Packages changed:
  PackageKit (1.2.8 -> 1.3.3)
  glibc
  libxml2
  postfix
  xfce4-power-manager

=== Details ===

==== PackageKit ====
Version update (1.2.8 -> 1.3.3)
Subpackages: PackageKit-backend-zypp PackageKit-gstreamer-plugin PackageKit-gtk3-module PackageKit-lang libpackagekit-glib2-18 typelib-1_0-PackageKitGlib-1_0

- Rebase to version 1.3.3
  + See included NEWS file for details between 1.2.8 to 1.3.3
- Drop patches included upstream
  + PackageKit-dynamic-export.patch
  + PackageKit-fix-crash-pre-dbus.patch
  + PackageKit-fix-pkcon-permission.patch
  + PackageKit-mark-as-compulsory.patch
  + PackageKit-zypp-disable-upgrade-system-in-sle.patch
  + PackageKit-zypp-dont-install-updateCandidateObj.patch
  + PackageKit-zypp-parallel-package-downloads.patch
- Backport dnf5 backend and add patch to transition dnf users to dnf5
  + PackageKit-1.3.3-Initial-DNF5-Backend.patch
  + PackageKit-alias-dnf-to-dnf5.patch
- Drop legacy dnf backend and related patches
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Drop patches for support for SUSE Linux < 16
  + PackageKit-find-python-3-6.patch

==== glibc ====
Subpackages: glibc-32bit glibc-devel glibc-extra glibc-gconv-modules-extra glibc-gconv-modules-extra-32bit glibc-lang glibc-locale glibc-locale-base

- Manage files in /var with systemd-tmpfiles (bsc#1253139)

==== libxml2 ====
Subpackages: libxml2-16 libxml2-tools

- Add patch libxml2-CVE-2026-0989.patch, to fix call stack exhaustion
  leading to application crash due to RelaxNG parser not limiting the
  recursion depth when resolving `<include>` directives
  CVE-2026-0989, bsc#1256805, https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374

==== postfix ====

- Do not strip binaries at all
- also drop " -s " from the CCARGS to prevent stripping there
- Re-add dropped change:
- fix postfix-SUSE.tar.gz, postfix.service: correct path for postalias
  from /sbin/postalias to /usr/sbin/postalias

==== xfce4-power-manager ====
Subpackages: xfce4-power-manager-lang xfce4-power-manager-plugin

- Require pkexec instead of /usr/bin/pkexec: the package split
  happened very long tmie ago, but with a 2nd provider for
  /usr/bin/pkexec (run0-wrappers) we need to be more specific which
  one we want to use (switch to run0-providers is still possible,
  as it does provide pkexec, but at a lower version)