adjtimex (1.29-13) unstable; urgency=medium
 .
   * QA upload.
   * debian/control:
     + Set Maintainer to Debian QA Group. (see #1152079)
     + Bump Standards-Version to 4.7.4; drop redundant Priority and
       Rules-Requires-Root fields.
     + Use debhelper-compat (= 14), dropping debian/compat and the
       now-automatic ${misc:Depends} and ${shlibs:Depends}; move the
       description to the source stanza.
     + Suggest ntpsec-ntpdig instead of ntpdate. (Closes: #1117155)
     + Update Homepage to the working HTTPS ibiblio address.
   * debian/rules, debian/clean: Clean generated files directly instead of
     invoking make after dh_autoreconf_clean, and build only the executable
     to preserve the distributed adjtimex.lsm. (Closes: #1043613, #1049549)
   * debian/rules: Keep the systemd service from starting during installation
     and explicitly disable the unused single-binary addon.
   * debian/docs: Rename to debian/adjtimex.docs.
   * debian/copyright: Replace Site with Source pointing to the original
     1.29 tarball preserved in Debian, and document its provenance.
   * debian/watch: Convert to version 5 and keep tracking the historical
     ibiblio release site.
   * debian/patches:
     + 13-support-ntpsec-ntpdig.patch: Prefer NTPsec ntpdig for --host,
       use its synchronization distance as the reference time uncertainty,
       and retain classic ntpdate as a fallback. Pass hostnames as single
       operands, check query exit status, and document the two clients.
       (Closes: #1027989, #1057965)
   * debian/po/pl.po: Convert from ISO-8859-2 to UTF-8.
   * debian/po/ca.po: Include the pending Catalan debconf translation.
     Thanks to Carles Pina i Estany.

aflplusplus (5.03c-1) unstable; urgency=medium
 .
   * New upstream version 5.03c
   * Refresh patches

aiocomelit (3.0.2-1) unstable; urgency=medium
 .
   * New upstream release.

aiowebdav2 (1.0.3-1) unstable; urgency=medium
 .
   * New upstream release.
   * Update to debhelper compatibility level 14.
   * Add dh-sequence-single-binary.
   * Remove debhelper compat 14 auto-applied substvars.
   * Prefix debhelper files with the binary package name.
   * Upstream switched from aioresponses to aiointercept.

amd64-microcode (3.20260923.1) unstable; urgency=medium
 .
   * Update package data from linux-firmware 20261101
   * Update AMD-SEV firmware for most EPYC processors (20260623)
     * ATTENTION: the AMD-SEV firmware updates require reasonably
       up-to-date firmware components, and it will NOT work on any
       systems with an outdated BIOS that are still vulnerable to
       "Entrysign"
     * SECURITY UPDATE, refer to AMD-SB-3023 for details;
       CVE-2025-29939, CVE-2025-48509, CVE-2025-0031,  CVE-2025-52536,
       CVE-2024-21953, CVE-2025-29946, CVE-2025-29948, CVE-2025-29952,
       CVE-2025-48517, CVE-2025-52536, CVE-2025-48509, CVE-2025-0029.
       Note: may disable SEV-ES when SEV-SNP is enabled in some processors.
     * SECURITY UPDATE (AMD-SB-3020, CVE-2025-0033):
       Improper access control within AMD SEV-SNP could allow an admin
       privileged attacker to write to the RMP during SNP initialization,
       potentially resulting in a loss of SEV-SNP guest memory integrity.
     + Updated SEV firmware:
       + Family 17h models 00h-0fh: version 0.17 build 49
       + Family 17h models 30h-3fh: version 0.24 build 22
       + Family 19h models 00h-0fh: version 1.58 build 01
       + Family 19h models 10h-1fh: version 1.58 build 02
       + Family 19h models a0h-afh: version 1.58 build 03
       + Family 1ah models 00h-0fh: version 1.58 build 06
   * Update AMD EPYC processor microcode (20260923) (closes: #1151714)
     + SECURITY UPDATE (AMD-SEV), refer to AMD-SB-3023 for details;
       CVE-2025-48514, CVE-2025-54514, CVE-2025-0012, CVE-2025-52534.
     * Updated Microcode patches:
       + Family=0x1a Model=0x02 Stepping=0x01: Patch=0x0b00217b Length=14368 bytes
       + Family=0x1a Model=0x11 Stepping=0x00: Patch=0x0b101068 Length=14368 bytes
   * NEWS.Debian: update for AMD-SEV that requires post-Entrysign firmware
   * initramfs: install AMD-TEE firmware into the initramfs (closes: #1124123)
   * debian/changelog: update 3.20251202.1 entry with security update details
     that were recently disclosed.
   * debian/changelog: update 3.20251202.1 entry with list of new and updated
     microcode patches.

anosql (1.0.1-4) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Stefano Rivera ]
   * Remove tox from build-depends, not used.
 .
   [ Stuart Prescott ]
   * Update Standards-Version to 4.7.4 (no changes required).
   * Add patch for setup.py to not install unrelated directories as modules,
     fixing FTBFS with recent dh-python (Closes: #1151533).

aodh (23.0.0-3) unstable; urgency=high
 .
   * lp-2167496: Fix an authorization bypass in the alarm listing API where
     duplicated project_id query filters could bypass project scope:
     authorization validated the first filter value while the storage query
     kept the last one, letting a non-admin user list another project's
     alarms, including action URLs. Applied upstream patch: "Duplicated
     query fields are now rejected with a 400 response" (Closes: #1153094):
     - lp-2167496_Fix_duplicate_project_id_query_filter_bypass_project....patch

arctica-greeter (0.99.9.4-2) unstable; urgency=medium
 .
   * Team upload.
   * debian/rules:
     + Drop copying README.md to README, it's already symlinked.
   * debian/control:
     + Drop liblightdm-gobject-1-dev from B-D, thanks to Sebastien Bacher for the
       patch (Closes: #1150409).
     + Drop 'Priority: optional'.
     + Drop 'Rules-Requires-Root: no'.
     + Bump Standards-Version to 4.7.4.
     + Bump debhelper-compat to 14, consequently drop all ${*:Depends}
       substvars.
   * debian/watch:
     + Update it to version 5 format.
   * debian/NEWS:
     + Fix lintian's debian-news-entry-uses-asterisk complaint.
   * debian/copyright:
     + Update packaging copyright holders and years.

auto-value-gson-java (1.3.1-4) unstable; urgency=medium
 .
   * Team upload.
   * Fixed the compatibility with Gradle 5
   * Removed the libgoogle-auto-value-gson-java-doc package
   * Set the Java Team as Maintainer
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Removed the Rules-Requires-Root field
   * Converted debian/watch to the version 5 format

autotransient-java (1.0.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Fixed the compatibility with Gradle 5
   * Removed the libautotransient-java-doc package
   * Set the Java Team as Maintainer
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Removed the Rules-Requires-Root field
   * Converted debian/watch to the version 5 format

bazel-rules-proto-grpc-cpp (5.8.0-1) unstable; urgency=low
 .
   * Initial release (Closes: #1152140)

billiard (4.3.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Add debian/salsa-ci.yml.

bqplot (0.12.32-5) unstable; urgency=medium
 .
   * Team upload.
   * Update Standards-Version to 4.7.4 (no changes required).
   * Add patch to fix setup.cfg module detection to prevent FTBFS with recent
     dh-python (Closes: #1151532).
   * Add autopkgtests to assist with transitions (Closes: #1035125).
   * Completely skip test at build time rather than running them and letting
     and knowing they will fail.

cl-db3 (20200212-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Migrate packaging to Salsa Debian team since Vcs was not pointing
     to the packaging of this code
     Closes: #1144003
   * Add watch file
     Closes: #1144006
   * Move dh-lisp from Build-Depends-Indep to Build-Depends to pass build
     source job
   * Remove redundant Priority: optional from source stanza.
     Closes: #1144004
   * d/copyright
      - Use versioned copyright format URI.
      - Fix upstream name
      - Fix Source URI
      - Update copyright dates
   * Update standards version to 4.7.4, no changes needed.
   * Add debian/upstream/metadata

copyright-audit (0.0+git20260513.5255970-1) unstable; urgency=medium
 .
   * Initial release
     (Closes: #1152707)

damo (3.4.4-1) unstable; urgency=medium
 .
   * New upstream version 3.4.4

db5.3 (5.3.28+dfsg2-12) unstable; urgency=medium
 .
   * QA upload.
   * Fix FTCBFS: Drop tcl cross dependency.

dh-appstream (0.4) unstable; urgency=medium
 .
   * Team upload.
   * Add missing Vcs fields
   * Remove now redundant "Priority: optional"

django-htmx (1.29.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Let pybuild manage all test files so that they are correctly removed after
     running the tests, fixing FTBFS with recent dh-python (Closes: #1151534).

fcitx5-gtk (5.1.7-2) unstable; urgency=medium
 .
   * debian/rules: Avoid direct GTK dependencies in the frontend packages
     (Salsa MR !3, thanks to Jeremy Bícha).

fcitx5-skk (5.1.11-2) unstable; urgency=medium
 .
   * debian/patches:
     + b5bc5e24b0857b7deef0d2d20d72e12ff93094ee.patch: Backport upstream fix
       for a crash when creating an input context with shared input state
       (Closes: #1152770).
     + ba3ff36cb15673018f16539ef63375b1f1aaa847.patch: Backport upstream
       regression test for shared input state and input mode changes.
   * debian/control: Build-depend on fcitx5-modules-dev for TestFrontend.

fonts-georgewilliams (20031023-5) unstable; urgency=medium
 .
   * Team upload
   * Let SOURCE_DATE_EPOCH reach fontforge
   * Set sfd mtime to a known date
fonts-georgewilliams (20031023-4) unstable; urgency=medium
 .
   * Team upload
   * Clear FSType
   * Fix lintian: old-fsf-address-in-copyright-file

gallery-dl (1.32.19-1) unstable; urgency=medium
 .
   * New upstream version 1.32.19.

galternatives (1.0.12) unstable; urgency=medium
 .
   * translations: Update Dutch translation, thanks to Frans
     Spiesschaert. (Closes: #1152619)
   * debian/control: Drop redundant Priority: optional.
   * Fix custom database initialization and align directory options with
     update-alternatives.
   * Pass the selected directories and log file to every update-
     alternatives command, including privileged operations.
   * debian/galternatives.1: Refresh roff formatting and the synopsis;
     clarify privilege handling, document help and path defaults, and add
     cross-references, initial group selection, and the directory-option
     compatibility note.
   * Select the command-line target group before loading the main window,
     and clear it for invocations without a group.
   * resources: Add the AppStream release notes for version 1.0.12.

gcli (2.14.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Delete all the patches as they are upstream

generate-ninja (0.0~git20261103.2e3ba823-1) unstable; urgency=medium
 .
   * Uprev upstream.
   * Refresh patches.

gmplot (1.4.1-2) unstable; urgency=medium
 .
   * Do not install tests/ in .deb (Closes: #1085616)
   * Fix SyntaxWarning (Closes: #1085616)
   * Drop "Rules-Requires-Root: no": it is the default now
   * Rewrite d/watch in v5 format
   * Bump Standards-Version to 4.7.4, drop Priority: tag

gnome-flashback (3.58.0-7) unstable; urgency=medium
 .
   * Backport upstream patch to fix build with gsettings-desktop-schemas 51.
   * Backport upstream patches to fix brightness control with g-s-d 49.
     - Build-depend on libgudev-1.0-dev.
   * Bump Standards-Version to 4.7.4, no changes needed.

gnome-shell-extension-hamster (0.10.0+git20251003-3) unstable; urgency=medium
 .
   * Add patch to support GNOME 51 (Closes: #1148609)
gnome-shell-extension-hamster (0.10.0+git20251003-2) unstable; urgency=medium
 .
   * Mark the extension as supported on GNOME 50 (Closes: #1132288)
   * Bump Standards-Version to 4.7.4
gnome-shell-extension-hamster (0.10.0+git20251003-1) unstable; urgency=medium
 .
   [ Jeremy Bícha ]
   * Automatically update supported GNOME Shell versions by parsing metadata.json
 .
   [ Raphaël Hertzog ]
   * New upstream version 0.10.0+git20251003
gnome-shell-extension-hamster (0.10.0+git20240714-3) unstable; urgency=medium
 .
   * Add patch to support GNOME 48. Closes: #1096048
gnome-shell-extension-hamster (0.10.0+git20240714-2) unstable; urgency=medium
 .
   [ Jeremy Bícha ]
   * Add patch to mark compatible with GNOME Shell 47 (Closes: #1079250)
   * Bump maximum GNOME Shell to 47
 .
   [ Raphaël Hertzog ]
   * Bump Standards-Version to 4.7.0
gnome-shell-extension-hamster (0.10.0+git20240714-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream git snaphsot with GNOME Shell 46 compat. (Closes: #1052101)
   * Update version constraints on gnome-shell, as this version is only
     compatible with GNOME Shell 45 and up.
gnome-shell-extension-hamster (0.10.0+git20230901-1) unstable; urgency=medium
 .
   * New upstream git snapshot with GNOME Shell 44 compat. (Closes: #1041574)
   * Removes all patches.
gnome-shell-extension-hamster (0.10.0+git20210628-4) unstable; urgency=medium
 .
   [ Jesús Soto ]
   * Add patch to mark compatible with GNOME Shell 43
   * debian/control: Bump maximum gnome-shell to 43 (Closes: #1018269)
 .
   [ Raphaël Hertzog ]
   * Bump Standards-Version to 4.6.1
gnome-shell-extension-hamster (0.10.0+git20210628-3) unstable; urgency=medium
 .
   * Document compatibility with GNOME 42 (Closes: #1008549)
gnome-shell-extension-hamster (0.10.0+git20210628-2) unstable; urgency=medium
 .
   * Document compatibility with GNOME Shell 41.
     Tighten the gnome-shell dependency to not allow usage with gnome-shell 42.
     (Closes: #996060)
gnome-shell-extension-hamster (0.10.0+git20210628-1) unstable; urgency=medium
 .
   * Bump Standards-Version to 4.6.0
   * New upstream version 0.10.0+git20210628
     - Documents compatibility with GNOME 40. Closes: #993186
gnome-shell-extension-hamster (0.10.0+git20200509-2) unstable; urgency=medium
 .
   * No change source only upload.
gnome-shell-extension-hamster (0.10.0+git20200509-1) unstable; urgency=medium
 .
   * Initial release (Closes: #975974)

golang-github-containers-gvisor-tap-vsocks (0.8.1-6) unstable; urgency=medium
 .
   * debian/control: Tighten build-dep on gvisor-dev
   * debian/control: Drop redundant Rules-Requires-Root
golang-github-containers-gvisor-tap-vsocks (0.8.1-5) unstable; urgency=medium
 .
   [ Marcos Talau ]
   * debian/salsa-ci.yml: Add to provide CI tests for Salsa
   * Enable Salsa CI using default template
 .
   [ Damian Szuberski ]
   * add "Forwarded: not-needed" to debian-specific debian/patches
   * bump Standards-Version to 4.7.4
   * update debhelper version to 14
   * update debian/* copyright years to include 2026
   * migrate debian/watch to format version 5 using the GitHub template
   * add salsa-ci.yml and update gitlab-ci.yml for backwards compatibility
   * remove --builddirectory and --with=golang from debian/rules
   * fix compilation with new golang-gvisor-gvisor-dev 0.0~20261026.0-1

golang-gvisor-gvisor (0.0~20261026.0-3) unstable; urgency=medium
 .
   [ Damian Szuberski ]
   * Team upload.
   * bump Standards-Version to 4.7.4
   * remove Priority: optional
   * update debhelper version to 14
   * update debian/* copyright years to include 2026
   * add lintian override for missing runsc(1) man page
 .
   [ Reinhard Tartler ]
   * Update Breaks on golang-github-containers-gvisor-tap-vsocks-dev
golang-gvisor-gvisor (0.0~20261026.0-2) unstable; urgency=medium
 .
   [ Damian Szuberski ]
   * Team upload.
   * remove pkg/sentry/platform/slimvm from arm64 compilation (Closes: #1152769)
   * enable arm64 builds in ci
golang-gvisor-gvisor (0.0~20261026.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release (Closes: #1102747).
     - Fixes CVE-2026-96812: improper exposure of CUSE character device node
       passing through to the host in gofer (Closes: #1150508).
     - Fixes CVE-2026-95702: use-after-free vulnerability in VFS in sentry
       (Closes: #1150510).
   * debian/rules, debian/watch, debian/runsc.install:
     - Upgrade debian/watch to format version 5 with GitHub template.
     - Integrate DFSG repack in debian/update-upstream.sh.
     - Exclude runsc/checkpointgofer due to unpackaged GCS SDK.
     - Dynamically generate zeroed sighandler placeholder from host architecture.
     - Move sentry and metricserver sidecars to /usr/lib/runsc/gvisor-bin.
   * debian/sighandler_ARCH.tmpl:
     - Update sighandler placeholder with __export_disable_syscall_patching.
   * debian/sysmsg.makefile:
     - Pass NM to gen_offsets_go.sh and use OBJCOPY.
   * debian/control:
     - Replace golang-github-kr-pty-dev with golang-github-creack-pty-dev.
     - Replace golang-gocapability-dev with golang-github-moby-sys-dev.
     - Use Static-Built-Using for runsc.
   * debian/copyright:
     - Update for new upstream release and DFSG review.
     - Update copyright years to 2018-2026.
     - Remove redundant globbing pattern for pkg/shim/v1/*.
     - Expand Go Authors attribution to 2009-2014.
   * debian/patches:
     - Drop 0001-fake-coverage-pkg.patch: fixed upstream.
     - Refresh use-cenkalti-backoff-v4.patch and make DEP-3 compliant.
     - Add sidecar-search-fallback-path.patch to find /usr/lib sidecars.
   * debian/salsa-ci.yml:
     - Disable blhc due to false positives on freestanding stubs.
   * debian/tests/control:
     - Require isolation-machine for runsc test.

graphs (2.0.9-1) unstable; urgency=medium
 .
   * New upstream release

hyprwire (0.3.1-4) unstable; urgency=medium
 .
   * d/t/test-runner: check if client terminates on error
   * d/t/control: add allow-stderr
   * migrate to dh-compat 14

ikvswitch (1.0.7) unstable; urgency=medium
 .
   * Cleanup the mounted switch partition and the loop device when
     ikvswitch-setup fails or gets interrupted, as the leaked mounts and
     busy loop devices were making every subsequent run fail with kpartx
     errors. Comes with a unit test simulating a mount failure.
ikvswitch (1.0.6) unstable; urgency=medium
 .
   * Add DHCP_SERVER_DAEMON option, so that dnsmasq can be used as the DHCP
     server of the odd leaf switches, instead of isc-dhcp which isn't
     maintained upstream anymore (dnsmasq is the new default).
   * Also add DHCP_* options (lease times, pool bounds, domain name, DNS
     servers, PXE bootfiles and iPXE boot URL), as the DHCP configuration
     of the leaf switches is now generated from ikvswitch.conf, without
     any hardcoded value.
   * Add DHCP_HTTP_BOOT_URL option, so that native UEFI HTTP Boot clients
     (client-arch 16) are handed a real EFI loader to fetch over HTTP,
     with no PXE nor iPXE involved, defaulting to the shim EFI binary of
     the openstack-cluster-installer PXE server, so that Secure Boot is
     supported.
   * Guard the dnsmasq client-arch boot entries with tag:!ipxe, as an
     iPXE client also sends a value in option 93, and dnsmasq matches
     dhcp-boot entries in the reverse order of the config file: without
     this, iPXE clients could be handed a TFTP bootfile instead of the
     iPXE boot URL.
   * Add a shell script unit test suite under tests/, run at build time
     through run_tests, which runs the real ikvswitch-setup against
     mock binaries, and checks the DHCP configuration generated for
     both daemons, the HTTP Boot matching, and the configuration file
     validation.
   * Route to the internet VM using the configured prefix, instead of
     the hardcoded 192.168.96.2, so that overriding
     HOST_VIRTUAL_SUBNET_START_PREFIX in ikvswitch.conf keeps working.
   * Make ikvswitch-host-networking re-entrant: running start on an
     already or partially configured host now skips existing bridges,
     TAPs and dummies, and replaces the route and the IPMI bridge
     address, instead of failing.
   * Add a unit test suite for ikvswitch-host-networking: it checks the
     full creation inventory of start, the create/teardown symmetry of
     stop, that repeated start/stop cycles are re-entrant and never
     crash (including on a partially configured host), and that a
     customized HOST_VIRTUAL_SUBNET_START_PREFIX propagates everywhere.
     It runs against stateful mock binaries, deriving the kernel state
     from a shared log, with a sandboxed copy of the script.
   * Use pkgos-run-tests from openstack-pkg-tools (>= 157~) to run the
     unit tests in parallel, instead of the in-tree run_tests script,
     so that the test runner is shared between packages.
   * Fix the lintian bash-term-in-posix-shell tags on ikvswitch-setup:
     rename the HOSTNAME local variable of ikvswitch_customize_images
     to NAME, as HOSTNAME is a bash-only variable which isn't set under
     a POSIX shell. The "source /etc/network/interfaces.d/*" strings
     appended to the /etc/network/interfaces of the generated switch VM
     images are ifupdown directives, not shell code, and must stay
     verbatim, as the order in which the sourced files matters: they
     are covered by a package wide lintian override.
   * Added man pages for ikvswitch-setup and ikvswitch-host-networking,
     documenting the start and stop commands, the layout and networking
     variables they consume from /etc/ikvswitch/ikvswitch.conf, and the
     files they read and write, which also fixes the lintian
     no-manual-page warnings.
   * Standards-Version: 4.7.4.

ironic (1:39.0.0-7) unstable; urgency=medium
 .
   * CVE-2026-115638 / OSSA-2026-049: Ironic Conductor DoS via gzip bomb
     configdrive. Applied upstream patch "Chunk gzip decompressions and
     enforce a limit" (Closes: #1152544):
       - CVE-2026-115638_OSSA-2026-049_Chunk-gzip-decompressions-and-enf....patch

jtreg7 (7.5.2+1+ds2-5) unstable; urgency=medium
 .
   * Team upload.
   * Fixed the compatibility with Gradle 5
   * Removed the Rules-Requires-Root field

kytensor (2.49.0.7-1) unstable; urgency=medium
 .
   [ handsome_feng ]
   * Initial release.

lfortran (0.68.0-1) unstable; urgency=medium
 .
   * New upstream release
   * liblfortran-dev.install: Some headers have changed directory

libhat-trie (0.1.2-4) unstable; urgency=medium
 .
   * Team upload.
   * d/watch: version=5
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)
   * debputy lint --auto-fix (routine-update)

libpff (20260926-2) unstable; urgency=medium
 .
   * Team upload.
   * d/rules: Fix reproducibility failures visible only at
     https://tests.reproducible-builds.org.

libweb-simple-perl (0.036-1) unstable; urgency=medium
 .
   * Import upstream version 0.036.
     - Properly escape interpolated strings (CVE-2026-114627)
     Closes: #1153059

licenserecon (20.1) unstable; urgency=medium
 .
   * Allow duplicate Dep5 values in license aliases
licenserecon (20.0) unstable; urgency=medium
 .
   * Prioritise local license aliases over global

linux (7.2.15-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.15
     - ksmbd: wait for negotiation before receiving another PDU
     - smb: smbdirect: don't wait for RDMA_CM_EVENT_DISCONNECTED in
       smbdirect_socket_destroy_sync()
     - smb: smbdirect: release failed pending sockets of a listener
     - smb: smbdirect: don't hand out already failed sockets in
       smbdirect_socket_accept()
     - iio: hid-sensor: als: scale each channel individually
     - kbuild: link-vmlinux.sh: improve detection of third pass requirement
     - exec: cancel io_uring requests before de_thread()
     - fork: move the coredump and exec checks into create_io_thread()
     - fork: don't create io threads once PF_POSTCOREDUMP is set
     - Bluetooth: forget a peer's RPA once it advertises its identity address
 .
   [ Salvatore Bonaccorso ]
   * apparmor: fix NULL ctx->peer derefs in unix socket ctx updates
     (Closes: #1145111)
linux (7.2.14-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.14
     - sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs
     - ntfs: fix race between fallocate and mmap reads
     - ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()
     - mm/damon/core: error damos_commit_quota_goal() for zero target_value
     - sched/fair: Avoid overflow in place_entity()
     - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn
     - tools/dma: fix building with O=
     - tracing: Hold trace_types_lock when updating modules in persistent
       instances
     - tracing: Hold trace_types_lock when resetting last boot data from readers
     - tracing: Reject incomplete event filter expressions
     - tracing: Save the event file instead of the compatible histogram
     - tracing: Unregister field variable histograms when the command fails
     - tracing: Fix 64-bit and signed histogram fields on 32-bit kernels
     - tracing/histograms: Verify event_call identity when updating synth_event
       refcount
     - tracing/syscalls: Use copy_from_user for the faultable syscall buffer
     - io-wq: order the exit bit against worker creation task work
     - io_uring/waitid: own the request before clearing ->head
     - io_uring/cmd: don't leave list poison in ->hash_node
     - io_uring/wait: don't spin on a stuck overflow list
     - io_uring/io-wq: don't lose the signal that ends work
     - io_uring/io-wq: don't hide a link from cancellations
     - io_uring: don't flood a cancelling task with task_work
     - io_uring: don't lose the DEFER_TASKRUN wake up
     - io_uring/cancel: rearm local work wake up before sleep
     - io_uring/mpscq: disable preemption while pushing
     - io_uring/io-wq: don't go to sleep on pending work
     - io_uring/io-wq: don't strand work when a worker exits
     - io_uring/io-wq: don't exit with a creation pending
     - io_uring/io-wq: let cancel find picked up hashed work
     - io_uring/poll: don't lose a cancel as io-wq arms poll
     - io_uring: don't lose a cancel as io-wq parks a request
     - io_uring/cancel: don't forget that the work was running
     - io_uring/cancel: recognize "no timeout" on 32-bit
     - io_uring/cancel: let CANCEL_ALL find parked requests
     - io_uring: wake ring pollers for local task_work
     - io_uring/wait: look at all CQ waiters on wake up
     - io_uring/poll: drop stale double poll entry on rearm
     - io_uring/futex: allocate private hash before waiting
     - io_uring: drop the CQE cache if a refill fails
     - io_uring: don't split 128b SQEs at the SQPOLL cap
     - io_uring/register: don't wrap 32b CQEs when resizing
     - io_uring/register: handle index wrap when resizing
     - io_uring/register: keep 128b SQEs intact on resize
     - io_uring/fdinfo: fix CQE dump of CQE32 rings
     - io_uring/timeout: don't skip over reached sequences
     - io_uring/timeout: keep repeat count on multishot update
     - io_uring/timeout: use the right clock for ABS updates
     - io_uring/wait: no early -ETIME if min_wait finds work
     - io_uring/napi: make stale entries time out after 60s
     - io_uring/napi: don't busy poll past an expired timeout
     - io_uring/zcrx: fix buffer offsets in areas above 4GB
     - io_uring/kbuf: handle index wrap in last buffer check
     - io_uring/sqpoll: let the thread sleep on disabled rings
     - io_uring/openclose: keep the lock in io_pipe_fixed()
     - io_uring: don't pass restart error codes to userspace
     - io_uring/net: don't retry recv on uncommitted buffers
     - io_uring/timeout: no ABS update of multishot timeouts
     - io_uring/timeout: don't end a linked timeout with 1
     - io_uring: look up the file before queueing to io-wq
     - io_uring/poll: avoid retry wakeup loss when dropping ownership
     - io_uring/timeout: don't put a sequence target behind the last flush
     - io_uring/timeout: don't flush with the sequence behind the last flush
     - io_uring/timeout: don't lose a cancel as io-wq arms a timeout
     - io_uring/poll: don't loop on HUP with multiple references
     - io_uring/net: keep recv buffer select length within MAX_RW_COUNT
     - io_uring/wait: wake real-time waiters from hard interrupt context
     - io_uring/waitid: prevent cancel reference wrap
     - io_uring: end the drain when the drain request completes
     - io_uring: keep the drain active when a deferred drain request is started
     - keys: Avoid the owner account dereference in named keyring lookup
     - keys: Check the authorization payload in process keyring searches
     - keys: Protect the type name while describing a key
     - keys: make keyring indexes independent of kernel addresses
     - keys: Protect the read method check against type removal
     - KEYS: Fix key_reject_and_link() race with keyring restriction
     - KEYS: trusted: Fix blob allocation size in tpm2_key_decode()
     - keys/trusted_keys: return immediately after TPM unseal failure
     - asymmetric_keys: reject trust keys without IDs
     - ftrace: Initialize modname and offset in print_rec()
     - coredump: hold RCU while releasing parked threads
     - signal: don't retarget shared signals in a dying thread group
     - signal: only SIGKILL and the freezers interrupt a coredumping task
     - ptrace: refuse to change the signal mask of a user worker
     - fork: release the files of a failed fork after sched_cancel_fork()
     - exit: hang up the tty before closing the files
     - signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL
     - coredump: prevent TIF_NOTIFY_SIGNAL from interrupting coredumps
     - pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
 .
   [ Salvatore Bonaccorso ]
   * net: skbuff: propagate shared-frag marker in skb_zerocopy()
   * ALSA: usb-audio: Avoid applying boot quirk for Behringer UMC204HD
     (Closes: #1151339)
linux (7.2.13-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.2.13
     - ksmbd: exempt FSCTL_PIPE_TRANSCEIVE from the generic file-id lookup
     - [arm64] i2c: qcom-geni: Restore the source-clock selection policy
     - [arm64,armhf] soc/tegra: fuse: Add missing newline to APBMISC error
       message
     - ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition
     - power: supply: Fix maintenance charge table kernel-doc
     - power: supply: ds2780: Fix ds2780_get_capacity() returning raw value
     - [arm64,armhf] soc/tegra: pmc: Fix uninitialised clock rate
     - Drivers: hv: Avoid infinite retry loop in init_vp_index()
     - [amd64] x86/hyperv: Avoid using per-cpu output page in
       hv_apicid_to_vp_index()
     - Drivers: hv: Don't reset VMBus connection state on error/exit paths
     - [arm64] pinctrl: qcom: nord: fix GPIO interrupt target width
     - [arm64] pinctrl: qcom: hawi: Fix intr_target_width
     - [arm64] pinctrl: qcom: qcs8300: Fix intr_target_width
     - [arm64] pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13
     - [arm64] pinctrl: qcom: spmi-gpio: make direction changes exclusive
     - tools/power turbostat: Warn, but don't Err on out-dated perf systems
     - tools/power turbostat: Fix fd_perf leak on reset
     - tools/power turbostat: Fix CWF PMT off-by-one
     - tools/power turbostat: Fix PMT error path fd handling
     - tools/power turbostat: Fix add_counter issue if > 24 counters.
     - power: supply: generic-adc-battery: Fix temperature IIO channel conversion
     - power: supply: core: prevent unregistering a power supply while a callback
       runs
     - [arm64] pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12
     - pinctrl: sunxi: dt: do not accumulate npins across probe attempts
     - drm/vc4: hdmi: Move packet RAM enable to PM runtime
     - gpio: nct6694: Mark the GPIO controller as sleeping
     - vsock: treat TCP_CLOSING as once-established
     - net/rds: don't let the rdma_cm destroy an id RDS still owns on route
       failure
     - [amd64] accel/amdxdna: Fix Kconfig invalid configuration
     - [amd64] ASoC: Intel: avs: Reset the stream unless it is already prepared
     - [armhf] ASoC: stm32: spdifrx: fix synchronization state check
     - ASoC: cs42l56: Put the Limiter Cushion control on the limiter register
     - ASoC: cs42l52: Fix the NG Type Switch bit
     - ASoC: pcm3168a: Fix the DAC zero flag polarity bit
     - ASoC: max98371: Fix the Speaker DHT Min Volume bits
     - ASoC: wm8978: Fix the 128x oversampling switch bits
     - ASoC: nau8822: Fix the 128x oversampling switch bits
     - regmap: Drop map lock during cache init and exit
     - netlink: reset skb headers before unicast and multicast filtering
     - net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool
     - net/mlx5: HWS, fix flow meter offset within its bulk
     - [amd64] ASoC: amd: yc: disable MSI on resume
     - drm/xe: skip eviction of a BO with no resource
     - drm/xe/oa: Zero OA buffer at allocation
     - spi: tegra114: assert CS GPIO for every transfer in a message
     - nios2: fix __wsum type degradation in csum_fold()
     - scsi: st: Save the visited block for the partition the drive is in
     - scsi: target: Disable interrupts while holding delayed_cmd_lock
     - scsi: target: iscsi: Fix race in discovery auth updates
     - sched/core: Call wakeup_preempt() for queued tasks during class change
     - entry: Account the deferred hrtimer rearm as hardirq context for lockdep
     - iommupt/kunit: Use if_changed_rule for the kunit
     - [arm64] drm/panthor: fix immortalis condition
     - ocfs2/dlm: Protect the recovery list during debugfs reads
     - exit: fix lost-update race on the child_subreaper bitfields
     - pipe: preserve existing fasync readers on writer setup failure
     - tracing: Fix empty symbol names in simple_ring_buffer undef check
     - tracing: Fix simple_ring_buffer undef check on parisc
     - tracing: Fix simple_ring_buffer undef check on sparc64
     - ring-buffer: Skip si_mem_available() for persistent and remote buffers
     - tracing: probes: error if BTF is required but unavailable
     - scsi: libsas: Fix SMP IO deadlock during HA resume
     - netlink: avoid hashing the network namespace pointer
     - net: hisilicon: hisi_femac: Move setting of netops to fix crash
     - net: hisilicon: hip04_eth: Move setting of netops to fix crash
     - net: ethernet: actions: Move setting of netops to fix crash
     - net: mv643xx: move setting of netops to fix crash
     - net: au1000: move setting of netops to fix crash
     - net: ethoc: move setting of netops to fix crash
     - net: ethernet: aeroflex: move setting of netops to fix crash
     - net: ti: icssm-prueth: Move setting of netops to fix crash
     - net: bcmgenet: unshare the skb before writing the control block
     - calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
     - gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
     - gpio: mxc: fix race between chained IRQ handler install and probe
       completion
     - gpio: mxc: fix both_edges bit operations
     - gpio: mxc: fix wakeup_pads bit operations
     - gpio: mxc: fix race between gpiochip registration and IRQ domain setup
     - ring-buffer: Use subbuf_order in available memory estimation
     - net: stmmac: dwmac1000: clear the RGMII status interrupt
     - [amd64] perf/x86/intel/uncore: Fix DMR CXL CM invert filter
     - perf: Fix perf_pmu_migrate_context() leaving events behind
     - printk: Postpone kthread startup
     - PCI: Ignore Immediate Readiness on Samsung 990 PRO and 990 EVO Plus NVMe
       (Closes: #1112238)
     - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV
       (Closes: #1112238)
     - [amd64] x86/insn-eval: Fix shadowed segment index in
       get_seg_reg_override_idx()
     - firewire: core: fix race condition in split transaction handling
     - 9p: free the session after a grace period
     - afs: free the super info after a grace period
     - ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH
       capture
     - ASoC: SOF: sof-client: Use event-handler mutex consistently
     - autofs: ignore notification errors from a replaced pipe
     - unicode: free the map after a grace period
     - watch_queue: Fix note pool publication race in watch_queue_set_size()
     - [amd64] x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI
       context
     - [amd64] KVM: SEV: Fix page dirtying in sev_gmem_post_populate()
     - [amd64] KVM: nVMX: Reset MMU back to the root MMU if loading L2 state
       fails for !VM-Entry
     - fsnotify: prevent mark additions during connector teardown
     - pid_namespace: make zap_pid_ns_processes() freezable
     - ext4: free the sbi after a grace period
     - eventfs: Free the eventfs_inode after an rcu grace period too
     - ipc: drop the mqueue mount with kern_unmount() on setup failure
     - namespace: a mount that copy_tree() leaves out can't take over a lock
     - namei: test for a negative dentry the way traverse_mounts() does
     - futex: Fix mm reuse handling for FUT_OFF_MMSHARED
     - [arm64] lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON
       state
     - lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()
     - mshv_vtl: Check per-CPU register page before mmap
     - net/sched: fix use-after-free in __tcf_action_put()
     - net: rds: fix uninitialized trans dereference in CM event handler
     - [amd64] pinctrl: amd: Clear S4 wake bits when firmware has _AEI
     - power: sequencing: qcom-wcn: power off WLAN at probe
     - [riscv64]  dts: microchip: beaglev-fire: remove double definition of gpio
       interrupts
     - sctp: revalidate output stream after association connect wait
     - spi: imx: fix slab corruption from undersized DMA bounce buffers
     - tools/power turbostat: Read complete CPU lists
     - tools: gpio: fix building from the top level with O=
     - tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace
       fields
     - gpio: shared: fix use-after-free bug when adding shared proxies
     - gpio: shared: gracefully handle no-device lookup of shared GPIOs
     - i2c: qcom-cci: Fix HALT_ACK reset request being dropped
     - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
     - i2c: xiic: restore non-managed runtime PM to fix clk WARN flood
     - perf: Track the perf mlock gift separately
     - perf: Update cgroup time when rotating multiplexed events
     - ring-buffer: Do not show buffer_meta for CPUs without a buffer
     - ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()
     - ring-buffer: Fix false warning in ring_buffer_map_get_reader()
     - scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
     - scsi: st: Fix use-after-free race between st_remove() and st_open()
     - scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
     - scsi: libiscsi: Reject a negative task index from parse_pdu_itt
     - scsi: libiscsi: Validate the ITT reflected in a Reject PDU
     - scsi: libiscsi: Validate the task named by a management response
     - drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
     - drm/amd/pm: add zero fan stop temperature support on smu 14.0.2
     - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang
     - drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already
       set
     - drm/amdgpu: destroy mutex when tearing down ttm buffer entity
     - drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
     - drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
     - drm/amdgpu: fix sched entity leak in ttm buffer entity init
     - drm/amdgpu: keep the eviction fence until the last handle is closed
     - drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES
     - drm/exec: don't immediately add prelocked obj to array of locked objs
     - [amd64] drm/i915/cx0_phy: Fix ARL-S host bridge detection
     - [amd64] drm/i915/dmc: Add sanity check for DMC load address
     - drm/xe: Bump LRU for external objects on exec and rebind
     - drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state
       change
     - sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred
       reenqueue
     - sched_ext: idle: Respect task affinity in restricted CPU selection
     - sched_ext: Propagate every bypass depth change to the descendants
     - tracing: Fix the shift out of bounds in the log2 histogram modifier
     - tracing: Keep the predicate limit separate from program capacity
     - tracing: Take trace_types_lock when dropping the buffer_meta reference
     - tracing: Check operator stack capacity before pushing
     - tracing: Do not initialize tracefs work if tracing is disabled
     - tracing: Fix crash in print_graph_function_event()
     - tracing: Fix hist trigger timestamps for buffered events
     - tracing: Fix ignored return value of resize_buffer_duplicate_size()
     - wifi: p54: validate firmware record lengths
     - tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
     - tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
     - cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children
     - cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()
     - cifs: don't update i_size in cifs_do_truncate without a cached handle
     - dm cache: fix demotion stats in passthrough mode
     - dm cache: fix issue with background work locking
     - dm-crypt: fix a tiny race condition in crypt_dec_pending
     - dm-ebs: fix incorrect device offset check in ebs_ctr()
     - dm-integrity: fix infinite loop on discard with large tag size
     - dm-integrity: require stable writes for internal hash modes
     - mac802154: fix data race and NULL deref on local->assoc_dev
     - net/iucv: fix the recvmsg window update
     - xfs: don't hold buffer locks across sync transaction commit in
       xfs_sync_sb_buf
     - xfs: fix capability check in xfs
     - xfs: fix zoned write iomap flags assignments
     - netlink: specs: fix the conntrack filter type
     - netlink: specs: add missing mask attributes for conntrack dump
     - io_uring/cancel: don't spin on local work the task can't run
     - workqueue: Use raise_softirq() to trigger softirq in irq_work handler
     - workqueue: Annotate cb_lock nesting when draining a dead BH pool
     - tipc: protect node reset trace dump with node lock
     - selinux: fix BPF token permission checks
     - sctp: validate chunk length in the inqueue parser
     - page_pool: keep frag_offset aligned for odd-sized requests
     - [s390x] ctcm: Prevent XID null dereference
     - [s390x] pai: Handle multiple PMU stop callback invocations
     - [s390x ]pci: Fix leak of uninitialized kernel data in SCLP report
     - vsock/virtio: validate packet source for connected sockets
     - vsock/vmci: validate packet source for connected sockets
     - ipv4: avoid divide by zero in fib_rebalance
     - drm/amdgpu: Fix VCE 3 ring align_mask
     - [amd64] KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
     - drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction
     - drm/amdgpu/userq: actually validate userq BOs
     - [amd64] drm/i915/dmc: Harden DMC firmware payload parsing
     - net: bridge: mcast: don't truncate the port group walk on teardown
     - net: ntb_netdev: Fix statistics races
     - net: psp: do not inherit the Rx association on clone
     - ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
     - ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
     - ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
     - net/sched: cls_flower: validate mask pointer after nla_next()
     - smb: client: fix data corruption with concurrent writes and O_TRUNC
     - smb: client: fix heap overflow in cifs_do_set_acl()
     - smb: client: fix multiuser mount with krb5
     - smb: client: reject SetEA requests that do not fit the request buffer
     - ntfs: handle signal interruption in fallocate
     - ntfs: fix FITRIM range alignment
     - ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
     - ntfs: fix undefined behavior in mft/index record size calculation
     - genirq/proc: Fix missing CPU header in /proc/interrupts
     - drm/amdgpu: Remove the bo list mutex
     - drm/amdgpu: free the userptr ranges when a CS fails after parser_bos
     - sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on
       its CPU's local DSQ
     - sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an
       ancestor
     - workqueue: Fix unbound pool lifetime for pending pwqs
     - ntfs: use pagecache_isize_extended() on size extension
     - ntfs: take invalidate_lock in ntfs_setattr_size()
     - ntfs: fix resident conversion in ntfs_new_attr_flags
     - ntfs: move attribute payload before shrinking its record
     - ntfs: fix memmove overlap in ntfs_new_attr_flags
     - smb: client: drain outstanding I/O before truncating on O_TRUNC open

mairix (0.24+git20260522-1) unstable; urgency=medium
 .
   * New upstream git snapshot (commit 8a1efe0). Upstream has not tagged a
     release since 0.24 (2017) so this includes nine years of fixes:
     - Fix out-of-memory crash on certain malformed messages
       (Closes: #652065).
     - Raise the limit of 65536 mboxes and messages per mbox
       (Closes: #820823).
     - Fix use-after-free in IMAP code, out-of-bounds reads, undefined
       behaviour and memory leaks when parsing malformed messages.
     - Add bounds checks when reading the database.
     - Preserve UTF-8 bytes in token searches.
     - Add support for MMDF folders and xz-compressed mboxes.
     - Add sort=date+ option and number MH results from 1.
   * Drop debian-changes (mairixrc(5) reflow); merged upstream.
   * Switch configure's sed delimiter from '%' to '|' so build flags
     containing '%' work. Thanks to Viktor Pashaiev (Closes: #1150750).
     Forwarded upstream as https://github.com/vandry/mairix/pull/41.
   * Build-depend on liblzma-dev for xz-compressed mbox support.
   * Bump debhelper compat level from 9 to 13 via debhelper-compat; drop
     debian/compat. Run the test suite with --no-parallel, since its check
     target is not parallel-safe.
   * Write version.txt from the changelog version before configure so the
     binary does not report "DEVELOPMENT".
   * Add the tbl preprocessor hint ('\" t) to mairix.1 so its tables
     render; fixes the lintian groff-message warning.
   * Rewrite debian/watch to track upstream git tags at
     github.com/vandry/mairix; the old URL only matched release tarballs,
     which upstream never publishes.

netkit-ftp-ssl (0.17.34+really0.17-4) unstable; urgency=medium
 .
   * QA upload.
   * debian/copyright: Update packaging copyright information.
   * debian/salsa-ci.yml: Add to provide CI tests for Salsa.
   * debian/tests/control: Create autopkgtest.

node-axios (1.21.0-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.21.0

node-crc (4.3.2-4) unstable; urgency=medium
 .
   * remove myself from Uploaders:

node-express-rate-limit (8.7.3-1) unstable; urgency=medium
 .
   * New upstream version 8.7.3
   * Add missing runtime dependency on node-debug

node-invert-kv (3.0.1-3) unstable; urgency=medium
 .
   * remove myself from Uploaders:

node-ip-address (10.7.6-1) unstable; urgency=medium
 .
   * New upstream version 10.7.6

node-jasmine (7.0.0+~cs15.1.2-1) unstable; urgency=medium
 .
   * Embed @jasmine/reporters
   * New upstream version 7.0.0+~cs15.1.2
   * Update debian/copyright

php-symfony-contracts (3.8.1-1) unstable; urgency=medium
 .
   [ Nicolas Grekas ]
   * [Cache][Contracts][Scheduler] Report failed saves through the
     $metadata argument of CacheInterface::get()
   * [Contracts][DependencyInjection] Pass a shutdown flag to service
     reset methods
 .
   [ Grégory Planchat ]
   * [HttpClient] Expose HTTP trailers as the "trailers" response info

pngcrush (1.8.13-6) unstable; urgency=medium
 .
   * Team upload.
   * d/watch: update to Version 5
   * Bump debhelper-compat 14
   * d/control: Build-Depends add dh-sequence-single-binary

pngmeta (1.11-12) unstable; urgency=medium
 .
   * Team upload.
   * d/rules: enable export DEB_BUILD_MAINT_OPTIONS=hardening=+all
   * Bump debhelper-compat 14
   * d/control: Build-Depends add dh-sequence-single-binary
   * d/watch:
       - update Source URL, add @ANY_VERSION@ tailer
       - update Matching-Pattern, add Filename-Mangle
       - add Pgp-Mode: none
   * add d/s/lintian-overrides for d/watch

pyenphase (6.0.0-1) unstable; urgency=medium
 .
   * New upstream release.

pyocd (0.46.0+ds-1) unstable; urgency=medium
 .
   * New upstream version 0.46.0+ds

python-fullykiosk (0.0.17-1) unstable; urgency=medium
 .
   * New upstream release.

python-itemadapter (0.14.0-1) unstable; urgency=medium
 .
   * New upstream version.
   * Add B-D: dh-sequence-single-binary.

python-mastodon (2.3.3-1) unstable; urgency=medium
 .
   * New upstream release

python-roborock (7.15.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * Skip CLI tests.

python-vermin (1.9.2-1) unstable; urgency=medium
 .
   * Update to vermin 1.9.2: supports Python 3.15
   * Docs: Use upstream man pages instead of help2man

python-xsdata (26.10-1) unstable; urgency=medium
 .
   * New upstream version 26.10
   * Refresh patches.
   * Set debhelper compatibility to 14.
   * Update year in d/copyright.
   * Use Makefile variable for .
   * Set X-Style: black and reformat.
   * Switch Testsuite to autopkgtest-pkg-pybuild.
   * Fix manpage generation with click-man (Closes: #1149258).
python-xsdata (26.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Use click-man executable instead of python3 -m click_man
   * Add salsa-ci.yml.
   * Update standards version to 4.7.4, no changes needed.
   * Set upstream metadata fields: Documentation.

qviaggiatreno (2013.7.3-16) unstable; urgency=medium
 .
   * Add parsing for italo trains

r-bioc-tximportdata (1.40.0+ds1-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Steffen Moeller ]
   * Fixed lintian errors by correctng time of package creation of 1.40.0-1.
 .
   [ Charles Plessy ]
   * Repack (+ds1) keeping a small subset of inst/extdata (salmon_dm/SRR1197474
     and alevin/mouse1_LPS2_50, 1.4 MB compressed) with Files-Included, so
     that the autopkgtests of r-bioc-tximeta can find their input files.
r-bioc-tximportdata (1.40.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version.
r-bioc-tximportdata (1.34.0+ds-4) unstable; urgency=medium
 .
   * Team upload.
   * Packaging update (routine-update)
   * Use uscan v5 $template template. (routine-update)
   * Standards-Version: 4.7.4 (routine-update)
   * Remove skip-not-installable in d/t/autopkgtest-pkg-r.conf (routine-
     update)
   * Restrict to R packages team core architectures (routine-update)
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)
   * lintian-brush: add d/u/metadata (routine-update)
r-bioc-tximportdata (1.34.0+ds-3) unstable; urgency=medium
 .
   * Team upload.
   * Packaging update (routine-update)
   * Standards-Version: 4.7.3 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * Restrict to 64-bits architectures (routine-update)
   * Restrict to little-endian architectures (routine-update)
r-bioc-tximportdata (1.34.0+ds-2) unstable; urgency=medium
 .
   * Upload to unstable.
r-bioc-tximportdata (1.34.0+ds-1) experimental; urgency=medium
 .
   * New upstream version
   * Standards-Version: 4.7.0 (routine-update)
r-bioc-tximportdata (1.32.0+ds-1) unstable; urgency=medium
 .
   * Upload to unstable
r-bioc-tximportdata (1.32.0+ds-1~0exp) experimental; urgency=medium
 .
   * New upstream version
   * d/tests/autopkgtest-pkg-r.conf: skip on 32-bit architectures.
r-bioc-tximportdata (1.30.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
r-bioc-tximportdata (1.28.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.6.2 (routine-update)
   * Reduce piuparts noise in transitions (routine-update)
   * Add debian/tests/autopkgtest-pkg-r.conf
r-bioc-tximportdata (1.26.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
r-bioc-tximportdata (1.24.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.6.1 (routine-update)
   * Reorder sequence of d/control fields by cme (routine-update)
r-bioc-tximportdata (1.22.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
r-bioc-tximportdata (1.20.0+ds-2) unstable; urgency=medium
 .
   * Team upload.
   * Disable reprotest
   * dh-update-R to update Build-Depends (3) (routine-update)
r-bioc-tximportdata (1.20.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * Initial release (closes: #993472)

r-cran-argparse (2.3.3+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * Packaging update (routine-update)
   * Use uscan v5 $template template. (routine-update)
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * Restrict to R packages team core architectures (routine-update)
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)

reproject (0.21.0-2) unstable; urgency=medium
 .
   * No-change re-upload to trigger rebuild with Python 3.15

robotframework (7.5.1+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 7.5.1+dfsg

ruby-bunny (3.5.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.

ruby-fastimage (2.4.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Bump debhelper-compat to 14, dropping ${misc:Depends},
     ${shlibs:Depends}, and ${ruby:Depends} from runtime dependencies.
   * Stub the tests that contact public hosts.
   * Refresh build dependencies.
   * Update the package description.
   * Refresh the copyright file.

ruby-rubocop-ast (1.50.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Allow Prism 2.

ruby-rubocop-discourse (4.0.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Do not require Bundler in the specs.
   * Run the specs against the installed gem.
   * Enable the test suite.
   * Depend on ruby-rubocop-ast (>= 1.50.0-2).
   * Refresh the copyright file.

ruby-specinfra (2.95.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Refresh patches.
   * Run the test suite with gem2deb's RSpec task.
   * Drop the unused bundler build dependency.
   * Refresh the copyright file.

rust-concurrent-queue (2.5.0-5) unstable; urgency=medium
 .
   * Team upload.
   * Run the instrumented Loom tests in autopkgtest, with exploration bounded
     to 10,000 permutations per model.
   * Put autobenches in the package table so Cargo honours it.
   * Reenable the optional Loom dependency with upstream's 0.7 requirement.
   * Declare the custom cfg(loom) for compiler configuration checking;
     enabling the Cargo feature alone does not activate model checking.

rust-debian-rust-rdeps (0.1.1-1) unstable; urgency=medium
 .
   * Package debian-rust-rdeps 0.1.1 from crates.io using debcargo 2.8.4
rust-debian-rust-rdeps (0.1.0-1) unstable; urgency=medium
 .
   * Package debian-rust-rdeps 0.1.0 from crates.io using debcargo 2.8.4

rust-framework-lib (0.6.6-1) unstable; urgency=medium
 .
   * Package framework_lib 0.6.6 from crates.io using debcargo 2.8.4
   * d/p/clap-mangen-0.3.patch: use clap_mangen v0.3
   * d/p/drop-smartmon.patch: drop smartmontools feature (smartmon not packaged,
     vendors smartmontools sources)

rust-framework-tool (0.6.6-1) unstable; urgency=medium
 .
   * Package framework_tool 0.6.6 from crates.io using debcargo 2.8.4
   * Remove d/framework_tool.1 as it is produced by upstream now

rust-loom (0.7.2-3) unstable; urgency=medium
 .
   * Team upload.
   * Extend the 32-bit atomic fix to run the 64-bit atomic tests on every
     target that supports those operations, including i386.
rust-loom (0.7.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Package loom 0.7.2 from crates.io using debcargo 2.8.5+alpha.0
   * Add patch from upstream to build on 32-bit systems.

rust-pgp (0.21.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Package pgp 0.21.0 from crates.io using debcargo 2.8.5+alpha.0
   * Disable the test_compression_quine test.

rust-ron (0.12.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Package ron 0.12.2 from crates.io using debcargo 2.8.4
   * Keep the sign of -NaN when an untyped float is narrowed to f32.
   * Preserve the sign when widening an f32 NaN to f64.
   * Drop the riscv64 skips for -NaN tests.
rust-ron (0.12.2-1) unstable; urgency=medium
 .
   * Team upload.
   * Package ron 0.12.2 from crates.io using debcargo 2.8.4

rust-secp256k1 (0.33.1-1) unstable; urgency=medium
 .
   * Package secp256k1 0.33.1 from crates.io using debcargo 2.8.3

rust-secp256k1-sys (0.14.1+dfsg-4) unstable; urgency=medium
 .
   * Package secp256k1-sys 0.14.1 from crates.io using debcargo 2.8.3
   * Build the vendored contrib/lax_der_parsing.c (and its header) with the cc
     crate so that ecdsa_signature_parse_der_lax() remains available when
     linking against the system libsecp256k1, which does not export that
     function.  This restores secp256k1::ecdsa::Signature::from_der_lax() in
     the downstream secp256k1 crate.
rust-secp256k1-sys (0.14.1+dfsg-3) unstable; urgency=medium
 .
   * Package secp256k1-sys 0.14.1 from crates.io using debcargo 2.8.3
rust-secp256k1-sys (0.14.1+dfsg-2) unstable; urgency=medium
 .
   * Package secp256k1-sys 0.14.1 from crates.io using debcargo 2.8.3
rust-secp256k1-sys (0.14.1+dfsg-1) unstable; urgency=medium
 .
   * Package secp256k1-sys 0.14.1 from crates.io using debcargo 2.8.3

rust-serde-transcode (1.1.1-2) unstable; urgency=medium
 .
   * Package serde-transcode 1.1.1 from crates.io using debcargo 2.8.4
   * Avoid overflowing the usize test on 32-bit.
rust-serde-transcode (1.1.1-1) unstable; urgency=medium
 .
   * Package serde-transcode 1.1.1 from crates.io using debcargo 2.8.4

rust-socketpair (0.19.8-4) unstable; urgency=medium
 .
   * Team upload.
   * Package socketpair 0.19.8 from crates.io using debcargo 2.8.4
   * Enable rustix's time feature so its net backend builds.

rust-tokio-happy-eyeballs (0.1.0-1) unstable; urgency=medium
 .
   * Package tokio-happy-eyeballs 0.1.0 from crates.io using debcargo 2.8.3

rust-zeroize (1.9.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Package zeroize 1.9.1 from crates.io using debcargo 2.8.2
   * Drop fix-tests-alloc-allocator-assert.patch: upstream now tracks the
     registered allocation by pointer instead of by size (upstream #1519).

sbt-util-interface (2.0.12-1) unstable; urgency=medium
 .
   * New upstream release 2.0.12, the version sbt 2.0.12 uses.
   * Bump debhelper-compat to 14.
   * debian/copyright: say what NOTICE covers.
   * debian/rules: sort the javac file list.
sbt-util-interface (1.11.7-1) unstable; urgency=medium
 .
   * Initial release. Pure-Java org.scala-sbt:util-interface, a bootstrap
     building block for re-introducing the sbt toolchain (and modern
     Scala) into Debian. (Closes: #1139638)

scotch (7.0.18-2) unstable; urgency=medium
 .
   * debian patch cmake_config_defines.patch adds SCOTCH_DEFINITIONS to
     public interface (compile options) of library cmake config files.
     Required to propagate 64-bit integer flags (INTSIZE IDXSIZE).
     Reinstate test_arch_deco_* for _64i. Closes: #1150637
scotch (7.0.18-1) unstable; urgency=medium
 .
   * New upstream release

staticsite (2.5-3) unstable; urgency=medium
 .
   * QA Upload
   * Drop "Rules-Requires-Root: no": it is the default now
   * Add debian/watch
   * Disable useless Salsa CI jobs
   * Replace build-dep python3-tz with python3-pytz (Closes: #1122158)
   * Skip failing tests for now (Closes: #1120194)
   * Bump Standards-Version to 4.7.4, drop Priority: tag
staticsite (2.5-2) unstable; urgency=medium
 .
   * Maintainer set to Debian QA Group <packages@qa.debian.org>
staticsite (2.5-1) unstable; urgency=medium
 .
   * New upstream version (see NEWS.md for changes). Closes: #1078321
staticsite (2.4-1) unstable; urgency=medium
 .
   * New upstream version (see NEWS.md for changes)
   * Disabled manpage generation in debian/rules, as the manpage is shipped
     upstream
staticsite (2.3-1) unstable; urgency=medium
 .
   * New upstream version (see NEWS.md for changes)
staticsite (2.2-1) unstable; urgency=medium
 .
   * New upstream version (see NEWS.md for changes)
staticsite (2.1-1) unstable; urgency=medium
 .
   * New upstream version (see NEWS.md for changes)
   * Point Vcs-* to Salsa
staticsite (2.0-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * debian/copyright: use spaces rather than tabs to start continuation lines.
   * Bump debhelper from old 12 to 13.
   * Set debhelper-compat version in Build-Depends.
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse.
 .
   [ Enrico Zini ]
   * New upstream version
staticsite (1.6-2) unstable; urgency=medium
 .
   * Source-only build for transition into testing
staticsite (1.6-1) unstable; urgency=medium
 .
   * New upstream version
      - Deal gracefully with broken symlinks (#55)
      - Open links from link collections in new tabs
      - Use topological sorting from python's stdlib if available (#56)
      - Fixed `title` and `parent` metadata of dir pages to match
        [documentation](doc/reference/dir.md) (#56)
      - Fixed missing `page.meta.site_name` when evaluating `template_title` and
        `template_description` (#51)
      - Fixed broken `page.name` references in example site (#50)
      - Added a title to archive pages in the default theme (#50)
      - Documented that taxonomy archive pages are created using the syndication feature (#50)
      - Forward port to Jinja3. Thanks Tobias Gruetzmacher
      - Work with newer python3-markdown, Thanks @donkult (#58)
      - Fixed filesystem-dependent test failure (#54)
   * Updated Standards-Version, no changes required
staticsite (1.5-1) unstable; urgency=medium
 .
   * New upstream version
      - Polished code repository use case. See NEWS.md for details.
      - Forward ported to Jinja3
   * Fixed versioned dependency on debhelper
staticsite (1.4.1-1) unstable; urgency=medium
 .
   * New upstream version
      - Fixes after some use. See NEWS.md for details.
staticsite (1.4-1) unstable; urgency=medium
 .
   * New upstream version
      - Polished blogging use case. See NEWS.md for details.
staticsite (1.3-1) unstable; urgency=medium
 .
   * New upstream version
      - Consolidated existing features, see NEWS.md
      - Themes can now extend existing themes
      - Standard themes are now distributed in /usr/share/staticsite/themes,
        and it's possible to add/package new ones
staticsite (1.2-1) unstable; urgency=medium
 .
   * New upstream version
      - Significant code and feature cleanup
      - Requires some porting on existing sites. See upgrade notes in NEWS.md
staticsite (1.1-1) unstable; urgency=medium
 .
   * New upstream version
      - More 'Feature' features and documentation
      - Reuse unchanged contents in build directory to speed up build
staticsite (1.0-1) unstable; urgency=medium
 .
   * New upstream version
      - Big clean up of code structure
      - Support for site-specific pluggable features
      - Implemented data pages to provide pure datasets as page sources
      - Cache rendered Markdown to speed up site rebuilds
staticsite (0.5-1) unstable; urgency=medium
 .
   * New upstream version
   * Added copyright of example assets to debian/copyright
   * Made livereload an optional dependency
   * Depends on python3-tz. Closes: #860305.
staticsite (0.4-1) unstable; urgency=low
 .
   * Initial version. Closes: #830582.

sudo (1.9.17p2-11) unstable; urgency=medium
 .
   * really upload to unstable
 .
 sudo (1.9.17p2-10) experimental; urgency=medium
 .
   * upload to unstable
 .
 sudo (1.9.17p2-9exp2) experimental; urgency=medium
 .
   * add pam_keyinit to pam.d snippets.
     Thanks to Simon Ruggier <simon80@gmail.com>, Sebastian Mohr <sebi@debian.sebi.name>, Guilhem Moulin <guilhem@debian.org>
     (Closes: #906752, #939357)
 .
 sudo (1.9.17p2-9exp1) experimental; urgency=medium
 .
   [ Mike Gabriel ]
   * d/control: B-D on Dh-nss (>= 1.8~)
   * d/sudo.nss: Authoritatively manage sudoers: entry in nsswitch.conf.
     (Closes: #1147179)
sudo (1.9.17p2-10) experimental; urgency=medium
 .
   * upload to unstable
sudo (1.9.17p2-9exp2) experimental; urgency=medium
 .
   * add pam_keyinit to pam.d snippets.
     Thanks to Simon Ruggier <simon80@gmail.com>, Sebastian Mohr <sebi@debian.sebi.name>, Guilhem Moulin <guilhem@debian.org>
     (Closes: #906752, #939357)
sudo (1.9.17p2-9exp1) experimental; urgency=medium
 .
   [ Mike Gabriel ]
   * d/control: B-D on Dh-nss (>= 1.8~)
   * d/sudo.nss: Authoritatively manage sudoers: entry in nsswitch.conf.
     (Closes: #1147179)

symfony (7.4.23+dfsg-1) unstable; urgency=medium
 .
   [ Nicolas Grekas ]
   * [Config] Do not validate XML documents on pars (GHSA-5jff-8h8q-r5qx)
   * [HtmlSanitizer] Fix meta refresh URL sanitization bypass
     (GHSA-wm2w-4mgj-vw33)
   * [Validator] Reject non-public IP addresses in the no-priv, no-res
     and only-public modes (GHSA-4qpf-57w4-m3wc)
   * [HtmlSanitizer] Require special schemes and scheme-relative URLs to
     carry a non-empty authority [CVE-2026-118517]
   * [HttpClient] Don't send the options of the default scope to other
     origins in ScopingHttpClient (GHSA-gq53-v8w2-gjhj)
   * [Security] Run the checkPostAuth() method of user checkers when
     authenticating users programmatically (GHSA-8f57-m8wj-x65w)
   * [HttpClient] Pin the IP of cached hosts in NoPrivateNetworkHttpClient
     (GHSA-c7hm-wqwp-f9v8)
   * [Serializer] Lowercase the scheme of data URIs before opening them
     (GHSA-pxj9-jh84-vhm5)
   * [Security] Parse the DN into RDNs before extracting the user identifier
     [CVE-2026-118513]
   * [HttpKernel] Don't decode CSV and YAML payloads unless acceptFormat
     lists them (GHSA-hwfg-qwvh-2wfx)
   * [Serializer] Don't build UploadedFile and other file objects from
     denormalized data [CVE-2026-118515]
   * [HtmlSanitizer] Apply the URL policy to srcset and imagesrcset
     (GHSA-q8jq-xrf4-v5j8)
   * [HttpFoundation] Add the list of private ranges usable as trusted proxies
     (GHSA-xg2q-4rrq-657q)
   * [HttpKernel] Restore the router context of the parent request after a
     sub-request (GHSA-wg5q-m2ww-f3c9)
   * [Routing] Prevent host placeholders from matching the path in compiled
     matchers [CVE-2026-118516]
   * [Filesystem] Only treat a valid URI scheme as the root of a path
     (GHSA-6prc-h956-hxjq)
   * [Serializer] Ignore undeclared property paths when denormalizing
     (GHSA-hqp2-7rr8-hf26)
   * [HttpFoundation] Match HEAD requests when GET is listed in a RequestMatcher
     [CVE-2026-118514]
   * [HttpFoundation] Don't let Request::getBaseUrl() start with a host chosen by
     the client (GHSA-5mx8-mwrp-5693)
   * [JsonPath] Evaluate absolute queries in filters once per query instead of
     once per node (GHSA-cpww-5vpx-72x7)
 .
   [ Fabien Potencier ]
   * Update VERSION for 7.4.23
 .
   [ Jack Worman ]
   * [HttpFoundation] Don't match the script name in Request::getBaseUrl() when
     it's only the start of a path segment (GHSA-3h27-hjv7-fqjx)
 .
   [ David Prévot ]
   * Set Multi-Arch: foreign for php-symfony-redis-messenger

therion (6.4.1-1) unstable; urgency=medium
 .
   * New upstream release (closes: #1151595)
   * debian/control: added libmagick++-dev dependency as a consequence
     of upstream changes.

twodict (1.2-6) unstable; urgency=medium
 .
   * Team upload.
   * Let pybuild manage test files so that they are removed correctly at the
     end of the test session and don't end up in the package, fixing FTBFS with
     recent dh-python (Closes: #1151488).
   * Enable upstream tests as autopkgtest.
   * Update Standards-Version to 4.7.4 (no changes required).

ufo-filters (0.17.0.76.g691aa0e+dfsg1-3) unstable; urgency=medium
 .
   * Team upload
   * autopkgtest: Use nearest instead of texture mode
 .
   [ Picca Frédéric-Emmanuel ]
   * d/t/control: Added ROCm autopkgtest
 .
   [ Colin Watson ]
   * Build with -DCMAKE_POLICY_VERSION_MINIMUM=3.5 (closes: #1113596).
ufo-filters (0.17.0.76.g691aa0e+dfsg1-2) unstable; urgency=medium
 .
   * d/t/no-ocl: Upgraded test of task introspection
   * Bug fix: "Transpose task missing properties", thanks to Stuart Read
     (Closes: #1108226).
   * Bug fix: "Fails to build source after successful build", thanks to
     Lucas Nussbaum (Closes: #1048701).
ufo-filters (0.17.0.76.g691aa0e+dfsg1-1) unstable; urgency=medium
 .
   * New upstream version 0.17.0.76.g691aa0e+dfsg1
ufo-filters (0.17.0.75.gcb0bd5a+dfsg1-1) unstable; urgency=medium
 .
   * Team Upload
 .
   [Serge Cohen]
   * New upstream version 0.17.0.75.gcb0bd5a+dfsg1
   * Added a small reconstruction as autopkgtest
   * Added a OpenCL-less autopkg test
   * Updated the list of tasks/plugins present in the package
   * Correcting dependency of the tests to libufo-bin
ufo-filters (0.16.0.267.gd856f91+dfsg1-1) unstable; urgency=medium
 .
   [ Neil Williams ]
   * Update control to add Debian PaN maintainers
 .
   [ Serge Cohen ]
   * New upstream version 0.16.0.172.g6f43afc+dfsg1
   * New upstream version 0.16.0.267.gd856f91+dfsg1
   * Incorporating many updates and addition from the github repository
   * Few bug corrections
   * Adding build-dep python3-sphinxcontrib.bibtex
   * Adding build-dep python3-sphinx-rtd-theme (and newer version of libufo1)
 .
   [ Picca Frédéric-Emmanuel ]
   * lintian-brush  - compat -> 13
   * wrap-and-sort -ast
   * use dh-sequence-sphinxdoc
   * d/rules: dh_missing --list-missing
ufo-filters (0.16.0.159.g483ce16-1) unstable; urgency=medium
 .
   * uploaded to unstable
 .
 ufo-filters (0.16.0.159.g483ce16-1~exp2) experimental; urgency=medium
 .
   * d/control: build depends libufo-dev >= 0.16
 .
 ufo-filters (0.16.0.159.g483ce16-1~exp1) experimental; urgency=medium
 .
   [ Serge Cohen ]
   * Watching the correct upstream
   * New upstream version 0.16.0.159.g483ce16
   * d/control: Updated maintainer and uploader as ufo-core
   * d/salsa-ci.yml: -> recipes/debian.yml@salsa-ci-team/pipeline
   * Updated patch to satisfy newer orig
   * Corrected patch to new *.so naming conventions
ufo-filters (0.16.0.159.g483ce16-1~exp2) experimental; urgency=medium
 .
   * d/control: build depends libufo-dev >= 0.16
ufo-filters (0.16.0.159.g483ce16-1~exp1) experimental; urgency=medium
 .
   [ Serge Cohen ]
   * Watching the correct upstream
   * New upstream version 0.16.0.159.g483ce16
   * d/control: Updated maintainer and uploader as ufo-core
   * d/salsa-ci.yml: -> recipes/debian.yml@salsa-ci-team/pipeline
   * Updated patch to satisfy newer orig
   * Corrected patch to new *.so naming conventions
ufo-filters (0.14.1+dfsg1-3) unstable; urgency=medium
 .
   [ Alexandre Marie ]
   * Created salsa-ci.yml file to run CI tests.
   * Started python2 removal in debian/control file.
   * Closes: #938744
 .
   [ Frédéric Picca ]
   * Use debhelper-compat instead of debian/compat.
ufo-filters (0.14.1+dfsg1-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Adrian Bunk ]
   * Add upstream fix for FTBFS with Sphinx 1.8. (Closes: #918852)
 .
   [ Andreas Tille ]
   * debhelper 12
   * Standards-Version: 4.3.0
   * Remove trailing whitespace in debian/changelog
   * Lintian-override for non-issue since the not excluded file does not harm
ufo-filters (0.14.1+dfsg1-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Add upstream fix for FTBFS with glibc 2.25. (Closes: #882955)
ufo-filters (0.14.1+dfsg1-1) unstable; urgency=medium
 .
   * New upstream release.
ufo-filters (0.14.0+dfsg1-1) unstable; urgency=medium
 .
   * New upstream release.
   * d/control
     - Bump Standard-Version 4.1.1 (extra -> optional)
     - Added Suggests: ufo-filters-doc (Closes: #847624)
     - Switched from python-sphinx to python3-sphinx.
     - Added python dependency which is now mandatory.
ufo-filters (0.13.0+dfsg1-1) unstable; urgency=medium
 .
   * New upstream release.
ufo-filters (0.12.0+dfsg1-1) unstable; urgency=low
 .
   * Initial release (Closes: #844196)

ufo-tofu (0.15.0-3) unstable; urgency=medium
 .
   * Team upload.
   * Add new patches to:
     - Fix module finding configuration to not pick up other directories that
       leads to FTBFS with recent dh-python (Closes: #1151835).
     - Fix SyntaxWarnings.
     - Fix enum handling.
     - Replace use of pkg_resources with importlib.resources.
   * Switch build to use pyproject.toml.
   * Add autopkgtest test with upstream tests (Closes: #1035241).

usbview (3.1+git20250817.a3de218-1) unstable; urgency=medium
 .
   * New upstream snapshot a3de218, packaged as the orig tarball rather
     than carrying the post-3.1 upstream changes in an auto-generated
     debian-changes patch; drop single-debian-patch
     - icons rendered with transparency and at full resolution
     - SPDX FileCopyrightText fix for the .xcf file
   * Update uscan watch file to version 5 github template
   * Bump policy to 4.7.4, no changes needed
   * Patch: keyboard shortcuts Ctrl+Q/Ctrl+W quit, Ctrl+R/F5 refresh,
     and button mnemonics (closes: #927187)
   * Patch: fix AppStream metainfo validation warnings
     (content_rating type, homepage URL, developer, releases)
   * debian/copyright: document FSFAP metainfo and CC0/Expat ccan files
   * Homepage: point to the upstream GitHub repository
   * debhelper compat 14, with explicit dh-sequence-single-binary;
     drop redundant Priority and Rules-Requires-Root
   * Patch: replace fixed PATH_MAX buffers in sysfs.c with dynamic
     allocation (fixes Hurd build properly), superseding the PATH_MAX patch
   * Patch: rasterize icons with rsvg-convert rather than ImageMagick, which
     may delegate to inkscape, whose instances crash on D-Bus when run by a
     parallel make (Gio::DBus::Error; inkscape #1152805, upstream #4716);
     when falling back to ImageMagick, set SELF_CALL=1 to work around that
   * Patch: refresh the device tree automatically on USB hotplug, via kernel
     uevents on netlink; reworked from chopin1998's auto-refresh branch

wide-dhcpv6 (20080615-25) unstable; urgency=medium
 .
   * QA upload.
   * Set Maintainer to Debian QA Group following orphaning (#1152080).
   * Add native systemd units and helpers based on Simon Poirier's Ubuntu
     packaging (LP: #2153936). Retain SysV init support and the installer udeb.
     Fix the executable-condition directive and shell expansion in the
     empty-interface conditions. Run the client and relay in the foreground
     under systemd (Closes: #1039419, #1143898, #1077616).
   * Add a native NetworkManager dispatcher hook (Closes: #1054059).
   * debian/control: Bump debhelper compat to v13.
   * debian/copyright: Credit the new packaging contributions and replace
     the obsolete FSF address with a common-license reference.
   * Drop obsolete lsb-base dependencies: init-functions is now provided
     by the Essential sysvinit-utils package.
   * debian/watch: Use format 4 and HTTPS.
   * Remove the mismatched blanket patch-forwarding Lintian override.
   * debian/control: Update Standards-Version to 4.7.4, drop Priority and
     correct delegation spelling in package descriptions.

with-editor (3.6.0-1) unstable; urgency=medium
 .
   * New upstream release

wp2latex (4.26~ds-1) unstable; urgency=medium
 .
   * New upstream release.

xfel (1.4.0-1) unstable; urgency=medium
 .
   * New upstream version 1.4.0
   * d/patches: drop T153 patch applied upstream, refresh the rest
   * d/gbp.conf: make gbp dch follow first parent only