cdebconf (0.283) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Updated translations ]
   * Bosnian (bs.po) by pacavarn
   * Kannada (kn.po) by Prasannakumar T Bhat
   * Lao (lo.po) by BoneNI
   * Occitan (oc.po) by Quentin PAGÈS
   * Tajik (tg.po) by Victor Ibragimov

composer (2.10.0-1) unstable; urgency=medium
 .
   * Upload release to unstable
 .
   [ Jordi Boggiano ]
   * Sanitize urls everywhere in output (#12882)
   * Disable source-fallback by default, mark it deprecated and remove
     env/flags to override
   * Fix issues checking URLs with uppercase URL schemes
   * Relax token validation on input, and hide more things on output (#12886)
   * Update changelog
   * Release 2.10.0
 .
   [ PrinsFrank ]
   * Return non-zero exit code for "composer audit" when audit couldn't be
     performed due to missing required packages (#12880)
composer (2.10.0~rc2-1) experimental; urgency=medium
 .
   [ Jordi Boggiano ]
   * Release 2.10.0-RC2
 .
   [ David Prévot ]
   * Document CVE in previouss changelog entry
   * Use full version with RequiresPhpunit
composer (2.10.0~rc1-3) experimental; urgency=medium
 .
   * Fix GITHUB_TOKEN disclosure in GitHub Actions logs (GHSA-f9f8-rm49-7jv2)
composer (2.10.0~rc1-2) experimental; urgency=medium
 .
   * Fix command injection via malicious Perforce repository definition
     [CVE-2026-40261]
   * Fix command injection via malicious Perforce source reference/url
     [CVE-2026-40176]
composer (2.10.0~rc1-1) experimental; urgency=medium
 .
   * Upload RC to experimental
 .
   [ Jordi Boggiano ]
   * Update docs for COMPOSER_NO_SECURITY_BLOCKING to include that it is
     supported in install command
   * Fix inconsistent treatment of SingleCommandApplication script commands
     (#12758)
   * Fix usage of insecure 3DES cipher suites when curl is disabled
   * Optimize plugin autoloading by avoiding regenerating classmaps and co for
     every package (#12696)
   * Release 2.10.0-RC1
 .
   [ Yanick Witschi ]
   * Parse HTML in extension info when not on CLI (#12735)
   * Reduce PoolOptimizer memory usage in identical dependency grouping (#12783)
 .
   [ Denis ]
   * Relay GitHub API error messages to the user on auth failures (#12737)
 .
   [ mamazu ]
   * Improving the error message when package version can't be parsed (#12743)
 .
   [ Jorg Adam Sowa ]
   * Fix credentials persisting in git mirror .git/config after clone or failed
     update
   * [Security] Enforce allow-plugins in non-interactive mode for pre-2.2 lock
     file (#12764)
 .
   [ Jay-Way ]
   * Improve warning message when lockfile creation is disabled (#12760)
 .
   [ Kuba Werłos ]
   * Bump only actually updated packages when running
     `composer update --bump-after-update` (#12733)
 .
   [ Kay W. ]
   * Add `source-fallback` config option to disable/enable source fallback on
     download failure (#12698)
 .
   [ discollizard ]
   * Add new --require param to create-project to add new packages to the
     project as it gets installed (#12738)
 .
   [ ಠ_ಠ ]
   * Add support for temporary --with constraints with wildcards in
     UpdateCommand (#12658)
 .
   [ David Prévot ]
   * Update Standards-Version to 4.7.4

main-menu (1.72) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Updated translations ]
   * Tajik (tg.po) by Victor Ibragimov

netcfg (1.203) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Holger Wansing ]
   * Drop mentions of kfreebsd from dependencies in d/control.
 .
   [ Updated translations ]
   * Bosnian (bs.po) by pacavarn
   * Czech (cs.po) by Miroslav Kure
   * Spanish (es.po) by Francisco Serrador
   * Persian (fa.po) by Danial Behzadi
   * Galician (gl.po) by hwansing
   * Kabyle (kab.po) by ButterflyOfFire
   * Lao (lo.po) by BoneNI
   * Occitan (oc.po) by Quentin PAGÈS
   * Portuguese (pt.po) by Miguel Figueiredo
   * Tamil (ta.po) by தமிழ்நேரம்
   * Tajik (tg.po) by Victor Ibragimov

rust-exr (1.74.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Package exr 1.74.0 from crates.io using debcargo 2.8.2
   * Relax dependency on miniz_oxide.

rust-little-exif (0.6.23-2) unstable; urgency=medium
 .
   * Team upload.
   * Package little_exif 0.6.23 from crates.io using debcargo 2.8.2
   * Relax dependency on miniz_oxide.

rust-vergen-lib (9.1.0-2) unstable; urgency=medium
 .
   * Package vergen-lib 9.1.0 from crates.io using debcargo 2.8.2
rust-vergen-lib (9.1.0-1) unstable; urgency=medium
 .
   * Package vergen-lib 9.1.0 from crates.io using debcargo 2.8.2

s390-dasd (0.0.85) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Updated translations ]
   * Bosnian (bs.po) by pacavarn
   * Spanish (es.po) by emma peel
   * Kannada (kn.po) by Prasannakumar T Bhat
   * Lao (lo.po) by BoneNI

stac-pydantic (3.5.2-1) unstable; urgency=medium
 .
   [ Bas Couwenberg ]
   * Bump Standards-Version to 4.7.4, no changes.
 .
   [ Antonio Valentino ]
   * New upstream release.

tcltls (2.0-2) unstable; urgency=medium
 .
   * Add a patch that helps TclTLS build against libssl 4.0 (closes: #1138429).
   * Bump the standards version to 4.7.4.

textual-image (0.13.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * Upstream changed build system from setuptools to hatchling.

vlock (2.2.2-14) unstable; urgency=medium
 .
   [ Luca Boccassi ]
   * Install and use sysusers.d config file
 .
   [ Kirill Rekhov ]
   * d/copyright: update maintainer copyright year
   * d/control: drop obsolete Priority and bump Standards-Version

zope.interface (8.5-1) unstable; urgency=medium
 .
   * New upstream release.