Packages changed:
  apparmor (4.1.1 -> 4.1.2)
  aws-lc (1.61.2 -> 1.61.4)
  libapparmor (4.1.1 -> 4.1.2)
  libdbusmenu-gtk2
  libdbusmenu-gtk3
  mpg123 (1.33.2 -> 1.33.3)
  openSUSE-release (20251006 -> 20251007)
  openjpeg2 (2.5.3 -> 2.5.4)
  pam_mount (2.20 -> 2.21)
  salt
  selinux-policy (20250926 -> 20251006)
  yast2-trans (84.87.20250928.a1cf0a56ce -> 84.87.20251004.03a20734b6)

=== Details ===

==== apparmor ====
Version update (4.1.1 -> 4.1.2)
Subpackages: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang python3-apparmor

- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff
- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)

==== aws-lc ====
Version update (1.61.2 -> 1.61.4)
Subpackages: libcrypto-awslc0 libssl-awslc0

- update to version 1.61.4:
  * Pin PyCA version in python integration tests
  * Check compiler for 'linux/random.h'
- update to version 1.61.3:
  * Remove jitter entropy tests folder

==== libapparmor ====
Version update (4.1.1 -> 4.1.2)

- update to AppArmor 4.1.2
  - several fixes (including boo#1246743)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_4.1.2
    for the detailed upstream changelog
- remove upstream(ed) patches:
  - dovecot24.diff
  - xkeyboard.diff
- add dovecot24-part2.diff: more dovecot 2.4 permissions (boo#1247470)

==== libdbusmenu-gtk2 ====

- Enable valgrind on riscv64

==== libdbusmenu-gtk3 ====

- Enable valgrind on riscv64

==== mpg123 ====
Version update (1.33.2 -> 1.33.3)
Subpackages: libmpg123-0 mpg123-openal

- Update to version 1.33.3
  libmpg123:
  * Consolidate and more consistently use .rodata switch in
    macro.

==== openSUSE-release ====
Version update (20251006 -> 20251007)
Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== openjpeg2 ====
Version update (2.5.3 -> 2.5.4)
Subpackages: libopenjp2-7 libopenjp2-7-x86-64-v3

- Update to 2.5.4:
  * No API/ABI break compared to v2.5.3
  Bug fixes:
  * opj_jp2_read_header: Check for error after parsing header. #1573
  * pkgconfig: drop unused libraries from Libs.private #1591
  * Fix CMake warning: Compatibility with CMake < 3.10 will be removed #1580
  * Fixed ICC profile copy failure on write #1574

==== pam_mount ====
Version update (2.20 -> 2.21)
Subpackages: libcryptmount0

- Update to release 2.21
  * Support for building with libHX 5.0

==== salt ====
Subpackages: python311-salt salt-master salt-minion

- Use versioned python interpreter for salt-ssh
- Added:
  * use-versioned-python-interpreter-for-salt-ssh.patch
- Fix known_hosts error on gitfs (bsc#1250520) (bsc#1227207)
- Added:
  * allow-libgit2-to-guess-sysdir-homedir-successfully-b.patch

==== selinux-policy ====
Version update (20250926 -> 20251006)
Subpackages: selinux-policy-targeted

- Update to version 20251006:
  * Allow sshd_session_t write to wtmpdb
  * Support /usr/libexec/ssh as well as openssh folder
  * Set xenstored_use_store_type_domain boolean true(bsc#1247875)
  * Adjust guest and xguest users policy for sshd-session
  * Allow valkey-server create and use netlink_rdma_socket
  * Allow blueman get attributes of filesystems with extended attributes
  * Update files_search_base_file_types()
  * Allow geoclue get attributes of the /dev/shm filesystem
  * Allow apcupsd get attributes of the /dev/shm filesystem
  * Allow sshd-session read cockpit pid files
  * Allow nfs generator create and use netlink sockets
  * Conditionally allow virt guests to read certificates in user home directories
  * xenstored_t needs CAP_SYS_ADMIN for XENSTORETYPE=domain (bsc#1247875)
  * Allow nfs-generator create and use udp sockets
  * Allow kdump search kdumpctl_tmp_t directories
  * Allow init open and read user tmp files
  * Fix the systemd_logind_stream_connect() interface
  * Allow staff and sysadm execute iotop using sudo
  * Allow sudodomains connect to systemd-logind over a unix socket
  * /boot/efi is dosfs_t and kdump needs to access it (bsc#1249370)
  * Add default contexts for sshd-seesion
  * Define types for new openssh executables
  * Fix systemd_manage_unit_symlinks() interface definition
  * Support coreos installation methods
  * Add a new type for systemd-ssh-issue PID files
  * Allow gnome-remote-desktop connect to unreserved ports
  * Allow mdadm the CAP_SYS_PTRACE capability
  * Allow iptables manage its private fifo_files in /tmp
  * Allow auditd manage its private run dirs
  * Revert "Allow virt_domain write to virt_image_t files"
- Syncing with upstream rawhide selinux-policy up to:
  * 415b33792f9ea17d816a9e2602cddf21c16e7255
- Update embedded container-selinux version to commit:
  * edfbda465d37deb2a831330a2c3c65b557e6dff5 (version 2.242.0)

==== yast2-trans ====
Version update (84.87.20250928.a1cf0a56ce -> 84.87.20251004.03a20734b6)
Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu

- Update to version 84.87.20251004.03a20734b6:
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (Indonesian)
  * Translated using Weblate (German)
  * Translated using Weblate (Portuguese (Brazil))
  * Translated using Weblate (Slovak)
  * Translated using Weblate (Catalan)
  * Translated using Weblate (Japanese)
  * Translated using Weblate (Catalan)
  * Update translation files
  * New POT for text domain 'bootloader'.