an (1.2-8) unstable; urgency=medium
 .
   * d/control: bump Standards-Version to 4.7.4, no changes needed
   * d/control: replace pkg-config build-dependency with pkgconf
   * d/control: drop redundant fields: R-R-R, Priority
   * d/control: set X-Style: black; apply via debputy reformat
   * d/copyright: update Free Software Foundation contact address
   * d/u/metadata: update repository location, bug submission instructions
   * d/watch: convert to version 5
   * Salsa CI: add debian/salsa-ci.yml

barman (3.18.0-2) unstable; urgency=medium
 .
   * Bundle looseversion, dropping python3-looseversion dependency
   * Add Breaks/Replaces against old barman-cli package (Closes: #1133998)
   * Drop python3-snappy from python3-barman Recommends
   * Update debian/copyright URLs and years
barman (3.18.0-1) unstable; urgency=medium
 .
   [ Marco Nenciarini ]
   * New upstream version 3.18.0
   * Remove leftover Python 2 debian/pydist-overrides (Closes: #1131717)
   * Bump Standards-Version to 4.7.4 (no changes needed)
   * Fix man pages distribution between barman and barman-cli packages
   * Add systemd timer as alternative to cron job
   * Improve optional dependencies across barman packages
   * Replace deprecated distutils.version with looseversion
 .
   [ Alexandre Detiste ]
   * Drop extraneous dependency on python3-pkg-resources (Closes: #1083313)
barman (3.17.0-1) unstable; urgency=medium
 .
   * New upstream version 3.17.0
   * Bump Standards-Version to 4.7.3 (no changes needed)
   * Update watch file to version 5
barman (3.16.0-1) unstable; urgency=medium
 .
   * New upstream version 3.16.0
barman (3.15.0-1) unstable; urgency=medium
 .
   * New upstream version 3.15.0
barman (3.14.1-1) unstable; urgency=medium
 .
   * New upstream version 3.14.1
barman (3.14.0-2) unstable; urgency=medium
 .
   * Add file as a barman required dependency
barman (3.14.0-1) unstable; urgency=medium
 .
   * New upstream version 3.14.0
barman (3.13.3-1) unstable; urgency=medium
 .
   * New upstream version 3.13.3
barman (3.13.1-1) unstable; urgency=medium
 .
   * New upstream version 3.13.1
barman (3.13.0-1) unstable; urgency=medium
 .
   * New upstream version 3.13.0
barman (3.12.1-1) unstable; urgency=medium
 .
   * New upstream version 3.12.1
barman (3.12.0-1) unstable; urgency=medium
 .
   * Update the package description to make clear that
     the company maintaining Barman is EDB
   * Move barman-cli-cloud to Suggests section for barman-cli
   * Add python3-setuptools dependency as workaround for Python 3.12
     compatibility
   * New upstream version 3.12.0
   * Update packaging to new documentation layout
barman (3.11.1-1) unstable; urgency=medium
 .
   * New upstream version 3.11.1
barman (3.10.1-1) unstable; urgency=medium
 .
   * New upstream version 3.10.1
barman (3.10.0-1) unstable; urgency=medium
 .
   * New upstream version 3.10.0
barman (3.9.0-1) unstable; urgency=medium
 .
   * New upstream version 3.9.0
   * Removed patch install-barman-cloud-backup-show-man (merged upstream)
barman (3.7.0-1) unstable; urgency=medium
 .
   * New upstream version 3.7.0
   * Add patch install-barman-cloud-backup-show-man
barman (3.6.0-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Remove constraints unnecessary since buster (oldstable)
   * Use secure URI in Homepage field.
   * Bump debhelper from old 10 to 13.
   * Set debhelper-compat version in Build-Depends.
 .
   [ Marco Nenciarini ]
   * Remove upstream signing-key. PyPI doesn't sign packages anymore.
   * New upstream version 3.6.0
barman (3.5.0-1) unstable; urgency=medium
 .
   * New upstream version 3.5.0
barman (3.4.0-1) unstable; urgency=medium
 .
   * New upstream version 3.4.0
   * Bump Standards Version to 4.6.2 (no changes)
barman (3.3.0-1) unstable; urgency=medium
 .
   * New upstream version 3.3.0
barman (3.2.0-1) unstable; urgency=medium
 .
   * New upstream version 3.2.0
   * debian/watch: Set version to 4
   * Bump Standards Version to 4.6.1 (no changes)
barman (3.1.0-1) unstable; urgency=medium
 .
   * New upstream version 3.1.0
barman (3.0.1-1) unstable; urgency=medium
 .
   * Replace Michel Didier key in upstream signing-keys
   * New upstream version 3.0.1
barman (2.19-1) unstable; urgency=medium
 .
   * New upstream version 2.19
barman (2.18-1) unstable; urgency=medium
 .
   * New upstream version 2.18
barman (2.17-1) unstable; urgency=medium
 .
   * New upstream version 2.17
barman (2.16-1) unstable; urgency=medium
 .
   * Add Michel Didier to upstream signing-keys
   * New upstream version 2.16
barman (2.15-1) unstable; urgency=medium
 .
   * New upstream version 2.15
   * Add Michael Wallace to upstream signing-keys
barman (2.13-1) unstable; urgency=medium
 .
   * Update upstream signing-key to the new barman project leader
   * New upstream version 2.13
   * Drop pg13 wal_keep_size patch, included upstream
barman (2.12-2) unstable; urgency=medium
 .
   * Team upload.
   * PG 13 expects wal_keep_size, not wal_keep_segments. (Closes: #990304)
barman (2.12-1) unstable; urgency=medium
 .
   * New upstream version 2.12
barman (2.11-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * source only upload to enable migration (Closes: #970102)
barman (2.11-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Use secure copyright file specification URI.
 .
   [ Marco Nenciarini ]
   * Mail from /etc/cron.d/barman are now delivered to root by default
     (Closes: #893569)
   * New upstream version 2.11
   * Remove patch no-connection-from-backupinfo
   * Split out barman-cli-cloud from barman-cli
   * Bump Standards Version to 4.5.0 (no changes)
   * Set debhelper compatibility level to 10
barman (2.10-2) unstable; urgency=medium
 .
   * Add upstream patch no-connection-from-backupinfo.
     Prevent Barman from opening a PostgreSQL transaction that lasts until
     termination, even in operations that should not require to speak with
     Postgres (i.e. list-backup or recover).
     This fixes a regression introduced in 2.10 with systemid check code.
barman (2.10-1) unstable; urgency=medium
 .
   * New upstream version 2.10
   * Drop gh-239.patch patch (fixed upstream)
   * Bump Standards Version to 4.4.1 (no changes)
   * Recommend python3-boto3 with barman-cli
barman (2.9-2) unstable; urgency=medium
 .
   * Add patch fixing PostgreSQL connection aliveness check (GH-239)
barman (2.9-1) unstable; urgency=medium
 .
   [ Christoph Berg ]
   * Add debian/gitlab-ci.yml.
 .
   [ Marco Nenciarini ]
   * New upstream version 2.9
barman (2.8-1) unstable; urgency=medium
 .
   * New upstream version 2.8
   * Restructure packages
     - Add python3-barman and barman-cli binaries
     - Build with python3
barman (2.7-1) unstable; urgency=medium
 .
   * New upstream version 2.7
barman (2.6-1) unstable; urgency=medium
 .
   * New upstream version 2.6
   * Bump Standards Version to 4.3.0 (no changes)
barman (2.5-1) unstable; urgency=medium
 .
   * New upstream version 2.5
   * Install upstream release notes in /usr/share/doc/barman/NEWS.gz
   * Bump Standards Version to 4.2.1 (no changes)
   * Change priority from extra to optional
   * Use HTTPS in debian/watch URI
barman (2.3-2) unstable; urgency=medium
 .
   * Remove postgresql-client alternatives from Recommends field
   * Set debhelper compatibility level to 9
   * Bump Standards Version to 4.1.0.0 (no changes)
barman (2.3-1) unstable; urgency=medium
 .
   * debian/watch: enable cryptographic signature verification
   * New upstream version 2.3
barman (2.2-1) unstable; urgency=medium
 .
   * New upstream version 2.2
barman (2.1-1) unstable; urgency=medium
 .
   * New upstream version 2.1
   * The file README has been renamed to README.rst upstream
barman (2.0-1) unstable; urgency=medium
 .
   * New upstream version 2.0
   * Update package description
   * Create the /etc/barman.d directory
   * Remove barman-wal-restore.py from examples directory
   * Suggests barman-cli package, which contains barman-wal-restore
   * Add repmgr >= 3.2 to suggested packages
   * Recommends all the supported postgresql-client packages
   * Explicitly depends on dh-python
barman (1.6.1-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.6.1
   * Bump Standards-Version to 3.9.8.0 (no changes)
barman (1.5.1-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.5.1
   * Install barman-wal-restore script in the example directory
barman (1.5.0-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.5.0
barman (1.4.1-1) unstable; urgency=medium
 .
   * Updated package description
   * debian/watch: update watch file to use the cheeseshop as source.
   * Imported Upstream version 1.4.1
barman (1.4.0-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.4.0
barman (1.4.0~alpha.1-1) unstable; urgency=medium
 .
   * Update watchfile to mangle pre releases
   * Imported Upstream version 1.4.0~alpha.1
   * Bump Standards-Version to 3.9.6.0 (no changes)
barman (1.3.3-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.3.3
barman (1.3.3~alpha.1-1) experimental; urgency=medium
 .
   * Imported Upstream version 1.3.3~alpha.1
barman (1.3.2-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.3.2
barman (1.3.1-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.3.1
barman (1.3.0-1) unstable; urgency=medium
 .
   * Imported Upstream version 1.3.0
   * Bump Standards-Version to 3.9.5.0 (no changes)
barman (1.2.3-1) unstable; urgency=low
 .
   * Imported Upstream version 1.2.3
barman (1.2.2-1) unstable; urgency=low
 .
   * Imported Upstream version 1.2.2
barman (1.2.1-1) unstable; urgency=low
 .
   * Imported Upstream version 1.2.1
   * Canonicalize VCS-* field URI in debian/control
   * Add argcomplete to debian/pydist-overrides
barman (1.1.2-1) unstable; urgency=low
 .
   * Imported Upstream version 1.1.2
barman (1.1.1-1) unstable; urgency=low
 .
   * Imported Upstream version 1.1.1
barman (1.1.0-1) unstable; urgency=low
 .
   * New upstream version 1.1.0
barman (1.0.0-2) unstable; urgency=low
 .
   * Check for existence of barman system user instead of postgres user.
     Thanks to Salvatore Bonaccorso <carnil@debian.org> (Closes: #689924)
barman (1.0.0-1) unstable; urgency=low
 .
   * Initial release (Closes: #683486)

bettercap-caplets (0+git20240106-3) unstable; urgency=medium
 .
   * Refresh debian/patches/change-dir.patch.
   * Bump Standards-Version to 4.7.4.
   * Remove redundant Priority field.
   * Drop redundant Rules-Requires-Root field.

bobcat (6.12.00-1) unstable; urgency=medium
 .
   * The class MultiBuf was redesigned

buteo-sync-plugin-carddav (0.1.13-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/control:
     + Bump Standards-Version: to 4.7.4. No changes needed.

buteo-sync-plugins-social (0.4.31-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/control:
     + Bump Standards-Version: to 4.7.4. No changes needed.
   * debian/source/lintian-overrides:
     + UBports packaging team uses get-orig-source target in d/rules.
   * debian/README.source:
     + Add file. Explain about upstream/downstream cooperation / package syncing.
   * debian/patches:
     + Rebase 0001_buteo-sync-plugins-social-Allow-building-without-sai.patch.
     + Drop 2001_build-without-Werror.patch. Not required anymore.

cgview (0.0.20100111-8) unstable; urgency=medium
 .
   * Team upload
   * Adding explicit dependency on java-wrappers for the binary package
   * Raising Standards version to 4.7.4:
     - Removing Priority: optional, which is default
     - Removing R-R-R: no, which is now default
   * Rewriting d/watch with version 5
   * Fixing Last-Update fields of patches
   * Removing now unused Lintian override about file with long lines

choose-mirror (2.136) unstable; urgency=medium
 .
   * Team upload
 .
   [ Holger Wansing ]
   * Update Mirrors.masterlist.
 .
   [ Updated translations ]
   * Bengali (bn.po) by emma peel
   * Bosnian (bs.po) by pacavarn
   * Kabyle (kab.po) by ButterflyOfFire
   * Tajik (tg.po) by bgo-eiu

clickdc (0.1.1-1) unstable; urgency=medium
 .
   * Initial upload to sid, needed for mycli (Closes: #1132884).

clonezilla (5.15.25-1) unstable; urgency=medium
 .
   * New upstream version 5.15.25

cminpack (1.3.11-2) unstable; urgency=medium
 .
   * Don't install CMinpackConfig-relwithdebinfo.cmake (Closes: #1133800)

cocotb (2.0.1-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
cocotb (2.0.1-1) unstable; urgency=medium
 .
   [ أحمد المحمودي (Ahmed El-Mahmoudy) ]
   * Initial release  Closes: #1041288)
 .
   [ Agathe Porte ]
   * Fix bad license declaration in d/copyright.
     Copyright should be separated from license.

cruft-ng (0.9.79) unstable; urgency=medium
 .
   * dh-cruft:
     * add missing "chomp $line" that led to spurious generation of empty lines
     * the virtual owner of files can now be overriden in debian/<pkg>.cruft
   * Drop support for ancient /usr/lib/cruft/filters-unex/ path
   * Add rules for: debian-fastforward, latex-cjk-thai, latex-cjk-common,
                    google-chrome-unstable
   * Update rules for: dkms, google-chrome-stable

ctdconverter (3.0a1-1) unstable; urgency=medium
 .
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
   * debputy lint --auto-fix (routine-update)
   * Refreshed patches, dropping 5 applied upstream or otherwise no
     longer needed.
   * Update watch file format version to 5.
   * Use GitHub template in watch file instead of explicit
     Source/Matching-Pattern.
   * d/control: build using pybuild; test using pytest.
   * d/rules: fix path to the main script, for building the manual page.
   * d/copyright: freshen paths

diffstat (1.69-1) unstable; urgency=medium
 .
   * New upstream release

dnsmasq (2.92-4) unstable; urgency=medium
 .
   * d/p/*: CVE-2026-6507: Add patch CVE-2026-6507.patch (Closes: #1134264).

efibootguard (0.22-1) unstable; urgency=medium
 .
   * Update to efibootguard 0.22
   * Add patch to use pkg-config for gnu-efi (Closes: #1125737)

emacs-jabber (0.10.5-4) unstable; urgency=medium
 .
   * Team upload.
   * debian/control:
     remove Multi-Arch: same from emacs-jabber-omemo (Closes: #1133994)
emacs-jabber (0.10.5-3) unstable; urgency=medium
 .
   * Team upload.
   * debian/patches/add-load-path.patch:
     - gracefully handle missing jabber-omemo-load-path.el
 .
 emacs-jabber (0.10.5-2) experimental; urgency=medium
 .
   * Team upload.
   * debian/clean, debian/emacs-jabber-omemo.install,  debian/rules:
     - fix architecure-specific load-path
   * debian/rules:
     - add check for correct DEB_VERSION_UPSTREAM in debian/elpa-test
 .
 emacs-jabber (0.10.5-1) experimental; urgency=medium
 .
   * Team upload.
   * New upstream version.
   * Add patch to use c25519 for 32 bit architecures, hacl is only for
     64 bit.
   * debian/copyright:
     - fix for GPL-3+ files
   * debian/elpa-test:
     - bump package version in ert_load_path
 .
 emacs-jabber (0.10.3-1) experimental; urgency=medium
 .
   * Team upload.
   * New upstream version, with many new features.
     See /usr/share/doc/elpa-jabber/changelog.gz
   * debian/control:
     - bump Standards-Version to 4.7.3, drop Priority and
       Rules-Requires-Root
     - Build-Depends on elpa-fsm and picomemo-dev
     - remove Recommends on emacs
     - add emacs-jabber-omemo package and let elpa-jabber Recommend it
   * debian/copyright:
     - update
   * debian/rules:
     - tests need jabber-autoloads, add debian/elpa-test
emacs-jabber (0.10.5-2) experimental; urgency=medium
 .
   * Team upload.
   * debian/clean, debian/emacs-jabber-omemo.install,  debian/rules:
     - fix architecure-specific load-path
   * debian/rules:
     - add check for correct DEB_VERSION_UPSTREAM in debian/elpa-test
emacs-jabber (0.10.5-1) experimental; urgency=medium
 .
   * Team upload.
   * New upstream version.
   * Add patch to use c25519 for 32 bit architecures, hacl is only for
     64 bit.
   * debian/copyright:
     - fix for GPL-3+ files
   * debian/elpa-test:
     - bump package version in ert_load_path
emacs-jabber (0.10.3-1) experimental; urgency=medium
 .
   * Team upload.
   * New upstream version, with many new features.
     See /usr/share/doc/elpa-jabber/changelog.gz
   * debian/control:
     - bump Standards-Version to 4.7.3, drop Priority and
       Rules-Requires-Root
     - Build-Depends on elpa-fsm and picomemo-dev
     - remove Recommends on emacs
     - add emacs-jabber-omemo package and let elpa-jabber Recommend it
   * debian/copyright:
     - update
   * debian/rules:
     - tests need jabber-autoloads, add debian/elpa-test

ezurio-qcacld-2.0-dkms (0.0~git20240408.aa96a9f+dfsg-9) unstable; urgency=medium
 .
   [ Alessio Faina ]
   * Support for Kernel 7.0rc1
   * Add lintian override fixes

faucc (20180503-1.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Secure URI in Homepage
   * Add watch file
   * Maintain in Debian team on Salsa
   * Sync team name with fauhdlc package
   * d/copyright: DEP5
   * d/rules: Short dh
     Closes: #1044527
   * debhelper-compat (= 13)
   * DEP3 fields
   * Standards-Version: 4.7.4 (Removed Priority field)

fauhdlc (20180504-3.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Secure URI in Homepage
   * d/watch:
      - version=5
      - Secure URI
   * Maintain in Debian team on Salsa
   * d/copyright: DEP5
   * d/rules: short dh
   * debhelper-compat (= 13)
   * Standards-Version: 4.7.4 (Remove Priority field)

featherpad (1.6.3-1) unstable; urgency=medium
 .
   [ Joel Orón Valiente ]
   * New upstream version 1.6.2
   * debian/gbp.conf: Drop compression so salsa CI can build.
 .
   [ ChangZhuo Chen (陳昌倬) ]
   * d/watch: Upgrade to version 5
 .
   [ Macy Lin ]
   * Team upload to unstable.
   * New upstream version 1.6.3
   * debian/copyright: update LXQT copyright year.
   * debian/copyright: update myself copyright year.
   * debian/control: delete Rules-Requires-Root: no.
   * debian/control: declare Standards-Version 4.7.3, drop the implied
     Priority: optional.
   * debian/rules: suppress blhc error by added ignore-line-regexp.
   * debian/salsa-ci: Do not build against experimental.

figtree (1.4.4-7) unstable; urgency=medium
 .
   * Team upload
   * Raising Standards version to 4.7.4:
     - Removing Priority: optional, which is default
     - Removing R-R-R: no, which is now default
   * Revising dependencies: default-jre and java-wrappers
   * Rewriting d/watch with version 5

fiona (1.10.1-7) unstable; urgency=medium
 .
   [ Bas Couwenberg ]
   * Bump Standards-Version to 4.7.4, no changes.
   * Add patch to fix FTBFS with GDAL 3.13.0.
     (closes: #1134113)

firebird3.0 (3.0.14.ds7-1) unstable; urgency=medium
 .
   * New upstream version 3.0.14.ds7
     Fixes CVE-2025-65104, CVE-2026-27890, CVE-2026-28212, CVE-2026-28214,
     CVE-2026-28224, CVE-2026-33337, CVE-2026-34232, CVE-2026-35215 and
     CVE-2026-40342
     Closes: #1134333
   * drop upstream/autoconf-main-explicit-result.patch, released upstream
   * update d/copyright
   * update line numbers of two patches

flowblade (2.24.1-1) unstable; urgency=medium
 .
   * New upstream version.
   * d/README.Debian: updated. (Closes: #1034435)
   * Bump standards version to 4.7.4.
flowblade (2.24-1) experimental; urgency=medium
 .
   * New upstream version.
   * d/control: add dh-sequence-python3 to build-depends.
   * d/README.Debian: added.

fonts-f500 (1.0-12) unstable; urgency=medium
 .
   * Bump standards version to 4.7.0.
fonts-f500 (1.0-11) unstable; urgency=medium
 .
   * d/source/include-binaries: added. Fix double build. (Closes: 1044307)
   * d/control: update maintainer address.
   * Bump standards version to 4.6.2.
fonts-f500 (1.0-10) unstable; urgency=medium
 .
   * Team upload.
 .
   * debian/changelog
     - Trim trailing whitespace.
   * debian/control
     - Bump debhelper from old 11 to 13.
     - Set debhelper-compat version in Build-Depends.
     - Update standards version to 4.5.1, no changes needed.
     - Update Maintainer's address
     - Drop obsolete dependencies with ttf-f500
     - Drop unnecessary Pre-Depends
   * Remove unnecessary debian/maintscript
   * Fix field name case in debian/copyright (Upstream-name => Upstream-Name).
   * Add debian/salsa-ci.yml
fonts-f500 (1.0-9) experimental; urgency=medium
 .
   * debian/control:
     - retired Christian from Uploaders. (Closes: #927583)
     - update Vcs fields.
     - bump standards version to 4.3.0.
fonts-f500 (1.0-8) unstable; urgency=medium
 .
   * Add AppStream metadata.
   * Bump debhelper version to 11.
   * Bump standards version to 4.1.3.
fonts-f500 (1.0-7) unstable; urgency=medium
 .
   * Bump standards version to 4.1.1.
   * Set modification time, fixes reproducibility.
   * Update my name.
fonts-f500 (1.0-6) unstable; urgency=medium
 .
   * Team upload.
   * add debian/add-lowercase-q.pe to fix lack of "q" glyph (Closes: #656059)
     Thanks to Jason Woofenden <jason@jasonwoof.com>
   * debian/rules
     - exec above fontforge script
   * debian/control
     - add Build-Depends-Indep: fontforge-nox | fontforge
     - set Build-Depends-Indep: debhelper (>= 10)
     - update Vcs-*
     - set Standards-Version: 4.0.0
   * debian/compat
     - set 10
   * debian/copyright
     - convert to copyright format 1.0
fonts-f500 (1.0-5) unstable; urgency=medium
 .
   * Team upload.
   * debian/control
     - set Standards-Version: 3.9.5
   * use dh_installdeb maintscript support, thanks to Colin Watson
     <cjwatson@ubuntu.com> for the patch (Closes: #659553)
fonts-f500 (1.0-4) unstable; urgency=low
 .
   * Update Standards to 3.9.4 (checked)
   * Bump debhelper compatibility to 9
   * Drop transitional package
   * Add Multi-Arch: foreign field
   * Use Breaks instead of Conflicts. Drop Provides as it is no
     longer needed (installations should have transitioned since wheezy
     and the package has anyway no reverse dependency.
   * Use xz extreme compression for deb packages
   * Use git for packaging: adapt Vcs-* fields
   * Add myself to Uploaders
fonts-f500 (1.0-3) unstable; urgency=low

  * Update my email address.
  * Rename source package to "fonts-f500" to fit the Font Packages
    Naming Policy.


game-data-packager (88) unstable; urgency=medium
 .
   * New games:
     - Jazz Jackrabbit 2 [Sébastien Noel]
   * New versions:
     - freespace2: add new mod-fsport-mediavps package [Sébastien Noel]
     - freespace2: Accept an updated version of fsport-str.vp
       [Simon McVittie]
     - quake: Add semi-official Episode 6: Dimensions of the Machine
       [Sébastien Noel]
     - quake: Add Arcane Dimensions mod [Sébastien Noel]
     - morrowind: add latest GOG English and French versions
       [Sébastien Noel]
   * Enhancements and bug fixes:
     - multiple games: Use https://updates.lokigames.com [Sébastien Noel]
     - multiple games: Remove mirrors.syringanetworks.net which no longer
       resolves [Simon McVittie]
     - dune2: don't install data files to an engine specific path
       [Sébastien Noel]
     - quake: Use directory-qualified filenames for Arcane Dimensions.
       Otherwise, g-d-p will show warnings whenever it encounters a
       different pak0.pak, pak1.pak, etc. in any directory. [Simon McVittie]
     - quake-aopfm: Fix detection for .desktop file [Sébastien Noel]
     - smacpack: reduce CPU usage by 50% [Sébastien Noel]
   * Debian packaging:
     - etqw-server: Add a minimal server configuration file [Simon McVittie]
     - d/quake{,3}-server.preinst: Remove migration path from versions < 10.
       Older systems should be upgraded to Debian 13 before upgrading to
       this version. [Simon McVittie]
     - d/*.postinst: Replace with sysusers.d(5), tmpfiles.d(5) snippets
       to create the system users and their directories declaratively
       [Simon McVittie]
     - d/control: Add Breaks on older versions of opensysusers, systemd and
       systemd-standalone-sysusers to ensure the "u!" syntax is supported
       (see systemd NEWS.gz and opensysusers #1118619). [Simon McVittie]
     - d/copyright: Don't use # for comments [Simon McVittie]
     - d/tests/control: Remove compatibility with transitional policykit-1
       package [Simon McVittie]
     - Adjust formatting of previous changelog entry [Simon McVittie]
     - Standards-Version: 4.7.4; remove Priority: optional, which is now
       the default [Simon McVittie]

gcc-13-doc (13.3.0-1) unstable; urgency=medium
 .
   * d/control: fix git branch name
   * d/salsa-ci.yml: add CI pipeline file
   * New upstream version 13.3.0
   * d/patches: refresh patches from gcc-13
   * d/control: bump Standards-Version to 4.7.0, no changes needed
gcc-13-doc (13.2.0-1) unstable; urgency=medium
 .
   * New upstream version 13.2.0
   * d/patches: refresh from-debian-gcc-git-doc-updates.diff patch
   * d/copyright: review and bump copyrights

gcc-14-doc (14.2.0-1) unstable; urgency=medium
 .
   * d/control: fix git branch name
   * d/salsa-ci.yml: add CI pipeline file
   * d/*: switch to gcc 14
   * New upstream version 14.2.0 (Closes: #1079010)
   * d/patches: refresh patches
   * d/control: bump Standards-Version to 4.7.0, no changes needed

gcc-15-doc (15.2.0-1) unstable; urgency=medium
 .
   * New upstream version 15.2.0
   * d/patches: refresh
   * d/control: upgrade to compat 13
   * d/copyright: switch to https in URLs
   * d/control: bump Standards-Version to 4.7.2, no changes needed

gcc-doc-defaults (5:29) unstable; urgency=medium
 .
   * d/rules: build using GCC 15 (Closes: #1114117)
   * d/control: regen using GCC 15 as defaults
   * d/control.in: Bump Standards-Version to 4.7.2 (no changes needed)
gcc-doc-defaults (5:28) unstable; urgency=medium
 .
   * d/rules: build using GCC 14 (Closes: #1078158)
   * d/control: regen using GCC 14 as defaults
   * d/control.in: Bump Standards-Version to 4.7.0 (no changes needed)
gcc-doc-defaults (5:27) unstable; urgency=medium
 .
   * d/control: remove -guest from Salsa URLs
   * d/rules: add riscv64 to go_archs to sync with gcc-defaults
   * d/rules: Build using GCC 13 (Closes: #1042960)
   * d/control: regen using GCC 13
gcc-doc-defaults (5:26) unstable; urgency=medium
 .
   * d/control: Follow GNAT switch from 11 to 12
   * d/rules: switch to gcc-doc 12.2.0
   * d/control: regen
   * d/control.in: bump Standards-Version to 4.6.2.0, no changes needed
gcc-doc-defaults (5:25) unstable; urgency=medium
 .
   * d/rules: Build using GCC 12
   * d/control: regen using gcc-12
gcc-doc-defaults (5:24) unstable; urgency=medium
 .
   * d/*.lintian-overrides: fix the spare-manual-page tags
   * d/control.in: bump Standards-Version to 4.6.1.0, no changes needed
   * d/control: regen
   * Follow gnat switching from gnat-10 to gnat-11.
gcc-doc-defaults (5:23) unstable; urgency=medium
 .
   * Build using gcc-11 (gnat is still using gnat-10) (Closes: #998233)
gcc-doc-defaults (5:22) unstable; urgency=medium
 .
   * d/rules: refref arch list: drop powerpcspe, update mips
   * d/control.in: bump Standards-Version to 4.6.0.1, no changes needed
   * d/*.lintian-overrides: refresh overrides
   * d/control: regenerate
   * Follow gnat switching from gnat-9 to gnat-10.
gcc-doc-defaults (5:21) unstable; urgency=medium
 .
   * Build gcc-10 docs (gnat is still using gnat-9) (Closes: #966126)
   * d/rules: drop remnants of gcj support
   * d/rules: fix override_dh_installdocs-indep target name
gcc-doc-defaults (5:20) unstable; urgency=medium
 .
   * d/control.in: update my surname
   * d/control: renegerate
   * Follow gnat switching from gnat-8 to gnat-9.
gcc-doc-defaults (5:19) unstable; urgency=medium
 .
   * Build gcc-9 docs (gnat is still using gnat-8)
   * d/control.in: Bump Standards-Version to 4.4.0 (no changes needed)
   * d/control.in: drop branch spec from Vcs-Git
   * d/compat: switch to debhelper compat level 12
   * d/control: regenerate
   * d/rules: stop using dpkg-parsechangelog directly
gcc-doc-defaults (5:18) unstable; urgency=medium
 .
   * New uploader.
   * Thanks to Guo Yixuan for his work on this package.
   * Support proper NMU package versioning.
   * Build gcc-8 docs (Closes: #905022)
   * Bumped standard version to 4.3.0, no changes needed.
   * Point VCS-* tags to salsa.d.o
gcc-doc-defaults (5:17.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Stop building gcj-doc. Closes: #892535.
   * Still point gccgo-doc to the GCC 7 docs, docs for GCC 8 are not yet packaged.
gcc-doc-defaults (5:17) unstable; urgency=medium
 .
   * Added support for gcc-7. (Closes: #871220)
   * Use 6.4.0 as default for gcc-6.
   * Updated manpages.
   * Bumped standard version to 4.0.0, no changes needed.
gcc-doc-defaults (5:16) unstable; urgency=medium
 .
   * Acknowledge NMU, thanks Dmitry and Paul.
   * Updated to 6.3 versions.
   * Added manpage symlinks for gcov-dump/gcov-tool.
   * Added info direntry for gcov-dump/gcov-tool.
   * Updated Vcs links.
   * Update copyright file.
   * Bumped standard version to 3.9.8, no changes needed.
gcc-doc-defaults (5:15) unstable; urgency=medium
 .
   * Non-maintainer upload.
 .
   [ Dmitry Eremin-Solenikov ]
   * Updated to 6.1 versions. (Closes: #794778, #833505)
 .
   [ Paul Wise ]
   * Switch from gnatgcc to gnat for version determination due to #839209
     (Closes: #825320)
gcc-doc-defaults (5:14) unstable; urgency=medium
 .
   * Updated gcc/doc/ with upstream 4.9.1.
   * debian/rules: include architecture.mk to set variables explicitly.
   * Updated go_archs.
   * Updated 4.8/4.9 versions.
   * Set package version automatically.
   * Bumped standard version to 3.9.6.
   * Use both symlinks and direntry for compatibility with info/emacs. (Closes:
     #778799)
gcc-doc-defaults (5:13) unstable; urgency=medium
 .
   * Properly limit archs for gccgo-doc.
gcc-doc-defaults (5:12) unstable; urgency=medium
 .
   * Limit archs for build-dep on gccgo.
gcc-doc-defaults (5:11) unstable; urgency=medium
 .
   * Limit archs for gccgo-doc, as gccgo is not available
     everywhere.
   * Update binary package versions.
   * 4.9 branch default to 4.9.1.
gcc-doc-defaults (5:10) unstable; urgency=medium
 .
   * New package: gccgo-doc. (Closes: #751247)
   * Updated 4.7 branch to 4.7.4.
   * Updated debian/copyright.
gcc-doc-defaults (5:9) unstable; urgency=medium
 .
   * Updated 4.8 branch to 4.8.3.
   * Rebuild to sync with gcc-defaults, default to 4.9 on most
     architectures.
gcc-doc-defaults (5:8) unstable; urgency=medium
 .
   * Removed Nikita from uploaders.
   * Updated README.
   * Added README.source.
   * Preparation for the transition to 4.9.
gcc-doc-defaults (5:7) unstable; urgency=medium
 .
   * Added texinfo to build-deps.
   * Removed an old lintian override for gnat-doc.
gcc-doc-defaults (5:6) unstable; urgency=medium
 .
   * Use dummy info files (with direntry) instead of symlinks for
     info(1) to find the correct version.
   * Bumped policy version to 3.9.5, no changes needed.
   * Bumped debhelper compatibility level to 9, and simplified
     debian/rules.
   * Updated dependency versions.
gcc-doc-defaults (5:5) unstable; urgency=low
 .
   * Uploading to reflect new default versions. (Closes: #723895)
   * debian/control:
     - Removed DMUA flag (deprecated). (Closes: #691476)
     - Updated Vcs fields.
     - Updated my uid in Uploaders.
   * Updated debian/copyright.
   * debian/rules:
     - Added gcc-doc-base package, moved from src:gcc-doc-x.y.
     - Changed version scheme: using gcc version as part of of binary package
       versions.
gcc-doc-defaults (5:4) unstable; urgency=low
 .
   * Updated defaults to 4.6 and 4.7 versions. (Closes: #618351,
     #651290, #684082)
   * debian/rules:
     - choose default version based on symlinks provided by gcc-defaults.
     - added targets: build-arch, build-dep.
   * debian/control(.in):
     - Bumped policy version to 3.9.4.
     - Added myself to uploaders.
     - Added git repo urls in Vcs-*.
     - Build-dep on cpp, gfortran, gnat, gcj-jdk for getting default
       versions at build-time.
     - Use replaces and breaks to overwrite files in older packages, instead of
       conflicts.
     - Added Homepage field.
   * Use "set -e" in *.preinst scripts.
   * Added lintian override files:
     - for arch-dependent document packages,
     - for symlinks to files in other packages.
   * Improved README.
 .
   [ Sponsor Steffen Moeller ]
   * Added DMUA flag for Guo Yixuan.
gcc-doc-defaults (5:3) unstable; urgency=low

  * Make all symlinks to point to 4.4 versions.
  * Set source/format to '3.0 (native)'.

gcc-doc-defaults (4:4.1.1.nf3) unstable; urgency=high

  * Added conflict against old version g++ package, because of file conflict.
    Closes: #403328
  * Urgency high because of RC bug fix.

gcc-doc-defaults (4:4.1.1.nf2) unstable; urgency=low

  * Added preinst files that should remove doc symlinks from older doc
    packages.
  * Fixed copy-paste artefact in package descriptions.

gcc-doc-defaults (4:4.1.1.nf1) unstable; urgency=low

  * Initial release.
  * Version is numbered in such way to make transparent updates from
    previous gcc documentation packages.


gnome-shell-extension-dashtodock (105-1) unstable; urgency=medium
 .
   * New upstream release

gnu-efi (4.0.4-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 4.0.4
   * d/copyright: Add new version's info
 .
   [ Helmut Grohne ]
   * Install to a multiarch LIBDIR (Closes: #1125744)

golang-github-landlock-lsm-go-landlock (0.8.0-1) unstable; urgency=medium
 .
   * Use gbp sign-tags and upstream-vcs-tag
   * Standards-Version: 4.7.4

golang-github-marusama-semaphore (2.5.0-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1128226)

golang-github-minio-pkg (3.7.0-1) unstable; urgency=medium
 .
   * New upstream release
     - Drop patch for building with jwx v3
   * d/control:
     - Update Standards-Version to 4.7.4 (no changes needed)
     - Update Build-Depends and Depends

golang-github-nats-io-go-nats (1.51.0-1) unstable; urgency=medium
 .
   * New upstream release
   * Update Standards-Version to 4.7.4 in d/control (no changes needed)

golang-github-sigstore-rekor-tiles (2.2.1-1) unstable; urgency=medium
 .
   * Standards-Version: 4.7.4
   * Bump upstream copyright years
   * Drop patches and enable gcp/kms
   * Enable Salsa rdeps

golang-github-sigstore-sigstore (1.10.5-1) unstable; urgency=medium
 .
   * Use gbp upstream-vcs-tag
   * Standards-Version: 4.7.4
   * Enable kms/gcp
   * Use dh-sequence-golang

golang-github-tink-crypto-tink-go-awskms (3.0.0-1) unstable; urgency=medium
 .
   * Use gbp sign-tags and upstream-vcs-tag
   * Use watch v5
   * Drop Priority: optional
   * Drop Rules-Requires-Root: no
   * Standards-Version: 4.7.4
   * Modernize Salsa CI
   * Add aws-sdk-v2 B-D and fix D's
   * Skip self-tests that phone home

gxml (0.20.4+ds-3) unstable; urgency=medium
 .
   * Team upload
 .
   [ Jeremy Bícha ]
   * Mark -common and -doc packages as Multi-Arch: foreign
   * Update Standards Version to 4.7.4
 .
   [ Seyed Mohamad Amin Modaresi ]
   * d/tests/control: unmark the test as superficial

hexagon-dsp-binaries (0~20260309-1) unstable; urgency=medium
 .
   * New upstream release, skipping 20260110 and 20260221.
   * d/control.head.in: set XS-Autobuild: yes (Closes: #1129001)
   * d/gbp.conf: fix debian-branch key
   * d/copyright: add licence for kaanapali and SM8750 binaries
   * d/control.dev.in: provide virtual package (Closes: #1126262)
   * d/copyright: document config files
   * d/regen.sh: install config files
   * d/regen.sh: rework how the symlinks are handled
   * d/copyright: document licence for Glymur and QCS6490 firmware and bins
   * d/patches/70.patch: fix name for Arduino VENTUNO Q board

hyprtoolkit (0.5.3-2) unstable; urgency=medium
 .
   * fix FTBFS with gcc-16 (Closes: #1133502)
   * d/control: bump S-V to 4.7.4, remove Priority: optional

iperf3 (3.20-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
 .
   [ Andreas Tille ]
   * Maintain package in Debian team on Salsa (with maintainer consent)
   * d/watch: version=5
   * Secure URI in Homepage and Source
   * Standards-Version: 4.7.4 (Removed Priority field)
 .
   [ Yangfl ]
   * Add Chinese debconf templates translations
     Closes: #1124482
 .
   [ Carles Pina i Estany ]
   * Add debconf template translation [INTL:ca]
     Closes: #1127868

jackson-core (2.14.1-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Markus Koschany and Emmanuel Arias ]
   * CVE-2025-52999:
     A limit was added to avoid a StackoverflowError if the parsed JSON is very
     deeply nested. The StackoverflowError issue happens in jackson-databind but
     this change in jackson-core stops it from happening unless you increase the
     StreamReadConstraints.maxNestingDepth() to a high number. (Closes: #1108367).
   * Declare compliance with Debian Policy 4.7.4.

kf6-kcrash (6.23.0-2) unstable; urgency=medium
 .
   [ Patrick Franz ]
   * Remove autopkgtests.
   * Bump Standards-Version to 4.7.4 (no changes needed).
   * Update d/watch to format version 5.

kf6-kdbusaddons (6.23.0-2) unstable; urgency=medium
 .
   [ Patrick Franz ]
   * Remove autopkgtests.
   * Bump Standards-Version to 4.7.4 (no changes needed).
   * Update d/watch to format version 5.

kf6-kdesu (6.23.0-2) unstable; urgency=medium
 .
   [ Patrick Franz ]
   * Remove autopkgtests.
   * Bump Standards-Version to 4.7.4 (no changes needed).
   * Update d/watch to format version 5.

kf6-kdnssd (6.23.0-2) unstable; urgency=medium
 .
   [ Patrick Franz ]
   * Remove autopkgtests.
   * Bump Standards-Version to 4.7.4 (no changes needed).
   * Update d/watch to format version 5.

kf6-kfilemetadata (6.23.0-2) unstable; urgency=medium
 .
   [ Patrick Franz ]
   * Remove autopkgtests.
   * Bump Standards-Version to 4.7.4 (no changes needed).
   * Update d/watch to format version 5.

ledger2beancount (2.7-2) unstable; urgency=medium
 .
   * Add patch to load hyperxmp package to fix PDF build with pandoc 3.9.
     Closes: #1134292

lft (3.96-1) unstable; urgency=medium
 .
   * New upstream version.

libblocksruntime (0.4.1-1.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Maintain in Debian team on Salsa
   * Secure URI in Homepage
   * d/copyright:
      - DEP5
      - Review
   * Add watch file pointing to fork on Github
   * debhelper-compat (= 13)
   * Standards-Version: 4.7.4 (Removed Priority field)

libdmtx (0.7.8-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Maintain package in Debian team on Salsa (with maintainer consent)
   * Changes of NMU included
     Closes: #927025
   * d/watch: version=5
   * Standards-Version: 4.7.4 (Removed Priority field)

libfido2 (1.17.0-1) unstable; urgency=medium
 .
   * New upstream version 1.17.0

libtgowt (0~git20251117.d067233+dfsg-3) unstable; urgency=medium
 .
   * Add upstream patches with missing includes (Closes: #1131577).
   * Add Migrate-to-OpenSSL-4.0.0.patch to get ready to the OpenSSL transition.
   * Upgrade debian/watch file to version 5.

libtool (2.5.4-11) unstable; urgency=medium
 .
   Team upload
   [ Alastair McKinstry ]
   * Move git repo to https://salsa.debian.org/debian/libtool
   * Set SALSA_CI_DISABLE_BLHC: 1 to disable flag checking on build; too
     many false positives in tests
   * Drop backport of #468555 patch that breaks packages with undefined references
     Closes: #1133782
 .
   [ Nicolas Boulenguez ]
   * Simplify d/watch
   * Update copyright years
   * Update syntax of a lintian override
   * Remove an unneeded wildcard in libtool-doc.doc-base
   * Remove unneeded wildcards in d/*.install debhelper
   * Create config.{guess,sub} symlinks with dh_link
   * Delete trailing whitespaces in d/changelog d/rules
   * Update phrasing in DFSG-NIV license long description
   * Pass automake version to dh_gencontrol without temporary file
   * (style) in dh_installdocs override, avoid listing
   * Remove signatures from upstream (old) signing key.
     Upstream signing key changed for 2.4.7
   * Register info documentation in doc-base
   * Simplify cleaning
   * Drop INSTALL_PROGRAM - not used anymore

libunibreak (7.0-2) unstable; urgency=medium
 .
   * Upload to unstable (see #1133976).
libunibreak (7.0-1) experimental; urgency=medium
 .
   * New upstream release.
   * Update packages according to the upstream SONAME bump:
     - rename libunibreak6 to libunibreak7
     - update install files & symbols file
   * Small update of copyright.
   * Drop Rules-Requires-Root: no, no more needed since Debian trixie.
   * Drop Priority: optional, no more needed since dpkg 1.22.13.
   * Bump Standards-Version to 4.7.4, no changes required.

maliit-framework (2.3.0-10) unstable; urgency=medium
 .
   * Fix missing Qt 6.10 patch from 2.3.0-8.1 (that was not included in 2.3.0-9).
maliit-framework (2.3.0-9) unstable; urgency=medium
 .
   * debian/control:
     + Add B:/R: relation between latest maliit-framework-qt5-dev and maliit-
       framework-dev (<< 2.3.0-7~). (Closes: #1133990).
     + Bump Standards-Version: to 4.7.4. No changes needed.

mir (2.25.2-5) unstable; urgency=medium
 .
   * debian/control:
     + Add more B:/R: relations to fix the upgrade path from MIr 2.20.2-2
       (trixie) to Mir >= 2.25.2-1 (forky). (Closes: #1133997).
mir (2.25.2-4) unstable; urgency=medium
 .
   * debian/patches/:
     + Add 1007_evdev-only-remove-FDs-from-FdStore-if-the-path-is-gone.patch.
       Fix tablet/notebook mode transition on convertible devices.
   * debian/control:
     + Bump Standards-Version: to 4.7.4. No changes needed.

mkdocstrings (1.0.4-1) unstable; urgency=medium
 .
   * [5ef1b6d] New upstream version 1.0.4
   * [0d256ee] Rebuild patch queue from patch-queue branch
     Dropped patch (not needed anymore):
     docs-Disable-mkdocs-coverage-plugin-in-config.patch
     Upstream did moved over to Zensical to build the documentation.
   * [74dd662] d/rules: Don't try to copy mkdocs.yml while build
   * [356f5ff] autopkgtest: Also here drop copy of mkdocs.yml
   * [db44b6c] d/control: Bump Standards-Version to 4.7.4
     No further changes needed.

moreutils (0.70-1) unstable; urgency=medium
 .
   * New upstream version (0.70) (Closes: #1041291)
   * ts: Use the last provided switch if both -i and -s are provided
     (patch)
   * Makefile: Fix shell syntax error on non-pkgx.dev builds (patch)
   * debian/control: Remove redundant Priority: optional
   * debian/control: Switch to debhelper-compat (14)
   * debian/watch: Update to version 5
   * debian/copyright: Update copyright years

node-fontsource-inconsolata (5.2.8-1) unstable; urgency=medium
 .
   * New upstream release.
   * Drop a no longer necessary patch since package.json now exports all
     the CSS files.
   * Bump standards version to 4.7.4.

node-fontsource-lato (5.2.7-1) unstable; urgency=medium
 .
   * New upstream release.
   * Drop a no longer necessary patch as package.json now exports all
     the CSS files.
   * Bump standards version to 4.7.4.

node-fontsource-merriweather (5.2.11-1) unstable; urgency=medium
 .
   * New upstream release.
   * Drop a no longer necessary patch since package.json now exports all
     the CSS files.
   * Bump standards version to 4.7.4.

notus-scanner (22.7.2-2) unstable; urgency=medium
 .
   * Team Upload
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Drop "Rules-Requires-Root: no": it is now the default
   * Add debian/salsa-ci.yml
   * Rewrite d/watch in v5 format

openntpd (1:6.8p1-1) unstable; urgency=medium
 .
   * New upstream version.
   * Merge previous NMUs to Git. Thanks Baptiste Beauplat and Sudip Mukherjee.
   * Bump debian/rules verbosity to pass blhc CI test. Thanks to Fabrice Meyer.
   * Replace custom CI runners with stock salsa-ci.yml include.
   * Transition to SysUsers account creation and upstream _ntpd user.
   * Bump Standards-Version to 4.7.4 (routine-update).
   * Add myself to Uploaders (Closes: #1132084).
   * Add debian/watch (Closes: #1132102).
   * Migrate debian/rules to dh sequencer and compat 13 (Closes: #1132107).
   * Remove obsolete maintainer scripts (Closes: #1132113).
   * Add upstream PGP key (Closes: #1132114).
   * Update copyright (Closes: #1132115).

openseachest (26.03.1~beta2+ds-3) unstable; urgency=medium
 .
   * d/control: add pkgconf, cmake, help2man to build-depends.
openseachest (26.03.1~beta2+ds-2) unstable; urgency=medium
 .
   * d/control: also add libcjson-dev and libjsoncpp-dev to b-d.
openseachest (26.03.1~beta2+ds-1) unstable; urgency=medium
 .
   * New upstream version.
   * Bump standards version to 4.7.3.
   * d/control: add libjson-c-dev to build-depends.
   * d/copyright:
     - bump years.
     - devendor.

openssh (1:10.3p1-1) unstable; urgency=medium
 .
   * New upstream release:
     - ssh(1): validation of shell metacharacters in user names supplied on
       the command-line was performed too late to prevent some situations
       where they could be expanded from %-tokens in ssh_config. For certain
       configurations, such as those that use a "%u" token in a "Match exec"
       block, an attacker who can control the user name passed to ssh(1)
       could potentially execute arbitrary shell commands. Reported by
       Florian Kohnhäuser (closes: #1132573).
       We continue to recommend against directly exposing ssh(1) and other
       tools' command-lines to untrusted input. Mitigations such as this can
       not be absolute given the variety of shells and user configurations in
       use.
     - CVE-2026-35414: sshd(8): when matching an authorized_keys
       principals="" option against a list of principals in a certificate, an
       incorrect algorithm was used that could allow inappropriate matching
       in cases where a principal name in the certificate contains a comma
       character. Exploitation of the condition requires an authorized_keys
       principals="" option that lists more than one principal *and* a CA
       that will issue a certificate that encodes more than one of these
       principal names separated by a comma (typical CAs strongly constrain
       which principal names they will place in a certificate). This
       condition only applies to user- trusted CA keys in authorized_keys,
       the main certificate authentication path
       (TrustedUserCAKeys/AuthorizedPrincipalsFile) is not affected. Reported
       by Vladimir Tokarev (closes: #1132576).
     - CVE-2026-35385: scp(1): when downloading files as root in legacy (-O)
       mode and without the -p (preserve modes) flag set, scp did not clear
       setuid/setgid bits from downloaded files as one might typically
       expect. This bug dates back to the original Berkeley rcp program.
       Reported by Christos Papakonstantinou of Cantina and Spearbit (closes:
       #1132572).
     - CVE-2026-35387: sshd(8): fix incomplete application of
       PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard
       to ECDSA keys. Previously if one of these directives contains any
       ECDSA algorithm name (say "ecdsa-sha2-nistp384"), then any other ECDSA
       algorithm would be accepted in its place regardless of whether it was
       listed or not.  Reported by Christos Papakonstantinou of Cantina and
       Spearbit (closes: #1132574).
     - CVE-2026-35388: ssh(1): connection multiplexing confirmation
       (requested using "ControlMaster ask/autoask") was not being tested for
       proxy mode multiplexing sessions (i.e. "ssh -O proxy ..."). Reported
       by Michalis Vasileiadis (closes: #1132575).
     - ssh(1), sshd(8): support IANA-assigned codepoints for SSH agent
       forwarding, as per draft-ietf-sshm-ssh-agent. Support for the new
       names is advertised via the EXT_INFO message. If a server offers
       support for the new names, then they are used preferentially. Support
       for the pre-standardisation "@openssh.com" extensions for agent
       forwarding remains supported.
     - ssh-agent(1): implement support for draft-ietf-sshm-ssh-agent "query"
       extension.
     - ssh-add(1): support querying the protocol extensions via the agent
       "query" extension with a new -Q flag.
     - ssh(1): support multiple files in a ssh_config RevokedHostKeys
       directive.
     - sshd(8): support multiple files in a sshd_config RevokedKeys
       directive.
     - ssh(1): add a ~I escape option that shows information about the
       current SSH connection (closes: #321525).
     - ssh(1): add an "ssh -Oconninfo user@host" multiplexing command that
       shows connection information, similar to the ~I escapechar.
     - ssh(1): add an "ssh -O channels user@host" multiplexing command to get
       a running mux process to show information about what channels are
       currently open.
     - sshd(8): add 'invaliduser' penalty to PerSourcePenalties, which is
       applied to login attempts for usernames that do not match real
       accounts. Defaults to 5s to match 'authfail' but allows administrators
       to block such attempts for longer if desired.
     - sshd(8): add a GSSAPIDelegateCredentials option for the server,
       controlling whether it accepts delegated credentials offered by the
       client.  This option mirrors the same option in ssh_config.
     - ssh(1), sshd(8): support the VA DSCP codepoint in the IPQoS directive.
     - sshd(8): convert PerSourcePenalties to using floating point time,
       allowing penalties to be less than a second. This is useful if you
       need to penalise things you expect to occur at >=1 QPS.
     - ssh-keygen(1): support writing ED25519 keys in PKCS8 format.
     - Support the ed25519 signature scheme via libcrypto.
     - sshd(8): make IPQoS first-match-wins in sshd_config, like other
       configuration directives.
     - sshd(8): fix potential crash when MaxStartups is using a single
       argument (i.e. not using the MaxStartups x:y:z form) to a value below
       10.
     - sshd(8): fix a potential hang during key exchange if needed DH group
       values were missing from /etc/moduli.
     - ssh-agent(1): fix return values from extensions to be correct wrt
       draft-ietf-sshm-ssh-agent: extension requests should indicate failure
       using SSH_AGENT_EXTENSION_FAILURE rather than the generic
       SSH_AGENT_FAILURE error code. This allows the client to discern
       between "the request failed" and "the agent doesn't support this
       extension".
     - ssh(1): use fmprintf for showing challenge-response name and info to
       preserve UTF-8 characters where appropriate.
     - scp(1): when uploading a directory using sftp/sftp (e.g. during a
       recursive transfer), don't clobber the remote directory permissions
       unless either we created the directory during the transfer or the -p
       flag was set.
     - All: implement missing pieces of FIDO/webauthn signature support,
       mostly related to certificate handling and enable acceptance of this
       signature format by default.
     - sshd_config(5): make it clear that DenyUsers/DenyGroups overrides
       AllowUsers/AllowGroups. Previously we specified the order in which the
       directives are processed but it was ambiguous as to what happened if
       both matched.
     - ssh(1): don't try to match certificates held in an agent to private
       keys. This matching is done to support certificates that were loaded
       without their private key material, but is unnecessary for
       agent-hosted certificate which always have private key material
       available in the agent. Worse, this matching would mess up the request
       sent to the agent in such a way as to break usage of these keys when
       the key usage was restricted in the agent.
     - sftp(1): if editline has been switched to vi mode (i.e. via "bind -v"
       in .editrc), setup a keybinding so that command mode can be entered.
     - ssh(1), sshd(8): improve performance of keying the sntrup761 key
       agreement algorithm.
     - ssh(1), sshd(8): enforce maximum packet/block limit during
       pre-authentication phase.
     - sftp(1): don't misuse the sftp limits extension's open-handles field.
       This value is supposed to be the number of handles a server will allow
       to be opened and not a number of outstanding read/write requests that
       can be sent during an upload/download.
     - sshd(8): don't crash at connection time if the main sshd_config lacks
       any subsystem directive but one is defined in a Match block.
     - sshd_config(5): add a warning next to the ForceCommand directive that
       forcing a command doesn't automatically disable forwarding.
     - sshd_config(5): add a warning that TOKENS are replaced without
       filtering or escaping and that it's the administrator's responsibility
       to ensure they are used safely in context.
     - sshd(8): don't mess up the PerSourceNetBlockSize IPv6 mask if sscanf
       didn't decode it.
     - ssh-add(1): when loading FIDO2 resident keys, set the comment to the
       FIDO application string. This matches the behaviour of ssh-keygen -K.
     - sshd(8): don't strnvis() log messages that are going to be logged by
       sshd-auth via its parent sshd-session process, as the parent will also
       run them though strnvis(). Prevents double-escaping of non-printing
       characters in some log messages.
     - ssh-agent(1): escape SSH_AUTH_SOCK paths that are sent to the shell as
       setenv commands. Unbreaks ssh-agent for home directory paths that
       contain whitespace (closes: #1118288).
     - All: Remove unnecessary checks for ECDSA public key validity.
     - sshd(8): activate UnusedConnectionTimeout only after the last channel
       has closed. Previously UnusedConnectionTimeout could fire early after
       a ChannelTimeout. This was not a problem for the OpenSSH client
       because it terminates once all channels have closed but could cause
       problems for other clients (e.g. API clients) that do things
       differently.
     - scp(1): when using the SFTP protocol for transfers, fix implicit
       destination path selection when source path ends with "..".
     - sftp(1): when tab-completing a filename, ensure that the completed
       string does not end up mid-way through a multibyte character, as this
       will cause a fatal() later on.
     - ssh-keygen(1): fix crash at exit (visible via ssh-keygen -D) when
       multiple keys loaded.
     - scp(1)/sftp(1): correctly display bandwidths >2GBps in the progress
       meter.
     - sshd(8): fix condition introduced in openssh 10.2p1 stable branch
       where a PAM module that changed the requested username between
       SSH_MSG_USERAUTH_REQUEST messages during authentication could confuse
       the PAM stack and let it proceed with a different understanding of the
       active username than the rest of sshd. Reported by Mike Damm.
     - sshd(8): immediately report interactive instructions to clients when
       using keyboard-interactive authentication with PAM.
     - sshd(8): fix duplicate PAM messages under some situations.
     - sshd(8): don't leak PAM handle on repeat invocations.
     - sshd(8): fix ut_type for btmp records, correctly using LOGIN_PROCESS
       and USER_PROCESS.
     - sshd(8): allow uname(3) in the seccomp sandbox. This is needed by
       zlib-ng on RISC-V platforms.
     - All: remove remaining OpenSSL_add_all_algorithms() calls. We already
       have OPENSSL_init_crypto() in the compat layer.

openvdb (10.0.1-3.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Remove the stale libboost-system-dev build dependency.
     (Closes: #1127249)

pg-background (1.9.2-1) unstable; urgency=medium
 .
   * New upstream point release.
   * debian/patches/fix_crash_in_assert_builds.patch: Removed, included
     upstream.

picomemo (1.1.0-2) unstable; urgency=medium
 .
   * Re-upload to unstable
picomemo (1.1.0-1) experimental; urgency=medium
 .
   * Initial version (Closes: #1132530)

plymouth (24.004.60-5.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * libplymouth-dev: add Depends on libevdev, xkbcommon and libudev (Closes:
     #1120298)

pmount (0.9.23-11) unstable; urgency=medium
 .
   * Team upload, salsa debian namespace.
 .
   [ Francesco Poli ]
   * Make bash completion list USB hard drives too.

pound (4.22-2) unstable; urgency=medium
 .
   * Backport testsuite fixes from upstream
pound (4.22-1) unstable; urgency=medium
 .
   * New upstream release
     - Adds support for lua
     - Includes Emacs-mode for the configuration file (for now installed in
       /usr/share/pound)
   * Complies with standards version 4.7.4 (removed Priority field)

psd-tools (1.14.3+dfsg.1-1) unstable; urgency=low
 .
   * New upstream release.

pydecorate (0.5.1-1) unstable; urgency=medium
 .
   [ Bas Couwenberg ]
   * Bump Standards-Version to 4.7.4, no changes.
 .
   [ Antonio Valentino ]
   * Newu upstream version.

pyogrio (0.12.1+ds-2) unstable; urgency=medium
 .
   [ Bas Couwenberg ]
   * Make pytest output verbose.
   * Drop Priority: optional, default since dpkg 1.22.13.
   * Bump Standards-Version to 4.7.4, changes: priority.
   * Add patch to fix FTBFS with GDAL 3.13.0.
     (closes: #1134132)

python-briefcase (0.4.1-1) unstable; urgency=medium
 .
   [ Alexandre Detiste ]
   * wrap-and-sort -ast
   * remove pre-commit from build-deps
 .
   [ Josenilson Ferreira da Silva ]
   * New upstream version 0.4.1
   * debian/control:
      - Added ${python3:Depends}
      - Bumped Standards-Version to 4.7.4
      - Change the documentation build system from Sphinx to MkDocs
      - Replace libgirepository1.0 with object-introspection (Closes: #1118914)
   * debian/rules:
      - Adjusts build documentation
      - Removed --with sphinxdoc
      - Removed test file extension
      - Replace sphinxdoc with mkdocs to build documentation
      - Skip tests incompatible with the build environment (Closes: #1127132)
      - Skip tests that fail on 32bit architectures (i386)
   * debian/patches:
      - Added 005.fix-mkdocs-custom-dir.patch
      - Removed 002.changed-intersphinx-mapping-to-local.patch
      - Removed 004.no-beeware-theme.patch
      - Update 003 to match new upstream source name and Python 3.13

python-cattrs (26.1.0-1) unstable; urgency=medium
 .
   * New upstream release
   * debian/control
     - add tomli, tomli-w to b-d, needed by tests

python-pywebview (6.2.1+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.

pyuvm (4.0.1-1) unstable; urgency=low
 .
   * Initial release (Closes: #1041285)

r-cran-distributional (0.7.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)

r-cran-laplacesdemon (16.1.8-1) unstable; urgency=medium
 .
   * Initial release (needed to upgrade r-cran-distributional).

r-cran-openssl (2.4.0+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * Build everywhere as is does not perform scientific computations.
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
r-cran-openssl (2.3.4+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.3 (routine-update)
   * Restrict to 64-bits architectures (routine-update)
   * Restrict to little-endian architectures (routine-update)

r-cran-optparse (1.8.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)

r-cran-wdi (2.7.10-1) unstable; urgency=medium
 .
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
   * Remove Priority field (cme)
   * Routine-update added me as new Uploader (routine-update)

rcmdr (2.12.2-1) unstable; urgency=medium
 .
   * New upstream release
 .
   * debian/control: Set Build-Depends: to current R version
   * debian/control: Set Standards-Version: to current version
   * debian/watch: Update to version 4

rekor (1.5.1-1) unstable; urgency=medium
 .
   * Use gbp sign-tags and upstream-vcs-tag
   * Standards-Version: 4.7.4

rpki-client (9.8-1) unstable; urgency=medium
 .
   * New upstream release.

rust-glib-macros (0.21.5-2) unstable; urgency=medium
 .
   * Team upload.
   * Package glib-macros 0.21.5 from crates.io using debcargo 2.8.2
   * Disable compile_fail tests, they are over-sensitive to error reporting
     changes in rustc.

rust-notify-rust (4.16.0+ds-1) unstable; urgency=medium
 .
   [ upstream ]
   * new release
 .
   [ Jonas Smedegaard ]
   * unfuzz patches
   * bump project versions in virtual packages and autopkgtests
   * provide and autopkgtest feature images_no_default_features

rust-ulid (1.2.1-4) unstable; urgency=medium
 .
   * update DEP-3 patch headers
   * drop patch 2002_rkyv, obsoleted by Debian packaging changes
   * update copyright info:
     + avoid any .git* files when repackaging upstream source
     + license patches same as main upstream license
     + update coverage
   * update git-buildpackage config:
     + stop superfluously filter out .git* files
   * add watch file, setting Repack-Suffix: +ds
   * stop superfluously set fields Rules-Requires-Root Priority
   * stop set Multi-Arch: foreign,
     incompatible with arch-any packaged crates
   * declare compliance with Debian Policy 4.7.4
   * add patch 1001
     to use newer minor version of crates rand and getrandom,
     superseding patch 2002;
     relax (build-)dependency for crate rand

sdl2-compat (2.32.66+ds-2) unstable; urgency=medium
 .
   * Transition from "classic" SDL 2 to sdl2-compat (#1130484),
     merging changes from experimental:
     - Take over the libsdl2-2.0-0 and libsdl2-dev package names,
       previously provided by "classic" SDL 2. This makes sdl2-compat
       the default implementation of the SDL 2 API in Debian.
     - Convert libsdl2-compat, -compat-shim, -compat-dev into
       transitional packages. Please do not depend on these packages,
       they should be removed later.
     - d/README.Debian: Update to reflect the new status.
     - Please see file:///usr/share/doc/libsdl2-2.0-0/README.Debian.gz
       for details of how any regressions seen with this new SDL can be
       resolved or worked around.
   * d/control: Use ">=" dependencies for transitional packages
   * d/control: Adjust libsdl2-compat-dev Description
   * d/README.Debian: Update example debug output to reflect current packages
   * Standards-Version: 4.7.4 (no changes required)
 .
 sdl2-compat (2.32.66+ds-1+exp1) experimental; urgency=medium
 .
   * Merge new upstream release from unstable
   * d/README.Debian: Improve example commands
 .
 sdl2-compat (2.32.64+ds-1+exp1) experimental; urgency=medium
 .
   * Merge new upstream release from unstable
   * d/gbp.conf, d/watch: Stop watching for git snapshots for now
   * d/source/lintian-overrides: Remove, no longer needed
 .
 sdl2-compat (2.32.62+git20260122~1c8ece4+ds-1) experimental; urgency=medium
 .
   * d/watch, d/watch.git, d/gbp.conf, d/source/lintian-overrides:
     Watch for git snapshots
   * New upstream git snapshot
     - Fix memory leaks when handing over externally-allocated pixel data
       to SDL, fixing a regression in the Moonlight game streaming client
       when using SDL_ttf
   * d/patches: Drop patches that are included in the upstream snapshot
   * d/copyright: Update
 .
 sdl2-compat (2.32.62+ds-3+exp1) experimental; urgency=medium
 .
   * d/gbp.conf, d/control: Use debian/snapshots branch for experimental
     until we are ready to make sdl2-compat the default
   * Reapply "Switch the default SDL 2 from "classic" SDL 2 to sdl2-compat".
     This takes over the libsdl2-2.0-0 and libsdl2-dev package names from
     src:libsdl2, converting libsdl2-compat, libsdl2-compat-shim and
     libsdl2-compat-dev into transitional packages.
     Please see file:///usr/share/doc/libsdl2-2.0-0/README.Debian.gz
     for details of how individual games can be forced to use "classic"
     SDL 2 (in the libsdl2-classic package) if this causes a regression.
sdl2-compat (2.32.66+ds-1+exp1) experimental; urgency=medium
 .
   * Merge new upstream release from unstable
   * d/README.Debian: Improve example commands

setools (4.6.0-3) unstable; urgency=medium
 .
   * Build-depend on qt6 libraries Closes: #1133828

slm (2.12-3) unstable; urgency=medium
 .
   * applied Alexandre DETISTE's patch, thanks! Closes: #1133891
   * bumped Standards-Version: 4.7.3

socnetv (3.4-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Merge with upstream development
   * d/control:
      - Maintain in Debian team on Salsa
      - s/Original-Maintainer/Uploaders/
      - debhelper-compat (= 13)
      - s/pkg-config/pkgconf/
      - Remove unneeded or-ed Build-Depends: libgl1-mesa-dev
   * d/watch:
      - version=5
      - Fix
   * Do not ship extra copy of license
   * Hardening
   * Standards-Version: 4.7.3 (Remove Priotity field)

spyder-line-profiler (0.4.1-1) unstable; urgency=medium
 .
   * New upstream version
spyder-line-profiler (0.4.0-1) unstable; urgency=medium
 .
   * New upstream version compatible with Spyder 6
spyder-line-profiler (0.3.2-2) unstable; urgency=medium
 .
   * Depend on newer version of python3-line-profiler for Python 3.12
     (closes: #1058437)
spyder-line-profiler (0.3.2-1) unstable; urgency=medium
 .
   * New upstream version
spyder-line-profiler (0.3.1-1) unstable; urgency=medium
 .
   * New upstream version
   * d/control: Add Rules-Requires-Root: no and update Standards-Version
   * Do not install tests or examples in main python library directory
spyder-line-profiler (0.2.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version (closes: #982256, #896427, #904188)
   * Bump Standards-Version to 4.5.1
spyder-line-profiler (0.1.1-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Source-only upload.
spyder-line-profiler (0.1.1-1) unstable; urgency=low
 .
   * Initial release. (Closes: #858862)

swupdate (2025.12+dfsg-7) unstable; urgency=medium
 .
   * Enable PKCS#11 again
   * Add Build-Profile pkg.swupdate.openssl

systemd-cron (2.7.0-2) unstable; urgency=medium
 .
   * Fix autopkgtest:
     * pass yet another "yes" argument
     * allow-stderr for now
     * revert upstream optimisation 3e123e38d603366580c5db27dee52825b9521c18
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Rewrite d/watch in v5 format
 .
   [ наб ]
   * debian/tests/generator: need to pass yes for --enable-debian-basename-filter
systemd-cron (2.7.0-1) unstable; urgency=medium
 .
   * New upstream version 2.7.0
     + the global default notification e-mail From: value can be changed
       from "root" to a value set in systemctl show-environment
                                  or systemctl edit cron-mail@
   * d/rules: --enable-debian-basename-filter:
     job files under /etc/cron.d/ and script files under /etc/cron.$period/
     are ignored if their names aren't constrained to [A-Za-z0-9_-];
     this matches the behaviour of other crons on Debian
     (previously, only names starting with '.' or containing '~' were filtered)

tifffile (20260411-1) unstable; urgency=medium
 .
   * New upstream version 20260411
   * Rediff patches
   * Push Standards-Version to 4.7.4, no changes needed

tinyexr (1.0.13+dfsg-2) unstable; urgency=medium
 .
   * Install necessary private headers for header only usage (Closes: #1134267)
   * Remove erroneous debian revision from some symbol versions
   * Modernize autopkgtest and add header-only test
   * Migrate debian/watch to version 5 format

tinysparql (3.11.1-1) unstable; urgency=medium
 .
   * New upstream release
   * Update Standards Version to 4.7.4

tmuxinator (3.3.8-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Bump Standards-Version to 4.7.4 (no changes needed)

torchwood (0.9.0-4) unstable; urgency=medium
 .
   * Extend timeout 25m->50m for riscv64
torchwood (0.9.0-3) unstable; urgency=medium
 .
   * Standards-Version: 4.7.4
   * Use go.mod vrf.go vendor commit hash
   * Timeout 10m->25m for riscv64
   * Silence lintian privacy-breach-generic

translate-toolkit (3.19.5-1) unstable; urgency=medium
 .
   * New upstream release.
     - refresh patches

vulture (2.16-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 2.16
   * Add debian/salsa-ci.yml
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Use dh-sequence-python3
   * Rewrite d/watch in v5 format
   * Rename file under debian/ for debhelper 14/15 compatibility

wordbook (1.0.0-1) unstable; urgency=medium
 .
   * New upstream release
   * d/control: Update libadwaita version to 1.8.
   * d/control: Update Standards-Version to 4.7.4.
   * d/control: Add python3-backports.zstd as a build dependency.
   * d/control: Add python3-wn as a build dependency.
   * d/watch: Update watch version to 5.
   * Use local XML file.
   * Remove empty directory.