packagekit (1.3.6-1ubuntu1) stonking; urgency=medium

  [ Hector Cao ]
  * d/p/lp2148469-apt-use-solve-3.0.patch: use apt solver 3.0
    (LP: #2148469)

  [ Alessandro Astone ]
  * d/p/pkgcli-Skip-blocked-updates-in-full-upgrade-too.patch.
    Fix `pkgcli upgrade` command after switching to apt solver 3.0, which would
    fail if some update was held back.

 -- Alessandro Astone <alessandro.astone@canonical.com>  Mon, 20 Jul 2026 13:08:28 +0200

packagekit (1.3.6-1) unstable; urgency=medium

  * New upstream version: 1.3.6
    - Resolves an information leak by not following socket symlinks
      (Closes: #1138711, CVE-2026-10294)

 -- Matthias Klumpp <mak@debian.org>  Tue, 16 Jun 2026 22:06:36 +0200

packagekit (1.3.5-1) unstable; urgency=critical

  * New upstream version: 1.3.5
    - This release fixes a local root exploit security vulnerability
      currently known as GHSA-f55j-vvr9-69xv / "Pack2TheRoot" that allows
      any user to obtain full root access on a system with PackageKit
      installed. Please update as soon as possible!
  * Drop fix-meson.patch: Applied upstream
  * Bump standards version (no changes needed)

 -- Matthias Klumpp <mak@debian.org>  Wed, 22 Apr 2026 12:58:04 +0200

packagekit (1.3.4-3) unstable; urgency=medium

  * Team upload

  [ Matthias Klumpp ]
  * Stop recommending removed packagekit-tools package (Closes: #1126735)
    (LP: #2139443)

  [ Jeremy Bícha ]
  * Bump Standards Version to 4.7.3

 -- Jeremy Bícha <jbicha@ubuntu.com>  Sun, 01 Feb 2026 14:22:02 -0500

packagekit (1.3.4-1) unstable; urgency=medium

  * New upstream version: 1.3.4
  * Drop packagekit-tools package
    - The pkcon/pkmon tools are obsolete, and the replacement `pkgcli` tool
      is available in the main package. The old split into a separate -tools
      package was for historical reasons only.
    - Nothing in Debian uses pkcon, and there is plenty of time to adjust any
      scripts while this change sits in unstable/testing. But if there is a
      huge, justifiable need to reintroduce pkcon, we can add the -tools
      package back (please file a bug in that case). The `pkgcli` utility
      should be an adequate replacement for both pkcon & pkmon.
  * Update symbols file

 -- Matthias Klumpp <mak@debian.org>  Wed, 28 Jan 2026 21:28:30 +0100

packagekit (1.3.3-1) unstable; urgency=medium

  * New upstream version: 1.3.3
  * Install GIR typelib to the correct location (Closes: #1118515)
  * Install pkgctl, a new experimental command-line interface to
    PackageKit, so it can receive some testing
  * Update symbols file
  * d/control: Drop Rules-Requires-Root (no longer needed)

 -- Matthias Klumpp <mak@debian.org>  Mon, 24 Nov 2025 20:29:26 +0100

packagekit (1.3.2-1) unstable; urgency=medium

  * New upstream version: 1.3.2

 -- Matthias Klumpp <mak@debian.org>  Thu, 02 Oct 2025 22:06:52 +0200

packagekit (1.3.1-1) unstable; urgency=medium

  [ Matthias Klumpp ]
  * New upstream version: 1.3.1
    - Implement enable/disable support for deb822-style repo sources
    - Harmonize repo-ids between deb822 and legacy sources
    - Use 'pk_backend_job_details_full()' so download size is
      reported properly (Closes: #1026076)
  * Drop patches: Applied upstream
  * Drop build-dependency on gobject-introspection-bin (Closes: #1094624)

  [ Michael Biebl ]
  * Drop obsolete pkla configuration file (Closes: #1093073)

 -- Matthias Klumpp <mak@debian.org>  Tue, 22 Apr 2025 22:18:16 +0200

packagekit (1.3.0-3) unstable; urgency=medium

  * Adjust for libapt-pkg7.0 API

 -- Julian Andres Klode <jak@debian.org>  Mon, 17 Feb 2025 10:35:40 +0100

packagekit (1.3.0-2) unstable; urgency=medium

  * Team upload
  * Backport patch to fix pkcon crashing in transactions with user prompt
    (LP: #2086771)
  * Backport patch to fix showing the GTK debconf helper on Wayland
    (LP: #2086773)

 -- Alessandro Astone <alessandro.astone@canonical.com>  Fri, 08 Nov 2024 15:56:31 -0500

packagekit (1.3.0-1) unstable; urgency=medium

  * New upstream version: 1.3.0
  * Drop all patches: Applied upstream

 -- Matthias Klumpp <mak@debian.org>  Sun, 16 Jun 2024 17:40:52 +0200

packagekit (1.2.8-2) unstable; urgency=medium

  * Add strlen-cmp-memfix.patch:
    - Check string length correctly to prevent memory
      over-consumption.
  * Add identify-ubuntu.patch:
    - Do not incorrectly identify Ubuntu sources as coming
      from Debian.
  * Switch build dependency from pkg-config -> pkgconf,
    add gobject-introspection-bin.

 -- Matthias Klumpp <mak@debian.org>  Tue, 20 Feb 2024 22:20:42 +0100

packagekit (1.2.8-1) unstable; urgency=medium

  [ Matthias Klumpp ]
  * New upstream version: 1.2.8
    - Removes bashisms (Closes: #772289)
    - Fixes crash when finishing a uncommitted transaction (Closes: #1054026)
    - Deduplicates offline-update entries (Closes: #910365)
  * Slightly tweak description text

  [ Helmut Grohne ]
  * Fix FTBFS when systemd.pc changes systemdsystemunitdir (Closes: #1052982)

 -- Matthias Klumpp <mak@debian.org>  Wed, 08 Nov 2023 22:28:00 +0100

packagekit (1.2.7-1) unstable; urgency=medium

  * New upstream version 1.2.7
  * Drop all patches: Applied upstream
  * Enable all tests except for the daemon tests
    - The daemon tests need special configuration and
      root access, so we still can not run them.
  * Update symbols file

 -- Matthias Klumpp <mak@debian.org>  Sun, 27 Aug 2023 15:46:54 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog packagekit-docs`.
