gdnsd (3.8.3-2.2) unstable; urgency=medium . * Non-maintainer upload. * d/t/control: Depend on procps for pidof in autopkgtests (Closes: #1136506) generator-scripting-language (4.1.5-6) unstable; urgency=medium . * Drop CMP0026 from CMake to fix build with CMake 4.0 (Closes: #1125643) generator-scripting-language (4.1.5-5) unstable; urgency=medium . [ Luca Boccassi ] * d/rules: add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with CMake 4 (Closes: #1112945) * Build depend on libcrypt-dev (Closes: #1106982) * d/control: bump Standards-Version to 4.7.2, no changes * d/copyright: fix path to sflstr.c * d/patches: fix some metadata . [ Nilesh Patra ] * d/rules: fix cross compilation (Closes: #1110323) generator-scripting-language (4.1.5-4) unstable; urgency=medium . * Merge pull request #1 from debian-janitor/lintian-fixes * Backport patch to fix Loongarch64 build (Closes: #1051448) * Set Rules-Requires-Root: no * Bump debhelper-compat to 13 * Bump Standards-version to 4.7.0 * Vendor pcre3 * debian/pcre3: remove unneeded files * Build using the vendored static libpcre.a (Closes: #1000118) generator-scripting-language (4.1.5-3) unstable; urgency=medium . * Add fix-ia64.patch and fix-riscv64.patch to fix FTBS on ia64 and riscv64. * Bump Standards-Version to 4.1.4, no changes. * Remove --parallel from dh, as it is enabled by default. generator-scripting-language (4.1.5-2) unstable; urgency=medium . * Add copyright notice for sflstr.c and MIT license. (Closes: #878932) * Add fix-sparc64.patch to fix FTBS on Sparc 64. (Closes: #879023) * Add fix-mips64el.patch to fix FTBS on mips64el. * Bump Standards-Version to 4.1.1, no changes. generator-scripting-language (4.1.5-1) unstable; urgency=low . * Initial packaging. (Closes: #874426) guzzle (8.3.1-3) unstable; urgency=medium . * Enable tests guzzle (8.3.1-2) unstable; urgency=medium . * Upload to unstable guzzle (8.3.1-1) experimental; urgency=medium . [ Graham Campbell ] * Drop expired cookies instead of storing them (#3987) * Replace same-value cookies whose expiry or flags change (#3990) * Keep the stored expiry when rebuilding Max-Age cookies (#3991) * Release 8.3.1 . [ David Prévot ] * Rename debian/$package.$files guzzle (8.3.0-1) experimental; urgency=medium . [ Graham Campbell ] * Avoid PHP 8.6 notices for oversized numeric host parts (#3941) * Sleep in slices while waiting for long delayed transfers (#3943) * Keep stream handler deadlines local to each request (#3944) * Read stream handler response headers from the opened stream (#3945) * Decode stream handler gzip and deflate bodies as they arrive (#3967) * Decode chunked stream handler response bodies as they arrive (#3969) * End stream handler response bodies at their declared Content-Length (#3970) * Classify cURL errors 8 and 23 with a response as ResponseTransferException (#3971) * Raise minimum psr7 version to 3.2 (#3980) * Replace the deprecated promises Is with State (#3975) * Decode stream handler gzip and deflate bodies like libcurl (#3972) * Release 8.3.0 guzzle (8.2.0-1) experimental; urgency=medium . [ Graham Campbell ] * Allow connection caps with persistent sharing on libcurl 8.22+ (#3866) * Release 8.2.0 (#3932) guzzle (8.1.0-1) experimental; urgency=medium . [ Graham Campbell ] * Match no_proxy rules against numeric IPv4 shorthand hosts (#3913) * Report stream open failures against the caller's request (#3914) * Harden cURL handler bookkeeping against native handle ID reuse (#3919) * Invoke the static TLS range assertion without an object for PHP 8.6 (#3926) * Treat a deferred resolved with a pending retry promise as wait progress * Add PHP 8.6 to the supported versions and version guidance (#3927) . [ David Prévot ] * Use debhelper-compat 14 guzzle (8.0.2-1) experimental; urgency=medium . [ Graham Campbell ] * Reject waits on transfers the cURL multi handler stopped tracking (#3912) * Fold numeric IPv4 hosts in the stream handler (#3910) * Scope cURL option capture clears to the owning handle (#3915) * Settle cURL multi transfers displaced by native handle ID reuse (#3918) * Adjust the guzzlehttp/promises version constraint to ^3.0.1 (#3921) * Release 8.0.2 . [ David Prévot ] * Document CVE in previous changelog entry * Add lintian-overrides guzzle (8.0.1-1) experimental; urgency=medium . [ Graham Campbell ] * Security fixes 8.0 (#3908) + Reject request URI hosts and `Host` header values that are not printable ASCII (GHSA-v5mv-p594-2x33) + Reject URI hosts with a percent escape or that are not valid RFC 3986 hosts (GHSA-v5mv-p594-2x33) + Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33) + Treat percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r) + Regenerate a derived `Host` header after client URI rewrites (GHSA-v5mv-p594-2x33) libhtml-parser-perl (3.86-1) unstable; urgency=medium . * Team upload. * Import upstream version 3.86. From 3.84: - Fix heap-use-after-free in _decode_entities (CVE-2026-8829) * Drop Fix-heap-use-after-free-in-_decode_entities-CVE-2026.patch which was taken from upstream Git and is now included. * Refresh debian_examples_location.patch (offset). * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. * Convert debian/watch to version 5. passenger (6.2.1+ds-1) unstable; urgency=medium . * Team upload. * New upstream release. pendulum (3.2.0-4) unstable; urgency=medium . * Team upload. * Add upstream pr patch: dateutil-3-test-fixture.patch php-guzzlehttp-promises (3.1.0-2) unstable; urgency=medium . * Upload to unstable php-guzzlehttp-promises (3.1.0-1) experimental; urgency=medium . [ Graham Campbell ] * Deprecate Is in favor of State (#248) * Release 3.1.0 . [ David Prévot ] * (Build-)Depend on php-symfony-deprecation-contracts php-guzzlehttp-promises (3.0.2-1) experimental; urgency=medium . [ Graham Campbell ] * Release 3.0.2 . [ David Prévot ] * Use debhelper-compat 14 php-guzzlehttp-promises (3.0.1-1) experimental; urgency=medium . [ Graham Campbell ] * Fix EachPromise abandoning its aggregate when steps run while the iterator is locked (#239) * Default the impossible settled promise generics to never (#236) * Release 3.0.1 php-guzzlehttp-promises (3.0.0-1) experimental; urgency=medium . * Upload new major upstream release to experimental . [ Graham Campbell ] * Dropped support for PHP 7.2 and 7.3 (#189) * Return actual inspect rejection reasons (#190) * Improve PHPUnit forward compatibility (#194) * Add generic promise annotations (#196) * Improve rejected promise generic inference (#198) * Require iterable collections (#201) * Allow resolving promises without a value (#204) * Add collection concurrency config (#205) * Add recursive settle support (#206) * Clarify Promises 3 upgrade guide (#209) * Make static helper classes non-instantiable (#211) * Type promise utility callback (#214) * Reject native PHP serialization of runtime promises (#221) * Skip recursive passes over consumed generator inputs (#224) * Release 3.0.0 . [ David Prévot ] * Install new upstream documentation * Drop php-symfony-deprecation-contracts (build-)dependency php-guzzlehttp-psr7 (3.2.0-2) unstable; urgency=medium . * Upload to unstable php-guzzlehttp-psr7 (3.2.0-1) experimental; urgency=medium . [ Graham Campbell ] * Report successful flushes from the stream wrapper (#890) * Fix CachingStream skipping unread bytes after repeated writes (#892) * Release 3.1.1 * Report InflateStream source read failures that follow decoded bytes (#898) * Keep AppendStream bytes read before a timeout (#899) * Release 3.2.0 . [ David Prévot ] * Document CVE in previous changelog entry php-guzzlehttp-psr7 (3.1.0-1) experimental; urgency=medium . [ Graham Campbell ] * Prefix relative paths that begin with a colon segment instead of throwing * Keep a colon-leading first path segment when reading scheme-less non-native URIs (#880) * Prefix stranded file host paths with /. instead of throwing (#881) * Release 3.1.0 . [ David Prévot ] * Use debhelper-compat 14 php-guzzlehttp-psr7 (3.0.0-1) experimental; urgency=medium . * Upload new major upstream release to experimental . [ Graham Campbell ] * Dropped support for PHP 7.2 and 7.3 (#668) * Remove deprecated Header normalize method (#784) * Release 3.0.0 . [ David Prévot ] * Update package (build-)dependencies * Install new upstream documentation * Handle internet tests * Skip tests currently failing in Debian environment php-guzzlehttp-test-server (1.1.0-2) unstable; urgency=medium . * Upload to unstable * Use related path for Guzzle components php-guzzlehttp-test-server (1.1.0-1) experimental; urgency=medium . * Initial release (php-guzzlehttp-guzzle test dependency) php-psr-http-message (2.0-2) unstable; urgency=medium . [ David Prévot ] * Upload to unstable * Update standards version to 4.7.4 * Update watch file format version to 5 * Use GitHub template in watch file instead of explicit Source/Matching-Pattern * Use debhelper-compat 14 . [ William Desportes ] * Remove now default Priority: optional * Remove now default Rules-Requires-Root: no php-psr-http-message (2.0-1) experimental; urgency=medium . [ Stilch ] * Add return typehints * Changed the requirements for the PHP version and removed declare strict types . [ Aleksandr Golouz ] * Added string as return types for __toString * Added void as return types . [ David Prévot ] * Revert "Track version 1 for now (bookworm?)" python-pbs-installer (2026.10.26-1) unstable; urgency=medium . * New upstream release. * debian/control: Recommend httpx2 in place of httpx, following upstream. * debian/control: Drop the unused python3-zstandard recommendation; supported Python versions provide Zstandard in the standard library. * debian/control: Require Python >= 3.10 and move the package description to the source stanza. ruby-typhoeus (1.7.1-1) unstable; urgency=medium . * Team upload. * New upstream release. * Bump debhelper-compat to 14, dropping ${misc:Depends}, ${shlibs:Depends}, and ${ruby:Depends} from runtime dependencies. * Update Standards-Version to 4.7.4, no changes needed. * Refresh patches. * Build-depend on ruby-ethon >= 0.19.1. * Drop the ruby-faraday-typhoeus build dependency. * Refresh the copyright file. * Allow the test server to accept a custom resolve host. * Restore the request body after decoding params. rust-gperftools (0.2.0-1) unstable; urgency=medium . * Package gperftools 0.2.0 from crates.io using debcargo 2.6.1 rust-sysinfo (0.39.6-1) unstable; urgency=medium . * Team upload. * Package sysinfo 0.39.6 from crates.io using debcargo 2.8.4 uwsgi (2.0.31-7) unstable; urgency=medium . [ Alexandre Rossi ] * add fix for check_hex always hex . [ Thomas Goirand ] * With TLS and slow Transfer-Encoding: chunked mode, uwsgi was returning a 500 error. Add a patch to fix this (Closes: #1149707): - 2050_Fix_Transfer-Encoding_chunked_brokenness_over_TLS.patch. vinyl-cache (9.0.1-4.1) unstable; urgency=high . * Non-maintainer upload. * Backport the fix for the VCL .upper()/.lower() workspace overflow (CVE-2026-93894, VSV00020). (Closes: #1148187) REMOVED: datalad-next 1.5.0-2 REMOVED: trac-customfieldadmin 0.4.0+svn18456-2 REMOVED: slm 3.9.1-1 REMOVED: golang-github-renekroon-ttlcache 2.11.1+ds-2 REMOVED: golang-github-pocketbase-pocketbase 0.39.4+ds-3 REMOVED: node-svgdotjs-svg.draggable.js 3.0.6-4 REMOVED: linux-ftpd-ssl 0.17.36+really0.17-5 REMOVED: python-trame-client 3.12.3-2 REMOVED: php-slim 3.12.5-5