# changelog

author: Satoe Imaishi <simaishi@redhat.com> - 1:2.15.9-1
changelog:
  - ansible-core 2.15.9 release
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.13-1
changelog:
  - ansible-core 2.16.13 release
  - Fix CVE-2024-8775 (Exposure of Sensitive Information in Ansible
    Vault Files Due to Improper Logging)
  - Fix CVE-2024-9902 (Ansible-core user may read/write unauthorized
    content)


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.16.14-1
changelog:
  - ansible-core 2.16.14 release
  - Fix license and manpages macros usage
  - Fix CVE-2024-11079 (Unsafe Tagging Bypass via hostvars Object in
    Ansible-Core)


author: candlepin-bot <3229038+candlepin-bot@users.noreply.github.com> 4.4.17-1
changelog:
  - CANDLEPIN-928: Updated updateLastCheckIn to refresh updated consumer
    (joshmalbrecht@gmail.com)
  - Fixed Huffman content path compression regression (sriley@redhat.com)
  - CANDLEPIN-917: Updated anon consumer cloud_offering_id column size
    (joshmalbrecht@gmail.com)


author: candlepin-bot 4.4.18-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - CANDLEPIN-938: Redefined transactional boundaries for http requests
    (crog@redhat.com)
  - CANDLEPIN-944: Droped FK for cp2_owner_content/product on cp_owner
    (sbakaj@redhat.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-946: Update apiJar dependency list (joshmalbrecht@gmail.com)
  - CANDLEPIN-938: Reverted explicit content bulk translation (crog@redhat.com)
  - CANDLEPIN-938: Restored L2 caching to product and content entities
    (crog@redhat.com)
  - CANDLEPIN-938: Reverted auto-detach when removing child products and content
    (crog@redhat.com)
  - CANDLEPIN-929: Added documentation for offeringIds in AnonCloudConsumer
    (sbakaj@redhat.com)
  - CANDLEPIN-938: Added caching to the ConsumerType entity (crog@redhat.com)
  - CANDLEPIN-938: Added caching to the Owner entity (crog@redhat.com)
  - Bump junit from 5.11.2 to 5.11.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-938: Fixed column name format in dirty_product precondition
    (crog@redhat.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-938: Fixed multiple bugs in ContentManager.isChangedBy
    (crog@redhat.com)
  - CANDLEPIN-940: Fixed bug in Pool.isManaged when managed flag is null
    (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.9.1 to 3.10.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.14.1 to 5.14.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.10 to 1.5.11
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.9 to 1.5.10
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 10.1.30 to 11.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.8 to 1.5.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.0.0 to 20.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.8.0 to 7.9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-933: Updated AHC.lockAndLoad to not return null elements in
    collections (crog@redhat.com)
  - CANDLEPIN-934: Fixed NPE in PoolCurator.bulkDelete (crog@redhat.com)
  - Bump junit from 5.11.1 to 5.11.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.18.1 to 10.18.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.13.0 to 5.14.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated logic for offering id in ConsumerCloudData (sbakaj@redhat.com)
  - Bump jackson from 2.17.2 to 2.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Added candlepin.hidden_resources configuration to the dev image
    (joshmalbrecht@gmail.com)
  - Use guestIdLower column instead of LOWER SQL function (nmoumoul@redhat.com)
  - Bump junit from 5.11.0 to 5.11.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 19.0.3 to 20.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.9 to 8.10.2 (gradle-update-robot@regolo.cc)


author: candlepin-bot 4.4.19-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump org.quartz-scheduler:quartz from 2.3.2 to 2.5.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-938: Refactored ContentCurator.getActiveContentByOwner
    (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.10.0 to 3.10.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-938: Added caching to the Consumer entity (crog@redhat.com)
  - CANDLEPIN-938: Updated several utility classes to be singletons
    (crog@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.0 to 11.0.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.hsqldb:hsqldb from 2.7.3 to 2.7.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.78.1 to 1.79
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.10.2 to 8.11 (gradle-update-robot@regolo.cc)
  - CANDLEPIN-938: Updated KeycloakConfiguration to be a singleton
    (crog@redhat.com)
  - CANDLEPIN-938: Registered ObjectMapper as an eager singleton
    (crog@redhat.com)
  - CANDLEPIN-938: Updated product content mapping logic (crog@redhat.com)
  - Bump nebula.lint from 20.1.0 to 20.2.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.20.0 to 10.20.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcpkix-jdk18on from 1.78.1 to 1.79
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.18.0 to 2.18.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update supported hotfix branch list in i18n job (nmoumoul@redhat.com)
  - 2018469: Disabled subscription attachment by Activation Key in SCA
    (sbakaj@redhat.com)
  - CANDLEPIN-938: Updated query space declarations for native SQL queries
    (crog@redhat.com)
  - CANDLEPIN-945: Handle EntityNotFoundException in ConsumerStore.lookup
    (joshmalbrecht@gmail.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.18.2 to 10.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 10.0.4 to 11.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.11 to 1.5.12
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.36.0 to 2.38.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.4.1 to 3.5.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.5.0-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-954: Relaxed constraint on null values in ConsumerCloudData
    (crog@redhat.com)
  - Bump commons-io:commons-io from 2.17.0 to 2.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.mattbertolini:liquibase-slf4j from 5.0.0 to 5.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.9.0 to 7.10.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 5.1.0.4882 to 6.0.0.5145
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.6.0-1
changelog:
  - Bump com.github.ben-manes.caffeine:caffeine from 3.1.8 to 3.2.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.11.1 to 3.11.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.17.2 to 1.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.2 to 3.27.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.0.1 to 12.0.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-995: Updated the entity layering migration's tiebreakers
    (crog@redhat.com)
  - Bump com.google.code.gson:gson from 2.12.0 to 2.12.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.51.0 to 0.52.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.4 to 42.7.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-936: Create bulk set consumer environments endpoint
    (joshmalbrecht@gmail.com)
  - Bump nebula.lint from 20.5.5 to 20.5.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.11.0 to 2.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.79 to 1.80
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcpkix-jdk18on from 1.79 to 1.80
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.0.0 to 12.0.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.1 to 10.21.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.8.6 to 4.9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.12 to 8.12.1 (gradle-update-robot@regolo.cc)
  - Bump openapi-generator from 7.10.0 to 7.11.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.swagger:swagger-annotations from 1.6.14 to 1.6.15
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-987: Fixed data importer (sbakaj@redhat.com)
  - CANDLEPIN-989: Updated AdapterEvent to sealed interface
    (joshmalbrecht@gmail.com)
  - Added enhancements to the register_consumer.py dev utility (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.10.2 to 3.11.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 11.1.1 to 12.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-980: Updated RHEL dependency from pki-servlet-engine to tomcat
    (sbakaj@redhat.com)
  - Bump nebula.lint from 20.3.1 to 20.5.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.17.1 to 1.17.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-277: Disallowed creation of AK with Pool(s) on SCA
    (sbakaj@redhat.com)
  - Bump artemis from 2.38.0 to 2.39.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.15 to 1.5.16
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.1 to 3.27.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.14.2 to 5.15.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mozilla:rhino from 1.7.15 to 1.8.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.0 to 3.27.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.0 to 10.21.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.12 to 1.5.15
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.11.1 to 8.12 (gradle-update-robot@regolo.cc)
  - Bump org.assertj:assertj-core from 3.26.3 to 3.27.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-983: Cached tomcat package in GH action (sbakaj@redhat.com)
  - Bump junit from 5.11.3 to 5.11.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update ko.po (81469659+simmon-nplob@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.20.2 to 10.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.3.0 to 20.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-978: Removed extranous null check during consumer check in
    (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.10.1 to 3.10.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.1 to 11.0.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 11.1.0 to 11.1.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Added blank address for local pg_hba.conf entry (joshmalbrecht@gmail.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.20.1 to 10.20.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump dawidd6/action-download-artifact from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.2.2 to 20.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.18.1 to 2.18.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 6.0.0.5145 to 6.0.1.5171
    (49699333+dependabot[bot]@users.noreply.github.com)
  - 2017774: Disallowed Manual Subscription Attachment in SCA Mode
    (sbakaj@redhat.com)
  - CANDLEPIN-974: Restored page size header when fetching owner pools
    (crog@redhat.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.0 to 3.5.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.11 to 8.11.1 (gradle-update-robot@regolo.cc)


author: candlepin-bot 4.6.1-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.5 to 11.0.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump net.logstash.logback:logstash-logback-encoder from 8.0 to 8.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.0 to 12.1.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.16.1 to 5.17.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-990: Updated cp_consumer_environments.priority to tinyint
    (joshmalbrecht@gmail.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.4 to 10.23.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-943: Removed JIRA target check from forks PRs (sbakaj@redhat.com)
  - CANDLEPIN-1001: Refactored ConsumerCloudData creation/update
    (sbakaj@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.3 to 3.12.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.2 to 3.5.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CHAINSAW-382: Updated dev container image to output Candlepin logs
    (joshmalbrecht@gmail.com)
  - Bump org.sonarqube from 6.0.1.5171 to 6.1.0.5360
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.39.0 to 2.40.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.16.0 to 5.16.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.2 to 4.9.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.12.0 to 5.12.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-999: Fixed paging for list owner pools (joshmalbrecht@gmail.com)
  - CANDLEPIN-996: Additional SAST scan fixes (sbakaj@redhat.com)
  - CANDLEPIN-996: Fixed SAST scan issues (sbakaj@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.2 to 3.12.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated hard coded unit test date (joshmalbrecht@gmail.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Revert "CANDLEPIN-938: Reverted explicit content bulk translation"
    (crog@redhat.com)
  - CHAINSAW-341: Improved SCA payload regeneration performance
    (joshmalbrecht@gmail.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.4 to 11.0.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.3 to 10.21.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.15.2 to 5.16.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.1 to 4.9.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.18.2 to 2.18.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.11.0 to 7.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-985: Switched default contentAccessModeList to SCA only
    (sbakaj@redhat.com)
  - Bump slf4j from 2.0.16 to 2.0.17
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.16 to 1.5.17
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated JUnit dependencies to 5.12.0 using the BOM (sbakaj@redhat.com)
  - Update Gradle Wrapper from 8.12.1 to 8.13 (gradle-update-robot@regolo.cc)
  - Bump com.puppycrawl.tools:checkstyle from 10.21.2 to 10.21.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.0 to 3.12.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.3 to 11.0.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.11.2 to 3.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.0.2 to 12.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.1 to 3.5.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.0 to 4.9.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.2 to 11.0.3
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.6.2-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - CHAINSAW-481: IAE when sort_by query parameter not specified
    (joshmalbrecht@gmail.com)
  - Bump org.sonarqube from 6.1.0.5360 to 6.2.0.5505
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.6 to 11.0.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.5.7 to 20.5.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.23.0 to 10.23.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.13 to 8.14 (gradle-update-robot@regolo.cc)
  - Bump jackson from 2.18.3 to 2.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.13.0 to 2.13.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.5.6 to 20.5.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1014: Fix Content URLs in SCA cert for Multi Env
    (nmoumoul@redhat.com)
  - Bump info.picocli:picocli from 4.7.6 to 4.7.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-io:commons-io from 2.18.0 to 2.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.12.1 to 2.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.12.1 to 5.12.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.6.3-1
changelog:
  - CANDLEPIN-1037: Fixed consumer env priority database column type
    (crog@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.3 to 3.13.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.3 to 5.13.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-io:commons-io from 2.19.0 to 2.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.19.1 to 2.19.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.41.0 to 2.42.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.2 to 3.13.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.1 to 3.2.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.jimfs:jimfs from 1.3.0 to 1.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1028: Restored cert deletion during inactive consumer cleanup
    (crog@redhat.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1028: Added event generation to environment deletion
    (crog@redhat.com)
  - Bump okhttp3 from 4.12.0 to 5.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1028: Added event generation to the inactive consumer cleanup job
    (crog@redhat.com)
  - Bump org.junit:junit-bom from 5.13.2 to 5.13.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.8 to 11.0.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.14.2 to 8.14.3 (gradle-update-robot@regolo.cc)
  - Updated code to comply with latest checkstyle rules (sbakaj@redhat.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.3 to 3.5.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.1 to 5.13.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.6.1 to 20.6.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Prevent argument injection in SonarQube analysis step (sbakaj@redhat.com)
  - Bump jackson from 2.19.0 to 2.19.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.1 to 3.13.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add validation for name during consumer update - Centralized all checks for
    consumer name into one method. - Applied that method to both consumer create
    and update. - Renamed tests to be more descriptive. (nmoumoul@redhat.com)
  - Bump org.owasp.dependencycheck from 12.1.2 to 12.1.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.6 to 42.7.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.0 to 3.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.0 to 5.13.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.7 to 11.0.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.1 to 12.1.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.80 to 1.81
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.0 to 3.13.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.14.1 to 8.14.2 (gradle-update-robot@regolo.cc)
  - HOTFIX: Added a check to prevent sorting on nested object fields
    (crog@redhat.com)
  - Bump org.bouncycastle:bcpkix-jdk18on from 1.80 to 1.81
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.6.0 to 20.6.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.24.0 to 10.25.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.12.2 to 5.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump nebula.lint from 20.5.8 to 20.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CHAINSAW-472: Add extra anonymous consumer uuid logging (nmoumoul@redhat.com)
  - Bump org.postgresql:postgresql from 42.7.5 to 42.7.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.17.0 to 5.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 10.23.1 to 10.24.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.12.4 to 3.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Update Gradle Wrapper from 8.14 to 8.14.1 (gradle-update-robot@regolo.cc)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.swagger:swagger-annotations from 1.6.15 to 1.6.16
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.40.0 to 2.41.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.6.4-2
changelog:
  - CANDLEPIN-1059: Reduced 429s while fetching content access payloads
    (crog@redhat.com)
  - CANDLEPIN-1059: Refactored Transactional and EERetry utility classes
    (crog@redhat.com)
  - CANDLEPIN-1045: Disallow running sonar from a fork PR
    (joshmalbrecht@gmail.com)


author: Odilon Sousa <osousa@redhat.com> - 0.4-38
changelog:
  - Update Patches and change to 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0006-Fix-compatibility-issues-with-Python-3.11.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/0001-Fix-tests-with-python-3.12.1.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


author: Odilon Sousa <osousa@redhat.com> - 4.18.0.4-1
changelog:
  - Release rubygem-katello 4.18.0.4
  - SAT-40001 - Errata applicability and Refresh applicability tasks for RHEL 7 hosts runs dnf command. 
  - SAT-39998 - Error while synchronizing concurrently RPM content - PG::TRDeadlockDetected: ERROR: deadlock detected
  - SAT-39999 - Image pull using DNS alias fails after 6.17 upgrade


author: Odilon Sousa <osousa@redhat.com> - 6.18.4-2
changelog:
  - SAT-43310 - Upgrade to Sat 6.16 does not cleanup Postgresql12 which is reported as security risk/vulnerability by the scanners on Sat 6.17 & 6.18.


author: candlepin-bot 4.6.5-1
changelog:
  - CANDLEPIN-1138: Strip upstreamConsumer from consumer owner response
    (sbakaj@redhat.com)
  - Add new translations using Weblate (hosted@weblate.org)
  - CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)


author: Foreman Packaging Automation <packaging@theforeman.org> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Fix PEP 639 license field incompatibility with RHEL 9 setuptools
  - Drop stale Requires: setuptools (no longer a runtime dependency)


