# changelog

author: Tim Theisen <tim@cs.wisc.edu> - 24.0.8-1
changelog:
  - Fix 24.0.7 bug where cgroup v1 out-of-memory was not properly handled
  - HTCondor tarballs now contain Pelican 7.16.5 and Apptainer 1.4.1
    - Pelican 7.16.5 now includes end-to-end integrity checks for clients
  - Add Python wheel for Python 3.13, drop Python wheel for Python 3.7
  - Fix bug where DAGMAN_MAX_JOBS_IDLE was being ignored
  - Fix problems where parallel universe jobs could crash the condor_schedd
  - Prevent condor_starter crash when evicting job during input file transfer
  - condor_watch_q now properly displays job id ranges by using numeric sort


author: Tim Theisen <tim@cs.wisc.edu> - 24.8.1-1
changelog:
  - Fix claim re-use, which was broken in HTCondor version 24.5.1
  - Add support for hierarchic and delegatable v2 cgroups
  - Add the ability to put each HTCondor daemon in its own cgroup
  - Always sets the execute bit on the executable regardless of its origin
  - The EP sets the HOME environment variable to match the /etc/passwd entry
  - Add new 'halt' and 'resume' verbs to "htcondor dag"
  - Add htcondor2.DAGMan class to send commands to a running DAG
  - htcondor ap status now reports the AP's RecentDaemonCoreDutyCycle
  - Can configure condor_adstash to fetch a custom projection of attributes


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.26-1
changelog:
  - Fix ingestion of ads into Elasticsearch under very rare circumstances
  - DAGMan better handles being unable to write to a full filesystem
  - 'kill_sig' submit commands are now ignored on the Windows platform


author: Tim Theisen <tim@cs.wisc.edu> - 23.10.26-1
changelog:
  - Fix memory leak in the condor_schedd when using late materialization
  - Fix condor_master start up when file descriptor ulimit was huge
  - HTCondor tarballs now contain Pelican 7.17.0


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.9-1
changelog:
  - Initial Support for Enterprise Linux 10, including the x86_64_v2 platform
  - In htcondor2, empty configuration keys are now treated as non-existent


author: Tim Theisen <tim@cs.wisc.edu> - 24.9.2-1
changelog:
  - New job attribute to report number of input files transferred by protocol
  - Optional condor_schedd history log file
  - condor_watch_q can now track DAGMan jobs when using the -clusters option
  - Fix bug that caused claim failure when previous output transfer failed
  - Fix bug where access tokens were not generated from Vault tokens


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.27-1
changelog:
  - Fix bug where condor_ssh_to_job failed when EP scratch path is too long
  - Fix incorrect time reported by htcondor status for long running jobs
  - Fix bug where .job.ad, .machine.ad files were missing when LVM is in use


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.10-1
changelog:
  * Mon Jul 28 2025 Tim Theisen <tim@cs.wisc.edu> - 23.10.27-1
  - Fix bug where the vacate reason was not propagated back to the user
  - HTCondor tarballs now contain Pelican 7.17.2


author: Tim Theisen <tim@cs.wisc.edu> - 24.10.2-1
changelog:
  - Remove support for old JobRouter syntax
  - New condor_dag_checker tool finds syntax and logic errors before run
  - New condor_q -hold-codes produces a summary of held jobs
  - condor_status -lvm reports current disk usage by slots on the EPs
  - Fix bug where condor_q would truncate job counts to six digits
  - Fix bug where suspended jobs did not change state to idle when vacated


author: Tim Theisen <tim@cs.wisc.edu> - 23.10.28-1
changelog:
  - Exit -code and -signal environment variables are now set for Docker jobs
  - Fix issue where ImageSize was over-reported on the Windows platform
  - HTCondor tarballs now contain Pelican 7.18.1 and Apptainer 1.4.2


author: Tim Theisen <tim@cs.wisc.edu> - 24.11.2-1
changelog:
  - Add job attributes to track why and how often a job is vacated
  - Add the ability to notify a user when their job first starts
  - Can now specify which Vault servers are trusted
  - Added htcondor2.ping() to the Python bindings


author: Tim Theisen <tim@cs.wisc.edu> - 23.10.29-1
changelog:
  - Fix flocking to pools when there are intermittent network issues
  - HTCondor tarballs now contain Pelican 7.19.3


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.12-1
changelog:
  - Update condor_upgrade_check to warn about v1 Python bindings retirement
  - Update condor_upgrade_check to look for old syntax job transforms
  - All changes in 23.10.29


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.4-1
changelog:
  - Add the ability to enforce memory and CPU limits on local universe jobs
  - Add the ability for condor_chirp to work within a Docker universe job
  - condor_watch_q now exits with any keyboard input
  - The shell submit keyword now works with interactive jobs
  - All changes in 24.0.12


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.13-1
changelog:
  - Fix bug that could cause Python job submission to crash
  - HTCondor tarballs now contain Pelican 7.20.2


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.14-1
changelog:
  - Fix problem running PyTorch jobs on multiple GPUs with
    newer versions of the CUDA library by providing long GPU IDs
    in the CUDA_VISIBLE_DEVICES environment variable


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.14-1
changelog:
  - Fix interoperability problem between HTCondor-CE 24 and 25 which
    manifests as a Job Router crash when upgrading the CE to HTCondor 25
  - Fix several issues when submitting jobs with itemdata in
    the htcondor2 Python bindings
  - Fix bug when using max_idle and transfer_input_files that could result
    in the container_image to be only transferred with the first job


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.15-1
changelog:
  - Fix bug where AP would fail to read job credential files
  - Fix bugs that could causes a crash in the authentication code
  - HTCondor tarballs now contain Pelican 7.21.1 and Apptainer 1.4.4


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.16-1
changelog:
  - Fix floating point memory or disk request not fitting into some slots
  - Fix condor_rooster crash when unhibernate rank was not constant
  - Fix memory leak in the htcondor2.JobEventLog.events() Python method
  - condor_history -long now prints attributes in alphabetical order
  - Fix LVM setup to not timeout when creating a large volume
  - LVM creation no longer saves meta data which eventually fills the disk
  - HTCondor tarballs now contain Pelican 7.22.0 and Apptainer 1.4.5


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.16-1
changelog:
  - Fix problem specifying scope or audience with a Vault-managed credential
  - Fix late materialization bug when job transform sets immutable attribute
  - Fix problem where a backfill slot would refuse claims


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.17-1
changelog:
  - Fix the broken htcondor2.Schedd.refreshGPIProxy() Python method
  - Improve condor_history performance on filesystems with I/O rate limits


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.18-1
changelog:
  - Enable use of in-memory SciTokens cache, if disk cache not usable
  - Fix condor_submit using different executables with late materialization
  - HTCondor tarballs now contain Pelican 7.23.0


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.18-1
changelog:
  - Improve AMD GPU detection when using RCOM6/HIP libraries
  - Fix for new jobs getting kicked off LVM EP due to quantization mismatch
  - condor_submit now reports an error for circular requirement expressions
  - condor_status now correctly reports offline GPUs
  - Can use use a string for 'since' with htcondor.Schedd.history()
  - Fix for backfill GPUs disappearing on reconfig


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.18-1
changelog:
  - Improve AMD GPU detection when using RCOM6/HIP libraries
  - Fix for new jobs getting kicked off LVM EP due to quantization mismatch
  - condor_submit now reports an error for circular requirement expressions
  - condor_status now correctly reports offline GPUs
  - Can use a string for 'since' with htcondor.Schedd.history()
  - Fix for backfill GPUs disappearing on reconfig


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.19-1
changelog:
  - Now properly reports NVIDIA MIG GPU device names
  - Fix performance problem in the htcondor2 Python ClassAd parser
  - Fix AllowedExecuteDuration to be reliably enforced when no file transfer
  - Batch grid universe jobs now tolerate a dot in the username
  - Fix huge reported job execution times when an AP restarts


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.20-1
changelog:
  - Fix reporting of RemoteUserCPU in parallel universe
  - condor_ssh_to_job can now execute one-shot commands when using containers
  - condor_ssh_to_job now enters the proper cgroup when using containers
  - HTCondor tarballs now contain Pelican 7.24.2


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.21-1
changelog:
  - Fix rare issue where condor_dagman would abort after a system reboot
  - HTCondor tarballs now contain Apptainer 1.5.0 and Pelican 7.25.0


author: Dave Dykstra <dwd@cern.ch> - 2.12.7-2
changelog:
  - Apply pretrans transaction check to all subpackages that need to
    have their version stay in sync


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-3.2
changelog:
  - Fix building of RPM to properly choose Python36 or Python39.
       Also, restrict building to x86_64 architecture.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.10-1.1
changelog:
  - Update to squid-5.10, with release notes at
      https://github.com/squid-cache/squid/commits/v5.
      The security patches included in frontier-squid-5.9-2 have been incorporated
      into the baseline Squid code in this release.
      It also contains fixes for minor bugs and these security issues:
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25617
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23638
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37894
      https://megamansec.github.io/Squid-Security-Audit/esi-underflow.html
      https://megamansec.github.io/Squid-Security-Audit/ftp-fatal.html
      https://megamansec.github.io/Squid-Security-Audit/ipv6-assert.html
      https://megamansec.github.io/Squid-Security-Audit/stream-assert.html
   - For SELinux, provide proper labeling for /usr/libexec/squid/frontier-squid
      script to prevent log rotation failures.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 6.13-1.3
changelog:
  - Upgrade to 6.13-1 tarball with announcement at
     https://lists.squid-cache.org/pipermail/squid-announce/2025-February/000167.html
     and release notes at https://github.com/squid-cache/squid/releases/tag/SQUID_6_13
     squid-6 has a number of new features and changes, such as
      - TLS ServerHello
      - Log TLS Communication Secrets
      - Ban ACL key Changes in ACLs
      - Block to-local Traffic
      - RFC 9211: HTTP Cache-Status support
      - RFC 9111: Stop treating Warning specially
      - ext_kerberos_ldap_group_acl: Support -b with -D
      - Remove Gopher Protocol Support
      - Remove Outdated Tools
   - Set "memory_cache_shared on" as work-around for Squid bug 5332:
      https://bugs.squid-cache.org/show_bug.cgi?id=5332
   - Require Rock cache when workers > 1.  NOTE: This is a breaking change for
      installations with multiple workers, but necessary because of the work-around
      for bug 5332.
   - Set "request_header_access If-Modified-Since deny all" when Rock cache is used to
      avoid Squid bug 4890: https://bugs.squid-cache.org/show_bug.cgi?id=4890
   - Add patch to fix reporting of number of cache objects.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 6.14-1.1
changelog:
  - Upgrade to 6.14-1 tarball with the following release notes:
     https://github.com/squid-cache/squid/releases/tag/SQUID_6_14
   - Add an "ignore_vary" option to prevent Vary headers (like those from
      Cloudflare) from interfering with caching in Rock cache, and enable
      that option by default.
   - Add a default value of "shared_transient_entries_limit 1048576" to
      reduce the chances of clashing hashes of queries while using
      multiple workers.  A clashing hash causes a query to not be cached.
      This increased value could use up to 128MB of shared memory.
   - Restored text of error messages that appear in rare cases and that were
      missing from the previous release.
   - Improved checks for cache memory configuration to allow multiple services to
      have their own cache memory values and to prevent reduction in configured
      cache memory during re-starts. Also, increased safety buffer of shared memory from
      10% to 20%.
   - Addressed security vulnerability SQUID-2025:2 Information Disclosure in Error handling:
      https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr
   - Removed obsolete in2p3, gridpp, and triumf from "acl ATLAS_FRONTIER".
   - Add a patch from v7 to avoid a "slot->sameKey()" assertion error in
      rock/RockSwapDir.cc that has been seen with multiple workers and
      causes one worker to restart and prevent a query from being cached
      until a full restart.
   - Remove cachenumfix.patch because it is now part of Squid 6.14.
  - Add support for EL10.
  - Disable admin emails from shoal-agent.
  - Changed pip3 install of obsolete Python module "netifaces" to new "netifaces-plus" to
     enable shoal-agent to run on EL10.
  - Fixed setting permissions of shoal-download directories to prevent "Permission denied"
     errors.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 6.14-1.2
changelog:
  - During build of source RPM, download additional Python modules "cffi" and
     "typing_extensions" to support building EL9 and EL10 from source RPM on OSG
     build machines where downloading is disabled.
  - Correct location of "shoal_email.patch".


author: Marco Mambelli <marcom@fnal.gov> - 3.10.13
changelog:
  - Glideinwms v3.10.13
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_13/history.html
  - Release candidates 3.10.13-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.14
changelog:
  - Glideinwms v3.10.14
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_14/history.html
  - Release candidates 3.10.14-01.rc1 to 3.10.14-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.15
changelog:
  - Glideinwms v3.10.15
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_15/history.html
  - Release candidates 3.10.15-01.rc1 to 3.10.15-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.11.1
changelog:
  - Glideinwms v3.11.1
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_11_1/history.html
  - Release candidates 3.11.1-01.rc1 to 3.11.1-06.rc6


author: Marco Mambelli <marcom@fnal.gov> - 3.10.16
changelog:
  - Glideinwms v3.10.16
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_16/history.html
  - Release candidates 3.10.16-01.rc1 to 3.10.16-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.11.2
changelog:
  - Glideinwms v3.11.2
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_11_2/history.html
  - Release candidates 3.11.2-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.17
changelog:
  - Glideinwms v3.10.17
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_17/history.html
  - Release candidates 3.10.17-01.rc1 to 3.10.17-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.11.3
changelog:
  - Glideinwms v3.11.3
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_11_3/history.html
  - Release candidates 3.11.3-01.rc1 to 3.11.3-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.10.18
changelog:
  - Glideinwms v3.10.18
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_18/history.html
  - Release candidates 3.10.18-01.rc1 to 3.10.18-04.rc4


author: Marco Mambelli <marcom@fnal.gov> - 3.11.4
changelog:
  - Glideinwms v3.11.4
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_11_4/history.html
  - Release candidates 3.11.4-01.rc1 to 3.11.4-03.rc3


author: Tim Theisen <tim@cs.wisc.edu> - 23.9.1-1
changelog:
  - Use new Job Router syntax by default
  - Update configuration files to work with HTCondor 23.9.1 and later
  - Use BatchQueue job attribute in CE routes


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.18-1
changelog:
  - Does not pass WholeNode request expressions to non-HTCondor batch systems
  - Fix certificate subject parsing in condor_ce_host_network_check


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.0.1-1
changelog:
  - Update to version 5.0.1
  - Drop patch oidc-agent-webkit.patch (previously backported
  - Drop patch oidc-agent.patch (accepted upstram)


author: Brian Lin <blin@cs.wisc.edu> - 0.8.1-1
changelog:
  - Add the --pw-store option to the invocation of oidc-add and add a default
    scope of blank if no scopes are configured.  These are needed for the
    CILogon issuer (SOFTWARE-4983).


author: Carl Edquist <edquist@cs.wisc.edu> - 0.8.2-1
changelog:
  - Increase renewal frequency to ensure continual validity (SOFTWARE-5137)
  - Fix password file handling for restricted permissions in setup script (#17)
  - Use newer --pw-file option for oidc-add (SOFTWARE-5050)
  - Bump version requirement for oidc-agent package (SOFTWARE-5050)


author: Dave Dykstra - 0.9.0-1
changelog:
  - Require oidc-agent-cli-5.1.0, and use a new oidc-add --skip-check option
    there to avoid trying to get an access token at load time.  This avoids
    a 'No scopes found' error when the token issuer returns different scopes
    than requested (e.g. wlcg.capabilityset which returns a set of scopes).


