add 1.2.7 changes

docs/changes_1.x.rst

@@ -425,6 +425,56 @@ Other changes:
 - remove support for OpenSSL < 1.1.1
 
 
+Version 1.2.7 (2023-12-02)
+--------------------------
+
+For upgrade and compatibility hints, please also read the section "Upgrade Notes"
+above.
+
+Fixes:
+
+- docs: CVE-2023-36811 upgrade steps: consider checkpoint archives, #7802
+- check/compact: fix spurious reappearance of orphan chunks since borg 1.2, #6687 -
+  this consists of 2 fixes:
+
+  - for existing chunks: check --repair: recreate shadow index, #7897 #6687
+  - for newly created chunks: update shadow index when doing a double-put, #7896 #5661
+
+  If you have experienced issue #6687, you may want to run borg check --repair
+  after upgrading to borg 1.2.7 to recreate the shadow index and get rid of the
+  issue for existing chunks.
+- LockRoster.modify: no KeyError if element was already gone, #7937
+- create --X-from-command: run subcommands with a clean environment, #7916
+- list --sort-by: support "archive" as alias of "name", #7873
+- fix rc and msg if arg parsing throws an exception, #7885
+
+Other changes:
+
+- support and test on Python 3.12
+- include unistd.h in _chunker.c (fix for Python 3.13)
+- allow msgpack 1.0.6 and 1.0.7
+- TAM issues: show tracebacks, improve borg check logging, #7797
+- replace "datetime.utcfromtimestamp" with custom helper to avoid
+  deprecation warnings when using Python 3.12
+- vagrant:
+
+  - use generic/debian9 box, fixes #7579
+  - add VM with debian bookworm / test on OpenSSL 3.0.x.
+- docs:
+
+  - not only attack/unsafe, can also be a fs issue, #7853
+  - point to CVE-2023-36811 upgrade steps from borg 1.1 to 1.2 upgrade steps, #7899
+  - upgrade steps needed for all kinds of repos (including "none" encryption mode), #7813
+  - upgrade steps: talk about consequences of borg check, #7816
+  - upgrade steps: remove period that could be interpreted as part of the command
+  - automated-local.rst: use GPT UUID for consistent udev rule
+  - create disk/partition sector backup by disk serial number, #7934
+  - update macOS hint about full disk access
+  - clarify borg prune -a option description, #7871
+  - readthedocs: also build offline docs (HTMLzip), #7835
+  - frontends: add "check.rebuild_refcounts" message
+
+
 Version 1.2.6 (2023-08-31)
 --------------------------