-
devscripts (2.17.12ubuntu1.1) bionic-security; urgency=medium
* SECURITY UPDATE: Code execution through unsafe YAML loading
- CVE-2018-13043
-- <email address hidden> (Leonidas S. Barbosa) Thu, 05 Jul 2018 11:00:10 -0300
-
devscripts (2.17.12ubuntu1) bionic; urgency=medium
* test/test_debchange: Explicitly set --vendor Debian, to fix test suite
compatibility with Ubuntu.
-- Steve Langasek <email address hidden> Tue, 02 Jan 2018 21:03:46 -0800
-
devscripts (2.17.12) unstable; urgency=medium
[ Adam D. Barratt ]
* Fix typo in 2.7.11 changelog ("dpkg-bev" -> "dpkg-dev").
[ Chris Lamb ]
* debuild:
+ Print the actual arguments we make to lintian. Closes: #880124
* dget:
+ Support downloading packages through gopher://. Closes: #880649
[ Axel Beckert ]
* Add new script: ltnu (Long Time No Upload).
* Remove trailing whitespace in previous changelog entry.
[ Antoine Beaupré ]
* debchange:
+ Refactor and unify version information.
+ Add support for uploads to Debian LTS with the new --lts flag.
Closes: #762715
* bts:
+ Add list of tags to documentation. Closes: #883658
[ James McCoy ]
* grep-excuses:
+ Show when dependencies are blocking the migration. Closes: #881906
[ Antonio Terceiro ]
* uscan:
+ decode HTTP responses, to support pages that are served encoded with
gzip (`Content-Encoding: gzip`).
[ Christoph Berg ]
* debcheckout:
+ Support salsa.debian.org.
+ Set "git" as default repository type so https:// URLs use it.
[ Mattia Rizzolo ]
* debdiff-apply:
+ Avoid using Python bare exceptions, to appease flake8's E722.
* test/uscan_mangle:
+ Use a real newline instead of embedding \n in a shell variable, which
isn't portable between dash and bash.
* Bump debhelper compat level to 11.
* debian/control:
+ Bump Standards-Version to 4.1.3, no changes needed.
+ Add missing build-dependency on fakeroot.
+ Set Rules-Requires-Root: no.
-- Mattia Rizzolo <email address hidden> Sat, 30 Dec 2017 23:44:18 +0100
-
devscripts (2.17.11) unstable; urgency=medium
[ James McCoy ]
* Remove myself from Uploaders.
[ Osamu Aoki ]
* debuild:
+ Support newer and long dpkg-buildpackage options --no-sign,
--unsigned-source, --unsigned-changes, -ui and --unsigned-buildinfo,
therefore bumping the dpkg-bev dependency to version to 1.18.19.
Closes: #876024
* debian/control:
+ Remov Martin Zobel-Helas, Patrick Schoenfeld and Benjamin Drung
from Uploaders after asking them.
Thanks for all your contributions!
* uscan:
+ Auto set --force-download when appropriate to retain the
previous behaviour.
+ Correct information about the OpenPGP key fingerprints. Closes: #877104
[ Chris Lamb ]
* reproducible-check:
+ Match name of the json file on remote server.
+ Use the restricted JSON file that hides transient issues. Closes: #875861
+ Handle multi-architecture systems. Closes: #875887
+ Expire cache file after 1 day and base local cache name on the
remote filename.
+ Various flake8-related tidyintidying.
* debian/control:
+ Mention reproducible-check in the package long description.
* debchange:
+ Add support for preparing uploads to stable with the new --stable flag.
Closes: #871657
[ Christoph Berg ]
* origtargz:
+ Allow invocation from subdirectory. Closes: #702636
[ Cyril Brulebois ]
* debsign:
+ Fix bash completion by using file extensions instead of
using globs. Closes: #877440
[ Mattia Rizzolo ]
* debchange:
+ Update the manpage to mention that --bpo now targets stretch-backports,
not jessie-backports. Closes: #877877
* debian/control:
+ Annotate the build-dependencies on perl and python3-all with :any.
+ Add myself to uploaders.
+ Bump Standards-Version to 4.1.1, no changes needed.
+ Drop Testsuite:autopkgtest field, it's automatically added by dpkg-source.
+ Promote sensible-utils from Recommends to Depends.
* debrsign:
+ Apply patch from Gilles Filippini <email address hidden> to add support for
.buildinfo files. Closes: #862324
* uscan:
+ Apply patch from Stephen Kitt <email address hidden> to support https in the
sf.net special redirector. Closes: #879207
* tests:
+ mk-origtargz: fix check with dpkg 1.19.x. Thanks to Adam Conrad
<email address hidden> for the patch. Closes: #879798
-- Mattia Rizzolo <email address hidden> Fri, 27 Oct 2017 14:52:18 +0200
-
devscripts (2.17.10ubuntu1) bionic; urgency=medium
* test/test_mk-origtargz: Adjust test for dpkg 1.19's ErrorHandling.pm.
-- Adam Conrad <email address hidden> Wed, 25 Oct 2017 22:29:14 -0600
-
devscripts (2.17.10) unstable; urgency=medium
[ Mattia Rizzolo ]
* debian/tests/control:
+ Add dependency on debhelper; apparently autopkgtest in ubuntu doesn't
pull it otherwise
* debian/control:
+ Mark build-dependencies needed only for the tests with the <!nocheck>
build profile; partially addresses: #870640
* debian/source/options:
+ Remove the file, compression=xz has been the default for a long while.
* debian/TODO:
+ Remove the file, unusued (=> outdated) since 2008 and mostly empty.
* debian/rules:
+ Enable hardening build flags. Closes: #873379
Thanks Chris Lamb <email address hidden> for the patch.
* reproducible-check:
+ New script from Chris Lamb to check the reproducibility status of the
installed packages. Closes: #872514
[ Antonio Terceiro ]
* debc:
+ add --list-changes option, similar to --list-debs but for displaying the
path to the .changes file.
* debrepro:
+ proof-read manpage.
[ James McCoy ]
* Add hardening-check script.
* debuild:
+ Add "--" in --help output for debian/rules mode.
* test_package_lifecycle:
+ Fix expected output when run as root.
* build-rdeps:
+ Use apt interfaces to find and read the sources files, fixing --old
(non-dose) behavior when sources files are compressed. (Closes:
#698240)
+ Check Build-Depends-Arch for dependencies.
* debcheckout:
+ Using --auth for git repositories now performs the clone with the
Vcs-Git URL, but sets remote.<name>.pushurl to the rewritten
authenticated URL. Thanks to Andreas Henriksson for the patch!
(Closes: #753838)
* debsign:
+ Use --with-colons in bash completion to fix key completion with gpg2.
(Closes: #837380)
* rc-alert:
+ Clarify the error when curl/wget dies. (Closes: #820426)
* suspicious-source:
+ Whitelist elisp (.el) files. (Closes: #807754)
* Declare compliance with Policy 4.1.0, no changes needed.
[ Daniel Shahaf ]
* bts:
+ Add devscripts.conf(5) to "See also". Closes: #869842
[ Osamu Aoki ]
* uscan:
+ Fix the new package version regex for filenamemangle. Closes: #869150
+ Fix example URL for pagemangle. Closes: #864914
+ Set $origcount to 0 for each watch file. Closes: #840232
+ Don't fail on pgpmode=auto. Closes: #852537
+ Don't fail on pgpmode=previous. Closes: #840943, #873289
+ Rename and convert the detached signature with updated mk-origtargz.
Closes: #727096, #874666
+ Use correct extension for the downloaded signature. Closes: #874569
* mk-origtargz
+ Rename and convert the detached signature. Closes: #832267, #837173,
#870281
+ Skip upstream signature when repacking. Closes: #874667
* uupdate
+ -b option is not "New upstream release". Closes: #842468, #845610
+ Use space as the argument of debchange to create an empty entry
template.
* debchange: Handle multimaint case properly. Closes: #842468
* Made source package bootstrappable. Closes: #870640
[ Antonio Terceiro ]
* suspicious-source:
- whitelist text/x-ruby
- whitelist text/xml
-- James McCoy <email address hidden> Wed, 13 Sep 2017 22:08:30 -0400
-
devscripts (2.17.9build1) artful; urgency=medium
[ Mattia Rizzolo ]
* debian/tests/control:
+ Add dependency on debhelper; apparently autopkgtest in ubuntu doesn't
pull it otherwise
-- Mattia Rizzolo <email address hidden> Tue, 25 Jul 2017 14:18:24 +0200
