<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4">
<package pkgid="7eeefc77dbf84918a79ca8436d32f1c6690d9c9d8b2c4e58b7062b609ba209b3" name="candlepin" arch="noarch">
  <version epoch="0" ver="5.0.2" rel="1.el10"/>
  <changelog author="candlepin-bot 4.7.1-1" date="1758715200">- Add new translations using Weblate (noreply@weblate.org)
- Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jaxb from 4.0.5 to 4.0.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1065: Added bulk migration event (joshmalbrecht@gmail.com)
- Bump org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.13.4 to 3.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.7 to 42.7.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.bouncycastle:bcprov-jdk18on from 1.81 to 1.82
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.5 to 4.9.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.4 to 4.9.5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.5 to 3.5.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.google.code.gson:gson from 2.13.1 to 2.13.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.2-1" date="1760616000">- Add new translations using Weblate (noreply@weblate.org)
- CHAINSAW-474: Updated Refresher to use a single transaction
  (joshmalbrecht@gmail.com)
- Bump org.sonarqube from 6.3.1.5724 to 7.0.0.6105
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.7 to 12.1.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.12 to 11.0.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.3 to 12.1.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.0 to 5.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Updated setConsumersEnvironments to only update appropriate consumers
  (joshmalbrecht@gmail.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.11 to 11.0.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.1.0 to 5.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed malformed $ref in getConsumer operation (thsimmon@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.14.0 to 3.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Documented 410 gone response for getConsumer API (thsimmon@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 5.13.4 to 6.0.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 11.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.52.0 to 0.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.3-1" date="1766145600">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1096: Emit event when bulk consumers are set to environments
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1116: Updated startSessions to not lose sessions
  (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Extra logging during anonymous org claim/migration (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.14 to 11.0.15
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.8.0 to 1.8.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.8 to 12.1.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.1.6134 to 7.1.0.6387
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1108: Improved functionality &amp; handling of deleted consumers
  (crog@redhat.com)
- Bump okhttp3 from 5.3.1 to 5.3.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.3.0 to 5.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1109: Updated anonymous consumer certificate expiration
  (joshmalbrecht@gmail.com)
- CHAINSAW-639: Added maven publication for BOM (thsimmon@redhat.com)
- CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.13 to 11.0.14
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Downgraded Quartz scheduler to 2.5.0 (crog@redhat.com)
- Bump commons-io:commons-io from 2.20.0 to 2.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.1 to 5.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.43.0 to 2.44.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.0 to 6.0.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 2.20.0 to 2.20.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.quartz-scheduler:quartz from 2.5.0 to 2.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.7 to 0.2.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.0.6105 to 7.0.1.6134
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.7 to 4.9.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.42.0 to 2.43.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.4-1" date="1770897600">- Add new translations using Weblate (hosted@weblate.org)
- Bump artemis from 2.50.0 to 2.51.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1136: Strip upstreamConsumer from consumer owner response
  (sbakaj@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1024: Added cleanup for inactive anonymous cloud consumers
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.3.0 to 9.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.1 to 3.16.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove dedicated Gradle wrapper update action (sbakaj@redhat.com)
- CANDLEPIN-1123: Added combined_reporting capability (sbakaj@redhat.com)
- CANDLEPIN-1132: Fixed intermittently failing content access spec tests
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.15 to 11.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.2.1 to 9.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.44.0 to 2.50.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new token for upgrade gradle GH action (nmoumoul@redhat.com)
- Bump jackson from 3.0.3 to 3.0.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Do not run nebula lint on every gradle command (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Disabled JRE provisioning for Soanr action (sbakaj@redhat.com)
- CANDLEPIN-1019: Upgraded openapi-generator to 7.19.0
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1121: Update from Jackson 2 to Jackson 3 (nmoumoul@redhat.com)
- Increase vagrant vm resources (nmoumoul@redhat.com)
- CANDLEPIN-1115: Updated org.quartz-scheduler:quartz to version 2.5.2
  (joshmalbrecht@gmail.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.0 to 3.15.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add link to the CANDLEPIN jira issue tracker (nmoumoul@redhat.com)
- CANDLEPIN-1107: Updated checkstyle to 12.3.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1046: Updated Gradle to 9.2.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1101: Updated contributing guide with CI and Javadoc details
  (sbakaj@redhat.com)
- Remove EL8 support &amp; upgrade tomcat (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.1.9 to 12.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1113: Prevent ActiveMQ message buffering (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Updated translated message to be parameterized (joshmalbrecht@gmail.com)
- Bump org.junit:junit-bom from 6.0.1 to 6.0.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- Change Java version to 17 in eclipse setting (sbakaj@redhat.com)
- Removed database ports from CP container image (sbakaj@redhat.com)
- Bump org.mozilla:rhino from 1.8.1 to 1.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.14.1 to 3.15.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove candlepin-4.3-HOTFIX branch from i18n job (nmoumoul@redhat.com)
- Added remote debugging JVM args to dev container (joshmalbrecht@gmail.com)</changelog>
  <changelog author="candlepin-bot 4.7.5-1" date="1772712000">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.sonarqube from 7.2.2.6593 to 7.2.3.7755
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.51.0 to 2.52.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1149: Added non-unique index to deleted consumer's UUID
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1147: Force upgrade mchance-c3p0 &amp; mchange-commons-java
  (nmoumoul@redhat.com)
- Bump jackson from 3.0.4 to 3.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.2 to 6.0.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.19.0 to 7.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.9.0 to 1.9.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.9 to 42.7.10
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.8.0-1" date="1776081600">- Add new translations using Weblate (hosted@weblate.org)
- Renamed the ConsumerClient.exportCertificates utility function
  (crog@redhat.com)
- CANDLEPIN-1080: Updated manifest import signature validation logic
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1180: Fixed signature validation error in multi-cert envs
  (crog@redhat.com)
- CANDLEPIN-1075: Updated AnonCertGenerator to be scheme-aware
  (crog@redhat.com)
- CANDLEPIN-1179: Fixed bug allowing non-positive cert serials
  (crog@redhat.com)
- CANDLEPIN-1158: Bump Java requirement from 17 to 25 for RPM
  (nmoumoul@redhat.com)
- Added scheme validation to BouncyCastleCryptoManager (crog@redhat.com)
- CANDLEPIN-1173: Moved signature.json into consumer_export.zip
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1170: Added spec tests for scheme-aware consumer cert generation
  (crog@redhat.com)
- CANDLEPIN-1169: Added scheme negotiation feature flag (crog@redhat.com)
- CANDLEPIN-1079: Updated manifest export signature creation
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1159: Bump release container to Java 25 (sbakaj@redhat.com)
- CANDLEPIN-1076: Added crypto capabilities ueber cert creation
  (crog@redhat.com)
- Fixed ML-DSA algorithm names in Candlepin config template (crog@redhat.com)
- CANDLEPIN-1156: Updated UeberCertificateGenerator to be scheme aware
  (ceiu@cericlabs.com)
- CANDLEPIN-1078: Added consumer crypto capabilities to the API
  (crog@redhat.com)
- CANDLEPIN-1152: Setup tomcat-native/APR with ML-DSA+RSA on Java 25
  (nmoumoul@redhat.com)
- CANDLEPIN-1155: Updated entitlement cert generator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1078: Added support for storing consumer crypto capabilities
  (crog@redhat.com)
- CANDLEPIN-1154: Updated SCACertificateGenerator to be scheme-aware
  (crog@redhat.com)
- Updated checked functional utility classes (crog@redhat.com)
- CANDLEPIN-1153: Updated IdentityCertificateGenerator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1135: Added crypto config for token-based auth
  (joshmalbrecht@gmail.com)
- Added legacy scheme reading tests to the SchemeReaderTest suite
  (crog@redhat.com)
- CANDLEPIN-1134: Updated KeyPairGenerator to be scheme aware (crog@redhat.com)
- CANDLEPIN-1072: Added the CryptoManager interface (crog@redhat.com)
- CANDLEPIN-1128: Added ML-DSA certificate generation (joshmalbrecht@gmail.com)
- Updated gitleaks' allowlist to include the private key test suite
  (crog@redhat.com)
- CANDLEPIN-1074: Added the SchemeReader util for reading scheme config
  (crog@redhat.com)
- CANDLEPIN-1130: Refactored PrivateKeyReader and its implementations
  (crog@redhat.com)
- Updated core configuration to support optional configuration keys
  (crog@redhat.com)
- CANDLEPIN-1073: Updated KeyPairData to include algorithm information
  (sbakaj@redhat.com)
- CANDLEPIN-1069: Added the SignatureValidator interface and implementation
  (crog@redhat.com)
- CANDLEPIN-1068: Created Signer interface (joshmalbrecht@gmail.com)
- CANDLEPIN-1071: Created X509CertificateBuilder interface
  (joshmalbrecht@gmail.com)
- Bump org.ehcache:ehcache from 3.11.1 to 3.12.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.20 to 11.0.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.0 to 3.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.9 to 0.2.10
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.20.0 to 7.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.52.0 to 2.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.18 to 11.0.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed script injection vulnerability in set_vars action (CWE-78)
  (sbakaj@redhat.com)
- Bump gradle-wrapper from 9.4.0 to 9.4.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1036: Fixed flaky VirtSpecTest test (joshmalbrecht@gmail.com)
- Added the @Singleton annotation to NoopEventSink (crog@redhat.com)
- CANDLEPIN-1163: Update for migration to Atlassian cloud jira
  (nmoumoul@redhat.com)
- Bump jaxb from 4.0.6 to 4.0.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1164: Added last checkin filtering to GET /consumers
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.22.0 to 5.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1140: Unified config using Gradle generateConfig across all
  environments (sbakaj@redhat.com)
- Add candlepin-4.7-HOTFIX branch to the i18n job (nmoumoul@redhat.com)
- Update artemis namespace to org.apache.artemis (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.3.1 to 9.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Nikos Moumoulidis &lt;nmoumoul@redhat.com&gt; 4.8.1-1" date="1777896000">- Add new translations using Weblate (hosted@weblate.org)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump actions/setup-java from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/setup-python from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/download-artifact from 5 to 8
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1161: Added crypto capabilities support to cloud reg flows
  (crog@redhat.com)
- Bump org.sonarqube from 7.2.3.7755 to 7.3.0.8198
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/upload-artifact from 4 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle/actions from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump 8BitJonny/gh-get-current-pr
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/cache from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.10 to 42.7.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1193: Fixed ML-DSA signature verification failure with BC 1.84
  (sbakaj@redhat.com)
- Bump commons-codec:commons-codec from 1.21.0 to 1.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-io:commons-io from 2.21.0 to 2.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.12.0 to 0.13.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.4.0 to 0.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Do not persist GH action bot git credentials
  (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- CANDLEPIN-1195: Added catch for EntityNotFoundException (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.1 to 3.17.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Fix i18n job (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.17.0 to 3.17.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.53.0 to 0.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1199: Removed rsa default value from change set
  (jalbrech@redhat.com)
- CANDLEPIN-1198: Fixed candlepin.ca_key_password usage (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.0 to 26.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1194: Added ML-DSA certs to dev image (jalbrech@redhat.com)
- Use version refs in libs.versions.toml for bouncycastle (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.16.0 to 3.17.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1191: Compile with Java 25 (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.2.0 to 12.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.5.3 to 26.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.1 to 3.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1172: Removed extraneous key usage from generated certs
  (crog@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.0-1" date="1781697600">- CANDLEPIN-1187: RHEL 10 RPM .spec &amp; cpsetup changes (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix intermittent failure in spec_tests.yml (nmoumoul@redhat.com)
- Bump com.mchange:c3p0 from 0.14.0 to 0.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump okhttp3 from 5.3.2 to 5.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.6.0 to 0.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.22.0 to 7.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1222: Make deploy-container parallelizable &amp; faster
  (nmoumoul@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.2 to 26.6.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.13.0 to 0.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.5.0 to 0.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.3.0.8198 to 7.3.1.8318
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1185: Use UBI 10 / OpenSSL FFM in release image
  (nmoumoul@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1215: Updated GET compliance status to return static response
  (jalbrech@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.glassfish.jaxb:jaxb-runtime from 4.0.8 to 4.0.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix debugging with containers (nmoumoul@redhat.com)
- CANDLEPIN-283: Jakarta migration and upgraded Hibernate/RESTEasy/Guice
  (jalbrech@redhat.com)
- Fixed flaky cert expiration test that failed between midnight and 1 AM
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1209: Removed EventAdapter interface (jalbrech@redhat.com)
- Bump artemis from 2.53.0 to 2.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.1 to 26.6.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.3 to 6.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.5.0 to 9.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump slf4j from 2.0.17 to 2.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1212: Updated build scripts for openapi-generator 7.22.0
  (sbakaj@redhat.com)
- CANDLEPIN-1213: Fixed flaky shouldWarnAboutInactiveSubscriptions test
  (sbakaj@redhat.com)
- CANDLEPIN-1211: Added debugging support for CP containers (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.21 to 11.0.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jaxb from 4.0.7 to 4.0.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.2.1 to 12.2.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.2 to 3.1.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add CLAUDE.md, deploy-container script &amp; overhaul documentation
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.4.1 to 9.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 5.0.1-1" date="1784721600">- Add new translations using Weblate (hosted@weblate.org)
- CANDLEPIN-1253: Fixed import bug with legacy manifests (crog@redhat.com)
- Bump actions/setup-python from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.23.0 to 7.24.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1230: Reorganized container directory structure
  (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.18.0 to 3.18.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1224: Added separate system inactivity policy for anon owners
  (jalbrech@redhat.com)
- Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.2 to 4.10.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.1 to 6.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.2.0 to 3.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.4.Final to 7.4.5.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed vagrant EL9 /var/cache/tomcat permissions (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.4 to 26.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.23 to 11.0.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1225: Unignore resteasy dependency (nmoumoul@redhat.com)
- Bump nebula.lint from 21.1.3 to 21.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.12 to 42.7.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.2.Final to 7.4.4.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.1.Final to 9.1.2.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1119: Upgraded to Hibernate 7 and Hibernate Validator 9
  (jalbrech@redhat.com)
- Make checkstyle fast &amp; add CLAUDE.md Development Rules (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.2 to 3.18.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1240: Fixed InactiveConsumerCleanerJobSpecTest flaky tests
  (jalbrech@redhat.com)
- Bump org.postgresql:postgresql from 42.7.11 to 42.7.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.54.0 to 2.55.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.0 to 6.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.6.0 to 9.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.3 to 26.6.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed an exception in CertificateUtil when using large certificates
  (crog@redhat.com)
- Restored missing logging dependency for spec tests (crog@redhat.com)
- Bump actions/cache from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35
  (49699333+dependabot[bot]@users.noreply.github.com)
- Escaped single quotes in source translation strings (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.22 to 11.0.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1229: Update docs on docker-compose for dev setup
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.5.1 to 9.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1189: Fix .dockerignore for release.Containerfile
  (nmoumoul@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.2-1" date="1785412800">- CANDLEPIN-1253: Fixed bugs with legacy manifest import under PQC
  (crog@redhat.com)
- Bump com.github.ben-manes.versions from 0.54.0 to 0.56.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.2.Final to 9.1.3.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1243: Add PomGenerator Gradle plugin (nmoumoul@redhat.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.10 to 0.2.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- Revert "CANDLEPIN-1253: Fixed import bug with legacy manifests"
  (crog@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
</package>
<package pkgid="6ae43e90c1cb1b1af8e60d3e0e9dff224e07176413ec15686634abde6d0e8b19" name="candlepin" arch="noarch">
  <version epoch="0" ver="5.0.3" rel="1.el10"/>
  <changelog author="candlepin-bot 4.7.2-1" date="1760616000">- Add new translations using Weblate (noreply@weblate.org)
- CHAINSAW-474: Updated Refresher to use a single transaction
  (joshmalbrecht@gmail.com)
- Bump org.sonarqube from 6.3.1.5724 to 7.0.0.6105
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.7 to 12.1.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.12 to 11.0.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.3 to 12.1.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.0 to 5.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Updated setConsumersEnvironments to only update appropriate consumers
  (joshmalbrecht@gmail.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.11 to 11.0.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.1.0 to 5.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed malformed $ref in getConsumer operation (thsimmon@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.14.0 to 3.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Documented 410 gone response for getConsumer API (thsimmon@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 5.13.4 to 6.0.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 11.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.52.0 to 0.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.3-1" date="1766145600">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1096: Emit event when bulk consumers are set to environments
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1116: Updated startSessions to not lose sessions
  (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Extra logging during anonymous org claim/migration (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.14 to 11.0.15
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.8.0 to 1.8.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.8 to 12.1.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.1.6134 to 7.1.0.6387
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1108: Improved functionality &amp; handling of deleted consumers
  (crog@redhat.com)
- Bump okhttp3 from 5.3.1 to 5.3.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.3.0 to 5.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1109: Updated anonymous consumer certificate expiration
  (joshmalbrecht@gmail.com)
- CHAINSAW-639: Added maven publication for BOM (thsimmon@redhat.com)
- CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.13 to 11.0.14
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Downgraded Quartz scheduler to 2.5.0 (crog@redhat.com)
- Bump commons-io:commons-io from 2.20.0 to 2.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.1 to 5.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.43.0 to 2.44.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.0 to 6.0.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 2.20.0 to 2.20.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.quartz-scheduler:quartz from 2.5.0 to 2.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.7 to 0.2.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.0.6105 to 7.0.1.6134
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.7 to 4.9.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.42.0 to 2.43.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.4-1" date="1770897600">- Add new translations using Weblate (hosted@weblate.org)
- Bump artemis from 2.50.0 to 2.51.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1136: Strip upstreamConsumer from consumer owner response
  (sbakaj@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1024: Added cleanup for inactive anonymous cloud consumers
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.3.0 to 9.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.1 to 3.16.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove dedicated Gradle wrapper update action (sbakaj@redhat.com)
- CANDLEPIN-1123: Added combined_reporting capability (sbakaj@redhat.com)
- CANDLEPIN-1132: Fixed intermittently failing content access spec tests
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.15 to 11.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.2.1 to 9.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.44.0 to 2.50.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new token for upgrade gradle GH action (nmoumoul@redhat.com)
- Bump jackson from 3.0.3 to 3.0.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Do not run nebula lint on every gradle command (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Disabled JRE provisioning for Soanr action (sbakaj@redhat.com)
- CANDLEPIN-1019: Upgraded openapi-generator to 7.19.0
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1121: Update from Jackson 2 to Jackson 3 (nmoumoul@redhat.com)
- Increase vagrant vm resources (nmoumoul@redhat.com)
- CANDLEPIN-1115: Updated org.quartz-scheduler:quartz to version 2.5.2
  (joshmalbrecht@gmail.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.0 to 3.15.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add link to the CANDLEPIN jira issue tracker (nmoumoul@redhat.com)
- CANDLEPIN-1107: Updated checkstyle to 12.3.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1046: Updated Gradle to 9.2.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1101: Updated contributing guide with CI and Javadoc details
  (sbakaj@redhat.com)
- Remove EL8 support &amp; upgrade tomcat (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.1.9 to 12.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1113: Prevent ActiveMQ message buffering (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Updated translated message to be parameterized (joshmalbrecht@gmail.com)
- Bump org.junit:junit-bom from 6.0.1 to 6.0.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- Change Java version to 17 in eclipse setting (sbakaj@redhat.com)
- Removed database ports from CP container image (sbakaj@redhat.com)
- Bump org.mozilla:rhino from 1.8.1 to 1.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.14.1 to 3.15.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove candlepin-4.3-HOTFIX branch from i18n job (nmoumoul@redhat.com)
- Added remote debugging JVM args to dev container (joshmalbrecht@gmail.com)</changelog>
  <changelog author="candlepin-bot 4.7.5-1" date="1772712000">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.sonarqube from 7.2.2.6593 to 7.2.3.7755
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.51.0 to 2.52.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1149: Added non-unique index to deleted consumer's UUID
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1147: Force upgrade mchance-c3p0 &amp; mchange-commons-java
  (nmoumoul@redhat.com)
- Bump jackson from 3.0.4 to 3.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.2 to 6.0.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.19.0 to 7.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.9.0 to 1.9.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.9 to 42.7.10
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.8.0-1" date="1776081600">- Add new translations using Weblate (hosted@weblate.org)
- Renamed the ConsumerClient.exportCertificates utility function
  (crog@redhat.com)
- CANDLEPIN-1080: Updated manifest import signature validation logic
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1180: Fixed signature validation error in multi-cert envs
  (crog@redhat.com)
- CANDLEPIN-1075: Updated AnonCertGenerator to be scheme-aware
  (crog@redhat.com)
- CANDLEPIN-1179: Fixed bug allowing non-positive cert serials
  (crog@redhat.com)
- CANDLEPIN-1158: Bump Java requirement from 17 to 25 for RPM
  (nmoumoul@redhat.com)
- Added scheme validation to BouncyCastleCryptoManager (crog@redhat.com)
- CANDLEPIN-1173: Moved signature.json into consumer_export.zip
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1170: Added spec tests for scheme-aware consumer cert generation
  (crog@redhat.com)
- CANDLEPIN-1169: Added scheme negotiation feature flag (crog@redhat.com)
- CANDLEPIN-1079: Updated manifest export signature creation
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1159: Bump release container to Java 25 (sbakaj@redhat.com)
- CANDLEPIN-1076: Added crypto capabilities ueber cert creation
  (crog@redhat.com)
- Fixed ML-DSA algorithm names in Candlepin config template (crog@redhat.com)
- CANDLEPIN-1156: Updated UeberCertificateGenerator to be scheme aware
  (ceiu@cericlabs.com)
- CANDLEPIN-1078: Added consumer crypto capabilities to the API
  (crog@redhat.com)
- CANDLEPIN-1152: Setup tomcat-native/APR with ML-DSA+RSA on Java 25
  (nmoumoul@redhat.com)
- CANDLEPIN-1155: Updated entitlement cert generator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1078: Added support for storing consumer crypto capabilities
  (crog@redhat.com)
- CANDLEPIN-1154: Updated SCACertificateGenerator to be scheme-aware
  (crog@redhat.com)
- Updated checked functional utility classes (crog@redhat.com)
- CANDLEPIN-1153: Updated IdentityCertificateGenerator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1135: Added crypto config for token-based auth
  (joshmalbrecht@gmail.com)
- Added legacy scheme reading tests to the SchemeReaderTest suite
  (crog@redhat.com)
- CANDLEPIN-1134: Updated KeyPairGenerator to be scheme aware (crog@redhat.com)
- CANDLEPIN-1072: Added the CryptoManager interface (crog@redhat.com)
- CANDLEPIN-1128: Added ML-DSA certificate generation (joshmalbrecht@gmail.com)
- Updated gitleaks' allowlist to include the private key test suite
  (crog@redhat.com)
- CANDLEPIN-1074: Added the SchemeReader util for reading scheme config
  (crog@redhat.com)
- CANDLEPIN-1130: Refactored PrivateKeyReader and its implementations
  (crog@redhat.com)
- Updated core configuration to support optional configuration keys
  (crog@redhat.com)
- CANDLEPIN-1073: Updated KeyPairData to include algorithm information
  (sbakaj@redhat.com)
- CANDLEPIN-1069: Added the SignatureValidator interface and implementation
  (crog@redhat.com)
- CANDLEPIN-1068: Created Signer interface (joshmalbrecht@gmail.com)
- CANDLEPIN-1071: Created X509CertificateBuilder interface
  (joshmalbrecht@gmail.com)
- Bump org.ehcache:ehcache from 3.11.1 to 3.12.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.20 to 11.0.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.0 to 3.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.9 to 0.2.10
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.20.0 to 7.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.52.0 to 2.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.18 to 11.0.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed script injection vulnerability in set_vars action (CWE-78)
  (sbakaj@redhat.com)
- Bump gradle-wrapper from 9.4.0 to 9.4.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1036: Fixed flaky VirtSpecTest test (joshmalbrecht@gmail.com)
- Added the @Singleton annotation to NoopEventSink (crog@redhat.com)
- CANDLEPIN-1163: Update for migration to Atlassian cloud jira
  (nmoumoul@redhat.com)
- Bump jaxb from 4.0.6 to 4.0.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1164: Added last checkin filtering to GET /consumers
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.22.0 to 5.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1140: Unified config using Gradle generateConfig across all
  environments (sbakaj@redhat.com)
- Add candlepin-4.7-HOTFIX branch to the i18n job (nmoumoul@redhat.com)
- Update artemis namespace to org.apache.artemis (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.3.1 to 9.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Nikos Moumoulidis &lt;nmoumoul@redhat.com&gt; 4.8.1-1" date="1777896000">- Add new translations using Weblate (hosted@weblate.org)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump actions/setup-java from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/setup-python from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/download-artifact from 5 to 8
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1161: Added crypto capabilities support to cloud reg flows
  (crog@redhat.com)
- Bump org.sonarqube from 7.2.3.7755 to 7.3.0.8198
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/upload-artifact from 4 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle/actions from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump 8BitJonny/gh-get-current-pr
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/cache from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.10 to 42.7.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1193: Fixed ML-DSA signature verification failure with BC 1.84
  (sbakaj@redhat.com)
- Bump commons-codec:commons-codec from 1.21.0 to 1.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-io:commons-io from 2.21.0 to 2.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.12.0 to 0.13.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.4.0 to 0.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Do not persist GH action bot git credentials
  (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- CANDLEPIN-1195: Added catch for EntityNotFoundException (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.1 to 3.17.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Fix i18n job (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.17.0 to 3.17.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.53.0 to 0.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1199: Removed rsa default value from change set
  (jalbrech@redhat.com)
- CANDLEPIN-1198: Fixed candlepin.ca_key_password usage (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.0 to 26.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1194: Added ML-DSA certs to dev image (jalbrech@redhat.com)
- Use version refs in libs.versions.toml for bouncycastle (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.16.0 to 3.17.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1191: Compile with Java 25 (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.2.0 to 12.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.5.3 to 26.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.1 to 3.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1172: Removed extraneous key usage from generated certs
  (crog@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.0-1" date="1781697600">- CANDLEPIN-1187: RHEL 10 RPM .spec &amp; cpsetup changes (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix intermittent failure in spec_tests.yml (nmoumoul@redhat.com)
- Bump com.mchange:c3p0 from 0.14.0 to 0.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump okhttp3 from 5.3.2 to 5.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.6.0 to 0.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.22.0 to 7.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1222: Make deploy-container parallelizable &amp; faster
  (nmoumoul@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.2 to 26.6.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.13.0 to 0.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.5.0 to 0.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.3.0.8198 to 7.3.1.8318
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1185: Use UBI 10 / OpenSSL FFM in release image
  (nmoumoul@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1215: Updated GET compliance status to return static response
  (jalbrech@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.glassfish.jaxb:jaxb-runtime from 4.0.8 to 4.0.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix debugging with containers (nmoumoul@redhat.com)
- CANDLEPIN-283: Jakarta migration and upgraded Hibernate/RESTEasy/Guice
  (jalbrech@redhat.com)
- Fixed flaky cert expiration test that failed between midnight and 1 AM
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1209: Removed EventAdapter interface (jalbrech@redhat.com)
- Bump artemis from 2.53.0 to 2.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.1 to 26.6.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.3 to 6.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.5.0 to 9.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump slf4j from 2.0.17 to 2.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1212: Updated build scripts for openapi-generator 7.22.0
  (sbakaj@redhat.com)
- CANDLEPIN-1213: Fixed flaky shouldWarnAboutInactiveSubscriptions test
  (sbakaj@redhat.com)
- CANDLEPIN-1211: Added debugging support for CP containers (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.21 to 11.0.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jaxb from 4.0.7 to 4.0.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.2.1 to 12.2.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.2 to 3.1.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add CLAUDE.md, deploy-container script &amp; overhaul documentation
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.4.1 to 9.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 5.0.1-1" date="1784721600">- Add new translations using Weblate (hosted@weblate.org)
- CANDLEPIN-1253: Fixed import bug with legacy manifests (crog@redhat.com)
- Bump actions/setup-python from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.23.0 to 7.24.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1230: Reorganized container directory structure
  (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.18.0 to 3.18.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1224: Added separate system inactivity policy for anon owners
  (jalbrech@redhat.com)
- Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.2 to 4.10.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.1 to 6.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.2.0 to 3.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.4.Final to 7.4.5.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed vagrant EL9 /var/cache/tomcat permissions (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.4 to 26.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.23 to 11.0.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1225: Unignore resteasy dependency (nmoumoul@redhat.com)
- Bump nebula.lint from 21.1.3 to 21.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.12 to 42.7.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.2.Final to 7.4.4.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.1.Final to 9.1.2.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1119: Upgraded to Hibernate 7 and Hibernate Validator 9
  (jalbrech@redhat.com)
- Make checkstyle fast &amp; add CLAUDE.md Development Rules (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.2 to 3.18.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1240: Fixed InactiveConsumerCleanerJobSpecTest flaky tests
  (jalbrech@redhat.com)
- Bump org.postgresql:postgresql from 42.7.11 to 42.7.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.54.0 to 2.55.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.0 to 6.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.6.0 to 9.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.3 to 26.6.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed an exception in CertificateUtil when using large certificates
  (crog@redhat.com)
- Restored missing logging dependency for spec tests (crog@redhat.com)
- Bump actions/cache from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35
  (49699333+dependabot[bot]@users.noreply.github.com)
- Escaped single quotes in source translation strings (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.22 to 11.0.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1229: Update docs on docker-compose for dev setup
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.5.1 to 9.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1189: Fix .dockerignore for release.Containerfile
  (nmoumoul@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.2-1" date="1785412800">- CANDLEPIN-1253: Fixed bugs with legacy manifest import under PQC
  (crog@redhat.com)
- Bump com.github.ben-manes.versions from 0.54.0 to 0.56.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.2.Final to 9.1.3.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1243: Add PomGenerator Gradle plugin (nmoumoul@redhat.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.10 to 0.2.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- Revert "CANDLEPIN-1253: Fixed import bug with legacy manifests"
  (crog@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 5.0.3-1" date="1786708800">- Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1263: Fixed issue when using OAuth for POST requests
  (jalbrech@redhat.com)
- Bump com.puppycrawl.tools:checkstyle from 13.9.0 to 13.10.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Enabled check-latest for Java setup in CI workflow (sbakaj@redhat.com)
- Fixed flaky upper-bound timestamp assertions in spec tests
  (sbakaj@redhat.com)
- Fixed ML-DSA client TLS handshake failures in spec test (sbakaj@redhat.com)
- Bump com.github.ben-manes.versions from 0.60.0 to 0.61.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.7.0 to 26.7.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.6.1 to 9.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.2 to 6.1.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.2.2 to 13.0.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.57.0 to 0.60.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.3.1.8318 to 7.4.0.8496
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump resteasy from 7.0.2.Final to 7.0.3.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.22.0 to 1.22.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.56.0 to 0.57.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Shortened test CN strings to fit BC 1.85 length limit (sbakaj@redhat.com)</changelog>
</package>
<package pkgid="6cc112a4b7f4e29ccbacdaeda530cc4a8090a03570b7807f7bd32660e7ba6725" name="candlepin-selinux" arch="noarch">
  <version epoch="0" ver="5.0.2" rel="1.el10"/>
  <changelog author="candlepin-bot 4.7.1-1" date="1758715200">- Add new translations using Weblate (noreply@weblate.org)
- Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jaxb from 4.0.5 to 4.0.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1065: Added bulk migration event (joshmalbrecht@gmail.com)
- Bump org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.13.4 to 3.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.7 to 42.7.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.bouncycastle:bcprov-jdk18on from 1.81 to 1.82
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.5 to 4.9.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.4 to 4.9.5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.5 to 3.5.6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.google.code.gson:gson from 2.13.1 to 2.13.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.2-1" date="1760616000">- Add new translations using Weblate (noreply@weblate.org)
- CHAINSAW-474: Updated Refresher to use a single transaction
  (joshmalbrecht@gmail.com)
- Bump org.sonarqube from 6.3.1.5724 to 7.0.0.6105
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.7 to 12.1.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.12 to 11.0.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.3 to 12.1.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.0 to 5.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Updated setConsumersEnvironments to only update appropriate consumers
  (joshmalbrecht@gmail.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.11 to 11.0.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.1.0 to 5.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed malformed $ref in getConsumer operation (thsimmon@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.14.0 to 3.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Documented 410 gone response for getConsumer API (thsimmon@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 5.13.4 to 6.0.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 11.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.52.0 to 0.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.3-1" date="1766145600">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1096: Emit event when bulk consumers are set to environments
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1116: Updated startSessions to not lose sessions
  (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Extra logging during anonymous org claim/migration (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.14 to 11.0.15
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.8.0 to 1.8.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.8 to 12.1.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.1.6134 to 7.1.0.6387
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1108: Improved functionality &amp; handling of deleted consumers
  (crog@redhat.com)
- Bump okhttp3 from 5.3.1 to 5.3.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.3.0 to 5.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1109: Updated anonymous consumer certificate expiration
  (joshmalbrecht@gmail.com)
- CHAINSAW-639: Added maven publication for BOM (thsimmon@redhat.com)
- CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.13 to 11.0.14
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Downgraded Quartz scheduler to 2.5.0 (crog@redhat.com)
- Bump commons-io:commons-io from 2.20.0 to 2.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.1 to 5.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.43.0 to 2.44.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.0 to 6.0.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 2.20.0 to 2.20.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.quartz-scheduler:quartz from 2.5.0 to 2.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.7 to 0.2.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.0.6105 to 7.0.1.6134
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.7 to 4.9.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.42.0 to 2.43.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.4-1" date="1770897600">- Add new translations using Weblate (hosted@weblate.org)
- Bump artemis from 2.50.0 to 2.51.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1136: Strip upstreamConsumer from consumer owner response
  (sbakaj@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1024: Added cleanup for inactive anonymous cloud consumers
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.3.0 to 9.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.1 to 3.16.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove dedicated Gradle wrapper update action (sbakaj@redhat.com)
- CANDLEPIN-1123: Added combined_reporting capability (sbakaj@redhat.com)
- CANDLEPIN-1132: Fixed intermittently failing content access spec tests
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.15 to 11.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.2.1 to 9.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.44.0 to 2.50.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new token for upgrade gradle GH action (nmoumoul@redhat.com)
- Bump jackson from 3.0.3 to 3.0.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Do not run nebula lint on every gradle command (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Disabled JRE provisioning for Soanr action (sbakaj@redhat.com)
- CANDLEPIN-1019: Upgraded openapi-generator to 7.19.0
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1121: Update from Jackson 2 to Jackson 3 (nmoumoul@redhat.com)
- Increase vagrant vm resources (nmoumoul@redhat.com)
- CANDLEPIN-1115: Updated org.quartz-scheduler:quartz to version 2.5.2
  (joshmalbrecht@gmail.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.0 to 3.15.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add link to the CANDLEPIN jira issue tracker (nmoumoul@redhat.com)
- CANDLEPIN-1107: Updated checkstyle to 12.3.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1046: Updated Gradle to 9.2.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1101: Updated contributing guide with CI and Javadoc details
  (sbakaj@redhat.com)
- Remove EL8 support &amp; upgrade tomcat (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.1.9 to 12.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1113: Prevent ActiveMQ message buffering (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Updated translated message to be parameterized (joshmalbrecht@gmail.com)
- Bump org.junit:junit-bom from 6.0.1 to 6.0.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- Change Java version to 17 in eclipse setting (sbakaj@redhat.com)
- Removed database ports from CP container image (sbakaj@redhat.com)
- Bump org.mozilla:rhino from 1.8.1 to 1.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.14.1 to 3.15.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove candlepin-4.3-HOTFIX branch from i18n job (nmoumoul@redhat.com)
- Added remote debugging JVM args to dev container (joshmalbrecht@gmail.com)</changelog>
  <changelog author="candlepin-bot 4.7.5-1" date="1772712000">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.sonarqube from 7.2.2.6593 to 7.2.3.7755
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.51.0 to 2.52.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1149: Added non-unique index to deleted consumer's UUID
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1147: Force upgrade mchance-c3p0 &amp; mchange-commons-java
  (nmoumoul@redhat.com)
- Bump jackson from 3.0.4 to 3.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.2 to 6.0.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.19.0 to 7.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.9.0 to 1.9.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.9 to 42.7.10
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.8.0-1" date="1776081600">- Add new translations using Weblate (hosted@weblate.org)
- Renamed the ConsumerClient.exportCertificates utility function
  (crog@redhat.com)
- CANDLEPIN-1080: Updated manifest import signature validation logic
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1180: Fixed signature validation error in multi-cert envs
  (crog@redhat.com)
- CANDLEPIN-1075: Updated AnonCertGenerator to be scheme-aware
  (crog@redhat.com)
- CANDLEPIN-1179: Fixed bug allowing non-positive cert serials
  (crog@redhat.com)
- CANDLEPIN-1158: Bump Java requirement from 17 to 25 for RPM
  (nmoumoul@redhat.com)
- Added scheme validation to BouncyCastleCryptoManager (crog@redhat.com)
- CANDLEPIN-1173: Moved signature.json into consumer_export.zip
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1170: Added spec tests for scheme-aware consumer cert generation
  (crog@redhat.com)
- CANDLEPIN-1169: Added scheme negotiation feature flag (crog@redhat.com)
- CANDLEPIN-1079: Updated manifest export signature creation
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1159: Bump release container to Java 25 (sbakaj@redhat.com)
- CANDLEPIN-1076: Added crypto capabilities ueber cert creation
  (crog@redhat.com)
- Fixed ML-DSA algorithm names in Candlepin config template (crog@redhat.com)
- CANDLEPIN-1156: Updated UeberCertificateGenerator to be scheme aware
  (ceiu@cericlabs.com)
- CANDLEPIN-1078: Added consumer crypto capabilities to the API
  (crog@redhat.com)
- CANDLEPIN-1152: Setup tomcat-native/APR with ML-DSA+RSA on Java 25
  (nmoumoul@redhat.com)
- CANDLEPIN-1155: Updated entitlement cert generator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1078: Added support for storing consumer crypto capabilities
  (crog@redhat.com)
- CANDLEPIN-1154: Updated SCACertificateGenerator to be scheme-aware
  (crog@redhat.com)
- Updated checked functional utility classes (crog@redhat.com)
- CANDLEPIN-1153: Updated IdentityCertificateGenerator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1135: Added crypto config for token-based auth
  (joshmalbrecht@gmail.com)
- Added legacy scheme reading tests to the SchemeReaderTest suite
  (crog@redhat.com)
- CANDLEPIN-1134: Updated KeyPairGenerator to be scheme aware (crog@redhat.com)
- CANDLEPIN-1072: Added the CryptoManager interface (crog@redhat.com)
- CANDLEPIN-1128: Added ML-DSA certificate generation (joshmalbrecht@gmail.com)
- Updated gitleaks' allowlist to include the private key test suite
  (crog@redhat.com)
- CANDLEPIN-1074: Added the SchemeReader util for reading scheme config
  (crog@redhat.com)
- CANDLEPIN-1130: Refactored PrivateKeyReader and its implementations
  (crog@redhat.com)
- Updated core configuration to support optional configuration keys
  (crog@redhat.com)
- CANDLEPIN-1073: Updated KeyPairData to include algorithm information
  (sbakaj@redhat.com)
- CANDLEPIN-1069: Added the SignatureValidator interface and implementation
  (crog@redhat.com)
- CANDLEPIN-1068: Created Signer interface (joshmalbrecht@gmail.com)
- CANDLEPIN-1071: Created X509CertificateBuilder interface
  (joshmalbrecht@gmail.com)
- Bump org.ehcache:ehcache from 3.11.1 to 3.12.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.20 to 11.0.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.0 to 3.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.9 to 0.2.10
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.20.0 to 7.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.52.0 to 2.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.18 to 11.0.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed script injection vulnerability in set_vars action (CWE-78)
  (sbakaj@redhat.com)
- Bump gradle-wrapper from 9.4.0 to 9.4.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1036: Fixed flaky VirtSpecTest test (joshmalbrecht@gmail.com)
- Added the @Singleton annotation to NoopEventSink (crog@redhat.com)
- CANDLEPIN-1163: Update for migration to Atlassian cloud jira
  (nmoumoul@redhat.com)
- Bump jaxb from 4.0.6 to 4.0.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1164: Added last checkin filtering to GET /consumers
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.22.0 to 5.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1140: Unified config using Gradle generateConfig across all
  environments (sbakaj@redhat.com)
- Add candlepin-4.7-HOTFIX branch to the i18n job (nmoumoul@redhat.com)
- Update artemis namespace to org.apache.artemis (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.3.1 to 9.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Nikos Moumoulidis &lt;nmoumoul@redhat.com&gt; 4.8.1-1" date="1777896000">- Add new translations using Weblate (hosted@weblate.org)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump actions/setup-java from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/setup-python from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/download-artifact from 5 to 8
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1161: Added crypto capabilities support to cloud reg flows
  (crog@redhat.com)
- Bump org.sonarqube from 7.2.3.7755 to 7.3.0.8198
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/upload-artifact from 4 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle/actions from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump 8BitJonny/gh-get-current-pr
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/cache from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.10 to 42.7.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1193: Fixed ML-DSA signature verification failure with BC 1.84
  (sbakaj@redhat.com)
- Bump commons-codec:commons-codec from 1.21.0 to 1.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-io:commons-io from 2.21.0 to 2.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.12.0 to 0.13.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.4.0 to 0.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Do not persist GH action bot git credentials
  (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- CANDLEPIN-1195: Added catch for EntityNotFoundException (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.1 to 3.17.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Fix i18n job (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.17.0 to 3.17.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.53.0 to 0.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1199: Removed rsa default value from change set
  (jalbrech@redhat.com)
- CANDLEPIN-1198: Fixed candlepin.ca_key_password usage (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.0 to 26.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1194: Added ML-DSA certs to dev image (jalbrech@redhat.com)
- Use version refs in libs.versions.toml for bouncycastle (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.16.0 to 3.17.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1191: Compile with Java 25 (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.2.0 to 12.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.5.3 to 26.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.1 to 3.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1172: Removed extraneous key usage from generated certs
  (crog@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.0-1" date="1781697600">- CANDLEPIN-1187: RHEL 10 RPM .spec &amp; cpsetup changes (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix intermittent failure in spec_tests.yml (nmoumoul@redhat.com)
- Bump com.mchange:c3p0 from 0.14.0 to 0.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump okhttp3 from 5.3.2 to 5.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.6.0 to 0.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.22.0 to 7.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1222: Make deploy-container parallelizable &amp; faster
  (nmoumoul@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.2 to 26.6.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.13.0 to 0.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.5.0 to 0.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.3.0.8198 to 7.3.1.8318
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1185: Use UBI 10 / OpenSSL FFM in release image
  (nmoumoul@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1215: Updated GET compliance status to return static response
  (jalbrech@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.glassfish.jaxb:jaxb-runtime from 4.0.8 to 4.0.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix debugging with containers (nmoumoul@redhat.com)
- CANDLEPIN-283: Jakarta migration and upgraded Hibernate/RESTEasy/Guice
  (jalbrech@redhat.com)
- Fixed flaky cert expiration test that failed between midnight and 1 AM
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1209: Removed EventAdapter interface (jalbrech@redhat.com)
- Bump artemis from 2.53.0 to 2.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.1 to 26.6.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.3 to 6.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.5.0 to 9.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump slf4j from 2.0.17 to 2.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1212: Updated build scripts for openapi-generator 7.22.0
  (sbakaj@redhat.com)
- CANDLEPIN-1213: Fixed flaky shouldWarnAboutInactiveSubscriptions test
  (sbakaj@redhat.com)
- CANDLEPIN-1211: Added debugging support for CP containers (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.21 to 11.0.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jaxb from 4.0.7 to 4.0.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.2.1 to 12.2.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.2 to 3.1.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add CLAUDE.md, deploy-container script &amp; overhaul documentation
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.4.1 to 9.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 5.0.1-1" date="1784721600">- Add new translations using Weblate (hosted@weblate.org)
- CANDLEPIN-1253: Fixed import bug with legacy manifests (crog@redhat.com)
- Bump actions/setup-python from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.23.0 to 7.24.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1230: Reorganized container directory structure
  (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.18.0 to 3.18.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1224: Added separate system inactivity policy for anon owners
  (jalbrech@redhat.com)
- Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.2 to 4.10.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.1 to 6.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.2.0 to 3.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.4.Final to 7.4.5.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed vagrant EL9 /var/cache/tomcat permissions (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.4 to 26.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.23 to 11.0.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1225: Unignore resteasy dependency (nmoumoul@redhat.com)
- Bump nebula.lint from 21.1.3 to 21.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.12 to 42.7.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.2.Final to 7.4.4.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.1.Final to 9.1.2.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1119: Upgraded to Hibernate 7 and Hibernate Validator 9
  (jalbrech@redhat.com)
- Make checkstyle fast &amp; add CLAUDE.md Development Rules (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.2 to 3.18.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1240: Fixed InactiveConsumerCleanerJobSpecTest flaky tests
  (jalbrech@redhat.com)
- Bump org.postgresql:postgresql from 42.7.11 to 42.7.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.54.0 to 2.55.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.0 to 6.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.6.0 to 9.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.3 to 26.6.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed an exception in CertificateUtil when using large certificates
  (crog@redhat.com)
- Restored missing logging dependency for spec tests (crog@redhat.com)
- Bump actions/cache from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35
  (49699333+dependabot[bot]@users.noreply.github.com)
- Escaped single quotes in source translation strings (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.22 to 11.0.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1229: Update docs on docker-compose for dev setup
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.5.1 to 9.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1189: Fix .dockerignore for release.Containerfile
  (nmoumoul@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.2-1" date="1785412800">- CANDLEPIN-1253: Fixed bugs with legacy manifest import under PQC
  (crog@redhat.com)
- Bump com.github.ben-manes.versions from 0.54.0 to 0.56.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.2.Final to 9.1.3.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1243: Add PomGenerator Gradle plugin (nmoumoul@redhat.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.10 to 0.2.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- Revert "CANDLEPIN-1253: Fixed import bug with legacy manifests"
  (crog@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
</package>
<package pkgid="6196429f9bc44dd2ff4a818bbb2ece42e73be1da1cf9973f66b5f00a18d19b6a" name="candlepin-selinux" arch="noarch">
  <version epoch="0" ver="5.0.3" rel="1.el10"/>
  <changelog author="candlepin-bot 4.7.2-1" date="1760616000">- Add new translations using Weblate (noreply@weblate.org)
- CHAINSAW-474: Updated Refresher to use a single transaction
  (joshmalbrecht@gmail.com)
- Bump org.sonarqube from 6.3.1.5724 to 7.0.0.6105
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.7 to 12.1.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.12 to 11.0.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.3 to 12.1.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.0 to 5.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Updated setConsumersEnvironments to only update appropriate consumers
  (joshmalbrecht@gmail.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.11 to 11.0.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.1.0 to 5.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed malformed $ref in getConsumer operation (thsimmon@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.14.0 to 3.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Documented 410 gone response for getConsumer API (thsimmon@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 5.13.4 to 6.0.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 11.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.52.0 to 0.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.3-1" date="1766145600">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1096: Emit event when bulk consumers are set to environments
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1116: Updated startSessions to not lose sessions
  (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Extra logging during anonymous org claim/migration (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.14 to 11.0.15
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.8.0 to 1.8.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.1.8 to 12.1.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.1.6134 to 7.1.0.6387
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1108: Improved functionality &amp; handling of deleted consumers
  (crog@redhat.com)
- Bump okhttp3 from 5.3.1 to 5.3.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.3.0 to 5.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1109: Updated anonymous consumer certificate expiration
  (joshmalbrecht@gmail.com)
- CHAINSAW-639: Added maven publication for BOM (thsimmon@redhat.com)
- CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.13 to 11.0.14
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Downgraded Quartz scheduler to 2.5.0 (crog@redhat.com)
- Bump commons-io:commons-io from 2.20.0 to 2.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump okhttp3 from 5.2.1 to 5.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.43.0 to 2.44.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.0 to 6.0.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 2.20.0 to 2.20.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.quartz-scheduler:quartz from 2.5.0 to 2.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.7 to 0.2.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.0.0.6105 to 7.0.1.6134
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.7 to 4.9.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.42.0 to 2.43.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.7.4-1" date="1770897600">- Add new translations using Weblate (hosted@weblate.org)
- Bump artemis from 2.50.0 to 2.51.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1136: Strip upstreamConsumer from consumer owner response
  (sbakaj@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1024: Added cleanup for inactive anonymous cloud consumers
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.3.0 to 9.3.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.1 to 3.16.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove dedicated Gradle wrapper update action (sbakaj@redhat.com)
- CANDLEPIN-1123: Added combined_reporting capability (sbakaj@redhat.com)
- CANDLEPIN-1132: Fixed intermittently failing content access spec tests
  (joshmalbrecht@gmail.com)
- Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.15 to 11.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.2.1 to 9.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.44.0 to 2.50.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new token for upgrade gradle GH action (nmoumoul@redhat.com)
- Bump jackson from 3.0.3 to 3.0.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Do not run nebula lint on every gradle command (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Disabled JRE provisioning for Soanr action (sbakaj@redhat.com)
- CANDLEPIN-1019: Upgraded openapi-generator to 7.19.0
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1121: Update from Jackson 2 to Jackson 3 (nmoumoul@redhat.com)
- Increase vagrant vm resources (nmoumoul@redhat.com)
- CANDLEPIN-1115: Updated org.quartz-scheduler:quartz to version 2.5.2
  (joshmalbrecht@gmail.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.15.0 to 3.15.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add link to the CANDLEPIN jira issue tracker (nmoumoul@redhat.com)
- CANDLEPIN-1107: Updated checkstyle to 12.3.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1046: Updated Gradle to 9.2.1 (joshmalbrecht@gmail.com)
- CANDLEPIN-1101: Updated contributing guide with CI and Javadoc details
  (sbakaj@redhat.com)
- Remove EL8 support &amp; upgrade tomcat (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.1.9 to 12.2.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1113: Prevent ActiveMQ message buffering (joshmalbrecht@gmail.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Updated translated message to be parameterized (joshmalbrecht@gmail.com)
- Bump org.junit:junit-bom from 6.0.1 to 6.0.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- Change Java version to 17 in eclipse setting (sbakaj@redhat.com)
- Removed database ports from CP container image (sbakaj@redhat.com)
- Bump org.mozilla:rhino from 1.8.1 to 1.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.14.1 to 3.15.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Remove candlepin-4.3-HOTFIX branch from i18n job (nmoumoul@redhat.com)
- Added remote debugging JVM args to dev container (joshmalbrecht@gmail.com)</changelog>
  <changelog author="candlepin-bot 4.7.5-1" date="1772712000">- Add new translations using Weblate (hosted@weblate.org)
- Bump org.sonarqube from 7.2.2.6593 to 7.2.3.7755
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.51.0 to 2.52.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1149: Added non-unique index to deleted consumer's UUID
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1147: Force upgrade mchance-c3p0 &amp; mchange-commons-java
  (nmoumoul@redhat.com)
- Bump jackson from 3.0.4 to 3.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.2 to 6.0.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.19.0 to 7.20.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mozilla:rhino from 1.9.0 to 1.9.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.9 to 42.7.10
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 4.8.0-1" date="1776081600">- Add new translations using Weblate (hosted@weblate.org)
- Renamed the ConsumerClient.exportCertificates utility function
  (crog@redhat.com)
- CANDLEPIN-1080: Updated manifest import signature validation logic
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1180: Fixed signature validation error in multi-cert envs
  (crog@redhat.com)
- CANDLEPIN-1075: Updated AnonCertGenerator to be scheme-aware
  (crog@redhat.com)
- CANDLEPIN-1179: Fixed bug allowing non-positive cert serials
  (crog@redhat.com)
- CANDLEPIN-1158: Bump Java requirement from 17 to 25 for RPM
  (nmoumoul@redhat.com)
- Added scheme validation to BouncyCastleCryptoManager (crog@redhat.com)
- CANDLEPIN-1173: Moved signature.json into consumer_export.zip
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1170: Added spec tests for scheme-aware consumer cert generation
  (crog@redhat.com)
- CANDLEPIN-1169: Added scheme negotiation feature flag (crog@redhat.com)
- CANDLEPIN-1079: Updated manifest export signature creation
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1159: Bump release container to Java 25 (sbakaj@redhat.com)
- CANDLEPIN-1076: Added crypto capabilities ueber cert creation
  (crog@redhat.com)
- Fixed ML-DSA algorithm names in Candlepin config template (crog@redhat.com)
- CANDLEPIN-1156: Updated UeberCertificateGenerator to be scheme aware
  (ceiu@cericlabs.com)
- CANDLEPIN-1078: Added consumer crypto capabilities to the API
  (crog@redhat.com)
- CANDLEPIN-1152: Setup tomcat-native/APR with ML-DSA+RSA on Java 25
  (nmoumoul@redhat.com)
- CANDLEPIN-1155: Updated entitlement cert generator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1078: Added support for storing consumer crypto capabilities
  (crog@redhat.com)
- CANDLEPIN-1154: Updated SCACertificateGenerator to be scheme-aware
  (crog@redhat.com)
- Updated checked functional utility classes (crog@redhat.com)
- CANDLEPIN-1153: Updated IdentityCertificateGenerator to be scheme-aware
  (joshmalbrecht@gmail.com)
- CANDLEPIN-1135: Added crypto config for token-based auth
  (joshmalbrecht@gmail.com)
- Added legacy scheme reading tests to the SchemeReaderTest suite
  (crog@redhat.com)
- CANDLEPIN-1134: Updated KeyPairGenerator to be scheme aware (crog@redhat.com)
- CANDLEPIN-1072: Added the CryptoManager interface (crog@redhat.com)
- CANDLEPIN-1128: Added ML-DSA certificate generation (joshmalbrecht@gmail.com)
- Updated gitleaks' allowlist to include the private key test suite
  (crog@redhat.com)
- CANDLEPIN-1074: Added the SchemeReader util for reading scheme config
  (crog@redhat.com)
- CANDLEPIN-1130: Refactored PrivateKeyReader and its implementations
  (crog@redhat.com)
- Updated core configuration to support optional configuration keys
  (crog@redhat.com)
- CANDLEPIN-1073: Updated KeyPairData to include algorithm information
  (sbakaj@redhat.com)
- CANDLEPIN-1069: Added the SignatureValidator interface and implementation
  (crog@redhat.com)
- CANDLEPIN-1068: Created Signer interface (joshmalbrecht@gmail.com)
- CANDLEPIN-1071: Created X509CertificateBuilder interface
  (joshmalbrecht@gmail.com)
- Bump org.ehcache:ehcache from 3.11.1 to 3.12.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.20 to 11.0.21
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.0 to 3.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.9 to 0.2.10
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.20.0 to 7.21.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.52.0 to 2.53.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.18 to 11.0.20
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed script injection vulnerability in set_vars action (CWE-78)
  (sbakaj@redhat.com)
- Bump gradle-wrapper from 9.4.0 to 9.4.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1036: Fixed flaky VirtSpecTest test (joshmalbrecht@gmail.com)
- Added the @Singleton annotation to NoopEventSink (crog@redhat.com)
- CANDLEPIN-1163: Update for migration to Atlassian cloud jira
  (nmoumoul@redhat.com)
- Bump jaxb from 4.0.6 to 4.0.7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1164: Added last checkin filtering to GET /consumers
  (crog@redhat.com)
- Bump org.mockito:mockito-junit-jupiter from 5.22.0 to 5.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1140: Unified config using Gradle generateConfig across all
  environments (sbakaj@redhat.com)
- Add candlepin-4.7-HOTFIX branch to the i18n job (nmoumoul@redhat.com)
- Update artemis namespace to org.apache.artemis (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.3.1 to 9.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="Nikos Moumoulidis &lt;nmoumoul@redhat.com&gt; 4.8.1-1" date="1777896000">- Add new translations using Weblate (hosted@weblate.org)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump actions/setup-java from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/setup-python from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/download-artifact from 5 to 8
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1161: Added crypto capabilities support to cloud reg flows
  (crog@redhat.com)
- Bump org.sonarqube from 7.2.3.7755 to 7.3.0.8198
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/upload-artifact from 4 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle/actions from 4 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump 8BitJonny/gh-get-current-pr
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/cache from 4 to 5
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.10 to 42.7.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1193: Fixed ML-DSA signature verification failure with BC 1.84
  (sbakaj@redhat.com)
- Bump commons-codec:commons-codec from 1.21.0 to 1.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-io:commons-io from 2.21.0 to 2.22.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.12.0 to 0.13.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.4.0 to 0.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Do not persist GH action bot git credentials
  (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- CANDLEPIN-1195: Added catch for EntityNotFoundException (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.1 to 3.17.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1197: Fix i18n job (nmoumoul@redhat.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump io.smallrye.config:smallrye-config from 3.17.0 to 3.17.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.53.0 to 0.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1199: Removed rsa default value from change set
  (jalbrech@redhat.com)
- CANDLEPIN-1198: Fixed candlepin.ca_key_password usage (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.0 to 26.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1194: Added ML-DSA certs to dev image (jalbrech@redhat.com)
- Use version refs in libs.versions.toml for bouncycastle (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.16.0 to 3.17.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1191: Compile with Java 25 (nmoumoul@redhat.com)
- Bump org.owasp.dependencycheck from 12.2.0 to 12.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.5.3 to 26.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.1 to 3.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1172: Removed extraneous key usage from generated certs
  (crog@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.0-1" date="1781697600">- CANDLEPIN-1187: RHEL 10 RPM .spec &amp; cpsetup changes (nmoumoul@redhat.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix intermittent failure in spec_tests.yml (nmoumoul@redhat.com)
- Bump com.mchange:c3p0 from 0.14.0 to 0.14.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add new translations using Weblate (hosted@weblate.org)
- Bump okhttp3 from 5.3.2 to 5.4.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.6.0 to 0.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.22.0 to 7.23.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1222: Make deploy-container parallelizable &amp; faster
  (nmoumoul@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.2 to 26.6.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:c3p0 from 0.13.0 to 0.14.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.mchange:mchange-commons-java from 0.5.0 to 0.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.3.0.8198 to 7.3.1.8318
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1185: Use UBI 10 / OpenSSL FFM in release image
  (nmoumoul@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1215: Updated GET compliance status to return static response
  (jalbrech@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.glassfish.jaxb:jaxb-runtime from 4.0.8 to 4.0.9
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fix debugging with containers (nmoumoul@redhat.com)
- CANDLEPIN-283: Jakarta migration and upgraded Hibernate/RESTEasy/Guice
  (jalbrech@redhat.com)
- Fixed flaky cert expiration test that failed between midnight and 1 AM
  (sbakaj@redhat.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1209: Removed EventAdapter interface (jalbrech@redhat.com)
- Bump artemis from 2.53.0 to 2.54.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.1 to 26.6.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.0.3 to 6.1.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.5.0 to 9.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump slf4j from 2.0.17 to 2.0.18
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1212: Updated build scripts for openapi-generator 7.22.0
  (sbakaj@redhat.com)
- CANDLEPIN-1213: Fixed flaky shouldWarnAboutInactiveSubscriptions test
  (sbakaj@redhat.com)
- CANDLEPIN-1211: Added debugging support for CP containers (sbakaj@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.21 to 11.0.22
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jaxb from 4.0.7 to 4.0.8
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.2.1 to 12.2.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.1.2 to 3.1.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Add CLAUDE.md, deploy-container script &amp; overhaul documentation
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.4.1 to 9.5.0
  (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 5.0.1-1" date="1784721600">- Add new translations using Weblate (hosted@weblate.org)
- CANDLEPIN-1253: Fixed import bug with legacy manifests (crog@redhat.com)
- Bump actions/setup-python from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump openapi-generator from 7.23.0 to 7.24.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1230: Reorganized container directory structure
  (jalbrech@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.18.0 to 3.18.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1224: Added separate system inactivity policy for anon owners
  (jalbrech@redhat.com)
- Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.spotbugs:spotbugs-annotations from 4.10.2 to 4.10.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.1 to 6.1.2
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump jackson from 3.2.0 to 3.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.4.Final to 7.4.5.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed vagrant EL9 /var/cache/tomcat permissions (jalbrech@redhat.com)
- Bump org.keycloak:keycloak-core from 26.6.4 to 26.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38
  (49699333+dependabot[bot]@users.noreply.github.com)
- updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.23 to 11.0.24
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1225: Unignore resteasy dependency (nmoumoul@redhat.com)
- Bump nebula.lint from 21.1.3 to 21.2.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.postgresql:postgresql from 42.7.12 to 42.7.13
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate from 7.4.2.Final to 7.4.4.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.1.Final to 9.1.2.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1119: Upgraded to Hibernate 7 and Hibernate Validator 9
  (jalbrech@redhat.com)
- Make checkstyle fast &amp; add CLAUDE.md Development Rules (nmoumoul@redhat.com)
- Bump io.smallrye.config:smallrye-config from 3.17.2 to 3.18.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1240: Fixed InactiveConsumerCleanerJobSpecTest flaky tests
  (jalbrech@redhat.com)
- Bump org.postgresql:postgresql from 42.7.11 to 42.7.12
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump artemis from 2.54.0 to 2.55.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.0 to 6.1.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.6.0 to 9.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.6.3 to 26.6.4
  (49699333+dependabot[bot]@users.noreply.github.com)
- Fixed an exception in CertificateUtil when using large certificates
  (crog@redhat.com)
- Restored missing logging dependency for spec tests (crog@redhat.com)
- Bump actions/cache from 5 to 6
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35
  (49699333+dependabot[bot]@users.noreply.github.com)
- Escaped single quotes in source translation strings (nmoumoul@redhat.com)
- Bump org.apache.tomcat:tomcat-annotations-api from 11.0.22 to 11.0.23
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1229: Update docs on docker-compose for dev setup
  (nmoumoul@redhat.com)
- Bump gradle-wrapper from 9.5.1 to 9.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)
- Bump actions/checkout from 6 to 7
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1189: Fix .dockerignore for release.Containerfile
  (nmoumoul@redhat.com)</changelog>
  <changelog author="candlepin-bot 5.0.2-1" date="1785412800">- CANDLEPIN-1253: Fixed bugs with legacy manifest import under PQC
  (crog@redhat.com)
- Bump com.github.ben-manes.versions from 0.54.0 to 0.56.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump hibernate-validator from 9.1.2.Final to 9.1.3.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1243: Add PomGenerator Gradle plugin (nmoumoul@redhat.com)
- Bump org.openapitools:jackson-databind-nullable from 0.2.10 to 0.2.11
  (49699333+dependabot[bot]@users.noreply.github.com)
- Revert "CANDLEPIN-1253: Fixed import bug with legacy manifests"
  (crog@redhat.com)
- Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
  annotations (49699333+dependabot[bot]@users.noreply.github.com)</changelog>
  <changelog author="candlepin-bot 5.0.3-1" date="1786708800">- Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- CANDLEPIN-1263: Fixed issue when using OAuth for POST requests
  (jalbrech@redhat.com)
- Bump com.puppycrawl.tools:checkstyle from 13.9.0 to 13.10.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Enabled check-latest for Java setup in CI workflow (sbakaj@redhat.com)
- Fixed flaky upper-bound timestamp assertions in spec tests
  (sbakaj@redhat.com)
- Fixed ML-DSA client TLS handshake failures in spec test (sbakaj@redhat.com)
- Bump com.github.ben-manes.versions from 0.60.0 to 0.61.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.keycloak:keycloak-core from 26.7.0 to 26.7.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle-wrapper from 9.6.1 to 9.7.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.junit:junit-bom from 6.1.2 to 6.1.3
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.owasp.dependencycheck from 12.2.2 to 13.0.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.57.0 to 0.60.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.sonarqube from 7.3.1.8318 to 7.4.0.8496
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump resteasy from 7.0.2.Final to 7.0.3.Final
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump commons-codec:commons-codec from 1.22.0 to 1.22.1
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10
  (49699333+dependabot[bot]@users.noreply.github.com)
- Bump com.github.ben-manes.versions from 0.56.0 to 0.57.0
  (49699333+dependabot[bot]@users.noreply.github.com)
- Shortened test CN strings to fit BC 1.85 length limit (sbakaj@redhat.com)</changelog>
</package>
</otherdata>