rpm packaging: fix plugin manager assumptions (#458)
  * packaging: add plugin manager to rhel packaging (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1738756800">- Update to version 20250116.00: (bsc#1236403)
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to remove
    only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1741694400">- Add patch to fix unexpected memory consumption during token
  parsing in golang.org/x/oauth2 (bsc#1239197, CVE-2025-22868)
  * CVE-2025-22868.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1743422400">- Update to version 20250327.01 (bsc#1239763, bsc#1239866)
  * Remove error messages from gce_workload_cert_refresh and
    metadata script runner (#527)
- from version 20250327.00
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250326.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250324.00
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250317.00
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250312.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250305.00
  * Revert bundling new binaries in the package (#509)
  * Fix typo in windows build script (#501)
  * Include core plugin binary for all packages (#500)
  * Update crypto library to fix  CVE-2024-45337 (#499)
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250304.01
  * Fix typo in windows build script (#501)
- from version 20250214.01
  * Include core plugin binary for all packages (#500)
- from version 20250214.00
  * Update crypto library to fix  CVE-2024-45337 (#499)
- from version 20250212.00
  * Start packaging compat manager (#498)
  * Start bundling ggactl_plugin_cleanup binary in all agent packages (#492)
- from version 20250211.00
  * scripts: introduce a wrapper to locally build deb package (#490)
  * Introduce compat-manager systemd unit (#497)
- from version 20250207.00
  * vlan: toggle vlan configuration in debian packaging (#495)
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
  * Include interfaces in lists even if it has an invalid MAC. (#489)
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250204.02
  * force concourse to move version forward.
- from version 20250204.01
  * vlan: toggle vlan configuration in debian packaging (#495)
- from version 20250204.00
  * vlan: move config out of unstable section (#494)
  * Add clarification to comments regarding invalid NICs and the
    `invalid` tag. (#493)
- from version 20250203.01
  * Include interfaces in lists even if it has an invalid MAC. (#489)
- from version 20250203.00
  * Fix windows package build failures (#491)
  * vlan: don't index based on the vlan ID (#486)
  * Revert PR #482 (#488)
  * Remove Amy and Zach from OWNERS (#487)
  * Skip interfaces in interfaceNames() instead of erroring if there is an (#482)
  * Fix Debian packaging if guest agent manager is not checked out (#485)
- from version 20250122.00
  * networkd(vlan): remove the interface in addition to config (#468)
  * Implement support for vlan dynamic removal, update dhclient to
    remove only if configured (#465)
  * Update logging library (#479)
  * Remove Pat from owners file. (#478)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744632000">- Update to version 20250411.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- Add -buildmode=pie to go build command line (bsc#1239944)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1747137600">- Update to version 20250508.00
  * Preparing stable build.
- from version 20250506.01
  * Make sure agent added connections are activated by NM (#534)
- from version 20250506.00
  * wrap NSS cache refresh in a goroutine (#533)
- from version 20250502.01
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
- from version 20250502.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250418.00
  * Re-enable disabled services if the core plugin was enabled (#521)
- from version 20250414.00
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1749038400">- Update to version 20250604.00
  * Preparing stable build.
- from version 20250602.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)
- from version 20250521.00
  * Preparing stable build.
- from version 20250515.00
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250611.01
  * prepare stable release.
- from version 20250611.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
- from version 20250609.00
  * prepare stable release.
- from version 20250605.00
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified
    files (#520)" (#523) (#540)
  * Make sure agent added connections are activated by NM (#534)
  * wrap NSS cache refresh in a goroutine (#533)
  * Wicked: Only reload interfaces for which configurations are
    written or changed. (#524)
  * Add AuthorizedKeysCompat to windows packaging (#530)
  * Remove error messages from gce_workload_cert_refresh and metadata
    script runner (#527)
  * Update guest-logging-go dependency (#526)
  * Add 'created-by' metadata, and pass it as option to logging library (#508)
  * Revert "oslogin: Correctly handle newlines at the end of
    modified files (#520)" (#523)
  * Re-enable disabled services if the core plugin was enabled (#522)
  * Enable guest services on package upgrade (#519)
  * oslogin: Correctly handle newlines at the end of modified files (#520)
  * Fix core plugin path (#518)
  * Fix package build issues (#517)
  * Fix dependencies ran go mod tidy -v (#515)
  * Fix debian build path (#514)
  * Bundle compat metadata script runner binary in package (#513)
  * Bump golang.org/x/net from 0.27.0 to 0.36.0 (#512)
  * Update startup/shutdown services to launch compat manager (#503)
  * Bundle new gce metadata script runner binary in agent package (#502)
  * Revert "Revert bundling new binaries in the package (#509)" (#511)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250709.02
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250709.01
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250709.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250702.00
  * Update adapt script to run on startup/shutdown both (#561)
- from version 20250701.01
  * Update agent_uninstall.ps1 (#558)
- from version 20250701.00
  * Stop core plugin before removing agent package (#554)
- from version 20250628.00
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
- from version 20250626.00
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
  * startup script: wrap compatibility decision into its own scripts (#538)
  * Reapply "oslogin: Correctly handle newlines at the end of modified files (#520)" (#523) (#540)
- from version 20250625.00
  * prepare stable release.
- Install google_metadata_script_runner_adapt script (bsc#1245759)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250718.00
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250901.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.03
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250831.02
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250831.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250831.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250830.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent
    and disable core plugin (#557)
- from version 20250830.01
  * Update go version to 1.25 (#565)
- from version 20250830.00
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250828.00
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
- from version 20250826.00
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250821.01
  * Remove routes script from packaging (#566)
- Drop CVE-2025-22868.patch, merged upstream
- Update Go API version to 1.25</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757419200">- Update to version 20250908.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250907.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250905.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250905.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250902.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- Build and install new gce_workload_cert_refresh binary
- Fix installation source of google_metadata_script_runner_adapt script
- Install new systemd service file
  * gce-workload-cert-refresh.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758628800">- Update to version 20250923.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250923.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250921.00
  * Add extra debug logging around toggling OS Login (#572)
- from version 20250920.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250920.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250918.01
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250917.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250917.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250916.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20250915.00
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- Add disable_google_guest_agent_manager.patch to disable missing daemon
  google_guest_agent_manager referenced by google-startup-scripts.service</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Update to version 20251007.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251006.01
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20251006.00
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251005.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250930.01
  * Honor core plugin setting on windows package update (#576)
- from version 20250929.01
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250929.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250926.00
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.02
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)
- from version 20250924.01
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20250924.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and
    disable core plugin (#557)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764158400">- Update to version 20251120.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251120.00
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251117.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251115.00
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251108.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251107.01
  * Don't delete the authorized_keys file when an empty key list is
    passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251031.00
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.02
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251030.01
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251030.00
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251011.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251009.01
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251009.00
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- Drop disable_google_guest_agent_manager.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251208.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list is passed
    to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251206.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251205.00
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767614400">- Update to version 20251223.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251218.01
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251218.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251216.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251215.00
  * Force remove core plugin configuration for windows (#587)
  * network: force address manager to always consolidate the OS state (#585)
  * Bump golang.org/x/crypto from 0.41.0 to 0.45.0 (#583)
  * Don't delete the authorized_keys file when an empty key list
    is passed to updateAuthorizedKeysFile (#582)
  * Add Tyler, Saswat, Hank to OWNERS (#577)
  * Honor core plugin setting on windows package update (#576)
  * Restart agent if core plugin is disabled (#575)
  * Add extra debug logging around toggling OS Login (#572)
  * Update go version to 1.25 (#565)
  * Add compat adapt script to windows in agent sysprep (#569)
  * Fix adapt to use more portable shebang line (#567)
  * Remove routes script from packaging (#566)
  * Update adapt script to run on startup/shutdown both (#561)
  * Update agent_uninstall.ps1 (#558)
  * Stop core plugin before removing agent package (#554)
  * Startup scripts should start after agent manager instead (#553)
  * Update presets and install dependencies on systemd units (#552)
  * Ensure agent service is disabled (#551)
  * Disable legacy agent to enable core plugin (#550)
  * Final fix for RHEL packaging for routes setup (#549)
  * Fix RHEL packaging for routes scripts (#548)
  * Packaging changes to include routes script installation (#542)
  * Update CLI name in packaging (#543)
  * systemd should manage only the main process (#544)
- from version 20251210.00
  * fix start mode for windows on stable release (#584)
  * Update agent_uninstall.ps1 (#558) (#580)
  * Update go version for stable branch to 1.25 (#571)
  * Add adapt script in stable branch as per #569 (#570)
  * Backport fix from #567 to stable branch (#568)
  * Revert compat behavior and call known binary directly (#560)
  * Revert compat behavior and call known binary directly (#559)
  * Build rollforward package to re-enable original agent and disable core plugin (#557)
- from version 20251209.00
  * Force remove core plugin configuration for windows (#587)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1768305600">- Update to version 20260108.00
  * Source the contents of /var/google-users.d config files. (#586)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1771502400">- Rename google-guest-agent package to google-guest-agent-fallback
  to provide a fallback package for the new package (jsc#PED-15389)</changelog>
</package>
<package pkgid="db26c9e9e3143fc3cacf41ce885c06138d12dd7064a9135feec8dd7a97bb0c80" name="google-guest-oslogin" arch="aarch64">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="256f8d13c3048797750d1b2ee28bde443b4670d0851e7e0fe6ec059843987466" name="google-guest-oslogin" arch="ppc64le">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="207a18db378bd10d737295ff2030a8a72a8ae90a41e4170d0b8ef9c184c1352b" name="google-guest-oslogin" arch="s390x">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="042eb49bd8f1e8e68ccde874e28f6930918895b3688fc93569fbed1985102f96" name="google-guest-oslogin" arch="src">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="15775db86a6637057c524a47a9be162019b979b7067e773b91bf3a4bbb97443f" name="google-guest-oslogin" arch="x86_64">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="fff469c0651a052715fcc0b4545cf67d6e175925d446bc24335c6f67e465d1e7" name="google-guest-oslogin-debuginfo" arch="aarch64">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="9db06fc9dcd258732ab5c3a3c4810b49656ef2e544b769c899e2695c5fe1107b" name="google-guest-oslogin-debuginfo" arch="ppc64le">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="b4ec236e2b9a5c50d198ce83aaf9b14647371f7491e0e94f29de6969ef4f21fb" name="google-guest-oslogin-debuginfo" arch="s390x">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="8a59500d3686f19f4e0a5f9b54b3f3d09cadce65f95609c95471c4a00b0ee5ac" name="google-guest-oslogin-debuginfo" arch="x86_64">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="69f25d1eaf2f53f275ae2222cd15f818b77cfb62325677733beaa3b14fa128e2" name="google-guest-oslogin-debugsource" arch="aarch64">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="63318858afdc5a372488c8888dd90738a1184ecfbaeb1b624dcf8c0f5fbaa162" name="google-guest-oslogin-debugsource" arch="ppc64le">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="bcb1952f1776e12221e37aa5a5a997de972a27c31911eea3898fe0aa2e381b41" name="google-guest-oslogin-debugsource" arch="s390x">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="eff459cdfaf2e1ed16ea2dd776805cf2c862f86dff02a2d4d243bf092eaaad27" name="google-guest-oslogin-debugsource" arch="x86_64">
  <version epoch="0" ver="20260227.00" rel="150400.84.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1693483200">- Update to version 20230823.00
  * selinux: Add sshd_key_t type enforcement to trusted user ca (#113)
- from version 20230822.00
  * sshca: Add tests with fingerprint and multiple extensions (#111)
- from version 20230821.01
  * sshca: Support method token and handle multi line (#109)
- from version 20230821.00
  * Update owners (#110)</changelog>
  <changelog author="dmueller@suse.com" date="1696161600">- update to 20230926.00:
  * fix suse build
  * selinux: fix selinux build (#114)
  * test: align CXX Flags
  * sshca: Make the implementation more C++ like
  * sshca: Add a SysLog wrapper
  * oslogin_utils: introduce AuthorizeUser() API
  * sshca: move it out of pam dir
  * pam: start disabling the use of oslogin_sshca
  * sshca: consider sshca API to assume a cert only
  * authorized principals: introduce the new command
  * authorize keys: update to use new APIs
  * pam modules: remove pam_*_admin and update pam_*_login
  * cache_refresh: should be catching by reference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1697716800">- Update to version 20231004
  * packaging: Make the dependency explicit (#120)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1698926400">- Update to version 20231101.00 (bsc#1216548, bsc#1216750)
  * Fix HTTP calls retry logic (#117)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1704369600">- Update to version 20231116.00
  * build: Fix DESTDIR concatenation (#124)
- from version 20231113.00
  * build: Fix clang build (#122)
- from version 20231103.00
  * Update owners (#121)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1708948800">- Add explicit versioned dependency on google-guest-agent (bsc#1219642)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1711108800">- Update to version 20240311.00 (bsc#1218548, bsc#1221900, bsc#1221901)
  * pam: Bring back pam's account management implementation (#133)
  * Change error messages when checking login policy (#129)
  * Remove quintonamore from OWNERS (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1712145600">- Fix file permissions for google_authorized_principals binary (bsc#1222171)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1715860800">- Update to version 20240415.00
  * Log clearly when the initial parsing of a JSON object fails (#132)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1719921600">- Update to version 20240701.00
  * Don't retry bad request responses (#137)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1727784000">- Update to version 20240925.00
  * Inherit environment build flags (#141)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1729598400">- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
  * Update OWNERS (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739361600">- Build and install SELinux module (bsc#1232553)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1740657600">- Rework SELinux support (bsc#1232553)
  * Add pkgconfig(systemd) to BuildRequires for SELinux builds
  * Add policycoreutils to BuildRequires
  * Build and install SELinux module on older distributions as well
    to allow users to use the module with their own SELinux policies
  * Make checkpolicy build dependency unconditional
  * Move oslogin.pp SELinux module into %{selinuxtype} subdirectory
  * Own %{_datadir}/selinux{,/packages} on older distributions
  * Split SELinux support into separate -selinux package
  * Use SELinux RPM macros to install and uninstall SELinux module
  * Use RPM conditional builds to enable SELinux on newer distributions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750852800">- Update to version 20250624.00
  * Pass c-strings to logging functions (#140)
- from version 20241216.00
  * Send the correct type to SysLogErr; the clang sanitizer
    dislikes the type mismatch. (#158)
  * Add Eric to the owners file. (#157)
  * Revert "new client component and tests" (#155)
- from version 20241214.00
  * Remove pat from owners (#156)
- from version 20241206.00
  * Fix json include (#154)
  * build: remove oslogin_sshca from binaries list (#153)
  * Fix bad struct initialization pattern `= { 0 }` (#150)
  * Apply "include what you use," fixing missing include
    statements broadly. (#152)
  * Fix base64.h's missing includes and BSD types (#151)
  * Fix a bug where very large GIDs would cause integer
    overflow errors (#149)
- from version 20241127.00
  * Rename openbsd.h to base64.h and move it into the src/ folder (#148)
- from version 20241126.01
  * Follow the Google style guide by using the "local include style"
    to include files from this project. (#147)
- from version 20241126.00
  * Delete oslogin_sshca binary, add it to the ignore list (#146)
- from version 20241120.00
  * OS Login agent searches for full fingerprint extension instead
    of equals (#144)
- from version 20241116.00
  * Log an error when user has no challenges configured (#135)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250710.00
  * Add the cloudrun support (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1756814400">- Update to version 20250821.00
  * Check policy uses adminLogin for cloud run (#165)
- from version 20250807.00
  * Extract the principal from certs when cloud_run enabled (#164)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251022.00
  * Log the response body when an auth failure occurs;
    it usually has helpful info in it. (#167)</changelog>
  <changelog author="zkubala@suse.com" date="1763553600">- Update SELinux module dir as macro to allow root path move from
  /var/lib/selinux to /etc/selinux (bsc#1221342)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260227.00
  * Fix broken cache_refresh behavior when groups are disabled. (#181)
  * Implement a binary cache for OS Login passwd entries. (#180)
- from version 20260217.00
  * Fix SELinux policy to allow reading of directories, too. (#179)
- from version 20260214.00
  * Max openssh version available on 8_6 is 8.0p1-15 (#178)
  * Write a /var/google-users.d/README file to mask a bug in RHEL8.6's sshd. (#177)
  * Require a version of openssh-server compatible with the Include directive. (#176)
- from version 20260129.00
  * Fix a nil pointer dereference caused by a temporary
    string being immediately deallocated. (#174)
  * Fix SELinux problem with /var/google-users.d/ files. (#173)
  * Set the keyfile of OS Login users to /dev/null (#171)
  * Cleanup OWNERS and add Hank, Tyler, Saswat (#166)
  * Add network dependency to service (#169)
- Use systemd-tmpfiles to install google-users.d directory</changelog>
</package>
<package pkgid="d20131bda37cd2729b898dcc9ad9faf7d0097ef69fb345f4d4ed8d25c4a85614" name="google-osconfig-agent" arch="aarch64">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="f762c9cab09951351ecdec8488d44f6e15e5d7f99f668eb0b6290bbdf01f2939" name="google-osconfig-agent" arch="ppc64le">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="ddef8c73c6a11a4d1c9f46962b7cc6e5d06c9371015b68e60b31dc7fb67503bd" name="google-osconfig-agent" arch="s390x">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="f59bef34d4eaccdef00ba464fed5efcbd36dd1be27e41e689204a033e9c8ebf3" name="google-osconfig-agent" arch="src">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="79ea194889deeeef6a3cfe4cef4e933ad957ae9c9d39e7a7b533da9b65221f6e" name="google-osconfig-agent" arch="x86_64">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="80096cf9d6bc4e23039f38bea239a47a3ff63150cbf262e5d5b9a66c46697b93" name="google-osconfig-agent-debuginfo" arch="aarch64">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="1aaf412d1a601ebac69827c98ff4761f4720782c30622f05f104512b9978d400" name="google-osconfig-agent-debuginfo" arch="ppc64le">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="f759d480a53e260a4c3d278cedf83cb8060197e6bfa87b941bf6b219d1065772" name="google-osconfig-agent-debuginfo" arch="s390x">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="82a2f3be4adb774d4675b1ae6427e479865912c8f1929d0da6fc8d3d9add04ca" name="google-osconfig-agent-debuginfo" arch="x86_64">
  <version epoch="0" ver="20260625.00" rel="150400.3.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1752235200">- Update to version 20250703.00
  * Fix sles images (#844)
- from version 20250702.00
  * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
  * Bump the go_modules group across 1 directory with 2 updates (#840)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1754913600">- Update to version 20250806.00
  * Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
  * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
  * Update utils.go (#854)
  * Upgrade golang.org/x/oauth2 package to the latest. (#853)
  * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
  * Bump golang.org/x/oauth2 (#848)
  * Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
  * Update Golang version in common.sh and skip backports
    repo for debian 11 (#850)
- from version 20250723.01
  * Add workflows to build package for el10 (#849)
- from version 20250721.00
  * Make OS Config agent TPC aware (#846)
- from version 20250718.00
  * Create workflows for new Debian 13. (#847)
- Drop CVE-2025-22868.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1758024000">- Update to version 20250902.01
  * Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
  * update github.com/go-jose/go-jose/v4 (#869)
  * Upgrade scalibr and other deps (#866)
- from version 20250901.00
  * Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
  * set CODEOWNERS file as required by org (#863)
- from version 20250819.00
  * Fix/rhel10 build centos image (#860)
- from version 20250814.00
  * Fix/rhel10 build image (#859)
- from version 20250813.00
  * Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
  * Remove old/sles-15-sp4-sap as image is deprecated (#857)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1759924800">- Add CVE-2025-47911.patch to fix an issue in the HTML parser where a large
  number of open elements can cause the parser to become extremely slow by
  limiting the stack size of open elements (bsc#1251453, CVE-2025-47911)
- Add CVE-2025-58190.patch to fix an issue in the HTML parser where a specific
  HTML document can cause the parser to enter an infinite loop when trying
  to parse a &lt;/tbody&gt; and implied &lt;/tr&gt; next to each other.
  (bsc#1251704, CVE-2025-58190)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1760443200">- Update to version 20250925.00
  * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
  * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
  * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
  * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1762516800">- Update to version 20251028.00
  * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
  * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
  * Create multiple_os.yaml (#883)
- from version 20251023.00
  * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
  * Add test runner for e2e tests (#876)
- Reword previous changelog entry so that the added patches are accepted</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764244800">- Update to version 20251126.00
  * Bump github.com/containerd/containerd (#890)
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1764676800">- Update to version 20251201.00
  * Revert "Bump github.com/containerd/containerd (#890)" (#892)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1765281600">- Update to version 20251202.00
  * Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1767787200">- Update to version 20251230.00
  * chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
  * fix e2e tests for report inventory (#903)
- from version 20251222.01
  * Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
  * Bump golang to the new version (#900)
- from version 20251218.00
  * add new CODEOWNERS (#901)
- from version 20251217.00
  * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769169600">- Update to version 20260119.00
  * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Add missing Bugzilla and CVE references for CVE-2023-45288
- Drop CVE-2025-47911.patch, fixed upstream
- Drop CVE-2025-58190.patch, fixed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1775044800">- Update to version 20260330.00
  * bump timeouts for all workflows (#940)
- from version 20260326.00
  * Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
  * Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
  * remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
  * conditions python version override (#927)
- from version 20260313.00
  * Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
  * Bump osconfig version (#922)
- from version 20260309.02
  * Extend OSV scalibr extractor (#921)
- from version 20260309.01
  * upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
  * Add purl to pkg info (#920)
- from version 20260306.00
  * Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
  * Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
  * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
  * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
  * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
  * Bump github.com/sirupsen/logrus (#894)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777291200">- Add CVE-2026-34986.patch to fix crafted JWE input with a missing encrypted
  key can lead to a denial of service (bsc#1262926, CVE-2026-34986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1777896000">- Update to version 20260428.00
  * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
  * Cover config/file.go by unit tests (#935)
- from version 20260422.01
  * Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
  * upgrade grpc package in main package and e2e tests (#959)
    (bsc#1260264, CVE-2026-33186)
- from version 20260417.04
  * Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
  * Add unit tests for updates_linux.go (#937)
- from version 20260417.02
  * Add zone to CreateDisk step (#955)
- from version 20260417.01
  * Change disk type for deb11 (#954)
- from version 20260417.00
  * Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
  * Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
  * fix disk type for arm workflows (#948)
- from version 20260410.00
  * Change machine type for arm based workflows (#946)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1778673600">- Update to version 20260511.00
  * switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
  * Cover zypper_patch by unit tests (#958)
- from version 20260505.02
  * Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
  * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
  * Upgrade a few dependencies across the repo (#968)
    + github.com/go-git/go-git/v5 5.16.2-&gt;5.18.0 (bsc#1264923, CVE-2026-41506)
    + github.com/go-jose/go-jose/v4 4.1.3-&gt;4.1.4 (bsc#1262926, CVE-2026-34986)
    + github.com/go-viper/mapstructure/v2 2.3.0-&gt;2.4.0
    + go.opentelemetry.io/otel 1.40.0-&gt;1.41.0
    + go.opentelemetry.io/otel/sdk 1.39.0-&gt;1.43.0
- from version 20260504.01
  * bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
  * Bump github.com/opencontainers/selinux (#960)
- Add missing CVE reference to previous changelog entry
- Drop CVE-2026-34986.patch, merged upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781265600">- Update to version 20260611.00
  * Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
  * Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
  * squash commits (#936)
- from version 20260609.01
  * Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
  * Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
  * Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
  * Add unit tests for config/config,go (#979)
- from version 20260528.00
  * Bump github.com/containerd/containerd (#990)
- from version 20260521.00
  * Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
  * Add unit tests for policies/googet.go (#961)
  * Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
  * Add unit tests for policies/yum.go (#952)
  * Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
  * Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
  * Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
  * Bump github.com/go-git/go-git/v5 (#981), this also updates
    golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
  * upgrade a few packages (#980)
- from version 20260512.02
  * Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
  * Cover google_update.go by unit tests (#941)
- from version 20260512.00
  * Change zone for arm64 builds because of stockout (#978)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781611200">- Update to version 20260615.01
  * Upgrade golang.org/x/crypto &amp; golang.org/x/net (#1006)
    (bsc#1266171, CVE-2026-39827, CVE-2026-39834, CVE-2026-39828,
    CVE-2026-39829, CVE-2026-39831, CVE-2026-42508, CVE-2026-39833,
    CVE-2026-39830, CVE-2026-39832, CVE-2026-46597, CVE-2026-46598,
    CVE-2026-46595, CVE-2026-39835) (bsc#1266603, CVE-2026-39821)
- from version 20260615.00
  * Add unit tests for ospatch_apt_upgrade.go (#938)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1781697600">- Packaging improvements:
  * Remove define github project name components no longer needed
  * Define shortname corresponding to binary name when different
    from package name. Use shortname where applicable to normalize
    common lines across Go app packages, similar to name macro.
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Remove go_nostrip macro which is no longer recommended
  * Re-enable binary stripping and debuginfo boo#1210938
  * Remove goprep macro which is no longer recommended
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * For this package, we were seeing the expected error
    "-buildmode=pie requires external (cgo) linking, but cgo is not
    enabled" when using buildmode=pie and CGO_ENABLED=0. The error
    manifested only on s390x and i586 architectures, which was not
    expected. Resolve by using default CGO_ENABLED.
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Remove ldflags -X entry for embedding build version metadata.
    This information is embedded in binaries with go1.18+ and
    available via go version -m or runtime/debug.ReadBuildInfo().
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Raise minimum golang API version to 1.25.5 to match go.mod file
  * Use explicit upstream GitHub homepage in URL field
  * Use single invocation of %setup with -a1 to unpack both tarballs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782388800">- Update to version 20260624.01
  * Add unit tests for agentendpoint/agentendpoint_beta.go (#983)
- from version 20260624.00
  * Replace yum install with yum update (#1009)
- from version 20260623.02
  * Bump github.com/containerd/containerd (#1013)
- from version 20260623.01
  * Add unit tests for policies/apt.go PART 2 (#957)
- from version 20260623.00
  * Add test cases for agentendpoint/task_state.go (#984)
- from version 20260618.00
  * Remove deprecated rhel-sap images and add new ones (#1007)
- from version 20260616.00
  * Add test cases for clog/clog.go (#986)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1782734400">- Update to version 20260625.00
  * Add tests &amp; bugfix for packages/trace.go (#939)</changelog>
</package>
<package pkgid="dedef77d6ffd686c22ccda797aa75b536accbf5962cf0023e3c5343c88b74b0d" name="protoc-gen-go-grpc" arch="aarch64">
  <version epoch="0" ver="1.6.0" rel="150400.5.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1768996800">- Initial import of protoc-gen-go-grpc 1.6.0</changelog>
</package>
<package pkgid="7e71a968506c9551590ae706983fd1000ac7c313eadc490b80b1e611825dd045" name="protoc-gen-go-grpc" arch="ppc64le">
  <version epoch="0" ver="1.6.0" rel="150400.5.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1768996800">- Initial import of protoc-gen-go-grpc 1.6.0</changelog>
</package>
<package pkgid="e203f40fc6e1eef6eba2f272fdfaa0609fa8c367614fec86df0480243db6d84a" name="protoc-gen-go-grpc" arch="src">
  <version epoch="0" ver="1.6.0" rel="150400.5.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1768996800">- Initial import of protoc-gen-go-grpc 1.6.0</changelog>
</package>
<package pkgid="b6f6c3b1ce77c74cd4c87bcd8c6e98ba38cd851ee288d5cc40a8af6efaadba06" name="protoc-gen-go-grpc" arch="x86_64">
  <version epoch="0" ver="1.6.0" rel="150400.5.4"/>
  <changelog author="adrian.glaubitz@suse.com" date="1768996800">- Initial import of protoc-gen-go-grpc 1.6.0</changelog>
</package>
<package pkgid="1bcb627107499faa8700fd96dd2bf875e5698859ba51194523d7eb05409686e1" name="python-httpsig_cffi" arch="src">
  <version epoch="0" ver="15.0.0" rel="150400.7.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1555502400">- Initial build
  + Version 15.0.0</changelog>
  <changelog author="tchvatal@suse.com" date="1556107200">- Add requests to requires as it is used in the package as direct
  import</changelog>
  <changelog author="pgajdos@suse.com" date="1622462400">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="mmachova@suse.com" date="1657540800">- Fix build with new-cryptography.patch</changelog>
  <changelog author="mmachova@suse.com" date="1748433600">- Convert to pip-based build</changelog>
</package>
<package pkgid="798919eda6695549418f7270af6f4f9d42eef47d6cda82f406756a771ff66384" name="python3-httpsig_cffi" arch="noarch">
  <version epoch="0" ver="15.0.0" rel="150400.7.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1555502400">- Initial build
  + Version 15.0.0</changelog>
  <changelog author="tchvatal@suse.com" date="1556107200">- Add requests to requires as it is used in the package as direct
  import</changelog>
  <changelog author="pgajdos@suse.com" date="1622462400">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="mmachova@suse.com" date="1657540800">- Fix build with new-cryptography.patch</changelog>
  <changelog author="mmachova@suse.com" date="1748433600">- Convert to pip-based build</changelog>
</package>
</otherdata>