# changelog

author: Satoe Imaishi <simaishi@redhat.com> - 1:2.15.9-1
changelog:
  - ansible-core 2.15.9 release
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release
  - Fix license and manpages macros usage
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core)


author: candlepin-bot 4.6.0-1
changelog:
  - Bump com.github.ben-manes.caffeine:caffeine from 3.1.8 to 3.2.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.11.1 to 3.11.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.17.2 to 1.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.2 to 3.27.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.0.1 to 12.0.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-995: Updated the entity layering migration's tiebreakers
    (crog@redhat.com)
  - Bump com.google.code.gson:gson from 2.12.0 to 2.12.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.51.0 to 0.52.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.4 to 42.7.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-936: Create bulk set consumer environments endpoint
    (joshmalbrecht@gmail.com)
  - Bump nebula.lint from 20.5.5 to 20.5.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.11.0 to 2.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.79 to 1.80
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcpkix-jdk18on from 1.79 to 1.80
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.0.0 to 12.0.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.1 to 10.21.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.8.6 to 4.9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.12 to 8.12.1 (gradle-update-robot@regolo.cc)
  - Bump openapi-generator from 7.10.0 to 7.11.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.swagger:swagger-annotations from 1.6.14 to 1.6.15
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-987: Fixed data importer (sbakaj@redhat.com)
  - CANDLEPIN-989: Updated AdapterEvent to sealed interface
    (joshmalbrecht@gmail.com)
  - Added enhancements to the register_consumer.py dev utility (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.10.2 to 3.11.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 11.1.1 to 12.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-980: Updated RHEL dependency from pki-servlet-engine to tomcat
    (sbakaj@redhat.com)
  - Bump nebula.lint from 20.3.1 to 20.5.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.17.1 to 1.17.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-277: Disallowed creation of AK with Pool(s) on SCA
    (sbakaj@redhat.com)
  - Bump artemis from 2.38.0 to 2.39.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.15 to 1.5.16
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.1 to 3.27.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.14.2 to 5.15.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mozilla:rhino from 1.7.15 to 1.8.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.0 to 3.27.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.0 to 10.21.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.12 to 1.5.15
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.11.1 to 8.12 (gradle-update-robot@regolo.cc)
  - Bump org.assertj:assertj-core from 3.26.3 to 3.27.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-983: Cached tomcat package in GH action (sbakaj@redhat.com)
  - Bump junit from 5.11.3 to 5.11.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update ko.po (81469659+simmon-nplob@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.20.2 to 10.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.3.0 to 20.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-978: Removed extranous null check during consumer check in
    (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.10.1 to 3.10.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.1 to 11.0.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 11.1.0 to 11.1.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Added blank address for local pg_hba.conf entry (joshmalbrecht@gmail.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.20.1 to 10.20.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump dawidd6/action-download-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.2.2 to 20.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.18.1 to 2.18.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 6.0.0.5145 to 6.0.1.5171
    (49699333+dependabot[bot]@users.noreply.github.com)
  - 2017774: Disallowed Manual Subscription Attachment in SCA Mode
    (sbakaj@redhat.com)
  - CANDLEPIN-974: Restored page size header when fetching owner pools
    (crog@redhat.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.0 to 3.5.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.11 to 8.11.1 (gradle-update-robot@regolo.cc)


author: candlepin-bot 4.6.1-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.5 to 11.0.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump net.logstash.logback:logstash-logback-encoder from 8.0 to 8.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.0 to 12.1.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.16.1 to 5.17.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-990: Updated cp_consumer_environments.priority to tinyint
    (joshmalbrecht@gmail.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.4 to 10.23.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-943: Removed JIRA target check from forks PRs (sbakaj@redhat.com)
  - CANDLEPIN-1001: Refactored ConsumerCloudData creation/update
    (sbakaj@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.3 to 3.12.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.2 to 3.5.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CHAINSAW-382: Updated dev container image to output Candlepin logs
    (joshmalbrecht@gmail.com)
  - Bump org.sonarqube from 6.0.1.5171 to 6.1.0.5360
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.39.0 to 2.40.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.16.0 to 5.16.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.2 to 4.9.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.12.0 to 5.12.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-999: Fixed paging for list owner pools (joshmalbrecht@gmail.com)
  - CANDLEPIN-996: Additional SAST scan fixes (sbakaj@redhat.com)
  - CANDLEPIN-996: Fixed SAST scan issues (sbakaj@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.2 to 3.12.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated hard coded unit test date (joshmalbrecht@gmail.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Revert "CANDLEPIN-938: Reverted explicit content bulk translation"
    (crog@redhat.com)
  - CHAINSAW-341: Improved SCA payload regeneration performance
    (joshmalbrecht@gmail.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.4 to 11.0.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.3 to 10.21.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.15.2 to 5.16.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.1 to 4.9.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.18.2 to 2.18.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.11.0 to 7.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-985: Switched default contentAccessModeList to SCA only
    (sbakaj@redhat.com)
  - Bump slf4j from 2.0.16 to 2.0.17
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.16 to 1.5.17
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated JUnit dependencies to 5.12.0 using the BOM (sbakaj@redhat.com)
  - Update Gradle Wrapper from 8.12.1 to 8.13 (gradle-update-robot@regolo.cc)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.2 to 10.21.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.0 to 3.12.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.3 to 11.0.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.11.2 to 3.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.0.2 to 12.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.1 to 3.5.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.0 to 4.9.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.2 to 11.0.3
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.6.2-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - CHAINSAW-481: IAE when sort_by query parameter not specified
    (joshmalbrecht@gmail.com)
  - Bump org.sonarqube from 6.1.0.5360 to 6.2.0.5505
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.6 to 11.0.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.5.7 to 20.5.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.23.0 to 10.23.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.13 to 8.14 (gradle-update-robot@regolo.cc)
  - Bump jackson from 2.18.3 to 2.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.13.0 to 2.13.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.5.6 to 20.5.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1014: Fix Content URLs in SCA cert for Multi Env
    (nmoumoul@redhat.com)
  - Bump info.picocli:picocli from 4.7.6 to 4.7.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-io:commons-io from 2.18.0 to 2.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.12.1 to 2.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.12.1 to 5.12.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.6.3-1
changelog:
  - CANDLEPIN-1037: Fixed consumer env priority database column type
    (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.3 to 3.13.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.3 to 5.13.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-io:commons-io from 2.19.0 to 2.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.19.1 to 2.19.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.41.0 to 2.42.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.2 to 3.13.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.1 to 3.2.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.jimfs:jimfs from 1.3.0 to 1.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1028: Restored cert deletion during inactive consumer cleanup
    (crog@redhat.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1028: Added event generation to environment deletion
    (crog@redhat.com)
  - Bump okhttp3 from 4.12.0 to 5.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1028: Added event generation to the inactive consumer cleanup job
    (crog@redhat.com)
  - Bump org.junit:junit-bom from 5.13.2 to 5.13.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.8 to 11.0.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.14.2 to 8.14.3 (gradle-update-robot@regolo.cc)
  - Updated code to comply with latest checkstyle rules (sbakaj@redhat.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.3 to 3.5.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.1 to 5.13.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.6.1 to 20.6.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Prevent argument injection in SonarQube analysis step (sbakaj@redhat.com)
  - Bump jackson from 2.19.0 to 2.19.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.1 to 3.13.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add validation for name during consumer update - Centralized all checks for
    consumer name into one method. - Applied that method to both consumer create
    and update. - Renamed tests to be more descriptive. (nmoumoul@redhat.com)
  - Bump org.owasp.dependencycheck from 12.1.2 to 12.1.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.6 to 42.7.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.0 to 3.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.0 to 5.13.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.7 to 11.0.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.1 to 12.1.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.80 to 1.81
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.0 to 3.13.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.14.1 to 8.14.2 (gradle-update-robot@regolo.cc)
  - HOTFIX: Added a check to prevent sorting on nested object fields
    (crog@redhat.com)
  - Bump org.bouncycastle:bcpkix-jdk18on from 1.80 to 1.81
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.6.0 to 20.6.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.24.0 to 10.25.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.12.2 to 5.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.5.8 to 20.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CHAINSAW-472: Add extra anonymous consumer uuid logging (nmoumoul@redhat.com)
  - Bump org.postgresql:postgresql from 42.7.5 to 42.7.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.17.0 to 5.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.23.1 to 10.24.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.4 to 3.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.14 to 8.14.1 (gradle-update-robot@regolo.cc)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.swagger:swagger-annotations from 1.6.15 to 1.6.16
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.40.0 to 2.41.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.7.0-1
changelog:
  - CANDLEPIN-1059: Reduced 429s while fetching content access payloads
    (crog@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.10 to 11.0.11
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1050: Fixed constraint violation in InactiveConsumerCleanerJob
    (sbakaj@redhat.com)
  - CANDLEPIN-1059: Refactored Transactional and EERetry utility classes
    (crog@redhat.com)
  - Bump com.puppycrawl.tools:checkstyle from 11.0.0 to 11.0.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.ehcache:ehcache from 3.11.0 to 3.11.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.19.2 to 2.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 6.2.0.5505 to 6.3.1.5724
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated i18n job to support Candlepin 4.6 (crog@redhat.com)
  - CANDLEPIN-1045: Disallow running sonar from a fork PR
    (joshmalbrecht@gmail.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.ehcache:ehcache from 3.10.8 to 3.11.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.18.0 to 5.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.3 to 4.9.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.4 to 3.5.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.26.1 to 11.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.9 to 11.0.10
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.7.1-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jaxb from 4.0.5 to 4.0.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1065: Added bulk migration event (joshmalbrecht@gmail.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.4 to 3.14.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.7 to 42.7.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.81 to 1.82
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.5 to 4.9.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.4 to 4.9.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.5 to 3.5.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.13.1 to 2.13.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)


author: candlepin-bot 4.7.2-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - CHAINSAW-474: Updated Refresher to use a single transaction
    (joshmalbrecht@gmail.com)
  - Bump org.sonarqube from 6.3.1.5724 to 7.0.0.6105
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.7 to 12.1.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.12 to 11.0.13
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.3 to 12.1.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.2.0 to 5.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated setConsumersEnvironments to only update appropriate consumers
    (joshmalbrecht@gmail.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.11 to 11.0.12
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.1.0 to 5.2.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fixed malformed $ref in getConsumer operation (thsimmon@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.14.0 to 3.14.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Documented 410 gone response for getConsumer API (thsimmon@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.4 to 6.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 11.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.52.0 to 0.53.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.7.3-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1096: Emit event when bulk consumers are set to environments
    (sbakaj@redhat.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1116: Updated startSessions to not lose sessions
    (joshmalbrecht@gmail.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Extra logging during anonymous org claim/migration (nmoumoul@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.14 to 11.0.15
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mozilla:rhino from 1.8.0 to 1.8.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.8 to 12.1.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 7.0.1.6134 to 7.1.0.6387
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1108: Improved functionality & handling of deleted consumers
    (crog@redhat.com)
  - Bump okhttp3 from 5.3.1 to 5.3.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.3.0 to 5.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1109: Updated anonymous consumer certificate expiration
    (joshmalbrecht@gmail.com)
  - CHAINSAW-639: Added maven publication for BOM (thsimmon@redhat.com)
  - CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.13 to 11.0.14
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Downgraded Quartz scheduler to 2.5.0 (crog@redhat.com)
  - Bump commons-io:commons-io from 2.20.0 to 2.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.2.1 to 5.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.43.0 to 2.44.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.0.0 to 6.0.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.20.0 to 2.20.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.quartz-scheduler:quartz from 2.5.0 to 2.5.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.7 to 0.2.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 7.0.0.6105 to 7.0.1.6134
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.7 to 4.9.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.42.0 to 2.43.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.7.4-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump artemis from 2.50.0 to 2.51.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1136: Strip upstreamConsumer from consumer owner response
    (sbakaj@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1024: Added cleanup for inactive anonymous cloud consumers
    (joshmalbrecht@gmail.com)
  - Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.3.0 to 9.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.15.1 to 3.16.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Remove dedicated Gradle wrapper update action (sbakaj@redhat.com)
  - CANDLEPIN-1123: Added combined_reporting capability (sbakaj@redhat.com)
  - CANDLEPIN-1132: Fixed intermittently failing content access spec tests
    (joshmalbrecht@gmail.com)
  - Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.15 to 11.0.18
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.2.1 to 9.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.44.0 to 2.50.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add new token for upgrade gradle GH action (nmoumoul@redhat.com)
  - Bump jackson from 3.0.3 to 3.0.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Do not run nebula lint on every gradle command (nmoumoul@redhat.com)
  - Add new translations using Weblate (hosted@weblate.org)
  - Disabled JRE provisioning for Soanr action (sbakaj@redhat.com)
  - CANDLEPIN-1019: Upgraded openapi-generator to 7.19.0
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1121: Update from Jackson 2 to Jackson 3 (nmoumoul@redhat.com)
  - Increase vagrant vm resources (nmoumoul@redhat.com)
  - CANDLEPIN-1115: Updated org.quartz-scheduler:quartz to version 2.5.2
    (joshmalbrecht@gmail.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.15.0 to 3.15.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add link to the CANDLEPIN jira issue tracker (nmoumoul@redhat.com)
  - CANDLEPIN-1107: Updated checkstyle to 12.3.1 (joshmalbrecht@gmail.com)
  - CANDLEPIN-1046: Updated Gradle to 9.2.1 (joshmalbrecht@gmail.com)
  - CANDLEPIN-1101: Updated contributing guide with CI and Javadoc details
    (sbakaj@redhat.com)
  - Remove EL8 support & upgrade tomcat (nmoumoul@redhat.com)
  - Bump org.owasp.dependencycheck from 12.1.9 to 12.2.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1113: Prevent ActiveMQ message buffering (joshmalbrecht@gmail.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Updated translated message to be parameterized (joshmalbrecht@gmail.com)
  - Bump org.junit:junit-bom from 6.0.1 to 6.0.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Change Java version to 17 in eclipse setting (sbakaj@redhat.com)
  - Removed database ports from CP container image (sbakaj@redhat.com)
  - Bump org.mozilla:rhino from 1.8.1 to 1.9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.14.1 to 3.15.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Remove candlepin-4.3-HOTFIX branch from i18n job (nmoumoul@redhat.com)
  - Added remote debugging JVM args to dev container (joshmalbrecht@gmail.com)


author: Zach Huntington-Meath <zhunting@redhat.com> - 8.12.1-1
changelog:
  - Initial openvox-server build based on upstream 8.12.1
  - Obsoletes/Conflicts puppetserver for smooth upgrade path
  - Provides puppetserver for dependency compatibility


author: Foreman Packaging Automation <packaging@theforeman.org> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Fix PEP 639 license field incompatibility with RHEL 9 setuptools
  - Drop stale Requires: setuptools (no longer a runtime dependency)


author: Odilon Sousa <osousa@redhat.com> - 0.4-38
changelog:
  - Update Patches and change to 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0006-Fix-compatibility-issues-with-Python-3.11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-tests-with-python-3.12.1.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: Odilon Sousa <osousa@redhat.com> - 3.85.15-4
changelog:
  - Add python3.12-setuptools as runtime Requires (provides distutils shim for Python 3.12, required by pulpcore/app/tasks/export.py)


author: Ian Ballou <ianballou67@gmail.com> - 4.20.0-0.3.pre.master
changelog:
  - Temporarily pin Pulp bindings to known working versions due to https://github.com/pulp/pulp_rpm/issues/4178


author: candlepin-bot 4.7.5-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump org.sonarqube from 7.2.2.6593 to 7.2.3.7755
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.51.0 to 2.52.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1149: Added non-unique index to deleted consumer's UUID
    (crog@redhat.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1147: Force upgrade mchance-c3p0 & mchange-commons-java
    (nmoumoul@redhat.com)
  - Bump jackson from 3.0.4 to 3.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.0.2 to 6.0.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.19.0 to 7.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mozilla:rhino from 1.9.0 to 1.9.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.9 to 42.7.10
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Foreman Packaging Automation <packaging@theforeman.org> - 2.12.1-1
changelog:
  - Update to 2.12.1
  - Fix PEP 639 license string and lower setuptools requirement for RHEL 9 buildroot


