Update to 34.25.5.13 upstream release

Upstream tag: anaconda-34.25.5.13
Upstream commit: 18ad351d

Commit authored by Packit automation (https://packit.dev/)

.gitignore

@@ -357,3 +357,4 @@
 /anaconda-34.25.5.10.tar.bz2
 /anaconda-34.25.5.11.tar.bz2
 /anaconda-34.25.5.12.tar.bz2
+/anaconda-34.25.5.13.tar.bz2

README.packit

@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.102.2.
+The file was generated using packit 0.106.0.

anaconda.spec

@@ -1,6 +1,6 @@
 Summary: Graphical system installer
 Name:    anaconda
-Version: 34.25.5.12
+Version: 34.25.5.13
 Release: 1%{?dist}
 License: GPLv2+ and MIT
 URL:     http://fedoraproject.org/wiki/Anaconda
@@ -35,7 +35,7 @@ Source0: https://github.com/rhinstaller/%{name}/releases/download/%{name}-%{vers
 %define libxklavierver 5.4
 %define mehver 0.23-1
 %define nmver 1.0
-%define pykickstartver 3.32.11-1
+%define pykickstartver 3.32.13-1
 %define pypartedver 2.5-2
 %define pythonblivetver 1:3.6.0-13
 %define rpmver 4.10.0
@@ -416,6 +416,48 @@ desktop-file-install --dir=%{buildroot}%{_datadir}/applications %{buildroot}%{_d
 %{_prefix}/libexec/anaconda/dd_*
 
 %changelog
+* Wed Jan 29 2025 Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
+- security: require pykickstart version with %%certificates support (rvykydal)
+  Resolves: RHEL-61430
+- security: do not crash initramfs ks parsing on failing certificate dump
+  (rvykydal)
+  Resolves: RHEL-61430
+- security: add service to transfer certificates from initramfs (rvykydal)
+  Resolves: RHEL-61430
+- security: import certificates in initramfs (rvykydal)
+  Resolves: RHEL-61430
+- security: install certificates in pre-install phase only for dnf payload
+  (rvykydal)
+  Resolves: RHEL-61430
+- security: raise exception if certificate destination is unknown (rvykydal)
+  Resolves: RHEL-61430
+- security: log a warning when dumping certificate over an existing file
+  (rvykydal)
+  Resolves: RHEL-61430
+- security: pre-install certificates before payload installation (rvykydal)
+  Resolves: RHEL-61430
+- security: add API to install certificates early before payload (rvykydal)
+  Resolves: RHEL-61430
+- security: install certificates on target system (rvykydal)
+  Resolves: RHEL-61430
+- security: Add API for installation on target system (rvykydal)
+  Resolves: RHEL-61430
+- security: import certificates early after Anaconda start (rvykydal)
+  Resolves: RHEL-61430
+- security: add API to import certificates to Anaconda environment (rvykydal)
+  Resolves: RHEL-61430
+- security: add API: Certificate getter (rvykydal)
+  Resolves: RHEL-61430
+- kickstart: extend section specification for list of section data (rvykydal)
+- security: implement the support to install certificates to Anaconda
+  (rvykydal)
+  Resolves: RHEL-61430
+- translations: bump dependency to l10n repo because of branch switch
+  (k.koukiou)
+- util: correct errors and suppress stderr for common cases (riehecky)
+- util: Add additional information for EFI systems (riehecky)
+  Resolves: RHEL-55128
+
 * Wed Nov 13 2024 Martin Kolman <mkolman@redhat.com> - 34.25.5.12-1
 - Explicitly place biosboot partition only on stage1 disk (vtrefny)
   Resolves: RHEL-50454

rpmlint.toml

@@ -0,0 +1,35 @@
+# The purpose of this file is to overwrite some default config
+# of rpmlint, which may not fit our project needs / specification
+Filters = [
+    # Discard no-binary error for anaconda packages which cant be a noarch type
+    'anaconda.x86_64: E: no-binary',
+    'anaconda-install-env-deps.x86_64: E: no-binary',
+    'anaconda-install-img-deps.x86_64: E: no-binary',
+    # Discard explicite library dependencies
+    'explicit-lib-dependency flatpak-libs',
+    'explicit-lib-dependency libblockdev-lvm-dbus',
+    'explicit-lib-dependency librsvg2',
+    # Discard warning about binary debug symbols. Those are our helper
+    # binaries and it is not important for them to be stripped
+    'unstripped-binary-or-object /usr/libexec/anaconda/dd_extract',
+    'unstripped-binary-or-object /usr/libexec/anaconda/dd_list',
+    'unstripped-binary-or-object /usr/lib64/libAnacondaWidgets*',
+    'unstripped-binary-or-object /usr/lib64/glade/modules/libAnacondaWidgets*',
+    # Discard symbolic link warnings.
+    'dangling-symlink /usr/share/anaconda/window-manager/glib-2.0/schemas/org.gnome.*',
+    'dangling-relative-symlink /usr/lib/.build-id/*',
+    # Discard missing manual pages error
+    'no-manual-page-for-binary liveinst',
+    'no-manual-page-for-binary anaconda-cleanup',
+    'no-manual-page-for-binary anaconda-disable-nm-ibft-plugin',
+    'no-manual-page-for-binary anaconda-nm-disable-autocons',
+    'no-manual-page-for-binary anaconda-import-initramfs-certs',
+    'no-manual-page-for-binary instperf',
+    'no-manual-page-for-binary instperf',
+    'no-manual-page-for-binary anaconda',
+    'no-manual-page-for-binary handle-sshpw',
+    # Discard missing README / documentation for package
+    'no-documentation',
+    # Discard spelling errors for project commonly used words
+    'spelling-error .* en_US (metapackage|kickstarts|iso|eg|lorax) ',
+]

sources

@@ -1 +1 @@
-SHA512 (anaconda-34.25.5.12.tar.bz2) = 5d1720bf94eb2b9f6b5cbd796ce52b4e4fee3416f5b88066ba5a79338b127409c29b5a25c97e0ea9185a7518968396de577fe9606b68898eccb044a7b1acd4db
+SHA512 (anaconda-34.25.5.13.tar.bz2) = 566e8833081d3aca1c2020ffb44d5a7ebbdc91246706dd77467907e9a7251358adc7d52fec61832271cab3e97e41cec75adf6ac94de61a0931375e2a3dd89386