django-q (1.11.1-2) unstable; urgency=medium . * Team upload. * Run tests with MOTO_SQS_ENFORCE_STRICT_QUEUE_PURGE_BEHAVIOUR=false. eodag (4.10.3+ds-1) unstable; urgency=medium . * New upstream release. * debian/patches: - Refresh all patches. godot (4.6.3+ds-3) unstable; urgency=medium . * Backport patches for CVE-2026-11073{4,5,6} (Closes: #1152026) * Add loong64 to architectures (Closes: #1147266) hishel (1.4.0-1) unstable; urgency=medium . * Team upload. * New upstream version 1.4.0. * debian/control: Update build dependencies for HTTPX2 and Redis tests; drop obsolete dependencies and follow upstream version requirements. * debian/control: Bump Standards-Version to 4.7.4 and refresh the shared package description. * debian/rules: Run offline HTTPX and HTTPX2 integration tests and use the installed package for autopkgtest. lavacli (3.1.0-1) unstable; urgency=medium . * d/copyright: update copyright and license information * d/control: update my uploader address * d/gbp.conf: switch to pristine-tar and upstream branch tracking * d/control: build with pybuild-plugin-pyproject * d/upstream/metadata: add upstream metadata * d/control: drop deprecated X-Python-Version field * d/source/lintian-overrides: override missing watch signature check libdancer2-perl (2.3.0-1) unstable; urgency=medium . * Import upstream version 2.3.0. * SECURITY: PR #1866: JSON serializer should not leak file/line detail libfinance-quote-perl (1.72-1) unstable; urgency=medium . * Import upstream version 1.72. - New: NPSNAV.pm for India's National Pension Scheme (NPS) funds * Add new copyright holder. libgwenhywfar (5.14.1-4) unstable; urgency=medium . * Fix testsuite dependency on obsolete package pkg-config (thx Lintian). * debian/control: Drop Priority: optional to follow Debian policy 4.7.4 * debian/watch: Update to format 5 * Stop replacing built-in jquery by package dependency on libjs-jquery, as Doxygen 1.17.0 no longer embeds jquery in its generated output (Closes: #1152262). Hence now build-depends on doxygen version 1.17.0. * debian/control: Move Git repository to Salsa project group "debian" and rename to libgwenhywfar (matching source package name). libhttp-body-perl (1.24.01-1) unstable; urgency=medium . * Import upstream version 1.24_01 as 1.24.01. - Fixed in 1.23_01 and 1.24: CVE-2026-116131 CVE-2026-116132 CVE-2026-116133 CVE-2026-116134 CVE-2026-116135 CVE-2026-116285 CVE-2026-116531 - Fixed in 1.24_01: CVE-2026-117500 CVE-2026-117501 Closes: #1152485 * Update debian/upstream/metadata. * Update years of upstream and packaging copyright. * Add note about incompatible change to debian/NEWS.Developer. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. * Convert debian/watch to version 5. libmastodon-client-perl (0.019-1) unstable; urgency=medium . * Import upstream version 0.019. * Update debian/libmastodon-client-perl.examples. * Update years of packaging copyright. * Update build dependencies. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. * Drop unneeded version constraints from (build) dependencies. * Convert debian/watch to version 5. libmcp-perl (0.15-1) unstable; urgency=medium . * Team upload. * Import upstream version 0.15. * Update dependencies: libjson-validator-perl → libjson-schema-tiny-perl. * Convert debian/watch to version 5. libxml-feed-perl (1.0.2+dfsg-1) unstable; urgency=medium . * Import upstream version 1.0.2+dfsg. * Update upstream email address. * Update dependencies. mobilitydb (1.3.1-1) unstable; urgency=medium . * New upstream version 1.3.1. mpi4py (4.1.2-3) unstable; urgency=medium . * Team upload * Build with sphinx 9.2 (Closes: #1152170) nix (2.35.4+dfsg-1) unstable; urgency=medium . * New upstream release (Closes: #1145021, #1151197) Fixes CVE-2026-64846, CVE-2026-110449, CVE-2026-110450 and CVE-2026-110452. * d/patches: Rebase patches for 2.35.4 * d/rules: Update meson options for 2.35 * d/copyright: Drop stale file references node-earcut (3.2.4+ds1-1) unstable; urgency=medium . * Initial release. (Closes: #1152464) node-earcut (3.2.4-1) unstable; urgency=medium . * Initial release. (Closes: #1152464) node-jsdom-global (3.0.2-1) unstable; urgency=medium . * Initial release. (Closes: #1152483) node-kdbush (4.1.0-1) unstable; urgency=medium . * Initial release. (Closes: #1152475) node-protocol-buffers-schema (3.6.1-1) unstable; urgency=medium . * Initial release. (Closes: #1152436) node-resolve-protobuf-schema (2.1.0-1) unstable; urgency=medium . * Initial release. (Closes: #1152454) node-svg-parser (2.1.0-1) unstable; urgency=medium . * New upstream release. * Build with a rollup configuration kept in debian/: upstream switched to tsdown in 2.1.0 and tsdown is not packaged in Debian. * Replace the autopkgtest placeholder with a check of both shipped builds. ontospy (2.7+ds-1) unstable; urgency=medium . [ upstream ] * new release(s) . [ Jonas Smedegaard ] * update copyright info: + avoid any .git* files when repackaging upstream source + license patches same as main upstream license + update coverage * update git-buildpackage config: + filter out eventual debian subdir + stop superfluously filter out .git* files + improve usage comment * update watch file: + use file format 5 + stop mangle filename + use repack suffix +ds + capitalize file format field label + stop mangle upstream version (auto-mangling now done by default) * update and unfuzz patches * stop superfluously set fields Rules-Requires-Root Priority * use debhelper compatibility level 14 (not 13) * declare compliance with Debian Policy 4.7.4 * drop TODOs obsoleted by upstream changes pgsentinel (1.5.2-1) unstable; urgency=medium . * New upstream version 1.5.2. php-proxy-manager (2.11.1+1.0.19-4) unstable; urgency=medium . * Skip tests emitting a deprecation with PHP 8.6 * Use debhelper-compat 14 pspg (5.9.0-1) unstable; urgency=medium . * New upstream version 5.9.0. python-certifi (2026.10.23+ds-1) unstable; urgency=medium . * New upstream release. python-cffi (2.1.1-2) unstable; urgency=medium . * Team upload. * Rebuilt for Python 3.15 support. python-deprecated (3.0.1-1) unstable; urgency=medium . * New upstream release. * Add X-Python3-Version: >= 3.12 to fix warnings with pypy3. (closes: #1149678) python-elasticsearch (9.5.1-2) unstable; urgency=medium . * Team Upload. * Drop python3-pytz & python3-setuptools from build-dependencies * Salsa CI: disable useless jobs, enable nocheck & nodoc * Fix nodoc build profile * Mark python3-sniffio as python-glances-api (0.11.0-1) unstable; urgency=medium . * New upstream release. * Update to debhelper compatibility level 14. * Add dh-sequence-single-binary. * Remove debhelper compat 14 auto-applied substvars. * Switch to autopkgtest-pkg-pybuild. * Prefix debhelper files with the binary package name. python-keystonemiddleware (13.0.1-5) unstable; urgency=high . * CVE-2026-115642 / OSSA-2026-050: keystonemiddleware access_rules bypass via X-Service-Token. Applied upstream patch "Fix service-token presence bypass of access_rules and token bind". (Closes: #1152543): - CVE-2026-115642_OSSA-2026-050_Fix_service_token_presence_bypass_o....patch python-petl (1.7.31-1) unstable; urgency=medium . * New upstream version 1.7.31 python-rioxarray (0.24.0-1) unstable; urgency=medium . * New upstream release. * debian/patches: - Drop 0003-affine-3.0-compat.patch, applied upstream. - Refresh remaining patches. * Update d/copyright. python3.15 (3.15.2-1) unstable; urgency=medium . * Python 3.15.2 release. - Implements a TLS certificate denylist. CVE-2026-115557. * Refresh patches. * Drop issue160097.diff, superseded upstream. python3.15 (3.15.1-1) unstable; urgency=medium . * Python 3.15.1 release. * gh-160097: Reject links replacing the destination in tarfile.tar_filter. CVE-2026-114583. qt6-base (6.11.2+dfsg-7) unstable; urgency=medium . [ Patrick Franz ] * Add Breaks against multiple packages caused by the bump of the revision for the QWaylandApplication native interface as this bump causes segfaults. qt6-base (6.11.2+dfsg-6) unstable; urgency=medium . [ Patrick Franz ] * Switch the libmd4c-html0-dev B-D to libmd4c-html-dev as the package has been renamed. * Add patch to fix detecting 64-bit SPARC when building with GCC (Closes: #1150389). * Backport patch to fix CVE-2026-15037 (Closes: #1149994). radicale (3.9.0+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * unfuzz patches * build-depend on python3-hypercorn ruby-git (6.0.0-1) unstable; urgency=medium . * Team upload. * New upstream release. * Replace git ls-files in the gemspec with a Dir[] file list. * Set build dependency versions from the gemspec. * Run the upstream test suite. rust-amdgpu-sysfs (0.22.0-1) unstable; urgency=medium . * Team upload. * Package amdgpu-sysfs 0.22.0 from crates.io using debcargo 2.8.4 rust-array-macro (2.1.8-1) unstable; urgency=medium . * Team upload. * Package array-macro 2.1.8 from crates.io using debcargo 2.8.4 * Skip tests that need the unpublished impure-proc-macro helper. rust-ascii-table (5.0.0-1) unstable; urgency=medium . * Team upload. * Package ascii_table 5.0.0 from crates.io using debcargo 2.8.4 * Disable auto_table_width; termize 0.2 is not packaged. rust-associative-cache (3.0.1-1) unstable; urgency=medium . * Team upload. * Package associative-cache 3.0.1 from crates.io using debcargo 2.8.4 * Drop upgrade-rand.patch, applied upstream. rust-daachorse (5.1.0-1) unstable; urgency=medium . * Team upload. * Package daachorse 5.1.0 from crates.io using debcargo 2.8.4 rust-exacl (0.13.0-1) unstable; urgency=medium . * Team upload. . [ Jelmer Vernooij ] * Update relax-deps: Bump ctor to 1. . [ Simon Quigley ] * Package exacl 0.13.0 from crates.io using debcargo 2.8.4 * Drop relax-bindgen.diff, applied upstream. rust-gungraun-macros (0.10.0-1) unstable; urgency=medium . * Team upload. * Package gungraun-macros 0.10.0 from crates.io using debcargo 2.8.4 rust-jsonc-parser (0.34.0-1) unstable; urgency=medium . * Team upload. * Package jsonc-parser 0.34.0 from crates.io using debcargo 2.8.4 rust-libdrm-amdgpu-sys (0.9.0-1) unstable; urgency=medium . * Team upload. * Package libdrm_amdgpu_sys 0.9.0 from crates.io using debcargo 2.8.4 rust-netr (0.3.0-1) unstable; urgency=medium . * Team upload. * Package netr 0.3.0 from crates.io using debcargo 2.8.4 rust-niri-ipc (26.4.0-1) unstable; urgency=medium . * Team upload. * Package niri-ipc 26.4.0 from crates.io using debcargo 2.8.4 rust-xcursor (0.3.11-1) unstable; urgency=medium . * Team upload. * Package xcursor 0.3.11 from crates.io using debcargo 2.8.4 rust-yeslogic-fontconfig-sys (6.0.1-1) unstable; urgency=medium . * Team upload. * Package yeslogic-fontconfig-sys 6.0.1 from crates.io using debcargo 2.8.4 rust-zerotrie (0.2.5-1) unstable; urgency=medium . * Team upload. * Package zerotrie 0.2.5 from crates.io using debcargo 2.8.4 * Relax zerovec to 0.11.6. * Relax icu_locale_core to 2.2. * Build the benchmark against zerovec hashmap. * Keep the benchmark test data. * Run the litemap, serde, and all-features tests. rust-zerovec-derive (0.11.7-1) unstable; urgency=medium . * Team upload. * Package zerovec-derive 0.11.7 from crates.io using debcargo 2.8.4 * Depend on zerovec 0.11 for the tests. rust-zstd-sys (2.1.2+ds-1) unstable; urgency=medium . * Team upload. * Package zstd-sys 2.1.2+zstd.1.5.7 from crates.io using debcargo 2.8.4 rust-zune-core (0.5.3-1) unstable; urgency=medium . * Team upload. * Package zune-core 0.5.3 from crates.io using debcargo 2.8.4 setuptools (84.2.0-1) unstable; urgency=medium . * New upstream version. * Remove dependencies on vendored modules. Closes: #1148399. * setuptools v84 addresses CVE-2026-23949. * Add a nodoc build profile (Alexandre Detiste). Closes: #1150264. sphinxcontrib-actdiag (3.0.0-6) unstable; urgency=medium . * Team upload. * Update patch for namespace packages to not include the tests directory, fixing FTBFS with recent dh-python (Closes: #1151546). * Enable upstream tests as autopkgtests. sphinxcontrib-blockdiag (3.0.0-7) unstable; urgency=medium . * Team upload. * Fix patches to not install the tests into the module (Closes: #1151734). zbar (0.23.95-2) unstable; urgency=medium . * QA upload. * debian/control: Add the development dependencies required by zbar.pc, including libv4l-dev on Linux. Explicitly build-depend on libxext-dev. * debian/tests: Check installed pkg-config metadata and build and run C/C++ consumers with the shared library and static archive. zbar (0.23.95-1) unstable; urgency=medium . * QA upload. * New upstream release. - Fixes CVE-2026-88371. (Closes: #1149058) - Fixes zbarcam-qt crash on Wayland. (Closes: #1040222) * debian/patches: Drop patches applied upstream or obsoleted by meson. * debian/rules: Build with meson. * debian/control: Add build-dependencies on meson, gettext and python3-gi (for the new introspection test). * debian/*.manpages: Ship the new zbarcam-gtk and zbarcam-qt manual pages in their own packages. * Install the D-Bus system bus policy into /usr/share/dbus-1/system.d and remove the obsolete conffile in /etc. * debian/control, debian/rules: Enable the gir sequence via dh-sequence-gir instead of an explicit --with gir. * debian/control, debian/rules: Run the display tests under Xvfb and add the required test build-dependencies. REMOVED: hplip 3.26.4+dfsg0-4 REMOVED: printing-metas 0.20210903 REMOVED: python-zipp 3.23.0-2