Packages changed:
  MicroOS-release (20260525 -> 20260527)
  file
  kernel-source (7.0.9 -> 7.0.10)
  pam (1.7.2 -> 1.7.2+git12)
  pam-full-src (1.7.2 -> 1.7.2+git12)
  patterns-base
  shim-leap
  which (2.23 -> 2.25)

=== Details ===

==== MicroOS-release ====
Version update (20260525 -> 20260527)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== file ====
Subpackages: file-magic libmagic1

- Add patch file-5.47-s390x.patch from upstream commit
  Work around an endianess problem on s390x

==== kernel-source ====
Version update (7.0.9 -> 7.0.10)

- tracing: Avoid NULL return from hist_field_name() on truncation
  (git-fixes).
- firmware: arm_ffa: Align RxTx buffer size before mapping
  (git-fixes).
- commit bb95589
- Linux 7.0.10 (bsc#1012628).
- blk-cgroup: wait for blkcg cleanup before initializing new disk
  (bsc#1012628).
- md: suppress spurious superblock update error message for
  dm-raid (bsc#1012628).
- fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START
  (bsc#1012628).
- fs/mbcache: cancel shrink work before destroying the cache
  (bsc#1012628).
- md/raid1: fix the comparing region of interval tree
  (bsc#1012628).
- fs: fix archiecture-specific compat_ftruncate64 (bsc#1012628).
- drbd: Balance RCU calls in drbd_adm_dump_devices()
  (bsc#1012628).
- loop: fix partition scan race between udev and
  loop_reread_partitions() (bsc#1012628).
- block: fix zones_cond memory leak on zone revalidation error
  paths (bsc#1012628).
- nilfs2: reject zero bd_oblocknr in
  nilfs_ioctl_mark_blocks_dirty() (bsc#1012628).
- blk-cgroup: fix disk reference leak in
  blkcg_maybe_throttle_current() (bsc#1012628).
- pstore/ram: fix resource leak when ioremap() fails
  (bsc#1012628).
- erofs: include the trailing NUL in FS_IOC_GETFSLABEL
  (bsc#1012628).
- md: fix array_state=clear sysfs deadlock (bsc#1012628).
- ublk: reset per-IO canceled flag on each fetch (bsc#1012628).
- blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_default()
  (bsc#1012628).
- erofs: handle 48-bit blocks/uniaddr for extra devices
  (bsc#1012628).
- md: remove unused static md_wq workqueue (bsc#1012628).
- md: wake raid456 reshape waiters before suspend (bsc#1012628).
- dcache: permit dynamic_dname()s up to NAME_MAX (bsc#1012628).
- btrfs: fix the inline compressed extent check in
  inode_need_compress() (bsc#1012628).
- btrfs: fix deadlock between reflink and transaction commit
  when using flushoncommit (bsc#1012628).
- btrfs: do not reject a valid running dev-replace (bsc#1012628).
- OPP: debugfs: Use performance level if available to distinguish
  between rates (bsc#1012628).
- OPP: Move break out of scoped_guard in
  dev_pm_opp_xlate_required_opp() (bsc#1012628).
- ACPI: x86: cmos_rtc: Clean up address space handler driver
  (bsc#1012628).
- ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver
  (bsc#1012628).
- devres: fix missing node debug info in devm_krealloc()
  (bsc#1012628).
- thermal/drivers/spear: Fix error condition for reading
  st,thermal-flags (bsc#1012628).
- debugfs: check for NULL pointer in debugfs_create_str()
  (bsc#1012628).
- debugfs: fix placement of EXPORT_SYMBOL_GPL for
  debugfs_create_str() (bsc#1012628).
- soundwire: debugfs: initialize firmware_file to empty string
  (bsc#1012628).
- amd-pstate: Fix memory leak in amd_pstate_epp_cpu_init()
  (bsc#1012628).
- amd-pstate: Update cppc_req_cached in fast_switch case
  (bsc#1012628).
- cpufreq: Pass the policy to cpufreq_driver->adjust_perf()
  (bsc#1012628).
- PCI: use generic driver_override infrastructure (bsc#1012628).
- platform/wmi: use generic driver_override infrastructure
  (bsc#1012628).
- vdpa: use generic driver_override infrastructure (bsc#1012628).
- s390/cio: use generic driver_override infrastructure
  (bsc#1012628).
- s390/ap: use generic driver_override infrastructure
  (bsc#1012628).
- bus: fsl-mc: use generic driver_override infrastructure
  (bsc#1012628).
- locking/mutex: Rename mutex_init_lockep() (bsc#1012628).
- locking/mutex: Fix wrong comment for CONFIG_DEBUG_LOCK_ALLOC
  (bsc#1012628).
- irqchip/irq-pic32-evic: Address warning related to wrong
  printf() formatter (bsc#1012628).
- hrtimer: Avoid pointless reprogramming in
  __hrtimer_start_range_ns() (bsc#1012628).
- hrtimer: Reduce trace noise in hrtimer_start() (bsc#1012628).
- locking: Fix rwlock and spinlock lock context annotations
  (bsc#1012628).
- signal: Fix the lock_task_sighand() annotation (bsc#1012628).
- ww-mutex: Fix the ww_acquire_ctx function annotations
  (bsc#1012628).
- perf/amd/ibs: Account interrupt for discarded samples
  (bsc#1012628).
- perf/amd/ibs: Preserve PhyAddrVal bit when clearing PhyAddr MSR
  (bsc#1012628).
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS
  NMI handler (bsc#1012628).
- x86/tdx: Fix the typo in TDX_ATTR_MIGRTABLE (bsc#1012628).
    ... changelog too long, skipping 2041 lines ...
- commit 17ac7c8

==== pam ====
Version update (1.7.2 -> 1.7.2+git12)

- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms

==== pam-full-src ====
Version update (1.7.2 -> 1.7.2+git12)

- Update to version 1.7.2+git12:
  * pam_env: fix check for buffer size (#975)
  * pam.8: Drop self reference
  * pam_unix: always call unix_update if SELinux is enabled
    (obsoletes pam_unix-selinux.patch)
  * ci: use one-line syntax for the matrix strategy
  * ci: add logind jobs for all compilers to the build matrix
  * ci: add clang-19 jobs to the build matrix
  * po: update translations using Weblate (Greek)
  * ci: replace vendordir jobs with novendordir
  * ci/build.sh: add support for empty VENDORDIR
  * ci: apply Zizmor recommendations to workflow
  * ci: use matrix strategy to avoid code duplication
  * meson: do not undefine _FILE_OFFSET_BITS for 64-bit platforms

==== patterns-base ====
Subpackages: patterns-base-base patterns-base-bootloader patterns-base-minimal_base patterns-base-x11

- make kernel_livepatching pattern visible (bsc#1263084)
- enable kernel livepatching for aarch64 in SLE16.1 and newer
  (jsc#PED-7906, bsc#1266306).

==== shim-leap ====

- Modified the pretrans Lua script to work around the broken DB issue
  caused by buggy firmware when Secure Boot is disabled.
  It is impossible for the db to be empty while Secure Boot is enabled.
  If the db is empty, the installation behavior will be treated the
  same as when Secure Boot is disabled. We allow the shim installation
  process to continue and display a message reminding the user to add
  the appropriate certificate. (bsc#1259096)

==== which ====
Version update (2.23 -> 2.25)

- Update to 2.25:
  * Fix an out of bounds stack read