Fedora EPEL 10.2 updates-testing report

The following Fedora EPEL 10.2 Security updates need testing:
 Age  URL
   5  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-5eddd94672   rnp-0.18.1-1.el10_2
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-12b5bcc5d5   nextcloud-32.0.2-1.el10_2
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-228b3430e8   restic-0.18.1-1.el10_2
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-c7b9b07dd3   rclone-1.72.0-1.el10_2
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-fae772942c   openbao-2.4.4-1.el10_2
   1  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-3c4c4e0490   stb-0^20251025gitf1c79c0-2.el10_2

The following builds have been pushed to Fedora EPEL 10.2 updates-testing

R-qtl-1.72-1.el10_2
    bluechi-1.2.1-1.el10_2
    fcgi-2.4.7-1.el10_2
    fedpkg-1.47-1.el10_2
    keepass-2.60-3.el10_2
    mkdocs-material-9.7.0-1.el10_2
    nickle-2.107-1.el10_2
    pax-utils-1.3.10-1.el10_2
    pie-1.3.0-1.el10_2
    python-cron-converter-1.3.0-1.el10_2
    rpkg-1.69-2.el10_2
    steam-devices-1.0.0.101^git20251018.4d7e6c1-5.el10_2

Details about builds:

================================================================================
 R-qtl-1.72-1.el10_2 (FEDORA-EPEL-2025-3d2698301c)
 Tools for analyzing QTL experiments
--------------------------------------------------------------------------------
Update Information:

R-qtl 1.72
--------------------------------------------------------------------------------
ChangeLog:

* Mon Nov 24 2025 Mattias Ellert  - 1.72-1
- Update to 1.72
* Wed Jul 23 2025 Fedora Release Engineering  - 1.70-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 bluechi-1.2.1-1.el10_2 (FEDORA-EPEL-2025-07fafa7f45)
 A systemd service controller for multi-nodes environments
--------------------------------------------------------------------------------
Update Information:

Automatic update for bluechi-1.2.1-1.el10_2.
Changelog for bluechi
* Wed Nov 26 2025 Packit  - 1.2.1-1
- Update to version 1.2.1
* Tue Nov 18 2025 Packit  - 1.2.0-1
- Update to version 1.2.0
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Packit  - 1.2.1-1
- Update to version 1.2.1
--------------------------------------------------------------------------------

================================================================================
 fcgi-2.4.7-1.el10_2 (FEDORA-EPEL-2025-596d7a5bb9)
 FastCGI development kit
--------------------------------------------------------------------------------
Update Information:

2.4.7 release, fixes CVE-2025-23016
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Andrew Bauer  - 2.4.7-1
- 2.4.7 release, fixes CVE-2025-23016
* Wed Jul 23 2025 Fedora Release Engineering  - 2.4.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Sat May 31 2025 Andrew Bauer  - 2.4.6-1
- 2.4.6 release
- Upstream project moved to github with new author
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2417257 - fcgi-2.4.7 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2417257
--------------------------------------------------------------------------------

================================================================================
 fedpkg-1.47-1.el10_2 (FEDORA-EPEL-2025-46210d79e3)
 Fedora utility for working with dist-git
--------------------------------------------------------------------------------
Update Information:

New releases, more information about content:
https://docs.pagure.org/fedpkg/releases/1.47.html
https://docs.pagure.org/rpkg/releases/1.69.html
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Ondřej Nosek  - 1.47-1
- Use ruff code checker instead of bandit (onosek)
- Clone the API key info into all help messages (mpospisi)
- README: Documentation link change, and new Jenkins link – `#606`_ (gleiro)
- `update`: Add unspecified update type ([e-mail])
- `request-unretirement`: Added a new command (amedvede)
- `request-repo`: creating project and package in Anitya (amedvede)
- Switch to %pyproject_* macros (onosek)
- `retire`: extend the command's console help - `rhbz#2189969`_ (onosek)
- Jenkinsfile: use local declaration instead of global (onosek)
- `srpm`: --offline arg to prevent connecting to Koji – `#600`_ (onosek)
* Fri Sep 19 2025 Python Maint  - 1.46-7
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint  - 1.46-6
- Rebuilt for Python 3.14.0rc2 bytecode
* Wed Jul 23 2025 Fedora Release Engineering  - 1.46-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------

================================================================================
 keepass-2.60-3.el10_2 (FEDORA-EPEL-2025-64adab1e1a)
 Password manager
--------------------------------------------------------------------------------
Update Information:

First version for EPEL10
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Dr. Tilmann Bubeck  - 2.60-3
- First version for EPEL10
* Wed Nov 26 2025 Dr. Tilmann Bubeck  - 2.60-2
- RPMAUTOSPEC: unresolvable merge
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2374372 - Please branch and build keepass in epel10
        https://bugzilla.redhat.com/show_bug.cgi?id=2374372
--------------------------------------------------------------------------------

================================================================================
 mkdocs-material-9.7.0-1.el10_2 (FEDORA-EPEL-2025-7eaf5a3688)
 Material design theme for MkDocs
--------------------------------------------------------------------------------
Update Information:

Initial EPEL 10 release
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 19 2025 Michel Lind  - 9.7.0-1
- Update to 9.7.0 upstream release
- Resolves: rhbz#2388797
- Relax pillow version requirement
* Fri Sep 19 2025 Python Maint  - 9.6.16-5
- Rebuilt for Python 3.14.0rc3 bytecode
* Fri Aug 15 2025 Python Maint  - 9.6.16-4
- Rebuilt for Python 3.14.0rc2 bytecode
* Thu Aug 14 2025 Davide Cavalca  - 9.6.16-3
- Unbootstrap
* Thu Aug 14 2025 Davide Cavalca  - 9.6.16-2
- Rebootstrap
* Thu Aug 14 2025 Davide Cavalca  - 9.6.16-1
- Update to 9.6.16; Fixes: RHBZ#2365420, RHBZ#2385193, RHBZ#2385982
* Thu Jul 24 2025 Fedora Release Engineering  - 9.6.12-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Mon Jul 21 2025 Python Maint  - 9.6.12-4
- Unbootstrap for Python 3.14
* Fri Jul 18 2025 Python Maint  - 9.6.12-3
- Bootstrap for Python 3.14
* Thu Apr 17 2025 Davide Cavalca  - 9.6.12-1
- Update to 9.6.12; Fixes: RHBZ#2352888
* Thu Mar 13 2025 Davide Cavalca  - 9.6.8-1
- Update to 9.6.8; Fixes: RHBZ#2349320
* Sat Mar  1 2025 Davide Cavalca  - 9.6.6-1
- Update to 9.6.6; Fixes: RHBZ#2349140
* Thu Feb 20 2025 Davide Cavalca  - 9.6.5-1
- Update to 9.6.5; Fixes: RHBZ#2346732
* Wed Feb 19 2025 Davide Cavalca  - 9.6.4-1
- Update to 9.6.4; Fixes: RHBZ#2345183
* Sun Feb  9 2025 Davide Cavalca  - 9.6.3-1
- Update to 9.6.3; Fixes: RHBZ#2332553
* Sat Feb  8 2025 Davide Cavalca  - 9.5.48-5
- Enable extra features; Fixes: RHBZ#2333298
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2415899 - Please branch and build mkdocs-material in epel10
        https://bugzilla.redhat.com/show_bug.cgi?id=2415899
--------------------------------------------------------------------------------

================================================================================
 nickle-2.107-1.el10_2 (FEDORA-EPEL-2025-aaff54b05d)
 A programming language-based prototyping environment
--------------------------------------------------------------------------------
Update Information:

nickle (2.106) unstable; urgency=medium
Rename Complex as ComplexVal. Closes: #1117746.
-- Keith Packard [e-mail]  Fri, 10 Oct 2025 11:20:32 -0700
nickle (2.105) unstable; urgency=medium
Add more math functions
Improve performance of log for large values.
Improve performance of gamma for negative values.
Test gamma using Legendre duplication formula.
Improve accuracy and avoid infinite loop in sqrt and cbrt.
Test sqrt and cbrt.
Add 'complex' type.
-- Keith Packard [e-mail]  Sun, 05 Oct 2025 13:10:14 -0700
nickle (2.104) unstable; urgency=medium
Replace #include SYMBOL with conditional includes.
Replace 'fmt --width=500' with 'fmt -w 500' which is more common.
Skip readline signal calls when not using libreadline.
Add Multi-Arch: allowed for cross-building packges.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Michel Lind  - 2.107-1
- Update to 2.107 upstream release
* Tue Nov 25 2025 Michel Lind  - 2.106-1
- Update to 2.106 upstream release
- Resolves: rhbz#2402922
- Adapt spec to build with meson
* Thu Jul 24 2025 Fedora Release Engineering  - 2.103-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2402922 - nickle-2.107 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2402922
--------------------------------------------------------------------------------

================================================================================
 pax-utils-1.3.10-1.el10_2 (FEDORA-EPEL-2025-0829be991f)
 ELF utils that can check files for security relevant properties
--------------------------------------------------------------------------------
Update Information:

Latest upstream release. Fixes OSABI STANDALONE not detected when char is signed
and crash in scanelf.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Dominik Mierzejewski  - 1.3.10-1
- update to 1.3.10 (resolves rhbz#2416912 and rhbz#2372409)
* Sat Nov 15 2025 Dominik Mierzejewski  - 1.3.9-1
- update to 1.3.9 (resolves rhbz#2414346)
* Fri Jul 25 2025 Fedora Release Engineering  - 1.3.8-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2372409 - scanelf crash with version pax-utils-1.3.8-2.el9 on RHEL 9.6
        https://bugzilla.redhat.com/show_bug.cgi?id=2372409
  [ 2 ] Bug #2416912 - pax-utils-1.3.10 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2416912
--------------------------------------------------------------------------------

================================================================================
 pie-1.3.0-1.el10_2 (FEDORA-EPEL-2025-cf51fd170b)
 PHP Installer for Extensions
--------------------------------------------------------------------------------
Update Information:

Version 1.3.0
Bug
426: Remove timeouts on all process invocations except those potentially using
sudo thanks to @asgrim and @Radiergummi
425: Fix configure options causing package not found thanks to @asgrim and
@flavioheleno
414: Ensure a previously tagged non-stable nightly can be upgraded thanks to
@asgrim and @TimWolla
412: Ensure repo is checked out for gh to attach the release thanks to @asgrim
402: Skip test with no known /usr/bin/php-configX.Y thanks to @mbeccati
401: Override default recommended versions for bundled extensions thanks to
@asgrim
399: Fix case sensitivity of ext requires in pie install and pie show thanks to
@asgrim and @ruudk
391: Handle box git version formatting properly in self-update thanks to @asgrim
389: Fix typo in pie-settings-schema.json ID thanks to @asgrim
380: Ensure php/ bundled dependencies can be installed on unstable PHPs thanks
to @asgrim
378: Catch BundledPhpExtensionRefusal in pie show thanks to @asgrim
363: Handle scenario where pie.phar is not uploaded to the latest release yet
thanks to @asgrim
362: Fix handling of additional INI directory files thanks to @alies-dev
361: Fix location of InstallPiePackageFromPathTest thanks to @asgrim
Enhancement
417: Behat feature description improvements thanks to @asgrim
396: Added --no-cache option to avoid using Composer cache thanks to @asgrim
395: Housekeeping and dep update thanks to @asgrim
390: Replace Symfony Console output with ConsoleIO thanks to @asgrim
388: Show newest unconstrained version thanks to @asgrim and @jnoordsij
386: update to thephpf/attestation:0.0.2 thanks to @asgrim
385: Improve self-update with channels options thanks to @asgrim and @TimWolla
384: Allow dot in the path thanks to @mbeccati
381: Skip test when pie can't enable the extension thanks to @mbeccati
376: Switch to phpstan thanks to @asgrim
375: Update test ext for PHP 8.5 API update thanks to @asgrim
374: Use attestation library for verifications thanks to @asgrim
373: Only suppress deprecations when running as Phar thanks to @asgrim
372: Improve pie info with dependencies and OS/TS compatibility info thanks to
@asgrim
364: Non interactive pie project install thanks to @asgrim and @Neirda24
248: Remove Composer::AuthHelper usage & update to Composer 2.9.1 thanks to
@rtm-ctrlz
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Remi Collet  - 1.3.0-1
- update to 1.3.0
--------------------------------------------------------------------------------

================================================================================
 python-cron-converter-1.3.0-1.el10_2 (FEDORA-EPEL-2025-037be7d4a3)
 Cron string parser and scheduler for Python
--------------------------------------------------------------------------------
Update Information:

Update to 1.3.0 upstream release
Starting from version 1.3, the Seeker object implements Python’s Iterator
protocol, enabling standard iteration patterns.
Fix test_timezone failing around DST transitions
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Packit  - 1.3.0-1
- Update to 1.3.0 upstream release
- Resolves: rhbz#2417168
* Wed Nov 26 2025 Benjamin A. Beasley  - 1.2.2-3
- Fix test_timezone failing around DST transitions
- Fixes RHBZ#2417019
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2417019 - python-cron-converter fails to build with Python 3.15: AssertionError: False is not true : Timezones does not match
        https://bugzilla.redhat.com/show_bug.cgi?id=2417019
  [ 2 ] Bug #2417168 - python-cron-converter-1.3.0 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=2417168
--------------------------------------------------------------------------------

================================================================================
 rpkg-1.69-2.el10_2 (FEDORA-EPEL-2025-46210d79e3)
 Python library for interacting with rpm+git
--------------------------------------------------------------------------------
Update Information:

New releases, more information about content:
https://docs.pagure.org/fedpkg/releases/1.47.html
https://docs.pagure.org/rpkg/releases/1.69.html
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 25 2025 Ondřej Nosek  - 1.69-2
- Patch: Use ruff code checker instead of bandit
* Tue Nov 25 2025 Ondřej Nosek  - 1.69-1
- Only update the progress bar when meaningfully changed (code)
- Don’t set up upload progress when stdout isn’t a tty (code)
- Fix unittests for Python 3.14 (onosek)
- `sources`: set "Accept-Encoding: identity" header on HTTP requests
  (decathorpe)
- Accept auto-generated sources in pre-push checks (fweimer)
- Add mock configuration option to build and srpm commands for use along with
  the srpm mock option, same as in mockbuild command. (abobrov)
- `srpm`: man page generation fixed (onosek)
- `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
- type: fix typo in requirements README. (gleiro)
- `patch`: Execute subprocess in text mode (ferdnyc)
- Fix mockbuild --srpm-mock specfile_path (wngtk)
- `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
- Switch to %pyproject_* macros (onosek)
- Use the spec name to assemble src.rpm name (sergio)
- Jenkinsfile: use local declaration instead the global (onosek)
- `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
- `mockbuild`: -r argument as shortcut of --root (sergio)
- `rhpkg mockbuild` won't show a hint with '--target' (onosek)
--------------------------------------------------------------------------------

================================================================================
 steam-devices-1.0.0.101^git20251018.4d7e6c1-5.el10_2 (FEDORA-EPEL-2025-d94b10d243)
 Device support for Steam-related hardware
--------------------------------------------------------------------------------
Update Information:

Update to latest snapshot.
--------------------------------------------------------------------------------
ChangeLog:

* Wed Nov 26 2025 Simone Caronni  - 1.0.0.101^git20251018.4d7e6c1-5
- Update to latest snapshot.
--------------------------------------------------------------------------------