# changelog

author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.0.0-1
changelog:
  - Drop osg-cleanup support (SOFTWARE-2695)
  - Drop glexec support (SOFTWARE-2697)
  - Drop warning if RSV is not installed (SOFTWARE-2748)
  - Drop managedfork and network config and add transitional dummy packages (SOFTWARE-2705)
  - Deprecate GUMS support (SOFTWARE-2737)
  - Drop GRAM support (SOFTWARE-2726)
  - Drop 'configure-osg' aliases and transitional dummy packages for monalisa and cemon (SOFTWARE-2699)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.1.1-1
changelog:
  - Fix logging in ensure_valid_user_vo_file (SOFTWARE-2819)
  - Configure GUMS before running gums-host-cron (SOFTWARE-2792)
  - Fix missing warnings in -v (SOFTWARE-2772)
  - Remove unused test configs (SOFTWARE-2701)
  - Make exception usage consistent (SOFTWARE-2700)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.2.2-1
changelog:
  - Add option to evaluate all FQANs with vomsmap auth (SOFTWARE-2932)
  - Tweak comments in 10-misc.ini (SOFTWARE-2941)


author: Carl Edquist <edquist@cs.wisc.edu> - 3.0.0-9
changelog:
  - Add globus-xio-udt-driver dependency for el6, and enable by default in
    /etc/gridftp.d/ (SOFTWARE-1412)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 6.1.18-1.1
changelog:
  - Patch to fix debug/error messages for accepted_peer_names (PR #70)
      require globus-gssapi-gsi >= 12 due to the API change that caused this


author: Derek Weitzel <dweitzel@cse.unl.edu> - 2.1.3-1
changelog:
  - Add JSON attributes for AGIS (SOFTWARE-2591)
  - Respect RequestCpus of incoming jobs (SOFTWARE-2598)
  - Fix set_attr check in condor_ce_startup (SOFTWARE-2581)


author: Brian Lin <blin@cs.wisc.edu> - 2.1.5-1
changelog:
  - Do not disable LCMAPS VOMS attribute checking (SOFTWARE-2633)
  - Package htcondor-ce-slurm (SOFTWARE-2631)


author: Brian Lin <blin@cs.wisc.edu> - 2.2.1-1
changelog:
  - CPU accounting and non-Condor batch system memory request fixes (SOFTWARE-2786, SOFTWARE-2787)
  - Disable mail on service restart


author: Dave Dykstra <dwd@fnal.gov> - 3.0.0-1
changelog:
  - Add the audit_payloads function.  This logs the starting and stopping of
    all payloads that were started from pilot systems based on condor.
  - Do not hold jobs with expired proxy (SOFTWARE-2803)
  - Only warn about configuration if osg-configure is present (SOFTWARE-2805)
  - CEView VO tab throws 500 error on inital installation (SOFTWARE-2826)


author: Dave Dykstra <dwd@fnal.gov> - 3.0.1-1
changelog:
  - Fix loss of job audit info when a new job implicitly stopped a previous
    job that was the last one in a master slot (SOFTWARE-2788).


author: Brian Lin <blin@cs.wisc.edu> - 3.0.3-1
changelog:
  - Fix condor_ce_ping with IPv6 addresses (SOFTWARE-3030)
  - Fix for CEView being killed after 24h (SOFTWARE-2820)
  - Import the web_utils library for condor_ce_metric


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.2-1
changelog:
  - Drop bdii-status probe (SOFTWARE-2660)
  - Fix transfer collector strings in ProbeConfig (SOFTWARE-2560)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.0-1
changelog:
  - Drop glexec probe & old GRAM code (SOFTWARE-3105)
  - Fix handling of SlurmLocation in slurm probe (SOFTWARE-2795)
  - Make ProjectName case insensitive in condor probe (SOFTWARE-3017)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.3-2
changelog:
  - Fix htcondor-ce probe's condor_config_val queries (SOFTWARE-2629)
  - Update pbs/lsf latest timestamp for empty logfiles (SOFTWARE-3041)


author: Edgar Fajardo <emfajard@ucsd.edu> - 1:4.5.0-1
changelog:
  - Update to 4.5.0 SOFTWARE-2549
  - Allow specifying a different timeout for null cached entries
  - Implement request signing
  - Add ZIP extracting capability to xrdcp
  - Include the release number in client Login request cgi.
  - Add support for spaces in file names for mv operation.


author: Edgar Fajardo <emfajard@ucsd.edu> - 1:4.6.0-1
changelog:
  - Update to 4.6.0 SOFTWARE-2597
  - File caching proxy V2
  - Add non-blocking sends to avoid slow links


author: Mischa Salle <msalle@nikhef.nl> 0.3.5-1
changelog:
  - installed BUGS as documentation
  - add requirement on LCMAPS plus minimal version
  - use mandir for installing man pages
  - bumped version


author: Mischa Salle <msalle@nikhef.nl> 0.4.0-1
changelog:
  - update build requirement on xacml-devel plus minimal version
  - add requirement on xacml plus minimal version
  - bumped version


author: Mischa Salle <msalle@nikhef.nl> 0.5.0-1
changelog:
  - update builddep on lcmaps-devel instead of -interface
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - remove defattr
  - updated version


author: Mischa Salle <msalle@nikhef.nl> 0.5.0-2
changelog:
  - clean up installed documentation files (breaks Fedora20)
  - correct bogus dates in changelog (breaks Fedora20)


author: Tim Theisen <tim@cs.wisc.edu> - 8.4.9-1
changelog:
  - The condor_startd removes orphaned Docker containers on restart
  - Job Router and HTCondor-C job job submission prompts schedd reschedule
  - Fixed bugs in the Job Router's hooks
  - Improved systemd integration on Enterprise Linux 7
  - Upped default number of Chirp attributes to 100, and made it configurable
  - Fixed a bug where variables starting with STARTD. or STARTER. were ignored


author: Tim Theisen <tim@cs.wisc.edu> - 8.5.7-1
changelog:
  - The schedd can perform job ClassAd transformations
  - Specifying dependencies between DAGMan splices is much more flexible
  - The second argument of the ClassAd ? : operator may be omitted
  - Many usability improvements in condor_q and condor_status
  - condor_q and condor_status can produce JSON, XML, and new ClassAd output
  - To prepare for a 64-bit Windows release, HTCondor identifies itself as X86
  - Automatically detect Daemon Core daemons and pass localname to them


author: Tim Theisen <tim@cs.wisc.edu> - 8.4.10-1
changelog:
  - Updated SELinux profile for Enterprise Linux
  - Fixed a performance problem in the schedd when RequestCpus was an expression
  - Preserve permissions when transferring sub-directories of the job's sandbox
  - Fixed HOLD_IF_CPUS_EXCEEDED and LIMIT_JOB_RUNTIMES metaknobs
  - Fixed a bug in handling REMOVE_SIGNIFICANT_ATTRIBUTES


author: Tim Theisen <tim@cs.wisc.edu> - 8.5.8-1
changelog:
  - The starter puts all jobs in a cgroup by default
  - Added condor_submit commands that support job retries
  - condor_qedit defaults to the current user's jobs
  - Ability to add SCRIPTS, VARS, etc. to all nodes in a DAG using one command
  - Able to conditionally add Docker volumes for certain jobs
  - Initial support for Singularity containers
  - A 64-bit Windows release


author: Tim Theisen <tim@cs.wisc.edu> - 8.4.11-1
changelog:
  - Fixed a bug which delayed startd access to stard cron job results
  - Fixed a bug in pslot preemption that could delay jobs starting
  - Fixed a bug in job cleanup at job lease expiration if using glexec
  - Fixed a bug in locating ganglia shared libraries on Debian and Ubuntu


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.0-1
changelog:
  - condor_q shows shows only the current user's jobs by default
  - condor_q summarizes related jobs (batches) on a single line by default
  - Users can define their own job batch name at job submission time
  - Immutable/protected job attributes make SUBMIT_REQUIREMENTS more useful
  - The shared port daemon is enabled by default
  - Jobs run in cgroups by default
  - HTCondor can now use IPv6 addresses (Prefers IPv4 when both present)
  - DAGMan: Able to easily define SCRIPT, VARs, etc., for all nodes in a DAG
  - DAGMan: Revamped priority implementation
  - DAGMan: New splice connection feature
  - New slurm grid type in the grid universe for submitting to Slurm
  - Numerous improvements to Docker support
  - Several enhancements in the python bindings


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.1-1
changelog:
  - condor_q works in situations where user authentication is not configured
  - Updates to work with Docker version 1.13
  - Fix several problems with the Job Router
  - Update scripts to support current versions of Open MPI and MPICH2
  - Fixed a bug that could corrupt the job queue log when the disk is full


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.2-1
changelog:
  - New metaknobs for mapping users to groups
  - Now case-insensitive with Windows user names when storing credentials
  - Signal handling in the OpenMPI script
  - Report RemoteSysCpu for Docker jobs
  - Allow SUBMIT_REQUIREMENT to refer to X509 secure attributes
  - Linux kernel tuning script takes into account the machine's role


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.3-1
changelog:
  - Fixed a bug where using an X.509 proxy might corrupt the job queue log
  - Fixed a memory leak in the Python bindings


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.4-1
changelog:
  - Python bindings are now available on MacOSX
  - Fixed a bug where PASSWORD authentication could fail to exchange keys
  - Pslot preemption now properly handles custom resources, such as GPUs
  - condor_submit now checks X.509 proxy expiration


author: Lincoln Bryant <lincolnb@hep.uchicago.edu> - 4.0.2-2
changelog:
  - B. Tovar patched segfault in Makeflow when using Condor submit
  - Moved Perl from site_perl to vendor_perl


author: Edgar Fajardo <efajardo@cern.ch> - 4.0.2-7
changelog:
  - Addded the obsoletes part to the doc subpackage so a clean upgrade is done in cases users had older versions


author: Marco Mambelli <marcom@fnal.gov> - 3.2.12.1-1
changelog:
  - Glideinwms v3.2.12.1 release (see notes for featires and bug fixes)
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_12_1/history.html
  - Release candidates: 3.2.12-0.1.rc1 to 3.2.12-0.5.rc5


author: Parag Mhashilkar <parag@fnal.gov> - 3.2.13-1
changelog:
  - Glideinwms v3.2.13 (see release notes for details)
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_13/history.html
  - Release candidates: 3.2.13-0.1.rc1 to 3.2.13-0.2.rc2


author: Parag Mhashilkar <parag@fnal.gov> - 3.2.14-1
changelog:
  - Glideinwms v3.2.14
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_14/history.html
  - Release candidates: 3.2.14-0.1.rc1 to 3.2.14-0.2.rc2


author: Parag Mhashilkar <parag@fnal.gov> - 3.2.14.1-1
changelog:
  - Glideinwms v3.2.14.1
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_14_1/history.html
  - Release candidates: 3.2.14.1-0.1.rc1


author: Parag Mhashilkar <parag@fnal.gov> - 3.2.15-1
changelog:
  - Glideinwms v3.2.15
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_15/history.html
  - Release candidates: 3.2.15-0.1.rc1 to 3.2.15-0.4.rc4


author: Parag Mhashilkar <parag@fnal.gov> - 3.2.16-1
changelog:
  - Glideinwms v3.2.16
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_16/history.html
  - Release candidates: 3.2.16-0.1.rc1 to 3.2.16-0.2.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.2.17-1
changelog:
  - Glideinwms v3.2.17
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_17/history.html
  - Release candidates: 3.2.17-0.1.rc1 to 3.2.17-0.3.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.2.18-1
changelog:
  - Glideinwms v3.2.18
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_18/history.html
  - Release candidates: 3.2.18-0.1.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.2.19-1
changelog:
  - Glideinwms v3.2.19
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_19/history.html
  - Release candidates: 3.2.19-0.1.rc1


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.8-1
changelog:
  - Avoid setting processors twice in slurm probe (SOFTWARE-3475)
  - Add travis-ci infrastructure, add condor unit tests (#43)
  - Default to 0 processors in condor probe (SOFTWARE-3474, SOFTWARE-3476)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.9-1
changelog:
  - Packaging revamp (SOFTWARE-3546)
  - Document probe xml records (SOFTWARE-3609, SOFTWARE-3641)
  - Cleanup init script (SOFTWARE-2503)
  - Fix Exception string construction (#37)
  - Support slurm v18 schema (SOFTWARE-3724)


author: Marco Mambelli <marcom@fnal.gov> - 3.3.3-1
changelog:
  - Glideinwms v3.3.3
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_3_3/history.html
  - Release candidates: 3.3.3-0.1.rc1


author: Brian Lin <blin@cs.wisc.edu> - 3.2.22.2-2
changelog:
  - Fix automatically renewed proxy ownership
  - Set the proper permissions and owners for service, timer, and cron files


author: Marco Mambelli <marcom@fnal.gov> - 3.4-1
changelog:
  - Glideinwms v3.4
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4/history.html
  - Release candidates: 3.4-0.1.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.4.1-1
changelog:
  - Glideinwms v3.4.1
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4_1/history.html
  - Release candidates: 3.4.1-0.1.rc1 to 3.4.1-0.3.rc3


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.5-1
changelog:
  - Fixed a memory leak that would cause the HTCondor collector to slowly grow
  - Prevent the condor_starter from hanging when using cgroups on Debian
  - Fixed several issues that occur when IPv6 is in use
  - Support for using an ImDisk RAM drive on Windows as the execute directory
  - Fixed a bug where condor_rm rarely removed another one of the user's jobs
  - Fixed a bug with parallel universe jobs starting on partitionable slots


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.6-1
changelog:
  - HTCondor daemons no longer crash on reconfig if syslog is used for logging
  - HTCondor daemons now reliably leave a core file when killed by a signal
  - Negotiator won't match jobs to machines with incompatible IPv{4,6} network
  - On Ubuntu, send systemd alive messages to prevent HTCondor restarts
  - Fixed a problem parsing old ClassAd string escapes in the python bindings
  - Properly parse CPU time used from Slurm grid universe jobs
  - Claims are released when parallel univ jobs are removed while claiming
  - Starter won't get stuck when a job is removed with JOB_EXIT_HOOK defined
  - To reduce audit logging, added cgroup rules to SELinux profile


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.7-1
changelog:
  - Fixed a bug where memory limits might not be updated in cgroups
  - Add SELinux type enforcement rules to allow condor_ssh_to_job to work
  - Updated systemd configuration to shutdown HTCondor in an orderly fashion
  - The curl_plugin utility can now do HTTPS transfers
  - Specifying environment variables now works with the Python Submit class


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.9-1
changelog:
  - Fixed a bug where some Accounting Groups could get too much surplus quota
  - Fixed a Python binding bug where some queries could corrupt memory
  - Fixed a problem where preen could block the schedd for a long time
  - Fixed a bug in Windows where the job sandbox would not be cleaned up
  - Fixed problems with the interaction between the master and systemd
  - Fixed a bug where MAX_JOBS_SUBMITTED could be permanently reduced
  - Fixed problems with very large disk requests


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.10-1
changelog:
  - Fixed a problem where condor_preen would crash on an active submit node
  - Improved systemd configuration to clean up processes if the master crashes
  - Fixed several other minor problems


author: Carl Edquist <edquist@cs.wisc.edu> - 100-1
changelog:
  - Drop MIS VO (SOFTWARE-3575)
  - Map FNAL VO subgroups to the VO-wide target (SOFTWARE-4005)
  - New cert for GLOW (SOFTWARE-4006)
  - Replace one of the certs for OSG (SOFTWARE-4007)
  - Update Gluex cert for gryphn.phys.uconn.edu (SOFTWARE-4008)
  - Update voms2.fnal.gov DN for DES, DUNE, Fermilab (SOFTWARE-4012)
  - Drop CDF (SOFTWARE-4012)
  - Crosscheck script improvements


author: Carl Edquist <edquist@cs.wisc.edu> - 101-1
changelog:
  - Second round of InCommon subject DN changes (SOFTWARE-4018)
  - Add new GlueX DN (SOFTWARE-4008)
  - Drop obsolete GLOW cert
  - Update LZ DN for voms.hep.wisc.edu (SOFTWARE-4021)
  - Retire DOSAR (SOFTWARE-4019)


author: Marco Mambelli <marcom@fnal.gov> - 3.2.22-1
changelog:
  - Glideinwms v3.2.22
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_22/history.html
  - Release candidates: 3.2.22-0.1.rc1 to 3.2.22-0.2.rc2


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.7-1
changelog:
  - GT6 update:
    - Force IPC encryption if server configuration requires
    - Fix old IPC bug making it hard to diagnose racy connection failures


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.12-1
changelog:
  - GT6 update:
    - Use 2048 bit keys to support openssl 1.1.1 (12.10)
    - Log remote http connection address for legacy s3 transfers (12.11/12.12)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.8-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - Grid Community Toolkit merged a number of outstanding pull requests (13.0)
    - Add option to send IPv6 address in EPSV response
    - Add function to get the command string
    - Be more selective in what config files we skip
    - Add unames for GNU/Hurd and kfreebsd to chroot setup script
  - Merge GT6 update 12.5 into GCT (13.1)
  - First Grid Community Toolkit release (13.2)
    - Disable usage statistics reporting by default
    - Add man page for globus-gridftp-password - contribution from IGE
  - Use 2048 bit RSA key for tests (13.3)
  - Merge GT6 update 12.6 into GCT (13.4)
  - Merge GT6 update 12.7 into GCT (13.5)
  - Merge GT6 update 12.8 into GCT (13.6)
  - Merge GT6 update 12.9 into GCT (13.7)
  - Merge GT6 update 12.12 into GCT (13.8)
  - Drop patches globus-gridftp-server-unames.patch, -epsv-ip.patch,
    -cmd-string.patch and -config.patch (accepted upstream)
  - Drop the man page for globus-gridftp-password from the source package
    (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 13.11-1
changelog:
  - Improvements for filesystems that encounter listing timeouts (13.10)
  - Remove usage statistics collection support (13.11)


author: Carl Edquist <edquist@cs.wisc.edu> - 71-3
changelog:
  - Include vo-client-lcmaps-voms sub-package with voms-mapfile-default
    for use by the LCMAPS VOMS plugin (SOFTWARE-2609, SOFTWARE-2563)


author: Carl Edquist <edquist@cs.wisc.edu> - 72-1
changelog:
  - Update to vo-client 72 (SOFTWARE-2643)
    - Remove NYSGRID, CSIU, & OSGEDU VOs
    - Add voms.grid.iu.edu voms server for OSG VO


author: Carl Edquist <edquist@cs.wisc.edu> - 73-1
changelog:
  - Update to vo-client 73 (SOFTWARE-2710)
    - Update edg-mkgridmap CDF entry to match vomses #13
    - Remove LIGO server from GUMS template #14
    - Remove unused CDF glidecaf settings #15
      - https://ticket.opensciencegrid.org/33395
    - drop /production role for des vomsUserGroup #17 (SOFTWARE-2350)
    - Update default CMS mappings #18 (SOFTWARE-2691)
      - https://ticket.opensciencegrid.org/33396#1491658593
    - Update default Fermilab / FIFE mappings #19 (SOFTWARE-2690)
      - https://ticket.opensciencegrid.org/33395#1491839472


author: Carl Edquist <edquist@cs.wisc.edu> - 74-1
changelog:
  - Update to vo-client 74 (SOFTWARE-2765)
    - Fix the edg-mkgridmap entries for project8 and miniclean (SOFTWARE-2727)
    - Add new VOMS entry for CIGI (SOFTWARE-2712)
      - https://ticket.opensciencegrid.org/33374
    - Add LIGO entry to GUMS template (SOFTWARE-2762)
    - Fix vo-client ATLAS mappings (SOFTWARE-2753)


author: Dave Dykstra <dwd@fnal.gov> 1.6.4-1.3.osg
changelog:
  - Updated defaultnovomscheck.patch for current source code context.
    Apparently the el5 patch was forgiving enough so as to not notice.


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.6.6-1.2.osg
changelog:
  - Add ban-mapfile, ban-voms-mapfile and updated lcmaps.db with a new
    authorize_only policy that uses the ban files, voms mapfiles, and a
    modified verify_proxy.  This adds new requirements on:
    - lcmaps-plugins-voms >= 1.7.1-1.1
    - lcmaps-plugins-verify-proxy >= 1.5.9-1.1
    (SOFTWARE-2602)


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.11-1
changelog:
  - Can now do an interactive submit of a Singularity job
  - Shared port daemon is more resilient when starved for TCP ports
  - The Windows installer configures the environment for the Python bindings
  - Fixed several other minor problems


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.12-1
changelog:
  - Support for Debian 9, Ubuntu 16, and Ubuntu 18
  - Fixed a memory leak that occurred when SSL authentication fails
  - Fixed a bug where invalid transform REQUIREMENTS caused a Job to match
  - Fixed a bug to allow a queue super user to edit protected attributes
  - Fixed a problem setting the job environment in the Singularity container
  - Fixed several other minor problems


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.10.1-1
changelog:
  - Change goc-* promotion routes to use osg 3.4
  - Change default promotion routes to use osg 3.4
  - Drop el5 promotion route for hcc (SOFTWARE-2730)
  - Display friendlier error messages in osg-promote


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1
changelog:
  - New release 1.11.0 (SOFTWARE-3107)
    Relnotes at https://github.com/opensciencegrid/osg-build/releases/tag/v1.11.0
  - Drop el5-isms (SOFTWARE-3050)
  - Drop koji-hub-testing.patch (no longer applies anyway)
  - Add python-six dependency


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.12.0-1
changelog:
  - Release for 1.12.0 (SOFTWARE-3172)
    Release notes at https://github.com/opensciencegrid/osg-build/releases/tag/v1.12.0


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.12.2-1
changelog:
  - Fix osg-build --version
    Release notes at https://github.com/opensciencegrid/osg-build/releases/tag/v1.12.2


author: Carl Edquist <edquist@cs.wisc.edu> - 1.17.2-1
changelog:
  - Use rpm version instead of $Revision$ svn:keyword (SOFTWARE-2538)
  - Include OSG patches (SOFTWARE-2551, SOFTWARE-2532)


author: Tim Theisen <tim@cs.wisc.edu> - 8.7.10-1
changelog:
  - Can now interactively submit Docker jobs
  - The administrator can now add arguments to the Singularity command line
  - The MUNGE security method is now supported on all Linux platforms
  - The grid universe can create and manage VM instances in Microsoft Azure
  - Added a single-node package to facilitate using a personal HTCondor


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.0-1
changelog:
  - Automatically add AWS resources to your pool using HTCondor Annex
  - The Python bindings now include submit functionality
  - Added the ability to run a job immediately by replacing a running job
  - A new minicondor package makes single node installations easy
  - HTCondor now tracks and reports GPU utilization
  - Several performance enhancements in the collector
  - The grid universe can create and manage VM instances in Microsoft Azure
  - The MUNGE security method is now supported on all Linux platforms


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.1-1
changelog:
  - Fixed excessive CPU consumption with GPU monitoring
  - GPU monitoring is off by default; enable with "use feature: GPUsMonitor"
  - HTCondor now works with the new CUDA version 10 libraries
  - Fixed a bug where sometimes jobs would not start on a Windows execute node
  - Fixed a bug that could cause DAGman to go into an infinite loop on exit
  - The JobRouter doesn't forward the USER attribute between two UID Domains
  - Made Collector.locateAll() more efficient in the Python bindings
  - Improved efficiency of the negotiation code in the condor_schedd


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.2-1
changelog:
  - Fixed problems with condor_ssh_to_job and Singularity jobs
  - Fixed a problem that could cause condor_annex to crash
  - Fixed a problem where the job queue would very rarely be corrupted
  - condor_userprio can report concurrency limits again
  - Fixed the GPU discovery and monitoring code to map GPUs in the same way
  - Made the CHIRP_DELAYED_UPDATE_PREFIX configuration knob work again
  - Fixed restarting HTCondor from the Service Control Manager on Windows
  - Fixed a problem where local universe jobs could not use condor_submit
  - Restored a deprecated Python interface that is used to read the event log
  - Fixed a problem where condor_shadow reuse could confuse DAGMan


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.3-1
changelog:
  - Fixed a bug where jobs were killed instead of peacefully shutting down
  - Fixed a bug where a restarted schedd wouldn't connect to its running jobs
  - Improved file transfer performance when sending multiple files
  - Fix a bug that prevented interactive submit from working with Singularity
  - Orphaned Docker containers are now cleaned up on execute nodes
  - Restored a deprecated Python interface that is used to read the event log


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.4-1
changelog:
  - Python 3 bindings - see version history for details (requires EPEL on EL7)
  - Can configure DAGMan to dramatically reduce memory usage on some DAGs
  - Improved scalability when using the python bindings to qedit jobs
  - Fixed infrequent schedd crashes when removing scheduler universe jobs
  - The condor_master creates run and lock directories when systemd doesn't
  - The condor daemon obituary email now contains the last 200 lines of log


author: Brian Lin <blin@cs.wisc.edu> - 3.4-1
changelog:
  - Drop GridFTP (SOFTWARE-2633)
  - Drop client tools (SOFTWARE-2650)
  - Drop GUMS and edg-mkgridmap (SOFTWARE-2482, SOFTWARE-2600)
  - Drop GRAM-related osg-configure modules (SOFTWARE-2705)


author: Brian Lin <blin@cs.wisc.edu> - 2.1.1-1
changelog:
  - Catch exceptions when network unreachable (SOFTWARE-3047)
  - Handle unreachable network in HTTP fallback logic (SOFTWARE-3034)


author: Brian Lin <blin@cs.wisc.edu> - 2.1.2-1
changelog:
  - Fix bug that prevented requesting service certificates (SOFTWARE-3051)
  - Handle HTTPS failed responses when the HTTPS connection succeeds and
    the HTTP connection fails (SOFTWARE-3034)


author: Brian Lin <blin@cs.wisc.edu> - 3.0.0-1
changelog:
  - Remove tools and libraries designed for use with OIM
  - Add an option to request CSRs (SOFTWARE-3228)


author: Dave Dykstra <dwd@fnal.gov> - 3.1.1-1
changelog:
  - Rename request.py to cert_request.py
  - Move common crypto code to cert_utils.py
  - Change permissions on generated keys to 644
  - Make -k and -c required in osg-incommon-cert-request, with no default
  - Expand tildes in --cert= and --key= osg-incommon-cert-request options
  - Immediately fail osg-incommon-cert-request if InCommon authentication fails


author: Jeny Teheran <jteheran@fnal.gov> - 3.2.0
changelog:
  - Change -f/--hostfile to -F/--hostfile
  - Change -T/--test to -t/--test
  - Switch argparsing to ArgumentParser
  - Validate if filepath exists and can be read at the ArgumentParser
  - Stop wrapping text messages
  - Include the program name in error messages
  - Show message per certificate when request or retrieval fails
  - Increased the number of retries for certificate retrieval


author: Jeny Teheran <jteheran@fnal.gov> - 3.2.1
changelog:
  - Add man page for osg-incommon-cert-request
  - Add .html version of man page for osg-incommon-cert-request


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.1.31-1
changelog:
  - GT6 update: Use 2048 bit keys to support openssl 1.1.1
  - Drop patch myproxy-2048-bits.patch (accepted upstream)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.3-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - First Grid Community Toolkit release (6.2.0)
    - Disable usage statistics reporting by default
    - Fix option parsing bug
  - Merge GT6 update 6.1.29 into GCT (6.2.1)
  - Use 2048 bit CA key for myproxy tests (6.2.2)
  - Merge GT6 update 6.1.30 into GCT (6.2.3)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.6-1
changelog:
  - Clean up old GPT references (6.2.5)
  - Install myproxy-get-trustroots man page (6.2.5)
  - Remove LICENSE.globus file - usage statistics collection (6.2.6)


author: Edgar Fajardo <emfajard@ucsd.edu> - 3.4-3
changelog:
  - Merged osg-base-ce and osg-htcondor-ce into only one subpackages (SOFTWARE-2768)
  - Remove the osg-base-ce package


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.2.3-1
changelog:
  - Replace dummy packages with obsoletes (SOFTWARE-3020)
  - Drop el5-isms (SOFTWARE-3050)
  - Put site info config into a separate module so osg-configure-gratia can require it (SOFTWARE-3018)
  - Remove remaining TWiki references (SOFTWARE-3036)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.2.4-1
changelog:
  - Improve comment for app_dir in 10-storage.ini (SOFTWARE-3150)
  - Handle exception caused by parse error (SOFTWARE-2310)
  - Don't require CE site information for non-CEs (SOFTWARE-3094)
  - Warn on long-deprecated "site information/site_name" attribute (SOFTWARE-3093)
  - Remove functions used for condor-python < 8.4 (SOFTWARE-3126)
  - Don't make /etc/condor-ce/config.d/50-osg-configure.conf without condor-ce (SOFTWARE-3160)
  - Validate environment variables in 40-localsettings.ini (SOFTWARE-3131)
  - Rename siteattributes.py to siteinformation.py


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.3.1-1
changelog:
  - Replace info about GOC/OIM in 40-siteinfo.ini comments (SOFTWARE-3297)
  - More thoroughly disable WN proxy renewal in BLAHP config (SOFTWARE-3161)


author: Marco Mambelli <marcom@fnal.gov> - 3.4.3-1
changelog:
  - GlideinWMS v3.4.3
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4_3/history.html
  - Release candidates: 3.4.3-0.1.rc1 to 3.4.3-0.2.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.4.4-1
changelog:
  - GlideinWMS v3.4.4
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4_4/history.html
  - Release candidates: 3.4.4-0.1.rc1 to 3.4.4-0.4.rc4


author: Marco Mambelli <marcom@fnal.gov> - 3.4.5-1
changelog:
  - GlideinWMS v3.4.5
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4_5/history.html
  - Release candidates: 3.4.5-0.1.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.5
changelog:
  - GlideinWMS v3.5
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_5/history.html
  - Release candidates: 3.5-0.1.rc1 to 3.5-0.1.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.4.6-1
changelog:
  - GlideinWMS v3.4.6
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4_6/history.html
  - Release candidates: 3.4.6-0.1.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.5.1-1
changelog:
  - GlideinWMS v3.5.1
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_5_1/history.html
  - Release candidates: 3.5.1-0.1.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.6-1
changelog:
  - GlideinWMS v3.6
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_6/history.html
  - This is a rename of 3.5.1, to respect the odd-even numbering


author: Marco Mambelli <marcom@fnal.gov> - 3.6.1-1
changelog:
  - GlideinWMS v3.6.1
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_6_1/history.html
  - Release candidates: 3.6.1-0.1.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.6.2-1
changelog:
  - GlideinWMS v3.6.2
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_6_2/history.html
  - Release candidates: 3.6.2-0.0.rc0 to 3.6.2-0.3.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.4.2-1
changelog:
  - Controlling that Frontend is not using options incompatible w/ linked Factories
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_4_2/history.html


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.5.4-1
changelog:
  - Don't require attributes in Resource Entry sections that aren't used in AGIS or the CE collector (SOFTWARE-2554)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.6.0-1
changelog:
  - Improve Resource Entry section (SOFTWARE-2562)
  -  require 'queue'
  -  add template in comments
  -  add cpucount and maxmemory attributes
  -  add subclusters and vo_tag attributes


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.7.0-1
changelog:
  - Drop GIP/OSG-Info-Services support (SOFTWARE-2644)
  - Make absence of user-vo-map file non-fatal (SOFTWARE-2696)
  - Create /etc/lcmaps.db from template and add voms-mapfile support (SOFTWARE-2601)
    (adds dependency on lcmaps-db-templates (SOFTWARE-2692)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.8.0-1
changelog:
  - Reject empty allowed_vos (SOFTWARE-2703)
  - Turn missing OSG_APP into a warning instead of an error (SOFTWARE-2674)
  - Get default allowed_vos from voms-mapfiles/banfiles if using vomsmap auth (SOFTWARE-2670)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.20.13-1
changelog:
  - Fix bug for slurm version < 18 (SOFTWARE-4055)
  - Fix handling of non-word characters in slurm cluster name (SOFTWARE-4032)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.4-7
changelog:
  - Add mistakenly dropped gratia-probe-xrootd-transfer requirement to
    osg-gridftp-xrootd (SOFTWARE-3141)


author: Zalak Shah <zsshah@iu.edu> 1.69-2
changelog:
  - CA release corresponding to IGTF 1.89 release.
  - Updated summary and description for osg-ca-certs (SOFTWARE-3097)
  - Replaced repo.grid.iu.edu -> repo.opensciencegrid.org (SOFTWARE-3097)


author: Zalak Shah <zsshah@iu.edu> 1.72-1
changelog:
  - CA release corresponding to IGTF 1.90 release.
  - Added root and intermediate certificates for Lets Encrypt CA (SOFTWARE-3249)


author: Carl Edquist <edquist@cs.wisc.edu> - 87-1
changelog:
  - Add new hcc cert (SOFTWARE-3608)
  - Retire unused VOs: dzero, SBGrid, suragrid & dream (SOFTWARE-3617)
  - Update voms.hep.wisc.edu lz VO certificate (SOFTWARE-3635)
  - Update FNAL voms2 VO configuration (SOFTWARE-3633)


author: Carl Edquist <edquist@cs.wisc.edu> - 88-1
changelog:
  - Update DNs for OSG (SOFTWARE-3647)
  - Add gluex.phys.uconn.edu VOMS server (SOFTWARE-3656)
  - Update cert for voms1.fnal.gov (SOFTWARE-3634)


author: Marian Zvada <marian.zvada@cern.ch> - 1:4.8.2-0.1.rc1
changelog:
  - using patch requested by BrianB along rc1 candidate
  - https://github.com/xrootd/xrootd/pull/664
  - SOFTWARE-3173


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.1.25-3
changelog:
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Remove _pkgdocdir and _initddir macro definitions
    - Drop redundant Requires corresponding to autogenerated pkgconfig Requires
    - Don't clear the buildroot in the install section
    - Remove the clean section
    - Drop the myproxy-openssl098.patch


author: Brian Lin <blin@cs.wisc.edu> - 2.0.11-1
changelog:
  - Accept all DaemonCore options in htcondor-ce-view (SOFTWARE-2481)
  - Fix incorrect comment in htcondor-ce-pbs template config (SOFTWARE-2476)


author: Brian Lin <blin@cs.wisc.edu> - 2.1.1-1
changelog:
  - Fix hold message for jobs that are not picked up by the job router
    (SOFTWARE-2539)
  - Remove TotalSubmitProcs attribute in routed jobs for correct
    condor_q job counts for HTCondor 8.5.x+


author: Brian Lin <blin@cs.wisc.edu> - 2.1.2-1
changelog:
  - condor_ce_info_status: safely handle bad data (SOFTWARE-2185)
  - Added Russian Data Intensive Grid certs to condor_mapfile (GOC#31952)


author: Marco Mambelli <marcom@fnal.gov> - 3.2.20-1
changelog:
  - Glideinwms v3.2.20
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_20/history.html
  - Release candidates: 3.2.20-0.1.rc1 to 3.2.20-0.4.rc4


author: Marco Mambelli <marcom@fnal.gov> - 3.2.21-1
changelog:
  - Glideinwms v3.2.21
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_2_21/history.html
  - Release candidates: 3.2.21-0.1.rc1 to 3.2.21-0.3.rc3


author: Brian Lin <blin@cs.wisc.edu> - 3.1.0-1
changelog:
  - Removed OSG-specific code and configuration from builds intended for the
    HTCondor repo
  - Updated the CERN BDII provider
  - Removed packaging necessary for EL5 builds


author: Brian Lin <blin@cs.wisc.edu> - 3.1.1-1
changelog:
  - Allow InCommon host certs
  - Drop vestigal HTCondor-related configuration
  - Add documentation for mapping multiple VOMS attributes


author: Carl Edquist <edquist@cs.wisc.edu> - 3.1.2-1
changelog:
  - Require voms-clients-cpp explicitly (SOFTWARE-3201)
  - Add CN -> daemon.opensciencegrid.org mapping (SOFTWARE-3236)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.1.4-1
changelog:
  - Fix condor_ce_trace failures caused by transferring /usr/bin/env (SOFTWARE-3387)
  - Fix regex for RDIG certs (SOFTWARE-3399)
  - Don't require authz check for condor_ce_q (SOFTWARE-3414)


author: Brian Lin <blin@cs.wisc.edu> - 3.2.0-1
changelog:
  - Map certs with VOMS attr before local daemons (SOFTWARE-3489)
  - Send CEView keepalives as the condor user (SOFTWARE-3486)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.4.0-1
changelog:
  - Stop checking sponsor field in site information (SOFTWARE-3722)
  - Don't change batch system from slurm to pbs (SOFTWARE-3717)
  - Add option to configure blahp for PBS Pro (SOFTWARE-3674)
  - Stop osg-configure when a bad attribute is found (SOFTWARE-3581)
  - Own a section of the SSH config for bosco (SOFTWARE-3630)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 2.5.1-1
changelog:
  - Relax hostname validation in 40-siteinfo.ini (failing to resolve is now a warning) (SOFTWARE-3953)


author: Matyas Selmeci <matyas@cs.wisc.edu> - 1.15.4-2.1
changelog:
  - Build for OSG; add versioned dependencies; use condor-classads library
  - Patch to build for EL7
  - Patch to fix warnings caused by implicit conversion of string literals into
    char*


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.13.0.1-1
changelog:
  - Prevent building into condor repo from osg branches and vice versa (SOFTWARE-3176)
  - Pre-create CA bundle and add InCommon and Let's Encrypt CA certs to it (SOFTWARE-3092)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.16.0-1
changelog:
  - Drop atlas.xrootd probes (SOFTWARE-1974)
  - Fix URLs in crl-freshness-probe (SOFTWARE-2926)
  - Dummy out org.osg.general.osg-version RSV probe (SOFTWARE-2910)
  - Remove vo-supported-probe (SOFTWARE-2763)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.16.0-2
changelog:
  - Add support for cream and nordugrid on EL7 (SOFTWARE-2987)
  - Move condor-cron requirement to rsv-core (SOFTWARE-3010)
  - Remove config hack for upgrading from rsv pre-3.7.20


author: Carl Edquist <edquist@cs.wisc.edu> - 3.17.0-1
changelog:
  - Verify certificates via sha256 (SOFTWARE-3060)
  - Update gratia-config-probe to contact GRACC collector (SOFTWARE-2722)
  - Remove pipes from java-version-probe output (SOFTWARE-3113)


author: Carl Edquist <edquist@cs.wisc.edu> - 8.6.3-1.1
changelog:
  - Remove glite-ce-cream-utils RPM build dependency for OSG (#6284)
  - Enable collector plugins in default build (#6295)


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.5-1
changelog:
  - Fixed two performance problems on Windows
  - Fixed Java universe on Debian and Ubuntu systems
  - Added two knobs to improve performance on large scale pools
  - Fixed a bug where requesting zero GPUs would require a machine with GPUs
  - HTCondor can now recognize nVidia Volta and Turing GPUs


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.6-1
changelog:
  - Initial support for CentOS 8
  - Fixed a memory leak in SSL authentication
  - Fixed a bug where "condor_submit -spool" would only submit the first job
  - Reduced encrypted file transfer CPU usage by a factor of six
  - "condor_config_val -summary" displays changes from a default configuration
  - Improved the ClassAd documentation, added many functions that were omitted


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.7-1
changelog:
  - Updated condor_annex to work with upcoming AWS Lambda function changes
  - Added the ability to specify the order that job routes are applied
  - Fixed a bug that could cause remote condor submits to fail
  - Fixed condor_wait to work when the job event log is on AFS
  - Fixed RPM packaging to be able to install condor-all on CentOS 8
  - Period ('.') is allowed again in DAGMan node names


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.13-1
changelog:
  - Made the Python 'in' operator case-insensitive for ClassAd attributes
  - Python bindings are now built for the Debian and Ubuntu platforms
  - Fixed a memory leak in the Python bindings
  - Fixed a bug where absolute paths failed for output/error files on Windows
  - Fixed a bug using Condor-C to run Condor-C jobs
  - Fixed a bug where Singularity could not be used if Docker was not present


author: Tom Throckmorton <throck@mcnc.org> - 1.3-4
changelog:
  - minor spec changes to enable rebuilds via mock
  - disable I2util, thrulay at buildtime; enable nuttcp


author: Brian Lin <blin@cs.wisc.edu> - 3.2.1-1
changelog:
  - Explicitly set ALLOW_READ to support HTCondor 8.9 (SOFTWARE-3538)
  - Add timeouts to the BDII provider


author: Doug Strain <dstrain@fnal.gov> - 3.0.0-1
changelog:
  - Initial creation of osg-gridftp-xrootd meta package
  - Needed for Xrootd installation with multiple GridFTP


author: Dave Dykstra <dwd@fnal.gov> - 2.4.3
changelog:
  - Package for OSG.  No changes other than this log entry.
  - Restore log entries from previous releases


author: Dave Dykstra <dwd@fnal.gov> - 2.5.2-1
changelog:
  - Update to upstream high severity security release 2.5.2.   See
    https://github.com/singularityware/singularity/releases/tag/2.5.2
    and CVE #2018-12021.
  - Only require python3 if %{py3_dist} macro defined


author: Dave Dykstra <dwd@fnal.gov> - 2.5.99-1.1
changelog:
  - Update to upstream 2.5.99, which is tagged as 2.6.0-rc1.
  - Switch to using internally defined require_python3, which is true unless
    1 is defined, to decide whether or not to require python3.
  - Get python3 patch from PR #1762 instead of custom defined.
  - Move /usr/bin/python3 BuildRequires to singularity-runtime subpackage.
  - Apply PR #1638, which adds the underlay feature.

  - Only require python3 if %{py3_dist} macro defined


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.1
changelog:
  - Update to upstream 2.5.999, which is tagged as 2.6.0-rc2.
  - Disable the underlay feature by default
  - Move the BuildRequires: /usr/bin/python3 back to the singularity package
    because there is no python in singularity-runtime.
  - Add an additional Requires: /usr/bin/python3 for install time.


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.2
changelog:
  - Add PR #1324 which makes the docker:// and shub:// URLs work with only
    the runtime subpackage.  All the changes are to this file so it does
    not add a patch.  Moves python files to the runtime subpackage, so the
    BuildRequires & Requires /usr/bin/python3 go back there as well.
  - Improve the underlay option comment in singularity.conf as found in
    the current version of PR #1638.


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.3
changelog:
  - Move the BuildRequires /usr/bin/python3 back to the primary package,
    because otherwise it doesn't get installed at build time.  Leave
    the Requires on the runtime subpackage.
  - Add singularity.abignore to avoid warnings from abipkgdiff.


author: Dave Dykstra <dwd@fnal.gov> - 2.5.999-1.4
changelog:
  - Move the Requires /usr/bin/python3 to be under %package runtime instead
    of under its %description.


author: Dave Dykstra <dwd@fnal.gov> - 2.6.0-1.1
changelog:
  - Update to released upstream 2.6.0
  - Rename PR 1638 to 1817
  - Rename PR 1762 to 1818
  - Note that PR 1324 was also renamed, to 1819


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.3.0-3
changelog:
  - Add Force-aud-test-in-the-validator.patch from
    https://github.com/scitokens/scitokens-cpp/pull/8


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 0.3.0-4
changelog:
  - Use double layer of const for deserialize
    (patch from https://github.com/scitokens/scitokens-cpp/commit/ac0b2f0679488fa91c14ed781268efbcdb69ed3c)


author: Derek Weitzel <dweitzel@unl.edu> - 0.3.3-1
changelog:
  - Merge OSG changes
  - Use a newer, still supported version of devtoolset
  - Fix bug in verifying EC signed tokens #13


author: Carl Edquist <edquist@cs.wisc.edu> - 1.17.1-1
changelog:
  - Include OSG patches (SOFTWARE-2454, SOFTWARE-2171, SOFTWARE-2463,
                         SOFTWARE-2484)


author: Brian Lin <blin@cs.wisc.edu> - 1.9.0-1
changelog:
  - Add systemd support to services library and move all setup/teardown tests to
    use them GridFTP
  - Ensure that PBS jobs cannot match to the Condor backend when simultaneously
    running
  - Verify that the PBS blahp cache is populated
  - Restart the CE if it's already running to acccommodate bad packaging in
    htcondor-ce-2.0.8-2


author: Brian Lin <blin@cs.wisc.edu> - 1.9.1-1
changelog:
  - Add check_start and check_stop functions to verify that services have started
    and stopped, respectively.
  - Add convenience functions for retrieving condor configuration values
  - Add HTCondor-CE View tests (SOFTWARE-2479)
  - Increase service timeout checks to 10s from 5s


author: Brian Lin <blin@cs.wisc.edu> - 1.10.0-1
changelog:
  - Add HTCondor-CE + Slurm tests (SOFTWARE-2541)
  - Configure Tomcat to log to catalina.log (SOFTWARE-2547)
  - Add core.get_stat() function for use with core.monitor_file()
  - Fix GridFTP server startup
  - Package osg-test-log-viewer


author: Brian Lin <blin@cs.wisc.edu> - 1.10.1-1
changelog:
  - Maintain order of package list specified by param files
  - Limit condor_{ce_,}run tests to 10 minutes
  - Use the default CVMFS cache location to avoid SELinux failures


author: Brian Lin <blin@cs.wisc.edu> - 1.11.0-1
changelog:
  - Use the LCMAPS VOMS plugin as the default authentication method
  - Drop BDII, osg-info-services, lcg-utils, and lfc_multilib tests


author: Brian Lin <blin@cs.wisc.edu> - 1.11.1-1
changelog:
  - Added SELinux policy for GSI OpenSSH
  - Added gfal2 tests against GridFTP
  - Run Travis-CI tests out of OSG 3.4


author: Brian Lin <blin@cs.wisc.edu> - 1.11.2-1
changelog:
  - Limit status checks before starting services (SOFTWARE-2846)
  - Drop 'VO-supported' RSV probe (SOFTWARE-2882)


author: Brian Lin <blin@cs.wisc.edu> - 2.0.0-1
changelog:
  - Drop GRAM, RHEL5, OSG < 3.3, and dCache storage probe tests
    (SOFTWARE-2592, SOFTWARE-2913, SOFTWARE-2955)
  - Add GridFTP-HDFS, XRootD-HDFS, and singularity tests (SOFTWARE-2639,
    SOFTWARE-2884)
  - Fix tomcat startup issues in tests d.t. lack of entropy
    (SOFTWARE-2880)
  - Fix GSISSH 3.3 EL7 test failures (SOFTWARE-2837)


author: Brian Lin <blin@cs.wisc.edu> 2.0.1-1
changelog:
  - Grab slurm from development repos instead of contrib (SOFTWARE-2994)
  - Fix cagen.py calls for osg-ca-generator-1.3.0


author: Brian Lin <blin@cs.wisc.edu> 2.1.0-1
changelog:
  - Add test decorator to limit tests/modules to specific OSG or EL releases (SOFTWARE-2759)
  - Fix gfal2 tests to not depend on bestman (SOFTWARE-2911)


author: Dave Dykstra <dwd@fnal.gov> 4.9-3.1
changelog:
  - Upgrade to 4.9-3 tarball with the following release notes:
   - Apply a patch for bug #4735, to prevent caching an object when its
      http/1.1 last chunk (that is, zero-length chunk) is missing.
   - Disable the URN proto by default, to avoid potential future security
      vulnerabilities.
   - Fail if the hard nofile ulimit for the squid user is less than 4096
      (which is unlikely since it is the default value on RHEL6 & 7) and
      increase the soft nofile ulimit to match the hard limit.  Squid
      uses the soft limit as the default max_filedescriptors.  Previously
      the root portion of the startup script attempted to increase the
      soft limit to 4096, but it turned out to have no effect because
      runuser resets it to its default for that user.


author: Dave Dykstra <dwd@fnal.gov> 4.9-4.1
changelog:
  - Upgrade to 4.9-4 tarball with the following release note:
   - Limit the hard nofile ulimit check to the "start" operation.


author: Dave Dykstra <dwd@fnal.gov> 4.9-5.1
changelog:
  - Upgrade to 4.9-4 tarball with the following release note:
   - Change compressing log rotation to not use logrotate's copytruncate.
      Instead, use create and a postrotate that sends squid a reconfigure
      signal.  This is needed when using rsyslog's imfile module to copy
      to syslog, but also greatly speeds up rotation when log files are
      large.


author: Dave Dykstra <dwd@fnal.gov> 4.10-1.1
changelog:
  - Upgrade to 4.10-1 tarball with the following release notes:
   - Update to squid-4.10, with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00103.html
     including a fix for a serious security vulnerability affecting
     reverse proxies and a potential information leak when proxying ftp.
   - Remove patch for bug #4735, as it has been included in the 4.10 release.
   - Change compressing log rotation back to use copytruncate when there
     are multiple workers, because the reconfigure signal triggers an
     SNMP bug when there are multiple workers (squid bug #5022).
   - Disable log rotatation when SQUID_MAX_ACCESS_LOG=0.  Using this is
      highly discouraged since standard logrotate is usually unable to
      keep up with the high volume of logs typically generated by squid.
      It also interferes with frontier-awstats support.
   - Change log rotating cron scripts to ignore commented lines in
      /etc/sysconfig/frontier-squid


author: Dave Dykstra <dwd@fnal.gov> 4.10-2.1
changelog:
  - Upgrade to 4.10-2 tarball with the following release notes:
   - Apply patch for squid bug #5022, to prevent a reconfigure from crashing
      the coordinator process when there are multiple workers.
   - Use reconfigure signal for log rotation in all cases again.


author: Dave Dykstra <dwd@fnal.gov> 4.10-3.1
changelog:
  - Upgrade to 4.10-3 tarball with the following release notes:
   - Update patch for squid bug #5022 to final version.
   - Add patch for squid bug #5030 which reported that negative caching
      was not working.  This is an important feature for keeping load
      down on CVMFS stratum 1s that are not hosting a repository.


author: Dave Dykstra <dwd@fnal.gov> 4.10-4.1
changelog:
  - Upgrade to 4.10-4 tarball with the following release note:
   - Add patch for bug 5036 which caused a varying number of capital 'L's
      to appear at the beginning of access.log lines when the log buffer
      overflows.


author: Dave Dykstra <dwd@fnal.gov> 4.11-1.1
changelog:
  - Upgrade to 4.11-1 tarball with the following release notes:
   - Update to squid-4.11.  There's no announcement yet but the change log
      is at http://www.squid-cache.org/Versions/v4/changesets/.
   - Remove patches for bugs #5022 and #5036 which are in version 4.11. The
      patch for #5030 is still applied.


author: Dave Dykstra <dwd@fnal.gov> 4.11-2.1
changelog:
  - Upgrade to 4.11-2 tarball with the following release notes:
   - The 4.11 release announcement is now at
       https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00108.html
      The announcement was delayed because security vulnerabilities were
      being double-checked.
   - frontier-squid was not susceptible to the ESI vulnerability, because of
      missing libraries on the build machine.  Add --disable-esi to make
      sure it doesn't get accidentally enabled.


author: Dave Dykstra <dwd@fnal.gov> 4.11-3.1
changelog:
  - Upgrade to 4.11-3 tarball with the following release notes:
   - Apply patch for bug #5051 which prevents a negative cache from
      persisting indefinitely with if-modified-since and collapsed forwarding.
   - Fix shoal when there are multiple squid workers.
   - Add cc.*\.in2p3\.fr to MAJOR_CVMFS.  It was already in ATLAS_FRONTIER
      so it was included for installations that accept both, but not for
      those that accept only MAJOR_CVMFS.


author: Carl Edquist <edquist@cs.wisc.edu> - 76-1
changelog:
  - Update to vo-client 76
    - Drop redundant geant4-lcgadmin objects (SOFTWARE-2921)
    - Additional snoplus voms servers (SOFTWARE-2965)


author: Carl Edquist <edquist@cs.wisc.edu> - 78-1
changelog:
  - Add manual mapfile generator script
  - Handle matchFQAN=vorole in voms-mapfile generator (SOFTWARE-3183)
  - Atlas VO updates (SOFTWARE-3183)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.14.1-1
changelog:
  - Add osg-promote support for rolling release repositories and route aliases
    that refer to a list of routes (e.g. 3.4-rfr promotes to 3.4-prerelease _and_
    3.4-rolling) (SOFTWARE-3465)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.14.2-1
changelog:
  - Warn on missing sha1sum (SOFTWARE-3619)
  - Have osg-import-srpm add sha1sums to created .source files (SOFTWARE-3593)
  - Add --since option to koji-blame


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.15.0-1
changelog:
  - Make missing sha1sums an error (SOFTWARE-3787)
  - Use koji.opensciencegrid.org (SOFTWARE-3624)
  - Add support for OSG 3.5


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.15.1-1
changelog:
  - Fix mock version detection
  - Require mock < 2.0 to avoid build errors related to (attempted) use of DNF.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.15.1-3
changelog:
  - Various RHEL 8 compat fixes; most notably, use platform-python since we can't
    depend on any version of Python to be installed except as a module and can't
    bring in modular dependencies.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.16.1-1
changelog:
  - Drop server CA bundle and use the OS CA bundle instead (SOFTWARE-4099)
  - Drop mock version constraint; EL7 now has mock 2.2.


author: Brian Lin <blin@cs.wisc.edu> 2.2.0-1
changelog:
  - Move proxy generation to the beginning of the tests
  - Add xrootd-lcmaps tests
  - Fix BeStMan and gfal test GUMS dependencies
  - Disable Gratia tests on EL7
  - Drop osg-configure unit tests


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.4
changelog:
  - Add db-upgrade-1.10-to-1.11.patch to fix a failing constraint in DB upgrade
    script from 1.10 to 1.11


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.11.0-1.5
changelog:
  - Require python-requests-2.6.0 (fixes "call 8 (rawUpload) failed: syntax error: line 1, column 49" error in kojid)


author: Carl Edquist <edquist@cs.wisc.edu> - 3.12.2-1
changelog:
  - SOFTWARE-2099 - Allow specifying collector port in xrootd-cache-probe
  - SOFTWARE-2089 - Revert bestman package requirements from el7


author: Brian Lin <blin@cs.wisc.edu> - 3.2.2-1
changelog:
  - Make blahp requirement binary package specific (SOFTWARE-3623)
  - Added condor_ce_store_cred for PASSWORD authentication
  - Use new multi-line syntax configuration syntax (SOFTWARE-3637)
  - Update MyOSG URL and queries


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 12.9-1.1.osg
changelog:
  - Merge OSG changes (SOFTWARE-3397)
    Drop Do-not-ignore-config.d-files-with-a-.-in-the-name.patch (upstream)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 2.0.13-1
changelog:
  - Update to version 2.0.13
  - Drop patches: voms-nossl3.patch, voms-tls1.patch, voms-gcc6.patch,
    voms-paren.patch, voms-comment-in-comment.patch and voms-doxygen.patch


author: Edgar Fajardo <emfajard@ucsd.edu> 2.3.1-0.1.3
changelog:
  - Split the package bit into the runtime and main (SOFTWARE-2755)
  - Update to upstream's singularity-2.3.1-0.1 singularity.spec


author: Brian Bockelman <bbockelm@cse.unl.edu> 3.2.9.1-1
changelog:
  - Initial import from gLite and creation of RPM packaging
  - Patched the GLOBUS macro to fit Fedora/EPEL scheme


author: Brian Bockelman <bbocklem@cse.unl.edu> 3.2.9.1-6
changelog:
  - Fix for using the CGSI found in Fedora.
  - Fix globus version check.
  - Add a requires for the globus-version binary.
  - Fix includes for 32-bit builds


author: Brian Lin <blin@cs.wisc.edu> - 1.18.28.bosco-1
changelog:
  - Fixed incompatibility between blahp_results_cache and torque-4.2.9
    that caused jobs to be held when performing status updates on
    HTCondor-CE (SOFTWARE-2516)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.29.bosco-1
changelog:
  - Blahp python scripts should ignore optional '-w' argument (SOFTWARE-2603)
  - Fail gracefully when encountering unexpected sacct output (SOFTWARE-2604)
  - Some #SBATCH commands are being ignored (SOFTWARE-2605)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.18.0-1
changelog:
  - Disable gratia-consumer: don't turn it on by default and replace with a dummy script (SOFTWARE-3218)
  - Drop old and broken URLs (SOFTWARE-3213)
  - Disable deprecated probes (e.g. osg-version) by default (SOFTWARE-3180)
  - Have java-version-probe correctly detect tomcat on EL7 (SOFTWARE-3021)


author: Matyas Selmeci <matyas@cs.wisc.edu> 1.3.0-1
changelog:
  - Add SELinux audit logs to osg-system-profiler and URL support to
    osg-system-profiler-viewer (SOFTWARE-2275)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.4.0-1
changelog:
  - Include dump of tomcat server config (SOFTWARE-1099)
  - Create osg-profile.txt in temp dir, do not include old profiles in
    directory dumps (SOFTWARE-1773)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.4.1-1
changelog:
  - Drop osg-version check (SOFTWARE-2916)
  - Update instructions for getting help (SOFTWARE-2908)
  - Don't include logs for deprecated software (SOFTWARE-2905)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.0.10-1
changelog:
  - Fix LIBEXEC path in config file (SOFTWARE-2126)
  - Turn off shared port (SOFTWARE-2126)
  - Remove SOFTWARE-1124 patch (upstream)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.1.1-1
changelog:
  - Add commands condor_cron_master, condor_cron_off, and condor_cron_restart (SOFTWARE-2439)
  - Add tmpfiles.d config (SOFTWARE-2439)
  - Remove init script from EL7 (SOFTWARE-2439)
  - Ensure lockdir and rundir exist with correct permissions on startup (PR #4)


author: Mátyás Selmeci <matyas@cs.wisc.edu> 1.1.3-1
changelog:
  - Don't use GSI authz (SOFTWARE-2812)
  - Don't make /etc/condor-cron/config.d/condor_ids a config file;
    users should be adding a condor_ids_override file


author: Brian Lin <blin@cs.wisc.edu> - 3.4-1
changelog:
  - Add packaging for OSG XRootD standalone installations
  - Unify Stash Origin HTTP/S and XRootD ports (SOFTWARE-3558)


author: Brian Lin <blin@cs.wisc.edu> - 3.4-2
changelog:
  - Opt into default configuration provided by xrootd-lcmaps-1.7.4 (SOFTWARE-3534)
  - Remove osg-configure and redundant dependencies


author: Brian Lin <blin@cs.wisc.edu> - 3.4-3
changelog:
  - Restore osg-configure requirement for standalone installations
    since they'll be using /etc/lcmaps.db instead of the LCMAPS configuration
    shipped with xrootd-lcmaps
  - Ensure that XRootd/HTTP ports are the same


author: Dave Dykstra <dwd@fnal.gov> - 2.3.5-1.2.osg
changelog:
  * Wed Mar 22 2017 Jakob Blomer <jblomer@cern.ch> - 2.3.5
  - Drop systemd patch configuration for autofs where necessary


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 2.0.14-1.6
changelog:
  - Also accept VOMS attributes that only have a top-level group (SOFTWARE-4114)
    - Drop Validate-top-level-group-of-VOMS-attribute.patch
    - Add Validate-top-level-group-of-VOMS-attribute-also-acce.patch


author: Lukasz Janyst <ljanyst@cern.ch>
changelog:
  - correct the license field (LGPLv3+)
  - rename to xrootd4
  - add 'conflicts' statements
  - remove 'provides' and 'obsoletes'


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.13.2-1.1.osg
changelog:
  - Update based on Fedora's spec file and upstream's 1.13.2 tarball.
    Fedora's changelog:
      * Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.13.0-4
      - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

      * Wed Jul 12 2017 Patrick Uiterwijk <puiterwijk@redhat.com> - 1.13.0-3
      - Remove the 2 postfix for pycurl and libcomps on RHEL

      * Tue Jul 11 2017 Randy Barlow <bowlofeggs@fedoraproject.org> - 1.13.0-2
      - Require python2-koji on Fedora <= 26.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.14.3-1.2.osg
changelog:
  - Update based on Fedora's 1.14.0-4 spec file and upstream's 1.14.3 tarball.
    Fedora's changelog:
      * Mon Jan 22 2018 Troy Dawson <tdawson@redhat.com> - 1.14.0-4
      - Update conditional

      * Thu Dec 07 2017 Patrick Uiterwijk <patrick@puiterwijk.org> - 1.14.0-3
      - Backport py3 runroot encoding patch (PR#735)

      * Mon Dec 04 2017 Patrick Uiterwijk <patrick@puiterwijk.org> - 1.14.0-2
      - Backport py3 keytab patch (PR#708)
      - Backport patches for exit code (issue#696)

      * Tue Sep 26 2017 Dennis Gilmore <dennis@ausil.us> - 1.14.0-1
      - update to upstream 1.14.0


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.15.3-1.2.osg
changelog:
  - Update based on Fedora's 1.15.1-3 spec file and upstream's 1.15.3 tarball.
    Fedora's changelog:
      * Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.15.1-3
      - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

      * Mon Jun 18 2018 Miro Hrončok <mhroncok@redhat.com> - 1.15.1-2
      - Rebuilt for Python 3.7

      * Tue Apr 03 2018 Patrick Uiterwijk <puiterwijk@redhat.com> - 1.15.1-1
      - Rebase to 1.15.1
      - Fixes CVE-2018-1002150

      * Fri Mar 16 2018 Kevin Fenzi <kevin@scrye.com> - 1.15.0-7
      - Backport PR #841 to allow configurable timeout for oz

      * Tue Feb 20 2018 Patrick Uiterwijk <patrick@puiterwijk.org> - 1.15.0-6
      - Backport PR #796

      * Sun Feb 18 2018 Patrick Uiterwijk <patrick@puiterwijk.org> - 1.15.0-5
      - Add  workaround patch for bug #808

      * Fri Feb 16 2018 Patrick Uiterwijk <patrick@puiterwijk.org> - 1.15.0-4
      - Backport patch from PR#794
      - Fix macro escaping in comments

      * Mon Feb 12 2018 Owen Taylor <otaylor@redhat.com> - 1.15.0-3
      - Make hub, builder, etc, require python2-koji not koji

      * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.15.0-2
      - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

      * Sat Jan 27 2018 Patrick Uiterwijk <patrick@puiterwijk.org> - 1.15.0-1
      - Rebase to koji 1.15.0


author: Carl Edquist <edquist@cs.wisc.edu> - 1.6.4-1
changelog:
  - Rename koji-hub.batlab.org to koji.chtc.wisc.edu (SOFTWARE-2175)
  - Do not enforce vcs branch checks for scratch builds (SOFTWARE-1876)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.0-1
changelog:
  - Add three-way diff support to osg-import-srpm
  - Make osg-build log messages look nicer by replacing the
    'LOGLEVEL:osg-build:' prefix with a plain ' >> '
  - Remove broken test_mock_auto_cfg
  - Tweak language in osg-import-srpm when creating .source files
  - Add subversion and git as requirements


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.1-1
changelog:
  - Don't print "Implicitly building for el..." message unless in verbose mode
  - Add update action (--update or -U) to osg-import-srpm
  - Some internal cleanup


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.8.0-1
changelog:
  - Use koji 1.11 on CSL systems and update template config to koji 1.7+ version
    (adds dependency on koji >= 1.7) (SOFTWARE-2566)
  - Remove broken --mock-config=AUTO (autogenerating a mock config from a template)
  - Fix KeyError on non-RHEL-like systems (e.g. Fedora)
  - Improve explanatory text in osg-koji setup (SOFTWARE-2455)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.9.0-1
changelog:
  - Make koji and mock optional modules that can be shipped as separate
    subpackages and will be loaded if necessary. (SOFTWARE-2671)
  - Improve `osg-build --help` text to be more consistent and show default
    values for options. (SOFTWARE-2558)
  - Drop Python 2.4 compatibility
  - Add support for OSG 3.4 (SOFTWARE-2693)
  - Add new .source file syntax to fetch sources directly from Git repos
    (SOFTWARE-2689)
  - Drop EL 5 packaging


author: Brian Lin <blin@cs.wisc.edu> 1.1.6-1
changelog:
  - Change software.grid.iu.edu to repo.grid.iu.edu in osg-ca-scripts (SOFTWARE-2666)
  - Remove unsupported compat links for old OpenSSL hashes
  - Added `ITB` options back to help text


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.8-1
changelog:
  - Fixes addressing CVE-2019-18823
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0001.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0002.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0003.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0004.html


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.9-1
changelog:
  - Proper tracking of maximum memory used by Docker universe jobs
  - Fixed preempting a GPU slot for a GPU job when all GPUs are in use
  - Fixed a Python crash when queue_item_data iterator raises an exception
  - Fixed a bug where slot attribute overrides were ignored
  - Calculates accounting group quota correctly when more than 1 CPU requested
  - Updated HTCondor Annex to accommodate API change for AWS Spot Fleet
  - Fixed a problem where HTCondor would not start on AWS Fargate
  - Fixed where the collector could wait forever for a partial message
  - Fixed streaming output to large files (>2Gb) when using the 32-bit shadow


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.10-1
changelog:
  - condor_qedit can no longer be used to disrupt the condor_schedd
  - Fixed a bug where the SHARED_PORT_PORT configuration setting was ignored
  - Ubuntu 20.04 and Amazon Linux 2 are now supported
  - In MacOSX, HTCondor now requires LibreSSL, available since MacOSX 10.13


author: Brian Lin <blin@cs.wisc.edu> - 1.8.0-1
changelog:
  - Add option to run with CILogon-like CAs and certs (SOFTWARE-1863)
  - Add ability to set timeouts for individual tests (SOFTWARE-646)
  - Limit the number of yum cleans (SOFTWARE-2335)
  - Fix detection of Tomcat startup (SOFTWARE-2344)
  - RSV tests now run with HTCondor-CE (SOFTWARE-2337)


author: Brian Lin <blin@cs.wisc.edu> - 1.8.2-1
changelog:
  - Add MySQL functions (execute, check_execute, db_dump)
  - Add function to compare RPM versions
  - Add DummyClass that allows using osg-test modules in the Python interpreter
  - Allow comments and blank lines in test_sequence
  - get_package_envra: translate missing epochs to '0' 
  - Set tomcat startup timeout to 20 minutes


author: Brian Lin <blin@cs.wisc.edu> - 1.8.3-1
changelog:
  - Add VOMS library to set up test VOMS server without voms-admin
  - Add tests for GSI-OpenSSH
  - Update edg-mkgridmap tests to only require voms-admin
  - Speed up Tomcat startup


author: Brian Lin <blin@cs.wisc.edu> - 1.8.4-1
changelog:
  - Improve tomcat7 startup time in VMU tests (SOFTWARE-2383)
  - Simplify Gratia GridFTP probe/remove gums-host-cron (SOFTWARE-2398)
  - Use hostname for MyProxy tests
  - Add nightly option
  - Add functions to wait for file generation and condor daemon readiness


author: Globus Toolkit <support@globus.org> - 7.1p2f-1
changelog:
  - Fix to use sshd_config from installed location for installations from the
    source and binary tarballs.
  - DisableUsageStats now defaults to Yes in code (already defaults to Yes in the
    supplied sshd_config). Also moved the DisableUsageStats directive to be ahead
    of the Match directives in sshd_config.


author: Matyas Selmeci <matyas@cs.wisc.edu> - 7.1p2f-1.1
changelog:
  - Merge OSG changes (SOFTWARE-2390)
  - Use OSG init script
  - Don't autocreate/destroy host key symlinks
  - Move non-%patch/non-%setup commands out of %prep


author: Mátyás Selmeci <matyas@cs.wisc.edu> 3.3-2
changelog:
  - Remove requirements dropped from 3.3
  - Remove conditionals for el5
  - Remove _clipped version -- el7 now supports everything el6 does


author: Edgar Fajardo <emfajard@ucsd.edu> 3.3-8
changelog:
  - Drop the setup.sh script no longer necessary in 3.4 (SOFTWARE-2676)
  - Drop the glexec subpackages since glexec is dropped in 3.4


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.10.1-10.1
changelog:
  - Merge OSG changes
      - Drop koji_no_sslv3.patch
      - Drop pkgorigins_filename.patch
      - Update other OSG patches


author: Dave Dykstra <dwd@fnal.gov> 4.6-2.1
changelog:
  - Upgrade to 4.6-2 tarball with the following release notes:
   - Add support for sending access_log through syslog
   - Add additional allowed monitoring host CERN IP range of 188.185.48.0/20


author: Dave Dykstra <dwd@fnal.gov> 4.4-2.1
changelog:
  - Upgrade the 4.4-1.1 version to the 4.4-2 tarball with the following
     release note:
   - Apply security patch for CVE-2019-12527
        http://www.squid-cache.org/Advisories/SQUID-2019_5.txt
      which can (before being patched) be exploited through the ftp protocol.


author: Dave Dykstra <dwd@fnal.gov> 4.8-1.1
changelog:
  - Upgrade to 4.8-1 tarball with the following release notes:
   - Update to squid-4.8 with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00096.html
     There was no 4.7 announcement but here's the ChangeLog:
      https://github.com/squid-cache/squid/blob/f977bfa698ab92e9474c775cef0e01fb756a4b0f/ChangeLog


author: Dave Dykstra <dwd@fnal.gov> 4.8-2.1
changelog:
  - Upgrade to 4.8-2 tarball with the following release note:
   - Add support for starting and stopping shoal-agent when installed and
     enabled by SQUID_AUTO_DISCOVER=true
  - Add compilation and installation for shoal-agent


author: Dave Dykstra <dwd@fnal.gov> 4.9-1.1
changelog:
  - Upgrade to 4.9-1 tarball with the following release notes:
   - Update to squid-4.9 with release notes at
      http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-announce-Squid-4-9-is-available-td4688506.html
   - Add cvmfs01.nikhef.nl, cvmfs-stratum-one.zeuthen.desy.de, and
      grid-cvmfs-one.desy.de to the MAJOR_CVMFS acl.


author: Dave Dykstra <dwd@fnal.gov> 4.9-2.1
changelog:
  - Upgrade to 4.9-2 tarball with the following release note:
   - Fix bug in daily cron that prevented it from rotating any logs


author: Radek Vokal <rvokal@redhat.com> - 5.1.11-3
changelog:
  - spec file clean up by Adrian Reber <adrian@lisas.de>
  - added a URL
  - removed wrong URL from Source
  - fixed summary according to guidlines
  - removed bogus build require
  - disabled xinetd services
  - using correct path in xinetd files
  - removed unnecessary checks for BUILD_ROOT
  - replaced /etc with macro
  - added noreplace flag to %config


author: Dave Dykstra <dwd@fnal.gov> 3.5.23-3.1
changelog:
  - Upgrade to 3.5.23-3 tarball with the following release note:
   - Replace my patch that comments out the fix for security advisory
     SQUID-2016:10 with a patch from the consultant for bug #2833.  This
     patch makes collapsed forwarding work again with If-Modified-Since
     while leaving the security advisory fixed.


author: Dave Dykstra <dwd@fnal.gov> 3.5.23-4.1
changelog:
  - Upgrade to 3.5.23-4 tarball with the following release notes:
   - Replace the bug #2833 fix with a newer version from the consultant.  The
     full name is SQUID-252-collapsed-slaves-non-sharable-responses-3.5-t6.
     It is probably not the final patch.
   - Add creation of /var/run/squid in the init.d script, if it did not
     exist.  This is because systemd-based systems (EL7) do not preserve
     the directory across boots, and on some systems the systemd
     configuration file to create it at boot time does not work.  That
     can happen if the system gets user ids from the network, so the
     squid user id might not yet be available when the systemd
     configuration file is used.
  - Add a systemd service descriptor configuration, primarily to make sure
     that frontier-squid is started after networking services.  Uses the
     same "After" and "Wantedby" targets as apache httpd.


author: Dave Dykstra <dwd@fnal.gov> 3.5.23-5.1
changelog:
  - Upgrade to 3.5.23-5 tarball with the following release note:
   - Replace the bug #2833 fix with a newer version from the consultant.  The
     full name is SQUID-252-collapsed-slaves-non-sharable-responses-3.5-t9.
     The previous version is suspected in a crash at one grid site. This
     version required a couple of small changes to apply and compile cleanly.


author: Dave Dykstra <dwd@fnal.gov> 3.5.23-6.1
changelog:
  - Upgrade to 3.5.23-6 tarball with the following release notes:
   - Replace the bug #2833 fix with a newer version from the consultant.  The
     full name is SQUID-252-collapsed-slaves-non-sharable-responses-3.5-t10.
     This one might be final.
   - Add patch from squid bug #4616, since two users had reported the "mem"
     assertion failure in store_client.cc.  The full name of the patch is
     bug4616-cf-mem-assert-t1.


author: Dave Dykstra <dwd@fnal.gov> 3.5.24-1.1
changelog:
  - Upgrade to 3.5.24-1 tarball with the following release notes:
   - Upgrade to squid-3.5.24 with release notes at
       https://www.spinics.net/lists/squid/msg85024.html
     The bug fixes we had been including are not yet in this release, so
     all the same patches are kept.  The most notable change affecting
     WLCG in this release was a fix for a bug that caused 'cache deny'
     to not have any effect.  That is used for some cvmfs stratum 1s,
     and perhaps other applications.


author: Dave Dykstra <dwd@fnal.gov> 3.5.24-2.1
changelog:
  - Upgrade to 3.5.24-2 tarball with the following release notes:
   - Change the default setting of quick_abort_min from -1 KB to 1 GB and
     the default setting of quick_abort_max from 16 KB to 1 GB.  This is
     to work around the squid crash documented in squid bug #4554.  A
     consequence is that when a client aborts an object download, the
     object won't get cached even though it is highly likely that
     another client will soon want the same object.


author: Dave Dykstra <dwd@fnal.gov> 3.5.24-3.1
changelog:
  - Upgrade to 3.5.24-3 tarball with the following release notes:
   - Change quick_abort_min and quick_abort_max once again, this time to
     0 KB, because someone doing a different repeatable test found that
     the 1 GB value still caused some crashes but 0 KB didn't.


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-1.1
changelog:
  - Upgrade to 3.5.27-1 tarball with the following release notes:
   - Upgrade to squid-3.5.27.  The release announcement hasn't been
     published yet but here is the ChangeLog:
       https://github.com/squid-cache/squid/blob/v3.5/ChangeLog
     Release notes from prior releases since last frontier-squid release:
       https://www.spinics.net/lists/squid/msg86349.html (3.5.26)
       https://www.spinics.net/lists/squid/msg85634.html (3.5.25)
   - Remove the patch from #2833 because it was updated and included in
      the 3.5.27 release.
   - Add a patch from #4767 for making IPv6 SNMP queries work with
      multiple worker processes instead of causing a crash & restart.
   - Add IHEP and UNL stratum ones to the MAJOR_CVMFS access control list.


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-2.1
changelog:
  - Upgrade to 3.5.27-2 tarball with the following release note:
   - Add openhtc.io aliases to CMS_FRONTIER, ATLAS_FRONTIER, and MAJOR_CVMFS
     acls.


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-3.1
changelog:
  - Upgrade to 3.5.27-3 tarball with the following release notes:
   - Add configuration options to always honor "Pragma: no-cache" from a
     client, even if the client also sends a "Cache-control" header, as
     the current frontier-client (v2.8.20) always does.
       https://bugs.squid-cache.org/show_bug.cgi?id=4809
   - Included provided patches from the squid project related to two
     denial of service security advisories which they say could affect
     all reverse proxies.
      http://www.squid-cache.org/Advisories/SQUID-2018_1.txt
      http://www.squid-cache.org/Advisories/SQUID-2018_2.txt
     For example frontier server launchpad squids are configured as
     reverse proxies.


author: Brian Lin <blin@cs.wisc.edu> - 3.3.0-1
changelog:
  - Add APEL support for HTCondor-CE and HTCondor backends
  - Store malformed ads reporting to htcondor-ce-collector


author: Brian Lin <blin@cs.wisc.edu> - 3.4.0-1
changelog:
  - Add non-OSG method for modifying the job environment (SOFTWARE-3871)
  - Simplify configuration of APEL scripts
  - Refine the APEL record filter to ignore jobs that have not yet started
  - Add `systemctl daemon-reload` to packaging for initial installations
  - Fix call to error() (#245)
  - Improve robustness of BDII provider


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.4.3-1
changelog:
  - Drop unused files:
      - httpcert.pem
      - tomcat config
      - edg-mkgridmap.log
      - bestman2 logs


author: Dave Dykstra <dwd@fnal.gov> 8-3
changelog:
  - Switch to using '=' versions instead of >= versions.  (This version
    is for experimenting, not expected to be released).


author: Brian Lin <blin@cs.wisc.edu> - 1.18.32.bosco-1
changelog:
  - Fix bug that broke shell parsing of `*_binpath` config values
  - Set default bin paths to `/usr/bin` to remove the overhead of `which` for each PBS, LSF, and SGE call.


author: Brian Lin <blin@cs.wisc.edu> - 1.18.33.bosco-1
changelog:
  - Fix bug that caused jobs submitted to PBS batch systems to be held
    with "Error parsing classad or job not found" (SOFTWARE-2875)
  - Fix parsing of time fields for slurm jobs (SOFTWARE-2871)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.34.bosco-1
changelog:
  - Fix memory usage parsing for SLURM and PBS (SOFTWARE-2929)
  - Fix UnicodeDecodeError when reading blah.config (SOFTWARE-2953)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.36.bosco-1
changelog:
  - Verify input file existence before submission (SOFTWARE-3154)
  - Save debugging dirs if job submission fails (SOFTWARE-2827)


author: Mischa Salle <msalle@nikhef.nl> 1.5.1-2
changelog:
  - Add minimal lcmaps version.
  - Remove configure flag for moduledir.

  - Added plugin lcmaps_ban_dn including manpage.
  - Update URL.
  - Add run-time requirement for lcmaps for basic package.
  - Add architecture to run-time requirement for ldap subpackage.
  - Updated version


author: Mischa Salle <msalle@nikhef.nl> 1.6.2-2
changelog:
  - clean up installed documentation files (breaks Fedora20)
  - correct bogus dates in changelog (breaks Fedora20)
  - correct duplicate entry in filelist


author: Zalak Shah <zsshah@iu.edu> 1.89-2
changelog:
  - CA release corresponding to IGTF 1.89 release.
  - Updated summary and description for igtf-ca-certs (SOFTWARE-3097)
  - Replaced repo.grid.iu.edu -> repo.opensciencegrid.org	(SOFTWARE-3097)


author: Brian Lin <blin@cs.wisc.edu> 1.0.1-1
changelog:
  - Fix subject alternative name entry for generated certs
  - Remove serial numbered copies of created certs in working dir (SOFTWARE-2174)


author: Brian Lin <blin@cs.wisc.edu> 1.2.0-1
changelog:
  - Add ability to generate user certificate via CLI. Host certs no longer automatically generated (SOFTWARE-2417).


author: Brian Lin <blin@cs.wisc.edu> 1.3.0-1
changelog:
  - Add ability to create VO lsc and vomses entry (SOFTWARE-2976)
  - Create backups when writing files (SOFTWARE-2352)
  - Drop DigiCert CA infrastracture mimicry
  - Store CA private key in openssl folder


author: Globus Toolkit <support@globus.org> - 7.1p2c-1
changelog:
  - Fixes for Globus Toolkit builds: Skip probing for specific globus funcs
  - Fixes for building kerberos/mechglue without GSI.


author: Matyas Selmeci <matyas@cs.wisc.edu> - 5.7-4.2
changelog:
  - Auto-generate server keys in init script (SOFTWARE-2288)
  - Generate an ECDSA server key as well (SOFTWARE-2288)


author: Matyas Selmeci <matyas@cs.wisc.edu> - 5.7-4.3
changelog:
  - Include default /etc/sysconfig/gsisshd
  - AUTOCREATE_SERVER_KEYS must be YES or RSAONLY to generate keys (SOFTWARE-2288)


author: Dave Dykstra <dwd@fnal.gov> 3.5.22-2.1
changelog:
  - Upgrade to 3.5.22-2 tarball with the following release note:
   - Change default value of dns_v4_first to "on", so it will always try
     ipv4 first if available and then ipv6.  The default was "off" which
     always tries ipv6 first.


author: Dave Dykstra <dwd@fnal.gov> 3.5.23-1.1
changelog:
  - Upgrade to 3.5.23-1 tarball with the following release notes:
   - Upgrade to squid-3.5.23 with release notes at
       http://www.spinics.net/lists/squid/msg84536.html
     The most notable changes are fixes for two privacy vulnerabilities.
     They don't affect the applications primarily used with frontier-squid
     but may affect other applications.
   - Add the CERN IPv6 monitoring address range to the HOST_MONITOR acl.
   - Add IPv6 private net addresses to default setting of NET_LOCAL.


author: Dave Dykstra <dwd@fnal.gov> 3.5.23-2.1
changelog:
  - Upgrade to 3.5.23-2 tarball with the following release note:
   - Comment out the fix for security advisory SQUID-2016:10, because it
     caused collapsed forwarding to break for If-Modified-Since requests.
     It was probably implemented incorrectly; discussion is in the
     reopened squid bug report #2833.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0-3
changelog:
  - Add patches from DPM developers:
    - Add an optional IPv6 address to EPSV response
    - Get command string


author: Brian Lin <blin@cs.wisc.edu> - 1.2.12-1
changelog:
  - Fix to osg-user-cert-renew using old SSL protocols
  - Check write permissions of output dir before renewing certs


author: Brian Lin <blin@cs.wisc.edu> - 1.2.16-1
changelog:
  - Fix timeout option to respect tool runtime (SOFTWARE-2258)
  - Improve PKI tool error message when missing VO request information (SOFTWARE-2292)


author: Brian Lin <blin@cs.wisc.edu> - 1.2.19-1
changelog:
  - Fix formatting of CSRs (SOFTWARE-2132)
  - Reword 'bad VO info' error from osg-*cert-request (SOFTWARE-2405)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.34-1
changelog:
  - GT6 update: Add FTP_TEST_RESTART_AFTER_RANGE=n to force restarts after n
    range markers for restart points 22 and 24 (RETR_RESPONSE and STOR_RESPONSE)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.34-2
changelog:
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Remove _pkgdocdir macro definition
    - Drop redundant Requires corresponding to autogenerated pkgconfig Requires
    - Don't clear the buildroot in the install section
    - Remove the clean section
    - Drop the globus-ftp-client-openssl098.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.36-1
changelog:
  - GT6 update: Replace deprecated perl POSIX::tmpnam with File::Temp::tmpnam
  - Drop patch globus-ftp-client-perl-posix.patch (accepted upstream)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.40.bosco-1
changelog:
  - Update PBS Pro qstat options for completed jobs (SOFTWARE-3675)
  - Apply patches from condor blahp (SOFTWARE-3587)
  - Use the original proxy if blahp proxy delegation is disabled (SOFTWARE-3661)
  - Use new condor env format (SOFTWARE-3589)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.42
changelog:
  - Move glite-build-common-cpp m4 files to vendor area (SOFTWARE-3587)
  - Pull rpm spec file into source repo


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.44
changelog:
  - Add Slurm SystemCpu accounting when job completes (SOFTWARE-3825)
  - Add support for decimal seconds fields from sacct (SOFTWARE-3826)
  - Pull in various updates to slurm scripts from htcondor's blap (SOFTWARE-3587)
  - Move local submit attributes scripts from spec to sources (SOFTWARE-3749)


author: Brian Bockelman <brian.bockelman@cern.ch> - 1.7.0-1
changelog:
  - Add key=value config syntax.
  - Prior config syntax no longer requires a minimum of three arguments.


author: Diego Davila <didavila@ucsd.edu> - 1.7.1-1
changelog:
  - Adding directory config.d and file config.d/40-xrootd-lcmaps.cfg (SOFTWARE-3534)
  - Changing xrootd requirement to 4.9.0


author: Brian Lin <blin@cs.wisc.edu> - 1.7.3-1
changelog:
  - Add support for unauthenticated Stash Caches and Origins
  - Fix authzfunparms syntax
  - Use the canonical LCMAPS config location in the default config


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-4.1
changelog:
  - Upgrade to 3.5.27-4 tarball with the following release note:
   - If the maximum listen backlog (sysctl net.core.somaxconn) is less than
     1/4th the file descriptor limit (ulimit -n) when starting squid,
     increase it to that amount.  That's the listen backlog that squid
     requests, and the larger backlog helps when a server is hit so hard
     with requests that squid can't keep up.


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-5.1
changelog:
  - Upgrade to 3.5.27-5 tarball with the following release note:
   - Avoid a reverse DNS lookup for every client connection by using the
     workaround in https://bugs.squid-cache.org/show_bug.cgi?id=4575,
     which is to override the defaults for url_rewrite_extras and
     store_id_extras.


author: Dave Dykstra <dwd@fnal.gov> 3.5.27-5.2
changelog:
  - Add %verify (not user group) to the %ghost statements for cache dir
    and log dir, and add %verify (not user group mode) on squid.conf and
    squid.conf.old.  Without those, rpm -V complains on el7 only, not el6.


author: Dave Dykstra <dwd@fnal.gov> 3.5.28-1.1
changelog:
  - Upgrade to 3.5.28-1 tarball with the following release notes:
   - Update to squid-3.5.28.  Here is the release announcement:
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00083.html
      Removed patches for advisories SQUID-2018_1 and SQUID-2018_2 and
      for bug 4767 because fixes are included in the release.
   - Remove including /etc/init.d/functions from fn-local-squid.sh and from
     /etc/init.d/frontier-squid.  It wasn't being used and isn't in some
     docker containers such as slc6-lite.
   - If there are *.log.0.gz files in the presence of awstats, remove
     them before rotating.  They prevented rotation from working on el7.
  - When creating an account for running squid under, use a home directory of
     /var/lib/squid instead of defaulting to /home/${FRONTIER_USER:-squid}.
     The old default doesn't work on systems with automounted /home.


author: Dave Dykstra <dwd@fnal.gov> 3.5.28-2.1
changelog:
  - Upgrade to 3.5.28-2 tarball with the following release notes:
   - Set umask and PATH in fn-local-squid.sh because /etc/init.d/functions
     used to set them.  This fixes problems with log rotation from cron.
   - Invoke /etc/init.d/functions from /etc/init.d/frontier-squid if it
     exists, because that is how systemd-based systems invoke systemctl
     to keep track of the service.  If it does not exist, set the PATH.


author: Dave Dykstra <dwd@fnal.gov> 4.3-1.1
changelog:
  - Upgrade to 4.3-1 tarball with the following release notes:
   - Major update to squid-4.3.
   - Removed patch for bug 4616 (patch was already applied in 4.3).
   - Replaced patch for bug 3952 with new --foreground option.
   - Ported patch for bug 7 forward.
  - Compile with devtoolset-2-toolchain on el6, in order to use c++11
  - Add PAM basic authentication module
  - Disable security-cert-validators to avoid perl Crypt::OpenSSL:X509
    dependency


author: Dave Dykstra <dwd@fnal.gov> 4.4-1.1
changelog:
  - Upgrade to 4.4-1 tarball with the following release notes:
   - Update to squid-4.4 with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00086.html
     including one fairly significant security fix for a potential denial
     of service due to memory leaks on rejected SNMP queries.
   - If different squid services have different numbers of workers (for
      example by using setserviceoption on "workers") then use the biggest
      number when creating cache and log directories.


author: Mischa Salle <msalle@nikhef.nl> 1.4.0-1
changelog:
  - make Requires arch-specific
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - add requirement on pkgconfig for EPEL5 only
  - remove defattr
  - updated version


author: Mischa Salle <msalle@nikhef.nl> 1.4.1-1
changelog:
  - add AUTHORS and LICENSE to doc
  - remove the excludes since they are no longer build/installed
  - updated version


author: Zalak Shah <zsshah@iu.edu> 1.76-3
changelog:
  - CA release corresponding to IGTF 1.94 release.
  - Renamed 1.77NEW to 1.76NEW_2 and 1.77IGTFNEW to 1.76IGTFNEW_2


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.19.6-1
changelog:
  - Fix crashes in cacert-verify-probe and crl-freshness-probe (SOFTWARE-3305)
  - Update URLs in cacert-verify-probe and crl-freshness-probe (SOFTWARE-3299)


author: Dave Dykstra <dwd@fnal.gov> 4.6-1.1
changelog:
  - Upgrade to 4.6-1 tarball with the following release notes:
   - Update to squid-4.6 with release notes at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00090.html
     squid-4.5 release notes are at
      https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00089.html
   - If a rotate is blocked because processing awstats logs is running long,
     do the rotate during the next rotateiflarge cron instead.


author: Dave Dykstra <dwd@fedoraproject.org> - 3.4.2-1.1
changelog:
  - Upgrade to upstream 3.4.2.  Remove PR #4522, no longer needed.
    Still contains config fakeroot cli PR #4346.


author: Carl Edquist <edquist@cs.wisc.edu> - 2.2.2-1
changelog:
  - Update bootstrap-osg-test to fetch from source control (SOFTWARE-2232)
  - Allow installing slurm without all of osg-tested-internal (SOFTWARE-3347)
  - Conditionalize xrootd policy based on lcmaps version (SOFTWARE-3396)


author: Brian Lin <blin@cs.wisc.edu> - 2.3.0-1
changelog:
  - Add extra digits to the test numbering scheme
  - Fix bootstrap-osg-test (SOFTWARE-2232)
  - Add tests for xrootd-multiuser, StashCache (SOFTWARE-3369, SOFTWARE-3360)
  - Update tests for HTCondor 8.8.0 (SOFTWARE-3473)
  - Re-enable xrootd-fuse tests


author: Carl Edquist <edquist@cs.wisc.edu> - 2.3.1-1
changelog:
  - Require globus-proxy-utils for xrootd-multiuser tests (SOFTWARE-3359, #154)
  - Update test requirements for singularity-3.0.2 (SOFTWARE-3532, #157)
  - Add comparison class for package version tests (#153)
  - Update tests to support XCache 1.0.0 (SOFTWARE-3569)


author: Brian Lin <blin@cs.wisc.edu> - 3.0.0-1
changelog:
  - Remove tests for OSG 3.3-only components
  - Update StashCache and XRootD tests for XCache 1.0+
  - Add XRootD third-party copy tests (SOFTWARE-3362, SOFTWARE-3670)
  - Install x509-scitokens-issuer-client for scitokens tests (SOFTWARE-3649)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2-1
changelog:
  - GT6 update:
    - Prevent client from requesting clear control channel
    - CIPHERS config will now apply to control channel


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 8.0-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - Grid Community Toolkit merged a number of outstanding pull requests (7.0)
    - Add option to send IPv6 address in EPSV response
    - Add function to get the command string
    - Terminate the connection if server fails to write the 220 banner
    - Fix typo in GridFTP server response type
  - First Grid Community Toolkit release (7.1)
  - Merge GT6 update 6.2 into GCT (7.2)
  - Merge GT6 update 6.3 into GCT (7.3)
  - Merge GT6 update 7.0 into GCT (8.0)
  - Drop patches globus-gridftp-server-control-epsv-ip.patch,
    -cmd-string.patch and -tcp-rst-stuck.patch (accepted upstream)


author: Dave Dykstra <dwd@fnal.gov> - 1.3-1
changelog:
  - Add CVMFS_CONFIG_REPO_REQUIRED=yes.  Change Conflicts on cvmfs to be less
    than version 2.3.3 because the option was added then.


author: Dave Dykstra <dwd@fnal.gov> - 2.1-1
changelog:
  - Merge LIGO changes to debian packaging
  - Move packaging/debian to debian and packaging/redhat to rpm, to work
    better with OBS and new OSG github packaging standard


author: Dave Dykstra <dwd@fnal.gov> - 2.2-1
changelog:
  - Just change the version number because the OSG github-source for
    reading spec files doesn't work with dash release tags.


author: Dave Dykstra <dwd@fnal.gov> - 2.3-1
changelog:
  - Change the changelog date on version 2.0.3 from Feb 28 2017 to
    May 28 2017 because osg-build complained about non-descending order
    of the dates.
  - Change the rpm/rpmbuild-cvmfs-config-osg development test script 
    to read from rpm instead of packaging/redhat.


author: Dave Dykstra <dwd@fnal.gov> - 2.4-1
changelog:
  - Change the server urls for the config-osg repository to use openhtc.io
    aliases when the proxy url can use DIRECT.


author: Jeny Teheran <jteheran@fnal.gov> - 3.2.2
changelog:
  - Fix format error for message when retrieval times out
  - Increased the wait time between retrieval attempts
  - Improve formatting of osg-incommon-cert-request man page


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 8.8.4-1.8
changelog:
  - Add DAEMON_LIST and FS/Password auth configuration;
    autogenerate pool password on install (SOFTWARE-3795)
  - Add version to the Obsoletes for condor-cream-gahp


author: Edgar Fajardo <efajardo@cern.ch> 1.1.0-1
changelog:
  Updated to the 1.1.0 release. It could not be a pass through build since the dist was missing in the Release entry in the spec file


author: Zalak Shah <zsshah@iu.edu> 1.94-3
changelog:
  - Fix version number in changelog and HTML
  - Verify SHA2 checksums
  - Update the package summary and description


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 11.8-3
changelog:
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Remove _pkgdocdir and _initddir macro definitions
    - Drop redundant Requires corresponding to autogenerated pkgconfig Requires
    - Don't clear the buildroot in the install section
    - Remove the clean section
    - Drop the globus-gridftp-server-openssl098.patch


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 12.2-1
changelog:
  - GT6 update:
    - New error message format (12.0)
    - Configuration database (12.0)
    - Better delay for end of session ref check (12.1)
    - Fix tests when getgroups() does not return effective gid (12.2)


author: Brian Lin <blin@cs.wisc.edu> - 3.4-1
changelog:
  - Drop requirements for packages no longer in 3.4 (SOFTWARE-2734)
  - Explicitly require mysql-server for VOMS


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0-2
changelog:
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Remove _pkgdocdir macro definition
    - Drop redundant Requires corresponding to autogenerated pkgconfig Requires
    - Don't clear the buildroot in the install section
    - Remove the clean section


author: Matyas Selmeci <matyas@cs.wisc.edu> - 1.0.9-2
changelog:
  - Patch condor_config file to have more descriptive comments, and also remove
    the CONDOR_IDS line because /etc/condor-cron/config.d/condor_ids will set
    that anyway. (SOFTWARE-1124)


author: Dave Dykstra <dwd@fedoraproject.org> - 3.2.1-1.1
changelog:
  - Add patch for PR #3456 to make --home work with 'mount home = no'
  - Add patch for PR #3803 to make bind mounts from read-only filesystems
    work unprivileged


author: Dave Dykstra <dwd@fedoraproject.org> - 3.4.0-1.1
changelog:
  - Update to upstream 3.4.0-1
  - Fix compiles on non-64 bit architectures (PR #4370)
  - Add config fakeroot CLI which was inadvertently left out of the upstream
    release (PR #4346)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.1-1
changelog:
  - Use --location argument to specify destination; use /etc or $OSG_LOCATION/etc if not specified (SOFTWARE-2527)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.3.0-1
changelog:
  - Add osg-release requirement
  - Allow taking osg repo definition from osg-release installed in a tarball client (SOFTWARE-2527)


author: Dave Dykstra <dwd@fnal.gov> - 1.0-1
changelog:
  - Use the same root / $CWD as the target process.  Without this, the
    authz process may utilize the incorrect file for target processes
    that are in a chroot or provide a relative path for the X509 proxy.


author: Dave Dykstra <dwd@fnal.gov> 0.2.4-1.3.osg
changelog:
  - Change gsi-authz.conf to have the callout commented out by default
    so globus will fall back to the grid-mapfile


author: Mischa Salle <msalle@nikhef.nl> 0.3.1-1
changelog:
  - remove README file which is now a manpage
  - rename gt4-interface-install script
  - add gt4-interface-install man page
  - remove globus-core and globus-gsi-callback-devel build dependencies
  - update builddep on lcmaps-devel instead of -interface
  - prevent unnecessary linking
  - specify BuildRoot (and clean section) for EPEL5
  - remove defattr
  - cleanup docdir
  - adding BUGS and NEWS files
  - updated version


author: Dave Dykstra <dwd@fnal.gov> - 3.3.0
changelog:
  - Bump to new middle version number because of the new -O/--orgid option.
  - Slightly reorganize the man page documentation of the new option.


author: efajardo@physics.ucsd.edu - 4.0.1-1.3
changelog:
  - Releasing just the personar-tools subpackage on osg (SOFTWARE-2686)
  - Removede from deps paris-traceroute and pscheduler-core


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.1-1.5
changelog:
  - Document the options to toggle between considering the first VOMS FQAN or
    considering all of them. (SOFTWARE-2932)


author: Dave Dykstra <dwd@fnal.gov> - 1.7.1-1.6
changelog:
  - Look up lcmaps_is_set_to_verify_voms_attributes symbol instead of
    always calling it, because the symbol isn't available when used by
    llrun. (SOFTWARE-3255)


author: Dave Dykstra <dwd@fedoraproject.org> - 3.5.2-1.2
changelog:
  - Add patch for PR #4974.  Only the src rpm is being used, for
    building a --without-suid installation, so this won't be released
    to EPEL or Fedora other than rawhide..


author: Dave Dykstra <dwd@fedoraproject.org> - 3.6.0-1
changelog:
  - Upgrade to upstream 3.6.0.  Remove patch #4679 for el8, since
    golang-12 is now available for that build machine.


author: Brian Lin <blin@cs.wisc.edu> - 1.7.0-1
changelog:
  - osg-test should exit non-zero if tests fail (SOFTWARE-2306)
  - Fix Gratia automated test to run regardless of CE type (SOFTWARE-2293)
  - Add option to osg-test that turns on SELinux (SOFTWARE-2270)
  - Run gfal2 tests before GUMS/HTCondor-CE tests to accommodate inclusion of BeStMan in osg-tested-internal
  - Allow regex in fetch-crl whitelists


author: Diego Davila <didavila@ucsd.edu> - 7.0.21-1
changelog:
  - Update to 7.0.21 (SOFTWARE-3883)
  - Changed the -n argument on prep section to match to the untared directory name


author: Brian Lin <blin@cs.wisc.edu> - 3.0.4-21
changelog:
  - Add empty /etc/sysconfig/xrootd-dsi config file
  - Add descriptive header to globus-gridftp-server-plugin


author: Mátyás Selmeci <matyas@cs.wisc.edu> 4.9.3-1.1
changelog:
  - Revert OS detection changes in pegasus-lite-common.sh that were breaking EL6 builds (SOFTWARE-4014)


author: Brian Lin <blin@cs.wisc.edu> - 2.0.0-1
changelog:
  - osg-cert-request defaults to authenticated requests (SOFTWARE-2898)
  - Certificate request quota verification is now performed server-side (SOFTWARE-2472)
  - Remove 'tests' package since the tests are not ready for public consumption


author: Brian Lin <blin@cs.wisc.edu> - 2.1.0-1
changelog:
  - Attempt HTTPS connections before falling back to HTTP (SOFTWARE-3034)
  - Restore original key names if writing new keys fails (SOFTWARE-3000)
  - Fixup osg-cert-request help message (SOFTWARE-3001)
  - Replace goc@opensciencegrid.org with updated address (SOFTWARE-3013)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 8.23-2
changelog:
  - Fix for GT-604: fix ipv6 negotiation when source does not pre-connect
    (backported from upstream git)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 8.25-1
changelog:
  - GT6 update (upstream's release of the fix for GT-604)
  - Drop patch globus-ftp-client-ipv6.patch (fixed upstream)


author: Mattias Ellert <mattias.ellert@fysast.uu.se> - 8.27-1
changelog:
  - GT6 update
    - Prevent endless loop when auto-retrying failed pasv on other server (8.27)
    - Disable mandatory IPv6 in tests (8.26)


author: Diego Davila <didavila@ucsd.edu> - 3.4-9
changelog:
  - Changing "koji.chtc.wisc.edu" for "koji.opensciencegrid.org" (SOFTWARE-3863)
  - Fixing date issue on changelog Fri Feb 08 2018 -> Thu


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.1-1
changelog:
  - Switch upstream to Grid Community Toolkit
  - First Grid Community Toolkit release (9.0)
  - Use 2048 bit RSA key for tests (9.1)


author: Dave Dykstra <dwd@fnal.gov> 4.11-4.1
changelog:
  - Upgrade to 4.11-4 tarball with the following release note:
    - Apply patch for bug #5041 which broke compilation in squid-4.11 on
      el7 with systemd.
  - Update rpm spec to build on el8.
  - Use python3 for shoal instead of python2 because that has the greatest
    portability across operating systems.  On el6, use the scl add-on
    package from Red Hat.  Apply a patch to shoal to work with python3.  
  - Pre-download python pip packages into shoal-downloads.tar.gz to include
    them in the src rpm.
  - Disable NIS basic-authentication on el8 because required header files
    are missing


author: Dave Dykstra <dwd@fnal.gov> 4.11-4.2
changelog:
  - Fix quoting on el6 build options to select the correct types of basic
    authentication.  The bug accidentally enabled ldap authentication which
    prevented an el6 rpm from installing on el7.
  - Remove openldap-devel build dependency.


author: Dave Dykstra <dwd@fnal.gov> 4.11-4.3
changelog:
  - Require systemd-devel on non-el6 systems, so squid's configure will
    recognize that it is on a systemd-based system.
  - Update to shoal-agent-0.9.9, and remove python3 patch because that
    is now merged.


author: Dave Dykstra <dwd@fnal.gov> 4.12-2.1
changelog:
  - Upgrade to 4.12-2 tarball with the following release notes (from 4.12-1
     and 4.12-2):
   - Update to squid-4.12 with release announcement at
       https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00114.html
      It includes a couple of security advisories, but they are on
      features that as far as I know are not used by frontier-squid users.
   - Remove patches for bug #5030 and #5041 which are included in 4.12
   - Slightly update patch for bug #5051 as recommended by squid consultant
   - Note that an additional, more relevant squid advisory fixed in 4.12 was
      published late:
       https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00116.html
   - Support the "stdio:" prefix for access_log


author: Dave Dykstra <dwd@fnal.gov> 4.13-1.1
changelog:
  - Upgrade to 4.13-1tarball with the following release notes:
   - Update to squid-4.13 with release announcement at
       https://www.mail-archive.com/squid-announce@lists.squid-cache.org/msg00117.html
      It includes a couple of relevant security advisories related to
      cache poisoning.
   - Remove patch for bug 5051 since it is included in the 4.13 release.
  - Remove the recursion on the restorecon for SELinux in the %post install
      step, to avoid taking a long time when going through a large cache.


author: Dave Dykstra <dwd@fnal.gov>> - 1.5.11-1.1
changelog:
  - Updated to upstream 1.5.11-1.1, removed patch for unloading
      OpenSSL error strings (SOFTWARE-3282).


author: <efajado@physics.ucsd.edu> - 1.0.2-1
changelog:
  - Updated the README for configuration instrucctions
  - Added condor-cron config templates from the glideinwms schedd configs


author: <efajado@physics.ucsd.edu> - 1.1.1-1
changelog:
  - Modified the condor-cron config to use the LOCAL_CONFIG_DIR of condor
  - Added glideinwms-userschedd to the requirements


author: Marian Zvada <marian.zvada@cern.ch> - 1.3.4-1
changelog:
  - includes cleanup of various OpesnSSL-related bugs from 1.3.4 github tag
  - no need patch from SW-2848 for OSG3.4 build


author: Carl Edquist <edquist@cs.wisc.edu> - 1.4.1-1
changelog:
  - Use single mutex for LCMAPS calls from XrdLcmaps and XrdHttpLcmaps (#16)
  - Drop OWNER_EXECUTE for lcmaps.cfg (#17)


author: Tim Cartwright <cat@cs.wisc.edu> 1.0.0-1
changelog:
  - Overhauled Fetch CRL code to work with v2/v3 and RPM names
  - Updated Makefile to fit OSG conventions (except install target)


author: Dave Dykstra <dwd@fnal.gov> 1.8-1
changelog:
  - Allow a previous output file to have additional proxy layers added
    on to it when checking to see if it is still valid.  That is, strip
    off any number of /CN=[0-9]+ or /CN=proxy patterns appended to the
    certificate subject.  In particular this is useful for when someone
    does voms-proxy-init -noregen after a previous run of cigetcert.


author: Dave Dykstra <dwd@fnal.gov> 1.10-1
changelog:
  - Change default --minhours value from 12 to 1.
  - If the formula calculating the remaining hours in the myproxy cert
      (%hours - %proxyhours - %minhours) comes out to a value lower
      than %minhours, set it to %minhours


author: Dave Dykstra <dwd@fnal.gov> 1.11-1
changelog:
  - If the requested --hours is fractional, round the hours of the
    original certificate up to the next whole number rather than down.
    In this case generate a proxy with the requested fractional hours.


author: Dave Dykstra <dwd@fnal.gov> 1.13-1
changelog:
  - Choose a prefix for the temp output file in the same directory as the
    output file to avoid renaming across filesystems.


author: Dave Dykstra <dwd@fnal.gov> 1.14-1
changelog:
  - Limit the number of proxy levels stripped off of %certsubject to 5.
    This is to catch programming errors where people call voms-proxy-init
    -noregen after every call to cigetcert, even when cigetcert determines
    that the previous proxy can be reused.


author: Dave Dykstra <dwd@fnal.gov> 1.15-1
changelog:
  - Fix bug that caused the proxy to be stored into MyProxy under the DN
    of a previous certificate (if it existed but could not be reused)
    rather than the newly generated one.


author: Dave Dykstra <dwd@fnal.gov> 1.16-1
changelog:
  - Fix typo in the variable name added in the last version.  This was
    not noticed because it was caught in an exception and caused it to
    always behave as if a previous proxy stored in myproxy could not be
    used.


author: Mischa Salle <msalle@nikhef.nl> 1.5.4-1
changelog:
  - add extra doc files README NEWS
  - add protection against RPATHS
  - update URL
  - remove Vendor tag
  - updated version


author: Edgar Fajardo <efajardo@cern.ch> 4.3.0-2.1
changelog:
  - Changed the Requires and BuildRequires section so it enforces Java 7
  - Added the CLASSPATH hack to the build section
  - Added the patch0 so the code is compatible with python2.4


author: Edgar Fajardo <efajardo@cern.ch> 4.3.1-1.1
changelog:
  - Used the new upstream source rpm 4.3.1 that includes the patch so the code is compatible with python2.4
  - Changed the Requires and BuildRequires section so it enforces Java 7
  - Added the CLASSPATH hack to the build section


author: Tim Cartwright <cat@cs.wisc.edu> 4.3.1-1.2
changelog:
  - Rebuild with unified spec file across OSG 3.1 and 3.2
  - Tweaked arrangement of requires lines to ease comparisons against original


author: Edgar Fajardo <efajardo@physics.ucsd.edu> -4.7.4-1.1
changelog:
  - Bumped to version 4.7.4 - SOFTWARE-2626
  - Added R-devel to the build requires
  - Added patch for javadoc error in el7


author: Dave Dykstra <dwd@fnal.gov> 4.4-2.1
changelog:
  - Upgrade to 4.4-2 tarball with the following release note:
   - Apply security patch for CVE-2019-12527
        http://www.squid-cache.org/Advisories/SQUID-2019_5.txt
      which can (before being patched) be exploited through the ftp protocol.


author: Dave Dykstra <dwd@fnal.gov> - 1.2-1
changelog:
  - Update cms.osgstorage.org config to only read cvmfs data with https
    direct from the repository server.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.4-1
changelog:
  - Remove osg-release requirement; ignore missing compat packages; only try to
    update packages that are installed (SOFTWARE-2146)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.6-1
changelog:
  - Replace references to OSG Twiki with links to current docs (SOFTWARE-3083)
  - Replace help email (SOFTWARE-3015)


author: Brian Lin <blin@cs.wisc.edu> - 1.4-1
changelog:
  - Add support to GLOBUS_GFS_CMD_SITE_RDEL
  - Add GRIDFTP_APPEND_XROOTD_CGI hook (environment variable) to support Xrootd space token.
  - Renamed xrootd-dsi packaging to reflect upstream


author: Brian Lin <blin@cs.wisc.edu> - 1:1.4-2
changelog:
  - Added architecture-specific provides for xrootd-dsi
  - Refer to gridftp-dsi-posix paths in globus-gridftp-server-plugin


author: Bill Nottingham <notting@redhat.com> 0.5.20-1
changelog:
  - solve multilib against parent repos if configured (#633136)
  - fix traceback when only binary RPMS exist (modified from #636697, <tguthmann@iseek.com.au>)
  - disable sigchecking on deltas in source, not via patch (#512454)
  - mark LSB-providing packages as multilib (#585858)
  - fix libmunge to catch more cases (#637172, <mschwendt@gmail.com>)
  - add krb5 plugin dir to multilib list (#632611)
  - add libstdc++-static as a multilib whitelist (#630581)
  - add dri as a multilib dir
  - arm arch compatiblitiy <dennis@ausil.us>


author: Bill Nottingham <notting@redhat.com> 0.5.21-1
changelog:
  - update configs for F15 (<dennis@ausil.us>)
  - add a knob for frobbing which ppc arch is preferred (<jwboyer@gmail.com>)
  - fix gdk-pixbuf loader path (#649339)


author: Mischa Salle <msalle@nikhef.nl> 1.6.2-1
changelog:
  - update buildroot
  - change lcmaps build dependency into fedora-compliant lcmaps-devel
  - update globus build requires
  - update runtime requires
  - updated version


