cosign (3.1.1-1) unstable; urgency=medium

  * Upload to unstable
  * Bump compat to 14
  * Add Breaks:gitsign without cosign3.1 patch

 -- Simon Josefsson <simon@josefsson.org>  Fri, 03 Jul 2026 13:09:47 +0200

cosign (3.1.1-1~exp0) experimental; urgency=medium

  * New upstream

 -- Simon Josefsson <simon@josefsson.org>  Tue, 09 Jun 2026 22:25:52 +0200

cosign (3.1.0-1~exp0) experimental; urgency=medium

  * Refresh d/patches

 -- Simon Josefsson <simon@josefsson.org>  Sun, 07 Jun 2026 19:02:16 +0200

cosign (3.0.6-1) unstable; urgency=medium

  * Upload to unstable
  * Use gbp debian-branch debian/latest
  * Breaks gittuf<=0.13.1

 -- Simon Josefsson <simon@josefsson.org>  Tue, 02 Jun 2026 21:11:56 +0200

cosign (3.0.6-1~exp0) experimental; urgency=medium

  * New upstream version
    - Fixes CVE-2026-39395 (Closes: #1133005)
  * Standards-Version: 4.7.4
  * Bump Breaks for v3 transition
  * Bump upstream copyright years
  * Improve lrc.config

 -- Simon Josefsson <simon@josefsson.org>  Mon, 13 Apr 2026 08:28:11 +0200

cosign (3.0.5-1~exp0) experimental; urgency=medium

  * New upstream (Closes: #1121251)
    - Fix CVE-2026-24122 (Closes: #1128652)
  * Make d/watch look for non-v2
  * Use gbp debian-branch debian/experimental
  * Refresh patches

 -- Simon Josefsson <simon@josefsson.org>  Sun, 15 Mar 2026 13:00:18 +0100

cosign (2.6.3-1) unstable; urgency=medium

  * New upstream version
    - Fixes CVE-2026-39395 (Closes: #1133005)
  * Standards-Version: 4.7.4

 -- Simon Josefsson <simon@josefsson.org>  Mon, 13 Apr 2026 06:27:47 +0200

cosign (2.6.2-1) unstable; urgency=medium

  * Run wrap-and-sort -satbk
  * Add lrc.config

 -- Simon Josefsson <simon@josefsson.org>  Wed, 18 Feb 2026 22:07:39 +0100

cosign (2.6.2-1~exp0) experimental; urgency=medium

  * New upstream version
    - Fixes CVE-2026-22703 (Closes: #1126764)
  * Use watch v5 tracking git and pinning at v2
  * Use gbp upstream-vcs-tag
  * Refresh patches
  * Add new build deps
  * Bump sigstore-go to >=1.1.4
  * Drop Priority: optional
  * Drop Rules-Requires-Root: no
  * Standards-Version: 4.7.3
  * Modernize Salsa CI
  * Drop lintian field-too-long for Static-Built-Using
  * Bump copyright years
  * Breaks gitsign<=0.13.0-3

 -- Simon Josefsson <simon@josefsson.org>  Wed, 18 Feb 2026 11:21:05 +0100

cosign (2.5.0-2) unstable; urgency=medium

  * Upload to unstable.

 -- Simon Josefsson <simon@josefsson.org>  Sat, 12 Apr 2025 08:48:04 +0200

# For older changelog entries, run 'apt-get changelog golang-github-sigstore-cosign-dev'
