Packages changed:
  gimp (3.2.4 -> 3.2.6)
  kbd (2.9.0 -> 2.10.0)
  kernel-source (7.2.4 -> 7.2.5)
  lrzip (0.660 -> 0.702)
  openSUSE-release (20260912 -> 20260914)
  qt6-declarative
  shotwell (0.32.17 -> 33.0)
  thunar (4.20.9 -> 4.20.10)
  zchunk (1.5.3 -> 1.5.4)
  zoo (2.10 -> 2.10.1)

=== Details ===

==== gimp ====
Version update (3.2.4 -> 3.2.6)
Subpackages: gimp-plugin-aa gimp-plugin-python3 libgimp-3_0-0 libgimpui-3_0-0

- Update to 3.2.6
  - Core:
  - macOS: Macbook touchpad over-sensitivity now fixed.
  - Destructive-only filter actions will be made insensitive on
    all non-raster layers (unless rasterized).
  - Windows: in release builds, we now attach our standard
    outputs to the Windows console on certain scenarios only
    (when there is no interface, or in verbose mode, or when
  - -console-messages is set, or finally when there are batch
    commands). By default, we are back to how it was before GIMP
    3.2.0, which is that GIMP doesn't output anything on native
    shells it was called from.
  - Fix expand from center which was failing in some cases.
  - Layers to Image Size only works for raster (or rasterized)
    layers.
  - Clipboard brush and pattern max size bumped to 8192 on
    Aarch64 architecture too (this was changed in 3.2.0 RC2, but
    only for x86-64 and PPC64).
  - Dashboard backtraces now work on Windows Aarch64 too
    (additionally to Windows x86-64).
  - No pass-through reduction on group layers with
    non-destructive filters.
  - Dashboard backtraces now work on macOS with native API
    without libbacktrace.
  - MyPaint's custom brush directory ($USERPROFILE/.mypaint)
    better retrieved on Windows.
  - XCF:
  * Visibility lock on paths is now properly saved. Channel
  * filters were not saved either. XCF is bumped to version 26.
  - Clear does not affect non-raster layers, unless rasterized.
  - Improved management of plug-in pipes and process watch. In
    particular, we avoid various warnings (about empty contexts
    or broken pipes) when closing GIMP if plug-ins processes
    didn't end first or just when closing some plug-ins.
  - Stop noninteractive filters on invisible layers unless the
    relevant option is enabled in Preferences.
  - We now verify if a plug-in has been updated since last start
    by using the changed time (ctime) as fallback when the
    modified time (mtime) is 0. This is because on some
    environment (such as ostree, hence flatpak), all files mtimes
    are set to the UNIX epoch.
  - Various small changes or fixes were made to prepare for a
    potential GTK 4 port.
  - Cache directory on macOS is now in ~/Library/Caches/ (instead
    of ~/Library/Application Support/).
  - Added "Rotation" input for dynamics. This gives us support of
    the Wacom Art Pen 2 stylus at least.
  - Various performance improvements in text tool and font
    handling were made.
  - It is now possible to cut layer groups with a selection
    (which will cut every children, recursively), as long as
    every child is writable ("Content Lock" must not be set and
    the layers must be raster, or rasterized).
  - Tools:
  - Warp tool: properly show the warp cursor even when hovering
    other images from where we started warping.
  - Crop tool: do not change position of vector layers.
  - Gradient tool:
  * The non-linear blending space was always used, even
    when linear blending was requested.
  * Fixed transparent areas when the Offset is set to 100%
  * (1.0) and
    the Repeat policy is set to Truncate.
  - Filters: clip setting was lost when editing non-destructive
    filters.
  - Text tool: ignore selected layer mask of a text layer when
    selecting it with the tool to edit the text contents. The
    layer mask still stays the selected item in such a case.
  - Heal tool: dark smudge at crop boundaries is fixed.
  - Color Picker tool: there was an exception ignoring Sample
    Merged option when a single layer was visible (allowing to
    retrieve the exact palette color from indexed images). This
    exception has been further restricted to the absence of
    filters. Sample Merged, even of single layer images, should
    return the color after filters are applied.
  - MyPaint Brush tool: broken initialization was sometimes
    triggering a stroke being skipped.
  - Graphical User Interface:
  - MyPaint brush previews are now loaded at full size instead of
    48×48.
  - Alpha Component previews fixed.
  - Caret/text cursor color now specifically set in our theme to
    prevent it from being overridden by the system theme.
  - macOS:
  * Title bar color scheme now follows the chosen theme scheme.
  * Transiency of dialogs on macOS was globally broken and is
  * now
    being worked around on a case-by-case basis.
  * Minimize button removed from various dialogs. Fix dockable
  * windows not floating. GIMP's Spin buttons now respect the
  * Cmd key. Scrollbars hiding now follows the relevant macOS
  * system setting to
    allow always showing them if requested (this is not the
    default), just like it does with supported DEs.
  * Use Cmd+` instead of Alt+Tab. Modules and Units are now
  * listed on the mac menu like in 2.10. Welcome and About
  * dialogs are redundant from the application menu
    and were removed.
  * Ctrl+F2 is used on behalf of Alt. Cmd+Shift+/ opens the
    ... changelog too long, skipping 178 lines ...
  + gimp-CVE-2026-80101.patch (bsc#1276911, glgo#GNOME/gimp#16583)

==== kbd ====
Version update (2.9.0 -> 2.10.0)
Subpackages: libkbdfile1 libkeymap1 libkfont0

- Require xkeyboard-config to be able to load XKB based keymaps.
  Its data is required to compile these keymaps, and its %posttrans
  creates /var/lib/xkb/compiled in a way compatible with immutable
  updates.
- Update to version 2.9.0 (boo#1268148):
  * keymaps:
    + Add Backtab keysym and update keymaps to use it for
    Shift+Tab.
    + Add keymap for Norwegian Apple ISO keyboard.
    + Adjust Swiss German keyboard mappings.
  * libkeymap:
    + Add API to validate keysyms.
    + Add XKB-aware symbol aliases through the normal synonym
    tables.
    + Fix compose table upload limit handling.
  * utils:
    + loadkeys: Add support for generating console keymaps from
    XKB.
    + loadkeys: Add XKB compose import support.
    + loadkeys: Add support for XKB group switching, modifier
    handling, virtual console switching and keypad/editing
    remaps.
    + loadkeys: Add diagnostics for XKB keysym coverage.
    + openvt: make -u process matching more conservative.
    + setfont: Add setfont --check that checks for setfont
    availability without logging errors (boo#1212970,
    obsoletes kbd-setfont-check.patch).
  * contrib:
    + Add an XKB keysym coverage diagnostic tool.
    + Add a VT layout indicator using keyboard LED lock triggers.
- Refresh kbd-1.15.5-loadkeys-search-path.patch.
- Enable compressed file loading introduced by the upstream in
  version 2.9.0.
- Remove xz from BuildRequires, as it is not needed.

==== kernel-source ====
Version update (7.2.4 -> 7.2.5)

- Update
  patches.kernel.org/7.2.1-001-PCI-host-generic-Fix-NULL-pointer-dereference-o.patch
  (bsc#1012628 CVE-2026-80917 bsc#1280009).
- Update
  patches.kernel.org/7.2.1-002-Bluetooth-RFCOMM-take-rfcomm_mutex-for-the-defe.patch
  (bsc#1012628 CVE-2026-80819 bsc#1279607).
- Update
  patches.kernel.org/7.2.1-003-iommu-tegra241-cmdqv-Fix-CMD_SYNC-use-after-fre.patch
  (bsc#1012628 CVE-2026-80818 bsc#1279695).
- Update
  patches.kernel.org/7.2.1-004-iommu-iommufd-Fix-NULL-pointer-deref-in-iommufd.patch
  (bsc#1012628 CVE-2026-80817 bsc#1279465).
- Update
  patches.kernel.org/7.2.1-005-ALSA-FCP-Use-a-private-URB-for-the-notification.patch
  (bsc#1012628 CVE-2026-80816 bsc#1279703).
- Update
  patches.kernel.org/7.2.1-006-ALSA-scarlett2-Use-a-private-URB-for-the-notifi.patch
  (bsc#1012628 CVE-2026-80815 bsc#1279700).
- Update
  patches.kernel.org/7.2.1-007-rndis_host-add-overflow-check-in-rndis_rx_fixup.patch
  (bsc#1012628 CVE-2026-80814 bsc#1279705).
- Update
  patches.kernel.org/7.2.1-008-nvmet-fix-NULL-pointer-dereference-in-nvmet_exe.patch
  (bsc#1012628 CVE-2026-80813 bsc#1279537).
- Update
  patches.kernel.org/7.2.1-009-futex-pi-Reject-cross-mm-private-futex-owners.patch
  (bsc#1012628 CVE-2026-80778 bsc#1279587).
- Update
  patches.kernel.org/7.2.1-011-futex-pi-Plug-private-futex-exec-race.patch
  (bsc#1012628 CVE-2026-80777 bsc#1279586).
- Update
  patches.kernel.org/7.2.1-012-futex-Avoid-private-hash-use-after-free-on-fina.patch
  (bsc#1012628 CVE-2026-80758 bsc#1279469).
- Update
  patches.kernel.org/7.2.1-013-futex-Fix-race-on-the-initial-mm-futex.phash.re.patch
  (bsc#1012628 CVE-2026-80775 bsc#1279583).
- Update
  patches.kernel.org/7.2.1-016-ALSA-dummy-Check-card-index-validity-at-probe.patch
  (bsc#1012628 CVE-2026-80812 bsc#1279777).
- Update
  patches.kernel.org/7.2.1-017-io_uring-cmd-fix-iovec-leak-when-the-async-cmd-.patch
  (bsc#1012628 CVE-2026-80811 bsc#1279712).
- Update
  patches.kernel.org/7.2.1-019-io_uring-rsrc-fix-folio-size-overflow-in-io_vec.patch
  (bsc#1012628 CVE-2026-80810 bsc#1279789).
- Update
  patches.kernel.org/7.2.1-021-io_uring-defer-eventfd-signaling-when-queued-fr.patch
  (bsc#1012628 CVE-2026-80920 bsc#1279928).
- Update
  patches.kernel.org/7.2.1-022-ocfs2-fix-missing-metadata-reservation-for-larg.patch
  (bsc#1012628 CVE-2026-80809 bsc#1279606).
- Update
  patches.kernel.org/7.2.1-024-kcov-fix-data-corruption-and-race-conditions-on.patch
  (bsc#1012628 CVE-2026-80916 bsc#1279972).
- Update
  patches.kernel.org/7.2.1-025-ext4-stop-retrying-saturated-xattr-cache-entrie.patch
  (bsc#1012628 CVE-2026-80808 bsc#1279795).
- Update
  patches.kernel.org/7.2.1-026-nilfs2-reject-invalid-block-index-in-GC-ioctl.patch
  (bsc#1012628 CVE-2026-80807 bsc#1279591).
- Update
  patches.kernel.org/7.2.1-030-ext4-don-t-enable-DAX-on-new-encrypted-files.patch
  (bsc#1012628 CVE-2026-80806 bsc#1279589).
- Update
  patches.kernel.org/7.2.1-032-xfs-validate-attr-entry-pointer-before-field-ac.patch
  (bsc#1012628 CVE-2026-80805 bsc#1279580).
- Update
  patches.kernel.org/7.2.1-033-xfs-restore-nofs-context-unconditionally-in-xfs.patch
  (bsc#1012628 CVE-2026-80804 bsc#1279579).
- Update
  patches.kernel.org/7.2.1-034-nfc-digital-clamp-SENSF_RES-length-to-the-desti.patch
  (bsc#1012628 CVE-2026-80803 bsc#1279798).
- Update
  patches.kernel.org/7.2.1-035-nfc-fdp-bound-the-device-reported-read-length-a.patch
  (bsc#1012628 CVE-2026-80802 bsc#1279814).
- Update
  patches.kernel.org/7.2.1-036-nfc-microread-validate-target-discovery-payload.patch
  (bsc#1012628 CVE-2026-80801 bsc#1279815).
- Update
  patches.kernel.org/7.2.1-037-nfc-llcp-bound-the-connect_sn-TLV-walk-to-the-s.patch
  (bsc#1012628 CVE-2026-80800 bsc#1279812).
- Update
  patches.kernel.org/7.2.1-038-nfc-llcp-fix-OOB-read-and-u8-offset-wrap-in-TLV.patch
  (bsc#1012628 CVE-2026-80799 bsc#1279811).
- Update
  patches.kernel.org/7.2.1-039-nfc-llcp-reject-PDUs-shorter-than-the-LLCP-head.patch
  (bsc#1012628 CVE-2026-80798 bsc#1279809).
- Update
  patches.kernel.org/7.2.1-040-nfc-pn533-purge-fragmented-skbs-during-cleanup.patch
  (bsc#1012628 CVE-2026-80797 bsc#1279808).
- Update
  patches.kernel.org/7.2.1-041-nfc-st21nfca-validate-ATR_REQ-length-against-th.patch
  (bsc#1012628 CVE-2026-80823 bsc#1279608).
- Update
  patches.kernel.org/7.2.1-042-nfc-nci-add-data_len-bound-checks-to-activation.patch
  (bsc#1012628 CVE-2026-80796 bsc#1279807).
- Update
  patches.kernel.org/7.2.1-043-nfc-nci-fix-out-of-bounds-write-in-nci_target_a.patch
  (bsc#1012628 CVE-2026-80795 bsc#1279805).
    ... changelog too long, skipping 1291 lines ...
- commit e841c45

==== lrzip ====
Version update (0.660 -> 0.702)

- Rework to version 0.702 with no Epoch (Epoch forbidden per review):
  upstream 0.7.2 maps to 0.702 (7*100+2), which sorts above
  0.660 in rpmvercmp; same mapping holds for 0.7.x/0.8.x/0.10.x
- Drop Epoch 1 from the declined submission
- Update to version 0.7.2:
  * New mostly backward compatible file format, except streamed
    STDIO and encrypted files (see README-NOT-BACKWARD-COMPATIBLE)
  * Embedded libzpaq 5.00 -> 7.15 and LZMA SDK -> 26.02 for faster
    and better compression
  * Default encryption is now AES-256-GCM + PBKDF2-HMAC-SHA512, add
  - -legacy-encrypt for 0.6-compatible AES-128-CBC
  * Add -u/ultra mode, lzma filter support, lrztar takes most lrzip
    options, MacOS build fixes
- Add Epoch 1: upstream renumbered 0.660 -> 0.7.x, which sorts older
  in rpmvercmp, so this keeps the update an upgrade
- Switch to the upstream release tarball (ships configure): drop
  autoconf/automake/libtool/nasm BuildRequires and the autoreconf step
- Add perl BuildRequires for pod2man (man pages generate at build time)
- Run the upstream regression suite in %check (SKIP_SLOW=1)

==== openSUSE-release ====
Version update (20260912 -> 20260914)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== qt6-declarative ====
Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsPlatform6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsStyleKit6 libQt6LabsSynchronizer6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlMeta6 libQt6QmlModels6 libQt6QmlNetwork6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickVectorImage6 libQt6QuickWidgets6 qt6-declarative-imports

- Add upstream change (kde#508377)
  * 0001-QML-engine-Correctly-compare-composites-when-multipl.patch

==== shotwell ====
Version update (0.32.17 -> 33.0)
Subpackages: shotwell-lang

- Update to version 33.0:
  + Fix an issue with system information not showing the OS release
  + Add system information also to the viewer mode
  + Fix an issue where "discard" in viewer would not actually
    discard changes
  + Updated translations.
- Changes from version 33.rc:
  + Clean-up old data and debug/dead code
  + Fix toolbar auto-hide in fullscreen mode
  + Fix icons disappearing in slideshow toolbar
  + Fix setting desktop backgrounds
  + Allow pop-up of context menu with keyboard
  + Fix send-to failing when sending many images
  + Fix spacing in editing tools dialogs
  + Fix adding face names
  + Fix highlighting faces
  + Fix matching random faces with random probabilities
  + Export image if OpenCV cannot read the original format
  + Fix tab navigation
  + Fix crash when saving import results
  + Set release name
  + Add debug information to About dialog
  + Updated translations.
- Changes from version 33.beta:
  + Rework printing
  + Work-around lambda memory leaks
  + Some clean-up of the codebase
  + Work-arounds for potential crashes
  + Fix slideshow settings panel
  + Fix rating filter selection by keyboard
  + Add a help overview of the keyboard shortcuts
  + Publishing:
  - Add "peek password" icon to Piwigo
  - Move manual Gtk.Builder code to templated
  - Show the external authentication wait panel everywhere
  - Replace the dedicated auth helper app with a simple web
    server on localhost
- Changes from version 33.alpha
  + Port to gtk4
  + Changes in dependencies:
  - GExiv2 >= 0.16.0
  - GTK4 >= 4.22
  + Other changes:
  - Forward-port of bugfixes from stable branch
  - Rename Appdata -> Metainfo
  - Introduce Toasts to replace simple dialogs
  - Add support for opening URIs with the viewer
  - Fix image oversion jumping to top on first use
  - Remove loads of deprecated GTK api where possible
  - Remove deprecated calls to GExiv2
  - Remove import from application infrastructure
  - Fix missing default menu on sidebar
  - Fix showing help when running from build folder
  - Re-add all drag and drop based features
  - "Asyncify" a lot of functions
  - Clean up stray debug output left all over the code
- Switch to meson BuildSystem, automatic BuildRequires.

==== thunar ====
Version update (4.20.9 -> 4.20.10)
Subpackages: libthunarx-3-0 thunar-lang

- Update to 4.20.10
  * Use G_POST_ORDER when refiltering the tree model (#1460)
  * Fix SIGSEGV in Tree View when renaming directories
  * Translation Updates

==== zchunk ====
Version update (1.5.3 -> 1.5.4)

- update to 1.5.4:
  * memory leak and use-after-free fixes in compression,
    download range, header and index handling
  * raise meson BuildRequires floor to 0.54.0 per upstream
- drop Group: tags, modernize suse_version conditional
  (spec-cleaner)

==== zoo ====
Version update (2.10 -> 2.10.1)

- Update to version 2.10.1 (upstream 2.10 patchlevel 1).
- Upstream behavior changes:
  * New archives use LZH compression (was LZC); old archives
    still extract fine.
  * 'zoo l' shows file modes instead of CRCs.
- Dropped patches (superseded by the version bump):
  * zoo-2.10-tempfile.patch
  * zoo-2.10-CAN-2005-2349.patch
  * zoo-2.10-security-infinite_loop.patch
- Added patches (dropped ones re-added under versioned names,
  byte-identical, no content change):
  * zoo-2.10.1-tempfile.patch
  * zoo-2.10.1-CAN-2005-2349.patch
  * zoo-2.10.1-security-infinite_loop.patch
- Refreshed patches:
  * zoo.patch: add the missing makefile linux target with the
    previous build flags, drop the upstream-merged NOSTRCHR
    hunk and the stale varargs.h dependency.
  * zoo-gcc.patch and zoo-gcc14.patch: drop the
    upstream-merged hunks (signal handler prototypes,
    ctrl_c/handle_break parameter fixes).