aerc (0.22.0-3) unstable; urgency=medium . * d/control: Recommend gpg instead of gnupg2 (which is in oldlibs section) * d/copyright: Fix BSD-3-Clause indentation to fix lintian warning (syntax-error-in-dep5-copyright) * B-D on go-opt-v2-dev instead of go-opt-dev aspell (0.60.8.2-5) unstable; urgency=medium . * debian/patches/series: Fix format for last entries. aspell (0.60.8.2-4) unstable; urgency=medium . * debian/patches: Cherry pick upstream commits to fix vulnerabilities (Closes: #1150460, #1150801). - CVE-2026-103658: 0001_common-string.hpp-fix-integer-overflow-in-String-res.patch. - CVE-2026-75818: 0002-prezip-correctly-detect-bad-input.patch. - CVE-2026-75820: 0003-Limit-length-of-words-added-to-the-personal-dictiona.patch. - CVE-2026-75819: 0004-speller-readonly_ws.cpp-check-that-offsets-are-valid.patch. backintime (1.6.2-1) unstable; urgency=medium . * New upstream version 1.6.2 (Closes: #1150926) * d/watch: track only stable releases (Closes: #1127388) * d/rules: fix cleanup of the generated manual pages * d/control: - update standards version to 4.7.4, no changes needed - drop the redundant Priority field * d/patches: - remove one patch applied upstream and refresh other - fix metadata and project license in the AppStream metainfo * update d/copyright donkey (2.0.0-1) unstable; urgency=medium . * New upstream release: - switch to the Rust implementation: - update build dependencies - drop the gcc-15 patch - drop the debian/autoreconf file - add the debian/donkey.install and debian/donkey.manpages files - disable blhc in Salsa CI - switch to the Rust test tool - drop the cleanup-tempdir-diag, re-usage, and re-raw patches - drop the nocheck build profile, it does not seem to be easy to get Cargo to not even consider dev-dependencies and the donkey-test-helpers package - switch to the MkDocs documentation - install docs/changes.md as the NEWS file - update the path to the readme file in the debian/docs file - drop the single-letter-hostnames patch; integrated upstream - catch up with the switch to yearless copyright notices: - drop the years from my upstream copyright notice - also drop the years from my debian/* copyright notice * Officially move the Debian packaging to Salsa: update the URLs in the debian/control file. golang-bazil-fuse (0.0~git20230120.62a210f-1) unstable; urgency=medium . * Team upload. * New upstream snapshot - new Depends: golang-github-dvyukov-go-fuzz-dev, golang-github-tv42-httpunix-dev - drop Depends: golang-golang-x-net-dev * add debian/watch (https://github.com/bazil/fuse tracking HEAD) * update debian/rules - add cmd/fuse-abort to DH_GOLANG_EXCLUDES to prevent building (and packaging) the fuse-abort executable. Needs an arch-dependent binary package if fuse-abort is wanted. - drop deprecated DH_GOPKG. XS-Go-Import-Path in debian/control is used instead. * debhelper compatibility level 14 - run dh --with=single-binary * Standards-Version: 4.7.4 golang-github-dvyukov-go-fuzz (0.0~git20240924.e577bee+ds2-2) unstable; urgency=medium . * debian patch test_32bit.patch uses an explicit 64-bit integer variable to store a bit shift that overflows on 32-bit arches (when used with 32-bit integers). Skip the integer tests in 32-bit arches that use the bit shift. golang-github-dvyukov-go-fuzz (0.0~git20240924.e577bee+ds2-1) unstable; urgency=medium . * debian patch use_system_js.patch patches go-fuzz/assets/stats.html to use system bootstrap and jquery scripts. Add go-fuzz/assets scripts to Files-Exluded in debian/copright. Depends: libjs-bootstrap, libjs-jquery * debian/copyright: acknowledge Twitter contribution to go-fuzz/assets/stats.html (IE10 viewport workaround) so License: Apache-2.0 and MIT * update no_nonexisting_vendored.patch to reference unvendored github.com/elazarl/go-bindata-assetfs/go-bindata-assetfs . golang-github-dvyukov-go-fuzz (0.0~git20240924.e577bee+ds-1) unstable; urgency=medium . * add Depends: golang-golang-x-tools-dev * update debian/copyright - acknowledge go-fuzz project authors along with Dmitry Vyukov for main project (2015-2019 Apache-2.0) - go-fuzz/assets/bootstrap* and stats.html 2011-2015 Twitter, Inc., MIT licence from Bootstrap v3.3.5 (http://getbootstrap.com) - bootstrap.min.css contains normalize.css v3.0.3 (github.com/necolas/normalize.css), also MIT licensed. © 2015 Nicolas Gallagher and Jonathan Neal - go-fuzz/assets/jquery.min.js 2005, 2015 jQuery Foundation, Inc. MIT licence. jQuery v1.11.3, see jquery.org/license * add description to no_nonexisting_vendored.patch Upstream's copy of the nonexisting module was removed by Files-Excluded in debian/copyright * add Repack rules to debian/watch (use suffix +ds) since vendor directories are removed from the upstream tarball (Files-Excluded in debian/copyright) . golang-github-dvyukov-go-fuzz (0.0~git20240924.e577bee-1) unstable; urgency=medium . * Initial release (Closes: #1150708) - golang-github-dvyukov-go-fuzz-dev provides the dev Go source - the go-fuzz package provides the go-fuzz and go-fuzz-build binary executables. Man pages generated via help2man (see README.Debian) * debian patch no_nonexisting_vendored.patch removes nonexisting vendored module from tests. See upstream Issue#235. golang-github-hashicorp-aws-sdk-go-base (2.0.0~beta74-1) unstable; urgency=medium . * Initial release (Closes: #1148134) golang-github-klauspost-compress (1.20.3+ds1-1) unstable; urgency=medium . * Team upload. * New upstream release. golang-github-protonmail-gopenpgp (2.11.1-1) unstable; urgency=medium . * d/patches: Drop no longer needed patch. * New upstream version 2.11.1 golang-golang-x-tools (1:0.52.0+ds-3) unstable; urgency=medium . * Rewrite patch to fix the correct timeout golang-golang-x-tools (1:0.52.0+ds-2) unstable; urgency=medium . * Team upload. * Refresh patches * Add patch to fix FTBFS on riscv64. (Closes: #1152025) golang-golang-x-tools (1:0.52.0+ds-1) unstable; urgency=medium . * Team upload. * New upstream release. Includes the internal/pkgbits support for export data version V5, which Go 1.27.2 writes and 0.49.0 cannot read (Closes: #1150401, #1150663). * Add five tests that 0.52.0 adds or renames to the existing skip list: TestData/import-v2.txtar, TestFakeRangeIterType, TestNestedFunctionsInMethodWithInstantiatedReceiver, TestOverlayInSecondGoWorkModule and TestOverlayModulePath. golang-golang-x-vuln (1.9.0-1) unstable; urgency=medium . * Team upload * Drop Static-Built-Using for compat 14 * Silence Salsa CI golang-golang-x-vuln (1.8.0-1) unstable; urgency=medium . * Team upload * Improve Salsa CI golang-gopkg-mail.v2 (2.3.1-6) unstable; urgency=medium . * Team upload. - reintroduce due to gatus requires it. golang-gopkg-mail.v2 (2.3.1-5) unstable; urgency=medium . * Team upload. * New patch: Use known MIME types for Go 1.24. In Go 1.24, the file extensions ".zip" and ".txt" are not listed in the builtinTypesLower map, therefore no matching MIME type is detected and the function mime.TypeByExtension() returns an empty string. Use .css and .webp as extensions, which are known to Go 1.24 MIME. This patch can be removed after Go 1.26 is the default compiler. golang-gopkg-mail.v2 (2.3.1-4) unstable; urgency=medium . * Team upload. * Remove patch. The mime config on the buildd seem to be available by now, so the package now FTBFS with this patch. (Closes: #1129125) * Remove Priority: optional from d/control * Update to debhelper v13 * Update Standards-Version to 4.7.3 * Add Multi-Arch: foreign to -dev package golang-gopkg-mail.v2 (2.3.1-3) unstable; urgency=medium . * Team upload. * no change upload for reproduce.debian.net golang-gopkg-mail.v2 (2.3.1-2) unstable; urgency=medium . * upload source package golang-gopkg-mail.v2 (2.3.1-1) unstable; urgency=medium . * Initial release golang-honnef-go-tools (2026.2.2-1) unstable; urgency=medium . * Team upload. * New upstream release. - Upstream updated dependency on golang.org/x/tools to v0.51.0+ to support the unified v5 compiler export data format produced by Go 1.27.2+. * debian/patches: - Drop 0006-Replace-go-linkname-stubs-with-local-implementations.patch (applied upstream). - Refresh remaining patches. * debian/control: - Require golang-golang-x-tools-dev (>= 1:0.52.0+ds~) for Go compiler export data version 5 support. - Replace Built-Using with Static-Built-Using on go-staticcheck. * debian/watch: - Upgrade to version 5 using GitHub template. golang-sourcehut-rjarry-go-opt (2.2.1-1) unstable; urgency=medium . * New upstream version 2.2.1 * Re-name binary package and to include version suffix h5py (3.16.0-8) unstable; urgency=medium . * Team upload. * Fix memory alignment. (Closes: #1148860) hyprutils (0.14.3-1) unstable; urgency=medium . * New upstream version 0.14.3 * d/copyright: set Upstream-Contact to Bug-Submit url ijq (1.4.2-1) unstable; urgency=medium . * Fix FTCBFS bug: use a native Go compiler (Closes: #1152375) Thanks to Helmut Grohne for the patch. * Add debian/watch * New upstream version 1.4.2 * Pass --without=single-binary to dh libdevel-callparser-perl (0.006-1) unstable; urgency=medium . * Team upload. * Import upstream version 0.006. * Update 0001-Fix-a-pad-problem-with-Perl-5.21.4-on-threaded- build.patch. The bug is apparently fixed, so we keep only the additional test. * Declare compliance with Debian Policy 4.7.4. * Annotate test-only build dependencies with . * Convert debian/watch to version 5. libemail-sender-perl (2.603-1) unstable; urgency=medium . * Team upload. * Import upstream version 2.603. Fixes CVE-2026-93012. * Update years of upstream copyright. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. * Convert debian/watch to version 5. libfuture-perl (0.54-1) unstable; urgency=medium . * Import upstream version 0.54. libimager-perl (1.040+dfsg-1) unstable; urgency=medium . * Import upstream version 1.040+dfsg. - GIF: fix a malloc buffer read overflow in the gif_consolidate reader, these could read past the end of the giflib supplied color map. https://github.com/tonycoz/imager/security/advisories/GHSA-v4hp-5h6w-9897 CVE-2026-112202 Closes: #1151664 - The Imager C API major version has changed, any modules that depend on the Imager C API will need to be rebuilt. * debian/rules: set IMAGERAPI_VERSION to 7. * Update upstream email address. libinstpatch (1.1.8-1) unstable; urgency=medium . * New upstream version 1.1.8 * Use install files instead of d/rules to install * Drop upstream patch, applied in this version * Update git repository layout to follow DEP-14 * Remove redundant priority optional field * Bump dh-compat to 14 * Remove redundant RRR:no stanza * Bump Standards-Version to 4.7.4 * Update libinstpatch-1.0-2.symbols * Update d/watch to version 5 liblog-log4perl-perl (1.58-1) unstable; urgency=medium . * Import upstream version 1.58. * Update years of upstream and packaging copyright. * Refresh patches (offset). * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. * Convert debian/watch to version 5. libnginx-mod-http-echo (1:0.66-1) unstable; urgency=medium . * New upstream version 0.66 * d/t/control: remove unnecessary dependencies for upstream test and add Features: test-name=upstream liburi-perl (5.40-1) unstable; urgency=medium . * Import upstream version 5.40. * Update years of packaging copyright. liqp (0.9.2.3+ds-1) unstable; urgency=medium . * Initial release. (Closes: #1149769) lxml (6.1.3-1.1) unstable; urgency=medium . * Non-maintainer upload. * Rebuilt for Python 3.15 support. mastodon-el (2.1.8-1) unstable; urgency=medium . * New upstream release monaco-editor (0.47.0+ds-2) unstable; urgency=medium . * Build the AMD tree as well, out of the engine's ES modules, for consumers that go through the loader rather than a bundler: min/ for the browser and dev/ readable, since consumers patch the TypeScript worker. * Give DOMPurify the named exports the editor imports. monaco-editor (0.47.0+ds-1) unstable; urgency=medium . * Initial release. (Closes: #1150423) node-mock-geolocation (1.0.11-1) unstable; urgency=medium . * Initial release. (Closes: #1152411) node-monacopilot (1.1.15+ds-1) unstable; urgency=medium . * Initial release. (Closes: #1152051) node-postcss-inline-svg (6.0.0-1) unstable; urgency=medium . * Initial release. (Closes: #1152415) node-quickselect (3.0.0-1) unstable; urgency=medium . * Initial release. (Closes: #1152187) node-quickselect (1.0.1-3) unstable; urgency=medium . * Bump Standards-Version to 4.2.0, no changes. * Update watch file to use releases instead of tags. * Update watch file to limit matches to archive path. node-quickselect (1.0.1-2) unstable; urgency=medium . * Update copyright-format URL to use HTTPS. * Update Vcs-* URLs for Salsa. * Bump Standards-Version to 4.1.5, no changes. * Strip trailing whitespace from control & rules files. node-quickselect (1.0.1-1) unstable; urgency=medium . * New upstream release. * Bump Standards-Version to 4.1.2, no changes. * Change Section from web to javascript. node-quickselect (1.0.0-1) unstable; urgency=low . * Initial release (Closes: #829279) pat (1.0.0-3) unstable; urgency=medium . * Update d/control to rm stale build deps: - golang-github-dimchansky-utfbom-dev - golang-github-elazarl-go-bindata-assetfs-dev - golang-github-jteeuwen-go-bindata-dev resolves pat autoremoval from Debian Testing per #948335 - golang-github-tarm-serial-dev pat (1.0.0-2) unstable; urgency=medium . * Update d/control to rm dep on howeyc/gopass pat (1.0.0-1) unstable; urgency=medium . * New upstream version 1.0.0 Replace howeyc/gopass with golang.org/x/term - Debian #1130525 dependency on golang-github-howeyc-gopass - Pat issue 517 Fix web ui , web config, and panic bugs Move embedded web assets to web package Remove some deprecated config fields: - gpsd_addr: Use gpsd.addr instead. - serial_tnc.baudrate: Use serial_tnc.hbaud instead. * Update d/control Standards to 4.7.4 No changes required * Refresh patches for new upstream version Update man page rename patches Update patch with upstream changelog pat (0.19.2-2) unstable; urgency=medium . * Refresh patches for new upstream version Update man page rename patches for 0.19.2 Update patch with upstream changelog 0.19.2 pat (0.19.1-1) unstable; urgency=medium . * New upstream version 0.19.1 Many changes wince 0.16.0, including code refactoring and additional dep on hashicorp/go-version v1.7.0 ; trying 1.6.0 . * Refresh patches for new upstream version Pat-Vara vendoring to v1.2.0 * Freshen years in debian/copyright * Bump Standards-Version to 4.7.2 pat (0.16.0-1) unstable; urgency=medium . * Team upload. * New upstream version 0.16.0 * Add Build-Dep on golang-golang-x-sync-dev pat (0.15.1-2) unstable; urgency=medium . * Team upload. * Upload build that enables PACTOR to unstable. * Bump Standards-Version to 4.7.0 pat (0.15.1-2~exp1) experimental; urgency=medium . * Team upload to experimental. * Enable PACTOR (Closes: #1057276) pat (0.15.1-1) unstable; urgency=medium . * Team upload. * New upstream version 0.15.1 * Add build-dep on golang-github-kelseyhightower-envconfig-dev pat (0.15.0-1) unstable; urgency=medium . * New upstream release * Refresh patches for new upstream version including vendor pat-vara to v1.1.2 * Freshen years in debian/copyright * Bump Standards-Version to 4.6.2 pat (0.13.1-1) unstable; urgency=medium . * New upstream release pat (0.13.0-2) unstable; urgency=medium . * Team upload. * Upload to unstable. pat (0.13.0-1) experimental; urgency=medium . * Team upload. * New upstream version 0.13.0 * Refresh patches for new upstream version * Freshen years in debian/copyright * Bump Standards-Version to 4.6.1 pat (0.12.1-3) unstable; urgency=medium . * Team upload. * Link against libax25 for AX25 support pat (0.12.1-2) unstable; urgency=medium . * Team upload. . [ Debian Janitor ] * Remove constraints unnecessary since buster: + pat: Drop versioned constraint on gpsd in Suggests. . [ Federico Grau ] * Merge Janitor's work, and release update pat (0.12.1-1) unstable; urgency=medium . * new upstream release pat (0.12.0-1) unstable; urgency=medium . * New upstream release (skipping 0.11.0) pat (0.10.0-2) unstable; urgency=medium . * Rename binary and man page; d/rules README.Debian edits (Closes: #994822) and 04-update_man_pages_for_renamed_binary_994822.patch * Update d/control Standards to 4.6.0 pat (0.10.0-1) unstable; urgency=medium . [ Taowa Munene-Tardif ] * Packaging v0.9.0 work, including d/copyright research, d/patches, and more . [ Federico Grau ] * Initial release (Closes: #877030) pgcluu (5.0-1) unstable; urgency=medium . * New upstream version 5.0. php-composer-semver (3.6.0-1) unstable; urgency=medium . [ Jordi Boggiano ] * Memoize Intervals::compactConstraint() results (#194) * Update changelog . [ David Prévot ] * Document nocheck tag php-doctrine-collections (3.1.0-2) unstable; urgency=medium . * Upload to unstable * Use debhelper-compat 14 * Use spl_object_id instead of deprecated spl_object_hash php-doctrine-collections (3.1.0-1) experimental; urgency=medium . [ Grégoire Paris ] * Add closure and callable signatures to phpdoc * Deprecate Order enum . [ David Prévot ] * Upgrade upstream signing key to new packet format * Update standards version to 4.7.4 * (Build-)Depend on php-symfony-polyfill-php86 php-doctrine-collections (3.0.0-1) experimental; urgency=medium . * Upload new major to experimental . [ Grégoire Paris ] * Restore return types * Cleanup deprecations * Add missing types to the codebase * Use native PHP keyword to make classes final * Use the readonly modifier * Add Override attribute where applicable * Make ReadableCollection extend Selectable . [ Alexander M. Turek ] * Require PHP 8.4 (#474) . [ Matthias Pigulla ] * Remove the `accessRawFieldValues` parameter which is a no-op as of 3.0 php-symfony-security-acl (3.5.0-1) unstable; urgency=medium . [ Irene Pérez ] * Fix PHP 8.5 compatibility . [ Nicolas Grekas ] * Add support for doctrine/dbal 4 and doctrine/persistence 4 * Fix DoctrineAclCache when entries are evicted between two cache calls * Fix updating ACLs whose entries have gaps in their order * Fix updating the strategy of an ACE . [ David Prévot ] * Set Multi-Arch: foreign * Use debhelper-compat 14 * Document lintian-overrides pydantic-handlebars (0.2.1-2) unstable; urgency=medium . * d/copyright: add handlebar.js copyright holder pydantic-handlebars (0.2.1-1) unstable; urgency=medium . * Initial release. Closes: #1150536 pyelectra (1.2.12-1) unstable; urgency=medium . * New upstream release. . pyelectra (1.2.10-1) unstable; urgency=medium . * New upstream release. pyhomee (1.4.7-1) unstable; urgency=medium . * New upstream release. pysmartthings (4.1.0-1) unstable; urgency=medium . * New upstream release. pystac-client (0.9.1-1) unstable; urgency=medium . [ Bas Couwenberg ] * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. . [ Antonio Valentino ] * New upstream release. * Update dates is d/copyright. * debian/patches: - New 0001-fix-tz-name.patch. - New 0002-no-cql2.patch. - New 0003-close-sqlite3-db.patch. * debian/rules: - Re-enamble all the skipped tests. python-aio-wattwaechter (1.3.0-1) unstable; urgency=medium . * New upstream release. python-bsblan (6.2.1-1) unstable; urgency=medium . * New upstream release. python-hmmlearn (0.3.3-2) unstable; urgency=medium . [ Michael R. Crusoe ] * d/rules: test invocation: match upstream including the test inside the tutorial. * d/watch: upgrade to format 5 . [ Andreas Tille ] * Standards-Version: 4.7.4 (routine-update) * Reflow Uploaders field (cme) * d/patches: use the random_state passed to make_covar_matrix() for tied covariances as well; without it the test data came from the global NumPy RNG, which made TestGaussianHMMWithTiedCovars fail on some seeds (Closes: #1129897). * d/rules: only run the test suite for the default Python, since python3-sklearn is built for the default Python only. python-jsonrpc-websocket (4.1.0-1) unstable; urgency=medium . * New upstream release. python-lsp-mypy (0.7.1-2) unstable; urgency=medium . * Team upload. * Remove .mypy_cache after running tests (closes: #1151988). * Use pybuild-plugin-pyproject. python-luftdaten (0.8.0-1) unstable; urgency=medium . * New upstream release. * Update to debhelper compatibility level 14. * Add dh-sequence-single-binary. * Remove debhelper compat 14 auto-applied substvars. * Prefix debhelper files with the binary package name. python-opentelemetry-contrib (0.65b0-1) unstable; urgency=medium . * Initial release. (Closes: #1144068) python-plugwise (1.16.0-1) unstable; urgency=medium . * New upstream release. python-plugwise (1.15.0-1) unstable; urgency=medium . * New upstream release. pywps (4.8.1-3) unstable; urgency=medium . * Team upload. * Exclude packaging directories to fix dh_python3 failure. pywps (4.8.1-2) unstable; urgency=medium . * Team upload. * Add patch by Chris Lamb for reproducible builds. (closes: #1150326) * Cleanup build dir after tests to fix FTBFS with dh-python 7.20261019. (closes: #1151732) qtbase-opensource-src (5.15.19+dfsg-6) unstable; urgency=medium . * Backport upstream patch to avoid stack exhaustion in QXmlStreamReader (CVE-2026-78253, closes: #1150200). * Update symbols files from the logs of buildds. rust-astral-async-zip (0.0.22-2) unstable; urgency=medium . * Team upload. * Package astral_async_zip 0.0.22 from crates.io using debcargo 2.8.5+alpha.0 strftime4j (1.0.6-1) unstable; urgency=medium . * Initial release. (Closes: #1149768) swoval (2.1.12+dfsg-2) unstable; urgency=medium . * Declare the IntelliJ style file from google/styleguide (CC-BY-3.0) in debian/copyright. * debian/copyright: cover the LICENSE file with Files: *, not its own stanza. swoval (2.1.12+dfsg-1) unstable; urgency=medium . * Initial release (Closes: #1152325)