# changelog

author: candlepin-bot 4.7.1-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jaxb from 4.0.5 to 4.0.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1065: Added bulk migration event (joshmalbrecht@gmail.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.13.4 to 3.14.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.7 to 42.7.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.81 to 1.82
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.5 to 4.9.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.4 to 4.9.5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.5 to 3.5.6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.13.1 to 2.13.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)


author: candlepin-bot 4.7.2-1
changelog:
  - Add new translations using Weblate (noreply@weblate.org)
  - CHAINSAW-474: Updated Refresher to use a single transaction
    (joshmalbrecht@gmail.com)
  - Bump org.sonarqube from 6.3.1.5724 to 7.0.0.6105
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.6 to 4.9.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.7 to 12.1.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.12 to 11.0.13
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.3 to 12.1.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.2.0 to 5.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Updated setConsumersEnvironments to only update appropriate consumers
    (joshmalbrecht@gmail.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.11 to 11.0.12
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.1.0 to 5.2.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fixed malformed $ref in getConsumer operation (thsimmon@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.14.0 to 3.14.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Documented 410 gone response for getConsumer API (thsimmon@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 5.13.4 to 6.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 11.0.1 to 11.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.52.0 to 0.53.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.7.3-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1096: Emit event when bulk consumers are set to environments
    (sbakaj@redhat.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.22
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1116: Updated startSessions to not lose sessions
    (joshmalbrecht@gmail.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Extra logging during anonymous org claim/migration (nmoumoul@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.14 to 11.0.15
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mozilla:rhino from 1.8.0 to 1.8.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.83
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.1.8 to 12.1.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 7.0.1.6134 to 7.1.0.6387
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1108: Improved functionality & handling of deleted consumers
    (crog@redhat.com)
  - Bump okhttp3 from 5.3.1 to 5.3.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.3.0 to 5.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1109: Updated anonymous consumer certificate expiration
    (joshmalbrecht@gmail.com)
  - CHAINSAW-639: Added maven publication for BOM (thsimmon@redhat.com)
  - CANDLEPIN-812: Removed PR check against Bugzilla (sbakaj@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.13 to 11.0.14
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.20 to 1.5.21
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Downgraded Quartz scheduler to 2.5.0 (crog@redhat.com)
  - Bump commons-io:commons-io from 2.20.0 to 2.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.19.0 to 1.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump okhttp3 from 5.2.1 to 5.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.43.0 to 2.44.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.0.0 to 6.0.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 2.20.0 to 2.20.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump net.logstash.logback:logstash-logback-encoder from 8.1 to 9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.quartz-scheduler:quartz from 2.5.0 to 2.5.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.7 to 0.2.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 7.0.0.6105 to 7.0.1.6134
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.7 to 4.9.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.42.0 to 2.43.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.7.4-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump artemis from 2.50.0 to 2.51.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1136: Strip upstreamConsumer from consumer owner response
    (sbakaj@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.28 to 1.5.29
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1024: Added cleanup for inactive anonymous cloud consumers
    (joshmalbrecht@gmail.com)
  - Bump ch.qos.logback:logback-classic from 1.5.27 to 1.5.28
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.3.0 to 9.3.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.20.0 to 1.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.15.1 to 3.16.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Remove dedicated Gradle wrapper update action (sbakaj@redhat.com)
  - CANDLEPIN-1123: Added combined_reporting capability (sbakaj@redhat.com)
  - CANDLEPIN-1132: Fixed intermittently failing content access spec tests
    (joshmalbrecht@gmail.com)
  - Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.15 to 11.0.18
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.assertj:assertj-core from 3.27.6 to 3.27.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.2.1 to 9.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.44.0 to 2.50.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add new token for upgrade gradle GH action (nmoumoul@redhat.com)
  - Bump jackson from 3.0.3 to 3.0.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Do not run nebula lint on every gradle command (nmoumoul@redhat.com)
  - Add new translations using Weblate (hosted@weblate.org)
  - Disabled JRE provisioning for Soanr action (sbakaj@redhat.com)
  - CANDLEPIN-1019: Upgraded openapi-generator to 7.19.0
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1121: Update from Jackson 2 to Jackson 3 (nmoumoul@redhat.com)
  - Increase vagrant vm resources (nmoumoul@redhat.com)
  - CANDLEPIN-1115: Updated org.quartz-scheduler:quartz to version 2.5.2
    (joshmalbrecht@gmail.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.15.0 to 3.15.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.24 to 1.5.25
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.8 to 42.7.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add link to the CANDLEPIN jira issue tracker (nmoumoul@redhat.com)
  - CANDLEPIN-1107: Updated checkstyle to 12.3.1 (joshmalbrecht@gmail.com)
  - CANDLEPIN-1046: Updated Gradle to 9.2.1 (joshmalbrecht@gmail.com)
  - CANDLEPIN-1101: Updated contributing guide with CI and Javadoc details
    (sbakaj@redhat.com)
  - Remove EL8 support & upgrade tomcat (nmoumoul@redhat.com)
  - Bump org.owasp.dependencycheck from 12.1.9 to 12.2.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1113: Prevent ActiveMQ message buffering (joshmalbrecht@gmail.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Updated translated message to be parameterized (joshmalbrecht@gmail.com)
  - Bump org.junit:junit-bom from 6.0.1 to 6.0.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Change Java version to 17 in eclipse setting (sbakaj@redhat.com)
  - Removed database ports from CP container image (sbakaj@redhat.com)
  - Bump org.mozilla:rhino from 1.8.1 to 1.9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.14.1 to 3.15.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.23
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Remove candlepin-4.3-HOTFIX branch from i18n job (nmoumoul@redhat.com)
  - Added remote debugging JVM args to dev container (joshmalbrecht@gmail.com)


author: candlepin-bot 4.7.5-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump org.sonarqube from 7.2.2.6593 to 7.2.3.7755
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.51.0 to 2.52.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1149: Added non-unique index to deleted consumer's UUID
    (crog@redhat.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.21.0 to 5.22.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1147: Force upgrade mchance-c3p0 & mchange-commons-java
    (nmoumoul@redhat.com)
  - Bump jackson from 3.0.4 to 3.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.0.2 to 6.0.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.19.0 to 7.20.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.29 to 1.5.32
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mozilla:rhino from 1.9.0 to 1.9.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.9 to 42.7.10
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 4.8.0-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - Renamed the ConsumerClient.exportCertificates utility function
    (crog@redhat.com)
  - CANDLEPIN-1080: Updated manifest import signature validation logic
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1180: Fixed signature validation error in multi-cert envs
    (crog@redhat.com)
  - CANDLEPIN-1075: Updated AnonCertGenerator to be scheme-aware
    (crog@redhat.com)
  - CANDLEPIN-1179: Fixed bug allowing non-positive cert serials
    (crog@redhat.com)
  - CANDLEPIN-1158: Bump Java requirement from 17 to 25 for RPM
    (nmoumoul@redhat.com)
  - Added scheme validation to BouncyCastleCryptoManager (crog@redhat.com)
  - CANDLEPIN-1173: Moved signature.json into consumer_export.zip
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1170: Added spec tests for scheme-aware consumer cert generation
    (crog@redhat.com)
  - CANDLEPIN-1169: Added scheme negotiation feature flag (crog@redhat.com)
  - CANDLEPIN-1079: Updated manifest export signature creation
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1159: Bump release container to Java 25 (sbakaj@redhat.com)
  - CANDLEPIN-1076: Added crypto capabilities ueber cert creation
    (crog@redhat.com)
  - Fixed ML-DSA algorithm names in Candlepin config template (crog@redhat.com)
  - CANDLEPIN-1156: Updated UeberCertificateGenerator to be scheme aware
    (ceiu@cericlabs.com)
  - CANDLEPIN-1078: Added consumer crypto capabilities to the API
    (crog@redhat.com)
  - CANDLEPIN-1152: Setup tomcat-native/APR with ML-DSA+RSA on Java 25
    (nmoumoul@redhat.com)
  - CANDLEPIN-1155: Updated entitlement cert generator to be scheme-aware
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1078: Added support for storing consumer crypto capabilities
    (crog@redhat.com)
  - CANDLEPIN-1154: Updated SCACertificateGenerator to be scheme-aware
    (crog@redhat.com)
  - Updated checked functional utility classes (crog@redhat.com)
  - CANDLEPIN-1153: Updated IdentityCertificateGenerator to be scheme-aware
    (joshmalbrecht@gmail.com)
  - CANDLEPIN-1135: Added crypto config for token-based auth
    (joshmalbrecht@gmail.com)
  - Added legacy scheme reading tests to the SchemeReaderTest suite
    (crog@redhat.com)
  - CANDLEPIN-1134: Updated KeyPairGenerator to be scheme aware (crog@redhat.com)
  - CANDLEPIN-1072: Added the CryptoManager interface (crog@redhat.com)
  - CANDLEPIN-1128: Added ML-DSA certificate generation (joshmalbrecht@gmail.com)
  - Updated gitleaks' allowlist to include the private key test suite
    (crog@redhat.com)
  - CANDLEPIN-1074: Added the SchemeReader util for reading scheme config
    (crog@redhat.com)
  - CANDLEPIN-1130: Refactored PrivateKeyReader and its implementations
    (crog@redhat.com)
  - Updated core configuration to support optional configuration keys
    (crog@redhat.com)
  - CANDLEPIN-1073: Updated KeyPairData to include algorithm information
    (sbakaj@redhat.com)
  - CANDLEPIN-1069: Added the SignatureValidator interface and implementation
    (crog@redhat.com)
  - CANDLEPIN-1068: Created Signer interface (joshmalbrecht@gmail.com)
  - CANDLEPIN-1071: Created X509CertificateBuilder interface
    (joshmalbrecht@gmail.com)
  - Bump org.ehcache:ehcache from 3.11.1 to 3.12.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.20 to 11.0.21
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 3.1.0 to 3.1.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.9 to 0.2.10
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.20.0 to 7.21.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.52.0 to 2.53.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.18 to 11.0.20
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fixed script injection vulnerability in set_vars action (CWE-78)
    (sbakaj@redhat.com)
  - Bump gradle-wrapper from 9.4.0 to 9.4.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1036: Fixed flaky VirtSpecTest test (joshmalbrecht@gmail.com)
  - Added the @Singleton annotation to NoopEventSink (crog@redhat.com)
  - CANDLEPIN-1163: Update for migration to Atlassian cloud jira
    (nmoumoul@redhat.com)
  - Bump jaxb from 4.0.6 to 4.0.7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1164: Added last checkin filtering to GET /consumers
    (crog@redhat.com)
  - Bump org.mockito:mockito-junit-jupiter from 5.22.0 to 5.23.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1140: Unified config using Gradle generateConfig across all
    environments (sbakaj@redhat.com)
  - Add candlepin-4.7-HOTFIX branch to the i18n job (nmoumoul@redhat.com)
  - Update artemis namespace to org.apache.artemis (nmoumoul@redhat.com)
  - Bump gradle-wrapper from 9.3.1 to 9.4.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Nikos Moumoulidis <nmoumoul@redhat.com> 4.8.1-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump actions/setup-java from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump actions/setup-python from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump actions/download-artifact from 5 to 8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1161: Added crypto capabilities support to cloud reg flows
    (crog@redhat.com)
  - Bump org.sonarqube from 7.2.3.7755 to 7.3.0.8198
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump actions/checkout from 4 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump actions/upload-artifact from 4 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle/actions from 4 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump 8BitJonny/gh-get-current-pr
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump actions/cache from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.10 to 42.7.11
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1193: Fixed ML-DSA signature verification failure with BC 1.84
    (sbakaj@redhat.com)
  - Bump commons-codec:commons-codec from 1.21.0 to 1.22.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-io:commons-io from 2.21.0 to 2.22.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.mchange:c3p0 from 0.12.0 to 0.13.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.google.code.gson:gson from 2.13.2 to 2.14.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.mchange:mchange-commons-java from 0.4.0 to 0.5.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1197: Do not persist GH action bot git credentials
    (nmoumoul@redhat.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - CANDLEPIN-1195: Added catch for EntityNotFoundException (jalbrech@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.17.1 to 3.17.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1197: Fix i18n job (nmoumoul@redhat.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump io.smallrye.config:smallrye-config from 3.17.0 to 3.17.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.53.0 to 0.54.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1199: Removed rsa default value from change set
    (jalbrech@redhat.com)
  - CANDLEPIN-1198: Fixed candlepin.ca_key_password usage (jalbrech@redhat.com)
  - Bump org.keycloak:keycloak-core from 26.6.0 to 26.6.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1194: Added ML-DSA certs to dev image (jalbrech@redhat.com)
  - Use version refs in libs.versions.toml for bouncycastle (nmoumoul@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.16.0 to 3.17.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1191: Compile with Java 25 (nmoumoul@redhat.com)
  - Bump org.owasp.dependencycheck from 12.2.0 to 12.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.keycloak:keycloak-core from 26.5.3 to 26.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 3.1.1 to 3.1.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1172: Removed extraneous key usage from generated certs
    (crog@redhat.com)


author: candlepin-bot 5.0.0-1
changelog:
  - CANDLEPIN-1187: RHEL 10 RPM .spec & cpsetup changes (nmoumoul@redhat.com)
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.10.1 to 4.10.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix intermittent failure in spec_tests.yml (nmoumoul@redhat.com)
  - Bump com.mchange:c3p0 from 0.14.0 to 0.14.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add new translations using Weblate (hosted@weblate.org)
  - Bump okhttp3 from 5.3.2 to 5.4.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.9.8 to 4.10.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.mchange:mchange-commons-java from 0.6.0 to 0.6.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.22.0 to 7.23.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1222: Make deploy-container parallelizable & faster
    (nmoumoul@redhat.com)
  - Bump org.keycloak:keycloak-core from 26.6.2 to 26.6.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.mchange:c3p0 from 0.13.0 to 0.14.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.mchange:mchange-commons-java from 0.5.0 to 0.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 7.3.0.8198 to 7.3.1.8318
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1185: Use UBI 10 / OpenSSL FFM in release image
    (nmoumoul@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1215: Updated GET compliance status to return static response
    (jalbrech@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.glassfish.jaxb:jaxb-runtime from 4.0.8 to 4.0.9
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix debugging with containers (nmoumoul@redhat.com)
  - CANDLEPIN-283: Jakarta migration and upgraded Hibernate/RESTEasy/Guice
    (jalbrech@redhat.com)
  - Fixed flaky cert expiration test that failed between midnight and 1 AM
    (sbakaj@redhat.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1209: Removed EventAdapter interface (jalbrech@redhat.com)
  - Bump artemis from 2.53.0 to 2.54.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.keycloak:keycloak-core from 26.6.1 to 26.6.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.0.3 to 6.1.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.5.0 to 9.5.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump slf4j from 2.0.17 to 2.0.18
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1212: Updated build scripts for openapi-generator 7.22.0
    (sbakaj@redhat.com)
  - CANDLEPIN-1213: Fixed flaky shouldWarnAboutInactiveSubscriptions test
    (sbakaj@redhat.com)
  - CANDLEPIN-1211: Added debugging support for CP containers (sbakaj@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.21 to 11.0.22
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jaxb from 4.0.7 to 4.0.8
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.2.1 to 12.2.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 3.1.2 to 3.1.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Add CLAUDE.md, deploy-container script & overhaul documentation
    (nmoumoul@redhat.com)
  - Bump gradle-wrapper from 9.4.1 to 9.5.0
    (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 5.0.1-1
changelog:
  - Add new translations using Weblate (hosted@weblate.org)
  - CANDLEPIN-1253: Fixed import bug with legacy manifests (crog@redhat.com)
  - Bump actions/setup-python from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump openapi-generator from 7.23.0 to 7.24.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1230: Reorganized container directory structure
    (jalbrech@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.18.0 to 3.18.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1224: Added separate system inactivity policy for anon owners
    (jalbrech@redhat.com)
  - Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.spotbugs:spotbugs-annotations from 4.10.2 to 4.10.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.1.1 to 6.1.2
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump jackson from 3.2.0 to 3.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump hibernate from 7.4.4.Final to 7.4.5.Final
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fixed vagrant EL9 /var/cache/tomcat permissions (jalbrech@redhat.com)
  - Bump org.keycloak:keycloak-core from 26.6.4 to 26.7.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38
    (49699333+dependabot[bot]@users.noreply.github.com)
  - updated po/keys.pot template (3229038+candlepin-bot@users.noreply.github.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.23 to 11.0.24
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1225: Unignore resteasy dependency (nmoumoul@redhat.com)
  - Bump nebula.lint from 21.1.3 to 21.2.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.postgresql:postgresql from 42.7.12 to 42.7.13
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump hibernate from 7.4.2.Final to 7.4.4.Final
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 12.3.1 to 13.7.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump hibernate-validator from 9.1.1.Final to 9.1.2.Final
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1119: Upgraded to Hibernate 7 and Hibernate Validator 9
    (jalbrech@redhat.com)
  - Make checkstyle fast & add CLAUDE.md Development Rules (nmoumoul@redhat.com)
  - Bump io.smallrye.config:smallrye-config from 3.17.2 to 3.18.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1240: Fixed InactiveConsumerCleanerJobSpecTest flaky tests
    (jalbrech@redhat.com)
  - Bump org.postgresql:postgresql from 42.7.11 to 42.7.12
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump artemis from 2.54.0 to 2.55.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.1.0 to 6.1.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.6.0 to 9.6.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.keycloak:keycloak-core from 26.6.3 to 26.6.4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fixed an exception in CertificateUtil when using large certificates
    (crog@redhat.com)
  - Restored missing logging dependency for spec tests (crog@redhat.com)
  - Bump actions/cache from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Escaped single quotes in source translation strings (nmoumoul@redhat.com)
  - Bump org.apache.tomcat:tomcat-annotations-api from 11.0.22 to 11.0.23
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1229: Update docs on docker-compose for dev setup
    (nmoumoul@redhat.com)
  - Bump gradle-wrapper from 9.5.1 to 9.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump actions/checkout from 6 to 7
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1189: Fix .dockerignore for release.Containerfile
    (nmoumoul@redhat.com)


author: candlepin-bot 5.0.2-1
changelog:
  - CANDLEPIN-1253: Fixed bugs with legacy manifest import under PQC
    (crog@redhat.com)
  - Bump com.github.ben-manes.versions from 0.54.0 to 0.56.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump hibernate-validator from 9.1.2.Final to 9.1.3.Final
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1243: Add PomGenerator Gradle plugin (nmoumoul@redhat.com)
  - Bump org.openapitools:jackson-databind-nullable from 0.2.10 to 0.2.11
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Revert "CANDLEPIN-1253: Fixed import bug with legacy manifests"
    (crog@redhat.com)
  - Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump io.opentelemetry.instrumentation:opentelemetry-instrumentation-
    annotations (49699333+dependabot[bot]@users.noreply.github.com)


author: candlepin-bot 5.0.3-1
changelog:
  - Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CANDLEPIN-1263: Fixed issue when using OAuth for POST requests
    (jalbrech@redhat.com)
  - Bump com.puppycrawl.tools:checkstyle from 13.9.0 to 13.10.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Enabled check-latest for Java setup in CI workflow (sbakaj@redhat.com)
  - Fixed flaky upper-bound timestamp assertions in spec tests
    (sbakaj@redhat.com)
  - Fixed ML-DSA client TLS handshake failures in spec test (sbakaj@redhat.com)
  - Bump com.github.ben-manes.versions from 0.60.0 to 0.61.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.keycloak:keycloak-core from 26.7.0 to 26.7.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle-wrapper from 9.6.1 to 9.7.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.junit:junit-bom from 6.1.2 to 6.1.3
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.owasp.dependencycheck from 12.2.2 to 13.0.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.57.0 to 0.60.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.sonarqube from 7.3.1.8318 to 7.4.0.8496
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump resteasy from 7.0.2.Final to 7.0.3.Final
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump commons-codec:commons-codec from 1.22.0 to 1.22.1
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.9 to 3.5.10
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bump com.github.ben-manes.versions from 0.56.0 to 0.57.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Shortened test CN strings to fit BC 1.85 length limit (sbakaj@redhat.com)


