# changelog

author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.5-1.1
changelog:
  - Update to 3.54.5-1
  - *** Upstream changelog ***
  - * Tue Aug 01 2023 Mark Syms <mark.syms@citrix.com> - 3.54.5-1
  - - Report control timeouts correctly
  - * Wed Jun 21 2023 Mark Syms <mark.syms@citrix.com> - 3.54.4-1
  - - Remove unused and broken libvhdio
  - - CA-377624: Guard against NULL tiocb in lio event handler
  - * Wed Apr 12 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-2
  - - Rebuild
  - * Wed Mar 29 2023 Mark Syms <mark.syms@citrix.com> - 3.54.3-1
  - - Rebuild
  - * Mon Feb 27 2023 Mark Syms <mark.syms@citrix.com> - 3.54.2-1
  - - Rebuild
  - * Fri Feb 17 2023 Mark Syms <mark.syms@citrix.com> - 3.54.1-1
  - - Rebuild
  - * Thu Feb 16 2023 Mark Syms <mark.syms@citrix.com> - 3.54.0-1
  - - Release 3.54.0
  - - Update compiler set
  - - Various NBD server improvements


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-2.1
changelog:
  - Update to 3.54.6-2
  - *** Upstream changelog ***
  - * Thu Sep 28 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-2
  - - CP-40871: Enable rate limit control on unpause
  - * Thu Sep 07 2023 Mark Syms <mark.syms@citrix.com> - 3.54.6-1
  - - CP-40871: return the number of sectors coalesced from vhd-util
  - - CP-45025: Avoid retries except in a few specific cases
  - - CA-382087: Only write the bitmap if the contents have changed


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.6-3.1
changelog:
  - Sync with 3.54.6-3
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Mark Syms <mark.syms@citrix.com> - 3.54.6-3
  - - Rebuild against libxenstore.so.4


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.54.9-1.1
changelog:
  - Sync with 3.54.9-1
  - *** Upstream changelog ***
  - * Thu Apr 25 2024 Mark Syms <mark.syms@citrix.com> - 3.54.9-1
  - - Address various memory management issues
  - * Wed Mar 27 2024 Mark Syms <mark.syms@citrix.com> - 3.54.8-1
  - - CP-48048: Blktap fix code coverage (XS8 only)
  - - tap-ctl: Improve list output filtering
  - - CP-46763: When VBD queue is not ready call the driver completion
  - - CP-46778: always issue request via issue_requests
  - - CP-46771: separate queue checks for completed and new requests.
  - - CP-46764: mask ring event handlers before quiescing the queue
  - - CP-46764: When the VBD is quiesced skip checking for requests to submit
  - - Fix setting of CFLAGS for mockatests
  - - Do not free iconv cd if allocation fails
  - - Fix the order of linker options in CBT
  - - Fixup various bits of incorrect automake usage
  - - CA-384162: Send completions for all partial responses
  - - CA-390490: allocate vhd request before locking bat
  - - CP-48057: Add unit tests for drivers/scheduler.c


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.4-1.1
changelog:
  - Sync with 3.55.4-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Mark Syms <mark.syms@cloud.com> - 3.55.4-1
    - CA-392151 lcache.c uses wrong buffer size definition
    - CA-403297: when storing read-through do not mirror
    * Mon Nov 18 2024 Mark Syms <mark.syms@cloud.com> - 3.55.3-1
    - CP-52620: enable local caching after opening all other images
    * Tue Nov 05 2024 Tim Smith <tim.smith@cloud.com> - 3.55.2-1
    - CA-387575 Remove static libraries and libtool archives from devel package
    - Correct name of exposed NBD server
    - CA-401174 Filedescriptor leak in NBD option negotiation
    * Mon Sep 16 2024 Tim Smith <tim.smith@cloud.com> - 3.55.1-1
    - Redo the revert of an incorrect NBD FD leak fix
    * Fri Sep 13 2024 Tim Smith <tim.smith@cloud.com> - 3.55.0-1
    - CP-46765 - Fix asan issues in unit tests
    - CA-396659: rationalise bitops and fix overflow issues
    - CA-396659: delete legacy debt utility vhd-update
    - Handle scheduler uuid overflow explictly
    - CP-50952 Autodetect NBD server protocol version on client connect
    - Fix use of incorrect label in error case
    - CA-397082 Properly fix FD leak in NBD server
    - CP-50955 Add a new-style NBD server for each VDI
    * Tue Aug 06 2024 Mark Syms <mark.syms@cloud.com> - 3.54.10-1
    - CA-391882: fix nbd connection fd leak bug
    - Remove some unnecessary build dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.55.5-2.1
changelog:
  - Sync with 3.55.5-2
  - Drop patch "Add an option to never resolve parent path when vhd-util query is
  called" already included in upstream v3.55.5
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-2
    - CA-404370: enable NBD client only after completing handshake
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-1
    - Add an option to never resolve parent path when vhd-util query is called


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.55.5-2.3
changelog:
  - Fix a bad integer conversion that interrupts valid coalesce calls on large VDIs
  - Add 0002-CP-308382-fix-sign-conversion-in-coalesce.patch
  - Add 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 3.55.5-6.1
changelog:
  - Sync with 3.55.5-6
  - Revert openssl 3 dependency from XS specfile (no change compared to previous XCP-ng release)
  - Drop patch 0002-CP-308382-fix-sign-conversion-in-coalesce.patch, upstream now
  - Drop patch 0003-Fix-coalesced-size-conversion-in-vhd-util-coalesce.patch, upstream now
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-6
    - Fix coalesced size conversion in vhd-util-coalesce (CP-308382)
    * Mon Jun 23 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-5
    - Backport fix for CA-408175
    - CP-308382: fix sign conversion in coalesce
    * Mon Apr 07 2025 Mark Syms <mark.syms@cloud.com> - 3.55.5-4
    - CP-54256: log when reporting EOPNOTSUPP
    * Fri Feb 21 2025 Deli Zhang <deli.zhang@cloud.com> - 3.55.5-3
    - CP-50273: Move CCM dependency to OpenSSL 3


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.3.1
changelog:
  - Don't build vfs_glusterfs and thus don't buildrequire glusterfs
  - Remove the useless build dependency to epel-release
  - Add gcc to the BuildRequires


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.10.16-17.0.4.1
changelog:
  - Update from XS 8.3 pre-release updates
  - *** Upstream changelog ***
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Yann Dirson <yann.dirson@vates.tech> - 4.10.16-25.1
changelog:
  - Revert XS changes to prepare for merging new upstream, keeping changelog
    and kerberos config changes
  - By Lucas Ravagnier <lucas.ravagnier@vates.tech>:
    - Import samba-4.10.16-25.el7_9
    - Use a bcond to enable XCP-ng packaging tweaks while preserving upstream spec content.
    - *** Upstream changelog ***
      * Tue Jul 25 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-25
      - resolves: #2222250 - Fix netlogon capabilities level 2

      * Fri Jan 20 2023 Andreas Schneider <asn@redhat.com> - 4.10.16-24
      - related: #2154364 - Add additional patches for CVE-2022-38023

      * Wed Dec 21 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-23
      - resolves: #2154364 - Fix CVE-2022-38023

      * Tue Aug 30 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-20
      - resolves: #2119058 - Fix possible segfault in winbind

      * Tue May 10 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-19
      - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                 mapping for uid/gid conflict

      * Tue Jan 25 2022 Andreas Schneider <asn@redhat.com> - 4.10.16-18
      - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
      - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
      - resolves: #2046148 - Fix CVE-2021-44142


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 4.10.16-25.2
changelog:
  - Apply packaging changes from XenServer's samba-4.10.16-17.0.{4-8}
  - *** Upstream changelog ***
  - * Tue Apr 01 2025 Lin Liu <Lin.Liu01@cloud.com> - 4.10.16-17.0.8
  - - CA-408843: enctypes support machine account
  -
  - * Thu Jan 02 2025 Deli Zhang <deli.zhang@cloud.com> - 4.10.16-17.0.7
  - - CP-50277: Remove unused cups package
  -
  - * Mon Sep 9 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.6
  - - CP-50735: Remove avahi support
  -
  - * Wed Aug 7 2024 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.5
  - - CP-50670: Remove python and json support
  -
  - * Tue Sep 20 2022 Lin Liu<lin.liu@citrix.com> - 4.10.16-17.0.4
  - - CP-40720: Remove epel-release from BuildRequires


author: Marian Csontos <mcsontos@redhat.com> - 7:2.02.180-10.el7_6.3
changelog:
  - Fix component detection for MD RAID version 1.0 and 0.90.
  - Use sync io if async io_setup fails, or when use_aio=0 is set in config.
  - Fix dmstats report printing no output.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.1
changelog:
  - Cut the corosynclib-devel build dependency by disabling the cluster subpackage
  - Cut the dlm-devel build dependency by disabling the lockd subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-15.2
changelog:
  - Drop the obsolete lvm2-sm-config subpackage
  - It was unused, and it didn't require the right Release


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-16.1
changelog:
  - Rebase on 7:2.02.180-16
  - *** Upstream changelog ***
    * Fri Mar 22 2024 Mark Syms <mark.syms@citrix.com> - 7:2.02.180-16
    - CA-368585 Drop sm-config sub-package
    - CA-380627 Suppress errors when attempting to start services
    - CA-384527 add lvm filter to skip nbd device scan


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 7:2.02.180-18.1
changelog:
  - Rebase on 7:2.02.180-18
  - *** Upstream changelog ***
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-18
    - CP-46075: Disable cluster and cmirror as not used and introduce extra deps
    * Thu Jul 11 2024 Lin Liu <Lin.Liu01@cloud.com> - 7:2.02.180-17
    - CP-46075: Compatible with XS9


author: Mathieu Labourier <mathieu.labourier@vates.tech> - 7:2.02.180-18.2.1
changelog:
  - Rebase on 7:2.02.180-18.2
  - *** Upstream changelog ***
    * Thu May  1 2025 Mark Syms <mark.syms@cloud.com> - 7:2.02.180-18.2
    - Rebuild
    * Wed Apr 30 2025 Mark Syms <mark.syms@cloud.com> - 7:2.02.180-18.1
    - Update scan search root and add device filters


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.2
changelog:
  - CA-383046: Use the emulated RTC to implement time services
  - CA-383095: Add a patch to fix an unusual Windows PXE boot hang
  - CP-45175: Add debug messages to XenVariable
  - CP-45175: Disable the BGRT
  - CP-45175: Add extra debug statements
  - CP-45175: Tweak debug levels
  - Include g++ from devtoolset as a build requirement


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.4.1
changelog:
  - Sync with 20220801-1.7.4
  - *** Upstream changelog ***
  - * Fri Feb 02 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.4
  - - CA-388017: Fix most PixieFail vulnerabilities
  - - Fix CVE-2023-45229 - Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
  - - Fix CVE-2023-45230 - Buffer overflow in the DHCPv6 client via a long Server ID option
  - - Fix CVE-2023-45231 - Out of Bounds read when handling a ND Redirect message with truncated options
  - - Fix CVE-2023-45232 - Infinite loop when parsing unknown options in the Destination Options header
  - - Fix CVE-2023-45233 - Infinite loop when parsing a PadN option in the Destination Options header
  - - Fix CVE-2023-45234 - Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
  - - Fix CVE-2023-45235 - Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.5.1
changelog:
  - Sync with 20220801-1.7.5
  - *** Upstream changelog ***
  - * Wed Mar 20 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.5
  - - CA-390410: Disable some unneeded modules
  - - CA-390410: Downgrade some errors to warnings


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20220801-1.7.7.1
changelog:
  - Sync with 20220801-1.7.7
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 20220801-1.7.7
  - - CA-388489: Fix CVE-2023-45236, CVE-2023-45237, and additional fix for CVE-2023-45229
  - * Tue May 14 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.6
  - - CP-46076: Support xs9 build


author: anthony.perard@vates.tech - 20220801-1.7.10.1
changelog:
  - Sync with edk2-20220801-1.7.10
  - *** Upstream changelog ***
  - * Wed Jun 11 2025 Fei Su <fei.su@cloud.com> - 20220801-1.7.10
  - - CA-410587 [XSI-1806] Fix 802.1Q Header Handling in OVS on XS8
  - * Fri Mar 07 2025 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.9
  - - CP-53516: Add perl modules require for XS9 build
  - * Thu Oct 31 2024 Deli Zhang <deli.zhang@cloud.com> - 20220801-1.7.8
  - - CP-50542: Upgrade OpenSSL to 3.0.9
  - - CP-52657: Fix CVE-2024-6119


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 25.6.0-1.7
changelog:
  - Fix another deadlock in xenopsd
  - Prevent xapi concurrent calls during migration from indirectly make each other fail


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.8
changelog:
  - Fix several RRD issues and make the plugins more robust:
    - Cap Derive values within a certain range without making them NaN
    - Use a computed delay time for RRD loop to prevent gaps in metrics collection
    - Avoid duplicating datasources on plugin restore
    - Protect against a resource leak in the plugins
    - Avoid running out of mmap-ed pages in xcp-rrdd-cpu for large numbers of domains
    - Prevent exceptions from escaping and introducing gaps into metrics collection
    - Avoid missing metrics from new and destroyed domains


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 25.6.0-1.10
changelog:
  - Cherry-pick 83a48882655d "xenopsd: set xen-platform-pci-bar-uc key in xenstore",
    commit is upsteam in 25.26.0.


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.6.0-1.11
changelog:
  - Packaging changes associated with the "xenopsd: set xen-platform-pci-bar-uc key"
    improvement to allow for custom user xenopsd configuration


author: Andrii Sultanov <andriy.sultanov@vates.tech> - 25.27.0-2.1
changelog:
  - Update to upstream 25.27.0-2
  - Drop 0003-xcp-ng-disable-cancellable-sleep.patch, alternative fix merged upstream
  - Drop 0004-xcp-ng-add-debug-info-in-observer.patch, merged upstream
  - Rename 0005-xcp-ng-fix-IPv6-import.patch to 0003-xcp-ng-fix-IPv6-import.patch
  - Rename 0006-xcp-ng-open-close-openflow-port.patch to 0004-xcp-ng-open-close-openflow-port.patch
  - Rename 0007-xcp-ng-update-db-tunnel-protocol-from-other-config.patch to
    0005-xcp-ng-update-db-tunnel-protocol-from-other-config.patch
  - Drop 0008-CA-408126-rrd-Do-not-lose-ds_min-max-when-adding-to-.patch, merged upstream
  - Drop 0009-CA-408126-follow-up-Fix-negative-ds_min-and-RRD-valu.patch, merged upstream
  - Drop 0010-CA-408841-rrd-don-t-update-rrds-when-ds_update-is-ca.patch, merged upstream
  - Drop 0011-Check-that-there-are-no-changes-during-SR.scan.patch, merged upstream
  - Drop 0012-xapi_guest_agent-Update-xenstore-keys-for-Windows-PV.patch, merged upstream
  - Drop 0013-xapi_xenops-Try-to-avoid-a-race-during-suspend.patch, merged upstream
  - Drop 0014-CA-409510-Make-xenopsd-nested-Parallel-atoms-explici.patch, merged upstream
  - Drop 0015-CA-409510-Give-a-warning-if-atoms-nested-incorrectly.patch, merged upstream
  - Drop 0016-CA-410782-Add-receive_memory_queues-for-VM_receive_m.patch, merged upstream
  - Drop 0017-CA-411319-Concurrent-VM.assert_can_migrate-failure.patch, merged upstream
  - Drop 0018-CA-409488-prevent-Xenctrl-exceptions-from-escaping-o.patch, merged upstream
  - Drop 0019-CA-409489-prevent-running-out-of-pages-with-lots-of-.patch, merged upstream
  - Drop 0020-rrd_file_writer-protect-against-resource-leak.patch, merged upstream
  - Drop 0021-Raise-log-level-for-rrd-thread-monitor.patch, merged upstream
  - Drop 0022-CA-410001-Check-rrdi.rrd-to-avoid-ds-duplicate.patch, merged upstream
  - Drop 0023-CA-409482-Using-computed-delay-for-RRD-loop.patch, merged upstream
  - Drop 0024-CA-411679-Runstate-metrics-return-data-over-100.patch, merged upstream
  - Drop 0025-xcp-rrdd-change-the-code-responsible-for-filtering-o.patch, merged upstream
  - Drop 0026-rrdd-Avoid-missing-aggregation-of-metrics-from-newly.patch, merged upstream
  - Drop 0027-CA-407370-Use-remote.conf-for-customer-rsyslog-forwa.patch, merged upstream
  - Drop 0028-xenopsd-set-xen-platform-pci-bar-uc-key-in-xenstore.patch, merged upstream
  - Drop XSA-474 backport to 25.6.0 (0029-prepare-make-StringPool-share-safer.patch and
    0030-Simplify-UTF-8-decoding.patch), replace with the upstream backport to 25.27.0
  - *** Upstream changelog ***
    * Tue Sep 02 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.27.0-2
    - CA-411297/XSA-474: XAPI UTF8

    * Wed Jul 23 2025 Gabriel Buica <danutgabriel.buica@cloud.com> - 25.27.0-1
    - CP-54332 Update host/pool datamodel to support SSH auto mode
    - CP-53721 Implement SSH set auto mode API for Dom0 SSH control
    - CP-53724 Add xe CLI commands for setting and querying Dom0 SSH auto mode
    - CP-54382 Set Different Auto-Mode Default Values for XS8 and XS9
    - CP-54382 Reconfigure Auto mode when pool join and pool eject
    - CA-412854 Fix ssh_expiry drift after XAPI restart
    - CA-413328 Enable auto-mode when XAPI failed for a extend period that exceeds the timeout duration
    - CA-413319: Ensure console timeout file exists when timeout is configured
    - CA-413424: Enhance xe help output
    - xapi_sr_operations: Report more useful info when raising other_operation_in_progress error
    - xapi_cluster_helpers: Correctly report other_operation_in_progress error
    - xapi_vm_lifecycle: Correctly report other_operation_in_progress error
    - qcow-stream-tool: Add a minimal CLI wrapper for Qcow_stream
    - {export,import}_raw_vdi: add qcow as supported format
    - export_raw_vdi: Add support for differential QCOW2 export with base
    - CP-52334 MVD - add -d option to mock driver-tool
    - xapi_vbd_helpers: Fix operation reporting when raising other_operation_in_progress
    - xapi_vdi: Report more useful information when raising other_operation_in_progress
    - xapi_{vif,vusb}_helpers: Report more useful information when raising other_operation_in_progress
    - message_forwarding: Report more info when raising other_operation_in_progress
    - xapi_pool_helpers: Report more info when raising other_operation_in_progress error
    - xapi_pif: Report more info when raising other_operation_in_progress error
    - xapi_vm_appliance_lifecycle: Report more info when raising other_operation_in_progress error
    - xapi_vbd: Report more useful info when raising other_operation_in_progress error
    - xapi_host_helpers: Report more useful info when raising other_operation_in_progress error
    - xapi/helpers: Fix handling of other_operation_in_progress delays
    - idl/datamodel_errors: Add operation_{type,ref} to other_operation_in_progress
    - Adjust tests after other_operation_in_progress refactoring
    - CA-412420: Set vdi-type When Create snapshot on SMAPIv3 SR
    - [doc] add documentation about tracing
    - CP-54480 Update release number for ssh_auto_mode
    - CA-413587: Checking feature for old FreeBSD driver

    * Wed Jul 16 2025 Rob Hoes <rob.hoes@citrix.com> - 25.26.0-1
    - xenopsd: set xen-platform-pci-bar-uc key in xenstore
    - CP-308455 VM.sysprep add timeout parameter
    - CP-308455 VM.sysprep wait for shutdown
    - CP-308455 VM.sysprep update documentation
    - CP-308455 VM.sysprep wait for "action" key to disappear
    - CA-413713: Change bash-completion shortcut
    - Replace `List.fold_left (||) false (List.map f lst)` with `List.exists f lst`
    - CP-308875: set Xen PCI MMIO BAR to WB
    - Add message argument to LICENSE_CHECKOUT_ERROR

    * Sun Jul 13 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.25.0-1
    - CA-393417: Drop device controller of cgroup v1 and fix USB passthrough for XS9
    - xapi-stdext-threads: calibrate ratio for delay times
    - Downgrade unknown SM.feature errors to warnings
    - CP-308455 VM.sysprep use watch to detect sysprep running
    - datamodel_lifecycle: automatic update
    - CA-413412: Fail to designate new master
    - XSI-1954: Only block pool join for clustering on non-management VLAN

    * Sun Jul 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.24.0-1
    - CA-410965: Modify default ref of console
    - Design proposal for supported image formats (v3)
    - CA-411477: Fix SM API version check failure
    - CP-54207: Move VBD_attach outside of VM migrate downtime
    - xenopsd/xc: upstream more NUMA changes
    - idl: Remove unused vm_lacks_feature_* errors
    - python: Add qcow2-to-stdout.py script
    - Move collection of memory metrics from xcp-rrdd to rrdp-squeezed
    - Move common retry_econnrefused function to xcp_client
    - CA-412636: hostname changed to localhost with static IP and reboot
    - Add mlis for observer_helpers and observer_skeleton
    - CP-308455 Toolstack VM.sysprep API
    - `xapi_vm_lifecycle`: Improve feature handling, avoid crashes
    - CA-413304: Restore VBD.unplug function to keep old functionality

    * Wed Jun 25 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.23.0-1
    - Improve the xapi_observer debug logs by adding more context
    - Reduce code duplication by using a common Observer Interface
    - CA-409431: Use an Observer forwarder for xapi-storage-script
    - xapi: Move cpu_info keys to xapi-consts from xapi_globs to be used across modules
    - Improve xapi-cli-server
    - Improve `xe-cli` completion
    - xapi/helpers: Note that get_localhost can fail while the database is starting up
    - xapi_host: missing UEFI certificates warrant a warning, not an error
    - CA-412164: XSI-1901: uid-info does not support `:` in gecos
    - CP-47063: Instrument message-switch functions
    - CA-412313: DT spans not exported on host evacuation (XAPI shutdown)
    - xenopsd: Allow to override the default NUMA placement
    - Fix `message-switch` opam metadata
    - opam: generate xapi-log with dune
    - xapi-log: remove circular dependency on tests
    - datamodel_lifecycle: automatic update
    - CA-412146 Filter out VF when scan
    - Update datamodel_host
    - Update XE_SR_ERRORCODES from SM
    - CP-308253: `Task.destroy` spans should no longer be orphaned
    - CP-308392: Create specialized functions
    - xapi-idl: Clean up xenops-related interfaces
    - xapi_xenops: Remove unnecessary Helpers.get_localhost call
    - xapi_xenops: Split update_vm internals into a separate function
    - CA-408552: Improve bootstrom performance by save db ops
    - xenops_server_plugin: Refer to the type alias instead of its definition
    - xapi-idl/updates: Make filterfn in inject_barrier only look at keys
    - xapi_xenops: Refactor update_vm_internal
    - CP-308253: Instrument `Consumers` Spans in `Message-switch`.
    - CP-50001: Add instrumentation to `xapi_xenops.ml`
    - CA-406770: Improve error message
    - xenopsd: Remove data/updated from the list of watched paths
    - xapi_xenops: Simplify update_* functions
    - CP-308201: make unimplemented function more obvious

    * Thu Jun 12 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.22.0-2
    - Bump release and rebuild

    * Wed Jun 11 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.22.0-1
    - xcp-rrdd: change the code responsible for filtering out paused domains
    - Update datamodel_lifecycle (25.21.0)
    - CA-410085: Improving clearing cgroup after vfork
    - Adapt code to new mirage-crypto (CP-308222)
    - CP-308252 add VM.call_host_plugin
    - xapi-client: Add Tasks.wait_for_all_with_callback
    - xapi_host: Parallelize host evacuation even more
    - github: keep scheduled yangtze's runs working
    - rrdd: Avoid missing aggregation of metrics from newly destroyed domains
    - xapi-aux: remove cstruct usage from networking_info
    - xapi-cli-server: Expose evacuate-batch-size parameter in the CLI
    - [maintenance]: add forkexecd C objects to .gitignore
    - unixext: Add a raise_with_preserved_backtrace function
    - xapi_vgpu_type: Don't pollute the logs with non-critical errors
    - networkd: Add ENOENT to the list of expected errors in Sysfs.read_one_line
    - xenguestHelper: Don't dump errors on End_of_file

    * Tue Jun 10 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-4
    - Bump release and rebuild

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-3
    - Bump release and rebuild

    * Fri Jun 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-2
    - Bump release and rebuild

    * Fri Jun 06 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.21.0-1
    - CP-53477 Update host/pool datamodel to support SSH status query and configure
    - CP-53802: Restore SSH service to default state in pool eject
    - CP-53711: Apply SSH settings in joiner before update_non_vm_metadata
    - CP-53723 Implement Console timeout configure API for Dom0 SSH control
    - CP-53478: Implement SSH enabeld timeout API for Dom0 SSH control
    - CP-53725 Create SSH-related xe CLI for Dom0 SSH control
    - CP-54138: Sync SSH status during XAPI startup
    - CP-308049: rrdview tool
    - CA-410948 Avoid rasie full Exception when disable/enable ssh failed
    - CA-409949 CA-408048 XSI-1912 remove unabailable SM plugin by ref
    - xapi-types: remove dev errors when adding features
    - xenctrlext: add function to set the hard-affinity for vcpus
    - xenopsd: pass the hard-affinity map to pre_build
    - xenopsd: do not send hard affinities to xenguest when not needed
    - xenopsd: set the hard affinities directly when set by the user
    - xenopsd: expose a best-effort mode that set the hard affinity mask (CP-54234)
    - xapi: use hard-pinning with best-effort as an experimental feature (CP-54234)
    - CA-411679: Runstate metrics return data over 100%
    - Modify doc mistakes
    - CONTRIBUTING: add some initial guidelines
    - Removed PowerShell 5.x build due to the retirement of windows-2019.
    - Add file-upload support to xe host-call-plugin
    - CP-53475 Update release number to latest tag
    - XSI-1918: Host can not join pool after enable external auth
    - xapi_vif: Guarantee the device parameter is an unsigned decimal integer
    - xapi-idl: Avoid printing cli output when testing
    - xapi-storage-script: avoid output when running python tests
    - CA-411766: Detach VBDs right after VM Halted
    - datamodel_lifecycle: automatic update

    * Fri May 23 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 25.20.0-2
    - Bump release and rebuild

    * Fri May 23 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.20.0-1
    - CA-409949 CA-408048 remove unavailable SM types at startup
    - CP-307933: database: do not marshal/unmarshal every time
    - CP-307865 Support SHA-512 Certificates for XenServer Hosts
    - gencert testing: use human-readable errors for validation
    - CA-409510: xenopsd operations time out due to deadlock
    - CA-411122: do not call set-iscsi-initiator with an empty string for IQN
    - CA-410782: Add receive_memory_queues for VM_receive_memory operations
    - xapi: Cleanup unused functions
    - CP-308075 document changing paths for SM plugins in XS9
    - CP-53642: change default NUMA placement policy to best-effort
    - CP-54275: Add a blocklist mechanism to avoid incorrect/old repo config.
    - CP-307922: Implement SMAPIv3 outbound migration
    - CA-409482: Using computed delay for RRD loop
    - CA-411319: Concurrent `VM.assert_can_migrate` failure

    * Thu May 15 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.19.0-1
    - [maintenance]: bool is a keyword in newer C versions, cannot be a parameter
    - CP-307947: cleanup database interface
    - Mux mirror failure check for SXM
    - Bring back DATA.MIRROR.list and DATA.MIRROR.stat
    - Add more debugging to storage_smapiv1_migrate
    - CP-307958: database: small lock and RPC tweaks + benchmarks
    - CA-408492: Keep backwards compatibility for SMAPIv2

    * Fri May 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.18.0-1
    - CP-52880: [XSI-1763]: Xapi_vdi.update_allowed_operations is slow
    - Add additional tracing to VBD plug/unplug
    - CP-53554: Split plug xenopsd atomic into attach/activate
    - CP-53555: Split unplug atomic into deactivate/detach
    - Move update_snapshot_info_dest to storage_mux
    - Refactor Storage_smapiv1.find_vdi
    - Use the new scan2
    - Add new interface for mirror operation in SMAPIv3
    - Add more states for SXM
    - Remove receive_start(2) from storage_migrate
    - Change how receive_start2 is called
    - Add qcow2 as supported format by xcp-rrdd-iostat
    - CA-404946: NBD: increase timeout to match iSCSI timeout and use persistent connections
    - Update datamodel_lifecycle
    - [maintenance]: reformat dune files in sdk-gen
    - build: avoid race condition on install
    - [maintenance]: drop sexprpp
    - XAPI website link updated in README
    - xapi-log/test: Package the cram test in xapi-log
    - CA-409710: Modify the default backup parameters
    - xenopsd: Don't balloon down memory on same-host migration
    - CA-410001: Check rrdi.rrd to avoid ds duplicate
    - xapi_xenops: Avoid a race during suspend
    - CP-54828: RBAC: Avoid raising exception on happy path
    - CP-54827: Optimize pool object
    - CP-54826: Mutex.execute: avoid costly backtrace formatting in finally
    - CA-403867: Block pool join if IP not configured on cluster network

    * Thu Apr 24 2025 Bengang Yuan <bengang.yuan@cloud.com> - 25.17.0-1
    - xe-reset-networking: Avoid truncating IPv6 addresses
    - networkd: simplify parsing of config
    - networkd: read IPv6 entries in the firstboot management config file
    - xapi: Log exceptions in check_network_reset
    - CA-408230: Enable destroy op for HA statefile VDI after HA is disabled
    - CP-52131/CP-53474: Reorder operations during pci_add
    - xapi_guest_agent: Update xenstore keys for Windows PV drivers versions
    - tests: Add Windows PV driver version parsing test to test_guest_agent
    - Explicitly define failures for SXM
    - Define the utility function for choosing the backend
    - Move the copying function to storage_smapiv1_migrate
    - Move MigrateRemote before MigrateLocal
    - Move `find_local_vdi` utility function
    - Split Storage_migrate.start
    - Remove duplicate Storage_migrate.stop impl
    - Implement send_start for SMAPIv1
    - doc: Add sxm mux design
    - doc: Add an overview of SXM
    - doc: Add error handling of SXM
    - CA-409628: Do not lose the original backtrace in log_backtrace
    - Update cluster-stack-version lifecycle
    - CP-54034: Expose `expected_votes` in Cluster object

    * Tue Apr 15 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.16.0-1
    - CP-54072: Create template for storage_smapi{v1,v3}_migrate
    - CA-401023: Remove smapi observer config if smapi is set as experimental
    - xapi_message: Implement proper expression handling in get_all_records_where
    - CP-54026: option to control VM-internal shutdown behaviour under HA
    - CP-53951: Drop SSL and Lwt dependency from XAPI
    - quicktest: Add a test verifying Message.get_all_records_where filtering
    - CI: allow XAPI linking with Lwt for now
    - Check that there are no changes during SR.scan
    - CA-408843: XSI-1852: Set encryption type of machine account
    - CP-52745: Add `ThreadLocalStorage` in `Threadext`
    - CA-409488: prevent Xenctrl exceptions from escaping on VM boot/shutdown races
    - CA-409489: prevent running out of pages with lots of domains
    - rrd_file_writer: protect against resource leak
    - Raise log level for rrd thread monitor
    - xapi-aux: Add function to return all management ip addresses
    - gencert: Allow adding more than one IP as the certificate subject
    - network_server: add gateway and dns options to DHCP6
    - opam: update xapi-storage-cli metadata

    * Fri Apr 11 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-3
    - Bump release and rebuild

    * Tue Apr 08 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-2
    - Bump release and rebuild

    * Tue Apr 08 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.15.0-1
    - CP-53313: Add field services in VM_guest_metrics
    - CP-53314: Read and watch <domain>/data/service in xenstore to DB
    - Define SR_CACHING capability
    - CP-52365 fix up driver-tool invocations
    - CA-408339: Respect xenopsd's NUMA-placement-policy default
    - Use records when accumulating events
    - Remove mutable last_generation from Xapi_event
    - Factor out event reification
    - Use record type for individual event entries
    - xenctrlext: do not truncate the amount of memory in claims to 32 bits
    - CA-407177: Fix swtpm's use of SHA1 on XS9
    - forkexecd: do not tie vfork_helper to the forkexec package
    - opam: add missing dependencies to packages
    - Simplify code by using get_trace_context
    - CA-404460: Expose Stunnel_verify_error for mismatched or corrupted certificate, and expose ssl_verify_error during update syncing
    - CA-408550: XSI-1834: Host netbios name should be added to local
    - CP-54020: Refactor sxm and storage_mux code
    - CA-408500: Remove ListFile with Xapi_stdext_unix.Unixext
    - CP-53472: Create parent for add_module spans
    - xapi-stdext-threads, test: use stable testing interface
    - CA-408841 rrd: don't update rrds when ds_update is called with an empty datasource array
    - Remove xapi-stdext-date
    - CP-50836: Add VM_migrate_downtime and request_shutdown spans
    - opam: move all opam files to the opam subdir
    - numa: add test binary that prints changes in free memory and domain lifetime
    - CP-53658: adapt claim_pages to new version with numa node parameter
    - xenctrl: Don't use numa_node in domain_claim_pages calls
    - xenopsd: log_reraise doesn't ignore the result
    - CP-54065, xenopsd: use domain_claim_pages on a single node, if possible
    - xenopsd/xc: Do not try to allocate pages to a particular NUMA node
    - xapi_vm_migrate: Avoid duplicate, overly-strict CBT check on VDIs
    - Update datamodel lifecycle VM_guest_metrics.services
    - CA-408048 add library to represent version strings
    - CA-408048 remove SM plugins from DB if unavailable

    * Tue Mar 18 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.14.0-1
    - IH-533: Remove usage of forkexecd daemon to execute processes
    - Add opam local switch in gitignore
    - xenopsd: start vncterm for PVH guests

    * Mon Mar 17 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.13.0-1
    - CP-48824: Increase xenopsd worker-pool-size to 25
    - CP-52074: Add systemctl enable and disable API
    - CP-53161: Pass `baggage` back into `xapi` from `smapi`.
    - CA-405864: Drop usage of init.d functions
    - doc: Update xapi storage layer code links
    - CA-405864: Fix shellcheck warnings
    - CP-53827, xenopsd: claim pages for domain on pre_build phase
    - CI: fix compile_commands.json caching
    - Resolve build failure in message_forwarding.ml
    - CP-48676: Reuse pool sessions on slave logins.
    - xapi-stdext-date: replace all usages to use clock instead
    - CA-408126 follow-up: Fix negative ds_min and RRD values in historical archives

    * Wed Mar 12 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.12.0-1
    - Revert "CA-403851 stop management server in Pool.eject ()"

    * Tue Mar 11 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.11.0-1
    - Design proposal for supported image formats
    - (docs) Describe the flows of setting NUMA node affinity in Xen by Xenopsd
    - CA-407687/XSI-1834: get_subject_information_from_identifier should
    - CA-408126 - rrd: Do not lose ds_min/max when adding to the RRD
    - Change Ocaml version in readme
    - CA-403851 stop management server in Pool.eject ()

    * Fri Mar 07 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.10.0-1
    - CA-407328: Change vm parameter names of SXM calls
    - CP-53708: Expose the existing PCI vendor/device IDs
    - CP-53444: For XenServer 9, remove python dnf plugins
    - XSI-1821: Add pre-condition for host.emergency_reenable_tls_verification
    - CP-50934: fix qemu cgroups to be compatible with cgroupv2
    - opam: move stunnel metadata to dune-project
    - stdext: replace all ignore_type with annotated ignores
    - xapi_vdi_helpers: actually write raw vdi when possible
    - CA-399631: Increase the max size of xcp-rrdd-plugins for bug-tool
    - CP-53779: Guard all `Tgroup` library call behind `tgroups-enabaled`
    - CI: add a codechecker workflow
    - [maintenance] xa_auth.h: avoid using reserved macro names
    - unixpwd.c: fix error path file descriptor leak
    - [maintenance] syslog_stubs.c: avoid using reserved identifier names
    - [maintenance] blkgetsize64: avoid warning about uninit value
    - CP-53747 document PEM/Certificate relation
    - c_stubs: use 'new' acquire and release runtime functions
    - Hoist value access outside section without lock
    - CA-407370: Use remote.conf for customer rsyslog forwarding rules
    - Revert: Refactor Xapi_event #6306

    * Mon Mar 03 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.9.0-2
    - Bump release and rebuild

    * Thu Feb 27 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.9.0-1
    - Design proposal to support import/export of Qcow2 VDI
    - message_forwarding: Change call_slave_... functions to reduce repetition
    - Revert "CA-403867: Block pool join if IP not configured on cluster network"

    * Wed Feb 26 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.8.0-1
    - CP-52744: Thread `TraceContext` as json inside debug_info
    - Use records when accumulating events
    - Remove mutable last_generation from Xapi_event
    - Use record type for individual event entries
    - CA-403867: Block pool join if IP not configured on cluster network
    - CA-403744: Implement other_config operations
    - CP-45795: Decompress compressed trace files without Forkexecd
    - CP-53362: Rename hcp_nss to nss_override_id
    - CP-52365 adjust interface to dmv-utils
    - CA-407033: Call `receive_finalize2` synchronously
    - Add internal links to XenAPI reference
    - CA-405643: Update DNF to DNF5
    - Add filter_by to Dm_api
    - Use Cmdliner for gen_api_main.exe
    - CA-407322 - libs/rrd: Keep lastupdate XML field as int, XenCenter relies on it

    * Mon Feb 24 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.7.0-2
    - Bump release and rebuild

    * Tue Feb 18 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.7.0-1
    - CP-51393: Datamodel: update Repository for syncing from a remote pool (#6049)
    - CP-51835: Keep the HTTP /repository handler enabled
    - CP-50789: Enable verified rpc to external host
    - CP-51836: Restrict/check binary_url of remote_pool repository
    - CP-51391: Implement handling for /repository/enabled
    - CP-51988: Fix functions not work for remote_pool repo
    - CP-50787 CP-51347: Support pool.sync_updates from remote_pool repo
    - CP-52245: Temp disable repo_gpgcheck when syncing from remote_pool repo
    - Revert "CP-52245: Temp disable repo_gpgcheck when syncing from remote_pool repo"
    - python3: Add previously unused API classes to Python stubs used during testing
    - CA-404660: Refine repository enabling error message
    - doc: walkthroughs/VM.start: Update the xenguest chapter (domain build)
    - debug traces for is_component_enabled
    - CP-53470 Additional spans in & around the pause section in VM.migrate
    - Hugo docs: Support dark themes: Invert images to match the theme
    - README: Submission: Add DCO, issues & remove the disabled xen-api list
    - docs/xenopsd: List the child pages using the children shortcode
    - CA-405820 guard /etc/init.d/functions in xe-toolstack-restart
    - Simplify cases of may_be_side_effecting
    - Drop count_mandatory_message_parameters
    - message-switch/unix: simplify the scheduler
    - docs: Add dedicated walk-throughs for VM.build and xenguest
    - xenopsd docs: Add Walk-through descriptions, show them on the index page
    - python3: Resurrect metrics.py helper script
    - python3: Resurrect a metricsgraph.py helper script
    - CA-406403: Do not return HTTP 500 when Accept header can't be parsed
    - Replace startswith and endswith with stdlib calls
    - Domain.build docs: Improve notes on node_affinity, move to new page
    - (docs) VM.migrate.md: Rephrase and simplify, improve readability

    * Wed Feb 12 2025 Vincent Liu <shuntian.liu2@cloud.com> - 25.6.0-2
    - Bump release and rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 0.25.0-1.1
changelog:
  - Update to 0.25.0-1
  - *** Upstream changelog ***
  - * Thu Aug 31 2023 Rob Hoes <rob.hoes@citrix.com> - 0.25.0-1
  - - Log PID on exit; make message more explicit


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.0.0-4.1
changelog:
  - Sync with 24.0.0-4
  - *** Upstream changelog ***
  - [mostly rebuilds]
  - * Mon Mar 18 2024 Rob Hoes <rob.hoes@citrix.com> - 24.0.0-1
  - - Re-release with new version number consistent with xapi's version scheme


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 24.1.0-2.1
changelog:
  - Sync with 24.1.0-2
  - *** Upstream changelog ***
  - * Thu Jun 06 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-2
  - - Bump release and rebuild
  - * Thu May 23 2024 Ming Lu <ming.lu@cloud.com> - 24.1.0-1
  - - CP-48969: log only first time that NVML can't be opened
  - - ci: update all actions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.0-1.1
changelog:
  - Update to 2.0.0-1
  - *** Upstream changelog ***
  - * Thu Jan 19 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-1
  - Switch upstream to GitHub
  - - Build for Python 3 and drop Python 2 support
  - - CP-41654: Check for duplicate uuids and reflabels in templates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.3-1.1
changelog:
  - Update to 2.0.3-1
  - Remove our Debian 11 template, as upstream's one is not marked experimental anymore
  - *** Upstream changelog ***
  - * Fri Jul 14 2023 Alex Brett <alex.brett@cloud.com> - 2.0.3-1
  - - CP-43952: Remove 32-bit Windows 10
  - * Fri May 05 2023 Xihuan Yang <xihuan.yang@citrix.com> - 2.0.2-1
  - - CP-41630: Support up to 64 vCPUs for HVM guests
  - * Thu Feb 16 2023 Minghui Hu <minghui.hu@citrix.com> - 2.0.1-1
  - - CP-41650: Remove CoreOS templates from Next
  - * Tue Feb 14 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.0-2
  - - CP-42132: Install Windows 11 template by default


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.6-1.1
changelog:
  - Update to 2.0.6-1
  - Remove our Debian 12, RHEL 9, Rocky Linux 9, and Centos Stream 9 templates, now provided upstream
  - *** Upstream changelog ***
  - * Thu Oct 19 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.6-1
  - - CP-44378: Remove 'preview' From Ubuntu 22.04 Guest template
  - * Thu Sep 14 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.5-1
  - - CP-44127: Add New Guest templates Rocky Linux 9, CentOS Stream 9 and Debian 12
  - * Fri Sep 8 2023 Lunfan Zhang <Lunfan.Zhang@citrix.com> - 2.0.4-1
  - - CP-44042: Add Red Hat Enterprise Linux 9 (preview) template
  - * Wed Sep 6 2023 Lin Liu<Lin.Liu01@cloud.com> - 2.0.3-2
  - - BuildRequires python-setuptools to support xs9


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.9-1.1
changelog:
  - Sync with 2.0.9-1
  - *** Upstream changelog ***
  - * Tue Feb 13 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 2.0.9-1
  - - CP-46356 Remove 'preview' from Windows 11 template


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.10-1.1
changelog:
  - Sync with 2.0.10-1
  - *** Upstream changelog ***
  - * Mon Mar 25 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.10-1
  - - CP-47662 Remove deprecated guest templates SUSE Linux 12 SP4 and Ubuntu 18.04
  - - CP-48082 Update Guest Templates to support UEFI Secure boot


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 2.0.13-1.1
changelog:
  - Rebase on 2.0.13-1
  - *** Upstream changelog ***
    * Tue Nov 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.13-1
    - CP-50305: Remove '(preview') from Windows Server 2025 template
    * Thu Sep 19 2024 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 2.0.12-1
    - CP-50304 Add Windows Server 2025 preview template
    * Tue Sep 03 2024 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.11-1
    - CP-47949 Add New Guest template Ubuntu 24.04
    - CP-47949 Remove 'preview' label from RHEL9, Rocky9, CentOS Stream 9 and Debian 12


author: Gael Duperrey <gduperrey@vates.tech> - 2.0.14-1.1
changelog:
  - Rebase on 2.0.14-1
  - Add templates for almalinux 10, rocky linux 10, debian 13, oracle linux 10, redhat 10
  - *** Upstream changelog ***
    * Tue Jan 21 2025 Lunfan Zhang <Lunfan.Zhang@cloud.com> - 2.0.14-1
    - CP-51980: Add CentOS Stream 10 template
    - CP-51980: Remove 'preview' label from Ubuntu24.04


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20240717-1
changelog:
  - Update to IPU 2024.3 release
  - As the archive from XS is missing an update for 06-a5-03 due to Intel
    initially forgetting to release its update, we manually package this file.


author: David Morel <david.morel@vates.tech> - 20250127-1
changelog:
  - Update to publicly released microcode-20250211
  - Security updates for:
      - INTEL-SA-01166
      - INTEL-SA-01213
      - INTEL-SA-01139
      - INTEL-SA-01228
  - Updates for multiple functional issues
  - Upstream update drops files for older Sapphire Rapids steppings, we kept the previous versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250501-1
changelog:
  - Update to publicly released microcode-20250512
  - Security updates for:
      - INTEL-SA-01153
      - INTEL-SA-01244
      - INTEL-SA-01247
      - INTEL-SA-01322
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 20250715-1
changelog:
  - Update to publicly released microcode-20250812
  - Security updates for:
      - INTEL-SA-01249
      - INTEL-SA-01308
      - INTEL-SA-01310
      - INTEL-SA-01311
      - INTEL-SA-01367
  - Updates for multiple functional issues
  - Upstream doesn't provide updates for older Sapphire Rapids steppings, we kept the last known versions


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.34.1
changelog:
  - Sync with 4.19.19-8.0.34
  - *** Upstream changelog ***
  - * Thu Feb 29 2024 Chunjie Zhu <chunjie.zhu@cloud.com> - 4.19.19-8.0.34
  - - CA-387199: Fix for XSI-1566


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.36.1
changelog:
  - Sync with 4.19.19-8.0.36
  - *** Upstream changelog ***
  - * Mon Jul 15 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.36
  - - New tag due to a wrong build for 4.19.19-8.0.35
  - * Wed Jul 10 2024 Fouad Hilly <fouad.hilly@cloud.com> - 4.19.19-8.0.35
  - - CA-394994  backport fix agaw for a supported 48 bit guest address width
  - - Make sure the kernel configuration is up to date
  - - CP-40289: kernel-devel: Add a BPF Type Format (BTF) info file for libbpf
  - - CP-48280: Disable Intel Powerclamp driver


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.37.1
changelog:
  - Sync with 4.19.19-8.0.37
  - *** Upstream changelog ***
  - * Thu Aug 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 4.19.19-8.0.37
  - - CA-365333: Fix initrd decompression bug
  - - CA-395816: Enable config option to fix incorrect firmware fan control


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.19.19-8.0.38.1
changelog:
  - Sync with 4.19.19-8.0.38
  - *** Upstream changelog ***
    * Thu Dec 05 2024 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.38
    - CA-401809: DLM failure leaves system unstable fixes
    - CP-49678: Reduce Xen timer tick


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.42.1
changelog:
  - Sync with 4.19.19-8.0.42
  - *** Upstream changelog ***
    * Mon Apr 07 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.42
    - XSI-1728: Avoid repeatedly emitting uevents for LUN changes on CHECK_CONDITION
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.41
    - CP-51825: Add 50G/100G/200G ethtool link modes
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 4.19.19-8.0.40
    - None
    * Thu Jan 09 2025 Gerald Elder-Vass <gerald.elder-vass@citrix.com> - 4.19.19-8.0.39
    - CA-401809: Resolve incorrect coverity warning
    - CA-404447: Improve logging for xhci failures


author: Thierry Escande <thierry.escande@vates.tech> - 4.19.19-8.0.43.1
changelog:
  - Sync with 4.19.19-8.0.43
  - *** Upstream changelog ***
   * Fri Jul 18 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 4.19.19-8.0.43
   - CA-412882: Register NVMe ns_id attribute(s) as default sysfs groups
   - CA-360450: Fix deadlock on PCI passthrough


author: Thierry Escande <thierry.escande@vates.tech> - 5.9_0.5.5.0-3.1
changelog:
  - Sync with 5.9_0.5.5.0-3
  - *** Upstream changelog ***
    * Tue Feb 18 2025 Kevin Lampis <klampis@cloud.com> - 5.9_0.5.5.0-3
    - CP-51825: Enable 50G/100G/200G ethtool link modes for XS8 kernel


author: Thierry Escande <thierry.escande@vates.tech> - 1.44.3-1.1
changelog:
  - Fix build errors with gcc 4.8
  - Force use of protobuf system packages from XCP-ng repositories
  - Add conditions for protobuf Requires
  - Remove unneeded Requires for nodejs and BuildRequires for httpd and libpfm-devel
  - Add Requires for libyaml
  - Enable and start systemd service at install
  - Create netdata-ui subpackage
  - Add firewall rules management


author: Thierry Escande <thierry.escande@vates.tech> - 1.47.5-4.1
changelog:
  - Update to Netdata v1.47.5
  - Rework patch for gcc 4.8 build errors
  - Remove _vpath_builddir redefinition needed by cmake
  - Use update-alternatives to handle configuration files swap
  - Remove cap_setuid=pe for plugin files that have the setuid bit set
  - Use netdata.service file for systemd < 235
  - Replace 'ExecStop=sleep 3' in systemd service unit with a nicer script
  - *** Upstream changelog ***
  - * Thu Oct 24 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.5-1
  - - Update from upstream
  - * Thu Oct 10 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.4-1
  - - Update from upstream
  - * Wed Oct 02 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.3-1
  - - Update from upstream
  - * Thu Sep 26 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.2-1
  - - Update from upstream
  - * Tue Sep 10 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.1-1
  - - Update from upstream
  - * Fri Aug 23 2024 Didier Fabert <didier.fabert@gmail.com> 1.47.0-1
  - - Update from upstream
  - * Thu Aug 22 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-5
  - - Fix journald access
  -   See https://bugzilla.redhat.com/show_bug.cgi?id=2298058
  - * Thu Aug 15 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-4
  - - Remove closed source parts from binary rpms
  -   See https://bugzilla.redhat.com/show_bug.cgi?id=2304167
  - * Wed Aug 07 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-3
  - - Change BuildRequires from pkgconfig(libxenlight) and pkgconfig(libxenstat) to xen-devel package
  - - Enable go plugin only for Fedora 40+
  - * Mon Jul 29 2024 Miroslav Suchý <msuchy@redhat.com> - 1.46.3-2
  - - convert license to SPDX
  - * Fri Jul 26 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.3-1
  - - Update from upstream
  - * Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.46.2-2
  - - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
  - * Mon Jul 15 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.2-1
  - - Update from upstream
  - * Fri Jun 21 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.1-1
  - - Update from upstream
  - - Disable go plugin for all builds
  - * Wed Jun 19 2024 Didier Fabert <didier.fabert@gmail.com> 1.46.0-1
  - - Update from upstream
  - * Thu Jun 06 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.6-1
  - - Update from upstream
  - * Thu May 23 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.5-1
  - - Update from upstream
  - * Thu May 09 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.4-1
  - - Update from upstream
  - * Sat Apr 13 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.3-1
  - - Update from upstream
  - * Fri Apr 05 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.2-1
  - - Update from upstream
  - * Wed Mar 27 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.1-1
  - - Update from upstream
  - * Thu Mar 21 2024 Didier Fabert <didier.fabert@gmail.com> 1.45.0-1
  - - Update from upstream


author: Mark Syms <mark.syms@cloud.com> - 1.1.3-1
changelog:
  - CP-53439 Get exception messages correctly for Python3
  - CA-395560 Improve logging and error checking on sg_readcap
  - CP-53783: use os.path.realpath instead of incorrect internal


author: Yann Dirson <yann.dirson@vates.tech> - 3.0.2-4.2
changelog:
  - Switch updategrub.py to python3, install in /opt/xensource/bin,
    keep a compat symlink for old kernel-alt hardcoding a python2.7 path


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-1.1
changelog:
  - Rebase on 3.0.4-1
  - *** Upstream changelog ***
  - * Thu Mar 14 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-1
  - - CA-389988: Fix USB network handling
  - * Wed Mar 6 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.3-1
  - - CA-371311: Pick up updates to handle USB ethernet cards


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 3.0.4-2.1
changelog:
  - Rebase on 3.0.4-2
  - *** Upstream changelog ***
    * Tue Jun 11 2024 Frediano Ziglio <frediano.ziglio@cloud.com> - 3.0.4-2
    - Add missing package dependencies


author: Gaëtan Lehmann <gaetan.lehmann@vates.tech> - 3.0.6-1.1
changelog:
  - Rebase on 3.0.6-1
  - *** Upstream changelog ***
    * Mon Mar 03 2025 Stephen Cheng <stephen.cheng@cloud.com> - 3.0.6-1
    - CA-407115: Adding logic to handle boot entries without additional arguments

    * Fri Nov 08 2024 Ross Lagerwall <ross.lagerwall@citrix.com> - 3.0.5-1
    - CA-392459: Avoid opening /dev/mem when calling biosdevname


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 3.0.8-1.1
changelog:
  - Rebase on 3.0.8-1
  - *** Upstream changelog ***
    * Thu Jul 31 2025 Ross Lagerwall <ross.lagerwall@citrix.com> - 3.0.8-1
    - CP-308428: bootloader: Add support for xen_boot entry type
    - bootloader: Various cleanup


author: Bernhard Kaindl <bernhard.kaindl@cloud.com> - 4.2.1-5.2.4
changelog:
  - CP-46102: Backport bugfixes for PCI passthrough using multifunction devices
    - hw/xen: set pci Atomic Ops requests for passthrough device
    - hw/xen/xen_pt: fix uninitialized variable
    - xen/pass-through: don't create needless register group
    - xen/pass-through: merge emulated bits correctly
    - Emulate the multifunction bit and set it based on the multifunction
      property of the PCIDevice (which can be set using QAPI).


author: Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.5
changelog:
  - CP-46162: Backport patches for building qemu with rawhide(xs9) toolchain
    - Do not ignore malloc value
    - Fix the null pointer errors in configure
    - Fix -Werror=maybe-uninitialized build failure
    - Fix net/eth.c compile errors
    - Compile with -Wno-array-bounds
    - Remove -no-pie linker flag


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.8
changelog:
  - Disable capstone and fdt explicitly
  - CP-42792: Backport a patch to avoid unncessary buffered ioreq polling


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 4.2.1-5.2.9
changelog:
  - CA-391031: Reinstate rate limiting of RTC_CHANGE events
  - CA-391069: Avoid livelock due to buffered ioreqs


author: Yann Dirson <yann.dirson@vates.tech> - 4.2.1-5.2.12.1
changelog:
  - Sync with xs8 4.2.1-5.2.12, no code change, only rebuild against libjemalloc.so.2:
    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.12
    - CP-46112: Rebuild after new version of jemalloc

    * Fri Aug 02 2024 Stephen Cheng <stephen.cheng@cloud.com> - 4.2.1-5.2.11
    - CP-46112: Rebuild with new version of jemalloc


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.3-1.13
changelog:
  - Replace 0030-fix-cleanup.py-bad-live-coalesce-check-regarding-Fil.patch with 0030-fix-getAllocatedSize-is-incorrect-75.patch
  - Ensure correct allocatedSize for FileVDI in cleanup.py


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.3-1.14
changelog:
  - Sync fork-load-daemon script with http-nbd-transfer (v1.5.0)
  - Fix coalesce process for LINSTOR SRs
  - Many code improvements for issues detected by mypy


author: Yann LE BRIS <yann.lebris@vates.tech> - 3.2.3-1.16
changelog:
  - Add 0061-Fix-LVHDSR.load-set-other_conf-in-cond-branch-to-pre.patch
  - Add 0062-fix-cleanup.py-protect-LinstorSR-init-against-race-c.patch
  - Add 0063-Fix-filter-to-reject-other-device-types-77.patch
  - Add 0064-feat-add-HPE-Nimble-multipath-configuration.patch


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.1
changelog:
  - Rebase on 3.2.12-3
  - Sync patches with our latest 3.2.12-8.3 branch
  - Remove patches merged upstream:
    - 0028-CA-398425-correctly-check-for-multiple-targets-in-iS.patch
    - 0030-fix-getAllocatedSize-is-incorrect-75.patch
    - 0047-Define-and-details-attr-on-Failure-mock.patch
    - 0064-feat-add-HPE-Nimble-multipath-configuration.patch
  - *** Upstream changelog ***
    * Tue Feb 11 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-3
    - CA-405381: update mpathcount while xapi is not enabled
    * Thu Feb 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-2
    - CA-403593: don't log session refs
    * Mon Jan 06 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-1
    - CA-400789: Do not exclude parentless VDIs from cacheing
    - CP-52844: allow for open session to be passed to sr_get_capability
    - CP-52852: add handler for xmlrpc ProtocolError
    - fix(cleanup.py): bad live coalesce check regarding FileSR
    * Tue Nov 19 2024 Mark Syms <mark.syms@cloud.com> - 3.2.11-1
    - CP-42675: send messages to Xapi if GC has insufficient space
    - CP-52620: enable read-through cache on persistent leaf
    * Tue Nov 05 2024 Mark Syms <mark.syms@cloud.com> - 3.2.10-1
    - CA-397084: SR scan tries to deactivate LV in use by tapdisk
    - CA-399644: if we make progress do not abort the GC or evaluate criteria
    - CA-400743: perform post snapshot rename in ioretry
    - CA-401068: if iSCSI device path is not found scan the bus
    * Wed Oct 09 2024 Mark Syms <mark.syms@cloud.com> - 3.2.9-3
    - CP-51658: install stop gc helper script
    - CA-399643 Use full paths when stopping fairlock on upgrade
    - CA-396655: check xapi is enabled before starting multipath reporting
    - CA-396658: check xapi is enabled before checking SR health
    - CA-400106: disable leaf coalesce with VDI snapshot secondary
    * Tue Sep 24 2024 Tim Smith <tim.smith@cloud.com> - 3.2.8-2
    - CA-399643 Use full paths when stopping fairlock on upgrade
    * Fri Sep 06 2024 Robin Newton <robin.newton@cloud.com> - 3.2.8-1
    - CA-398958 Cope with concurrent read-only activations
    * Wed Sep 04 2024 Mark Syms <mark.syms@cloud.com> - 3.2.7-1
    - CA-398425: correctly check for multiple targets in iSCSI
    * Wed Aug 21 2024 Mark Syms <mark.syms@cloud.com> - 3.2.6-1
    - CA-395560: Log exception details when LUN refresh fails
    - CA-396124: amend criteria under which the garbage collector aborts
    - CA-397084: Log any user of LV at deactivate
    - CP-51214: stop cgrules triggering errors on update
    * Tue Jul 23 2024 Tim Smith <tim.smith@cloud.com> - 3.2.5-1
    - CA-395554 Stop fairlock services on package upgrade
    * Mon Jul 22 2024 Mark Syms <mark.syms@cloud.com> - 3.2.4-1
    - Add missing sg3_utils dependency
    - Update multipath config for Dell, IBM and Nimble arrays


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-3.2
changelog:
  - Prevent leaf coalesce during migration for LINSTOR (CA-400106)
  - Use GC daemon code for LINSTOR like other drivers


author: Yann Dirson <yann.dirson@vates.fr> - 3.2.12-3.3
changelog:
  - Add missing dependency on libcgroup-tools, uses cgclassify(1)
  - Drop dependency on old and unused python3-future
  - Refresh patch not applying on Alma10 due to fuzz


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 3.2.12-10.1
changelog:
  - Rebase on 3.2.12-10
  - Sync patches with our latest 3.2.12-8.3 branch
  - Add new patches:
    - 0064-chore-.github-workflows-use-ubuntu-24.04.patch
    - 0065-Fix-warns-reported-by-new-github-workflow.patch
    - 0066-Improve-LinstorSR.py-to-handle-thick-SR-creation-85.patch
    - 0067-Fix-LINSTOR-satellite-LS_KEEP_RES-regex.patch
    - 0068-fix-LinstorSR-Correctly-reference-a-variable-excepti.patch
    - 0069-Fix-GC-hidden-attribute-in-case-of-SIGTERM-signal-87.patch
    - 0070-fix-LinstorSR-robustify-DB-umount-call.patch
    - 0071-feat-Linstor-rewrite-linstorhostcall-logic.patch
    - 0072-feat-linstor-Add-new-debug-log-in-linstorhostcall-67.patch
    - 0073-fix-linstor-subsequent-fixes-for-linstorhostcall.patch
    - 0074-Fix-tests-of-CP-51843-add-unit-tests-for-setup_cache.patch
    - 0075-feat-LinstorSR-improve-DB-volume-robustness.patch
    - 0076-fix-linstorvolumemanager-robustify-usable-size-gette.patch
    - 0077-fix-linstorvhdutil-don-t-log-when-get_hosts_attached.patch
    - 0078-refactor-linstorvhdutil-simplify-linstorhostcall.patch
    - 0079-fix-linstorvhdutil-call-local-method-when-possible-i.patch
    - 0080-fix-linstorvhdutil.py-remove-useless-param-on-call_r.patch
    - 0081-chore-pylintrc-get-rid-of-E1120-errors-for-LINSTOR-u.patch
    - 0082-fix-linstorvhdutil-support-missing-session-97.patch
  - *** Upstream changelog ***
    * Fri Jul 04 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-10
    - CA-413209: remove dangling reference to rawhba
    - CP-308587: update NetApp multipath as requested
    * Wed Jun 18 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-9
    - CA-395221: require systemd target
    * Tue May 27 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-8
    - CP-53692 SR attach with kicking the mpathcount pipe
    - CA-411163: refuse to attach if we see multiple SCSI IDs for SR PVs
    * Tue Apr 08 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-7
    - CA-409231: Report IntelliCache stats when parent is NBD.
    * Mon Mar 31 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-6
    - CA-407743: do not try to add memory caching and intellicache
    * Tue Mar 25 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-5
    - CA-408105: add logging to failure paths
    - CA-408452: remove VDI parent if it does not have one
    - CP-51843:  extend IntelliCache coverage
    * Tue Mar 04 2025 Mark Syms <mark.syms@cloud.com> - 3.2.12-4
    - CA-407343: do not remove the parent's vhd-parent in leaf GC
    - Revert the changes in 2979937bbb7 (CA-397084)
    - CP-50026 Ensure mpathcount runs after multipath deactivate


author: Damien Thenot <damien.thenot@vates.tech> - 3.2.12-10.2
changelog:
  - Add 0083-Remove-useless-loadLocked-param-on-vdi-methods-98.patch
  - Add 0084-fix-largeblock-redo-VG-activation-using-custom-confi.patch


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-2
changelog:
  - CP-39549: Configure defaults for swtpm_localca
  - CA-363859: Make compatible with GnuTLS 3.3
  - Fix debuginfo generation


author: Edwin Török <edwin.torok@cloud.com> - 0.7.3-3
changelog:
  - CA-371900: Capture output from swtpm during setup
  - Replace patch with upstream backports
  - CP-43409: update TPM manufacturer
  - CP-42059: Use simpler HTTP based REST API


author: Ross Lagerwall <ross.lagerwall@citrix.com> - 0.7.3-8
changelog:
  - Add gnutls-compat.patch back to make compatible with xs8/xs9
  - CA-377995: Fix static analysis warnings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.5.13-5
changelog:
  - Enabled threading
    Resolves: rhbz#676880
  - Fixed crash if there are no fonts installed (by no-fonts-fix patch)
    Resolves: rhbz#1218943


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.1.0-1.1
changelog:
  - Update from XS 8.3 prerelease updates
  - *** Upstream changelog ***
  - * Wed Aug 17 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.1.0-1
  - - varstore-sb-state: only load auth data if needed
  - - xapidb_init: Use BACKEND_INIT_FAILURE
  - - CA-366706: Fix signal handling and possible segfault
  - - CP-39854: Implement Platform Attack Reset Mitigation spec
  - - CP-39864 / CP-40029: Implement PPI support
  - * Tue Jul 26 2022 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.0.0-3
  - - Fix license of tools subpackage


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.1
changelog:
  - Update to 1.2.0-1
  - Remove varstored-1.0.0-change-certs-directory.XCP-ng.patch
  - *** Upstream changelog ***
  - * Tue Feb 28 2023 Ross Lagerwall <ross.lagerwall@citrix.com> - 1.2.0-1
  - - CP-41616: Move varstored auth dir to /var/lib/varstored
  - - CA-369046: Log the error code if set_variable_from_auth fails
  - - CA-362923: Change output format of create-auth
  - - CP-40832: Add standard UEFI Secure Boot certificates


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.2
changelog:
  - Revert part of XCP-ng specific changes, as upstream varstored now uses /var/lib/varstored
    and certs should be available by default now.
  - Add varstored-1.2.0-fix-return-code-for-varstore-sb-state-user.XCP-ng.patch


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-1.3
changelog:
  - Update secureboot-certs script for recent UEFI cert handling in XAPI
  - Remove KEK and db cert databases for now, pending legal advice.


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 1.2.0-2.1
changelog:
  - Sync with 1.2.0-2
  - *** Upstream changelog ***
  - * Fri Jan 26 2024 Andrew Cooper <andrew.cooper3@citrix.com> - 1.2.0-2
  - - Rebuild against libxenstore.so.4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.2
changelog:
  - Auth: Add support to make KEK and DB files optional
  - Auth: Enable AUTH_ONLY_PK_REQUIRED build macro


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-2.3
changelog:
  - Remove generation and installation of KEK and db files
  - Add helper script to remove pem file from source archive
  - Update source archive with pem files removed


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 1.2.0-2.4
changelog:
  - Add gen-sbvar.py
  - Add self-signed PK.auth blob
  - Generate {KEK,db,dbx}.auth using gen-sbvar.py
  - Update secureboot-certs to take builtin KEK/db/dbx
  - Update Secure Boot certs from microsoft/secureboot_objects@3f69ef4


author: Thierry Escande <thierry.escande@vates.tech> - 1.2.0-3.1
changelog:
  - Sync with 1.2.0-3
  - *** Upstream changelog ***
    * Wed Jan 22 2025 XenServer Rebuild <rebuild@xenserver.com> - 1.2.0-3
    - Add yangtze release branch
    - CP-53310: XenServer 9 rebuild


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.2.0-10
changelog:
  - Sync to latest upstream master: v7.30.0 + 10 commits
  - Dropped patches merged upstream and rebased the rest
  - Add support for RHEL 9 and derivatives in install.sh


author: Gael Duperrey <gduperrey@vates.fr> - 8.2.0-11
changelog:
  - Switch RPMs to systemd by default and provide legacy RPMs for chkconfig.
  - Merge separate -xenstore RPMs back into xe-guest-utilities RPMs


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 8.3-12
changelog:
  - Update release to match that of the RPM in XCP-ng 8.2, since this is what
    also defines the suffix of the version of the xe-guest-utilities packages
    in the ISO.


author: Benjamin Reis <benjamin.reis@vates.fr> - 1.7.3-1
changelog:
  - Add LVM plugin to list and create PVs, VGs and LVs
  - RAID plugin: handle gracefully when no RAID is present


author: Ronan Abhamon <ronan.abhamon@vates.fr> - 1.8.0-1
changelog:
  - Add a way to install packages with updater.py
  - xcp-ng-linstor is now a default repo of updater.py


author: Guillaume Thouvenin <guillaume.thouvenin@vates.tech> - 1.11.0-1
changelog:
  - Update smartctl plugin to report status about megaraid devices.
  - Add a new ipmitool plugin to get information from ipmitool.
    - It returns information about sensors
    - It also returns ipmi lan information


author: David Morel <david.morel@vates.tech> - 1.15.0-1
changelog:
  - Heavy rework of sdncontroller plugin
  - Version 1.14.0 was skipped, as the lsblk plugin changes introduced
    performance issues and were reverted in this release.


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-10.1
changelog:
  - Sync with 4.17.5-10
  - Remove xsa467.patch now provided by XS package
  - *** Upstream changelog ***
    * Thu Feb 27 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-10
    - Fix for XSA-467 CVE-2025-1713
    - Fix reboot/shutdown issues on AMD due to local APIC ESR interrupts


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 4.17.5-13.1
changelog:
  - Sync with 4.17.5-13
  - Remove xen-4.17.5-x86-intel-Fix-PERF_GLOBAL-fixup-when-virtualised.patch included in XS
  - *** Upstream changelog ***
    * Thu May  8 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-13
    - Fix for XSA-469 CVE-2024-28956
    * Mon Apr 28 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-12
    - Work around Ice Lake erratum ICX143, which manifests as a hang on boot
    - Fix crash on boot when perf counters are unavailable
    * Wed Mar 26 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-11
    - Add xenguest support for the platform:mmio_hole_size attribute
    - Identify which domain watchdog fired


author: Thierry Escande <thierry.escande@vates.tech> - 4.17.5-14.1
changelog:
  - Sync with 4.17.5-14
  - Remove xsa470-4.17.patch included in XS release
  - *** Upstream changelog ***
    * Fri Jun 13 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-14
    - Fix for XSA-470 CVE-2025-27465
    - Fix booting on servers with RAM above the 16T boundary
    - Fix possible watchdog timeout caused by unnecessary cache flushing


author: Teddy Astie <teddy.astie@vates.tech> - 4.17.5-15.1
changelog:
  - Sync with 4.17.5-15
  - *** Upstream changelog ***
    * Fri Jul  4 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-15
    - Fix for XSA-471 CVE-2024-36350 CVE-2024-36357
    - Perform provenance checks on AMD microcode blobs


author: Anthoine Bourgeois <anthoine.bourgeois@vates.tech> - 4.17.5-15.2
changelog:
  - Backport 22650d605462 "x86/hvmloader: select xen platform pci MMIO BAR UC or WB MTRR
    cache attributes"
  - Backport fd06f8700769 "tools/golang: update auto-generated libxl based types"


author: Yann Sionneau <yann.sionneau@vates.tech> - 4.17.5-18.1
changelog:
  - Sync with 4.17.5-18
  - Drop 0001-x86-hvmloader-select-xen-platform-pci-MMIO-BAR-UC-or.patch, applied upstream
  - *** Upstream changelog ***
    * Tue Aug  5 2025 Andrew Cooper <andrew.cooper3@citrix.com> - 4.17.5-18
    - Domain runstate extentions for more RRDs
    - Mwait-idle updates for Intel Alder Lake thru Granite Rapids platforms

    * Wed Jul 23 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-17
    - Fix bad interaction of cache attribute relax with vGPU

    * Tue Jul 22 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-16
    - Relax cache attributes for Xen Platform PCI device BAR
    - Optimize flushing of Intel PML buffer


author: Tu Dinh <ngoc-tu.dinh@vates.tech> - 4.17.5-20.1
changelog:
  - Sync with 4.17.5-20
  - Use xsa472-[123].patch provided by XenServer
  - *** Upstream changelog ***
    * Mon Sep 01 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-20
    - Fix for XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143

    * Thu Aug 28 2025 Roger Pau Monné <roger.pau@citrix.com> - 4.17.5-19
    - Add support for 4 or more socket Intel Granite Rapids systems
    - Fix usage of PCI devices on segments other than 0


author: Ming Lu <ming.lu@cloud.com> - 2.0.11-1
changelog:
  - CP-52905: Add collection for license server telemetry logs
  - CA-403717: Make XEN_RT mode additive for entries


author: Stephen Cheng <stephen.cheng@cloud.com> - 2.0.12-1
changelog:
  - CA-399631: Increase the max size of xenserver-config for bug-tool
  - CP-52714: Include rolled over xha logs into a server status report


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.3.0-3.1
changelog:
  - Rebase on CH 8.3 Preview
  - Re-add xha-10.1.0-support-drbd.XCP-ng.patch patch to support DRBD devices


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 10.5.0-1.1
changelog:
  - Update to 10.5.0-1
  - Drop xha-10.3.0-support-ipv6.XCP-ng.patch, merged upstream
  - *** Upstream changelog ***
  - * Wed May 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.5.0-1
  - - lib: ensure the correct maximum amount of hosts
  - * Tue Apr 18 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 10.4.0-1
  - - CP-41049: Safely remove /proc/xen from dom0
  - - feat(heartbeat): support IPv6


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 25.0.0-1.1
changelog:
  - Update to 25.0.0-1
  - *** Upstream changelog ***
    * Fri Jan 10 2025 Rob Hoes <rob.hoes@citrix.com> - 25.0.0-1
    - CA-403139: Set scheduler policy and priority thread
    - CA-403683: Configurable syslog printing


author: Ronan Abhamon <ronan.abhamon@vates.tech> - 25.1.0-1.1
changelog:
  - Update to 25.1.0-1
  - Sync patches and robustify access to NBD paths using O_SYNC
  - *** Upstream changelog ***
    * Thu Mar 06 2025 Gerald Elder-Vass <gerald.elder-vass@cloud.com> - 25.1.0-1
    - CA-407106: Fix various static analyzer warnings
    - CA-404658: Separate heartbeat send and receive threads
    - CA-407313: Replace HA spinlock with rwlock
    - CA-407256: Call to xha-lc is a no-op
    - CA-406953: Fix pointer truncation in hypercall arguments and undefined behaviour
    * Thu Jan 30 2025 Alex Brett <alex.brett@cloud.com> - 25.0.1-1
    - CA-405454: Fix xha when using cgroup v2


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.72.0-1.1
changelog:
  - Update to 6.72.0-1
  - Rediff xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch
  - *** Upstream changelog ***
    * Fri Jul 28 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.72.0-1
    - upstream: patch rpclib to support python3, and start using it
    - upstream: patch uri packages to parse ipv6 addresses correctly
    - maintenance: Fix issues spotted by the opam linter

    * Mon Jul 17 2023 Edwin Török <edwin.torok@cloud.com> - 6.71.0-2
    - Bump release and rebuild

    * Tue Jul 11 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.71.0-1
    - xs: update xapi-rrd to 1.9.2 (memory leak fix)
    - xs: add goblint for static analysis of C stubs

    * Mon Jul 10 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-2
    - Remove build dependencies, they are opam's normal dependencies

    * Wed Jun 07 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.70.0-1
    - xs: update xapi-stdext packages
    - upstream: remove unused dependencies, do not depend on xen
    - xs-extra: update metadata from upstream
    - vhd-format: move from upstream to xs-extra

    * Tue Jun 06 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-2
    - Bump release and rebuild

    * Fri May 05 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.69.0-1
    - ocaml: Use correct file contents in ocaml-system.4.14.1
    - upstream: Remove old ocamlformat and odoc-parser

    * Mon Apr 24 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.68.0-1
    - xs: do not package ezxenstore, it's a part of xen-api
    - ocaml: add 4.14

    * Wed Mar 22 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.67.0-1
    - xs: xenctrl.dummy: do not rsync Xen packages we do not use
    - Make xs-opam self-consistent and able to run unit tests
    - upstream: enforce only known licenses
    - upstream: update dune packages to 3.7.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.74.0-1.1
changelog:
  - Update to 6.74.0-1
  - Drop xs-opam-repo-6.72.0-fix-ipv6-uri.XCP-ng.patch, applied by XS
  - *** Upstream changelog ***
    * Thu Nov 02 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.74.0-1
    - xs: update xapi-stext packages to 4.23.0
    - licenses: update package licenses

    * Fri Oct 27 2023 Lin Liu <Lin.Liu01@cloud.com> - 6.73.0-2
    - Build with gcc for xs9

    * Wed Sep 27 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.73.0-1
    - xs: update polly and qmp
    - upstream: update many packages, there are no breaking changes


author: Benjamin Reis <benjamin.reis@vates.tech> - 6.77.0-1.1
changelog:
  - Rebase on 6.77.0-1
  - Drop xs-opam-repo-6.74.0-metajson.XCP-ng.patch
  - *** Upstream changelog ***
    * Wed Jan 31 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.77.0-1
    - Remove xapi-rd, xapi-inventory and xapi-stext-* packages

    * Wed Dec 20 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-2
    - Bump release

    * Tue Dec 19 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.76.0-1
    - upstream: update ocamlformat to the latest version
    - update inotify to 2.5.0 and uri to 4.4.0

    * Fri Nov 17 2023 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.75.0-1
    - xs: update xapi-rrd to 1.11.0


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.78.0-1.1
changelog:
  - Rebase on 6.78.0-1
  - *** Upstream changelog ***
    * Thu Mar 07 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.78.0-1
    - Add patch for rpclib to accept empty variants
    - Non-breaking update of upstream dependencies


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.80.0-1.1
changelog:
  - Rebase on 6.80.0-1
  - *** Upstream changelog ***
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1

    * Mon May 13 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.79.0-1
    - ocaml: add 4.14.2 packages
    - upstream: update non-breaking packages


author: Yann Dirson <yann.dirson@vates.tech> - 6.86.0-1.1
changelog:
  - Update to 6.86.0-1
  - Refresh removal of dlm package (location changed in source tree)
  - Don't pass "-f" to "rm" while removing packages, to better catch upstream changes
  - Fix typo generating /etc/profile.d/opam.sh
  - Reformat changelog to allow diffing with upstream
  - *** Upstream changelog ***
    * Wed Oct 09 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.86.0-1
    - Include crowbar library
    
    * Tue Oct 08 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.85.0-1
    - Update Uuidm to 0.9.9
    - Use upstream folder structure, use opam-directed tools for managing it
    
    * Mon Sep 23 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.84.0-1
    - CA-399172: fix potential crash in Uri.of_string
    
    * Fri Jul 26 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.83.0-1
    - Patch Uri packages to add path_unencoded
    - jst-config: fix build on Fedora40
    - Metadata refresh, breaking update of upstream libraries
    - Remove systemd library
    
    * Tue Jul 02 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.81.0-1
    - Update crc to 2.2.0
    - Add qcheck and qcheck-alcotest
    
    * Wed May 22 2024 Rob Hoes <rob.hoes@cloud.com> - 6.80.0-1
    - Add psq 0.2.1


author: Samuel Verschelde <stormi-xcp@ylix.fr> - 6.87.0-1.1
changelog:
  - Update to 6.87.0-1
  - *** Upstream changelog ***
    * Tue Dec 03 2024 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.87.0-1
    - Drop dependency on async and core packages
    - Non-breaking updates of packages


author: Andrii Sultanov <andriy-sultanov@vates.tech> - 6.91.0-1.1
changelog:
  - Update to 6.91.0-1
  - *** Upstream changelog ***
    * Fri Jul 18 2025 Rob Hoes <rob.hoes@cloud.com> - 6.91.0-1
    - Add qcow-stream and its dependencies
    - packages: update xen-api's metadata

    * Tue Jun 10 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.90.0-1
    - packages: update dune packages to 3.18.2
    - packages: update ocaml-xenstore to 2.4.0
    - packages: update mirage-crypto to 2.0.1

    * Mon Jun 09 2025 Bengang Yuan <bengang.yuan@cloud.com> - 6.89.0-2
    - Bump release and rebuild

    * Thu May 22 2025 Pau Ruiz Safont <pau.ruizsafont@cloud.com> - 6.89.0-1
    - packages: round of non-breaking updates (dune, ssl, others)
    - packages: update xenstore_transport to 1.4.0

    * Fri Mar 28 2025 Rob Hoes <rob.hoes@cloud.com> - 6.88.0-1
    - New HTTP packages
    - Non-breaking updates of existing packages

    * Tue Jan 21 2025 Deli Zhang <deli.zhang@cloud.com> - 6.87.0-2
    - CP-52964: Build with OpenSSL3 for XS8


