debputy (0.1.94) unstable; urgency=medium . * LSP/Lint: - Tweak message for misplaced deb822 field. Thanks to Otto Kekäläinen - Ignore `d/rules` targets with early `_` for typo checks. Thanks to Andreas Tille (Closes: #1144502) . * meson: Use meson install --no-rebuild by default for compat 14+ * d/control: Mark `python3-pytest-cov` as a test-only build-dependency. Thanks to Alexandre Detiste (Closes: #1143724) * debputy: support `DPKG_ROOT` in `pam-auth-update` `postinst` snippet firefox-esr (140.14.0esr-2) unstable; urgency=medium . * third_party/rust/glslopt/.cargo-checksum.json, third_party/rust/glslopt/glsl-optimizer/include/c11/threads_posix.h: Fix conficting types for once_flag and call_once. Fixes: #1128875. golang-golang-x-net (1:0.58.0-1) unstable; urgency=medium . * Team upload * More compat 14 fixes libeconf (0.8.4+dfsg1-1) unstable; urgency=medium . * New upstream release. libnginx-mod-http-uploadprogress (1:0.9.4-4) unstable; urgency=medium . * d/gbp.conf: upstream-branch = upstream/latest * d/t/generic: update, add ABI dependency check * d/control: remove Rules-Requires-Root: no * d/control: bump Standards-Version: 4.7.4, no changes * d/control: drop Priority: optional * d/control: debhelper-compat (= 14) * d/fix.scanned.copyright remove * d/copyright: update Debian packaging copyright holders and years libnginx-mod-http-upstream-fair (1:0.0~git20120408.a18b409-8) unstable; urgency=medium . * d/gbp.conf: upstream-branch = upstream/latest * d/control: remove Rules-Requires-Root: no * d/control: bump Standards-Version: 4.7.4, no changes * d/control: debhelper-compat (= 14) * d/control: drop Priority: optional * d/t/generic: update, add ABI dependency check * d/copyright: update copyright holders, names, and years libnginx-mod-nchan (1:1.3.8+dfsg-2) unstable; urgency=medium . * d/t/generic: update, add ABI dependency check * d/control: debhelper-compat (= 14) * d/control: bump Standards-Version: 4.7.4, no changes * d/copyright: update Debian packaging copyright, and remove a stale comment * d/p/Fix-segfault-with-realip-module.patch: add upstream patch to prevent a worker crash when a fake request interacts with ngx_http_realip_module libnginx-mod-rtmp (1:1.2.2+dfsg-8) unstable; urgency=medium . * d/gbp.conf: upstream-branch = upstream/latest * d/control: bump Standards-Version: 4.7.4, no changes * d/t/generic: update, add ABI dependency check * d/control: debhelper-compat (= 14) * d/control: remove Rules-Requires-Root: no * d/control: drop Priority: optional * d/copyright: update Debian packaging copyright information and clarify the Files-Excluded comment * d/patches: backport upstream commits after version 1.2.2 - 0001-Fixed-unused-variable-warining.patch - 0002-Added-propagation-of-the-wildcard-flag-to-c-listenin.patch - 0003-SSL-shutdown-for-rtmps.patch - 0004-Fixed-compilation-with-clang.patch lua-resty-lrucache (0.15-5) unstable; urgency=medium . * d/control: remove Rules-Requires-Root: no * d/control: drop Priority: optional * d/control: debhelper-compat (= 14) * d/control: bump Standards-Version: 4.7.4, no changes * d/tests/control: make both autopkgtests depend on the tested package * d/tests/control: replace the vendored Test::Nginx dependencies with libtest-nginx-perl * d/tests/test: remove the obsolete upstream test wrapper * d/tests/perl: remove the vendored Test::Nginx 0.30 copy * d/copyright: remove entries for the removed Test::Nginx copy mdbook (0.5.4+ds-2) unstable; urgency=medium . * Vendor a fixed version of highlight.js, Closes: 1130033 mdbook (0.5.4+ds-1) unstable; urgency=medium . * New upstream release * Drop librust-mdbook-dev as upstream split into multiple crates * Use a Debian specific loader for FontAwesome icons, sourced from the node-fortawesome-fontsawesome-free package, to avoid the font-awesome-as-a-crate crate mypy (2.2.0-2) unstable; urgency=medium . * d/control: breaks older python3-pytest-mypy. mypy (2.2.0-1) unstable; urgency=medium . * New upstream release. Closes: #1143078 * d/rules: skip some more native-parser specific tests. * d/control: Bump minimum librt version to 0.12. node-lodash (4.18.1+dfsg1-2) unstable; urgency=medium . * Team upload * Fix bad autopkgtest introduced in 4.18.1+dfsg1-1 without being mentioned in changelog and without being tested (syntax error in control!) node-lodash (4.18.1+dfsg1-1) unstable; urgency=medium . * Team upload * Add @types test * Add types-es * Correct a typo ntfy (2.27.0-1) unstable; urgency=medium . * New upstream release * Update new mailer_emoji_map.json location * Fix Lintian nag about XS-Go-Import-Path * Stop using `--buildsystem=golang` * Bump Debhelper version from 13 to 14 openjdk-26 (26.0.2.1+1-1) unstable; urgency=medium . * OpenJDK 26.0.2.1 release, build 1. - CVEs: + CVE-2026-70906 + CVE-2026-61308 + CVE-2026-70907 + CVE-2026-60589 * d/man: Update man pages. openjdk-26 (26.0.2+10-3) unstable; urgency=medium . * d/p/jdk-8377035.diff: Cherry-pick upstream patch to disable failing JSR166 S390x tests (JDK-8377035). * d/t/jtreg-autopkgtest.in: Do not fail tests if ulimit can not be set. * d/t/problems.csv: Add test exclusions. * d/rules: Enable S390x C2 compiler. * d/rules: Collect hotspot error and replay logs after jtreg tests. * d/copyright-generator: Fix license SPDX identifiers. * d/rules: Do not fail early access builds on man changes. openjdk-26 (26.0.2+10-2) unstable; urgency=medium . * OpenJDK 26.0.2 release, build 10. - CVEs: + CVE-2026-46968 + CVE-2026-46917 + CVE-2026-47010 + CVE-2026-47021 + CVE-2026-47027 + CVE-2026-60147 + CVE-2026-47059 + CVE-2026-47063 + CVE-2026-41254 * Fix CVE list, CVE-2026-62574 is not applicable. OpenJDK 26 contains the same security fixes as OpenJDK 25. openjdk-26 (26.0.2+10-1) unstable; urgency=medium . * OpenJDK 26.0.2 release, build 10. - CVEs: + CVE-2026-62574 + CVE-2026-41254 + CVE-2026-47063 + CVE-2026-60147 + CVE-2026-46968 + CVE-2026-47027 + CVE-2026-47021 + CVE-2026-46917 + CVE-2026-47059 + CVE-2026-47010 * d/{copyright, man}: Regenerate. openjdk-26 (26.0.1+8-4) unstable; urgency=medium . * d/t/problems.csv: Add openjdk-28, remove obsolete versions, add new exclusions. * d/p/jdk-8387580.diff: Apply upstream patch to resolve S390x ftbfs (JDK-8387580). * d/t/jdk-8388170-proposed.diff: Apply patch to resolve deoptimization crash on S390x (JDK-8388170). openjdk-26 (26.0.1+8-3) unstable; urgency=medium . * d/rules: Check DEB_BUILD_PROFILES in addition to DEB_BUILD_OPTIONS to set up with_check variable. Do not check control files if with_check is disabled (Closes: #1137499). * d/p/jdk-8385738.diff: Cherry-pick upstream patch to generate reproducible javadoc snippet ids (JDK-8385738). openjdk-26 (26.0.1+8-2) unstable; urgency=medium . * d/rules: Strip man page formatting before comparing d/man and generated content. * d/man: Regenerate man pages. openjdk-26 (26.0.1+8-1) unstable; urgency=medium . * OpenJDK 26.0.1 release, build 8. - CVEs: + CVE-2026-22016: 8370529: Enhance Path Factories Redux + CVE-2026-34282: 8374557: Enhance TLS connection handling + CVE-2026-22021: 8371830: Enhance certificate chain validation + CVE-2026-22013: 8370615: Improve Kerberos credentialing + CVE-2026-23865: 8379158: Update FreeType to 2.14.2 + CVE-2026-22008: 8367463: Improved Arena allocations + CVE-2026-22018: 8370986: Enhance Zip file reading + CVE-2026-22007: 8369575: Enhance crypto algorithm support + CVE-2026-34268: 8371935: Enhance key generation * d/rules: Check generated files only on amd64. This resolves riscv64 ftbfs, as some architectures change with_check flag. * d/t/problems.csv: Add tools/javac/patterns/SOEDeeplyNestedBlocksTest.java to problems.csv. Test fails due to the insufficient default stack size. * d/p/jdk-8352567.diff: Cherry-pick upstream patch to disable tests for the unimplemented JFR features on S390x. * d/t/problems.csv: Fix typo in loong64 excluded tests lists. * Add common GPL and Apache license headers to copyright generator. * d/copyright: Regenerate. openjdk-26 (26+35-3) unstable; urgency=medium . * Ensure that all generated files are up to date: - The copyright generator now checks if the current directory contains an unpacked OpenJDK tree by verifying the presence of the ASSEMBLY_EXCEPTION file. - The copyright generator now drops common license text in-memory, without running a shell script that modifies the source tree. - d/rules: Add targets to generate all files and check that they match the ones provided in the source package. - d/rules: Add nogen DEB_BUILD_OPTION to disable file regeneration. * d/rules: Use '-' instead of '~' in opt version string, swap package version and distribution. phoc (0.57.0-1) unstable; urgency=medium . * New upstream release * No changes over rc1 phoc (0.57~rc1-1) unstable; urgency=medium . * New upstream release * Update to wlroots 0.20.2 * New protocol support: * phoc-foreign-toplevel-pidfd php-cache-tag-interop (2.0.0-1) unstable; urgency=medium . [ Aaron Scherer ] * feat!: require PHP 8.2 and PSR cache 3 . [ David Prévot ] * Revert "Force system dependencies loading" * Remove redundant Priority: optional from source stanza * Update standards version to 4.7.4 * Update watch file format version to 5 * Removed Rules-Requires-Root * Use GitHub template in watch file * Use debhelper-compat = 14 pytest-mypy-plugins (4.0.3-3) unstable; urgency=medium . * Team upload. * d/control: minimum mypy version is now 2.2. pytest-mypy-plugins (4.0.3-2) unstable; urgency=medium . * Team upload. * Cherry-picked patch from upstream with updated typeshed line numbers. python-aioautomower (2024.7.2-3) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Drop unused build-dep on python3-mypy * Rewrite d/watch in v5 format * Use dh-sequence-python3 * Switch to debhelper-compat 14 * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata python-aiomodernforms (0.1.8-4) unstable; urgency=medium . * Team upload. * Use dh-sequence-python3 * Bump debhelper from old 11 to 13. * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Add debian/upstream/metadata * Drop unused python3-mypy build-dependency * Disable useless Salsa CI jobs python-aioopenexchangerates (0.4.14-3) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Use dh-sequence-python3 * Bump debhelper from old 11 to 13. * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Rewrite d/watch in v5 format * Drop unused python3-mypy &python3-setuptools build-dependencies * Mark most build-deps as python-aiorecollect (2023.12.0-3) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Rewrite d/watch in v5 format * Use dh-sequence-python3 * Drop unused python3-mypy build-dependency * Mark test-relared build-deps as * Bump debhelper from old 11 to 13. * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata python-aioridwell (2024.1.0-3) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Use dh-sequence-python3 * Rewrite d/watch in v5 format * Bump debhelper from old 11 to 13. * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata * Drop unused python3-mypy build-dependency * Mark test build-dendencies as python-aioskybell (23.12.0-3) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Use dh-sequence-python3 * Bump debhelper from old 11 to 13. * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata * Drop unused python3-mypy build-dependency python-xknx (3.15.0-2) unstable; urgency=medium . * Team Upload * Disable useless Salsa CI jobs * Drop unused python3-mypy build dependency * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata rust-dateparser (0.3.1-1) unstable; urgency=medium . * Team upload. * Package dateparser 0.3.1 from crates.io using debcargo 2.8.3 rust-libprotonup (0.15.0-1) unstable; urgency=medium . * Package libprotonup 0.15.0 from crates.io using debcargo 2.8.4 rust-protonup-rs (0.15.0-1) unstable; urgency=medium . * Package protonup-rs 0.15.0 from crates.io using debcargo 2.8.4 rust-regex-automata (0.4.18-1) unstable; urgency=medium . * Team upload. * Package regex-automata 0.4.18 from crates.io using debcargo 2.8.4 termshark (2.4.0-5) unstable; urgency=medium . * Team upload * Add patch to make statik generation reproducible termshark (2.4.0-4) unstable; urgency=medium . * Team upload. * Fix FTBFS from golang-github-adam-hanna-arrayoperations-dev 1.0 (Closes: #1143525) * Bump standards version to 4.7.4 * Bump debian watch to version 5 * Bump DH compat to 14 termshark (2.4.0-3) unstable; urgency=medium . * Team upload * Cherry-pick patch proposed upstream to fix FTBFS with wireshark 4.6 (Closes: #1118335) termshark (2.4.0-2) unstable; urgency=medium . * Team upload * Add patch to support loong64 (Closes: #1070104) * Bump standards version to 4.7.0 termshark (2.4.0-1) unstable; urgency=medium . * Team upload * New upstream release (Closes: #1019201) * Bump standards version to 4.6.1.0 * Fix FTBFS from an updated dependency (Closes: #1020140) termshark (2.2.0-2) unstable; urgency=medium . * Team upload. * Include themes in package (Closes: #992831) termshark (2.2.0-1) unstable; urgency=medium . * Team upload * New upstream release * Bump standards version to 4.5.1 termshark (2.1.1-1) unstable; urgency=medium . * Team upload . [ Dawid Dziurla ] * New upstream version 2.1.1 . [ Stephen Gelman ] * Add dependency of golang-github-adam-hanna-arrayoperations-dev * Patch code to support newer golang-github-pkg-term-dev (Closes: #973151) * Bump debhelper to 13, standards version to 4.5.0 termshark (2.0.3-1) unstable; urgency=medium . * d/control: add pkg-term dependency * d/patches: drop * add d/README.Debian * d/README.debian: update * d/README.debian: update * d/control: termshark needs dumpcap binary * New upstream version 2.0.3 * d/control: add new dependencies * d/control: need newer gowid * d/control: bump standards * d/README.debian: delete * d/patches: add spelling.patch termshark (1.0.0-3) unstable; urgency=medium . * d/control: bump standards termshark (1.0.0-2) unstable; urgency=medium . * d/control: "Golang" -> "Go" (closes: #929270) termshark (1.0.0-1) unstable; urgency=medium . * Initial release (Closes: #927799) wordpress (7.1+dfsg1-1) unstable; urgency=medium . * New upstream release Includes security fix from 7.0.4 CVE-2026-65640 Closes: #1144955 * Remove patch remove_remote_emojis as no longer needed * Remove version of php-getid3 as forky has newer * Add build-dep php-phpmailer for linktree * Remove translation package as its out of date mostly wordpress (7.0.3+dfsg1-1) unstable; urgency=high . * New upstream security release CVE-2026-64638 fix XSS in login that leads to RCE Closes: #1143843 REMOVED: r-cran-raster 3.6-32-1 REMOVED: r-cran-rnaturalearth 1.2.0-1 REMOVED: r-cran-terra 1.9-34-1 REMOVED: golang-github-twpayne-go-xdg 6.0.0-1.1 REMOVED: r-cran-satellite 1.0.6+dfsg-1 REMOVED: r-cran-exactextractr 0.10.1-1