libhttp-tiny-perl (0.096-1) unstable; urgency=medium

  * Import upstream version 0.096.
    Includes fix for CVE-2026-7017 since 0.095.
    Closes: #1141638
  * Drop debian/patches/CVE-2026-7010-*.patch.
    These patches were taken from upstream Git and are included in
    the 0.093 release.
  * Update years of upstream copyright.

 -- gregor herrmann <gregoa@debian.org>  Wed, 08 Jul 2026 18:42:44 +0200

libhttp-tiny-perl (0.092-3) unstable; urgency=medium

  * autopkgtest: skip the same (internet-facing) tests as during build.
    Thanks to Paul Gevers for the bug report. (Closes: #1140041)

 -- gregor herrmann <gregoa@debian.org>  Mon, 15 Jun 2026 17:55:16 +0200

libhttp-tiny-perl (0.092-2) unstable; urgency=medium

  * Team upload.
  * CVE-2026-7010: fix for request / header smuggling
  * CVE-2026-7010: add tests
  * Declare compliance with Debian policy 4.7.4

 -- Salvatore Bonaccorso <carnil@debian.org>  Tue, 12 May 2026 07:58:09 +0200

libhttp-tiny-perl (0.092-1) unstable; urgency=medium

  * Import upstream version 0.092.
  * Update years of upstream and packaging copyright.
  * Declare compliance with Debian Policy 4.7.3.
  * Remove «Rules-Requires-Root: no», which is the current default.
  * Remove «Priority: optional», which is the current default.

 -- gregor herrmann <gregoa@debian.org>  Thu, 01 Jan 2026 04:29:03 +0100

libhttp-tiny-perl (0.090-1) unstable; urgency=medium

  * Import upstream version 0.090.
  * Update years of upstream copyright.
  * Declare compliance with Debian Policy 4.7.0.
  * Update test and runtime dependencies.

 -- gregor herrmann <gregoa@debian.org>  Fri, 15 Nov 2024 03:36:25 +0100

libhttp-tiny-perl (0.088-1) unstable; urgency=medium

  * Import upstream version 0.088.
  * Fixes "current version superseded by Perl 5.38". (Closes: #1060713)
  * Fixes "CVE-2023-31486: Does not defaults to verify SSL certificates":
    Since 0.083 the default value for verify_SSL is set to true, i.e. the
    TLS/SSL certificates on an https connection are validated.
    (The default can be reverted by setting
    $ENV{PERL_HTTP_TINY_SSL_INSECURE_BY_DEFAULT} if verify_SSL is not
    explicitly set.)
    (Closes: #962407)
  * Update debian/upstream/metadata.
  * Update years of upstream and packaging copyright.
  * Declare compliance with Debian Policy 4.6.2.
  * Add more test dependencies.
    They are required for tests which are skipped during build, as they need
    internet access, but are run during autopkgtests.

 -- gregor herrmann <gregoa@debian.org>  Sat, 13 Jan 2024 20:25:03 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libhttp-tiny-perl`.
