flatpak-builder (1.4.9-1) unstable; urgency=medium

  * New upstream stable release

 -- Felix Geyer <fgeyer@debian.org>  Mon, 08 Jun 2026 23:32:50 +0200

flatpak-builder (1.4.8-1) unstable; urgency=high

  * New upstream security fix release
    - Fix arbitrary file read if building a Flatpak app from a
      malicious manifest or source code
      (CVE-2026-39977, GHSA-6gm9-3g7m-3965) (Closes: #1133099)
  * d/copyright: Update

 -- Simon McVittie <smcv@debian.org>  Thu, 09 Apr 2026 22:43:46 +0100

flatpak-builder (1.4.7-1) unstable; urgency=medium

  * New upstream stable release

 -- Simon McVittie <smcv@debian.org>  Tue, 28 Oct 2025 23:37:04 +0000

flatpak-builder (1.4.6-2) unstable; urgency=medium

  * d/control: Prefer libcurl4-openssl-dev, matching libostree and Flatpak

 -- Simon McVittie <smcv@debian.org>  Wed, 01 Oct 2025 11:01:18 +0100

flatpak-builder (1.4.6-1) unstable; urgency=medium

  * New upstream stable release
  * Drop patches, applied or fixed differently upstream
  * Revert separation of tests into online/offline
  * Add Suggests on git-lfs
  * Reformat packaging files using debputy
  * d/copyright: Update
  * Add a Lintian override for a non-executable script included in test data

 -- Simon McVittie <smcv@debian.org>  Tue, 30 Sep 2025 19:52:01 +0100

flatpak-builder (1.4.5-1) unstable; urgency=medium

  * New upstream stable release
  * Recommend libarchive-tools (for bsdunzip) instead of Info-Zip unzip.
    Upstream has changed the tool they use to unpack zip files in response
    to security concerns about Info-Zip unzip.
  * d/watch: Convert to v5 format
  * d/salsa-ci.yml: Use recommended recipe
  * d/p/tests-Fix-incorrect-paths-for-test-files.patch:
    Add a post-release bugfix from upstream
  * d/p/tests-Add-a-way-to-skip-the-test-involving-mirroring-scre.patch,
    d/tests: Mark an Internet-dependent test as needs-internet and flaky
  * d/copyright: Don't quote the FSF's former postal address here
  * Standards-Version: 4.7.2 (no changes required)

 -- Simon McVittie <smcv@debian.org>  Thu, 11 Sep 2025 11:15:43 +0100

flatpak-builder (1.4.4-2) unstable; urgency=medium

  [ Simon McVittie ]
  * d/upstream/metadata: Canonicalize sort order of keys
  * d/upstream/metadata: Add Security-Contact field

  [ Felix Geyer ]
  * d/control: Suggest 7zip instead of p7zip-full (Closes: #1063573)
  * Clean up unused python2 test script
  * Stop trying to run the test suite during package build
  * Add myself as uploader

 -- Felix Geyer <fgeyer@debian.org>  Mon, 03 Mar 2025 18:16:06 +0100

flatpak-builder (1.4.4-1) unstable; urgency=medium

  * New upstream stable release

 -- Simon McVittie <smcv@debian.org>  Sat, 20 Jul 2024 17:45:53 +0100

flatpak-builder (1.4.2-1) unstable; urgency=medium

  * New upstream stable release
  * Drop patches, applied upstream
  * d/copyright: Update

 -- Simon McVittie <smcv@debian.org>  Thu, 07 Mar 2024 13:42:45 +0000

flatpak-builder (1.4.1-1) unstable; urgency=medium

  * New upstream stable release
  * d/p/manifest-Don-t-emit-empty-id-in-provides-when-renaming.patch:
    Add a post-release bug fix from upstream
  * d/p/tests-Ensure-all-test-files-are-in-the-dist-tarball.patch,
    d/p/dist/Add-files-that-were-missing-from-the-dist-tarball.patch:
    Install missing test files to fix the autopkgtest

 -- Simon McVittie <smcv@debian.org>  Tue, 20 Feb 2024 10:50:18 +0000

flatpak-builder (1.4.0-1) unstable; urgency=medium

  * New upstream stable release
  * Revert "Branch for experimental"
  * Release to unstable

 -- Simon McVittie <smcv@debian.org>  Thu, 14 Dec 2023 18:11:22 +0000

flatpak-builder (1.3.5-1) experimental; urgency=medium

  * New upstream development release
  * d/copyright: Update
  * d/patches: Drop patches that were included in the new release
  * Build-depend on libxml2-utils (xmllint), for tests/test-builder.sh

 -- Simon McVittie <smcv@debian.org>  Fri, 08 Dec 2023 13:45:12 +0000

flatpak-builder (1.3.4-1) experimental; urgency=medium

  * New upstream development release
  * d/p/dist/Add-tests-tap.test.in-missing-from-Autotools-dist.patch:
    Drop patch, no longer needed
  * Depend and build-depend on appstream and appstream-compose
  * d/patches: Update to upstream commit 1.3.4-5-gc11f8590, excluding
    CI-only changes
    - d/p/builder-Fix-silent-truncation-of-32-bit-inodes.patch:
      Fix cache lookups on filesystems with 64-bit inode numbers
    - d/p/builder-module-Use-meson-setup-instead-of-meson.patch:
      Run meson as `meson setup`

 -- Simon McVittie <smcv@debian.org>  Fri, 15 Sep 2023 10:39:19 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog flatpak-builder`.
