bthome-ble (3.24.0-1) unstable; urgency=medium
 .
   * New upstream release.
bthome-ble (3.23.5-1) unstable; urgency=medium
 .
   * New upstream release.
   * Update to debhelper compatibility level 14.
   * Add dh-sequence-single-binary.
   * Remove debhelper compat 14 auto-applied substvars.
   * Prefix debhelper files with the binary package name.

libgit2 (1.9.7+ds-1) unstable; urgency=medium
 .
   * New upstream version 1.9.7+ds
     - Fix CVE-2026-5917: shell command injection vulnerability
       (Closes: #1144465)

libgpiod (2.2.5-1) unstable; urgency=medium
 .
   * New upstream release.

libnginx-mod-http-auth-pam (1:1.5.5-5) unstable; urgency=medium
 .
   * d/watch: add 'Pgp-Mode: none'
   * d/gbp.conf: upstream-branch = upstream/latest
   * d/control: remove Priority
   * d/control: remove Rules-Requires-Root
   * d/control: bump Standards-Version to 4.7.4, no changes
   * d/control: debhelper-compat (= 14)
   * d/control: mention PAM environment support in package description
   * d/copyright: update copyright holders and years
   * d/t/generic: update, add ABI dependency check
   * d/t/auth-pam: add functional PAM authentication test
   * d/p/fix-allocation-and-pam-errors.patch: add

libnginx-mod-http-brotli (1.0.0~rc-9) unstable; urgency=medium
 .
   * d/control: debhelper-compat (= 14)
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: remove Rules-Requires-Root: no
   * d/control: add Recommends: nginx and improve package descriptions
   * d/copyright: update upstream and packaging copyright information
   * d/patches: backport upstream fixes for header pointer initialization,
     nginx compatibility, and short Accept-Encoding values
   * d/patches/0001-Fix-Vary-header.patch: complete DEP-3 metadata and
     fix indentation
   * d/tests: update the generic test and extend filter and static coverage
   * d/tests: remove an unused dependency and add curl timeouts

libnginx-mod-http-dav-ext (1:3.0.0-8) unstable; urgency=medium
 .
   * d/gbp.conf: upstream-branch = upstream/latest
   * d/control: remove Rules-Requires-Root: no
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: debhelper-compat (= 14)
   * d/control: drop Priority: optional
   * d/t/generic: update, add ABI dependency check
   * d/copyright: update upstream and packaging copyright information
   * d/control: describe the supported WebDAV methods
   * d/t/webdav: add functional tests for the WebDAV methods

libnginx-mod-http-echo (1:0.65-4) unstable; urgency=medium
 .
   * d/t/generic: test nginx-abi-* dependency for all libnginx-mod-* packages
   * d/control: debhelper-compat (= 14)
   * d/copyright: update upstream and packaging copyright information
   * d/fix.scanned.copyright: remove file
   * d/p/0001-fix-timer-formatting-on-32-bit.patch: add DEP-3 metadata
   * d/{control,copyright,upstream/metadata,watch}: use canonical upstream URLs
 .
 libnginx-mod-http-echo (1:0.65-3) unstable; urgency=medium
 .
   * Use test command from test-nginx

libnginx-mod-http-fancyindex (1:0.6.0-2) unstable; urgency=medium
 .
   * d/t/generic: update, add ABI dependency check
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: debhelper-compat (= 14)
   * d/copyright: fix upstream name, license and copyright information
   * d/control: add Recommends: nginx
   * d/p/0001-close-local-header-footer-files-after-reading.patch add,
     prevent file descriptor leaks on nginx configuration reload.
   * d/t/fancyindex: add functional index and local header/footer tests

libnginx-mod-http-geoip2 (1:3.4-8) unstable; urgency=medium
 .
   * d/gbp.conf: upstream-branch = upstream/latest
   * d/t/generic: update, add ABI dependency check
   * d/control: remove Rules-Requires-Root: no
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: drop Priority: optional
   * d/control: debhelper-compat (= 14)
   * d/control: remove dep. nginx-dev (>= 1.24.0-2)
   * d/copyright: update copyright holders and years
   * d/p/fix-invalid-auto-reload-segfault.patch add,
     fix segfault on an invalid auto_reload interval
   * d/t/regressions: add regression tests for invalid auto_reload values and
     cache invalidation after database reloads in both HTTP and stream modules
   * d/p/invalidate-cache-after-database-reload.patch add,
     invalidate cached lookups after reloading a database

libnginx-mod-http-headers-more-filter (1:0.40-4) unstable; urgency=medium
 .
   [ Jérémy Lal ]
   * Use Test-Command from test-nginx
   * Load this module after http-lua. Closes: #1143740.
 .
   [ Jan Mojžíš ]
   * d/t/generic: update, add ABI dependency check
   * d/control: remove Rules-Requires-Root: no
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: drop Priority: optional
   * d/control: debhelper-compat (= 14)
   * d/copyright: update upstream and packaging copyright information
   * d/t/helloworld: remove unused test
   * d/t/control: remove unnecessary dependencies for upstream test and
     add Features: test-name=upstream

libnginx-mod-http-ndk (1:0.3.4-6) unstable; urgency=medium
 .
   * d/control: remove Rules-Requires-Root: no
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: drop Priority: optional
   * d/control: debhelper-compat (= 14)
   * d/t/generic: update, add ABI dependency check
   * d/{control,copyright,watch,upstream/metadata}: update upstream URLs after
     repository move to the vision5 organization
   * d/copyright: update Debian copyright years and correct the BSD-3-clause,
     SSLeay, and MurmurHash2 license information
   * d/p/0001-fix-complex-value-scripts.patch: complete DEP-3 metadata

libnginx-mod-http-subs-filter (1:0.6.4-9) unstable; urgency=medium
 .
   * d/gbp.conf: upstream-branch = upstream/latest
   * d/control: remove Rules-Requires-Root: no
   * d/control: bump Standards-Version: 4.7.4, no changes
   * d/control: debhelper-compat (= 14)
   * d/t/generic: update, add ABI dependency check
   * d/control: drop Priority: optional
   * d/copyright: update Debian contributors and correct the licensing of
     bundled Perl modules
   * d/p/0004-check-sub-pairs-array-allocation.patch add, check the sub-pairs
     array allocation result

libnginx-mod-js (1.0.0-2) unstable; urgency=medium
 .
   * For some reason previous version was missing some build deps.
   * patch: upstream fixes for quickjs-ng >= 0.15. Closes: #1144514.

libpsl (0.23.3-1) unstable; urgency=medium
 .
   * New upstream version 0.23.3

libsdl2 (2.32.10+dfsg-8) unstable; urgency=medium
 .
   * d/control: Remove unnecessary B-D on fcitx-libs-dev.
     SDL doesn't actually use any headers from here, it only communicates
     with fcitx via D-Bus.
   * d/control: Request dpkg build API v1
   * d/control: Bump debhelper compat level to 14
     - Remove dependency substvars, now added automatically
   * d/watch*: Use Github API to list tags.
     The last 2.x release was long enough ago that it's no longer visible
     on the web page listing recent releases.
   * d/watch*: Repack source tarballs using xz.
     While we're repacking them anyway, they might as well be smaller.
   * Normalize formatting (debputy reformat)

libsdl3 (3.4.14+ds-2) unstable; urgency=medium
 .
   * d/control: Remove unnecessary B-D on fcitx-libs-dev.
     SDL doesn't actually use any headers from here, it only communicates
     with fcitx via D-Bus.
   * d/control: Request dpkg build API v1

libssh2 (1.11.1-6) unstable; urgency=medium
 .
   * d/patches: Fix CVEs CVE-2026-58050 CVE-2026-58051 (Closes: #1144415)

linux-base (4.16) unstable; urgency=medium
 .
   * Simplify install file.
   * Add hooks to copy vmlinuz file to /boot.

londiste-sql (3.8-9) unstable; urgency=medium
 .
   * Team upload.
   * Skip tests on 32-bit architectures.

mcds (1.10-1) unstable; urgency=medium
 .
   * New upstream release.

mkdocs-print-site-plugin (2.8-2) unstable; urgency=medium
 .
   * Team upload.
   * d/control: remove unused mypy dependency.
   * Reorder sequence of d/control fields by cme (routine-update)

modulejail (1.6.0-1) unstable; urgency=medium
 .
   * New upstream version 1.6.0

msgraph (0.3.4-2) unstable; urgency=medium
 .
   * Update debhelper compat to 14

nautilus-python (4.1.0-2) unstable; urgency=medium
 .
   [ Jeremy Bícha ]
   * Opt into Salsa CI
   * Remove obsolete Breaks/Conflicts
   * Update debhelper compat to 14
   * Update Standards Version to 4.7.4
 .
   [ Roderich Schupp ]
   * Don't install examples twice (Closes: #960670)

nnn (5.3-1) unstable; urgency=medium
 .
   * Import new upstrem version
   * d/control:
     - Bump debhelper-compat to 14

node-address (2.0.3-7) unstable; urgency=medium
 .
   * Team upload
   * Set explicit rootDir in tsconfig for TypeScript 6
node-address (2.0.3-6) unstable; urgency=medium
 .
   * Team upload
   * Fix compatibility with TypeScript 6:
     + declare explicit tsconfig "types" (TS6 no longer scans node_modules/@types)
     + drop baseUrl and target=es5 from the test fixture (TS6 makes those
       deprecations hard errors)
   * Declare compliance with policy 4.7.4
   * Drop "Priority: optional"
   * debian/watch version 5

node-ajv-keywords (5.1.0-7) unstable; urgency=medium
 .
   * Team upload
   * Fix build with TypeScript 6 (rootDir, types, moduleResolution)
node-ajv-keywords (5.1.0-6) unstable; urgency=medium
 .
   * Team upload
   * Fix compatibility with TypeScript 6: point ts-jest at spec/tsconfig.json,
     which declares "types", as TS6 no longer scans node_modules/@types
   * Copy jest.config.js into the autopkgtest environment, otherwise the above
     never reaches the tests
   * Apply multiarch hints from UDD

node-ampproject-remapping (2.2.0+~cs5.15.37-3) unstable; urgency=medium
 .
   * Team upload
   * Fix build of embedded @jridgewell components with TypeScript 6
node-ampproject-remapping (2.2.0+~cs5.15.37-2) unstable; urgency=medium
 .
   * Team upload
   * Fix compatibility with TypeScript 6:
     + declare explicit tsconfig "types", as TS6 no longer scans
       node_modules/@types (narrowed to node in tsconfig.build.json, which also
       drives the build where @types/jest is not linked)
     + switch moduleResolution from the now deprecated node10 to bundler
   * Declare compliance with policy 4.7.4
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"

node-ansi-up (5.1.0+dfsg-4) unstable; urgency=medium
 .
   * Team upload
   * Replace TypeScript 5 tsconfig patch by a TypeScript 6 one
   * Declare compliance with policy 4.7.4
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"
   * debian/watch version 5

node-applause (2.0.4+~cs2.1.13-3) unstable; urgency=medium
 .
   * Team upload
   * Fix optional-require build with TypeScript 6
   * Declare compliance with policy 4.7.4
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"
   * debian/watch version 5

node-approximate-now (1.0.2-3) unstable; urgency=medium
 .
   * Team upload
   * Set explicit rootDir for TypeScript 6
node-approximate-now (1.0.2-2) unstable; urgency=medium
 .
   * Team upload
   * Fix compatibility with TypeScript 6:
     + declare explicit tsconfig "types", as TS6 no longer scans
       node_modules/@types
     + drop the now deprecated "moduleResolution": "node"
   * debian/watch version 5

node-ast-types (0.16.1-7) unstable; urgency=medium
 .
   * Team upload
   * Fix compatibility with TypeScript 6: drop the now deprecated
     "moduleResolution": "node" (node10 stays the implicit default)

node-ava (5.3.1+dfsg+~cs46.3.10-9) unstable; urgency=medium
 .
   * Team upload
   * Fix build with TypeScript 6 (explicit rootDir, moduleResolution, node types)
node-ava (5.3.1+dfsg+~cs46.3.10-8) unstable; urgency=medium
 .
   * Team upload
   * Fix compatibility with TypeScript 6: set rootDir explicitly in the
     ava-typescript test fixture, TS6 no longer infers the common source
     directory and fails with TS5011

pg-squeeze (1.9.4-2) unstable; urgency=medium
 .
   * Set output_plugin_libraries=pg_squeeze for tests.

postgres-decoderbufs (3.6.0-2) unstable; urgency=medium
 .
   * Set output_plugin_libraries=decoderbufs for tests.

pyopenssl (26.4.0-1) unstable; urgency=medium
 .
   * New upstream version.
   * Update the supported python3-cryptography versions.
pyopenssl (26.3.0-1) unstable; urgency=medium
 .
   * Upload to unstable.
pyopenssl (26.3.0-1~exp1) experimental; urgency=medium
 .
   * Upload to experimental.
   * New upstream version.
   * Update the supported python3-cryptography versions.
   * Switch to the debhelper compat level 14.
   * Add X-Style: black and reformat.

python-biom-format (2.1.17-5) unstable; urgency=medium
 .
   * Team upload.
   * d/rules: Remove unnecessary example copies.
     Closes: #1120068, #1102990

python-cryptography (49.0.0-2) unstable; urgency=medium
 .
   * Backport the upstream fix for CVE-2026-69247 (Closes: #1143596).
python-cryptography (49.0.0-1) unstable; urgency=medium
 .
   * Upload to unstable.
python-cryptography (49.0.0-1~exp1) experimental; urgency=medium
 .
   * Upload to experimental.
   * New upstream version.
   * Support building against pyo3 0.29.

python-cryptography-vectors (49.0.0-1) unstable; urgency=medium
 .
   * Upload to unstable.
python-cryptography-vectors (49.0.0-1~exp1) experimental; urgency=medium
 .
   * Upload to experimental.
   * New upstream release.
   * Convert d/watch to version 5.
   * Add X-Style: black and reformat.
   * Drop the build system patch, replace B-D: flit with python3-uv-build.
   * Switch to debhelper compat level 14.