* origin/pr/210:
Allow carriage return in secure clipboard

* origin/pr/209:
Allow Qubes group to use all realtime priorities

Fixes copy & paste of data containing it, such as from Windows.

Fixes: QubesOS/qubes-issues#8937

This makes low-latency audio easier without having to use rtkit.

No functional change intended.

Disable pipewire pre/post scripts too if pipewire is disabled.

GCC 14 complains:

qubes-gui-runuser.c: In function ...pam_conv_callback...:
qubes-gui-runuser.c...

* origin/pr/205: (24 commits)
Fix audio quality problems
Pass streams to stream callbacks
...

This avoids a bunch of repeated functions that merely extract the
correct stream from the impl s...

This fixes audio quality in a Jitsi meeting using Firefox. It uses a
delay-locked loop (DLL) to...

This avoids crashing, leaking memory, or other problems, even if the
peer detaches unexpectedly ...

pw_context_get_support() is guaranteed to return a non-NULL pointer that
can be used with spa_su...

Ubuntu Jammy (the oldest that needs to be supported) has 0.3.48.

The PipeWire agent is more code than the PulseAudio agent, and it is not
experimental.

It's strictly better to record some samples than all zeros.

This allows running any PipeWire stream out-of-process.

No other functional change intended.

This should not make a difference, modulo bugs...

This is needed to avoid running out of capture buffers.

No functional change intended.

This will cause pacat-simple-vchan to print a "Stream uncork" message to
the terminal, which can...

It was always "Unknown error -1" due to misplaced parentheses.

libvchan_write() should never be used to write to the control vchan, as
partial records are not ...

Also add explicit checks for two more known but unimplemented cases.

Replace it with a very clearly named inline function.

No functional change yet.

Only trace logs are allowed to be used in the realtime thread.
Logging is not realtime-safe and ...

buf->datas[0].maxsize is an absolute limit and must not be multiplied by
impl->frame_size. This...

* origin/pr/206:
Add pulseaudio-17.0 headers

It clearly works with pipewire>=1.0.0, and since it's 1.0, it should
provide stable API now (or ...

It clearly works with pipewire>=1.0.0, and since it's 1.0, it should
provide stable API now (or ...

GUI agent and audio agent(s) can have a hardware-related aspects, so add
support for running hw ...

This will help avoid data races in the future. No functional change
intended.

Without that flag accessing the buffer memory is undefined behavior,
though it happens to work i...

* origin/pr/202:
rpm: use fillup tool to manage /etc/sysconfig/desktop on openSUSE
rpm: put ...

* origin/pr/201:
Add dedicated PAM file for Gentoo

openSUSE forbids shipping /etc/sysconfig files directly.

QubesOS/qubes-issues##6567

QubesOS/qubes-issues#6567

rpm-build finds the right package itself

QubesOS/qubes-issues#6567

Leave /etc for the user.
Found by rpmlint on openSUSE

QubesOS/qubes-issues#6567

QubesOS/qubes-issues#6567

pam_limits and xinit are configured on openSUSE to use /usr/etc for
package-owner configs instea...

-D_FORTIFY_SOURCE is already defined by (all) distribution cflags, do
not duplicate it as it res...

QubesOS/qubes-issues#6567

It's optional

QubesOS/qubes-issues#6567

Allow more than one buffer (to allow application / daemon preparing next
buffer when previous on...

This turns out to totally break Firefox's WebRTC implementation. The
clock rate and maximum qua...

* origin/pr/194: (23 commits)
comment explaining why capslock is excluded from key sending
r...

* origin/pr/193:
Set XDG_CURRENT_DESKTOP
Protect against more unlikely errors
Set XDG_SESS...

* origin/pr/195:
Add pulseaudio-16.99.1 headers

* origin/pr/196:
Update for Fedora 39

This will be necessary for the Wayland agent, which doesn't use a
wrapper shell script and inste...

Exit if out of memory here

This is better than wrongly not rebuilding it.

It's undefined behavior in C.

Not only is select(2) slow, the FD_SET macro has undefined behavior for
file descriptors above F...

Nobody should be using them nowadays.

Disposable VMs are not implemented by snapshotting the in-memory state
of a VM any more.

-Wmissing-prototypes is very useful. This adds the changes needed to
silence it.

There were several patterns missing from them.