adios2 (2.12.1+dfsg1-3) unstable; urgency=medium
 .
   [ Maximiliano Curia ]
   * Set HDF5_PREFER_PARALLEL for the parallel build. Closes: #1147536.
   * Set the HDF5_ROOT:PATH explicitly

asf-search (14.0.0-1) unstable; urgency=medium
 .
   * New upstream release.

crack (5.0a+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 5.0a+dfsg
   * Fix license issue regarding src/libdes/rpc_des.h (Closes: #1147407)
     - d/copyright: Exclude src/libdes/rpc_des.h for having the non-free
       Sun RPC license.
     - d/watch: Extended to support repacking
     - d/missing-sources/: Add rpc_des.h from glibc-2.44
     - d/p/fix-spelling.patch: Remove hunk patching src/libdes/rpc_des.h
     - d/rules: Provide glib's rpc_des.h for the auto-build step
     - d/copyright: Add stanza and license for glibc's rpc_des.h
   * d/copright: Bump packaging copyright years
   * d/control: Update debhelper-compat to 14.  Consequently, drop all
     ${*:Depends} substvar mentionings.
   * d/crack.lintian-overrides: Dropped for not being needed anymore
   * d/p/*: Add mkgecosd-shebang.patch to deal with bashisms

decopy (0.3.4-1) unstable; urgency=medium
 .
   * New release 0.3.4
 .
   [ Sebastien Bacher ]
   * Don't recommends python3-zipfile-zstd
 .
   [ Maximiliano Curia ]
   * Detect abbreviated license statements (ASL 2.0, GPLv3) (Closes: #1147953)
   * Fall back to the generic parser on unlexable python (Closes: #855836)
   * Skip the license files in the generated output (Closes: #962309)
   * Add extra test to check unreferenced License blocks
   * Don't list the files excluded with -X (Closes: #997814)
   * Compile the -X pattern as an ordinary regex, not a verbose one
   * Warn when the -X pattern matches no files
   * Skip the always-excluded debian files in the generated output
   * Document that -X drops the excluded files from the output
   * Detect the CC-hosted GNU licence deeds
   * Detect the gnu.org and fsf.org licence pages
   * Detect the retired public-domain CC deeds
   * Detect the Art Libre licence URL
   * Accept "under the terms of" in licence statements
   * Detect the spaced CC BY-SA spelling
   * Add the metadata holder helper
   * Read the RDF metadata block of SVG files
   * Use the SVG metadata when no holder is found
   * Do not read the image Copyright tag as a holder
   * Read the author fields of image metadata (Closes: #1022330)
   * Document the image metadata support
   * Do not crash on changed paths pruned from the tree
   * Make -X repeatable
decopy (0.3.3-1) unstable; urgency=medium
 .
   * New release 0.3.3
   * Use zstd support from the stdlib with python >= 3.14

dh-octave (1.18.0) unstable; urgency=medium
 .
   * Replace dh_octave_substvar by dh_octave_substvars.
     This is consistent with the term "substvars", which is used
     extensively in debhelper.
     For now, the old dh_octave_substvar script is still available. It
     emits a deprecation warning and invokes the new script,
     dh_octave_substvars. The man page for dh_octave_substvar is a symbolic
     link to the man page for dh_octave_substvars, which also contains a
     deprecation warning.

eodag (4.9.0+ds-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/patches:
     - Refresh all patches.

flint (3.6.0-3) unstable; urgency=medium
 .
   * debian/control
     - Add libjs-mathjax to Depends for libflint-doc.
   * debian/libflint-doc.links
     - New file; add symlink to system mathjax package.
   * debian/patches/local-mathjax.patch
     - Update mathjax path to use new symlinked version so that it will work
       either when viewed via file:// or https://.
     - Also add config=TeX-AMS_SVG so that math actually renders
       (Closes: #1147762).

fscrypt (0.3.7-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 0.3.7
   * d/control: bump Standards-Version to 4.7.4
   * d/watch: convert watchfile to version 5

gcab (1.6-4) unstable; urgency=medium
 .
   * Only strip execute permissions on arch-dependent builds.
gcab (1.6-3) unstable; urgency=medium
 .
   [ Jeremy Bícha ]
   * Remove Suggests: devhelp.
   * Remove obsolete Pre-Depends.
 .
   [ Stephen Kitt ]
   * Depend on pkgconf instead of pkg-config for tests too.
   * Strip execute permissions from test data in /usr/libexec.
   * Drop “Priority: optional” since it’s now the default.
   * Standards-Version 4.7.4, no further change needed.
   * Bump to debhelper compatibility level 14.

gcc-13 (13.5.0-1) unstable; urgency=medium
 .
   * GCC 13.5.0 release.
   * Update newlib to 4.6.0.
   * Refresh patches.
gcc-13 (13.4.0-12) unstable; urgency=medium
 .
   * GCC 13.5.0 release candidate.
   * Update to git 20260904 from the gcc-13 branch.
     - Fix PR target/120645 (Darwin), PR middle-end/127098 (AVR),
       PR tree-optimization/126601, PR tree-optimization/126564,
       PR target/126484 (MIPS), PR c++/116960, PR c++/119303,
       PR target/124629 (AArch64), PR tree-optimization/124627,
       PR tree-optimization/124130, PR tree-optimization/126464,
       PR tree-optimization/126464, PR target/126446, PR target/126446 (x86),
       PR tree-optimization/120201, PR target/125611 (x86),
       PR tree-optimization/125079, PR target/126429 (x86),
       PR tree-optimization/124151, PR target/67459 (SH), PR target/122948 (SH),
       PR target/125972 (S390), PR rtl-optimization/125173,
       PR target/125818 (AArch64), PR ipa/125699, PR tree-optimization/125774,
       PR middle-end/125621, PR tree-optimization/125025,
       PR tree-optimization/124868, PR tree-optimization/124132,
       PR ipa/123416, PR tree-optimization/120987, PR c++/126483, PR c++/126280,
       PR c++/123529, PR c++/98930, PR c++/121822, PR c++/121981, PR c++/118775,
       PR c++/116379, PR c++/125674, PR c++/124850, PR c++/65271,
       PR fortran/125866, PR fortran/126303, PR fortran/97592, PR fortran/125998,
       PR fortran/103367, PR fortran/103367, PR fortran/103367,
       PR fortran/106546, PR fortran/115260, PR preprocessor/125048,
       PR target/127024 (AVR), PR sanitizer/126307, PR libstdc++/120789,
       PR libstdc++/120789, PR libstdc++/127006, PR libstdc++/126849.
   * Fix typo for the alihash check. Closes: #1143972.

gcc-13-cross (23) unstable; urgency=medium
 .
   * Build using gcc 13.5.0-1.
   * Bump standards version.

gcc-13-cross-ports (26) unstable; urgency=medium
 .
   * Build using gcc 13.5.0-1.
   * Bump standards version.

gcc-arm-none-eabi (15:15.3.rel1-2) unstable; urgency=medium
 .
   * Build with gcc-16. (Closes: 1133483)
   * Apply upstream fix for cstdio=pure [PR127430]

generate-ninja (0.0~git20260916.3c5809c3-1) unstable; urgency=medium
 .
   * Uprev upstream.
   * Fix Multi-Arch (Closes: #1107216).
   * Mute dh single binary warning.
   * Do not run indentator, only build gn and its tests.

glyphslib (6.14.0+ds-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 6.14.0+ds
   * d/copyright: Update year, reference OFL-1.1

lexbor (3.0.1-1) unstable; urgency=medium
 .
   * [d440f0b] d/control: Change VCS to debian salsa repo.
   * [8c66d29] New upstream version 3.0.1
   * Reorder sequence of d/control VCS fields (cme)
   * Set upstream metadata fields: Security-Contact.
   * debputy lint --auto-fix (routine-update)

libconfig-inifiles-perl (3.003000-1) unstable; urgency=medium
 .
   * Team upload.
   * Import upstream version 3.003000.

mailman3 (3.3.10-6) unstable; urgency=medium
 .
   * Team Upload
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Rewrite d/watch in v5 format
   * Add debian/salsa-ci.yml
   * Drop python3-pdm build-dependency, python3-pdm-backend is enough
   * Drop obsolete python3-setuptools build-depency
   * Upgrade upstream signing key to new packet format.
   * Set upstream metadata fields: Documentation, Repository.
   * Use dh-sequence-python3 & dh-sequence-sphinxdoc

par2cmdline (1.4.0-1) unstable; urgency=medium
 .
   * New upstream version 1.4.0
   * Control: remove build-conflict with obsolete autoconf2.13.

partial-json-parser (0.2.1.1.post5-4) unstable; urgency=medium
 .
   * Team Upload
   * Drop python3-setuptools build-dep, this uses pdm.backend
   * Salsa CI: disable useless jobs
   * Rewrite d/watch in v5 format
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Add debian/upstream/metadata

pg-background (2.0.3-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 2.0.3.

postorius (1.3.13-3) unstable; urgency=medium
 .
   * Team Upload
   * Drop build-dep on python3-pdm, python3-pdm-backend is enough
   * Rewrite d/watch in v5 format
   * Bump Standards-Version to 4.7.4, drop Priority: tag

prismatic-schema-clojure (1.4.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 1.4.2
   * rename project to get-project in project adjustments
   * apply jar manifest class-path using leiningen
   * drop obsolete d/clean

pyerfa (2.0.1.5+ds-5) unstable; urgency=medium
 .
   * debian/patches:
     - Add 0003-no-pkg-resources.patch ( closes: #1147886).

pysdl2 (0.9.17+dfsg-3) unstable; urgency=medium
 .
   * Team upload
   * Patch-out usage of pkg_resources (Closes: #1147887)
   * Rewrite d/watch in v5 format
   * Use dh-sequence-python3 & dh-sequence-sphinxdoc
   * Drop "Rules-Requires-Root: no": it is the default now
   * Remove redundant Priority: optional from source stanza.
   * Update standards version to 4.7.4, no changes needed.

python-a2wsgi (1.10.10-2) unstable; urgency=medium
 .
   * Team upload.
   * Add debian/salsa-ci.yml
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Rewrite d/watch in v5 format
   * Drop python3-setuptools build-dependency

python-aiorecollect (2023.12.0-4) unstable; urgency=medium
 .
   * Team upload.
   * Drop unused python3-setuptools build-dependency

python-aioridwell (2024.1.0-4) unstable; urgency=medium
 .
   * Team upload.
   * Drop unused python3-setuptools build-dependency

python-elasticsearch (9.5.1-1) unstable; urgency=medium
 .
   * New upstream version 9.5.1

python-refleak (0.2.2-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1147586)

python-vigieclient (0.0.6) unstable; urgency=medium
 .
   * [d1928c0] Add the 'openstack vigie clean tasks' command.
   * [8861a92] Validate several compute nodes in a single request.
python-vigieclient (0.0.5) unstable; urgency=medium
 .
   * [86b8584] Add a "validate clean-up" command
python-vigieclient (0.0.3) unstable; urgency=medium
 .
   * [79b4296] Add a --wait option to "vigie validate compute".
python-vigieclient (0.0.2) unstable; urgency=medium
 .
   * [3108444] Implement "vigie task show" and error_message in tasks list.
   * [ab5ad23] Move unit tests to tests/unit and add stestr/tox scaffolding.
   * [1bcc258] Add debian/salsa-ci.yml.
   * [e9a13d1] Also display worker_host in "tasks list"
   * [1b91da5] Rename tasks -> task.
   * [c1190eb] Add --keep-enabled and --disable-after-validation options.

pytrydan (1.0.6-1) unstable; urgency=medium
 .
   * New upstream release.

pyvo (1.8-2) unstable; urgency=medium
 .
   [ Alexandre Detiste ]
   * bump Standards-Version to 4.7.3, drop Priority: tag
 .
   [ Ole Streicher ]
   * Ignore Astropy deprecation warnings (Closes: #1147765)
   * Fix pytest 9.1 compatibility
   * Push Standards-Version to 4.7.4, dh compat to 14; no changes needed
   * Remove Paul Sladen from uploaders; add myself
pyvo (1.8-1) unstable; urgency=medium
 .
   * Team upload.
   * d/watch: Version 5; followup to astropy organization
   * New upstream version 1.8
   * Rediff patches
   * Remove redundant Rules-Requires-Root: no
pyvo (1.6.2-2) unstable; urgency=medium
 .
   * Team upload
   * Add python3-pytest-astropy test dependency
pyvo (1.6.2-1) unstable; urgency=medium
 .
   * New upstream release (1.6.2)
   * deebian/clean': Add file pyvo.egg-info/SOURCES.txt, (Closes: #1085792).
    Thanks Phil Wyett <philip.wyett@kathenas.org> for the
     patch.
   * debian/copyright:
     + Add missing copyright holders: Astropy-pyvo Developers
     + Update debian/* copyright holders years
   * Bump Standards-Version to 4.7.2. No changes required.
pyvo (1.6.1-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.6.1
   * Push Standards-Version to 4.7.0. No changes needed
   * Ignore Astropy warnings for stale IERS (Closes: #1078641)
pyvo (1.5.2-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.5.2 (Closes: #1074684)
   * Use new dh-sequence-python3
pyvo (1.5.1-1) unstable; urgency=medium
 .
   * New upstream release (1.5.1). (Closes: #1066728):
     + Drop Astropy-6.0-Votable.tree.Table-was-renamed-to-TableElemen.patch.
       Changes have been applied by upstream.
   * Drop python3-pyvo.examples. Upstream has stopped distributing
     example files
   * debian/control:
     + Update homepage field.
     + Add missing build dependencencies for pyproject backend.
pyvo (1.4.2-2) unstable; urgency=medium
 .
   * Astropy 6.0: Votable.tree.Table was renamed to TableElement
pyvo (1.4.2-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.4.2
   * Drop use_system_astropy_helpers.patch: not needed anymore
   * Remove unneeded dependencies
   * Push Standards-Version to 4.6.2. No changes needed
   * Enable build and CI tests
   * Override false positive lintian error
pyvo (1.2.1-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Debian Janitor ]
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
     Repository-Browse.
 .
   [ Ole Streicher ]
   * New upstream version 1.2.1. Closes: #1004517
pyvo (1.1-1) unstable; urgency=medium
 .
   * New upstream release (1.1):
     + Refresh debian/patches.
   * debian/control: Add new line at EOF
   * Bump debhelper-compat to use (= 13)
   * debian/watch: Bump file standard version  to 4
   * Declare package Standard Version to be 4.5.1. No changes were
     required
   * debian/patches/use_system_astropy_helpers.patch: Document
     Forwarded header as not needed
pyvo (1.0-1) unstable; urgency=medium
 .
   * New upstream release (1.0):
     + Refresh debian/patches
     + Remove debian/patches/removes-python-scripts.patch. Patch is no
       longer needed
   * Bump Standards-Version to 4.4.1. No changes required
   * debian/control: Add Rules-Requires-Root field
pyvo (0.9.3-1) unstable; urgency=medium
 .
   [Ole Streicher]
   * Fix package autogenerated version, remove patches:
     - 00-create-auto-generated-version-file.patch and
     - removes-version-generator.patch
 .
   [Josue Ortega]
   * New upstream release (0.9.3):
     - Refresh debian/patches
   * Add salsa-ci configuration file
   * Update package to use debhelper-compat (= 12)
   * debian/control: Add python3-mimeparse as package dependency
   * Bump Standards-Version to 4.4.0, no changes required
pyvo (0.9.2-2) unstable; urgency=medium
 .
   * Remove python-astropy-helpers. (Closes: #919349)
   * Add patch to include version file generated at build time, otherwise
     package import does not work.
pyvo (0.9.2-1) unstable; urgency=medium
 .
   * New upstream release (0.9.2):
     - Remove debian/patches/00-fix-async-compat-python37.patch since it has been
       applied by upstream.
   * Remove Python 2 package (Closes: #916523).
   * Bump Standards Version to 4.3.0, no changes were required.
pyvo (0.8.1-1) unstable; urgency=medium
 .
   * New upstream release (0.8.1).
   * Removes +dfsg version, new version does not longer needs it.
   * debian/changelog: Bumps Standards-Version to 4.1.5, no changes required.
   * Add patch to fix compatibility with Python 3.7.
pyvo (0.6.1+dfsg-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Build-depend on python3-requests (Closes: #891740)
   * Disable build time tests
pyvo (0.6.1+dfsg-1) unstable; urgency=medium
 .
   * Upload to unstable.
   * New upstream release (0.6.1):
     - Updates debian/patches.
   * Bumps compat level to 11.
   * Bumps Standards-Version to 4.1.3, changes copyright format URI to its secure
     form.
   * Updates Vcs Fields to salsa.debian.org.
   * Adds installation of example files.
pyvo (0.5.0.1+dfsg-1) experimental; urgency=medium
 .
   * New upstream release (0.5.0.1):
     - Fix build error
     - Fix debian/tests for Python3 changes
pyvo (0.5.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream release (0.5.0):
     - Updates debian/patches/removes-python-scripts.patch.
   * debian/watch: Adds dversionmangle.
pyvo (0.4.1+dfsg-1) unstable; urgency=low
 .
   * New upstream release (0.4.1)
   * debian/watch: use github tags upstream tarball source
   * Minimum tests that just try and load the pyvo library
   * Manually reimport changes in ../pyvo_0.3.1+dfsg.orig.tar.gz not in-tree
   * debian/patches/removes-python-scripts.patch: Fix fuzz + minimise diff
   * Fix debian/repack by explicitly naming/pre-expanding @nonfree_files
   * Remove nonfree test inputs under: 'pyvo/{dal,registry}/tests/data/*.xml'
   * Split minimum to Build-Depends-Indep: to allow auto-building; Uploaders
pyvo (0.0beta2~git20160808.c52cf43+dfsg-1) unstable; urgency=low
 .
   * Initial release. Closes: #832389

rust-actix-codec (0.5.4+ds-1) unstable; urgency=medium
 .
   * Team upload.
   * Package actix-codec 0.5.4 from crates.io using debcargo 2.8.4

rust-actix-http (3.13.5-1) unstable; urgency=medium
 .
   * Team upload.
   * Package actix-http 3.13.5 from crates.io using debcargo 2.8.4

rust-asyncband (0.7.2-1) unstable; urgency=medium
 .
   * Package asyncband 0.7.2 from crates.io using debcargo 2.8.4

rust-epoxy (0.1.0-1) unstable; urgency=medium
 .
   * Package epoxy 0.1.0 from crates.io using debcargo 2.8.4
     (Closes: #1145302)
   * Drop the unused shared_library dependency (removed from the Rust
     archive) and bump the gl_generator build-dep from 0.9 (unbuildable,
     its own dep on a yanked xml-rs release) to 0.14.
   * Make the gl_generator unstable_generator_utils feature unconditional
     (upstream only requested it via epoxy's own default feature; the
     debug_marker-only autopkgtest variant failed to compile without it).
   * Shorten debcargo.toml's summary: with the " - Rust source code" suffix
     debcargo appends, the original pushed the synopsis past lintian's
     80-column limit (synopsis-too-long).

rust-err-report (0.1.2-1) unstable; urgency=medium
 .
   * Package err-report 0.1.2 from crates.io using debcargo 2.8.4

rust-indexmap (2.14.2-1) unstable; urgency=medium
 .
   * Team upload.
   * Package indexmap 2.14.2 from crates.io using debcargo 2.8.4

rust-ordermap (1.2.2-1) unstable; urgency=medium
 .
   * Team upload.
   * Package ordermap 1.2.2 from crates.io using debcargo 2.8.4

rust-piper (0.2.5-1) unstable; urgency=medium
 .
   * Package piper 0.2.5 from crates.io using debcargo 2.8.4
     (Closes: #1145310)
   * Drop the criterion-based benchmark (criterion not in Debian).
   * debcargo.toml: remove_features = ["portable-atomic"], since Debian's
     atomic-waker only ships the +default variant, making the collapsed
     package's Depends on +portable-atomic unsatisfiable.
   * Mark the futures-io-only feature variant's test suite broken:
     tests/pipe.rs is ungated and needs the "std" feature's AsyncRead/
     AsyncWrite impls, which "futures-io" alone does not provide.
   * Shorten debcargo.toml's summary and drop its leading "An": fixes
     synopsis-too-long (debcargo's appended " - Rust source code" suffix
     pushed it past 80 columns) and description-synopsis-starts-with-article.

rust-tinyjson (2.5.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Package tinyjson 2.5.1 from crates.io using debcargo 2.8.3

rust-tls-codec (0.5.0-1) unstable; urgency=medium
 .
   * Package tls_codec 0.5.0 from crates.io using debcargo 2.8.3
rust-tls-codec (0.4.2-1) unstable; urgency=medium
 .
   * Package tls_codec 0.4.2 from crates.io using debcargo 2.8.2

rust-tls-codec-derive (0.5.0-1) unstable; urgency=medium
 .
   * Package tls_codec_derive 0.5.0 from crates.io using debcargo 2.8.3
   * Fix autopkgtests (Closes: #1132275)
rust-tls-codec-derive (0.4.2-1) unstable; urgency=medium
 .
   * Package tls_codec_derive 0.4.2 from crates.io using debcargo 2.8.2

rust-uuid (1.26.1-1) unstable; urgency=medium
 .
   * Team upload.
   * Package uuid 1.26.1 from crates.io using debcargo 2.8.4
   * Use filter_targets for wasm; keep debian/control overlay for the +features split.
   * Fix missing comma in librust-uuid-dev Depends; correct 1.26.1
     Provides; merge rustc Breaks and js Provides from the hint.
   * Drop unpackaged gungraun bench dependency.

rust-wbmp (0.1.2-1) unstable; urgency=medium
 .
   * Package wbmp 0.1.2 from crates.io using debcargo 2.8.4

rust-webauthn-attestation-ca (0.5.5-1) unstable; urgency=medium
 .
   * Package webauthn-attestation-ca 0.5.5 from crates.io using debcargo 2.8.4
   * d/copyright: add new upstream copyright owner, self to debian
   * Add DEP-3 header to patch

rust-webauthn-rs-proto (0.5.5-1) unstable; urgency=medium
 .
   * Package webauthn-rs-proto 0.5.5 from crates.io using debcargo 2.8.4
   * d/control: instead of using it to remove unused deps, use d/debcargo.toml
     then add patch to then remove unused dependencies
   * d/p/relax-dep patch: add header, further relax deps
   * Add self as uploader
rust-webauthn-rs-proto (0.5.2-1) experimental; urgency=medium
 .
   * Package webauthn-rs-proto 0.5.2 from crates.io using debcargo 2.7.10
   * Relax dependency on base64 to more recent version 0.22.x
   * Add control file to depend on librust-web-sys-dev without specifying explicit features

sen (0.8.1-2) unstable; urgency=medium
 .
   * Team upload.
   * debian/patches/urwid-4-test-import.patch: Import SimpleListWalker
     from the urwid top-level namespace instead of the urwid.listbox
     alias that urwid 4.0 removed. Fixes FTBFS and autopkgtest failure
     with python3-urwid 4.1.3. (Closes: #1148037)
   * debian/control: Bump debhelper compat to v14.
   * debian/watch: Update to version 5.
   * debian/control: Bump Standards-Version to 4.7.4. Drop the Priority
     and Rules-Requires-Root fields, both are the default now.

squid (7.7-1) unstable; urgency=high
 .
   [ Amos Jeffries <amosjeffries@squid-cache.org> ]
   * New Upstream Release 7.7
     - Fixes: CVE-2026-61642, SQUID-2026:6
     - Fixes: SQUID-2026:7
     - Fixes: SQUID-2026:8
     - Fixes: CVE-2026-62846 , SQUID-2026:9
 .
   * debian/control
     - bump to debhelper-compat v14
     - restrict libcppunit dependency for nocheck builds
     - remove relationship substvars now handled by dh_gencontrol
 .
   * debian/{rules,squid-common.docs}
     - use .docs instead of rules variable to install documentation

storm (1.3-1) unstable; urgency=medium
 .
   * New upstream release:
     - Add support for Python 3.15 (closes: #1147456).

ugrep (7.8.4+dfsg-1) unstable; urgency=medium
 .
   * Uprev to latest version.

unbound (1.26.1-1) unstable; urgency=medium
 .
   * new upstream security/bugfx release, including the following fixes:
    - CVE-2026-81642 - severity: CRITICAL
      Heap buffer overflow and possible Remote Code Execution
      when digesting DNSKEY
    - CVE-2026-81634 - severity: HIGH
      Possible heap buffer overflow during DNSSEC canonicalization
    - CVE-2026-82717 - severity: HIGH
      CNAME synthesis could lead to heap corruption
    - CVE-2026-77955 - severity: MEDIUM
      Possible ZONEMD verification bypass window
    - CVE-2026-78227 - severity: MEDIUM
      Use-after-free in DoQ stream output buffer on reset re-transmission
    - CVE-2026-80225 - severity: MEDIUM
      Possible degradation of service from continuous queries
      on the same TCP/DoT connection
    - CVE-2026-82720 - severity: MEDIUM
      Use-after-free in DoH stream cleanup code path
    - CVE-2026-85501 - severity: MEDIUM
      Retrap: Novel Vulnerabilities to launch
      Algorithmic Complexity Attacks on DNSSEC
    - CVE-2026-77860 - severity: LOW
      'serve-expired' can bypass Unbound 'wait-limit'

unibilium (2.1.4-1) unstable; urgency=medium
 .
   * New upstream release
   * Remove backported patches
   * debian/rules:
     - Switch to dh's autoconf buildsystem
     - Remove custom generation of configure script
     - Remove dh_auto_install override
   * Add unibi_terminfo to symbols file
   * Remove libtool Build-Depends