basic256 (2.1.0-1) unstable; urgency=medium . * bump policy * swizzle upstream to new github repo * new upstream release * debian/rules defaults to cmake, no more qmake * update build dependencies, qt5→qt6 * update files installed * deal with icon and generated *.qm files * patches upstreamed except a few straggling stopes boost-defaults (1.90.0.2+nmu1) unstable; urgency=medium . * Non-maintainer upload. * Enable context everywhere. (Closes: #1101477, #1130515) * Disable numpy on x32 until it is available again. boost-defaults (1.90.0.2+nmu1~exp1) experimental; urgency=medium . * Non-maintainer upload. * Enable context everywhere. (see #1101477, #1130515) * Disable numpy on x32 until it is available again. docker-credential-gcr (2.2.1-1) unstable; urgency=medium . * Team upload . [ Maytham Alsudany ] * Fix bug closed by previous changelog entry . [ Simon Josefsson ] * Drop d/.gitignore * Bump compat to 14 * Bump debian/* copyright years * Drop 0002-test-for-semver-version.patch (fixed upstream) * Fix lintian trailing-whitespace * Silence lintian package-has-long-file-name * Add man page . [ Chris Lamb ] * make the build reproducible docker-credential-gcr (2.1.32-1) unstable; urgency=medium . * Initial release (Closes: #1135729) golang-1.26 (1.26.7-1) unstable; urgency=medium . * New upstream version 1.26.7 - Remove patch for failing TestMergeLocalsIntegration - Cherry-pick fix from upstream. Closes: #1144887 golang-1.26 (1.26.6-2) unstable; urgency=medium . * New patch: skip flaky TestMergeLocalsIntegration on s390x and arm golang-1.26 (1.26.6-1) unstable; urgency=medium . * New upstream version 1.26.6 (Closes: #1144341) - CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that cannot be detected by evaluating the transparency log. All tiles are now correctly verified against their parents. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy - CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy - CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. - CVE-2026-56860 Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations. - CVE-2026-56859 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. - CVE-2026-56858 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. - CVE-2026-56853 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. - CVE-2026-33818 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. golang-1.27 (1.27.0-1) unstable; urgency=medium . * New upstream version 1.27.0 * Remove support for DEB_GOMINCOMPAT. golang-1.27 (1.27~rc3-1) unstable; urgency=medium . * New upstream version 1.27~rc3 (Closes: #1144340) - CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that cannot be detected by evaluating the transparency log. All tiles are now correctly verified against their parents. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy - CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy - CVE-2026-56862 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely. - CVE-2026-56860 Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations. - CVE-2026-56859 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. - CVE-2026-56858 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. - CVE-2026-56853 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this. - CVE-2026-33818 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. golang-github-containers-image (5.39.2-3) unstable; urgency=medium . * Skip failing test case in storage transport golang-github-containers-image (5.39.2-3~exp1) experimental; urgency=medium . * Team upload * d/control: - Update XS-Go-Import-Path in to include "v5" component - Update minimum required versions of packages in Build-Depends and Depends golang-github-gucumber-gucumber (0.0~git20180127.7d5c79e-2) unstable; urgency=medium . * Team upload * Create simple go.mod file for use with module-aware builds golang-github-rogpeppe-go-internal (1.16.0-1) unstable; urgency=medium . * Team upload . [ Marcos Talau ] * debian/salsa-ci.yml: Add to provide CI tests for Salsa . [ Simon Josefsson ] * Use Standards-Version: 4.7.4 * Drop Priority: optional * Drop Rules-Requires-Root: no * Use gbp sign-tags * Use gbp upstream-vcs-tag * Bump compat to 14 * Bump debian/* copyright years * Improve test ignores (Closes: #1119927) golang-golang-x-tools (1:0.49.0+ds-1) unstable; urgency=medium . * Team upload golang-golang-x-tools (1:0.48.0+ds-1) unstable; urgency=medium . * Team upload * Use gbp sign-tags * Use compat 14 httrack (3.49.23-1) unstable; urgency=medium . * New upstream release: a header added by hand was sent twice, rebuilding the top index blanked it in place, a URL injected into a running mirror crashed the engine, and WebHTTrack stored several settings under the wrong keys; full list in history.txt. hub (2.14.2~ds2-1) unstable; urgency=medium . * New upstream version 2.14.2~ds2 * Fix d/watch for ds2 . hub (2.14.2~ds1-4) unstable; urgency=medium . * Team upload * Use Standards-Version: 4.7.4 * Use dh-sequence-golang * Use watch v5 * Bump compat to 14 * Bump debian/* copyright years * Use upstream patch to avoid bmizerany/assert (Closes: #1143930) * Back-port internal/assert too * Fix usr/bin/hub install for compat 14 * Use Static-Built-Using * Drop B-D golang-github-bmizerany-assert-dev (Closes: #1143930) * Drop broken pristine-tar branch hyprshade (5.0.0-1.1) unstable; urgency=medium . * Non-maintainer upload to unstuck miogration * Drop unused build-dependencies: - black - python3-mypy - python3-pip - python3-ruff, unblock package migration - python3-setuptools, this uses hatchling * Disable useless Salsa CI jobs, enable job * Mark test build-deps as * Trim whitespace. hyprshade (5.0.0-1) unstable; urgency=medium . * New upstream release * Update VCS URL * Added instructions for package maintenance in README.Debian hyprshade (4.0.1-1) unstable; urgency=medium . * Initial release. (Closes: #1133049) ifupdown (0.8.45+nmu1) unstable; urgency=medium . [ Johannes Schauer Marin Rodrigues ] * Non-maintainer upload with ACK from Santiago Ruano Rincón (Thanks!) * debian/postinst: support $DPKG_ROOT (Closes: #1142787) . [ Luca Boccassi ] * Install and use sysusers.d config file imath (3.2.2-2) unstable; urgency=medium . * Team upload. * Upload to unstable imath (3.2.2-1) experimental; urgency=medium . * Team upload * New upstream version: 3.2.2 * d/*.install: update .so name and path * d/*.lintian-overrides: update package and so name * d/control: replace libimath-3-1-29* with libimath-3-2-30* * d/control: drop the t64 suffix * Drop Provides, Replaces, Breaks that were here to make the suffix work * Drop the lintian overrides * d/p/0002-python3.patch: Patch Python find_package for Python 3 * d/p/0003-fix-sphinx-press-theme-sphinx9-compat.patch: fix doc generation with sphinx9 * Fix dh_numpy running on an empty folder * d/control: fix dh_numpy dependency d/rules: Fix dh_numpy running on an empty folder * Ignore 'privacy-breach-logo' in the CI * Build for every available python version * d/copyright: Add Canonical under debian/*, rename license stanza immich-archiver (0.1.9-1) unstable; urgency=medium . * New upstream version 0.1.9 * Update manpage intel-media-driver-non-free (26.2.4+ds1-1) unstable; urgency=medium . * New upstream version 26.2.4+ds1 * debian/: Bump debhelper compat to 14 * debian/copyright: Bump copyright years * debian/patches: Drop no longer needed patch itk4 (4.2.7~20260303-3) unstable; urgency=medium . * Actually add the tclconfig component to gbp.conf. itk4 (4.2.7~20260303-2) unstable; urgency=medium . * Add the tclconfig component to gbp.conf for convenience. * Update description of the patches. jove (4.17.5.5.77.gfd92a30-1) unstable; urgency=medium . * New upstream release. + excluded old and pkg directory. * add fix to generate Ascii dosumentation, so jove can use them internally. lastz (1.04.52-2) unstable; urgency=medium . * Team upload. [ Étienne Mollier ] * d/patches/*: document forwarding status. . [ Michael R. Crusoe ] * d/rules: build with -std=gnu17 to support glibc 2.43 due to ISO C23 const return types. Closes: 1128615 * Standards-Version: 4.7.4 (routine-update) * Reflow Uploaders field (cme) * Remove Priority field (cme) * Build-Depends: s/dh-python/dh-sequence-python3/ (routine-update) libcatalyst-plugin-static-simple-perl (0.38-1) unstable; urgency=medium . * Team upload. * Import upstream version 0.38. * Update debian/upstream/metadata. * Update years of upstream copyright. * Add patch from CPANSec to fix CVE-2026-15743: "Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable." * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. libdv (1.0.0-18) unstable; urgency=medium . * Adopted the package. Closes: #814889 * Change pkg-config to pkgconf * Change debian/watch version to 5 * Add debian upstream metadata * Remove "Priority" and "Rules-Requires-Root" in debian/control * Change debhelper compat to 14 * Remove "--as-needed" in debian/control * Add myself to debian/copyright libnginx-mod-http-auth-jwt (2.5.0-3) unstable; urgency=medium . * Team upload. * d/t/generic: update, add ABI dependency check * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends * d/control: remove useless dep. libnginx-mod-http-ndk-dev * d/control: mention ECDSA support in the package description * d/copyright: update Debian packaging copyright * d/rules: embed the upstream version in the module binary * d/examples: install the example nginx configuration * d/copyright: fix DEP5 syntax error libnginx-mod-http-eval (0.0~git20260515.72b3276-2) unstable; urgency=medium . * Team upload. * d/t/generic: update, add ABI dependency check * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends * d/t/control: use test-nginx-autopkgtest-command for upstream tests * d/control: remove trailing whitespace libnginx-mod-http-hmac-secure-link (2.0.0-5) unstable; urgency=medium . * d/t/generic: update, add ABI dependency check * d/t/control: use test-nginx-autopkgtest-command for upstream tests * d/t/upstream: remove, replaced by test-nginx-autopkgtest-command * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends * d/control: drop Priority: optional libnginx-mod-http-push-stream (0.6.0+dfsg-6) unstable; urgency=medium . * Team upload. * d/copyright: fix Upstream-Name and typo in copyright holder * d/copyright: add misc/package.json to MIT-licensed files * d/copyright: add packaging copyright holders * d/copyright: rename Expat to MIT libnginx-mod-http-push-stream (0.6.0+dfsg-5) unstable; urgency=medium . * Team upload. * d/gbp.conf: dist = DEP14, debian-branch = debian/latest * d/gbp.conf: upstream-branch = upstream/latest * d/control: remove Rules-Requires-Root: no * d/control: bump Standards-Version: 4.7.4, no changes * d/control: remove dependency nginx-dev (>= 1.24.0-2) * d/control: debhelper-compat (= 14) * d/control: drop Priority: optional * d/t/generic: update, add ABI check * d/watch: rewrite to version 5, use Github uscan-template libnginx-mod-http-set-misc (0.34-2) unstable; urgency=medium . * Team upload. * d/t/control: use test-nginx-autopkgtest-command for upstream tests * d/t/upstream: remove, replaced by test-nginx-autopkgtest-command * d/t/generic: update, add ABI dependency check * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends * d/t/test-nginx-failures: mark quote-sql.t as a known failure, replacing the patch that skipped its set_iconv test * d/p/test-disable-set-iconv.patch remove * d/t/test-nginx-failures: add formatted-time.t as a known failure libnginx-mod-http-srcache-filter (0.34-5) unstable; urgency=medium . * Team upload. * d/t/generic: update, add ABI dependency check * d/t/control: name the Test-Command test "upstream" and require the test-nginx runner version providing it * d/t/README.md: document the remaining upstream test exclusions * d/patches: remove the patch skipping bugs.t test 17 * d/copyright: update Debian packaging copyright holders and years * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends * d/control: drop Priority: optional * d/control: bump Standards-Version: 4.7.4, no changes * d/patches: keep skipping bugs.t test 17 libnginx-mod-http-xss (0.07-4) unstable; urgency=medium . * Team upload. * d/t/generic: update, add ABI dependency check * d/t/control: name the Test-Command test "upstream" * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends libpdl-fftw3-perl (0.204-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump Standards-Version to 4.7.4, no changes. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump minimum required pdl version to 2.105. libpdl-filter-perl (2.098-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-filter-perl (2.098-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Bump minimum required pdl version to 2.105. libpdl-fit-perl (2.101-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Bump minimum required pdl version to 2.105. libpdl-graphics-gnuplot-perl (2.033-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-graphics-gnuplot-perl (2.033-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump Standards-Version to 4.7.4, no changes. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump minimum required pdl version to 2.105. libpdl-graphics-simple-perl (1.017-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-graphics-simple-perl (1.017-1) unstable; urgency=medium . * Team upload. * New upstream release. * Add libpdl-graphics-gnuplot-perl to build dependencies. * Bump Standards-Version to 4.7.4, no changes. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump minimum required pdl version to 2.105. libpdl-io-dicom-perl (2.099-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-io-dicom-perl (2.099-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Bump minimum required pdl version to 2.105. libpdl-io-envi-perl (2.099-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-io-envi-perl (2.099-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump Standards-Version to 4.7.4, no changes. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump minimum required pdl version to 2.105. libpdl-io-hdf-perl (2.004-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Bump minimum required pdl version to 2.105. libpdl-io-idl-perl (2.099-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-io-idl-perl (2.099-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Bump minimum required pdl version to 2.105. libpdl-io-matlab-perl (0.007-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump Standards-Version to 4.7.4, no changes. * Update watch file to use metacpan. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Update gbp.conf to use upstream/ prefix for upstream-tag. * Update copyright file. libpdl-linearalgebra-perl (0.437-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump minimum required pdl version to 2.105. libpdl-opt-simplex-perl (2.098-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-opt-simplex-perl (2.098-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Bump minimum required pdl version to 2.105. libpdl-transform-color-perl (1.011-2) unstable; urgency=medium . * Team upload. * No-change rebuild with PDL 2.106. libpdl-transform-color-perl (1.011-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump Standards-Version to 4.7.4, no changes. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump minimum required pdl version to 2.105. libtsm (4.7.1-0.1) unstable; urgency=medium . * Non-maintainer upload. * New upstream release. * debian/libtsm4.symbols: Updated. libvdeslirp (0.1.4-1) unstable; urgency=medium . * fix cmake cross compilation issue * d/control missing dep on libglib2.0-dev libvdeslirp (0.1.3-1) unstable; urgency=medium . * libslirp 4.9.0 compatibility * man generation update * d/control: Bump Standard version to 4.7.4 * d/control: Bump debhelper compatibility level to 14 llhttp (9.4.3+~cs12.11.9-2) unstable; urgency=medium . * Team upload * Fix build with TypeScript 6 lomiri-terminal-app (2.0.6-2) unstable; urgency=medium . * Team upload . [ Jeremy Bícha ] * Copy user session migration script from ubports . [ Guido Akrum ] * Show in Unity mimalloc (3.5.0+ds-1) unstable; urgency=medium . * New upstream version. mkautodoc (0.2.0-2) unstable; urgency=medium . * Team upload. * d/control: remove unused dependency on black. * Standards-Version: 4.7.4 (routine-update) * Reorder sequence of d/control VCS fields (cme) * Reflow Uploaders field (cme) * Remove Priority field (cme) * Build-Depends: s/dh-python/dh-sequence-python3/ (routine-update) * Update watch file format version to 5. * Use GitHub template in watch file instead of explicit Source/Matching-Pattern. * Set upstream metadata fields: Repository-Browse. * debputy lint --auto-fix (routine-update) mplayer (2:1.5+svn38681-2) unstable; urgency=medium . * update lintian overrides; drop mplayer-doc lintian overrides (alien-tag) * bump S-V to 4.7.3, drop priority optional * bump S-V to 4.7.4, no changes required * d/watch: update to version 5 * quilt: fix typos and spelling errors * d/copyright: update years (2026) * quilt patches: - drop ffmpeg8 patch (partial overlaps with ffmpeg9 patch) - add upstream patch for ffmpeg9 (Closes: #1144019) * use debhelper-compat=14: remove misc:Depends and shlibs:Depends from Depends fields in d/control mxml (4.0.5-1) unstable; urgency=medium . * New upstream release * d/copytight; rename Apache2 -> Apache-2.0 * Drop merged cve-2026-5037.patch node-domhandler (6.0.1-2) unstable; urgency=medium . * Team upload * Upload to unstable node-domhandler (6.0.1-1) experimental; urgency=medium . * Team upload * New upstream version 6.0.1 * Declare compliance with policy 4.7.4 * Drop "Rules-Requires-Root: no" and "Priority: optional" * Upgrade debian/watch to version 5 * Drop obsolete jest-related patches * Patch: drop isolatedDeclarations compiler option (TS 5.5+, not in Debian) * Bump dependency on node-domelementtype to >= 3.0.0 * Add Breaks against pre-bump node-cheerio / node-htmlparser2 * Replace jest/ts-jest tests with a trivial Node smoke test * Simplify debian/rules to a single tsc invocation node-egjs-hammerjs (2.0.17-2) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Use canonical URL in Vcs-Git. * Drop "Rules-Requires-Root: no": it is the default now . [ Chris Lamb ] * make the build reproducible (Closes: #1139655) node-re2 (1.26.1+~cs1.8.0-1) unstable; urgency=medium . * Team upload * Update copyright years * New upstream version: update install-artifact-from-github from 1.7.0 to 1.8.0 ocaml-stdcompat (22.0-1) unstable; urgency=medium . * New upstream release * Bump debhelper compat level to 14 org-mode (9.8.9+dfsg-1) unstable; urgency=medium . * New upstream release. orphan-sysvinit-scripts (0.26) unstable; urgency=medium . * Bump Standards-Version to 4.7.4 (and consequently remove Priority: optional from d/control) . orphan-sysvinit-scripts (0.25) unstable; urgency=medium . * Stop providing gpsd init script (Closes: #1133381) orphan-sysvinit-scripts (0.25) unstable; urgency=medium . * Stop providing gpsd init script (Closes: #1133381) orphan-sysvinit-scripts (0.24) unstable; urgency=medium . * Patch from Johannes Schauer Marin Rodrigues to add DPKG_ROOT support (Closes: #1142015) osmnx (2.1.1+ds-2) unstable; urgency=medium . * Debianization: - d/control: - Build-Depends field, add python3-pytest-xdist. osmnx (2.1.1+ds-1) unstable; urgency=medium . * New upstream minor release. * Debianization: - d/control: - Build-Depends field, add python3-uv-build (Closes: #1107742); - Standards-Version, bump to 4.7.4 (no change); - Priority field, drop; - revamp test machine: - d/rules: - override_dh_auto_test target, discard; - d/t/test_osmnx_offline.py, update; - d/pybuild.testfiles, introduce; - d/p/debianization-tests.patch, introduce; - revamp doc machinery: - d/rules: - override_dh_sphinxdoc target, now provide PYTHONPATH; - d/patches/*: - d/p/debianization.patch, introduce; - d/copyright: - copyright year-tuples, update; - Files-Excluded list, refresh; - d/watch, migrate to version 5. ostree (2026.4-1) unstable; urgency=medium . * New upstream release - Fix regression when downloading large Flatpak apps/runtimes (reopens: #1144105) (Closes: #1144283) * d/p/static-delta-validate-bspatch-payload-offset-and-length.patch: Add post-release patch to fix offset validation. This was an out-of-bounds read when downloading from a malicious/crafted ostree repository, but is not believed to be practically exploitable for anything worse than a crash (denial-of-service). * Mention #1144105, #1144106 in previous changelog entry ostree (2026.3-1) unstable; urgency=medium . * New upstream release - Prevent heap buffer overflow on 32-bit systems if downloading from an attacker-controlled OSTree repository (GHSA-xppc-j946-vcj7, RHEL-189207, no known CVE) - Set memory limits for LZMA decoding to prevent resource exhaustion if downloading from an attacker-controlled OSTree repository (GHSA-7cgc-gp99-6jmm, RHEL-189208, no known CVE) * d/libostree-1-1.symbols: Update pdl (1:2.106-1) unstable; urgency=medium . * Team upload. * New upstream release. * Drop trigger for scantree.pl. * Refresh patches. pdl (1:2.105-1) unstable; urgency=medium . * Team upload. * New upstream release. * Drop pdl.remove, remove manpages in rules. * Update lintian overrides. psychtoolbox-3 (3.0.22.3+dfsg-3) unstable; urgency=medium . * d/rules (override_dh_auto_test): - set `ulimit -c 0` before running the test/demo sweep to prevent ~200MB core.PID files. - broaden the post-test cleanup to delete also `core.[0-9]*` files. * d/rules (override_dh_auto_build): pass $(CPPFLAGS) $(LDFLAGS) to the manual libptbdrawtext_ftgl.so.1 link so hardening=+all (notably -Wl,-z,now) reaches it -- fixes I: hardening-no-bindnow. * d/copyright: refer to versioned /usr/share/common-licenses/GPL-3 rather than the GPL symlink -- fixes P: copyright-refers-to-symlink-license across all four binary packages. * d/source/lintian-overrides: new, documenting why -Wl,--as-needed and debhelper-compat 13 are kept (NeuroDebian bullseye backport compat -- binutils 2.35.2 there predates ld's --as-needed default in 2.39). psychtoolbox-3 (3.0.22.3+dfsg-2) unstable; urgency=medium . * d/patches/deb_use_system_GLEW.patch: reinstate (dropped in 3.0.22.2+dfsg-5 f58fb49d9 as "unused") and refresh for 3.0.22.3, extended to cover PsychOpenXRCore and the Matlab (linuxmakeit64.m) build recipe. * d/rules: - drop the dead override_dh_quilt_{patch,unpatch} machinery meant to conditionally enable the deb_use_system_GLEW.patch. - move upstream's still shipped GL/*ew.h headers aside during the build so that -ICommon/Screen cannot shadow the system GLEW headers. * d/TODO.org: note to strip those headers via Files-Excluded while preparing the next orig tarball. psychtoolbox-3 (3.0.22.3+dfsg-1) unstable; urgency=medium . * Fresh upstream release * d/control: lower debhelper-compat to 13 to facilitate backports. * d/patches: - deb_no_PTB_USE_NVSTUSB.patch - refreshed - use_pkg-fonfig_to_obtain_triplets.patch - refreshed - no-pagesize-for-decision-making.patch - removed (was CPed from upstream) - Fix-various-compile-errors-under-C23.patch - removed (was CPed from upstream) psychtoolbox-3 (3.0.22.2+dfsg-9) unstable; urgency=medium . * d/watch: move to more robust Github template scan. * d/patches/*: provide dep3 headers. * Fix-various-compile-errors-under-C23.patch: new. This patch introduces an upstream commit that fixes build failures showing up after upgrade to C23 and glibc 2.43. Thanks to Mario Kleiner (Closes: #1128742) * d/control: bump to debhelper-compat 14. python-aiopvpc (4.3.1-4) unstable; urgency=medium . * Team Upload * Bump debhelper from old 11 to 13. * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/salsa-ci.yml * Add debian/upstream/metadata * Use dh-sequence-python3 * Make the build reproducible (Closes: #1079194) python-jedi (0.20.0+ds1-1) unstable; urgency=medium . * New upstream release * Drop python3-typeshed build dependency (vendored one is used for now) * Drop 0001-Search-for-python3-in-_get_executable_path patch (no longer needed) * Add to test dependencies (closes: 1141380) s3fs-fuse (1.97-0.1) unstable; urgency=medium . * Non-maintainer upload. * Build with fuse3. Closes: #1084409 s3fs-fuse (1.95-1) unstable; urgency=medium . * New upstream release 1.95. Closes: #1086865 * Bump Standards-Version to 4.7.2, no changes needed. * Update copyright. * Build with -std=c++17, as required with ICU 75.1+. * Update Build-Depends: pkg-config => pkgconf. s3fs-fuse (1.93-1) unstable; urgency=medium . [ Mattia Rizzolo ] * New upstream release 1.93. LP: #2020602 + Fix issue with restrictive IAM policy. LP: #2003081 * Fix watchfile for github. * Bump copyright years. * Bump Standards-Version to 4.6.2, no changes needed. * Take over the package from Andrii, as I haven't heard from him in years. . [ Charles Plessy ] * Replace transition package mime-support with media-types. Closes: #1009768 s3fs-fuse (1.90-1) unstable; urgency=medium . * New upstream release 1.90. LP: #1940587 * Bump Standards-Version to 4.6.0, no changes needed. s3fs-fuse (1.89-1) unstable; urgency=medium . * New upstream release 1.89. s3fs-fuse (1.88-2) unstable; urgency=medium . [ Andrew Gaul ] * d/control: Fix incorrect file size limitation in the long description. See https://github.com/s3fs-fuse/s3fs-fuse/issues/1527 s3fs-fuse (1.88-1) unstable; urgency=medium . * New upstream release 1.88. * Bump Standards-Version to 4.5.1. s3fs-fuse (1.87-1) unstable; urgency=medium . * New upstream release 1.87. LP: #1891124 https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.87 * Bump debhelper compat level to 13. s3fs-fuse (1.86-1) unstable; urgency=medium . * New upstream release 1.86. LP: #1862023 * Remove patch applied upstream. * d/copyright: Update. * d/control: Bump Standards-Version to 4.5.0, no changes needed. s3fs-fuse (1.85-1) unstable; urgency=medium . [ Mattia Rizzolo ] * New upstream release 1.85. Closes: #949032; LP: #1828849 + Plug many memory leaks. LP: #1802912 * Add patch from upstream to fix cross-compiling. Closes: #923581 . [ Andrii Senkovych ] * d/gbp.conf: revert to default upstream tag name format. . [ Ondřej Nový ] * d/copyright: Change Format URL to correct one . [ Debian Janitor ] * Bump debhelper from old 11 to 12. * Set debhelper-compat version in Build-Depends. * Set upstream metadata fields: Repository, Repository-Browse. s3fs-fuse (1.84-1) unstable; urgency=medium . * New upstream release 1.84. * Update uscan rules. * Update maintainer's name spelling and e-mail address. * d/control: raise compat level to 11. * d/rules: remove trailing whitespace. * d/control: Update Vcs-* fields to point to salsa.d.o. * d/control: add Rules-Requires-Root header, set to no. * Bump Standards-Version to 4.2.0. s3fs-fuse (1.82-1) unstable; urgency=medium . [ Andriy Senkovych ] * Import new upstream release 1.82. * gbp.conf: update tagging rules. . [ Mattia Rizzolo ] * Bump Standards-Version to 4.1.1, no changes needed. * Update copyright. s3fs-fuse (1.80-2) unstable; urgency=medium . * Bump debhelper compat level to 10. Drop explicit '--with autoreconf' option, now default. s3fs-fuse (1.80-1) unstable; urgency=medium . * Import new upstream release 1.80. * Drop patch fixing typo, applied upstream. * Bump Standards-Version to 3.9.8, no changes needed. * Update copyright. s3fs-fuse (1.79+git90-g8f11507-2) unstable; urgency=medium . [ Andriy Senkovych ] * Update Vcs-* fields to point to collab-maint repository. * Add some comments to gbp.conf. . [ Mattia Rizzolo ] * debian/control: + Build only for {linux,kfreebsd}-any since fuse is not available on hurd. + Use my @debian.org email address. + Bump Standards-Version to 3.9.7, no changes needed. + Use https in Vcs-Git. * Stop building s3fs-dbg package, nowadays we have automatic debug packages. * Add patch to fix typo s/returing/returning/. s3fs-fuse (1.79+git90-g8f11507-1) unstable; urgency=low . * Initial release. (Closes: #601789) simple-scan (50.0-1) unstable; urgency=medium . * Salvage for the Debian GNOME team (Closes: #1142574) * New upstream release (Closes: #1117051) * Remove unnecessary Build-Depends: libgirepository1.0-dev (Closes: #1118920) * Simplify dh_gnome override * Update Standards Version to 4.7.4 sope (5.12.10-2) unstable; urgency=medium . * Build-Depend on libmariadb-dev-compat so MySQL support is detected correctly (closes: #1144764). sope (5.12.10-1) unstable; urgency=medium . * New upstream release (identical to previous). * Add minimal salsa-ci.yml. * Build-Depend on libmariadb-dev instead of default-libmysqlclient-dev. (Closes: #1137760) * Disable blhc pipeline, for now. * Drop Priority field from source package, now a default. * Remove Root-Requires-Root field, unneeded. sphinx-substitution-extensions (2026.08.13.1-1) unstable; urgency=medium . * New upstream release * Add patch to fix build with docutils 0.23 * Switch to debhelper-compat 14 thunderbird (1:140.14.0esr-1) unstable; urgency=medium . * [b882591] New upstream version 140.14.0esr Fixed CVE issues in upstream version 140.14 (MFSA 2026-79): CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component CVE-2026-74935: Privilege escalation in the DOM: Networking component CVE-2026-74936: Use-after-free in the JavaScript: WebAssembly component CVE-2026-74939: Privilege escalation in the DOM: Navigation component CVE-2026-74940: Use-after-free in the Graphics: Text component CVE-2026-74941: Privilege escalation in the Graphics: CanvasWebGL component CVE-2026-74942: Privilege escalation in the Remote Settings Client component CVE-2026-74943: Use-after-free in the Graphics: ImageLib component CVE-2026-74944: Use-after-free in the DOM: Core & HTML component CVE-2026-74945: Information disclosure in the Graphics: Text component CVE-2026-74946: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component CVE-2026-74948: Information disclosure in the Graphics component CVE-2026-74949: Privilege escalation due to use-after-free in the Graphics: Canvas2D component CVE-2026-74953: Privilege escalation in the Networking: Cookies component CVE-2026-74957: Mitigation bypass in the Safe Browsing component CVE-2026-74959: Mitigation bypass in the Storage: Cache API component CVE-2026-74960: Site isolation issue in the WebExtensions component CVE-2026-74962: Site isolation issue in the Networking: Cookies component CVE-2026-74963: Same-origin policy bypass in the Networking: Cookies component CVE-2026-74964: Integer overflow in the Graphics component CVE-2026-74965: Privilege escalation in the Shell Integration component CVE-2026-74967: Same-origin policy bypass in the Audio/Video: Playback component CVE-2026-74969: Use-after-free in the Layout: Text and Fonts component CVE-2026-74971: Information disclosure in the DOM: UI Events & Focus Handling component CVE-2026-74972: Information disclosure in the DOM: Push Subscriptions component CVE-2026-74973: Race condition, use-after-free in the Graphics component CVE-2026-74974: Same-origin policy bypass in the Graphics: ImageLib component CVE-2026-74976: JIT miscompilation in the JavaScript Engine: JIT component CVE-2026-74983: Mitigation bypass in the Data Loss Prevention component CVE-2026-74987: Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154 CVE-2026-74990: Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154 vectorscan (5.4.13-1) unstable; urgency=medium . * New upstream release znuny (6.5.24-1) unstable; urgency=medium . * New upstream release. zxc (0.13.3-1) unstable; urgency=medium . * New upstream version. REMOVED: golang-github-skarademir-naturalsort 0.0~git20150715.0.69a5d87-2 REMOVED: golang-github-smira-go-aws-auth 0.0~git20160320.0070896-1.1 REMOVED: golang-github-ngaut-pools 0.0~git20141008.0.6352e00-7 REMOVED: golang-github-bmizerany-assert 0.0~git20160611.b7ed37b-1 REMOVED: golang-github-templexxx-cpufeat 0.0~git20170927.0.3794dfb-5 REMOVED: golang-godebiancontrol-dev 0.0~git20140119-2.1 REMOVED: golang-github-ngaut-go-zookeeper 0.0~git20150813.0.9c3719e-7 REMOVED: golang-github-bkaradzic-go-lz4 1.0.0-5 REMOVED: golang-github-nlopes-slack 0.1.0-2 REMOVED: golang-github-kimor79-gollectd 1.0.0-6 REMOVED: golang-github-nebulouslabs-go-upnp 0.0~git20171003.0.1be4557-2 REMOVED: golang-github-facebookgo-pidfile 0.0~git20150612.f242e29-4 REMOVED: golang-github-miekg-mmark 1.3.6+dfsg-3 REMOVED: fcitx-configtool 0.4.10-4.1 REMOVED: golang-github-emicklei-go-restful-swagger12 1.0.1-3 REMOVED: golang-github-coreos-gexpect 0.1.1-3 REMOVED: golang-github-akrennmair-gopcap 0.0~git20150728.0.00e1103-3 REMOVED: golang-github-hawkular-hawkular-client-go 0.6.1-1 REMOVED: golang-github-pivotal-golang-clock 0.0~git20151018.0.3fd3c19-3 REMOVED: fcitx-ui-light 0.1.3-5.1 REMOVED: golang-github-jimstudt-http-authentication 0.0~git20140401.3eca13d-1.1 REMOVED: golang-github-samalba-dockerclient 0.0~git20160531.0.a303626-3 REMOVED: golang-github-dchest-cssmin 0.0~git20151210.0.fb8d9b4-5 REMOVED: golang-github-influxdb-enterprise-client 0.0~git20151113.0.25665cb-5 REMOVED: golang-github-odeke-em-command 0.0~git20151021.0.91ca5ec-3 REMOVED: golang-gopkg-src-d-go-billy.v4 4.3.2-1 REMOVED: golang-github-dylanmei-winrmtest 0.0~git20151226.0256178-5 REMOVED: custodia 0.6.0-5.2 REMOVED: golang-github-docker-leadership 0.1.0-2 REMOVED: golang-github-clusterhq-flocker-go 0.0~git20160209.0.1c0a791-4 REMOVED: golang-github-btcsuite-btcd-btcec 0.0~git20161101.0.g8343278-2 REMOVED: golang-github-steveyen-gtreap 0.0~git20150807.0.0abe01e-7 REMOVED: golang-github-odeke-em-cache 0.0~git20151107.0.baf8e436-3 REMOVED: golang-github-svent-go-nbreader 0~20150201-4 REMOVED: golang-github-svent-go-flags 1-3 REMOVED: golang-github-go-xorm-builder 0.3.3-3.1 REMOVED: golang-gopkg-olivere-elastic.v5 5.0.83-1 REMOVED: golang-github-inconshreveable-muxado 0.0~git20140312.0.f693c7e-3 REMOVED: golang-github-blevesearch-go-porterstemmer 1.0.1+git20141230.9.23a2c8e-7 REMOVED: golang-github-cznic-ql 1.0.6-2 REMOVED: fcitx-dbus-status 2016062301-4.1 REMOVED: golang-github-zenhack-go.notmuch 0.0~git20190821.5a19619-2 REMOVED: golang-github-mitchellh-panicwrap 0.0~git20191104.b3f3dc3-1 REMOVED: golang-gopkg-xmlpath.v2 0.0~git20150820.0.860cbec-5.1 REMOVED: golang-github-stacktic-dropbox 0.0~git20160424.0.58f839b-3 REMOVED: golang-github-stvp-go-udp-testing 0.0~git20150316.0.abcd331-3 REMOVED: golang-github-mssola-user-agent 0.5.1-1