golang-github-lucas-clemente-quic-go (0.59.0-2) unstable; urgency=medium

  * Team upload.
  * Fix error in d/rules which prevented special handling of Go 1.24

 -- Dr. Tobias Quathamer <toddy@debian.org>  Tue, 03 Mar 2026 18:09:49 +0100

golang-github-lucas-clemente-quic-go (0.59.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 0.59.0
    - Refresh patch
    - New patch: Disable testing of postquantum handshake.
      The tests currently fail due to a wrong CurveID, specifying
      a TLS identifier for a key exchange mechanism.
      The postQuantum tests expect X25519MLKEM768, but the used
      curve is X25519.
    - New patch: Disable TestHandshakePacketBuffering for now
    - Remove unneeded build dependencies
    - Use versioned Build-Depends on golang-github-quic-go-qpack-dev
    - Use actual package name of golang-github-marten-seemann-qpack-dev
    - Fixes CVE-2025-64702 (Closes: #1122814)
      Versions 0.56.0 and below are vulnerable to excessive memory
      allocation through quic-go's HTTP/3 client and server
      implementations by sending a QPACK-encoded HEADERS frame that
      decodes into a large header field section (many unique header
      names and/or large values). The implementation builds an
      http.Header (used on the http.Request and http.Response,
      respectively), while only enforcing limits on the size of the
      (QPACK-compressed) HEADERS frame, but not on the decoded header,
      leading to memory exhaustion.
      This issue is fixed in version 0.57.0.
  * Only use GOEXPERIMENT=synctest on Go 1.24 (Closes: #1129117)
  * Remove Priority: optional from d/control
  * Remove Rules-Requires-Root from d/control
  * Update Standards-Version to 4.7.3

 -- Dr. Tobias Quathamer <toddy@debian.org>  Mon, 02 Mar 2026 22:11:11 +0100

golang-github-lucas-clemente-quic-go (0.55.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.55.0
  * Enable synctest experiment package
  * Set GODEBUG=asynctimerchan=0 explicitly for synctest
  * Skip flaky TestConnectionCloseRetransmission test

 -- Eric Dorland <eric@debian.org>  Wed, 05 Nov 2025 17:55:15 -0500

golang-github-lucas-clemente-quic-go (0.54.1-1) unstable; urgency=medium

  * New upstream version 0.54.1

 -- Eric Dorland <eric@debian.org>  Fri, 26 Sep 2025 15:03:01 -0400

golang-github-lucas-clemente-quic-go (0.54.0-3) unstable; urgency=medium

  * Team upload
  * Add patch from Chris Lamb to make the build reproducible (Closes: 1105171)

 -- Eric Dorland <eric@debian.org>  Fri, 29 Aug 2025 14:51:13 -0400

golang-github-lucas-clemente-quic-go (0.54.0-2) unstable; urgency=medium

  * Team upload
  * Trim trailing whitespace.
  * Set upstream metadata fields: Security-Contact.

 -- Eric Dorland <eric@debian.org>  Thu, 28 Aug 2025 14:12:18 -0400

golang-github-lucas-clemente-quic-go (0.54.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.54.0 (Closes: 1111571)
  * Drop approximately upstreamed 4946.patch
  * Drop no longer cleanly applying 0002-increase-test-timeout.patch
  * Drop 0003-proxy-test.patch fixed upstream
  * Remove 0005-cancel-test.patch that was for i386 flakiness

 -- Eric Dorland <eric@debian.org>  Wed, 20 Aug 2025 09:42:12 -0400

golang-github-lucas-clemente-quic-go (0.50.1-2) unstable; urgency=high

  * Team Upload
  * Disable test broken on i386.  Closes: #1103083.

 -- John Goerzen <jgoerzen@complete.org>  Fri, 25 Apr 2025 07:41:48 -0500

golang-github-lucas-clemente-quic-go (0.50.1-1) unstable; urgency=medium

  * Team Upload
  * New upstream version 0.50.1

 -- Jérémy Lal <kapouer@melix.org>  Mon, 31 Mar 2025 08:55:38 +0200

golang-github-lucas-clemente-quic-go (0.50.0-1) unstable; urgency=medium

  * Team Upload
  * New upstream version 0.50.0. Closes: #1098558.
    + CVE-2024-53259. Closes: #1089227.
  * Patches:
    + drop 0001-Skip-test-takes-bit-long-time, n/a
    + increase ctx timeout in TestDatagramLoss, PR 4946
    + 0003-proxy-test, small fix to allow test to pass
    + 0004-http-trace-test, small fix to allow test to pass
  * Use uber-mock dependency

 -- Jérémy Lal <kapouer@melix.org>  Mon, 31 Mar 2025 08:55:20 +0200

golang-github-lucas-clemente-quic-go (0.46.0-2) unstable; urgency=medium

  * Team upload
  * Move vendor dir in execute_after_dh_auto_configure to fix autopkgtest

 -- Shengjing Zhu <zhsj@debian.org>  Wed, 14 Aug 2024 23:28:58 +0800

golang-github-lucas-clemente-quic-go (0.46.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.46.0
    + CVE-2024-22189 (Closes: #1072180)
  * Drop qtls-go1-20 component
  * Refresh patches.
    Drop 0003-fix-capture-of-loop-variable-in-connection-probe-pac.patch
  * Add go.uber.org/mock to vendor
  * Update Depends and Build-Depends
    + Drop golang-github-golang-mock-dev
    + Add golang-github-prometheus-client-golang-dev
    + Add golang-golang-x-time-dev
  * Update Breaks
    + golang-github-syncthing-syncthing-dev (<< 1.27.7~ds1-1~)
    + caddy (<< 2.6.2-8~)

 -- Shengjing Zhu <zhsj@debian.org>  Tue, 13 Aug 2024 20:09:53 +0800

golang-github-lucas-clemente-quic-go (0.38.2-2) unstable; urgency=medium

  * Team Upload
  * Backport patch to fix loop variable for Go 1.22 (Closes: #1066780)

 -- Shengjing Zhu <zhsj@debian.org>  Tue, 14 May 2024 17:01:14 +0800

golang-github-lucas-clemente-quic-go (0.38.2-1) unstable; urgency=medium

  [ Félix Sipma ]
  * New upstream version 0.38.2

  [ Shengjing Zhu ]
  * Replace golang-github-onsi-ginkgo-dev with golang-github-onsi-ginkgo-v2-dev

 -- Shengjing Zhu <zhsj@debian.org>  Thu, 04 Jan 2024 14:47:38 +0800

golang-github-lucas-clemente-quic-go (0.37.4-1) unstable; urgency=medium

  * Team Upload
  * New upstream version 0.37.4
  * Breaks golang-github-syncthing-syncthing-dev (<< 1.19.2~ds1-2~)
    and golang-v2ray-core-dev (<< 4.34.0+ds-3~)

 -- Shengjing Zhu <zhsj@debian.org>  Fri, 11 Aug 2023 19:49:31 +0800

golang-github-lucas-clemente-quic-go (0.37.0-1) experimental; urgency=medium

  * Team Upload
  * Drop qtls-go1-19 component
  * New upstream version 0.37.0
  * Bump golang-github-quic-go-qpack-dev to 0.4.0
  * Update Standards-Version to 4.6.2 (no changes)
  * Replace lucas-clemente/quic-go with quic-go/quic-go
  * Refresh patches.
    Drop 0003-add-support-for-Go-1.20.patch
  * Add patch to downgrade ginkgo to v1
  * Add lucas-clemente/quic-go symlink

 -- Shengjing Zhu <zhsj@debian.org>  Thu, 27 Jul 2023 18:49:34 +0800

golang-github-lucas-clemente-quic-go (0.29.2-3) unstable; urgency=medium

  * Team Upload
  * Upload to unstable

 -- Shengjing Zhu <zhsj@debian.org>  Sun, 11 Jun 2023 17:23:39 +0800

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog golang-github-lucas-clemente-quic-go-dev`.
