gnome-keyring (48.0-4) unstable; urgency=medium

  * Team upload
  * d/maintscript: Remove obsolete autostart desktop file

 -- Alessandro Astone <alessandro.astone@canonical.com>  Fri, 26 Sep 2025 14:17:44 +0200

gnome-keyring (48.0-3) unstable; urgency=medium

  * Release to unstable

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 12 Aug 2025 18:19:26 -0400

gnome-keyring (48.0-2) experimental; urgency=medium

  * Team upload
  * Stop building gnome-keyring ssh-agent in favour of gcr4 ssh-agent

 -- Alessandro Astone <alessandro.astone@canonical.com>  Sun, 27 Jul 2025 16:56:56 +0200

gnome-keyring (48.0-1) unstable; urgency=medium

  * Team upload
  * New upstream release
  * debian/rules: Explicitly enable ssh-agent
    (since the upstream default was switched in this release)

 -- Alessandro Astone <alessandro.astone@canonical.com>  Thu, 20 Mar 2025 15:18:42 +0100

gnome-keyring (48~beta-3) unstable; urgency=medium

  * Only build selinux support on Linux

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 18 Feb 2025 13:53:14 -0500

gnome-keyring (48~beta-2) unstable; urgency=medium

  * Bump minimum glib
  * Release to unstable

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 18 Feb 2025 12:07:15 -0500

gnome-keyring (48~beta-1) experimental; urgency=medium

  * New upstream release
  * Build with meson
  * Opt into dpkg build API v1
  * Add debian/upstream/metadata
  * debian/docs: AUTHORS is no longer provided
  * Run wrap-and-sort
  * Remove secure memory patches: applied in new release

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 18 Feb 2025 09:27:03 -0500

gnome-keyring (46.2-1) unstable; urgency=medium

  * New upstream release
  * Remove undefined reference patch: applied in new release
  * Bump Standards Version to 4.7.0

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 07 Aug 2024 13:32:21 -0400

gnome-keyring (46.1-2) unstable; urgency=medium

  * Stop using debian/control.in and dh_gnome_clean
  * Add Build-Depends: systemd-dev

 -- Jeremy Bícha <jbicha@ubuntu.com>  Fri, 22 Mar 2024 14:03:58 -0400

gnome-keyring (46.1-1) unstable; urgency=medium

  * New upstream release
  * Add patch to fix undefined reference

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 13 Feb 2024 12:11:04 -0500

gnome-keyring (42.1-2) unstable; urgency=medium

  [ Amin Bandali ]
  * Change debian-branch from debian/master to debian/latest

  [ Michael Biebl ]
  * Install PAM module into /usr (Closes: #1061197)
  * Do proper refcounting of the PAM module package on prerm
    so that we don't drop the module from the PAM config when uninstalling
    a foreign-arch package.
  * Drop obsolete Breaks and Replaces from pre-oldstable
  * Drop obsolete migration code from pre-oldstable
  * Bump Standards-Version to 4.6.2

 -- Michael Biebl <biebl@debian.org>  Sat, 20 Jan 2024 19:40:15 +0100

gnome-keyring (42.1-1) unstable; urgency=medium

  * New upstream release
  * Build new systemd user service
  * Add patch to start systemd service with graphical-session

 -- Jeremy Bicha <jbicha@ubuntu.com>  Tue, 24 May 2022 11:53:29 -0400

gnome-keyring (40.0-3) unstable; urgency=medium

  * Team upload
  * Don't add CAP_IPC_LOCK capability to gnome-keyring-daemon.
    GNOME Keyring uses "memory locking" to prevent memory buffers from being
    written out to swap, in an attempt to prevent passwords and other secrets
    from being written to disk unencrypted. Since Linux 2.6.9 (Debian 4.0,
    2007) it has been possible to lock memory up to the limit defined by
    RLIMIT_MEMLOCK without requiring the CAP_IPC_LOCK capability.
    Since GLib 2.70, security hardening in GLib means that this capability
    interferes with the ability to connect to the D-Bus session bus, which
    is required functionality for gnome-keyring.
    RLIMIT_MEMLOCK defaults to 64 KiB, although it is considerably higher on
    typical Debian systems due to #976373. If memory locking for larger
    quantities of secret data is required, please configure a higher
    RLIMIT_MEMLOCK in /etc/security/limits.conf.
    Using encrypted swap, with an ephemeral key if suspend-to-disk is not
    required, is recommended as a more robust way to prevent passwords
    from reaching disk. Full-disk encryption is also recommended for
    systems where confidentiality is important.
    (Closes: #994961)
  * Don't build with capabilities support on Linux architectures.
    Now that we are not setting CAP_IPC_LOCK, this is not useful, and
    disabling it silences some misleading warnings. gnome-keyring will still
    log a warning if it cannot allocate enough locked memory for its needs.
  * Add proposed patches to avoid unnecessary use of unlocked memory.
    Older versions of gnome-keyring did not always prevent larger items of
    secret data from being swapped out, even if they could, due to a logic
    error when allocating new blocks of locked memory.

 -- Simon McVittie <smcv@debian.org>  Sun, 26 Sep 2021 17:28:50 +0100

gnome-keyring (40.0-2) unstable; urgency=medium

  * Build-Depend on debhelper-compat 13
  * Build-Depend on dh-sequence-gnome instead of gnome-pkg-tools
  * debian/rules: clean up unneeded rules
  * Release to unstable

 -- Jeremy Bicha <jbicha@debian.org>  Sat, 21 Aug 2021 07:43:03 -0400

gnome-keyring (40.0-1) experimental; urgency=medium

  * New upstream release
  * debian/watch:
    - Update to follow the new GNOME version scheme

 -- Sebastien Bacher <seb128@ubuntu.com>  Wed, 02 Jun 2021 17:06:23 +0200

gnome-keyring (3.36.0-1) unstable; urgency=medium

  * New upstream release

 -- Sebastien Bacher <seb128@ubuntu.com>  Wed, 11 Mar 2020 10:00:29 +0100

gnome-keyring (3.35.90-1) experimental; urgency=medium

  [ Simon McVittie ]
  * Build-depend on python3 instead of python.
    build/tap-driver is now a python3 script, and Python 2 is deprecated.
    (Closes: #943047)
  * Qualify python3 build-dependency with :native for cross-compilation.
    Thanks to Helmut Grohne. (Closes: #856507)
  * Qualify dbus and python3 build-dependencies with <!nocheck>

  [ Sebastien Bacher ]
  * New upstream release
  * debian/gnome-keyring.install:
    - include the new xdg-desktop-portal files

 -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 24 Feb 2020 17:18:02 +0100

gnome-keyring (3.34.0-1) unstable; urgency=medium

  * New upstream release
  * Drop patches applied in new release:
    - Remove-tap-gtester-rely-on-GLib-2.38-built-in-TAP-output-.patch
    - test-gkd-ssh-agent-service-Avoid-race-condition-with-serv.patch
  * Release to unstable

 -- Jeremy Bicha <jbicha@debian.org>  Mon, 30 Sep 2019 21:08:35 -0400

gnome-keyring (3.31.91-2) experimental; urgency=medium

  * Team upload
  * d/p/test-gkd-ssh-agent-service-Avoid-race-condition-with-serv.patch:
    Add proposed patch to avoid a race condition that can result in the
    tests hanging, which seems to be particularly likely on a
    single-CPU machine (Closes: #909416)
  * d/p/Remove-tap-gtester-rely-on-GLib-2.38-built-in-TAP-output-.patch:
    Fix FTBFS with GLib 2.62+ (Closes: #940157)

 -- Simon McVittie <smcv@debian.org>  Fri, 13 Sep 2019 10:41:22 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog gnome-keyring-pkcs11`.
