ccrypt (1.11-7) unstable; urgency=medium . * Team upload. * d/p/*: Add patch to fix encryption of files of size 4G-1 (Closes: #1143995). * d/control: - Drop 'Priority: optional'. - Drop 'Rules-Requires-Root: no'. - Bump Standards-Version. - Bump debhelper-compat to 14. Consequently, drop all ${*:Depends} substvar mentionings. * d/copyright: Bump packaging copyright years. * d/gbp.conf: Set upstream-branch and debian-branch to */latest. checkinstall (1.8.3-1) unstable; urgency=medium . * New upstream release - Fix getcwd() returning a pointer into a stack frame that has gone - Intercept faccessat() and euidaccess(), so access checks see files being installed instead of reporting them missing - Fix a stack overflow on a chroot() path longer than MAXPATHLEN * Fixes the hppa FTBFS. The first two bugs affected all architectures checkinstall (1.8.2-1) unstable; urgency=medium . * New upstream release - Fixes ftbfs on armhf checkinstall (1.8.1-1) unstable; urgency=medium . * New upstream release - The new test suite uncovered bugs on 32-bit platforms that set 64-bit time and file offsets. Checkinstall has been broken on those platforms since then. checkinstall (1.8.0-1) unstable; urgency=medium . * New upstream release - Opens that create or empty a file without asking for write access are tracked, so packages now contain files that used to be written to the real filesystem and left out of the package - Exclusions match whole path components, so excluding /tmp no longer excludes /tmpfoo as well - renameat2 passes its flags to the kernel, which stops a requested exchange from renaming one file over the other and losing the second - An empty pathname keeps its AT_EMPTY_PATH meaning, which fixes tar aborting on an archive holding a symlink ahead of its target - Several buffer overruns and a copy that could be truncated without being reported as failed * Run upstream's test suite at build time, in place of installwatch's own tests. Test 01 runs those, so nothing is lost * Add an autopkgtest running the same suite against the installed package checkinstall (1.7.0-1) unstable; urgency=medium . * New upstream release, now maintained at https://github.com/ssgelm/checkinstall - A mode set on a symlink no longer reaches the file it points at. fchmodat() dropped AT_SYMLINK_NOFOLLOW, so a binary installed 755 came out of the package writable by anyone, and a link extracted before its target aborted the install (LP: #1861281) - Keep names that contain consecutive spaces. The file list was carried as space separated words, so such a name came back with one space and the file was dropped from the package (LP: #1953239) - Build on alpha, where glibc is libc.so.6.1 * Drop 38 patches, all now in the upstream release * Update copyright file with correct licenses and copyrights * Build the manpages from upstream's SGML rather than the copies in debian/ * Bump debhelper compat to 14 checkinstall (1.6.2+git20170426.d24a630-9) unstable; urgency=medium . * Do not define the 64-bit time entry points where glibc already renames the ordinary wrappers to them. armhf builds with _TIME_BITS=64 throughout, so the assembler was given two of each and the build failed * Add --debcompression to set what dpkg-deb packs a Debian package with: gzip, xz, zstd or none. Left unset, the choice stays with dpkg-deb (Closes: #750028) checkinstall (1.6.2+git20170426.d24a630-8) unstable; urgency=medium . * Initialise from lstat64(), __lxstat64() and renameat2() as the other wrappers do. Reached before _init() runs, they called a NULL pointer and took the process down (Closes: #964458) * Wrap openat64(). Programs built for large files, which on 32-bit is most of them, created their output on the real filesystem (Closes: #1054601) * Wrap utimensat(), which set timestamps on the real path and stopped an install with "cp: preserving times ...: No such file or directory" * Wrap the 64-bit time entry points. A program built with _TIME_BITS=64 calls __stat64_time64() rather than stat(), so on i386 nothing coreutils did to inspect a file was intercepted * Strip ELF objects that have no execute bit. A shared library installs 0644, so --stripso had never stripped one * Apply --exclude to a path that is not on the build host. With filesystem translation the installed files are only in the translated tree, so the exclusion was silently ignored. Thanks Kostas Tamateas for diagnosing both of these (Closes: #667606) * Add the French translation. Thanks Damien and the debian-l10n-french team! It matches more of the current strings than any translation the package already carried (Closes: #805905) * Guess the package name from the source directory rather than from a build subdirectory, and keep a trailing field as the version only when it has a digit in it. cmake and meson builds produced packages called build, and gr-binviz produced gr version binviz (Closes: #878117) * Work out the shared library dependencies with dpkg-shlibdeps and record them, as a normally packaged program has. Packages built here had none unless typed by hand. Debian only, and --autodeps=no turns it off (Closes: #993498) checkinstall (1.6.2+git20170426.d24a630-7) unstable; urgency=medium . * Guard the 32-bit wrappers on every architecture where glibc redirects the ordinary names onto the 64-bit ones, rather than on ARM alone. Fixes the armhf FTBFS, and hppa, m68k and powerpc, failing since the t64 transition. checkinstall (1.6.2+git20170426.d24a630-6) unstable; urgency=medium . * Bump standards version to 4.7.4 * Add loong64 support (Closes: #1085196) Thanks wuruilong for the patch! loongarch64 has no __xstat() to intercept, so the patch wraps stat(), lstat(), fstatat() and mknod() directly. * Make filesystem translation work against a current glibc, which covers most of what has been reported over the years as --fstrans=yes being broken (Closes: #1051180, #1116590): - Intercept the stat family through the symbols glibc exports. glibc 2.33 turned stat(), lstat(), fstatat() and mknod() into ordinary functions, so a library defining only __xstat() no longer sees the stat calls that binaries in the archive make, and every tool that stats a path before acting on it was told the file did not exist. The loong64 wrappers above are needed here too, so the condition guarding them is the glibc version rather than the architecture. - Intercept statx() - Perform linkat() on the translated paths. It linked the paths it was given, so the hard link was made against the real filesystem even with --fstrans=yes - Intercept __open_2(), __openat_2() and their LFS64 spellings, which _FORTIFY_SOURCE substitutes for open() and openat() - Intercept the mkstemp family, which opens its file through an internal call the open() wrapper never sees * Stop backups from destroying symlinked directories such as /lib on merged-/usr systems (Closes: #1107638): - Resolve symlinks in the parent directories of a path before mirroring it into installwatch's backup tree, so restoring that tree over / can no longer replace a symlink with a real directory - Don't back up files on a read-only access() call - Pass --keep-directory-symlink to tar when restoring a backup, as a safety net * Record installed files under their real parent directories, so that a package built from an install writing to e.g. /lib/systemd/system ships /usr/lib/systemd/system and drops the aliased paths * Take option values as given rather than re-evaluating them through the shell. Values holding shell metacharacters, such as --maintainer="Jane Doe " and --requires="libc6 (>= 2.28)", now reach the package intact where they used to be dropped without a word (Closes: #785441) * Keep installed files whose path merely contains the name of the build directory. The check that finds them anchors its pattern, the one that dropped them did not, so building in /myapp also excluded /usr/include/myapp from the package (Closes: #1033483) * Fix the ld.so.conf guard in the postinstall script written for --addso=yes. It used "&>", which /bin/sh reads as a background command plus a stray redirection, so the guard never held and the library directory was appended again on every install (Closes: #892985) * Look for the shared libraries under the build directory when --addso=yes is given. checkinstall asked file(1) about their final absolute path, where filesystem translation leaves nothing, so it recognised no libraries and wrote no postinstall script * Drop "install -o root -g root" from the upstream install target. It fails under dpkg 1.22.13 and later, where a package that leaves Rules-Requires-Root unset runs its binary targets without (fake)root kakoune (2026.05.21-1) unstable; urgency=medium . * Declare compliance with Policy 4.7.4, drop the implied Priority: optional. * Refresh the debputy-style formatting. * Convert the watch file to version 5 of the format. * Add Salsa CI configuration. * New upstream release: - includes the fix for CVE-2026-48120; Closes: #1143968 - drop the 01-typos patch - drop the 09-parallel-dirs patch, integrated upstream - refresh patch line numbers - add the 09-sizeof-char-ptr patch to fix the 32-bit FTBFS * Switch back to debhelper-compat now that debhelper 14 is out. less-awful-ssl-clojure (1.0.8-1) unstable; urgency=medium . * Initial release. (Closes: #1143874) libpgplot-perl (1:2.36-1) unstable; urgency=medium . * Team upload. * New upstream release. * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Use test-build-validate-cleanup instead of test-build-twice. * Use debrebuild instead of reprotest. * Drop Priority: optional, default since dpkg 1.22.13. * Bump Standards-Version to 4.7.4, changes: priority. * Drop obsolete Breaks/Replaces. * Drop c23.patch, applied upstream. Refresh remaining patches. moraine (0.2.2-1) unstable; urgency=medium . * Initial release. (Closes: #1141131) node-mocha (11.8.0+ds1+~cs36.4.12-1) unstable; urgency=medium . * Team upload * New upstream version 11.8.0+ds1+~cs36.4.12 nose2 (0.16.0-2) unstable; urgency=medium . * Team upload. * Clean even better. Closes: #1048280. openalgz-ut (1.2.1-1) unstable; urgency=medium . * New upstream release * refresh patches * d/control: bump S-V to 4.7.4 * migrate to dh-compat 14 pillow-jpegxl-plugin (1.3.8-1) unstable; urgency=medium . * Initial upload. (Closes: #1143909) * Avoid maturin network usage * Drop lock file and use a cargo config * Relax crate versions * Use libjxl dynamically * Add pillow dependency for tests * Build with useful dbgsym * Add a sanity check test praat (7.0+dfsg-1) unstable; urgency=medium . * New upstream version 7.0+dfsg * d/copyright: Update Files-Excluded list * Drop patches (applied upstream): + d/p/use-ldflags.patch + d/p/destdir-in-makefile.patch + d/p/install-in-makefile.patch + d/p/no-url-description-para.patch + d/p/copyright-metainfo-xml.patch + d/p/bash-completion.patch + d/p/honor-compilation-flags.patch * d/copyright: Reflect upstream changes * d/p/drop-no-pie.patch: Refresh for new upstream version * d/p/use-system-zlib.patch: New patch * d/p/clean-test.patch: New patch * d/clean: Drop the files created by the unit test * d/t/run-tests: Use option --FULL-TRUST * d/rules: Use system's Zlib publicsuffix (20260725.1419-1) unstable; urgency=medium . * new upstream version pytest-forked (1.7.5-1) unstable; urgency=medium . * Team upload. * Drop dependency on python3-py (Closes: #1121676) * Rewrite d/watch in v5 format * New upstream version 1.7.5 * Drop patches, applied upstream pytest-instafail (0.5.0-4) unstable; urgency=medium . * Team Upload * Rewrite d/watch in v5 format * Bump Standards-Version to 4.7.4, drop Priority: tag python-biom-format (2.1.17-4) unstable; urgency=medium . * Team upload. [ Andreas Tille ] * Fix time traveling . [ Karsten Schöke ] * use sphinx-build generate manpage. * reconfigure sphings-build html doc * Changes made by cme python-xmltodict (1.0.3-1.1) unstable; urgency=medium . * Non-maintainer upload. * Release to unstable python-xmltodict (1.0.3-1) experimental; urgency=medium . * Team upload. * New upstream release. * Ran wrap-and-sort -bastk. * Add pybuild-plugin-pyproject build-depends. * Replaced python3-nose2 by python3-pytest. * Add autopkgtest. * Add PYBUILD_TEST_ARGS=-v. rust-attohttpc (0.31.0-2) unstable; urgency=medium . * Package attohttpc 0.31.0 from crates.io using debcargo 2.8.4 * Fix __rustls feature: use ring+std+tls12 instead of just ring. The missing std and tls12 features caused compilation failures in downstream crate kubie (unresolved imports of ClientConnection, StreamOwned; missing StdError impl on rustls::Error). * Restructure patches: - Migrate compress-zlib-ng, tls-native-vendored, tls-vendored, and __rustls-ring feature removal to declarative remove_features in debcargo.toml. debcargo now auto-generates the corresponding auto/auto-remove-features.patch, replacing two hand-written patches. - Split the old monolithic relax-deps.patch into focused single-purpose patches ordered by stability: remove-webpki-roots.patch (webpki-roots removal + __rustls fix + __rustls-ring inline), relax-deps.patch (native-tls version constraint only), enable-flate2-default-backend.patch (flate2 standalone testability). * Set flate2 default-features = true so the standalone flate2 feature passes autopkgtest. * Drop redundant ca-certificates from test_depends. * Update maintainer name. scantpaper (3.0.15-1) unstable; urgency=medium . * New upstream release. * Freshened patches symfony (7.4.16+dfsg-1) unstable; urgency=medium . [ Fabien Potencier ] * Update VERSION for 7.4.16 . [ Nicolas Grekas ] * [Validator] Fix File constraint skipping the mime type check when extensions and mimeTypes have no common value * [TwigBridge][WebProfilerBundle] Fix compatibility with Twig 4 * [Cache][Messenger] Restore compatibility with ext-redis 5 . [ David Prévot ] * Document lintian-overrides tantan (52-1) unstable; urgency=medium . * New upstream version 52. * Bump Standards-Version. * Bump copyright date for debian/ directory. * Generate tantan.1 manpage at build time via debian/createmanpages instead of shipping a static copy.