incus (7.0.1-1) unstable; urgency=medium

  * New upstream release:
    - Drop patches cherry-picked from upstream
    - Rebase patch adjusting import paths
    - Add another patch to fix issues caused by Debian's use of GO111MODULE=off
    - Update IncusOS network struct and cli patch
  * Update Build-Depends and Depends in d/control

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 10 Jul 2026 16:12:42 +0000

incus (7.0.0-5) unstable; urgency=high

  * Apply two small updates to the prior security patches

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 25 Jun 2026 23:08:09 +0000

incus (7.0.0-4) unstable; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-48749 / GHSA-2q3f-q5pq-g8wv
    - CVE-2026-48750 / GHSA-73hr-m85f-64v9
    - CVE-2026-48751 / GHSA-48q5-w887-33wv
    - CVE-2026-48752 / GHSA-vxp5-584q-c479
    - CVE-2026-48755 / GHSA-v6mj-8pf4-hhw4
    - CVE-2026-48769 / GHSA-f6m5-xw2g-xc4x
    - CVE-2026-55621 / GHSA-64f3-v33m-w89f
    - CVE-2026-55622 / GHSA-c9f5-j9c3-mhrg
  * Add patch to fix crash when generating pfx client certificate

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 25 Jun 2026 00:52:42 +0000

incus (7.0.0-3) unstable; urgency=medium

  * Cherry-pick upstream changes for go-yaml/v4 rc5

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 14 Jun 2026 15:34:56 +0000

incus (7.0.0-2) unstable; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-47753 / GHSA-8g7m-96c8-8wwc
    - CVE-2026-48753 / GHSA-ccjc-4qc3-jxqc
    - CVE-2026-48754 / GHSA-4xg6-52mh-fpw8
    - CVE-2026-48756 / GHSA-xhqx-mgh3-3h7q
  * d/control:
    - Set minimum required version of golang-github-cenkalti-backoff-dev to
      assist with backporting
    - Drop unneeded dependency on golang-github-go-chi-chi-dev

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 28 May 2026 23:43:52 +0000

incus (7.0.0-1) unstable; urgency=medium

  * New upstream LTS 7.0 release:
    - Includes fixes for the following security issues (Closes: #1135644):
      * CVE-2026-35527 / GHSA-8gw4-p4wq-4hcv
      * CVE-2026-40195 / GHSA-gc7j-g665-rxr9
      * CVE-2026-40197 / GHSA-r7w7-mmxr-47r9
      * CVE-2026-40243 / GHSA-c839-4qxr-j4x3
      * CVE-2026-40251 / GHSA-4m88-wxj4-9qj6
      * CVE-2026-41647 / GHSA-fwj8-62r8-8p8m
      * CVE-2026-41648 / GHSA-67wx-r9xr-x75x
      * CVE-2026-41684 / GHSA-x5r6-jr56-89pv
      * CVE-2026-41685 / GHSA-98vh-x9cx-9cfp
    - Rebase/update/drop patches as needed
    - Add patch to skip flaky tests that occasionally fail on slower
      architectures
    - Cherry-pick some post-release fixes
  * d/control:
    - Update package descriptions
    - Update Build-Depends and Depends
    - Update Breaks for distrobuilder
    - No longer Suggest minio-client
    - Update minimum required versions of dependencies
  * Add an entry for the 7.0 release in d/NEWS
  * Update d/README.Debian and d/README.source

 -- Mathias Gibbens <gibmat@debian.org>  Wed, 06 May 2026 02:35:00 +0000

incus (6.0.6-3) unstable; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-34178 / GHSA-q96j-3fmm-7fv4
    - CVE-2026-34179 / GHSA-c3h3-89qf-jqm5
  * Update Standards-Version to 4.7.4 in d/control (no changes needed)
  * Remove "systemd-service-file-missing-hardening-features" lintian overrides
  * Update d/watch to v5

 -- Mathias Gibbens <gibmat@debian.org>  Tue, 14 Apr 2026 15:50:47 +0000

incus (6.23.0-1~exp1) experimental; urgency=medium

  * New upstream feature release:
    - Includes fixes for the following security issues: CVE-2026-33542,
      CVE-2026-33743, CVE-2026-33897, CVE-2026-33711, CVE-2026-33945,
      CVE-2026-33898, CVE-2026-34178, CVE-2026-34179
    - Build FreeBSD version of incus-agent
    - Rebase patches as needed
    - Update IncusOS network struct and cli patch
  * Update Build-Depends and Depends in d/control

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 27 Mar 2026 14:30:24 +0000

incus (6.0.6-2) unstable; urgency=high

  * Cherry-pick fixes for the following security issues:
    - CVE-2026-33542 / GHSA-p8mm-23gg-jc9r
    - CVE-2026-33743 / GHSA-vg76-xmhg-j5x3
    - CVE-2026-33897 / GHSA-83xr-5xxr-mh92
    - CVE-2026-33711 / GHSA-q9vp-3wcg-8p4x
    - CVE-2026-33945 / GHSA-q4q8-7f2j-9h9f
  * Cherry-pick changes for building with gobgp v4

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 26 Mar 2026 22:06:37 +0000

incus (6.0.6-1) unstable; urgency=medium

  * New upstream release:
    - Includes fix for CVE-2026-28384 / GHSA-4rmf-rcp8-2r9g
    - Update Build-Depends and Depends
    - Rebase patches as needed
    - Drop patches applied upstream

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 15 Mar 2026 16:06:22 +0000

# For older changelog entries, run 'apt-get changelog golang-github-lxc-incus-dev'
