# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220930-2
changelog:
  - Update to the 20230131 drop.
  - Updated CPUs:
      GN-A1 00a00f10: 2022-09-01, rev 0a001075 -> 2023-01-17, rev 0a001078
      GN-B1 00a00f11: 2022-08-30, rev 0a0011a8 -> 2023-01-14, rev 0a0011ce
      GN-B2 00a00f12: 2022-08-30, rev 0a00122e -> 2023-01-17, rev 0a001231


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20241121-1.1
changelog:
  - Packaging fix.
  - Remove overridden amd_fam17h and amd_fam19h files introduced in 20240503-1.1 build
    as we now get these directly from the "source" tarball.


author: Gael Duperrey <gduperrey@vates.fr> - 20250626-1.1
changelog:
  - Update to 20250626-1 as redistributed by XenServer
  - Updated CPUs:
      GN-B1 00a00f11: 2024-02-23, rev 0a0011d5 -> 2024-09-06, rev 0a0011d7
      GN-B2 00a00f12: 2024-02-26, rev 0a001238 -> 2024-09-06, rev 0a00123b
     CGL-B2 00a00f82: 2024-02-29, rev 0a00820c -> 2024-09-13, rev 0a00820d
      RS-B1 00a10f11: 2024-02-23, rev 0a101148 -> 2024-09-06, rev 0a10114c
      RS-B2 00a10f12: 2024-02-26, rev 0a101248 -> 2024-09-06, rev 0a10124c
     STP-B1 00a10f81: 2024-02-27, rev 0a108108 -> 2024-09-11, rev 0a108109
     VMR-B0 00a20f10: 2024-08-27, rev 0a20102d -> 2024-09-13, rev 0a20102e
     VMR-B2 00a20f12: 2024-02-29, rev 0a201210 -> 2024-09-13, rev 0a201211
     RMB-B1 00a40f41: 2024-02-29, rev 0a404107 -> 2024-09-13, rev 0a404108
     CZN-A0 00a50f00: 2024-02-29, rev 0a500011 -> 2024-09-13, rev 0a500012
     RPL-B2 00a60f12: 2024-02-27, rev 0a601209 -> 2024-09-11, rev 0a60120a
     PHX-A1 00a70f41: 2024-02-28, rev 0a704107 -> 2024-09-11, rev 0a704108
    HPT1-A2 00a70f52: 2024-02-28, rev 0a705206 -> 2024-09-11, rev 0a705208
    PHX2-A0 00a70f80: 2024-02-28, rev 0a708007 -> 2024-09-11, rev 0a708008
    HPT2-A0 00a70fc0: 2024-02-28, rev 0a70c005 -> 2024-09-11, rev 0a70c008
    RSDN-A2 00aa0f02: 2024-02-28, rev 0aa00215 -> 2024-09-06, rev 0aa00216


author: Thierry Escande <thierry.escande@vates.tech> - 20251203-1.1
changelog:
  - Update to the 2025-12-03 drop as redistributed by XenServer
    New CPUs:
       BRH-C1 00b00f21: 2025-10-17, rev 0b002161
       SHP-C1 00b00f81: 2025-10-20, rev 0b008121
      BRHD-B0 00b10f10: 2025-10-17, rev 0b101058
       STX-B0 00b20f40: 2025-10-19, rev 0b204037
       GNR-B0 00b40f40: 2025-10-20, rev 0b404035
       GNR-B1 00b40f41: 2025-10-20, rev 0b404108
       KRK-A0 00b60f00: 2025-10-19, rev 0b600037
      KRK2-A0 00b60f80: 2025-10-19, rev 0b608038
      STXH-A0 00b70f00: 2025-10-19, rev 0b700037
    Secondary blobs on existing CPUs:
        GN-B1 00a00f11: 2025-04-18, rev 0a0011de
        GN-B2 00a00f12: 2025-03-27, rev 0a001247
        RS-B1 00a10f11: 2025-06-09, rev 0a101158
        RS-B2 00a10f12: 2025-06-12, rev 0a101253
      RSDN-A2 00aa0f02: 2025-06-12, rev 0aa0021c


author: Andrew Lindh <andrew@netplex.net> - 2.5.5-1
changelog:
  - Release test version of driver 2.5.5
  - Thanks to github s-master for starting the XCP driver setup


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Matt Domsch <mdomsch@fedoraproject.org> - 0.3.4-1
changelog:
  - drop unnecessary explicit version requirement on udev
  - bugfix: start indices at 1 not 0, to match Dell and HP server port designations
  - bugfix: don't assign names to unknown devices
  - bugfix: don't assign duplicate names


author: Matt Domsch <Matt_Domsch@dell.com> - 0.3.5-1
changelog:
  - install dump_pirq into /usr/sbin
  - fix udev rule, skip running if NAME is already set
  - move udev rule to /lib/udev/rules.d by default


author: Matt Domsch <Matt_Domsch@dell.com> - 0.3.7-1
changelog:
  - drop dump_pirq, suggest use biosdecode instead
  - don't use '#' in names, use 'p' instead, by popular demand
  - properly look for SMBIOS, then $PIR, then recurse
  - Add kernel command line parameter "biosdevname={0|1}" to turn off/on biosdevname
  - Fix segfault when BIOS advertises zero sized PIRQ Routing Table
  - Add 'bonding' and 'openvswitch' to the virtual devices list
  - fail PIRQ lookups if device domain is not 0
  - Don't suggest names if running in a virtual machine (Xen, KVM,
    VMware tested, but should work on others)
  - Typo fixes


author: Andrew Cooper <Andrew.Cooper3@citrix.com> - 0.3.7-1@XS_RELEASE@
changelog:
  - Apply XenServer specific patches
  - Remove udev rules
  - Prevent bailing in a virtualized environment


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.5-1.1
changelog:
  - Update to 3.54.5-1
  - *** Upstream changelog ***
  - * Tue Aug 01 2023 Mark Syms <mark.syms@citrix.com> - 3.54.5-1
  - - Report control timeouts correctly
  - * Wed Jun 21 2023 Mark Syms <mark.syms@citrix.com> - 3.54.4-1
  - - Remove unused and broken libvhdio
  - - CA-377624: Guard against NULL tiocb in lio event handler
  - * Wed Apr 12 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-2
  - - Rebuild
  - * Wed Mar 29 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-1
  - - Rebuild
  - * Mon Feb 27 2023 Mark Syms <mark.syms@citrix.com> - 3.54.2-1
  - - Rebuild
  - * Fri Feb 17 2023 Mark Syms <mark.syms@citrix.com> - 3.54.1-1
  - - Rebuild
  - * Thu Feb 16 2023 Mark Syms <mark.syms@citrix.com> - 3.54.0-1
  - - Release 3.54.0
  - - Update compiler set
  - - Various NBD server improvements


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-2.1
changelog:
  - Update to 3.54.6-2
  - *** Upstream changelog ***
  - * Thu Sep 28 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-2
  - - CP-40871: Enable rate limit control on unpause
  - * Thu Sep 07 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-1
  - - CP-40871: return the number of sectors coalesced from vhd-util
  - - CP-45025: Avoid retries except in a few specific cases
  - - CA-382087: Only write the bitmap if the contents have changed


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-3.1
changelog:
  - Sync with 3.54.6-3
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Mark Syms <mark.syms@citrix.com> - 3.54.6-3
  - - Rebuild against libxenstore.so.4


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.9-1.1
changelog:
  - Sync with 3.54.9-1
  - *** Upstream changelog ***
  - * Thu Apr 25 2024 Mark Syms <mark.syms@citrix.com> - 3.54.9-1
  - - Address various memory management issues
  - * Wed Mar 27 2024 Mark Syms <mark.syms@citrix.com> - 3.54.8-1
  - - CP-48048: Blktap fix code coverage (XS8 only)
  - - tap-ctl: Improve list output filtering
  - - CP-46763: When VBD queue is not ready call the driver completion
  - - CP-46778: always issue request via issue_requests
  - - CP-46771: separate queue checks for completed and new requests.
  - - CP-46764: mask ring event handlers before quiescing the queue
  - - CP-46764: When the VBD is quiesced skip checking for requests to submit
  - - Fix setting of CFLAGS for mockatests
  - - Do not free iconv cd if allocation fails
  - - Fix the order of linker options in CBT
  - - Fixup various bits of incorrect automake usage
  - - CA-384162: Send completions for all partial responses
  - - CA-390490: allocate vhd request before locking bat
  - - CP-48057: Add unit tests for drivers/scheduler.c


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.4-1.1
changelog:
  - Sync with 3.55.4-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Mark Syms <mark.syms@cloud.com> - 3.55.4-1
    - CA-392151 lcache.c uses wrong buffer size definition
    - CA-403297: when storing read-through do not mirror
    * Mon Nov 18 2024 Mark Syms <mark.syms@cloud.com> - 3.55.3-1
    - CP-52620: enable local caching after opening all other images
    * Tue Nov 05 2024 Tim Smith <tim.smith@cloud.com> - 3.55.2-1
    - CA-387575 Remove static libraries and libtool archives from devel package
    - Correct name of exposed NBD server
    - CA-401174 Filedescriptor leak in NBD option negotiation
    * Mon Sep 16 2024 Tim Smith <tim.smith@cloud.com> - 3.55.1-1
    - Redo the revert of an incorrect NBD FD leak fix
    * Fri Sep 13 2024 Tim Smith <tim.smith@cloud.com> - 3.55.0-1
    - CP-46765 - Fix asan issues in unit tests
    - CA-396659: rationalise bitops and fix overflow issues
    - CA-396659: delete legacy debt utility vhd-update
    - Handle scheduler uuid overflow explictly
    - CP-50952 Autodetect NBD server protocol version on client connect
    - Fix use of incorrect label in error case
    - CA-397082 Properly fix FD leak in NBD server
    - CP-50955 Add a new-style NBD server for each VDI
    * Tue Aug 06 2024 Mark Syms <mark.syms@cloud.com> - 3.54.10-1
    - CA-391882: fix nbd connection fd leak bug
    - Remove some unnecessary build dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.5-2.1
changelog:
  - Sync with 3.55.5-2
  - Drop patch "Add an option to never resolve parent path when vhd-util query is
  called" already included in upstream v3.55.5
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-2
    - CA-404370: enable NBD client only after completing handshake
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-1
    - Add an option to never resolve parent path when vhd-util query is called


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.55.5-2.3
changelog:
  - Fix a bad integer conversion that interrupts valid coalesce calls on large VDIs
  - Add 0002-CP-308382-fix-sign-conversion-in-coalesce.patch
  - Add 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-6.1
changelog:
  - Sync with 3.55.5-6
  - Revert openssl 3 dependency from XS specfile (no change compared to previous XCP-ng release)
  - Drop patch 0002-CP-308382-fix-sign-conversion-in-coalesce.patch, upstream now
  - Drop patch 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch, upstream now
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-6
    - Fix coalesced size conversion in vhd-util-coalesce (CP-308382)
    * Mon Jun 23 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-5
    - Backport fix for CA-408175
    - CP-308382: fix sign conversion in coalesce
    * Mon Apr 07 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-4
    - CP-54256: log when reporting EOPNOTSUPP
    * Fri Feb 21 2025 Deli Zhang <deli.zhang@cloud.com> - 3.55.5-3
    - CP-50273: Move CCM dependency to OpenSSL 3


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-9.1
changelog:
  - Sync with 3.55.5-9
  - Drop patch 0002-Prevent-segfault-of-vhd-util-scan-on-VHD-with-corrup.patch, upstream now
  - *** Upstream changelog ***
    * Thu Apr 09 2026 Mark Syms <mark.syms@citrix.com> - 3.55.5-9
    - Remove old, obsolete, udev rule override.
    * Wed Jan 28 2026 Mark Syms <mark.syms@citrix.com> - 3.55.5-8
    - Prevent segfault of vhd-util scan on VHD with corrupt footer
    * Thu Aug 28 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-7
    - CA-416464: return BLKIF_RSP_EOPNOTSUPP for EOPNOTSUPP


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.0.0-2
changelog:
  - Update for XCP-ng 8.0.0
  - Clean spec file: remove Group and BuildRoot definitions
  - Remove 'dist' macro since it's built before xcp-ng-release


author: Yann Dirson <yann.dirson@vates.fr> - 8.3.0-2.73c8834
changelog:
  - Switch to python3
  - COMPANY_NAME update to "Vates, XenServer and others"
  - COPYRIGHT_YEARS up to 2023


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.2-5
changelog:
  - Override module directory for depmod to make sure our alternative driver takes precedence
  - Simplify module path (simply /lib/modules/{version}/override/)


author: Thierry Escande <thierry.escande@vates.tech> - 1.10.3_232.0.155.5-1
changelog:
  - Update to version 1.10.3_232.0.155.5
  - Add patch to fix GSO type for HW GRO packets on 5750X chips


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Philippe Coval <philippe.coval@vates.tech> - 3.6.1-4.1
changelog:
  - Rebuild with openssl-3
  - Reapply changes from 3.3.3-1.1 on upstream base 3.6.1-4
    * Thu Aug 28 2025 Yann Dirson <yann.dirson@vates.tech> - 3.3.3-1.1
    - Refresh ldconfig cache on installation/removal
    * Thu Apr 30 2020 Ondrej Dubaj <odubaj@redhat.com> - 3.3.3-1
    - Rebase to version 3.3.3


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Yann Dirson <yann.dirson@vates.tech> - 7.1-2.1
changelog:
  - Build for XCP-ng 8.3
  - Removed "Recommends: cifs-utils-info" as not supported by el7 rpm
  - Changed BuildRequires to pull python36-docutils
  - Add build fix for older toolchain: 0001-Fix-build-with-pre-c99-compilers.patch


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.3.1
changelog:
  - Don't build vfs_glusterfs and thus don't buildrequire glusterfs
  - Remove the useless build dependency to epel-release
  - Add gcc to the BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.4.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Yann Dirson <yann.dirson@vates.tech> - 4.10.16-25.1
changelog:
  - Revert XS changes to prepare for merging new upstream, keeping changelog
    and kerberos config changes
  - By Lucas Ravagnier <lucas.ravagnier@vates.tech>:
    - Import samba-4.10.16-25.el7_9
    - Use a bcond to enable XCP-ng packaging tweaks while preserving upstream spec content.
    - *** Upstream changelog ***
      * Tue Jul 25 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-25
      - resolves: #2222250 - Fix netlogon capabilities level 2

      * Fri Jan 20 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-24
      - related: #2154364 - Add additional patches for CVE-2022-38023

      * Wed Dec 21 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-23
      - resolves: #2154364 - Fix CVE-2022-38023

      * Tue Aug 30 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-20
      - resolves: #2119058 - Fix possible segfault in winbind

      * Tue May 10 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-19
      - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                 mapping for uid/gid conflict

      * Tue Jan 25 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-18
      - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
      - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
      - resolves: #2046148 - Fix CVE-2021-44142


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 4.10.16-25.2
changelog:
  - Apply packaging changes from XenServer's samba-4.10.16-17.0.{4-8}
  - *** Upstream changelog ***
  - * Tue Apr 01 2025 Lin Liu <Lin.Liu01@cloud.com> - 4.10.16-17.0.8
  - - CA-408843: enctypes support machine account
  -
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 4.10.16-17.0.7
  - - CP-50277: Remove unused cups package
  -
  - * Mon Sep 9 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.6
  - - CP-50735: Remove avahi support
  -
  - * Wed Aug 7 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.5
  - - CP-50670: Remove python and json support
  -
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Thierry Escande <thierry.escande@vates.tech> - 8.9.1-5.1
changelog:
  - Restore changes from original fc40 specfile
  - Add %bcond xcpng for specific XCP-ng build directives
  - Add %bcond build_minimal to disable libcurl-minimal package build
  - Update to curl v8.9.1 from el10 srpm
  - Port NSS cipher compat list patch and tests from XS8
  - Backport patch for CVE 2024-8096
  - *** Upstream changelog ***
    * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 8.9.1-5
    - Bump release for October 2024 mass rebuild:
      Resolves: RHEL-64018
    * Mon Aug 19 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-4
    - correct indentation in test plan
    * Fri Aug 02 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-3
    - fix libcurl and libcurl-minimal conflict in test plan (RHEL-52103)
    * Fri Aug 02 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-2
    - add gating configuration (RHEL-52103)
    - sigpipe: init the struct so that first apply ignores (RHEL-53327)
    * Wed Jul 31 2024 Jacek Migacz <jmigacz@redhat.com> - 8.9.1-1
    - new upstream release (RHEL-50806)
    * Tue Jul 9 2024 Jacek Migacz <jmigacz@redhat.com> - 8.6.0-8
    - disable OpenSSL Engine API support (RHEL-30436)
    - setopt: Fix disabling all protocols (CVE-2024-2004)
    - http2: push headers better cleanup (CVE-2024-2398)
    * Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 8.6.0-7
    - Bump release for June 2024 mass rebuild
    * Mon Feb 12 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-6
    - revert "receive max buffer" + add test case
    - temporarily disable test 0313
    - remove suggests of libcurl-minimal in curl-full
    * Mon Feb 12 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-5
    - add Provides to curl-minimal
    * Wed Feb 07 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-4
    - drop curl-minimal subpackage in favor of curl-full (#2262096)
    * Mon Feb 05 2024 Jan Macku <jamacku@redhat.com> - 8.6.0-3
    - ignore response body to HEAD requests


author: Jakub Jelen <jjelen@redhat.com> 2.1.26-18
changelog:
  - Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
  - Add and document ability to run saslauth as non-root user (#1188065)
  - Support AIX SASL GSSAPI (#1174322)
  - Update client library to be thread safe (#1147659)
  - Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
  - Don't use unnecessary quotes around user description (#1082564)
  - Fix confusing message when config file has typo (#1022479)


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.1
changelog:
  - Cut the corosynclib-devel build dependency by disabling the cluster subpackage
  - Cut the dlm-devel build dependency by disabling the lockd subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.2
changelog:
  - Drop the obsolete lvm2-sm-config subpackage
  - It was unused, and it didn't require the right Release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-16.1
changelog:
  - Rebase on 7:2.02.180-16
  - *** Ustream changelog ***
  - * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
  - - CA-368585 Drop sm-config sub-package
  - - CA-380627 Suppress errors when attempting to start services
  - - CA-384527 add lvm filter to skip nbd device scan


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-18.1
changelog:
  - Rebase on 7:2.02.180-18
  - *** Upstream changelog ***
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-18
    - CP-46075: Disable cluster and cmirror as not used and introduce extra deps
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-17
    - CP-46075: Compatible with XS9
    * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
    - CA-368585 Drop sm-config sub-package
    - CA-380627 Suppress errors when attempting to start services
    - CA-384527 add lvm filter to skip nbd device scan


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-16.1
changelog:
  - Rebase on 7:2.02.180-16
  - *** Upstream changelog ***
    * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
    - CA-368585 Drop sm-config sub-package
    - CA-380627 Suppress errors when attempting to start services
    - CA-384527 add lvm filter to skip nbd device scan


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-18.1
changelog:
  - Rebase on 7:2.02.180-18
  - *** Upstream changelog ***
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-18
    - CP-46075: Disable cluster and cmirror as not used and introduce extra deps
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-17
    - CP-46075: Compatible with XS9


author: Mathieu Labourier <mathieu.labourier@vates.tech> - 7:2.02.180-18.2.1
changelog:
  - Rebase on 7:2.02.180-18.2
  - *** Upstream changelog ***
    * Thu May  1 2025 Mark Syms <mark.syms@cloud.com> - 7:2.02.180-18.2
    - Rebuild
    * Wed Apr 30 2025 Mark Syms <mark.syms@cloud.com> - 7:2.02.180-18.1
    - Update scan search root and add device filters


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 7:2.02.180-18.3.1
changelog:
  - Rebase on 7:2.02.180-18.3
  - *** Upstream changelog ***
    * Wed Dec 03 2025 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-18.3
    - CP-31079: update default configuration


author: Lukas Nykryn <lnykryn@redhat.com> - 033-534
changelog:
  - base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
  - base/dracut-lib.sh: remove bashism
  - Align dev_unit_name() with systemd's function.
  - dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
  Resolves: #1306640
  - 90dmsquash-live-ntfs: fix depends()
  - 90dmsquash-live: we don't have find_binary inside initramdisk
  - dracut: Ajusting variables name for --include
  Resolves: #1489882


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.2
changelog:
  - CA-383046: Use the emulated RTC to implement time services
  - CA-383095: Add a patch to fix an unusual Windows PXE boot hang
  - CP-45175: Add debug messages to XenVariable
  - CP-45175: Disable the BGRT
  - CP-45175: Add extra debug statements
  - CP-45175: Tweak debug levels
  - Include g++ from devtoolset as a build requirement


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.4.1
changelog:
  - Sync with 20220801-1.7.4
  - *** Upstream changelog ***
  - * Fri Feb 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.4
  - - CA-388017: Fix most PixieFail vulnerabilities
  - - Fix CVE-2023-45229 - Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
  - - Fix CVE-2023-45230 - Buffer overflow in the DHCPv6 client via a long Server ID option
  - - Fix CVE-2023-45231 - Out of Bounds read when handling a ND Redirect message with truncated options
  - - Fix CVE-2023-45232 - Infinite loop when parsing unknown options in the Destination Options header
  - - Fix CVE-2023-45233 - Infinite loop when parsing a PadN option in the Destination Options header
  - - Fix CVE-2023-45234 - Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
  - - Fix CVE-2023-45235 - Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.5.1
changelog:
  - Sync with 20220801-1.7.5
  - *** Upstream changelog ***
  - * Wed Mar 20 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.5
  - - CA-390410: Disable some unneeded modules
  - - CA-390410: Downgrade some errors to warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.7.1
changelog:
  - Sync with 20220801-1.7.7
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.7
  - - CA-388489: Fix CVE-2023-45236, CVE-2023-45237, and additional fix for CVE-2023-45229
  - * Tue May 14 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.6
  - - CP-46076: Support xs9 build


author: anthony.perard@vates.tech - 20220801-1.7.10.1
changelog:
  - Sync with edk2-20220801-1.7.10
  - *** Upstream changelog ***
  - * Wed Jun 11 2025 Fei Su <fei.su@cloud.com> - 20220801-1.7.10
  - - CA-410587 [XSI-1806] Fix 802.1Q Header Handling in OVS on XS8
  - * Fri Mar 07 2025 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.9
  - - CP-53516: Add perl modules require for XS9 build
  - * Thu Oct 31 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.8
  - - CP-50542: Upgrade OpenSSL to 3.0.9
  - - CP-52657: Fix CVE-2024-6119


author: Thierry Escande <thierry.escande@vates.tech> - 20220801-1.7.11.1
changelog:
  - Sync with edk2-20220801-1.7.11
  - *** Upstream changelog ***
    * Mon Mar 09 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.11
    - CA-424506: Fix boot from physical CD/DVD drive


author: Benjamin Reis <benjamin.reis@vates.tech> - 24.19.2-1.1
changelog:
  - Rebase on 24.19.2-1
  - Drop xapi-24.11.0-sb-state-api.XCP-ng.patch
  - Drop xapi-24.11.0-don-t-generate-link-local-address-for-interfaces.patch
  - Drop xapi-23.31.0-fix-ipv6-import.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Jul 16 2024 Ming Lu <ming.lu@cloud.com> - 24.19.2-1
  - - CA-395626: Fix (server status report generation report)
  - * Tue Jul 09 2024 Ming Lu <ming.lu@cloud.com> - 24.19.1-1
  - - Fixes: 99c43569a0 ("Transition from exception-raising Unix.getenv to Sys.getenv_opt with")
  - * Tue Jul 09 2024 Ming Lu <ming.lu@cloud.com> - 24.19.0-1
  - - CP-47304: [Toolstack] - Add data model for anti-affinity group
  - - CP-47655: [Toolstack] - Associate/disassociate VM to/from anti-affinity group
  - - CA-391880: Update related field 'groups' of VM when destroying VM group.
  - - CP-47302: VM start with anti-affinity
  - - CA-392177: Keep current group after reverting from snapshot
  - - CP-47656 Anti-affinity feature generate alert
  - - CP-48570: Load recommendations from config file when Xapi starts
  - - CP-48011: Xapi Support anti-affinity feature flag
  - - CA-393421: Special VMs cannot be added to VM groups
  - - CP-48625: Code refactoring
  - - opam: add psq to xapi dependencies
  - - CP-49665: Anti-affinity support for host evacuation
  - - CP-48752: Add UT for host evacuation with anti-affinity support
  - - CP-49953: Remove parse_uri, switch to using Uri module instead
  - - doc: remaining API docs
  - - doc: add XenAPI release info
  - - Printf.kprintf is deprecated, replace with Printf.ksprintf
  - - Fix misplaced inline attributes
  - - CP-50050 track CBT status for SMAPIv3 SRs
  - - CP-49953: Remove parse_uri, switch to using Uri module instead
  - - CI: Complete parallel Coveralls uploads: Finish when done
  - - CP-49116: Replace fingerprint in certificate DB with sha256 and sha1
  - - CA-392887: set_tls_config immediately after enabling clustering
  - - CI: Update endcover step to v2 to fix CI (#5763)
  - - CA-386173: Update the message of WLB authentication issue
  - - Revert "CP-49953: Remove parse_uri, switch to using Uri module instead"
  - - Fix a bug noticed by a quicktest run
  - - Eliminate unnecessary usage of List.length to check for empty lists
  - - Transition from exception-raising Unix.getenv to Sys.getenv_opt with
  - - Replace Hashtbl.find with Hashtbl.find_opt in trivial cases
  - - Refactor Hashtbl.find out of resources/table.ml
  - - Refactor Hashtbl.find out of xenopsd/xc/readln.ml
  - - Add a gate for Hashbtl.find
  - - CP-50135: Bump datamodel_lifecycle for anti-affinity
  - - IH-621: Add IPMI host power on support and remove DRAC
  - - opam: generate xapi-forkexecd with dune
  - - opam: remove unversioned opam dependencies
  - - opam: generate xapi-networkd using dune
  - - fe_test: print stacktrace on unit test failure
  - - fix(fe_test): make it compatible with fd-send-recv 2.0.2
  - - Fix indentation in C code
  - * Mon Jul 01 2024 Ming Lu <ming.lu@cloud.com> - 24.18.0-1
  - - doc/README.md: Improve the Hugo Quick start guide for an easier start
  - - .codecov.yml: Remove scripts (Codecov is confused, we move scripts/ to python3/)
  - - CA-394444: Update task cancellation in `message_forwarding.ml`
  - - Hugo docs: Add dark mode support, theme variant selector and print
  - - Don't generate link-local address for interfaces
  - - Make `cluster-stack-version` show up in the CLI
  - - Update datamodel lifecycle
  - - Removed headers from the templates.
  - - Renamed files and reordered table of contents.
  - - IH-583 Create standalone implementations of systemd functions
  - - Fix failing builds by attaching package to the cram test
  - - CA-394883: fix race condition allocating task ids
  - - CA-394882: avoid error on tasks that are not ours
  - - CA-381119: use JsonRPC V2 for error replies
  - - CA-394169: Allow task to have permissions on itself
  - - CI: use new version of codecov action
  - - Merge .codecov.yml from feature/py3 to drop scripts checks
  - - CP-50055 Add Go SDK as a release package in XAPI
  - - CI: codecov is unstable, use coveralls
  - - CA-394921: Ignore unkown properties during Java SDK deserialisation
  - - CP-49446: expose SR health values to Python
  - - opam: record correct authorship for stdext packages
  - - IH-628: add new package clock for timekeeping
  - * Tue Jun 18 2024 Ming Lu <ming.lu@cloud.com> - 24.17.0-1
  - - CP-48666: initialize a skeleton project for Go SDK
  - - CP-47347: Add mustache template for Enum Types
  - - CP-47351: generate Record and Ref Type Golang code for all classes
  - - CP-47348: generate Golang code of Enum Type for all classes
  - - CP-47362: generate file headers
  - - CP-48666: collect api errors
  - - CP-47364: generate api messages and errors of Golang code
  - - refactor: create an `Alcotest.testable` to check structure of generated JSON is wanted
  - - refactor: move `objects` and `session_id` from `Gen_go_helper` to `CommonFunctions`
  - - CP-48666: use dune rule to get the destination dir for the generated files
  - - CP-48666: generate all enums to a file
  - - refactor the way of getting enums
  - - CP-48666: refactor the JSON schema checking
  - - CP-48666: refactor `render_template` with an optional newline parameter
  - - CP-47361: generate mustache template for deserialize and serialize functions
  - - CP-47358: Generate convert functions Go code
  - - CP-48855: update templates (APIErrors, APIMessages, Record)
  - - CP-48855: adjust generated json for templates changed
  - - CP-48855: add templates for option and APIVersions
  - - CP-48855: render options
  - - CP-47355, CP-47360: generate mustache template for xapi data module class messages
  - - CP-47354: Generate messages functions Golang code for all classes
  - - CP-47354: add unit tests for `func_name_suffix` and `string_of_ty_with_enums`
  - - CP-48855: render APIVersion
  - - CP-48855: fix go lint var-naming warnings
  - - fix `StringOfTyWithEnumsTest` after merged
  - - CP-48855: it should be only one empty line at end of Go file
  - - CP-47356: expose `published_release_for_param` and `compare_versions` for usage of other modules
  - - CP-47358: Add unit tests for generating convert functions
  - - CP-47355, CP-47360: generate mustache template for xapi data module class messages
  - - CP-47354: Generate messages functions Golang code for all classes
  - - CP-47354: add unit tests for `func_name_suffix` and `string_of_ty_with_enums`
  - - CP-48855: update templates (APIErrors, APIMessages, Record)
  - - CP-48855: adjust generated json for templates changed
  - - CP-48855: add templates for option and APIVersions
  - - CP-48855: render options
  - - CP-48855: render APIVersion
  - - CP-48855: remove go lint var-naming warnings
  - - CP-47356: Support backwards capability for Go SDK
  - - CP-47361: generate mustache template for deserialize and serialize functions
  - - CP-47358: Generate convert functions Go code
  - - CP-47358: Add unit tests for generating convert functions
  - - CP-47354: Generate messages functions Golang code for all classes
  - - CP-47354: add unit tests for `func_name_suffix` and `string_of_ty_with_enums`
  - - CP-48855: render options
  - - CP-48855: render APIVersion
  - - CP-47357: Add a Go JSON-RPC client file
  - - CP-47357: fix review issues
  - - CP-47367 Add type checking for generated SDK Go files
  - - CP-49350: fix variable naming in Go SDK
  - - Set up Github Action for go SDK component test (#5588)
  - - CA-391381: Avoid errors for Partial Callables in observer.py
  - - xapi-tracing: bind its test to the package
  - - opam: generate xapi-tracing with dune
  - - opam: generate xapi-tracing-export with dune
  - - opam: generate rrdd-plugin with dune
  - - opam: generate xapi-rrd-transport-utils with dune
  - - opam: generate xapi-rrdd with dune
  - - opam: drop xapi-rrd-transport
  - - opam: drop xen-api-sdk
  - - Revert "CP-47660 define anti-affinity feature"
  - - Remove CVM and relevant test cases (#5655)
  - - opam: Fix metadata
  - - opam: de-templatise message-switch-core
  - - ocaml: remove unused bindings
  - - dune: enforce version +3
  - - Add `VM.set_uefi_mode` API call
  - - Go SDK: Misc fixes for on-going component tests (#5661)
  - - Add `VM.get_secureboot_readiness` API call
  - - Add `Pool.get_guest_secureboot_readiness` API call
  - - CP-49446: Update SR health to include new constructors
  - - doc: copy design documents from xapi-project.github.io
  - - doc: add info table to design docs
  - - doc: style design doc index
  - - CP-47928: Add component test for Go SDK
  - - CP-49647 use URI for create_misc
  - - CP-49647 use URI for dbsync_master
  - - CP-49647 use URI for export.ml
  - - CP-49647 use URI for import.ml
  - - CP-49647 use URI for importexport.ml
  - - CP-49647 use URI for rrd_proxy.ml
  - - CP-49647 use URI for sm_fs_ops.ml
  - - CP-49647 use URI for xapi_message.ml
  - - CP-49647 use URI for xapi_xenops.ml
  - - CP-49647 use URI for xapi_vm_migrate.ml
  - - CP-49647 use URI for xapi_host.ml
  - - CP-49647 use URI for cli_util.ml
  - - CP-49647 use URI for http.ml
  - - CP-49647 use URI for cli_operations
  - - CP-45235: Support for `xe-cli` to transmit `traceparent`
  - - doc: add design review links (historical)
  - - doc: RDP design: fix list nesting
  - - CP-48995: Instrument `XenAPI.py` to submit traceparent
  - - Update datamodel_lifecycle.ml
  - - CP-49768: Update GO SDK README file (#5671)
  - - CP-49249: Implement SMAPIv3 CBT Forwarding
  - - CA-393866: Add support for Infinity in Java SDK parser
  - - CA-393507: Default cluster_stack value
  - - Remove fix_firewall.sh
  - - CA-393119: Don't use HTTPS for localhost migrations
  - - CP-49828: Remove iovirt script
  - - CP-49129: Add unit test for parallel parsing.
  - - CP-49129: Make unit test run on alcotest.
  - - CP-49129: Replace `ocamlyacc` with `menhir`
  - - CP-49129: Drop global lock around sexpr parsing
  - - CP-49045: replace all uses of ocamlyacc with menhir which is thread-safe
  - - CP-49129: Update `quality-gate.sh` for `ocamlyacc`
  - - Link just qcheck-core, not qcheck
  - - Define qcheck-core dependency in opam packages
  - - Makefile: fix compatibility with the dash shell
  - - CP-49858: Fix phrasing in readme
  - - CP-49858: Add licence text on top of Go source files
  - - CP-49858: Unit test: licence template variable
  - - CP-49858: Remove template variables 'first' and 'is_session_id'
  - - CP-49858: Unit test: Update for changes on template variables
  - - rpm: remove `sexprpp` from public_name
  - - sexpr: add tests to the package
  - - xapi-rrdd: change tests to reduce amount of logs produced
  - - rrd-transport: generate opam metadata using dune
  - - http-lib: generate opam metadata using dune
  - - wsproxy: test with alcotest instead of ounit
  - - vhd-format-lwt: run tests using alcotest
  - - xen-api-client: run tests with alcotest
  - - xapi-sdk: add empty packge to be able to run tests for it
  - - CI: pin packages
  - - CP-49647 use URI for newcli.ml
  - - CP-49677 implement Http.Url using URI
  - - Update quality-gate.sh
  - * Mon Jun 10 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 24.16.0-3
  - - Bump release and rebuild
  - - Remove vm_anti_affinity tag and dependency on m2crypto


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.19.2-1.3
changelog:
  - Add xapi-24.19.2-update-new-fingerprint-fields-on-DB-upgrade.backport.patch, backported from XAPI project
  - Add xapi-24.19.2-more-fingerprint-field-updates-fixes.XCP-ng.patch to complement the fix
  - Fixes an issue where new fingerprint fields are not populated, which under
    some circumstances makes pool join fail.


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 25.6.0-1.7
changelog:
  - Fix another deadlock in xenopsd
  - Prevent xapi concurrent calls during migration from indirectly make each other fail


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.8
changelog:
  - Fix several RRD issues and make the plugins more robust:
    - Cap Derive values within a certain range without making them NaN
    - Use a computed delay time for RRD loop to prevent gaps in metrics collection
    - Avoid duplicating datasources on plugin restore
    - Protect against a resource leak in the plugins
    - Avoid running out of mmap-ed pages in xcp-rrdd-cpu for large numbers of domains
    - Prevent exceptions from escaping and introducing gaps into metrics collection
    - Avoid missing metrics from new and destroyed domains


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 25.6.0-1.10
changelog:
  - Cherry-pick 83a48882655d "xenopsd: set xen-platform-pci-bar-uc key in xenstore",
    commit is upsteam in 25.26.0.


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.11
changelog:
  - Packaging changes associated with the "xenopsd: set xen-platform-pci-bar-uc key"
    improvement to allow for custom user xenopsd configuration


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.27.0-2.1
changelog:
  - Update to upstream 25.27.0-2
  - Drop 0003-xcp-ng-disable-cancellable-sleep.patch, alternative fix merged upstream
  - Drop 0004-xcp-ng-add-debug-info-in-observer.patch, merged upstream
  - Rename 0005-xcp-ng-fix-IPv6-import.patch to 0003-xcp-ng-fix-IPv6-import.patch
  - Rename 0006-xcp-ng-open-close-openflow-port.patch to 0004-xcp-ng-open-close-openflow-port.patch
  - Rename 0007-xcp-ng-update-db-tunnel-protocol-from-other-config.patch to
    0005-xcp-ng-update-db-tunnel-protocol-from-other-config.patch
  - Drop 0008-CA-408126-rrd-Do-not-lose-ds_min-max-when-adding-to-.patch, merged upstream
  - Drop 0009-CA-408126-follow-up-Fix-negative-ds_min-and-RRD-valu.patch, merged upstream
  - Drop 0010-CA-408841-rrd-don-t-update-rrds-when-ds_update-is-ca.patch, merged upstream
  - Drop 0011-Check-that-there-are-no-changes-during-SR.scan.patch, merged upstream
  - Drop 0012-xapi_guest_agent-Update-xenstore-keys-for-Windows-PV.patch, merged upstream
  - Drop 0013-xapi_xenops-Try-to-avoid-a-race-during-suspend.patch, merged upstream
  - Drop 0014-CA-409510-Make-xenopsd-nested-Parallel-atoms-explici.patch, merged upstream
  - Drop 0015-CA-409510-Give-a-warning-if-atoms-nested-incorrectly.patch, merged upstream
  - Drop 0016-CA-410782-Add-receive_memory_queues-for-VM_receive_m.patch, merged upstream
  - Drop 0017-CA-411319-Concurrent-VM.assert_can_migrate-failure.patch, merged upstream
  - Drop 0018-CA-409488-prevent-Xenctrl-exceptions-from-escaping-o.patch, merged upstream
  - Drop 0019-CA-409489-prevent-running-out-of-pages-with-lots-of-.patch, merged upstream
  - Drop 0020-rrd_file_writer-protect-against-resource-leak.patch, merged upstream
  - Drop 0021-Raise-log-level-for-rrd-thread-monitor.patch, merged upstream
  - Drop 0022-CA-410001-Check-rrdi.rrd-to-avoid-ds-duplicate.patch, merged upstream
  - Drop 0023-CA-409482-Using-computed-delay-for-RRD-loop.patch, merged upstream
  - Drop 0024-CA-411679-Runstate-metrics-return-data-over-100.patch, merged upstream
  - Drop 0025-xcp-rrdd-change-the-code-responsible-for-filtering-o.patch, merged upstream
  - Drop 0026-rrdd-Avoid-missing-aggregation-of-metrics-from-newly.patch, merged upstream
  - Drop 0027-CA-407370-Use-remote.conf-for-customer-rsyslog-forwa.patch, merged upstream
  - Drop 0028-xenopsd-set-xen-platform-pci-bar-uc-key-in-xenstore.patch, merged upstream
  - Drop XSA-474 backport to 25.6.0 (0029-prepare-make-StringPool-share-safer.patch and
    0030-Simplify-UTF-8-decoding.patch), replace with the upstream backport to 25.27.0
  - *** Upstream changelog ***
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.27.0-2
    - CA-411297/XSA-474: XAPI UTF8

    * Wed Jul 23 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.27.0-1
    - CP-54332 Update host/pool datamodel to support SSH auto mode
    - CP-53721 Implement SSH set auto mode API for Dom0 SSH control
    - CP-53724 Add xe CLI commands for setting and querying Dom0 SSH auto mode
    - CP-54382 Set Different Auto-Mode Default Values for XS8 and XS9
    - CP-54382 Reconfigure Auto mode when pool join and pool eject
    - CA-412854 Fix ssh_expiry drift after XAPI restart
    - CA-413328 Enable auto-mode when XAPI failed for a extend period that exceeds the timeout duration
    - CA-413319: Ensure console timeout file exists when timeout is configured
    - CA-413424: Enhance xe help output
    - xapi_sr_operations: Report more useful info when raising other_operation_in_progress error
    - xapi_cluster_helpers: Correctly report other_operation_in_progress error
    - xapi_vm_lifecycle: Correctly report other_operation_in_progress error
    - qcow-stream-tool: Add a minimal CLI wrapper for Qcow_stream
    - {export,import}_raw_vdi: add qcow as supported format
    - export_raw_vdi: Add support for differential QCOW2 export with base
    - CP-52334 MVD - add -d option to mock driver-tool
    - xapi_vbd_helpers: Fix operation reporting when raising other_operation_in_progress
    - xapi_vdi: Report more useful information when raising other_operation_in_progress
    - xapi_{vif,vusb}_helpers: Report more useful information when raising other_operation_in_progress
    - message_forwarding: Report more info when raising other_operation_in_progress
    - xapi_pool_helpers: Report more info when raising other_operation_in_progress error
    - xapi_pif: Report more info when raising other_operation_in_progress error
    - xapi_vm_appliance_lifecycle: Report more info when raising other_operation_in_progress error
    - xapi_vbd: Report more useful info when raising other_operation_in_progress error
    - xapi_host_helpers: Report more useful info when raising other_operation_in_progress error
    - xapi/helpers: Fix handling of other_operation_in_progress delays
    - idl/datamodel_errors: Add operation_{type,ref} to other_operation_in_progress
    - Adjust tests after other_operation_in_progress refactoring
    - CA-412420: Set vdi-type When Create snapshot on SMAPIv3 SR
    - [doc] add documentation about tracing
    - CP-54480 Update release number for ssh_auto_mode
    - CA-413587: Checking feature for old FreeBSD driver

    * Wed Jul 16 2025 Rob Hoes <rob.hoes@citrix.com> - 25.26.0-1
    - xenopsd: set xen-platform-pci-bar-uc key in xenstore
    - CP-308455 VM.sysprep add timeout parameter
    - CP-308455 VM.sysprep wait for shutdown
    - CP-308455 VM.sysprep update documentation
    - CP-308455 VM.sysprep wait for "action" key to disappear
    - CA-413713: Change bash-completion shortcut
    - Replace `List.fold_left (||) false (List.map f lst)` with `List.exists f lst`
    - CP-308875: set Xen PCI MMIO BAR to WB
    - Add message argument to LICENSE_CHECKOUT_ERROR

    * Sun Jul 13 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.25.0-1
    - CA-393417: Drop device controller of cgroup v1 and fix USB passthrough for XS9
    - xapi-stdext-threads: calibrate ratio for delay times
    - Downgrade unknown SM.feature errors to warnings
    - CP-308455 VM.sysprep use watch to detect sysprep running
    - datamodel_lifecycle: automatic update
    - CA-413412: Fail to designate new master
    - XSI-1954: Only block pool join for clustering on non-management VLAN

    * Sun Jul 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.24.0-1
    - CA-410965: Modify default ref of console
    - Design proposal for supported image formats (v3)
    - CA-411477: Fix SM API version check failure
    - CP-54207: Move VBD_attach outside of VM migrate downtime
    - xenopsd/xc: upstream more NUMA changes
    - idl: Remove unused vm_lacks_feature_* errors
    - python: Add qcow2-to-stdout.py script
    - Move collection of memory metrics from xcp-rrdd to rrdp-squeezed
    - Move common retry_econnrefused function to xcp_client
    - CA-412636: hostname changed to localhost with static IP and reboot
    - Add mlis for observer_helpers and observer_skeleton
    - CP-308455 Toolstack VM.sysprep API
    - `xapi_vm_lifecycle`: Improve feature handling, avoid crashes
    - CA-413304: Restore VBD.unplug function to keep old functionality

    * Wed Jun 25 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.23.0-1
    - Improve the xapi_observer debug logs by adding more context
    - Reduce code duplication by using a common Observer Interface
    - CA-409431: Use an Observer forwarder for xapi-storage-script
    - xapi: Move cpu_info keys to xapi-consts from xapi_globs to be used across modules
    - Improve xapi-cli-server
    - Improve `xe-cli` completion
    - xapi/helpers: Note that get_localhost can fail while the database is starting up
    - xapi_host: missing UEFI certificates warrant a warning, not an error
    - CA-412164: XSI-1901: uid-info does not support `:` in gecos
    - CP-47063: Instrument message-switch functions
    - CA-412313: DT spans not exported on host evacuation (XAPI shutdown)
    - xenopsd: Allow to override the default NUMA placement
    - Fix `message-switch` opam metadata
    - opam: generate xapi-log with dune
    - xapi-log: remove circular dependency on tests
    - datamodel_lifecycle: automatic update
    - CA-412146 Filter out VF when scan
    - Update datamodel_host
    - Update XE_SR_ERRORCODES from SM
    - CP-308253: `Task.destroy` spans should no longer be orphaned
    - CP-308392: Create specialized functions
    - xapi-idl: Clean up xenops-related interfaces
    - xapi_xenops: Remove unnecessary Helpers.get_localhost call
    - xapi_xenops: Split update_vm internals into a separate function
    - CA-408552: Improve bootstrom performance by save db ops
    - xenops_server_plugin: Refer to the type alias instead of its definition
    - xapi-idl/updates: Make filterfn in inject_barrier only look at keys
    - xapi_xenops: Refactor update_vm_internal
    - CP-308253: Instrument `Consumers` Spans in `Message-switch`.
    - CP-50001: Add instrumentation to `xapi_xenops.ml`
    - CA-406770: Improve error message
    - xenopsd: Remove data/updated from the list of watched paths
    - xapi_xenops: Simplify update_* functions
    - CP-308201: make unimplemented function more obvious

    * Thu Jun 12 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.22.0-2
    - Bump release and rebuild

    * Wed Jun 11 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.22.0-1
    - xcp-rrdd: change the code responsible for filtering out paused domains
    - Update datamodel_lifecycle (25.21.0)
    - CA-410085: Improving clearing cgroup after vfork
    - Adapt code to new mirage-crypto (CP-308222)
    - CP-308252 add VM.call_host_plugin
    - xapi-client: Add Tasks.wait_for_all_with_callback
    - xapi_host: Parallelize host evacuation even more
    - github: keep scheduled yangtze's runs working
    - rrdd: Avoid missing aggregation of metrics from newly destroyed domains
    - xapi-aux: remove cstruct usage from networking_info
    - xapi-cli-server: Expose evacuate-batch-size parameter in the CLI
    - [maintenance]: add forkexecd C objects to .gitignore
    - unixext: Add a raise_with_preserved_backtrace function
    - xapi_vgpu_type: Don't pollute the logs with non-critical errors
    - networkd: Add ENOENT to the list of expected errors in Sysfs.read_one_line
    - xenguestHelper: Don't dump errors on End_of_file

    * Tue Jun 10 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-4
    - Bump release and rebuild

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-3
    - Bump release and rebuild

    * Fri Jun 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-2
    - Bump release and rebuild

    * Fri Jun 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-1
    - CP-53477 Update host/pool datamodel to support SSH status query and configure
    - CP-53802: Restore SSH service to default state in pool eject
    - CP-53711: Apply SSH settings in joiner before update_non_vm_metadata
    - CP-53723 Implement Console timeout configure API for Dom0 SSH control
    - CP-53478: Implement SSH enabeld timeout API for Dom0 SSH control
    - CP-53725 Create SSH-related xe CLI for Dom0 SSH control
    - CP-54138: Sync SSH status during XAPI startup
    - CP-308049: rrdview tool
    - CA-410948 Avoid rasie full Exception when disable/enable ssh failed
    - CA-409949 CA-408048 XSI-1912 remove unabailable SM plugin by ref
    - xapi-types: remove dev errors when adding features
    - xenctrlext: add function to set the hard-affinity for vcpus
    - xenopsd: pass the hard-affinity map to pre_build
    - xenopsd: do not send hard affinities to xenguest when not needed
    - xenopsd: set the hard affinities directly when set by the user
    - xenopsd: expose a best-effort mode that set the hard affinity mask (CP-54234)
    - xapi: use hard-pinning with best-effort as an experimental feature (CP-54234)
    - CA-411679: Runstate metrics return data over 100%
    - Modify doc mistakes
    - CONTRIBUTING: add some initial guidelines
    - Removed PowerShell 5.x build due to the retirement of windows-2019.
    - Add file-upload support to xe host-call-plugin
    - CP-53475 Update release number to latest tag
    - XSI-1918: Host can not join pool after enable external auth
    - xapi_vif: Guarantee the device parameter is an unsigned decimal integer
    - xapi-idl: Avoid printing cli output when testing
    - xapi-storage-script: avoid output when running python tests
    - CA-411766: Detach VBDs right after VM Halted
    - datamodel_lifecycle: automatic update

    * Fri May 23 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.20.0-2
    - Bump release and rebuild

    * Fri May 23 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.20.0-1
    - CA-409949 CA-408048 remove unavailable SM types at startup
    - CP-307933: database: do not marshal/unmarshal every time
    - CP-307865 Support SHA-512 Certificates for XenServer Hosts
    - gencert testing: use human-readable errors for validation
    - CA-409510: xenopsd operations time out due to deadlock
    - CA-411122: do not call set-iscsi-initiator with an empty string for IQN
    - CA-410782: Add receive_memory_queues for VM_receive_memory operations
    - xapi: Cleanup unused functions
    - CP-308075 document changing paths for SM plugins in XS9
    - CP-53642: change default NUMA placement policy to best-effort
    - CP-54275: Add a blocklist mechanism to avoid incorrect/old repo config.
    - CP-307922: Implement SMAPIv3 outbound migration
    - CA-409482: Using computed delay for RRD loop
    - CA-411319: Concurrent `VM.assert_can_migrate` failure

    * Thu May 15 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.19.0-1
    - [maintenance]: bool is a keyword in newer C versions, cannot be a parameter
    - CP-307947: cleanup database interface
    - Mux mirror failure check for SXM
    - Bring back DATA.MIRROR.list and DATA.MIRROR.stat
    - Add more debugging to storage_smapiv1_migrate
    - CP-307958: database: small lock and RPC tweaks + benchmarks
    - CA-408492: Keep backwards compatibility for SMAPIv2

    * Fri May 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.18.0-1
    - CP-52880: [XSI-1763]: Xapi_vdi.update_allowed_operations is slow
    - Add additional tracing to VBD plug/unplug
    - CP-53554: Split plug xenopsd atomic into attach/activate
    - CP-53555: Split unplug atomic into deactivate/detach
    - Move update_snapshot_info_dest to storage_mux
    - Refactor Storage_smapiv1.find_vdi
    - Use the new scan2
    - Add new interface for mirror operation in SMAPIv3
    - Add more states for SXM
    - Remove receive_start(2) from storage_migrate
    - Change how receive_start2 is called
    - Add qcow2 as supported format by xcp-rrdd-iostat
    - CA-404946: NBD: increase timeout to match iSCSI timeout and use persistent connections
    - Update datamodel_lifecycle
    - [maintenance]: reformat dune files in sdk-gen
    - build: avoid race condition on install
    - [maintenance]: drop sexprpp
    - XAPI website link updated in README
    - xapi-log/test: Package the cram test in xapi-log
    - CA-409710: Modify the default backup parameters
    - xenopsd: Don't balloon down memory on same-host migration
    - CA-410001: Check rrdi.rrd to avoid ds duplicate
    - xapi_xenops: Avoid a race during suspend
    - CP-54828: RBAC: Avoid raising exception on happy path
    - CP-54827: Optimize pool object
    - CP-54826: Mutex.execute: avoid costly backtrace formatting in finally
    - CA-403867: Block pool join if IP not configured on cluster network

    * Thu Apr 24 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.17.0-1
    - xe-reset-networking: Avoid truncating IPv6 addresses
    - networkd: simplify parsing of config
    - networkd: read IPv6 entries in the firstboot management config file
    - xapi: Log exceptions in check_network_reset
    - CA-408230: Enable destroy op for HA statefile VDI after HA is disabled
    - CP-52131/CP-53474: Reorder operations during pci_add
    - xapi_guest_agent: Update xenstore keys for Windows PV drivers versions
    - tests: Add Windows PV driver version parsing test to test_guest_agent
    - Explicitly define failures for SXM
    - Define the utility function for choosing the backend
    - Move the copying function to storage_smapiv1_migrate
    - Move MigrateRemote before MigrateLocal
    - Move `find_local_vdi` utility function
    - Split Storage_migrate.start
    - Remove duplicate Storage_migrate.stop impl
    - Implement send_start for SMAPIv1
    - doc: Add sxm mux design
    - doc: Add an overview of SXM
    - doc: Add error handling of SXM
    - CA-409628: Do not lose the original backtrace in log_backtrace
    - Update cluster-stack-version lifecycle
    - CP-54034: Expose `expected_votes` in Cluster object

    * Tue Apr 15 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.16.0-1
    - CP-54072: Create template for storage_smapi{v1,v3}_migrate
    - CA-401023: Remove smapi observer config if smapi is set as experimental
    - xapi_message: Implement proper expression handling in get_all_records_where
    - CP-54026: option to control VM-internal shutdown behaviour under HA
    - CP-53951: Drop SSL and Lwt dependency from XAPI
    - quicktest: Add a test verifying Message.get_all_records_where filtering
    - CI: allow XAPI linking with Lwt for now
    - Check that there are no changes during SR.scan
    - CA-408843: XSI-1852: Set encryption type of machine account
    - CP-52745: Add `ThreadLocalStorage` in `Threadext`
    - CA-409488: prevent Xenctrl exceptions from escaping on VM boot/shutdown races
    - CA-409489: prevent running out of pages with lots of domains
    - rrd_file_writer: protect against resource leak
    - Raise log level for rrd thread monitor
    - xapi-aux: Add function to return all management ip addresses
    - gencert: Allow adding more than one IP as the certificate subject
    - network_server: add gateway and dns options to DHCP6
    - opam: update xapi-storage-cli metadata

    * Fri Apr 11 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-3
    - Bump release and rebuild

    * Tue Apr 08 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-2
    - Bump release and rebuild

    * Tue Apr 08 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-1
    - CP-53313: Add field services in VM_guest_metrics
    - CP-53314: Read and watch <domain>/data/service in xenstore to DB
    - Define SR_CACHING capability
    - CP-52365 fix up driver-tool invocations
    - CA-408339: Respect xenopsd's NUMA-placement-policy default
    - Use records when accumulating events
    - Remove mutable last_generation from Xapi_event
    - Factor out event reification
    - Use record type for individual event entries
    - xenctrlext: do not truncate the amount of memory in claims to 32 bits
    - CA-407177: Fix swtpm's use of SHA1 on XS9
    - forkexecd: do not tie vfork_helper to the forkexec package
    - opam: add missing dependencies to packages
    - Simplify code by using get_trace_context
    - CA-404460: Expose Stunnel_verify_error for mismatched or corrupted certificate, and expose ssl_verify_error during update syncing
    - CA-408550: XSI-1834: Host netbios name should be added to local
    - CP-54020: Refactor sxm and storage_mux code
    - CA-408500: Remove ListFile with Xapi_stdext_unix.Unixext
    - CP-53472: Create parent for add_module spans
    - xapi-stdext-threads, test: use stable testing interface
    - CA-408841 rrd: don't update rrds when ds_update is called with an empty datasource array
    - Remove xapi-stdext-date
    - CP-50836: Add VM_migrate_downtime and request_shutdown spans
    - opam: move all opam files to the opam subdir
    - numa: add test binary that prints changes in free memory and domain lifetime
    - CP-53658: adapt claim_pages to new version with numa node parameter
    - xenctrl: Don't use numa_node in domain_claim_pages calls
    - xenopsd: log_reraise doesn't ignore the result
    - CP-54065, xenopsd: use domain_claim_pages on a single node, if possible
    - xenopsd/xc: Do not try to allocate pages to a particular NUMA node
    - xapi_vm_migrate: Avoid duplicate, overly-strict CBT check on VDIs
    - Update datamodel lifecycle VM_guest_metrics.services
    - CA-408048 add library to represent version strings
    - CA-408048 remove SM plugins from DB if unavailable

    * Tue Mar 18 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.14.0-1
    - IH-533: Remove usage of forkexecd daemon to execute processes
    - Add opam local switch in gitignore
    - xenopsd: start vncterm for PVH guests

    * Mon Mar 17 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.13.0-1
    - CP-48824: Increase xenopsd worker-pool-size to 25
    - CP-52074: Add systemctl enable and disable API
    - CP-53161: Pass `baggage` back into `xapi` from `smapi`.
    - CA-405864: Drop usage of init.d functions
    - doc: Update xapi storage layer code links
    - CA-405864: Fix shellcheck warnings
    - CP-53827, xenopsd: claim pages for domain on pre_build phase
    - CI: fix compile_commands.json caching
    - Resolve build failure in message_forwarding.ml
    - CP-48676: Reuse pool sessions on slave logins.
    - xapi-stdext-date: replace all usages to use clock instead
    - CA-408126 follow-up: Fix negative ds_min and RRD values in historical archives

    * Wed Mar 12 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.12.0-1
    - Revert "CA-403851 stop management server in Pool.eject ()"

    * Tue Mar 11 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.11.0-1
    - Design proposal for supported image formats
    - (docs) Describe the flows of setting NUMA node affinity in Xen by Xenopsd
    - CA-407687/XSI-1834: get_subject_information_from_identifier should
    - CA-408126 - rrd: Do not lose ds_min/max when adding to the RRD
    - Change Ocaml version in readme
    - CA-403851 stop management server in Pool.eject ()

    * Fri Mar 07 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.10.0-1
    - CA-407328: Change vm parameter names of SXM calls
    - CP-53708: Expose the existing PCI vendor/device IDs
    - CP-53444: For XenServer 9, remove python dnf plugins
    - XSI-1821: Add pre-condition for host.emergency_reenable_tls_verification
    - CP-50934: fix qemu cgroups to be compatible with cgroupv2
    - opam: move stunnel metadata to dune-project
    - stdext: replace all ignore_type with annotated ignores
    - xapi_vdi_helpers: actually write raw vdi when possible
    - CA-399631: Increase the max size of xcp-rrdd-plugins for bug-tool
    - CP-53779: Guard all `Tgroup` library call behind `tgroups-enabaled`
    - CI: add a codechecker workflow
    - [maintenance] xa_auth.h: avoid using reserved macro names
    - unixpwd.c: fix error path file descriptor leak
    - [maintenance] syslog_stubs.c: avoid using reserved identifier names
    - [maintenance] blkgetsize64: avoid warning about uninit value
    - CP-53747 document PEM/Certificate relation
    - c_stubs: use 'new' acquire and release runtime functions
    - Hoist value access outside section without lock
    - CA-407370: Use remote.conf for customer rsyslog forwarding rules
    - Revert: Refactor Xapi_event #6306

    * Mon Mar 03 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.9.0-2
    - Bump release and rebuild

    * Thu Feb 27 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.9.0-1
    - Design proposal to support import/export of Qcow2 VDI
    - message_forwarding: Change call_slave_... functions to reduce repetition
    - Revert "CA-403867: Block pool join if IP not configured on cluster network"

    * Wed Feb 26 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.8.0-1
    - CP-52744: Thread `TraceContext` as json inside debug_info
    - Use records when accumulating events
    - Remove mutable last_generation from Xapi_event
    - Use record type for individual event entries
    - CA-403867: Block pool join if IP not configured on cluster network
    - CA-403744: Implement other_config operations
    - CP-45795: Decompress compressed trace files without Forkexecd
    - CP-53362: Rename hcp_nss to nss_override_id
    - CP-52365 adjust interface to dmv-utils
    - CA-407033: Call `receive_finalize2` synchronously
    - Add internal links to XenAPI reference
    - CA-405643: Update DNF to DNF5
    - Add filter_by to Dm_api
    - Use Cmdliner for gen_api_main.exe
    - CA-407322 - libs/rrd: Keep lastupdate XML field as int, XenCenter relies on it

    * Mon Feb 24 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.7.0-2
    - Bump release and rebuild

    * Tue Feb 18 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.7.0-1
    - CP-51393: Datamodel: update Repository for syncing from a remote pool (#6049)
    - CP-51835: Keep the HTTP /repository handler enabled
    - CP-50789: Enable verified rpc to external host
    - CP-51836: Restrict/check binary_url of remote_pool repository
    - CP-51391: Implement handling for /repository/enabled
    - CP-51988: Fix functions not work for remote_pool repo
    - CP-50787 CP-51347: Support pool.sync_updates from remote_pool repo
    - CP-52245: Temp disable repo_gpgcheck when syncing from remote_pool repo
    - Revert "CP-52245: Temp disable repo_gpgcheck when syncing from remote_pool repo"
    - python3: Add previously unused API classes to Python stubs used during testing
    - CA-404660: Refine repository enabling error message
    - doc: walkthroughs/VM.start: Update the xenguest chapter (domain build)
    - debug traces for is_component_enabled
    - CP-53470 Additional spans in & around the pause section in VM.migrate
    - Hugo docs: Support dark themes: Invert images to match the theme
    - README: Submission: Add DCO, issues & remove the disabled xen-api list
    - docs/xenopsd: List the child pages using the children shortcode
    - CA-405820 guard /etc/init.d/functions in xe-toolstack-restart
    - Simplify cases of may_be_side_effecting
    - Drop count_mandatory_message_parameters
    - message-switch/unix: simplify the scheduler
    - docs: Add dedicated walk-throughs for VM.build and xenguest
    - xenopsd docs: Add Walk-through descriptions, show them on the index page
    - python3: Resurrect metrics.py helper script
    - python3: Resurrect a metricsgraph.py helper script
    - CA-406403: Do not return HTTP 500 when Accept header can't be parsed
    - Replace startswith and endswith with stdlib calls
    - Domain.build docs: Improve notes on node_affinity, move to new page
    - (docs) VM.migrate.md: Rephrase and simplify, improve readability

    * Wed Feb 12 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.6.0-2
    - Bump release and rebuild


author: Pau Ruiz Safont <pau.safont@vates.tech> - 25-33.1-2.1
changelog:
  - Update to upstream 25.33.1-2
  - *** Upstream changelog ***
    * Thu Oct 30 2025 Rob Hoes <rob.hoes@citrix.com> - 25.33.1-2
    - Bump release and rebuild
    
    * Thu Oct 30 2025 Rob Hoes <rob.hoes@citrix.com> - 25.33.1-1
    - CA-419227 Move force_state_reset after refresh_vm
    
    * Thu Oct 16 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.33.0-2
    - CP-53573: Enable NUMA placement in XS9
    
    * Tue Oct 14 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.33.0-1
    - Update dune lang to 3.20
    - Avoid no-cmx-warning when building xapi_version
    - CP-308455 VM.sysprep turn on feature
    - XSI-1969 CA-418141 more thorough resource cleanup
    - CA-417951: Split checks for migration and detecting RPU
    - CA-417951: Host.create now takes a software version argument
    - python3/perfmon: Remove broken calls to /etc/init.d/perfmon
    - Extend diagnostic-timing-stats to optionally show counts
    - xapi_vm_clone: Remove impossible, confusing case when dealing with suspend VDIs
    - CA-417020: DNS not cleared after reconfiguring to static IP without DNS
    - fix: Xen Version checks
    
    * Tue Sep 30 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.32.0-1
    - XSI-1969 more thorough resource cleanup
    - CP-54163: xapi: Add secure boot field to host
    - http-lib: Add filename hint to file response
    - system_status: Clean up imports, add an interface
    - system_status: Reduce logging
    - system_status: reify the output types for xen-bugtool
    - system_status: Group bugtool command-handling into a module
    - system_status: consolidate error-handling
    - system_status: suggest consistent filenames to clients
    - system_status: add URL parameter to show xen-bugtool entries
    - Fix missing-dependency alerts for unix and str on OCaml 5
    - Fix test for OCaml 5
    - Remove unused Xenctrlext function
    - idl: Remove apparently unused gen_test.ml
    - idl/gen_client: Don't specify argument values when they're equal to defaults
    
    * Wed Sep 24 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.31.0-1
    - CP-308811: Add an option to limit the span depth in tracing
    - CP-309305: Split Spans.since into chunks for exporting
    - Use a forwarder so each component updates their depth and chunk size
    - CA-416351: Slave shutdown timeout
    - rrd: Fix absolute rate calculations
    - CP-309523: Make networkd_db utility return bridge MAC address
    - xapi_vm_migrate: Fix reservations not being cleared on halted VMs
    - CP-308863: Count vGPU migrations
    - CA-416516: vm.slice/cgroup.procs write operation gets EBUSY
    - CA-367765: remove reference to obsolete default URL
    - Remove obsolete test script
    - host.disable: Add auto_enabled parameter for persistency
    - Simplify UTF-8 decoding
    - Adjust quality-gate.sh
    - xapi/nm: Send non-empty dns to networkd when using IPv6 autoconf
    - CP-53479: Add xapi-ssh-monitor script and service
    - CP-308800: Dynamically control ssh firewalld service in xapi-ssh-monitor
    - xapi-idl/network: Remove code duplication for DNS persistence decisions
    - Remove redundant check
    - xapi_pbd: use HA shared SR constraint violation when plugging and unplugging
    - xapi_pif: use HA shared network constraint violation when plugging and unplugging
    - xapi_ha_vm_failover: remove superfluous debug message
    - xenopsd: Drop unused variables in domain.ml
    - docs: Update add-function.md to fix example
    - ocaml: allow xapi to compile under OCaml 5.3
    - XSI-1987 & CA-416462: Fix RPU host evacuation version check
    - CA-417390: No RRD metric for vGPU migration with local storage
    - ocaml: prepare formatting for ocamlformat 0.27.0
    - git-blame-ignore-revs: ignore previous, formatting commit
    - networkd: Remove usage of ovs-vlan-bug-workaround
    - networkd: Remove has_vlan_accel from network_utils
    
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.30.0-1
    - CA-411297: XAPI UTF8
    - CA-412983: HA doesn't keep trying to start best-effort VM
    - Add Xapi_globs.ha_best_effort_max_retries to eliminate hard-coding
    - Optimize with List.compare_lengths
    - Copy dependency libraries to the output folder. Build using the project file (or the build switches in it are ignored).
    - CP-308539 Added preprocessor conditions to compile with .NET 8
    - Updated language use. Removed redundant calls and initializers. Use Properties instead of public fields.
    - CP-308539 Replaced obsolete code.
    - CP-308539 Use HttpClient for .NET as HttpWebRequest is obsolete.
    - CP-44752: propagate System.Diagnostics tracing information using W3C traceparent header.
    - Action from CA-408836: Deprecate the method SaveChanges. It is a XenCenterism and not always correct.
    - libs/log: adapt backtrace test to pass on aarch64
    - ocaml/util: delete module xapi_host_driver_helpers and tests
    - Updated dependencies for PS 5.1.
    - I forgot to initialize the Roles.
    - ci: enable experimental ocaml workflow on aarch64
    - CP-308455 VM.sysprep if CD insert fails, remove ISO
    - CP-308455 VM.sysprep declare XML content as SecretString
    - CP-308539: Updated certificate validation to support .NET 8.0 in PowerShell.
    - Revert "xapi/nm: Send non-empty dns to networkd when using IPv6 autoconf (#6586)"
    
    * Wed Aug 27 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 25.29.0-2
    - Rebuild against Xen 4.20
    
    * Thu Aug 21 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.29.0-1
    - CP-40265 - xenopsd: Drop max_maptrack_frames to 0 by default on domain creation
    - CP-40265 - xenopsd: Calculate max_grant_frames dynamically
    - Treat 64 max_grant_frames as the lower bound
    - xenopsd: Don't iterate over StringMaps twice
    - xapi_vm_helpers: Raise allowed_VIF limit from 7 to 16
    - xapi/nm: Send non-empty dns to networkd when using IPv6 autoconf
    - xapi-idl/network: Remove code duplication for DNS persistence decisions
    - CI: update pre-commit config
    - CI: update diff-cover parameters
    - Minor wording improvement
    - CP-53858: Domain CPU ready RRD metric - runnable_any
    - CP-54087: Domain CPU ready RRD metric - runnable_vcpus
    - CP-308465: RRD metric "runnable_vcups": rebase on top of xen.spec/PR#481
    - python3/usb_scan: Skip empty lines in usb-policy.conf, add more comments
    - Changed the order of operations so that the sources are stored before any CI runs.
    - CA-413254: Sort and remove duplicate serialized types.
    - message_forwarding: Log which operation is added/removed from blocked_ops
    - xe-cli: Allow floppy to be autocompleted
    - CA-415952: HA can not be enabled
    
    * Wed Aug 06 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.28.0-1
    - CA-413424: Enhance xe help output
    - CP-308455 VM.sysprep CA-414158 wait for "action" key to disappear
    - Disable SARIF upload for now: they are rejected
    - CP-308455 VM.sysprep CA-414158 wait for "action" key to disappear (#6604)
    - CP-309064 Add SSH Management feature design
    - CA-414418: Detection of AD account removal does not cause logout
    - CA-414418: Perf: save user validate result and apply to sessions
    - CA-414418: Code refine for comments
    - CA-414627: increase polling duration for tapdisk
    - Update datamodel lifecycle


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.2
changelog:
  - Remove dependency on rrd-client-lib. It's not used by XCP-ng.
  - Update xenstore keys that Xapi Guest Agent checks for Windows PV driver versions


author: Yann Dirson <yann.dirson@vates.tech> - 24.39.1-1.1
changelog:
  - Update to upstream 24.39.1-1
  - Reformat changelog to allow diffing with upstream
  - Adjust change to avoid pulling upgrade-pbis-to-winbind (XS8-only)
  - Reworked non-installation of yum plugins
  - Adjust xapi-23.31.0-open-openflow-port.XCP-ng.patch for file rename
  - Adjust xapi-24.11.0-update-db-tunnel-protocol-from-other_config.XCP-ng.patch
  - Drop xapi-24.16.0-openvswitch-config-update-fix-python2ism-in-python3.patch,
    merged upstream
  - Drop backport: xapi-24.19.2-update-new-fingerprint-fields-on-DB-upgrade.backport.patch
  - Drop ipv6 patches merged into v24.31.0
  - Drop xapi-24.19-2-fix-pem-fingerprint-startup.XCP-ng.patch now that #6006 is merged
  - New xen-api-24.39.1-test-disable-cancellable-sleep.patch: disable "cancellable sleep"
  flaky test
  - Add missing Requires: python3-wrapt
  - More traces for is_component_enabled (PR #6280)
  - IPMI fixes from psafont for testing (PR #6261)
  - Bump version requirement on jemalloc to get required libjemalloc.so.2
  - Upstream changelog:
    * Tue Jan 14 2025 Vincent Liu <shuntian.liu2@cloud.com> - 24.39.1-1
    - CA-404512: Add feature flag to the new clustering interface
    
    * Tue Nov 26 2024 Gang Ji <gang.ji@cloud.com> - 24.39.0-2
    - Bump release and rebuild
    
    * Mon Nov 25 2024 Gang Ji <gang.ji@cloud.com> - 24.39.0-1
    - IH-728: Refactor tracing logic
    - Update datamodel_lifecycle.ml
    - CA-401274: Remove external auth limitation during set_hostname_live
    - CP-49134: tracing: do not destroy stacktrace
    - CP-49078: Use Hashtbl within Schema
    - opam: update vhd packages' opam metadata
    - maintenance: compatibility with cstruct 6.2.0
    - CA-402326: Fetch SM records from the pool to avoid race
    - CA-402654: Partially revert 3e2e970af
    - CA-402263, xapi_sr_operatrions: don't include all API storage operations in all_ops
    
    * Wed Nov 13 2024 Christian Lindig <christian.lindig@cloud.com> - 24.37.0-3
    - Bump release and rebuild
    
    * Wed Nov 13 2024 Christian Lindig <christian.lindig@cloud.com> - 24.37.0-2
    - Bump release and rebuild
    
    * Mon Nov 11 2024 Christian Lindig <christian.lindig@cloud.com> - 24.37.0-1
    - CP-50475: Remove unnecessary Parallel atoms from the xenopsd queues
    - CP-50475: parallelize device ops during VM lifecycle ops
    - xapi_stdext_unix/test: Fix intermittent systemd cram test failure
    - Fix a build warning with GCC 12.3.0
    - Remove use of deprecated syslog Standard* type
    - CA-400860: rrdp-netdev - drop xenctrl, use xenstore to get UUIDs from domids instead
    - CP-51870: Delegate restarting systemd services order to systemd
    - CP-51938: Generate XML alert for cluster health
    - CP-50546: Remove initscripts family
    - Remove notion of weird string from sexpr library
    - CA-399396: Adjust the jemalloc parameters for memory performance
    - CP-52039: Drop Semaphore from Xapi_stdext_threads
    - CA-400560: Fix version segment division error
    - Do not include xapi-clusterd.service in toolstack.target
    - CA-401324: Update pvsproxy socket location
    - CA-400560: Support tilde in RPM version/release comparison
    - CA-401404: Only check previous active service status
    - CA-401242: avoid long-running, idle connections on VDI.pool_migrate
    - xapi_vdi: replaces nested if-elses with monadic Result
    - datamodel: Add all VDI operations to the SR operations variant
    - CA-401498: Fix test_systemd occasional timeout
    - CA-399629: make daily-license-check aware of never
    - license_check: clean up interface
    - license_check: update the concept of "never"
    - daily_license_check: Do not use floats for handling time
    - CA-400060: Introduce new field for sm class
    - CA-400060: Sm feature intersection
    - CA-400060: Reject pool join if sm features mismatch
    - Document Rbac module
    
    * Tue Oct 29 2024 Christian Lindig <christian.lindig@cloud.com> - 24.36.0-1
    - CA-400559: API Error too_many_groups is not in go SDK
    - chore: annotate types for non-returning functions
    - CA-400199: open /dev/urandom on first use
    
    * Wed Oct 23 2024 Christian Lindig <christian.lindig@cloud.com> - 24.35.0-1
    - CA-398341: Populate fingerprints of CA certificates on startup
    - CP-51527: Add --force option to pool-uninstall-ca-certificate
    - CA-400924 - networkd: Add bonds to `devs` in network_monitor_thread
    
    * Mon Oct 21 2024 Christian Lindig <christian.lindig@cloud.com> - 24.34.0-1
    - fix(test): avoid running XAPI hooks in unit tests
    - IH-715 - rrdp-netdev: Remove double (de)serialization
    - fixup! IH-715 - rrdp-netdev: Remove double (de)serialization
    - chore: update datamodel versions
    - IH-577 Implement v7 UUID generation
    - Update wire-protocol.md to have working Python3 code examples
    - Added WLB_VM_RELOCATION to the list of recognized messages.
    - Python command correction.
    - Remove unused Http_svr.Chunked module
    - chore: Fix some grammatical errors in cluster alerts
    - buf_io: remove unused function input_line
    - Access pvsproxy via a socket in /run
    - http-svr: change request_of_bio(_exn) to read_request(_exn)
    - xmlrpc_client: remove us of Buf_io
    - http-svr: remove read from Buf_io in read_body
    - xapi_http: unify cases in add_handler
    - Remove BufIO HTTP handler type completely
    - Remove now-unused Buf_io and associated tests
    - CA-400860: make CPU and netdev RRDD plugins pick up changes in domains
    - CP-51683: Make Cluster_health non-exp feature
    
    * Mon Oct 14 2024 Christian Lindig <christian.lindig@cloud.com> - 24.33.0-1
    - CA-392674: nbd_client_manager retry connect on nbd device busy
    - http-lib: add backtrace to logs on connection without response
    - http-lib: convert bash script to cram tests
    - http-lib: prepare test client for more commands
    - http-libs: add test about error logging
    - http-lib: use let@ for perf testing of the client
    - http-lib: make perf shorter
    - CA-399256: Ensure AD domain name check is case insensitive
    - Replace fold with of_list in rbac
    - maintenance: write interface files for vhd-tool
    - maintenance: add interface to vhd-tool's Chunked
    - maintenance: remove data from chd-tool's chunked datastructure
    - Revert "CP-48676: Don't check resuable pool session validity by default"
    - Revert "CP-48676: Reuse pool sessions on slave logins."
    - maintenance: remove unused code from stream_vdi
    
    * Thu Oct 10 2024 Christian Lindig <christian.lindig@cloud.com> - 24.32.0-1
    - xapi-stdect-unix: catch exceptions when testing the server
    - CP-51714: Remove noisy xenopsd debug logs
    - maintenance: avoid deprecated bindings in uuidm 0.9.9
    - ezxenstore: avoid copies when converting to and from uuids
    - CP-50603: Replace `c_rehash` with `openssl rehash` sub command
    - CA-400124: rrd: Serialize transform parameter for data sources
    - CA-400124 - rrdd: only serialize transform when it's not default
    - XSI-1722 fix timer for host heartbeat
    
    * Fri Oct 04 2024 Christian Lindig <christian.lindig@citrix.com> - 24.31.0-1
    - message-switch: remove dependency on async binaries
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 24.30.0-1
    
    - CP-32622, CP-51483: Switch to epoll
    - CA-399187: Allow gencert to be called without groupid
    - Date: Accept all valid timezones from client, allow sub-second precision
    - CP-50614: Tracing, optimize and reduce overhead
    - xe autocompletion: Fix prefix escaping bug
    - Fix network reset script in static IPv6
    - CA-398128: Be wary that dates in database lose precision
    - Don't use dhcp4 for none mode
    - CA-398138: Handle enum value unknown error for Go SDK
    
    * Mon Sep 16 2024 Christian Lindig <christian.lindig@citrix.com> - 24.29.0-1
    - Use templates to generate `Types.java`
    - Use templates to generate Java classes
    - CP-38343: xenopsd: GC and memory RRD stats
    - CP-38343: use sscanf to parse /proc
    - CA-396743: log non managed devices in PIF.scan
    - CA-396743: make Network.managed reflect PIF.managed
    - CA-396743: forbid setting NBD purpose on unmanaged networks
    - CA-396743: fix bridge name for unmanaged devices
    - Extend Java deserialization support for xen-api dates
    - Minor doc corrections.
    - Removed entries that don't correspond to API messages. Removed obsolete parsing for CSLG failures.
    - C SDK: curl flags are not needed since the SDK does not depend on curl.
    - Expand Go deserialization support for xen-api dates
    - Expand C# deserialization support for xen-api dates
    - Expand C deserialization support for xen-api dates
    - Split generation of Types.java into separate functions
    - Split generation of classes into separate functions
    - CA-397788: Execute pre shutdown hook for xapi
    - Add sr to the Sr_unhealthy error constructor
    - Add more description on sr health
    - CP-49448: Add handling logic for SR health state
    - CP-51352: Compare before setting a new value in `last_active`
    - CP-51352: Configurable threshold for updating `last_active`
    - Add Java SDK to SDK actions
    - Fix syntax in CustomDateDeserializer.java
    - CP-47509: Revisited the setting of response headers to avoid errors when multiple threads use the same session object.
    - CA-397599 XSI-1704 implement setter for blocked ops manually
    
    * Tue Sep 10 2024 Christian Lindig <christian.lindig@citrix.com> - 24.28.0-1
    - Update record_util tests to the current state
    - IH-689: Include auto-generated record_util
    - Introduce mli for xapi_clustering
    - Make Daemon.enabled as an Atomic.t
    - CA-398438: Signal exit to the watcher thread
    - Remove the condition check for Daemon.enabled
    - fix(CI): feature/py3 has been merged, refer to master now
    - fix(WLS): disable non-root unit test
    - Update the docs for Volume.compose
    - CP-51042: Introduce new SR.scan2 for SMAPI{v1,v2,v3}
    - Replace Xapi_sr.scan with Xapi_sr.scan2
    - CP-50422: Destroy authentication cache in disable_external_auth
    - CP-32625: xenops-cli - replace handwritten JSON prettifier with yojson
    - IH-666: Report guest AD domain name and host name in the API
    - CP-47617: Expose backwards compat info to update packaging tooling
    - CP-46933: Expose XAPI API version in the output of HTTP API /updates
    - [maintenance]: mark data only dirs as such
    - [maintenance] disable preprocessor for modules that do not need them
    - [maintenance] only copy test_data when running tests
    - [maintenance]: reduce run count for test_timer
    - [maintenance]: speed up device_number_test
    - [maintenance]: reduce iteration count for unixext_test
    - [maintenance]: speed up vhd tests
    - [maintenance]: reduce sleeps in concur-rpc-test.sh
    - [maintenance]: vhd_format_lwt_test: speed up by using Cstruct.compare
    
    * Wed Sep 04 2024 Christian Lindig <christian.lindig@citrix.com> - 24.27.0-1
    - CA-390883 CP-46112 CP-47334 CP-47555 CP-47653 CP-47869 CP-47935 CP-48466
    - CP-49148 CP-49896 CP-49900 CP-49901 CP-49902 CP-49903 CP-49904 CP-49906
    - CP-49907 CP-49909 CP-49910 CP-49911 CP-49912 CP-49913 CP-49914 CP-49915
    - CP-49916 CP-49918 CP-49919 CP-49920 CP-49921 CP-49922 CP-49923 CP-49925
    - CP-49926 CP-49927 CP-49928 CP-49930 CP-49931 CP-49934 CP-49975 CP-50091
    - CP-50099 CP-50100 CP-50172
    - Move Pyhton code to Python 3
    - CP-51278: define import_activate datapath operation
    - Fixup link.
    - Update VM failover planning document.
    - xe autocompletion: Only show required/optional prefixes when parameter name is
    - xe autocompletion: Exclude previously entered parameters before deciding
    
    * Thu Aug 29 2024 Christian Lindig <christian.lindig@citrix.com> - 24.26.0-1
    - quicktest: disable open 1024 fds on startup for now
    
    * Thu Aug 29 2024 Christian Lindig <christian.lindig@citrix.com> - 24.25.0-1
    - Quicktest: actually run the quickcheck tests too
    - xapi-fd-test: fix compatibility with old losetup
    - xapi-fd-test: fix BLK tests
    - xapi-fd-test: fix BLK EBADF
    - Quicktest: add unixext_test
    - xapi_fd_test: introduce testable_file_kind
    - xapi-fd-test: introduce with kind list
    - xapi-fd-test: introduce testable_file_kinds
    - xapi-fd-test: generate inputs for select
    - unixext_test: add test for select
    - CP-32622: introduce select-as-epoll in Unixext
    - xapi-fd-test: switch to testing Unixext.select
    - CP-32622: Thread.wait_timed_read/wait_timed_write
    - xenctrlext: remove xenforeignmemory module
    - IH-676: improve xe autocompletion
    - Allow xapi_globs specifications with descriptions
    - CP-50053: Add authentication cache
    - Cache external authentication results
    - Add feature flag to block starting VMs
    - Add feature flag to block starting VM appliances
    - Update datamodel lifecycle
    - http-lib: log reason that causes lack of response
    
    * Thu Aug 22 2024 Christian Lindig <christian.lindig@citrix.com> - 24.24.0-1
    - Add temporary exception for deprecation of `xmlStringDecodeEntities`
    - new-docs: Toggle hidden documentation only on header clicks
    - Revert "CP-51042: Raise error in sr-scan when SR.stat finds an unhealthy SR"
    
    * Tue Aug 20 2024 Christian Lindig <christian.lindig@citrix.com> - 24.23.0-1
    - CP-49212: Update datamodel for non-CDN update
    - CP-49212: Add UT for update datamodel for non-CDN update
    - CP-49213: Add new tar unpacking module
    - CP-49213: UT for add new tar unpacking module
    - CP-49214: Upload and sync bundle file
    - CP-49214: Allowed operations for sync bundle
    - CP-49214: UT for upload and sync bundle file
    - CP-49214: Refactor cli_operations
    - CP-49526: Resolve non-CDN design comments
    - CA-396540: Add API error for bundle syncing failure
    - CP-49217: Update datamodel_lifecycle
    - CP-49217: Update schem in Cli_operations.pool_sync_bundle
    - CP-49217: Bump up schema vsn
    - CP-51042: Raise error in sr-scan when SR.stat finds an unhealthy SR
    - CP-49217: Refine test_tar_ext and add copyright
    
    * Thu Aug 15 2024 Ming Lu <ming.lu@cloud.com> - 24.22.0-1
    - IH-662 - helpers.ml: Move to a threadsafe Re.Pcre instead of Re.Str
    - CP-50181: Percent decode all Uri paths before using them
    - clock: use external qcheck-alcotest
    - CP-50448: move quickcheck tests into internal libraries
    - Catch system exit in observer.py to close gracefully
    - CP-49876: Create spans for observer.py itself
    - CP-50121: Remove bc package from XS9 dom0
    - dune: declare stresstests dependencies
    - Update qcheck-alcotest dependencies
    - docs: add design documents for certificate-related features
    - CA-396479: Use default value for unknown enums in Java
    - Default to "UNRECOGNIZED" when using `toString()` of Type enums
    - xapi-idl: Delete String.{explode,implode} functions
    - xapi-idl: do not use custom operators for bit manipulations
    - xapi-idl: Refactor out find_index and add it to Listext
    - CP-50426: Add tracing to external auth functions
    - ci: use the names of binaries, not libraries in stresstests
    - CA-395789: Add polling to cluster health state update
    - ci: Avoid breaking through the opam sandbox in tests
    - ci: use ocaml-setup v3
    - ci: Do not spend time pinning packages
    - CA-389345: fix incorrect data type in python3
    - CP-50444: Intrument `http_svr`
    - CI: use ubuntu-22.04 for SDK too
    - CI: avoid mixing caches from different OSes
    - openvswitch-config-update: fix python2ism in python3
    - CA-396635: Wait for corosync to update its info
    - CP-50518: Add stub for crypt_r to ocaml/auth
    - CP-50444: Intrument `request_of_bio`
    - tracing: fix `make check` warnings
    - tracing: increase the default maximum number of spans in a trace
    - CP-50444: Add specialized function for tracing http requests to `Http.Request`
    - Output if parameter is required in JSON backend
    - Python SDK: Move "Packaging" section out of the public docs
    - Allow remediation commits for DCO
    - CI: fix spurious failure on busy system
    - CA-397171: Replace libjemalloc.so.1 with libjemalloc.so.2
    - CA-392685: Replace /tmp/network-reset  with /var/tmp/network-reset to persist tmp file after reboot
    - Retroactively sign off 8337fa94b76097428621d1e1987
    - CA-396751: write updated RRDD data before headers
    - CA-397268: vbd.create failed: The device name is invalid
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 24.21.0-1
    - Improve build and test times
    - maintenance: delete unused fields
    - xapi: update mirage-crypto version
    - mirage-rng: Initialize it only in tests and selfcert
    
    * Thu Jul 25 2024 Ming Lu <ming.lu@cloud.com> - 24.20.0-2
    - Bump release and rebuild
    
    * Wed Jul 24 2024 Ming Lu <ming.lu@cloud.com> - 24.20.0-1
    - xe-xentrace: fix binary location
    - scripts/xentrace: detect host CPU spikes and dump xentrace
    - CA_388624: fix(C SDK): fix build failure with recent GCC
    - build: add sdk-build-c Makefile rule to test building C SDK locally
    - gen_api: generate an all_<enum> for enum types
    - fix(Host.set_numa_affinity_policy): be consistent about accepting mixed case
    - test(record_util): make a copy to test for backwards compatibility
    - test(record_util): add tests for all enums
    - redo_log: report redo log as broken if we cannot find the block device
    - CA-389506: fix platform:nested_virt typo
    - CA-389241: import-update-key compatible with xs8 and xs9
    - CA-381119: use JsonRPC V2 for error replies
    - CP-46944: Update yum plugins to dnf plugins (#5526)
    - Routine feature branch sync (#5531)
    - XenAPI.py: use correct type for 'verbose' and 'allow_none' with Python3
    - XenAPI: suppress pytype false positives
    - remove XenAPI.py from pytype expected to fail list
    - CP-48623: use persistent unix socket connection for SM to XAPI communication
    - CP-48623: avoid querying the API version, it is not used
    - CP-48623: avoid 4 additional API calls after each SM login
    - CP-45921: Use dnf as package manager for XS9 (#5534)
    - CP-48221: Support new gpg for XS9 (#5543)
    - [maintenance]: disable implicit transitive deps
    - fix(dune): avoid "module unavailable" errors when running dune build @check
    - CP-47001: [xapi-fdcaps]: dune plumbing for new library
    - CP-47001: [xapi-fd-test]: dune plumbing for a new test framework
    - CP-47001: [xapi-fdcaps]: add -principal flag
    - CP-47001: [xapi-fdcaps]: optional coverage support
    - CP-47001: [xapi-fdcaps]: add properties module and tests
    - CP-47001: [xapi-fdcaps]: add operations module and tests
    - CP-47001: [xapi-fdcaps]: wrap more Unix operations
    - CP-47001: [xapi-fdcaps] runtime tests for read-write properties
    - CP-47001: [xapi-fdcaps-test]: add observations module
    - CP-47001: [xapi-fdcaps-test]: add generate module
    - CP-47001: [unixext-test]: add quickcheck-style test
    - CP-47001: Add unit tests for threadext
    - CP-47001: [unixext-test]: add test for Unixext.proxy
    - Unix.time_limited_write: fix timeout behaviour on >64KiB writes/reads
    - Unix.time_limited_{read,write}: replace select with Polly
    - add Unixext.time_limited_single_read
    - CP-32622: replace select with Thread.delay
    - CP-32622: Delay: replace select with time_limited_read
    - CP-32622: replace select in proxy with polly
    - CP-32622: move new libraries to proper subdir
    - Update update.precheck/apply to be compatible with yum and dnf (#5564)
    - IH-543: Add IPMI DCMI based power reading rrdd plugin
    - CP-32622: Use Unix.sleepf for sleeps instead of select
    - CP-47536: drop Unix.select in newcli
    - CP-47536: test for Buf_io timeouts
    - [maintenance]: quicktest: add the ability to run without XAPI
    - CP-47536: add ezxenstore quicktest
    - master_connection: log why we failed to connect
    - xapi.conf: introduce test_open
    - xapi_main: enable backtraces earlier to get backtraces from early startup failures
    - fix(XenAPI.py): fix pylint warning
    - CA-394343: After clock jump the xapi assumed the host is HOST_OFFLINE
    - IH-642 Restructure xs-trace to use Cmdliner
    - Refactor watcher creation code
    - Only create watcher once
    - Refactor cluster change watcher interval
    - Add new internal API cstack_sync
    - CP-394109: Alert only once for cluster host leave/join
    - Feature flag the cstack_sync call
    - CP-50193: Update new fingerprint fields on DB upgrade
    - CP-50108: Use Ipaddr instead of string-based CIDR handling
    - Fix pytype warnings.
    - dune: fix tests to packages
    - CP-50259 simplify raising error in record_util
    - Refactor to use List apis
    - Add new check for new parameters' default value
    - Refactored HTTP_actions template.
    - CP-50259 simplify parsing size with kib, mib, etc suffix
    - Update datamodel lifecycle
    - xapi-cli-server: simplifications around error handling
    - xapi-cli-server: remove function s2sm to serialize data
    - xapi-cli-server: remove function s2brm to serialize data
    - CP-49101: Fix pylint error
    - CA-395626: Fix (server status report generation report)
    - CP-50078: Instrument xapi-storage-script with tracing (#5808)
    - context: `complete_tracing` should be called last
    - context: catch error inside span
    - tracing: Instrument task related functionality
    - time: use `Date.now` over `Unix.time` in `taskHelper.ml`
    - formatting: Use `let@` and `match` statements.
    - CA-395626: Add a unit test to detect incorrect cookie parsing
    - quicktest: associate unit-test with xapi package
    - CP-50270: Set the correct parent in `make_connection`
    - gen_empty_custom: avoid wildcards for actions
    - CA-390277: Add API to fetch references matching a query
    - xapi-cli-server: use helper remote in migrate function
    - CA-390277: Reduce record usage on CLI cross-pool migrations
    - Refactor: Move to default optional parameters when they were reimplemented by hand
    - Moved PS destructors to a template.
    - Add -run-only and -list-tests parameters to quicktests
    - CP-50079: Add correct cookie parsing alongside the old style
    - CP-50079: Expands http quicktests to also check parsing of cookies.
    - CP-50079: Remove legacy sync_config_files interface
    - CP-50079: Remove unused unixpwd function and its associated tests
    - quality-gate: fix list.hd
    - CP-49811: Remove redundant method object from span name
    - CA-395784: fix(xapi-fd-test): do not generate <1us timeouts
    - CA-395784: fix(xapi-fd-test): timeouts get converted to microseconds, must be at least 1
    - CA-395784: fix(buf_io_test): the timeout is per read, not per function call
    - CP-49875: Group the auto_instrumentation spans by module
    - CP-49634: Add alerting for Corosync upgrade
    - CA-395512: process SMAPIv3 API calls concurrently (default off)
    - vhd-tool, xen-api-client: Remove duplicated cohttp_unbuffered_io module
    - vhd-tool, ezxenstore: Remove duplicate xenstore module
    - Fix Short/Long duration printing
    - forkexecd: do not clip commandline in logs
    - CA-395174: Try to unarchive VM's metrics when they aren't running
    - rrdd_proxy: Change *_at to specify the IP address
    - rrdd_proxy: Use Option to encode where VMs might be available at
    - http-lib: avoid double-queries to the radix tree
    - rrdd_proxy: Return 400 on bad vm request
    - CA-394148: Fix dry-run handling in xe-restore-metadata
    - CA-393578: Fix vbd cleanup in metadata scripts
    - CA-383491: [Security fix] Use debugfs on xe-restore-metadata probes
    - Updates to Portable SR Functionality
    - Fixes for shellcheck
    - Remove unused `yes` parameter in xe-backup-metadata
    - Remove ineffectual parameter wiping (#5868)
    - CP-47536: Drop posix_channel and channel_helper: unused and a mix of Unix/Lwt
    - opam: dunify vhd-tool's metadata
    - CP-47536: replace Protocol_unix.scheduler.Delay with Threadext.Delay
    - fix(xapi-idl): replace PipeDelay with Delay, avoid another Thread.wait_timed_read
    - opam: dunify message-switch-unix's metadata
    - IH-507: xapi_xenops: raise an error when the kernel isn't allowed
    - IH-507: Do not allow guest kernels in /boot/
    
    * Tue Jul 16 2024 Ming Lu <ming.lu@cloud.com> - 24.19.2-1
    - CA-395626: Fix (server status report generation report)


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 24.39.1-1.3
changelog:
  - Check that there are no changes during SR.scan
  - Improve the scan comparison logic
  - Add CAS style check for SR scan


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 25.6.0-1.1
changelog:
  - Update to upstream 25.6.0-1
  - Regenerate and rename patches with git format-patch
  - Rename xapi-24.11.0-update-xapi-conf.XCP-ng.patch to 0001-xcp-ng-configure-xapi.conf-to-meet-our-needs.patch
  - Rename xenopsd-22.20.0-use-xcp-clipboardd.XCP-ng.patch to 0002-xcp-ng-renamed-xs-clipboardd-to-xcp-clipboardd.patch
  - Rename xen-api-24.39.1-test-disable-cancellable-sleep.patch to 0003-xcp-ng-disable-cancellable-sleep.patch
  - Rename xen-api-24.39.1-debug-traces-for-is_component_enabled.patch to 0004-xcp-ng-add-debug-info-in-observer.patch
  - Rename xapi-24.19.2-fix-ipv6-import.XCP-ng.patch to 0005-xcp-ng-fix-IPv6-import.patch
  - Rename xapi-24.39.0-open-openflow-port.XCP-ng.patch to 0006-xcp-ng-open-close-openflow-port.patch
  - Rename xapi-24.39.0-update-db-tunnel-protocol-from-other_config.XCP-ng.patch to
    0007-xcp-ng-update-db-tunnel-protocol-from-other-config.patch
  - Add 0008-CA-408126-rrd-Do-not-lose-ds_min-max-when-adding-to-.patch
  - Add 0009-CA-408126-follow-up-Fix-negative-ds_min-and-RRD-valu.patch
  - Add 0010-CA-408841-rrd-don-t-update-rrds-when-ds_update-is-ca.patch
  - Rename 0003-Check-that-there-are-no-changes-during-SR.scan.patch to
    0011-Check-that-there-are-no-changes-during-SR.scan.patch
  - Drop xen-api-24.39.1-0001-CA-399669-Do-not-exit-with-error-when-IPMI-readings-.patch, merged upstream
  - Drop xen-api-24.39.1-0002-rrdp-dcmi-remove-extraneous-I-argument-from-cli-call.patch, merged upstream
  - Drop xen-api-24.39.1-0003-CA-399669-Detect-a-reason-for-IPMI-readings-being-un.patch, merged upstream
  - Drop 0001-CA-399757-Add-CAS-style-check-for-SR-scan.patch, merged upstream
  - Drop 0002-Improve-the-scan-comparison-logic.patch, merged upstream
  - *** Upstream changelog ***
    * Mon Feb 10 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.6.0-1
    - CP-52114: Add pool.license_server for pool level licensing
    - CP-52116: Support pool level licensing data in Host.apply_edition
    - CP-51209: add hooks lock_acquired/released for bpftrace
    - Hugo docs update
    - CA-405628: unmount/detach PVS cache VDI before destroying
    - xenopsd tests: split suite into 3 executables
    - CP-53335, topology: do not raise exception when loading invalid distance matrices
    - test_topology: reorganise test cases
    - Fix CI: Re-enable running shellcheck even when only docs changed
    - CP-49141: Mark the DB lock as high priority: try to avoid voluntary Thread.yield while we hold it
    - CP-49140: prepare for database optimizations
    - Document Xapi's auto-generated modules
    - CA-405754: Update xapi-storage-script state.db
    - Add Pool_role.is_master benchmarks
    - Optimize fastpath in Pool_role
    - CA-405971: avoid calling DB functions when in emergency mode
    * Mon Feb 03 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.5.0-1
    - CP-49158: [prep] Add Task completion latency benchmark
    - CP-51690: [prep] Xapi_periodic_scheduler: Factor out Delay.wait call
    - CP-51690: [bugfix] Xapi_periodic_scheduler: avoid 10s sleep on empty queue
    - CP-51693: feat(use-xmlrpc): [perf] use JSONRPC instead of XMLRPC for internal communication
    - CP-51701: [perf] Xapi_event: do not convert to lowercase if already lowercase
    - CP-51701: [perf] Xapi_event: drop duplicate lowercase_ascii
    - CP-51701: [perf] Xapi_events: replace List.any+map with List.exists
    - CP-49064:`Tgroup` library
    - CP-51493: Add `set_cgroup`
    - CP-51488: Set `tgroup` based on request header.
    - CP-49064: Init cgroups at xapi startup
    - CP-50537: Always reset `_extra_headers` when making a connection.
    - CP-50537: Propagate originator as a http request header
    - CP-51489: Classify threads based on http requests.
    - CP-50537: Add a guard in `xapi_globs`, `Xapi_globs.tgroups_enabled`.
    - CP-51692: feat(use-event-next): introduce use-event-next configuration flag
    - CP-52625: workaround Rpc.Int32 parsing bug
    - CP-51692: feat(use-event-next): cli_util: use Event.from instead of Event.next
    - CP-51692: feat(use-event-next): xe event-wait: use Event.from instead of Event.next
    - CA-401651: stunnel_cache: run the cache expiry code periodically
    - CA-401652: stunnel_cache: set stunnel size limit based on host role
    - CA-388210: rename vm' to vm
    - CA-388210: drop unused domain parameter
    - CA-388210: factor out computing the domain parameter
    - CA-388210: SMAPIv3 concurrency safety: send the (unique) datapath argument as domain for Dom0
    - CA-388210: SMAPIv3 debugging: log PID
    - CP-52707: Improve Event.from/next API documentation
    - CA-388210: SMAPIv3 concurrency: turn on concurrent operations by default
    - CA-388210: delete comment about deadlock bug, they are fixed
    - CA-388564: move qemu-dm to vm.slice
    - CP-52821: Xapi_periodic_scheduler: introduce add_to_queue_span
    - CP-52821: Xapi_event: use Clock.Timer instead of gettimeofday
    - CP-52821: xapi_periodic_scheduler: use Mtime.span instead of Mtime.t
    - CP-49158: [prep] batching: add a helper for recursive, batched calls like Event.{from,next}
    - CP-49158: [prep] Event.from: replace recursion with Batching.with_recursive
    - CP-51692: Event.next: use same batching as Event.from
    - CP-49158: [prep] Event.{from,next}: make delays configurable and prepare for task specific delays
    - CP-49158: Event.next is deprecated: increase delays
    - CP-49158: Use exponential backoff for delay between recursive calls
    - CP-49158: Throttle: add Thread.yield
    - CP-49141: add OCaml timeslice setter
    - CP-52709: add timeslice configuration to all services
    - CP-52709: add simple measurement code
    - CP-52709: recommended measurement
    - CP-52709: Enable timeslice setting during unit tests by default
    - CP-52320: Improve xapi thread classification
    - CP-52320 & CP-52795: Add unit tests for tgroup library
    - CP-52320 & CP-52743: Classify xapi threads.
    - CP-51692: Do not enable Event.next ratelimiting if Event.next is still used internally
    - CA-399669: Do not exit with error when IPMI readings aren't available
    - rrdp-dcmi: remove extraneous -I argument from cli calls
    - CA-399669: Detect a reason for IPMI readings being unavailable
    - xcp-rrdd: Make parsing of cmd's output more robust
    - CA-405593: Normalise API-installed host certificates
    - Refactor xapi-storage-script to use modules
    * Wed Jan 29 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.4.0-1
    - docs: Update doc/README.md and Hugo Relearn (to 5.23.0 for now)
    - CA-403759: Initialise licensing after no-other-masters check
    - CA-400272: pool.set_igmp_snooping_enabled: ignore non-managed PIFs
    - Revert "CP-45016: Clean up the source VM earlier"
    - CA-405502: Change post_detach to post_deactivate
    * Mon Jan 27 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.3.0-1
    - CA-403634: Corrected error text (this error can be issued for other types of devices, not only disks).
    - Removed errors that are not issued by the API.
    - fe_test: add test for syslog feature
    - CA-404591 - rrd: Do not lose precision when converting floats to strings
    - MVD CP-52334 multi-version driver API/CLI
    - Refactor feature processing logic in `Smint`
    - Move `transform_storage_exn` to Storage_utils
    - CP-45016: Add support for specifying nbd export in sparse_dd
    - CP-45016: Implement inbound SXM SMAPIv3 SRs
    - CP-45016: Delay VDI.compose in SXM
    - CA-404693 prohibit selecting driver variant if h/w not present
    - CP-45016: Implement a new nbd proxy handler
    - CP-45016: Clean up the source VM earlier
    - Update XE_SR_ERRORCODES.xml from SM
    - CA-404611: SXM: check power-state just before metadata export
    - CA-404611: live import: only check CPUID if VM is not Halted
    - CA-399260: Keep both new and old certs during the switchover
    - Added preprocessor directive so that the assembly internals are visible to XenServerTest only when specified.
    - Remove dangling use of python-future from rrdd.py
    - opam: add missing dependencies
    - CA-405404: Fix path to dracut
    * Fri Jan 17 2025 Gang Ji <gang.ji@cloud.com> - 25.2.0-1
    - CA-364194: use timespans for script timeouts
    - Remove unused Unixext.Direct module
    - github: update release for ubuntu 24.04
    - github: remove dependency of python wheel's on dune
    - CA-404640 XSI-1781 accept in PEM key/cert in any order
    - CA-404640 XSI-1781 bring back fail-06.pem
    - Log proper names for POSIX signals
    - Debug: add pretty-printing function for signals
    - CA-404597: rrd/lib_test - Verify that RRD handles non-rate data sources correctly
    - CA-404597: rrd - Pass Gauge and Absolute data source values as-is
    * Mon Jan 13 2025 Gang Ji <gang.ji@cloud.com> - 25.1.0-1
    - CA-403620: Drop the usage of fuser in stunnel client proxy
    - CA-403620: Make the stunnel proxy local port configurable
    - Removed deprecated methods.
    - Cmdlet refactoring:
    - CP-53003: Use JsonRpc v1.0 by default and switch to v2.0 once the API version is known.
    - Use Mtime.Span.to_float_ns instead of  Mtime.Span.to_uint64_ns+Int64.to_float
    - CA-404013: do not relock the mutex when backing up rrds
    - database: do not log when a field is dropped when loading from db_xml
    - CA-403700 use iso9660 file system for updates
    - rrd2csv: Accept a trailing comma in metrics names
    - CA-404512: Add feature flag to the new clustering interface
    * Thu Jan 09 2025 Gang Ji <gang.ji@cloud.com> - 25.0.0-1
    - Simplify event generation predicate in Xapi_event
    - Update comment to include implicit invariant
    - IH-747 - xapi/import: Don't lie in VDI import logs
    - IH-747 - database: Add an internal get_by_uuid_opt method
    - IH-747 - xapi/import: Use get_by_uuid_opt to not log backtraces when failure is expected
    - Simplify Eventgen
    - Add eventgen.mli
    - Hide that get_records are stored in a Hashtbl
    - Document eventgen.mli
    - Precompute symmetric closure table
    - CA-402921: Relax VIF constraint for PVS proxy
    - CA-402921: Update PVS-proxy tests
    - CA-402921: Restrict VIF.create
    - CA-402921: Add some unit tests for Xapi_vif_helpers
    - CA-403422: lengthen the timeout for xenopsd's serialized tasks
    - xenopsd: remove unused subtask parameter
    - XSI-1773 improve logging if service file unexpectedly exists
    - XSI-1773 clean up swtpm service files
    - CA-404020: Do not fail when removing a non-existing datasource
    - rrd/lib: remove outdated functions from utils
    - rrdd: add more comments about its datastructures
    - CA-404062: Wrongly restart xapi when receiving HTTP errors
    - CA-404062: Reformat
    - CP-51895: Drop FCoE support when fcoe_driver does not exists
    - Report memory available as Kib
    - xenopsd: Avoid calling to_string every time
    - gencert: name the pem parsers
    - CA-404236, gencert: when parsing pems, ignore data between key and certificates
    - CP-51895: Drop FCoE support when fcoe_driver does not exists
    - CA-403344: Add `db_get_by_uuid_opt` to db_cache*
    - Add unit test to the new `db_get_by_uuid_opt` function
    - Style: Refactor using failwith_fmt
    - CA-404013: replace Thread.delay with Delay module
    * Wed Dec 18 2024 Gang Ji <gang.ji@cloud.com> - 24.40.0-1
    - CP-51694: Add testing of C# date converter
    - CP-51694: Add testing of Java date deserializer
    - rrdd: avoid constructing intermediate lists, use Seq
    - CA-391651 - rrd: Remove deprecated member of rra struct
    - CA-391651: Make timestamps of data collectors in xcp-rrdd independent
    - CA-391651: rrdd_server - read plugins' timestamps, don't just ignore them
    - CA-391651: Propagate the timestamp inside RRD.
    - CA-391651: Rename 'new_domid' parameter to 'new_rrd'
    - CA-391651 - rrd: Carry indices with datasources
    - CA-391651: Use per-datasource last_updated timestamp during updating and archiving
    - CA-391651: rrd - don't iterate over lists needlessly
    - CA-391651: rrdd_monitor - Handle missing datasources by resetting them explicitly
    - CA-391651 - rrd protocol: Stop truncating timestamps to seconds
    - CA-391651 - rrdd.py: Stop truncating timestamps to seconds
    - CA-391651 rrd: Don't truncate timestamps when calculating values
    - CA-391651: Update RRD tests to the new interfaces
    - CA-391651 - docs: Update RRD design pages
    - Increase wait-init-complete timeout
    - CP-51694: Add testing of Go date deserialization
    - Set non-UTC timezone for date time unit test runners
    - Fix parsing of timezone agnostic date strings in Java deserializer
    - Ensure C# date tests work when running under any timezone
    - Minimize xenstore accesses during domid-to-uuid lookups
    - CP-52524 - dbsync_slave: stop calculating boot time ourselves
    - CP-52524: Generate an alert when various host kernel taints are set
    - xenopsd: Optimize lazy evaluation
    - NUMA docs: Fix typos and extend the intro for the best-effort mode
    - CP-51772: Remove traceparent from Http.Request
    - CP-51772: Remove external usage of traceparent
    - CP-51772: Add TraceContext to Tracing
    - CP-51772: Add Http Request Propagator
    - CP-51772: Extract traceparent back out
    - CP-51772: Remove tracing dependency from http-lib
    - CP-51772: Consolidate propagation into tracing lib
    - CP-51772: Repair xapi-cli-server's tracing
    - CP-51772: Repair tracing in xapi
    - Restructuring
    - CP-51772: Forward baggage from xe-cli
    - CP-51772: Propagate trace context through spans
    - Apply fix by psafont: [Xenopsd] chooses NUMA nodes purely based on amount of free memory on the NUMA nodes of the host
    - Apply fix by psafont: "Future XAPI versions may change `default_policy` to mean `best_effort`."
    - xe-cli completion: Use grep -E instead of egrep
    - CA-388210: factor out computing the domain parameter
    - CA-388210: SMAPIv3 concurrency safety: send the (unique) datapath argument as domain for Dom0
    - CA-388210: SMAPIv3 debugging: log PID
    - CA-388210: SMAPIv3 concurrency: turn on concurrent operations by default
    - Improve Delay test
    - CP-42675: add new SM GC message ID
    - CA-403101: Keep host.last_update_hash for host joined a pool
    - xapi_message: Fix incorrect slow path invocation (and its logs)
    - xapi: move the 'periodic' scheduler to xapi-stdext-threads
    - Check index before using it removing an element from Imperative priority queue
    - Fix removing elements from Imperative priority queue
    - Remove possible systematic leak in Imperative priority queue
    - Add test for is_empty for Imperative priority queue
    - Move and improve old test for Imperative priority queue
    - Initialise Imperative priority queue array on creation
    - CA-399757: Add CAS style check for SR scan
    - xapi-stdext-threads: use mtime.clock.os
    - Remove unused ocaml/perftest
    - Remove references to perftest
    - Update quality-gate
    - CA-401075: remove misleading logs from HTTP client
    - CP-52807: No more cluster stack alert
    - Rewrite Delay module
    - CA-394851: Update allowed operations on the cloned VBD
    - CP-51429 Avoid redundant processing when full metadata already exists during sync_updates
    - Delay: wait a bit more testing the module
    - Simple test for periodic scheduler
    - Limit mutex contention in add_to_queue
    - Compare correctly Mtime.t
    - Protect queue with mutex in remove_from_queue
    - Remove signal parameter from add_to_queue
    - Fix multiple issues in periodic scheduler
    - Add test for removing periodic event in periodic scheduler
    - Add test for handling event if queue was empty in periodic scheduler
    - xapi_sr: remove commented code from 2009
    - Add a test to check the loop is woken up adding a new event
    - CA-390025: do not override SR's client-set metadata on update
    - xe-cli completion: Hide COMPREPLY manipulation behind functions
    - Improve the scan comparison logic
    - CA-402901: Update leaked dp to Sr
    - Added manually messages that are not autogenerated.
    - Docs tidy up:
    - Add VM_metrics to metadata export
    - Add VM_metrics to metadata import
    - Cross-pool live migration: move CPU check to the target host
    - CA-380580: cross-pool migration: no CPU checks for halted VMs
    - CA-403633: Keep vPCI devices in the same order
    - CA-403767: verifyPeer can't use root CA for appliance cert check
    * Tue Nov 26 2024 Gang Ji <gang.ji@cloud.com> - 24.39.0-2
    - Bump release and rebuild


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.3-1.6
changelog:
  - When exporting QCOW2-backed VDIs, read headers of the whole snapshot chain
  - Fix duplicated chunks during VM export resulting in an invalid XVA


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.3-1.10
changelog:
  - Fix for expiring sessions breaking long migrations
  - More fixes for XSA-489 (CVE-2026-23562, CVE-2026-42486)


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.4-3.1
changelog:
  - Update to upstream 26.1.4-3
  - *** Upstream changelog ***
    * Wed Apr 29 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.4-3
    - Final security patch from xapi-89

    * Fri Apr 24 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.4-2
    - Security patches from xapi-89

    * Fri Mar 06 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.4-1
    - XSI-2155: keep track of outstanding domain builds in NUMA placement
    - CA-424055: NUMA: avoid using up the entire memory on node0


author: Pau Ruiz Safont <pau.safont@vates.tech> - 26.1.4-3.3
changelog:
  - Foundational changes for having a more efficient and safer VM revert
  - Add dmidecode to xapi-core Requires


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 26.1.11-1.1
changelog:
  - Fix shutdown VMs not being migratable due to errors generated when the VM was running
  - Allow moving VMs back to DHCP from static IP with configure_ipv4/6
  - Update to upstream 26.1.11-1
  - *** Upstream changelog ***
    * Wed Apr 29 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.11-1
    - Remove handling of VBD.other_config:backend-local
    - Do not recognise VM.other_config:is_system_domain
    - Do not recognise {VM;PBD}.other_config:storage_driver_domain
    - CA-426596: Supports SM feature removing
    - Add removed features in debug log
    - xapi_vm: Implement RBAC checking for keys in set_other_config
    - xapi_vm: Implement per-key RBAC checking for VM.platform

    * Tue Apr 21 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.10-1
    - Revert "CA-423816 avoid double counting VM overhead memory"

    * Wed Apr 15 2026 Changlei Li <changlei.li@citrix.com> - 26.1.9-1
    - Revert "log/debug: use Ptime's rfc3339 formatting when logging to stdout"

    * Tue Apr 14 2026 Changlei Li <changlei.li@citrix.com> - 26.1.8-1
    - CP-48452: Session.UserAgent is now an instance property and has a default value.
    - CP-311919: Bumped version of Java SDK dependency. Also bumped Java version to 17 (LTS)
    - CP-311541: Expose the PS cmdlets so that they can be called without importing the module.
    - CA-423202: Xapi can incorrectly expect livepatches for EOL base versions
    - quicktests: Force VDI format on creation
    - Use the latest version of System.Management.Automation (7.4.14).
    - CA-423816 avoid double counting VM overhead memory

    * Tue Mar 31 2026 Changlei Li <changlei.li@cloud.com> - 26.1.7-1
    - CP-311612: skip VDI.other-config test on SMAPIv3+
    - CP-311613: do not attempt to export delta VHD from SMAPIv3
    - Don't deny smartcards in usb-policy.conf

    * Thu Mar 19 2026 Changlei Li <changlei.li@cloud.com> - 26.1.6-1
    - xapi-stdext: add try_map_collect to listext
    - xapi_ha: rework error path for attaching statefile VDIs
    - static_vdis: print both reference and uuid when attaching a VDI
    - xapi/helpers: log error message from launching scripts
    - log/debug: use Ptime's rfc3339 formatting when logging to stdout
    - debug: remove ad-hoc String.split_on_char
    - debug: reformat comment
    - xapi-cli-server: stop using SR records to filter ISO-backed PBDs on cross-pool migration
    - xapi-cli-server: stop using SR records for cross pool migrations
    - xapi-cli-server: print reason for failing to select preferred SR
    - CA-424916 don't exit thread/loop on events error
    - Revert "Rewrite update_vm_links"
    - Revert "Update VDI snapshot and parent links after import"
    - CA-423760: Retain host.last_update_hash on an ejected host
    - CA-423760: Reset host.latest_synced_updates_applied

    * Tue Mar 10 2026 Changlei Li <changlei.li@cloud.com> - 26.1.5-1
    - Add new stunnel configuration for VM import
    - stunnel: add doccoments to the configuration functions
    - Add comment documenting the 'world' stunnel config
    - CP-311125 unhide AD cache pool parameters in XE CLI
    - Log dangling references on import and export
    - github: create releases for tag on the 26.1-lcm branch
    - Update VDI snapshot and parent links after import
    - Rewrite update_vm_links
    - Refresh remote session during long migrations
    - CA-424021: Add GC rule for PCI records
    - Add GC rule for PUSB records
    - Add GC rule for Feature records
    - XSI-2155: keep track of outstanding domain builds in NUMA placement
    - CA-424055: NUMA: avoid using up the entire memory on node0
    - CA-423682: Dead lock on update repository mutex
    - [Backport] Don't block switching to a different edition when HA is enabled
    - CA-424473 Fix OpaqueRef:NULL in vm import
    - xe-reset-networking: allow the user to perform a network reset without renaming the interface


author: Pau Ruiz Safont <pau.safont@vates.tech> - 26.1.3-1.1
changelog:
  - Update to upstream 26.1.3-1
  - Provide configuration for NTP servers, keep the previous servers for now
  - *** Upstream changelog ***
   * Tue Feb 10 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.3-1
   - CA-423708: xapi: Wrap {vhd,qcow}-tool read_header invocation in a thread

   * Fri Feb 06 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.2-1
   - XSI-2128: Ignore RBAC when destroying internal tasks

   * Wed Feb 04 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.1-1
   - lifecycle: refresh with version 26.1.0
   - ci: prepare for lcm status
   - Check that suspend SR has enough space to save VM state
   - CP-311102: Make migration timeouts configurable
   - qcow-stream-tool: Use tail-recursive functions in read_headers
   - Don't depend on LANG for running tests
   - CA-419840 improve logging for VDI.forget
   - CA-419840 mark CD VBD as empty when its VDI is removed
   - CA-422713: XSI-2105: Pool.join failed due to AD status corrupt
   - CA-422713: Reset numbered_release for lcm
   - xapi_sm: remove nested call to serialize function
   - xapi_sm: add interface
   - listext: add better description to set_difference
   - storage_access: split the code off that queries message switch for SMAPIv2 plugins
   - storage_access: share code for unregistering plugins
   - storage_access: avoid the addition of multiple SM with the same type
   - xapi_sm: Don't allow host_pending_features that are empty
   - storage_access: log when there are SM duplicates on startup
   - CA-423369: fix suspend-SR space check

   * Tue Jan 13 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.0-1
   - CP-54217: Add a new pool level field to limit the vnc console access
   - CP-54216: Add a new pool level field to set guest console idle timeout
   - CP-54393: A simple RFB protocol parser for VNC console connections
   - CP-54393: VNC console idle timeout
   - CP-54274: Send a meaningful error message for vnc connection limits
   - CP-310425: Add username in VNC console error messages
   - dune-project: Move vhd-format.opam to be generated by dune, add yojson dependency
   - xapi_vm_migrate: share function to check capabilities
   - xapi_vm_migrate: add capabilities to migration not supported by sr error
   - ocamlformat: avoid bug in newest version of the tool
   - ocaml: format using `make format` with ocamlformat 0.28.1


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 26.1.3-1.4
changelog:
  - Switch to optimized data cluster format for VHD and QCOW,
    reducing memory consumption on QCOW import


author: Pau Ruiz Safont <pau.safont@vates.tech> - 26.0.0-1.1
changelog:
  - qcow-stream-tool: Avoid stack overflows in read_headers
  - Update to upstream 26.0.0-1
  - *** Upstream changelog ***
    * Thu Jan 08 2026 Rob Hoes <rob.hoes@citrix.com> - 26.0.0-1
    - CP-54473 Implement max-state setting
    - Add host.max_cstate and host.set_max_cstate
    - update last_known_schema_hash
    - CP-54471 Add ntp operations
    - CP-54471 Add host.ntp_mode and host.ntp_custom_servers
    - CP-54471 Add host.enable/disable_ntp
    - CP-54471 Add ntp config dbsync
    - CP-308854 Add host.get_ntp_servers_status
    - Update last_known_schema_hash
    - CP-308544 Promote legacy default ntp servers
    - rrdp-dcmi: Detect more errors on discovery
    - [doc] Add host-ntp-time feature doc
    - CP-308545 Add host.timezone
    - Update last_known_schema_hash
    - CP-308856 host.get_ntp_synchronized
    - CP-308855: host.set_servertime
    - CP-54476 Merge ntp disable/enable to ntp mode
    - Use timedatectl to enable/disable ntp
    - Fix `/run/chrony-dhcp` does not exist
    - Update datamodel lifecycle and bump schema
    - CA-420533: Only clear RestartVM guidance on up-to-date hosts
    - qcow-stream-tool: Add read_headers command
    - python3: Use pre-parsed cluster allocation data in qcow2-to-stdout
    - vhd_tool_wrapper: Make vhd_of_device generic
    - qcow_tool_wrapper: Read headers of QCOW2-backed VDIs on export
    - qcow_tool_wrapper: Implement parse_header to determine allocated clusters
    - Update lifecycle
    - opam: add missing dependencies
    - CA-420856: Re-read inventory file when resetting network
    - opam: generate metadata for uuid with dune
    - libs: remove unused type parameters
    - git-blame: ignore another formatting commit
    - sdk-gen: make code compatible with ocaml 5.4
    - CA-421991: Fix QEMU coredumps on XS9
    - CA-421914: preserve Host.numa_affinity_policy across pool join
    - CA-421847: set vcpu affinity if node claim succeeded
    - CA-422071: preserve latest_synced_updates_applied and pending_guidances* across pool join
    - CA-422071: add unit test for Host.create_params
    - XSI-2088: CA-422080: External auth can not support large forest
    - CA-422072 Add new fields to host create params
    - XSI-2088: CA-422080: Code refine for comments
    - ocaml/xapi-idl: change CLI help tests
    - ocaml: prepare formatting for new ocamlformat
    - coverage: remove dependency on bisect_ppx
    - CP-310867 Sort output of diagnostic-timing-stats
    - XSI-2093: CA-422229: Host should not register all IPs to DNS server
    - [doc] Improvements on management of trusted certificates
    - CA-422282 Fix race condition about xenops cache
    - libs: add try_map to listext
    - database: Make a custom exception when fetching of db connections fails
    - ocaml: remove usages of List.hd
    - ocaml/libs: List.last and List.head now return options
    - ocaml: replace List.(hd (rev list)) with List.last
    - ocaml: use new List.head instead of List.nth_opt
    - vhd-tool: Add read_headers command for determining allocated blocks
    - stream_vdi: Factor out send_one into a top-level function
    - xapi_vdi_helpers: Move backing_file_of_device from vhd_tool_wrapper
    - xapi_vdi_helpers: Split backing_file_of_device in two
    - vhd_tool_wrapper: Add parse_header to determine allocated blocks
    - stream_vdi: Only process allocated clusters for VHD and QCOW
    - tapctl: Return Option instead of raising Not_found
    - stream_vdi: Move to using Mtime_clock.counter
    - dune-project: Add yojson as vhd-tool dependency
    - vhd_qcow_parsing: Only use the basename in the with_logfile_fd call
    - CA-422187: fix NUMA on XS8
    - xenops: Fix migrate parameter ordering
    - libs: add Stat module in Unixext to handle special device IDs
    - ocaml: Unify handling of major and minor device IDs
    - vhd_tool_wrapper: generate detailed errors when getting tapctl devices
      
    * Fri Dec 05 2025 Steven Woods <steven.woods@citrix.com> - 25.39.0-1
    - CA-420968: compute the amount of physical cores available on a NUMA node set
    - CA-420968: ensure compatibility between NUMARequest.fits and plan
    - CA-420968: track number of physical cores during a NUMA planning request
    - CA-420968: introduce an explicit name for the current NUMA policy: Prio_mem_only
    - CA-420968: avoid large performance hit on small NUMA nodes
    - [doc] add missing command to xs-trace
    - numa_placement: use Seq instead of List
    - CA-419908: Move module Watcher ahead for future use in module VM
    - s/xe-syslog-reconfigure: Keep disclaimer in remote.conf
    - opam: update metadata
    - ocaml/xapi: remove unused xmlrpc_sexpr module
    - ocaml/libs/http-lib: remove unused mime module
    - ocaml: reduce and guard all users of Pool.get_all |> List.hd
    - CA-419908: Update xenstore watcher to refresh domains when VM is renamed
    - Refactor IntMap to use built-in Int module in Map.Make
    - CP-309847: Make HTTP/80 configurable
    - CP-31566 define xenopsd fast resume operation
    - fixup! CP-31566 define xenopsd fast resume operation
    - increase max supported NVMe request size
    
    * Thu Nov 27 2025 Steven Woods <steven.woods@citrix.com> - 25.38.0-1
    - Refactor: Rename Http.Request.uri -> path
    - RPC: Add "/RPC2" route for the RPC handler
    - Compute PCI device directory only once
    - CA-418993: Enable PCI ROM BAR before attempting to give permissions to the VM
    - [doc] fix typo in command to create new certificates
    - rrdd: Add HTTP paths /host_rrds and /vm_rrds
    - nbd: use URI type for /var/xapi/xapi socket
    - idl: Remove FIXME comment in datamodel_pool
    - CP-49045: add unit test for db_get_by_uuid when a uuid is changed
    - CP-49045: factor out uuid_of_row
    - CP-49045: update UUID index when the uuid is changed
    - CP-49045: optimize database uuid lookup: use index
    - Reuse Filename.concat and // operator
    - quicktest: Add delta tests for VHD data integrity suite
    - Correct parameter description in assert_can_migrate
    - CA-418227: Handle exceptions in At_least_once_more.again
    - CA-418227: Catch exceptions from host.update_allowed_operations
    - CA-418227: Detect rolling upgrade after setting software_version
    - CA-421084: xstringext: Improve performance of escaped
    - xstringext: Test escaped against reference implementation
    - xstringext: Add benchmark for escaped
    - quicktest: Add qcow to VDI integrity tests
    
    * Wed Nov 12 2025 Steven Woods <steven.woods@citrix.com> - 25.37.0-1
    - xapi-stdext: remove unused functions from listext
    - xapi-stdext: consolidate listext's chop tests
    - xapi-stdext: introduce split_at to listext
    - xapi-stdext: replace List's chop with split_at
    - stunnel_cache: remove ad-hoc chop implementation
    - stunnel_cache: use timestamps for cache evictions instead of IDs
    - [perfmon] Fix typo in variable name
    - xapi: remove some usages of common, exception-raising functions
    - xapi-consts: use a variant to reify valid values of cluster stack
    - xapi: open firewall for XHAd only if xHAd is actually selected
    - localdb: expose option-based get functions
    - xapi_ha: avoid raising Not_found when joining a liveset
    - quality-gate: capture more unnecessary List.length cases
    - xapi_ha: add more information to not found errors
    - CA-419238: Remove /etc/dnf/repos.override.d/99-config_manager.repo after using
    - quicktest: reduce indentation in vdi module
    - quicktest: test tags being copied on vdi clone and snapshot
    - xapi_vdi: copy tags on VDI clone and snapshot
    - CP-309791: Update samba to 4.21
    - CP-310555: Rotate machine password through winbind
    - Rename encode_bdf function
    - XSI-2025: Only abort HA host reenable for unpluggable PIFs
    
    * Fri Oct 31 2025 Steven Woods <steven.woods@citrix.com> - 25.36.0-1
    - Move xenopsd's xenctrl_ext to ocaml/libs/
    - Add Makefile for with "format" target
    - Fix front matter for Hugo
    - CA-419227 Add logs for debug
      - CA-419227 Move force_state_reset after refresh_vm
    - docs: add documentation about setting up alarms
    
    * Wed Oct 29 2025 Steven Woods <steven.woods@citrix.com> - 25.35.0-1
    - [doc] Host network device ordering
    - CP-44103: Ordering network devices - IDL changes
    - CP-44103: Ordering network devices - ordering logic
    - CP-44103: Unit tests for ordering network devices
    - CP-54445: Filter out ibft devices which are for boot from iSCSI SAN
    - CP-44106: Update networkd config after sort
    - CP-44106: Do not clear interface_order in networkdb
    - CP-44107: Add Interface.get_interface_positions
    - CP-53614: Update xapi pif introduce
    - CP-53614: Use get_all to get net interfaces
    - CP-53718: Update device name in xapi pif refresh
    - Minor change: correct comments
    - CP-44105: Adjust Net.reset_state for pool.eject_self
    - CP-53719: Update monitor and collecting list for host network devices
    - CP-308116: Write management_address_type to inventory
    - CP-308116: Update hard code eth in network-init
    - CP-54444: Return MAC addresses to host installer
    - Change expect files for networkd command
    - CP-308260: Handle networkd upgrade
    - CP-308260: Generate changed_interfaces list for upgrade
    - CP-308260: Update inventory after upgrade
    - CP-308115 Ensure networkd start after systemd-udev-settle.service
    - Fix review comments
    - CP-54441 Adapt interface ordering in xe-reset-networking
    - Use systemctl to stop xapi service in xe-reset-networking
    - CP-308450 Refine the bridge name converting
    - CP-308450 Use the position in new network name_label
    - CP-54468 Handle USB network devices in network devices sort
    - CA-414651 Fix device rename in PIF after RPU
    - Sync pif.device when its type is vlan or sriov
    - Delete unused function Xapi_pif.refresh
    - Abstract get_pif_position in xapi_pif_helpers
    - Copy bonds from master using pif position
    - Copy network sriovs from master using pif position
    - ocaml/libs: Check if blocks are filled with zeros in vhd_format
    - zerocheck: write a failing test
    - zerocheck: fix check for strings longer than 2 GiBs
    - zerocheck: exposing the length to users is unsafe and not needed
    - datamodel_lifecycle: fix release of functions from #6717
    - Update datamodel_lifecycle
    - CA-418759: Failed to start attach-static-vdis
    - Make CI shellcheck happy
    - unixpwd: putpwent() is GNU extension
    - forkexecd: memcpy() and strcpy() comes from string.h
    - forkexecd: explicitly cast `struct sockaddr_un` to `struct sockaddr`
    - Add numa.md design sketch; new fields to to VM_metrics.
    
    * Wed Oct 22 2025 Steven Woods <steven.woods@citrix.com> - 25.34.0-1
    - CP-308927 Add nr_nodes in host.cpu_info to expose numa nodes count
    - CP-308873 Update software_version to reflect the newly applied livepatch after apply_livepatch
    - CP-308800: Add firewalld control function
    - CP-308800: Dynamic control http firewall service
    - CP-308800: Dynamic control xha firewalld service
    - CP-308800: Dynamic control cluster firewalld service
    - CP-308800: Dynamic control VxLan firewalld service
    - CP-308800: Dynamic control ssh firewalld service
    - CP-308800: Revert https_only sync logic
    - CP-308800: Dynamic control iptables port
    - CP-308859 Track user_agents
    - Add unit test
    - Add host.get_tracked_user_agents
    - CP-308798: Dynamic control NBD firewalld service
    - CP-308873 Parse kernel livepatch list and drop the status
    - CP-308864 Dump the pvs_target_version into VM_guest_metric.service
    - CA-417366 make_xen_livepatch_list can not Parse the Output of xen-livepatch
    - CP-309535: Extract function get_nbd_interfaces
    - CP-309535: Add a function all_service_types
    - CP-309535: Add API update_firewalld_service_status
    - CP-309535: Update firewalld service when start
    - CP-309535: Add CLI host-update-firewalld-service-status
    - CP-309535: Update datamodel_lifecycle
    - CP-309535: Add a service to update firewalld
    - CA-417520: Fix 2 HA firewalld issues
    - CP-47867: Add observer uuid to span attributes
    - More missing unix dependencies
    - CI: Add OCaml 5.3 as experimental build
    - xenopsd/bootloader: No need to create /var/run/xend/boot anymore
    - doc: change outdated information in storage
    - doc: update better VM revert proposal
    - CA-418960: VM with vTPM Delete doesn't remove the snapshot


author: Yanko Kaneti <yaneti@declera.com> - 1.1-5.20130122
changelog:
  - Newer upstream snapshot. Minor upstream rearrangement.
  - Remove checkout script from sources and add to git.
  - Try to actually use the bundled mathml2. Fix warnings.


author: Philippe Coval <philippe.coval@vates.tech> - 3.3.29-10.1
changelog:
  - Remove installed gnutls-dane if no more supported
  - Remove unnecessary removal of non built files
  - Make c++ lib optional (disabled by default)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.25.0-1.1
changelog:
  - Update to 0.25.0-1
  - *** Upstream changelog ***
  - * Thu Aug 31 2023 Rob Hoes <rob.hoes@citrix.com> - 0.25.0-1
  - - Log PID on exit; make message more explicit


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.0.0-4.1
changelog:
  - Sync with 24.0.0-4
  - *** Upstream changelog ***
  - [mostly rebuilds]
  - * Mon Mar 18 2024 Rob Hoes <rob.hoes@citrix.com> - 24.0.0-1
  - - Re-release with new version number consistent with xapi's version scheme


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.1.0-2.1
changelog:
  - Sync with 24.1.0-2
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-2
  - - Bump release and rebuild
  - * Thu May 23 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-1
  - - CP-48969: log only first time that NVML can't be opened
  - - ci: update all actions


author: Philippe Coval <philippe.coval@vates.tech> - 2.06-4.0.5,1
changelog:
  - Rebase on 2.06-4.0.5
  - *** Upstream changelog ***
    * Fri Apr 17 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.06-4.0.5
    - CA-424431: Fix a rare out-of-memory error

    * Thu May 30 2024 Deli Zhang <deli.zhang@cloud.com> - 2.06-4.0.4
    - CP-46111: Remove build require freetype-devel

    * Thu Apr 11 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 2.06-4.0.3
    - CP-47745: compatibilities for XS9, optimize back some code


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.11.2-1.1
changelog:
  - Update to 1.11.2-1
  - *** Upstream changelog ***
  - * Tue Nov 29 2022 Xihuan Yang <xihuan.yang@citrix.com> - 1.11.2-1
  - - CP-39690: Add Ubuntu Jammy 11 (experimental) template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.0-1.1
changelog:
  - Update to 2.0.0-1
  - *** Upstream changelog ***
  - * Thu Jan 19 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-1
  - Switch upstream to GitHub
  - - Build for Python 3 and drop Python 2 support
  - - CP-41654: Check for duplicate uuids and reflabels in templates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Update to 2.0.3-1
  - Remove our Debian 11 template, as upstream's one is not marked experimental anymore
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 2.0.3-1
  - - CP-43952: Remove 32-bit Windows 10
  - * Fri May 05 2023 Xihuan Yang <xihuan.yang@citrix.com> - 2.0.2-1
  - - CP-41630: Support up to 64 vCPUs for HVM guests
  - * Thu Feb 16 2023 Minghui Hu <minghui.hu@citrix.com> - 2.0.1-1
  - - CP-41650: Remove CoreOS templates from Next
  - * Tue Feb 14 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-2
  - - CP-42132: Install Windows 11 template by default


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - Update to 2.0.6-1
  - Remove our Debian 12, RHEL 9, Rocky Linux 9, and Centos Stream 9 templates, now provided upstream
  - *** Upstream changelog ***
  - * Thu Oct 19 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.6-1
  - - CP-44378: Remove 'preview' From Ubuntu 22.04 Guest template
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.5-1
  - - CP-44127: Add New Guest templates Rocky Linux 9, CentOS Stream 9 and Debian 12
  - * Fri Sep 8 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.4-1
  - - CP-44042: Add Red Hat Enterprise Linux 9 (preview) template
  - * Wed Sep 6 2023 Lin Liu<Lin.Liu01@cloud.com> - 2.0.3-2
  - - BuildRequires python-setuptools to support xs9


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.9-1.1
changelog:
  - Sync with 2.0.9-1
  - *** Upstream changelog ***
  - * Tue Feb 13 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.9-1
  - - CP-46356 Remove 'preview' from Windows 11 template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.10-1.1
changelog:
  - Sync with 2.0.10-1
  - *** Upstream changelog ***
  - * Mon Mar 25 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.10-1
  - - CP-47662 Remove deprecated guest templates SUSE Linux 12 SP4 and Ubuntu 18.04
  - - CP-48082 Update Guest Templates to support UEFI Secure boot


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.13-1.1
changelog:
  - Rebase on 2.0.13-1
  - *** Upstream changelog ***
    * Tue Nov 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.13-1
    - CP-50305: Remove '(preview') from Windows Server 2025 template
    * Thu Sep 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.12-1
    - CP-50304 Add Windows Server 2025 preview template
    * Tue Sep 03 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.11-1
    - CP-47949 Add New Guest template Ubuntu 24.04
    - CP-47949 Remove 'preview' label from RHEL9, Rocky9, CentOS Stream 9 and Debian 12


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.14-1.1
changelog:
  - Rebase on 2.0.14-1
  - Add templates for almalinux 10, rocky linux 10, debian 13, oracle linux 10, redhat 10
  - *** Upstream changelog ***
    * Tue Jan 21 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.14-1
    - CP-51980: Add CentOS Stream 10 template
    - CP-51980: Remove 'preview' label from Ubuntu24.04


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 2.0.15-1.1
changelog:
  - Sync with 2.0.15-1
  - Replace rhel-10.json with XenServer's
  - *** Upstream changelog ***
    * Thu Nov 13 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.15-1
    - CP-310014 Support New Guest Template RHEL 10
    - CA-414588 Add the deprecated label for the EOL templates

    * Tue Jan 21 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.14-1
    - CP-51980: Add CentOS Stream 10 template
    - CP-51980: Remove 'preview' label from Ubuntu24.04


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.1-1
changelog:
  - Update to v10.10.19.xcpng.1 release, bringing:
    - #151: Fix UEFI Restore
    * Thu May 23 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.19-1
    - CA-392758: Remove Firmware Boot Selected flag check
    - CP-49195: Allows to preserve first partition from MBR layout
    - CP-49641: Ignore errors mounting/unmounting explicit mount points

    * Thu May 16 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.18-1
    - CA-392935: Release device if partition does not need to be resized
    - CA-392916: Create directory for mount= option

    * Thu May 02 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.17-1
    - Better support for SDX upgrade
    - CA-391659: Set correct partition type restoring XS 7.1
    - CP-47625: Replace mkinitrd with dracut command
    - CA-391027: Mount devices specified by mount= only when needed

    * Wed Feb 28 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 10.10.16-1
    - CA-389160: Filter secrets when logging results/answers during failures


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.2-1
changelog:
  - Update to v10.10.19.xcpng.2 release, bringing:
    - Fix installation of kernel-alt package when in kernel-alt mode


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.3-1
changelog:
  - Update to v10.10.19.xcpng.3 release, bringing:
    - fix usage of driver disks such as intel-igb
    - fix abusive logging at "critical" level


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.19.xcpng.4-1
changelog:
  - Update to v10.10.19.xcpng.4 release, bringing:
    - Preserve stunnel certs
    - Mark 'Dual Stack' as experimental
    - Boot mode checks
    - Misc debugging improvements


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.29.xcpng.1-1
changelog:
  - Update to v10.10.29.xcpng.1 release
  - Reintroduced differently the "Stop messing with depmod" changes from 10.10.5.xcpng.1-1,
    now that a Makefile is used
  - Sync with xenserver 10.10.29-1:
    * Tue Apr 29 2025 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.28-1
    - CA-409996: Fix manual upgrade

    * Mon Apr 07 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 10.10.28-1
    - XSI-1863: Use a disk size of zero if a disk size cannot be determined
    - doc/answerfile: reduce admin-interface confusion
    - Avoid attempting to re-read inventory file from unmounted partition
    - __mkinitrd: pass -f to dracut
    - doc/answerfile: clarify and fix description of --network_device
    - Makefile: give more flexibility to select base multipath.conf
    - CP-47621: Enable ability to set hostname from DHCP

    * Wed Mar 12 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.27-1
    - CA-400058: Revert "Fix preserve-first-partition installation"
    - CA-407867: Add missed "attr" parameter to restore_file()

    * Wed Mar 05 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.26-1
    - CP-50298: Support restoring dir to specified mode and user/group attributes
    - CA-400058: Fix preserve-first-partition installation

    * Fri Dec 06 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.25-1
    - CA-403412: Do not backup GPT layout on temporary directory

    * Thu Nov 28 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.24-1
    - CP-51858: Support upgrades for SDX 8900 platform
    - CP-51857: Support clean install for SDX 8900 platform

    * Mon Jul 22 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.10.23-1
    - CA-395582: Fix installation with multipath enabled

    * Tue Jul 02 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.22-1
    - Use Makefile instead of duplicating code

    * Thu Jun 27 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.21-1
    - CA-392317: Make sure kernel is up to date using Gdisk
    - Handle corrupted GPT data if disk is using MBR

    * Mon Jun 03 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.20-1
    - CA-393429: Fix upgrade to XS8 from downgraded SDX MBR installation


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.29.xcpng.2-1
changelog:
  - Update to v10.10.29.xcpng.2 release:
    - Be aware of LINSTOR being installed and make sure the proper version
      is available in the upgrade
    - Fix upgrade of hosts using static IPv6 for management interface


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.29.xcpng.3-1
changelog:
  - Update to v10.10.29.xcpng.3 release:
    - Don't ask repoquery to check signed repos, it cannot do that


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.38.xcpng.1-1
changelog:
  - Update to v10.10.38.xcpng.1 release:
  - Reimplement XCP-ng RAID1 support in terms of XS implementation
  - Fix installation on a disk that was part of a previous raid1 install
  - Enable debug traces by default
  - Sync with xenserver 10.10.38-1:
    * Wed Feb 4 2026 Chunjie Zhu <chunjie.zhu@citrix.com> - 10.10.38-1
    - CA-423190: rpu revert script calls python3 explicitly
    - CA-421841: Fail explicitly when disk is missing

    * Mon Dec 15 2025 Changlei Li <changlei.li@cloud.com> - 10.10.37-1
    - CA-417495 Clean NTP servers in chrony.conf when disable NTP
    - CA-421646 Recognize NTP none mode before upgrade
    - CA-421979 Fix import error

    * Thu Sep 18 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 10.10.35-1
    - CA-416618: Support degraded SW RAID installations

    * Thu Sep 18 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.34-1
    - CA-416337: Use WWN link for NVMe device

    * Tue Sep 09 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 10.10.33-1
    - CA-416905: Fix upgrade for pre-XS8.4 BIOS hosts

    * Tue Aug 12 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 10.10.32-1
    - upgrade: restore saved firewall-port plugin state
    - upgrade: allow preserving symbolic links
    - Give more explicit message when Yum gets killed
    - CA-409830: Confirm when overwriting an SR
    - Identify all SR types correctly when probing the disk
    - CP-54461: SW RAID restore support
    - Always mount efi/esp during restore
    - CA-400058: Fail if there is no first partition to preserve
    - CP-54459: SW RAID install support
    - CA-410594: Settle udev after eject

    * Mon Jun 09 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.31-1
    - CA-411650: Fix disk partition re bug

    * Fri May 23 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.30-1
    - CA-411085: Fix issue of pv name is device link
    - Enhance tracing to hunt for restore bug
    - disktool: Optionally dump old/new partitions during commit

    * Tue Apr 29 2025 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.29-1
    - CA-409996: Fix manual upgrade


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.38.xcpng.1-1
changelog:
  - Update to v10.10.38.xcpng.1 release:
    - Reimplement XCP-ng RAID1 support in terms of XS implementation
    - Fix installation on a disk that was part of a previous raid1 install
    - Enable debug traces by default
  - Sync with xenserver 10.10.38-1:
    * Wed Feb 4 2026 Chunjie Zhu <chunjie.zhu@citrix.com> - 10.10.38-1
    - CA-423190: rpu revert script calls python3 explicitly
    - CA-421841: Fail explicitly when disk is missing

    * Mon Dec 15 2025 Changlei Li <changlei.li@cloud.com> - 10.10.37-1
    - CA-417495 Clean NTP servers in chrony.conf when disable NTP
    - CA-421646 Recognize NTP none mode before upgrade
    - CA-421979 Fix import error

    * Thu Sep 18 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 10.10.35-1
    - CA-416618: Support degraded SW RAID installations

    * Thu Sep 18 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.34-1
    - CA-416337: Use WWN link for NVMe device

    * Tue Sep 09 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 10.10.33-1
    - CA-416905: Fix upgrade for pre-XS8.4 BIOS hosts

    * Tue Aug 12 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 10.10.32-1
    - upgrade: restore saved firewall-port plugin state
    - upgrade: allow preserving symbolic links
    - Give more explicit message when Yum gets killed
    - CA-409830: Confirm when overwriting an SR
    - Identify all SR types correctly when probing the disk
    - CP-54461: SW RAID restore support
    - Always mount efi/esp during restore
    - CA-400058: Fail if there is no first partition to preserve
    - CP-54459: SW RAID install support
    - CA-410594: Settle udev after eject

    * Mon Jun 09 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.31-1
    - CA-411650: Fix disk partition re bug

    * Fri May 23 2025 Deli Zhang <deli.zhang@cloud.com> - 10.10.30-1
    - CA-411085: Fix issue of pv name is device link
    - Enhance tracing to hunt for restore bug
    - disktool: Optionally dump old/new partitions during commit

    * Tue Apr 29 2025 Frediano Ziglio <frediano.ziglio@cloud.com> - 10.10.29-1
    - CA-409996: Fix manual upgrade


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.38.xcpng.2-1
changelog:
  - Update to v10.10.38.xcpng.2 release:
    - Fix RAID regressions:
      - error on creation when selecting more than 2 disks
      - creation done in degraded mode even when no disk is missing
      - selection of disks for local-SR allowing to select disks used as RAID member
      - cancellation of the RAID selection dialog, or getting back past disk selection,
        not properly falling back non non-RAID


author: Yann Dirson <yann.dirson@vates.tech> - 10.10.38.xcpng.3-1
changelog:
  - Update to v10.10.38.xcpng.3 release:
    - Fix identification of the LINSTOR versions in the repo, when the required one
      is not the most recent one


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.2.0-1
changelog:
  - CA-329206: Get network settings from the correct PIF
  - CP-31507: Add more detailed error codes
  - Pylint cleanup


author: Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.1-1
changelog:
  - CA-392310: Handle LV mount point from URLs
  - Allow specifying fs type in args for upgrade
  - CP-51969: Add support for "platform" argument


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.1.0-1
changelog:
  - HTTP server can reuse binding address now
  - Notify when HTTP server is ready
  - Better error handling and command logs
  - SIGTERM can be safely sent to NBD server


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 1.5.0-1
changelog:
  - Prevent stacktrace during SIGTERM signal and open_device call
  - Robustify nbdkit startup: always wait for sockpath to be created
  - Handle broken pipe errors for python 3
  - Fix nbdkit plugin location for python 3
  - Don't force stdout/stderr flush
  - Fix libs import using underscores instead of dashes


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 2.22.20-6
changelog:
  - CA-386057: Enable legacy-rx by default to resolve performance issue
  - Note: 2.22.20-5 is for Yangtze


author: Gael Duperrey <gduperrey@vates.fr> - 2.22.20-3.1
changelog:
  - initial package, version 2.22.20-3.1
  - Synced from XS driver SRPM intel-i40e-2.22.20-3.xs8~2_1.src.rpm


author: David Morel <david.morel@vates.tech> - 2.26.8-1
changelog:
  - Update from Intel's latest driver 2.26.8
  - NEED_AUX_BUS=2 compiles auxiliary bus code within the driver, but our kernel
    already provides it. This leads to redefinition of AUXILIARY_MODULE_PREFIX,
    so remove it to make the driver compile.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 2.4.5-8.1.1
changelog:
  - Sync with 2.4.5-8.1.1
  - *** Upstream changelog***
    * Fri Apr 10 2026 Stephen Cheng <stephen.cheng@citrix.com> - 2.4.5-8.1
    - CP-312064: Update to version 2.4.5
    * Mon Jul 28 2025 Stephen Cheng <stephen.cheng@cloud.com> - 1.17.2-1
    - CP-308119: (XS8) Update driver to v1.17.2


author: Gael Duperrey <gduperrey@vates.fr> - 1.8.8-1
changelog:
  - initial package, version 1.8.8
  - Synced from XS driver SRPM intel-ice-1.8.8-1.el7.centos.src.rpm
  - change firmware to live in /lib/firmware/override


author: Yann Sionneau <yann.sionneau@vates.tech> - 1.17.2-1
changelog:
  - Update driver to v1.17.2
  - Synced from XS driver SRPM intel-ice-1.17.2-1.xs8.src.rpm
  - NEED_AUX_BUS=2 compiles auxiliary bus code within the driver, but our kernel
    already provides it. This leads to redefinition of AUXILIARY_MODULE_PREFIX,
    so remove it to make the driver compile.


author: Stephen Cheng <stephen.cheng@cloud.com> - Version: 5.10.214-3
changelog:
  - CP-48894: Modify checksum
  - The checksum was wrongly grenerated in the previous commit due to xenpkg upgrade


author: Thierry Escande <thierry.escande@vates.tech> - 5.10.214-3.1
changelog:
  - Obsoletes igc-module RPM
  - Import XCP-ng specific patches from obsolete igc-module RPM
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20240717-1
changelog:
  - Update to IPU 2024.3 release
  - As the archive from XS is missing an update for 06-a5-03 due to Intel
    initially forgetting to release its update, we manually package this file.


author: David Morel <david.morel@vates.tech> - 20250127-1
changelog:
  - Update to publicly released microcode-20250211
  - Security updates for:
      - INTEL-SA-01166
      - INTEL-SA-01213
      - INTEL-SA-01139
      - INTEL-SA-01228
  - Updates for multiple functional issues
  - Upstream update drops files for older Sapphire Rapids steppings, we kept the previous versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250501-1
changelog:
  - Update to publicly released microcode-20250512
  - Security updates for:
      - INTEL-SA-01153
      - INTEL-SA-01244
      - INTEL-SA-01247
      - INTEL-SA-01322
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250715-1
changelog:
  - Update to publicly released microcode-20250812
  - Security updates for:
      - INTEL-SA-01249
      - INTEL-SA-01308
      - INTEL-SA-01310
      - INTEL-SA-01311
      - INTEL-SA-01367
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Gael Duperrey <gduperrey@vates.tech> - 20251029-1
changelog:
  - Update to Intel's publicly released microcode-20251111, based on XenServer's 20251029 release that has the same contents.
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Gael Duperrey <gduperrey@vates.tech> - 20260115-1
changelog:
  - Update to Intel's publicly released microcode-20260210, based on XenServer's 20260115 release that has the same contents.
  - Security updates for:
   - Updated security updates for INTEL-SA-01083 originally published on Aug 13, 2024 INTEL-SA-01083
   - Security updates for INTEL-SA-01396
  - Updates for multiple functional issues


author: Philippe Coval <philippe.coval@vates.tech> - 20260416-1
changelog:
  - Update to Intel's publicly released microcode-20260512, based on XenServer's 20260416 release that has the same contents.
  - Security updates for INTEL-SA-01420
  - Update for multiple functional issues


author: Gael Duperrey <gduperrey@vates.tech> - 20260416-2
changelog:
  - Update to Intel's microcode, based on XenServer's 20260416-2 release.
   - Revert Granite Rapids AP/SP ucode back to IPU 2026.1 to fix a hang on boot on some platforms.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - remove python3 fix that has been upstreamed
  - Sync with 2.0.6-1
  - *** Upstream changelog ***
    * Wed Jul 24 2024 Lin Liu <lin.liu@citrix.com> - 2.0.6-1
    - CA-395874: Some python3 fix


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.22.1
changelog:
  - Update to 4.19.19-8.0.22
  - *** Upstream changelog ***
  - * Fri Dec 09 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.22
  - - Fix booting PVH dom0 with UEFI
  - - Fix nvmefc-boot-connections.service.
  - - CA-364458 / XSA-396: PV frontends vulnerable to attack by backends
  - - CA-368126 / XSA-403: Linux disk/nic frontends data leaks
  - - CA-369758 / XSA-423: Guest triggerable NIC reset/abort/crash via netback
  - - CA-373544 / XSA-424: Guests can trigger deadlock in netback


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.29.1
changelog:
  - Update to 4.19.19-8.0.29
  - *** Upstream changelog ***
  - * Fri Aug 11 2023 Stephen Cheng <stephen.cheng@citrix.com> - 4.19.19-8.0.29
  - - CP-41018: Backport auxiliary bus support
  - * Wed Aug 09 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.28
  - - CP-43107: backport NVMe/FC patches
  - * Mon Jul 31 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.27
  - - CA-379289: Add a fix for XSA-432
  - * Thu Apr 13 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.26
  - - CA-371727: Fix evaluation of _PDC ACPI method on dom0
  - - CA-376418: Backport fixes to XSA-423
  - * Thu Mar 16 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.25
  - - CP-42067: add an ELFNOTE about PV-IOMMU support
  - * Mon Mar 06 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.24
  - - CA-375558: Fix nbd ref counting bug
  - - CA-375244: Ensure DLM reconnects after network outage
  - * Mon Feb 13 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.23
  - - CP-41370: Remove Citrix logo
  - - Strip stale config.ini metadata


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.32.1
changelog:
  - Update to 4.19.19-8.0.32
  - *** Upstream changelog ***
  - * Wed Oct 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.32
  - - CA-384066: fix netback vifs queue length
  - - Declare setup and dependencies for building live patches
  - * Fri Sep 29 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.31
  - - CA-383077 / XSI-1502: Backport SUNRPC-Always-drop-the-XPRT_LOCK-on-XPRT_CLOSE_WAIT
  - - CA-383484: Backport fix for XSA-441
  - * Thu Sep 07 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.30
  - - CA-381221: Make NFS timeouts more consistent


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.33.1
changelog:
  - Sync with 4.19.19-8.0.33
  - *** Upstream changelog ***
  - * Thu Jan 11 2024 Alejandro Vallejo <alejandro.vallejo@cloud.com> - 4.19.19-8.0.33
  - - CA-387401: Fix for XSA-448


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.34.1
changelog:
  - Sync with 4.19.19-8.0.34
  - *** Upstream changelog ***
  - * Thu Feb 29 2024 Chunjie Zhu <chunjie.zhu@cloud.com> - 4.19.19-8.0.34
  - - CA-387199: Fix for XSI-1566


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.36.1
changelog:
  - Sync with 4.19.19-8.0.36
  - *** Upstream changelog ***
  - * Mon Jul 15 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.36
  - - New tag due to a wrong build for 4.19.19-8.0.35
  - * Wed Jul 10 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.35
  - - CA-394994  backport fix agaw for a supported 48 bit guest address width
  - - Make sure the kernel configuration is up to date
  - - CP-40289: kernel-devel: Add a BPF Type Format (BTF) info file for libbpf
  - - CP-48280: Disable Intel Powerclamp driver


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.38.1
changelog:
  - Sync with 4.19.19-8.0.38
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.38
    - CA-401809: DLM failure leaves system unstable fixes
    - CP-49678: Reduce Xen timer tick


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.42.1
changelog:
  - Sync with 4.19.19-8.0.42
  - *** Upstream changelog ***
    * Mon Apr 07 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.42
    - XSI-1728: Avoid repeatedly emitting uevents for LUN changes on CHECK_CONDITION
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.41
    - CP-51825: Add 50G/100G/200G ethtool link modes
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.40
    - None
    * Thu Jan 09 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.39
    - CA-401809: Resolve incorrect coverity warning
    - CA-404447: Improve logging for xhci failures


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.43.1
changelog:
  - Sync with 4.19.19-8.0.43
  - *** Upstream changelog ***
   * Fri Jul 18 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.43
   - CA-412882: Register NVMe ns_id attribute(s) as default sysfs groups
   - CA-360450: Fix deadlock on PCI passthrough


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.19.19-8.0.44.1
changelog:
  - Sync with 4.19.19-8.0.44
  - *** Upstream changelog ***
    * Fri Oct 31 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.44
    - CA-399062: NFS timeout causes potential deadlock
    - CA-419803 / CA-419762: Backport patches to fix NBD disconnect crash


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.45.1
changelog:
  - Sync with 4.19.19-8.0.45
  - Add missing patch for CVE-2020-14314 (use-after-free detected by Syzkaller)
  - *** Upstream changelog ***
    * Fri Feb 27 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.19.19-8.0.45
    - CA-400357: Use the correct MAC for rndis_host interfaces
    - CA-395473: Backport a patch to fix CVE-2020-14314
    - XSI-2150: Remove added chunk causing deadlock


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.46.1
changelog:
  - Sync with 4.19.19-8.0.46
  - SUNRPC: Restore call to cancel_work_sync()
  - *** Upstream changelog ***
    * Thu Mar 19 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.19.19-8.0.46
    - XSI-2150: Avoid deadlocks on NFS spinlocks


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.19.19-8.0.46.5
changelog:
  - Backport for CVE-2026-46300 (Fragnesia), iterative fixes to CVE-2026-43284
  - Backport for CVE-2026-46333 (ssh-key-sign, ptrace_may_dream)
  - Backport for CVE-2026-43494 (pintheft)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.227-4
changelog:
  - Don't provide kernel Provides
  - We don't want kernel-alt to be pulled as build deps instead of main kernel packages


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.316+1-1
changelog:
  - Import kernel source v4.19.316
  - Rebase and rework needed patches from main kernel repo
  - Sync spec file with main kernel repo v4.19.19-8.0.34.1
  - Fix Requires on python3-xcp-libs


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.320+1-1
changelog:
  - Sync spec file with main kernel repo v4.19.19-8.0.36.1
  - Import new patches from main kernel repo (already merged upstream)
  - Update kernel sources to v4.19.320


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.320+1-2
changelog:
  - Disable PERF_EVENTS_INTEL_RAPL and INTEL_POWERCLAMP in kernel config as done
    in the main kernel for performance reasons


author: Thierry Escande <thierry.escande@vates.tech> - 2.0.15-20.1
changelog:
  - Backport patch removing kernel_version(), fixing bug for kernel with
    patchlevel greater than 255


author: Philippe Coval <philippe.coval@vates.tech> - 2.0.15-21.1
changelog:
  - Rebase on 2.0.15-21
  - *** Upstream changelog ***
    * Mon Apr 13 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 2.0.15-21
    CP-312109: Avoid to wait indefinitely for initilisation


author: Philippe Coval <philippe.coval@vates.tech> - 1.15.1-22.1
changelog:
  - Skip keyring tests if keyring blocked by seccomp
  - Add explicit dependency to gcc
  - Make build dependency to latex optionnal
  - Rebuild with openssl-3


author: Petr Menšík <pemensik@redhat.com> - 1.7.0-14
changelog:
  - Add only extra flags to default RPM LDFLAGS
  - Fix multilib conflict of ldns-config (#1463423)
  - Make primary python3 in primary build, python2 in optional


author: Philippe Coval <philippe.coval@vates.tech> 1.7.0-21.1
changelog:
  - Update obsolete %patch macro
  - Reconfigure if patches are touching autotools file
  - Add patch for openssl-3 support
  - Rebuild for openssl-3


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Philippe Coval <philippe.coval@vates.tech> - 2.0.21-4.1
changelog:
  - Rebuild with openssl-compat-10
  - Make openssl optional (enabled by default)
  - Update legacy %patchN syntax for rpmspec
  - Add make and gcc to BuildRequires


author: Daiki Ueno <dueno@redhat.com> - 4.5-1
changelog:
  - Resolves: rhbz#2017352 Rebase libreswan to 4.5
  - Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets


author: Daiki Ueno <dueno@redhat.com> - 4.9-1
changelog:
  - Resolves: rhbz#2128672 Rebase libreswan to 4.9
  - Remove libreswan-4.4-ikev1-disable-diagnostics.patch no longer necessary


author: Sahana Prasad <sahana@redhat.com> - 4.9-2
changelog:
  - Fix CVE-2023-30570 Malicious IKEv1 Aggressive Mode packets can crash libreswan
  - Resolves: rhbz#2187179


author: David Morel <david.morel@vates.tech> - 4.12-2.3.1
changelog:
  - Sync with CentOS 8 Stream version 4.12-2.el8.3
  - Build with GCC 11
  - Include fix for CVE-2024-3652 from Alma 8


author: Andrew Cooper <andrew.cooper3@citrix.com> - 20191203-1
changelog:
  - Change versioning scheme to avoid an arbitrary 0.1.  Use the date of the
    upstream livepatch-build-tools commit.


author: Roger Pau Monné <roger.pau@citrix.com> - 20250121-1
changelog:
  - Fix handling of .cold symbols and related secions.
  - Fix possible segmentation fault when using hook sections.


author: Thierry Escande <thierry.escande@vates.tech> - 5.9_0.5.5.0-3.1
changelog:
  - Sync with 5.9_0.5.5.0-3
  - *** Upstream changelog ***
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 5.9_0.5.5.0-3
    - CP-51825: Enable 50G/100G/200G ethtool link modes for XS8 kernel


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 8.17.1.0.0-1
changelog:
  - Sync to latest available version
  - Drop 0001-bsg-lib-pre-5.0-API.patch, as a compat layer was added with an equivalent change


author: Yann Dirson <yann.dirson@vates.tech> - 6.4-4.20230114
changelog:
  - Restore Fedora changelog and versionning, while keeping other XS-ification
  - XS changelog:
    * Wed Apr 10 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-3
    - CA-391276: Revert previous changes due to regression
    * Wed Mar 13 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-2
    - CA-369899: Update to verion 20240309
    - CA-369899: Use MONOTONIC time instead of REALTIME
    * Tue Jul 11 2023 Tim Smith <tim.smith@citrix.com> - 6.4-1
    - First imported release


author: Yann Dirson <yann.dirson@vates.tech> - 6.4-5.20240309
changelog:
  - sync with XS 6.4-4
  - unlisted XS changes:
    - Upgrade upstream revision to 20240309
    - Build and run a test program to verify there are no conflicts in lib versions
  - XS changelog:
    * Wed Aug 14 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 6.4-4
    - CP-48941: Update ncurses to MONOTONIC


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.1
changelog:
  - Rebase on XS8's 5.7.2-51
  - Undo most changes from snmp.xs.conf, which are related to a proprietary implementation


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.2
changelog:
  - Add net-snmp-5.7.2-no-XENSERVER-MIB.xcp-ng.patch
  - Remove XenServer-specific options from /etc/sysconfig/snmpd


author: Thierry Escande <thierry.escande@vates.tech> - 5.7.2-51.3
changelog:
  - Backport patches for CVE-2022-24805, CVE-2022-24806, CVE-2022-24807,
    CVE-2022-24808, CVE-2022-24809, CVE-2022-24810, and CVE-2022-44793


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-52.1
changelog:
  - Rebase on 5.7.2-52
  - Replace our patch by upstream identical one
  - *** Upstream changelog ***
    * Wed Jul 31 2024 Deli Zhang <deli.zhang@cloud.com> - 5.7.2-52
    - CA-393002: Fix CVE-2022-24805 and CVE-2022-24809 issues


author: Philippe Coval <philippe.coval@vates.tech> - 5.9.3-8.1
changelog:
  - Rebuild for openssl-3
  - Remove obsolete net-snmp-5.7.2-CVE-2022-24806.patch
  - Rebase on 5.9.3-8
  - *** Upstream changelog ***
    * Mon Jan 20 2025 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-8
    - CP-50295: Add epoch 1 for XS 8

    * Fri Jan 17 2025 Chunjie Zhu <chunjie.zhu@cloud.com> - 5.9.3-7
    - CP-53263: Remove net-tools

    * Fri Jan 17 2025 Stephen Cheng <stephen.cheng@cloud.com> - 5.9.3-6
    - CP-53229: Remove chrpath

    * Thu Nov 21 2024 Stephen Cheng <stephen.cheng@cloud.com> - 5.9.3-5
    - CP-50538 Remove perl related packages
    - CP-50538 Remove selinux from BuildRequires

    * Fri Aug 23 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-4
    - CP-44169: Add XenServer SNMP Agent so
    - CP-44170: Update default settings
    - CP-44429: Move snmpd.xs.conf from xenserver-release
    - CP-44429: Improve service config

    * Tue Jul 30 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-3
    - CP-50122: Revert perl-srpm-macros require

    * Fri Jul 26 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-2
    - CP-50122: Replace redhat-rpm-config with xenserver-config-rpm in XS9

    * Mon Sep 04 2023 Lin Liu <lin.liu@citrix.com> - 5.9.3-1
    - First imported release


author: Thierry Escande <thierry.escande@vates.tech> - 1.44.3-1.1
changelog:
  - Fix build errors with gcc 4.8
  - Force use of protobuf system packages from XCP-ng repositories
  - Add conditions for protobuf Requires
  - Remove unneeded Requires for nodejs and BuildRequires for httpd and libpfm-devel
  - Add Requires for libyaml
  - Enable and start systemd service at install
  - Create netdata-ui subpackage
  - Add firewall rules management


author: Thierry Escande <thierry.escande@vates.tech> - 1.47.5-4.1
changelog:
  - Update to Netdata v1.47.5
  - Rework patch for gcc 4.8 build errors
  - Remove _vpath_builddir redefinition needed by cmake
  - Use update-alternatives to handle configuration files swap
  - Remove cap_setuid=pe for plugin files that have the setuid bit set
  - Use netdata.service file for systemd < 235
  - Replace 'ExecStop=sleep 3' in systemd service unit with a nicer script
  - *** Upstream changelog ***
  - * Thu Oct 24 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.5-1
  - - Update from upstream
  - * Thu Oct 10 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.4-1
  - - Update from upstream
  - * Wed Oct 02 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.3-1
  - - Update from upstream
  - * Thu Sep 26 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.2-1
  - - Update from upstream
  - * Tue Sep 10 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.1-1
  - - Update from upstream
  - * Fri Aug 23 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.0-1
  - - Update from upstream
  - * Thu Aug 22 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-5
  - - Fix journald access
  -   See https://bugzilla.redhat.com/show_bug.cgi?id=2298058
  - * Thu Aug 15 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
  - - Remove closed source parts from binary rpms
  -   See https://bugzilla.redhat.com/show_bug.cgi?id=2304167
  - * Wed Aug 07 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
  - - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - - Enable go plugin only for Fedora 40+
  - * Mon Jul 29 2024 Miroslav Suchý <msuchy@redhat.com> - 1.46.3-2
  - - convert license to SPDX
  - * Fri Jul 26 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-1
  - - Update from upstream
  - * Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.46.2-2
  - - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
  - * Mon Jul 15 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.2-1
  - - Update from upstream
  - * Fri Jun 21 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.1-1
  - - Update from upstream
  - - Disable go plugin for all builds
  - * Wed Jun 19 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.0-1
  - - Update from upstream
  - * Thu Jun 06 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.6-1
  - - Update from upstream
  - * Thu May 23 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.5-1
  - - Update from upstream
  - * Thu May 09 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.4-1
  - - Update from upstream
  - * Sat Apr 13 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.3-1
  - - Update from upstream
  - * Fri Apr 05 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.2-1
  - - Update from upstream
  - * Wed Mar 27 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.1-1
  - - Update from upstream
  - * Thu Mar 21 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.0-1
  - - Update from upstream


author: Vincent Michel <vincent.michel@vates.tech> - 1.47.5-4.3
changelog:
  - Fix the %patch macro in the specfile to be compatible with rpm 4.20 and above
  - Rebuild with openssl version 3


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.0-2
changelog:
  - fix STATEPATH location and creation (#2024651)
  - merged C99 related changes to configure from fedora
  - trim changelog


author: Pau Ruiz Safont <pau.safont@citrix.com> - 2.0.10-3
changelog:
  - Update to 2.0.10
  - Fix packaging issues around versions
  - Use correct SPDX identifier for the license


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.4p1-23.3.1 + 0.10.3-2.23.3.1
changelog:
  - Sync with 7.4p1-23.3 + 0.10.3-2.23.3
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Philippe Coval <philippe.coval@vates.tech> - 9.8p1-1.2.1
changelog:
  - Refresh XCP-ng patches:
    - Drop unnecessary hardening and gssapi patches
    - Replace CVE-2025-26465 backport with upstream patch from 9.9p1
  - Sync with 9.8p1-1.2
  - *** Upstream changelog ***
  - * Fri Nov 07 2025 Alex Brett <alex.brett@citrix.com> - 9.8p1-1.2
  - - CA-420416: Remove diffie-hellman-group14-sha1 KexAlgorithm
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 9.8p1-1.1
  - - CA-400917: Disable PerSourcePenalties
  - - CA-401322: Revert sshd.pam to xs8 default
  - - CA-401322: Ensure new config files applied
  - * Fri Sep 13 2024 Deli Zhang <deli.zhang@citrix.com> - 9.8p1-1
  - - CP-50298: Upgrade to version 9.8p1
  - * Wed Jul 31 2024 Lin Liu <lin.liu@citrix.com> - 8.8p1-3
  - - CP-50477: Customize ssh configurations
  - * Mon Sep 25 2023 Lin Liu <lin.liu@citrix.com> - 8.8p1-2
  - - CP-45435: Permit root ssh login
  - * Thu Jul 20 2023 Lin Liu <lin.liu@citrix.com> - 8.8p1-1
  - - First imported release


author: Lucas Ravagnier <lucas.ravagnier@vates.tech> - 9.8p1-1.2.3
changelog:
  - Add patch upstream log when refusing a certificate as dependency for CVE-2026-35414 patch
  - Fix CVE-2026-35414 (Bypass of authorized_keys)
  - Test for CVE-2026-35414 (with a fix for this test)
  - Fix ECDSA Bypass


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-22
changelog:
  - fix CVE-2021-23841 openssl: NULL pointer dereference
    in X509_issuer_and_serial_hash()
  - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
  - Resolves: rhbz#1932132, rhbz#1932126


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-23
changelog:
  - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#1996054


author: Sahana Prasad <sahana@redhat.com> 1.0.2k-24
changelog:
  - Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
  - Resolves: rhbz#2039993


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.0.2k-25
changelog:
  - Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Related: rhbz#2067160


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1:1.0.2k-26.1
changelog:
  - Add openssl-1.0.2k-update-expiring-certificates.patch to fix build time tests
  - Added gcc to BuildRequires


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 3.0.9-2.0.1.2
changelog:
  - Update to the upstream 3.0.9-2.0.1 package
  - Remove backported patches as OpenSSL 3.0.9 is not affected by the CVEs they
    were fixing: openssl-1.0.2k-cve-2019-1547.backport.patch,
    openssl-1.0.2k-cve-2019-1551.backport.patch, and
    openssl-1.0.2k-cve-2019-1563.backport.patch
  - Remove a patch fixing a build time test as it's no longer necessary on 3.0.9:
    openssl-1.0.2k-update-expiring-certificates.patch
  - *** Upstream changelog ***
    * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 3.0.9-2.0.1
    - CP-52657: Fix CVE-2024-6119
    - CP-52243: Remove new ciphers
    - CP-50862: Add fips only config file
    - CP-50299: Revert epoch=1
    - CP-50299: Disable crypto-policies
    - CP-50299: Build with devtoolset-11

    * Thu Jul 27 2023 Lin Liu <lin.liu@citrix.com> - 3.0.9-2
    - Restore basearch

    * Thu Jul 27 2023 Lin Liu <lin.liu@citrix.com> - 3.0.9-1
    - First imported release


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 1.0.2k-26.1.1
changelog:
  - First build - OpenSSL 1.0.2k-26 compatible package
  - Add backported patches from our OpenSSL package: openssl-1.0.2k-cve-2019-1547.backport.patch,
    openssl-1.0.2k-cve-2019-1551.backport.patch, openssl-1.0.2k-cve-2019-1563.backport.patch
    (the openssl-1.0.2k-update-expiring-certificates.patch was dropped since it
    was already included in the upstream package)
  - *** Upstream changelog ***
    * Thu Feb 13 2025 Lin Liu <deli.zhang@cloud.com> - 1.0.2k-26.1
    - CP-53507: Build OpenSSL 1.0.2k-26 compatible package

    * Thu Jul 18 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.0.2k-26
    - First imported release


author: Philippe Coval <philippe.coval@vates.tech> - 1.0.2k-26.2.1
changelog:
  - Replace older openssl-devel (1.0 API) during transition
  - Release is set 26.2.1 (as a follow up of openssl-1:1.0.2k-26.2)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.13.1
changelog:
  - Rebase on latest package from CH 8.3 Preview
  - Re-add changes to produce openvswitch-ipsec subpackage


author: David Morel <david.morel@vates.fr> - 2.5.3-2.3.13.2
changelog:
  - Backport fix for CVE-2023-1668: Remote traffic denial of service via crafted packets with IP proto 0
  - Comment out tests that fail
  - Enable make check in spec file


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.5.3-2.3.14.1
changelog:
  - Update to 2.5.3-2.3.14
  - Drop openvswitch-2.5.3-CVE-2023-1668.backport.patch, now patched in XenServer's RPM
  - *** Upstream changelog ***
  - * Tue Apr 18 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.5.3-2.3.14
  - - CA-376367: Fix CVE-2023-1668


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-1.1
changelog:
  - Update to 2.17.7-1
  - Add openvswitch-2.17.7-comment-failing-tests.XCP-ng.patch (Benjamin Reis)
  - Add openvswitch-2.17.7-add-pythonpath-ipsec.XCP-ng.patch (Benjamin Reis)
  - Get ipsec script and service from new sources (Benjamin Reis)
  - *** Upstream changelog ***
  - * Wed Aug 23 2023 Chunjie Zhu <chunjie.zhu@cloud.com> - 2.17.7-1
  - - CP-44181: upgrade to OVS LTS 2.17.7


author: David Morel <david.morel@vates.tech> - 2.17.7-1.2
changelog:
  - Apply fix for CVE-2023-3966, provided in advisory
  - Apply fix for CVE-2023-5366, provided in advisory


author: David Morel <david.morel@vates.tech> - 2.17.7-1.3
changelog:
  - Link with xs-openssl instead of openssl
  - Tweak ovs-ctl script that is used to start ovsdb-server, passing it
    --ssl-ciphers and --ssl-protocols command line parameters to disable weak
    ciphers.


author: David Morel <david.morel@vates.tech> - 2.17.7-1.5
changelog:
  - link back to openssl to avoid issues with XO sdn-controller
  - use ciphers that works with XO sdn-controller and should not be considered as weak-ciphers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.17.7-2.1
changelog:
  - Sync with 2.17.7-2
  - *** Upstream changelog ***
  - * Thu Jun 13 2024 Lin Liu <Lin.Liu01@cloud.com> - 2.17.7-2
  - - CP-46117: Refresh patches to build with XS9


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 2.17.7-4.1
changelog:
  - Sync with 2.17.7-4
  - *** Upstream changelog ***
    * Wed Jan 22 2025 Alex Brett <alex.brett@cloud.com> - 2.17.7-4
    - CA-405118: Backport 3 patches to handle updated groff
    
    * Thu Dec 12 2024 Stephen Cheng <stephen.cheng@cloud.com> - 2.17.7-3
    - CP-50699: For xs9, move config file for openvswitch.service from xenserver-release


author: Paul Howarth <paul@city-fan.org> - 2.05.03-3
changelog:
  - Don't BR: perl(LWP::Simple) for optional tests when bootstrapping; this is a
    cleaner fix than nobbling perl-URI's runtime dependencies


author: Paul Howarth <paul@city-fan.org> - 20081208-8
changelog:
  - Clean up for modern rpmbuild:
    - Drop BuildRoot specification
    - Drop %clean section
    - Don't bother cleaning buildroot in %install section
    - Make %files list more explicit
    - Use DESTDIR rather than PERL_INSTALL_ROOT
    - Use %{_fixperms} macro rather than our own chmod incantation
    - Replace provides filter with version that works with rpm ≥ 4.9
  - Include tests as %doc since they're referred to by examples/README


author: Paul Howarth <paul@city-fan.org> - 20120719-1
changelog:
  - Update to 20120719:
    - Support using data from RangeMessage.xml, so you can use the latest data
      from ISBN without updating this module
  - Fix shellbang and permissions of make_data.pl script to placate rpmlint
  - Filter dependency on perl(LWP::Simple), required only by make_data.pl script,
    not in normal operation
  - Don't need to remove empty directories from the buildroot
  - BR: perl(Carp), perl(File::Spec::Functions) and perl(Test::Manifest) ≥ 1.14
  - BR: at least version 1.00 of perl(Test::Pod)


author: Paul Howarth <paul@city-fan.org> - 20120719.001-1
changelog:
  - Update to 20120719.001:
    - Require Test::More ≥ 0.95 for subtest support
    - No code or feature changes
  - Bump Test::Manifest version requirement to 1.21
  - Bump Test::More version requirement to 0.95
  - Drop redundant buildreq perl(Test::Prereq)


author: Petr Pisar <ppisar@redhat.com> 6.01-1
changelog:
  - Specfile autogenerated by cpanspec 1.78.
  - Remove BuildRoot stuff
  - Conflicts with perl-libwww-perl 5* and older


author: Paul Howarth <paul@city-fan.org> - 1.59-3
changelog:
  - Break build dependency loop by only using perl(Business::ISBN) if we're not
    bootstrapping
  - BR: perl(Carp) and perl(Exporter)
  - Make %files list more explicit
  - Use DESTDIR rather than PERL_INSTALL_ROOT
  - Use %{_fixperms} macro rather than our own chmod incantation
  - Don't use macros for commands


author: Paul Howarth <paul@city-fan.org> - 1.60-1
changelog:
  - Update to 1.60
    - Do not reverse the order of new parameters
    - Avoid test failure if the local hostname is 'foo' (CPAN RT#75519)
    - Work around a stupid join bug in 5.8.[12] (CPAN RT#59274)
    - Updated repository URL
  - Don't need to remove empty directories from buildroot
  - BR: perl(constant)


author: Paul Howarth <paul@city-fan.org> - 1.60-8
changelog:
  - Retain runtime dependency of perl(Business::ISBN) when bootstrapping; a
    better fix for the build dependency cycle was to drop LWP::Simple as a
    buildreq of perl-Business-ISBN (needed only for optional tests) when
    bootstrapping


author: Alex Brett <alex.brett@cloud.com> - 0.8.9-0.31.20140113.2
changelog:
  - CA-393520: Drop ship-label-plugin-in-initrd.patch as not required for XS, and
    causes warnings following removal of fontconfig


author: Deli Zhang <deli.zhang@cloud.com> - 2.7.5-92
changelog:
  - CP-50325: Use new api of ncurses-devel
  - CP-50323: Replace deprecated functions
  - CA-397616: Remove test_gdb test temporarily
  - CP-50323: Remove unused module test test_ftplib.py
  - CP-50323: Build with OpenSSL 3
  - CP-50323: Import python-2.7.5-90.el7.src.rpm


author: Kamil Dudka <kdudka@redhat.com> - 7.19.0-15
changelog:
  - allow to return -1 from the write callback (#857875) 
  - remove the patch for curl-config --static-libs no longer needed
  - run the tests against the just built pycurl, not the system one


author: Philippe Coval <philippe.coval@vates.tech> - 7.19.0-19.1
changelog:
  - Add gcc to BuildRequires
  - Define __python for modern parser
  - Update obsolete patch macro with autosetup
  - Rebuild with openssl-3


author: Deli Zhang <deli.zhang@cloud.com> - 3.6.8-20
changelog:
  - CP-53516: Fix build issue caused by expat upgrade
  - CP-50324: Replace deprecated functions
  - CP-50324: Remove python3-pip require
  - CA-397616: Remove test_gdb tests temporarily
  - CP-50324: Build with OpenSSL 3
  - CP-50324: Import python3-3.6.8-18.el7.src.rpm


author: Yann Dirson <yann.dirson@vates.tech> - 1.12.0-1
changelog:
  - Backport to el7, based on fc36 package
  - Back to old layout
  - Nuke the '(Build)Requires: ... with ...' syntax


author: Tim Smith <tim.smith@cloud.com> - 7.0.0-12
changelog:
  - CA-392001 Cancel all jobs on datapath stop
  - CA-392022 Cancel all jobs on dataplane start
  - CA-392022 Add conflict for older xapi storage-plugins-libs


author: Tim Smith <tim.smith@cloud.com> - 7.0.0-16
changelog:
  - CA-388210: package and install QMP
  - CA-391937: probe block alignment by statx syscall
  - build qemu-dp on rawhide
  - Backport fixes for qcow extended_l2


author: Yann Dirson <yann.dirson@vates.tech> - 2.28.1-4.1
changelog:
  - Fix build invocation using hardcoded (and buggy) paths
  - Remove macros undefined and/or (not) expanding inside the package description
  - Add missing requires (taken from XS' python-opentelemetry.spec)


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-7
changelog:
  - Converting specfile from F28 to RHEL7
  - Tests disabled because the minimal RHEL7 Python 3 stack does not contain test
    dependencies
  - Disabled building of the Python 2 subpackage
  Resolves: rhbz#1660563


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-8
changelog:
  - SRPM renamed from python-setuptools to python3-setuptools
  - Package prepared to contain only Python 3 version
  Resolves: rhbz#1660563


author: Yann Dirson <yann.dirson@vates.tech> - 40.4.1-1.0.1
changelog:
  - Cherry-pick:
    * Wed Sep 19 2018 Randy Barlow <bowlofeggs@fedoraproject.org> - 40.4.1-1
    - Update to 40.4.1 (#1599307).
    - https://github.com/pypa/setuptools/blob/v40.4.1/CHANGES.rst
  - Run bootstrap.py in prep (or setup.py cannot run)
  - (hack) Adjust wheel name with a wildcard to cope with the 40.4.1.post20250122
  version it comes up with


author: Mark Syms <mark.syms@citrix.com> - 0.13.0-1
changelog:
  - add get_iscsi_interfaces to libiscsi
  - Enable SonarQube
  - Run unit tests and fix build dependencies


author: Mark Syms <mark.syms@cloud.com> - 1.1.3-1
changelog:
  - CP-53439 Get exception messages correctly for Python3
  - CA-395560 Improve logging and error checking on sg_readcap
  - CP-53783: use os.path.realpath instead of incorrect internal


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.26.20-3.1
changelog:
  - Sync with 1.26.20-3
  - *** Upstream changelog ***
    * Thu Feb 6 2025 Ming Lu <ming.lu@cloud.com> - 1.26.20-3
    - Bump release for rebuild
    * Sun Jan 26 2025 Marcus Granado <marcus.granado@cloud.com> - 1.26.20-2
    - Update for version 1.26.20 and bump release for rebuild
    * Thu Jan 16 2025 XenServer Rebuild <rebuild@xenserver.com> - 1.26.15-5
    - CP-53241: XenServer 9 rebuild


author: Tomas Orsava <torsava@redhat.com> - 0.30.0a0-8
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules


author: Lumír Balhar <lbalhar@redhat.com> - 0.31.1-4
changelog:
  - Converting specfile from F29 to RHEL7
  - Disabled building of the Python 2 subpackage
  - Disabled tests (by setting the bootstrap on - see note)
  - Removed python-wheel-wheel package with the wheel of wheel
  Resolves: rhbz#1660574


author: Yann Dirson <yann.dirson@vates.tech> - 3.0.2-4.2
changelog:
  - Switch updategrub.py to python3, install in /opt/xensource/bin,
    keep a compat symlink for old kernel-alt hardcoding a python2.7 path


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-1.1
changelog:
  - Rebase on 3.0.4-1
    *** Upstream changelog ***
    * Thu Mar 14 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-1
    - CA-389988: Fix USB network handling

    * Wed Mar 6 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.3-1
    - CA-371311: Pick up updates to handle USB ethernet cards


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-2.1
changelog:
  - Rebase on 3.0.4-2
  - *** Upstream changelog ***
    * Tue Jun 11 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-2
    - Add missing package dependencies


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 3.0.6-1.1
changelog:
  - Rebase on 3.0.6-1
  - *** Upstream changelog ***
    * Mon Mar 03 2025 Stephen Cheng <stephen.cheng@cloud.com> - 3.0.6-1
    - CA-407115: Adding logic to handle boot entries without additional arguments

    * Fri Nov 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 3.0.5-1
    - CA-392459: Avoid opening /dev/mem when calling biosdevname


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 3.0.8-1.1
changelog:
  - Rebase on 3.0.8-1
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 3.0.8-1
    - CP-308428: bootloader: Add support for xen_boot entry type
    - bootloader: Various cleanup


author: Yann Dirson <yann.dirson@vates.tech> - 3.0.10-1.1
changelog:
  - Rebase on 3.0.10-1
  - *** Upstream changelog ***
    * Tue Sep 30 2025 Stephen Cheng <stephen.cheng@citrix.com> - 3.0.10-1
    - CA-417888: Fix a drucat bug
    - docs/ci: various update

    * Fri Aug 22 2025 Chunjie Zhu <chunjie.zhu@cloud.com> - 3.0.9-1
    - CP-54481: support DMV RPU plugin
    - github ci: various update


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-1.1
changelog:
  - Rebase on 3.0.4-1
  - *** Upstream changelog ***
  - * Thu Mar 14 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-1
  - - CA-389988: Fix USB network handling
  - * Wed Mar 6 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.3-1
  - - CA-371311: Pick up updates to handle USB ethernet cards


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 4.2.1-5.2.4
changelog:
  - CP-46102: Backport bugfixes for PCI passthrough using multifunction devices
    - hw/xen: set pci Atomic Ops requests for passthrough device
    - hw/xen/xen_pt: fix uninitialized variable
    - xen/pass-through: don't create needless register group
    - xen/pass-through: merge emulated bits correctly
    - Emulate the multifunction bit and set it based on the multifunction
      property of the PCIDevice (which can be set using QAPI).


author: Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.5
changelog:
  - CP-46162: Backport patches for building qemu with rawhide(xs9) toolchain
    - Do not ignore malloc value
    - Fix the null pointer errors in configure
    - Fix -Werror=maybe-uninitialized build failure
    - Fix net/eth.c compile errors
    - Compile with -Wno-array-bounds
    - Remove -no-pie linker flag


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.8
changelog:
  - Disable capstone and fdt explicitly
  - CP-42792: Backport a patch to avoid unncessary buffered ioreq polling


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.9
changelog:
  - CA-391031: Reinstate rate limiting of RTC_CHANGE events
  - CA-391069: Avoid livelock due to buffered ioreqs


author: Yann Dirson <yann.dirson@vates.tech> - 4.2.1-5.2.12.1
changelog:
  - Sync with xs8 4.2.1-5.2.12, no code change, only rebuild against libjemalloc.so.2:
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.12
    - CP-46112: Rebuild after new version of jemalloc
    
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.11
    - CP-46112: Rebuild with new version of jemalloc


author: Yann Dirson <yann.dirson@vates.tech> - 4.2.1-5.2.12.1
changelog:
  - Sync with xs8 4.2.1-5.2.12, no code change, only rebuild against libjemalloc.so.2:
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.12
    - CP-46112: Rebuild after new version of jemalloc

    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.11
    - CP-46112: Rebuild with new version of jemalloc


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.2.1-5.2.14.1
changelog:
  - Sync with 4.2.1-5.2.14
  - Remove 0001-nvme-Don-t-check-NSID-in-NVME_VOLATILE_WRITE_CACHE.patch in favor of XenServer's fix
  - *** Upstream changelog ***
    * Wed Oct 15 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.14
    - CA-418876: Fix NVMe namespace indexing

    * Thu Oct 02 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.13
    - CA-417654: Fix NVME bug which causes WS2025 install failures


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.2.1-5.2.15.1
changelog:
  - Sync with 4.2.1-5.2.15
  - *** Upstream changelog ***
    * Thu Oct 23 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.2.1-5.2.15
    - Allow passthrough of devices from a PCI segment different than 0.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.2.1-5.2.17.1
changelog:
  - Sync with 4.2.1-5.2.17
  - *** Upstream changelog ***
    * Thu Jan 08 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.17
    - CA-407410: qmp: Fix race causing events to be sent during negotiation
    * Mon Dec 01 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.16
    - CA-420202: xen-hvm: Handle framebuffer relocation


author: Thierry Escande <thierry.escande@vates.tech> - 4.2.1-5.2.18.1
changelog:
  - Sync with 4.2.1-5.2.18
  - *** Upstream changelog ***
    * Thu Feb 26 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.2.1-5.2.18
    - CA-422649: xen: mapcache: Fix finding matching entry


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.63-2
changelog:
  - Version 7.14.63
  - Add qlogic-netxtreme2-Fix-NULL-pointer-dereference-in-bnx2x_del_all_vlans.backport.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.14.76-2
changelog:
  - Merge the two RPMs into one for easier uninstallation
  - Obsoletes qlogic-netxtreme2-alt-4.19.0+1-modules


author: Gael Duperrey <gduperrey@vates.tech> - 10.02.11.00_k-1
changelog:
  - Update to version 10.02.11.00_k
  - Synced from XS driver SRPM qlogic-qla2xxx-10.02.11.00_k-1.xs8~2_1.src.rpm


author: Andrew Cooper <andrew.cooper3@citrix.com> - 3.4.1-1
changelog:
  - Update to 3.4.1
     - Fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
                 CVE-2024-12087, CVE-2024-12088, CVE-2024-12747
  - Resync specfile


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.3-1.13
changelog:
  - Replace 0030-fix-cleanup.py-bad-live-coalesce-check-regarding-Fil.patch with 0030-fix-getAllocatedSize-is-incorrect-75.patch
  - Ensure correct allocatedSize for FileVDI in cleanup.py


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.3-1.14
changelog:
  - Sync fork-load-daemon script with http-nbd-transfer (v1.5.0)
  - Fix coalesce process for LINSTOR SRs
  - Many code improvements for issues detected by mypy


author: Yann LE BRIS <yann.lebris@vates.tech> - 3.2.3-1.16
changelog:
  - Add 0061-Fix-LVHDSR.load-set-other_conf-in-cond-branch-to-pre.patch
  - Add 0062-fix-cleanup.py-protect-LinstorSR-init-against-race-c.patch
  - Add 0063-Fix-filter-to-reject-other-device-types-77.patch
  - Add 0064-feat-add-HPE-Nimble-multipath-configuration.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.1
changelog:
  - Rebase on 3.2.12-3
  - Sync patches with our latest 3.2.12-8.3 branch
  - Remove patches merged upstream:
    - 0028-CA-398425-correctly-check-for-multiple-targets-in-iS.patch
    - 0030-fix-getAllocatedSize-is-incorrect-75.patch
    - 0047-Define-and-details-attr-on-Failure-mock.patch
    - 0064-feat-add-HPE-Nimble-multipath-configuration.patch
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-3
    - CA-405381: update mpathcount while xapi is not enabled
    * Thu Feb 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-2
    - CA-403593: don't log session refs
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-1
    - CA-400789: Do not exclude parentless VDIs from cacheing
    - CP-52844: allow for open session to be passed to sr_get_capability
    - CP-52852: add handler for xmlrpc ProtocolError
    - fix(cleanup.py): bad live coalesce check regarding FileSR
    * Tue Nov 19 2024 Mark Syms <mark.syms@cloud.com> - 3.2.11-1
    - CP-42675: send messages to Xapi if GC has insufficient space
    - CP-52620: enable read-through cache on persistent leaf
    * Tue Nov 05 2024 Mark Syms <mark.syms@cloud.com> - 3.2.10-1
    - CA-397084: SR scan tries to deactivate LV in use by tapdisk
    - CA-399644: if we make progress do not abort the GC or evaluate criteria
    - CA-400743: perform post snapshot rename in ioretry
    - CA-401068: if iSCSI device path is not found scan the bus
    * Wed Oct 09 2024 Mark Syms <mark.syms@cloud.com> - 3.2.9-3
    - CP-51658: install stop gc helper script
    - CA-399643 Use full paths when stopping fairlock on upgrade
    - CA-396655: check xapi is enabled before starting multipath reporting
    - CA-396658: check xapi is enabled before checking SR health
    - CA-400106: disable leaf coalesce with VDI snapshot secondary
    * Tue Sep 24 2024 Tim Smith <tim.smith@cloud.com> - 3.2.8-2
    - CA-399643 Use full paths when stopping fairlock on upgrade
    * Fri Sep 06 2024 Robin Newton <robin.newton@cloud.com> - 3.2.8-1
    - CA-398958 Cope with concurrent read-only activations
    * Wed Sep 04 2024 Mark Syms <mark.syms@cloud.com> - 3.2.7-1
    - CA-398425: correctly check for multiple targets in iSCSI
    * Wed Aug 21 2024 Mark Syms <mark.syms@cloud.com> - 3.2.6-1
    - CA-395560: Log exception details when LUN refresh fails
    - CA-396124: amend criteria under which the garbage collector aborts
    - CA-397084: Log any user of LV at deactivate
    - CP-51214: stop cgrules triggering errors on update
    * Tue Jul 23 2024 Tim Smith <tim.smith@cloud.com> - 3.2.5-1
    - CA-395554 Stop fairlock services on package upgrade
    * Mon Jul 22 2024 Mark Syms <mark.syms@cloud.com> - 3.2.4-1
    - Add missing sg3_utils dependency
    - Update multipath config for Dell, IBM and Nimble arrays


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.2
changelog:
  - Prevent leaf coalesce during migration for LINSTOR (CA-400106)
  - Use GC daemon code for LINSTOR like other drivers


author: Yann Dirson <yann.dirson@vates.fr> - 3.2.12-3.3
changelog:
  - Add missing dependency on libcgroup-tools, uses cgclassify(1)
  - Drop dependency on old and unused python3-future
  - Refresh patch not applying on Alma10 due to fuzz


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-10.1
changelog:
  - Rebase on 3.2.12-10
  - Sync patches with our latest 3.2.12-8.3 branch
  - Add new patches:
    - 0064-chore-.github-workflows-use-ubuntu-24.04.patch
    - 0065-Fix-warns-reported-by-new-github-workflow.patch
    - 0066-Improve-LinstorSR.py-to-handle-thick-SR-creation-85.patch
    - 0067-Fix-LINSTOR-satellite-LS_KEEP_RES-regex.patch
    - 0068-fix-LinstorSR-Correctly-reference-a-variable-excepti.patch
    - 0069-Fix-GC-hidden-attribute-in-case-of-SIGTERM-signal-87.patch
    - 0070-fix-LinstorSR-robustify-DB-umount-call.patch
    - 0071-feat-Linstor-rewrite-linstorhostcall-logic.patch
    - 0072-feat-linstor-Add-new-debug-log-in-linstorhostcall-67.patch
    - 0073-fix-linstor-subsequent-fixes-for-linstorhostcall.patch
    - 0074-Fix-tests-of-CP-51843-add-unit-tests-for-setup_cache.patch
    - 0075-feat-LinstorSR-improve-DB-volume-robustness.patch
    - 0076-fix-linstorvolumemanager-robustify-usable-size-gette.patch
    - 0077-fix-linstorvhdutil-don-t-log-when-get_hosts_attached.patch
    - 0078-refactor-linstorvhdutil-simplify-linstorhostcall.patch
    - 0079-fix-linstorvhdutil-call-local-method-when-possible-i.patch
    - 0080-fix-linstorvhdutil.py-remove-useless-param-on-call_r.patch
    - 0081-chore-pylintrc-get-rid-of-E1120-errors-for-LINSTOR-u.patch
    - 0082-fix-linstorvhdutil-support-missing-session-97.patch
  - *** Upstream changelog ***
    * Fri Jul 04 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-10
    - CA-413209: remove dangling reference to rawhba
    - CP-308587: update NetApp multipath as requested
    * Wed Jun 18 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-9
    - CA-395221: require systemd target
    * Tue May 27 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-8
    - CP-53692 SR attach with kicking the mpathcount pipe
    - CA-411163: refuse to attach if we see multiple SCSI IDs for SR PVs
    * Tue Apr 08 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-7
    - CA-409231: Report IntelliCache stats when parent is NBD.
    * Mon Mar 31 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-6
    - CA-407743: do not try to add memory caching and intellicache
    * Tue Mar 25 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-5
    - CA-408105: add logging to failure paths
    - CA-408452: remove VDI parent if it does not have one
    - CP-51843:  extend IntelliCache coverage
    * Tue Mar 04 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-4
    - CA-407343: do not remove the parent's vhd-parent in leaf GC
    - Revert the changes in 2979937bbb7 (CA-397084)
    - CP-50026 Ensure mpathcount runs after multipath deactivate


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.12-10.2
changelog:
  - Add 0083-Remove-useless-loadLocked-param-on-vdi-methods-98.patch
  - Add 0084-fix-largeblock-redo-VG-activation-using-custom-confi.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-16.1
changelog:
  - Rebase on 3.2.12-16
  - Sync patches with our latest 3.2.12-8.3 branch
  - Add new patches:
    - 0085-Stop-SMGC-service-on-SR-detach-to-prevent-orphaned-s.patch
    - 0086-fix-linstorvolumemanager-create-local-DB-path-when-r.patch
    - 0087-feat-linstorvolumemanager-raise-when-empty-device-pa.patch
    - 0088-fix-linstorvolumemanager-prevent-ops-on-version-mism.patch
    - 0089-fix-linstor-handle-deleted-volumes-during-UUID-updat.patch
    - 0090-fix-linstor-don-t-raise-if-volume-cannot-be-deleted-.patch
    - 0091-fix-linstor-print-DRBDs-open-during-chain-check-in-R.patch
    - 0092-metadata-improve-error-messages-when-vdi_type-is-mis.patch
    - 0093-Use-serial-instead-of-SCSI-ID-for-USB-devices-107.patch
  - *** Upstream changelog ***
    * Fri Nov 21 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-16
    - CA-420515: log errors in GC when running in foreground
    - CA-419706: fix incorrect print syntax
    - CA-421013: ensure repeated CBT enable/disable works
    * Mon Nov 10 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-15
    - CA-418775: ensure getsize and sg_readcap agree on resize
    - CA-420307: encode synthetic SCSI data correctly
    * Wed Oct 15 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-14
    - CA-416486: leaf coalesce wait for GC
    * Tue Sep 30 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-13
    - CP-309718: calculate a moving average of leaf size in GC
    * Tue Sep 09 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-12
    - CA-414438 Defend against unexpected VDI name_description contents
    - CA-413899: Rescan lvs when activating
    * Mon Aug 18 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-11
    - Rebuild


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-17.1
changelog:
  - Rebase on 3.2.12-17
  - Remove patches merged upstream:
    - 0092-metadata-improve-error-messages-when-vdi_type-is-mis.patch
  - Add new patches:
    - 0093-fix-linstorvolumemanager-fix-typo-106.patch
    - 0094-fix-linstorvolumemanager-don-t-allow-InUse-volumes-t.patch
    - 0095-fix-cleanup-ensure-VDI-is-active-before-relink-119.patch
    - 0096-feat-linstor-simplify-get_controller_uri-using-ss-co.patch
    - 0097-fix-linstor-ignore-unknown-res-to-get-volume-info-12.patch
    - 0098-feat-linstor-parallelize-SR.scan-cleanup-vhd-util-ca.patch
    - 0099-fix-cleanup-properly-handle-FileSR-exception-for-sla.patch
    - 0100-Ensure-DRBD-sync-before-resizing-volumes-in-thick-co.patch
  - *** Upstream changelog ***
    * Fri Dec 12 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-17
    - Backport changes from upstream.
    - remove flag gc_no_space from SR sm-config when not applicable
    - improve error messages when vdi_type is missing


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.12-17.7
changelog:
  - Add 0143-fix-LVMSR-activate-chain-for-QCOW2-resize.patch
  - Add 0144-Fix-qcow2util-fix-exception-handling-in-coalesceOnli.patch
  - Add 0145-feat-use-preferred-image-formats-as-a-list.patch
  - Add 0146-fix-cleanup-online-coalesce-would-crash.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-17.8
changelog:
  - Add 0147-fix-linstor-add-backward-compatibility-for-getInfo.patch
  - Add 0148-fix-linstor-add-backward-compatibility-for-manager-p.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.2.3-1.3
changelog:
  - %preun: Move command above exit 0 so that it's executed
  - Properly disable the removed sr_health_check.timer
  - Also remove the dangling symlink if still present due to improper removal
    of the timer in sm-3.2.0-1.5


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.2.3-1.4
changelog:
  - Add 0028-CA-398425-correctly-check-for-multiple-targets-in-iS.patch
  - Restore the sr_health_check service and the code which goes with it.


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.3-1.7
changelog:
  - Import 8.2 LINSTOR changes on 8.3:
  - Robustify HA: use a specific group with a replication count of 3
  - Export helpers in linstor-manager regarding network interfaces
  - Improve health-check helper: more details and simple API
  - Fix pause/unpause: always load a valid VHD chain
  - Robustify remote "vhdutil check" command
  - Robustify SR destruction
  - Prevent diskless destruction on master host
  - Prevent tiebreaker destruction
  - Reduce LINSTOR vhdutil queries


author: Benjamin Reis <benjamin.reis@vates.tech> - 3.2.1-1.1
changelog:
  - Rebase on 3.2.1-1
  - *** Upstream changelog ***
  - * Wed May 29 2024 Mark Syms <mark.syms@cloud.com> - 3.2.1-1
  - - Use python3 rather than python3.6
  - - CA-390937: fix conflict between GC and SR detach
  - - CA-392989: improve diagnostics for tests


author: Benjamin Reis <benjamin.reis@vates.tech> - 3.2.3-1.1
changelog:
  - Rebase on 3.2.3-1
  - Add 0028-reflect-upstream-changes-in-our-tests.patch
  - *** Upstream changelog ***
  - * Thu Jul 04 2024 Mark Syms <mark.syms@cloud.com> - 3.2.3-1
  - - CA-393194: Fix pvremove failure
  - * Mon Jun 24 2024 Mark Syms <mark.syms@cloud.com> - 3.2.2-1
  - - CP-49689: remove reverse dependency on SR from xs_errors
  - - CP-49775 convert SMGC to systemd service
  - - CP-49720 Move LOCK_TYPE_RUNNING from cleanup.py to lock.py


author: Manuel "lonely wolf" Wolfshant <wolfy@fedoraproject.org> - 2.64-7
changelog:
  - remove world readable permissions of the config file (#962988)
  - revive the authpass patch (#970123)
  - revive improved default config settings which were lost during rebase (#895708)


author: Andrii Sultanov <andriy.sultanov@vates.tech> 5.60-6.1
changelog:
  - Make the openssl BuildRequires conditional on tests being built
  - *** Upstream changelog ***
    * Wed Apr 15 2026 Ming Lu <ming.lu@cloud.com> - 5.60-6
    - CA-425922: verifyPeer failed when multi-same-DN self-signed certificates
    - Disable tests due to certificates used in tests have expired


author: Gael Duperrey <gduperrey@vates.tech> - 1.9.15-3.1
changelog:
  - Synced from sudo-1.9.15-3.xs8.src.rpm
  - Removed XS-specific test of dist macro to determine buildrequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.9.15-4.1
changelog:
  - Sync with 1.9.15-4
  - *** Upstream changelog ***
  - * Thu Jul 4 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-4
  -- - Drop python plugin as not required


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 1.9.15-5.1
changelog:
  - Sync with 1.9.15-5
  - *** Upstream changelog ***
    * Tue Nov 12 2024 Lin Liu <Lin.Liu01@cloud.com> - 1.9.15-5
    - CP-50489: Remove selinux


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-8
changelog:
  - Add gnutls-compat.patch back to make compatible with xs8/xs9
  - CA-377995: Fix static analysis warnings


author: Edwin Török <edwin.torok@cloud.com> - 0.7.3-3
changelog:
  - CA-371900: Capture output from swtpm during setup
  - Replace patch with upstream backports
  - CP-43409: update TPM manufacturer
  - CP-42059: Use simpler HTTP based REST API


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-2
changelog:
  - CP-39549: Configure defaults for swtpm_localca
  - CA-363859: Make compatible with GnuTLS 3.3
  - Fix debuginfo generation


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-1
changelog:
  - New upstream version 4.9.0. Resolves: #1422473
  - Add legacy -P switch with warning. Related to #1422473 and #1292056


author: Martin Sehnoutka <msehnout@redhat.com> - 14:4.9.0-4
changelog:
  - Drop downstream patch (drop root privileges)
  - Add libcap-ng as a new build dependency
  - Related: #1262283


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-1.1
changelog:
  - Update from XS 8.3 prerelease updates
  - *** Upstream changelog ***
  - * Wed Aug 17 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.1.0-1
  - - varstore-sb-state: only load auth data if needed
  - - xapidb_init: Use BACKEND_INIT_FAILURE
  - - CA-366706: Fix signal handling and possible segfault
  - - CP-39854: Implement Platform Attack Reset Mitigation spec
  - - CP-39864 / CP-40029: Implement PPI support
  - * Tue Jul 26 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.0.0-3
  - - Fix license of tools subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.1
changelog:
  - Update to 1.2.0-1
  - Remove varstored-1.0.0-change-certs-directory.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.2.0-1
  - - CP-41616: Move varstored auth dir to /var/lib/varstored
  - - CA-369046: Log the error code if set_variable_from_auth fails
  - - CA-362923: Change output format of create-auth
  - - CP-40832: Add standard UEFI Secure Boot certificates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.2
changelog:
  - Revert part of XCP-ng specific changes, as upstream varstored now uses /var/lib/varstored
    and certs should be available by default now.
  - Add varstored-1.2.0-fix-return-code-for-varstore-sb-state-user.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.3
changelog:
  - Update secureboot-certs script for recent UEFI cert handling in XAPI
  - Remove KEK and db cert databases for now, pending legal advice.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-2.1
changelog:
  - Sync with 1.2.0-2
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 1.2.0-2
  - - Rebuild against libxenstore.so.4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.2
changelog:
  - Auth: Add support to make KEK and DB files optional
  - Auth: Enable AUTH_ONLY_PK_REQUIRED build macro


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.3
changelog:
  - Remove generation and installation of KEK and db files
  - Add helper script to remove pem file from source archive
  - Update source archive with pem files removed


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.2.0-2.4
changelog:
  - Add gen-sbvar.py
  - Add self-signed PK.auth blob
  - Generate {KEK,db,dbx}.auth using gen-sbvar.py
  - Update secureboot-certs to take builtin KEK/db/dbx
  - Update Secure Boot certs from microsoft/secureboot_objects@3f69ef4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-3.1
changelog:
  - Sync with 1.2.0-3
  - *** Upstream changelog ***
    * Wed Jan 22 2025 XenServer Rebuild <rebuild@xenserver.com> - 1.2.0-3
    - Add yangtze release branch
    - CP-53310: XenServer 9 rebuild


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.2.0-3.4
changelog:
  - Fix owner GUID of EFI_SIGNATURE_DATA structures
  - Restore dbx generation
  - Update dbx info to microsoft/secureboot_objects@e64d1a5c89e5 (v1.6.1)
  - Add fix-efivars.py script


author: Andriy Sultanov <andriy.sultanov@vates.tech> - 1.3.1-2.1
changelog:
  - Sync with 1.3.1-2
  - *** Upstream changelog ***
    * Mon Jan 12 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 1.3.1-2
    - Fix for XSA-478 / CVE-2025-58151

    * Thu Nov 13 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.1-1
    - CA-419599: Check DATA_LIMIT when appending

    * Mon Oct 06 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.3.0-1
    - CP-309775: Add new Microsoft certificates
    - Fix varstore-sb-state exit code
    - Don't fail setup_keys if the optional dbx is missing


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.3.2-2.1
changelog:
  - Sync with 1.3.2-2
  - No change in auth data
  - *** Upstream changelog ***
    * Wed Apr 08 2026 Alex Brett <alex.brett@citrix.com> - 1.3.2-2
    - CP-311096: Use pre-signed auth data

    * Fri Mar 20 2026 Stephen Cheng <stephen.cheng@citrix.com> - 1.3.2-1
    - CP-311837: Add -g option for GUID in create-auth
    - CP-311836: Support detached signatures in create-auth utility
    - Remove xsa478.patch since the fix is now in upstream


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-3
changelog:
  - Do not require the debuginfo package anymore
  - Do not strip binaries nor produce the debuginfo package at all for now


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.2.0-1
changelog:
  - New version 1.2.0
  - Correctly report error codes when opening an emu stream using a non-sock file
  - Streams support pipes


author: Pau Ruiz Safont <pr.safont@vates.tech> - 1.2.0-1
changelog:
  - bin: fix unused variables
  - feature: experimental features
  - v6d is now restarted by `xe-toolstack-restart`


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-5
changelog:
  - Remove dlm, dlm-lib, corosync and corosynclib
  - We don't use XS's clustering feature which means we don't need them


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-10
changelog:
  - Sync to latest upstream master: v7.30.0 + 10 commits
  - Dropped patches merged upstream and rebased the rest
  - Add support for RHEL 9 and derivatives in install.sh


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-12
changelog:
  - Update release to match that of the RPM in XCP-ng 8.2, since this is what
    also defines the suffix of the version of the xe-guest-utilities packages
    in the ISO.


author: Gael Duperrey <gduperrey@vates.tech> - 8.3-14
changelog:
  - Remove noise from patches using git-format-patch options
  - Add patch to remove the invitation to reboot after install of the tools
  - Add patch to support RHEL 10 and derivatives in install.sh


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-23
changelog:
  - Loosely sync with xenserver-release-8.4.0-5
  - *** Upstream changelog ***
  - * Mon Apr 08 2024 Stephen Cheng <stephen.cheng@cloud.com> - 8.4.0-5
  - - CP-47599: Update set-printk-console to Python3
  - * Thu Mar 07 2024 Alex Brett <alex.brett@cloud.com> - 8.4.0-4
  - - CA-389583: Update curlrc cipher specification to openssl format


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-24
changelog:
  - Loosely sync with xenserver-release-8.4.0-10
  - *** Upstream changelog ***
  - * Wed May 22 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-10
  - - CA-392433: Start dhclient on iSCSI BFS interfaces
  - * Thu May 16 2024 Bernhard Kaindl <bernhard.kaindl@cloud.com> - 8.4.0-9
  - - CA-392412: Disable the bpf syscall for unprivileged tasks (not used)
  - * Sat May 11 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-8
  - - CP-46084: Revert and move gnu-free-sans-fonts obsoletion to xs-obsolete-packages
  - * Fri May 10 2024 Deli Zhang <deli.zhang@cloud.com> - 8.4.0-7
  - - CP-46084: Obsolete unused package gnu-free-sans-fonts
  - * Tue May 07 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-6
  - - CP-49083: Do not patch logrotate configuration


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-26
changelog:
  - Don't require the empty kernel-livepatch and xen-livepatch packages
  - Ensure rsyslog and systemd are installed in xcp-ng-release-config's %post


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-27
changelog:
  - Loosely sync with xenserver-release-8.4.0-11
  - *** Upstream changelog ***
  - * Tue Jun 18 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-11
  - - CP-47026: Move mcelog config changes to mcelog.spec


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-28
changelog:
  - Update repo files for CentOS and EPEL
  - Point at repo.vates.tech for CentOS since mirrorlist.centos.org was cut
  - Add "(EOL)" to repo descriptions for EOL repos
  - Drop unused repos


author: Lucas Ravagnier <lucas.ravagnier@vates.tech> - 8.3.0-29
changelog:
  - Add 0001-fix-curl-resolve-TLS-issue-caused-by-restrictive-con.patch
  - This adds a cipher to '.curlrc' to fix a TLS Handshake Error with xoa.io


author: Yann Dirson <yann.dirson@vates.tech> - 8.3.0-30
changelog:
  - Sync with xenserver-release-8.4.0-14:
    - 0001-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0002-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch
    - Pull xcp-python-libs-compat (dropped from xapi deps between
      4.19 and 4.39)
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 8.4.0-14
    - CA-403415: Install xcp-python-libs-compat for XS8
    * Fri Oct 04 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 8.4.0-13
    - Enable new RRDD plugins
    * Fri Sep 20 2024 Mark Syms <mark.syms@cloud.com> - 8.4.0-12
    - CA-399511: Change systemd dependencies for vm.slice


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3.0-31
changelog:
  - Rebuild for updated branding-xcp-ng
  - Loosely sync with xenserver-release-8.4.0-15 (no real change, just a merge point)
    * Thu Jan 23 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 8.4.0-15
    - CP-53338: Rebuild to pick up branding changes to 8.4


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 8.3.0-32
changelog:
  - Fix patches that weren't properly generated and included in the specfile:
    - 0002-Sync-vm.slice-with-xenserver-release-v8.4.0-12.tar.g.patch
    - 0003-Sync-systemd-presets-with-xenserver-release-v8.4.0-1.patch


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.2-1
changelog:
  - Really disable unwanted repos when running yum update
  - Fix exception handling when a command fails


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.3-1
changelog:
  - Add LVM plugin to list and create PVs, VGs and LVs
  - RAID plugin: handle gracefully when no RAID is present


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.11.0-1
changelog:
  - Update smartctl plugin to report status about megaraid devices.
  - Add a new ipmitool plugin to get information from ipmitool.
    - It returns information about sensors
    - It also returns ipmi lan information


author: David Morel <david.morel@vates.tech> - 1.15.0-1
changelog:
  - Heavy rework of sdncontroller plugin
  - Version 1.14.0 was skipped, as the lsblk plugin changes introduced
    performance issues and were reverted in this release.


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-2
changelog:
  - Fix x2APIC cluster handling across S3
  - Avoid clobbering firmware memory during the load-base calculation
  - Fix ASAN issues identified in `xentop` and `xl dmesg`


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-4
changelog:
  - Fixes for
    - XSA-463 CVE-2024-45818
    - XSA-464 CVE-2024-45819
  - Fix IO-APIC directed EOIs when using AMD-Vi interrupt remapping
  - Fix a crash during livepatch loading caused by an incorrect order of checks
  - Switch xAPIC flat driver to use physical destination mode for external
    interrupts
  - Remove an overly strict check when parsing AMD IVRS ACPI tables
  - Fix a leak of pending interrupts during CPU offline


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-6.1
changelog:
  - Sync with 4.17.5-6
  - *** Upstream changelog ***
    * Tue Dec  3 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-6
    - Fix migration of VMs from CH 8.2 CU1 to XS8 when the guest is using BHI_DIS_S
    * Mon Nov 25 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-5
    - Initial AMD Turin support
    - Fix dom0 pIRQ limit calculation
    - Fix emulation of BMI1/2 instructions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-9.1
changelog:
  - Sync with 4.17.5-9
  - *** Upstream changelog ***
    * Fri Feb 07 2025 Javi Merino <javi.merino@cloud.com> - 4.17.5-9
    - Fix PCI config reads patch
    * Tue Feb  4 2025 Javi Merino <javi.merino@cloud.com> - 4.17.5-8
    - Fix IO_PAGE_FAULT reported by AMD
    - Reduce PCI config reads
    * Wed Dec 18 2024 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-7
    - Fix IO-APIC initialization with ExtINT mode pins
    - Fix emulation of MOVBE instruction
    - Fix Ocaml rpath setting


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-10.1
changelog:
  - Sync with 4.17.5-10
  - Remove xsa467.patch now provided by XS package
  - *** Upstream changelog ***
    * Thu Feb 27 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-10
    - Fix for XSA-467 CVE-2025-1713
    - Fix reboot/shutdown issues on AMD due to local APIC ESR interrupts


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-13.1
changelog:
  - Sync with 4.17.5-13
  - Remove xen-4.17.5-x86-intel-Fix-PERF_GLOBAL-fixup-when-virtualised.patch included in XS
  - *** Upstream changelog ***
    * Thu May  8 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-13
    - Fix for XSA-469 CVE-2024-28956
    * Mon Apr 28 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-12
    - Work around Ice Lake erratum ICX143, which manifests as a hang on boot
    - Fix crash on boot when perf counters are unavailable
    * Wed Mar 26 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-11
    - Add xenguest support for the platform:mmio_hole_size attribute
    - Identify which domain watchdog fired


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-14.1
changelog:
  - Sync with 4.17.5-14
  - Remove xsa470-4.17.patch included in XS release
  - *** Upstream changelog ***
    * Fri Jun 13 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-14
    - Fix for XSA-470 CVE-2025-27465
    - Fix booting on servers with RAM above the 16T boundary
    - Fix possible watchdog timeout caused by unnecessary cache flushing


author: Teddy Astie <teddy.astie@vates.tech> - 4.17.5-15.1
changelog:
  - Sync with 4.17.5-15
  - *** Upstream changelog ***
    * Fri Jul  4 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-15
    - Fix for XSA-471 CVE-2024-36350 CVE-2024-36357
    - Perform provenance checks on AMD microcode blobs


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 4.17.5-15.2
changelog:
  - Backport 22650d605462 "x86/hvmloader: select xen platform pci MMIO BAR UC or WB MTRR
    cache attributes"
  - Backport fd06f8700769 "tools/golang: update auto-generated libxl based types"


author: Yann Sionneau <yann.sionneau@vates.tech> - 4.17.5-18.1
changelog:
  - Sync with 4.17.5-18
  - Drop 0001-x86-hvmloader-select-xen-platform-pci-MMIO-BAR-UC-or.patch, applied upstream
  - *** Upstream changelog ***
    * Tue Aug  5 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-18
    - Domain runstate extentions for more RRDs
    - Mwait-idle updates for Intel Alder Lake thru Granite Rapids platforms

    * Wed Jul 23 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-17
    - Fix bad interaction of cache attribute relax with vGPU

    * Tue Jul 22 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-16
    - Relax cache attributes for Xen Platform PCI device BAR
    - Optimize flushing of Intel PML buffer


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.5-20.1
changelog:
  - Sync with 4.17.5-20
  - Use xsa472-[123].patch provided by XenServer
  - *** Upstream changelog ***
    * Mon Sep 01 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-20
    - Fix for XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143

    * Thu Aug 28 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-19
    - Add support for 4 or more socket Intel Granite Rapids systems
    - Fix usage of PCI devices on segments other than 0


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-21.1
changelog:
  - Sync with 4.17.5-21
  - Removed XSA-475 patches now included in 4.17.5-21
  - *** Upstream changelog ***
    * Thu Oct 09 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-21
    - Fix for XSA-475 CVE-2025-58147 CVE-2025-58148
    - Use superpages where possible on migrate/resume
    - Populate CPUID 0x1.edx features early for self-snoop detection


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-23.1
changelog:
  - Sync with 4.17.5-23
  - *** Upstream changelog ***
    * Thu Dec 04 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-23
    - Support the new Linux AMD microcode container format with multiple blobs per
      CPU, to cope with pre-EntrySign firmware.
    * Mon Oct 27 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-22
    - Fix for XSA-476 CVE-2025-58149
    - Support passthrough of devices on PCI segment different than 0


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-3
changelog:
  - Pass all MSI-X vector control writes to the device model
  - Distinguish "ucode already up to date" and treat it as success
  - Optimise HVMLoader AP bringup
  - Fix xentop cpu% sort order
  - Fix possible watchdog timeouts or NULL pointer deference with CPU hotplug


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-4
changelog:
  - Don't link oxenstored against libsystemd, and remove systemd-devel as a
    build dependency
  - Fix population of the online vCPU bitmap for PVH guests
  - Drop unused openssl-devel build dependency


author: Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.4-6
changelog:
  - Fix for XSA-458 CVE-2024-31143
  - Fix early detection of CPU features on hardware with the CPUID Limit active
    in firmware
  - Fix a bug whereby dynamic XSTATE CPUID information was provided to all
    guests, even those with XSAVE disabled
  - Fix a bug on Intel where HVM guests may have MMIO mappings forced to UC even
    if the guest kernel wanted a different cacheability
  - Fix multiple bugs with interrupt affinity handling around CPU hotplug


author: Matthew Barnes <matthew.barnes@cloud.com> - 4.17.4-7
changelog:
  - Fix CLOEXEC handling in libxenstore
  - Don't package Ocaml Xenbus library
  - Inject #DF instead of overwriting RIP in xen-hvmcrash


author: Roger Pau Monné <roger.pau@citrix.com> - 4.17.4-8
changelog:
  - Fix for XSA-460 CVE-2024-31145
  - Fix IO breakpoint recognition in PV guests
  - Fix libxenstore.so to not modify SIGBUS behind the back of the application
  - Fix a integer overflow in Xen's bunzip2(), leading to a rare decompression
    faliure


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.6-2.1
changelog:
  - Sync with 4.17.6-2
  - Drop patches for XSA-477 and XSA-479 from the XCP-ng patches section, now
    provided in the main patches section with different names
  - *** Upstream changelog ***
   * Thu Jan 15 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-2
   - Fix for XSA-479 CVE-2026-23553
   * Mon Dec 15 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-1
   - Update to Xen 4.17.6


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-4.1
changelog:
  - Sync with XenServer 4.17.6-4
  - *** Upstream changelog ***
    * Mon Feb 23 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.17.6-4
    - Improve migration performance
    * Mon Feb 09 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-3
    - Fix Xen watchdog triggering during domain construction.


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-5.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use xsa480.patch provided by XenServer
  - *** Upstream changelog ***
    * Thu Mar 05 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-5
    - Fix for XSA-480 CVE-2026-23554


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-6.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use 0001-xen-mm-don-t-unconditionally-clear-_PGC_need_scrub-i.patch from
    XenServer
  - *** Upstream changelog ***
    * Wed Mar 18 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-6
    - Fix for CVE-2026-4397.


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.17.6-6.2
changelog:
  - Fix for XSA-483 / CVE-2026-23556
  - Fix for XSA-486 / CVE-2026-23558
  - Fix for XSA-488 / CVE-2025-54505


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-6.1
changelog:
  - Sync with XenServer 4.17.6-6
  - Use 0001-xen-mm-don-t-unconditionally-clear-_PGC_need_scrub-i.patch from
    XenServer
  - *** Upstream changelog ***
    * Wed Mar 18 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-6
    - Fix for CVE-2026-4397.


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-8.1
changelog:
  - Sync with XenServer 4.17.6-8
  - Drop patches for nested-virt, XSA-483, XSA-486, XSA-488 from the XCP-ng patch queue,
    now provided in the main patch queue
  - Drop unused 0002-tools-golang-update-auto-generated-libxl-based-types.patch from the
    XCP-ng patch queue
  - *** Upstream changelog ***
    * Wed Apr 22 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-8
    - Fix for XSA-483 CVE-2026-23556
    - Fix for XSA-484 CVE-2026-23557
    - Fix for XSA-486 CVE-2026-23558
    * Mon Apr 20 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-7
    - Fix for XSA-488 CVE-2025-54505


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.6-9.1
changelog:
  - Sync with XenServer 4.17.6-9
  - *** Upstream changelog ***
    * Wed May  6 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-9
    - Fix for XSA-490 CVE-2025-54518
    - Fix crash on boot when setting up shadow stacks
    - Fix hang on boot when configuring the IOMMU on certain AMD platforms
    - Fix a bug on AMD systems where a guests CR2 register value gets lost on
      migrate


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-9.3.1
changelog:
  - Fix for XSA-497 (CVE-2026-42494, CVE-2026-42495, CVE-2026-62423,
    CVE-2026-62424, CVE-2026-62425)
  - Fix for XSA-500 (CVE-2026-62428)
  - Fix for XSA-501
  - Fix for XSA-503 (CVE-2026-62430)
  - Fix for XSA-504 (CVE-2026-62431)
  - Fix for XSA-505 (CVE-2026-62432)
  - Fix for XSA-507 (CVE-2026-62434)


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 2.0.5-2
changelog:
  - CP-49659:  Fix collecting kernel module infos with non-latin strings
  - CA-394409: Fix collecting logs for HW certification and tapdisk


author: Ming Lu <ming.lu@cloud.com> - 2.0.11-1
changelog:
  - CP-52905: Add collection for license server telemetry logs
  - CA-403717: Make XEN_RT mode additive for entries


author: Stephen Cheng <stephen.cheng@cloud.com> - 2.0.12-1
changelog:
  - CA-399631: Increase the max size of xenserver-config for bug-tool
  - CP-52714: Include rolled over xha logs into a server status report


author: Christian Lindig <christian.lindig@citrix.com> - 10.1.0-1
changelog:
  - XSI-301: Print errno when watchdog hypercall fails.
  - XSI-301: remove duplicated unlock_pages lines
  - CA-315962 cleanupwatchdog: Use hypercall's errno
  - CA-315962 cleanupwatchdog: exit when encountering errors on hypercalls
  - CA-315962 cleanupwatchdog: restrict hypercalls to disable watchdogs
  - CA-315962 cleanupwatchdog: simplify hypercall call handling
  - CA-315962 cleanupwatchdog: Allow resetting watchdog slots without an HA file
  - CA-315962: Flush watchdog slots on HA startup


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 25.0.0-1.1
changelog:
  - Update to 25.0.0-1
  - *** Upstream changelog ***
    * Fri Jan 10 2025 Rob Hoes <rob.hoes@citrix.com> - 25.0.0-1
    - CA-403139: Set scheduler policy and priority thread
    - CA-403683: Configurable syslog printing


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 25.1.0-1.1
changelog:
  - Update to 25.1.0-1
  - Sync patches and robustify access to NBD paths using O_SYNC
  - *** Upstream changelog ***
    * Thu Mar 06 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 25.1.0-1
    - CA-407106: Fix various static analyzer warnings
    - CA-404658: Separate heartbeat send and receive threads
    - CA-407313: Replace HA spinlock with rwlock
    - CA-407256: Call to xha-lc is a no-op
    - CA-406953: Fix pointer truncation in hypercall arguments and undefined behaviour
    * Thu Jan 30 2025 Alex Brett <alex.brett@cloud.com> - 25.0.1-1
    - CA-405454: Fix xha when using cgroup v2


author: Gael Duperrey <gduperrey@vates.tech> - 25.2.0-1.1
changelog:
  - Update to 25.2.0-1
  - *** Upstream changelog ***
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.2.0-1
    - CP-53906: Print host index in query_liveset
    - fix xha logging typos in sm.c
    - ci: Add missing package
    - CA-404344: update service to systemd command


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.66.0-1.1
changelog:
  - Remove dlm, which is only required by proprietary xapi-clusterd
  - Drop the dlm-devel BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.72.0-1.1
changelog:
  - Update to 6.72.0-1
  - Rediff xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch
  - *** Upstream changelog ***
    * Fri Jul 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.72.0-1
    - upstream: patch rpclib to support python3, and start using it
    - upstream: patch uri packages to parse ipv6 addresses correctly
    - maintenance: Fix issues spotted by the opam linter

    * Mon Jul 17 2023 Edwin Török <edwin.torok@cloud.com> - 6.71.0-2
    - Bump release and rebuild

    * Tue Jul 11 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.71.0-1
    - xs: update xapi-rrd to 1.9.2 (memory leak fix)
    - xs: add goblint for static analysis of C stubs

    * Mon Jul 10 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-2
    - Remove build dependencies, they are opam's normal dependencies

    * Wed Jun 07 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-1
    - xs: update xapi-stdext packages
    - upstream: remove unused dependencies, do not depend on xen
    - xs-extra: update metadata from upstream
    - vhd-format: move from upstream to xs-extra

    * Tue Jun 06 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-2
    - Bump release and rebuild

    * Fri May 05 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-1
    - ocaml: Use correct file contents in ocaml-system.4.14.1
    - upstream: Remove old ocamlformat and odoc-parser

    * Mon Apr 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.68.0-1
    - xs: do not package ezxenstore, it's a part of xen-api
    - ocaml: add 4.14

    * Wed Mar 22 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.67.0-1
    - xs: xenctrl.dummy: do not rsync Xen packages we do not use
    - Make xs-opam self-consistent and able to run unit tests
    - upstream: enforce only known licenses
    - upstream: update dune packages to 3.7.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.74.0-1.1
changelog:
  - Update to 6.74.0-1
  - Drop xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch, applied by XS
  - *** Upstream changelog ***
    * Thu Nov 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.74.0-1
    - xs: update xapi-stext packages to 4.23.0
    - licenses: update package licenses

    * Fri Oct 27 2023 Lin Liu <Lin.Liu01@cloud.com> - 6.73.0-2
    - Build with gcc for xs9

    * Wed Sep 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.73.0-1
    - xs: update polly and qmp
    - upstream: update many packages, there are no breaking changes


author: Benjamin Reis <benjamin.reis@vates.tech> - 6.77.0-1.1
changelog:
  - Rebase on 6.77.0-1
  - Drop xs-opam-repo-6.74.0-metajson.XCP-ng.patch
  - *** Upstream changelog ***
    * Wed Jan 31 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.77.0-1
    - Remove xapi-rd, xapi-inventory and xapi-stext-* packages

    * Wed Dec 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-2
    - Bump release

    * Tue Dec 19 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-1
    - upstream: update ocamlformat to the latest version
    - update inotify to 2.5.0 and uri to 4.4.0

    * Fri Nov 17 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.75.0-1
    - xs: update xapi-rrd to 1.11.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.78.0-1.1
changelog:
  - Rebase on 6.78.0-1
  - *** Upstream changelog ***
    * Thu Mar 07 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.78.0-1
    - Add patch for rpclib to accept empty variants
    - Non-breaking update of upstream dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.80.0-1.1
changelog:
  - Rebase on 6.80.0-1
  - *** Upstream changelog ***
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1

    * Mon May 13 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.79.0-1
    - ocaml: add 4.14.2 packages
    - upstream: update non-breaking packages


author: Yann Dirson <yann.dirson@vates.tech> - 6.86.0-1.1
changelog:
  - Update to 6.86.0-1
  - Refresh removal of dlm package (location changed in source tree)
  - Don't pass "-f" to "rm" while removing packages, to better catch upstream changes
  - Fix typo generating /etc/profile.d/opam.sh
  - Reformat changelog to allow diffing with upstream
  - *** Upstream changelog ***
    * Wed Oct 09 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.86.0-1
    - Include crowbar library
    
    * Tue Oct 08 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.85.0-1
    - Update Uuidm to 0.9.9
    - Use upstream folder structure, use opam-directed tools for managing it
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.84.0-1
    - CA-399172: fix potential crash in Uri.of_string
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.83.0-1
    - Patch Uri packages to add path_unencoded
    - jst-config: fix build on Fedora40
    - Metadata refresh, breaking update of upstream libraries
    - Remove systemd library
    
    * Tue Jul 02 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.81.0-1
    - Update crc to 2.2.0
    - Add qcheck and qcheck-alcotest
    
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.87.0-1.1
changelog:
  - Update to 6.87.0-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.87.0-1
    - Drop dependency on async and core packages
    - Non-breaking updates of packages


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 6.91.0-1.1
changelog:
  - Update to 6.91.0-1
  - *** Upstream changelog ***
    * Fri Jul 18 2025 Rob Hoes <rob.hoes@cloud.com> - 6.91.0-1
    - Add qcow-stream and its dependencies
    - packages: update xen-api's metadata

    * Tue Jun 10 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.90.0-1
    - packages: update dune packages to 3.18.2
    - packages: update ocaml-xenstore to 2.4.0
    - packages: update mirage-crypto to 2.0.1

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 6.89.0-2
    - Bump release and rebuild

    * Thu May 22 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.89.0-1
    - packages: round of non-breaking updates (dune, ssl, others)
    - packages: update xenstore_transport to 1.4.0

    * Fri Mar 28 2025 Rob Hoes <rob.hoes@cloud.com> - 6.88.0-1
    - New HTTP packages
    - Non-breaking updates of existing packages

    * Tue Jan 21 2025 Deli Zhang <deli.zhang@cloud.com> - 6.87.0-2
    - CP-52964: Build with OpenSSL3 for XS8


author: Pau Ruiz Safont <pau.safont@vates.tech> - 6.96.0-1.1
changelog:
  - *** Upstream changelog ***
    * Fri Oct 03 2025 Rob Hoes <rob.hoes@cloud.com> - 6.96.0-1
    - Add missing oxenstored dependencies

    * Wed Oct 01 2025 Rob Hoes <rob.hoes@cloud.com> - 6.95.0-1
    - Package updates for OCaml 5.3 compatibility


author: Pau Ruiz Safont <pau.safont@vates.tech> - 6.97.0-1.1
changelog:
  - *** Upstream changelog ***
    * Thu Nov 27 2025 Rob Hoes <rob.hoes@cloud.com> - 6.97.0-1
    - qcow: update to 0.12.2
    - packages: define dlm's depext for centos-based distributions


author: Pau Ruiz Safont <pau.safont@vates.tech> - 6.99.0-1.1
changelog:
  - *** Upstream changelog ***
   * Tue Jan 13 2026 Rob Hoes <rob.hoes@cloud.com> - 6.99.0-1
   - packages: Use ocamlformat 0.28.1

   * Tue Jan 13 2026 Rob Hoes <rob.hoes@cloud.com> - 6.98.0-1
   - vhd-format: Sync with xapi
   - packages: prepare for an ocamlformat compatible with ocaml 5.4 (#750)
   - packages: update ocamlformat from 0.27.0 to 0.28.1
   - packages: patch notty 0.2.3 for ocaml 5.4
   - packages: update num to 1.6
   - packages: drop bisect_ppx from testing dependencies
   - packages: update xen-api's metadata


author: Yann Dirson <yann.dirson@vates.fr> - 10.1.13-1.2
changelog:
  - Update colors to match new branding
  - Bump patchname to xsconsole-10.1.13-define-xcp-ng-colors.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-1.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Oct 04 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 10.1.14-1
  - - CP-40640: Show the textual rather than numeric product version


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.1.14-2.1
changelog:
  - Update to 10.1.14-2
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 10.1.14-2
  - - CP-43942: Remove Portable SR feature


author: Benjamin Reis <benjamin.reis@vates.tech> - 11.0.2-1.1
changelog:
  - Update to 11.0.2-1
  - Redo xsconsole-11.0.2-support-ipv6.XCP-ng.patch (now contains xsconsole-10.1.14-ipv6-autoconf.XCP-ng.patch)
  - Drop xsconsole-10.1.14-display-vlan.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Mar 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.2-1
  - - CA-369899: Add NTP config control for DHCP|Default|Manual|None options
  - - CA-389475: Update the timezone when it changes
  - * Thu Feb 29 2024 Mark Syms <mark.syms@citrix.com> - 11.0.1-1
  - - CA-389275: return insrtype if no translation
  - * Thu Feb 29 2024 Fei Su<fei.su@cloud.com> - 11.0.0-2
  - - CP-48192 Requires glibc-langpack-en to fix the locale.Error on xs9
  - * Mon Feb 05 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.0-1
  - - CP-44690: Upgrade to python 3


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.6-1.1
changelog:
  - Sync with 11.0.6-1
  - *** Upstream changelog ***
  - * Fri Jun 07 2024 Stephen Cheng <stephen.cheng@cloud.com> - 11.0.6-1
  - - CA-388527: Fix 'timed out' when creating an ISCSI SR
  - * Thu May 16 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.3-1
  - - CA-357771: Remove obsolete strings: StorageLink(CVSM/cslg) leftovers


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 11.0.8-1.1
changelog:
  - Sync with 11.0.8-1
  - *** Upstream changelog ***
    * Tue Jul 23 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 11.0.8-1
    - CA-390512: Improved xenapi error handling
    * Tue Jul 23 2024 Alex Brett <alex.brett@cloud.com> - 11.0.7-1
    - CP-49228: Reintroduce Portable SR feature


author: David Morel <david.morel@vates.tech> - 11.0.8-1.2
changelog:
  - Backport fix to sync network reset trigger file with current XAPI
  - Backport fix for IPv6 truncated in pool.conf on network reset


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 11.0.9.1-1.1
changelog:
  - Sync with 11.0.9.1-1
  - Drop xsconsole-11.0.8-sync-network-reset-trigger-file.patch
  - Drop xsconsole-11.0.8-do-not-truncate-ipv6-in-pool-config-on-reset.patch
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 11.0.9.1-1
    - CP-309227: Enable xsconsole to support control SSH and ssh-auto-mode
    * Thu Aug 1 2024 Lin Liu <Lin.Liu01@cloud.com> - 11.0.9-1
    - CA-395025: Local command shell login failed on XS9


