- Updated to 0.9.33.
- Major fixes from upstream:
  + mdb_page_search: fix error code when DBI record is missing (ITS#9037);
  + Fix meta page usage by read only tools (ITS#10212).

- Add functionality that restarts the service when there are changes in
  directories with backend files. The corresponding filetrigger has been
  removed.

- Add functionality allowing the manager to track whether the module is busy.

- Add new entity for services: examples, schema and docs (thx Evgenii Sozonov)
- Change desktop option in components schema to set of desktops

- Replace all vendors components and categories to separate
  alt-components-vendors subpackage

- Avoid to try-restart alterator-manager.service due new release supported
  dynamic restart based on inotify.

- Fix timeouts for install and remove (thx Kozyrev Yuri).
- Turn lastUpdate tracker into loggers for apt updates and dist-upgrades
  (thx Kirill Sharov).
- Add lastDistUpgrade method to apt interface (thx Kozyrev Yuri).

- New version.

- Rewrite scripts in python.

- initial build

- Rewrite scripts to python using alterator_entry module.

- change prefix from ru.basealt to org.altlinux

- Add translations (Andrey Alekseev <parovoz@altlinux.org>).
- declare environment variables (Andrey Alekseev <parovoz@altlinux.org>).

- Initial build

- Add depenencies from python3-devel
- Spliting batch_components script to two another files

- Move to qt6

- Rename Debug menu to Tools.
- Add option to show drafts in Tools menu.
- Add reload components action in File menu.
- Fix status for categories with only partially checked children.
- Get kernel flavour using systeminfo backend.

- initial build for Sisyphus

- fix test's log widget content
- fix tests status in testswidget
- fix tests translations

- fix empty categories by <alekseevam@altlinux.org>

- Move dconf edition key to /org/altlinux/product/edition/current.

- Add settings to use Alt icons

- Avoid to try-restart alterator-manager.service due new release supported
  dynamic restart based on inotify.

- New version.

- New version.

- Add libpolkit-devel to build requires

- Change Req: zabbix-phpfrontend-apache2-mod_php8.1 to zabbix-phpfrontend-apache2-mod_php8.3
- Version sync with major version Zabbix

- The userpasswd name in /usr/lib and in /usr/bin has been changed to
  userpasswd-legacy

- Assignment of file attributes now occurs in %attr (Closes: #53207)

- Initial build for Sisyphus

- distro-license-check: add p11 to valid distbranches (closes: #53509)

- Add static license ALT_Domain_License/11.0

- Add support of license calculation from edition entry

- Rename fusermount to fusermount2 using in control (thx Korney Gedert).

- Added the ability to select the fusermount2/fuserumount2 version using
  alternatives-manual (thx Korney Gedert).

- added the ability to select the fusermount3/fuserumount3 version using
  alternatives by default (thx Korney Gedert) (fixes: 52316).

- Add support distr profile layer
- Add service specific system profile template
- Update obsoletes default user profile during upgrade

- Added support for saving VARIANT and VARIANT_ID identifiers.

- gse_krb5: gain root privilege during get server keytab (thx Ivan Volchenko).
  Fix PAM Winbind kerberos auth requires user access to keytab (Samba#12491).

- Fix typo in sss_ec_get_key() for OpenSSL older than 3.0.

- Update to the 2.9.2 for samba-4.20.6 and later releases

- auth: Don't fallback to NTLMv1 in anonymous connections (thx Ivan Volchenko).
  Disable "not doing NTLM2 without a password" in function
  cli_credentials_get_ntlm_response().

- Updated to 14 version (fixes: CVE-2023-50967)

- Update to latest 2.9 LTM release (fixes: CVE-2023-3758) (closes: 51860).
- Add sssd-dbus to Requires for sssd-tools (due the InfoPipe responder using).
- Major fixes from upstream (GitHub#5708, GitHub#7109, GitHub#7152, GitHub#7173,
                             GitHub#7197, GitHub#7250, GitHub#7319, GitHub#7375)
  + SSSD incorrectly works with AD GPO during user login (fixed a race
    condition flaw in GPO policy application).
  + gdm smartcard login fails with "system error 4" in case of multiple
    identities.
  + passkey cannot fall back to password, when both of user authentication
    types configured for IPA user even when user intends to do so.
  + AD users are unable to log in due to case sensitivity of user because the
    domain is found as an alias to the email address.
  + Errors in krb5_child.log every time a user authenticates:
    "Pre-authentication failed: No pkinit_anchors supplied".
  + SSSD is not fully registering the domains if the cache is empty (refresh
    root domain when read directly).
  + PAC and PAM responders can crash if backend takes too long time to process
    getDomains() (use proper context if client disconnects before request is
    completed).
  + Add option 'failover_primary_timeout' to configure timeout to reconnect to
    primary servers: minimum and default value in seconds is 31.

- Major backported fixes from upstream (GitHub#7451, GitHub#7404, GitHub#7007,
                                        GitHub#5418, GitHub#7456, GitHub#7462,
                                        GitHub#5861, GitHub#7532, GitHub#7590,
                                        GitHub#7590, GitHub#7642)
  + sysdb: do not fail to add non-posix user to MPG domain (e.g. cause issues
    during GPO evaluation when adding a host account).
  + enhance 'soft_crl' option (revoked certificate will now be rejected if the
    CRL is expired even if 'soft_crl' is set).
  + pam_sss: fix passthrow of old authtok from another pam modules (issue in
    case of using 'use_first_pass' parameter when we need to get old password
    from another module) at PAM_PRELIM_CHECK.
  + krb5_child: do not try passwords during two-factor authentication.
    It should use use the dedicated OTP auth types SSS_AUTHTOK_TYPE_2FA and
    SSS_AUTHTOK_TYPE_2FA_SINGLE exclusively and should not try password or other
    types.
  + Expose flat_name (file.file palceholder) for use in homedir path also for AD
    subdomains.
  + cert util: replace deprecated OpenSSL calls (replaces them if OpenSSL 3.0 or
    newer is used).
  + pam: only set SYSDB_LOCAL_SMARTCARD_AUTH to 'true' but never to 'false'.
  + sdap: allow to provide user_map when looking up group memberships of other
    objects similar to user objects but with different attribute mappings, e.g.
    host objects in AD.
  + ad: use default user_map when looking of host groups for GPO (to determine
    the group memberships of a host for GPO evaluation).
  + ad: honor ad_use_ldaps setting with ad_machine_pw_renewal passed as
    '--use-ldaps' argument to the adcli update command which handles the
    automatic renewal of AD machine account password.
  + Add missing 'dns_update_per_family' option (whether DNS update of A and AAAA
    record should be performed in one update or in two separate updates).

- Update to latest stable release:
 + Added the cmddenial_message sudoers option to provide additional information
   to the user when a command is denied by the sudoers policy.
   The default message is still displayed.
 + The time stamp used for file-based logs is now more consistent with the time
   stamp produced by syslog (GitHub#327).
 + Sudo will now warn the user if it can detect the user's terminal but cannot
   determine the path to the terminal device. The sudoers time stamp file will
   now use the terminal device number directly (GitHub #329).
 + Added a json_compact value for the sudoers log_format option which can be
   used when logging to a file (GitHub#357).
 + new pam_silent sudoers option has been added which may be negated to avoid
   suppressing output from PAM authentication modules (GitHub#216).
 + Fixed several cvtsudoers JSON output problems (GitHub#369, GitHub#370,
   GitHub#371, GitHub#373, GitHub#381).
 + When sudo runs a command in a pseudo-terminal and the user's terminal is
   revoked, the pseudo-terminal's foreground process group will now receive
   SIGHUP before the terminal is revoked. This emulates the behavior of the
   session leader exiting and is consistent with what happens when, for example,
   an ssh session is closed (GitHub#367).
 + Paths specified via a Chdir_Spec or Chroot_Spec in sudoers may now be
   double-quoted.
 + The default sudoers file now enables the secure_path option by default
   and preserves the EDITOR, VISUAL, and SUDO_EDITOR environment variables
   when running visudo (GitHub#387).

- Update to latest stable release supported latest kernel 6.11.
- Major fixes from upstream:
  + LDAP Ping capability (to find the closest site);
  + smbinfo adds gettconinfo command (allowed dumping session and tcon id);
  + Various improvements to man pages.
- Backport bash completion support for smbinfo (with filestreaminfo, keys,
  gettconinfo) from Fedora.

- Added pam_canonicalize_user.so to system-auth-common (closes: #47426).
- Added pam_canonicalize_user control (closes: #47713).
- Disabled legacy pam_propperpwnam.so in system-auth-common during upgrade.

- Fix control support with various role module using.
- Fix not standart setup of libnss-role during upgrade (closes #50704).

- Updates to new version 1.4.3 (released 2024-06-12)
- Fixes from upstream:
  + Fixed socket_wrapper running with jemalloc compiled binaries
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed swrap_fake_uid_wrapper test

- Updated to new version 1.3.1 (released 2024-06-12)
- Fixes from upstream:
  + Added support to find libc via LIBC_SO define
  + Fixed uid_wrapper running with jemalloc compiled binaries
  + Fixed socket_wrapper interaction test
  + Fixed thread sanitizer on modern Linux Kernels

- Updated to new version 1.1.16 (released 2024-07-05)
- Fixes from upstream:
  + Fixed copy&paste error in the destructor
  + Fixed thread sanitizer on modern Linux Kernels
  + Fixed building with newer cmocka versions

- new version 1.1.7
- Fixes from upstream:
  + Fix installation of python module
  + Improve config dir creation if we have pam_start_confdir()
  + Fixed PAM_WRAPPER_DISABLE_DEEPBIND
  + Directly fail if we can't create the config dir

- Initial build for Sisyphus.

- Update to stable release of Samba 4.20 (Samba#15673):
  + Due --version-* options are still not ergonomic, and they reject tilde
    characters, so, revert the commit changed the script for generating the ABI
    symbol version broken the ABI by changing all dots to underscores.
    This reverts the commit partially to preserve the dots in the version part.
- Replace some common private libraries to common-libs (for libsmclient):
  + libreplace-private-samba.so
  + libcli-smb-common-private-samba.so
  + libgse-private-samba.so
  + liblibsmb-private-samba.so

- Fix disabling libnss-role by control during upgrade (closes #50704).

- Update to the 2.9.1 for samba-4.20.2 and later releases

- New option 'idmap reverse cache update' to control reverse name to sid cache
  behaviour that Winbind's idmap interface additionally saved to namemap cache,
  when found unknown sid during sid to name query. This option solves the
  compatibility problem of foreign SIDs getting stuck in trust relationships
  from the SIDHistory attribute.
  By default, this option is disabled (so, compatibility behaviour is enabled).

- Fix clean memory for force dns canonicalize destination hostname option.