Packages changed:
  MicroOS-release (20260818 -> 20260819)
  flatpak (1.18.0 -> 1.18.1)
  glibmm2_4 (2.66.9 -> 2.66.10)
  harfbuzz (14.3.0 -> 14.3.1)
  librsvg
  libxmlb
  microos-tools (4.0+git28 -> 4.0+git29)
  ncurses (6.6.20260808 -> 6.6.20260815)
  pango (1.58.0 -> 1.58.2)
  patterns-microos
  qt6-tools

=== Details ===

==== MicroOS-release ====
Version update (20260818 -> 20260819)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== flatpak ====
Version update (1.18.0 -> 1.18.1)
Subpackages: flatpak-selinux libflatpak0 system-user-flatpak

- Update to version 1.18.1:
  + Security fixes:
  - Fix sandbox escape with full host filesystem read/write
    access via symlink attack on app data directories
    (GHSA-8688-9x26-hhxj)
  - Fix local root privilege escalation via revokefs symlink path
    traversal and commit tampering (GHSA-qrwq-7qwx-q9rp)
  - Fix arbitrary root write via symlink and path traversal in
    extra-data extraction (GHSA-fqx6-vh4p-42cg)
  - Fix arbitrary root write via path traversal in `flatpak
    build-init` (GHSA-8qxj-x646-phcm)
  - Fix arbitrary host file read via hardlink path traversal in
    OCI archive extraction (GHSA-9rww-v4mm-x4jg)
  - Fix path traversal via unvalidated architecture parameter in
    DeployAppstream (GHSA-v2gw-v9h5-9q4x)
  - Fix buffer overflow in OCI delta stream path names on 32-bit
    systems (GHSA-jr92-2v97-wgvc)
  - Fix fixed-filename writes to arbitrary locations via symlink
    attack on .ld.so (GHSA-99wv-m8rp-g58x)
  - Fix extension metadata path traversal allowing host
    filesystem probing and unintended mount locations
    (GHSA-w69g-9x8j-7p8f)
  - Fix anti-downgrade bypass allowing unprivileged users to
    downgrade system apps (GHSA-q4gr-vc25-57m5)
  + Bug fixes:
  - Fix portal flatpak-spawn environment handling regression
  - Fix negated permission strings for allow and share run
    options
  - Fix build failure when exporting metainfo releases.xml files
  - Fix crashes in the portal update monitor and OCI JSON
    handling
  - Error out if file forwarding of empty paths is attempted
  - Check OCI signatures from the mirrored repo in the system
    helper instead of fetching from the lookaside server
  - Apply TLS certs to OCI registry requests and propagate stream
    write failures to curl
  - Fix GI annotation for flatpak_instance_get_all
  - Cleanup of Bash completion
  - Numerous internal fixes for crashes, error handling, and
    hardening

==== glibmm2_4 ====
Version update (2.66.9 -> 2.66.10)

- Update to version 2.66.10:
  + Drop G_GNUC_CONST as in GLib.
  + Gio: Emblem and DBus::ActionGroup: Don't derive gtkmm__Gxxx
    types. The underlying C classes are final types since GLib
    2.89.2.
  + Meson build: Use Meson's pkgconfig module instead of using the
  * .pc.in templates.
- Update to version 2.66.9+3:
  + Gio::DBus::ActionGroup: Improve the test whether
    GDBusActionGroup is final
  + Drop G_GNUC_CONST as in glib
  + Gio: Emblem and DBus::ActionGroup: Don't derive gtkmm__Gxxx
    types
- Use source service to generate tarball.
- Add mm-common and perl-XML-Parser BuildRequries: Needed now that
  we are using a git checkout.
- Pass maintainer-mode=true to meson setup, needed since we are
  using a git checkout.

==== harfbuzz ====
Version update (14.3.0 -> 14.3.1)
Subpackages: libharfbuzz-gobject0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0

- Update to version 14.3.1:
  + Various fuzzing and build fixes.
  + Various subsetting fixes.
  + Fix AAT insertion at the end of the text.
  + Fix various rendering bugs in the experimental GPU library.
  + WASM shaper code can now read the user features.

==== librsvg ====

- Disable librsvg --test reference, failing with new pango 1.58.2

==== libxmlb ====

- Add libxmlb-tests subpackage with installed tests
  for gnome-desktop-testing-runner

==== microos-tools ====
Version update (4.0+git28 -> 4.0+git29)
Subpackages: selinux-autorelabel zypp-excludedocs zypp-no-multiversion zypp-no-recommends zypp-single-rpmtrans

- Update to version 4.0+git29:
  * Move man-online to an own sub-package

==== ncurses ====
Version update (6.6.20260808 -> 6.6.20260815)
Subpackages: libncurses6 ncurses-utils terminfo-base

- Add ncurses patch 20260815
  + improve tic warnings for paired capabilities, including ich/ich1.
  + use xterm+tmux2 in xterm+nofkeys to match xterm patch #407 -TD
  + use ST in xterm+osc104 -TD
  + use ansi+sc -TD
  + modify test/dup_field.c to also demonstrate link_field().
  + work around use of ^D for exiting test/ncurses except in the form
    test which uses ^D for movement (patch by Branden Robinson).
  + improve appearance of test/dup_field and test/move_field, adding a
    help-hint (patches by Branden Robinson).
  + improve formatting/style of manpages (patches by Branden Robinson).
  + add limit-checks in lib_screen.c and lib_ins_wch.c in case a 2-cell
    character is added at the right-margin (report by Miroslav Lichvar).
  + improve limit-check for extended names in _nc_read_termtype
    (report/patch by Yeo Jooho).
  + improve description of init_extended_color in man page (patch by
    Andrew Burgess).
  + modify test/Makefile.in to fix "make check" when ncurses is built in
    a non-source tree (report by Bruno Haible).

==== pango ====
Version update (1.58.0 -> 1.58.2)
Subpackages: libpango-1_0-0 typelib-1_0-Pango-1_0

- Update to version 1.58.2:
  + Require harfbuzz 11
  + Require glib 2.88
  + CoreText:
  - Support variations
  - Support font features from descriptions
  + Renderer: Keep over/under/through lines in sync
  + Fixes for undefined behavior

==== patterns-microos ====
Subpackages: patterns-microos-alt_onlyDVD patterns-microos-base patterns-microos-base-packagekit patterns-microos-base-zypper patterns-microos-basesystem patterns-microos-cloud patterns-microos-cockpit patterns-microos-defaults patterns-microos-desktop-common patterns-microos-desktop-kde patterns-microos-ima_evm patterns-microos-onlyDVD patterns-microos-ra_agent patterns-microos-ra_verifier patterns-microos-selinux patterns-microos-sssd_ldap

- Remove patterns-microos-hardware, got obsoleted by
  patterns-base-hardware

==== qt6-tools ====
Subpackages: libQt6UiTools6 qt6-tools-qdbus

- Add patch to make documentation more reproducible (QTBUG-145807):
  * 0001-QDoc-Use-deterministic-tiebreaker-for-shared-notifie.patch