Packages changed:
  apparmor
  cantarell-fonts (0.301 -> 0.303.1)
  fwupd (1.6.4 -> 1.7.3)
  gnome-shell
  harfbuzz (3.1.1 -> 3.2.0)
  keylime
  libapparmor
  libinput (1.19.2 -> 1.19.3)
  libqt5-qtwayland (5.15.2+kde34 -> 5.15.2+kde37)
  librsvg (2.52.4 -> 2.52.5)
  mutter
  openvpn (2.5.4 -> 2.5.5)
  suse-module-tools (16.0.16 -> 16.0.17)
  xxhash (0.8.0 -> 0.8.1)
  yast2 (4.4.30 -> 4.4.31)

=== Details ===

==== apparmor ====
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor

- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update

==== cantarell-fonts ====
Version update (0.301 -> 0.303.1)

- Update to version 0.303.1:
  + Add missing font.
- Changes from version 0.303:
  + Actually update the version number in the fonts.
- Changes from version 0.302:
  + Maintenance release: Make the variable font the default, only
    build statics on demand. Also build two packages with variable
    and static fonts. Packagers can chose the statics package if
    they run into problems with the variable font, but you should
    probably not install both at the same time.
  + Amended OS/2 super- and subscript values so that new Pango can
    use them properly.
  + Update production names for Jacute, bulletoperator,
    commercialMinusSign, divisionslash, notidentical,
    ringcomb_acutecomb and ringcomb_acutecomb.case.
  + Updated appstream translations.

==== fwupd ====
Version update (1.6.4 -> 1.7.3)
Subpackages: libfwupd2 typelib-1_0-Fwupd-2_0

- Update to version 1.7.3:
  * This release adds the following features:
    + Add a sync-bkc subcommand to ensure a known set of firmware
    versions
    + Add FuArchiveFirmware for plugins that use archives as
    firmware files
    + Add quirkable page and sector size properties to FuCfiDevice
    + Make Upower and powerd support optional
  * This release fixes the following bugs:
    + Add some sanity checks to the elanfp firmware parser
    + Add the CFI JEDEC instance ID if using the vendor-extended
    version
    + Check the value range when parsing the quirk keys
    + Do not wait for a USB runtime if will-disappear is set
    + Enable the MOTD integration when using pam_motd
    + Fix DFU regression when merging the FuProgress work
    + Fix running the tests when fwupd is not installed
    + Fix the GLib error message when inotify max_user_instances is
    too low
    + Fix VLI VL820Q7 detection to fix flashing of the Lenovo TBT3
    dock
    + Ignore a USB error for STM32 attach when the device goes away
    + Make the HSI tests optional for embedded targets
    + Make the plugin startup order deterministic
    + Set Thunderbolt ports offline on host controller
    + Use endian-safe version functions when enumerating Logitech
    hardware
    + Use lowercase flag names in intel-spi to prevent a runtime
    warning
    + Wait for the System76 Launch device to come back from DFU
    mode
  * This release adds support for the following hardware:
    + Most Nordic Semiconductor nRF Secure devices
- Fix build when not on TW: add BR protobuf-c
- Fix build issue in spec
  (references to libfwupdplugin2 -> libfwupdplugin5)

==== gnome-shell ====
Subpackages: gnome-shell-calendar

- Add gnome-shell-exit-crash-workaround.patch:
  + Backport from Ubuntu, This is a workaround to maintain a clean
    environment for gnome-shell and particularly JavaScript/GJS to
    shutdown without crashing.
  + Proper fixes are still pending
    https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/1759
    https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/648
    (bsc#1190878 glgo#GNOME/gnome-shell#4344).

==== harfbuzz ====
Version update (3.1.1 -> 3.2.0)
Subpackages: libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 typelib-1_0-HarfBuzz-0_0

- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker
- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes

==== keylime ====
Subpackages: keylime-agent keylime-config keylime-firewalld keylime-registrar keylime-tpm_cert_store keylime-verifier python38-keylime

- Fix keylime configuration file attributes
- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default

==== libapparmor ====

- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update

==== libinput ====
Version update (1.19.2 -> 1.19.3)

- Update to release 1.19.3
  * quirks: add ModelBouncingKeys for A4Tech X-710BK Mouse
  * quirks: Dell 15R touchpad settings for firmware v3
  * quirks: change touchpad pressure on Lenovo Yoga 2 Pro
  * gestures: cancel hold gestures on thumb detection

==== libqt5-qtwayland ====
Version update (5.15.2+kde34 -> 5.15.2+kde37)
Subpackages: libQt5WaylandClient5 libQt5WaylandCompositor5

- Update to version 5.15.2+kde37:
  * Fix backport, context destruction was omitted
  * Client: do not empty clipboard when a new popup/window is opened
  * Wayland client: use wl_keyboard to determine active state
- Add patch to fix crashes triggered by unintentional actions when
  showing a window (kde#421700):
  * 0001-Client-Avoid-processing-of-events-when-showing-windo.patch

==== librsvg ====
Version update (2.52.4 -> 2.52.5)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2 rsvg-thumbnailer typelib-1_0-Rsvg-2_0

- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.

==== mutter ====

- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).

==== openvpn ====
Version update (2.5.4 -> 2.5.5)

- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name

==== suse-module-tools ====
Version update (16.0.16 -> 16.0.17)

- Update to version 16.0.17:
  * 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)
  * install some modprobe.d files only for relevant architectures
    (apm_bios, sonypi, toshiba, legacy rtc) (bsc#1192974)

==== xxhash ====
Version update (0.8.0 -> 0.8.1)

- fix racy check execution
- update to 0.8.1:
  * perf : much improved performance for XXH3 streaming variants, notably on
    gcc and msvc
  * perf : improved XXH64 speed and latency on small inputs
  * perf : small XXH32 speed and latency improvement on small inputs of random
    size
  * perf : minor stack usage improvement for XXH32 and XXH64
  * api  : new experimental variants XXH3_*_withSecretandSeed()
  * api  : update XXH3_generateSecret(), can no generate secret of any size (>=
    XXH3_SECRET_SIZE_MIN)
  * cli  : xxhsum can now generate and check XXH3 checksums, using command `-H3`
  * build: can build xxhash without XXH3, with new build macro XXH_NO_XXH3
  * build: fix xxh_x86dispatch build with MSVC, by @apankrat
  * build: XXH_INLINE_ALL can always be used safely, even after XXH_NAMESPACE
    or a previous XXH_INLINE_ALL
  * build: improved PPC64LE vector support
  * install: fix pkgconfig
  * install: compatibility with Haiku
  * doc  : code comments made compatible with doxygen
  * misc : XXH_ACCEPT_NULL_INPUT_POINTER is no longer necessary, all functions
    can accept NULL input pointers, as long as size == 0
  * misc : complete refactor of CI tests on Github Actions, offering much
    larger coverage
  * misc : xxhsum code base split into multiple specialized units, within
    directory cli/
- add 836f4e735cf368542f14005e41d2f84ec29dfd60.patch (fix manpage installation)

==== yast2 ====
Version update (4.4.30 -> 4.4.31)

- Do not reinitialize the packaging system during offline
  upgrade (bsc#1193784 and bsc#1192437).
- 4.4.31