aiksaurus (1.2.1+dev-0.12-7.3) unstable; urgency=medium
 .
   * Non-maintainer upload.
 .
   [ Andreas Tille ]
   * Add Vcs fields
     Closes: #1131539
   * Build-Depends: s/pkg-config/pkgconf/
   * d/watch:
      - version=5
      - Add comment that would fetch latest commit
   * d/copyright:
      - Secure URI in Format field
      - Remove old FSF address
   * Standards-Version: 4.7.4 (Removed Priority field)
   * Avoid explicitly specifying -Wl,--as-needed linker flag.
   * Trim trailing whitespace.
   * Add debian/upstream/metadata
 .
   [ Helmut Grohne ]
   * Mark the -data package Multi-Arch: foreign. (Closes: #951301)
   * Mark the libraries Multi-Arch: same.

apache-upload-progress-module (0.2+git20220203.4467d50-2) unstable; urgency=medium
 .
   * QA upload.
   * Orphan package
   * d/watch: version=5
   * cme fix dpkg-control
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)
   * debputy lint --auto-fix (routine-update)
   * Routine-update added me as new Uploader (routine-update)

apt-forktracer (0.11+nmu1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Migrate packaging to Debian team on Salsa with Maintainer consent
   * Standards-Version: 4.7.4 (Removed Priority field)
   * d/copyright: DEP5

axiom (20210105dp1-4) unstable; urgency=medium
 .
   * axiom_20210105dp4

bambam (1.4.1+dfsg-2) unstable; urgency=medium
 .
   * Team upload.
   * d/gbp.conf: DEP14
   * Maintain in Debian Games team
   * d/watch: version=5
   * debhelper-compat (= 13)
   * Standards-Version: 4.7.4 (Removed Priority field)

barman (3.19.1-1) unstable; urgency=medium
 .
   * Add DEP-8 autopkgtest suite
   * New upstream version 3.19.1
   * Drop looseversion patch, included upstream
   * Build via PEP517 to produce .dist-info instead of .egg-info

binutils-bpf (25) unstable; urgency=medium
 .
   * Configure with --enable-deterministic-archives.
   * Bump standards version.

boinc (8.2.13+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 8.2.13+dfsg

bulky (4.2+ds-1) unstable; urgency=medium
 .
   * Initial Release (Closes: #1135800)

cached-ipaddress (1.1.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * Remove 'Priority: optional', now the default.
   * Update Standards-Version.
   * Update copyright year.

chawan (0.4.1-2) unstable; urgency=medium
 .
   * d/rules: drop manpage make call.
   * d/copyright: udpated.
   * d/upstream/metadata: added.
chawan (0.4.1-1) experimental; urgency=medium
 .
   * New upstream version.
   * d/control:
     - update homepage field. (Closes: #1137517)
     - drop chawan-doc bin package.
   * d/rules: drop HTML docs, see upstream #129.
   * d/chawan-doc.doc-base: dropped.
   * d/chawan-doc.docs: dropped.
   * d/manpages: added.
chawan (0.4.0-5) experimental; urgency=medium
 .
   * Apply patch to drop obsolete dir refs. (Closes: #1137206)
   * Apply patch to fallback to /usr/bin/editor. (Closes: #1137205)
     Thanks Teemu Hukkanen for both patches.

ciftilib (1.6.0-9) unstable; urgency=medium
 .
   * d/control: replace Ghislain Vaillant in Uploaders.
     Thanks Ghislain for the maintenance of the package over the years!
     (Closes: #1138094)
   * d/patches/*: normalise Last-Update timestamps.
   * d/libcifti0t64.lintian-overrides: remove: unused override.
   * d/rules: drop redundant as-needed linker flag.

cockpit (362-1) unstable; urgency=medium
 .
   * New upstream security release:
     - Fix arbitrary code execution via specially crafted logs page link
       [CVE-2026-4802]
   * debian/cockpit-ws.postinst: Drop obsolete cleanup of system user on
     upgrade.
   * Bump Standards-Version to 4.7.4 (no changes necessary).

cockpit-machines (353-1) unstable; urgency=medium
 .
   * New upstream release:
     - Improvements to the "Add disk" and "Create Volume" dialogs
   * Restrict to architectures which support both libvirt and nodejs. libvirt
     recently dropped these packages on 32 bit architectures.  This was a bit
     overzealous, but now makes cockpit-machines uninstallable there.
     Technically, c-machines is arch independent, but dpkg does not allow
     architecture restrictions in Depends:, so we are forced to make the
     package arch dependent. (Closes: #1137419)

cockpit-podman (126-1) unstable; urgency=medium
 .
   * New upstream bug fix release.

coda (2.25.6-3) unstable; urgency=medium
 .
   * Use pre-computed DEB_HOST_MULTIARCH
   * d/watch: Move to version 5 syntax
   * Drop Priority: optional from source in d/control per new policy
   * Standards-Version: 4.7.4
   * hdf4-deps: add patch header
   * Drop Multiarch: from -dev pkg (CFLAGS vary across archs).
     Closes: #1133808

condor (25.10.1+dfsg-2) unstable; urgency=medium
 .
   * Another reproducible build fix -DLINUX=1
condor (25.10.1+dfsg-1) unstable; urgency=medium
 .
   * Several improvements to throttle and monitor DAGMan resource usage
   * Can now automatically retry a job with a larger disk request
   * .chirp.config has been moved out of the job's scratch directory
   * Disables swap for jobs on cgroup v1 systems by default
   * Can now append columns to condor_(qusers|status|who) output
   * Allow URL style container images when file transfer is off
   * Improvements to handling batch universe jobs
   * Fixed Access Point spooled X.509 job proxy refresh
   * Fix reporting of RemoteUserCPU in parallel universe
   * condor_ssh_to_job can now execute one-shot commands when using containers
   * condor_ssh_to_job now enters the proper cgroup when using containers
   * Fixed Access Point spooled X.509 job proxy refresh
   * Fix reporting of RemoteUserCPU in parallel universe
   * condor_ssh_to_job can now execute one-shot commands when using containers
   * condor_ssh_to_job now enters the proper cgroup when using containers
   * Now builds using gcc 16 (Closes: #1133446)

dbus (1.16.2-5) unstable; urgency=medium
 .
   [ Alessandro Astone ]
   * d/control: Drop libdbus-1-3 explicit dependency on the dbus package.
     Do not automatically pull in the `dbus` package with the library;
     use the virtual package `default-dbus-system-bus` instead.
 .
   [ Simon McVittie ]
   * Drop libdbus-1-3 Recommends entirely.
     We cannot know whether applications that are linked to libdbus require
     the system bus (default-dbus-system-bus or dbus) or the session bus
     (default-dbus-session-bus or dbus-x11) or peer-to-peer communication,
     so this Recommends was too strong; and typical systems install a
     system bus anyway, for systemd-logind (or elogind).
     Individual applications that use D-Bus should have a Depends,
     Recommends or Suggests on default-dbus-system-bus | dbus-system-bus
     and/or default-dbus-session-bus | dbus-session-bus, whichever is
     appropriate.
   * Standards-Version: 4.7.4 (no changes required)

dcm2niix (1.0.20250506-2) unstable; urgency=medium
 .
   * d/control: remove Ghislain Vaillant from Uploaders.
     Thanks Ghislain for the package maintenance over the years!
     (Closes: #1138097)
   * d/control: drop redundant Priority: optional.
   * d/control: drop redundant Rules-Requires-Root: no.
   * d/control: declare compliance to standards version 4.7.4.

ddccontrol-db (20260518-1) unstable; urgency=medium
 .
   * New upstream version

debusine (0.14.8) unstable; urgency=medium
 .
   * New release.  Highlights.
     - Restrict the API used by external workers, limiting access outside the
       assigned task.
     - Performance improvements.
     - Support package pinning in autopkgtests.
     - Add attribution fields to Debusine-signed Debian uploads.
     - Note: Worker API is backwards-incompatible with older debusine releases.
     - Supports Django 5.2.

dipy (1.12.1-5) unstable; urgency=medium
 .
   * Team upload.
   * Skip flaky test (reported upstream as issue #4041).
dipy (1.12.1-4) unstable; urgency=medium
 .
   * Team upload.
   * Conditionally skip tests requiring more CPUs than available.
   * Fine-tune salsa-ci.yml.

dotconf (1.4.1-2) unstable; urgency=medium
 .
   * Maintain in Debian Commons team
   * d/watch: version=5
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * lintian-brush: add d/u/metadata (routine-update)

drawy (1.0.1-4) unstable; urgency=medium
 .
   * Pass -s "-screen 0 1024x768x24 -noreset" to xvfb-run in an effort to
     stabilize it (see #1095028).
drawy (1.0.1-3) unstable; urgency=medium
 .
   * One more copyright fix.
   * Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON to cmake to hopefully fix
     reproducibility issues.
drawy (1.0.1-2) unstable; urgency=medium
 .
   * Upload to unstable.
   * Tweak copyright a bit more.
   * Backport upstream commit 08af068c90bb1d2edcd0e869c5b11f2edd3ef951 to add
     %f to Exec key of the application desktop file; patch
     upstream_fix-add-f-to-Exec-key-of-desktop-file.patch.
   * Backport one of the commits in the upstream PR
     https://invent.kde.org/graphics/drawy/-/merge_requests/485 to fix the build
     on 32bit architectures; patch
     refactor-rename-getLineRange-int-to-getLineRangeForL.patch.
drawy (1.0.1-1) experimental; urgency=medium
 .
   * Initial release.

drkonqi (6.6.5-3) unstable; urgency=medium
 .
   [ Aurélien COUDERC ]
   * Backport upstream commit: workaround crash inside knotification/qt.
     [8f02653e]

electric (9.08.1+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 9.08.1.
   * Update debian/watch to version 5 format with repacksuffix=+dfsg.
   * Replace binary signing-key.pgp with signing-key.asc; add upstream
     signer Steven Rubin (740D043A3830AE8B450705A201FACF479D9FBCBF).
   * Refresh build.patch for new upstream build.xml.
   * Drop 02-java17.patch; upstream build.xml already uses release=17.
   * Update Standards-Version to 4.7.4.
   * Drop obsolete java7-runtime from Depends.
   * Update debian/copyright: freshen years.
   * Fix FTBFS with new upstream:
     - Set srcdir=com in build.xml to avoid quilt .pc/ duplicate class.
     - Exclude plugins/j3d: upstream switched from javax.media.j3d to
       org.jogamp.java3d which is not packaged in Debian.
     - Patch About.java to remove static org.jogamp import; use reflection.
     - Add erroronmissingdir=false to copyOrg for absent org/ after dfsg repack.
     - Drop libjava3d-java from Build-Depends; drop j3d jars from CLASSPATH.
   * Lintian fixes:
     - Delete orphaned 02-java17.patch file.
     - Use https URI in debian/watch.
     - Replace full GNU keyring with minimal key for Steven Rubin only.
     - Drop redundant Priority: optional from debian/control.
     - Add debian/upstream/metadata.
     - Install jar via jh_installlibs (electric.jlibs) for versioned naming.
     - Add Forwarded: field to java9.patch.
   * Drop jython: it is an optional scripting plugin loaded reflectively,
     and jython has been RC buggy in Debian. Removes jython from
     Build-Depends, build classpath, CLASSPATH in rules, and wrapper
     script. (Closes: #877336)
   * Fix wrapper script: use find_java_runtime default instead of the
     obsolete java7; drop stale j3d jar references (vecmath, j3dcore,
     j3dutils) no longer used since the j3d plugin was excluded.

evilwm (1.5-1) unstable; urgency=medium
 .
   * New upstream release.
   * Refresh patches.
   * Update d/watch to version 5.
   * d/control:
     + Bump standards version to 4.7.3.
     + Drop Priority field
     + Drop Rules-Requires-Root field
   * Update d/copyright.
   * Switch Vcs to salsa.

fluidsynth (2.5.4+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 2.5.4+dfsg
   * Drop systemd lock-file support, obsoleted upstream
   * Apply upstream patch to fix big endian path for cpp11
     implementation

fortran-shlex (2.0.1-12) unstable; urgency=medium
 .
   * build dep on libflang-22-dev for flang_rt needed on ppc64el
fortran-shlex (2.0.1-11) unstable; urgency=medium
 .
   * Build against flang-22 for caffeine/coarray builds
   * Rebuild against dh-fortran >= 0.80 for flang-mod-22 change
   * Add fortran:Recommends to d/control
fortran-shlex (2.0.1-10) unstable; urgency=medium
 .
   * Drop s390x from flang,lfortran support. Blocks transition
fortran-shlex (2.0.1-9) unstable; urgency=medium
 .
   * Build full now fpm fixed
   * Drop DH_NO_ORIG_LIBS; now default
fortran-shlex (2.0.1-8) unstable; urgency=medium
 .
   * Create bootstrap version that just builds .a files needed for main
     fpm build
fortran-shlex (2.0.1-7) unstable; urgency=medium
 .
   * Rebuild on dh-fortran >= 0.76, fortran-fpm >= 0.13.0-4 for fixes
fortran-shlex (2.0.1-6) unstable; urgency=medium
 .
   * Build-dep on flang-21 on supported archs only
fortran-shlex (2.0.1-5) unstable; urgency=medium
 .
   * d/not-installed no longer needed
   * cme tidyups of d/control
   * lfortran: now builds on all
   * Set minimum versions of fpm, dh-fortran needed for shared libs build
   * Now include shared lib
   * Fix fortran-lib for dh-fortran >= 0.72
   * Standards-Version: 4.7.4

fortunes-de (0.38-1) unstable; urgency=medium
 .
   [ Andreas Tille ]
   * New upstream version
   * Drop incorrectly attributed quotes (Thanks to Volker Greilich)
   * Maintain package in Debian Commons to express that I do not claim strong
     maintainership
   * cme fix dpkg-control
   * d/copyright: update
   * d/watch: version=5
 .
   [ Carles Pina i Estany ]
   * Added po-debconf Catalan translation
 .
   [ Tobias Deiminger ]
   * Blauer Elefant

gcc-bpf (21) unstable; urgency=medium
 .
   * Build using binutils-bpf 2.46-3+3.
gcc-bpf (20) unstable; urgency=medium
 .
   * Build using gcc-16 16.1.0.
   * Bump debhelper and standards versions.
gcc-bpf (19) unstable; urgency=medium
 .
   * Fix package version for binNMUs. Closes: #1121760.
gcc-bpf (18) unstable; urgency=medium
 .
   * Build using GCC 16.
gcc-bpf (17) unstable; urgency=medium
 .
   * Build using GCC 14.2.0-19.
   * Build using binutils 2.44-1.
gcc-bpf (16) unstable; urgency=medium
 .
   * Build using GCC 14.2.0-1.
   * Build using binutils 2.43-1.
   * Bump standards version.
gcc-bpf (15) unstable; urgency=medium
 .
   * Build using GCC 14.1.0-1.
gcc-bpf (14) unstable; urgency=medium
 .
   * Build using GCC 14-20240330-1.
   * Build using binutils 2.42-4.
gcc-bpf (13) unstable; urgency=medium
 .
   * Build using GCC 14.
gcc-bpf (12) unstable; urgency=medium
 .
   * Build using gcc-13.2.0-1.
gcc-bpf (11) unstable; urgency=medium
 .
   * Build using gcc-13.1.0-6.
gcc-bpf (10) experimental; urgency=medium
 .
   * Build using gcc-13.1-1.
gcc-bpf (9) unstable; urgency=medium
 .
   * Build using gcc-12.2-14.
   * Bump standards version.
gcc-bpf (8) unstable; urgency=medium
 .
   * Build using gcc-12.2.
   * Bump standards version.
gcc-bpf (7) unstable; urgency=medium
 .
   * Build using gcc-12.
gcc-bpf (6) unstable; urgency=medium
 .
   * Build using binutils 2.37.
   * Build using gcc-11 11.2.0-3.
gcc-bpf (5) unstable; urgency=medium
 .
   * Build using gcc-10 10.2.1-6.
   * Bump standards version.
gcc-bpf (4) unstable; urgency=medium
 .
   * Rebuild using gcc-10 10.2.0-15.
gcc-bpf (3) unstable; urgency=medium
 .
   * Drop build dependency on autogen.
gcc-bpf (2) unstable; urgency=medium
 .
   * Fix autopkg test.
gcc-bpf (1) unstable; urgency=medium
 .
   * Initial release. Closes: #966308.

git-buildpackage (0.9.43) unstable; urgency=medium
 .
   [ Arnaud Rebillout ]
   * [06dba64] Fix _cmd_has_feature.
 .
   [ Guido Günther ]
   * [714dbf8] ci: Disable uscan. It's a Debian native package
   * [5b9ced3] pq: Allow to disable copy detection (Closes: #1132914)
   * [3bff95c] tmpfile: Add type annotations.
     Fixes build with mypy 2.1.0
 .
   [ Bastian Triller ]
   * [3aaabca] docs/import: Fix typo
 .
   [ Carlos Henrique Lima Melara ]
   * [6da9dbe] dch: Add support to --stable and --lts options (Closes: #1135243)

git-delete-merged-branches (7.6.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/control
     - Bump Standards-Version to 4.7.4.

givaro (4.2.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/control
     - Drop Priority field; "optional" is now the default.
     - Bump Standards-Version to 4.7.4.
     -  Drop redundant Rules-Requires-Root field.
   * debian/copyright
     - Update my copyright years.
   * debian/tests/control
     - Switch pkg-config -> pkgconf in Depends.

gnome-icon-theme-yasis (0.4.2-1.4) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Migrate packaging to Debian team on Salsa
   * Point Homepage to webarchive to express that upstream source has
     vanished from web
   * d/copyright: DEP5
   * Standards-Version: 4.7.4 (Removed Priority field)

gnome-podcasts (25.3+dfsg-2) unstable; urgency=medium
 .
   [ Peter Michael Green ]
   * Relax dependencies for html5ever, html2text and markup5ever-rcdom. (Closes: #1137084)
   * Relax dependencies for gtk/gstreamer related crates. (Closes: #1136839)
 .
   [ Jeremy Bícha ]
   * Salsa CI: skip unnecessary jobs
 .
   [ Manuel Traut ]
   * d/control: Bump standard version
   * d/control: Update my email address

gnustep-sqlclient (1.9.0-8) unstable; urgency=medium
 .
   * Upload to unstable.
   * debian/patches/ecpg-bytea.patch: New; fix the ECPG bundle.
   * debian/rules (override_dh_auto_test): Test the ECPG bundle.
   * debian/control (Build-Depends): Replace default-libmysqlclient-dev
     with libmariadb-dev-compat (Closes: #1137447).
   * debian/tests/sql-bundle-test: Split into...
   * debian/tests/postgres: ...and...
   * debian/tests/sqlite: ...to test bundles separately.
   * debian/tests/mariadb: New test.
   * debian/tests/mysql: Likewise.
   * debian/tests/ecpg: Likewise.
   * debian/tests/control: Update accordingly.  Add new tests.
gnustep-sqlclient (1.9.0-7) experimental; urgency=medium
 .
   * debian/control (gnustep-sqlclient-doc): New package; split
     documentation to avoid Multi-Arch conflicts (Closes: #1133733).
     (libsqlclient-dev) <Recommends>: Add the new -doc package.
     (Build-Depends-Indep): Move gnustep-base-doc here.
     (Priority, Rules-Requires-Root): Remove; no longer needed.
     (Standards-Version): Bump to 4.7.4; no changes required.
   * debian/rules (override_dh_auto_build, override_dh_auto_clean): Adjust
     recipes for the new package.
   * debian/doc-base: Rename as...
   * debian/gnustep-sqlclient-doc.doc-base: ...and amend paths.
   * debian/libsqlclient-dev.install.in: Rename as...
   * debian/libsqlclient-dev.install: ...and remove /usr/share.
   * debian/libsqlclient-dev.links.in: Rename as...
   * debian/gnustep-sqlclient-doc.links.in: ...and amend path.
   * debian/gnustep-sqlclient-doc.install.in: New file.
   * debian/watch: Switch to version 5.
   * debian/copyright: Add FSFUL.  Update copyright years.
   * debian/patches/tests-exit-status.patch: New; make all tests exit with
     an error in case of failure.

golang-github-gliderlabs-ssh (0.3.8-2) unstable; urgency=medium
 .
   * Team upload
   * Disable flaky test TestServerClose
golang-github-gliderlabs-ssh (0.3.8-1) unstable; urgency=medium
 .
   * Team upload
   * Use watch v5
   * Standards-Version: 4.7.4
   * Drop Priority: optional
   * Drop Rules-Requires-Root: no
   * Bump debian/* copyright years

golang-github-go-git-go-git (5.19.1-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream (Closes: #1136095)
     - CVE-2026-41506
   * Use gbp sign-tags and upstream-vcs-tag
   * Use dh-sequence-golang
   * Bump debian/* copyright years
   * Add B-D on gpg/gpg-agent for checks
   * Pin watch to v5 for now

golang-github-shirou-gopsutil (4.26.4-3) unstable; urgency=medium
 .
   * Switch debian/gitlab-ci.yml to debian/salsa-ci.yml.
   * Namespace debhelper fragment files with binary package name.
   * Move dangling symlink installation from dh_auto_test to dh_auto_configure.
     (Closes: #1137017)

golang-github-xtaci-kcp (5.6.72-2) unstable; urgency=medium
 .
   * Team upload
   * Use watch v5
   * Standards-Version: 4.7.4
   * Drop Rules-Requires-Root: no
   * Drop Priority: optional
   * Use dh-sequence-golang
   * Disable flaky Test6GBEcho (Closes: #1137907)
   * Bump debian/* copyright years

golang-uber-goleak (1.3.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Remove «Rules-Requires-Root: no», which is now the default.
   * Remove «Priority: optional», which is now the default.
   * Bump Standards-Version to 4.7.4.
   * Switch to debian/watch format version 5.
   * Remove Update-Script field from debian/watch.
   * Run wrap-and-sort -ast.
   * Use dh-sequence-golang instead of dh-golang and --with=golang.
   * Remove --buildsystem=golang implicit since dh 13.4.

hexagon-dsp-binaries (0~20260519-1) unstable; urgency=medium
 .
   * New upstream release.
   * d/patches: drop 70.patch, applied upstream
   * d/copyright: add copyrights for Shikra-related files
   * d/control.head.in: bump Standards-Version to 4.7.4 (no changes needed)

htmx (4.0.0-beta4-1) unstable; urgency=medium
 .
   * New upstream release

htsjdk (5.0.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 5.0.0+dfsg
   * Refreshing patches
   * Raising Standards version to 4.7.4
   * Updating d/copyright
   * Removing obsolete skip-non-installable restrictions in d/t/control
   * Skipping test requiring too much memory
   * Using standard inflater/deflater instead of the unpackaged one that was
     chosen by upstream

ips (4.3-1) unstable; urgency=medium
 .
   * QA upload.
   * New upstream version.
   * debian/control:
       - Bumped Standards-Version to 4.7.4.
       - Removed no longer needed "Priority: optional" field.
   * debian/copyright: Updated packaging copyright years, switch packaging
     license to GPL-2+ following maintainer clarification and added
     Upstream-Contact field.
   * debian/patches: Fix additional spelling errors and updated forwarding
     status.
   * debian/tests: Added an autopkgtest to validate process discovery by
     creating a temporary process and checking whether ips reports
     the expected PID and command.
   * debian/upstream/metadata: Created.
   * debian/watch: Fix watch search and added https.

jujutsu (0.38.0-3) unstable; urgency=medium
 .
   * Upgrade to whoami v2 builddep
jujutsu (0.38.0-2) unstable; urgency=medium
 .
   * Add explicit builddep on whoami v1

keystone (2:29.0.1-2) unstable; urgency=medium
 .
   * Multiple vulnerabilities in Keystone's delegated authentication allow an
     authenticated user to escalate privileges to cloud admin. The most severe
     (CVE-2026-42999) requires only a valid token:
     - CVE-2026-42999: An attacker can inject RBAC policy targets via the JSON
       request body, bypassing authorization on any policy-protected  endpoint.
       Allows reading all credential secrets, creating credentials for arbitrary
       users, and granting admin across domains. (LP#2148398, reported by Boris
       Bobrov, SAP SE).
     - CVE-2026-42998: Application credential authentication does not verify the
       caller owns the credential, allowing user impersonation within a shared
       project. (LP#2148477, reported by Boris Bobrov, SAP SE).
     -  CVE-2026-43000: The impersonation from CVE-2026-42998 can be chained
        with trusts to escalate from member to admin. The resulting trust
        persists independently of the original credential. (LP#2148477, reported
        by Boris Bobrov, SAP SE)
     -  CVE-2026-43001: Application credentials scoped to one project can create
        EC2 credentials for a different project. A fix for the creation-time
        path is already merged; this patch extends the check to the auth-time
        path. (LP#2149775, reported by Tim Shepherd, roiai.ca)
     -  CVE-2026-44394: Federated users can maintain access indefinitely by
        repeatedly rescoping tokens before expiry. Each rescope issues a fresh
        full-TTL token instead of inheriting the original expiry. Only
        SAML2/OIDC deployments are affected. (LP#2150379, reported by Erichen,
        Institute of Computing Technology, Chinese Academy of Sciences).
     .
     The patch also addresses three related issues found during investigation:
     trust-scoped tokens accessing credentials outside the delegated project
     (LP#2149789), trust-scoped tokens creating persistent application
     credentials for impersonated users (LP#2150089), and a latent query-string
     parameter injection in policy enforcement and lack of scope boundary
     enforcement in the delegated token logic (LP#2150089). These were reported
     by Tim Shepherd (roiai.ca) and Artem Goncharov (SysEleven GmbH).
     .
     Applied the proposed upstream patches:
     - 0001-Add-tests-for-restricted-app-cred-guard.patch
     - 0002-Block-restricted-app-creds-from-creating-EC2-credent.patch
     - 0003-Block-app-cred-tokens-from-authorizing-OAuth1-reques.patch
     - 0004-Enforce-app-cred-project-boundary-on-EC2-credential-.patch
     - CVE-2026-43001-keystone-backport-stable-2025.1.patch
     .
     Please also note that the fix for CVE-2026-42999 (LP#2148398) modifies the
     trust policy structure. If this policy is customized by the provider,
     failure to update it may result in issues with image upload, heat service
     functionality and potentially more.
   * Note that all the above CVE are combined into this one: CVE-2026-43001.
     (Closes: #1135645).

kicad (10.0.3+dfsg-1) unstable; urgency=medium
 .
   * [aa35389] New upstream version 10.0.3+dfsg
   * [8c3bb81] d/control: Increase Standards-Version to 4.7.4
     + No further changes needed.

kicad-footprints (10.0.3-1) unstable; urgency=medium
 .
   * [9c2cede] New upstream version 10.0.3

kicad-packages3d (10.0.3-1) unstable; urgency=medium
 .
   * [70fce5a] New upstream version 10.0.3

kicad-symbols (10.0.3-1) unstable; urgency=medium
 .
   * [d7ce454] New upstream version 10.0.3

libdatetime-format-natural-perl (1.26-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 1.26.
   * Declare compliance with Debian Policy 4.7.4.
   * Add libdatetime-calendar-julian-perl suggested dependency.
   * Update do-not-install-dateparse.patch.

libgit2 (1.9.3+ds-1) unstable; urgency=medium
 .
   * New upstream version 1.9.3+ds
   * libgit2{,-experimental}-dev must depend on libllhttp-dev now
   * Update d/symbols

libh3 (4.5.0-1) unstable; urgency=medium
 .
   * New upstream version 4.5.0.

libquazip1-qt6 (1.5-2) unstable; urgency=medium
 .
   * Update Standards-Version to 4.7.4
   * Update watch file to version 5 format
   * Replace libqt6core5compat6-dev with qt6-5compat-dev (Closes: #1137554)

libxfce4windowing (4.20.6-1) unstable; urgency=medium
 .
   * New upstream version 4.20.6
   * d/libxfce4windowing-0-0.symbols updated for new release

libzonemaster-ldns-perl (5.0.2+ds-2) unstable; urgency=medium
 .
   * update-tests-outcomes.patch: new: update tests after ldns changes.
     (Closes: #1135413)
   * d/control: declare compliance to standards version 4.7.4.
libzonemaster-ldns-perl (5.0.2+ds-1) unstable; urgency=medium
 .
   [ gregor herrmann ]
   * Use Metacpan template in debian/watch.
 .
   [ Étienne Mollier ]
   * Import upstream version 5.0.2+ds.
   * Declare compliance with Debian Policy 4.7.3.
   * fix-pod-conversion-message.patch: new: ditto.
libzonemaster-ldns-perl (5.0.1+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 5.0.1+ds.
   * Drop fix-pod-error.patch, merged upstream.
libzonemaster-ldns-perl (5.0.0+ds-1) unstable; urgency=medium
 .
   * Import upstream version 5.0.0+ds.
   * Declare compliance with Debian Policy 4.7.2.
   * Remove «Rules-Requires-Root: no», which is the current default.
   * d/watch: convert to watch file version 5.
   * fix-pod-error.patch: new: fix a pod report.
     This corrects the Zonemaster::LDNS::RRList(3pm) manual page.
libzonemaster-ldns-perl (4.1.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 4.1.0+ds.
   * Update test and build dependencies.
libzonemaster-ldns-perl (4.0.2+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 4.0.2+ds.
   * Mention module name in long description.
libzonemaster-ldns-perl (4.0.1+ds-1) unstable; urgency=medium
 .
   * Import upstream version 4.0.1+ds.
   * d/control: declare compliance to standards version 4.7.0.
   * d/control: tests depend on libmime-base32-perl.
libzonemaster-ldns-perl (3.2.0+ds-1) unstable; urgency=medium
 .
   * Import upstream version 3.2.0+ds.
   * d/copyright: bump copyright year.
   * d/control: tests depend on libtest-differences-perl.
libzonemaster-ldns-perl (3.1.0+ds-1) unstable; urgency=medium
 .
   * Import upstream version 3.1.0+ds.
libzonemaster-ldns-perl (3.0.0+ds-1) unstable; urgency=medium
 .
   * Import upstream version 3.0.0+ds.
libzonemaster-ldns-perl (2.2.2+ds-2) unstable; urgency=medium
 .
   * Source-only upload.
   * d/control: declare compliance to standards version 4.6.2.
libzonemaster-ldns-perl (2.2.2+ds-1) unstable; urgency=medium
 .
   * Initial release.  (Closes: #1024667)

lintian (2.136.1) unstable; urgency=medium
 .
   * Restrict static-pie-binary test to the architectures where glibc
     supports static-pie (fixes autopkgtest)
lintian (2.136.0) unstable; urgency=medium
 .
   [ Nilesh Patra ]
   * Summary of tag changes:
     + Added:
       - license-problem-old-unicode
       - package-installs-legacy-python-egg-info
       - package-uses-old-python-depends-substvar
     + Removed:
       - depends-on-python2-and-python3
       - license-problem-bad-php-license
       - license-problem-convert-utf-code
       - license-problem-php-license
       - mismatched-python-substvar
       - python-depends-but-no-python-helper
       - python-foo-but-no-python3-foo
       - python-package-depends-on-package-from-other-python-variant
       - python2-script-but-no-python2-dep
   * Avoid checking for "pie executable" for detecting shared objects
     (Closes: #1068304)
     + Add a test to detect static-pie also as a static executable to
       test against #1068304
   * Update cute-field check to flag differently for "X-DH-Compat"
     (Closes: #1135283)
     + Add test to flag correct "X-DH-Compat" style (See: #1072741)
   * Avoid "debian-watch-not-mangling-version" for CRAN or Bioconductor
     templates (Closes: #1135884)
   * Add test to check CRAN templates do not get flagged for not
     mangling version
   * Update regex to match the correct policy version in d/ch when 4 version
     component is used (Closes: #1135883)
     + Add test to ensure we detect four component standards version
       correctly
   * Recognize "Commands" as a valid field in binary control
     (Closes: #1112495)
   * bad-intended-distribution: Also change `$uploaded` to `unstable`
     when set to `sid`
   * New tag: package-installs-legacy-egg-info to flag packages using
     deprecated setup.py (Closes: #1121735)
     + Add test for tag "package-installs-legacy-egg-info"
   * Drop the following tags which are no longer applicable after python2
     removal:
     - python-depends-but-no-python-helper
     - python-mismatched-python-substvar
     - python-depends-python2-and-python3
     - python-foo-but-no-python3-foo
     - python-package-depends-on-package-from-other-python-variant
     - python2-script-but-no-python2-dep
   * Drop more instances of un-needed python2 checks
   * No longer classify python2 as interpreter for checks
   * New tag: package-uses-old-python-depends-substvar to flag old
     `${python:Depends}` substvar
   * Avoid `chdir` in add_elf to avoid destruction errors when OOM
     happens (See: #1136356)
   * Avoid crash when d/rules is absent with `Build-Driver` not equal
     to `debian-rules` (Closes: #1137245)
   * Add test to run lintian on package with debputy in full integration
     mode (without d/rules)
     + Adjust existing test hints for debputy
     + Merge debputy build-driver tests
   * Update "package-does-not-use-debhelper" to use pointed hint to the
     line of `Build-Driver` in d/control for cases where `Build-Driver`
     is not `debian-rules`
   * Drop tags: license-problem-bad-php-license and
     license-problem-php-license (Closes: #1136812)
   * Rules.pm: Drop python2 related code
   * BogusPrerequisites.pm: drop python-is-python2 and
     python-dev-is-python2-dev as these packages have been dropped
   * Skip Dependency check for `python3:Depends` and `sphinxdoc:Depends`
     when debputy sequencers are used or compat >= 14 (See: #1067653)
   * not-an-ar-archive test: Update test to instead install a `.a` file
     which is not an archive (Closes: #1137359)
   * Remove test deb-format-wrong-order as it can no longer work with newer
     dpkg and add a working check for malformed-deb-archive
     + Add ncompress to Build and test depends
   * Drop mingw packages and bash from Build and test depends
 .
   [ Jesse Rhodes ]
   * Rewrite manual section 2.4.1 for clarity. (Closes: #1128948)
 .
   [ Soren Stoutner ]
   * Refactor license-problem-convert-utf-code to
     license-problem-old-unicode (closes: #854209)
 .
   [ Oliver Reiche ]
   * Add 'Stonking Stingray' to the list of known Ubuntu series
 .
   [ Simon McVittie ]
   * tests: Check Lintian and dpkg agree on multiarch dependency
     implications
     + Test Lintian::Relation->satisfies by looping over an array
     + Sort array of test-cases
     + Add missing multiarch Lintian::Relation->satisfies tests
 .
   [ Benjamin Drung ]
   * Build numpy test with -fPIC
   * README: add missing dashes to test run command and examples
     for calling private/runtests

llhttp (9.4.1+~cs12.11.9-3) unstable; urgency=medium
 .
   * Release to unstable
   * Improve README.source
llhttp (9.4.1+~cs12.11.9-1) experimental; urgency=medium
 .
   * New upstream version 9.4.1+~cs12.11.9
   * Refresh patches, drop remove-duplicate-target
   * Update patch for tsc compatibility
   * Multi-Arch: same for libllhttp. Closes: #1086150.
   * B-D tsx
   * Switch soname 9.4 and improve build experience
   * Use salsa recipe

lua-luassert (1.9.0-6) unstable; urgency=medium
 .
   * d/tests/control: force package versions with lua5.5 support
lua-luassert (1.9.0-5) unstable; urgency=medium
 .
   * d/tests/busted: remove stderr output on checks
lua-luassert (1.9.0-4) unstable; urgency=medium
 .
   * add autopkgtest
   * patches from upstream
   * skip failing tests on lua5.5 (Closes: #1136399)

lua-mediator (1.1.2-0-14) unstable; urgency=medium
 .
   * d/tests/control: force package versions with lua5.5 support
lua-mediator (1.1.2-0-13) unstable; urgency=medium
 .
   * d/tests/busted: remove stderr output on checks
lua-mediator (1.1.2-0-12) unstable; urgency=medium
 .
   * autopkg: skip busted test if not all libs are supported for that lua version
lua-mediator (1.1.2-0-11) unstable; urgency=medium
 .
   * move busted tests to autopkgtest to avoid circular dependency
lua-mediator (1.1.2-0-10) unstable; urgency=medium
 .
   * d/watch version 5
   * update Standards-Version 4.7.4, no changes needed
   * d/salsa-ci.yml
   * support Lua5.5
   * d/control: remove debian versions for nocheck dependencies

lua-say (1.4.1-8) unstable; urgency=medium
 .
   * d/tests/control: force package versions with lua5.5 support
lua-say (1.4.1-7) unstable; urgency=medium
 .
   * d/tests/busted: remove stderr output on checks
lua-say (1.4.1-6) unstable; urgency=medium
 .
   * autopkg: skip busted test if not all libs are supported for that lua version
lua-say (1.4.1-5) unstable; urgency=medium
 .
   * move lua-busted tests to autopkgtest to avoid circular dependency
lua-say (1.4.1-4) unstable; urgency=medium
 .
   * d/salsa-ci.yml
   * support Lua5.5
   * update Standards-Version 4.7.4, no changes needed
   * d/watch version 5

lua-system (0.7.1-4) unstable; urgency=medium
 .
   * d/tests/control: force package versions with lua5.5 support
lua-system (0.7.1-3) unstable; urgency=medium
 .
   * d/tests/busted: remove stderr output on checks
lua-system (0.7.1-2) unstable; urgency=medium
 .
   * autopkg: skip busted test if not all libs are supported for that lua version
lua-system (0.7.1-1) unstable; urgency=medium
 .
   * New upstream version 0.7.1
   * d/watch version 5
   * move lua-busted tests to autopkgtest
lua-system (0.7.0-2) unstable; urgency=medium
 .
   * support Lua5.5
   * d/salsa-ci.yml

moosefs (4.59.2-1) unstable; urgency=medium
 .
   * New upstream release.

nagvis (1:1.10.4-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.

neard (0.20-2) unstable; urgency=medium
 .
   * d/copyright: Add missing copyright holders

netavark (1.16.1-5) unstable; urgency=medium
 .
   * Relax dependency on clap to allow 4.6.1 (Closes: #1136770)
   * Drop obsolete patches: 0005, 0006, 0010, 0014, 0015,
     but keep 0013-compile-against-prost-12.6.patch (Related to #1102598)

node-ansis (4.2.0-1) unstable; urgency=medium
 .
   [ Joseph Nahmias ]
   * Initial release (Closes: #1136220)
   * install examples
   * run wrap-and-sort -asbkt
   * add copyright stanza for yoctocolors
   * fix license for yoctocolors
 .
   [ Xavier Guimard ]
   * Declare compliance with policy 4.7.4
   * debian/watch version 5

nsntrace (4.6.ged3532e-1) unstable; urgency=medium
 .
   * New upstream version 4.6.ged3532e
     - Remove upstream applied patch.
   * Update Standards-Version to 4.7.4

objfw (1.5.4-1) unstable; urgency=medium
 .
   * New upstream version 1.5.4

ollama-python (0.6.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * Remove debian/gbp.conf, switch to dgit.
   * Remove 'Priority: optional', now the default.
   * Update Standards-Version.
   * Update copyright year.

paraglob (0.6.0-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Add patch to fix FTBFS with GCC 15 (Closes: #1097545)
paraglob (0.6.0-1) unstable; urgency=medium
 .
   * New upstream version 0.6.0
   * Drop patch
paraglob (0.5.0-1) unstable; urgency=medium
 .
   * New upstream version 0.5.0
   * Rebase patch
paraglob (0.4.1-1) unstable; urgency=medium
 .
   * New upstream version 0.4.1
   * Add git-buildpackage configuration
paraglob (0.4-1) experimental; urgency=medium
 .
   * Initial release (Closes: #951346)

pat (1.0.0-2) unstable; urgency=medium
 .
   * Update d/control to rm dep on howeyc/gopass
pat (1.0.0-1) unstable; urgency=medium
 .
   * New upstream version 1.0.0
     Replace howeyc/gopass with golang.org/x/term
      - Debian #1130525 dependency on golang-github-howeyc-gopass
      - Pat issue 517
     Fix web ui , web config, and panic bugs
     Move embedded web assets to web package
     Remove some deprecated config fields:
      - gpsd_addr: Use gpsd.addr instead.
      - serial_tnc.baudrate: Use serial_tnc.hbaud instead.
   * Update d/control Standards to 4.7.4
     No changes required
   * Refresh patches for new upstream version
     Update man page rename patches
     Update patch with upstream changelog
pat (0.19.2-2) unstable; urgency=medium
 .
   * Refresh patches for new upstream version
     Update man page rename patches for 0.19.2
     Update patch with upstream changelog 0.19.2
pat (0.19.1-1) unstable; urgency=medium
 .
   * New upstream version 0.19.1
     Many changes wince 0.16.0, including code refactoring and additional dep
     on hashicorp/go-version v1.7.0 ; trying 1.6.0 .
   * Refresh patches for new upstream version
     Pat-Vara vendoring to v1.2.0
   * Freshen years in debian/copyright
   * Bump Standards-Version to 4.7.2
pat (0.16.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 0.16.0
   * Add Build-Dep on golang-golang-x-sync-dev
pat (0.15.1-2) unstable; urgency=medium
 .
   * Team upload.
   * Upload build that enables PACTOR to unstable.
   * Bump Standards-Version to 4.7.0
pat (0.15.1-2~exp1) experimental; urgency=medium
 .
   * Team upload to experimental.
   * Enable PACTOR (Closes: #1057276)
pat (0.15.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 0.15.1
   * Add build-dep on golang-github-kelseyhightower-envconfig-dev
pat (0.15.0-1) unstable; urgency=medium
 .
   * New upstream release
   * Refresh patches for new upstream version
     including vendor pat-vara to v1.1.2
   * Freshen years in debian/copyright
   * Bump Standards-Version to 4.6.2
pat (0.13.1-1) unstable; urgency=medium
 .
   * New upstream release
pat (0.13.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Upload to unstable.
pat (0.13.0-1) experimental; urgency=medium
 .
   * Team upload.
   * New upstream version 0.13.0
   * Refresh patches for new upstream version
   * Freshen years in debian/copyright
   * Bump Standards-Version to 4.6.1
pat (0.12.1-3) unstable; urgency=medium
 .
   * Team upload.
   * Link against libax25 for AX25 support
pat (0.12.1-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Debian Janitor ]
   * Remove constraints unnecessary since buster:
     + pat: Drop versioned constraint on gpsd in Suggests.
 .
   [ Federico Grau ]
   * Merge Janitor's work, and release update
pat (0.12.1-1) unstable; urgency=medium
 .
   * new upstream release
pat (0.12.0-1) unstable; urgency=medium
 .
   * New upstream release (skipping 0.11.0)
pat (0.10.0-2) unstable; urgency=medium
 .
   * Rename binary and man page; d/rules README.Debian edits (Closes: #994822)
     and 04-update_man_pages_for_renamed_binary_994822.patch
   * Update d/control Standards to 4.6.0
pat (0.10.0-1) unstable; urgency=medium
 .
   [ Taowa Munene-Tardif ]
   * Packaging v0.9.0 work, including d/copyright research, d/patches, and more
 .
   [ Federico Grau ]
   * Initial release (Closes: #877030)

percona-toolkit (3.7.1-4) unstable; urgency=medium
 .
   * Add runtime dependency on procps for pidof (Closes: #1136551).

plasma-camera (26.04.1-1) unstable; urgency=medium
 .
   [ Debian Qt/KDE Maintainers ]
   * d/watch: upstream project migrated to KDE Gear, point to new tarball path.
 .
   [ Marco Mattiolo ]
   * New upstream release (26.04.1).
   * Bump Standards-Version to 4.7.4, no change required.

prometheus-libvirt-exporter (0.2.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Update build-dependency pkg-config to pkgconf
   * Drop obsolete Priority optional and Rules-Requires-Root no
   * Bump Standards-Version to 4.7.4

puredata (0.56.3+ds-1) unstable; urgency=medium
 .
   * New upstream version 0.56.3+ds
     + Refresh pd2puredata patch
     + Refresh patches
   * Have puredata-gui Recommend tcl-tls
   * Update libpd0.symbols file
   * Update copyright information
     + Update copyright stanzas
     + Re-generate d/copyright_hints
   * Drop obsolete lintian-override
   * Drop obsolete 'Priority: optional' stanza.
   * Bump standards version to 4.7.4

pyglet (2.1.14+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release (closes: #1137404).

pymatgen-test-files (2026.3.23-1) unstable; urgency=medium
 .
   * New upstream release
     - new release moves test files from tests/files to test-files.
       Update debian/copyright, debian/rules, pymatgen-test-files.examples
       and pymatgen-test-files.lintian-overrides
     - includes piezo_sensitivity test files, so drop debian/binary_patches
       and update debian/source/include-binaries
   * drop deprecated debian/source/lintian-overrides. test_files is no
     longer present so the lintian warning is not emitted.
   * update debian/watch to v5 GitHub template
     - add explicit Uversion-Mangle to catch older alpha (a)
       and beta (b) releases
   * Standards-Version: 4.7.4

pystiebeleltron (0.3.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Skip legacy Modbus server tests during build.
   * Remove debian/gbp.conf, switch to dgit.
   * Remove 'Priority: optional', now the default.
   * Remove 'Rules-Requires-Root: no', now the default.
   * Update Standards-Version.
   * Update copyright year.
   * Update debian/watch to format version 5.
   * Add debian/salsa-ci.yml.

python-deprecation-alias (0.4.0-3) unstable; urgency=medium
 .
   * Team upload
   * Mark test-only Build-Depends

python-fakeredis (2.35.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Disable tests at build time more gracefully.
   * Make module-level pytest.skip work properly.
   * Fall back to lupa if a version-specific runtime isn't available (closes:
     #1106749).

python-geojson (3.3.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Bump Standards-Version to 4.7.4, no changes.
   * Update copyright file.
   * Refresh patches.
   * Use pybuild-plugin-pyproject instead of python3-setuptools.

python-goodwe (0.4.10-1) unstable; urgency=medium
 .
   * New upstream release.
   * Drop patch to make tests use explicit event loop for Python 3.14, fixed
     upstream.
   * Remove debian/gbp.conf, switch to dgit.
   * Update Standards-Version.

python-rich-argparse (1.8.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Build-depend on python3-rich (>= 14.3.0).
python-rich-argparse (1.8.0-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Shanavas M ]
   * New upstream release (closes: #1131502):
     - Fix test_rich_renderables (closes: #1135456).
   * Add Homepage field.

python-sigstore-models (0.0.6-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1111998)

python-tuspy (1.1.0-1) unstable; urgency=medium
 .
   * Team maintenance (personal maintenance was an unintended mistake)
   * d/watch: vesion=5
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)
   * debputy lint --auto-fix (routine-update)

qbittorrent (5.2.1-1) unstable; urgency=medium
 .
   * New upstream release.
   * Remove patch added in 5.2.0-2 applied upstream.

qtmir (0.8.0~git20260226.fb30a11-5) unstable; urgency=medium
 .
   [ Jeremy Bícha ]
   * Salsa CI: Ignore blhc failures for now
 .
   [ Mike Gabriel ]
   * debian/patches:
     + Add 0037_force-inputmethod-on-maliit-servers.patch. Complete support in
       qtmir for maliit6-server as inputmethod provider.

r-cran-bridgesampling (1.2-1-2) unstable; urgency=medium
 .
   * Team upload.
   * Standards-Version: 4.7.4
   * Wrap-and-sort style for control files.
   * Files-Excluded: */inst/*/*.html
   * Test-depend on build-essential
r-cran-bridgesampling (1.2-1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.2 (routine-update)
   * Restrict to 64-bits architectures (routine-update)
   * Restrict to little-endian architectures (routine-update)

radicale (3.7.4+ds-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release
 .
   [ Jonas Smedegaard ]
   * unfuzz patches

ruby-jekyll-feed (0.17.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Fix: Fails to build source after successful build (Closes: #1046043)

ruby-tty-reader (0.9.0-3) unstable; urgency=medium
 .
   * Team upload.
   * Fix: Fails to build source after successful build (Closes: #1049037)

ruby-turbolinks-source (5.2.0+dfsg-3) unstable; urgency=medium
 .
   [ Sruthi Chandran ]
   * Team upload
   * Use d/clean to delete unnecessary files created during build
     (Closes: #1049002)
   * Bump Standards-Version to 4.7.4 (no changes needed)
   * Update watch file version
 .
   [ Lucas Nussbaum ]
   * debian/gbp.conf: Add for DEP-14
   * debian/gbp.conf: remove trailing empty lines
   * debian/.gitattributes: remove
   * debian/salsa-ci.yml: use team-specific include

rudof (0.3.2+ds-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release(s)
 .
   [ Jonas Smedegaard ]
   * unfuzz patches
   * move aside lock-file during build

rust-alacritty-config-derive (0.2.5-2) unstable; urgency=medium
 .
   * Team upload.
   * Widen toml upper bound from < 0.10 to < 2 in the relax-toml patch.
     Allows the unsuffixed librust-toml-dev (1.1 in unstable, 0.9 in
     testing) to satisfy the dev-dependency and frees the package from
     the librust-toml-0.8-dev compat. Unblocks debcargo-conf #147.

rust-ammonia (4.1.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Package ammonia 4.1.2 from crates.io using debcargo 2.8.2
   * Drop html5ever* patches (no longer needed)

rust-apfs (0.2.4-1) unstable; urgency=medium
 .
   * Package apfs 0.2.4 from crates.io using debcargo 2.8.2

rust-cursive-core (0.4.6-4) unstable; urgency=medium
 .
   * Team upload.
   * Package cursive_core 0.4.6 from crates.io using debcargo 2.8.2
   * Bump toml to version 1.

rust-env-filter (1.0.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Package env_filter 1.0.1 from crates.io using debcargo 2.8.2
   * Relax dev-dependency on snapbox.

rust-env-logger (0.11.10-1) unstable; urgency=medium
 .
   * Team upload.
   * Package env_logger 0.11.10 from crates.io using debcargo 2.8.2
   * Relax dependency on anstream.

rust-fd-find (10.4.2-1) unstable; urgency=medium
 .
   * Team upload.
   * Package fd-find 10.4.2 from crates.io using debcargo 2.8.2
   * Update patches for new upstream and current situation in Debian.
   * Relax dependency on lscolors.

rust-figment (0.10.19-3) unstable; urgency=medium
 .
   * Team upload.
   * Package figment 0.10.19 from crates.io using debcargo 2.8.2
   * Apply upstream change to switch from toml 0.8 to toml 0.22 and further
     bump toml_edit to 0.25.

rust-html2md (0.2.15-2) unstable; urgency=medium
 .
   * Team upload.
   * Package html2md 0.2.15 from crates.io using debcargo 2.8.2
   * Relax deps for html5ever transition

rust-html2pango (0.6.0-4) unstable; urgency=medium
 .
   * Team upload.
   * Package html2pango 0.6.0 from crates.io using debcargo 2.8.2
   * Relax deps for html5ever transition

rust-html2text (0.16.2-1) unstable; urgency=medium
 .
   * Team upload.
   * Package html2text 0.16.2 from crates.io using debcargo 2.8.2 (Closes: #1136902)
   * Update relax-deps.diff for new upstream and current situation in Debian.
   * Drop relax-html5ever-0.28.patch relax-html5ever-0.29.patch and
     relax-html5ever-0.35.patch. This version uses html5ever 0.35 upstream.
rust-html2text (0.12.6-4) unstable; urgency=medium
 .
   * Team upload.
   * Package html2text 0.12.6 from crates.io using debcargo 2.8.2
   * Relax deps for html5ever transition

rust-html5ever (0.35.0+dfsg-3) unstable; urgency=medium
 .
   * Team upload.
   * Package html5ever 0.35.0 from crates.io using debcargo 2.8.2
   * Fix version in librust-ruma-common-dev breaks.
rust-html5ever (0.35.0+dfsg-2) unstable; urgency=medium
 .
   * Team upload.
   * Package html5ever 0.35.0 from crates.io using debcargo 2.8.2
   * Add breaks on old versions of librust-ruma-common-dev, "librust-scraper-dev
     and librust-select-dev.
rust-html5ever (0.35.0+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * Package html5ever 0.35.0 from crates.io using debcargo 2.8.2

rust-hyper-rustls (0.27.9+ds-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release
 .
   [ Jonas Smedegaard ]
   * update watch file:
     + use Custom-Version
     + limit to @STABLE_VERSION@
   * bump project versions in virtual packages and autopkgtests
   * unfuzz patches

rust-indieweb (0.9.3~20260326+ds-7) unstable; urgency=medium
 .
   * fix patch 1002_rand
rust-indieweb (0.9.3~20260326+ds-6) unstable; urgency=medium
 .
   * extend patch 1002_toml
     to accept newer major version of crate toml;
     closes: bug#1136856, thanks to Santiago Vila
   * add patch 1002_rand
     to accept newer minor version of crate rand,
     superseding patch 2002_rand

rust-ipnet (2.12.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package ipnet 2.12.0 from crates.io using debcargo 2.8.2
     + New upstream adds support for schemars 1.
   * Disable support for legacy schmears 0.8 and make the
     schmars and json features use schemars 1.

rust-jiff (0.2.27-1) unstable; urgency=medium
 .
   * Team upload.
   * Package jiff 0.2.27 from crates.io using debcargo 2.8.2
   * Update remove-non-linux.diff for new upstream.
   * Add patch to fix tests on 32-bit architectures.
rust-jiff (0.2.24-1) unstable; urgency=medium
 .
   * Team upload.
   * Package jiff 0.2.24 from crates.io using debcargo 2.8.2
   * Update patches for new upstream.

rust-log4rs (1.4.0-2) unstable; urgency=medium
 .
   * Package log4rs 1.4.0 from crates.io using debcargo 2.8.2
 .
   [ Greg Lamberson ]
   * Team upload.
   * Relax toml upper bound from < 1 to < 2.
     The existing relax-deps.diff already widens the upstream < 0.8.10
     constraint to >= 0.8, < 1; this extends the upper bound so the
     unsuffixed librust-toml-dev (1.1 in unstable) satisfies the
     dependency. log4rs uses default toml features (not
     default-features = false), so no source-level change is needed for
     the serde-feature gating that affects parse-only consumers.
     Unblocks debcargo-conf #147.

rust-markup5ever (0.35.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package markup5ever 0.35.0 from crates.io using debcargo 2.8.2

rust-markup5ever-rcdom (0.35.0+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * Package markup5ever_rcdom 0.35.0+unofficial from crates.io using debcargo 2.8.2

rust-niri-ipc (25.8.0-1) unstable; urgency=medium
 .
   * Package niri-ipc 25.8.0 from crates.io using debcargo 2.7.11

rust-parsec-client (0.16.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Package parsec-client 0.16.0 from crates.io using debcargo 2.8.2
   * Update overridden debian/tests/control.
   * Bump version of parsec-service.

rust-parsec-interface (0.30.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package parsec-interface 0.30.0 from crates.io using debcargo 2.8.2
   * Drop rust-1.78.patch, no longer needed
   * Update relax-dep.diff and prost-0.12.patch for new upstream.

rust-parsec-service (1.5.0+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * Package parsec-service 1.5.0 from crates.io using debcargo 2.8.2
   * Update patches for new upstream and current situation in Debian.
   * Clean up patching of asn1 crate versions.
   * Drop unfix-clap.patch, upstream is no longer pinning clap.
   * Add patch to use rand 0.10.
   * Add patch to use sd-notify 0.4.
   * Add patch to use cryptoki 0.6.
   * Remove dependencies that upstream added for MSRV pinning reasons that
     are not relavent to Debian.

rust-railway-api (0.3.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Package railway-api 0.3.1 from crates.io using debcargo 2.8.2
   * Update overridden control files.
   * Switch to toml version 1.

rust-regex-test (0.1.1-2) unstable; urgency=medium
 .
   * Package regex-test 0.1.1 from crates.io using debcargo 2.8.2
 .
   [ Greg Lamberson ]
   * Team upload.
   * Relax toml upper bound to accept 0.9 and 1.x, add serde feature.
     Allows the unsuffixed librust-toml-dev (1.1 in unstable, 0.9 in
     testing) to satisfy the dependency and frees the package from the
     librust-toml-0.8-dev compat. The serde feature is required because
     toml 0.9+ moved the from_str entry point out of "parse" and behind
     "serde". Unblocks debcargo-conf #147.

rust-ripasso (0.8.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Package ripasso 0.8.0 from crates.io using debcargo 2.8.2
   * Remove upgrade-sequoia-gpg-agent.patch and tweak-tests.patch which
     have already been removed from the patch series.
   * Update dependencies based on upstream git changes.
     + Update toml to version 0.9 (no code changes).
     + Update reqwest to version 0.13 (no code changes).
     + Add patches for rand 0.10.
   * Further update toml to version 1.

rust-schemars (1.2.1-3) unstable; urgency=medium
 .
   * Team upload.
   * Package schemars 1.2.1 from crates.io using debcargo 2.8.2
rust-schemars (1.2.1-2) unstable; urgency=medium
 .
   * Team upload.
   * Package schemars 1.2.1 from crates.io using debcargo 2.8.2
rust-schemars (1.2.1-1) experimental; urgency=medium
 .
   * Team upload.
   * Package schemars 1.2.1 from crates.io using debcargo 2.8.2

rust-scraper (0.20.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Package scraper 0.20.0 from crates.io using debcargo 2.8.2
   * Relax deps for html5ever transition

rust-sequoia-wot (0.15.2-1) unstable; urgency=medium
 .
   * Package sequoia-wot 0.15.2 from crates.io using debcargo 2.8.2
     - refresh patches.
     - update d/copyright and d/tests/control.

rust-serde-untagged (0.1.9-2) unstable; urgency=medium
 .
   * Team upload.
   * Package serde-untagged 0.1.9 from crates.io using debcargo 2.8.2
   * Use toml version 1.

rust-tokei (13.0.0-4) unstable; urgency=medium
 .
   * Team upload.
   * Relax toml upper bound to accept 0.9 and 1.x.
     Allows the unsuffixed librust-toml-dev (1.1 in unstable, 0.9 in
     testing) to satisfy the dependency and frees the package from the
     librust-toml-0.8-dev compat. Unblocks debcargo-conf #147.

rust-tss-esapi (7.7.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package tss-esapi 7.7.0 from crates.io using debcargo 2.8.2
   * Update relax-dep.diff for new upstream.
   * Drop getrandom-0.4.diff, upstream now uses getrandom 0.4.

rust-tss-esapi-sys (0.6.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package tss-esapi-sys 0.6.0 from crates.io using debcargo 2.8.2

rust-xml5ever (0.35.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package xml5ever 0.35.0 from crates.io using debcargo 2.8.2

sabnzbdplus (5.0.3+dfsg-2) unstable; urgency=medium
 .
   * Patches: add 90, backport of an upstream commit removing an
     unreliable test.

shotwell (0.32.15-1.1) unstable; urgency=high
 .
   * Non-maintainer upload.
   * Add patch from Jeremy Bícha to fix FTBFS with gexiv2 0.16.
     (Closes: #1136176)

sos (4.11.1-2) unstable; urgency=medium
 .
   * Team upload.
   * d/control: Update Standards to 4.7.4
   * d/copyright: Fix lintian superfluous-file-pattern
   * d/control: Remove Uploaders
   * d/control: Add procps to Depends (Closes: #1136589)

spice-vdagent (0.23.0-2) unstable; urgency=medium
 .
   * d/p/Switch-to-spice-vdagent.service-by-default.patch
    + Remove StandardError from [Install] and add under
      service (Closes: #1132849)

starlette (1.1.0-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.1.0 (Closes: #1137375, CVE-2026-48710)

sunpy-sphinx-theme (2.2.2-1) unstable; urgency=medium
 .
   * New upstream version 2.2.2
   * Push Standards-Version to 4.7.4, no changes needed

swift (2.37.1-4) unstable; urgency=high
 .
   * CVE-2026-49017: Swift proxy-server denial of service via truncated s3api
     chunked upload. Applied upstream patch: "s3api: Error on truncated
     aws-chunked input" (Closes: #1138170).
   * Refreshed patches:
     - drive-full-checker.patch
     - fix-writing-non-ascii-in-headers-in-tests.patch
   * Blacklist 6 more non-deterministic tests (Closes: #1137333):
     - test_sync_reconstructor_exception_during_rebuild
     - test_fetch_data_from_cache_connection_error
     - test_container_update_as_greenthread
     - test_GET_disconnect
     - Test_profile_log.test_clear
     - Test_profile_log.test_get_logfiles

terminus (3.7.1-1) unstable; urgency=medium
 .
   * New upstream version
   * Update build dependencies and tweak misc debian/* files
   * Set update-alternative priority to 40, following upstream

tksvg (0.17-1) unstable; urgency=medium
 .
   * New upstream version 0.17
   * Rediff patches
   * Push Standards-Version to 4.7.4, drop redundant Priority: optional

tripwire (2.4.3.7-7) unstable; urgency=medium
 .
   * Remove Built-Using, not needed now since we're
     back at building a dynamic binary. (Closes: #1106813)
   * Carles Pina i Estany:
     - Add Catalan debconf translation. (Closes: #1118610)
   * Remus-Gabriel Chelu:
     - Add Romanian debconf translation. (Closes: #1034092)

vimb (3.7.1-1) unstable; urgency=medium
 .
   [ Mateusz Łukasik ]
   * New upstream release.
   * d/control:
     + Bump standards version to 4.7.3.
     + Drop Priority field
     + Drop Rules-Requires-Root field
   * Update d/watch to version 5.
   * Update d/copyright.
   * Drop debian/source/lintian-overrides
   * Switch Vcs to salsa.
 .
   [ Nilesh Patra ]
   * Add patch for fix FTCBFS: hard-codes pkg-config (Closes: #1110406)

vobcopy (1.2.4-1) unstable; urgency=medium
 .
   * new upstream release

wings3d (2.4.1-2) unstable; urgency=medium
 .
   * Add a patch which allows wings3d to build with Erlang R29.
   * Drop suggestion of yafaray and/or aqsis, which are no longer in Debian.
   * Bump version in debian/watch to 4.
   * Bump standards version to 4.7.4.

youtubedl-gui (4.5-1) unstable; urgency=medium
 .
   * new upstream release