Packages changed:
  MicroOS-release (20260520 -> 20260521)
  crypto-policies
  libcaca (0.99.beta20 -> 0.99.beta20+git.1776622070.7c8e333)
  openssh
  python-certifi (2026.2.25 -> 2026.4.22)
  python-requests (2.33.1 -> 2.34.2)
  systemd

=== Details ===

==== MicroOS-release ====
Version update (20260520 -> 20260521)
Subpackages: MicroOS-release-appliance MicroOS-release-dvd

- automatically generated by openSUSE-release-tools/pkglistgen

==== crypto-policies ====

- Remove crypto-policies-Allow-sshd-in-FIPS-mode-using-DEFAULT.patch
  to allow X25519 as required for sntrup761x25519-sha512@openssh.com
  and sntrup761x25519-sha512 in the DEFAULT policy. (bsc#1259825)
  Rebase crypto-policies-Allow-openssl-other-policies-in-FIPS-mode.patch
- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
  * Enable sntrup761x25519-sha512 for OpenSSH by default
  * Add crypto-policies-OpenSSH-PQC.patch

==== libcaca ====
Version update (0.99.beta20 -> 0.99.beta20+git.1776622070.7c8e333)

- Updated to version 0.99.beta20+git.1776622070.7c8e333:
  * Switched to typed Ruby wrapping.
  * Simplified caca_create_display call.
  * Do not used _caca_alloc2d in the Ruby extension.
  * Prevented Init_caca from being hidden.
  * Reverted 156781dd67d024dc067010ef8640d0b91c5c3356.
  * Switched from MiniTest to Minitest.
  * Prevented undefined behaviour in overflow check (CVE-2026-42046 bsc1264984).
  * Fixed a crash on 0 sized font in img2txt.
  * Fixed an error message in img2txt.
  * Fixed handling of zero sized image in img2txt.
- Rewrited the SPEC file to correctly generate Python packages in
  all available versions.

==== openssh ====
Subpackages: openssh-clients openssh-common openssh-server

- Improve %prep LDAP regex to preserve subdirectories (e.g., ope-
  nbsd-compat/) and handle optional [ab]/ prefixes.

==== python-certifi ====
Version update (2026.2.25 -> 2026.4.22)

- Add missing BR openssl for `/etc/ssl/ca-bundle.pem`.

==== python-requests ====
Version update (2.33.1 -> 2.34.2)

- update to 2.34.2:
  * Moved `headers` input type back to `Mapping` to avoid
    invariance issues with `MutableMapping` and inferred dict types.
    Users calling `Request.headers.update()` may need to narrow
    typing in their code.
  * Widened `json` input type from `dict` and `list` to `Mapping`
  * and `Sequence`.
  * Changed `headers` input type to MutableMapping and removed
    `None` from `Request.headers` typing to improve handling for
    users.
  * `Response.reason` moved from `str | None` to `str` to improve
    handling for users.
  * Fixed a bug where some bodies with custom `__getattr__`
    implementations weren't being properly detected as Iterables.
  * Requests 2.34.0 introduces inline types, replacing those
    provided by typeshed. Public API types should be fully
    compatible with mypy, pyright, and ty. We believe types are
    comprehensive but if you find issues, please report them to the
    pinned tracking issue.
  * Digest Auth hashing algorithms have added
    `usedforsecurity=False` to clarify security considerations.
  * Requests added support for Python 3.15 based on beta1.
  * Requests added support for Python 3.14t.
  * ``Response.history`` no longer contains a reference to
    itself, preventing accidental looping when traversing the
    history list.
  * Requests no longer performs greedy matching on no_proxy
    domains. The proxy_bypass implementation has been updated with
    CPython's fix from bpo-39057.
  * Requests no longer incorrectly strips duplicate leading
    slashes in URI paths. This should address user issues with
    specific presigned URLs. Note the full fix requires urllib3 2.7.0+.

==== systemd ====
Subpackages: libsystemd0 libudev1 systemd-boot systemd-container udev

- Add a weak runtime dependency on libtss2-tcti-device0 to udev (bsc#1260357 bsc#1264224)
- systemd.spec: drop deprecated meson options 'libidn' and 'libiptc'
  Remove -Dlibidn and -Dlibiptc from meson options as both have been fully
  deprecated by upstream and will be removed in a future release.
  The libidn library support was completely dropped in commit 429cbac508 and has
  been replaced by libidn2.
  OTOH, systemd-networkd and systemd-nspawn no longer support creating NAT rules
  via iptables/libiptc APIs; only nftables is now supported (see commit
  c3c42b30dd).
- Import commit 1e45daa2fb423eb95ad00dcc389e03cfea8f86dc
  1e45daa2fb vconsole-setup: skip setfont(8) when the console driver lacks font support (bsc#1212970)
- Import commit 571d61da82f2654afacf52c620ceec3fbf220f6b
  571d61da82 cryptsetup: avoid a segfault when a keyfile is passed along with a TPM device (bsc#1263117)
  4e16626c0e mkosi: user and group bin needed for a test
  e5f2b85204 TEST-24-CRYPTSETUP: Use virtio-blk-pci
  9bac241fc1 TEST-64-UDEV-STORAGE: Add missing scsi controllers
  8581b451ed Revert "mkosi: Mark minimal images as Incremental=relaxed"
  5a53f0c965 mkosi-tool/opensuse: add libtss2-tcti-device0 package
- systemd.spec: drop ancient Obsoletes for pm-utils, suspend and
  systemd-analyze that predate 2020.