buildstream (2.7.0-3) unstable; urgency=medium
 .
   * d/control: Recommend buildstream-plugins
   * d/salsa-ci.yml: Add wrap-and-sort job
buildstream (2.7.0-2) unstable; urgency=medium
 .
   * debian/control: Drop support for s390x
   * debian/control: Update dependencies per upstream advice
buildstream (2.7.0-1) unstable; urgency=medium
 .
   * New upstream release 2.7.0 (Closes: #1101426, #1121981, #1083324, #1002487,
     #1085368)
   * Update packaging for 2.7.0
     - buildstream.docs: install NOTICE as per Apache licence
     - buildstream.manpages: install upstream manpages
     - control:
       - Update dependencies as per upstream
       - Change architecture to `any` as upstream now has Cython extensions
       - Remove deprecated `Priority` and `Rules-Requires-Root` fields
       - Update Standards-Version to 4.7.4
       - Add Theodore Tucker as uploader
     - copyright: update for upstream changes
     - patches: update to accommodate upstream changes
     - rules:
       - Add hardening flags for Cython extensions
       - Re-build protobuf protocols against Debian's protobuf version
     - tests: Add autopkgtests to check BuildStream can build upstream's example
     projects
   * Add debian/salsa-ci.yml
   * debian/watch: update to 2.x
buildstream (1.6.9-3) experimental; urgency=medium
 .
   * Move to experimental to allow python-fuse to be removed from Unstable.
     buildstream will be uploaded to Unstable again once buildstream 2 is
     packaged.
buildstream (1.6.9-2) unstable; urgency=medium
 .
   * Stop using debian/control.in and dh-sequence-gnome
   * Update debian/watch and continue only watching for 1.6.x releases
buildstream (1.6.9-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Drop extraneousdependency on python3-pytest-pep8
     to allow it's removal and later removal of "pep8" itself.
   * Splat an new versioneer.py on top of the old one (Closes: #1074674)
buildstream (1.6.9-1) unstable; urgency=medium
 .
   * New upstream release
   * Drop Python 3.11 patches: applied in new release
   * Update standards version to 4.6.2, no changes needed
buildstream (1.6.8-2) unstable; urgency=high
 .
   * Cherry-pick commits to support Python 3.11 (Closes: #1030143)
buildstream (1.6.8-1) unstable; urgency=medium
 .
   * New upstream release
   * Refresh patch
   * Update upstream URL for debian/watch and debian/copyright
   * Add debian/upstream/metadata
   * Bump Standards-Version to 4.6.1
buildstream (1.6.1-1) unstable; urgency=medium
 .
   * New upstream release
   * Bump debhelper-compat to 13
   * Update patch
   * debian/control.in: Don't Build-Depend on python3-pip or python3-wheel
   * Recommend git, python3-gi, & gir1.2-ostree-1.0 (Closes: #962212)
buildstream (1.4.3-0.1) unstable; urgency=low
 .
   * Non-maintainer upload.
   * New upstream release.
     - Works with Python 3.8. (Closes: #962197)
   * Add the missing dependency on bubblewrap. (Closes: #962205)
buildstream (1.4.1-1) unstable; urgency=medium
 .
   * New upstream release (Closes: #933395)
   * Depend on python3-fuse
   * Build-Depend on python3-fuse and python3-ujson for tests
   * Build-Depend on dh-sequence-gnome and dh-sequence-python3
   * Update adjust-test-dependencies.patch
buildstream (1.2.4-1) unstable; urgency=medium
 .
   * New upstream release
   * Improve running tests but continue to ignore test failures
buildstream (1.2.3-2) unstable; urgency=medium
 .
   * Have buildstream recommend python3-bst-external
   * Build-Depend on debhelper-compat 12 and drop debian/compat
   * Bump Standards-Version to 4.3.0
buildstream (1.2.3-1) unstable; urgency=medium
 .
   * Initial release (Closes: #916668)

buildstream-plugins (2.7.0-2) unstable; urgency=medium
 .
   * d/copyright: Use standard licence names
   * d/control: Drop dependency on python3-tomli (Closes: #1135828)
buildstream-plugins (2.7.0-1) unstable; urgency=medium
 .
   * Initial release. Closes: #1135098

cppdap (1.58.0a-7) unstable; urgency=medium
 .
   * Wrap and sort Debian package files
   * Bump Standards-Version to 4.7.4

geoclue-2.0 (2.8.1-1) unstable; urgency=medium
 .
   * New upstream release

gnulib-l10n (0~20241231-3) unstable; urgency=medium
 .
   * Drop Rules-Requires-Root: no
   * Standards-Version: 4.7.4
   * Drop Priority: optional
   * Bump debian/* copyright years
   * Maintain as Debian Commons
   * Use watch v5

go-sendxmpp (0.15.7-1) unstable; urgency=medium
 .
   * New upstream version 0.15.7

gobgp (4.5.0-1) unstable; urgency=medium
 .
   * New upstream release
     - Drop patch applied upstream

golang-1.25 (1.25.10-1) unstable; urgency=medium
 .
   * New upstream version 1.25.10
     - CVE-2026-42501
       cmd/go: malicious module proxy can bypass checksum database
     - CVE-2026-39820
       Well-crafted inputs reaching ParseAddress, ParseAddressList, and
       ParseDate were able to trigger excessive CPU exhaustion and memory
       allocations.
     - CVE-2026-39823
       Vulnerability in which URLs were not correctly escaped inside of a
       <meta> tag's <content> attribute.
     - CVE-2026-33811
       When using LookupCNAME with the cgo DNS resolver, a very long
       CNAME response can trigger a double-free of C memory and a crash.
     - CVE-2026-39826
       If a trusted template author were to write a <script> tag
       containing an empty 'type' attribute or a 'type' attribute with an
       ASCII whitespace, the execution of the template would incorrectly
       escape any data passed into the <script> block.
     - CVE-2026-39817
       The "go tool pack" subcommand (usually used only by the compiler
       as an internal tool with known-good inputs) does not sanitize
       output filenames. Extracting a malicious archive file with the
       "pack" subcommand can write files to arbitrary locations on the
       filesystem.
     - CVE-2026-39819
       The "go bug" command writes to two files with predictable names in
       the system temporary directory (for example, "/tmp"). An attacker
       with access to the temporary directory can create a symlink in one
       of these names, causing "go bug" to overwrite the target of the
       symlink.
     - CVE-2026-42499
       Pathological inputs could cause DoS through consumePhrase when
       parsing an email address according to RFC 5322.
     - CVE-2026-39825
       ReverseProxy can forward queries containing parameters not visible
       to Rewrite functions.
   * Remove superfluous file pattern from d/copyright
   * Update lintian overrides

golang-1.26 (1.26.3-1) unstable; urgency=medium
 .
   * New upstream version 1.26.3
     - CVE-2026-42501
       cmd/go: malicious module proxy can bypass checksum database
     - CVE-2026-39820
       Well-crafted inputs reaching ParseAddress, ParseAddressList, and
       ParseDate were able to trigger excessive CPU exhaustion and memory
       allocations.
     - CVE-2026-39823
       Vulnerability in which URLs were not correctly escaped inside of a
       <meta> tag's <content> attribute.
     - CVE-2026-33811
       When using LookupCNAME with the cgo DNS resolver, a very long
       CNAME response can trigger a double-free of C memory and a crash.
     - CVE-2026-39826
       If a trusted template author were to write a <script> tag
       containing an empty 'type' attribute or a 'type' attribute with an
       ASCII whitespace, the execution of the template would incorrectly
       escape any data passed into the <script> block.
     - CVE-2026-39817
       The "go tool pack" subcommand (usually used only by the compiler
       as an internal tool with known-good inputs) does not sanitize
       output filenames. Extracting a malicious archive file with the
       "pack" subcommand can write files to arbitrary locations on the
       filesystem.
     - CVE-2026-39819
       The "go bug" command writes to two files with predictable names in
       the system temporary directory (for example, "/tmp"). An attacker
       with access to the temporary directory can create a symlink in one
       of these names, causing "go bug" to overwrite the target of the
       symlink.
     - CVE-2026-42499
       Pathological inputs could cause DoS through consumePhrase when
       parsing an email address according to RFC 5322.
     - CVE-2026-39825
       ReverseProxy can forward queries containing parameters not visible
       to Rewrite functions.

golang-github-a8m-envsubst (1.4.3-2) unstable; urgency=medium
 .
   * source-only rebuild
golang-github-a8m-envsubst (1.4.3-1) experimental; urgency=medium
 .
   * Initial release (Closes: #1127770)

golang-github-aquasecurity-go-pep440-version (0.0.1-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1136082)

golang-github-becheran-wildmatch-go (2.0.3-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1135726)

golang-github-bitnami-go-version (0.0~git20260425.0af7291-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1136083)

golang-github-evanw-esbuild (0.28.0-4) unstable; urgency=medium
 .
   * Fix typo that breaks wasm package
golang-github-evanw-esbuild (0.28.0-3) unstable; urgency=medium
 .
   * Fix arch any/all builds
golang-github-evanw-esbuild (0.28.0-2) unstable; urgency=medium
 .
   * Add myself as uploader
   * Drop RRR, Priority: optional
   * Fix whitespaces in descriptions
   * Split esbuild-wasm into an architecture:all package
   * Install esbuild node glue in /usr/share/nodejs.
     Closes: #1074391.
   * Bump Standards-Version

golang-github-fasthttp-router (1.5.4-2) unstable; urgency=medium
 .
   * Team Upload.
   * debian/patches/fix-ftbfs-http1.1-tests.patch: add for GO111MODULE=off
     workaround.

golang-github-flosch-pongo2.v6 (6.1.0-1) unstable; urgency=medium
 .
   * New upstream release
   * d/control:
     - Update Standards-Version to 4.7.4
     - Drop redundant Priority and Rules-Requires-Root fields
   * Update years in d/copyright

golang-github-fxamacker-cbor (2.9.2-1) unstable; urgency=medium
 .
   * New upstream release
   * Update Standards-Version to 4.7.4 in d/control (no changes needed)

golang-github-go-ldap-ldap (3.4.13-1) unstable; urgency=medium
 .
   * New upstream release
     - Rebase and extend patch to skip tests that attempt network access
   * d/control:
     - Update Standards-Version to 4.7.4, drop Priority field
     - Update Build-Depends and Depends
     - Add Breaks for zabbix-agent2
     - Update XS-Go-Import-Path
     - Drop redundant Rules-Requires-Root
   * Drop obsolete gopkg.in/ldap.v2 -> go-ldap/ldap symlink
   * Update years in d/copyright

golang-github-go-webauthn-x (0.2.3-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream release
   * Update Standards-Version to 4.7.4 in d/control (no changes needed)

golang-github-kelindar-simd (1.2.0-4) unstable; urgency=medium
 .
   * Team upload
   * Fix watch file
golang-github-kelindar-simd (1.2.0-3) unstable; urgency=medium
 .
   * Team upload
   * Add upstream bug URL to README.source
   * Use chmod -v in fixperms
   * Add myself to debian/* copyright
 .
 golang-github-kelindar-simd (1.2.0-2) unstable; urgency=medium
 .
   * Fix Upstream-Contact email in d/copyright
golang-github-kelindar-simd (1.2.0-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1135383)

golang-github-package-url-packageurl-go (0.1.6-1) unstable; urgency=medium
 .
   * New upstream release 0.1.6
   * Update missing sources to match the version used upstream

golang-github-sylabs-squashfs (1.0.6-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1135724)

golang-github-throttled-throttled (2.2.4-2) unstable; urgency=medium
 .
   * Team Upload.
 .
   [ Debian Janitor ]
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
     Repository-Browse.
 .
   [ Andrew Lee (李健秋) ]
   * debian/patches/provide-gomod.patch: provide a go.mod file for modern
     module-aware build.

google-auth-httplib2 (0.4.0-1) unstable; urgency=medium
 .
   * New upstream version 0.4.0
   * d/control: update Standards-Version to 4.7.4

gst-plugins-bad1.0 (1.28.3-1) unstable; urgency=medium
 .
   * New upstream version 1.28.3
   * d/control: bump BD libgstreamer1.0-dev to 1.28.3
   * d/patches: refresh

gst-plugins-good1.0 (1.28.3-1) unstable; urgency=medium
 .
   * New upstream version 1.28.3

gst-plugins-ugly1.0 (1.28.3-1) unstable; urgency=medium
 .
   * New upstream version 1.28.3

gstreamer1.0 (1.28.3-1) unstable; urgency=medium
 .
   * New upstream version 1.28.3
   * d/symbols: add gst_check_run_suite_nofork

h2orestart (0.7.12-1) unstable; urgency=medium
 .
   * New upstream version 0.7.12
   * Use the desktop entry from the upstream
h2orestart (0.7.11-2) unstable; urgency=medium
 .
   * Add a desktop entry launching libreoffice writer
     - Being upstreamed: https://github.com/ebandal/H2Orestart/issues/72
   * d/control: Mention HWPX in the description
   * d/tests/control, d/examples/empty-hwpx.hwpx: Add test for HWPX format

libcifpp (10.0.3-1) unstable; urgency=medium
 .
   [ Maarten L. Hekkelman ]
   * New upstream version 10.0.3
   * Fix control descriptions, Closes: #1130338
 .
   [ Michael R. Crusoe ]
   * d/tests/control: the autopkgtests need the sqlite dev package.
   * Install new example-cql.cpp file.
   * d/control: the -dev package should also depend on libsqlite3-dev.
   * d/control: remove Multi-Arch: same from the -dev package. Closes: #1133818
 .
   [ Andreas Tille ]
   * Remove `Multi-Arch: same`
     Closes: #1133818
   * d/watch: version=5
   * Standards-Version: 4.7.4 (routine-update)
   * Remove Priority field (cme)
   * Drop default 'Rules-Requires-Root: no' from d/control (routine-
     update)
   * Run debconf-updatepo after template changes.
   * Review description
     Closes: #1130338

libjsoncpp (1.9.7-2) unstable; urgency=medium
 .
   * Update d/copyright
   * Prevent ABI breakage with pre-C++17 code
     (Closes: #1135759, #1135760, #1135761, #1135769, #1135772, #1135776)
   * Revert SONAME bump
 .
 libjsoncpp (1.9.7-1) experimental; urgency=medium
 .
   * Add symbols file
   * New upstream version 1.9.7
   * Update patches
     - Merged: 0001-Stop-using-removed-cgi-module.patch
   * Bump Standards-Version to 4.7.4
   * Update d/copyright
   * Bump SOVERSION to 27
libjsoncpp (1.9.7-1) experimental; urgency=medium
 .
   * Add symbols file
   * New upstream version 1.9.7
   * Update patches
     - Merged: 0001-Stop-using-removed-cgi-module.patch
   * Bump Standards-Version to 4.7.4
   * Update d/copyright
   * Bump SOVERSION to 27

mopidy (3.4.2-7) unstable; urgency=medium
 .
   * Team upload.
   * Use dh-cruft to register & purge volatile files

python-jsonschema-path (0.4.5-2) unstable; urgency=medium
 .
   * Team upload.
   * Breaks: python3-openapi-spec-validator (<< 0.8.0), python3-openapi-core
     (<< 0.23.1).
python-jsonschema-path (0.4.5-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Matheus Polkorny ]
   * New upstream version 0.4.5
   * d/control:
     - Bump Standards Version to 4.7.4 (no changes)
     - Remove redundant Priority field
     - Remove redundant Rules-Requires-Root field
   * d/copyright:
     - Add myself in debian/*
     - Update to reflect new upstream version
   * d/salsa-ci.yml: Add CI
   * d/watch: Update to Version 5
 .
   [ Colin Watson ]
   * Build-depend on python3-pathable (>= 0.5.0).

python-openapi-core (0.23.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 0.23.1
   * d/control:
     - Bump Standards Version to 4.7.4 (no changes)
     - Bump versions of several Build-Depends
     - Remove redundant Priority field
     - Remove redundant Rules-Requires-Root field
   * d/salsa-ci.yml: Add CI
   * d/watch: Update to Version 5

python-openapi-schema-validator (0.9.0-3) unstable; urgency=medium
 .
   * Team upload.
   * Breaks: python3-openapi-spec-validator (<< 0.8.0), python3-openapi-core
     (<< 0.23.1).
python-openapi-schema-validator (0.9.0-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Matheus Polkorny ]
   * d/watch: Bump to version 5
   * d/control: Remove redundant Priority field
   * d/control: Remove redundant Rules-Requires-Root field
   * d/control: Bump Standards-Version to 4.7.4 (no changes)
   * d/salsa-ci.yml: Add CI
python-openapi-schema-validator (0.9.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.

python-openapi-spec-validator (0.8.4-2) unstable; urgency=medium
 .
   * Team upload.
   * Breaks: python3-openapi-core (<< 0.23.1).
python-openapi-spec-validator (0.8.4-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Matheus Polkorny ]
   * New upstream version 0.8.4
   * d/control:
     - Add python3-pydantic-settings as build-depends
     - Bump Standards Version to 4.7.4 (no changes)
     - Remove redundant Priority field
     - Remove redundant Rules-Requires-Root field
   * d/p/sphinx-use-rtd-theme.patch: Update patch
   * d/python3-openapi-spec-validator.docs: Update to reflect Upstream
   * d/salsa-ci.yml: Add CI
   * d/watch: Update to Version 5
 .
   [ Colin Watson ]
   * Bump versions of Build-Depends on python3-jsonschema,
     python3-jsonschema-path, and python3-openapi-schema-validator.

python-pathable (0.5.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Breaks: python3-jsonschema-path (<< 0.4.0).
python-pathable (0.5.0-1) unstable; urgency=medium
 .
   * Team upload.
 .
   * New upstream version 0.5.0
   * d/control:
     - Bump Standards Version to 4.7.4 (no changes)
     - Remove redundant Priority field
     - Remove redundant Rules-Requires-Root field
   * d/python3-pathable.docs: Update to reflect New Upstream Version
   * d/salsa-ci.yml: Add CI
   * d/watch: Update to Version 5

python3-pyroaring (1.1.0-1) unstable; urgency=medium
 .
   * New upstream version: 1.1.0
   * debian/patches: rebase against upstream changes
python3-pyroaring (1.0.4-1) unstable; urgency=low
 .
   * Initial release. (Closes: #1128583)

rust-proc-macro2 (1.0.106-1) unstable; urgency=medium
 .
   * Team upload.
   * Package proc-macro2 1.0.106 from crates.io using debcargo 2.8.2

rust-quote (1.0.45-1) unstable; urgency=medium
 .
   * Team upload.
   * Package quote 1.0.45 from crates.io using debcargo 2.8.2

rust-syn (2.0.117-1) unstable; urgency=medium
 .
   * Team upload.
   * Package syn 2.0.117 from crates.io using debcargo 2.8.2
   * Update patches for new upstream.



REMOVED: r-cran-logspline 2.1.22-1
REMOVED: r-cran-locfit 1.5-9.12-1
REMOVED: r-cran-rook 1.2+dfsg-1
REMOVED: r-cran-glasso 1.11-2
REMOVED: r-cran-lbfgsb3c 2024-3.5-1.1
REMOVED: r-cran-gsignal 0.3-7-1
REMOVED: r-cran-princurve 2.1.6-1
REMOVED: openms 2.6.0+cleaned1-6
REMOVED: r-cran-corpcor 1.6.10-2
REMOVED: r-cran-iso 0.0-21-1
REMOVED: r-cran-fftw 1.0-9-1
REMOVED: mozjs128 128.14.0-3
REMOVED: r-cran-calculus 1.1.0+dfsg-1