debsig-verify (0.34) unstable; urgency=medium

  * Update for new libdpkg-dev >= 1.23.0 API changes. Closes: #1123841
  * Documentation:
    - doc: Update TODO.
  * Packaging:
    - Remove «Rules-Requires-Root: no», which is the current default.
    - Remove «Priority: optional», which is the current default.

 -- Guillem Jover <guillem@debian.org>  Mon, 22 Dec 2025 21:19:35 +0100

debsig-verify (0.33) unstable; urgency=medium

  * Build system:
    - Terminate lists in variables with «# EOL».
  * Packaging:
    - Switch to Standards-Version 4.7.2 (no changes needed).
  * Test suite:
    - Fix «sq sign» invocation with CLI version 1.0.

 -- Guillem Jover <guillem@debian.org>  Sat, 15 Mar 2025 02:57:03 +0100

debsig-verify (0.32) unstable; urgency=medium

  * Fix OpenPGP implementation array traversal.
  * Documentation:
    - Update TODO.
  * Packaging:
    - Switch to Standards-Version 4.7.1 (no changes needed).
    - Add <!nocheck> Build-Depends on gpg | gpg-from-sq to run debsig-verify.
  * Test suite:
    - Pass --root-owner-group to dpkg-deb.

 -- Guillem Jover <guillem@debian.org>  Sat, 22 Feb 2025 14:24:41 +0100

debsig-verify (0.31) unstable; urgency=medium

  * Code internals:
    - Use DS_LEV_INFO instead of a hardcoded value.
    - Swap order of ds_debug_level in boolean comparisons.
    - Change ds_printf() to return early on too low debug level.
  * Packaging:
    - Drop gnupg and gnupg-agent as alternatives to gpg and gpg-agent.
  * Test suite:
    - Generalize SOP support to include rsop, gosop and pgpainless-cli.
    - Adapt to new sq CLI 0.40.0 API.

 -- Guillem Jover <guillem@debian.org>  Sun, 22 Dec 2024 01:04:22 +0100

debsig-verify (0.30) unstable; urgency=medium

  * Add OpenPGP subkey support.
    Based on a patch by Steve McIntyre <steve@einval.com>. Closes: #1059150
  * Switch from pkg-config to pkgconf.
  * Documentation:
    - doc: Bump required C compiler to support C99.
  * Packaging:
    - Update copyright years.
  * Test suite:
    - Add new macro to set the OpenPGP key to use.
    - Switch to use sq --signer-file.

 -- Guillem Jover <guillem@debian.org>  Mon, 08 Apr 2024 04:53:04 +0200

debsig-verify (0.29) unstable; urgency=medium

  * Code internals:
    - openpgp-gpg: Free fpr if there is no match in gpg_getKeyID().
    - openpgp-gpg: Do not duplicate the returned value in gpg_getSigKeyID().
    - Rename find_command() to command_in_path() to match libdpkg.
    - Rename misc.c to debug.c.
  * Build system:
    - Use command_in_path() from libdpkg.

 -- Guillem Jover <guillem@debian.org>  Sat, 09 Sep 2023 21:21:04 +0200

debsig-verify (0.28) unstable; urgency=medium

  * Add support for zstd compressed .deb archives.
  * Packaging:
    - Update copyright years.
    - Switch to Standards-Version 4.6.2 (no changes needed).
    - Do not trim debian/changelog.

 -- Guillem Jover <guillem@debian.org>  Tue, 10 Jan 2023 23:38:18 +0100

debsig-verify (0.27) unstable; urgency=medium

  * Build system:
    - Request pkg-config static linking flags for libdpkg.
  * Packaging:
    - Switch to Standards-Version 4.6.1 (no changes needed).
    - Update lintian overrides for new syntax.

 -- Guillem Jover <guillem@debian.org>  Sat, 15 Oct 2022 11:16:46 +0200

debsig-verify (0.26) unstable; urgency=medium

  * Print the unknown option on error.
  * Fix mismatched number of arguments error.
  * openpgp-gpg: Always pass the gpg command in argv[0].
  * openpgp-gpg: Skip field separator character when parsing --with-colons
    output.
  * openpgp: Do not consider a match if one of the fingerprints has zero
    length.
  * openpgp-gpg: When matching on getKeyID match on fingerprint.
  * openpgp-gpg: Do not fallback to the match ID on fingerprint/keyID not
    found.
  * openpgp-gpg: Fix last field parsing.
  * openpgp-gpg: Switch from internal gpg --list-packets to --verify
    --status-fd. See #1001331.
  * openpgp-gpg: Unset GPG_TTY.
  * Check whether the origin ID is in the keyring if no match ID is specified.
  * openpgp: Print the pathname for the keyring used in debug mode.
  * Documentation:
    - Update TODO.
    - Refer to the main git repository as primary.
    - Use https:// for release download URLs.
    - Switch release URL from ftp.debian.org to deb.debian.org.
  * Code internals:
    - Avoid using an intermediate buffer in ds_printf().
    - Switch from fgets() to getline().
    - openpgp-gpg: Refactor get_field() out from get_colon_field().
    - Refactor keyring generation.
    - Pass a string instead of a struct match to getKeyID().
    - Rename getSigKeyID() argument from type to name.
    - Turn struct match «type» member from an int to an enum.
    - openpgp-gpg: Fix cleanup_gpg_tmpdir() subprocess description.
  * Test suite:
    - Add new test keys with non-weak algorithms.

 -- Guillem Jover <guillem@debian.org>  Tue, 04 Oct 2022 04:01:26 +0200

debsig-verify (0.25) unstable; urgency=medium

  * Update copyright years.
  * Test suite:
    - Fix function name in trap.

 -- Guillem Jover <guillem@debian.org>  Wed, 17 Nov 2021 02:35:53 +0100

# For older changelog entries, run 'apt-get changelog debsig-verify'
