apcupsd (3.14.14-8) unstable; urgency=medium
 .
   * QA group upload.
   * set maintainer to QA group
   * move package to Debian group, change VCS URLs

artikulate (4:26.08.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Disable QML Ahead-Of-Time (AOT) compilation with qmlcachegen as it
     does not produce deterministic results.
artikulate (4:26.08.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Upgrade upstream signing key to new packet format.
   * Remove an obsolete maintscript entry.
   * CI: update/simplify configuration.
   * Bump the debhelper compatibility to 14:
     - bump the debhelper-compat build dependency to 14
     - drop the ${shlibs:Depends}, ${qml6:Depends}, and ${misc:Depends} substvars
     - add the dh-sequence-single-binary build dependency, as there is only
       a single binary
     - rename debian/docs to debian/artikulate.docs so it is still used

batik (1.20-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
   * Removed the dependency on libjaxp1.3-java
   * Removed Vincent Fourmond from the Uploaders list (Closes: #1146796)
   * Converted debian/watch to the version 5 format

buildbox (1.4.30+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 1.4.30+dfsg
   * d/control: update for debhelper v14
   * d/rules: enable CAS_HTTP option
   * d/copyright: Update for upstream changes

cairocffi (1.7.1-9) unstable; urgency=medium
 .
   * Team Upload
   * Salsa CI: test nocheck & nodoc profiles
   * Mark python3-xcffib as <!nocheck>
   * Fix nodoc build profile

consfigurator (1.5.5-1) unstable; urgency=medium
 .
   * New upstream release.

dart-sass (1.106.1-1) unstable; urgency=medium
 .
   * New upstream release.

djvulibre (3.5.30.1-1) unstable; urgency=medium
 .
   * New upstream version
   * Bump debhelper to compat level 14
   * Bump debian standards version to 4.7.4
   * Remove redundant Priority: optional from source stanza
   * Replace FSF postal address with https://www.gnu.org/licenses/
   * Track upstream changes which includes a security fix addressing
     https://github.com/barak/djvulibre/issues/4
     https://github.com/barak/djvulibre/issues/7
   * Fail instead of hanging when a decoding thread cannot be created,
     e.g., under a low ulimit -v (closes: #1017745)
   * Fix typo remove-smp -> remove-xmp in NEWS (closes: #793206)
   * Replace Fedora djvuport-stack-overflow patch, which missed INCL
     cycles longer than one, with a per-thread INCL nesting depth limit
   * Watch upstream git release.VERSION tags instead of sf tarballs

exif (0.6.22-5) unstable; urgency=medium
 .
   * Team upload.
   * Bump debhelper-compat 14
   * Bump Standards-Version 4.7.4
   * d/watch: update to Version 5
   * d/control:
       - remove redundant-rules-requires-root-no-field
       - Build-Depends add dh-sequence-single-binary
       - remove Priority: optional line
   * d/copyright: fix old-fsf-address-in-copyright-file

fop (1:2.10+dfsg1-2) unstable; urgency=medium
 .
   * Team upload.
   * Removed the dependency on libjaxp1.3-java
   * Removed Torsten Werner from the Uploaders list (Closes: #1139031)
   * Removed the javadoc from fop-doc

fritzing (1.0.7-4) unstable; urgency=medium
 .
   * find the path to qmake6 by screening qmake6 package contents
     Closes: #1152060
fritzing (1.0.7-3) unstable; urgency=medium
 .
   * changed a dependency: libqt5sql5-sqlite => libqt6sql6-sqlite
   * checked that bug #1151521 is fixed. Closes: #1151521
fritzing (1.0.7-2) unstable; urgency=medium
 .
   * moved some modifications to INCLUDE_PATH in other .pri files
   * new build-dependency: libssl-dev
   * declared resources/fonts/DroidSans/NOTICE in d/fritzing.docs
   * removed the declaration of /usr/lib/x86_64-linux-gnu as a library path
   * modified debian/rules to enforce a proper Qt6 configuration
fritzing (1.0.7-1) unstable; urgency=medium
 .
   * New upstream version 1.0.7
   * adapted debian patches
   * changed build-dependencies to use Qt6
   * export QT_SELECT=qt6 in debian/rules
   * bumped Standards-Version: 4.7.4

fwupd-efi (1:1.9-1) unstable; urgency=medium
 .
   * New upstream version.
     - Fixes security issue BRLY-2026-062
   * Rebase and drop upstream patches.
   * d/control: Update standards version

gfaz (0.0~git20260915.f1c1b7f-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151944)

golang-github-google-goterm (0.0~git20200907.555d40f-4) unstable; urgency=medium
 .
   * Update d/watch to standard version 5
   * Update Debian Policy version to 4.7.4.
     - Drop 'Priority: optional' field.
     - Drop redundant 'Rules-Requires-Root: no'.
   * Bump Debhelper compat version to 14.
     - Drop redundant auto-injected substvars.
   * Migrate to dh-go
   * Add 0002-Add-go.mod-file.patch
   * Drop --builddirectory/--buildsystem/--with DH args
   * Drop execute_after_dh_auto_install.
     - Use DH_GOLANG_EXCLUDES instead.
   * Use standard Salsa CI template
   * Add myself to Uploaders and d/copyright
   * Drop dh-golang from autopkgtest
   * Run wrap-and-sort -ast

golang-github-ziutek-mymysql (1.5.4+git20230707.37ecf16-1) unstable; urgency=medium
 .
   * New upstream version 1.5.4+git20230707.37ecf16 required by the 'usql'
     dh-go migration
   * Add 0001-Fix-native_test.go-typo.patch
   * Set upstream metadata fields:
     - Bug-Database
     - Bug-Submit
     - Repository
     - Repository-Browse
   * Apply multi-arch hints.
     - golang-github-ziutek-mymysql-dev: Add Multi-Arch: foreign.
   * Update watch file to version 5
   * Use standard Salsa CI template
   * Run wrap-and-sort -ast
   * Bump Standards-Version to 4.7.4.
     - Drop 'Priority: optional' field.
   * Bump Debhelper version to 14.
     - Drop redundant auto-injected substvars.
     - Add dh-sequence-single-binary dependency.
   * Drop override_dh_auto_install
     - Use DH_GOLANG_EXCLUDES instead
   * Migrate to dh-go
   * Drop --buildsystem and --with=golang DH arguments
   * Update Debian Go Packaging Team e-mail address
   * Set Section to golang
   * Skip TestAutoConnectReconnect test
     - Saves ~28s where the build was hanging
   * Add myself to Uploaders and d/copyright

gpt (1.4.0-1) unstable; urgency=medium
 .
   * New upstream version 1.4.0

jschema-to-python (1.2.3-4) unstable; urgency=medium
 .
   * Team Upload
   * Use declarative dh-sequence-python3
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Rewrite d/watch in v5 format
   * Mark python3-{attr,jsonpickle,pytest} as <!nocheck>
   * Add debian/salsa-ci.yml

kirigami-addons (1.14.2-3) unstable; urgency=medium
 .
   * Team upload.
   * CI: update/simplify configuration.
   * Update symbols files from the logs of buildds.
   * Drop the ${shlibs:Depends}, ${qml6:Depends}, and ${misc:Depends} substvars,
     not needed with debhelper compat 14+.
   * Use the sodeps dh addon to simplify the library dependencies in
     kirigami-addons-dev:
     - add the dh-sequence-sodeps build dependency
     - drop the manual library dependencies
kirigami-addons (1.14.2-2) unstable; urgency=medium
 .
   * Release to unstable
kirigami-addons (1.14.2-1) experimental; urgency=medium
 .
   [ Aurélien COUDERC ]
   * Refresh copyright information.
 .
   [ Salvo 'LtWorf' Tomaselli ]
   * New upstream release
   * Create onboarding package
   * Create actions package
   * Update symbols
   * Bump compat to 14
   * Team upload

kleidiai (1.32.0+ds-1) unstable; urgency=medium
 .
   * New upstream version 1.32.0+ds.
   * d/patches: simplify the system GTest patch for the new build layout.
   * d/rules: adapt the bounded test selection and disable tests with nocheck.
   * d/copyright: update upstream copyright notices.
   * d/rules: use relative install paths so CMake exports support sysroots.
   * d/rules: drop empty include directories from the development package.
   * d/watch: strip the +ds suffix when comparing upstream versions.
   * d/rules: enable experimental operations in the development package.

klystrack (0.20171212-9) unstable; urgency=medium
 .
   * d/install: updated.
   * d/klystrack.desktop: updated.
   * Closing ftbfs with GCC-14. (Closes: #1075115)
klystrack (0.20171212-8) unstable; urgency=medium
 .
   * Fix default dpkg build flags. (Closes: #1119463)
   * d/control: drop Rules-Requires-Root.
   * Bump standards version to 4.7.4.
   * d/watch: update to version 5.
   * d/rules: disable parallel build.
   * d/copyright: bump year.
klystrack (0.20171212-7) unstable; urgency=medium
 .
   * Bump standards version to 4.7.0.
   * Update maintainer address.
klystrack (0.20171212-6) unstable; urgency=medium
 .
   * Team upload.
   * Change maintainer address to debian-multimedia@lists.debian.org.
klystrack (0.20171212-5) unstable; urgency=medium
 .
   * Add -fcommon to upstream CFLAGS. (Closes: #957407)
   * Bump standards version to 4.5.0.
   * Bump debhelper version to 13, drop d/compat.
   * d/control:
     - added Vcs fields.
     - added Rules-Requires-Root.
   * d/upstream/metadata: added.
   * d/copyright: added Upstream-Contact.
klystrack (0.20171212-4) unstable; urgency=medium
 .
   * Drop -Werror. (Closes: #906476)
klystrack (0.20171212-3) unstable; urgency=medium
 .
   * Apply patch to make it more reproducible, thanks Chris Lamb.
     (Closes: #886105)
klystrack (0.20171212-2) unstable; urgency=medium
 .
   * Upstream patch to fix building problems. (Closes: #886375)
   * Bump standards version to 4.1.3.
   * Bump debhelper version to 11.
klystrack (0.20171212-1) unstable; urgency=medium
 .
   * Initial release (Closes: #884279)

libgfakluge (0.0~git20211004.2e0aa73-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1152340).

libjson-java (3.2.0+dfsg-3) unstable; urgency=medium
 .
   * Removed the build dependency on libjaxp1.3-java
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Removed the Rules-Requires-Root field
   * Removed Torsten Werner from the Uploaders list (Closes: #1139026)
   * Removed Varun Hiremath from the Uploaders list (Closes: #1145249)
   * Converted debian/watch to the version 5 format

libowasp-antisamy-java (1.7.8-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
     - Fixes CVE-2024-23635 (Closes: #1062846)
     - Refreshed the patches
   * Standards-Version updated to 4.7.4
   * Removed the unused dependency on libcommons-io-java
   * Removed the dependency on libjaxp1.3-java
   * Removed the Priority field
   * Converted debian/watch to the version 5 format

libpappsomspp (0.11.29-1) unstable; urgency=medium
 .
   * New upstream release:
 .
   [Rusconi]
 .
     - Add one more plot type for the color map plots.
     - Packaging: remove the RPATH logic in debian/rules (Lintian error)
       and add ENV variable to point to the right building directories.
 .
   [Langella]
 .
     - Major work on the CBor-based precursor finding in the seletion
       window algorithm.

libseqlib (1.2.0+dfsg-13) unstable; urgency=medium
 .
   [ Étienne Mollier ]
   * d/rules: do not trip blhc on packages descriptions.
 .
   [ Andreas Tille ]
   * Drop redundant fields from d/watch
   * Reflow Uploaders field (cme)
   * debputy lint --auto-fix (routine-update)
   * Add patch adapt_to_libssw_1.2.5.patch to build against libssw 1.2.5
     (SONAME bump libssw0 -> libssw1).

libstax-java (1.2.0-5) unstable; urgency=medium
 .
   * Team upload.
   * Removed the dependency on libjaxp1.3-java
   * Removed the libstax-java-doc package
   * Switch to debhelper level 13
   * Standards-Version updated to 4.7.4
   * Removed the Priority field

libxpm (1:3.5.20-1) unstable; urgency=medium
 .
   * New upstream release (closes: #1149666)
     - CVE-2026-94287: DoS via unsigned underflow in libXpm's write path.
   * Update signing-key.asc.

libxrender (1:0.9.13-1) unstable; urgency=medium
 .
   * New upstream release (closes: #1148735)
     - CVE-2026-88807: OOB read in XRenderQueryFormat reply parser.
   * Update signing-key.asc.

libxtst (2:1.2.6-1) unstable; urgency=medium
 .
   * New upstream release (closes: #1149667).
     - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser.
     - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop
   * Update signing-key.asc.

lomiri-camera-app (4.2.1-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream release
   * Remove 2 patches applied in new release
lomiri-camera-app (4.2.0-2) unstable; urgency=medium
 .
   * debian/patches:
     + Add 1001_Initialise-CameraApplication-m-mode.patch and 1001_Initialise-
       CameraApplication-m-mode.patch. Fix camera image not showing up on
       mainline Linux devices.
lomiri-camera-app (4.2.0-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream release
   * Remove no longer needed Files-Excluded
   * Remove 2 test patches that are no longer needed
   * Update debian/copyright

maven-filtering (3.5.1-1) unstable; urgency=medium
 .
   * New upstream release
     - Updated the Maven rules
     - Removed the dependency on libplexus-xml-java
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Removed Torsten Werner from the Uploaders list (Closes: #1139073)
   * Added myself to Uploaders
   * Converted debian/watch to the version 5 format

minuet (26.08.2-1) unstable; urgency=medium
 .
   * New upstream release
minuet (26.08.1-1) unstable; urgency=medium
 .
   * New upstream release
   * Add some of the missing dependencies
   * Install new .so file
   * Update d/copyright

mondrian (1:3.13.0.6-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
     - Refreshed the patches
     - Updated the version in debian/pom.xml
     - Removed the build dependency on libxalan2-java, no longer needed
     - New build dependency on libcommons-lang-java
   * Depend on libxml-commons-external-java instead of libjaxp1.3-java
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Converted debian/watch to the version 5 format

mysqltuner (2.9.3-2) unstable; urgency=low
 .
   * Fix for FTBR: Tests must not mutate the source tree: skip
     tests/unit_release_gen.t during the build. It runs build/release_gen.pl
     and build/genFeatures.pl, which rewrite releases/*.md and FEATURES.md in
     the source tree (and stamp the shipped FEATURES.md with the build time).
     This replaces the previous back-up/restore workaround for releases/*.md,
     which is no longer needed.
   * Add lintian overrides for the long line in POTENTIAL_ISSUES.md and for
     the missing upstream OpenPGP signature check on the watch file (upstream
     publishes no signed release tarballs).
   * Refactor debian/source/lintian-overrides: cover the affected files
     (README*.md, the CVE data file, POTENTIAL_ISSUES.md) with per-file glob
     patterns instead of per-line entries, so new long lines need no new entry
     but the tag is not overridden globally.
   * Generate the manual page with "pod2man --fixed=CR": Pod::Man's default
     "CW" font is no longer accepted by groff, which made every build emit
     groff-message warnings (22 of them) for usr/share/man/man1/mysqltuner.1.gz
     and left the package non-clean under lintian --pedantic.

nfs-ganesha (15.2-3) unstable; urgency=medium
 .
   * d/control: Make python3-nfs-ganesha depend on procps for pidof
     (Closes: #1136534)
 .
 nfs-ganesha (15.2-2) unstable; urgency=medium
 .
   * fix printf format for struct timespec on armhf
nfs-ganesha (15.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * add new builddeps
   * enable TLS
   * builds against libntirpc 15.2 (closes: #1150928)
 .
 nfs-ganesha (9.14-3) unstable; urgency=medium
 .
   * change to git-only packaging (dgit-maint-merge(7))

node-undici (8.12.2+dfsg+~cs3.2.3-2) unstable; urgency=medium
 .
   * Fix MockAgent redirects in fetch: expose aborted on the mock
     dispatch controller (Closes: #1151152)
node-undici (8.12.2+dfsg+~cs3.2.3-1) unstable; urgency=medium
 .
   * New upstream version 8.12.2+dfsg+~cs3.2.3
node-undici (8.12.1+dfsg+~cs3.2.3-1) unstable; urgency=medium
 .
   * Team upload
   * Update copyright
   * New upstream version 8.12.1+dfsg+~cs3.2.3
   * Refresh patches
   * Update fix-fake-timers-compat patch

ocaml-bytesrw (0.4.1-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1150681)

php-http-client-integration-tests (4.1.1-1) unstable; urgency=medium
 .
   * Initial release (php-guzzlehttp-guzzle test dependency)

php-nerd-cartesian-product (0.3.0-1) unstable; urgency=low
 .
   * Initial release (php-http-client-integration-tests dependency)

pilon (1.24-5) unstable; urgency=medium
 .
   [ Juan Manuel Méndez Rey ]
   * Rebuild against Scala 2.12 (#1142168): Build-Depends on scala (>=
     2.12~), Depends on scala-library (>= 2.12~), and put the scala-
     library-2.12.jar series link on the manifest Class-Path, since jars
     built with one Scala series are not binary compatible with another.
     The existing build_with_scala2_11.patch also covers 2.12.
     Closes: #1152082
 .
   [ Andreas Tille ]
   * d/watch: Version=5
   * Remove redundant Priority: optional from source stanza.
   * Update standards version to 4.7.4, no changes needed.
   * Set upstream metadata fields: Repository-Browse.
   * cme fix dpkg-control

plexus-compiler (2.17.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release
     - Refreshed the patches
     - Removed the plexus-compiler-j2objc module
     - Depend on junit5 instead of junit4
     - Depend on libcommons-lang3-java instead of libcommons-lang-java
     - Replaced plexus-component-metadata with eclipse-sisu-maven-plugin
     - Removed the build dependencies on assertj-core and hamcrest
     - New dependency on libplexus-xml-java
     - Tightened the dependency on libplexus-testing-java
   * Standards-Version updated to 4.7.4
   * Removed the Priority field
   * Removed Torsten Werner from the Uploaders list (Closes: #1139081)
   * No longer ignore the test failures
   * Converted debian/watch to the version 5 format

plus42 (1.4.1+ds-1) unstable; urgency=medium
 .
   * New upstream release.
   * Wrap and sort the control files.
   * Bump to debhelper compatibility level 14.
   * Calculate the libasound dependency automatically.

python-argon2 (25.1.0-5) unstable; urgency=medium
 .
   * wrap-and-sort debian dir
   * migrate to dh-compat 14
   * d/control: Make python3-argon2 Architecture: all (pure Python)
   * d/rules: drop obsolete debian/hypothesis clean rule

python-brutils (2.5.0-3) unstable; urgency=medium
 .
   * Created repository for the package under /debian on salsa.
   * debian/control: added Vcs fields.
   * debian/gbp.conf: created.
   * debian/salsa-ci.yml: created.
python-brutils (2.5.0-2) unstable; urgency=medium
 .
   * Fixed issues reported dfsg new queue.
python-brutils (2.5.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1151642).

pyvisa (1.14.1-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Maximiliano Curia ]
   * Fix test_invalid_string_converter for Python 3.15 (Closes: #1147118)

qbootctl (0.2.2-2) unstable; urgency=medium
 .
   [ Christopher Obbard ]
   * d/qbootctl.service: skip devices without A/B boot partitions
     qbootctl.service unconditionally runs `qbootctl -m` at boot which fails
     with `No slots found, is this an A/B device?` on devices that don't use
     the Android boot method (e.g. RB3 Gen2, Lenovo T14s, or UNO Q booting
     with EDK2-based firmware). This currently leaves a failed systemd unit
     on every boot of devices that do not use A/B boot partitions.
     While qbootctl should ideally only be installed on devices that need it,
     some consumers ship generic images which support multiple boot methods.
     qbootctl discovers slots by scanning `/dev/disk/by-partlabel` for
     partitions with names beginning with `boot_`; add a matching
     `ConditionPathExistsGlob` to the service such that systemd skips the
     service rather than marking it failed when no such partitions exist.
     The condition also matches `boot_aging`, which qbootctl ignores, but
     that is good enough in practice.
 .
   [ Arnaud Ferraris ]
   * d/watch: convert to version 5
   * d/control: bump Standards-Version.
     Also drop the no-longer-needed `Rules-Require-Root` and `Priority`
     fields.

qoriq-rcw (1.2.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1152049)

ruby-pagy (43.8.1-1) unstable; urgency=medium
 .
   * New upstream release.

rust-buildlog-consultant (0.2.0-1) unstable; urgency=medium
 .
   * Package buildlog-consultant 0.2.0 from crates.io using debcargo 2.8.4
   * Refresh drop-llm patch for new upstream.
   * Override embedded-library libyaml lintian error: it is triggered by the
     pure-Rust unsafe-libyaml crate.

rust-debian-analyzer (0.160.22-1) unstable; urgency=medium
 .
   * Package debian-analyzer 0.160.22 from crates.io using debcargo 2.8.4
   * Drop older-serial-test patch, no longer needed.

rust-hashify (0.3.1-2) unstable; urgency=medium
 .
   [ Ayushman Bhattacharya ]
   * Skip the 2^34-key test assertion on 32-bit targets, where it overflows
     usize and stops the tests from compiling (Closes: #1151470).
rust-hashify (0.3.1-1) unstable; urgency=medium
 .
   * Package hashify 0.3.1 from crates.io using debcargo 2.8.4

rust-hex-lit (0.1.1-1) unstable; urgency=medium
 .
   * Package hex_lit 0.1.1 from crates.io using debcargo 2.8.3

rust-libsodium-rs (0.2.6-2) unstable; urgency=medium
 .
   * Package libsodium-rs 0.2.6 from crates.io using debcargo 2.8.4
rust-libsodium-rs (0.2.6-1) unstable; urgency=medium
 .
   * Package libsodium-rs 0.2.6 from crates.io using debcargo 2.8.4

rust-libsodium-sys-stable (1.24.3+ds-1) unstable; urgency=medium
 .
   * Package libsodium-sys-stable 1.24.3 from crates.io using debcargo 2.8.4

rust-mail-parser (0.11.9+ds-1) unstable; urgency=medium
 .
   * Package mail-parser 0.11.9 from crates.io using debcargo 2.8.4

rust-mail-send (0.6.0+ds-3) unstable; urgency=medium
 .
   * drop patch 2001_gethostname, obsoleted by upstream changes
   * drop patches 2001_mail-parser 2001_tokio,
     obsoleted by Debian package changes
   * provide and autopkgtest feature parser;
     (build-)depend on package for crate mail-parser
   * tighten (build-, autopkgtest-)dependencies
   * use debhelper compatibility level 14 (not 13)
   * update watch file:
     + capitalize file format field label
     + stop set auto-mangling of upstream version (now done by default)
     + limit to STABLE_VERSION

rust-ognibuild (0.2.21-1) unstable; urgency=medium
 .
   * Package ognibuild 0.2.21 from crates.io using debcargo 2.8.4
   * Drop replace-ctor-with-dtor patch, merged upstream.
   * Drop older-whoami patch, no longer needed.
   * Refresh drop-criterion patch for new upstream.
   * Refresh disable-broken-tests and older-deps patches.
   * Relax serial_test dev-dependency to allow 3.x.
   * Override embedded-library libyaml lintian error: it is triggered by the
     pure-Rust unsafe-libyaml crate.

rust-sequoia-chameleon-gnupg (0.13.1-15) unstable; urgency=medium
 .
   * Install fish completions into vendor_completions.d
     (/usr/share/fish/completions path is ignored since fish 4.8).

rust-serde-json (1.0.154-1) unstable; urgency=medium
 .
   * Team upload.
   * Package serde_json 1.0.154 from crates.io using debcargo 2.8.4
   * Drop the rustc 1.70 test workaround and the indexmap 1.x relax.
   * Run the preserve_order autopkgtest with the std feature.

rust-twofish-0.7 (0.7.1+ds-1) unstable; urgency=medium
 .
   * Package twofish 0.7.1 from crates.io using debcargo 2.8.4

rust-unicode-ident (1.0.27-1) unstable; urgency=medium
 .
   * Team upload.
   * Package unicode-ident 1.0.27 from crates.io using debcargo 2.8.4

rust-utoipa-config (0.1.3-1) unstable; urgency=medium
 .
   * Team upload.
   * Package utoipa-config 0.1.3 from crates.io using debcargo 2.8.4

rust-uuid (1.29.0-1) unstable; urgency=medium
 .
   * Team upload.
   * Package uuid 1.29.0 from crates.io using debcargo 2.8.4
   * Update the control overlay to 1.29.0.

rust-want (0.3.2+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * Package want 0.3.2 from crates.io using debcargo 2.8.4
   * Drop the throughput benchmark; it still uses the old poll_want.

rust-warp (0.4.3-1) unstable; urgency=medium
 .
   * Team upload.
   * Package warp 0.4.3 from crates.io using debcargo 2.8.4

rust-wgpu-types (30.0.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Package wgpu-types 30.0.1 from crates.io using debcargo 2.8.4
   * Drop relax-deps.patch; bytemuck 1.25 satisfies 1.22.
   * Drop remove-wasm32-arch.patch in favor of filter_targets.

rust-yaml-edit (0.3.5-1) unstable; urgency=medium
 .
   * Package yaml-edit 0.3.5 from crates.io using debcargo 2.8.4

saclib (2.2.8-8) unstable; urgency=medium
 .
   * debian/control
     - Mark libsaclib-dev with Multi-Arch: same.  This reverts the change
       made by Debian Janitor in the last upload.  That was correct several
       years ago because the pdf documentation was not byte-identical on
       s390x.  However, this is no longer the case.

sagetex (3.6.1+ds-6) unstable; urgency=medium
 .
   * Reproducibility fix release, silently set an arbitrary random seed the
      SageMath way in sagetex.dtx and example.tex to ensure reproducibility.
   * Debainization:
     - d/patches/*:
       - d/p/upstream-fix-reproducibility-set_random_seed.patch, introduce;
       - d/p/upstream-fix-doc-ToC-misprinted_slash_char.patch, introduce;
     - d/rules, simplify.
sagetex (3.6.1+ds-5) unstable; urgency=medium
 .
   * Reproducibility fix release, reintroduce FORCE_SOURCE_DATE=1 in d/rules.
sagetex (3.6.1+ds-4) unstable; urgency=medium
 .
   * FTBS fix release, replace the former override_dh_auto_test target by an
      ad hoc auto_docs (execute_after_dh_auto_build) target and neutralize
      dh_auto_test (Closes: #1150282).
   * Debianization:
     - d/rules:
       - override_dh_auto_test target, neutralize;
       - execute_after_dh_auto_build, introduce;
     - d/{rules,clean.docstrip.cfg.in}, simplify;
     - d/patches/*:
       - d/p/debianization-examples.patch, revive.
sagetex (3.6.1+ds-3) unstable; urgency=medium
 .
   * FTBFS fix release, discard `\pdfinfoomitdate` related code which appeared
      unnecessary since pdftex supports well reproducibility (Closes: #1149645).
   * Debianization:
     - d/patches/*:
       - d/p/series, put debian specific patches at the end of the list;
     - d/copyright:
       - copyright year-tuples, refresh (where applicable);
     - d/adhoc/examples/Makefile:
       - copyright year-tuple, update.
sagetex (3.6.1+ds-2) unstable; urgency=medium
 .
   * Team upload.
   * d/p/python3-raw-string.patch: Use raw string for regex with \S.
   * d/p/doc-init-x.patch: Initialize symbolic variable x in sagetex.dtx
     (Closes: #1149556).
   * d/p/setup-setuptools.patch: Switch from distutils to setuptools.
   * d/control:
     - Bump Standards-Version to 4.7.4 (no changes needed).
     - Bump debhelper-compat to 14.
     - Drop redundant Priority and Rules-Requires-Root fields.
   * Improve documentation build reproducibility:
     - d/rules: Export DOT_SAGE, MPLCONFIGDIR, MAXIMA_USERDIR, PYTHONHASHSEED,
       and thread limits.
     - d/rules, d/p/debianization.patch: Suppress non-deterministic pdfTeX
       metadata for sagetex.pdf and example.pdf.
   * d/watch: Bump format to version 5.
sagetex (3.6.1+ds-1) unstable; urgency=medium
 .
   * New upstream nano version.
   * Debianization:
     - d/patches/*:
       - d/p/upstream-fix-Makefile-auxclean.patch, introduce;
     - d/clean:
       - add `sagetex.hd` (fix by introduced patch);
     - d/control:
       - Standards Version, bump to 4.6.1 (no change);
     - d/s/lintian-overrides, update.
sagetex (3.6+ds-2) unstable; urgency=medium
 .
   * FTBFS release fix, provide HOME (to please sbuild).
   * Debianization:
     - d/rules, furnish HOME (see above);
     - d/clean, refresh (see above).
sagetex (3.6+ds-1) unstable; urgency=medium
 .
   * New upstream minor version.
   * Debianization:
     - d/copyright:
       - copyryght year tuples, update;
     - d/control:
       - Standards Version, bump to 4.6.0 (no change);
     - d/patches/*:
       - d/p/debianization.patch, refresh;
     - d/adhoc/examples/Makefile:
       - copyryght year tuple, update;
       - Debian Tean name, fix.
sagetex (3.5+ds-2) unstable; urgency=medium
 .
   * Debianization:
     - d/t/control:
       - Architecture field, introduce.
sagetex (3.5+ds-1) unstable; urgency=medium
 .
   * New upstream version.
sagetex (3.4+ds-3) unstable; urgency=low
 .
   [ Jerome Benoit ]
   * Set upstream metadata fields: Repository, Repository-Browse.
   * Bump debhelper to 13, no changes needed.
   * Update d/*.lintian-overrides.
 .
   [ Debian Janitor ]
   * Use correct machine-readable copyright file URI.
   * Set upstream metadata fields: Bug-Database, Bug-Submit.
   * Update standards version to 4.5.0, no changes needed.
sagetex (3.4+ds-2) unstable; urgency=medium
 .
   * FTBFS fix, temporarily discard tkz-berge support (Closes: #960143);
     thanks to Hilmar Preuße <hille42@web.de> for isolating the issue.
sagetex (3.4+ds-1) unstable; urgency=medium
 .
   * New upstream version.
   * Debianization:
     - debian/control:
       - Standards Version, bump to 4.4.1 (no change);
     - debian/patches/*:
       - d/p/upstream-python3-example_tex.patch , integrated.
sagetex (3.3+ds-5) unstable; urgency=medium
 .
   [ Hilmar Preusse ]
   * Conflicts/Replaces python-sagetex (Closes: #940274)
 .
   [ Jerome Benoit ]
   * Debianization:
     - debian/control:
       - Rules-Requires-Root field, introduce and set to no.
sagetex (3.3+ds-4) unstable; urgency=medium
 .
   * Upload to unstable.
   * Debianization:
     - debian/control:
       - Depends fields, sagemath, bump to 8.9~beta9 (aka Python 3 version);
     - debian/patches/*:
       - d/p/upstream-python3-example_tex.patch, introduce.
sagetex (3.3+ds-3) experimental; urgency=medium
 .
   * Debianization: migration to Python 3 (Closes: #938429).
sagetex (3.3+ds-2) unstable; urgency=medium
 .
   * Upload to unstable.
     - debian/control:
       - debhelper, bump to 12;
       - Standards Version, bump to 4.4.0 (no change);
     - debian/compat, discard.
sagetex (3.3+ds-1) experimental; urgency=medium
 .
   * New upstream minor version.
   * Debianization:
     - debian/sagetex-doc.links, add example.tex ;
     - debian/sagetex-doc.docs, update.
sagetex (3.2+ds-2) unstable; urgency=medium
 .
   * FTBFS bug fix release, now Depends on python-tk (Closes: #921120).
sagetex (3.2+ds-1) unstable; urgency=medium
 .
   * New upstream version.
sagetex (3.1+ds-1) unstable; urgency=medium
 .
   * New upstream version.
   * Debianization:
     - debian/patches/*:
       - d/p/upstream-*.patch , integrated;
       - d/p/debianization.patch , explicitly use Python 2.
sagetex (3.0+ds-8) unstable; urgency=medium
 .
   * FTBFS release fix:
     - provide MPLCONFIGDIR and MAXIMA_USERDIR besides DOT_SAGE (absolute paths),
       (Closes: #918342);
     - revisit install-docs policy, (Closes: #910415).
   * Debianization:
     - debian/rules:
       - override_dh_auto_test target, provide MPLCONFIGDIR and MAXIMA_USERDIR ;
       - override_dh_installdocs target, discard;
     - debian/sagetex{,-docs).docs, revisit.
sagetex (3.0+ds-7) unstable; urgency=medium
 .
   * Debianization:
     - debian/copyright:
       - Copyright year tuples, update;
     - debian/adhoc/examples/Makefile, year tuple, update;
     - debian/control:
       - debhelper, bump to 12 (no change);
       - Standards Version, bump to 4.1.3 (no change);
     - debian/rules:
       - DEB_PYTHON_VERSION variable, explicitly Python version 2;
       - get-orig-source target, discard;
     - debian/tests/*:
       - d/t/compose-examples, now use AUTOPKGTEST_TMP .
sagetex (3.0+ds-6) unstable; urgency=medium
 .
   * RC fix release (Closes: #891230), non-reproducible build.
   * Debianization:
     - debian/rules:
       - pkg-info.mk , now included;
       - environment variable FORCE_SOURCE_DATE set to 1 (see d/rules for
         the rational).
sagetex (3.0+ds-5) unstable; urgency=medium
 .
   * Debianization:
     - debian/copyright:
       - Format field, secure;
       - copyright year tuple, refresh;
     - debian/control:
       - debhelper, bump to 11 (adapt);
       - Standards Version, bump to 4.1.3 (no change);
       - Vcs-* fields, migration to salsa.debian.org ;
       - Priority field, from extra to optional;
     - debian/rules:
       - debhelper, bump to 11;
       - override_dh_auto_test target, filter nocheck;
       - get-orig-source target, compression option, move to d/watch ;
     - debian/watch:
       - options, compression, add;
     - debian/tests/*, introduce;
     - debian/adhoc/examples/Makefile, refresh and harden;
     - debian/README.Debian, spelling, correct.
sagetex (3.0+ds-4) unstable; urgency=medium
 .
   * FTBFS fix release (Closes: #850929), DOT_SAGE is now specified (and placed
     outside HOME to please sbuild).
   * Debianization:
     - debian/rules, furnish DOT_SAGE (see above).
sagetex (3.0+ds-3) unstable; urgency=medium
 .
   * Debianization:
     - debian/control:
       - [Build-]Depends fields, uncomment sagemath dependency;
     - debian/patches/*:
       - d/p/debianization-experimental-neutralize.patch, discard;
       - d/p/upstream-update-documentation-URL_s.patch, import;
       - d/p/upstream-*.patch, introduce and submit;
       - d/p/debianization.patch, introduce;
       - d/p/debianization-examples.patch, uncomment TikZ material;
     - debian/rules, revisit (full docstrip machinery);
     - debian/README.Debian, introduce;
     - general enhancement.
sagetex (3.0+ds-2) unstable; urgency=medium
 .
   * Upload to unstable.
sagetex (3.0+ds-1) experimental; urgency=medium
 .
   * Initial release (Closes: #833822).

scala (2.12.21+ds3-2) unstable; urgency=medium
 .
   * Team upload.
   * Source-only upload, so scala can migrate to testing.
scala (2.12.21+ds3-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release 2.12.21, built without sbt and against
     scala-asm 9.9.0. The first upload is bootstrapped with the
     pkg.scala.stage0 profile, see README.source.
   * Drop scala-doc for now; scaladoc comes back in a later upload.
   * Repack (+ds3): also exclude the Luxi fonts, encrypted CI keys and a
     PDF without source.
   * scala-library: Breaks the 2.11 builds of latexdraw, pilon and plm.
   * Build with JDK 25: 2.12 does not build on JDK 26
     (https://github.com/scala/bug/issues/13127).
   * Generate the manual pages from upstream's sources.
   * Add scala-2.12, scalac-2.12, fsc-2.12 and scalap-2.12 commands.
   * Install the NOTICE file. Update d/copyright.
   * Bump debhelper compat to 14. Add debian/upstream/metadata.

scala-asm (9.9.0-scala-1-1) unstable; urgency=medium
 .
   [ Juan Manuel Méndez Rey ]
   * New upstream release 9.9.0-scala-1 (ASM 9.9), needed by Scala 2.12/2.13
   * d/pom.xml: update version to 9.9.0-scala-1
   * d/watch: switch to version 5 git mode with explicit -scala-N
     matching pattern.
 .
   [ Emmanuel Bourg ]
   * Add Breaks: scala (<< 2.12)
   * Standards-Version updated to 4.7.4

sleuthkit (4.15.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 4.15.0+dfsg
   * Drop obsolete patches

sphinx (9.2.0-1) unstable; urgency=medium
 .
   [ Alexandre Detiste ]
   * Mark python3-packaging as <!nocheck>.
 .
   [ Dmitry Shachnev ]
   * New upstream release.
   * Drop patches:
     - snowball-3.1.0.diff (included in the new release)
     - docutils_upper_limit.diff (included in the new release)
     - texlive_june2026.diff (included in the new release)
     - time_tuple.diff (no longer needed)
   * Refresh other patches.
   * Bump upstream copyright year.
   * Move python3-defusedxml from Depends to Suggests.
     It is only needed by etree_parse function in sphinx.testing.util.
   * Bump required python3-pygments version to 2.19.
   * Add back python3-setuptools build-dependency, needed by cython test.
   * Update numbers in debian/jstest/run-tests.
   * dh_sphinxdoc: Support doctools.js?v= in singlehtml (closes: #1150640).
   * Do not install language_data_zh.js, which confuses dh_sphinxdoc.

sqlite3-pcre2 (0.1.1~git20220105-e3e02a4a-4) unstable; urgency=medium
 .
   * add patch to set SQLITE_DETERMINISTIC | SQLITE_INNOCUOUS flags
     (Closes: 1150893)

unrardll (0.1.7+ds1-7) unstable; urgency=medium
 .
   * Rebuild with Python 3.15

wordpress (7.1.4+dfsg1-1) unstable; urgency=high
 .
   * New upstream security release Closes: #1152426
     Stored XSS with specially crafted block markup.
     Privacy Data Removal Requests can be created in a way that leads to
      stored XSS.
     Multiple stored XSS issues in the Interactivity API.
     Stored DoS issue in the Interactivity API.
     Stored XSS in Customizer selective refresh.
     Stored XSS in the Categories block.
     Specially crafted User Logins can lead to a stored XSS.
     Unpublished customizer changesets can be discovered by unauthenticated
      users.
     Stored XSS in Playlist and image blocks.
     Stored XSS in core/comments-pagination-next and
      core/comments-pagination-previous blocks.
     Notes can be read by privileged users that lack access to edit the post
      the note is attached to.
   * Possibly not applicable but updated anyway:
     An update to the bundled root certificates due to the eMudhra revocation.
     A weakness in the WordPress upgrade process which can lead to remote code
      execution during the upgrade window.

wreport (3.36-2) unstable; urgency=medium
 .
   * Maintainer set to Debian QA Group <packages@qa.debian.org>