librepo-1.12.1-bp152.2.6.1

- Upgrade to 1.12.1
  + Validate path read from repomd.xml (rh#1868639, CVE-2020-14352)
- Changes from 1.12.0
  + Prefer mirrorlist/metalink over baseurl (rh#1775184)
  + Decode package URL when using for local filename (rh#1817130)
  + Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  + Download sources work when at least one of specified is working (rh#1775184)
- Dropped validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352) since it is upstream with version 1.12.1

- Add validate_path.patch to prevent directory traversal attacks
  (boo#1175475, CVE-2020-14352)

- Upgrade to 1.11.2
  + Fix calling Python API without holding GIL (rh#1788918)
  + Do not unref LrErr_Exception on exit (rh#1778854)
  + Cleanup zchunk-related error messages (rh#1790625)
- Fix typo in changes entry about version update to 1.11.1

- Upgrade to 1.11.1
  + Create a directory for gpg sockets in /run/user/ (rh#1769831, rh#1771012)
- Fix bcond declaration for zchunk so defaults are always declared

- Upgrade to 1.11.0
  + Define LRO_SUPPORTS_CACHEDIR only with zchunk (rh#1726141)
  + Allow to use mirrors multiple times for a target (rh#1678588)
  + Allow to try baseurl multiple times (rh#1678588)
  + Remove librepo xattr when no file descriptor (rh#1690894)
  + Fix verification of checksum from file attr (rh#1700341)
  + Rephrase repository GPG check error message (rh#1741442)
  + Add sleep when all mirrors were tried (rh#1741931)
  + Raise logging level of error messages (rh#1737709)
  + retry mirrorlist/metalink downloads
  + Fix lr_url_substitute() and add ${variable} support
  + Add support for one-time URL flags
  + Fix API - LrHandleOption enum - LRO_ONETIMEFLAG (rh#1761779)

- Upgrade to 1.10.3
  + Exit gpg-agent after repokey import (rh#1650266)
  + Make sure to check next transfer if current zck transfer already exists (rh#1706627)

- Upgrade to 1.10.2
  + Fix librepo isn't able to load zchunk files from next server on failure (rh#1706321)

- Upgrade to 1.10.1
  + Clean up target->curl_handle rather than target->handle (rh#1694411)
  + Add an option to preserve timestamps of the downloaded files (rh#1688537)
  + Fix fetching repositories supplied by SUSE Customer Center
  + [tests] Wait for server to start instead of doing arbitrary sleep
- Drop patch included in this release
  * Patch: librepo-PR148-clean-up-curl-target_handle.patch
- Disable executing test suite on ARM and RISC-V due to performance issues with builders