diffoscope (328) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't require python3-guestfs in the autopkgtests on 32-bit architectures.
    (Closes: #1144372)

  [ Jochen Sprickerhof ]
  * Use the XML comparators for SVG vector image files. (Closes: #1144242)

 -- Chris Lamb <lamby@debian.org>  Fri, 14 Aug 2026 11:20:05 -0700

diffoscope (327) unstable; urgency=medium

  [ Colin Watson ]
  * Handle missing openssh-client binaries in autopkgtests.

 -- Chris Lamb <lamby@debian.org>  Fri, 07 Aug 2026 08:05:12 -0700

diffoscope (326) unstable; urgency=medium

  [ Vagrant Cascadian ]
  * Add external tool reference for "pedump" to use the "mono" package on
    GNU guix.

 -- Chris Lamb <lamby@debian.org>  Thu, 30 Jul 2026 11:30:21 -0700

diffoscope (325) unstable; urgency=medium

  [ Chris Lamb ]
  * Fix tests to work with zipdetails 4.0008. (Closes: #1141359)
  * Downgrade debhelper compatibility level to 13 for now.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 17 Jul 2026 10:43:01 -0700

diffoscope (324) unstable; urgency=medium

  [ Paul Spooren ]
  * Allow trailing garbage in Gzip files.

  [ Chris Lamb ]
  * Bump debhelper compatibility level to 14.

 -- Chris Lamb <lamby@debian.org>  Fri, 10 Jul 2026 08:34:33 -0700

diffoscope (323) unstable; urgency=medium

  [ Chris Lamb ]
  * Debian adds an extra "Flags:" line in the output of ocamlobjinfo via a
    patch, so adjust how we test OCaml to ensure cross-distribution
    compatibility. (Closes: reproducible-builds/diffoscope#430)
  * Update copyright years.

  [ Michael Daniels ]
  * Fix tests when using zipdetails version >= 4.006.

 -- Chris Lamb <lamby@debian.org>  Tue, 30 Jun 2026 10:10:24 -0700

diffoscope (322) unstable; urgency=medium

  [ Zbigniew Jędrzejewski-Szmek ]
  * Add a local version of the (deprecated) os.path.commonprefix method.

 -- Chris Lamb <lamby@debian.org>  Fri, 26 Jun 2026 08:54:59 -0700

diffoscope (321) unstable; urgency=medium

  [ Chris Lamb ]
  * Fix compatibility with Ocaml 5.4.1.

 -- Chris Lamb <lamby@debian.org>  Fri, 19 Jun 2026 10:54:20 -0700

diffoscope (320) unstable; urgency=medium

  [ Chris Lamb ]
  * Support androguard 4 and previous versions. Thanks, linsui!
    (Closes: #1140016)
  * Use --long-form arguments when calling apktool in order to support apktool
    version 3. Thanks again to linsui. (Closes: #1140015)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 19 Jun 2026 08:28:49 -0700

diffoscope (319) unstable; urgency=medium

  [ Jochen Sprickerhof ]
  * Improve header detection for Sphinx documentation projects.

 -- Chris Lamb <lamby@debian.org>  Fri, 12 Jun 2026 07:52:47 -0700

diffoscope (318) unstable; urgency=medium

  [ Chris Lamb ]
  * Upload to test PyPI integration.
  * Bump Standards-Version to 4.7.4.

  [ Manuel Jacob ]
  * Remove a misleading comment.

 -- Chris Lamb <lamby@debian.org>  Fri, 01 May 2026 13:10:41 -0700

diffoscope (317) unstable; urgency=medium

  [ Chris Lamb ]
  * Limit python3-guestfs Build-Dependency to !i386. (Closes: #1132974)
  * Try to fix PYPI_ID_TOKEN debugging.

  [ Holger Levsen ]
  * Add ppc64el to the list of architectures for python3-guestfs.

 -- Chris Lamb <lamby@debian.org>  Fri, 10 Apr 2026 11:38:56 -0400

diffoscope (316) unstable; urgency=medium

  [ Jelle van der Waa ]
  * Fix compatibility with LLVM version 22.

  [ Chris Lamb ]
  * Add some debugging info for PyPI debugging.

 -- Chris Lamb <lamby@debian.org>  Thu, 02 Apr 2026 10:31:30 -0700

diffoscope (315) unstable; urgency=medium

  [ Jelle van der Waa ]
  * Adjust PGP file detection regex.

 -- Chris Lamb <lamby@debian.org>  Fri, 20 Mar 2026 10:44:59 -0700

diffoscope (314) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't run "test_code_is_black_clean" test in autopkgtests.
    (Closes: #1130402)

  [ Michael R. Crusoe ]
  * Reformat using Black 26.1.0. (Closes: #1130073)

 -- Chris Lamb <lamby@debian.org>  Fri, 13 Mar 2026 08:46:58 -0700

diffoscope (313) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't fail the entire pipeline if deploying to PyPI automatically fails.

  [ Vagrant Cascadian ]
  * Update external tool reference for 7z on guix.

 -- Chris Lamb <lamby@debian.org>  Fri, 20 Feb 2026 08:53:36 -0800

diffoscope (312) unstable; urgency=medium

  [ Jelle van der Waa ]
  * Adjust u-boot-tools/fit diff to match new lines.

 -- Chris Lamb <lamby@debian.org>  Fri, 06 Feb 2026 08:53:34 -0800

diffoscope (311) unstable; urgency=medium

  [ Chris Lamb ]
  * Fix test compatibility with u-boot-tools 2026-01. Thanks, Jelle!
  * Bump Standards-Version to 4.7.3.
  * Drop implied "Priority: optional" from debian/control.
  * Also drop implied "Rules-Requires-Root: no" entry in debian/control.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 23 Jan 2026 09:38:10 -0800

diffoscope (310) unstable; urgency=medium

  [ Chris Lamb ]
  * Reference the Debian 'ocaml' package instead of 'ocaml-nox'.
    (Closes: #1125094)

 -- Chris Lamb <lamby@debian.org>  Fri, 09 Jan 2026 12:04:10 -0800

diffoscope (309) unstable; urgency=medium

  [ Chris Lamb ]
  * Attempt to fix automatic deployment to PyPi by explictly installing
    setuptools.

 -- Chris Lamb <lamby@debian.org>  Fri, 14 Nov 2025 09:49:55 -0800

diffoscope (308) unstable; urgency=medium

  [ Chris Lamb ]
  * Attempt to fix automatic deployment to PyPi:
    - Separate out deploy-tag and deploy-pypi into different stages, and base
      the latter on debian:unstable.
    - Call apt-get update prior to attempting installing twine.

 -- Chris Lamb <lamby@debian.org>  Fri, 07 Nov 2025 10:09:32 -0800

diffoscope (307) unstable; urgency=medium

  * Attempt to fix compatability with LLVM 21.
    (Closes: reproducible-builds/diffoscope#419)
  * Update copyright years.
  * Update CI to try and deploy to PyPI upon tagging a release.

 -- Chris Lamb <lamby@debian.org>  Fri, 31 Oct 2025 10:51:59 -0700

diffoscope (306) unstable; urgency=medium

  [ Zbigniew Jędrzejewski-Szmek ]
  * Fix compatibility with RPM 6.
  * Use regular 'open' calls instead of the deprecated 'codecs.open'.
  * Accept additional 'v' when calling 'fdtump --version'.

 -- Chris Lamb <lamby@debian.org>  Sun, 07 Sep 2025 15:31:24 -0700

diffoscope (305) unstable; urgency=medium

  [ Chris Lamb ]
  * Upload to unstable/sid after the release of trixie.

 -- Chris Lamb <lamby@debian.org>  Fri, 22 Aug 2025 10:40:18 -0700

diffoscope (304) experimental; urgency=medium

  [ Chris Lamb ]
  * Do not run jsondiff on files over 100KiB as the algorithm runs in O(n^2)
    time. (Closes: reproducible-builds/diffoscope#414)
  * Fix test after the upload of systemd-ukify 258~rc3 (vs. 258~rc2).
  * Move from a mono-utils dependency to versioned "mono-devel | mono-utils"
    dependency, taking care to maintain the [!riscv64] architecture
    restriction. (Closes: #1111742)
  * Use sed -ne over awk -F= to to avoid mangling dependency lines containing
    equals signs (=), for example version restrictions.
  * Use sed backreferences when generating debian/tests/control to avoid DRY
    violations.
  * Update copyright years.

  [ Martin Joerg ]
  * Avoid a crash in the HTML presenter when page limit is None.

 -- Chris Lamb <lamby@debian.org>  Fri, 22 Aug 2025 08:13:11 -0700

diffoscope (303) experimental; urgency=medium

  [ Chris Lamb ]
  * Don't check for PyPDF version 3 specifically, check for >= 3. Thanks,
    Vagrant, for the patch. (Closes: reproducible-builds/diffoscope#413)
  * Ensure that Java class files are named .class on the filesystem before
    passing them to javap(1).
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 01 Aug 2025 11:50:45 -0700

diffoscope (302) experimental; urgency=medium

  [ Chris Lamb ]
  * Mask stderr from the extract-vmlinux script.
  * Make it much more explicit that we return 'success' from the
    extract-vmlinux script instead of just falling through to the bottom of the
    script.
  * Use Difference.from_operation in an attempt to pipeline the output of
    extract-vmlinux, potentially avoiding it all residing in memory. This is an
    attempt to prevent out of memory issues on try.diffoscope.org.

  [ Siva Mahadevan ]
  * Use --print-armap long option with nm in the "ar" comparator for wider
    compatibility.

 -- Chris Lamb <lamby@debian.org>  Fri, 25 Jul 2025 09:44:26 -0700

diffoscope (301) experimental; urgency=medium

  [ Chris Lamb ]
  * Avoid spurious differences in h5dump output caused by exposure of absolute
    internal extraction paths. (Closes: #1108690)
  * Use our_check_output in the ODT comparator.
  * Memoize a number of calls to --version. Thanks, Jade! (Closes: #412)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 11 Jul 2025 08:52:31 -0700

diffoscope (300) experimental; urgency=medium

  [ "Alex" ]
  * Fix a regression and add a test so that diffoscope picks up differences
    in metadata for identical files again. (Closes: reproducible-builds/diffoscope#411)

 -- Chris Lamb <lamby@debian.org>  Fri, 27 Jun 2025 10:29:56 -0700

diffoscope (299) experimental; urgency=medium

  [ Chris Lamb ]
  * Add python3-defusedxml to the Build-Depends in order to include it in the
    Docker image. (Closes: #407)

 -- Chris Lamb <lamby@debian.org>  Fri, 20 Jun 2025 09:08:17 -0700

diffoscope (298) experimental; urgency=medium

  [ Chris Lamb ]
  * Handle RPM's HEADERSIGNATURES and HEADERIMMUTABLE specially to avoid
    unncessarily large diffs. Based almost entirely on code by Daniel Duan.
    (Closes: reproducible-builds/diffoscope#410)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 13 Jun 2025 09:49:56 -0700

diffoscope (297) unstable; urgency=medium

  [ Will Hollywood ]
  * Add a LZMA comparator and tests.

 -- Chris Lamb <lamby@debian.org>  Fri, 30 May 2025 09:34:34 -0700

diffoscope (296) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't rely on zipdetails' --walk functionality to be available; only add
    that argument after testing for a new enough versions.
    (Closes: reproducible-builds/diffoscope#408)
  * Disable and then re-enable failing on stable-bpo.
  * Update copyright years.

  [ Omair Majid ]
  * Add NuGet package support.

 -- Chris Lamb <lamby@debian.org>  Fri, 16 May 2025 08:41:37 -0700

diffoscope (295) unstable; urgency=medium

  [ Chris Lamb ]
  * Use --walk over the potentially dangerous --scan argument of zipdetails(1).
    (Closes: reproducible-builds/diffoscope#406)

 -- Chris Lamb <lamby@debian.org>  Fri, 09 May 2025 09:13:39 -0700

diffoscope (294) unstable; urgency=medium

  [ Chris Lamb ]
  * Correct longstanding issue where many ">"-based version tests used in
    conditional fixtures were broken due to the lack of a __gt__ method.
    Thanks, Colin Watson! (Closes: #1102658)
  * Address a long-hidden issue in the test_versions testsuite where we weren't
    actually testing ">" as it was masked by the tests for equality in the
    testsuite.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 11 Apr 2025 12:22:46 -0700

diffoscope (293) unstable; urgency=medium

  [ Chris Lamb ]
  * Correct import masking issue.

 -- Chris Lamb <lamby@debian.org>  Sat, 29 Mar 2025 18:05:20 +0000

diffoscope (292) unstable; urgency=medium

  [ Ivan Trubach ]
  * Ignore st_size entry for directories to avoid spurious diffs as this value
    is essentially filesystem dependent.

  [ Chris Lamb ]
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Sat, 29 Mar 2025 17:19:49 +0000

diffoscope (291) unstable; urgency=medium

  [ Chris Lamb ]
  * Make two required adjustments for the new version of the src:file package:
    - file(1) version 5.46 now emits "XHTML document" for .xhtml files, such as
      those found nested within our .epub tests. Therefore, match this string
      when detecting XML files. This was causing an FTBFS due to inconsistent
      indentation in diffoscope's output.
    - Require the new, upcoming, version of file(1) for a quine-related
      testcase after adjusting the expected output. Previous versions of
      file(1) had a duplicated "last modified, last modified" string for some
      Zip archives that has now been removed.
  * Add a missing subprocess import.
  * Bump Standards-Version to 4.7.2.

 -- Chris Lamb <lamby@debian.org>  Fri, 21 Mar 2025 14:11:47 +0000

diffoscope (290) unstable; urgency=medium

  [ Chris Lamb ]
  * Also consider .aar files as APK files for the sake of not falling back to a
    binary diff. (Closes: #1099632)
  * Ensure all calls to out_check_output in the ELF comparator have the
    potential CalledProcessError exception caught. (Re: #398)
  * Ensure a potential CalledProcessError is caught in the OpenSSL comparator
    as well.
  * Update copyright years.

  [ Eli Schwartz ]
  * Drop deprecated and no longer functional "setup.py test" command.

 -- Chris Lamb <lamby@debian.org>  Fri, 21 Mar 2025 09:06:58 +0000

diffoscope (289) unstable; urgency=medium

  [ Chris Lamb ]
  * Catch CalledProcessError when calling html2text.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 21 Feb 2025 12:39:56 +0000

diffoscope (288) unstable; urgency=medium

  [ Chris Lamb ]
  * Add 'asar' to DIFFOSCOPE_FAIL_TESTS_ON_MISSING_TOOLS. (Closes: #1095057)
  * Update minimal 'black' version.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 07 Feb 2025 10:11:11 +0000

diffoscope (287) unstable; urgency=medium

  [ Chris Lamb ]
  * Drop an unused subprocess import.
  * Update copyright years.

  [ fridtjof ]
  * Add ASAR comparator.

 -- Chris Lamb <lamby@debian.org>  Fri, 31 Jan 2025 11:22:37 +0000

diffoscope (286) unstable; urgency=medium

  [ Chris Lamb ]
  * Bug fixes:
    - When passing files on the command line, don't call specialize(..) before
      we've checked that the files are identical. In the worst case, this was
      resulting in spinning up binwalk and extracting two entire filesystem
      images merely to confirm that they were indeed filesystem images..
      before simply concluding that they were identical anyway.
    - Do not exit with a traceback if paths are inaccessible, either directly,
      via symbolic links or within a directory. (Closes: #1065498)
    - Correctly identify changes to only the line-endings of files; don't mark
      them as "Ordering differences only".
    - Use the "surrogateescape" mechanism of str.{decode,encode} to avoid a
      UnicodeDecodeError and crash when decoding zipinfo output that is not
      valid UTF-8. (Closes: #1093484)
  * Testsuite changes:
    - Don't mangle newlines when opening test fixtures; we want them untouched.
    - Move to assert_diff in test_text.py.
  * Misc:
    - Remove unnecessary return value from check_for_ordering_differences in
      the Difference class.
    - Drop an unused function in iso9600.py
    - Inline a call/check of Config().force_details; no need for an additional
      variable.

 -- Chris Lamb <lamby@debian.org>  Fri, 24 Jan 2025 12:07:52 +0000

diffoscope (285) unstable; urgency=medium

  [ Chris Lamb ]
  * Validate --css command-line argument. Thanks to Daniel Schmidt @ SRLabs for
    the report. (Closes: #396)
  * Prevent XML entity expansion attacks through vulnerable versions of
    pyexpat. Thanks to Florian Wilkens @ SRLabs for the report. (Closes: #397)
  * Print a warning if we have disabled XML comparisons due to a potentially
    vulnerable version of pyexpat.
  * Remove (unused) logging facility from a few comparators.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 17 Jan 2025 09:39:49 +0000

diffoscope (284) unstable; urgency=medium

  [ Chris Lamb ]
  * Simplify tests_quines.py::test_{differences,differences_deb} to use
    assert_diff and not mangle the expected test output.
  * Update some tests to support file(1) version 5.46.
    (Closes: reproducible-builds/diffoscope#395)

 -- Chris Lamb <lamby@debian.org>  Fri, 06 Dec 2024 10:37:15 +0000

diffoscope (283) unstable; urgency=medium

  [ Martin Abente Lahaye ]
  * Fix crash when objdump is missing when checking .EFI files.

 -- Chris Lamb <lamby@debian.org>  Fri, 08 Nov 2024 12:06:11 -0800

diffoscope (282) unstable; urgency=medium

  [ Chris Lamb ]
  * Ignore errors when listing .ar archives. (Closes: #1085257)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 25 Oct 2024 10:16:04 -0700

diffoscope (281) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't try and test with systemd-ukify within Debian stable.

  [ Jelle van der Waa ]
  * Add support for UKI files.

 -- Chris Lamb <lamby@debian.org>  Fri, 18 Oct 2024 10:09:08 -0700

diffoscope (280) unstable; urgency=medium

  [ Chris Lamb ]
  * Drop Depends on deprecated python3-pkg-resources. (Closes: #1083362)

 -- Chris Lamb <lamby@debian.org>  Fri, 11 Oct 2024 08:07:17 -0700

diffoscope (279) unstable; urgency=medium

  [ Chris Lamb ]
  * Drop removal of calculated basename from readelf output.
    (Closes: reproducible-builds/diffoscope#394)

 -- Chris Lamb <lamby@debian.org>  Mon, 07 Oct 2024 12:26:08 -0700

diffoscope (278) unstable; urgency=medium

  [ Chris Lamb ]
  * Temporarily remove procyon-decompiler from Build-Depends as it was removed
    from testing (#1057532). (Closes: #1082636)
  * Add a helpful contextual message to the output if comparing Debian .orig
    tarballs within .dsc files without the ability to "fuzzy-match" away the
    leading directory. (Closes: reproducible-builds/diffoscope#386)
  * Correctly invert "X% similar" value and do not emit "100% similar".
    (Closes: reproducible-builds/diffoscope#391)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 27 Sep 2024 08:08:56 -0700

diffoscope (277) unstable; urgency=medium

  [ Sergei Trofimovich ]
  * Don't crash when attempting to hashing symlinks with targets that point to
    a directory.

 -- Chris Lamb <lamby@debian.org>  Fri, 30 Aug 2024 09:51:59 +0100

diffoscope (276) unstable; urgency=medium

  [ Chris Lamb ]
  * Also catch RuntimeError when importing PyPDF so that PyPDF or, crucially,
    its transitive dependencies do not cause diffoscope to traceback at runtime
    and build time. (Closes: #1078944, reproducible-builds/diffoscope#389)
  * Factor out a method for stripping ANSI escapes.
  * Strip ANSI escapes from the output of Procyon. Thanks, Aman Sharma!
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Sun, 18 Aug 2024 18:41:14 +0100

diffoscope (275) unstable; urgency=medium

  [ Chris Lamb ]
  * Update the test_zip.py text fixtures and definitions to support new changes
    to IO::Compress. (Closes: #1078050)
  * Do not call marshal.loads(...) of precompiled Python bytecode as it is
    inherently unsafe. Replace, at least for now, with a brief summary of the
    code section of .pyc files. (Re: reproducible-builds/diffoscope#371)
  * Don't bother to check the Python version number in test_python.py: the
    fixture for this test is deterministic/fixed.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 16 Aug 2024 11:07:34 +0100

diffoscope (274) unstable; urgency=medium

  [ Chris Lamb ]
  * Add support for IO::Compress::Zip >= 2.212. (Closes: #1078050)
  * Don't include debug output when calling dumppdf(1).
  * Append output from dumppdf(1) in more cases.
    (Closes: reproducible-builds/diffoscope#387)
  * Update copyright years.

  [ Mattia Rizzolo ]
  * Update the available architectures for test dependencies.

 -- Chris Lamb <lamby@debian.org>  Fri, 09 Aug 2024 12:52:36 +0100

diffoscope (273) unstable; urgency=medium

  [ Chris Lamb ]
  * Factor out version detection in test_jpeg_image. (Re:
    reproducible-builds/diffoscope#384)
  * Ensure that 'convert' is from Imagemagick 6.x; we will need to update a
    few things with IM7. (Closes: reproducible-builds/diffoscope#384)
  * Correct import of identify_version after refactoring change in 037bdcbb0.

  [ Mattia Rizzolo ]
  * tests:
    + Add OpenSSH key test with a ed25519 key.
    + Skip the OpenSSH test with DSA key if openssh is >> 9.7
    + Support ffmpeg >= 7 that adds some extra context to the diff
  * Do not ignore testing in gitlab-ci.
  * debian:
    + Temporarily remove aapt, androguard and dexdump from the build/test
      dependencies as they are not available in testin/trixie.  Closes: #1070416
    + Bump Standards-Version to 4.7.0, no changes needed.
    + Adjust options to make sure not to pack the python s-dist directory
      into the debian source package.
    + Adjust the lintian overrides.


 -- Mattia Rizzolo <mattia@debian.org>  Wed, 31 Jul 2024 15:31:22 +0900

diffoscope (272) unstable; urgency=medium

  [ Chris Lamb]
  * Move away from using DSA OpenSSH keys in tests; support has been removed
    in OpenSSH 9.8p1. (Closes: reproducible-builds/diffoscope#382)
  * Move to assert_diff helper in test_openssh_pub_key.py
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 05 Jul 2024 07:16:14 -0700

diffoscope (271) unstable; urgency=medium

  [ Chris Lamb]
  * Drop Build-Depends on liblz4-tool. Thanks, Chris Peterson.
    (Closes: #1072575)
  * Update tests to support zipdetails version 4.004 shipped with Perl 5.40.
    (Closes: reproducible-builds/diffoscope#377)

 -- Chris Lamb <lamby@debian.org>  Fri, 07 Jun 2024 09:33:33 +0100

diffoscope (270) unstable; urgency=medium

  [ Chris Lamb ]
  * No-change release due to broken version 269 tarballs.

 -- Chris Lamb <lamby@debian.org>  Tue, 04 Jun 2024 09:16:41 +0100

diffoscope (269) unstable; urgency=medium

  [ Chris Lamb ]
  * Allow Debian testing continuous integration builds to fail right now.

  [ Sergei Trofimovich ]
  * Amend 7zip version test for older versions that include the "[64]" string.
    (Closes: reproducible-builds/diffoscope#376)

 -- Chris Lamb <lamby@debian.org>  Fri, 31 May 2024 09:10:35 +0100

diffoscope (268) unstable; urgency=medium

  [ Chris Lamb ]
  * Drop apktool from Build-Depends; we can still test our APK code
    via autopkgtests. (Closes: #1071410)
  * Fix tests for 7zip version 24.05.
  * Add a versioned dependency for at least version 5.4.5 for the xz
    tests; they fail under (at least xz 5.2.8).
    (Closes: reproducible-builds/diffoscope#374)

  [ Vagrant Cascadian ]
  * Relax Chris' versioned xz test dependency (5.4.5) to also allow
    version 5.4.1.

 -- Chris Lamb <lamby@debian.org>  Fri, 24 May 2024 08:29:57 +0100

diffoscope (267) unstable; urgency=medium

  [ Chris Lamb ]
  * Include "xz --verbose --verbose" (ie. double --verbose) output, not just
    the single --verbose. (Closes: #1069329)
  * Only include "xz --list" output if the xz has no other differences.

 -- Chris Lamb <lamby@debian.org>  Fri, 17 May 2024 08:37:23 +0100

diffoscope (266) unstable; urgency=medium

  [ Chris Lamb ]
  * Use "xz --list" to supplement the output when comparing .xz archives;
    essential when some underlying metadata differs. (Closes: #1069329)
  * Actually append the xz --list after the container differences, as it
    simplifies tests and the output.
  * Add 7zip to <!nocheck> Build-Depends in debian/control.
  * Update copyright years.

  [ James Addison ]
  * Maintain an in-header boolean state to determine whether to drop
    from-file/to-file lines. This fixes an issue where HTML differences were
    being inadvertendly neglected. (Closes: reproducible-builds/diffoscope#372)

 -- Chris Lamb <lamby@debian.org>  Fri, 10 May 2024 13:49:03 +0100

diffoscope (265) unstable; urgency=medium

  [ Chris Lamb ]
  * Ensure that tests with ">=" version constraints actually print the
    corresponding tool name. (Closes: reproducible-builds/diffoscope#370)
  * Prevent odt2txt tests from always being skipped due to an impossibly new
    version requirement. (Closes: reproducible-builds/diffoscope#369)
  * Avoid nested parens-in-parens when printing "skipping…" messages
    in the testsuite.

 -- Chris Lamb <lamby@debian.org>  Fri, 19 Apr 2024 10:15:50 +0100

diffoscope (264) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't crash on invalid zipfiles, even if we encounter 'badness'
    halfway through the file. (Re: #1068705)

  [ FC (Fay) Stegerman ]
  * Fix a crash when there are (invalid) duplicate entries in .zip files.
    (Closes: #1068705)
  * Add note when there are duplicate entries in ZIP files.
    (Closes: reproducible-builds/diffoscope!140)

  [ Vagrant Cascadian ]
  * Add an external tool reference for GNU Guix for zipdetails.

 -- Chris Lamb <lamby@debian.org>  Fri, 12 Apr 2024 09:38:55 +0100

diffoscope (263) unstable; urgency=medium

  [ Chris Lamb ]
  * Add support for the zipdetails(1) tool included in the Perl distribution.
    Thanks to Larry Doolittle et al. for the pointer to this tool.
  * Don't use parenthesis within test "skipping…" messages; PyTest adds its own
    parenthesis, so we were ending up with double nested parens.
  * Fix the .epub tests after supporting zipdetails(1).
  * Update copyright years and debian/tests/control.

  [ FC (Fay) Stegerman ]
  * Fix MozillaZipContainer's monkeypatch after Python's zipfile module changed
    to detect potentially insecure overlapping entries within .zip files.
    (Closes: reproducible-builds/diffoscope#362)

 -- Chris Lamb <lamby@debian.org>  Fri, 05 Apr 2024 12:21:10 +0100

diffoscope (262) unstable; urgency=medium

  [ Chris Lamb ]
  * Factor out Python version checking in test_zip.py. (Re: #362)
  * Also skip some zip tests under 3.10.14 as well; a potential regression may
    have been backported to the 3.10.x series. The underlying cause is still to
    be investigated. (Re: #362)

 -- Chris Lamb <lamby@debian.org>  Fri, 29 Mar 2024 09:43:00 +0000

diffoscope (261) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't crash if we encounter an .rdb file without an equivalent .rdx file.
    (Closes: #1066991)
  * In addition, don't identify Redis database dumps (etc.) as GNU R database
    files based simply on their filename. (Re: #1066991)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 22 Mar 2024 09:42:15 +0000

diffoscope (260) unstable; urgency=medium

  [ Chris Lamb ]
  * Actually test 7z support in the test_7z set of tests, not the lz4
    functionality. (Closes: reproducible-builds/diffoscope#359)
  * In addition, correctly check for the 7z binary being available
    (and not lz4) when testing 7z.
  * Prevent a traceback when comparing a contentful .pyc file with an
    empty one. (Re: Debian:#1064973)

 -- Chris Lamb <lamby@debian.org>  Fri, 08 Mar 2024 11:07:49 +0000

diffoscope (259) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't error-out with a traceback if we encounter "struct.unpack"-related
    errors when parsing .pyc files. (Closes: #1064973)
  * Fix compatibility with PyTest 8.0. (Closes: reproducible-builds/diffoscope#365)
  * Don't try and compare rdb_expected_diff on non-GNU systems as %p formatting
    can vary. (Re: reproducible-builds/diffoscope#364)

 -- Chris Lamb <lamby@debian.org>  Fri, 01 Mar 2024 09:34:23 +0000

diffoscope (258) unstable; urgency=medium

  [ Chris Lamb ]
  * Use the 7zip package (over p7zip-full) after package transition.
    (Closes: #1063559)
  * Update debian/tests/control.

  [ Vagrant Cascadian ]
  * Fix a typo in the package name field (!) within debian/changelog.

 -- Chris Lamb <lamby@debian.org>  Fri, 23 Feb 2024 11:31:52 +0000

diffoscope (257) unstable; urgency=medium

  [ James Addison ]
  * Parse the header and hunksize of diffs strictly before parsing the context
    below. (Closes: reproducible-builds/diffoscope#363)
  * Reformat code to comply with the latest version of Black (24.1.1).

  [ Chris Lamb ]
  * Expand the previous changelog entry to include the CVE number that was
    subsequently assigned.
  * Bump the miniumum Black requirement to run the "Black clean" test and make
    test_zip.py Black clean.

 -- Chris Lamb <lamby@debian.org>  Mon, 12 Feb 2024 10:08:35 -0800

diffoscope (256) unstable; urgency=high

  * CVE-2024-25711: Use a determistic name when extracting content from GPG
    artifacts instead of trusting the value of gpg's --use-embedded-filenames.

    This prevents a potential information disclosure vulnerability that could
    have been exploited by providing a specially-crafted GPG file with an
    embedded filename of, say, "../../.ssh/id_rsa".

    Many thanks to Daniel Kahn Gillmor <dkg@debian.org> for reporting this
    issue and providing feedback.

    (Closes: reproducible-builds/diffoscope#361)

  * Temporarily fix support for Python 3.11.8 re. a potential regression
    with the handling of ZIP files. (See reproducible-builds/diffoscope#362)

 -- Chris Lamb <lamby@debian.org>  Fri, 09 Feb 2024 12:22:37 -0800

diffoscope (255) unstable; urgency=medium

  [ Vekhir ]
  * Add/fix compatibility for Python progressbar 2.5 & 3.0 etc.

  [ Chris Lamb ]
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 26 Jan 2024 08:44:05 -0800

diffoscope (254) unstable; urgency=medium

  [ Chris Lamb ]
  * Reflow some code according to black.

  [ Seth Michael Larson ]
  * Add support for comparing the 'eXtensible ARchive' (.XAR/.PKG) file format.

  [ Vagrant Cascadian ]
  * Add external tool on GNU Guix for 7z.

 -- Chris Lamb <lamby@debian.org>  Fri, 19 Jan 2024 09:32:28 -0800

diffoscope (253) unstable; urgency=medium

  * Improve DOS/MBR extraction by adding support for 7z.
    (Closes: reproducible-builds/diffoscope#333)
  * Process objdump symbol comment filter inputs as the Python "bytes" type
    (and not str). (Closes: reproducible-builds/diffoscope#358)
  * Add a missing RequiredToolNotFound import.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 08 Dec 2023 12:25:12 +0000

diffoscope (252) unstable; urgency=medium

  * As UI/UX improvement, try and avoid printing an extended traceback if
    diffoscope runs out of memory. This may not always be possible to detect.
  * Mark diffoscope as stable in setup.py (for PyPI.org). Whatever diffoscope
    is, at least, not "alpha" anymore.

 -- Chris Lamb <lamby@debian.org>  Fri, 17 Nov 2023 08:18:10 +0000

diffoscope (251) unstable; urgency=medium

  * If the equivalent of `file -i` returns text/plain, fallback to comparing
    this file as a text file. This especially helps when file(1) miscategorises
    text files as some esoteric type. (Closes: Debian:#1053668)
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 13 Oct 2023 08:59:12 +0100

diffoscope (250) unstable; urgency=medium

  [ Chris Lamb ]
  * Fix compatibility with file 5.45. (Closes: reproducible-builds/diffoscope#351)

  [ Vagrant Cascadian ]
  * Add external tool references for GNU Guix (for html2text and ttx).

 -- Chris Lamb <lamby@debian.org>  Fri, 08 Sep 2023 12:10:31 -0700

diffoscope (249) unstable; urgency=medium

  [ FC Stegerman ]
  * Add specialize_as() method, and use it to speed up .smali comparison in
    APKs. (Closes: reproducible-builds/diffoscope!108)

  [ Chris Lamb ]
  * Add documentation for the new specialize_as, and expand the documentation
    of `specialize` too. (Re: reproducible-builds/diffoscope!108)
  * Update copyright years.

  [ Felix Yan ]
  * Correct typos in diffoscope/presenters/utils.py.

 -- Chris Lamb <lamby@debian.org>  Fri, 01 Sep 2023 10:41:51 -0700

diffoscope (248) unstable; urgency=medium

  [ Greg Chabala ]
  * Merge Docker "RUN" commands into single layer.

 -- Chris Lamb <lamby@debian.org>  Fri, 25 Aug 2023 08:20:33 -0700

diffoscope (247) unstable; urgency=medium

  [ Chris Lamb ]
  * Fix compataibility with file(1) version 5.45.
  * Use assert_diff in test_uimage and test_cpio.

  [ Roland Clobus ]
  * xb-tool has moved in Debian bookworm.

 -- Chris Lamb <lamby@debian.org>  Fri, 04 Aug 2023 09:37:54 +0100

diffoscope (246) unstable; urgency=medium

  [ Gianfranco Costamagna ]
  * Add support for LLVM 16.

 -- Chris Lamb <lamby@debian.org>  Fri, 28 Jul 2023 08:57:05 +0100

diffoscope (245) unstable; urgency=medium

  [ Chris Lamb ]
  * Don't include file size in image metadata; it is, at best, distracting and
    it is already in the directory metadata.
  * Move to using assert_diff in ICO and JPEG tests.
  * Update copyright years.

 -- Chris Lamb <lamby@debian.org>  Fri, 21 Jul 2023 08:57:41 +0100

diffoscope (244) unstable; urgency=medium

  [ Chris Lamb ]
  * Address compatibility with python-libarchive-c version 5.
    (Closes: reproducible-builds/diffoscope#344)
  * Testsuite changes:
    - Mark that test_dex::test_javap_14_differences requires procyon.
    - Fix "test skipped" textual reason generation in the case of a required
      version being outside of the required range.
    - Temporarily mark some Android-related as XFAIL due to Debian bugs
      #1040941 and #1040916.

 -- Chris Lamb <lamby@debian.org>  Fri, 14 Jul 2023 13:07:47 +0100

diffoscope (243) unstable; urgency=medium

  [ Chris Lamb ]
  * Drop Jenkins build reference in README.rst.

  [ Ed Maste ]
  * Update FreeBSD package names

  [ Mattia Rizzolo ]
  * Improve the documentation on to produce that binary blob that in the arsc
    comparator.

 -- Chris Lamb <lamby@debian.org>  Fri, 23 Jun 2023 17:11:25 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog diffoscope-minimal`.
