# changelog

author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.42
changelog:
  - Move glite-build-common-cpp m4 files to vendor area (SOFTWARE-3587)
  - Pull rpm spec file into source repo


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.44
changelog:
  - Add Slurm SystemCpu accounting when job completes (SOFTWARE-3825)
  - Add support for decimal seconds fields from sacct (SOFTWARE-3826)
  - Pull in various updates to slurm scripts from htcondor's blap (SOFTWARE-3587)
  - Move local submit attributes scripts from spec to sources (SOFTWARE-3749)


author: Carl Edquist <edquist@cs.wisc.edu> - 1.18.46
changelog:
  - Fix an issue where the slurm binpath always returned scontrol (SOFTWARE-3986)
  - Python 3 compatibility (#7)
  - Handle extra-quoted arguments to condor_submit.sh (SOFTWARE-3993)
  - Expand env vars in configured slurm_binpath (#10)
  - Fix cluster handling in slurm_status.py (#13)
  - Introduce blah_job_env_confs for dynamic env var expansion (SOFTWARE-2521)
  - Add EXIT trap to remove barrier file (SOFTWARE-3930)
  - Amended file credits for Matt Farrellee (#17)


author: Brian Lin <blin@cs.wisc.edu> - 1.18.48-1
changelog:
  - Add an option for HTCondor batch system to expand references to $HOME in the job environment (#23)
  - Add efficient querying of LSF job statuses (#14)
  - Improve logic when proxy refresh is disabled (#24)
  - Fix invalid argument, output, and error format for HTCondor job submission (#22)


author: Brian Lin <blin@cs.wisc.edu> 2.0.0-1
changelog:
  - Add GPU support (#12)
  - Improve multi-node support for Slurm (HTCONDOR-166)
  - More efficient status queries for Slurm (HTCONDOR-104)
  - More robust job ID extraction from SLurm (HTCONDOR-259)
  - Better interfacing with PBS and Slurm
  - More Python 3 fixes for PBS and Slurm scripts
  - Convert LSF script to Python 3 (HTCONDOR-333, #34)
  - Add Debian build files


author: Tim Theisen <tim@cs.wisc.edu> 2.0.1-1
changelog:
  - Convert to pure Python 3 (no Python 2 compatibility)
  - Restore blah_libexec_directory to the blah.config file


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.11-1
changelog:
  - Can now do an interactive submit of a Singularity job
  - Shared port daemon is more resilient when starved for TCP ports
  - The Windows installer configures the environment for the Python bindings
  - Fixed several other minor problems


author: Tim Theisen <tim@cs.wisc.edu> - 8.7.8-1
changelog:
  - The condor annex can easily use multiple regions simultaneously
  - HTCondor now uses CUDA_VISIBLE_DEVICES to tell which GPU devices to manage
  - HTCondor now reports GPU memory utilization


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.12-1
changelog:
  - Support for Debian 9, Ubuntu 16, and Ubuntu 18
  - Fixed a memory leak that occurred when SSL authentication fails
  - Fixed a bug where invalid transform REQUIREMENTS caused a Job to match
  - Fixed a bug to allow a queue super user to edit protected attributes
  - Fixed a problem setting the job environment in the Singularity container
  - Fixed several other minor problems


author: Tim Theisen <tim@cs.wisc.edu> - 8.7.9-1
changelog:
  - Support for Debian 9, Ubuntu 16, and Ubuntu 18
  - Improved Python bindings to support the full range of submit functionality
  - Allows VMs to shutdown when the job is being gracefully evicted
  - Can now specify a host name alias (CNAME) for NETWORK_HOSTNAME
  - Added the ability to run a job immediately by replacing a running job


author: Tim Theisen <tim@cs.wisc.edu> - 8.6.13-1
changelog:
  - Made the Python 'in' operator case-insensitive for ClassAd attributes
  - Python bindings are now built for the Debian and Ubuntu platforms
  - Fixed a memory leak in the Python bindings
  - Fixed a bug where absolute paths failed for output/error files on Windows
  - Fixed a bug using Condor-C to run Condor-C jobs
  - Fixed a bug where Singularity could not be used if Docker was not present


author: Tim Theisen <tim@cs.wisc.edu> - 8.7.10-1
changelog:
  - Can now interactively submit Docker jobs
  - The administrator can now add arguments to the Singularity command line
  - The MUNGE security method is now supported on all Linux platforms
  - The grid universe can create and manage VM instances in Microsoft Azure
  - Added a single-node package to facilitate using a personal HTCondor


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.0-1
changelog:
  - Automatically add AWS resources to your pool using HTCondor Annex
  - The Python bindings now include submit functionality
  - Added the ability to run a job immediately by replacing a running job
  - A new minicondor package makes single node installations easy
  - HTCondor now tracks and reports GPU utilization
  - Several performance enhancements in the collector
  - The grid universe can create and manage VM instances in Microsoft Azure
  - The MUNGE security method is now supported on all Linux platforms


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.1-1
changelog:
  - Fixed excessive CPU consumption with GPU monitoring
  - GPU monitoring is off by default; enable with "use feature: GPUsMonitor"
  - HTCondor now works with the new CUDA version 10 libraries
  - Fixed a bug where sometimes jobs would not start on a Windows execute node
  - Fixed a bug that could cause DAGman to go into an infinite loop on exit
  - The JobRouter doesn't forward the USER attribute between two UID Domains
  - Made Collector.locateAll() more efficient in the Python bindings
  - Improved efficiency of the negotiation code in the condor_schedd


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.0-1
changelog:
  - Absent any configuration, HTCondor denies authorization to all users
  - All HTCondor daemons under a condor_master share a security session
  - Scheduler Universe jobs are prioritized by job priority


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.2-1
changelog:
  - Fixed problems with condor_ssh_to_job and Singularity jobs
  - Fixed a problem that could cause condor_annex to crash
  - Fixed a problem where the job queue would very rarely be corrupted
  - condor_userprio can report concurrency limits again
  - Fixed the GPU discovery and monitoring code to map GPUs in the same way
  - Made the CHIRP_DELAYED_UPDATE_PREFIX configuration knob work again
  - Fixed restarting HTCondor from the Service Control Manager on Windows
  - Fixed a problem where local universe jobs could not use condor_submit
  - Restored a deprecated Python interface that is used to read the event log
  - Fixed a problem where condor_shadow reuse could confuse DAGMan


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.1-1
changelog:
  - An efficient curl plugin that supports uploads and authentication tokens
  - HTCondor automatically supports GPU jobs in Docker and Singularity
  - File transfer times are now recorded in the user job log and the job ad


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.8-1
changelog:
  - Fixes addressing CVE-2019-18823
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0001.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0002.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0003.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2020-0004.html


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.9-1
changelog:
  - Proper tracking of maximum memory used by Docker universe jobs
  - Fixed preempting a GPU slot for a GPU job when all GPUs are in use
  - Fixed a Python crash when queue_item_data iterator raises an exception
  - Fixed a bug where slot attribute overrides were ignored
  - Calculates accounting group quota correctly when more than 1 CPU requested
  - Updated HTCondor Annex to accommodate API change for AWS Spot Fleet
  - Fixed a problem where HTCondor would not start on AWS Fargate
  - Fixed where the collector could wait forever for a partial message
  - Fixed streaming output to large files (>2Gb) when using the 32-bit shadow


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.7-1
changelog:
  - Multiple enhancements in the file transfer code
  - Support for more regions in s3:// URLs
  - Much more flexible job router language
  - Jobs may now specify cuda_version to match equally-capable GPUs
  - TOKENS are now called IDTOKENS to differentiate from SCITOKENS
  - Added the ability to blacklist TOKENS via an expression
  - Can simultaneously handle Kerberos and OAUTH credentials
  - The getenv submit command now supports a blacklist and whitelist
  - The startd supports a remote history query similar to the schedd
  - condor_q -submitters now works with accounting groups
  - Fixed a bug reading service account credentials for Google Compute Engine


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.10-1
changelog:
  - condor_qedit can no longer be used to disrupt the condor_schedd
  - Fixed a bug where the SHARED_PORT_PORT configuration setting was ignored
  - Ubuntu 20.04 and Amazon Linux 2 are now supported
  - In MacOSX, HTCondor now requires LibreSSL, available since MacOSX 10.13


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.8-1
changelog:
  - Added htcondor.dags and htcondor.htchirp to the HTCondor Python bindings
  - New condor_watch_q tool that efficiently provides live job status updates
  - Added support for marking a GPU offline while other jobs continue
  - The condor_master command does not return until it is fully started
  - Deprecated several Python interfaces in the Python bindings


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.11-1
changelog:
  - HTCondor now properly tracks usage over vanilla universe checkpoints
  - New ClassAd equality and inequality operators in the Python bindings
  - Fixed a bug where removing in-use routes could crash the job router
  - Fixed a bug where condor_chirp would abort after success on Windows
  - Fixed a bug where using MACHINE_RESOURCE_NAMES could crash the startd
  - Improved condor c-gahp to prioritize commands over file transfers
  - Fixed a rare crash in the schedd when running many local universe jobs
  - With GSI, avoid unnecessary reverse DNS lookup when HOST_ALIAS is set
  - Fix a bug that could cause grid universe jobs to fail upon proxy refresh


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.9-1
changelog:
  - The RPM packages requires globus, munge, scitokens, and voms from EPEL
  - Improved cgroup memory policy settings that set both hard and soft limit
  - Cgroup memory usage reporting no longer includes the kernel buffer cache
  - Numerous Python binding improvements, see version history
  - Can create a manifest of files on the execute node at job start and finish
  - Added provisioner nodes to DAGMan, allowing users to provision resources
  - DAGMan can now produce .dot graphs without running the workflow


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.12-1
changelog:
  - Added a family of version comparison functions to ClassAds
  - Increased default Globus proxy key length to meet current NIST guidance


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.10-1
changelog:
  - Fix bug where negotiator stopped making matches when group quotas are used
  - Support OAuth, SciTokens, and Kerberos credentials in local universe jobs
  - The Python schedd.submit method now takes a Submit object
  - DAGMan can now optionally run a script when a job goes on hold
  - DAGMan now provides a method for inline jobs to share submit descriptions
  - Can now add arbitrary tags to condor annex instances
  - Runs the "singularity test" before running the a singularity job


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.11-1
changelog:
  - This release of HTCondor fixes security-related bugs described at
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0001.html
  - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0002.html


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.13-1
changelog:
  - condor_ssh_to_job now maps CR and NL to work with editors like nano
  - Improved the performance of data transfer in condor_ssh_to_job
  - HA replication now accepts SHA-2 checksums to prepare for MD5 removal
  - Submission to NorduGrid ARC CE works with newer ARC CE versions
  - Fixed condor_annex crashes on platforms with newer compilers
  - Fixed "use feature: GPUsMonitor" to locate the monitor binary on Windows
  - Fixed a bug that prevented using the '@' character in an event log path


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.13-1
changelog:
  - Host based security is no longer the default security model
  - Hardware accelerated integrity and AES encryption used by default
  - Normally, AES encryption is used for all communication and file transfers
  - Fallback to Triple-DES or Blowfish when interoperating with older versions
  - Simplified and automated new HTCondor installations
  - HTCondor now detects instances of multi-instance GPUs
  - Fixed memory leaks (collector updates in 8.9 could leak a few MB per day)
  - Many other enhancements and bug fixes, see version history for details


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.3-1
changelog:
  - Fixed a bug where jobs were killed instead of peacefully shutting down
  - Fixed a bug where a restarted schedd wouldn't connect to its running jobs
  - Improved file transfer performance when sending multiple files
  - Fix a bug that prevented interactive submit from working with Singularity
  - Orphaned Docker containers are now cleaned up on execute nodes
  - Restored a deprecated Python interface that is used to read the event log


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.2-1
changelog:
  - The HTTP/HTTPS file transfer plugin will timeout and retry transfers
  - A new multi-file box.com file transfer plugin to download files
  - The manual has been moved to Read the Docs
  - Configuration options for job-log time-stamps (UTC, ISO 8601, sub-second)
  - Several improvements to SSL authentication
  - New TOKEN authentication method enables fine-grained authorization control


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.4-1
changelog:
  - Python 3 bindings - see version history for details (requires EPEL on EL7)
  - Can configure DAGMan to dramatically reduce memory usage on some DAGs
  - Improved scalability when using the python bindings to qedit jobs
  - Fixed infrequent schedd crashes when removing scheduler universe jobs
  - The condor_master creates run and lock directories when systemd doesn't
  - The condor daemon obituary email now contains the last 200 lines of log


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.5-1
changelog:
  - Fixed two performance problems on Windows
  - Fixed Java universe on Debian and Ubuntu systems
  - Added two knobs to improve performance on large scale pools
  - Fixed a bug where requesting zero GPUs would require a machine with GPUs
  - HTCondor can now recognize nVidia Volta and Turing GPUs


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.3-1
changelog:
  - TOKEN and SSL authentication methods are now enabled by default
  - The job and global event logs use ISO 8601 formatted dates by default
  - Added Google Drive multifile transfer plugin
  - Added upload capability to Box multifile transfer plugin
  - Added Python bindings to submit a DAG
  - Python 'JobEventLog' can be pickled to facilitate intermittent readers
  - 2x matchmaking speed for partitionable slots with simple START expressions
  - Improved the performance of the condor_schedd under heavy load
  - Reduced the memory footprint of condor_dagman
  - Initial implementation to record the circumstances of a job's termination


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.6-1
changelog:
  - Initial support for CentOS 8
  - Fixed a memory leak in SSL authentication
  - Fixed a bug where "condor_submit -spool" would only submit the first job
  - Reduced encrypted file transfer CPU usage by a factor of six
  - "condor_config_val -summary" displays changes from a default configuration
  - Improved the ClassAd documentation, added many functions that were omitted


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.4-1
changelog:
  - Amazon S3 file transfers using pre-signed URLs
  - Further reductions in DAGMan memory usage
  - Added -idle option to condor_q to display information about idle jobs
  - Support for SciTokens authentication
  - A tool, condor_evicted_files, to examine the SPOOL of an idle job


author: Tim Theisen <tim@cs.wisc.edu> - 8.8.7-1
changelog:
  - Updated condor_annex to work with upcoming AWS Lambda function changes
  - Added the ability to specify the order that job routes are applied
  - Fixed a bug that could cause remote condor submits to fail
  - Fixed condor_wait to work when the job event log is on AFS
  - Fixed RPM packaging to be able to install condor-all on CentOS 8
  - Period ('.') is allowed again in DAGMan node names


author: Tim Theisen <tim@cs.wisc.edu> - 8.9.5-1
changelog:
  - Added a new mode that skips jobs whose outputs are newer than their inputs
  - Added command line tool to help debug ClassAd expressions
  - Added port forwarding to Docker containers
  - You may now change some DAGMan throttles while the DAG is running
  - Added support for session tokens for pre-signed S3 URLs
  - Improved the speed of the negotiator when custom resources are defined
  - Fixed interactive submission of Docker jobs
  - Fixed a bug where jobs wouldn't be killed when getting an OOM notification


author: Brian Lin <blin@cs.wisc.edu> - 2.1.5-1
changelog:
  - Do not disable LCMAPS VOMS attribute checking (SOFTWARE-2633)
  - Package htcondor-ce-slurm (SOFTWARE-2631)


author: Brian Lin <blin@cs.wisc.edu> - 2.2.1-1
changelog:
  - CPU accounting and non-Condor batch system memory request fixes (SOFTWARE-2786, SOFTWARE-2787)
  - Disable mail on service restart


author: Dave Dykstra <dwd@fnal.gov> - 3.0.0-1
changelog:
  - Add the audit_payloads function.  This logs the starting and stopping of
    all payloads that were started from pilot systems based on condor.
  - Do not hold jobs with expired proxy (SOFTWARE-2803)
  - Only warn about configuration if osg-configure is present (SOFTWARE-2805)
  - CEView VO tab throws 500 error on inital installation (SOFTWARE-2826)


author: Dave Dykstra <dwd@fnal.gov> - 3.0.1-1
changelog:
  - Fix loss of job audit info when a new job implicitly stopped a previous
    job that was the last one in a master slot (SOFTWARE-2788).


author: Brian Lin <blin@cs.wisc.edu> - 3.0.3-1
changelog:
  - Fix condor_ce_ping with IPv6 addresses (SOFTWARE-3030)
  - Fix for CEView being killed after 24h (SOFTWARE-2820)
  - Import the web_utils library for condor_ce_metric


author: Brian Lin <blin@cs.wisc.edu> - 3.0.4-1
changelog:
  - Removed OSG-specific code and configuration from builds intended for the
    HTCondor repo
  - Updated the CERN BDII provider
  - Removed packaging necessary for EL5 builds


author: Brian Lin <blin@cs.wisc.edu> - 3.1.1-1
changelog:
  - Allow InCommon host certs
  - Drop vestigal HTCondor-related configuration
  - Add documentation for mapping multiple VOMS attributes


author: Carl Edquist <edquist@cs.wisc.edu> - 3.1.2-1
changelog:
  - Require voms-clients-cpp explicitly (SOFTWARE-3201)
  - Add CN -> daemon.opensciencegrid.org mapping (SOFTWARE-3236)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 3.1.4-1
changelog:
  - Fix condor_ce_trace failures caused by transferring /usr/bin/env (SOFTWARE-3387)
  - Fix regex for RDIG certs (SOFTWARE-3399)
  - Don't require authz check for condor_ce_q (SOFTWARE-3414)


author: Brian Lin <blin@cs.wisc.edu> - 3.2.0-1
changelog:
  - Map certs with VOMS attr before local daemons (SOFTWARE-3489)
  - Send CEView keepalives as the condor user (SOFTWARE-3486)


author: Brian Lin <blin@cs.wisc.edu> - 3.2.1-1
changelog:
  - Explicitly set ALLOW_READ to support HTCondor 8.9 (SOFTWARE-3538)
  - Add timeouts to the BDII provider


author: Brian Lin <blin@cs.wisc.edu> - 3.2.2-1
changelog:
  - Make blahp requirement binary package specific (SOFTWARE-3623)
  - Added condor_ce_store_cred for PASSWORD authentication
  - Use new multi-line syntax configuration syntax (SOFTWARE-3637)
  - Update MyOSG URL and queries


author: Brian Lin <blin@cs.wisc.edu> - 3.3.0-1
changelog:
  - Add APEL support for HTCondor-CE and HTCondor backends
  - Store malformed ads reporting to htcondor-ce-collector


author: Brian Lin <blin@cs.wisc.edu> - 4.0.0-0.2
changelog:
  - Use simplified CERequirements format:
  https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=6133,86
  - Reorganize HTCondor-CE configuration: configuration that admins are
  expected to change is in /etc, other configuration is in /usr
  - Remove most OSG-specific configuration into the OSG CE metapackage
  (SOFTWARE-3813)
  - Increase the default maximum walltime to 72 hours


author: Brian Lin <blin@cs.wisc.edu> - 4.1.0-1
changelog:
  - Add non-OSG method for modifying the job environment (SOFTWARE-3871)
  - Simplify configuration of APEL scripts
  - Do not require authentication for queue reads (SOFTWARE-3860)
  - Allow local CE users to submit jobs without a proxy or token (SOFTWARE-3856)
  - Fix the ability to specify grid certificate locations for SSL authentication
  - Refine the APEL record filter to ignore jobs that have not yet started
  - Fix an issue where `condor_ce_q` required authentication
  - Re-enable the ability for local users to submit jobs to the CE queue
  - Fix an issue where some jobs were capped at 72 minutes instead of 72 hours
  - Add `systemctl daemon-reload` to packaging for initial installations
  - Improve robustness of BDII provider


author: Brian Lin <blin@cs.wisc.edu> - 4.2.0-1
changelog:
  - Add SSL support for reporting to central collectors (SOFTWARE-3939)
  - GLUE2 validation improvements for the BDII provider (#308)


author: Brian Lin <blin@cs.wisc.edu> - 4.2.1-1
changelog:
  - Drop vestigial central collector config generator
  - Fix unmapped GSI/SSL regexps and allow unmapped enttities to advertise to the central ceollector (SOFTWARE-3939)


author: Brian Lin <blin@cs.wisc.edu> - 4.3.0-1
changelog:
  - Add the CE registry web application to the central collector. The
    registry provides an interface to OSG site administrators of
    HTCondor-CEs to retrieve an HTCondor IDTOKEN for authenticating
    pilot job submissions (#298, #299)
  - Identify broken job routes upon startup (#319)
  - Add benchmarking parameters to the BDII provider via HTCONDORCE_SPEC
    in the configuration. See /etc/condor-ce/config.d/99-ce-bdii.conf
    for examples (#311)
  - Fix handling of unmapped GSI users in the central collector (#317)
  - Fix reference to old BDII configuration values (#322)


author: Brian Lin <blin@cs.wisc.edu> - 4.4.0-1
changelog:
  - Add plug-in interface to HTCondor-CE View and separate out
    OSG-specific code and configuration (SOFTWARE-3963)
  - Add configuration option (COMPLETED_JOB_EXPIRATION) for how many days (SOFTWARE-4108)
  - Replace APEL uploader SchedD cron with init and systemd services
    (#323)
  - Fix HTCondor-CE View SchedD query that caused "Info" tables to be blank


author: Brian Lin <blin@cs.wisc.edu> - 4.4.0-1
changelog:
  - Add plug-in interface to HTCondor-CE View and separate out
    OSG-specific code and configuration (SOFTWARE-3963)
  - Add configuration option (COMPLETED_JOB_EXPIRATION) for how many
    days completed jobs may stay in the queue (SOFTWARE-4108)

  - Replace APEL uploader SchedD cron with init and systemd services
    (#323)
  - Fix HTCondor-CE View SchedD query that caused "Info" tables to be blank


author: Brian Lin <blin@cs.wisc.edu> - 4.4.1-1
changelog:
  - Fix a stacktrace with the BDII provider when `HTCONDORCE_SPEC` isn't
    defined in the local HTCondor configuration
  - Fixed a race condition that could result in removed jobs being put
    on hold
  - Improve performance of the HTCondor-CE View


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 4.4.1-2
changelog:
  - Change voms-clients-cpp requirement to voms-clients for non-OSG builds,
    because voms-clients-java works equally well


author: Brian Lin <blin@cs.wisc.edu> - 4.4.1-3
changelog:
  - Fix blahp requirements for HTCondor 8.9.9 (HTCONDOR-84)
  - Remove OSG grid-certificates requirement duplicated by downstream
    requirements in the osg-ce metapackage


