* Tue Nov 14 2023 Zdenek Pytela <zpytela@redhat.com> - 40.5-1
    - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
    - Allow graphical applications work in Wayland
    - Allow kdump work with PrivateTmp
    - Allow dovecot-auth work with PrivateTmp
    - Allow nfsd get attributes of all filesystems
    - Allow unconfined_domain_type use io_uring cmd on domain
    - ci: Only run Rawhide revdeps tests on the rawhide branch
    - Label /var/run/auditd.state as auditd_var_run_t
    - Allow fido-device-onboard (FDO) read the crack database
    - Allow ip an explicit domain transition to other domains
    - Label /usr/libexec/selinux/selinux-autorelabel with semanage_exec_t
    - Allow  winbind_rpcd_t processes access when samba_export_all_* is on
    - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection
    - Allow ntp to bind and connect to ntske port.
    - Allow system_mail_t manage exim spool files and dirs
    - Dontaudit keepalived setattr on keepalived_unconfined_script_exec_t
    - Label /run/pcsd.socket with cluster_var_run_t
    - ci: Run cockpit tests in PRs