closql-el (2.4.2-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream release
   * Set upstream metadata fields: Bug-Database, Repository-Browse.
   * Fix sections for package elpa-closql (lisp ⇒ editors).
   * Set upstream metadata fields: Bug-Submit, Repository.
   * Update debhelper-compat to 14
     - Also drop usage of ${misc:Depends}; no longer necessary.

dot2tex (2.12.0-3) unstable; urgency=medium
 .
   * debian/gbp.conf
     - Set pristine-tar to True.
   * debian/patches/pyparsing-3.3.3.patch
     - New patch; fix parsing of nested HTML-like labels with pyparsing
       3.3.3 (Closes: #1150384).

eln (1.5.8-2) unstable; urgency=medium
 .
   * bump to debhelper 14
   * uscan v5
eln (1.5.8-1) unstable; urgency=medium
 .
   * New upstream release
   * Remove obsolete patch
eln (1.5.6-1) unstable; urgency=medium
 .
   * New upstream release
   * bump policy
   * cherry-pick upstream patch, cosmetic bug fix
eln (1.5.4-2) unstable; urgency=medium
 .
   * Restrict arch to amd64/arm64/armhf/i386 due to dependency on
     qt6-pdf-dev, qml6-module-qtwebengine-controlsdelegates, and
     qml6-module-qtwebengine (closes: #1074219)
eln (1.5.4-1) unstable; urgency=medium
 .
   * Make dependencies on optional stuff optional with foo|dpkg trick.
   * New upstream release
   * Bump policy version
eln (1.5.2-1) unstable; urgency=medium
 .
   * New upstream release
   * Build scripts now make Qt6 Multimedia stuff optional. But, let's just
     require it anyway and let the porters worry about it.
eln (1.5.0-3) unstable; urgency=medium
 .
   * Restrict architecture to those for which qt6-webengine-dev is
     available (closes: #1040857). See also bug 1038125. This should be
     relaxed as qt6-webengine-dev is ported.
eln (1.5.0-2) unstable; urgency=medium
 .
   * Use secure URI in Homepage field.
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
     Repository-Browse.
eln (1.5.0-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Remove constraints unnecessary since buster:
     + Build-Depends: Drop versioned constraint on asciidoc, docbook-xml,
       docbook-xsl, libqt5svg5-dev, libqt5webkit5-dev, qtbase5-dev,
       qtmultimedia5-dev, qttools5-dev-tools, texlive-fonts-recommended,
       texlive-latex-base, texlive-latex-extra, texlive-latex-recommended and
       xsltproc.
 .
   [ Barak A. Pearlmutter ]
   * New upstream release
   * Swizzle from qt5 to qt6
   * Bump policy version
eln (1.4.6-1) unstable; urgency=medium
 .
   * New upstream release
     - debian desktop file patch has been upstreamed
   * Add magic line to build to work around blhc false positive
   * Bump policy version
eln (1.4.0-1) unstable; urgency=medium
 .
   * New upstream release
     - quilt patches upstreamed
     - install scalable icon
     - use bitmap icons derived from scalable icon
     - switch from qmake to cmake, simplify debian/rules
     - now with 📺🎥! add build dependency on qtmultimedia5-dev
   * Follow upstream rename to more unique name NotedELN
   * Merge -doc package into main package
   * Patch upstream desktop file: incorrect executable
   * Recommend git, which the notebook can use
eln (1.2.20.3-1) unstable; urgency=medium
 .
   * New upstream release
   * Bump debhelper from deprecated 9 to 13.
   * Set debhelper-compat version in Build-Depends.
   * Bump policy version
   * Trim trailing whitespace in debian/changelog
   * Break out manual into separate -doc package
   * Bypass top-level Makefile completely
     - use qmake in source subdirs directly
     - build manual using latexmk
     - generate man pages in subdir
     - install icon bitmaps
   * Use make tricks in debian/rules to allow parallelism
   * Quilt patch to correct upstream spelling error
   * git ignore build deb-ris
   * Update debian/copyright
   * Add uscan support file
   * Rename application icon file to just "eln"
   * Set upstream metadata fields
   * Add self as co-maintainer
   * Official Debian release! (closes: #987620)

fsspec (2026.9.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release:
     - CVE-2026-104851: Fix remote code execution by server-side template
       injection in ReferenceFileSystem (closes: #1149800).

golang-github-adhocore-gronx (1.20.5-1) unstable; urgency=medium
 .
   * New upstream release

golang-github-antchfx-htmlquery (1.3.7-1) unstable; urgency=medium
 .
   * New upstream release
   * Update Standards-Version to 4.7.4 in d/control (no changes needed)

golang-github-antchfx-xpath (1.3.9-1) unstable; urgency=medium
 .
   * New upstream release

golang-github-cenkalti-backoff-v7 (7.0.1-1) unstable; urgency=medium
 .
   * New upstream release

golang-github-cenkalti-rpc2 (1.0.6-1) unstable; urgency=medium
 .
   * New upstream release
   * Update Standards-Version to 4.7.4 in d/control, drop Priority field
   * Update years in d/copyright

golang-golang-x-arch (0.32.0-1) unstable; urgency=medium
 .
   * Team upload

golang-golang-x-image (0.47.0-1) unstable; urgency=medium
 .
   * Team upload

golang-golang-x-time (0.16.0-1) unstable; urgency=medium
 .
   * Team upload
   * Use compat 14
   * Fix Salsa CI

hsmwiz (0.0.2-3) unstable; urgency=medium
 .
   * Team upload.
   * Update standards version to 4.6.1, no changes needed.
   * Downgrade libengine-pkcs11-openssl to Suggests.
   * Objectify Description.

jdupes (1.31.2+really1.31.1-1) unstable; urgency=medium
 .
   * New upstream version 1.31.2+really1.31.1.
       - Using +really to revert to upstream version 1.31.1, as 1.31.2 fails
         to build on 32-bit systems.
       - Closes: #1150422
   * debian/patches/:
       - 005_fix-gcc-hardening.patch: created to add GCC hardening to
         ljc_vercheck.
       - 010_fix-hashdb.patch: created to fix a conditional logic error that
         disabled the hash database feature, resulting in a significant
         performance regression for large, unchanging datasets. Thanks to Jody
         Bruchon <jody@jodybruchon.com> (upstream). (See: #1148491)
jdupes (1.31.2-1) unstable; urgency=medium
 .
   * New upstream version 1.31.2. (Closes: #1148491)
   * debian/control:
       - Bumped compat level to 14.
       - Bumped Standards-Version to 4.7.4.
       - Removed no longer needed "Priority: optional" field.
   * debian/copyright: updated upstream and packaging copyright years.
   * debian/patches/010_add-gcc-hardening.patch: removed because the upstream
     fixed the source code. Thanks!
   * debian/rules: set the DESTDIR variable on install target.
   * debian/watch: migrated to version 5.

lambda-align2 (2.0.1-5) unstable; urgency=medium
 .
   * d/watch: Fix version=5 tag pattern to match upstream's lambda-prefixed
     tags.

mastodon-el (2.1.7-1) unstable; urgency=medium
 .
   * New upstream release
   * Re-enable tests with better data handling

node-benrbray-prosemirror-math (1.0.0-3) unstable; urgency=medium
 .
   * Bump version to do source only upload.
node-benrbray-prosemirror-math (1.0.0-2) unstable; urgency=medium
 .
   * Use the npm registry in debian/watch: upstream never tagged the
     1.0.0 release, so the repository tags only offered the stale 0.2.2.
   * Test the public API in debian/tests/pkg-js/test instead of checking
     that the build products exist.
node-benrbray-prosemirror-math (1.0.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1148548)
   * The upstream repository has no v1.0.0 tag (the newest tags are v1.0.0-rc.3
     and v0.2.2); the version exists on the npm registry only, so the orig
     tarball is repacked from the upstream tree at npm's gitHead commit
     (debian/README.source has the recipe).
   * Depend on node-babel7-runtime.  libjs-katex's ES module entry
     (/usr/share/javascript/katex/katex.mjs) starts with an import of
     @babel/runtime/helpers/defineProperty that node-katex does not declare in
     its Depends, and this package imports katex as an ES module, so without it
     both "require" and "import" of the installed module fail.  (See #1148806.)

node-co-mocha (1.2.2+ds-1) unstable; urgency=medium
 .
   * Generate the orig tarball from the upstream tag and drop the
     prebuilt browserify bundle from it; the package now builds the
     bundle from lib/co-mocha.js.
   * Test the public API instead of checking that the build products
     exist.
   * Add a copyright paragraph for the Debian packaging.

node-csso (5.0.5-3) unstable; urgency=medium
 .
   * Source-only upload; the arch all binary shipped in the previous
     upload was built here, which keeps the package out of testing.
   * Run the upstream mocha suite in the autopkgtest instead of checking
     that the build products exist.
   * End the directories with a slash in debian/clean, so that dh_clean
     does not fail when they are present.
   * Do not put a URL in the Origin field of the patch header.
node-csso (5.0.5-2) unstable; urgency=medium
 .
   * Fix the copyright file: the third-party files vendored under .gh-pages/libs/
     were not covered correctly (cssbeautify.js has different copyright holders,
     diff.js is BSD-3-clause rather than Expat).
node-csso (5.0.5-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1148875)

node-proxy-agents (0~2025070717+~cs16.2.9-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 0~2025070717+~cs16.2.9: basic-ftp 6.2.2
     (Closes: #1149908, CVE-2026-102990)
   * Run basic-ftp unit tests in autopkgtest

node-react-autosuggest (10.1.0+~cs3.1.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1149517, #1149195, #1149196)

node-react-select (3.2.0+~cs3.0.0-1) unstable; urgency=medium
 .
   * Build the dist/ files from the upstream sources with rollup and Babel 8,
     and bundle react-input-autosize as the autosize component.
   * Closes: #1149200, #1149201

node-react-virtualized (9.22.6-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1149194)
   * Build the dist/ files from the upstream sources with Babel 8 and rollup,
     instead of shipping the prebuilt ones from the npm tarball.

node-svgo (3.3.5+ds-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version (Closes: #1149715, CVE-2026-29074 CVE-2026-73650
     CVE-2026-84369 CVE-2026-84370)
   * Add dependency to node-sax
node-svgo (3.3.2+ds-1) unstable; urgency=medium
 .
   * Initial release (Closes: #887376)
   * Repack the upstream tarball (+ds) to exclude the Yarn package manager
     that upstream vendors in its repository for its own development
     (.yarn/releases, .yarn/plugins)

node-vscode-html-languageservice (5.2.0+ds-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1149504).
   * Drop the vendored js-beautify bundles from the orig tarball and
     generate them at build time from node-js-beautify.
   * Describe thirdpartynotices.txt as the notice compilation it is, licensed
     under Expat, instead of claiming the W3C document licence for it.
   * Add an autopkgtest that exercises the shipped module.
   * Generate the orig tarball with uscan, which debian/watch describes.

ntfs-3g (1:2026.9.28-2) unstable; urgency=medium
 .
   * Upload to Sid.
ntfs-3g (1:2026.9.28-1) experimental; urgency=medium
 .
   * New upstream release.
ntfs-3g (1:2026.9.18-1) experimental; urgency=high
 .
   * New upstream release:
     - fixes heap out of bounds read/write in ntfs_ie_add_vcn(),
     - fixes heap data corruption in ntfs_mapping_pairs_decompress_i(),
     - fixes heap buffer overflow in ntfs_external_attr_find(),
     - fixes heap buffer overflow in ntfs_ea_check_wsldev(),
     - fixes heap buffer overflow in ntfs_check_restart_area(),
     - fixes denial-of-service in ntfs_inode_attach_all_extents(),
     - fixes heap buffer overflow in ntfs_same_sid(),
     - fixes heap buffer overflow in ntfs_acl_owner().
   * Library transition from libntfs-3g90 to libntfs-3g91 .

orthanc-wsi (4.0+dfsg-2) unstable; urgency=medium
 .
   * Recommend libopenslide1 instead of libopenslide0. Closes: #1150379

python-click (8.3.3-3) unstable; urgency=medium
 .
   * Team upload.
   * Build-depends on python3-flit instead of the whole 'flit' toolbox
   * Add debian/salsa-ci.yml
   * Rewrite d/watch in v5 format
   * Real "debhelper-compat = 14" is now available, use it

python-shapely (2.2.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Move from experimental to unstable.
python-shapely (2.2.0~rc1-1~exp1) experimental; urgency=medium
 .
   * New upstream release candidate.
   * Drop geos-3.15.patch, fixed upstream. Refresh remaining patch.
   * Replace setuptools with meson-python.
   * Add pkgconf to build dependencies.
   * Drop FAQ.rst from docs, removed upstream.
   * Update copyright file.
   * Update lintian overrides.