syncthing-1.23.5-bp155.2.3.1

- Update to 1.13.5
  * This release fixes CVE-2022-46165 “Cross-site Scripting (XSS) in Web GUI”
  * Bugfixes:
    [#8503]: "syncthing cli config devices add" reflect error when using --addresses flag
    [#8764]: Ignore patterns creating during folder addition are not loaded
    [#8778]: Tests fail on Windows with Go 1.20
    [#8779]: Test cleanup fails all model tests on Windows on Go 1.20
    [#8859]: Incorrect handling of path for auto accepted folder
  * Other issues:
    [#8799]: "fatal error: checkptr: converted pointer straddles multiple allocations" in crypto tests

- Update to 1.23.4
  - Bugfixes:
    [#8851]: "Running global migration to fix encryption file sizes" on every start

- Update to 1.23.3
  * Bugfixes:
    [#5408]: Selection of time in versions GUI not possible without editing the string inside the textfield
    [#8277]: Mutual encrypted sharing doesn't work (both sides with password)
    [#8556]: Increased file size when sharing between encrypted devices
    [#8599]: Key generation at connect time is slow for encrypted connections
  * Enhancements:
    [#7859]: Allow sub-second watcher delay (use case: remote development)
  * Other issues:
    [#8828]: cmd/stdiscosrv: TestDatabaseGetSet flake

- Adding a desktop file for the Web UI

- Update to 1.23.2
  * Bugfixes:
    [#8749]: Relay listener does not restart sometimes
  * Enhancements:
    [#8660]: GUI editor for xattr filter patterns
    [#8781]: gui: Remove duplicate Spanish translation
  * Other issues:
    [#8768]: Update quic-go for Go 1.20

- Update to 1.23.1
  * Bugfixes:
    [#8325]: "accept: function not implemented" after upgrading to syncthing v1.20.1

- Update to 1.23.0
  * Bugfixes:
    [#8572]: Incorrect rescan interval on auto accepted encrypted folder
    [#8646]: Perhaps the list of devices contains empty elements
    [#8686]: Properly indicate whether a connection is "LAN" or not in the GUI

- Update to 1.22.2
  * Bugfixes:
    [#3744]: Folders with custom icons not deletable on Windows
    [#8570]: Incorrect rescan interval when add encrypted folder with watch for changes enabled
    [#8592]: Newly added "connection type" icon and text in device info is slightly misaligned
    [#8630]: Enabling rate limit drastically reduces network performance
    [#8654]: Conflicts created on Android on files modified by other devices
    [#8657]: Xattrs not properly applied to directories, causes rescan/resync loop
    [#8661]: webgui complains about not set password in ldap mode
    [#8682]: syncthing generate command writes the deviceId to stderr instead of stdout as INFO
  * Enhancements:
    [#2771]: Add mailto link to "Show ID" dialog, for sending device ID via email
    [#7703]: Show if devices have not connected in a long time
    [#8638]: Use healtcheck endpoint for docker
    [#8686]: LAN detection via subnetmask
  * Other issues:
    [#8601]: Build fails due to setting xattrs that affect SELinux, "permission denied"
    [#8679]: Bump quic-go

- Update to 1.22.1
  * Bugfixes:
    [#8084]: Scope ID should be filtered out of IPv6 addresses when using Remote GUI
    [#8569]: Periodic connection losses to webui because docker image doesn't support upgrade
    [#8594]: Extended attributes are only synced one way
  * Enhancements:
    [#3987]: Private relay server with authentication
    [#8244]: Show connection type in Remote Devices
    [#8430]: Add HTTP health check without using API Token

- Update to 1.22.0
  * Bugfixes:
    [#3868]: gui: Auto select of device ID is broken on Internet Explorer
    [#7068]: "Restore Versions" GUI breaks when path exists as both directory and file
    [#7965]: Trash Can File Versioning always throws errors on restore (even when succeeded)
    [#7988]: Unexpected cleanup behavior for Simple File Versioning
    [#8529]: WebGUI is displayed incorrectly on "tablet sized" screens
  * Enhancements:
    [#2698]: Sync extended file attributes on supported file systems
    [#7603]: WebUI tooltip inconsistencies
    [#8506]: macOS Monterey 12.5.1 aliases break after sync

- Update to 1.21.0
  * Bugfixes:
    [#8219]: REST API: db/completion no output when one folder is paused
    [#8479]: Panic in failure reporting
  * Enhancements:
    [#1329]: Add support for syncing ownership of files
    [#7981]: Show likely status of disconnected devices
    [#8296]: Auto-accepted receive-encrypted folders should have more sensible defaults
    [#8323]: Show internally used paths in the GUI for debugging
    [#8448]: Remove "restart on wakeup" functionality

- Update to 1.20.4
  * Bugfixes:
    [#7458]: Syncthing announces address of interface which is down
    [#8479]: Panic in failure reporting
  * Enhancements:
    [#8007]: Support listing the discovered devices using the cli

- Update to 1.20.3
  * Bugfixes:
    [#8369]: Shared device names are missing from "Edit Folder -> Sharing"
    [#8376]: Chrome Autofill Breaks Authentication
    [#8386]: Ignore patterns with wildcard and non-ASCII characters don't work as expected
  * Enhancements:
    [#8393]: Warn if two devices are introducers to each other

- Update to 1.20.2
  * Bugfixes:
    [#7289]: TCP port 0 is announced in the LAN beacon
    [#8314]: https://relays.syncthing.net/endpoint contains non-valid URLs with spaces
    [#8355]: Upgrading from v1.19.2 to v1.20.x now requires chmod for syncing files
  * Enhancements:
    [#8264]: Include default ignore patterns in the GUI's advanced configuration editor
    [#8310]: Indicate folders / devices where the remote end is paused.

- Update to 1.20.1
  * Bugfixes:
    [#8320]: Spurious failure of new connections ("unknown (newer?) version of the protocol" etc)

- Update to 1.20.0
  * Bugfixes:
    [#7855]: Watching for changes using too many system resources on BSDs (kqueue)
    [#8020]: Dangling symlink prevents filesystem watcher on Solaris
    [#8232]: Missing include file endlessly spams log
    [#8258]: The latest version does not support go1.18 compilation!!
    [#8261]: TypeError: Cannot read properties of null (reading 'status') in the GUI after killing Syncthing
  * Enhancements:
    [#8202]: Indicate folders / devices where the remote end has not accepted sharing.
    [#8282]: Change default log format to include date
  * Other issues:
    [#8279]: Simplify tests using T.TempDir

- Update to 1.19.2
  * Enhancements:
    [#8180]: Make error message upon reaching the free space quota more clear

- Update to 1.19.1
  * Bugfixes (1.19.1):
    [#7850]: junctionsAsDirs requires folder pause and resume to trigger
    [#7924]: notify: File mode change events not emitted on MacOS/FSEvents watcher
    [#8083]: Device ID should be read-only and "nearby devices" should be hidden when adding a new pending device
    [#8143]: Behavior of discovery server doesn't match documentation
    [#8145]: Folder ID not editable in add folder dialog
  * Enhancements (1.19.1):
    [#7942]: Improve error message about folder marker outside of folder
    [#8130]: CLI: add command to print pending folders offered by specific device
  * Bugfixes (1.19.0):
    [#8103]: API: /rest/system/connections has misleading "total" entries
  * Enhancements (1.19.0):
    [#7428]: Add ignore patterns to folder defaults
    [#8090]: Allow specifying ports in --generate

- Update to 1.18.6
  * Enhancements:
    [#8050]: Display a warning when the ignore delete option is enabled
    [#8068]: Request: show pending devices/folders in CLI

- Update to 1.18.5
  * Bugfixes:
    [#7715]: Deleted encrypted files don't show up as locally changed in web UI
  * Enhancements:
    [#7115]: Use CRLF instead of LF in config.xml and .stignore on Windows
    [#8014]: Send TLS SNI to relay server
    [#8021]: Provide a way to preset GUI credentials with password hashing

- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_strelaysrv.service.patch
  * harden_syncthing-resume.service.patch
  * harden_syncthing@.service.patch

- Update to 1.18.4
  * Bugfixes:
    [#7991]: Encryption trailer not updated on shortcut
    [#7994]: Index "out of sync with reality" on receive-encrypted folder
    [#8000]: stdiscosrv + strelaysrv systemd services not restarting on upgrade
    [#8012]: Not retrying to sync when a new connection is established
  * Enhancements:
    [#4293]: make "Reduced by ignore patterns" label act like "editIgnoresButton"

- Update to 1.18.3
  * Bugfixes:
    [#7853]: gui: Superfluous quotes
    [#7935]: Panic after POST /rest/system/reset
  * Enhancements:
    [#7940]: "Currently Shared With Devices" list in the folder Sharing tab should be sorted alphabetically

- Use /var/lib/syncthing-relaysrv in strelaysrv.service (boo#1190877).

- Update to 1.18.2
  * Bugfixes:
    [#7827]: The error message "given name ... differs from filesystem name ..." does not help users to resolve the issue
    [#7893]: Updating ignores blocks GUI when IO slots are unavailable

- Update to 1.18.1
  * Bugfixes:
    [#7704]: Changing folder type from receive encrypted to a different type corrupts the database
    [#7706]: Delete Unexpected Items in receive encrypted folder is unable to delete ".stfolder.removed-*"
    [#7740]: Incorrect local state when using negated patterns inside ignored parent folder on both sides
    [#7809]: Syncthing attemps IPv4 addresses for quic6:// peers
    [#7839]: Not exposed string for translation
    [#7845]: Strings unavailable for translation

- Update to 1.18.0
  * Bugfixes:
    [#7708]: irreversible Local Additions after re-adding the same folder as Receive Only
    [#7731]: Scan due to watcher can not found local change while modify file to empty
    [#7733]: TypeError: Cannot read property ?urAccepted? of undefined
    [#7741]: Out-of-sync state of zero-byte files is not reflected on peers
  * Enhancements:
    [#7700]: Add rest endpoint(s) to dismiss pending folder/device invitations
    [#7705]: Accepting a receive encrypted folder share should prompt the user to input a password
    [#7722]: Database GC can block for a long time
    [#7724]: Ensure encryption to untrusted on new, trusted device on an existing folder
    [#7742]: Use defaults for missing fields on the config rest API
    [#7743]: Show discovery and listener status when not failed

- Update to 1.17.0
  * This release deprecates TLS 1.2 for sync connections; other side should
    be Syncthing 1.3.0 or newer, or see
    insecureAllowOldTLSVersions.
  * Bugfixes:
    [#7592]: Web UI doesn't handle long machine names well
    [#7593]: ChaCha priority detection logic broken
    [#7608]: Files ignored on one remote do not get synced
    [#7649]: Incorrect local and global states after ignoring and unignoring files
    [#7673]: bug: cli subcommand is stuck on non-interactive shell
    [#7677]: UTF-8 normalization doesn't work on macOS
    [#7685]: CLI: strconv.ParseInt error when adding new device via CLI
    [#7699]: Sharing receive encrypted folder as receive encrypted with yet another device creates conflicts
  * Enhancements:
    [#7471]: Improve UDP hole punching
    [#7580]: Improve logging for service failures
    [#7594]: Consider removing support for TLS <1.3 on sync connections
    [#7600]: Fast connect to new devices following config update
    [#7636]: Improve QUIC performance

- Fix User, Group, EnvironmentFile and ReadWritePaths in systemd.service unit

- update to 1.16.1:
  * fixes for other distributions only

- Update to 1.16.0
  * This release adds untrusted / encrypted devices for public testing. It
    should still be considered beta / testing-only.
  * Bugfixes:
    [#7026]: panic: key not found when repairing DB
    [#7379]: "Warning, this path is a subdirectory of an existing folder" does not appear when editing only folder label
    [#7533]: Remote completion on untrusted devices is incorrect
    [#7548]: Upgrading syncthing-relaysrv to 1.15.0 fails in post-installation
    [#7551]: QUIC: failed to determine receive buffer size: doesn't have a SyscallConn
    [#7557]: Encrypted folder(s) on Windows reported as "Unexpected Objects"
    [#7568]: panic: runtime error: slice bounds out of range [24:3]
    [#7584]: Folder label missing from folder path when adding new folders
  * Enhancements:
    [#109]: Support for file encryption (e.g. non-trusted servers)
    [#3322]: GUI "Out of sync" modal uses massive amounts of CPU in browser
    [#7520]: Ask for confirmation before reverting/overriding a folder

- Update to 1.15.0/1.15.1
  * This release fixes a vulnerability where Syncthing and the relay server
    can crash due to malformed relay protocol messages (CVE-2021-21404); see
    GHSA-x462-89pf-6r5h. (boo#1184428)
  * This release updates the CLI to use subcommands and adds the subcommands
    cli (previously standalone stcli utility) and decrypt (for offline
    verifying and decrypting encrypted folders).
  * With this release we invite everyone to test the "untrusted (encrypted)
    devices" feature. You should not use it yet on important production
    data. Thus UI controls are hidden behind a feature flag. For more
    information, visit:
    https://forum.syncthing.net/t/testing-untrusted-encrypted-devices/16470

- Update to 1.14.0
  * This release adds configurable device and folder defaults.
  * The output format of the /rest/db/browse endpoint has changed.

- update to 1.13.1:
  * This release adds configuration options for min/max connections (see
    https://docs.syncthing.net/advanced/option-connection-limits.html) and
    moves the storage of pending devices/folders from the config to the
    database (see https://docs.syncthing.net/dev/rest.html#cluster-endpoints).
  * Bugfixes
  * Official builds of v1.13.0 come with the Tech Ui, which is impossible to
    switch back from

- update to 1.12.1:
  * Invalid names are allowed and "auto accepted" in folder root path on Windows
  * Sometimes indexes for some folders aren't sent after starting Syncthing
  * [Untrusted] Remove Unexpected Items leaves things behind
  * Wrong theme on selection
  * Quic spamming address resolving
  * Deleted locally changed items still shown as locally changed
  * Allow specifying remote expected web UI port which would generate a href somewhere
  * Ignore fsync errors when saving ignore files

- Update to 1.12.0
  - The 1.12.0 release
  - adds a new config REST API.
  - The 1.11.0 release
  - adds the sendFullIndexOnUpgrade option to control whether
    all index data is resent when an upgrade is detected, equivalent
    to starting Syncthing with --reset-deltas. This
    (sendFullIndexOnUpgrade=true) used to be the behavior in previous
    versions, but is mainly useful as a troubleshooting step and
    causes high database churn. The new default is false.

- Update to 1.10.0
  - This release adds the config option announceLANAddresses to enable
    (the default) or disable announcing private (RFC1918) LAN IP addresses
    to global discovery.

- Update to 1.9.0
  - This release adds the advanced folder option caseSensitiveFS
    (https://docs.syncthing.net/advanced/folder-caseSensitiveFS.html) to
    disable the new safe handling of case insensitive filesystems.

- Fix Leap build by requiring at least Go 1.14

- Prevent the build system to download Go modules which would require an
  internet connection during the build
- Update to 1.8.0
  - The 1.8.0 release
  - adds the experimental copyRangeMethod config on folders, for use on
    filesystems with copy-on-write support. Please see
    https://docs.syncthing.net/advanced/folder-copyrangemethod.html for
    details.
  - adds TCP hole punching, used to establish high performance TCP
    connections in certain NAT scenarios where only relay or QUIC
    connections could be used previously.
  - adds a configuration to file versioning for how often to run cleanup.
    This defaults to once an hour, but is configurable from very
    frequently to never.
  - The 1.7.0 release performs a database migration to optimize for clusters
    with many devices.
  - The 1.6.0 release performs a database schema migration, and adds the
    BlockPullOrder, DisableFsync and MaxConcurrentWrites folder
    options to the configuration schema. The LocalChangeDetected event no
    longer has the action set to added for new files, instead showing modified
    for all local file changes.
  - The 1.5.0 release changes the default location for the index database under
    some circumstances. Two new flags can also be used to affect the
    location of the configuration (-config) and database (-data)
    separately. The old -home flag is equivalent to setting both of these
    to the same directory. When no flags are given the following logic is
    used to determine the data location:
    If a database exists in the old default location, that location is
    still used. This means existing installations are not affected by this
    change.
    If $XDG_DATA_HOME is set, use $XDG_DATA_HOME/syncthing.
    If ~/.local/share/syncthing exists, use that location.
    Use the old default location.

- Update to 1.4.2:
  - Bugfixes:
  - #6499: panic: nil pointer dereference in usage reporting
  - Other issues:
  - revert a change to the upgrade code that puts unnecessary
    load on the upgrade server

- Update to 1.4.1:
  - Bugfixes:
  - #6289: "general SOCKS server failure" since syncthing 1.3.3
  - #6365: Connection errors not shown in GUI
  - #6415: Loop in database migration "folder db index missing"
    after upgrade to v1.4.0
  - #6422: "fatal error: runtime: out of memory" during database
    migration on QNAP NAS
- Enhancements:
  - #5380: gui: Display folder/device name in modal
  - #5979: UNIX socket permission bits
  - #6384: Do auto upgrades early and synchronously on startup
- Other issues:
  - #6249: Remove unnecessary RAM/CPU stats from GUI

- Update to 1.4.0:
  - Important changes:
  - New config option maxConcurrentIncomingRequestKiB
  - Replace config option maxConcurrentScans with
    maxFolderConcurrency
  - Improve database schema
  - Bugfixes:
  - #4774: Doesn't react to Ctrl-C when run in a subshell
    with -no-restart (Linux)
  - #5952: panic: Should never get a deleted file as needed when
    we don't have it
  - #6281: Progress emitter uses 100% CPU
  - #6300: lib/ignore: panic: runtime error: index out of range
    [0] with length 0
  - #6304: Syncing issues, database missing sequence entries
  - #6335: Crash or hard shutdown can case database
    inconsistency, out of sync
  - Enhancements:
  - #5786: Consider always running the monitor process
  - #5898: Database performance: reduce duplication
  - #5914: Limit folder concurrency to improve performance
  - #6302: Avoid thundering herd issue by global request limiter

- Change the Go build requirement to a more flexible
  "golang(API) >= 1.12".

- Fix build command / prevent Syncthing to update itself
  Arguments go before commands so both -version and -no-upgrade
  were previously ignored resulting in Syncthing trying to update
  itself without permissions (boo#1095169).

- Drop redundant wording from descriptions.

- Update to version 0.14.46:
  * Replacing a directory with a symlink or vice versa is buggy
    (gh#syncthing/syncthing#2571).
  * Inaccessible files during scan are marked as deleted
    (gh#syncthing/syncthing#4573).
  * Send only directories out of synch due to ignored items
    (gh#syncthing/syncthing#4616).
  * A file deleted from all nodes may exist in the "out of synch"
    list (gh#syncthing/syncthing#4627).
  * Relay server doesn?t make outgoing HTTPS requests from its bind
    address (gh#syncthing/syncthing#4745).
  * The list of out of synch items from remote device is not
    displayed (gh#syncthing/syncthing#4759).
  * Env var for db metadata in help text differs from code
    (gh#syncthing/syncthing#4764).
  * Doesn't connect when multiple remote devices are using the
    same relay (gh#syncthing/syncthing#4778).
  * Scan on absolute path creates incorrect absolute duplicate file
    infos (gh#syncthing/syncthing#4799).
  * Panic in FS watcher in FreeBSD 8.3
    (gh#syncthing/syncthing#4806).

- Update to version 0.14.45:
  * panic: bug: removed more than added
    (gh#syncthing/syncthing#4659).
  * Ignore pattern beginning with "#" does not match subpaths
    (gh#syncthing/syncthing#4680).
  * Ignore patterns in web UI aren't reloaded if only comments
    change (gh#syncthing/syncthing#4689).
  * Global is different from local state when ignoring files
    (gh#syncthing/syncthing#4701).
  * Fix basicfs_watch_tests being flaky
    (gh#syncthing/syncthing#4687).
  * Remove KCP (gh#syncthing/syncthing#4737).

- Update to version 0.14.44:
  * Panic when connecting to device with auto accept and paused
    directories (gh#syncthing/syncthing#4634).
  * List of files needed on remote were not wrapped at word
    boundaries (gh#syncthing/syncthing#4636).
  * It was impossible to run non-release builds without deadlock
    detectors (gh#syncthing/syncthing#4644).
  * Fix UTF-8 normalisation not working correctly on ZFS
    (gh#syncthing/syncthing#4649).
  * Fix upgrade system showing an error on RCs in some cases
    (gh#syncthing/syncthing#4654).
  * Fix sparse files with zero blocks not closing when pulling
    (gh#syncthing/syncthing#4657).
  * Fix remote device out of synch items showing "0 items, ~0 B"
    (gh#syncthing/syncthing#4668).
  * GUI for .stversion restoration (gh#syncthing/syncthing#2599).
  * Log entries showing IP addresses now show the connection type
    (gh#syncthing/syncthing#4499).
  * Set background priority / niceness
    (gh#syncthing/syncthing#4628).
  * Fix arguments to fs.CreateSymlink being mixed up
    (gh#syncthing/syncthing#4567).
  * More scalable global discovery (gh#syncthing/syncthing#4618).
  * lib/model test failed with "ThreadSanitizer failed to allocate
    0x200000 (2097152) bytes" with Go 1.9.2
    (gh#syncthing/syncthing#4653).
  * Fix spurious "é" in GUI (gh#syncthing/syncthing#4663).
  * Should clean out generated testdata in lib/model/testdata
    (gh#syncthing/syncthing#4706).

- Override BUILD_HOST to make build reproducible

- Replace marketing blurb with a software description.

- Update to version 0.14.43:
  * Path completion in the new directory dialogue does not work
    anymore (gh#syncthing/syncthing#4475).
  * Fd leak when temp file cannot be truncated
    (gh#syncthing/syncthing#4593).
  * Panic: runtime error related to KCP
    (gh#syncthing/syncthing#4605).
  * UI for debug levels and log access
    (gh#syncthing/syncthing#2644).
  * GUI should indicate which files are out of synchronisation on
    remote devices (gh#syncthing/syncthing#4369).
  * Keep enough counters and state in the database to avoid initial
    database traversal (gh#syncthing/syncthing#4400).
  * Should understand ?socks? in addition to ?socks5? in proxy URLs
    (gh#syncthing/syncthing#4515).
  * Contribute kcp-go changes/features and/or fix tests
    (gh#syncthing/syncthing#4407).
  * Update vendored github.com/minio/sha256-simd for AVX512 support
    (gh#syncthing/syncthing#4585).
  * Update vendored x/sys/unix for dragonfly
    (gh#syncthing/syncthing#4615).

- Update to version 0.14.42:
  * Discovering new files in a deleted directory does not resurrect
    the directory (gh#syncthing/syncthing#4475).
  * "Panic: interface conversion: *errors.errorString is not
    net.Error" after restart (gh#syncthing/syncthing#4561).
  * Auto-accept shared directories from trusted devices
    (gh#syncthing/syncthing#2299).
  * Empty directories in .stversions should be removed
    (gh#syncthing/syncthing#4406).
  * Human readable errors on attempted deletion of a non-empty
    directory (gh#syncthing/syncthing#4476).
  * Add confirmation on the Remove Folder / Device button
    (gh#syncthing/syncthing#4543).

- Update to version 0.14.41:
  * Devices with ignored files stay "synchronising" forever
    (gh#syncthing/syncthing#623).
  * No Global Discovery without Synch Protocol Listen Address
    (gh#syncthing/syncthing#4418).
  * Local network classification doesn't always work
    (gh#syncthing/syncthing#4421).
  * Hashed GUI password should not be rehashed
    (gh#syncthing/syncthing#4458).
  * Pulls not triggered correctly on reconnection
    (gh#syncthing/syncthing#4504).
  * A symlink/file replacement doesn't work properly
    (gh#syncthing/syncthing#4505).
  * File/directory replacement doesn't work properly
    (gh#syncthing/syncthing#4506).
  * Logging at info level and above should always include context
    (gh#syncthing/syncthing#4510).
  * Panic in "pfilter" package on 32 bit architectures
    (gh#syncthing/syncthing#4537).
  * Allow synchronising read-only directories as
    "Master Directories" (gh#syncthing/syncthing#1126).
  * "Global Changes" button is confusing, retitle to
    "Recent Changes" (gh#syncthing/syncthing#4326).
  * Dial device addresses in parallel
    (gh#syncthing/syncthing#4456).
  * Avoid lots and lots of announced addresses in the presence of
    symmetric NAT (gh#syncthing/syncthing#4519).
  * Split transport usage reporting per stack
    (gh#syncthing/syncthing#4463).

- Update to version 0.14.40:
  - Report more data part of the anonymous usage report
    (gh#syncthing/syncthing#3628)
  - Better report synchronisation errors
    (gh#syncthing/syncthing#4392).
  - Removing paused directories no longer causes a panic
    (gh#syncthing/syncthing#4405).
  - Make local IPv4 discovery more resilient against write failures
    (gh#syncthing/syncthing#4414).
  - Clearer logging around config failures at startup
    (gh#syncthing/syncthing#4431).
  - Do not complain about inability to fsync files
    (gh#syncthing/syncthing#4432).
  - Improve KCP connections (gh#syncthing/syncthing#4446).
  - Improve directory health checking
    (gh#syncthing/syncthing#4451).
  - Include built-in support for file system notifications,
    although it is disabled by default.
  - Enable by default the UDP based "KCP" protocol.

- Update to version 0.14.39:
  * Removing paused directories no longer triggers a crash
    (gh#syncthing/syncthing#4357).
  * Add further security related HTTP headers
    (gh#syncthing/syncthing#4360).
  * Improve info level logging in some cases
    (gh#syncthing/syncthing#4375).
  * Improve GUI tooltips in chromium based browsers
    (gh#syncthing/syncthing#4377).
  * Add -device-id command line switch
    (gh#syncthing/syncthing#4387).
  * Failure to upgrade directory markers from file to directory
    type is no longer fatal.

- Update to version 0.14.38:
  * KCP connections are now more stable
    (gh#syncthing/syncthing#4063, gh#syncthing/syncthing#4343)
  * Hashing benchmarks are skipped if a manual selection has
    been forced (gh#syncthing/syncthing#4348).
  * Relay server RAM usage has been reduced
    (gh#syncthing/syncthing#4245).

- Update to version 0.14.37 (changes since 0.14.32):
  * Relative version paths are now correctly relative to the
    directory path (gh#syncthing/syncthing#4188).
  * Remote devices now show bytes remaining to synchronise
    (gh#syncthing/syncthing#4227).
  * Editing ignore patterns no longer incorrectly shows included
    patterns (gh#syncthing/syncthing#4249).
  * The new directory dialogue now suggests a default path.
    Adjustable via advanced config defaultFolderPath
    (gh#syncthing/syncthing#2157).
  * The build script no longer sets -installsuffix by default
    (gh#syncthing/syncthing#4272).
  * Prevent a vulnerability that allows file overwrite via
    versioned symlinks (boo#1074428, gh#syncthing/syncthing#4286).
  * Symlinks are deleted from versioned directories on startup
    (gh#syncthing/syncthing#4288).
  * Directory paths are no longer reset when editing a directory
    without a label (gh#syncthing/syncthing#4297).
  * Better detect synchronisation conflicts that happen while
    synchronising (gh#syncthing/syncthing#3742,
    gh#syncthing/syncthing#4305).
  * Fix a crash related to a nil reference in ignore handling
    (gh#syncthing/syncthing#4300).
- Stop requiring golang.org/x/net/context.

- Update to version 0.14.32:
  * "Nearby devices" are now shown in the add device dialogue,
    avoiding the need to type their device ID
    (gh#syncthing/syncthing#4157).
  * Directories that were once ignored in a sharing request now
    actually work properly when later added manually
    (gh#syncthing/syncthing#4219).

- Update to version 0.14.31 (changes since 0.14.29):
  * Correctly clear warning "path is a subdirectory of other
    folder" in directory dialogue (gh#syncthing/syncthing#3433).
  * Conflict copies filename now includes the ID of the last device
    to change the file (gh#syncthing/syncthing#3524).
  * Directories offered by other devices can now be ignored
    (gh#syncthing/syncthing#3993).
  * Changed device name takes effect with restart; device name is
    not sent to unknown devices (gh#syncthing/syncthing#4164).
  * Correctly show CPU usage when started with -no-restart option
    (gh#syncthing/syncthing#4183).
  * Icons and directory information in local device summary is
    consistent with that in directories
    (gh#syncthing/syncthing#4100).
  * Fix a data race in KCP & STUN (gh#syncthing/syncthing#4177).
  * Ignore patterns on newly accepted directories are no longer
    erroneously inherited from an earlier added directory
    (gh#syncthing/syncthing#4203).

- Update to version 0.14.29:
  * The layout of the global changes dialogue is improved
    (gh#syncthing/syncthing#3895).
  * Running as root or SYSTEM now triggers a warning recommending
    against it (gh#syncthing/syncthing#4123).
  * Changing the theme no longer causes an HTTP error
    (gh#syncthing/syncthing#4127).

- Update to version 0.14.28:
  * It is now possible to create custom event subscriptions via the
    REST API (gh#syncthing/syncthing#1879).
  * Removing large directories now uses less memory
    (gh#syncthing/syncthing#2250).
  * The minimum disc space (per directory and for the home drive)
    can now be set to an absolute value
    (gh#syncthing/syncthing#3307).
  * Pausing or reconfiguring a directory will no longer start extra
    scans. Pausing a directory stops scanning
    (gh#syncthing/syncthing#3965).
  * Ignore patterns can now be set at directory creation time, and
    for paused directories (gh#syncthing/syncthing#3996).
  * It is no longer possible to configure the GUI/API to listen on
    a privileged port using the standard settings dialogue
    (gh#syncthing/syncthing#4020).
  * The device allowed subnet list can now include negative ("!")
    entries to disallow subnets (gh#syncthing/syncthing#4096).
  * Doing "Override changes" now uses less memory
    (gh#syncthing/syncthing#4112).
- Require golang.org/x/net/context on openSUSE older than
  openSUSE Leap 15.x.

- Update to version 0.14.27:
  * Devices can now have a list of allowed subnets (advanced
    config) (gh#syncthing/syncthing#219).
  * The transfer rate units can now be changed by clicking on the
    value (gh#syncthing/syncthing#234).
  * UI text explaining "Introducer" is improved
    (gh#syncthing/syncthing#1819).
  * Advanced config editor can now edit lists of things
    (gh#syncthing/syncthing#2267).
  * Directories created for new directories now obey the user umask
    setting (gh#syncthing/syncthing#2519).
  * Incoming index updates are consistency checked better
    (gh#syncthing/syncthing#4053).

- Update to version 0.14.26:
  * Discovery errors are more clearly displayed in the GUI
    (gh#syncthing/syncthing#2344).
  * The language dropdown menu in the GUI is now correctly sorted
    (gh#syncthing/syncthing#3913).
  * When there are items that could not be synced, their full path
    is displayed in the GUI.