flatpak 1.15.2

Bug fixes:

* Never try to export a parent of reserved directories as a --filesystem,
  for example /run, which would prevent the app from starting (#5205, #5207)
* Never try to export a --filesystem below /run/flatpak or /run/host,
  which could similarly prevent the app from starting
* The above change also fixes apps not starting if a --filesystem is a
  symlink to the root directory (#1357)
* Show a warning when the --filesystem exists but cannot be shared with
  the sandbox (#1357, #5035, #5205, #5207)
* Display the intended messages for `flatpak repair` (#5204)
* Exporting an app to an existing repository on a CIFS filesystem
  now works as intended (#5257)
* Unset $GIO_EXTRA_MODULES for apps, avoiding misbehaviour in some GLib
  apps when set to a path on the host (#5206)
* Unset $XKB_CONFIG_ROOT for apps, avoiding crashes in GTK and Qt apps
  under Wayland when this variable is set to a path not available in the
  sandbox (#5194)
* When using the fish shell, avoid duplicate XDG_DATA_DIRS entries if the
  profile script is sourced more than once (#5198)
* Update included copy of bubblewrap to 0.7.0 for better error messages
* Install SELinux files correctly when building with Meson
* Translation updates: ru, tr (#5256, #5262)

Internal changes:

* Update included copy of libglnx
* flatpak -v now uses the INFO log level, and flatpak -vv uses the
  DEBUG log level in the flatpak log domain. Previously, the extra
  messages that were logged by flatpak -vv were in a separate "flatpak2"
  log domain. G_MESSAGES_DEBUG=flatpak previously had an effect similar to
  flatpak -v, and is now more similar to flatpak -vv. (#5001)

Git-EVTag-v0-SHA512: 1f4eb9112c79cbd33fe8a4d9ac9f3cadbcdae0bd02ae5361588e6fb37eae41ffcebe466c204f531fbc69012aadc86268c588d20507e10fab99e7bca0c19f29b2
-----BEGIN PGP SIGNATURE-----
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=SliI
-----END PGP SIGNATURE-----