Unprotect dnf and yum, protect python3-dnf

dnf.spec

@@ -288,7 +288,12 @@ popd
 %dir %{confdir}/aliases.d
 %exclude %{confdir}/aliases.d/zypper.conf
 %config(noreplace) %{confdir}/%{name}.conf
-%config(noreplace) %{confdir}/protected.d/%{name}.conf
+# No longer using `noreplace` here. Older versions of DNF 4 marked `dnf` as a
+# protected package, but since Fedora 39, DNF needs to be able to update itself
+# to DNF 5, so we need to replace the old /etc/dnf/protected.d/dnf.conf.
+%config %{confdir}/protected.d/%{name}.conf
+# Protect python3-dnf instead, which does not conflict with DNF 5
+%config(noreplace) %{confdir}/protected.d/python3-%{name}.conf
 %config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
 %ghost %attr(644,-,-) %{_localstatedir}/log/hawkey.log
 %ghost %attr(644,-,-) %{_localstatedir}/log/%{name}.log
@@ -314,7 +319,10 @@ popd
 %{_mandir}/man5/yum.conf.5.*
 %{_mandir}/man8/yum-shell.8*
 %{_mandir}/man1/yum-aliases.1*
-%config(noreplace) %{confdir}/protected.d/yum.conf
+# No longer using `noreplace` here. Older versions of DNF 4 marked `yum` as a
+# protected package, but since Fedora 39, DNF needs to be able to update itself
+# to DNF 5, so we need to replace the old /etc/dnf/protected.d/yum.conf.
+%config %{confdir}/protected.d/yum.conf
 %else
 %exclude %{_sysconfdir}/yum.conf
 %exclude %{_sysconfdir}/yum/pluginconf.d

etc/dnf/protected.d/CMakeLists.txt

@@ -1 +1 @@
-INSTALL (FILES "dnf.conf" "yum.conf" DESTINATION ${SYSCONFDIR}/dnf/protected.d)
+INSTALL (FILES "dnf.conf" "yum.conf" "python3-dnf.conf" DESTINATION ${SYSCONFDIR}/dnf/protected.d)

etc/dnf/protected.d/dnf.conf

@@ -1 +1,3 @@
-dnf
+# DNF is obsoleted in Fedora 39 by DNF 5 and should no longer be marked as protected.
+
+# dnf

etc/dnf/protected.d/python3-dnf.conf

@@ -0,0 +1 @@
+python3-dnf

etc/dnf/protected.d/yum.conf

@@ -1 +1,4 @@
-yum
+# In Fedora 39, yum is obsoleted/provided by the dnf5 package rather than dnf,
+# and DNF cannot replace itself with DNF5 if yum is marked as protected.
+
+# yum