mako (1.1.3+ds1-2ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: path traversal via double-slash URI in TemplateLookup
    - debian/patches/CVE-2026-41205.patch: use lstrip("/") instead of
      conditional single-slash strip in Template.__init__
    - CVE-2026-41205

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Thu, 30 Apr 2026 16:05:58 -0230

mako (1.1.3+ds1-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Regular Expression DoS
    - debian/patches/CVE-2022-40023.patch: fix tag regexp to match quoted groups correctly
      in mako/lexer.py.
    - CVE-2022-40023

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Mon, 19 Sep 2022 07:21:25 -0300

mako (1.1.3+ds1-2) unstable; urgency=medium

  * Make sure shebang uses unversioned python3 interpreter (closes: 976767)

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 22 Dec 2020 13:07:48 +0100

mako (1.1.3+ds1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Remove trailing whitespaces.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Piotr Ożarowski ]
  * New upstream release
    - builds with Sphinx 3.2 (closes: 963650)

 -- Piotr Ożarowski <piotr@debian.org>  Thu, 24 Sep 2020 15:00:33 +0200

mako (1.1.2+ds1-1) unstable; urgency=medium

  * New upstream release
  * Standards-version bumped to 4.5.0 (no other changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Mon, 16 Mar 2020 12:44:41 +0100

mako (1.1.0+ds1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org
  * d/copyright: Use https protocol in Format field
  * d/control: Deprecating priority extra as per policy 4.0.1
  * d/watch: Use https protocol
  * d/changelog: Remove trailing whitespaces
  * d/control: Remove ancient X-Python-Version field
  * Convert git repository from git-dpm to gbp layout
  * Use debhelper-compat instead of debian/compat.

  [ Antonio Valentino ]
  * New upstream release (Closes: #944705).
  * Set upstream metadata fields: Bug-Database.
  * Set upstream metadata fields: Bug-Submit.
  * Use secure URI in Homepage field.
  * Bump debhelper from old 10 to 12.
  * Standards-Version bumped to v4.4.1 (no chenges).
  * Drop Python 2 support (Closes: #936985).
  * d/control: add build dependency from python3-zzzeeksphinx.
  * d/control: fix cme warnongs.
  * d/copyright: updated.
  * New 0001-Use-zzzeeksphinx-sphinx-theme.patch to use the
    "zzzeekshpinx" sphonx theme instead of "zsmako"
    (still not available in debian).
  * d/rules: fix test rule.
  * d/source/lintian-overrides: dropped (it was unused).
  * d/control: add Testsuite: autopkgtest-pkg-python and
    Rules-Requires-Root: no (fix lintian warnings).
  * d/rules: fix clean target (Closes: #917043).
  * d/rules: install the correcy changelog (Closes: #877280).
  * d/rules: add support for nodoc (Closes: #917044).

  [ Piotr Ożarowski ]
  * /usr/bin/mako-render moved to python3-mako package.
    python3-mako now Breaks/Replaces python-mako (<< 1.1.0+ds1-1)

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 03 Jan 2020 20:17:22 +0100

mako (1.0.7+ds1-1) unstable; urgency=medium

  * New upstream release
  * Standards-Version bumped to 4.0.0 (no changes needed)

 -- Piotr Ożarowski <piotr@debian.org>  Fri, 14 Jul 2017 16:44:18 +0200

mako (1.0.6+ds1-2) unstable; urgency=medium

  * Update tests for Pygments 2.2 (closes: 852908, thanks to Gilles Filippini
    for the patch)

 -- Piotr Ożarowski <piotr@debian.org>  Tue, 07 Feb 2017 22:23:36 +0100

mako (1.0.6+ds1-1) unstable; urgency=medium

  * New upstream release

 -- Piotr Ożarowski <piotr@debian.org>  Wed, 21 Dec 2016 12:37:13 +0100

mako (1.0.4+ds1-2) unstable; urgency=medium

  * Fix FTBFS due to Sphinx API change (closes: 830178, thanks to Nishanth
    Aravamudan for the patch)

 -- Piotr Ożarowski <piotr@debian.org>  Wed, 02 Nov 2016 23:27:06 +0100

# For older changelog entries, run 'apt-get changelog python3-mako'
