Change log for golang-golang-x-net package in Debian

golang-golang-x-net (1:0.25.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.25.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Mon, 20 May 2024 18:50:52 -0600

Available diffs

• diff from 1:0.21.0+dfsg-1 to 1:0.25.0+dfsg-1 (400.1 KiB)
• diff from 1:0.24.0+dfsg-1 to 1:0.25.0+dfsg-1 (5.6 KiB)

golang-golang-x-net (1:0.24.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.24.0+dfsg
  * Bump versioned dependencies as per go.mod
  * Bump Standards-Version to 4.7.0 (no change)

 -- Anthony Fok <email address hidden>  Fri, 26 Apr 2024 03:23:13 -0600

golang-golang-x-net (1:0.23.0+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.23.0+dfsg
    + CVE-2023-45288: http2: close connections when receiving too many headers

 -- Shengjing Zhu <email address hidden>  Thu, 04 Apr 2024 04:38:02 +0800

golang-golang-x-net (1:0.22.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.22.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Sun, 24 Mar 2024 18:00:05 -0600

golang-golang-x-net (1:0.21.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.21.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Fri, 23 Feb 2024 19:31:07 -0700

Available diffs

• diff from 1:0.20.0+dfsg-1 to 1:0.21.0+dfsg-1 (4.2 KiB)

golang-golang-x-net (1:0.20.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.20.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Mon, 29 Jan 2024 14:52:43 -0700

Available diffs

• diff from 1:0.17.0+dfsg-1 to 1:0.20.0+dfsg-1 (88.5 KiB)
• diff from 1:0.19.0+dfsg-1 to 1:0.20.0+dfsg-1 (19.9 KiB)

golang-golang-x-net (1:0.19.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.19.0
  * Bump versioned dependencies as per go.mod
  * Append internal/quic/cmd to DH_GOLANG_EXCLUDES
    to avoid building the new QUIC interop test runner

 -- Anthony Fok <email address hidden>  Fri, 08 Dec 2023 15:15:47 -0700

Available diffs

• diff from 1:0.17.0+dfsg-1 to 1:0.19.0+dfsg-1 (74.3 KiB)

golang-golang-x-net (1:0.17.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.17.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Wed, 01 Nov 2023 02:21:21 -0600

Available diffs

• diff from 1:0.10.0-1 to 1:0.17.0+dfsg-1 (344.0 KiB)
• diff from 1:0.15.0-2 to 1:0.17.0+dfsg-1 (62.6 KiB)

golang-golang-x-net (1:0.15.0-2) unstable; urgency=medium

  * Bump build-dependency publicsuffix (>= 20230804.1533)
    as golang.org/x/net v0.15.0 updated its copy of publicsuffix, especially
    "New policy for .museum, without all the SLD (Second-Level Domains)".
    (Sorry for my inadvertent and premature upload of 1:0.15.0-1!)
  * v0.13.0 fixes CVE-2023-3978: "x/net/html: text nodes outside of the
    HTML namespace improperly rendered"; see https://go.dev/issue/61615 and
    https://github.com/golang/net/commit/8ffa475fbdb33da97e8bf79cc5791ee8751fca5e
    (Closes: #1043163)

 -- Anthony Fok <email address hidden>  Thu, 12 Oct 2023 12:49:47 -0600

golang-golang-x-net (1:0.15.0-1) unstable; urgency=medium

  * New upstream version 0.15.0
  * Bump versioned dependencies as per go.mod
  * Remove 0001-quic-fix-testConn.uncheckedHandshake.patch
    which was backported from this version

 -- Anthony Fok <email address hidden>  Thu, 12 Oct 2023 01:36:09 -0600

golang-golang-x-net (1:0.14.0-1) unstable; urgency=medium

  * New upstream version 0.14.0
  * Bump versioned dependencies as per go.mod
  * Backport "quic: fix testConn.uncheckedHandshake" from v0.15.0

 -- Anthony Fok <email address hidden>  Tue, 10 Oct 2023 05:59:28 -0600

golang-golang-x-net (1:0.11.0-1) unstable; urgency=medium

  * New upstream version 0.11.0
  * Bump versioned dependencies as per go.mod, with new dependency on
    golang-golang-x-crypto-dev (>= 0.10.0), which no longer depends on
    golang-golang-x-net-dev, hence no circular dependency.

 -- Anthony Fok <email address hidden>  Thu, 21 Sep 2023 05:09:07 -0600

golang-golang-x-net (1:0.10.0-1) unstable; urgency=medium

  * New upstream version 0.10.0
  * Update versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Thu, 15 Jun 2023 15:45:13 -0600

Available diffs

• diff from 1:0.7.0+dfsg-1 to 1:0.10.0-1 (14.0 KiB)

golang-golang-x-net (1:0.7.0+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.7.0
    + CVE-2022-41723: http2/hpack: avoid quadratic complexity in hpack decoding

 -- Shengjing Zhu <email address hidden>  Wed, 15 Feb 2023 15:33:24 +0800

Available diffs

• diff from 1:0.4.0+dfsg-1 to 1:0.7.0+dfsg-1 (20.1 KiB)

golang-golang-x-net (1:0.4.0+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.4.0
  * Update Standards-Version to 4.6.2 (no changes)
  * Enable most http2 tests and fix generating publicsuffix data

 -- Shengjing Zhu <email address hidden>  Tue, 03 Jan 2023 00:04:04 +0800

Available diffs

• diff from 1:0.0+git20220728.c7608f3+dfsg-2 to 1:0.4.0+dfsg-1 (120.8 KiB)
• diff from 1:0.1.0+dfsg-1 to 1:0.4.0+dfsg-1 (110.0 KiB)

golang-golang-x-net (1:0.1.0+dfsg-1) unstable; urgency=medium

  * Team upload
  * Switch to upstream tag version in uscan
  * New upstream version 0.1.0

 -- Shengjing Zhu <email address hidden>  Wed, 26 Oct 2022 16:51:18 +0800

golang-golang-x-net (1:0.0+git20221012.0b7e1fb+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20221012.0b7e1fb+dfsg
    - publicsuffix: change node table entry size from 15 to 40 bits
      (from 0.0+git20221004.8021a29) to accommodate the increased size of
      publicsuffix list.  Thanks to Shengjing Zhu for forwarding the issue
      upstream and to Damien Neil for fixing the issue.
      See https://github.com/golang/go/issues/55849  (Closes: #1020161)
  * Add debian/source/lintian-overrides
    to override false-positive source-is-missing errors probably due to
    long lines in html/charset/testdata/*.html test files.
  * Drop unneeded dependency on ${shlibs:Depends}

 -- Anthony Fok <email address hidden>  Wed, 12 Oct 2022 11:25:10 -0600

golang-golang-x-net (1:0.0+git20220728.c7608f3+dfsg-2) unstable; urgency=medium

  * Team upload
  * Fix autopkgtest

 -- Shengjing Zhu <email address hidden>  Thu, 04 Aug 2022 10:50:49 +0800

Available diffs

• diff from 1:0.0+git20211209.491a49a+dfsg-1 to 1:0.0+git20220728.c7608f3+dfsg-2 (47.3 KiB)
• diff from 1:0.0+git20220728.c7608f3+dfsg-1 to 1:0.0+git20220728.c7608f3+dfsg-2 (582 bytes)

golang-golang-x-net (1:0.0+git20220728.c7608f3+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.0+git20220728.c7608f3+dfsg (Closes: #1016349)
  * Update Homepage to golang.org
  * Bump golang-golang-x-sys to 0.0~git20220731.a90be44
  * Remove obsoleted code.google.com from package description

 -- Shengjing Zhu <email address hidden>  Wed, 03 Aug 2022 04:06:53 +0800

Available diffs

• diff from 1:0.0+git20220624.1bab6f3+dfsg-1 to 1:0.0+git20220728.c7608f3+dfsg-1 (14.5 KiB)

golang-golang-x-net (1:0.0+git20220624.1bab6f3+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20220624.1bab6f3+dfsg

 -- Anthony Fok <email address hidden>  Tue, 28 Jun 2022 06:50:46 -0600

Available diffs

• diff from 1:0.0+git20220531.c960675+dfsg-1 to 1:0.0+git20220624.1bab6f3+dfsg-1 (3.8 KiB)

golang-golang-x-net (1:0.0+git20220531.c960675+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20220531.c960675+dfsg
  * Bump versioned dependencies as per go.mod
  * Bump Standards-Version to 4.6.1 (no change)

 -- Anthony Fok <email address hidden>  Sun, 05 Jun 2022 06:03:56 -0600

Available diffs

• diff from 1:0.0+git20220225.27dd868+dfsg-1 to 1:0.0+git20220531.c960675+dfsg-1 (21.8 KiB)

golang-golang-x-net (1:0.0+git20220225.27dd868+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20220225.27dd868+dfsg
  * Use dh-sequence-golang instead of dh-golang and --with=golang
  * Reorder fields in debian/control and debian/copyright
    as would be generated in the next dh-make-golang release after 0.6.0-1
  * Refresh debian/golang-golang-x-net-dev.lintian-overrides
    to match latest Lintian output

 -- Anthony Fok <email address hidden>  Sat, 19 Mar 2022 21:07:49 -0600

golang-golang-x-net (1:0.0+git20211209.491a49a+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.0+git20211209.491a49a+dfsg
    + CVE-2021-44716: net/http: limit growth of header canonicalization cache
  * Update Standards-Version to 4.6.0 (no changes)

 -- Shengjing Zhu <email address hidden>  Thu, 09 Dec 2021 23:39:17 +0800

Available diffs

• diff from 1:0.0+git20210805.aaa1db6+dfsg-1 to 1:0.0+git20211209.491a49a+dfsg-1 (187.8 KiB)

golang-golang-x-net (1:0.0+git20210805.aaa1db6+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20210805.aaa1db6
  * Remove CVE-2021-31525.patch and CVE-2021-33194.patch
    which have been applied prior to this upstream version
  * Update versioned dependencies as per go.mod

 -- Anthony Fok <email address hidden>  Sun, 08 Aug 2021 05:00:37 -0600

Available diffs

• diff from 1:0.0+git20210119.5f4716e+dfsg-4 to 1:0.0+git20210805.aaa1db6+dfsg-1 (152.2 KiB)

golang-golang-x-net (1:0.0+git20210119.5f4716e+dfsg-4) unstable; urgency=medium

  * Team upload.
  * Backport patch for CVE-2021-33194
    x/net/html: infinite loop in ParseFragment

 -- Shengjing Zhu <email address hidden>  Sat, 22 May 2021 22:01:02 +0800

Available diffs

• diff from 1:0.0+git20210119.5f4716e+dfsg-2 to 1:0.0+git20210119.5f4716e+dfsg-4 (3.0 KiB)
• diff from 1:0.0+git20210119.5f4716e+dfsg-3 to 1:0.0+git20210119.5f4716e+dfsg-4 (2.2 KiB)

golang-golang-x-net (1:0.0+git20210119.5f4716e+dfsg-3) unstable; urgency=medium

  * Team upload.
  * Backport patch for CVE-2021-31525
    net/http: ReadRequest can stack overflow due to recursion with very
    large headers. https://github.com/golang/go/issues/45710

 -- Shengjing Zhu <email address hidden>  Sat, 08 May 2021 12:12:17 +0800

Available diffs

• diff from 1:0.0+git20210119.5f4716e+dfsg-2 to 1:0.0+git20210119.5f4716e+dfsg-3 (1.4 KiB)

golang-golang-x-net (1:0.0+git20210119.5f4716e+dfsg-2) unstable; urgency=medium

  [ Helmut Grohne ]
  * Mark golang-golang-x-net-dev Multi-Arch: foreign. (Closes: #980993)

  [ Anthony Fok ]
  * debian/rules: Attempt to "git restore publicsuffix/table{,_test}.go"
    in execute_after_dh_auto_clean to avoid the need to manually do so
    before subsequent "gbp buildpackage" run.

 -- Anthony Fok <email address hidden>  Thu, 04 Feb 2021 16:37:28 -0700

Available diffs

• diff from 1:0.0+git20200226.491c5fc+dfsg-1 to 1:0.0+git20210119.5f4716e+dfsg-2 (324.4 KiB)
• diff from 1:0.0+git20210119.5f4716e+dfsg-1 to 1:0.0+git20210119.5f4716e+dfsg-2 (822 bytes)

golang-golang-x-net (1:0.0+git20210119.5f4716e+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20210119.5f4716e
  * debian/control: Change Section from devel to golang
  * debian/control: Bump Standards-Version to 4.5.1 (no change)

 -- Anthony Fok <email address hidden>  Tue, 02 Feb 2021 15:25:13 -0700

Available diffs

• diff from 1:0.0+git20201031.ff519b6+dfsg-1 to 1:0.0+git20210119.5f4716e+dfsg-1 (110.6 KiB)

golang-golang-x-net (1:0.0+git20201031.ff519b6+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20201031.ff519b6
  * Bump debhelper dependency to "Build-Depends: debhelper-compat (= 13)"
  * Update versioned dependencies as per go.mod
  * Remove no-upstream-changelog tag from Lintian override
    as the tag has been removed since lintian (2.5.96)
  * Refresh debian/patches/publicsuffix.patch

 -- Anthony Fok <email address hidden>  Thu, 05 Nov 2020 03:03:07 -0700

golang-golang-x-net (1:0.0+git20200226.491c5fc+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20200226.491c5fc
  * Removed unused-override "privacy-breach-google-plus"
    on html/testdata/go1.html
    See https://go-review.googlesource.com/c/net/+/162888

 -- Anthony Fok <email address hidden>  Wed, 26 Feb 2020 01:12:43 -0700

Available diffs

• diff from 1:0.0+git20210119.5f4716e+dfsg-2 to 1:0.0+git20200226.491c5fc+dfsg-1 (324.3 KiB)
• diff from 1:0.0+git20200219.4628272+dfsg-1 to 1:0.0+git20200226.491c5fc+dfsg-1 (1.9 KiB)

golang-golang-x-net (1:0.0+git20200219.4628272+dfsg-1) unstable; urgency=medium

  * New upstream version 0.0+git20200219.4628272
  * Add "Rules-Requires-Root: no" to debian/control
  * Bump Standards-Version to 4.5.0 (no change)

 -- Anthony Fok <email address hidden>  Fri, 21 Feb 2020 12:41:48 -0700

Available diffs

• diff from 1:0.0+git20191112.2180aed+dfsg-3 to 1:0.0+git20200219.4628272+dfsg-1 (114.8 KiB)

golang-golang-x-net (1:0.0+git20191112.2180aed+dfsg-3) unstable; urgency=medium

  * Team upload.
  * Corrected "tab-in-license-text" lintian warning.
  * Build with "go generate":
    + new patch to prevent build-time download and use data from
      "publicsuffix" package.
    + noted use of the "publicsuffix" package in the "Built-Using" field.
  * Build-Depends += "publicsuffix".

 -- Dmitry Smirnov <email address hidden>  Tue, 31 Dec 2019 19:34:49 +1100

Available diffs

• diff from 1:0.0+git20191112.2180aed+dfsg-2 to 1:0.0+git20191112.2180aed+dfsg-3 (2.3 KiB)

golang-golang-x-net (1:0.0+git20191112.2180aed+dfsg-2) unstable; urgency=medium

  * Rename source package to golang-golang-x-net
    from the erroneously named golang-golang-x-net-dev

 -- Anthony Fok <email address hidden>  Thu, 14 Nov 2019 04:57:08 -0700