calibre (9.16.0+ds+~1.1.2-1) unstable; urgency=medium
 .
   * New upstream version 9.16.0+ds+~1.1.2
   * Rediff patches
   * Calibre now requires libavif for AVIF images
   * Lintian fixup.

django-maintenancemode (0.11.7+git221001-6) unstable; urgency=medium
 .
   * QA Upload
   * Add debian/salsa-ci.yml
   * python3-ipy is pulled-in by the package,
     it is counter-productive to explicitely pull-in in the autopkgtest
   * Rewrite d/watch in v5 format
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Split-out Build-Depends-Indep for easier dependency review

fastfetch (2.69.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 2.69.0+dfsg.

gokr-rsync (0.3.8-1) unstable; urgency=medium
 .
   * New upstream version 0.3.8.

golang-github-google-cel-go (0.30.0+ds-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Santiago Vila ]
   * New upstream release.
   * Should fix CVE-2026-83530. Closes: #1147513.
   * Disable redundant/duplicate Salsa CI jobs.
 .
   [ Arthur Diniz]
   * d/patches: Fix list cost estimators and int tests on 32-bit arches
   * d/rules: Skip timing-sensitive TestConcurrentEval subtests

golang-golang-x-net (1:0.60.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 0.60.0
     - Refresh patches
     - CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer
       headers
     - CVE-2026-78669: net/http: excessive CPU consumption from repeated
       initial window changes
     - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server
       streams
     - CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race

magnum-capi-helm (1.4.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Add python3-novaclient to Build-Depends-Indep (Closes: #1143337):
     the unit tests mock novaclient APIs, which reduced rebuild
     environments do not have transitively.
   * Document why TestMagnumDriverLoads is excluded from the test run
     (needs a live magnum environment) in debian/rules and
     debian/tests/unittests.
   * Generate and ship /etc/magnum/capi_helm.conf from the capi_helm and
     capi_helm_cluster_labels namespaces, so that magnum can load it as
     an extra --config-file.
magnum-capi-helm (1.2.0-3) unstable; urgency=medium
 .
   * Fixed d/watch.
magnum-capi-helm (1.2.0-2) unstable; urgency=medium
 .
   * Uploading to unstable.
magnum-capi-helm (1.2.0-1) experimental; urgency=medium
 .
   * Initial release. (Closes: #1100155)

munin (2.0.78-2) unstable; urgency=medium
 .
   * haproxy_ng: Fix some graphs which sometimes do not render.

pyroute2 (0.8.1-9) unstable; urgency=medium
 .
   * Added <!nocheck> and <!nodoc> build profiles, and switched to
     dh-sequence-sphinxdoc <!nodoc> (Closes: #1150255). Thanks Alexandre
     Detiste for the bug report and patch.

rust-reqwest (0.13.5-1) unstable; urgency=medium
 .
   * Team upload.
   * Package reqwest 0.13.5 from crates.io using debcargo 2.8.4
   * Use remove_features and filter_targets, replacing several patches.
   * Add enable-ring-disable-warning.patch to carry over a replaced patch.

rust-toml-span (0.7.2-1) unstable; urgency=medium
 .
   * Team upload.
   * Package toml-span 0.7.2 from crates.io using debcargo 2.8.4

sg3-utils (1.48-4) unstable; urgency=high
 .
   * Sanitize control characters in sg_inq --export SCSI name string and ATA
     identifier fields (CVE-2026-16313, Closes: #1143004)

swtpm (0.10.2-2) unstable; urgency=medium
 .
   * Backport patch to sync sysusers.d with tpm2-tss (Closes: #1149019)
   * Drop dependency not needed since dh-compat 14