aiocomelit (0.12.0-1) unstable; urgency=medium
 .
   * New upstream release.

android-udev-rules (0~20250314+ds-5) unstable; urgency=medium
 .
   * Team upload.
   * Fix google-android-platform-tools-installer versions (Closes: #1104042)

asmc-linux (0.0~git20250329.4ee70bd+ds-2) unstable; urgency=medium
 .
   * Lintian fix: old-fsf-address-in-copyright-file

bleachbit (4.6.2-2) unstable; urgency=medium
 .
   [ Alexandre Detiste ]
   * d/control: fix syntax error in Maintainer
   * d/rules: remove Python2 vs 3 hybridation
 .
   [ Fabio Fantoni ]
   * improve d/gbp.conf
   * Update standards version to 4.7.2, no changes needed

bluetooth-data-tools (1.28.1-1) unstable; urgency=medium
 .
   * New upstream release.
bluetooth-data-tools (1.27.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Add version to python3-setuptools build dependency instead of PEP 639
     patch.

cbmc (6.6.0-4) unstable; urgency=low
 .
   * Fix Maven dependencies for regression tests, again
cbmc (6.6.0-3) unstable; urgency=low
 .
   * Fix Maven dependencies for regression tests
cbmc (6.6.0-2) unstable; urgency=low
 .
   * Fix Maven integration for regression tests
cbmc (6.6.0-1) unstable; urgency=low
 .
   * New upstream release, which includes C23 support (Closes: #1096417)

debian-reference (2.127) unstable; urgency=medium
 .
   * Fix maintscript regression in 2.126 by using pre-depends on
     debian-reference-common.  Closes: #1100677
debian-reference (2.126) unstable; urgency=medium
 .
   [ xiao sheng wen(肖盛文) ]
   * Translated using Weblate (Chinese (Simplified Han script))
 .
   [ Andika Triwidada ]
   * Translated using Weblate (Indonesian)
 .
   [ Cleverson Cândido ]
   * Translated using Weblate (Portuguese)
 .
   [ Tanavit MINETEST ]
   * Translated using Weblate (French)
 .
   [ Jonathan Dowland ]
   * Correct description of purpose of 'sudo' group
 .
   [ Ricky Tigg ]
   * Translated using Weblate (Finnish)
 .
   [ Rodolfo José dos Santos Gigante ]
   * Translated using Weblate (Portuguese)
 .
   [ Rodolfo Gigante ]
   * Translated using Weblate (Portuguese)
 .
   [ Francisco Serrador ]
   * Translated using Weblate (Spanish)
 .
   [ Osamu Aoki ]
   * Fix undeclared file conflict.  Closes: #1100677
   * Improve PO file checker
   * Update PO/POT with trivial url link fixes (pt, fr)

devscripts (2.25.11) unstable; urgency=medium
 .
   [ Adrian Bunk ]
   * bts: The forky{,-ignore} tags already exists and can already be used.
   * nmudiff: Improve wording of non-delay NMU email.
 .
   [ Johannes Schauer Marin Rodrigues ]
   * debchange: --date argument *must* be in RFC 5322 format.
   * uscan: document ~cs.
 .
   [ Roland Mas ]
   * salsa: allow invoking checkout with a full URL.
 .
   [ Ian Jackson ]
   * dscverify: Look in the t2u keyring, if it is installed.
   * Add debian-tag2upload-keyring to Recommends.
 .
   [ Hugh McMaster ]
   * uscan:
     - add support for git repositories with submodules. Closes: #902846.
     - create a Moo class for 'gitexport' and 'gitmode'.
     - add documentation on the 'gitmodules' option.
   * uscan/Downloader.pm: Export all submodule files when gitexport=all is set.
   * uscan/WatchLine.pm:
     - pass $self->gitrepo_dir to the downloader.
     - remove suffixed tarball in --overwrite-download mode.
     - add missing backslash to regex.
   * test/test_uscan_git:
     - make $TARBALL a local variable.
     - make $DESTDIR a local variable.
     - make $ORIG and $UPSTREAM local variables.
     - update test failure messages (logic and grammar).
     - add missing $WATCHARGS in makeDebianDirHead().
     - aun tests from a separate function.
     - create $destdir in the new $TEMP_PKG_DIR for clean-up.
     - replace helperLaunch() with makeDebianDir*().
     - separate spawnGitRepo() from makeDebianDir().
     - simplify debian/watch creation.
     - support custom repository paths.
     - add tests for git repositories with submodules.
 .
   [ Holger Levsen ]
   * Update Portuguese translation, thanks to Américo Monteiro. Closes: #1103688
   * Update po4a.

emacs-dape (0.24.0-1) unstable; urgency=medium
 .
   * New upstream release
   * Drop emacs from Recommends; already in Depends

ethtool (1:6.14-2) unstable; urgency=medium
 .
   * Set type property to console-application for provided AppStream metainfo
     XML (Closes: #1102647)

file-read-backwards (3.2.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Upstream now uses pytest-mock.
   * Move packages required for tests to Build-Depends-Indep.
   * Switch to autopkgtest-pkg-pybuild.
   * Update Standards-Version.
   * Update copyright year.
   * Simplify debian/rules.

firefox-esr (128.10.0esr-1) unstable; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2025-29, also known as:
     CVE-2025-4083, CVE-2025-4087, CVE-2025-4091, CVE-2025-4093.

flatseal (2.3.1-1) unstable; urgency=medium
 .
   * New upstream version.

fltk1.4 (1.4.3-1) unstable; urgency=medium
 .
   * Final 1.4.3 (and likely 1.4.x) release, with only formal changes
     relative to the last snapshot from Debian's perspective.
   * Upload to unstable.
 .
 fltk1.4 (1.4.3~20250423+82d5679f9cf1-2) experimental; urgency=medium
 .
   * debian/libfltk1.4.symbols*: Go ahead with libfltk1.4.symbols.<arch>,
     with most of libfltk1.4.symbols' direct contents factored out into
     libfltk1.4.symbols.common.  Tagged inclusions mostly worked out, but
     lacked a good way to indicate that certain symbols should be present
     on 64-bit architectures and *-i386 (i.e., architectures on which
     time_t is simply long) but not anywhere else.  An additional benefit
     is being able to supply a generic fltk1.4.symbols that's open to any
     known va_list representation and to the possibility that Wayland
     support may or may not be present.
   * debian/libfltk1.4.symbols.{common,wayland}: Mark append/insertion
     vector symbols as Wayland-specific.
   * debian/rules: Drop unprefixed game manpages.  (Closes: #1104139.)
   * Standards-Version: 4.7.2 (routine-update)
   * Remove trailing whitespace in debian/changelog (routine-update)
 .
 fltk1.4 (1.4.3~20250423+82d5679f9cf1-1) experimental; urgency=medium
 .
   * New upstream snapshot.
   * debian/control: Add xauth and xvfb to Build-Depends-Indep for xvfb-run.
   * debian/fltk1.4-doc.doc-base: Adjust description to note Fluid doc split.
   * debian/fltk1.4-doc.doc-base.fluid: New.
   * debian/libfltk(-gl)1.4.symbols(.[no-]wayland): Account for symbol
     differences when building without Wayland, i.e. on the Hurd.
     (Other non-Linux architectures would be in the same boat, but are off
     the radar.)
   * debian/rules: Build and install Fluid's HTML and PDF documentation
     when covering architecture-independent packages; build them under
     xvfb-run to allow for screenshot inclusion.
   * fluid/documentation/CMakeLists.txt: Adjust detailed Fluid
     documentation's installation location; install it as part of
     fltk1.4-doc for now.  (It'll get a dedicated package post-Trixie.)
 .
 fltk1.4 (1.4.3~20250421+8ac2a9956-2) experimental; urgency=medium
 .
   * debian/control: Limit libdecor build-deps to Linux too.
 .
 fltk1.4 (1.4.3~20250421+8ac2a9956-1) experimental; urgency=medium
 .
   * New upstream release, mostly featuring build system changes, largely
     superseding the active parts of Debian's patch (which still formally
     retains changes to the traditional build system).
   * debian/control:
     - Build-depend on fluid (>= 1.4) when cross-compiling. (Closes: #1103807.)
     - Limit Wayland build dependencies to Linux per their availability.
     - libfltk1.4-dev: Stop suggesting libcairo2-dev now that it's a full
       dependency.  (See #1102961.)
   * debian/copyright: Pull out LGPL-2+ with static linking exception.
   * debian/rules: Update for new release:
     - Stop setting LD_LIBRARY_PATH now that the build uses a version of
       the fluid tool that links statically against FLTK.
     - Install fully dynamically linked versions of tools.
     - Move games from debian/tmp/usr/bin rather than copying them directly
       from under obj-*.
     - Install glpuzzle.man as flpuzzle.6 with appropriate substitutions.
     - Adjust override_dh_auto_install-indep's logic to wipe out all of
       debian/tmp/usr/bin but run at all only in the absence of
       .../usr/bin/fluid.
fltk1.4 (1.4.3~20250423+82d5679f9cf1-2) experimental; urgency=medium
 .
   * debian/libfltk1.4.symbols*: Go ahead with libfltk1.4.symbols.<arch>,
     with most of libfltk1.4.symbols' direct contents factored out into
     libfltk1.4.symbols.common.  Tagged inclusions mostly worked out, but
     lacked a good way to indicate that certain symbols should be present
     on 64-bit architectures and *-i386 (i.e., architectures on which
     time_t is simply long) but not anywhere else.  An additional benefit
     is being able to supply a generic fltk1.4.symbols that's open to any
     known va_list representation and to the possibility that Wayland
     support may or may not be present.
   * debian/libfltk1.4.symbols.{common,wayland}: Mark append/insertion
     vector symbols as Wayland-specific.
   * debian/rules: Drop unprefixed game manpages.  (Closes: #1104139.)
   * Standards-Version: 4.7.2 (routine-update)
   * Remove trailing whitespace in debian/changelog (routine-update)
fltk1.4 (1.4.3~20250423+82d5679f9cf1-1) experimental; urgency=medium
 .
   * New upstream snapshot.
   * debian/control: Add xauth and xvfb to Build-Depends-Indep for xvfb-run.
   * debian/fltk1.4-doc.doc-base: Adjust description to note Fluid doc split.
   * debian/fltk1.4-doc.doc-base.fluid: New.
   * debian/libfltk(-gl)1.4.symbols(.[no-]wayland): Account for symbol
     differences when building without Wayland, i.e. on the Hurd.
     (Other non-Linux architectures would be in the same boat, but are off
     the radar.)
   * debian/rules: Build and install Fluid's HTML and PDF documentation
     when covering architecture-independent packages; build them under
     xvfb-run to allow for screenshot inclusion.
   * fluid/documentation/CMakeLists.txt: Adjust detailed Fluid
     documentation's installation location; install it as part of
     fltk1.4-doc for now.  (It'll get a dedicated package post-Trixie.)
fltk1.4 (1.4.3~20250421+8ac2a9956-2) experimental; urgency=medium
 .
   * debian/control: Limit libdecor build-deps to Linux too.
fltk1.4 (1.4.3~20250421+8ac2a9956-1) experimental; urgency=medium
 .
   * New upstream release, mostly featuring build system changes, largely
     superseding the active parts of Debian's patch (which still formally
     retains changes to the traditional build system).
   * debian/control:
     - Build-depend on fluid (>= 1.4) when cross-compiling. (Closes: #1103807.)
     - Limit Wayland build dependencies to Linux per their availability.
     - libfltk1.4-dev: Stop suggesting libcairo2-dev now that it's a full
       dependency.  (See #1102961.)
   * debian/copyright: Pull out LGPL-2+ with static linking exception.
   * debian/rules: Update for new release:
     - Stop setting LD_LIBRARY_PATH now that the build uses a version of
       the fluid tool that links statically against FLTK.
     - Install fully dynamically linked versions of tools.
     - Move games from debian/tmp/usr/bin rather than copying them directly
       from under obj-*.
     - Install glpuzzle.man as flpuzzle.6 with appropriate substitutions.
     - Adjust override_dh_auto_install-indep's logic to wipe out all of
       debian/tmp/usr/bin but run at all only in the absence of
       .../usr/bin/fluid.

gosop (1.1.0-3) unstable; urgency=medium
 .
   * Sopv alternatives: drop manpage symlink. (Closes: #1104321)

govee-ble (0.44.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Switch to autopkgtest-pkg-pybuild.
   * Update Standards-Version.

hass-nabucasa (0.97.0-1) unstable; urgency=medium
 .
   * New upstream release.

installation-guide (20250429) unstable; urgency=medium
 .
   * build/entities/common.ent: Update figures.

jcal (0.5.1-0.2) unstable; urgency=medium
 .
   [ Danial Behzadi ]
   * d/copyright: Add Upstream contact.
   * Non-maintainer upload
 .
   [ Matthias Geiger ]
   * Source-only upload
jcal (0.5.1-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream version 0.5.1
   * Update the source code repo. (Closes: #1103348)

libcrypto++ (8.9.0-2) unstable; urgency=high
 .
   * Update gf2n documentation.
   * Fix CVE-2023-50980: denial of service (application crash) via DER
     public-key data (closes: #1059311).

lua-nginx-websocket (0.13-1) unstable; urgency=medium
 .
   * Refresh patches
   * d/control:
     - Update Standards Version
     - add Rules-Requires-Root
     - Update debhelper-compat to 13
     - remove extra description
     - switch to lua-team
     - add myself as uploader
     - binary package Depends Switch from nginx-extras to libnginx-mod-http-lua
   * d/copyright:
     - Switch to same license with upstream
     - Update years
   * d/watch: update github releases
   * New upstream version 0.13

mozjs128 (128.10.0-1) unstable; urgency=medium
 .
   * New upstream release

novnc (1:1.6.0-2) unstable; urgency=medium
 .
   * Kill python3-novnc: novnc doesn't have any Python things for a long time
     already, it's just javascript.

ollama-python (0.4.8-1) unstable; urgency=medium
 .
   * New upstream release.
   * Switch to autopkgtest-pkg-pybuild.
   * Update Standards-Version.

org-mode (9.7.29+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.

org-mode-doc (9.7.29-1) unstable; urgency=medium
 .
   * New upstream release.

pcs (0.12.0.2-1) unstable; urgency=medium
 .
   * New upstream version 0.12.0.2
   * d/rules: fix cleanup of COPYING file
   * d/patches: update description

pdsh (2.35-2) unstable; urgency=medium
 .
   * Disable tests during build (closes: #1102958)
pdsh (2.35-1) unstable; urgency=medium
 .
   * New upstream Release.
   * lintian: Fix whitespaces in d/rules and d/changelog
   * lintian: Fix national-encoding issues in translations.
   * lintian: Fix some groff-message in man pages
   * wrap-and-sort debian files.
   * d/copyright: Convert to DEP-3 format, remove files that were mentioned
     in the old copyright as those files no longer exist.

php-imagick (3.8.0-2) unstable; urgency=medium
 .
   * Remove the --verbose flag from phpunit (Closes: #1104434)
php-imagick (3.8.0-1) unstable; urgency=medium
 .
   [ Ondřej Surý ]
   * New upstream version 3.8.0
 .
   [ James Valleroy ]
   * d/tests/control: Avoid error when trying to write cache
 .
   [ David Prévot ]
   * Adapt to recent version of PHPUnit (9) (Closes: #977824)
 .
   [ William Desportes ]
   * Remove Guillaume Delacour

php-pear (1:1.10.16+submodules+notgz-3) unstable; urgency=medium
 .
   * Add Depends on php-cli (Closes: #1104435)
php-pear (1:1.10.16+submodules+notgz-2) unstable; urgency=medium
 .
   * Add php-archive-tar to Provides
   * Manually manage depends/breaks/recommends
php-pear (1:1.10.16+submodules+notgz-1) unstable; urgency=medium
 .
   * Update PEAR to 1.10.16

protobuf (3.21.12-11) unstable; urgency=high
 .
   * Fix CVE-2024-7254: when parsing unknown fields in the Protobuf Java Lite
     and Full library, a maliciously crafted message can cause a StackOverflow
     error and lead to a program crash (closes: #1082381).

python-importlib-metadata (8.7.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/control: Move package description to source package section.

pytroll-schedule (0.7.2-4) unstable; urgency=medium
 .
   [ Bas Couwenberg ]
   * Add upstream patch to fix random FTBFS.
     (closes: #1104349)
   * Update lintian overrides.

qatengine (1.9.0-1) unstable; urgency=medium
 .
   * Sync with upstream release 1.9.0

r-cran-plotly (4.10.4+dfsg-3) unstable; urgency=medium
 .
   * Team upload.
   * Don't test-depend on r-cran-dendextend. (Closes: #1104338)

r-cran-readstata13 (0.11.0-1) unstable; urgency=medium
 .
   * New upstream release
 .
   * debian/control: Set Build-Depends: to current R version
   * debian/control: Set Standards-Version: to current version
   * debian/control: Switch to virtual debhelper-compat (= 13)

r-cran-sf (1.0-19+dfsg-2) unstable; urgency=medium
 .
   * Team upload.
   * Tests: ignore autopkgtest on 32 bit systems (see #1104160).

r-cran-svglite (2.1.3-2) unstable; urgency=medium
 .
   * Team upload.
   * Explicitly depend on R >= 4.5. (Closes: #1103369)

r-cran-timechange (0.3.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Explicitly depend on R >= 4.5. (Closes: #1103118)

r-cran-units (0.8-7+dfsg-2) unstable; urgency=medium
 .
   * Team upload.
   * Warn that this may be buggy on 32-bit systems
     and skip autopkgtest. (Closes: #1102591)
r-cran-units (0.8-7+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
r-cran-units (0.8-6+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.2 (routine-update)

redmine (6.0.5+ds-1) unstable; urgency=medium
 .
   * New upstream release.
   * Remove debian/patches/run-some-tests-in-English.patch, applied upstream.
   * Add debian/po/ca.po (thanks to poc senderi <pocsenderi@protonmail.com>).

refpolicy (2:2.20250213-5) unstable; urgency=medium
 .
   * allow user_wm_t and similar domains the sys_nice capability.
   * Allow needrestart to signal all systemd --user processes
   * Make the dir type transition for var_lib_t when dpkg_script_t creates
     subdirs only apply to dirs named "ntpsec" to avoid breaking dkms postinst
   * Label /var/lib/dkms as src_t
   * Allow mozilla to talk to ntpd and systemd-logind via dbus
   * Allow systemd-logind to change ownership of dma_device_t
   * Allow policykit to get the systemd status
   * Allow sshd to create /var/lib/wtmpdb
refpolicy (2:2.20250213-4) unstable; urgency=medium
 .
   * Allow chromium_t to start and get status of user_systemd_t
   * Allow user_dbusd_t to receive chromium_t file handles and write to them
   * Allow user_t to write chromium_t fifos
   * Allow accountsd_t to search init units
   * Allow cupsd_config_t to connect to cups via stream sockets and to send dbus
     messages to unconfined_t
   * Allow power_profilesd_t to dbus message devicekit power
   * Allow unconfined_t to inherit file handles from systmd_logind_t
   * Allow gpg_agent_t to read gpg_t files (process status)
   * Allow acpid to read logind sessions files
   * Give capability kill to needrestart
   * Label /var/lib/wtmpdb as faillog_t and allow pam_domain to manage faillog
   * Allow policykit_t to get status of transient units

runit (2.2.0-3) unstable; urgency=medium
 .
   * getty-run: fix tests for busy getty device (Closes: #1103152)
   * try to improve NEWS for bookworm to trixie upgrade
   * d/copyright: update FSF address

shaderc (2025.2-1) unstable; urgency=medium
 .
   * New upstream release
   * d/copyright: update copyright year

snek (1.12-1) unstable; urgency=medium
 .
   * New upstream
 .
   * Picolibc 1.8.10 compatibility. Closes: #1104364.

statcvs (1:0.7.0.dfsg-11) unstable; urgency=medium
 .
   * Adopt package, adding myself to uploaders. (Closes: #897311)
   * Update jfreechart compatibility patch to fix FTBFS. (Closes: #1099290)
   * Fix build with default JDK (21).
   * Promote Standards-Version to 4.7.2 with no change.

streamlink (7.3.0-1) unstable; urgency=medium
 .
   * New upstream version 7.3.0

tclthread (1:2.8.11-2) unstable; urgency=medium
 .
   * Create alternatives for tclThread.h and manpages to adapt to the
     upcoming tclthread3 package.
   * Fix building source after successful build (closes: #1048528).
   * Provide the tcl8.6-thread package (eventually, the binary package will be
     renamed to tcl8.6-thread, and tcl-thread will be provided instead).
   * Bump standards version to 4.7.2.

thunderbird (1:128.10.0esr-1) unstable; urgency=medium
 .
   * [2d646cb] New upstream version 128.10.0esr
     Fixed CVE issues in upstream version 128.10 (MFSA 2025-32):
     CVE-2025-2817: Privilege escalation in Thunderbird Updater
     CVE-2025-4082: WebGL shader attribute memory corruption in Thunderbird for
                    macOS
     CVE-2025-4083: Process isolation bypass using "javascript:" URI links in
                    cross-origin frames
     CVE-2025-4084: Potential local code execution in "copy as cURL" command
     CVE-2025-4087: Unsafe attribute access during XPath parsing
     CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138,
                    Firefox ESR 128.10, and Thunderbird 128.10
     CVE-2025-4093: Memory safety bug fixed in Firefox ESR 128.10 and
                    Thunderbird 128.10

ufo-core (0.17.0.20.gd3d8998-1) unstable; urgency=medium
 .
   [ Serge Cohen ]
   * New upstream version 0.17.0.20.gd3d8998
   * Corrected the library so version number
ufo-core (0.17.0.19.gdcddfe8-1) unstable; urgency=medium
 .
   [ Serge Cohen ]
   * New upstream version 0.17.0.19.gdcddfe8
   * Added autopkgtest tests.

uncommons-watchmaker (0.7.1-4) unstable; urgency=medium
 .
   * Add myself to uploaders.
   * Fix FTBFS caused by jfreechart API changes. (Closes: #1099295)
   * Promote Standards-Version to 4.7.2 with no change.
   * Fix clean rule. (Closes: #1048607)
   * Include README.txt, CHANGELOG.txt and NOTICE.txt in documentation files.
   * Fix Format URL in debian/copyright.

yasm (1.3.0-7) unstable; urgency=medium
 .
   * QA upload.
 .
   * Added 1000-x86-dir-cpu-CVE-2023-29579.patch to solve crash bug
     (Closes: #1035951).
   * Added 1010-nasm-pp-no-env-CVE-2021-33464.patch to solve crash bug
     (Closes: #1016353).
yasm (1.3.0-6) unstable; urgency=medium
 .
   * QA upload.
 .
   * Switched d/watch to current github repository.
   * Switched homepage in d/control to https://github.com/yasm/yasm/
     while https://www.tortall.net/projects/yasm/ is dead.
   * Added 000-gcc-15.patch to fix GCC 15 build problem
     (Closes: #1098187).
   * Disabled non-working parallel build (Closes: #1103250).
   * Updated Standards-Version from 4.7.0 to 4.7.2.