Packages changed: busybox (1.33.1 -> 1.34.1) clamav (0.103.3 -> 0.103.4) deltarpm (3.6.2 -> 3.6.3) kdeconnect-kde libfido2 (1.8.0 -> 1.9.0) libqt5-qtwebengine (5.15.6 -> 5.15.7) man-pages-zh_CN (1.5.2.1 -> 1.6.3.6) nfs-utils nodejs16 pam_mount perl-File-Find-Object (0.3.5 -> 0.3.6) pitivi python-Pillow (8.3.2 -> 8.4.0) python-boto3 (1.18.33 -> 1.19.6) python-botocore (1.21.33 -> 1.22.6) python-pyOpenSSL (20.0.1 -> 21.0.0) python-urllib3 (1.26.6 -> 1.26.7) rav1e (0.4.1 -> 0.5.0) rpm syntax-highlighting yast2-trans (84.87.20211022.37a68b8306 -> 84.87.20211030.c198d302b1) === Details === ==== busybox ==== Version update (1.33.1 -> 1.34.1) Subpackages: busybox-static - Disable crc32 to avoid conflict with perl-Archive-Zip (until some project really requires crc32) - Build busybox-warewulf3 for i586 as well. This allowes to set up i586 nodes. - Enable fdisk (jsc#CAR-16) - Add testsuite-gnu-echo.patch: testing.sh to use GNU echo - Remove the duplicated config entries and construct the snippets on the fly based on the main config. This way it's easier to keep track of what's different - Update to 1.34.1: * build system: use SOURCE_DATE_EPOCH for timestamp if available * many bug fixes and new features * touch: make FEATURE_TOUCH_NODEREF unconditional ==== clamav ==== Version update (0.103.3 -> 0.103.4) Subpackages: libclamav9 libfreshclam2 - Update to 0.103.4 * FreshClam: - Add a 24-hour cool-down for FreshClam clients that have received an HTTP 403 (Forbidden) response from the CDN. This is to reduce the volume of 403-response data served to blocked FreshClam clients that are configured with a tight update-loop. - Fixed a bug where FreshClam treats an empty CDIFF as an incremental update failure instead of as an intentional request to download the whole CVD. * ClamDScan: Fix a scan error when broken symlinks are encountered on macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks" options disabled. * Overhauled the scan recursion / nested archive extraction logic and added new limits on embedded file-type recognition performed during the "raw" scan of each file. This limits embedded file-type misidentification and prevents detecting embedded file content that is found/extracted and scanned at other layers in the scanning process. * Fix an issue with the FMap module that failed to read from some nested files. * Fixed an issue where failing to load some rules from a Yara file containing multiple rules may cause a crash. * Fixed assorted compiler warnings. * Fixed assorted Coverity static code analysis issues. * Scan limits: - Added virus-name suffixes to the alerts that trigger when a scan limit has been exceeded. Rather than simply Heuristics.Limits.Exceeded, you may now see limit-specific virus-names, to include: + Heuristics.Limits.Exceeded.MaxFileSize + Heuristics.Limits.Exceeded.MaxScanSize + Heuristics.Limits.Exceeded.MaxFiles + Heuristics.Limits.Exceeded.MaxRecursion + Heuristics.Limits.Exceeded.MaxScanTime - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with the other limit alerts names. These alerts include: + Heuristics.Limits.Exceeded.EmailLineFoldcnt + Heuristics.Limits.Exceeded.EmailHeaderBytes + Heuristics.Limits.Exceeded.EmailHeaders + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage + Heuristics.Limits.Exceeded.EmailMIMEArguments - Fixed an issue where the Email-related scan limits would alert even when the "AlertExceedsMax" (--alert-exceeds-max) scan option is not enabled. - Fixes an issue in the Zip parser where exceeding the "MaxFiles" limit or the "MaxFileSize" limit would abort the scan but would fail to alert. The Zip scan limit issues were independently identified and reported by Aaron Leliaert and Max Allan. * Fixed a leak in the Email parser when using the --gen-json scan option. * Fixed an issue where a failure to record metadata in the Email parser when using the --gen-json scan option could cause the Email parser to abort the scan early and fail to extract and scan additional content. * Fixed a file name memory leak in the Zip parser. * Fixed an issue where certain signature patterns may cause a crash or cause unintended matches on some systems when converting characters to uppercase if a UTF-8 unicode single-byte grapheme becomes a multi-byte grapheme. Patch courtesy of Andrea De Pasquale. ==== deltarpm ==== Version update (3.6.2 -> 3.6.3) - update to deltarpm-3.6.3 * support for threaded zstd compression ==== kdeconnect-kde ==== Subpackages: kdeconnect-kde-lang kdeconnect-kde-zsh-completion - Make sshfs depencency versioned for kdeconnect-openssh-8.8.patch - Add patch to add back option removed by kdeconnect-openssh-8.8.patch: * kdeconnect-add-back-ssh-dss.patch - Add kdeconnect-openssh-8.8.patch (boo#1191886), (kde#351725) and (kde#443155) See also https://bugs.archlinux.org/task/72350 ==== libfido2 ==== Version update (1.8.0 -> 1.9.0) - Version 1.9.0 (2021-10-27) * Enabled NFC support on Linux. * Added OpenSSL 3.0 compatibility. * Removed OpenSSL 1.0 compatibility. * Support for FIDO 2.1 "minPinLength" extension. * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation. * Support for TPM 2.0 attestation. * Support for device timeouts; see fido_dev_set_timeout(). * New API calls: - es256_pk_from_EVP_PKEY; - fido_cred_attstmt_len; - fido_cred_attstmt_ptr; - fido_cred_pin_minlen; - fido_cred_set_attstmt; - fido_cred_set_pin_minlen; - fido_dev_set_pin_minlen_rpid; - fido_dev_set_timeout; - rs256_pk_from_EVP_PKEY. * Reliability and portability fixes. * Better handling of HID devices without identification strings; gh#381. * Fixed detection of Windows?s native webauthn API; gh#382. ==== libqt5-qtwebengine ==== Version update (5.15.6 -> 5.15.7) - Update to version 5.15.7: * Update Chromium: [Backport] Linux sandbox: update syscalls numbers on 32-bit platforms [Backport] sandbox: linux: allow clock_nanosleep & gettime64 [Backport] Linux sandbox: update syscall numbers for all platforms. [Backport] Ease HarfBuzz API change with feature detection [Backport] Security bug 1248665 [Backport] CVE-2021-37975 : Use after free in V8 [Backport] CVE-2021-37980 : Inappropriate implementation in Sandbox [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (2/2) [Backport] CVE-2021-37979 : Heap buffer overflow in WebRTC (1/2) [Backport] CVE-2021-37978 : Heap buffer overflow in Blink [Backport] CVE-2021-30616: Use after free in Media. [Backport] CVE-2021-37962 : Use after free in Performance Manager (2/2) [Backport] CVE-2021-37962 : Use after free in Performance Manager (1/2) [Backport] CVE-2021-37973 : Use after free in Portals [Backport] CVE-2021-37971 : Incorrect security UI in Web Browser UI. [Backport] CVE-2021-37968 : Inappropriate implementation in Background Fetch API [Backport] CVE-2021-37967 : Inappropriate implementation in Background Fetch API [Backport] Linux sandbox: return ENOSYS for clone3 [Backport] Linux sandbox: fix fstatat() crash [Backport] Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat"" [Backport] Security bug 1238178 (2/2) [Backport] Security bug 1238178 (1/2) [Backport] CVE-2021-30633: Use after free in Indexed DB API (2/2) [Backport] CVE-2021-30633: Use after free in Indexed DB API (1/2) [Backport] CVE-2021-30630: Inappropriate implementation in Blink [Backport] CVE-2021-30629: Use after free in Permissions [Backport] CVE-2021-30628: Stack buffer overflow in ANGLE [Backport] CVE-2021-30627: Type Confusion in Blink layout [Backport] CVE-2021-30626: Out of bounds memory access in ANGLE [Backport] CVE-2021-30625: Use after free in Selection API [Backport] Security bug 1206289 [Backport] CVE-2021-30613: Use after free in Base internals [Backport] Security bug 1227228 [Backport] CVE-2021-30618: Inappropriate implementation in DevTools * Update patch level * Blacklist certificate test until certicates have been renewed * Block CORS from local URLs when remote access is not enabled * Do not wait on weak_pointer for termination errors * Support MSVC_VER 16.8 * Fix wrong save file filter for Markdown Editor example * Add Chromium version source documentation * Bump version from 5.15.6 to 5.15.7 * Fix crash when clicking on a link in PDF - Drop openSUSE patches: * fix1163766.patch. Should be addressed with: https://github.com/qt/qtwebengine-chromium/commit/652f834de https://github.com/qt/qtwebengine-chromium/commit/faae106ed https://github.com/qt/qtwebengine-chromium/commit/6b7b3f1bf * chromium-glibc-2.33.patch. Should be addressed with the [Backport] Linux sandbox: fix fstatat() crash and Reland "Reland "Linux sandbox syscall broker: use struct kernel_stat"" changes. * chromium-older-harfbuzz.patch - Drop upstream changes: * 0001-return-ENOSYS-for-clone3.patch * chromium-harfbuzz-3.0.0.patch * skia-harfbuzz-3.0.0.patch - Rebase patches: * sandbox-statx-futex_time64.patch ==== man-pages-zh_CN ==== Version update (1.5.2.1 -> 1.6.3.6) - Update to version 1.6.3.6 * Update translations for ulimit(3) from manpages-dev 5.10 * Update unicode_stop(1) and unicode_start(1) from kbd 2.3.0 * Add translation for epoll(7) * Add coreutils 8.32 translation: od(1) and pr(1). * Replace old fileutils ln(1) with coreutils ln(1). * Replace old bsdutils kill(1) with coreutils kill(1). * Some other minor improvements - Fix URL and SourceUrl - update version 1.6.3.4 * switch upstream to https://github.com/manpages-zh which has latest coreutils translations ==== nfs-utils ==== Subpackages: libnfsidmap1 nfs-client nfs-kernel-server - Add CONFIG parameter to %sysusers_generate_pre - Remove unneeded group line (user implies group) - Add Shell parameter to statd-user.conf ==== nodejs16 ==== Subpackages: npm16 - Add 40670.patch: test: fix test-datetime-change-notify after daylight change. - test-skip-y2038-on-32bit-time_t.patch: Add patch to skip the test 'test/parallel/test-fs-utimes-y2K38.js' which fails with a FP on platforms with 32-bit time_t. - nodejs16.spec: Reference it. ==== pam_mount ==== Subpackages: libcryptmount0 libcryptmount0-32bit pam_mount-32bit - Make symlinks between /sbin and /usr/sbin conditional as they are not applicable under UsrMerge. [pam_mount.spec] ==== perl-File-Find-Object ==== Version update (0.3.5 -> 0.3.6) - updated to 0.3.6 see /usr/share/doc/packages/perl-File-Find-Object/Changes 0.3.6 2021-08-26 - Extract https://metacpan.org/pod/File::TreeCreate . ==== pitivi ==== Subpackages: pitivi-lang - Replace enable-docs=true option with new disable-help=false option passed to meson. ==== python-Pillow ==== Version update (8.3.2 -> 8.4.0) - update to 8.4.0: - Prefer global transparency in GIF when replacing with background color #5756 - Added "exif" keyword argument to TIFF saving #5575 - Copy Python palette to new image in quantize() #5696 - Read ICO AND mask from end #5667 - Actually check the framesize in FliDecode.c #5659 - Determine JPEG2000 mode purely from ihdr header box #5654 - Fixed using info dictionary when writing multiple APNG frames #5611 - Allow saving 1 and L mode TIFF with PhotometricInterpretation 0 #5655 - For GIF save_all with palette, do not include palette with each frame #5603 - Keep transparency when converting from P to LA or PA #5606 - Copy palette to new image in transform() #5647 - Added "transparency" argument to EpsImagePlugin load() #5620 - Corrected pathlib.Path detection when saving #5633 - Added WalImageFile class #5618 - Consider I;16 pixel size when drawing text #5598 - If default conversion from P is RGB with transparency, convert to RGBA #5594 - Speed up rotating square images by 90 or 270 degrees #5646 - Add support for reading DPI information from JPEG2000 images - Catch TypeError from corrupted DPI value in EXIF #5639 - Do not close file pointer when saving SGI images #5645 - Deprecate ImagePalette size parameter #5641 - Prefer command line tools SDK on macOS #5624 ==== python-boto3 ==== Version update (1.18.33 -> 1.19.6) - Update to version 1.19.6 * api-change:``gamelift``: [``botocore``] Added support for Arm-based AWS Graviton2 instances, such as M6g, C6g, and R6g. * api-change:``ecs``: [``botocore``] Amazon ECS now supports running Fargate tasks on Windows Operating Systems Families which includes Windows Server 2019 Core and Windows Server 2019 Full. * api-change:``sagemaker``: [``botocore``] This release adds support for RStudio on SageMaker. * api-change:``connectparticipant``: [``botocore``] This release adds a new boolean attribute - Connect Participant - to the CreateParticipantConnection API, which can be used to mark the participant as connected. * api-change:``ec2``: [``botocore``] Added new read-only DenyAllIGWTraffic network interface attribute. Added support for DL1 24xlarge instances powered by Habana Gaudi Accelerators for deep learning model training workloads * api-change:``ssm-incidents``: [``botocore``] Updating documentation, adding new field to ConflictException to indicate earliest retry timestamp for some operations, increase maximum length of nextToken fields - from version 1.19.5 * api-change:``autoscaling``: [``botocore``] This release adds support for attribute-based instance type selection, a new EC2 Auto Scaling feature that lets customers express their instance requirements as a set of attributes, such as vCPU, memory, and storage. * api-change:``ec2``: [``botocore``] This release adds: attribute-based instance type selection for EC2 Fleet, Spot Fleet, a feature that lets customers express instance requirements as attributes like vCPU, memory, and storage; and Spot placement score, a feature that helps customers identify an optimal location to run Spot workloads. * enhancement:Session: Added `get_partition_for_region` to lookup partition for a given region_name * api-change:``eks``: [``botocore``] EKS managed node groups now support BOTTLEROCKET_x86_64 and BOTTLEROCKET_ARM_64 AMI types. * api-change:``sagemaker``: [``botocore``] This release allows customers to describe one or more versioned model packages through BatchDescribeModelPackage, update project via UpdateProject, modify and read customer metadata properties using Create, Update and Describe ModelPackage and enables cross account registration of model packages. * enhancement:Session: [``botocore``] Added `get_partition_for_region` allowing partition lookup by region name. * api-change:``textract``: [``botocore``] This release adds support for asynchronously analyzing invoice and receipt documents through two new APIs: StartExpenseAnalysis and GetExpenseAnalysis * enchancement:``s3``: TransferConfig now supports the `max_bandwidth` argument. - from version 1.19.4 * api-change:``emr-containers``: [``botocore``] This feature enables auto-generation of certificate to secure the managed-endpoint and removes the need for customer provided certificate-arn during managed-endpoint setup. * api-change:``chime-sdk-messaging``: [``botocore``] The Amazon Chime SDK now supports push notifications through Amazon Pinpoint * api-change:``chime-sdk-identity``: [``botocore``] The Amazon Chime SDK now supports push notifications through Amazon Pinpoint - from version 1.19.3 * api-change:``rds``: [``botocore``] This release adds support for Amazon RDS Custom, which is a new RDS management type that gives you full access to your database and operating system. For more information, see https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-custom.html * api-change:``auditmanager``: [``botocore``] This release introduces a new feature for Audit Manager: Custom framework sharing. You can now share your custom frameworks with another AWS account, or replicate them into another AWS Region under your own account. * api-change:``ec2``: [``botocore``] This release adds support to create a VPN Connection that is not attached to a Gateway at the time of creation. Use this to create VPNs associated with Core Networks, or modify your VPN and attach a gateway using the modify API after creation. * api-change:``route53resolver``: [``botocore``] New API for ResolverConfig, which allows autodefined rules for reverse DNS resolution to be disabled for a VPC - from version 1.19.2 * api-change:``quicksight``: [``botocore``] Added QSearchBar option for GenerateEmbedUrlForRegisteredUser ExperienceConfiguration to support Q search bar embedding * api-change:``auditmanager``: [``botocore``] This release introduces character restrictions for ControlSet names. We updated regex patterns for the following attributes: ControlSet, CreateAssessmentFrameworkControlSet, and UpdateAssessmentFrameworkControlSet. * api-change:``chime``: [``botocore``] Chime VoiceConnector and VoiceConnectorGroup APIs will now return an ARN. - from version 1.19.1 * api-change:``connect``: [``botocore``] Released Amazon Connect hours of operation API for general availability (GA). This API also supports AWS CloudFormation. For more information, see Amazon Connect Resource Type Reference in the AWS CloudFormation User Guide. - from version 1.19.0 * api-change:``appflow``: [``botocore``] Feature to add support for JSON-L format for S3 as a source. * api-change:``mediapackage-vod``: [``botocore``] MediaPackage passes through digital video broadcasting (DVB) subtitles into the output. * api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert SDK has added support for specifying caption time delta in milliseconds and the ability to apply color range legalization to source content other than AVC video. * api-change:``mediapackage``: [``botocore``] When enabled, MediaPackage passes through digital video broadcasting (DVB) subtitles into the output. * api-change:``panorama``: [``botocore``] General availability for AWS Panorama. AWS SDK for Panorama includes APIs to manage your devices and nodes, and deploy computer vision applications to the edge. For more information, see the AWS Panorama documentation at http://docs.aws.amazon.com/panorama * feature:Serialization: [``botocore``] rest-json serialization defaults aligned across AWS SDKs * api-change:``directconnect``: [``botocore``] This release adds 4 new APIS, which needs to be public able * api-change:``securityhub``: [``botocore``] Added support for cross-Region finding aggregation, which replicates findings from linked Regions to a single aggregation Region. Added operations to view, enable, update, and delete the finding aggregation. - from version 1.18.65 * api-change:``dataexchange``: [``botocore``] This release adds support for our public preview of AWS Data Exchange for Amazon Redshift. This enables data providers to list products including AWS Data Exchange datashares for Amazon Redshift, giving subscribers read-only access to provider data in Amazon Redshift. * api-change:``chime-sdk-messaging``: [``botocore``] The Amazon Chime SDK now allows developers to execute business logic on in-flight messages before they are delivered to members of a messaging channel with channel flows. - from version 1.18.64 * api-change:``quicksight``: [``botocore``] AWS QuickSight Service Features - Add IP Restriction UI and public APIs support. * enchancement:AWSCRT: [``botocore``] Upgrade awscrt extra to 0.12.5 * api-change:``ivs``: [``botocore``] Bug fix: remove unsupported maxResults and nextToken pagination parameters from ListTagsForResource - from version 1.18.63 * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``glue``: [``botocore``] Enable S3 event base crawler API. - from version 1.18.62 * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * api-change:``autoscaling``: [``botocore``] Amazon EC2 Auto Scaling now supports filtering describe Auto Scaling groups API using tags * api-change:``sagemaker``: [``botocore``] This release updates the provisioning artifact ID to an optional parameter in CreateProject API. The provisioning artifact ID defaults to the latest provisioning artifact ID of the product if you don't provide one. * api-change:``robomaker``: [``botocore``] Adding support to GPU simulation jobs as well as non-ROS simulation jobs. - from version 1.18.61 * api-change:``config``: [``botocore``] Adding Config support for AWS::OpenSearch::Domain * api-change:``ec2``: [``botocore``] This release adds support for additional VPC Flow Logs delivery options to S3, such as Apache Parquet formatted files, Hourly partitions and Hive-compatible S3 prefixes * api-change:``storagegateway``: [``botocore``] Adding support for Audit Logs on NFS shares and Force Closing Files on SMB shares. * api-change:``workmail``: [``botocore``] This release adds APIs for adding, removing and retrieving details of mail domains * api-change:``kinesisanalyticsv2``: [``botocore``] Support for Apache Flink 1.13 in Kinesis Data Analytics. Changed the required status of some Update properties to better fit the corresponding Create properties. - from version 1.18.60 * api-change:``cloudsearch``: [``botocore``] Adds an additional validation exception for Amazon CloudSearch configuration APIs for better error handling. * api-change:``ecs``: [``botocore``] Documentation only update to address tickets. * api-change:``mediatailor``: [``botocore``] MediaTailor now supports ad prefetching. * api-change:``ec2``: [``botocore``] EncryptionSupport for InstanceStorageInfo added to DescribeInstanceTypes API - from version 1.18.59 * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version * bugfix:Signing: [``botocore``] SigV4QueryAuth and CrtSigV4QueryAuth now properly respect AWSRequest.params while signing boto/botocore (#2521) * api-change:``medialive``: [``botocore``] This release adds support for Transport Stream files as an input type to MediaLive encoders. * api-change:``ec2``: [``botocore``] Documentation update for Amazon EC2. * api-change:``frauddetector``: [``botocore``] New model type: Transaction Fraud Insights, which is optimized for online transaction fraud. Stored Events, which allows customers to send and store data directly within Amazon Fraud Detector. Batch Import, which allows customers to upload a CSV file of historic event data for processing and storage - from version 1.18.58 * api-change:``lexv2-runtime``: [``botocore``] Update lexv2-runtime client to latest version * api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version * api-change:``secretsmanager``: [``botocore``] Documentation updates for Secrets Manager * api-change:``securityhub``: [``botocore``] Added new resource details objects to ASFF, including resources for WAF rate-based rules, EC2 VPC endpoints, ECR repositories, EKS clusters, X-Ray encryption, and OpenSearch domains. Added additional details for CloudFront distributions, CodeBuild projects, ELB V2 load balancers, and S3 buckets. * api-change:``mediaconvert``: [``botocore``] AWS Elemental MediaConvert has added the ability to set account policies which control access restrictions for HTTP, HTTPS, and S3 content sources. * api-change:``ec2``: [``botocore``] This release removes a requirement for filters on SearchLocalGatewayRoutes operations. - from version 1.18.57 * api-change:``kendra``: [``botocore``] Amazon Kendra now supports indexing and querying documents in different languages. * api-change:``grafana``: [``botocore``] Initial release of the SDK for Amazon Managed Grafana API. * api-change:``firehose``: [``botocore``] Allow support for Amazon Opensearch Service(successor to Amazon Elasticsearch Service) as a Kinesis Data Firehose delivery destination. * api-change:``backup``: [``botocore``] Launch of AWS Backup Vault Lock, which protects your backups from malicious and accidental actions, works with existing backup policies, and helps you meet compliance requirements. * api-change:``schemas``: [``botocore``] Removing unused request/response objects. * api-change:``chime``: [``botocore``] This release enables customers to configure Chime MediaCapturePipeline via API. - from version 1.18.56 * api-change:``sagemaker``: [``botocore``] This release adds a new TrainingInputMode FastFile for SageMaker Training APIs. * api-change:``amplifybackend``: [``botocore``] Adding a new field 'AmplifyFeatureFlags' to the response of the GetBackend operation. It will return a stringified version of the cli.json file for the given Amplify project. * api-change:``fsx``: [``botocore``] This release adds support for Lustre 2.12 to FSx for Lustre. * api-change:``kendra``: [``botocore``] Amazon Kendra now supports integration with AWS SSO - from version 1.18.55 * api-change:``workmail``: [``botocore``] This release allows customers to change their inbound DMARC settings in Amazon WorkMail. * api-change:``location``: [``botocore``] Add support for PositionFiltering. * api-change:``application-autoscaling``: [``botocore``] With this release, Application Auto Scaling adds support for Amazon Neptune. Customers can now automatically add or remove Read Replicas of their Neptune clusters to keep the average CPU Utilization at the target value specified by the customers. * api-change:``ec2``: [``botocore``] Released Capacity Reservation Fleet, a feature of Amazon EC2 Capacity Reservations, which provides a way to manage reserved capacity across instance types. For more information: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-fleets.html * api-change:``glue``: [``botocore``] This release adds tag as an input of CreateConnection * api-change:``backup``: [``botocore``] AWS Backup Audit Manager framework report. - from version 1.18.54 * api-change:``codebuild``: [``botocore``] CodeBuild now allows you to select how batch build statuses are sent to the source provider for a project. * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``kms``: [``botocore``] Added SDK examples for ConnectCustomKeyStore, CreateCustomKeyStore, CreateKey, DeleteCustomKeyStore, DescribeCustomKeyStores, DisconnectCustomKeyStore, GenerateDataKeyPair, GenerateDataKeyPairWithoutPlaintext, GetPublicKey, ReplicateKey, Sign, UpdateCustomKeyStore and Verify APIs - from version 1.18.53 * api-change:``synthetics``: [``botocore``] CloudWatch Synthetics now enables customers to choose a customer managed AWS KMS key or an Amazon S3-managed key instead of an AWS managed key (default) for the encryption of artifacts that the canary stores in Amazon S3. CloudWatch Synthetics also supports artifact S3 location updation now. * api-change:``ssm``: [``botocore``] When "AutoApprovable" is true for a Change Template, then specifying --auto-approve (boolean) in Start-Change-Request-Execution will create a change request that bypasses approver review. (except for change calendar restrictions) * api-change:``apprunner``: [``botocore``] This release contains several minor bug fixes. - from version 1.18.52 * api-change:``network-firewall``: [``botocore``] This release adds support for strict ordering for stateful rule groups. Using strict ordering, stateful rules are evaluated in the exact order in which you provide them. * api-change:``dataexchange``: [``botocore``] This release enables subscribers to set up automatic exports of newly published revisions using the new EventAction API. * api-change:``workmail``: [``botocore``] This release adds support for mobile device access overrides management in Amazon WorkMail. * api-change:``account``: [``botocore``] This release of the Account Management API enables customers to manage the alternate contacts for their AWS accounts. For more information, see https://docs.aws.amazon.com/accounts/latest/reference/accounts-welcome.html * api-change:``workspaces``: [``botocore``] Added CreateUpdatedWorkspaceImage API to update WorkSpace images with latest software and drivers. Updated DescribeWorkspaceImages API to display if there are updates available for WorkSpace images. * api-change:``cloudcontrol``: [``botocore``] Initial release of the SDK for AWS Cloud Control API * api-change:``macie2``: [``botocore``] Amazon S3 bucket metadata now indicates whether an error or a bucket's permissions settings prevented Amazon Macie from retrieving data about the bucket or the bucket's objects. - from version 1.18.51 * api-change:``lambda``: [``botocore``] Adds support for Lambda functions powered by AWS Graviton2 processors. Customers can now select the CPU architecture for their functions. * api-change:``sesv2``: [``botocore``] This release includes the ability to use 2048 bits RSA key pairs for DKIM in SES, either with Easy DKIM or Bring Your Own DKIM. * api-change:``amp``: [``botocore``] This release adds alert manager and rule group namespace APIs - from version 1.18.50 * api-change:``transfer``: [``botocore``] Added changes for managed workflows feature APIs. * api-change:``imagebuilder``: [``botocore``] Fix description for AmiDistributionConfiguration Name property, which actually refers to the output AMI name. Also updated for consistent terminology to use "base" image, and another update to fix description text. - from version 1.18.49 * api-change:``appintegrations``: [``botocore``] The Amazon AppIntegrations service enables you to configure and reuse connections to external applications. * api-change:``wisdom``: [``botocore``] Released Amazon Connect Wisdom, a feature of Amazon Connect, which provides real-time recommendations and search functionality in general availability (GA). For more information, see https://docs.aws.amazon.com/wisdom/latest/APIReference/Welcome.html. * api-change:``pinpoint``: [``botocore``] Added support for journey with contact center activity * api-change:``voice-id``: [``botocore``] Released the Amazon Voice ID SDK, for usage with the Amazon Connect Voice ID feature released for Amazon Connect. * api-change:``connect``: [``botocore``] This release updates a set of APIs: CreateIntegrationAssociation, ListIntegrationAssociations, CreateUseCase, and StartOutboundVoiceContact. You can use it to create integrations with Amazon Pinpoint for the Amazon Connect Campaigns use case, Amazon Connect Voice ID, and Amazon Connect Wisdom. * api-change:``elbv2``: [``botocore``] Update elbv2 client to latest version - from version 1.18.48 * api-change:``license-manager``: [``botocore``] AWS License Manager now allows customers to get the LicenseArn in the Checkout API Response. * api-change:``ec2``: [``botocore``] DescribeInstances now returns Platform Details, Usage Operation, and Usage Operation Update Time. - from version 1.18.47 * api-change:``mediaconvert``: [``botocore``] This release adds style and positioning support for caption or subtitle burn-in from rich text sources such as TTML. This release also introduces configurable image-based trick play track generation. * api-change:``appsync``: [``botocore``] Documented the new OpenSearchServiceDataSourceConfig data type. Added deprecation notes to the ElasticsearchDataSourceConfig data type. * api-change:``ssm``: [``botocore``] Added cutoff behavior support for preventing new task invocations from starting when the maintenance window cutoff time is reached. - from version 1.18.46 * api-change:``imagebuilder``: [``botocore``] This feature adds support for specifying GP3 volume throughput and configuring instance metadata options for instances launched by EC2 Image Builder. * api-change:``wafv2``: [``botocore``] Added the regex match rule statement, for matching web requests against a single regular expression. * api-change:``mediatailor``: [``botocore``] This release adds support to configure logs for playback configuration. * api-change:``lexv2-models``: [``botocore``] Update lexv2-models client to latest version * api-change:``iam``: [``botocore``] Added changes to OIDC API about not using port numbers in the URL. * api-change:``license-manager``: [``botocore``] AWS License Manager now allows customers to change their Windows Server or SQL license types from Bring-Your-Own-License (BYOL) to License Included or vice-versa (using the customer's media). * api-change:``mediapackage-vod``: [``botocore``] MediaPackage VOD will now return the current processing statuses of an asset's endpoints. The status can be QUEUED, PROCESSING, PLAYABLE, or FAILED. - from version 1.18.45 * api-change:``comprehend``: [``botocore``] Amazon Comprehend now supports versioning of custom models, improved training with ONE_DOC_PER_FILE text documents for custom entity recognition, ability to provide specific test sets during training, and live migration to new model endpoints. * api-change:``iot``: [``botocore``] This release adds support for verifying, viewing and filtering AWS IoT Device Defender detect violations with four verification states. * api-change:``ecr``: [``botocore``] This release adds additional support for repository replication * api-change:``ec2``: [``botocore``] This update adds support for downloading configuration templates using new APIs (GetVpnConnectionDeviceTypes and GetVpnConnectionDeviceSampleConfiguration) and Internet Key Exchange version 2 (IKEv2) parameters for many popular CGW devices. - from version 1.18.44 * api-change:``opensearch``: [``botocore``] This release adds an optional parameter in the ListDomainNames API to filter domains based on the engine type (OpenSearch/Elasticsearch). * api-change:``es``: [``botocore``] This release adds an optional parameter in the ListDomainNames API to filter domains based on the engine type (OpenSearch/Elasticsearch). * api-change:``dms``: [``botocore``] Optional flag force-planned-failover added to reboot-replication-instance API call. This flag can be used to test a planned failover scenario used during some maintenance operations. - from version 1.18.43 * api-change:``kafkaconnect``: [``botocore``] This is the initial SDK release for Amazon Managed Streaming for Apache Kafka Connect (MSK Connect). * api-change:``macie2``: [``botocore``] This release adds support for specifying which managed data identifiers are used by a classification job, and retrieving a list of managed data identifiers that are available. * api-change:``robomaker``: [``botocore``] Adding support to create container based Robot and Simulation applications by introducing an environment field * api-change:``s3``: [``botocore``] Add support for access point arn filtering in S3 CW Request Metrics * api-change:``transcribe``: [``botocore``] This release adds support for subtitling with Amazon Transcribe batch jobs. * api-change:``sagemaker``: [``botocore``] Add API for users to retry a failed pipeline execution or resume a stopped one. * api-change:``pinpoint``: [``botocore``] This SDK release adds a new feature for Pinpoint campaigns, in-app messaging. - from versionm 1.18.42 * api-change:``sagemaker``: [``botocore``] This release adds support for "Project Search" * api-change:``ec2``: [``botocore``] This release adds support for vt1 3xlarge, 6xlarge and 24xlarge instances powered by Xilinx Alveo U30 Media Accelerators for video transcoding workloads * api-change:``wafv2``: [``botocore``] This release adds support for including rate based rules in a rule group. * api-change:``chime``: [``botocore``] Adds support for SipHeaders parameter for CreateSipMediaApplicationCall. * api-change:``comprehend``: [``botocore``] Amazon Comprehend now allows you to train and run PDF and Word documents for custom entity recognition. With PDF and Word formats, you can extract information from documents containing headers, lists and tables. - from version 1.18.41 * api-change:``iot``: [``botocore``] AWS IoT Rules Engine adds OpenSearch action. The OpenSearch rule action lets you stream data from IoT sensors and applications to Amazon OpenSearch Service which is a successor to Amazon Elasticsearch Service. * api-change:``ec2``: [``botocore``] Adds support for T3 instances on Amazon EC2 Dedicated Hosts. * enhancement:Tagged Unions: [``botocore``] Introducing support for the `union` trait on structures in request and response objects. - from version 1.18.40 * api-change:``cloudformation``: [``botocore``] Doc only update for CloudFormation that fixes several customer-reported issues. * api-change:``rds``: [``botocore``] This release adds support for providing a custom timeout value for finding a scaling point during autoscaling in Aurora Serverless v1. * api-change:``ecr``: [``botocore``] This release updates terminology around KMS keys. * api-change:``sagemaker``: [``botocore``] This release adds support for "Lifecycle Configurations" to SageMaker Studio * api-change:``transcribe``: [``botocore``] This release adds an API option for startTranscriptionJob and startMedicalTranscriptionJob that allows the user to specify encryption context key value pairs for batch jobs. * api-change:``quicksight``: [``botocore``] Add new data source type for Amazon OpenSearch (successor to Amazon ElasticSearch). - from version 1.18.39 * api-change:``emr``: [``botocore``] Update emr client to latest version * api-change:``codeguru-reviewer``: [``botocore``] The Amazon CodeGuru Reviewer API now includes the RuleMetadata data object and a Severity attribute on a RecommendationSummary object. A RuleMetadata object contains information about a rule that generates a recommendation. Severity indicates how severe the issue associated with a recommendation is. * api-change:``lookoutequipment``: [``botocore``] Added OffCondition parameter to CreateModel API - from version 1.18.38 * api-change:``opensearch``: [``botocore``] Updated Configuration APIs for Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) * api-change:``ram``: [``botocore``] A minor text-only update that fixes several customer issues. * api-change:``kafka``: [``botocore``] Amazon MSK has added a new API that allows you to update the encrypting and authentication settings for an existing cluster. - from version 1.18.37 * api-change:``elasticache``: [``botocore``] Doc only update for ElastiCache * api-change:``amp``: [``botocore``] This release adds tagging support for Amazon Managed Service for Prometheus workspace. * api-change:``forecast``: [``botocore``] Predictor creation now supports selecting an accuracy metric to optimize in AutoML and hyperparameter optimization. This release adds additional accuracy metrics for predictors - AverageWeightedQuantileLoss, MAPE and MASE. * api-change:``xray``: [``botocore``] Updated references to AWS KMS keys and customer managed keys to reflect current terminology. * api-change:``ssm-contacts``: [``botocore``] Added SDK examples for SSM-Contacts. * api-change:``mediapackage``: [``botocore``] SPEKE v2 support for live CMAF packaging type. SPEKE v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, it supports live DASH currently. * api-change:``eks``: [``botocore``] Adding RegisterCluster and DeregisterCluster operations, to support connecting external clusters to EKS. - from version 1.18.36 * api-change:``chime-sdk-identity``: [``botocore``] Documentation updates for Chime * api-change:``chime-sdk-messaging``: [``botocore``] Documentation updates for Chime * api-change:``outposts``: [``botocore``] This release adds a new API CreateOrder. * api-change:``frauddetector``: [``botocore``] Enhanced GetEventPrediction API response to include risk scores from imported SageMaker models * api-change:``codeguru-reviewer``: [``botocore``] Added support for CodeInconsistencies detectors - from version 1.18.35 * api-change:``acm-pca``: [``botocore``] Private Certificate Authority Service now allows customers to enable an online certificate status protocol (OCSP) responder service on their private certificate authorities. Customers can also optionally configure a custom CNAME for their OCSP responder. * api-change:``s3control``: [``botocore``] S3 Multi-Region Access Points provide a single global endpoint to access a data set that spans multiple S3 buckets in different AWS Regions. * api-change:``accessanalyzer``: [``botocore``] Updates service API, documentation, and paginators to support multi-region access points from Amazon S3. * api-change:``schemas``: [``botocore``] This update include the support for Schema Discoverer to discover the events sent to the bus from another account. The feature will be enabled by default when discoverer is created or updated but can also be opt-in or opt-out by specifying the value for crossAccount. * api-change:``securityhub``: [``botocore``] New ASFF Resources: AwsAutoScalingLaunchConfiguration, AwsEc2VpnConnection, AwsEcrContainerImage. Added KeyRotationStatus to AwsKmsKey. Added AccessControlList, BucketLoggingConfiguration,BucketNotificationConfiguration and BucketNotificationConfiguration to AwsS3Bucket. * enhancement:s3: [``botocore``] Added support for S3 Multi-Region Access Points * api-change:``efs``: [``botocore``] Update efs client to latest version * api-change:``transfer``: [``botocore``] AWS Transfer Family introduces Managed Workflows for creating, executing, monitoring, and standardizing post file transfer processing * api-change:``ebs``: [``botocore``] Documentation updates for Amazon EBS direct APIs. * api-change:``quicksight``: [``botocore``] This release adds support for referencing parent datasets as sources in a child dataset. * api-change:``fsx``: [``botocore``] Announcing Amazon FSx for NetApp ONTAP, a new service that provides fully managed shared storage in the AWS Cloud with the data access and management capabilities of ONTAP. * enhancement:Signers: [``botocore``] Added support for Sigv4a Signing Algorithm * api-change:``lex-models``: [``botocore``] Lex now supports Korean (ko-KR) locale. - from version 1.18.34 * api-change:``ec2``: [``botocore``] Added LaunchTemplate support for the IMDS IPv6 endpoint * api-change:``cloudtrail``: [``botocore``] Documentation updates for CloudTrail * api-change:``mediatailor``: [``botocore``] This release adds support for wall clock programs in LINEAR channels. * api-change:``config``: [``botocore``] Documentation updates for config * api-change:``servicecatalog-appregistry``: [``botocore``] Introduction of GetAssociatedResource API and GetApplication response extension for Resource Groups support. - Switch tests from nose to pytest - Update BuildRequires and Requires from setup.py ==== python-botocore ==== Version update (1.21.33 -> 1.22.6) - Version update to 1.22.6 * api-change:``gamelift``: Added support for Arm-based AWS Graviton2 instances, such as M6g, C6g, and R6g. * api-change:``ecs``: Amazon ECS now supports running Fargate tasks on Windows Operating Systems Families which includes Windows Server 2019 Core and Windows Server 2019 Full. * api-change:``sagemaker``: This release adds support for RStudio on SageMaker. * api-change:``connectparticipant``: This release adds a new boolean attribute - Connect Participant - to the CreateParticipantConnection API, which can be used to mark the participant as connected. * api-change:``ec2``: Added new read-only DenyAllIGWTraffic network interface attribute. Added support for DL1 24xlarge instances powered by Habana Gaudi Accelerators for deep learning model training workloads * api-change:``ssm-incidents``: Updating documentation, adding new field to ConflictException to indicate earliest retry timestamp for some operations, increase maximum length of nextToken fields - from version 1.22.5 * api-change:``autoscaling``: This release adds support for attribute-based instance type selection, a new EC2 Auto Scaling feature that lets customers express their instance requirements as a set of attributes, such as vCPU, memory, and storage. * api-change:``ec2``: This release adds: attribute-based instance type selection for EC2 Fleet, Spot Fleet, a feature that lets customers express instance requirements as attributes like vCPU, memory, and storage; and Spot placement score, a feature that helps customers identify an optimal location to run Spot workloads. * api-change:``eks``: EKS managed node groups now support BOTTLEROCKET_x86_64 and BOTTLEROCKET_ARM_64 AMI types. * api-change:``sagemaker``: This release allows customers to describe one or more versioned model packages through BatchDescribeModelPackage, update project via UpdateProject, modify and read customer metadata properties using Create, Update and Describe ModelPackage and enables cross account registration of model packages. * enhancement:Session: Added `get_partition_for_region` allowing partition lookup by region name. * api-change:``textract``: This release adds support for asynchronously analyzing invoice and receipt documents through two new APIs: StartExpenseAnalysis and GetExpenseAnalysis - from version 1.22.4 * api-change:``emr-containers``: This feature enables auto-generation of certificate to secure the managed-endpoint and removes the need for customer provided certificate-arn during managed-endpoint setup. * api-change:``chime-sdk-messaging``: The Amazon Chime SDK now supports push notifications through Amazon Pinpoint * api-change:``chime-sdk-identity``: The Amazon Chime SDK now supports push notifications through Amazon Pinpoint - from version 1.22.3 * api-change:``rds``: This release adds support for Amazon RDS Custom, which is a new RDS management type that gives you full access to your database and operating system. For more information, see https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-custom.html * api-change:``auditmanager``: This release introduces a new feature for Audit Manager: Custom framework sharing. You can now share your custom frameworks with another AWS account, or replicate them into another AWS Region under your own account. * api-change:``ec2``: This release adds support to create a VPN Connection that is not attached to a Gateway at the time of creation. Use this to create VPNs associated with Core Networks, or modify your VPN and attach a gateway using the modify API after creation. * api-change:``route53resolver``: New API for ResolverConfig, which allows autodefined rules for reverse DNS resolution to be disabled for a VPC - from version 1.22.2 * api-change:``quicksight``: Added QSearchBar option for GenerateEmbedUrlForRegisteredUser ExperienceConfiguration to support Q search bar embedding * api-change:``auditmanager``: This release introduces character restrictions for ControlSet names. We updated regex patterns for the following attributes: ControlSet, CreateAssessmentFrameworkControlSet, and UpdateAssessmentFrameworkControlSet. * api-change:``chime``: Chime VoiceConnector and VoiceConnectorGroup APIs will now return an ARN. - from version 1.22.1 * api-change:``connect``: Released Amazon Connect hours of operation API for general availability (GA). This API also supports AWS CloudFormation. For more information, see Amazon Connect Resource Type Reference in the AWS CloudFormation User Guide. - from version 1.22.0 * api-change:``appflow``: Feature to add support for JSON-L format for S3 as a source. * api-change:``mediapackage-vod``: MediaPackage passes through digital video broadcasting (DVB) subtitles into the output. * api-change:``mediaconvert``: AWS Elemental MediaConvert SDK has added support for specifying caption time delta in milliseconds and the ability to apply color range legalization to source content other than AVC video. * api-change:``mediapackage``: When enabled, MediaPackage passes through digital video broadcasting (DVB) subtitles into the output. * api-change:``panorama``: General availability for AWS Panorama. AWS SDK for Panorama includes APIs to manage your devices and nodes, and deploy computer vision applications to the edge. For more information, see the AWS Panorama documentation at http://docs.aws.amazon.com/panorama * feature:Serialization: rest-json serialization defaults aligned across AWS SDKs * api-change:``directconnect``: This release adds 4 new APIS, which needs to be public able * api-change:``securityhub``: Added support for cross-Region finding aggregation, which replicates findings from linked Regions to a single aggregation Region. Added operations to view, enable, update, and delete the finding aggregation. - from version 1.21.65 * api-change:``dataexchange``: This release adds support for our public preview of AWS Data Exchange for Amazon Redshift. This enables data providers to list products including AWS Data Exchange datashares for Amazon Redshift, giving subscribers read-only access to provider data in Amazon Redshift. * api-change:``chime-sdk-messaging``: The Amazon Chime SDK now allows developers to execute business logic on in-flight messages before they are delivered to members of a messaging channel with channel flows. - from version 1.21.64 * api-change:``quicksight``: AWS QuickSight Service Features - Add IP Restriction UI and public APIs support. * enchancement:AWSCRT: Upgrade awscrt extra to 0.12.5 * api-change:``ivs``: Bug fix: remove unsupported maxResults and nextToken pagination parameters from ListTagsForResource - from version 1.21.63 * api-change:``efs``: Update efs client to latest version * api-change:``glue``: Enable S3 event base crawler API. - from version 1.21.62 * api-change:``elbv2``: Update elbv2 client to latest version * api-change:``autoscaling``: Amazon EC2 Auto Scaling now supports filtering describe Auto Scaling groups API using tags * api-change:``sagemaker``: This release updates the provisioning artifact ID to an optional parameter in CreateProject API. The provisioning artifact ID defaults to the latest provisioning artifact ID of the product if you don't provide one. * api-change:``robomaker``: Adding support to GPU simulation jobs as well as non-ROS simulation jobs. - from version 1.21.61 * api-change:``config``: Adding Config support for AWS::OpenSearch::Domain * api-change:``ec2``: This release adds support for additional VPC Flow Logs delivery options to S3, such as Apache Parquet formatted files, Hourly partitions and Hive-compatible S3 prefixes * api-change:``storagegateway``: Adding support for Audit Logs on NFS shares and Force Closing Files on SMB shares. * api-change:``workmail``: This release adds APIs for adding, removing and retrieving details of mail domains * api-change:``kinesisanalyticsv2``: Support for Apache Flink 1.13 in Kinesis Data Analytics. Changed the required status of some Update properties to better fit the corresponding Create properties. - from version 1.21.60 * api-change:``cloudsearch``: Adds an additional validation exception for Amazon CloudSearch configuration APIs for better error handling. * api-change:``ecs``: Documentation only update to address tickets. * api-change:``mediatailor``: MediaTailor now supports ad prefetching. * api-change:``ec2``: EncryptionSupport for InstanceStorageInfo added to DescribeInstanceTypes API - from version 1.21.59 * api-change:``elbv2``: Update elbv2 client to latest version * bugfix:Signing: SigV4QueryAuth and CrtSigV4QueryAuth now properly respect AWSRequest.params while signing boto/botocore (#2521) * api-change:``medialive``: This release adds support for Transport Stream files as an input type to MediaLive encoders. * api-change:``ec2``: Documentation update for Amazon EC2. * api-change:``frauddetector``: New model type: Transaction Fraud Insights, which is optimized for online transaction fraud. Stored Events, which allows customers to send and store data directly within Amazon Fraud Detector. Batch Import, which allows customers to upload a CSV file of historic event data for processing and storage - from version 1.21.58 * api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version * api-change:``lexv2-models``: Update lexv2-models client to latest version * api-change:``secretsmanager``: Documentation updates for Secrets Manager * api-change:``securityhub``: Added new resource details objects to ASFF, including resources for WAF rate-based rules, EC2 VPC endpoints, ECR repositories, EKS clusters, X-Ray encryption, and OpenSearch domains. Added additional details for CloudFront distributions, CodeBuild projects, ELB V2 load balancers, and S3 buckets. * api-change:``mediaconvert``: AWS Elemental MediaConvert has added the ability to set account policies which control access restrictions for HTTP, HTTPS, and S3 content sources. * api-change:``ec2``: This release removes a requirement for filters on SearchLocalGatewayRoutes operations. - from version 1.21.57 * api-change:``kendra``: Amazon Kendra now supports indexing and querying documents in different languages. * api-change:``grafana``: Initial release of the SDK for Amazon Managed Grafana API. * api-change:``firehose``: Allow support for Amazon Opensearch Service(successor to Amazon Elasticsearch Service) as a Kinesis Data Firehose delivery destination. * api-change:``backup``: Launch of AWS Backup Vault Lock, which protects your backups from malicious and accidental actions, works with existing backup policies, and helps you meet compliance requirements. * api-change:``schemas``: Removing unused request/response objects. * api-change:``chime``: This release enables customers to configure Chime MediaCapturePipeline via API. - from version 1.21.56 * api-change:``sagemaker``: This release adds a new TrainingInputMode FastFile for SageMaker Training APIs. * api-change:``amplifybackend``: Adding a new field 'AmplifyFeatureFlags' to the response of the GetBackend operation. It will return a stringified version of the cli.json file for the given Amplify project. * api-change:``fsx``: This release adds support for Lustre 2.12 to FSx for Lustre. * api-change:``kendra``: Amazon Kendra now supports integration with AWS SSO - from version 1.21.55 * api-change:``workmail``: This release allows customers to change their inbound DMARC settings in Amazon WorkMail. * api-change:``location``: Add support for PositionFiltering. * api-change:``application-autoscaling``: With this release, Application Auto Scaling adds support for Amazon Neptune. Customers can now automatically add or remove Read Replicas of their Neptune clusters to keep the average CPU Utilization at the target value specified by the customers. * api-change:``ec2``: Released Capacity Reservation Fleet, a feature of Amazon EC2 Capacity Reservations, which provides a way to manage reserved capacity across instance types. For more information: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cr-fleets.html * api-change:``glue``: This release adds tag as an input of CreateConnection * api-change:``backup``: AWS Backup Audit Manager framework report. - Remove unnecessary dependencies from BuildRequires - Skip integration tests as these require an internet connection - Switch package to multibuild and split tests into separate package - Switch tests from nose to pytest - Version update to 1.21.54 * api-change:``codebuild``: CodeBuild now allows you to select how batch build statuses are sent to the source provider for a project. * api-change:``efs``: Update efs client to latest version * api-change:``kms``: Added SDK examples for ConnectCustomKeyStore, CreateCustomKeyStore, CreateKey, DeleteCustomKeyStore, DescribeCustomKeyStores, DisconnectCustomKeyStore, GenerateDataKeyPair, GenerateDataKeyPairWithoutPlaintext, GetPublicKey, ReplicateKey, Sign, UpdateCustomKeyStore and Verify APIs - from version 1.21.53 * api-change:``synthetics``: CloudWatch Synthetics now enables customers to choose a customer managed AWS KMS key or an Amazon S3-managed key instead of an AWS managed key (default) for the encryption of artifacts that the canary stores in Amazon S3. CloudWatch Synthetics also supports artifact S3 location updation now. * api-change:``ssm``: When "AutoApprovable" is true for a Change Template, then specifying - -auto-approve (boolean) in Start-Change-Request-Execution will create a change request that bypasses approver review. (except for change calendar restrictions) * api-change:``apprunner``: This release contains several minor bug fixes. - from version 1.21.52 * api-change:``network-firewall``: This release adds support for strict ordering for stateful rule groups. Using strict ordering, stateful rules are evaluated in the exact order in which you provide them. * api-change:``dataexchange``: This release enables subscribers to set up automatic exports of newly published revisions using the new EventAction API. * api-change:``workmail``: This release adds support for mobile device access overrides management in Amazon WorkMail. * api-change:``account``: This release of the Account Management API enables customers to manage the alternate contacts for their AWS accounts. For more information, see https://docs.aws.amazon.com/accounts/latest/reference/accounts-welcome.html * api-change:``workspaces``: Added CreateUpdatedWorkspaceImage API to update WorkSpace images with latest software and drivers. Updated DescribeWorkspaceImages API to display if there are updates available for WorkSpace images. * api-change:``cloudcontrol``: Initial release of the SDK for AWS Cloud Control API * api-change:``macie2``: Amazon S3 bucket metadata now indicates whether an error or a bucket's permissions settings prevented Amazon Macie from retrieving data about the bucket or the bucket's objects. - from version 1.21.51 * api-change:``lambda``: Adds support for Lambda functions powered by AWS Graviton2 processors. Customers can now select the CPU architecture for their functions. * api-change:``sesv2``: This release includes the ability to use 2048 bits RSA key pairs for DKIM in SES, either with Easy DKIM or Bring Your Own DKIM. * api-change:``amp``: This release adds alert manager and rule group namespace APIs - from version 1.21.50 * api-change:``transfer``: Added changes for managed workflows feature APIs. * api-change:``imagebuilder``: Fix description for AmiDistributionConfiguration Name property, which actually refers to the output AMI name. Also updated for consistent terminology to use "base" image, and another update to fix description text. - from version 1.21.49 * api-change:``appintegrations``: The Amazon AppIntegrations service enables you to configure and reuse connections to external applications. * api-change:``wisdom``: Released Amazon Connect Wisdom, a feature of Amazon Connect, which provides real-time recommendations and search functionality in general availability (GA). For more information, see https://docs.aws.amazon.com/wisdom/latest/APIReference/Welcome.html. * api-change:``pinpoint``: Added support for journey with contact center activity * api-change:``voice-id``: Released the Amazon Voice ID SDK, for usage with the Amazon Connect Voice ID feature released for Amazon Connect. * api-change:``connect``: This release updates a set of APIs: CreateIntegrationAssociation, ListIntegrationAssociations, CreateUseCase, and StartOutboundVoiceContact. You can use it to create integrations with Amazon Pinpoint for the Amazon Connect Campaigns use case, Amazon Connect Voice ID, and Amazon Connect Wisdom. * api-change:``elbv2``: Update elbv2 client to latest version - from version 1.21.48 * api-change:``license-manager``: AWS License Manager now allows customers to get the LicenseArn in the Checkout API Response. * api-change:``ec2``: DescribeInstances now returns Platform Details, Usage Operation, and Usage Operation Update Time. - from version 1.21.47 * api-change:``mediaconvert``: This release adds style and positioning support for caption or subtitle burn-in from rich text sources such as TTML. This release also introduces configurable image-based trick play track generation. * api-change:``appsync``: Documented the new OpenSearchServiceDataSourceConfig data type. Added deprecation notes to the ElasticsearchDataSourceConfig data type. * api-change:``ssm``: Added cutoff behavior support for preventing new task invocations from starting when the maintenance window cutoff time is reached. - from version 1.21.46 * api-change:``imagebuilder``: This feature adds support for specifying GP3 volume throughput and configuring instance metadata options for instances launched by EC2 Image Builder. * api-change:``wafv2``: Added the regex match rule statement, for matching web requests against a single regular expression. * api-change:``mediatailor``: This release adds support to configure logs for playback configuration. * api-change:``lexv2-models``: Update lexv2-models client to latest version * api-change:``iam``: Added changes to OIDC API about not using port numbers in the URL. * api-change:``license-manager``: AWS License Manager now allows customers to change their Windows Server or SQL license types from Bring-Your-Own-License (BYOL) to License Included or vice-versa (using the customer's media). * api-change:``mediapackage-vod``: MediaPackage VOD will now return the current processing statuses of an asset's endpoints. The status can be QUEUED, PROCESSING, PLAYABLE, or FAILED. - from version 1.21.45 * api-change:``comprehend``: Amazon Comprehend now supports versioning of custom models, improved training with ONE_DOC_PER_FILE text documents for custom entity recognition, ability to provide specific test sets during training, and live migration to new model endpoints. * api-change:``iot``: This release adds support for verifying, viewing and filtering AWS IoT Device Defender detect violations with four verification states. * api-change:``ecr``: This release adds additional support for repository replication * api-change:``ec2``: This update adds support for downloading configuration templates using new APIs (GetVpnConnectionDeviceTypes and GetVpnConnectionDeviceSampleConfiguration) and Internet Key Exchange version 2 (IKEv2) parameters for many popular CGW devices. - from version 1.21.44 * api-change:``opensearch``: This release adds an optional parameter in the ListDomainNames API to filter domains based on the engine type (OpenSearch/Elasticsearch). * api-change:``es``: This release adds an optional parameter in the ListDomainNames API to filter domains based on the engine type (OpenSearch/Elasticsearch). * api-change:``dms``: Optional flag force-planned-failover added to reboot-replication-instance API call. This flag can be used to test a planned failover scenario used during some maintenance operations. - from version 1.21.43 * api-change:``kafkaconnect``: This is the initial SDK release for Amazon Managed Streaming for Apache Kafka Connect (MSK Connect). * api-change:``macie2``: This release adds support for specifying which managed data identifiers are used by a classification job, and retrieving a list of managed data identifiers that are available. * api-change:``robomaker``: Adding support to create container based Robot and Simulation applications by introducing an environment field * api-change:``s3``: Add support for access point arn filtering in S3 CW Request Metrics * api-change:``transcribe``: This release adds support for subtitling with Amazon Transcribe batch jobs. * api-change:``sagemaker``: Add API for users to retry a failed pipeline execution or resume a stopped one. * api-change:``pinpoint``: This SDK release adds a new feature for Pinpoint campaigns, in-app messaging. - from version 1.21.42 * api-change:``sagemaker``: This release adds support for "Project Search" * api-change:``ec2``: This release adds support for vt1 3xlarge, 6xlarge and 24xlarge instances powered by Xilinx Alveo U30 Media Accelerators for video transcoding workloads * api-change:``wafv2``: This release adds support for including rate based rules in a rule group. * api-change:``chime``: Adds support for SipHeaders parameter for CreateSipMediaApplicationCall. * api-change:``comprehend``: Amazon Comprehend now allows you to train and run PDF and Word documents for custom entity recognition. With PDF and Word formats, you can extract information from documents containing headers, lists and tables. - from version 1.21.41 * api-change:``iot``: AWS IoT Rules Engine adds OpenSearch action. The OpenSearch rule action lets you stream data from IoT sensors and applications to Amazon OpenSearch Service which is a successor to Amazon Elasticsearch Service. * api-change:``ec2``: Adds support for T3 instances on Amazon EC2 Dedicated Hosts. * enhancement:Tagged Unions: Introducing support for the `union` trait on structures in request and response objects. - from version 1.21.40 * api-change:``cloudformation``: Doc only update for CloudFormation that fixes several customer-reported issues. * api-change:``rds``: This release adds support for providing a custom timeout value for finding a scaling point during autoscaling in Aurora Serverless v1. * api-change:``ecr``: This release updates terminology around KMS keys. * api-change:``sagemaker``: This release adds support for "Lifecycle Configurations" to SageMaker Studio * api-change:``transcribe``: This release adds an API option for startTranscriptionJob and startMedicalTranscriptionJob that allows the user to specify encryption context key value pairs for batch jobs. * api-change:``quicksight``: Add new data source type for Amazon OpenSearch (successor to Amazon ElasticSearch). - from version 1.21.39 * api-change:``emr``: Update emr client to latest version * api-change:``codeguru-reviewer``: The Amazon CodeGuru Reviewer API now includes the RuleMetadata data object and a Severity attribute on a RecommendationSummary object. A RuleMetadata object contains information about a rule that generates a recommendation. Severity indicates how severe the issue associated with a recommendation is. * api-change:``lookoutequipment``: Added OffCondition parameter to CreateModel API - from version 1.21.38 * api-change:``opensearch``: Updated Configuration APIs for Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) * api-change:``ram``: A minor text-only update that fixes several customer issues. * api-change:``kafka``: Amazon MSK has added a new API that allows you to update the encrypting and authentication settings for an existing cluster. - from version 1.21.37 * api-change:``elasticache``: Doc only update for ElastiCache * api-change:``amp``: This release adds tagging support for Amazon Managed Service for Prometheus workspace. * api-change:``forecast``: Predictor creation now supports selecting an accuracy metric to optimize in AutoML and hyperparameter optimization. This release adds additional accuracy metrics for predictors - AverageWeightedQuantileLoss, MAPE and MASE. * api-change:``xray``: Updated references to AWS KMS keys and customer managed keys to reflect current terminology. * api-change:``ssm-contacts``: Added SDK examples for SSM-Contacts. * api-change:``mediapackage``: SPEKE v2 support for live CMAF packaging type. SPEKE v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, it supports live DASH currently. * api-change:``eks``: Adding RegisterCluster and DeregisterCluster operations, to support connecting external clusters to EKS. - from version 1.21.36 * api-change:``chime-sdk-identity``: Documentation updates for Chime * api-change:``chime-sdk-messaging``: Documentation updates for Chime * api-change:``outposts``: This release adds a new API CreateOrder. * api-change:``frauddetector``: Enhanced GetEventPrediction API response to include risk scores from imported SageMaker models * api-change:``codeguru-reviewer``: Added support for CodeInconsistencies detectors - from version 1.21.35 * api-change:``acm-pca``: Private Certificate Authority Service now allows customers to enable an online certificate status protocol (OCSP) responder service on their private certificate authorities. Customers can also optionally configure a custom CNAME for their OCSP responder. * api-change:``s3control``: S3 Multi-Region Access Points provide a single global endpoint to access a data set that spans multiple S3 buckets in different AWS Regions. * api-change:``accessanalyzer``: Updates service API, documentation, and paginators to support multi-region access points from Amazon S3. * api-change:``schemas``: This update include the support for Schema Discoverer to discover the events sent to the bus from another account. The feature will be enabled by default when discoverer is created or updated but can also be opt-in or opt-out by specifying the value for crossAccount. * api-change:``securityhub``: New ASFF Resources: AwsAutoScalingLaunchConfiguration, AwsEc2VpnConnection, AwsEcrContainerImage. Added KeyRotationStatus to AwsKmsKey. Added AccessControlList, BucketLoggingConfiguration,BucketNotificationConfiguration and BucketNotificationConfiguration to AwsS3Bucket. * enhancement:s3: Added support for S3 Multi-Region Access Points * api-change:``efs``: Update efs client to latest version * api-change:``transfer``: AWS Transfer Family introduces Managed Workflows for creating, executing, monitoring, and standardizing post file transfer processing * api-change:``ebs``: Documentation updates for Amazon EBS direct APIs. * api-change:``quicksight``: This release adds support for referencing parent datasets as sources in a child dataset. * api-change:``fsx``: Announcing Amazon FSx for NetApp ONTAP, a new service that provides fully managed shared storage in the AWS Cloud with the data access and management capabilities of ONTAP. * enhancement:Signers: Added support for Sigv4a Signing Algorithm * api-change:``lex-models``: Lex now supports Korean (ko-KR) locale. - from version 1.21.34 * api-change:``ec2``: Added LaunchTemplate support for the IMDS IPv6 endpoint * api-change:``cloudtrail``: Documentation updates for CloudTrail * api-change:``mediatailor``: This release adds support for wall clock programs in LINEAR channels. * api-change:``config``: Documentation updates for config * api-change:``servicecatalog-appregistry``: Introduction of GetAssociatedResource API and GetApplication response extension for Resource Groups support. ==== python-pyOpenSSL ==== Version update (20.0.1 -> 21.0.0) - Add check_inv_ALPN_lists.patch checks for invalid ALPN lists before calling OpenSSL (gh#pyca/pyopenssl#1056). - update to 21.0.0: - The minimum ``cryptography`` version is now 3.3. - Drop support for Python 3.5 - Raise an error when an invalid ALPN value is set. - Added ``OpenSSL.SSL.Context.set_min_proto_version`` and ``OpenSSL.SSL.Context.set_max_proto_version`` - Updated ``to_cryptography`` and ``from_cryptography`` methods to support an upcoming release of ``cryptography`` without raising deprecation warnings. ==== python-urllib3 ==== Version update (1.26.6 -> 1.26.7) - update to 1.26.7: * Fixed a bug with HTTPS hostname verification involving IP addresses and lack of SNI. * Fixed a bug where IPv6 braces weren't stripped during certificate hostname matching. ==== rav1e ==== Version update (0.4.1 -> 0.5.0) - Update to version 0.5.0 * https://github.com/xiph/rav1e/releases/tag/v0.5.0 - Removed f553646d70fba8e265d436103a73520eb7adec8c.patch ==== rpm ==== Subpackages: librpmbuild9 - Add support for using a thread pool for threaded zstd compression new patch: zstdpool.diff - Switch to threaded zstd compression with a pool of 8 threads new patch: zstdthreaded.diff ==== syntax-highlighting ==== Subpackages: libKF5SyntaxHighlighting5 libKF5SyntaxHighlighting5-lang - Add the optional QtQuick dependency. (boo#1192170) ==== yast2-trans ==== Version update (84.87.20211022.37a68b8306 -> 84.87.20211030.c198d302b1) Subpackages: yast2-trans-af yast2-trans-ar yast2-trans-bg yast2-trans-bn yast2-trans-bs yast2-trans-ca yast2-trans-cs yast2-trans-cy yast2-trans-da yast2-trans-de yast2-trans-el yast2-trans-en_GB yast2-trans-es yast2-trans-et yast2-trans-fa yast2-trans-fi yast2-trans-fr yast2-trans-gl yast2-trans-gu yast2-trans-hi yast2-trans-hr yast2-trans-hu yast2-trans-id yast2-trans-it yast2-trans-ja yast2-trans-jv yast2-trans-ka yast2-trans-km yast2-trans-ko yast2-trans-lo yast2-trans-lt yast2-trans-mk yast2-trans-mr yast2-trans-nb yast2-trans-nl yast2-trans-pa yast2-trans-pl yast2-trans-pt yast2-trans-pt_BR yast2-trans-ro yast2-trans-ru yast2-trans-si yast2-trans-sk yast2-trans-sl yast2-trans-sr yast2-trans-sv yast2-trans-ta yast2-trans-th yast2-trans-tr yast2-trans-uk yast2-trans-vi yast2-trans-wa yast2-trans-xh yast2-trans-zh_CN yast2-trans-zh_TW yast2-trans-zu - Update to version 84.87.20211030.c198d302b1: * Translated using Weblate (Korean) * Translated using Weblate (Korean) * Translated using Weblate (Korean) * Translated using Weblate (Korean) * New POT for text domain 'installation'. * New POT for text domain 'autoinst'. * New POT for text domain 's390'.