kas (5.4-1) unstable; urgency=medium

  * New upstream version 5.4
  * debian: drop patches applied upstream
  * Fixes CVE-2026-54548

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Thu, 25 Jun 2026 11:40:06 +0200

kas (5.3-1) unstable; urgency=medium

  * New upstream version 5.3
  * kas: git: Avoid checking out sha-like branches as commits (CVE-2026-47191)
  * kas: verify signatures prior to checkout (CVE-2026-47192)
  * kas: strip credentials from attestation also if token is used
  * kas: ensure _source_dir is only set from main config file
  * kas: ensure git-clone path is not processed as option
  * kas: drop never correctly support for absolute include path
  * kas: limit include path traversals to repository
  * kas: Warn about repos with branches but without commit or lock file
  * kas: create a CACHEDIR.TAG in the kas build directory
  * kas: add Arch Linux to supported distros for locale settings
  * kas: schema: switch default distro to nodistro
  * kas: schema: enforce signer config constraints via schema
  * kas: dump: Use 2 spaces as indention in generated yaml
  * kas: Properly convert error list to string prior to output
  * kas: improve printing of os version
  * kas-container: do not construct image name if providing KAS_CONTAINER_IMAGE
  * kas-container: Fix podman detection
  * kas-container: do not process locale aliases
  * kas-container: query system docker path in isar mode, not assuming it

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Sun, 31 May 2026 17:39:51 +0200

kas (5.2-1) unstable; urgency=medium

  * New upstream version 5.2
  * kas: Add support for layer priorities
  * kas: Add support for AWS SSO login credentials
  * kas: Allows one to specify commits via id of annotated tags as well
  * kas: Avoid unneeded commit ID updates in lockfiles
  * kas: Catch error when updating an invalid commit in a lockfile
  * kas: Disable terminal prompts in git
  * kas: Improve error logging on failed fetches
  * kas: Avoid redundant error logging of invoked commands
  * kas: Improve error logging of failed for_all_repos commands
  * docs: Add community support section to getting started guide
  * docs: Show schema defaults that evaluate to false
  * docs: Show allowed integer ranges in the schema

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 24 Feb 2026 10:32:31 +0100

kas (5.1-1) unstable; urgency=medium

  * New upstream version 5.1
  * kas: use DL_DIR environment variable on cleanall
  * kas: Print distro name and version on startup
  * kas-container: Install binfmts for qemu manually
  * kas-container: add custom git path to safedirs
  * kas-container: restore debian sources list after installation
  * docs: Update installation instructions
  * docs: add missing property to buildtools examples

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Fri, 05 Dec 2025 09:58:56 +0100

kas (5.0-1) unstable; urgency=medium

  * New upstream version 5.0
  * kas: introduce buildtools support
  * kas: Allow branch override
  * kas: Dump output of init-build-env scripts at debug log-level
  * kas: fail on fetch errors, rather than warn and continue
  * kas: only fetch repos on update if commit is not pinned
  * kas: call sudo only once in ISAR mode of clean plugin
  * kas: avoid redundant diff output of filename
  * kas: print commit log on lock update
  * kas-container: Provide images based on both Debian 12 and 13
  * kas-container: allow to select specific image distribution
  * kas-container: add support for KAS_BUILDTOOLS_DIR
  * kas-container: add partial support for run0
  * debian: add missing and new manpages
  * debian: disable ssh-agent test (Closes: #1117751)

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 21 Oct 2025 14:47:14 +0200

kas (4.8.2-1) unstable; urgency=medium

  * New upstream version 4.8.2
  * kas: clean: avoid creation of tmp data to recover from full-disk scenario
  * kas: avoid duplicate creations of tmpdir
  * kas-container: fix host timezone propagation, resolving yocto breakage
  * kas-container: avoid collision of internal vars with environment
  * kas-container: fallback to xterm if a TERM value is not supported
  * docs: precisely describe where SHELL env var is in effect
  * docs: add note on YAML support and its limitations
  * docs: remove GnuPG limitation of repo verification
  * docs: sphinx_kas_schema.py: support numbers in regex

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Mon, 18 Aug 2025 12:39:40 +0200

kas (4.8.1-2) unstable; urgency=medium

  * debian: switch to autopkgtest-pkg-pybuild

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 17 Jun 2025 11:22:15 +0200

kas (4.8.1-1) unstable; urgency=medium

  * New upstream version 4.8.1
  * kas: Add diff plugin to compare config files and repos
  * kas: add support to verify signatures of git repos
  * kas: add support for distributed lock file updates
  * kas: add purge command to remove all managed data
  * kas: add support for NPMRC_FILE environment variable
  * kas: drop overrides from output of dump when using --resolve-refs
  * kas: inject current version of kas into config dumps
  * kas: enforce allowed values for layer enabling/disabling
  * kas: deprecate various magic values to disable a layer
  * kas: consistently check for the validity of path provided via env vars
  * kas: skip shallow cloning for reference repos
  * kas: improve reporting of yaml format errors
  * kas: fix output on patching errors
  * kas-container: add limited support for docker rootless
  * kas-container: propagate timezone information into container
  * kas-container: warn if script version does not match container
  * kas-container: prepare for looser coupling of script and container versions
  * debian: update standards version to 4.7.2
  * debian: add python3-{kconfiglib,gnupg,newt} to recommends

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Mon, 16 Jun 2025 12:56:15 +0200

kas (4.7-1) unstable; urgency=medium

  * New upstream version 4.7

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Mon, 03 Feb 2025 11:21:56 +0100

kas (4.6-1) unstable; urgency=medium

  * New upstream version 4.6
  * debian: run all not-online tests
  * debian: add kas-lock and kas-container manpages
  * debian: remove obsolete lintian overrides

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Mon, 09 Dec 2024 08:47:08 +0100

kas (4.5-2) unstable; urgency=medium

  * debian: add lintian overrides for spelling issues

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Fri, 20 Sep 2024 10:57:34 +0200

kas (4.5-1) unstable; urgency=medium

  * New upstream version 4.5

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Wed, 18 Sep 2024 09:45:07 +0200

kas (4.4-2) unstable; urgency=medium

  * debian: bump standards version to 4.7.0
  * debian: add lintian overrides for sphinx generated manpages

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Fri, 07 Jun 2024 10:05:19 +0200

kas (4.4-1) unstable; urgency=medium

  * debian: update upstream signing key
  * New upstream version 4.4
  * debian: add attestation man page

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Thu, 06 Jun 2024 11:40:53 +0200

kas (4.3.2-1) unstable; urgency=medium

  * New upstream version 4.3.2
  * fixes regression when using SSH_PRIVATE_KEY[_FILE]
  * don't add comments to .netrc, fixing gitlab-ci
  * align hg semantics of repo dirty checking

  [ Bastian Germann ]
  * Hand over package to Felix (Closes: #1055342)

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Wed, 10 Apr 2024 06:49:59 +0200

kas (4.3-1) unstable; urgency=medium

  * New upstream version 4.3
  * install all kas manpages
  * adapt to new upstream requirements
  * install bash-completions for kas
  * update copyright information
  * Update standards version to 4.6.2, no changes needed.

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 12 Mar 2024 08:21:05 +0100

kas (4.0-1) unstable; urgency=medium

  * New upstream version 4.0

 -- Bastian Germann <bage@debian.org>  Wed, 28 Jun 2023 13:00:53 +0200

kas (3.2.3-1) unstable; urgency=medium

  * New upstream version 3.2.3
  * Rebase patch
  * Update standards version to 4.6.1, no changes needed.

 -- Bastian Germann <bage@debian.org>  Mon, 19 Jun 2023 15:51:07 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog kas`.
