flask (3.0.2-1ubuntu1.1) noble-security; urgency=medium

  * SECURITY UPDATE: cache poisoning
    - debian/patches/CVE-2026-27205.patch: session is marked as accessed
      for operations that only access the keys but not the values, such as
      `in` and `len`
    - CVE-2026-27205

 -- Shishir Subedi <shishir.subedi@canonical.com>  Mon, 16 Mar 2026 16:03:02 +0545

flask (3.0.2-1ubuntu1) noble; urgency=medium

  * Merge with Debian; remaining changes:
    - d/control: Demote python3-dotenv to Suggests; this is
      is an optional dependency not in Ubuntu main.
    - fakesync due to different orig tarball

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 13 Feb 2024 09:28:03 +0100

flask (3.0.2-1) unstable; urgency=medium

  * Team upload
  * Upload to unstable
  * New upstream version 3.0.2
  * [1ac9117] d/copyright: Update year data

 -- Carsten Schoenert <c.schoenert@t-online.de>  Sat, 10 Feb 2024 07:51:40 +0100

flask (3.0.2-0ubuntu1) noble; urgency=medium

  * New upstream release.
  * Merge with Debian; remaining changes:
    - d/control: Demote python3-dotenv to Suggests; this is
      is an optional dependency not in Ubuntu main.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 08 Feb 2024 23:46:00 +0100

flask (3.0.1-1) experimental; urgency=medium

  * Team upload
  * New upstream version 3.0.1

 -- Carsten Schoenert <c.schoenert@t-online.de>  Tue, 23 Jan 2024 19:48:13 +0100

flask (3.0.0-1ubuntu1) noble; urgency=medium

  * Merge with Debian; remaining changes:
    - d/control: Demote python3-dotenv to Suggests; this is
      is an optional dependency not in Ubuntu main.

 -- Matthias Klose <doko@ubuntu.com>  Fri, 22 Dec 2023 09:26:53 +0100

flask (3.0.0-1) experimental; urgency=medium

  * Team upload
  * [65d9c5b] d/gbp.conf: Add some basic defaults for git-buildpackage
  * [9905535] d/watch: Add compression type and improve readability
  * [c716c54] d/gbp.conf: Adjust to branch debian/experimental
  * [9f8663f] New upstream version 3.0.0
    (Closes: #901448, #1056247, #1058304)
  * [8482b3e] Rebuild patch queue drom patch-queue branch
    Added patch:
    docs-Use-intersphix-with-Debian-packages.patch
    Renamed patches:
    0001-Don-t-require-sphinxcontrib.log_cabinet-extension.patch
     -> Don-t-require-sphinxcontrib.log_cabinet-extension.patch
    0002-Make-the-documentation-build-reproducibly.patch
     -> PATCH-Make-the-documentation-build-reproducibly.patch
    remove-eticalads-in-doc.patch
     -> Remove-eticalads-in-doc.patch
    Removed patch:
    remove-using-intersphinx.patch
  * [ddc7c5e] d/control: Bump Standards-Version to 4.6.2
    No further changes needed.
  * [d010060] d/control: Update B-D as upstream has moved to flit
  * [c9f535f] d/control: Adjust related B-D and add BuildProfileSpecs
  * [9e93261] d/rules: Drop --with option in default target
  * [fc84f5e] d/rules: Improve build of Sphinx based documentation
  * [3bbfe4e] autopkgtest: Clean up test dependencies
    Remove mostly all of the previous set dependencies, we only need the
    pytest packages, all other deps need to get pulled automatically, if not
    than this is a issue in the python3-flask package.
  * [b0bd5d8] d/copyright: Update content and copyright holders
  * [b3d91e7] d/u/metadata: Small updates
  * [fe64378] d/control: Reflect GitHub project website as Homepage
  * [97d4a02] d/.salsa-ci.yml: Adding trigger file for Salsa CI
  * [11a587d] d/README.source: Adding a README file about source specifics

 -- Carsten Schoenert <c.schoenert@t-online.de>  Thu, 21 Dec 2023 07:22:23 +0100

flask (2.2.5-1) unstable; urgency=medium

  * d/watch: Switch to using github tags instead of pypi.
  * New upstream release.
  * Remove CVE-2023-30861 patch applied upstream.

 -- Thomas Goirand <zigo@debian.org>  Thu, 14 Sep 2023 11:12:36 +0200

flask (2.2.2-3) unstable; urgency=high

  * CVE-2023-30861: Flask vulnerable to possible disclosure of permanent
    session cookie due to missing Vary: Cookie header. Applied upstream patch:
    set Vary: Cookie header consistently for session (Closes: #1035670).

 -- Thomas Goirand <zigo@debian.org>  Thu, 11 May 2023 12:39:19 +0200

flask (2.2.2-2) unstable; urgency=medium

  * Uploading to unstable.

 -- Thomas Goirand <zigo@debian.org>  Wed, 30 Nov 2022 14:02:11 +0100

flask (2.2.2-1) experimental; urgency=medium

  [ Debian Janitor ]
  * Trim trailing whitespace.

  [ Thomas Goirand ]
  * Team upload.
  * New upstream release.
  * Add myself as uploader.
  * Fixed (build-)depends for this release.

 -- Thomas Goirand <zigo@debian.org>  Wed, 14 Sep 2022 10:21:40 +0200

flask (2.0.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 2.0.3
  * d/p/426a1e25b77e760b4f54bf94aee3e3617850569f.patch: Remove.
  * Bump watch version from 3 to 4
  * Bump Standards-Version to 4.6.1.

 -- Gabriela Pivetta <gpivetta99@gmail.com>  Wed, 20 Jul 2022 07:20:35 -0300

flask (2.0.1-4) unstable; urgency=medium

  * Team upload.
  * [e10f738] run upstream tests as autopkgtest

 -- Joseph Nahmias <jello@debian.org>  Tue, 19 Jul 2022 17:46:19 -0400

flask (2.0.1-3) unstable; urgency=medium

  * debian/patches/426a1e25b77e760b4f54bf94aee3e3617850569f.patch
    - fix compat with pytest 7, part of PR #4443; Closes: #1013716

 -- Sandro Tosi <morph@debian.org>  Mon, 11 Jul 2022 23:15:20 -0400

flask (2.0.1-2) unstable; urgency=medium

  * Uploading to unstable.

 -- Thomas Goirand <zigo@debian.org>  Wed, 06 Oct 2021 17:14:16 +0200

flask (2.0.1-1) experimental; urgency=medium

  * Team upload.
  * New upstream release.
  * Fixed (build-)depends for this release.
  * Refreshed patches.
  * Fixed PYBUILD_TEST_ARGS to use new pytest syntax.
  * Add python3-sphinx-tabs to build-depends, needed to build the doc.
  * Add remove-using-intersphinx.patch.
  * Add remove-eticalads-in-doc.patch.

 -- Thomas Goirand <zigo@debian.org>  Fri, 17 Sep 2021 23:14:09 +0200

flask (1.1.2-3) unstable; urgency=medium

  * Remove obsolete field Name from debian/upstream/metadata (already present in
    machine-readable debian/copyright).

 -- Debian Janitor <janitor@jelmer.uk>  Sun, 22 Aug 2021 03:28:56 +0100

flask (1.1.2-2) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.
  * Make the documentation build reproducibly (Closes: #943674).
  * Bump debhelper compat level to 13.

  [ Debian Janitor ]
  * Apply multi-arch hints.
    + python-flask-doc: Add Multi-Arch: foreign.

 -- Ondřej Nový <onovy@debian.org>  Mon, 26 Oct 2020 15:10:15 +0100

flask (1.1.2-1) unstable; urgency=medium

  * New upstream release.
  * Move DPMT into Maintainer and myself into Uploaders.
  * Removed Piotr from Maintainer/Uploaders as he requested.
  * d/copyright: Bump my copyright year.
  * d/p/0002-Fix-Python-3-8.patch: Drop applied upstream
  * Rebased other patches.
  * Add Rules-Requires-Root: no.
  * Bump Standards-Version to 4.5.0.

 -- Ondřej Nový <onovy@debian.org>  Tue, 21 Apr 2020 11:08:38 +0200

flask (1.1.1-2) unstable; urgency=medium

  * Enable sphinx-issues extension.
  * Drop Python 2 support (Closes: #936522).
  * Fix tests in Python 3.8.

 -- Ondřej Nový <onovy@debian.org>  Fri, 27 Dec 2019 17:44:34 +0100

flask (1.1.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * New upstream version
  * wrap-and-sort -ast
  * Drop patches, not needed anymore or applied upstream:
    - 0002-remove-DocVersion-related.patch
    - 0003-fix-issue-no-theme-named-flask-found.patch
    - 0004-empty-CONTRIBUTING-rst.patch
    - 0005-remove-carbon-ads.patch
  * Bump required version of python{,3}-werkzeug
  * d/rules:
    - Disable test_main_module_paths test, it doesn't work
    - Fix building for new upstream release
  * d/copyright: Bump my copyright year.
  * Use debhelper-compat instead of debian/compat.
  * Bump Standards-Version to 4.4.1.
  * Disable sphinx-issues extension until python-sphinx-issues hits unstable.
  * Bump debhelper compat level to 12.

  [ Salman Mohammadi ]
  * d/control: Change python-flask-doc to recommend python3-flask.

 -- Ondřej Nový <onovy@debian.org>  Fri, 25 Oct 2019 14:31:38 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python-flask-doc`.
