aiosmtplib (5.1.3-1) unstable; urgency=high
 .
   [ Dale Richards ]
   * Team upload.
   * New upstream release 5.1.3.
     - Addresses supplied by the caller were insufficiently validated, so an
       address containing spaces and angle brackets could smuggle extra ESMTP
       parameters (AUTH, NOTIFY, ORCPT, ...) onto the MAIL FROM and RCPT TO
       command lines, forging an authenticated identity or directing delivery
       notifications to a third party (CVE-2026-90467) (Closes: #1147474).
   * d/control:
     - Bump debhelper compatibility level to 14; drop ${misc:Depends} from both
       binary packages, as dh_gencontrol now applies the relationship substvars
       automatically.
     - Drop Priority and Rules-Requires-Root, both now dpkg defaults.
   * d/salsa-ci.yml: Add Salsa CI configuration.
 .
   [ Jeroen Ploemen ]
   * Control: add Built-Using field to the documentation package.
   * d/source/options: remove, only sets extend-diff-ignore for obsolete
     egg-info dir.

aiowebdav2 (0.6.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Fix dist-info version 0.0.0

golang-github-arduino-go-properties-orderedmap (1.9.1-1) unstable; urgency=medium
 .
   * New upstream version 1.9.1

golang-github-arduino-go-serial-utils (0.1.4-1) unstable; urgency=medium
 .
   * New upstream version 0.1.4
   * debian/copyright: update copyright information
   * debian/watch: update to version 5
   * debian/control: bump Standards-Version to 4.7.4, drop obsolete fields

node-tap (21.7.5+ds1+~cs47.20.40-2) unstable; urgency=medium
 .
   * Team upload
   * Adapt to Babel 8

php-async-aws-core (1.30.0-1) unstable; urgency=medium
 .
   [ Pascal CESCON ]
   * Add BedrockAgentCore client with InvokeAgentRuntime (#2124)
 .
   [ Jérémy Derussé ]
   * prepare next release
 .
   [ David Prévot ]
   * Use debhelper-compat 14

php-async-aws-dynamo-db (3.12.0-1) unstable; urgency=medium
 .
   [ Jérémy Derussé ]
   * prepare next release
 .
   [ AsyncAws ]
   * Update generated code (#2118)
 .
   [ David Prévot ]
   * Use debhelper-compat 14
   * Revert "Breaks and replaces php-symfony-amazon-dynamo-db-lock (<< 7.4.6)"

php-league-commonmark (2.10.1-1) unstable; urgency=medium
 .
   [ DualFroz ]
   * fix: accept unordered_list_markers config in InlinesOnlyExtension (#1151)

php-league-html-to-markdown (5.1.2-1) unstable; urgency=medium
 .
   [ Colin O'Dell ]
   * Prepare to release 5.1.2
 .
   [ DualFroz ]
   * fix: honor start="0" on ordered lists (#277)
 .
   [ David Prévot ]
   * Drop patches not needed anymore
   * Update build system for tests
   * Remove redundant Priority: optional from source stanza
   * Update standards version to 4.7.4
   * Update watch file format version to 5
   * Use debhelper-compat 14
   * Document lintian-overrides

phpunit (13.3.3+ds-1) unstable; urgency=medium
 .
   [ Sebastian Bergmann ]
   * Ensure that paths of included files are escaped when generating code for
     isolated tests
   * Show the tests of a test class that is skipped as a whole in the TestDox
     output
   * Count a test that is marked incomplete before it started as a test that ran
   * Show a test that is skipped or marked incomplete before it started in the
     TestDox output
   * Print the progress of a test that is marked incomplete before it started
   * Prepare release

ruby-parallel (2.2.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.

rust-avro-schema (0.3.0-1) unstable; urgency=medium
 .
   * Initial upload (Closes: #1147544)
   * Use Libflate 2 and CRC 3; gate compression tests on their feature.
   * Package avro-schema 0.3.0 from crates.io using debcargo 2.8.4

rust-kinded (0.5.1-1) unstable; urgency=medium
 .
   * Package kinded 0.5.1 from crates.io using debcargo 2.8.4

rust-kinded-macros (0.5.1-1) unstable; urgency=medium
 .
   * Package kinded_macros 0.5.1 from crates.io using debcargo 2.8.4

rust-ldap3-proto (0.8.1-1) unstable; urgency=medium
 .
   * Package ldap3_proto 0.8.1 from crates.io using debcargo 2.8.4
   * Initial release.
   * Disable the sasltest example and its sspi dev-dependency: sspi isn't
     packaged in Debian.
   * Fix attrs decoding when strict feature is disabled.

rust-rusqlite (0.40.2-2) unstable; urgency=medium
 .
   * Team upload.
   * Package rusqlite 0.40.2 from crates.io using debcargo 2.8.4
   * Bind TEXT with sqlite3_bind_text, not sqlite3_bind_text64
     (Closes: #1147503)

sfepy (2026.2-2) unstable; urgency=medium
 .
   * Add py315.patch to build against python 3.15rc2. Thanks to
     Maximiliano Curia <maxy@debian.org> for providing the patch.
     Closes: #1147494.

survival (3.8-12-1) unstable; urgency=medium
 .
   * New upstream release

util-linux (2.42.3-1) unstable; urgency=medium
 .
   * New upstream release.
     Fixes security issues CVE-2026-76642, CVE-2026-78410, CVE-2026-78409,
     CVE-2026-78408, CVE-2024-28085 (again).

valkey (9.1.2-1) unstable; urgency=medium
 .
   * New upstream version 9.1.2 (Closes: #1146641, #1146879, #1147517).
     - Fix CVE-2026-82631, CVE-2026-82677, CVE-2026-85522, and CVE-2026-86227.
   * Remove 0006-Fix-test-cert-gen-and-tls-tests.patch - fixed upstream.