golang-golang-x-net (1:0.58.0-1) unstable; urgency=medium

  * Team upload
  * More compat 14 fixes

 -- Simon Josefsson <simon@josefsson.org>  Thu, 13 Aug 2026 22:10:25 +0200

golang-golang-x-net (1:0.57.0-1) unstable; urgency=medium

  * Team upload
  * New upstream
    - CVE-2026-46600
    - CVE-2026-39821
  * Use gbp sign-tags and upstream-vcs-tag dropping upstream-branch
  * Use compat 14

 -- Simon Josefsson <simon@josefsson.org>  Fri, 24 Jul 2026 11:50:16 +0200

golang-golang-x-net (1:0.56.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.56.0
  * Mention CVE-2026-33814 solved in 0.53.0 (Closes: #1136030)
  * Refresh d/copyright

 -- Simon Josefsson <simon@josefsson.org>  Sun, 14 Jun 2026 16:08:23 +0200

golang-golang-x-net (1:0.55.0-2) unstable; urgency=medium

  * Team upload
  * Adjust Breaks
    - golang-github-andybalholm-cascadia<<1.3.4
    - golang-github-johanneskaufmann-dom<<0.3.1

 -- Simon Josefsson <simon@josefsson.org>  Sun, 07 Jun 2026 18:33:38 +0200

golang-golang-x-net (1:0.55.0-1) unstable; urgency=medium

  * Team upload

  [ Pirate Praveen ]
  * Update minimum version of golang to 1.26

  [ Simon Josefsson ]
  * Silence lintian invalid-dep3-format-patch-wrong-last-update
  * New upstream
    - CVE-2026-25681
    - CVE-2026-25680
    - CVE-2026-42502
    - CVE-2026-42506
    - CVE-2026-27136
  * Break golang-github-andybalholm-cascadia-dev<=1.3.3-2

 -- Simon Josefsson <simon@josefsson.org>  Tue, 02 Jun 2026 23:11:32 +0200

golang-golang-x-net (1:0.53.0-2) unstable; urgency=medium

  * Team upload
  * Fix reproducibility
  * Bump debian/* copyright years
  * Drop no longer needed Files-Excluded
  * Use watch v5
  * Add d/u/metadata
  * Drop hack re z_spec_test.go

 -- Simon Josefsson <simon@josefsson.org>  Mon, 27 Apr 2026 10:00:02 +0200

golang-golang-x-net (1:0.53.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 0.53.0
    - Refresh patches
    - Add golang-golang-x-tools to Build-Depends (stringer binary needed)
  * Remove Priority: optional from d/control
  * Update Standards-Version to 4.7.4

 -- Dr. Tobias Quathamer <toddy@debian.org>  Sat, 11 Apr 2026 15:41:14 +0200

golang-golang-x-net (1:0.47.0-2) unstable; urgency=medium

  * debian/gbp.conf: update default branch to align the actual branch.
    Thanks to Otto Kekäläinen <otto@debian.org> commented on salsa.

 -- Andrew Lee (李健秋) <ajqlee@debian.org>  Sun, 22 Mar 2026 17:27:04 +0100

golang-golang-x-net (1:0.47.0-1) unstable; urgency=medium

  [ Maytham Alsudany ]
  * Team upload.
  * New upstream version 0.33.0
    * Contains fix for CVE-2024-45338 (Closes: #1091168)
  * Skip publicsuffix tests TestPublicSuffix, TestSlowPublicSuffix, and
    TestNumICANNRules

  [ Ananthu C V ]
  * Skip more publicsuffix tests (Closes: #1089192)

  [ Andrew Lee (李健秋) ]
  * Team Upload.
  * New upstream version 0.47.0.
    - contains fix for CVE-2025-58190 from version 0.45.0.
    - contains fix for CVE-2025-47911 from version 0.45.0.
  * debian/control: Drop Rules-Requires-Root: no (now the default).
  * debian/control: build-deps and depends on
    golang-golang-x-text-dev (>= 0.31.0).
  * debian/control: build-deps and depends on
    golang-golang-x-term-dev (>= 0.37.0).
  * debian/control: build-deps and depends on
    golang-golang-x-sys-dev (>= 0.38.0).
  * debian/control: build-deps and depends on
    golang-golang-x-crypto-dev (>= 0.44.0).
  * debian/control: build-deps on golang-any (>= 2:1.24~) according
    to go.mod.
  * Drop patches that skip tests. Skip in debian/rules instead.
  * Drop previous patches that already included in new upstream release.
  * debian/rules: skip tests that requires network connections.

 -- Andrew Lee (李健秋) <ajqlee@debian.org>  Tue, 10 Mar 2026 17:15:36 +0100

golang-golang-x-net (1:0.27.0-2) unstable; urgency=medium

  * Team upload.

  [ Ananthu C V ]
  * Skip more publicsuffix tests (Closes: #1089192)

  [ Jochen Sprickerhof ]
  * Add patch for CVE-2025-22872 (Closes: #1103586)
  * Add patch for CVE-2024-45338 (Closes: #1091168)

 -- Jochen Sprickerhof <jspricke@debian.org>  Wed, 21 May 2025 14:16:51 +0200

golang-golang-x-net (1:0.27.0-1) unstable; urgency=medium

  * New upstream version 0.27.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Sun, 01 Sep 2024 08:41:23 -0600

golang-golang-x-net (1:0.26.0+dfsg-2) unstable; urgency=medium

  * Bump to golang-golang-x-text-dev (>= 0.16.0) as per go.mod

 -- Anthony Fok <foka@debian.org>  Sat, 10 Aug 2024 03:02:39 -0600

golang-golang-x-net (1:0.26.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.26.0+dfsg
  * Bump versioned dependencies as per go.mod, except for
    golang-golang-x-text-dev (>= 0.16.0) which still needs to be packaged

 -- Anthony Fok <foka@debian.org>  Wed, 31 Jul 2024 11:28:23 -0600

golang-golang-x-net (1:0.25.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.25.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Mon, 20 May 2024 18:50:52 -0600

golang-golang-x-net (1:0.24.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.24.0+dfsg
  * Bump versioned dependencies as per go.mod
  * Bump Standards-Version to 4.7.0 (no change)

 -- Anthony Fok <foka@debian.org>  Fri, 26 Apr 2024 03:23:13 -0600

golang-golang-x-net (1:0.23.0+dfsg-1) unstable; urgency=medium

  * Team upload
  * New upstream version 0.23.0+dfsg
    + CVE-2023-45288: http2: close connections when receiving too many headers

 -- Shengjing Zhu <zhsj@debian.org>  Thu, 04 Apr 2024 04:38:02 +0800

golang-golang-x-net (1:0.22.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.22.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Sun, 24 Mar 2024 18:00:05 -0600

golang-golang-x-net (1:0.21.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.21.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Fri, 23 Feb 2024 19:31:07 -0700

golang-golang-x-net (1:0.20.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.20.0+dfsg
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Mon, 29 Jan 2024 14:52:43 -0700

golang-golang-x-net (1:0.19.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.19.0
  * Bump versioned dependencies as per go.mod
  * Append internal/quic/cmd to DH_GOLANG_EXCLUDES
    to avoid building the new QUIC interop test runner

 -- Anthony Fok <foka@debian.org>  Fri, 08 Dec 2023 15:15:47 -0700

golang-golang-x-net (1:0.17.0+dfsg-1) unstable; urgency=medium

  * New upstream version 0.17.0
  * Bump versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Wed, 01 Nov 2023 02:21:21 -0600

golang-golang-x-net (1:0.15.0-2) unstable; urgency=medium

  * Bump build-dependency publicsuffix (>= 20230804.1533)
    as golang.org/x/net v0.15.0 updated its copy of publicsuffix, especially
    "New policy for .museum, without all the SLD (Second-Level Domains)".
    (Sorry for my inadvertent and premature upload of 1:0.15.0-1!)
  * v0.13.0 fixes CVE-2023-3978: "x/net/html: text nodes outside of the
    HTML namespace improperly rendered"; see https://go.dev/issue/61615 and
    https://github.com/golang/net/commit/8ffa475fbdb33da97e8bf79cc5791ee8751fca5e
    (Closes: #1043163)

 -- Anthony Fok <foka@debian.org>  Thu, 12 Oct 2023 12:49:47 -0600

golang-golang-x-net (1:0.15.0-1) unstable; urgency=medium

  * New upstream version 0.15.0
  * Bump versioned dependencies as per go.mod
  * Remove 0001-quic-fix-testConn.uncheckedHandshake.patch
    which was backported from this version

 -- Anthony Fok <foka@debian.org>  Thu, 12 Oct 2023 01:36:09 -0600

golang-golang-x-net (1:0.14.0-1) unstable; urgency=medium

  * New upstream version 0.14.0
  * Bump versioned dependencies as per go.mod
  * Backport "quic: fix testConn.uncheckedHandshake" from v0.15.0

 -- Anthony Fok <foka@debian.org>  Tue, 10 Oct 2023 05:59:28 -0600

golang-golang-x-net (1:0.11.0-1) unstable; urgency=medium

  * New upstream version 0.11.0
  * Bump versioned dependencies as per go.mod, with new dependency on
    golang-golang-x-crypto-dev (>= 0.10.0), which no longer depends on
    golang-golang-x-net-dev, hence no circular dependency.

 -- Anthony Fok <foka@debian.org>  Thu, 21 Sep 2023 05:09:07 -0600

golang-golang-x-net (1:0.10.0-1) unstable; urgency=medium

  * New upstream version 0.10.0
  * Update versioned dependencies as per go.mod

 -- Anthony Fok <foka@debian.org>  Thu, 15 Jun 2023 15:45:13 -0600

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog golang-golang-x-net-dev`.
