ack (3.10.0-1) unstable; urgency=medium . * Team upload . [ gregor herrmann ] * Import upstream version 3.8.2. * Add new test dependency: libyaml-pp-perl. * Update years of upstream copyright. * Unfuzz no-standalone-test-but-autopkgtests.patch. * Drop unneeded version constraints from (build) dependencies. * Annotate test-only build dependencies with . * Drop Breaks/Replaces: ack-grep which was removed in 2017. . [ Samuel Young ] * Import upstream version 3.9.0. * Unfuzz no-standalone-test-but-autopkgtests.patch. * Declare compliance with Debian Policy 4.7.3. * Remove <>, which is the current default. * Remove <>, which is the current default. . [ gregor herrmann ] * Import upstream version 3.10.0. (Closes: #1144040) - CVE-2026-49147: filename ANSI escape sequences - CVE-2026-49146: project .ackrc -A -B -C memory exhaustion - CVE-2026-49145: project .ackrc --follow / --files-from file exfiltration * Update years of upstream copyright. * Refresh no-standalone-test-but-autopkgtests.patch. * Convert debian/watch to version 5. * Declare compliance with Debian Policy 4.7.4. * Refresh lintian override. algobox (1.2.0+dfsg-1) unstable; urgency=medium . * Update Files-excluded paths * New upstream version 1.2.0+dfsg * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4 * Update watch file format version to 5 * Removed Rules-Requires-Root * Use debhelper-compat 14 * Update copyright * debian/rules: update path * Use cmake and qt6-tools-dev instead of qt6-base-dev * Update lintian-overrides ansilove (4.2.3-1) unstable; urgency=medium . * New upstream release. b4 (0.16.0-2) unstable; urgency=medium . * d/control: Add missing dependency (Closes: #1150824) (kudos to Christopher Obbard ) * d/rules: Remove tests from install (Closes: #1151531) bitcoin-knots (29.5.knots20260508-1) unstable; urgency=medium . * Update to upstream v29.5.knots20260508 * Refresh patches bitcoin-knots (29.4.knots20260508.3-1) unstable; urgency=medium . * Update to upstream v29.4.3.knots20260508 * Refresh patches bluez (5.88-1) unstable; urgency=high . * Team upload . [ Jeremy Bícha ] * New upstream release - SECURITY UPDATE - Out-of-bounds read vulnerability in the btmon tool + CVE-2026-105460 (Closes: #1150900) * gatttool is no longer provided * Install additional manpages * Update Homepage * Remove patches applied in new release * Cherry-pick 2 commits that landed after 5.88 . [ Kai-Chuan Hsieh ] * Cherry-pick proposed patch to fix mpris-proxy segfault during OBEX file transfer (LP: #2172906) . [ Petter Reinholdtsen ] * Add AppStream metadata file to announce support for bluetooth (Closes: #840013 cava-alsa (1.0.0+dfsg-3) unstable; urgency=medium . * d/control: - Update Build-Depends (Closes: #1152661) Thanks Dioscoro Bondoy - Update file to debhelper 14 * d/cava.docs, d/cava.install: Rename to package-prefixed names * d/rules, d/clean: Generate version file before autoreconf * d/tests: Add check-libs test cdargs (1.35-14) unstable; urgency=medium . * QA upload. * debian/copyright: Update packaging copyright information. * debian/salsa-ci.yml: Add to provide CI tests for Salsa. * debian/tests/control: Create autopkgtest. cglm (0.9.7-1) unstable; urgency=medium . * New upstream release * Update symbols file * d/watch: Use version 5 * d/control: Update debhelper-compat version to 14 * d/control: Update Standards-Version to 4.7.4 * d/control: Remove optional fields Priority and Rules-Require-Root * d/patches: Add Don-t-use-math-mode-in-docs.patch * d/copyright: Update copyright year cockpit-files (47-1) unstable; urgency=medium . * New upstream release: - Updated to PatternFly 6.7.0 cron (3.0pl1-213) unstable; urgency=medium . * replace a last character in a line by '\0' only when this character is '\n'. Closes: #1152898; thanks to Brett Sutton for reporting this bug. cwl-utils (0.47-1) unstable; urgency=medium . * Packaging update (routine-update) * New upstream version * Reflow Uploaders field (cme) * Remove Priority field (cme) * Debhelper version 14 (cme) * Drop 'Rules-Requires-Root: no' from d/control (routine-update) * Dropped sole patch, it was applied upstream. * d/control: newer schema-salad is needed * d/control: include quickjs as an alternative to nodejs * d/rules: update for new "src/" layout. * Added patch to link the docs to other packaged docs. * d/control: strengthen suggestion on "cwl-runner" to specify "cwltool" as an explicit alternative, to silence Lintian complaining about the test CWL files referencing that interpreter. * d/control: use dh-sequence-sphinxdoc * d/clean: the docs "_build" directory is a directory, mark it as such * d/control: include graphviz for the docs. * d/control: suggest various compatible container engines. * d/clean: also remove the generated autoapi directory * d/pybuild.testfiles: removed, no longer needed * d/watch: upgrade to version 5 syntax cxx-rust-cssparser (1.1.0-2) unstable; urgency=medium . * Build against cssparser 0.38, selectors 0.41, and cssparser-color 0.6. * Record statically linked Rust crates in Built-Using and Static-Built-Using. * Build the Rust crate into a fixed cargo target directory. dh-ocaml (3.9) unstable; urgency=medium . * Depend on qjs instead of quickjs (Closes: #1152978) * Adjust Perl coding style: - Use "use warnings" instead of calling perl with -w - Run all Perl scripts through perltidy docx2txt (1.4-7) unstable; urgency=medium . * Remove redundant Priority: optional from source stanza. * Use secure URI in Homepage field. docx2txt (1.4-6) unstable; urgency=medium . * Bump to debhelper compat level 14 * Bump standards version to 4.7.4 * Security: run unzip without a shell, use 3-arg open, create the STDIN temporary file safely, and do not load perl config from the current directory (closes: #1152844), thanks to Koyo Keiter for the report and initial patch * Tolerate insignificant whitespace in docx XML (closes: #907994) dracut (112-8) unstable; urgency=medium . [ Frank Heimes ] * dracut-core: ship the s390 module 74zfcp (LP: #2171808) * dracut-network: ship the s390 modules 68cms and 74znet (LP: #2171808) . [ Benjamin Drung ] * Add autopkgtest for 61-chrony duma (2.5.21-12) unstable; urgency=medium . * Update watch file to Version: 5 * Remove unused lintian overrides * Update copyright date * Update standards and compat level edk2 (2026.08+ds-3) unstable; urgency=medium . * efi-shell-*: Mark Multi-Arch: foreign. * Fix out-of-bounds write in the Brotli decoder, CVE-2026-111497. (Closes: #1151700) - d/p/0001-Detect-and-report-invalid-stream-earlier.patch eodag (4.10.4+ds-1) unstable; urgency=medium . * New pstream release. * debian/control: - Drip dependency on python3-fake-factory. * debian/patches: - Refresh all patches. - No need to forward 0003-test_download_plugins.patch. feedbackd (0.8.11-1) unstable; urgency=medium . * New upstream release * Add haptic support for Motorola Edge 30 (motorola,dubai) * Manpage improvements feedbackd-device-themes (0.8.10-1) unstable; urgency=medium . * New upstream release * motorola,dubai: Make button press feedback stronger. flutter-engine (3.47.9+ds1-1) unstable; urgency=medium . * New upstream release. * Install the engine artifacts under /usr/lib//flutter-engine: they are binaries, so lintian wants them in an architecture-specific directory. * Mark the packages the multiarch hinter flagged: foreign for the Dart data packages, same for the ones shipping per-architecture binaries. flutter-engine (3.47.5+ds1-4) unstable; urgency=medium . * Build flutter-patched-sdk on each architecture instead of all. Its .install file places the kernel under linux-${FLUTTER_CPU}, but an Architecture: all package is built on amd64, so arm64 and armhf got the x64 files and Flutter could not compile applications there. * Pick the toolchain directory by architecture in the autopkgtest, instead of requiring exactly one. * Do not run the gn include check: the gn from generate-ninja 2026-11-03 rejects public headers that include private dependencies, which upstream's tree triggers in several places. * Build the generated flatbuffer headers in a pass of their own: ninja only sees them through #include, so it schedules them after the first hundred compiles and the build hits the users first. flutter-engine (3.47.5+ds1-3) unstable; urgency=medium . * Do not depend on analyze_snapshot on 32-bit arm hosts. The target only exists for the 64-bit architectures, and a native armhf build reaches it through host_toolchain == current_toolchain, which broke the GN dependency graph. * Drop the pinned language version from the entries of the Dart package config, so the SDK decides it. * Build the engine artifacts on 32-bit arm. Upstream switched them off there in 2020 (flutter/flutter#74322), which left libpath_ops, font-subset, flutter_tester and the patched SDK archives out of an armhf build and made four binary packages impossible. flutter-engine (3.47.5+ds1-2) unstable; urgency=medium . * Build the platform kernel with the kernel compiler from the dart-kernel-compiler package. The tool cannot be compiled here because the repack leaves the Dart sources out. * New binary packages: sky-engine, flutter-patched-sdk and flutter-tester, the artefacts the Dart and Flutter tooling needs to resolve and run Flutter code. * Point the Dart tree at the dart-args and dart-path packages so that the ui_web sources can be rewritten as upstream does. * flutter-patched-sdk carries the product kernel that a release build compiles as well as the JIT one. * Build on armhf. The Dart SDK comes from the archive, so the prebuilts upstream ships no longer limit the architectures; the gn script learns what a 32-bit arm host is, and hard float without NEON matches the armhf baseline. gedit-plugins (50.0-5) unstable; urgency=medium . * Remove temporary transitional packages getmail6 (6.21.01-1) unstable; urgency=medium . * New upstream version 6.21.01 geventhttpclient (2.6.1-1) unstable; urgency=medium . * New upstream release * debian/control - add setuptools-scm to b-d, the version is now derived from git tags - bump gevent b-d to >= 25.9, the new upstream minimum - add httplib2 to b-d, needed by tests - update the description: drop the Twitter reference, mention the httpx and http.client compatible interfaces * debian/rules - set SETUPTOOLS_SCM_PRETEND_VERSION, the tarball has no git metadata - unset http_proxy and https_proxy, httplib2 refuses pybuild's dummy proxy without socks support, failing the httplib2 tests on localhost * debian/patches/examples-python3-shebang.patch - also cover the new oauth2.py example * debian/python3-geventhttpclient.docs - install the new upstream CHANGELOG.md geventhttpclient (2.5.1-1) unstable; urgency=medium . * New upstream release * debian/patches/add-llhttp-v6.0.10.patch - remove, replaced by linking against the system llhttp * debian/patches/use-system-llhttp.patch - build the parser against the system libllhttp instead of a vendored copy; it now uses llhttp 9.4.3, which fixes CVE-2024-27982 * debian/patches/examples-python3-shebang.patch - use python3 in the shebang of the examples, now executable * debian/control - bump debhelper compat to 14; add dh-sequence-python3 and dh-sequence-single-binary to b-d, replacing dh-python - add libllhttp-dev to b-d, for use-system-llhttp.patch - add pybuild-plugin-pyproject to b-d, to build via pyproject.toml - drop urllib3 from b-d, no longer needed - mark certifi and gevent b-d as , only the tests need them - drop the substvars, now applied automatically - add Breaks on locust << 2.46.6-3~, which needs a fix for the renamed redirect_response_codes attribute - drop Priority, optional is now the default - update Homepage to the new upstream location - update the description: the parser is now llhttp; mention the requests-compatible interface - bump Standards-Version to 4.7.4.1 (no further changes needed) * debian/rules - enable all hardening flags, adding bindnow to the extension - drop --with python3, replaced by dh-sequence-python3 - drop override_dh_installexamples, it installed the examples a second time in a nested examples/ directory * debian/copyright - update Source to the new upstream location - drop the stanza for ext/http_parser.*, no longer in the source - add a stanza for the code taken from requests, under Apache-2.0 - extend packaging copyright years * debian/watch - convert to version 5, using the GitHub template * debian/upstream/metadata - add Changelog and Repository * debian/source/options - remove, pybuild cleans the egg-info and the pattern no longer matched it gnome-podcasts (25.3+dfsg-5) unstable; urgency=high . [ Simon Quigley] * Allow html5ever 0.40 (Closes: #1150478) gnome-shell-extension-blur-my-shell (77-1) unstable; urgency=medium . * New upstream version 77 go-rpmdb (0.1.1-1) unstable; urgency=medium . * Team upload. * New upstream version 0.1.1. * Drop golang-github-go-restruct-restruct-dev, no longer used. * Add golang-github-hashicorp-go-multierror-dev and golang-modernc-sqlite-dev, imported by the new code. * Import modernc.org/sqlite instead of github.com/glebarez/go-sqlite, which Debian cannot build in GOPATH mode. * debian/watch: track upstream release tags. * debian/copyright: add SUSE LLC for pkg/ndb/ndb.go. golang-github-aquasecurity-bolt-fixtures (0.0~git20200903.d34e7f9-2) unstable; urgency=medium . * Write an extended description that says what the library does. golang-github-aquasecurity-bolt-fixtures (0.0~git20200903.d34e7f9-1) unstable; urgency=medium . * Initial release (Closes: #1152541) golang-github-aquasecurity-go-gem-version (0.0~git20201115.8eed6fe-2) unstable; urgency=medium . * d/copyright: credit hashicorp/go-version (MPL-2.0) for the code copied from it. golang-github-aquasecurity-go-gem-version (0.0~git20201115.8eed6fe-1) unstable; urgency=medium . * Initial release (Closes: #1152492) golang-github-aquasecurity-go-npm-version (0.0.2+git20261005.1f16ed7-1) unstable; urgency=medium . * Initial release (Closes: #1152493) golang-github-aquasecurity-go-pep440-version (0.0.1+git20260224.f9bba28-1) unstable; urgency=medium . * Team upload. * New upstream version 0.0.1+git20260224.f9bba28. golang-github-aquasecurity-go-version (0.0.1-1) unstable; urgency=medium . * Team upload. * New upstream version 0.0.1. * Drop the package-has-long-file-name override, now unused. golang-github-aquasecurity-iamgo (0.0.10-1) unstable; urgency=medium . * Initial release (Closes: #1152494) golang-github-aquasecurity-trivy-java-db (0.0~git20240109.184bd74-1) unstable; urgency=medium . * Initial release (Closes: #1152497) golang-github-brunoscheufler-aws-ecs-metadata-go (0.0~git20221221.67e37ae-1) unstable; urgency=medium . * Initial release (Closes: #1140162) * Port to dh-go (module-aware builds) golang-github-josephburnett-jd (2.3.0+ds-1) unstable; urgency=medium . * Initial release (Closes: #1152529) golang-github-knqyf263-nested (0.0.1-4) unstable; urgency=medium . * Reintroduce: trivy needs it (Closes: #1152500). * Build with dh-go; add a go.mod (upstream has none). * Standards-Version 4.7.4, debhelper-compat 14, debian/watch version 5. golang-github-knqyf263-nested (0.0.1-3) unstable; urgency=medium . [ Debian Janitor ] * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository, Repository-Browse. golang-github-knqyf263-nested (0.0.1-2) unstable; urgency=medium . [ Debian Janitor ] * Apply multi-arch hints. + golang-github-knqyf263-nested-dev: Add Multi-Arch: foreign. . [ Thorsten Alteholz ] * upload source package * add myself to Uploaders: * debian/control: use dh13 * debian/control: bump standard to 4.5.1 (no changes) golang-github-knqyf263-nested (0.0.1-1) unstable; urgency=medium . * Initial release (Closes: #932092) golang-github-masahiro331-go-disk (0.1.2+git20260423.f7a470e-1) unstable; urgency=medium . * Initial release (Closes: #1152501) golang-github-masahiro331-go-ebs-file (0.1.1+git20260422.9d24e29-2) unstable; urgency=medium . * Write an extended description that says what the library does. golang-github-masahiro331-go-ebs-file (0.1.1+git20260422.9d24e29-1) unstable; urgency=medium . * Initial release (Closes: #1152502) golang-github-masahiro331-go-ext4-filesystem (0.1.3+git20260423.fe51f5b-2) unstable; urgency=medium . * Write an extended description that says what the library does. golang-github-masahiro331-go-ext4-filesystem (0.1.3+git20260423.fe51f5b-1) unstable; urgency=medium . * Initial release (Closes: #1152503) golang-github-masahiro331-go-mvn-version (0.0~git20260119.d21fcd2-1) unstable; urgency=medium . * Team upload. * New upstream version 0.0~git20260119.d21fcd2. golang-github-masahiro331-go-vmdk-parser (0.1.3+git20260423.08305fa-2) unstable; urgency=medium . * Write an extended description that says what the library does. golang-github-masahiro331-go-vmdk-parser (0.1.3+git20260423.08305fa-1) unstable; urgency=medium . * Initial release (Closes: #1152504) golang-github-masahiro331-go-xfs-filesystem (0.1.8+git20260422.d21e5e4+ds-2) unstable; urgency=medium . * Do not install the unused 40 MB test image xfs/testdata/image40.xfs. * Write an extended description that says what the library does. golang-github-masahiro331-go-xfs-filesystem (0.1.8+git20260422.d21e5e4+ds-1) unstable; urgency=medium . * Initial release (Closes: #1152505) golang-github-oklog-ulid (2.1.2-1) unstable; urgency=medium . * Team upload. * New upstream version 2.1.2, which adds ulid.Make (needed by samber/oops for trivy). * Upstream no longer ships vendor/, so the +ds repack is gone. golang-github-samber-lo (1.53.0-1) unstable; urgency=medium . * Team upload. * New upstream version 1.53.0, which trivy needs (lo.IsNil arrived in 1.39.0). * Depend on golang-golang-x-text-dev; upstream dropped go-funk and x/exp, and the tests no longer use testify. * Restore the test helpers the upstream release drops, so the example tests build. golang-github-twitchtv-twirp (8.1.3+ds-1) unstable; urgency=medium . * Initial release (Closes: #1152507) gsimplecal (2.5.4-1) unstable; urgency=medium . * New upstream version 2.5.4 - Remove fix-path_max-for-hurd.patch, applied upstream * Add automatic tests hwdata (0.413-1) unstable; urgency=medium . * New upstream release. * Rewrite copyright to copyright-format v1.0. igtf-policy-bundle (1.147-1) unstable; urgency=medium . * New upstream release (2 November 2026): * Add new CERN Root CA 3 and Grid CA 2 ICA (CERN) * Updated DFN-GridGermany-Root with new SHA-2 family self-signature (DE) * Removed discontinued DigiCert roots and ICAs from TAGPMA: DigiCertGridRootCA-Root, DigiCertGridTrustCAG2-Classic, DigiCertGridCA-1G2-Classic-2015, DigiCertAssuredIDRootCA-Root, DigiCert-Assured-ID-Grid-Client-RSA2048-SHA256-2022-CA1, DigiCert-Assured-ID-Grid-TLS-RSA2048-SHA256-2022-CA1 (US) * Removed obsolete TCS Gen4 and Gen4B issuing CAs, as well as the Gen4B private trust roots and USERTrustECCCertificationAuthority (EU) Due to the dependency of the (outgoing) InCommon-RSA-IGTF-Server-CA-3, the USERTrustRSACertificationAuthority is temporarily retained (US) imagej (1.54r-1) unstable; urgency=medium . * Team upload. . [ Nathaniel Beaver ] * Make sure desktop file works in GNOME 3 dock Closes: #1146739 . [ Andreas Tille ] * Update Homepage in d/control and Source in d/copyright Closes: #1153007 * d/watch: - version=5 - new upstream location * New upstream version * Standards-Version: 4.7.4 (routine-update) * Reflow Uploaders field (cme) * Remove Priority field (cme) * Drop 'Rules-Requires-Root: no' from d/control (routine-update) * debputy lint --auto-fix (routine-update) * d/copyright: Add some missing license statements found thanks to lrc jags (5.0.1-2) unstable; urgency=medium . * No change source-only upload jags (5.0.1-1) unstable; urgency=medium . * New upstream release . * debian/jags.lintian-overrides: Updated * debian/source.lintian-overrides: Idem jags (5.0.0-2) experimental; urgency=medium . * debian/watch: Adjust regular expression to not match e.g. 5.0.0.beta jags (5.0.0-1) experimental; urgency=medium . * New (major) upstream release, into experimental for now . * debian/control: Set Standards-Version: to current version * debian/watch: Switch to watch version 4, and 5.x upstream location . * debian/control: Add Vcs-{Browser,Git} fields (Closes: #1132086) javaparser (3.28.2+dfsg-1) unstable; urgency=medium . * Team upload. * New upstream release - Refreshed the patches - Ignore the new central-publishing-maven-plugin * Build the symbol solver in the new libjavaparser-symbol-solver-java package * Updated the package description * Updated debian/copyright * Removed the non-free Widget test classes from the upstream tarball * Converted debian/watch to the version 5 format * Removed the Priority field * Standards-Version updated to 4.7.4 kyotocabinet (1.2.80-3) unstable; urgency=medium . * QA upload. * debian/copyright: Update packaging copyright information. * debian/salsa-ci.yml: Add to provide CI tests for Salsa. * debian/tests/control: Create autopkgtest. libansilove (1.4.4-1) unstable; urgency=medium . * New upstream release. libbusiness-isbn-data-perl (20261103.001-1) unstable; urgency=medium . * Import upstream version 20261103.001. libcpan-audit-perl (20261105.001-1) unstable; urgency=medium . * Import upstream version 20261105.001. * Convert debian/watch to version 5. libextutils-builder-compiler-perl (0.038-1) unstable; urgency=medium . * Import upstream version 0.038. * Convert debian/watch to version 5. libfurl-perl (3.15-2) unstable; urgency=medium . * Team upload. * Add patches from upstream Git to fix memory exhaustion via unbounded decompression of gzip/deflate responses, a.k.a. "zip bomb" (CVE-2026-65059). (Closes: #1153242) * Declare compliance with Debian Policy 4.7.4. * Convert debian/watch to version 5. libimobiledevice (1.4.0+git20251127-1) unstable; urgency=medium . * Team upload. * New upstream snapshot. * debian/control: Switch from openssl to gnutls for legacy SSLv3 support. (Closes: #1076544) * debian/control: Update Standards-Version to 4.7.4 and drop the obsolete Priority and Rules-Requires-Root fields. * debian/control: Add a python3-dev fallback alternative to work around autodep8 #904999 while preserving cross-build dependencies. Declare the standard autopkgtest-pkg-python test suite. * debian/patches: + ostrace-fix-memory-leak.patch: Backport upstream fix for the per-message buffer leak in OS trace capture. + afcclient-fix-cd.patch: Backport upstream directory handling fixes. + afcclient-documents-directory.patch: Start in /Documents when using the application documents service. + afc-validate-receive.patch: Validate AFC packet lengths and allocation results, and return immediately after receive failures. * debian/libimobiledevice-utils.manpages: Install the existing afcclient, idevicebtlogger, idevicedevmodectl and idevicesetlocation manual pages. [ Helmut Grohne ] * Fix FTCBFS: Export _PYTHON_SYSCONFIGDATA_NAME for the extension build. (Closes: #1121258) libjpeg (0.0~git20260724.702114c-1) unstable; urgency=medium . * Team upload. * Bump debhelper-compat 14 * d/control: Build-Depends add dh-sequence-single-binary * New upstream version 0.0~git20260724.702114c * add d/libjpeg-tools.lintian-overrides * delete d/p/cross.patch, new upstream fixed * d/clean: add clear configure.ac * simply fix bug#1013649: - delete d/p/bug1013649.patch - d/rules: add execute_before_dh_autoreconf execute_after_dh_builddeb * d/rules: - add override_dh_installchangelogs target, install README.history as upstream changelog - help2man add --source="jpeg $(VERSION)" * d/libjpeg-tools.docs: add README.md libppix-editortools-perl (0.21-3) unstable; urgency=medium . * Team upload. . [ gregor herrmann ] * Add remove_unhandled_import_arguments.patch from upstream PR. Removes unhandled import arguments in test. This partially fixes #1135414. . [ Étienne Mollier ] * remove_unhandled_import_arguments.patch: check $code is actually set. This is the second half of the fix for the test failure. (Closes: #1135414) * Declare compliance with Debian Policy 4.7.4. * Remove «Priority: optional», which is the current default. * d/control: bump to debhelper 14 in single binary mode. * d/watch: bump to v5 metacpan template. libppix-editortools-perl (0.21-2) unstable; urgency=medium . [ Salvatore Bonaccorso ] * Update Vcs-* headers for switch to salsa.debian.org . [ gregor herrmann ] * debian/watch: use uscan version 4. libppix-editortools-perl (0.21-1) unstable; urgency=medium . * Import upstream version 0.21. * Update years of packaging copyright. * Update build dependencies. * Declare compliance with Debian Policy 4.1.3. * Bump debhelper compatibility level to 10. libppix-editortools-perl (0.20-1) unstable; urgency=medium . [ Salvatore Bonaccorso ] * Change Vcs-Git to canonical URI (git://anonscm.debian.org) * Change search.cpan.org based URIs to metacpan.org based URIs . [ gregor herrmann ] * Strip trailing slash from metacpan URLs. . [ Salvatore Bonaccorso ] * Update Vcs-Browser URL to cgit web frontend . [ Florian Schlichting ] * Import Upstream version 0.19 * Email change: Florian Schlichting -> fsfs@debian.org * Drop manpage-has-bad-whatis-entry.patch, applied upstream . [ Salvatore Bonaccorso ] * debian/control: Use HTTPS transport protocol for Vcs-Git URI . [ gregor herrmann ] * debian/copyright: change Copyright-Format 1.0 URL to HTTPS. * Remove Fabrizio Regalli from Uploaders. Thanks for your work! * Remove Jonathan Yu from Uploaders. Thanks for your work! * Remove Ryan Niebur from Uploaders. Thanks for your work! . [ Florian Schlichting ] * Import upstream version 0.20 * Add upstream metadata * d/copyright: + update years + merge upstream paragraphs + remove M::I paragraph dropped upstream * d/control: + add build-dependency on libclass-accessor-perl for testing + remove versions satisfied in oldoldstable * Bump dh compat to level 9 * Declare compliance with Debian Policy 4.1.1 * Fix autopkgtest failure by making script/ available in testbed libppix-editortools-perl (0.18-1) unstable; urgency=low . [ gregor herrmann ] * debian/control: update {versioned,alternative} (build) dependencies. . [ Dominique Dumont ] * Imported Upstream version 0.17. . [ Florian Schlichting ] * Imported Upstream version 0.18. * Bumped Standards-Version to 3.9.4 (no changes). * Bumped years for inc/Module/Install copyright. * Added versioned (build-)dependencies on libppi-perl and libtry-tiny-perl. * Refreshed manpage-has-bad-whatis-entry.patch. libppix-editortools-perl (0.15-1) unstable; urgency=low [ Fabrizio Regalli ] * New upstream release. * Added myself to Uploaders and copyright. [ Ansgar Burchardt ] * debian/control: Convert Vcs-* fields to Git. [ Florian Schlichting ] * Added build-dependency on Test::More 0.88. * Added manpage-has-bad-whatis-entry.patch. * Bumped Standards-Version to 3.9.3 (use copyright-format 1.0). * Added myself to Uploaders and copyright. libppix-editortools-perl (0.13-1) unstable; urgency=low * New upstream release. * debian/copyright: update list of upstream copyright holders, and years of upstream and packaging copyright. * Add /me to Uploaders. * Bump debhelper compatibility level to 8. * Set Standards-Version to 3.9.2 (no changes). libppix-editortools-perl (0.11-1) unstable; urgency=low [ Jonathan Yu ] * New upstream release + Fix variable detection (e.g. loop variables) [RT#63107] * Add build dependency on Test::Most [ gregor herrmann ] * debian/copyright: update information about copyright years and holders. * debian/control: drop version from libtest-differences-perl build dependency, already satisfied in lenny. libppix-editortools-perl (0.10-1) unstable; urgency=low [ Jonathan Yu ] * New upstream release * Drop versioned dep on PPI (1.203 is in stable) * Use new 3.0 (quilt) source format * Update to DEP5 copyright format [ Ryan Niebur ] * Update ryan52's email address libppix-editortools-perl (0.09-1) unstable; urgency=low * New upstream release + Allow variables to be renamed while the cursor is over its declaration (Padre tickets 504 and 586) * Added myself to Uploaders and Copyright * Standards-Version 3.8.3 (drop perl version dependency) libppix-editortools-perl (0.08-1) unstable; urgency=low * New upstream release libppix-editortools-perl (0.06-1) unstable; urgency=low * Initial Release. (Closes: #536651) librsvg (2.63.4+dfsg-4) unstable; urgency=medium . * librsvg2-dev: Restore Depends: libdav1d-dev librsvg (2.63.4+dfsg-3) unstable; urgency=medium . * Fix Ubuntu's librsvg2-dev after enabling avif support * Set MESON_USE_NEW_CROSSGEN=1 instead of using the cross building patch (Closes: #1152880) librsvg (2.63.4+dfsg-2) unstable; urgency=medium . [ Helmut Grohne ] * Improve cross building (Closes: #1152880) + Mark locales as only needed for build tests + Use a native Rust toolchain + Pass the triplet option to meson + Add cross.patch: Reduce introspection and vala requirements . [ Jeremy Bícha ] * Remove 2 i386 workaround patches that are no longer needed (Closes: #1038252) * Remove some reftest workarounds librsvg (2.63.4+dfsg-1) unstable; urgency=medium . * New upstream release * Update vendored rust crates * Update XS-Vendored-Sources-Rust field * debian/gbp.conf: Automatically run vendor rules when importing a new upstream version * debian/README.source: Recommend using an Ubuntu system for importing a new upstream version to properly set XS-Vendored-Sources-Rust * debian/watch: Convert to Version: 5 * Stop disabling avif support for Ubuntu libseqlib (1.2.0+dfsg-14) unstable; urgency=medium . * Stop providing symbols file Closes: #1152949 libxpertmass (1.17.5-1) unstable; urgency=low . * Utils class now reports about the lib installation directories. * Added feature to detect if the library is loaded inside an AppImage bundle. * Remove the libQScintilla that is no more used (no more JS stuff). libxpertmass (1.17.4-2) unstable; urgency=low . * Rebuild with new version of libpappsomspp. locust (2.46.7-6) unstable; urgency=medium . * debian/patches/PR3569-test-pytest-locustfile-local-server.patch - run test_pytest_locustfile against a local server instead of www.locust.io, patch from upstream: its tests also pass without network, but on loong64, where tests needing the internet are not run, a garbled response failed test_fasthttp_catch_response and test_regular hung until the timeout; to be removed with 2.47.0, which has it; Closes: #1153145 locust (2.46.7-5) unstable; urgency=medium . * debian/rules - exclude the remaining timing dependent tests from the autopkgtest, except on amd64 and i386: the armhf one of 2.46.7-4 failed test_cpu_warning, test_stop_event and test_user_count_in_csv_history_stats, and going through the test code found 51 more of the same kind; test_runners, test_stats, test_web, test_dispatch, test_log, test_debugging and test_zmqrpc, where nearly all of them are, go as whole files, so that new tests there need no entry; the build, arch all, still runs them locust (2.46.7-4) unstable; urgency=medium . * debian/rules - exclude the process integration tests of test_main everywhere: they stop locust with SIGINT, whose KeyboardInterrupt some greenlets swallow and others print as a traceback; this failed the arch:all build of 2.46.7-3 on amd64, with workers left behind by one test breaking three more - exclude the tests with fixed timeouts, sleeps or elapsed time tolerances from the autopkgtest, except on amd64 and i386: they keep failing on the slower riscv64, arm64, ppc64el and s390x workers; the build, arch all, still runs them - remove the test tree of the previous interpreter before setting up the autopkgtest for the next one: they share the build directory, and with python3.15 supported next to python3.14, the second one failed on "cp: cannot create symbolic link ...: File exists" - drop LOCUST_TEST_TIMEOUT_FACTOR, the riscv64 exclusion of test_distributed_rebalanced_integration_run, and the exclusions of the test_main tests, covered by the above * debian/patches/test-timeout-factor.patch - remove, the tests it scales now run only in the build and on amd64 and i386, where the factor was 1 * debian/patches/increase-subprocess-timeout.patch, debian/patches/processes-autodetect-cpu-count.patch - remove, they only change the excluded test_main tests locust (2.46.7-3) unstable; urgency=medium . * debian/patches/test-timeout-factor.patch - scale the remaining timeouts, waits and timing tolerances of the tests: the riscv64 autopkgtest still failed 26 tests on the unscaled ones, and the arm64 and ppc64el ones failed test_kill_locusts_with_stop_timeout * debian/rules - set LOCUST_TEST_TIMEOUT_FACTOR to 20 on riscv64, and to 10 on arm64 and ppc64el - skip test_distributed_rebalanced_integration_run on riscv64: a worker can be left with the wrong user count after a rebalance, failing the test however long it waits locust (2.46.7-2) unstable; urgency=medium . * debian/patches/test-timeout-factor.patch - scale the timing limits of the tests by LOCUST_TEST_TIMEOUT_FACTOR; starting locust took longer than the tests wait for it in the riscv64 autopkgtest, which failed 73 tests on timeouts * debian/patches/processes-autodetect-cpu-count.patch - run test_processes_autodetect with 4 workers instead of one per CPU: with 16 and 20, some of them did not quit within the 0.5 seconds the master waits, failing the ppc64el and s390x autopkgtest * debian/rules - set LOCUST_TEST_TIMEOUT_FACTOR to 10 on riscv64 locust (2.46.7-1) unstable; urgency=medium . * New upstream release * debian/control - bump geventhttpclient b-d to 2.6.1, needed by the updated test_max_redirect_setting - bump requests b-d to 2.33.1, the new upstream minimum * debian/patches/PR3526-geventhttpclient-2.5.patch - drop, merged upstream * debian/patches/geventhttpclient-2.6-max-redirect-test.patch - expect the 302 response in test_max_redirect_setting, as geventhttpclient 2.6 no longer follows redirects when max_redirects is 0; from upstream, patch by Lars Holmberg * debian/patches/PR3541-percent-encode-request-target.patch - percent-encode the request target in FastHttpUser: geventhttpclient 2.6 rejects a target with spaces, and the request was missing from the statistics; from upstream PR #3541, patch by Suliman Abdulrazzaq * debian/patches/PR3549-report-malformed-response-as-failure.patch - report a response geventhttpclient cannot parse as a failed request in FastHttpUser, instead of raising out of the request and leaving it out of the statistics; from upstream PR #3549, patch by Suliman Abdulrazzaq * debian/patches/increase-subprocess-timeout.patch - also raise the join timeout of test_processes_separate_worker from 3 to 10 seconds; it made the arch:all build of 2.46.6-3 fail on the buildd locust (2.46.6-3) unstable; urgency=medium . * debian/patches/PR3526-geventhttpclient-2.5.patch - fix allow_redirects=False being ignored by FastHttpUser with geventhttpclient 2.5, which renamed the attribute locust clears to disable redirects; from upstream PR #3526, patch by Sai Yaswanth locust (2.46.6-2) unstable; urgency=medium . * debian/rules - remove locust_output.json, left by a failing test, in clean; Closes: #1048334 - drop --with python3, replaced by dh-sequence-python3 - make test failures fatal; skip the tests needing network access, one expecting localhost to resolve to IPv6 and two with a racy shutdown - share the test exclusions with the autopkgtest, and run it on symlinks to the installed package, as the tests are not installed - generate a manpage with help2man * debian/control - bump debhelper compat to 14; add dh-sequence-python3 and dh-sequence-single-binary to b-d - drop the substvars, now applied automatically - use upstream's synopsis, "Developer-friendly" - bump Standards-Version to 4.7.4.1 (no further changes needed) - add Testsuite: autopkgtest-pkg-pybuild - add help2man to b-d; drop from the b-d imported by locust --help, needed to generate the manpage * debian/python3-locust.manpages - install the generated manpage * debian/python3-locust.lintian-overrides - override image-file-in-usr-lib, the web UI assets are served by Flask from the package directory * debian/upstream/metadata - add upstream metadata * debian/source/options - remove, egg-info is no longer generated since the switch to hatchling mcl (1:22-282+ds-7) unstable; urgency=medium . * libmcl-ocaml-dev:Section: s/libdevel/ocaml/ * Do not try to install native client libs on loong64 since these do not exist mcl (1:22-282+ds-6) unstable; urgency=medium . * Conflicts/Relaces: libmcl14-ocaml-dev Closes: #1153198 * debputy lint --auto-fix (routine-update) * Enable build on loong64 architecture mcl (1:22-282+ds-5) unstable; urgency=medium . * Re-enable OCaml bindings for the current MCL version and ship them in the new binary package libmcl-ocaml-dev. * Build the bindings without OASIS * Install the OCaml findlib package into the versioned multiarch OCaml stdlib directory (@OCamlStdlibDir@) instead of the hardcoded /usr/lib/ocaml * d/watch: version=5 * d/upstream/metadata: Take over valid citation from d/copyright into machine readable format * d/copyright: rcl/* is only GPL-3 * Add d/lrc.config * i386 is explicitly excluded by Build-Depends: architecture-is-64-bit Closes: #1091257 * Standards-Version: 4.7.4 (routine-update) * Reflow Uploaders field (cme) * Remove Priority field (cme) * Drop 'Rules-Requires-Root: no' from d/control (routine-update) * Rely on pre-initialized dpkg-architecture variables. * Reformat the Last-Update date as ISO YYYY-MM-DD. * Add RFP bugs in 20011012-1. * debputy lint --auto-fix (routine-update) mkdocs-literate-nav (0.6.2-3) unstable; urgency=medium . * Team upload. * [61fea6b] Make the tests pass with python3-markdown >= 3.11.1. mongo-c-driver (2.5.8-1) unstable; urgency=medium . * New upstream release msgpack-java (0.9.12+dfsg-1) unstable; urgency=medium . * Team upload. * d/watch: version=5 * New upstream version * Standards-Version: 4.7.4 (routine-update) * Reorder sequence of d/control VCS fields (cme) * Remove Priority field (cme) * Drop 'Rules-Requires-Root: no' from d/control (routine-update) * Add POMs for the two modules and let maven resolve msgpack-core from the reactor instead of a hand-made link in debian/maven-repo Closes: #1151480 * Use JUnit 5 lifecycle annotations in MessagePackDataformatTestBase and disable testMessagePackParserDirectly, which asserts a column number the parser does not report, so the test suite runs during the build msgpuck (2.0-2) unstable; urgency=medium . * QA upload. * debian/salsa-ci.yml: Add to provide CI tests for Salsa. * debian/tests/*: Create autopkgtest. node-generator-supported (0.0.1-3) unstable; urgency=medium . * remove myself from Uploaders: node-tsx (4.22.4+repack+~cs7.26.1-2) unstable; urgency=medium . * Multi-Arch: foreign. Closes: #1152983. node-webassemblyjs (1.14.1+dfsg3+~cs1.2.7-4) unstable; urgency=medium . * Team upload * Increase test timeout for riscv64 numba (0.68.1+ds-3) unstable; urgency=medium . * Team upload. * Skip test_array_const_alignment on ppc64 numba (0.68.1+ds-2) unstable; urgency=medium . * d/rules: restore nproc check for single-CPU hosts * Pass char sequences as separate arguments on ppc64 * Build gufunc_scheduler.cpp once as a static library numba (0.68.1+ds-1) unstable; urgency=medium . * Team upload. * New upstream version 0.68.1+ds (Closes: #1144999) * d/gbp.conf: Reset debian-branch after merge * Refresh patches * Bump llvmlite dependencies * Restore dh-sequence-python3 build-dependency * Install numba script in /usr/share/python3-numba for alternatives * d/rules: use DEB_BUILD_OPTION_PARALLEL instead of nproc * d/rules: remove trailing whitespace * d/rules: drop redundant --with sphinxdoc * d/watch: convert to version 5 with GitHub template numba (0.67.0+dfsg-1~0exp1) experimental; urgency=medium . * Team upload. * Try patches from archlinux dev to fix riscv64 tests https://github.com/felixonmars/archriscv-packages/pull/5683 * Enable PEP-517 builds, including parallel extension building numba (0.67.0+dfsg-1~0exp0) experimental; urgency=medium . * Team upload. * d/rules: run all the tests, set parallelism to respect DEB_BUILD_OPTIONS. * New upstream version * Standards-Version: 4.7.4 (routine-update) * Reflow Uploaders field (cme) * Build-Depends: s/dh-python/dh-sequence-python3/ (routine-update) * Finished patch to skip failing tests on riscv64. numba (0.66.0+dfsg-1~0exp1) experimental; urgency=medium . * Team upload. * d/tests/python3-numba: remove check for AVX512_SKX, matching upstream. numba (0.66.0+dfsg-1~0exp0) experimental; urgency=medium . * Team upload. * Link to local docs and recommend them. * d/control: install python3-cffi for the build-times tests. * d/control: force newer llvmlite version * New upstream release. ocaml-bytesrw (0.4.1-2) unstable; urgency=medium . * Add pkgconf to Build-Depends openjdk-21 (21.0.13.0.3+1-1) unstable; urgency=medium . * OpenJDK 21.0.13.0.3 release, build 1. - CVEs: + CVE-2026-91403: JDK-8395690: CA certificate improvements. pgmodeler (2.0.0-2) unstable; urgency=medium . [ Klemen Ferjancic ] * Fix reproducibility regression. pgmodeler (2.0.0-1) unstable; urgency=medium . * New upstream version 2.0.0-beta. pgmodeler (2.0.0~beta-1) experimental; urgency=medium . * New upstream version 2.0.0~beta. pgmodeler (2.0.0~alpha1-1) experimental; urgency=medium . * New upstream version 2.0.0~alpha1. * Build with clang (the package wants it). * B-D on cmake and libcups2-dev. * Disable dh_dwz. php-constant-time (3.1.4-1) unstable; urgency=medium . [ erpeldinger.g ] * Use ext-sodium for non-strict Base64 decoding . [ David Prévot ] * Remove redundant Priority: optional from source stanza * Upgrade upstream signing key to new packet format * Update standards version to 4.7.4 * Update watch file format version to 5 * Latest tag is not signed * Use debhelper-compat 14 * Document lintian-overrides php-embed (4.6.2-1) unstable; urgency=medium . [ Vítor de Oliveira ] * Fixes for 4.6.1 (#589) * Document the HTTP dispatcher (4.6.2) (#590) picard (3.0.4-1) unstable; urgency=medium . * New upstream version 3.0.4 * debian/control: Remove use of substvars pplacer (1.1~alpha19-9) unstable; urgency=medium . * Fix Build issues with OCaml 5.2.0 - Use -Wno-incompatible-pointer-types - Fix misleading indentation - Upgrade to Ocaml 5.2.0 API of bigarray * Build against the OCaml bindings for the current MCL version (libmcl-ocaml-dev) instead of the frozen mcl14 fork. The OCaml bindings have been re-enabled in the mcl package against MCL 22-282, so the mcl14 package can be dropped from Debian. This keeps the "guppy mcl" subcommand and the "--mcl" option of "guppy compress" working. * Build-Depends: s/ocaml-nox/ocaml/ since ocaml-nox was removed from Debian (Closes: #1131241). * Replace the removed Array.create with Array.make and build mutable buffers with Bytes.create instead of String.create (OCaml 5.2+), which is needed now that the build gets past dependency resolution against the re-enabled OCaml bindings of the current mcl package. * Build-Depends: add libtingea-dev. The current mcl OCaml bindings record -ltingea in mcl.cmxa, so pplacer needs the tINGea development files to link. * caml_bigarray.patch: use Caml_ba_data_val (the bigarray data pointer) instead of Caml_ba_array_val (the bigarray struct pointer) in the C stubs, which had been operating on the bigarray header. This was causing wrong likelihood values and heap corruption that surfaced as test failures and segfaults. gemmish_c also passed the struct pointer to Caml_ba_data_val, yielding the flags field as the data pointer. * New patch marshal_header_size.patch: OCaml reduced Marshal.header_size from 20 to 16 bytes. pplacer hardcoded the 20-byte header, so the -j N (default 2) forked placement workers deadlocked because the parent read 4 bytes of the data into the "header" and then waited for body bytes that never arrived. Use Marshal.header_size/total_size. * Do not strip debug symbols from library * Finally libmcl-ocaml-dev is ported to latest mcl version Closes: #1074546 * Standards-Version: 4.7.4 (routine-update) * Reflow Uploaders field (cme) * Remove Priority field (cme) * Remove trailing whitespace in debian/changelog (routine-update) * Drop 'Rules-Requires-Root: no' from d/control (routine-update) * Reformat the Last-Update date as ISO YYYY-MM-DD. * Set upstream metadata fields: Repository-Browse. pplacer (1.1~alpha19-8) unstable; urgency=medium . * Team upload. * d/t/run-unit-test: relax success conditions for non-amd64. Results are stored in XML files that have some fluctuations in the floating point values they store depending on the underlying CPU architecture during the test. Visual inspection of a subset of the (very) many values suggest no strong divergence, so a strict check character-for-character of the XML files is probably not suitable for non-amd64 CPU architectures. pplacer (1.1~alpha19-7) unstable; urgency=medium . [ Mohammed Bilal ] * Install data for autopkgtests * add autopkgtest (Closes: #1009156) . [ Andreas Tille ] * Exclude build test for i386 in Salsa CI * Build-Depends: s/libmcl-ocaml-dev/libmcl14-ocaml-dev/ since pplacer builds only against old mcl14 featuring an OCAML patch Closes: #1024889 * Standards-Version: 4.7.0 (routine-update) pplacer (1.1~alpha19-6) unstable; urgency=medium . * Fix ocaml build issue Closes: #1002230 pplacer (1.1~alpha19-5) unstable; urgency=medium . [ Steffen Moeller ] * Fix watchfile to detect new versions on github (routine-update) . [ Andreas Tille ] * Standards-Version: 4.6.0 (routine-update) pplacer (1.1~alpha19-4) unstable; urgency=medium . * Team Upload. * Pull and modify upstream PR to fix FTBFS w/ new version of libocamlgsl-ocaml-dev (Closes: #975858) * Standards version: 4.5.1 pplacer (1.1~alpha19-3) unstable; urgency=medium . * Include /usr/share/ocaml/ocamlvars.mk Closes: #968474 * Adapt to new version of ocaml-batteries pplacer (1.1~alpha19-2) unstable; urgency=medium . [ Shayan Doust ] * Add myself as an uploader . [ Andreas Tille ] * Rules-Requires-Root: no (routine-update) * Set upstream metadata fields: Bug-Database, Bug-Submit. pplacer (1.1~alpha19-1) unstable; urgency=medium . * Initial release (Closes: #963476) prometheus (3.5.3+ds1-7) unstable; urgency=medium . * Team upload. . [ Juan Manuel Méndez Rey ] * install-ui.sh: deploy the web UI from the layout upstream ships today. The release tarball has static/mantine-ui and static/react-app, not static/react, so the script extracted a path that does not exist and no UI was ever installed. (Closes: #1148074) * Patch 0006: serve the UI from the directory names upstream uses, so the files install-ui.sh deploys are the ones the binary looks for. Checked by running the built binary against the 3.5.3 web UI tarball: /query and /targets serve the app and its files load from /assets. . [ Reinhard Tartler ] * Backport upstream fix for flaky TestConvertClassicHistogramsToNHCB (Closes: #1150738) pylint (4.0.9-1) unstable; urgency=medium . * New upstream version 4.0.9 - CVE-2026-114608 * Mark python3-{dill,isort,mccabe} as * Add debian/clean (WIP #1046722) pyqt5-sip (12.20.0-1) unstable; urgency=medium . * New upstream release. pystac (1.16.0-1) unstable; urgency=medium . * New upstream release. * debian/copyright: - Remove the full text of licenses that are in /use/share/common-licenses. * debian/patches: - Refresh all patches. * Install extensions/json-schema files. * Update d/python-pystac-doc.lintian-overrides. pytest-mpi (0.6-10) unstable; urgency=medium . * Team upload. * unittests: Set DEFAULT_TIMEOUT to 120 seconds. Closes: #1152851. * Drop "Rules-Requires-Root: no" (default). * Drop "Priority: optional" (default). * Update standards-version. * Fine-tune salsa-ci.yml. python-django (3:5.2.19-1) unstable; urgency=high . * New upstream security release: . - CVE-2026-108147: Prevent a potential memory exhaustion in MultiPartParser via base64-encoded file uploads. When using django.http.multipartparser's MultiPartParser, multipart uploads with a "Content-Transfer-Encoding: base64" header could be buffered entirely in memory regardless of the value of FILE_UPLOAD_MAX_MEMORY_SIZE before being passed to upload handlers, potentially consuming excessive memory. . - CVE-2026-111211: Avoid a potential log injection via unescaped geometry form values. django.contrib.gis.forms.GeometryField (and its widgets) logged invalid submitted values directly, allowing control characters (e.g. newlines or ANSI escape sequences) to be written unescaped into logs. This could have enabled log injection or forgery, letting attackers manipulate log appearances and structures, especially in logs processed by external systems or when viewed in terminals. . - CVE-2026-111362: Fix a server-side request forgery via the 'crs' member of GeoJSON geometries. Earlier versions of the GeoJSON spec allowed specifying a coordinate reference system (CRS) by URL. Since GDAL still resolves these URLs, any validation, save or query path where a geometry is instantiated from user input allowed an attacker to submit a malicious CRS that would make a network request as the Django process user or read a file (or both). Lookups against spatial fields, the GeometryField form field and GEOSGeometry now reject GeoJSON geometries with CRS references to external resources. The DataSource and LayerMapping utilities for loading trusted data continue to accept these values, however. . - CVE-2026-113593: Avoid a potential exposure of private data via empty and missing 'Vary' headers. UpdateCacheMiddleware and cache_page() generated the same cache key for a request that omitted a header listed in the response's 'Vary' header and a request that sent that header with an empty value. As a result, a response cached for one of these requests could be served to the other which could lead to the exposure of private data. Cache keys now distinguish between absent and empty header values as required by RFC 9111#section-4.1. Responses previously cached for requests that omitted a header listed in 'Vary' will no longer be matched and will be cached again on the next request. . - CVE-2026-113733: Fix a password hash disclosure to "view only" admin users with custom user models. Admin users with the 'view' (but not 'change') permission to a user model were shown the entire password hash when the model was not AUTH_USER_MODEL (or when AUTH_USER_MODEL inherited its password field from a concrete parent model through multi-table inheritance). . - CVE-2026-114582: Avoid a server-side request forgery via SpatialReference string input. SpatialReference passed string input to GDAL, which by default resolves URLs and reads files. This behavior was not previously documented by Django. (Other affected methods included GEOSGeometry.transform, OGRGeometry.transform, GDALRaster.transform, the srs setter of OGRGeometry and the srs and srid setters of GDALRaster.) A URL or file path reaching any of these would issue an outbound request or read a file as the Django process user. The attack vectors could be combined to reveal local file contents by observing outbound requests. SpatialReference now disables network and file access when parsing string input on GDAL 3.9 and later. As a consequence, file paths and URLs are no longer accepted as SpatialReference inputs. Dictionary references using the DICT: prefix, including those prefixed with 'ESRI::', are rejected on all GDAL versions. Full protection requires GDAL 3.9 or later, and a new gis.W001 system check warns when the installed version of GDAL is not at least 3.9. . . (Closes: #1152952) python-django (3:5.2.18-2) unstable; urgency=medium . * Adjust the scaling factor in the test for CVE-2025-64460 added in 3:4.2.27-0+deb13u1 as it causes flakiness on loaded machines, and in particular, on the runners for autopkgtests. (Closes: #1126323) python-django (3:5.2.18-1) unstable; urgency=high . * New upstream security release: . - CVE-2026-77050: Potential denial-of-service vulnerability in get_supported_language_variant. This method was subject to a potential denial-of-service attack when processing many distinct and very long language codes. Language codes were used as keys in an in-memory cache before their length was limited, potentially consuming excessive process memory. To mitigate this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. . - CVE-2026-84429: Potential denial-of-service vulnerability in HTTP header parsing. django.utils.http.parse_header_parameters() was subject to a potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter. An unauthenticated request could reach this through common headers such as Accept or Content-Type, for instance via the content negotiation performed by HttpRequest.accepts(). The per-call length limit does not bound the combined size of repeated headers. The undocumented django.utils.http.parse_header_parameters() function now uses Python's email.message.Message for parsing. As a result, parsing of some malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. . - CVE-2026-87890: Potential request forgery via spatial lookup byte values. Spatial lookups accepted raster values provided as bytes without requiring them to be explicitly wrapped in django.contrib.gis.gdal's GDALRaster. Although these values were opened through GDAL's in-memory virtual filesystem, they could contain a VRT document referencing an external raster source. This could cause GDAL to issue network requests as the Django process user while preparing the lookup. This issue could be exploited by applications that passed attacker-controlled bytes directly to a spatial lookup. This was overlooked in the fix for CVE-2026-15307. To mitigate this issue, raster values provided as bytes must now be wrapped in GDALRaster before being used in spatial lookups. Byte values representing valid hexadecimal geometries remain accepted. This is a backward incompatible change. . - CVE-2026-87975: Prevent privilege abuse in model formsets with editable primary keys. Model formsets incorrectly allowed forged POST data to either delete instances outside the limiting queryset or create instances via edit-only formsets when the model's primary key could be set through the form, such as with a OneToOneField (or parent link used as the primary key of an inline formset's model), or a natural or UUID primary key included in the form's fields. Models using the default BigAutoField primary key were not affected. . . (Closes: #1150176) python-liblore (0.10.1-1) unstable; urgency=medium . * Update watch file. * Uprev to latest version. * Add bug submit metadata. * Minimize pubkey. * Add mising build-dependencies. python-scrapy (2.19.0-3) unstable; urgency=medium . * Backport security fixes from the 2.20.0 release: + 0005-Unbounded-Content-Encoding-decompression-chain-allow.patch (GHSA-j72p-v7rm-cwm3) + 0006-Redirects-to-no_proxy-hosts-sent-through-the-environ.patch (GHSA-x3px-j3qh-fp5w) + 0007-Files-and-images-pipelines-send-S3-requests-over-pla.patch (GHSA-fwm7-29m4-rrj9) + 0008-Only-send-http_user-http_pass-to-the-origin-they-wer.patch (related to and a prereq for the next one) + 0009-Per-request-http_user-and-http_pass-credentials-leak.patch (GHSA-466x-p45j-m4fx) python-socks (2.8.1-3) unstable; urgency=medium . * Team upload. * Control: remove unused build-deps on python3-pytest-tornasync and - twisted; patch courtesy of CyberNative AI LLC. (Closes: #1149469) qdl (2.9-2) unstable; urgency=medium . * d/control: skip help2man for cross and nodoc builds * d/control: skip test build dependencies for nocheck builds * d/control: add nbdkit-plugin-qdl binary package * d/rules: install the man page only when it is generated quantlib (1.44-5) unstable; urgency=medium . * debian/rules: Remove test-suite.log when SOURCE_DATE_EPOCH is set as it reflects the build machine kernel which may vary on re-runs * debian/rules: Move the installed quantlib.pc to a multi-arch friendly directory to aid cross-compilation * debian/rules: Pass BOOST_TEST_LOG_LEVEL=message to make {,check} quantlib (1.44-4) unstable; urgency=medium . * debian/patches/swaption_test_evaluation_date: Upstream fix of setting fixed evaluation date for swaptions * debian/patches/series: Activate patch quantlib (1.44-3) unstable; urgency=medium . * No-change rebuild quantlib (1.44-2) unstable; urgency=medium . * debian/patches/source-date-epoch-test-timing: Only print timing difference from check if SOURCE_DATE_EPOCH is not set * debian/patches/series: Activate patch * debian/rules: Ensure (CONFIG_)SHELL is set, robustify cleanup r-cran-rjags (1:5-4-1) unstable; urgency=medium . * New upstream release. * Uploading to unstable for jags 5.x release. r-cran-rjags (1:5-2-1~exp1) experimental; urgency=medium . * New upstream release. Uploaded to experimental since jags 5 is also in experimental. raylib (6.2+ds-1) unstable; urgency=medium . * New upstream version 6.2 rrep (1.4.0-1) unstable; urgency=low . * New upstream release. * Updated copyright for the changed gnulib modules and build files. * Updated Standards-Version to 4.7.4. * Updated debhelper-compat-version to 14 and activated the single-binary addon explicitly. * Removed redundant debhelper Build-Depends, Priority and Rules-Requires-Root fields. * Removed unnecessary autoreconf argument to dh. * Moved upstream from SourceForge to sourcehut and updated Homepage, Vcs-*, copyright Source and upstream metadata accordingly. * Updated watch-file-standard to 5 and switched to sourcehut release artifacts. * Added lintian override for generated gperf data. ruby-amq-protocol (2.10.0-1) unstable; urgency=medium . * Team upload. * New upstream release. - GHSA-499w-x7r4-fw7p: Keep TLS peer verification enabled when an amqps URI omits verify. * Refresh patches for the new upstream release. * Set the test locale to C.UTF-8. * Refresh the copyright file. ruby-css-inline (0.22.0-1) unstable; urgency=medium . * New upstream release. * Build against css-inline 0.22 and magnus 0.8. * Record Built-Using and Static-Built-Using for the extension. ruby-em-websocket (0.5.3-2.1) unstable; urgency=medium . * Non-maintainer upload. * Drop ruby-em-http-request from Build-Depends. (Closes: #1112094) ruby-fog-aws (3.33.5-1) unstable; urgency=medium . * Team upload. * New upstream release. * Run the full Shindo suite. * Refresh build dependencies. * Set the test locale to C.UTF-8. * Refresh the copyright file. ruby-haml (7.5.2-1) unstable; urgency=medium . * Team upload. * New upstream release. * Refresh patches for the new upstream release. * Build-Depend on ruby-thor. * Set the test locale to C.UTF-8. * Build an Architecture: all package. * Update the haml manpage. * Point the documentation symlink at the installed 7.5.2 gem. * Refresh the copyright file. * Drop remote status badges from the documentation. ruby-redis-cluster-client (0.17.8-1) unstable; urgency=medium . * Team upload. * New upstream release. * Allow redis-client 0.31. * Require the library in the test runner. * Set the test locale to C.UTF-8. * Refresh the copyright file. rudof (0.3.13+ds-1.1) unstable; urgency=medium . * Non-maintainer upload (Closes: #1149190). * build-depend on newer crates hashlink and yaml-rust2 rudof (0.3.13+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * build-depend on package for crate ctrlc (not signal-hook) rudof (0.3.12+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches * build-depend on package for crate include-dir * update watch file: capitalize file format field label * update copyright info: Reference License fulltext CC-BY-4.0 * add patch 1002_newer_signal-hook to use newer minor version of crate; build-depend on package for crate signal-hook * add patches 1001_* to fix tests rudof (0.3.9+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * update long description * build-depend on packages for crates rustyline shlex rudof (0.3.8+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * build-depend on package for crate dirs * tighten build-dependencies * update watch file: + stop set auto-mangling of upstream version (now done by default) + limit to STABLE_VERSION * update source helper tool copyright-check rudof (0.3.7+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * update source helper tool copyright-check * build-depend on package for crate postcard rudof (0.3.6+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches * tighten build-dependencies for crates rand reqwest spargebra * (build-)depend on ca-certificates rudof (0.3.4+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * unfuzz patches * reorganize patch naming and numbering * use debhelper compatibility level 14 (not 13) rudof (0.3.3+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.3.2+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * unfuzz patches * move aside lock-file during build rudof (0.3.1+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * unfuzz patches rudof (0.2.20+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * drop patch 2002_tracing-test, obsoleted by Debian package changes * unfuzz patches rudof (0.2.19+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.2.18+ds-2) unstable; urgency=medium . * add patch 1001_toml to accept newer major version of crate toml; stop build-depend on package for old crate toml v0.8; closes: bug#1135857, thanks to Peter Michael Green * relax patch 1001_crossterm to accept newer minor version of crate crossterm (see bug#1135852) rudof (0.2.18+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches; enable support for Excel spreadsheet as DCTAP source format; build-depend on package for crate calamine rudof (0.2.17+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * add patch 1001_rustemo to accept newer minor versions of crate rustemo, superseding patch 2002_rustemo; build-depend on packages for crates dashmap rustemo * update and unfuzz patches rudof (0.2.16+ds-2~exp1) experimental; urgency=medium . * add patch 1001_rustemo to accept newer minor versions of crate rustemo, superseding patch 2002_rustemo; build-depend on package for crate rustemo * add patch 1001_text-diff to avoid unused crate text-diff * install command-line tool pgschema rudof (0.2.16+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches * stop build-depend on package for crate async-trait rudof (0.2.12+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.2.11+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.2.8+ds-3) unstable; urgency=medium . * drop patch 2003_no_env-filter, obsoleted by Debian package changes rudof (0.2.8+ds-2) unstable; urgency=medium . * tidy rules file command resolving * declare compliance with Debian Policy 4.7.4 * tighten build-dependency for crate rand rudof (0.2.8+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * tighten build-dependency for crate reqwest rudof (0.2.7+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * build-depend on packages for crates clap-complete-command is_ci * tighten build: generate manpage below debian/build * generate shell completion; build-depend on dh-sequence-bash-completion; suggest bash-completion * update autopkgtest rudof (0.2.6+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * unfuzz patches rudof (0.2.5+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches * update copyright info: update coverage * build-depend on packages for crates once_cell paste rudof (0.1.148+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update watch file: auto-mangle upstream version * update copyright info: + really avoid any .git* files when repackaging upstream source * update and unfuzz patches rudof (0.1.147+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * drop patches 2002_axum 2002_pretty, obsoleted by Debian packaging changes * update copyright info: + avoid any .git* files when repackaging upstream source + license patches same as general upstream license + update coverage * update git-buildpackage config: + stop superfluously filter out .git* files * relax (build-)dependencies for all crates * update and unfuzz patches * build-depend on package for crate proptest rudof (0.1.146+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update DEP-3 patch headers * stop declare superfluous fields Priority Rules-Requires-Root * declare compliance with Debian Policy 4.7.3 * update git-buildpackage config: improve usage comment * add tests; build-depend on libtest2-suite-perl libtest2-tools-command-perl perl rudof (0.1.145+ds-2) unstable; urgency=medium . * drop patches 2002_toml, obsoleted by Debian packaging changes; tighten build-dependenciec for crate toml * fix avoid nocheck hit for rust build-dependencies; closes: bug#1122296, thanks to Santiago Vila * unfuzz patches rudof (0.1.145+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patch * tighten build-dependency for crate either rudof (0.1.144+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * drop patches 2002_minijinja 2002_rust_decimal, obsoleted by Debian packaging changes * update DEP-3 patch headers * update and unfuzz patches * tighten build-dependencies for crates reqwest tokio rudof (0.1.140+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update copyright info: + update repackaging exclusions + update coverage * update and unfuzz patches * add TODO note about patched-out support for PGSchema * add patch 1001_termtree to accept newer minor version of crate termtree; bump build-dependency for crate termtree rudof (0.1.134+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * unfuzz patch * tighten build-dependencies for crates indexmap oxigraph rudof (0.1.125+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * unfuzz patch rudof (0.1.121+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * add TODO note about patched-out support for Model-Context-Protocol service rudof (0.1.120+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * stop build-depend explicitly on rustc * update and unfuzz patches * build-depend on packages for crates crossterm tabled itermtree term-size * adapt packaging to install upstream renamed executable rudof_generate (not gone data_generator) rudof (0.1.119+ds-1) unstable; urgency=medium . * update and unfuzz patches * revive TODO note about lack of spreadsheet support * build-depend on packages for crates chrono futures rand rayon tokio-test uuid; tighten build-dependencies for crate tokio * install new executable data_generator rudof (0.1.116+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * tighten (build-)dependency for crate colored * update and unfuzz patches * build-depend on package for crate tempfile rudof (0.1.115+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches * drop TODO item about spreadsheet support postponed upstream * render man pages for subcommands compare rdf-config rudof (0.1.109+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.1.105+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * relax build-dependency for crate itertools * drop patch 1001, obsoleted by upstream changes rudof (0.1.104+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update DEP-3 patch headers rudof (0.1.100+ds-3) unstable; urgency=medium . * no-changes upload to enable testing migration rudof (0.1.100+ds-2) experimental; urgency=medium . * build-depend on recent rustc rudof (0.1.100+ds-1) experimental; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.1.96+ds-1) experimental; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * add patch 1001 to use final releases of oxigraph crates; bump and extend build-dependencies for oxigraph crates * add patch 2002_tracing-test to avoid not-in-Debian crate tracing-test * build-depend on packages for crates hashlink yaml-rust2 rudof (0.1.81+ds-3) unstable; urgency=medium . * update watch file: use file format version 5 * update DEP-3 patch headers * relax build-dependency for crate colored rudof (0.1.81+ds-2) unstable; urgency=medium . * no-changes source-only upload to enable testing migration rudof (0.1.81+ds-1) experimental; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * unfuzz patches rudof (0.1.79+ds-1) experimental; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * unfuzz patches rudof (0.1.78+ds-1) experimental; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * fix typo in changelog * unfuzz patches * add patch 2004_no_vendoring to use system-shared code rudof (0.1.73+ds-1) experimental; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update and unfuzz patches rudof (0.1.70+ds-1) experimental; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * build-depend on package for crate patgraph rudof (0.1.62+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * drop patch 2002_serde_yml_ng, obsoleted by upstream changes rudof (0.1.61+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches; build-depend on package for crate toml (not serde_yaml serde_yml) rudof (0.1.60+ds-2) unstable; urgency=medium . * add patch 2004_no_network to avoid network-requiring tests by default rudof (0.1.60+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update and unfuzz patches * bump build-dependency for crate thiserror; tighten build-dependencies for crates oxrdf oxrdfio oxttl sparesults spargebra; stop build-depend on package for crates maplit serde_with rudof (0.1.59+ds-2) unstable; urgency=medium . * update DEP-3 patch headers * declare compliance with Debian Policy 4.7.2 * generate man pages for subcommands service and query rudof (0.1.59+ds-1) experimental; urgency=medium . * initial release; closes: bug#1073786 rust-abscissa-derive (0.9.0-3) unstable; urgency=medium . * Team upload. * Package abscissa_derive 0.9.0 from crates.io using debcargo 2.8.4 * Port to syn 3. * Relax synstructure to 0.14. rust-acme-redirect (0.8.1+ds-1) unstable; urgency=medium . * Install fish completions into vendor_completions.d (/usr/share/fish/completions path is ignored since fish 4.8). rust-actix-files (0.7.4-1) unstable; urgency=medium . * Package actix-files 0.7.4 from crates.io using debcargo 2.8.4 * Fix RUSTSEC-2026-0443 rust-actix-multipart (0.8.5+ds-1) unstable; urgency=medium . * Team upload. * Package actix-multipart 0.8.5 from crates.io using debcargo 2.8.4 * Drop the unpackaged err-report dev-dependency. * Drop the excluded form example target. * Drop the trybuild test target that needs unpackaged trybuild. * Run the issue 3202 tests without unpackaged actix-test. rust-actix-multipart-derive (0.8.1-1) unstable; urgency=medium . * Team upload. * Package actix-multipart-derive 0.8.1 from crates.io using debcargo 2.8.4 rust-ammonia (4.2.3-1) unstable; urgency=medium . * Team upload. * Package ammonia 4.2.3 from crates.io using debcargo 2.8.4 * Drop the html5ever 0.35 downgrade; 4.2.1 uses 0.40. rust-asn1-rs (0.7.2+ds-2.1) unstable; urgency=medium . * Non-maintainer upload (Closes: #1149897). * Port the embedded derive and impl crates to syn 3 and synstructure 0.14. rust-asn1-rs-derive (0.7.0-2) unstable; urgency=medium . * Team upload. * Package asn1-rs-derive 0.7.0 from crates.io using debcargo 2.8.4 * Port to syn 3. * Relax synstructure to 0.14. rust-async-executor (1.14.1+ds-2) unstable; urgency=medium . * fix dependency on crate async-task rust-async-executor (1.14.1+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update watch file: + capitalize file format field label + stop set auto-mangling of upstream version (now done by default) + limit to STABLE_VERSION * bump project versions in virtual packages and autopkgtests * drop virtual minor-version provision * tighten (build-, autopkgtest-)dependencies * use debhelper compatibility level 14 (not 13) * declare compliance with Debian Policy 4.7.4 rust-async-utility (0.3.2-1) unstable; urgency=medium . * Package async-utility 0.3.2 from crates.io using debcargo 2.8.3 rust-attribute-derive (0.11.0-1) unstable; urgency=medium . * Team upload. * Package attribute-derive 0.11.0 from crates.io using debcargo 2.8.4 rust-attribute-derive-macro (0.11.0-1) unstable; urgency=medium . * Team upload. * Package attribute-derive-macro 0.11.0 from crates.io using debcargo 2.8.4 rust-auto-impl (1.4.0+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update copyright info: + avoid any .git* files when repackaging upstream source + license patches same as main upstream license + update coverage * update git-buildpackage config: + stop superfluously filter out .git* files * update watch file: + use file format 5 + capitalize file format field label + use Github template + limit to STABLE_VERSION * bump project versions in virtual packages and autopkgtests * drop minor-versioned virtual crate provision * relax (build-, autopkgtest-)dependencies for all crates * stop superfluously set fields Rules-Requires-Root Priority * stop set Multi-Arch: foreign, incompatible with arch-any packaged crates * use debhelper compatibility level 14 (not 13) * declare compliance with Debian Policy 4.7.4 rust-bat (0.26.1+ds-2) unstable; urgency=medium . * Team upload. * Package bat 0.26.1 from crates.io using debcargo 2.8.4 * Use prettyplease 0.3 and syn 3. rust-bindgen (0.72.1-5) unstable; urgency=medium . * Team upload. * Package bindgen 0.72.1 from crates.io using debcargo 2.8.4 * Cherry-pick upstream syn 3 bump (prettyplease 0.3). rust-bon (3.10.2-1) unstable; urgency=medium . * Team upload. * Package bon 3.10.2 from crates.io using debcargo 2.8.4 rust-bon-macros (3.10.2-1) unstable; urgency=medium . * Team upload. * Package bon-macros 3.10.2 from crates.io using debcargo 2.8.4 rust-brush-parser (0.4.0-2) unstable; urgency=medium . * Team upload. * Package brush-parser 0.4.0 from crates.io using debcargo 2.8.4 * Relax cached to 4. * Port cached proc-macro call sites to max_size. * Expect the removed winnow-parser cfg under warnings=deny. rust-cached (4.0.2-1) unstable; urgency=medium . * Team upload. * Package cached 4.0.2 from crates.io using debcargo 2.8.4 + New upstream fixes tests on 32-bit architectures. rust-cached (4.0.1-1) unstable; urgency=medium . * Team upload. * Package cached 4.0.1 from crates.io using debcargo 2.8.4 * Relax hashbrown to 0.16 and criterion to 0.5. * Drop the redis and redb stores. * Skip trybuild tests pinned to upstream's rustc. * Skip release-script tests; bin/ is excluded from the crate. * Drop skip-tokio-test.patch. rust-cached-proc-macro (3.0.1-1) unstable; urgency=medium . * Team upload. * Package cached_proc_macro 3.0.1 from crates.io using debcargo 2.8.4 * Relax darling to >= 0.24, < 0.25. * Port to syn 3. rust-cached-proc-macro-types (3.0.0-1) unstable; urgency=medium . * Team upload. * Package cached_proc_macro_types 3.0.0 from crates.io using debcargo 2.8.4 rust-css-inline (0.22.0-1) unstable; urgency=medium . * Package css-inline 0.22.0 from crates.io using debcargo 2.8.4 * Relax reqwest to 0.13 (rustls) and lru to 0.16. rust-cssparser (0.38.0-1) unstable; urgency=medium . * Team upload. * Package cssparser 0.38.0 from crates.io using debcargo 2.8.4 rust-cssparser-color (0.6.0-1) unstable; urgency=medium . * Package cssparser-color 0.6.0 from crates.io using debcargo 2.8.4 * Drop relax-deps.patch; upstream depends on cssparser 0.38. * Drop compat-cssparser-0.38.patch; upstream uses the 0.38 parser. rust-darling (0.24.1-1) unstable; urgency=medium . * Team upload. * Package darling 0.24.1 from crates.io using debcargo 2.8.4 rust-darling-core (0.24.1-1) unstable; urgency=medium . * Team upload. * Package darling_core 0.24.1 from crates.io using debcargo 2.8.4 rust-darling-macro (0.24.1-1) unstable; urgency=medium . * Team upload. * Package darling_macro 0.24.1 from crates.io using debcargo 2.8.4 rust-databake-derive (0.2.2-1) unstable; urgency=medium . * Team upload. * Package databake-derive 0.2.2 from crates.io using debcargo 2.8.4 rust-derive-builder-core (0.20.2-4) unstable; urgency=medium . * Team upload. * Package derive_builder_core 0.20.2 from crates.io using debcargo 2.8.4 * Add breaks on old version of librust-derive-builder-macro-dev. rust-derive-builder-core (0.20.2-3) unstable; urgency=medium . * Team upload. * Package derive_builder_core 0.20.2 from crates.io using debcargo 2.8.4 * Port to syn 3 and darling >= 0.24, < 0.25. rust-derive-builder-macro (0.20.2-3) unstable; urgency=medium . * Team upload. * Package derive_builder_macro 0.20.2 from crates.io using debcargo 2.8.4 * Depend on version of rust-derive-builder-core that is built against syn 3. rust-derive-builder-macro (0.20.2-2) unstable; urgency=medium . * Team upload. * Package derive_builder_macro 0.20.2 from crates.io using debcargo 2.8.4 * Bump syn to 3. rust-dsl-auto-type (0.2.0-3) unstable; urgency=medium . * Team upload. * Package dsl_auto_type 0.2.0 from crates.io using debcargo 2.8.4 * Relax darling to >= 0.24, < 0.25. * Port to syn 3. rust-enumset-derive (0.15.0-2) unstable; urgency=medium . * Team upload. * Package enumset_derive 0.15.0 from crates.io using debcargo 2.8.4 * Relax darling to >= 0.24, < 0.25. * Bump syn to 3. rust-fun-time-derive (0.3.4-3) unstable; urgency=medium . * Team upload. * Package fun_time_derive 0.3.4 from crates.io using debcargo 2.8.4 * Relax darling to >= 0.24, < 0.25. * Port to syn 3. rust-get-size-derive2 (0.11.1-1) unstable; urgency=medium . * Team upload. * Package get-size-derive2 0.11.1 from crates.io using debcargo 2.8.4 * Drop the attribute-derive and syn relax; upstream now requires them. rust-get-size-derive2 (0.11.0-2) unstable; urgency=medium . * Team upload. * Package get-size-derive2 0.11.0 from crates.io using debcargo 2.8.4 * Relax attribute-derive to 0.11 and port to syn 3. rust-get-size2 (0.11.1-1) unstable; urgency=medium . * Team upload. * Package get-size2 0.11.1 from crates.io using debcargo 2.8.4 * Gate the arcstr and uuid feature tests. rust-hexyl (0.16.0+ds-1) unstable; urgency=medium . * Team upload. * Repack to exclude tests/examples/hello_world_elf64, a prebuilt amd64 binary without source (Closes: #1128788). * Patch the tests that only need some input to use the text example or the ELF header on stdin; skip the rest when the binary is absent. * Package hexyl 0.16.0 from crates.io using debcargo 2.8.4 rust-hexyl (0.16.0-4) unstable; urgency=medium . * Team upload. * Fix d/rules overrides (Closes: #1121665) rust-hexyl (0.16.0-3) unstable; urgency=medium . * Team upload. * d/rules: Really fix stripping of test files rust-hexyl (0.16.0-2) unstable; urgency=medium . * Team upload. * d/rules: Don't strip test files (Closes: #1121665) rust-hexyl (0.16.0-1) unstable; urgency=medium . * Team upload * Package hexyl 0.16.0 from crates.io using debcargo 2.7.11 rust-hexyl (0.8.0-2) unstable; urgency=medium . * Package hexyl 0.8.0 from crates.io using debcargo 2.4.3 rust-hexyl (0.8.0-1) unstable; urgency=medium . * Package hexyl 0.8.0 from crates.io using debcargo 2.4.3 rust-hexyl (0.7.0-1) unstable; urgency=medium . * Package hexyl 0.7.0 from crates.io using debcargo 2.4.2 rust-hexyl (0.6.0-2) unstable; urgency=medium . * Package hexyl 0.6.0 from crates.io using debcargo 2.4.0 * Source-only reupload for transition to testing rust-hexyl (0.6.0-1) unstable; urgency=medium . * Package hexyl 0.6.0 from crates.io using debcargo 2.4.0 rust-hexyl (0.5.1-1) unstable; urgency=medium . * Package hexyl 0.5.1 from crates.io using debcargo 2.3.1-alpha.0 rust-hexyl (0.4.0-1) unstable; urgency=medium . * Package hexyl 0.4.0 from crates.io using debcargo 2.2.9 rust-hexyl (0.3.1-1) unstable; urgency=medium . * Package hexyl 0.3.1 from crates.io using debcargo 2.2.9 rust-hexyl (0.2.0-2) unstable; urgency=medium . * Run tests at build * Package hexyl 0.2.0 from crates.io using debcargo 2.2.9 rust-hexyl (0.2.0-1) unstable; urgency=medium . * Package hexyl 0.2.0 from crates.io using debcargo 2.2.9 Closes: #913783 rust-html2md (0.2.17-1) unstable; urgency=medium . * Team upload. * Package html2md 0.2.17 from crates.io using debcargo 2.8.4 * Relax html5ever to 0.40. * Relax markup5ever_rcdom to 0.35. * Drop obsolete indoc, pretty_assertions, and lazy_static hunks. * Drop fix-test-typo; upstream 03b8a098 is in 0.2.17. rust-html2pango (0.6.0-5) unstable; urgency=medium . * Team upload. * Package html2pango 0.6.0 from crates.io using debcargo 2.8.4 * Build against html5ever 0.40. rust-html2text (0.17.1-2) unstable; urgency=medium . * Team upload. * Package html2text 0.17.1 from crates.io using debcargo 2.8.4 * Build against html5ever 0.40 and xml5ever 0.40. rust-html5ever (0.40.1+ds-1) unstable; urgency=medium . * Team upload. * Package html5ever 0.40.1 from crates.io using debcargo 2.8.4 rust-html5gum (0.8.4-2) unstable; urgency=medium . * Team upload. * Package html5gum 0.8.4 from crates.io using debcargo 2.8.4 * Rearrange patches for easier testing. * Add patch to support html5ever 0.40. rust-http-range (0.1.6-1) unstable; urgency=medium . * Package http-range 0.1.6 from crates.io using debcargo 2.8.4 rust-imap-codec (2.0.0~alpha10+ds-1) unstable; urgency=medium . [ upstream ] * new prerelease(s) . [ Jonas Smedegaard ] * update watch file: + capitalize file format field label + stop set auto-mangling of upstream version (now done by default) * bump project versions in autopkgtests * unfuzz patches * reorganize patch naming * add patches 2002_older_abnf-core 2002_older_base64 to accept older versions of crates * tighten (build-, autopkgtest-)dependencies * provide and autopkgtest imap-types features ext_list_extended ext_status_size ext_within; provide and autopkgtest imap-codec features ext_list_extended ext_status_size ext_within quirk_body_fld_param_value_nil rust-instability (0.3.14-1) unstable; urgency=medium . * Team upload. * Package instability 0.3.14 from crates.io using debcargo 2.8.4 rust-libsqlite3-sys (0.38.2+ds-2) unstable; urgency=medium . * Team upload. * Package libsqlite3-sys 0.38.2 from crates.io using debcargo 2.8.4 * Cherry-pick upstream prettyplease 0.3 and syn 3 fixes. rust-lol-html (3.0.1-4) unstable; urgency=medium . * Package lol_html 3.0.1 from crates.io using debcargo 2.8.4 * Build against cssparser 0.38, selectors 0.41, and html5ever 0.40. rust-macrotest (1.2.1-2) unstable; urgency=medium . * Team upload. * Package macrotest 1.2.1 from crates.io using debcargo 2.8.4 * Cherry-pick upstream syn 3 bump. * Use prettyplease 0.3. rust-manyhow (0.14.0-1) unstable; urgency=medium . * Team upload. * Package manyhow 0.14.0 from crates.io using debcargo 2.8.4 * Drop the syn2 test override; upstream 0.14 removed that feature. rust-manyhow-macros (0.14.0-1) unstable; urgency=medium . * Team upload. * Package manyhow-macros 0.14.0 from crates.io using debcargo 2.8.4 rust-markup5ever (0.40.0-1) unstable; urgency=medium . * Team upload. * Package markup5ever 0.40.0 from crates.io using debcargo 2.8.4 * Drop relax-deps.patch; tendril 0.5 is upstream. rust-markup5ever-rcdom (0.35.0+ds-3) unstable; urgency=medium . * Team upload. * Package markup5ever_rcdom 0.35.0+unofficial from crates.io using debcargo 2.8.4 * Add breaks on old version of librust-html2md-dev to help britney's autopkgtest scheduler. rust-markup5ever-rcdom (0.35.0+ds-2) unstable; urgency=medium . * Team upload. * Build against html5ever, markup5ever, and xml5ever 0.40. * Fill Tag.had_duplicate_attributes for html5ever 0.40. * Expect html5ever 0.40 attribute escaping in serializer tests. * Skip html5lib and xml5lib tests when fixtures are excluded. * Package markup5ever_rcdom 0.35.0+unofficial from crates.io using debcargo 2.8.4 rust-multihash-derive-impl (0.1.3-2) unstable; urgency=medium . * Team upload. * Package multihash-derive-impl 0.1.3 from crates.io using debcargo 2.8.4 * Port to syn 3. * Relax synstructure to 0.14. rust-negentropy (0.5.3-1) unstable; urgency=medium . * Package negentropy 0.5.3 from crates.io using debcargo 2.8.3 rust-planus (1.3.0-2) unstable; urgency=medium . * Port the test dependency to Rand 0.10 and import its RngExt trait. * Ignore four doctests requiring the unshipped planus-example workspace crate. rust-planus (1.3.0-1) unstable; urgency=medium . * Initial upload (Closes: #1147501) * Package planus 1.3.0 from crates.io using debcargo 2.8.4 rust-polars-arrow-format (0.2.1-1) unstable; urgency=medium . * Initial upload (Closes: #1147539) * Package polars-arrow-format 0.2.1 from crates.io using debcargo 2.8.4 . * Use Debian's Prost 0.14 for Flight data messages. * Defer Flight service bindings requiring obsolete Tonic 0.8. * Add IPC and Flight-data serialization round-trip tests. * Port the IPC bindings to Debian's Planus 1.3.0 runtime after verifying runtime source compatibility and cross-version serialization. * Declare dependencies needed to build and test both supported interfaces. * Attribute Debian's compatibility tests and remove obsolete Flight service modules and documentation. rust-prettyplease (0.3.0-1) unstable; urgency=medium . * Team upload. * Package prettyplease 0.3.0 from crates.io using debcargo 2.8.4 rust-prost-build (0.14.4-3) unstable; urgency=medium . * Team upload. * Package prost-build 0.14.4 from crates.io using debcargo 2.8.4 * Use prettyplease 0.3 and syn 3. rust-quote-use (0.9.0-1) unstable; urgency=medium . * Team upload. * Package quote-use 0.9.0 from crates.io using debcargo 2.8.4 rust-quote-use-macros (0.9.0-1) unstable; urgency=medium . * Team upload. * Package quote-use-macros 0.9.0 from crates.io using debcargo 2.8.4 rust-rename-item (0.1.1-2) unstable; urgency=medium . * Team upload. * Package rename-item 0.1.1 from crates.io using debcargo 2.8.4 * Relax darling to 0.24. * Port to syn 3. rust-rhai (1.27.0-1) unstable; urgency=medium . * Team upload. * Package rhai 1.27.0 from crates.io using debcargo 2.8.4 rust-rhai-codegen (3.3.0-1) unstable; urgency=medium . * Team upload. * Package rhai_codegen 3.3.0 from crates.io using debcargo 2.8.4 rust-rmcp-macros (3.3.0-1) unstable; urgency=medium . * Package rmcp-macros 3.3.0 from crates.io using debcargo 2.8.4 rust-ruma-common (0.14.1+ds-17.1) unstable; urgency=medium . * Non-maintainer upload (Closes: #1150477). * Build against html5ever 0.40. rust-rustemo (0.9.1+ds-5) unstable; urgency=medium . * relax patches 1002_newer_prettyplease 1002_newer_syn; tighten (build-)dependencies for crates prettyplease syn; closes: bug#1149933, thanks to Simon Quigley rust-scraper (0.27.0-3) unstable; urgency=medium . * Team upload. * Package scraper 0.27.0 from crates.io using debcargo 2.8.4 * Build against cssparser 0.38, html5ever 0.40, and selectors 0.41. rust-selectors (0.41.0-1) unstable; urgency=medium . * Team upload. * Package selectors 0.41.0 from crates.io using debcargo 2.8.4 * Relax servo_arc to >= 0.4.3, < 0.6. * Keep the to_shmem feature; to_shmem 0.6.0 uses cssparser 0.38. * Drop relax-to-shmem-derive.patch; upstream is already 0.2. rust-selectors (0.40.0-2) unstable; urgency=medium . * Team upload. * Package selectors 0.40.0 from crates.io using debcargo 2.8.4 * Relax to_shmem_derive to 0.2. rust-serde-sarif (0.8.0-5) unstable; urgency=medium . * Team upload. * Package serde-sarif 0.8.0 from crates.io using debcargo 2.8.4 * Use prettyplease 0.3 and syn 3. rust-serde-with (3.24.0-1) unstable; urgency=medium . * Team upload. * Package serde_with 3.24.0 from crates.io using debcargo 2.8.4 * Drop the unpackaged jsonschema dev-dependency. * Relax ron to >= 0.12, < 0.13. * Relax document-features to >= 0.2.11, < 0.3. * Match base64 0.22 decode error text in tests. rust-serde-with-macros (3.24.0-1) unstable; urgency=medium . * Team upload. * Package serde_with_macros 3.24.0 from crates.io using debcargo 2.8.4 rust-synstructure (0.14.0-1) unstable; urgency=medium . * Team upload. * Package synstructure 0.14.0 from crates.io using debcargo 2.8.4 rust-taffy (0.14.0-2) unstable; urgency=medium . * Team upload. * Package taffy 0.14.0 from crates.io using debcargo 2.8.4 * Accept 32-bit sizes in the style size test. rust-taffy (0.14.0-1) unstable; urgency=medium . * Team upload. * Package taffy 0.14.0 from crates.io using debcargo 2.8.4 * Build against cssparser 0.38. * Downgrade roxmltree to 0.20. rust-taffy (0.12.2-1) unstable; urgency=medium . * Package taffy 0.12.2 from crates.io using debcargo 2.8.4 rust-to-shmem (0.6.0-1) unstable; urgency=medium . * Package to_shmem 0.6.0 from crates.io using debcargo 2.8.4 * Relax servo_arc to >= 0.4.3, < 0.6. * Relax string_cache to >= 0.8, < 0.10. rust-to-shmem-derive (0.2.0-1) unstable; urgency=medium . * Package to_shmem_derive 0.2.0 from crates.io using debcargo 2.8.4 * Relax darling to 0.24. * Port to syn 3. * Require synstructure 0.14. rust-tonic (0.14.5+dfsg-5) unstable; urgency=medium . * rename, split and refine NMU patch * update copyright info: update coverage * update watch file: capitalize file format field label rust-tonic (0.14.5+dfsg-4.1) unstable; urgency=medium . * Non-maintainer upload (Closes: #1149934). * Use prettyplease 0.3 and syn 3. rust-uefi (0.41.0-1) unstable; urgency=medium . * Team upload. * Package uefi 0.41.0 from crates.io using debcargo 2.8.4 rust-uefi-macros (0.20.0-1) unstable; urgency=medium . * Team upload. * Package uefi-macros 0.20.0 from crates.io using debcargo 2.8.4 rust-uefi-raw (0.17.0-1) unstable; urgency=medium . * Team upload. * Package uefi-raw 0.17.0 from crates.io using debcargo 2.8.4 rust-validator-derive (0.20.1-1) unstable; urgency=medium . * Team upload. * Package validator_derive 0.20.1 from crates.io using debcargo 2.8.4 * Relax darling to 0.24. * Port to syn 3. * Drop drop-nightly-features.patch in favor of remove_features. rust-vulcano-number (0.1.0-1) unstable; urgency=medium . * Package vulcano-number 0.1.0 from crates.io using debcargo 2.8.3 rust-web-atoms (0.3.0-1) unstable; urgency=medium . * Team upload. * Package web_atoms 0.3.0 from crates.io using debcargo 2.8.4 * Relax phf and phf_codegen to 0.11. * Relax string_cache to 0.8 and string_cache_codegen to 0.5. * Pass &str into phf_codegen::Map::entry for phf 0.11. rust-wrapcenum-derive (0.4.1-1) unstable; urgency=medium . * Team upload. * Package wrapcenum-derive 0.4.1 from crates.io using debcargo 2.8.4 * Relax darling to 0.24. * Port to syn 3. rust-xml5ever (0.40.0-1) unstable; urgency=medium . * Team upload. * Package xml5ever 0.40.0 from crates.io using debcargo 2.8.4 rust-yoke-derive (0.8.4-1) unstable; urgency=medium . * Team upload. * Package yoke-derive 0.8.4 from crates.io using debcargo 2.8.4 rust-zerofrom-derive (0.1.8-1) unstable; urgency=medium . * Team upload. * Package zerofrom-derive 0.1.8 from crates.io using debcargo 2.8.4 scantpaper (4.0.3-1) unstable; urgency=medium . * New upstream release. Removed all patches, as upstreamed. Build-Depends-Indep: +python3-tomli, +python3-typing-extensions (>= 4.4.0) Depends: +python3-tomli, +python3-typing-extensions (>= 4.4.0) debian/tests/control: updated Closes: #1150922 (no doc about device blacklist) Closes: #1151056 (a grey transparent rectangle appears on the scanned page) schism (2:20261102-4) unstable; urgency=medium . * Really fix FTBFS on powerpc archs schism (2:20261102-3) unstable; urgency=medium . * Refresh patchset * Fix FTBFS on powerpc architectures schism (2:20261102-2) unstable; urgency=medium . * Fall back to a POSIX timer backend when SDL timer init fails * Add autopktests: cli and headless-export * Update git repository layout to follow DEP-14 * Remove redundant priority optional field * Update d/watch to version 5 * Bump my d/copyright year * Bump dh-compat to 14 schism (2:20261102-1) unstable; urgency=medium . * New upstream release. * d/watch: updated. schism (2:20260524-1) unstable; urgency=medium . * New upstream version. * Bump standards version to 4.7.4. * d/copyright: bump years. schism (2:20251014-1) unstable; urgency=medium . * New upstream version 20251014 * Remove redudant rules-requires-root-no field schism (2:20250825-1) unstable; urgency=medium . * New upstream version 20250825 * Refresh reproducible patch schism (2:20250313-2) unstable; urgency=medium . * Make the build reproducible, thanks to Chris Lamb (Closes: #1103797) * Bump Standards-Version to 4.7.2 schism (2:20250313-1) unstable; urgency=medium . * New upstream version 20250313 schism (2:20250307-1) unstable; urgency=medium . * New upstream version 20250307 * Remove obsolete lintian-overrides schism (2:20250208-1) unstable; urgency=medium . * New upstream version 20250208 * Add myself to d/copyright holders schism (2:20241226-1) unstable; urgency=medium . * New upstream version 20241226 schism (2:20241021-1) unstable; urgency=medium . * New upstream version 20241021 * Drop PATH_MAX applied by upstream schism (2:20240909-1) unstable; urgency=medium . * New upstream version 20240909 * Add libutf8proc-dev to B-Ds schism (2:20240809-1) unstable; urgency=medium . * New upstream version 20240809 * Drop use of PATH_MAX on non Windows platforms (Closes: #1076285) Thanks to Petter Reinholdtsen for the patch schism (2:20240630-1) unstable; urgency=medium . * New upstream version 20240630 schism (2:20240614-1) unstable; urgency=medium . * New upstream version 20240614 schism (2:20240529-1) unstable; urgency=medium . * New upstream version 20240529 schism (2:20240503-1) unstable; urgency=medium . * New upstream version 20240503 schism (2:20240426-1) unstable; urgency=medium . * New upstream version. * Bump standards version to 4.7.0. * d/copyright: bump years. schism (2:20240409-1) unstable; urgency=medium . [ Dennis Braun ] * New upstream version 20240409 . [ Denys Nykula ] * Add libflac-dev B-D schism (2:20240328-1) unstable; urgency=medium . * New uptream version. schism (2:20240308-1) unstable; urgency=medium . * New upstream version 20240308 * Use the default ci config from salsa schism (2:20240129-1) unstable; urgency=medium . * New upstream version. * d/copyright: bump years. schism (2:20231029-1) unstable; urgency=medium . * New upstream version. schism (2:20230906-1) unstable; urgency=medium . [ Debian Janitor ] * Use secure URI in Homepage field. * Update standards version to 4.6.2, no changes needed. . [ Dennis Braun ] * New upstream version 20230906 schism (2:20221201-1) unstable; urgency=medium . * New upstream version 20221201 * d/control: + Apply wrap-and-sort -ast + Add myself as uploader + Remove obsolete libsdl1.2-dev B-D + Mark python3 B-D as native to fix cross-building * Add lintian-overrides * d/rules: + Add hardening + Remove obsolete dh flag --with-autoreconf, it's default * Add salsa ci config schism (2:20221020-1) unstable; urgency=medium . * New upstream version. schism (2:20220905-1) unstable; urgency=medium . * New upstream version. * d/copyright: bump years. * Bump standards version to 4.6.1. schism (2:20220807-2) unstable; urgency=medium . * d/control: Add libsdl2-dev to build-depends. schism (2:20220807-1) unstable; urgency=medium . * New upstream version. schism (2:20220506-1) unstable; urgency=medium . * New upstream version. schism (2:20220125-1) unstable; urgency=medium . * New upstream version. * d/watch: drop template part. schism (2:20211116-1) unstable; urgency=medium . * New upstream version. * Bump standards version to 4.6.0. * Update maintainer address. schism (2:20210525-2) unstable; urgency=medium . * Upload to unstable. schism (2:20210525-1) experimental; urgency=medium . * New upstream version. * Bump standards version to 4.5.1. * Bump debhelper version to 13, drop d/compat. * d/upstream/metadata: added. * d/copyright: modernised and updated copyright years. schism (2:20200412-1) unstable; urgency=medium . * New upstream version. * Bump standards version to 4.5.0. schism (2:20190805-3) unstable; urgency=medium . * Team upload. * Use Python 3 to build (Closes: #938442) * Add Rules-Requires-Root: no. schism (2:20190805-2) unstable; urgency=medium . * Bump standards version to 4.4.1. * Fix Vcs fields. schism (2:20190805-1) unstable; urgency=medium . * New upstream version. (Closes: #933807, #933808, #933809) - fmt_mtm_load_song in fmt/mtm.c (CVE-2019-14465) - heap-based buffer overflow via a large number of song patterns in fmt_mtm_load_song in fmt/mtm.c (CVE-2019-14524) - integer underflow via a large plen in fmt_okt_load_song in the Amiga Oktalyzer parser in fmt/okt.c (CVE-2019-14523) schism (2:20190722-1) unstable; urgency=medium . * New upstream version. * debian/patches: dropped. schism (2:20190614-2) unstable; urgency=medium . * Upload to unstable. schism (2:20190614-1) experimental; urgency=medium . * New upstream version. * debian/control: update Vcs links. * Bump standards version to 4.2.1. schism (2:20181223-1) unstable; urgency=medium . * New upstream version. schism (2:20180810-2) unstable; urgency=medium . * Patch fixing build on GNU/Hurd. schism (2:20180810-1) unstable; urgency=medium . * New upstream version. schism (2:20180513-1) unstable; urgency=medium . * New upstream version. schism (2:20180209-1) unstable; urgency=medium . * New upstream version. * Bump debhelper version to 11. * Bump standards version to 4.1.3. * debian/watch: updated. * debian/menu: dropped. schism (2:20170910-1) unstable; urgency=medium . * New upstream version. * Bump debhelper version to 10. * Bump standards version to 4.1.1. * debian/control: update Suggests. * debian/install: added to install desktop files. schism (2:20160521-1) unstable; urgency=low . * New upstream version. (Closes: #730571) * Bump standards version to 3.9.8. * Drop debian/patches, not needed anymore. * Drop debian/schism.1 and manpages, upstream ships a better one. * debian/rules: add debian hardening for schismtracker. * Upstream renamed schism binary to schismtracker. * Updated debian/menu. * Change my name. schism (2:0+20110101-1) unstable; urgency=low * New upstream snapshot. * Refresh 01-binutils_gold.patch. * Update debian/copyright. schism (2:0+20100202-2) unstable; urgency=low * Upload to unstable. schism (2:0+20100202-1) experimental; urgency=low * New upstream release. * Build-Depends on Python. * debian/rules: - Create auto directory before calling dh_auto_build in order to prevent FTBFS. - Install NEWS file as upstream's changelog. * Refresh patches. * Update debian/gbp.conf file. schism (2:0+20090817-2) unstable; urgency=low * Update Maintainer: - The Debian Multimedia team is currently merging with the Debian Multimedia Maintainers team (http://wiki.debian.org/DebianMultimedia). - Add myself as uploader. * debian/control: - Wrap long lines. - Add Vcs-* tags. - Update Standards to 3.9.0. * Drop automake from Build-Depends field. * Drop changes to upstream sources from the packaging. * Set format to 3.0 (quilt). * Switch to debhelper 7 + autoreconf add-on. * Add watch file. * Add debian/gbp.conf file. * Add .gitignore file. * debian/copyright: Fix copyright-refers-to-symlink-license warning. * Add patch to fix FTBFS with binutils-gold (Closes: #556337). schism (2:0+20090817-1.1) unstable; urgency=low * Non-maintainer upload. * Drop build-dependency on libxxf86misc-dev (closes: #559692) schism (2:0+20090817-1) unstable; urgency=low * New upstream version. * Bump standards version. * Drop dh_desktop call. * Updated homepage. schism (2:0+20090126-1) unstable; urgency=low * New upstream version. * Bump debhelper version. * Update debian/copyright. * Removed build dependency libxkbsel-dev. * Changed recommends and updated it to suggests. (Closes: #476898) schism (2:0+20071208-1) unstable; urgency=low * New upstream version, fixes GNU/kFreeBSD build problems. * debian/control: + Updated build-depends. (Closes: #453235) + Updated standards version. schism (2:0+20071117-1) unstable; urgency=low * New upstream version. * debian/copyright: Reformatted. * debian/rules: Install desktop and icon files. * debian/menu: Added font editor entry. schism (1:0.5rc1-1) unstable; urgency=low * New upstream version. schism (2+20061221-1) unstable; urgency=low * New upstream tarball. schism (2+20061016-1) unstable; urgency=low * New upstream version. (Closes: #376836) * New upstream author, updated homepage. * New maintainer, with Simons' approval. * Bump debian standards version. * Added to menu. * Updated FSF address in debian/copyright. * Created a manual page. schism (0.2a-3) unstable; urgency=low * Build with gcc 4.0+ fixed (Closes: #314816) schism (0.2a-2) unstable; urgency=low * Using fixed SysV types instead of platform dependent ones schism (0.2a-1) unstable; urgency=low * Initial release. sepp (4.5.5+dfsg-3) unstable; urgency=medium . * Team Upload * Patch-out usage of pkg_resources (Closes: #1147857) * Salsa CI: disable useless ALL, ANY & I386, enable "nocheck" * Drop "Rules-Requires-Root: no": it is the default now sepp (4.5.5+dfsg-2) unstable; urgency=medium . * Raising Standards version to 4.7.2 (no change) * Removing the nocheck annotation from the pplacer and hmmer B-D (Closes: #1116910) sepp (4.5.5+dfsg-1) unstable; urgency=medium . * New upstream version 4.5.5+dfsg sepp (4.5.4+dfsg-1) unstable; urgency=medium . * New upstream version 4.5.4+dfsg * Refreshing patches sepp (4.5.1+really4.5.1+dfsg-6) unstable; urgency=medium . * Fixing wrong import from dendropy (Closes: #1071780) * Raising Standards version to 4.7.0 (no change) sepp (4.5.1+really4.5.1+dfsg-5) unstable; urgency=medium . * Dropping "U" mode from open() invocations, thanks to Steve Langasek! (Closes: #1029580) * Standards-Version: 4.6.2 (routine-update) sepp (4.5.1+really4.5.1+dfsg-4) unstable; urgency=medium . * Updating d/watch after a change in the Github layout * Raising Standards version to 4.6.1 (no change) * Updating Lintian overrides syntax sepp (4.5.1+really4.5.1+dfsg-3) unstable; urgency=medium . [ Andreas Hasenack ] * Fix collections import under py3.10+ Closes: #1004968 . [ Andreas Tille ] * Packaging update sepp (4.5.1+really4.5.1+dfsg-2) unstable; urgency=medium . * Upload to unstable, tipp has now exited NEW * Setting the package as Architecture: any again sepp (4.5.1+really4.5.1+dfsg-1~exp1) experimental; urgency=medium . * Setting the package as Architecture: all sepp (4.5.1+really4.5.1+dfsg-1~exp0) experimental; urgency=medium . * New upstream version 4.5.1+really4.5.1+dfsg * Having the same packaging contents as version 4.5.1+dfsg-1, which was mistakingly not uploaded to experimental * Adding sepp.maintscript to remove the config file of tipp sepp (4.5.1+really4.3.10+dfsg-1) unstable; urgency=medium . * New upstream version 4.5.1+really4.3.10+dfsg * Revert changes brought from 4.3.10 to 4.5.1 as we are not ready to ship 4.5.1 yet, we need the new source package tipp to be available first in order to avoid removing some files we ship. sepp (4.5.1+dfsg-1) unstable; urgency=medium . [Pierre Gruet] * New upstream version 4.5.1+dfsg * Updating d/watch for Github new release/tag page * tipp is now shipped in another package: - deleting information related to tipp in the debian/ folder - adding d/sepp.maintscript to remove /etc/sepp/tipp/config * Raising Standards version to 4.6.0 (no change) * Refreshing patches, deleting three upstreamed ones * Using the Debian path of hmmbuild in the test testUPP * Putting again dh_auto_configure in its own override * Refreshing manpages of run-sepp.py and run_sepp.py * Dropping unneeded dependencies . [Steffen Moeller] * Fixed omitted invocation of unversioned 'python' in run-sepp.sh sepp (4.3.10+dfsg-5) unstable; urgency=medium . * Merging d/sepp.install and d/install * Adding manpage for run-sepp.sh * Fixing typo in d/u/metadata sepp (4.3.10+dfsg-4) unstable; urgency=medium . * Team upload. * Now truly also bringing d/sepp.install to salsa * d/rules clean: Allowing for repeated builds cleaning *.jar *.class sepp (4.3.10+dfsg-3) unstable; urgency=medium . * Team upload. * Also redistributing sepp-package/run-sepp.sh which is expected by q2-fragment-insertion. * Bumped policy-compliance to 4.5.1. sepp (4.3.10+dfsg-2) unstable; urgency=medium . * Remove trailing whitespace in debian/rules (routine-update) sepp (4.3.10+dfsg-1) unstable; urgency=medium . * Initial release (Closes: #971870) sludge (2.3.1-2) unstable; urgency=medium . * debian/copyright: List source/CommonCode/utf8.cpp and utf8.h as public domain by Jeff Bezanson, and The WebM project authors as a holder of libwebm. smarty4 (4.5.8-1) unstable; urgency=medium . * New upstream release. - CVE-2026-62992: Fix resolving symbolic links in Security::_checkDir() before validating that a requested path lies within a configured secure directory.(Closes: #1145020). - CVE-2026-62993: Fix validating the initial remote URL against trusted_uri under all circumstances when a security policy is active. (Closes: #1150507). - CVE-2026-82531: Fix code injection vulnerability. (Closes: #1150192). * debian/control: + Bump Standards-Version: to 4.7.4; drop Priority: field; drop R³: field. * debian/watch: + Switch to format version 5. ssocr (2.26.0-1) unstable; urgency=medium . * New upstream release. * Bump standards version to 4.7.4. * d/watch: updated. tasmanian (8.2-5) unstable; urgency=medium . * Add missing Breaks/Replaces for libtasmanian-doc. It took over some files from libtasmanian-dev. (Closes: #1153216) tinyalsa (2.0.0+git20241128-1) unstable; urgency=medium . * Initial release (Closes: #1079473). tipp (1.0+dfsg-5) unstable; urgency=medium . * Team upload. * Patch-out usage of pkg_resources (Closes: #1127481) * Use dh-sequence-python3 * Disable useless Salsa CI jobs tipp (1.0+dfsg-4) unstable; urgency=medium . * Team upload. * Fix clean target. * Drop "Rules-Requires-Root: no" (default). * Drop "Priority: optional" (default). * Update standards-version. * Simplify salsa-ci.yml. tipp (1.0+dfsg-3) unstable; urgency=medium . * Updating d/watch after a change in the Github layout * Raising Standards version to 4.6.1 (no change) * Updating Lintian overrides after a change in their syntax tipp (1.0+dfsg-2) unstable; urgency=medium . * Source-only upload to unstable tipp (1.0+dfsg-1) experimental; urgency=medium . * Initial release (Closes: #995294) tuxguitar (2.1.1+dfsg1-1) unstable; urgency=medium . * QA upload. * New upstream release * Fix CVE-2026-55543 (Closes: #1151103) * debian/control: Add dependency on libitext5-java (Closes: #1137657) * Update debhelper-compat to 14 * Update Standards-Version to 4.7.4 (no changes) * debian/patches/: - 11-eclipse-swt.patch updated - 15-path-to-lv2.patch updated - 16-fix-cflags.patch updated - 26-tuxguitar-sh.patch updated - 29-libcommons-compress-java.patch added for building with libcommons-compress-java 1.28.0 (Closes: #1151834) - real-version.patch updated, patching of help files added * debian/rules: Patching of help files removed * debian/watch: Update to version 5 * debian/tuxguitar.links: Added links for "Create New" desktop menu virtme-ng (1.42-1) unstable; urgency=medium . * Uprev upstream package. witr (0.3.4+ds-1) unstable; urgency=medium . * New upstream version 0.3.4+ds * Patch to remove imports suffix * Update Build-Depends xen (4.20.4+63-g7abfd2bce2-1) unstable; urgency=medium . * Update to new upstream version 4.20.4+63-g7abfd2bce2, which also contains security fixes for the following issues: - arbitrary read/write via grant copy XSA-523 CVE-2026-102703 CVE-2026-102704 xfe (2.1.13-1) unstable; urgency=medium . * New upstream release: - Fixes several minor bugs. - Update of dutch translation. xpadneo-dkms (0.10.5-1) unstable; urgency=medium . * New upstream release. * d/rules: Filter out new documentation from DKMS source tree. xymon (4.3.31-1) unstable; urgency=medium . * New upstream version 4.3.31. * This Closes: #579739, #609179, #867341, #1007003. * The following patches are now incorporated upstream: 03_doc-paths, 09_hobbitclient-debian, 21_FHS-instead-FSSTND-in-example-in-man-page, 24_hobbitclient-tmpfs, 27_hobbit_files_ifexist, 33_526176-ldap, 42_bbcombotest-fix, 51_hardening-buildflags, 92_ntpdate_ntpdig, 93_pcre2, 94_nousemultipart, 95_fix_tls13_banner, 96_manual-backslash, 97_makehtml, 98_man_fb, 99_man_typos, 100_md5_bufferoverflow, 101_rrdtool1.9, 102_ldap_url_parse, 103_openssl4. * 92_ntpdate_ntpdig: No longer needed, since sntp is used now. * Update debian/watch to point to new github upstream. * Use mandoc, python3 instead of man2html on building man pages. * Adapt makehtml.sh call in debian/rules. * Revert MAKEFLAGS=-j1, since dependencies are fixed upstream now. * Revert clientlaunch.d, tasks.d, graphs.d, xymonserver.d, xymonclient.d (all implemented upstream) and update 12_hobbitvars.patch. * Update all other patches to new version. * Remove debian/clean, since this is fixed upstream. * Update debian/upstream/metadata. * Add autopkgtest testsuite using upstream testsuite. * Install diagnostic tools to server package. * Revert png to gif fix (fixed upstream). * Install README.backfeed to xymon documentation. * Split 13_apache_access_local.patch out of 12_hobbitvars.patch. * Split 14_gifs_static.patch out of 12_hobbitvars.patch. * Update Headers of 12_hobbitvars.patch. * Remove kfreebsd support artifacts. * Update debian/copyright and add d/lrc.config to support exceptions. * Revert encoding fix for CREDITS (already UTF-8). * Update lintian-overrides. * Update Homepage.