# changelog

author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscanoredhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.9-1.1
changelog:
  - Sync with 3.54.9-1
  - *** Upstream changelog ***
  - * Thu Apr 25 2024 Mark Syms <mark.syms@citrix.com> - 3.54.9-1
  - - Address various memory management issues
  - * Wed Mar 27 2024 Mark Syms <mark.syms@citrix.com> - 3.54.8-1
  - - CP-48048: Blktap fix code coverage (XS8 only)
  - - tap-ctl: Improve list output filtering
  - - CP-46763: When VBD queue is not ready call the driver completion
  - - CP-46778: always issue request via issue_requests
  - - CP-46771: separate queue checks for completed and new requests.
  - - CP-46764: mask ring event handlers before quiescing the queue
  - - CP-46764: When the VBD is quiesced skip checking for requests to submit
  - - Fix setting of CFLAGS for mockatests
  - - Do not free iconv cd if allocation fails
  - - Fix the order of linker options in CBT
  - - Fixup various bits of incorrect automake usage
  - - CA-384162: Send completions for all partial responses
  - - CA-390490: allocate vhd request before locking bat
  - - CP-48057: Add unit tests for drivers/scheduler.c


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.4-1.1
changelog:
  - Sync with 3.55.4-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Mark Syms <mark.syms@cloud.com> - 3.55.4-1
    - CA-392151 lcache.c uses wrong buffer size definition
    - CA-403297: when storing read-through do not mirror
    * Mon Nov 18 2024 Mark Syms <mark.syms@cloud.com> - 3.55.3-1
    - CP-52620: enable local caching after opening all other images
    * Tue Nov 05 2024 Tim Smith <tim.smith@cloud.com> - 3.55.2-1
    - CA-387575 Remove static libraries and libtool archives from devel package
    - Correct name of exposed NBD server
    - CA-401174 Filedescriptor leak in NBD option negotiation
    * Mon Sep 16 2024 Tim Smith <tim.smith@cloud.com> - 3.55.1-1
    - Redo the revert of an incorrect NBD FD leak fix
    * Fri Sep 13 2024 Tim Smith <tim.smith@cloud.com> - 3.55.0-1
    - CP-46765 - Fix asan issues in unit tests
    - CA-396659: rationalise bitops and fix overflow issues
    - CA-396659: delete legacy debt utility vhd-update
    - Handle scheduler uuid overflow explictly
    - CP-50952 Autodetect NBD server protocol version on client connect
    - Fix use of incorrect label in error case
    - CA-397082 Properly fix FD leak in NBD server
    - CP-50955 Add a new-style NBD server for each VDI
    * Tue Aug 06 2024 Mark Syms <mark.syms@cloud.com> - 3.54.10-1
    - CA-391882: fix nbd connection fd leak bug
    - Remove some unnecessary build dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.5-2.1
changelog:
  - Sync with 3.55.5-2
  - Drop patch "Add an option to never resolve parent path when vhd-util query is
  called" already included in upstream v3.55.5
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-2
    - CA-404370: enable NBD client only after completing handshake
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-1
    - Add an option to never resolve parent path when vhd-util query is called


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.55.5-2.3
changelog:
  - Fix a bad integer conversion that interrupts valid coalesce calls on large VDIs
  - Add 0002-CP-308382-fix-sign-conversion-in-coalesce.patch
  - Add 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-6.1
changelog:
  - Sync with 3.55.5-6
  - Revert openssl 3 dependency from XS specfile (no change compared to previous XCP-ng release)
  - Drop patch 0002-CP-308382-fix-sign-conversion-in-coalesce.patch, upstream now
  - Drop patch 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch, upstream now
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-6
    - Fix coalesced size conversion in vhd-util-coalesce (CP-308382)
    * Mon Jun 23 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-5
    - Backport fix for CA-408175
    - CP-308382: fix sign conversion in coalesce
    * Mon Apr 07 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-4
    - CP-54256: log when reporting EOPNOTSUPP
    * Fri Feb 21 2025 Deli Zhang <deli.zhang@cloud.com> - 3.55.5-3
    - CP-50273: Move CCM dependency to OpenSSL 3


author: Philippe Coval <philippe.coval@vates.tech> - 3.3.29-10.1
changelog:
  - Remove installed gnutls-dane if no more supported
  - Remove unnecessary removal of non built files
  - Make c++ lib optional (disabled by default)


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.38.1
changelog:
  - Sync with 4.19.19-8.0.38
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.38
    - CA-401809: DLM failure leaves system unstable fixes
    - CP-49678: Reduce Xen timer tick


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.42.1
changelog:
  - Sync with 4.19.19-8.0.42
  - *** Upstream changelog ***
    * Mon Apr 07 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.42
    - XSI-1728: Avoid repeatedly emitting uevents for LUN changes on CHECK_CONDITION
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.41
    - CP-51825: Add 50G/100G/200G ethtool link modes
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.40
    - None
    * Thu Jan 09 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.39
    - CA-401809: Resolve incorrect coverity warning
    - CA-404447: Improve logging for xhci failures


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.43.1
changelog:
  - Sync with 4.19.19-8.0.43
  - *** Upstream changelog ***
   * Fri Jul 18 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.43
   - CA-412882: Register NVMe ns_id attribute(s) as default sysfs groups
   - CA-360450: Fix deadlock on PCI passthrough


author: Quentin Casasnovas <quentin.casasnovas@vates.tech> - 4.19.19-8.0.44.1
changelog:
  - Sync with 4.19.19-8.0.44
  - *** Upstream changelog ***
    * Fri Oct 31 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.44
    - CA-399062: NFS timeout causes potential deadlock
    - CA-419803 / CA-419762: Backport patches to fix NBD disconnect crash


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.45.1
changelog:
  - Sync with 4.19.19-8.0.45
  - Add missing patch for CVE-2020-14314 (use-after-free detected by Syzkaller)
  - *** Upstream changelog ***
    * Fri Feb 27 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.19.19-8.0.45
    - CA-400357: Use the correct MAC for rndis_host interfaces
    - CA-395473: Backport a patch to fix CVE-2020-14314
    - XSI-2150: Remove added chunk causing deadlock


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.46.1
changelog:
  - Sync with 4.19.19-8.0.46
  - SUNRPC: Restore call to cancel_work_sync()
  - *** Upstream changelog ***
    * Thu Mar 19 2026 Frediano Ziglio <frediano.ziglio@citrix.com> - 4.19.19-8.0.46
    - XSI-2150: Avoid deadlocks on NFS spinlocks


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.1
changelog:
  - Rebase on XS8's 5.7.2-51
  - Undo most changes from snmp.xs.conf, which are related to a proprietary implementation


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-51.2
changelog:
  - Add net-snmp-5.7.2-no-XENSERVER-MIB.xcp-ng.patch
  - Remove XenServer-specific options from /etc/sysconfig/snmpd


author: Thierry Escande <thierry.escande@vates.tech> - 5.7.2-51.3
changelog:
  - Backport patches for CVE-2022-24805, CVE-2022-24806, CVE-2022-24807,
    CVE-2022-24808, CVE-2022-24809, CVE-2022-24810, and CVE-2022-44793


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 5.7.2-52.1
changelog:
  - Rebase on 5.7.2-52
  - Replace our patch by upstream identical one
  - *** Upstream changelog ***
    * Wed Jul 31 2024 Deli Zhang <deli.zhang@cloud.com> - 5.7.2-52
    - CA-393002: Fix CVE-2022-24805 and CVE-2022-24809 issues


author: Philippe Coval <philippe.coval@vates.tech> - 5.9.3-8.1
changelog:
  - Rebuild for openssl-3
  - Remove obsolete net-snmp-5.7.2-CVE-2022-24806.patch
  - Rebase on 5.9.3-8
  - *** Upstream changelog ***
    * Mon Jan 20 2025 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-8
    - CP-50295: Add epoch 1 for XS 8

    * Fri Jan 17 2025 Chunjie Zhu <chunjie.zhu@cloud.com> - 5.9.3-7
    - CP-53263: Remove net-tools

    * Fri Jan 17 2025 Stephen Cheng <stephen.cheng@cloud.com> - 5.9.3-6
    - CP-53229: Remove chrpath

    * Thu Nov 21 2024 Stephen Cheng <stephen.cheng@cloud.com> - 5.9.3-5
    - CP-50538 Remove perl related packages
    - CP-50538 Remove selinux from BuildRequires

    * Fri Aug 23 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-4
    - CP-44169: Add XenServer SNMP Agent so
    - CP-44170: Update default settings
    - CP-44429: Move snmpd.xs.conf from xenserver-release
    - CP-44429: Improve service config

    * Tue Jul 30 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-3
    - CP-50122: Revert perl-srpm-macros require

    * Fri Jul 26 2024 Deli Zhang <deli.zhang@cloud.com> - 5.9.3-2
    - CP-50122: Replace redhat-rpm-config with xenserver-config-rpm in XS9

    * Mon Sep 04 2023 Lin Liu <lin.liu@citrix.com> - 5.9.3-1
    - First imported release


author: Josef Ridky <jridky@redhat.com> - 10.79.00-4
changelog:
  - Resolves: #1523176 - add manual page for ppmtopga
  - Resolves: #1530606 - pbmtoepson command line option fix


author: Michal Hlavinka <mhlavink@redhat.com> - 2.8.0-2
changelog:
  - fix STATEPATH location and creation (#2024651)
  - merged C99 related changes to configure from fedora
  - trim changelog


author: Alex Brett <alex.brett@cloud.com> - 7.4p1-23.1 + 0.10.3-2
changelog:
  - Imported openssh-7.4p1-23.el7_9 from CentOS, including:
  - Fix for CVE-2023-38408
  - Fix for CVE-2021-41617
  - Fix for CVE-2018-15473
  - Fix for CVE-2017-15906


author: Thierry Escande <thierry.escande@vates.tech> - 7.4p1-23.2.1 + 0.10.3-2.23.2.1
changelog:
  - Harden default ciphers and algorithms
  - Disable GSSAPIAuthentication in sshd_config
  - Remove build dependency on xauth (used for X11 forwarding not supported on XCP-ng hosts)
  - Make use of xcpng_subrel macro for versioning
  - Disable gnome_askpass
  - Add BuildRequires for gcc


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7.4p1-23.3.1 + 0.10.3-2.23.3.1
changelog:
  - Sync with 7.4p1-23.3 + 0.10.3-2.23.3
  - *** Upstream changelog ***
  - * Tue Jul 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 7.4p1-23.3 + 0.10.3-2
  - - CP-50166: Remove libsystemd integration
  - - CA-395182: Fix CVE-2024-6387 - use of non-async-signal-safe fn in sighandler


author: Philippe Coval <philippe.coval@vates.tech> - 9.8p1-1.2.1
changelog:
  - Refresh XCP-ng patches:
    - Drop unnecessary hardening and gssapi patches
    - Replace CVE-2025-26465 backport with upstream patch from 9.9p1
  - Sync with 9.8p1-1.2
  - *** Upstream changelog ***
  - * Fri Nov 07 2025 Alex Brett <alex.brett@citrix.com> - 9.8p1-1.2
  - - CA-420416: Remove diffie-hellman-group14-sha1 KexAlgorithm
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 9.8p1-1.1
  - - CA-400917: Disable PerSourcePenalties
  - - CA-401322: Revert sshd.pam to xs8 default
  - - CA-401322: Ensure new config files applied
  - * Fri Sep 13 2024 Deli Zhang <deli.zhang@citrix.com> - 9.8p1-1
  - - CP-50298: Upgrade to version 9.8p1
  - * Wed Jul 31 2024 Lin Liu <lin.liu@citrix.com> - 8.8p1-3
  - - CP-50477: Customize ssh configurations
  - * Mon Sep 25 2023 Lin Liu <lin.liu@citrix.com> - 8.8p1-2
  - - CP-45435: Permit root ssh login
  - * Thu Jul 20 2023 Lin Liu <lin.liu@citrix.com> - 8.8p1-1
  - - First imported release


author: Yann LE BRIS <yann.lebris@vates.tech> - 3.2.3-1.16
changelog:
  - Add 0061-Fix-LVHDSR.load-set-other_conf-in-cond-branch-to-pre.patch
  - Add 0062-fix-cleanup.py-protect-LinstorSR-init-against-race-c.patch
  - Add 0063-Fix-filter-to-reject-other-device-types-77.patch
  - Add 0064-feat-add-HPE-Nimble-multipath-configuration.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.1
changelog:
  - Rebase on 3.2.12-3
  - Sync patches with our latest 3.2.12-8.3 branch
  - Remove patches merged upstream:
    - 0028-CA-398425-correctly-check-for-multiple-targets-in-iS.patch
    - 0030-fix-getAllocatedSize-is-incorrect-75.patch
    - 0047-Define-and-details-attr-on-Failure-mock.patch
    - 0064-feat-add-HPE-Nimble-multipath-configuration.patch
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-3
    - CA-405381: update mpathcount while xapi is not enabled
    * Thu Feb 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-2
    - CA-403593: don't log session refs
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-1
    - CA-400789: Do not exclude parentless VDIs from cacheing
    - CP-52844: allow for open session to be passed to sr_get_capability
    - CP-52852: add handler for xmlrpc ProtocolError
    - fix(cleanup.py): bad live coalesce check regarding FileSR
    * Tue Nov 19 2024 Mark Syms <mark.syms@cloud.com> - 3.2.11-1
    - CP-42675: send messages to Xapi if GC has insufficient space
    - CP-52620: enable read-through cache on persistent leaf
    * Tue Nov 05 2024 Mark Syms <mark.syms@cloud.com> - 3.2.10-1
    - CA-397084: SR scan tries to deactivate LV in use by tapdisk
    - CA-399644: if we make progress do not abort the GC or evaluate criteria
    - CA-400743: perform post snapshot rename in ioretry
    - CA-401068: if iSCSI device path is not found scan the bus
    * Wed Oct 09 2024 Mark Syms <mark.syms@cloud.com> - 3.2.9-3
    - CP-51658: install stop gc helper script
    - CA-399643 Use full paths when stopping fairlock on upgrade
    - CA-396655: check xapi is enabled before starting multipath reporting
    - CA-396658: check xapi is enabled before checking SR health
    - CA-400106: disable leaf coalesce with VDI snapshot secondary
    * Tue Sep 24 2024 Tim Smith <tim.smith@cloud.com> - 3.2.8-2
    - CA-399643 Use full paths when stopping fairlock on upgrade
    * Fri Sep 06 2024 Robin Newton <robin.newton@cloud.com> - 3.2.8-1
    - CA-398958 Cope with concurrent read-only activations
    * Wed Sep 04 2024 Mark Syms <mark.syms@cloud.com> - 3.2.7-1
    - CA-398425: correctly check for multiple targets in iSCSI
    * Wed Aug 21 2024 Mark Syms <mark.syms@cloud.com> - 3.2.6-1
    - CA-395560: Log exception details when LUN refresh fails
    - CA-396124: amend criteria under which the garbage collector aborts
    - CA-397084: Log any user of LV at deactivate
    - CP-51214: stop cgrules triggering errors on update
    * Tue Jul 23 2024 Tim Smith <tim.smith@cloud.com> - 3.2.5-1
    - CA-395554 Stop fairlock services on package upgrade
    * Mon Jul 22 2024 Mark Syms <mark.syms@cloud.com> - 3.2.4-1
    - Add missing sg3_utils dependency
    - Update multipath config for Dell, IBM and Nimble arrays


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.2
changelog:
  - Prevent leaf coalesce during migration for LINSTOR (CA-400106)
  - Use GC daemon code for LINSTOR like other drivers


author: Yann Dirson <yann.dirson@vates.fr> - 3.2.12-3.3
changelog:
  - Add missing dependency on libcgroup-tools, uses cgclassify(1)
  - Drop dependency on old and unused python3-future
  - Refresh patch not applying on Alma10 due to fuzz


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-10.1
changelog:
  - Rebase on 3.2.12-10
  - Sync patches with our latest 3.2.12-8.3 branch
  - Add new patches:
    - 0064-chore-.github-workflows-use-ubuntu-24.04.patch
    - 0065-Fix-warns-reported-by-new-github-workflow.patch
    - 0066-Improve-LinstorSR.py-to-handle-thick-SR-creation-85.patch
    - 0067-Fix-LINSTOR-satellite-LS_KEEP_RES-regex.patch
    - 0068-fix-LinstorSR-Correctly-reference-a-variable-excepti.patch
    - 0069-Fix-GC-hidden-attribute-in-case-of-SIGTERM-signal-87.patch
    - 0070-fix-LinstorSR-robustify-DB-umount-call.patch
    - 0071-feat-Linstor-rewrite-linstorhostcall-logic.patch
    - 0072-feat-linstor-Add-new-debug-log-in-linstorhostcall-67.patch
    - 0073-fix-linstor-subsequent-fixes-for-linstorhostcall.patch
    - 0074-Fix-tests-of-CP-51843-add-unit-tests-for-setup_cache.patch
    - 0075-feat-LinstorSR-improve-DB-volume-robustness.patch
    - 0076-fix-linstorvolumemanager-robustify-usable-size-gette.patch
    - 0077-fix-linstorvhdutil-don-t-log-when-get_hosts_attached.patch
    - 0078-refactor-linstorvhdutil-simplify-linstorhostcall.patch
    - 0079-fix-linstorvhdutil-call-local-method-when-possible-i.patch
    - 0080-fix-linstorvhdutil.py-remove-useless-param-on-call_r.patch
    - 0081-chore-pylintrc-get-rid-of-E1120-errors-for-LINSTOR-u.patch
    - 0082-fix-linstorvhdutil-support-missing-session-97.patch
  - *** Upstream changelog ***
    * Fri Jul 04 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-10
    - CA-413209: remove dangling reference to rawhba
    - CP-308587: update NetApp multipath as requested
    * Wed Jun 18 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-9
    - CA-395221: require systemd target
    * Tue May 27 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-8
    - CP-53692 SR attach with kicking the mpathcount pipe
    - CA-411163: refuse to attach if we see multiple SCSI IDs for SR PVs
    * Tue Apr 08 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-7
    - CA-409231: Report IntelliCache stats when parent is NBD.
    * Mon Mar 31 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-6
    - CA-407743: do not try to add memory caching and intellicache
    * Tue Mar 25 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-5
    - CA-408105: add logging to failure paths
    - CA-408452: remove VDI parent if it does not have one
    - CP-51843:  extend IntelliCache coverage
    * Tue Mar 04 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-4
    - CA-407343: do not remove the parent's vhd-parent in leaf GC
    - Revert the changes in 2979937bbb7 (CA-397084)
    - CP-50026 Ensure mpathcount runs after multipath deactivate


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.12-10.2
changelog:
  - Add 0083-Remove-useless-loadLocked-param-on-vdi-methods-98.patch
  - Add 0084-fix-largeblock-redo-VG-activation-using-custom-confi.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-16.1
changelog:
  - Rebase on 3.2.12-16
  - Sync patches with our latest 3.2.12-8.3 branch
  - Add new patches:
    - 0085-Stop-SMGC-service-on-SR-detach-to-prevent-orphaned-s.patch
    - 0086-fix-linstorvolumemanager-create-local-DB-path-when-r.patch
    - 0087-feat-linstorvolumemanager-raise-when-empty-device-pa.patch
    - 0088-fix-linstorvolumemanager-prevent-ops-on-version-mism.patch
    - 0089-fix-linstor-handle-deleted-volumes-during-UUID-updat.patch
    - 0090-fix-linstor-don-t-raise-if-volume-cannot-be-deleted-.patch
    - 0091-fix-linstor-print-DRBDs-open-during-chain-check-in-R.patch
    - 0092-metadata-improve-error-messages-when-vdi_type-is-mis.patch
    - 0093-Use-serial-instead-of-SCSI-ID-for-USB-devices-107.patch
  - *** Upstream changelog ***
    * Fri Nov 21 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-16
    - CA-420515: log errors in GC when running in foreground
    - CA-419706: fix incorrect print syntax
    - CA-421013: ensure repeated CBT enable/disable works
    * Mon Nov 10 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-15
    - CA-418775: ensure getsize and sg_readcap agree on resize
    - CA-420307: encode synthetic SCSI data correctly
    * Wed Oct 15 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-14
    - CA-416486: leaf coalesce wait for GC
    * Tue Sep 30 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-13
    - CP-309718: calculate a moving average of leaf size in GC
    * Tue Sep 09 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-12
    - CA-414438 Defend against unexpected VDI name_description contents
    - CA-413899: Rescan lvs when activating
    * Mon Aug 18 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-11
    - Rebuild


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-17.1
changelog:
  - Rebase on 3.2.12-17
  - Remove patches merged upstream:
    - 0092-metadata-improve-error-messages-when-vdi_type-is-mis.patch
  - Add new patches:
    - 0093-fix-linstorvolumemanager-fix-typo-106.patch
    - 0094-fix-linstorvolumemanager-don-t-allow-InUse-volumes-t.patch
    - 0095-fix-cleanup-ensure-VDI-is-active-before-relink-119.patch
    - 0096-feat-linstor-simplify-get_controller_uri-using-ss-co.patch
    - 0097-fix-linstor-ignore-unknown-res-to-get-volume-info-12.patch
    - 0098-feat-linstor-parallelize-SR.scan-cleanup-vhd-util-ca.patch
    - 0099-fix-cleanup-properly-handle-FileSR-exception-for-sla.patch
    - 0100-Ensure-DRBD-sync-before-resizing-volumes-in-thick-co.patch
  - *** Upstream changelog ***
    * Fri Dec 12 2025 Mark Syms <mark.syms@citrix.com> - 3.2.12-17
    - Backport changes from upstream.
    - remove flag gc_no_space from SR sm-config when not applicable
    - improve error messages when vdi_type is missing


author: Pau Ruiz Safont <pau.safont@vates.tech> - 25.33.1-2.1
changelog:
  - Update to upstream 25.33.1-2
  - *** Upstream changelog ***
    * Thu Oct 30 2025 Rob Hoes <rob.hoes@citrix.com> - 25.33.1-2
    - Bump release and rebuild
    
    * Thu Oct 30 2025 Rob Hoes <rob.hoes@citrix.com> - 25.33.1-1
    - CA-419227 Move force_state_reset after refresh_vm
    
    * Thu Oct 16 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.33.0-2
    - CP-53573: Enable NUMA placement in XS9
    
    * Tue Oct 14 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.33.0-1
    - Update dune lang to 3.20
    - Avoid no-cmx-warning when building xapi_version
    - CP-308455 VM.sysprep turn on feature
    - XSI-1969 CA-418141 more thorough resource cleanup
    - CA-417951: Split checks for migration and detecting RPU
    - CA-417951: Host.create now takes a software version argument
    - python3/perfmon: Remove broken calls to /etc/init.d/perfmon
    - Extend diagnostic-timing-stats to optionally show counts
    - xapi_vm_clone: Remove impossible, confusing case when dealing with suspend VDIs
    - CA-417020: DNS not cleared after reconfiguring to static IP without DNS
    - fix: Xen Version checks
    
    * Tue Sep 30 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.32.0-1
    - XSI-1969 more thorough resource cleanup
    - CP-54163: xapi: Add secure boot field to host
    - http-lib: Add filename hint to file response
    - system_status: Clean up imports, add an interface
    - system_status: Reduce logging
    - system_status: reify the output types for xen-bugtool
    - system_status: Group bugtool command-handling into a module
    - system_status: consolidate error-handling
    - system_status: suggest consistent filenames to clients
    - system_status: add URL parameter to show xen-bugtool entries
    - Fix missing-dependency alerts for unix and str on OCaml 5
    - Fix test for OCaml 5
    - Remove unused Xenctrlext function
    - idl: Remove apparently unused gen_test.ml
    - idl/gen_client: Don't specify argument values when they're equal to defaults
    
    * Wed Sep 24 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.31.0-1
    - CP-308811: Add an option to limit the span depth in tracing
    - CP-309305: Split Spans.since into chunks for exporting
    - Use a forwarder so each component updates their depth and chunk size
    - CA-416351: Slave shutdown timeout
    - rrd: Fix absolute rate calculations
    - CP-309523: Make networkd_db utility return bridge MAC address
    - xapi_vm_migrate: Fix reservations not being cleared on halted VMs
    - CP-308863: Count vGPU migrations
    - CA-416516: vm.slice/cgroup.procs write operation gets EBUSY
    - CA-367765: remove reference to obsolete default URL
    - Remove obsolete test script
    - host.disable: Add auto_enabled parameter for persistency
    - Simplify UTF-8 decoding
    - Adjust quality-gate.sh
    - xapi/nm: Send non-empty dns to networkd when using IPv6 autoconf
    - CP-53479: Add xapi-ssh-monitor script and service
    - CP-308800: Dynamically control ssh firewalld service in xapi-ssh-monitor
    - xapi-idl/network: Remove code duplication for DNS persistence decisions
    - Remove redundant check
    - xapi_pbd: use HA shared SR constraint violation when plugging and unplugging
    - xapi_pif: use HA shared network constraint violation when plugging and unplugging
    - xapi_ha_vm_failover: remove superfluous debug message
    - xenopsd: Drop unused variables in domain.ml
    - docs: Update add-function.md to fix example
    - ocaml: allow xapi to compile under OCaml 5.3
    - XSI-1987 & CA-416462: Fix RPU host evacuation version check
    - CA-417390: No RRD metric for vGPU migration with local storage
    - ocaml: prepare formatting for ocamlformat 0.27.0
    - git-blame-ignore-revs: ignore previous, formatting commit
    - networkd: Remove usage of ovs-vlan-bug-workaround
    - networkd: Remove has_vlan_accel from network_utils
    
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.30.0-1
    - CA-411297: XAPI UTF8
    - CA-412983: HA doesn't keep trying to start best-effort VM
    - Add Xapi_globs.ha_best_effort_max_retries to eliminate hard-coding
    - Optimize with List.compare_lengths
    - Copy dependency libraries to the output folder. Build using the project file (or the build switches in it are ignored).
    - CP-308539 Added preprocessor conditions to compile with .NET 8
    - Updated language use. Removed redundant calls and initializers. Use Properties instead of public fields.
    - CP-308539 Replaced obsolete code.
    - CP-308539 Use HttpClient for .NET as HttpWebRequest is obsolete.
    - CP-44752: propagate System.Diagnostics tracing information using W3C traceparent header.
    - Action from CA-408836: Deprecate the method SaveChanges. It is a XenCenterism and not always correct.
    - libs/log: adapt backtrace test to pass on aarch64
    - ocaml/util: delete module xapi_host_driver_helpers and tests
    - Updated dependencies for PS 5.1.
    - I forgot to initialize the Roles.
    - ci: enable experimental ocaml workflow on aarch64
    - CP-308455 VM.sysprep if CD insert fails, remove ISO
    - CP-308455 VM.sysprep declare XML content as SecretString
    - CP-308539: Updated certificate validation to support .NET 8.0 in PowerShell.
    - Revert "xapi/nm: Send non-empty dns to networkd when using IPv6 autoconf (#6586)"
    
    * Wed Aug 27 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 25.29.0-2
    - Rebuild against Xen 4.20
    
    * Thu Aug 21 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.29.0-1
    - CP-40265 - xenopsd: Drop max_maptrack_frames to 0 by default on domain creation
    - CP-40265 - xenopsd: Calculate max_grant_frames dynamically
    - Treat 64 max_grant_frames as the lower bound
    - xenopsd: Don't iterate over StringMaps twice
    - xapi_vm_helpers: Raise allowed_VIF limit from 7 to 16
    - xapi/nm: Send non-empty dns to networkd when using IPv6 autoconf
    - xapi-idl/network: Remove code duplication for DNS persistence decisions
    - CI: update pre-commit config
    - CI: update diff-cover parameters
    - Minor wording improvement
    - CP-53858: Domain CPU ready RRD metric - runnable_any
    - CP-54087: Domain CPU ready RRD metric - runnable_vcpus
    - CP-308465: RRD metric "runnable_vcups": rebase on top of xen.spec/PR#481
    - python3/usb_scan: Skip empty lines in usb-policy.conf, add more comments
    - Changed the order of operations so that the sources are stored before any CI runs.
    - CA-413254: Sort and remove duplicate serialized types.
    - message_forwarding: Log which operation is added/removed from blocked_ops
    - xe-cli: Allow floppy to be autocompleted
    - CA-415952: HA can not be enabled
    
    * Wed Aug 06 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.28.0-1
    - CA-413424: Enhance xe help output
    - CP-308455 VM.sysprep CA-414158 wait for "action" key to disappear
    - Disable SARIF upload for now: they are rejected
    - CP-308455 VM.sysprep CA-414158 wait for "action" key to disappear (#6604)
    - CP-309064 Add SSH Management feature design
    - CA-414418: Detection of AD account removal does not cause logout
    - CA-414418: Perf: save user validate result and apply to sessions
    - CA-414418: Code refine for comments
    - CA-414627: increase polling duration for tapdisk
    - Update datamodel lifecycle


author: Pau Ruiz Safont <pau.safont@vates.tech> - 26.0.0-1.1
changelog:
  - qcow-stream-tool: Avoid stack overflows in read_headers
  - Update to upstream 26.0.0-1
  - *** Upstream changelog ***
    * Thu Jan 08 2026 Rob Hoes <rob.hoes@citrix.com> - 26.0.0-1
    - CP-54473 Implement max-state setting
    - Add host.max_cstate and host.set_max_cstate
    - update last_known_schema_hash
    - CP-54471 Add ntp operations
    - CP-54471 Add host.ntp_mode and host.ntp_custom_servers
    - CP-54471 Add host.enable/disable_ntp
    - CP-54471 Add ntp config dbsync
    - CP-308854 Add host.get_ntp_servers_status
    - Update last_known_schema_hash
    - CP-308544 Promote legacy default ntp servers
    - rrdp-dcmi: Detect more errors on discovery
    - [doc] Add host-ntp-time feature doc
    - CP-308545 Add host.timezone
    - Update last_known_schema_hash
    - CP-308856 host.get_ntp_synchronized
    - CP-308855: host.set_servertime
    - CP-54476 Merge ntp disable/enable to ntp mode
    - Use timedatectl to enable/disable ntp
    - Fix `/run/chrony-dhcp` does not exist
    - Update datamodel lifecycle and bump schema
    - CA-420533: Only clear RestartVM guidance on up-to-date hosts
    - qcow-stream-tool: Add read_headers command
    - python3: Use pre-parsed cluster allocation data in qcow2-to-stdout
    - vhd_tool_wrapper: Make vhd_of_device generic
    - qcow_tool_wrapper: Read headers of QCOW2-backed VDIs on export
    - qcow_tool_wrapper: Implement parse_header to determine allocated clusters
    - Update lifecycle
    - opam: add missing dependencies
    - CA-420856: Re-read inventory file when resetting network
    - opam: generate metadata for uuid with dune
    - libs: remove unused type parameters
    - git-blame: ignore another formatting commit
    - sdk-gen: make code compatible with ocaml 5.4
    - CA-421991: Fix QEMU coredumps on XS9
    - CA-421914: preserve Host.numa_affinity_policy across pool join
    - CA-421847: set vcpu affinity if node claim succeeded
    - CA-422071: preserve latest_synced_updates_applied and pending_guidances* across pool join
    - CA-422071: add unit test for Host.create_params
    - XSI-2088: CA-422080: External auth can not support large forest
    - CA-422072 Add new fields to host create params
    - XSI-2088: CA-422080: Code refine for comments
    - ocaml/xapi-idl: change CLI help tests
    - ocaml: prepare formatting for new ocamlformat
    - coverage: remove dependency on bisect_ppx
    - CP-310867 Sort output of diagnostic-timing-stats
    - XSI-2093: CA-422229: Host should not register all IPs to DNS server
    - [doc] Improvements on management of trusted certificates
    - CA-422282 Fix race condition about xenops cache
    - libs: add try_map to listext
    - database: Make a custom exception when fetching of db connections fails
    - ocaml: remove usages of List.hd
    - ocaml/libs: List.last and List.head now return options
    - ocaml: replace List.(hd (rev list)) with List.last
    - ocaml: use new List.head instead of List.nth_opt
    - vhd-tool: Add read_headers command for determining allocated blocks
    - stream_vdi: Factor out send_one into a top-level function
    - xapi_vdi_helpers: Move backing_file_of_device from vhd_tool_wrapper
    - xapi_vdi_helpers: Split backing_file_of_device in two
    - vhd_tool_wrapper: Add parse_header to determine allocated blocks
    - stream_vdi: Only process allocated clusters for VHD and QCOW
    - tapctl: Return Option instead of raising Not_found
    - stream_vdi: Move to using Mtime_clock.counter
    - dune-project: Add yojson as vhd-tool dependency
    - vhd_qcow_parsing: Only use the basename in the with_logfile_fd call
    - CA-422187: fix NUMA on XS8
    - xenops: Fix migrate parameter ordering
    - libs: add Stat module in Unixext to handle special device IDs
    - ocaml: Unify handling of major and minor device IDs
    - vhd_tool_wrapper: generate detailed errors when getting tapctl devices
      
    * Fri Dec 05 2025 Steven Woods <steven.woods@citrix.com> - 25.39.0-1
    - CA-420968: compute the amount of physical cores available on a NUMA node set
    - CA-420968: ensure compatibility between NUMARequest.fits and plan
    - CA-420968: track number of physical cores during a NUMA planning request
    - CA-420968: introduce an explicit name for the current NUMA policy: Prio_mem_only
    - CA-420968: avoid large performance hit on small NUMA nodes
    - [doc] add missing command to xs-trace
    - numa_placement: use Seq instead of List
    - CA-419908: Move module Watcher ahead for future use in module VM
    - s/xe-syslog-reconfigure: Keep disclaimer in remote.conf
    - opam: update metadata
    - ocaml/xapi: remove unused xmlrpc_sexpr module
    - ocaml/libs/http-lib: remove unused mime module
    - ocaml: reduce and guard all users of Pool.get_all |> List.hd
    - CA-419908: Update xenstore watcher to refresh domains when VM is renamed
    - Refactor IntMap to use built-in Int module in Map.Make
    - CP-309847: Make HTTP/80 configurable
    - CP-31566 define xenopsd fast resume operation
    - fixup! CP-31566 define xenopsd fast resume operation
    - increase max supported NVMe request size
    
    * Thu Nov 27 2025 Steven Woods <steven.woods@citrix.com> - 25.38.0-1
    - Refactor: Rename Http.Request.uri -> path
    - RPC: Add "/RPC2" route for the RPC handler
    - Compute PCI device directory only once
    - CA-418993: Enable PCI ROM BAR before attempting to give permissions to the VM
    - [doc] fix typo in command to create new certificates
    - rrdd: Add HTTP paths /host_rrds and /vm_rrds
    - nbd: use URI type for /var/xapi/xapi socket
    - idl: Remove FIXME comment in datamodel_pool
    - CP-49045: add unit test for db_get_by_uuid when a uuid is changed
    - CP-49045: factor out uuid_of_row
    - CP-49045: update UUID index when the uuid is changed
    - CP-49045: optimize database uuid lookup: use index
    - Reuse Filename.concat and // operator
    - quicktest: Add delta tests for VHD data integrity suite
    - Correct parameter description in assert_can_migrate
    - CA-418227: Handle exceptions in At_least_once_more.again
    - CA-418227: Catch exceptions from host.update_allowed_operations
    - CA-418227: Detect rolling upgrade after setting software_version
    - CA-421084: xstringext: Improve performance of escaped
    - xstringext: Test escaped against reference implementation
    - xstringext: Add benchmark for escaped
    - quicktest: Add qcow to VDI integrity tests
    
    * Wed Nov 12 2025 Steven Woods <steven.woods@citrix.com> - 25.37.0-1
    - xapi-stdext: remove unused functions from listext
    - xapi-stdext: consolidate listext's chop tests
    - xapi-stdext: introduce split_at to listext
    - xapi-stdext: replace List's chop with split_at
    - stunnel_cache: remove ad-hoc chop implementation
    - stunnel_cache: use timestamps for cache evictions instead of IDs
    - [perfmon] Fix typo in variable name
    - xapi: remove some usages of common, exception-raising functions
    - xapi-consts: use a variant to reify valid values of cluster stack
    - xapi: open firewall for XHAd only if xHAd is actually selected
    - localdb: expose option-based get functions
    - xapi_ha: avoid raising Not_found when joining a liveset
    - quality-gate: capture more unnecessary List.length cases
    - xapi_ha: add more information to not found errors
    - CA-419238: Remove /etc/dnf/repos.override.d/99-config_manager.repo after using
    - quicktest: reduce indentation in vdi module
    - quicktest: test tags being copied on vdi clone and snapshot
    - xapi_vdi: copy tags on VDI clone and snapshot
    - CP-309791: Update samba to 4.21
    - CP-310555: Rotate machine password through winbind
    - Rename encode_bdf function
    - XSI-2025: Only abort HA host reenable for unpluggable PIFs
    
    * Fri Oct 31 2025 Steven Woods <steven.woods@citrix.com> - 25.36.0-1
    - Move xenopsd's xenctrl_ext to ocaml/libs/
    - Add Makefile for with "format" target
    - Fix front matter for Hugo
    - CA-419227 Add logs for debug
      - CA-419227 Move force_state_reset after refresh_vm
    - docs: add documentation about setting up alarms
    
    * Wed Oct 29 2025 Steven Woods <steven.woods@citrix.com> - 25.35.0-1
    - [doc] Host network device ordering
    - CP-44103: Ordering network devices - IDL changes
    - CP-44103: Ordering network devices - ordering logic
    - CP-44103: Unit tests for ordering network devices
    - CP-54445: Filter out ibft devices which are for boot from iSCSI SAN
    - CP-44106: Update networkd config after sort
    - CP-44106: Do not clear interface_order in networkdb
    - CP-44107: Add Interface.get_interface_positions
    - CP-53614: Update xapi pif introduce
    - CP-53614: Use get_all to get net interfaces
    - CP-53718: Update device name in xapi pif refresh
    - Minor change: correct comments
    - CP-44105: Adjust Net.reset_state for pool.eject_self
    - CP-53719: Update monitor and collecting list for host network devices
    - CP-308116: Write management_address_type to inventory
    - CP-308116: Update hard code eth in network-init
    - CP-54444: Return MAC addresses to host installer
    - Change expect files for networkd command
    - CP-308260: Handle networkd upgrade
    - CP-308260: Generate changed_interfaces list for upgrade
    - CP-308260: Update inventory after upgrade
    - CP-308115 Ensure networkd start after systemd-udev-settle.service
    - Fix review comments
    - CP-54441 Adapt interface ordering in xe-reset-networking
    - Use systemctl to stop xapi service in xe-reset-networking
    - CP-308450 Refine the bridge name converting
    - CP-308450 Use the position in new network name_label
    - CP-54468 Handle USB network devices in network devices sort
    - CA-414651 Fix device rename in PIF after RPU
    - Sync pif.device when its type is vlan or sriov
    - Delete unused function Xapi_pif.refresh
    - Abstract get_pif_position in xapi_pif_helpers
    - Copy bonds from master using pif position
    - Copy network sriovs from master using pif position
    - ocaml/libs: Check if blocks are filled with zeros in vhd_format
    - zerocheck: write a failing test
    - zerocheck: fix check for strings longer than 2 GiBs
    - zerocheck: exposing the length to users is unsafe and not needed
    - datamodel_lifecycle: fix release of functions from #6717
    - Update datamodel_lifecycle
    - CA-418759: Failed to start attach-static-vdis
    - Make CI shellcheck happy
    - unixpwd: putpwent() is GNU extension
    - forkexecd: memcpy() and strcpy() comes from string.h
    - forkexecd: explicitly cast `struct sockaddr_un` to `struct sockaddr`
    - Add numa.md design sketch; new fields to to VM_metrics.
    
    * Wed Oct 22 2025 Steven Woods <steven.woods@citrix.com> - 25.34.0-1
    - CP-308927 Add nr_nodes in host.cpu_info to expose numa nodes count
    - CP-308873 Update software_version to reflect the newly applied livepatch after apply_livepatch
    - CP-308800: Add firewalld control function
    - CP-308800: Dynamic control http firewall service
    - CP-308800: Dynamic control xha firewalld service
    - CP-308800: Dynamic control cluster firewalld service
    - CP-308800: Dynamic control VxLan firewalld service
    - CP-308800: Dynamic control ssh firewalld service
    - CP-308800: Revert https_only sync logic
    - CP-308800: Dynamic control iptables port
    - CP-308859 Track user_agents
    - Add unit test
    - Add host.get_tracked_user_agents
    - CP-308798: Dynamic control NBD firewalld service
    - CP-308873 Parse kernel livepatch list and drop the status
    - CP-308864 Dump the pvs_target_version into VM_guest_metric.service
    - CA-417366 make_xen_livepatch_list can not Parse the Output of xen-livepatch
    - CP-309535: Extract function get_nbd_interfaces
    - CP-309535: Add a function all_service_types
    - CP-309535: Add API update_firewalld_service_status
    - CP-309535: Update firewalld service when start
    - CP-309535: Add CLI host-update-firewalld-service-status
    - CP-309535: Update datamodel_lifecycle
    - CP-309535: Add a service to update firewalld
    - CA-417520: Fix 2 HA firewalld issues
    - CP-47867: Add observer uuid to span attributes
    - More missing unix dependencies
    - CI: Add OCaml 5.3 as experimental build
    - xenopsd/bootloader: No need to create /var/run/xend/boot anymore
    - doc: change outdated information in storage
    - doc: update better VM revert proposal
    - CA-418960: VM with vTPM Delete doesn't remove the snapshot


author: Pau Ruiz Safont <pau.safont@vates.tech> - 26.1.3-1.1
changelog:
  - Update to upstream 26.1.3-1
  - Provide configuration for NTP servers, keep the previous servers for now
  - *** Upstream changelog ***
   * Tue Feb 10 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.3-1
   - CA-423708: xapi: Wrap {vhd,qcow}-tool read_header invocation in a thread

   * Fri Feb 06 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.2-1
   - XSI-2128: Ignore RBAC when destroying internal tasks

   * Wed Feb 04 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.1-1
   - lifecycle: refresh with version 26.1.0
   - ci: prepare for lcm status
   - Check that suspend SR has enough space to save VM state
   - CP-311102: Make migration timeouts configurable
   - qcow-stream-tool: Use tail-recursive functions in read_headers
   - Don't depend on LANG for running tests
   - CA-419840 improve logging for VDI.forget
   - CA-419840 mark CD VBD as empty when its VDI is removed
   - CA-422713: XSI-2105: Pool.join failed due to AD status corrupt
   - CA-422713: Reset numbered_release for lcm
   - xapi_sm: remove nested call to serialize function
   - xapi_sm: add interface
   - listext: add better description to set_difference
   - storage_access: split the code off that queries message switch for SMAPIv2 plugins
   - storage_access: share code for unregistering plugins
   - storage_access: avoid the addition of multiple SM with the same type
   - xapi_sm: Don't allow host_pending_features that are empty
   - storage_access: log when there are SM duplicates on startup
   - CA-423369: fix suspend-SR space check

   * Tue Jan 13 2026 Rob Hoes <rob.hoes@citrix.com> - 26.1.0-1
   - CP-54217: Add a new pool level field to limit the vnc console access
   - CP-54216: Add a new pool level field to set guest console idle timeout
   - CP-54393: A simple RFB protocol parser for VNC console connections
   - CP-54393: VNC console idle timeout
   - CP-54274: Send a meaningful error message for vnc connection limits
   - CP-310425: Add username in VNC console error messages
   - dune-project: Move vhd-format.opam to be generated by dune, add yojson dependency
   - xapi_vm_migrate: share function to check capabilities
   - xapi_vm_migrate: add capabilities to migration not supported by sr error
   - ocamlformat: avoid bug in newest version of the tool
   - ocaml: format using `make format` with ocamlformat 0.28.1


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 26.1.3-1.4
changelog:
  - Switch to optimized data cluster format for VHD and QCOW,
    reducing memory consumption on QCOW import


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 26.1.3-1.6
changelog:
  - When exporting QCOW2-backed VDIs, read headers of the whole snapshot chain
  - Fix duplicated chunks during VM export resulting in an invalid XVA


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-5
changelog:
  - Remove dlm, dlm-lib, corosync and corosynclib
  - We don't use XS's clustering feature which means we don't need them


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-10
changelog:
  - Sync to latest upstream master: v7.30.0 + 10 commits
  - Dropped patches merged upstream and rebased the rest
  - Add support for RHEL 9 and derivatives in install.sh


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-12
changelog:
  - Update release to match that of the RPM in XCP-ng 8.2, since this is what
    also defines the suffix of the version of the xe-guest-utilities packages
    in the ISO.


author: Gael Duperrey <gduperrey@vates.tech> - 8.3-14
changelog:
  - Remove noise from patches using git-format-patch options
  - Add patch to remove the invitation to reboot after install of the tools
  - Add patch to support RHEL 10 and derivatives in install.sh


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.11.0-1
changelog:
  - Update smartctl plugin to report status about megaraid devices.
  - Add a new ipmitool plugin to get information from ipmitool.
    - It returns information about sensors
    - It also returns ipmi lan information


author: David Morel <david.morel@vates.tech> - 1.15.0-1
changelog:
  - Heavy rework of sdncontroller plugin
  - Version 1.14.0 was skipped, as the lsblk plugin changes introduced
    performance issues and were reverted in this release.


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.5-20.1
changelog:
  - Sync with 4.17.5-20
  - Use xsa472-[123].patch provided by XenServer
  - *** Upstream changelog ***
    * Mon Sep 01 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-20
    - Fix for XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143

    * Thu Aug 28 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-19
    - Add support for 4 or more socket Intel Granite Rapids systems
    - Fix usage of PCI devices on segments other than 0


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-21.1
changelog:
  - Sync with 4.17.5-21
  - Removed XSA-475 patches now included in 4.17.5-21
  - *** Upstream changelog ***
    * Thu Oct 09 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-21
    - Fix for XSA-475 CVE-2025-58147 CVE-2025-58148
    - Use superpages where possible on migrate/resume
    - Populate CPUID 0x1.edx features early for self-snoop detection


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-23.1
changelog:
  - Sync with 4.17.5-23
  - *** Upstream changelog ***
    * Thu Dec 04 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-23
    - Support the new Linux AMD microcode container format with multiple blobs per
      CPU, to cope with pre-EntrySign firmware.
    * Mon Oct 27 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-22
    - Fix for XSA-476 CVE-2025-58149
    - Support passthrough of devices on PCI segment different than 0


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.6-2.1
changelog:
  - Sync with 4.17.6-2
  - Drop patches for XSA-477 and XSA-479 from the XCP-ng patches section, now
    provided in the main patches section with different names
  - *** Upstream changelog ***
   * Thu Jan 15 2026 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-2
   - Fix for XSA-479 CVE-2026-23553
   * Mon Dec 15 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.6-1
   - Update to Xen 4.17.6


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-4.1
changelog:
  - Sync with XenServer 4.17.6-4
  - *** Upstream changelog ***
    * Mon Feb 23 2026 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.17.6-4
    - Improve migration performance
    * Mon Feb 09 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-3
    - Fix Xen watchdog triggering during domain construction.


author: Lucas Pottier <lucas.pottier@vates.tech> - 4.17.6-5.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use xsa480.patch provided by XenServer
  - *** Upstream changelog ***
    * Thu Mar 05 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-5
    - Fix for XSA-480 CVE-2026-23554


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.6-6.1
changelog:
  - Sync with XenServer 4.17.6-5
  - Use 0001-xen-mm-don-t-unconditionally-clear-_PGC_need_scrub-i.patch from
    XenServer
  - *** Upstream changelog ***
    * Wed Mar 18 2026 Roger Pau Monné <roger.pau@citrix.com> - 4.17.6-6
    - Fix for CVE-2026-4397.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.80.0-1.1
changelog:
  - Rebase on 6.80.0-1
  - *** Upstream changelog ***
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1

    * Mon May 13 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.79.0-1
    - ocaml: add 4.14.2 packages
    - upstream: update non-breaking packages


author: Yann Dirson <yann.dirson@vates.tech> - 6.86.0-1.1
changelog:
  - Update to 6.86.0-1
  - Refresh removal of dlm package (location changed in source tree)
  - Don't pass "-f" to "rm" while removing packages, to better catch upstream changes
  - Fix typo generating /etc/profile.d/opam.sh
  - Reformat changelog to allow diffing with upstream
  - *** Upstream changelog ***
    * Wed Oct 09 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.86.0-1
    - Include crowbar library
    
    * Tue Oct 08 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.85.0-1
    - Update Uuidm to 0.9.9
    - Use upstream folder structure, use opam-directed tools for managing it
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.84.0-1
    - CA-399172: fix potential crash in Uri.of_string
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.83.0-1
    - Patch Uri packages to add path_unencoded
    - jst-config: fix build on Fedora40
    - Metadata refresh, breaking update of upstream libraries
    - Remove systemd library
    
    * Tue Jul 02 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.81.0-1
    - Update crc to 2.2.0
    - Add qcheck and qcheck-alcotest
    
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.87.0-1.1
changelog:
  - Update to 6.87.0-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.87.0-1
    - Drop dependency on async and core packages
    - Non-breaking updates of packages


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 6.91.0-1.1
changelog:
  - Update to 6.91.0-1
  - *** Upstream changelog ***
    * Fri Jul 18 2025 Rob Hoes <rob.hoes@cloud.com> - 6.91.0-1
    - Add qcow-stream and its dependencies
    - packages: update xen-api's metadata

    * Tue Jun 10 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.90.0-1
    - packages: update dune packages to 3.18.2
    - packages: update ocaml-xenstore to 2.4.0
    - packages: update mirage-crypto to 2.0.1

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 6.89.0-2
    - Bump release and rebuild

    * Thu May 22 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.89.0-1
    - packages: round of non-breaking updates (dune, ssl, others)
    - packages: update xenstore_transport to 1.4.0

    * Fri Mar 28 2025 Rob Hoes <rob.hoes@cloud.com> - 6.88.0-1
    - New HTTP packages
    - Non-breaking updates of existing packages

    * Tue Jan 21 2025 Deli Zhang <deli.zhang@cloud.com> - 6.87.0-2
    - CP-52964: Build with OpenSSL3 for XS8


author: Pau Ruiz Safont <pau.safont@vates.tech> - 6.96.0-1.1
changelog:
  - *** Upstream changelog ***
    * Fri Oct 03 2025 Rob Hoes <rob.hoes@cloud.com> - 6.96.0-1
    - Add missing oxenstored dependencies

    * Wed Oct 01 2025 Rob Hoes <rob.hoes@cloud.com> - 6.95.0-1
    - Package updates for OCaml 5.3 compatibility


author: Pau Ruiz Safont <pau.safont@vates.tech> - 6.97.0-1.1
changelog:
  - *** Upstream changelog ***
    * Thu Nov 27 2025 Rob Hoes <rob.hoes@cloud.com> - 6.97.0-1
    - qcow: update to 0.12.2
    - packages: define dlm's depext for centos-based distributions


author: Pau Ruiz Safont <pau.safont@vates.tech> - 6.99.0-1.1
changelog:
  - *** Upstream changelog ***
   * Tue Jan 13 2026 Rob Hoes <rob.hoes@cloud.com> - 6.99.0-1
   - packages: Use ocamlformat 0.28.1

   * Tue Jan 13 2026 Rob Hoes <rob.hoes@cloud.com> - 6.98.0-1
   - vhd-format: Sync with xapi
   - packages: prepare for an ocamlformat compatible with ocaml 5.4 (#750)
   - packages: update ocamlformat from 0.27.0 to 0.28.1
   - packages: patch notty 0.2.3 for ocaml 5.4
   - packages: update num to 1.6
   - packages: drop bisect_ppx from testing dependencies
   - packages: update xen-api's metadata


