pyjwt (2.3.0-1ubuntu0.3) jammy-security; urgency=medium

  * SECURITY UPDATE: Incorrect authorization of invalid JWS token.
    - debian/patches/CVE-2026-32597.patch: Add _supported_crit and checks
      for valid crit header in jwt/api_jws.py. Add tests in
      tests/test_api_jws.py and tests/test_api_jwt.py.
    - CVE-2026-32597

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Thu, 26 Mar 2026 14:58:14 -0230

pyjwt (2.3.0-1ubuntu0.2) jammy-security; urgency=medium

  * SECURITY REGRESSION: Revert inadvertent package version bump to 2.4.0
    (LP: #1986487)
    - debian/patches/CVE-2022-29217.patch: Comment out the part which
      bumps the internal package version number to 2.4.0

 -- Alex Murray <alex.murray@canonical.com>  Wed, 17 Aug 2022 10:05:29 +0930

pyjwt (2.3.0-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Signing key confusion via public key signature
    - debian/patches/CVE-2022-29217.patch: update jwt/algorithms.py to
      disallow using SSH keys as a HMAC secret.
    - CVE-2022-29217  

 -- Alex Murray <alex.murray@canonical.com>  Tue, 19 Jul 2022 14:26:57 +0930

pyjwt (2.3.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.

 -- Thomas Goirand <zigo@debian.org>  Wed, 16 Feb 2022 09:33:52 +0100

pyjwt (2.1.0-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.5.0, no changes needed.

  [ Daniele Tricoli ]
  * New upstream version 2.1.0. (Closes: #989637)
  * Drop man page since upstream dropped CLI entrypoint.
  * debian/changelog
    - Format changelog to not go over 80 columns.
  * debian/control
    - Bump debhelper compatibility to 13.
    - Bump Standards-Version to 4.5.1 (no changes needed).
  * debian/copyright
    - Update copyright years.
  * debian/NEWS
    - Add news entry about dropped CLI.
  * debian/tests/python3-jwt
    - Use supported python versions during tests.
  * debian/watch
    - Bump d/watch version to 4.

 -- Daniele Tricoli <eriol@debian.org>  Fri, 20 Aug 2021 02:13:42 +0200

pyjwt (1.7.1-2) unstable; urgency=medium

  * Team upload.
  * Drop python2 support; Closes: #937463

 -- Sandro Tosi <morph@debian.org>  Sat, 26 Oct 2019 20:17:32 -0400

pyjwt (1.7.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.

  [ Daniele Tricoli ]
  * New upstream release. (Closes: #942241)
  * Use my Debian email address.
  * debian/control
    - Bump debhelper-compat to 12.
    - Bump Standards-Version to 4.4.1 (no changes needed).
  * debian/copyright
    - Update copyright years.
  * debian/patches/0001-Fix-tests-to-work-with-pytest-3.9.0.patch
    - Drop since no needed anymore.

 -- Daniele Tricoli <eriol@debian.org>  Tue, 22 Oct 2019 02:58:08 +0200

pyjwt (1.7.0-2) unstable; urgency=medium

  * debian/tests/control
    - Wrap Depends.
    - Bump python{,3}-pytest version to >= 3.9.0.

 -- Daniele Tricoli <eriol@mornie.org>  Thu, 13 Dec 2018 02:09:40 +0100

pyjwt (1.7.0-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Convert git repository from git-dpm to gbp layout

  [ Daniele Tricoli ]
  * New upstream release.
  * debian/control
    - Bump python{,3}-pytest version to >= 3.9.0 in Build-Depends.
    - Bump Standards-Version to 4.2.1 (no changes needed).
  * debian/patches
    - Add 0001-Fix-tests-to-work-with-pytest-3.9.0.patch. (Closes: #915200)
  * debian/pyjwt.1
    - Update release date.

 -- Daniele Tricoli <eriol@mornie.org>  Mon, 03 Dec 2018 01:52:54 +0100

pyjwt (1.6.4-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Set Vcs-* to salsa.debian.org
  * d/copyright: Use https protocol in Format field
  * d/watch: Use https protocol
  * d/control: Remove ancient X-Python-Version field
  * d/control: Remove ancient X-Python3-Version field

  [ Daniele Tricoli ]
  * New upstream release.
  * No need to repack upstream tarball since bytecode is not included anymore.
  * Update debhelper compat level to 11.
  * debian/clean
    - Add .pytest_cache.
  * debian/control
    - Bump python-all to >= 2.7 since upstream dropped Python 2.6 support.
    - Bump Standards-Version to 4.1.5 (no changes needed).
  * debian/copyright
    - Update copyright years.
  * debian/docs
    - Update README extension. (Closes: #903187)
  * debian/pyjwt.1
    - Update manpage.

 -- Daniele Tricoli <eriol@mornie.org>  Tue, 10 Jul 2018 02:30:49 +0200

# For older changelog entries, run 'apt-get changelog python3-jwt'
