libpf4j-java (3.15.0+dfsg-2) unstable; urgency=medium

  * Removing the !nocheck annotation of libgoogle-compile-testing-java
    (Closes: #1144120)

 -- Pierre Gruet <pgt@debian.org>  Thu, 13 Aug 2026 16:07:26 +0200

libpf4j-java (3.15.0+dfsg-1) unstable; urgency=medium

  * New upstream version 3.15.0+dfsg:
    Fixes CVE-2025-70952: pf4j before 20c2f80 has a path traversal
    vulnerability in the extract() function of Unzip.java, where improper
    handling of zip entry names can allow directory traversal or Zip Slip
    attacks, due to a lack of proper path normalization and validation.
    (Closes: #1132032)
  * Refreshing patches
  * Raising Standards version to 4.7.4 (no change)
  * Build-Depending on debhelper-compat 14, removing misc:Depends substvar
  * Updating d/copyright years
  * Using com.google.compile.testing Java classes, which are now packaged in
    Debian, for testing

 -- Pierre Gruet <pgt@debian.org>  Wed, 05 Aug 2026 16:23:00 +0200

libpf4j-java (3.13.0+dfsg-2) unstable; urgency=medium

  * Raising Standards version to 4.7.3:
    - Removing Priority: optional, which is default
    - Removing R-R-R: no, which is now default
  * Rewriting d/watch with version 5

  [ Vladimir Petko ]
  * d/t/websiteExample: Enable annotation processing to
    resolve Java 25 autopkgtest failure (LP: #2142162)
    (Closes: #1128373).

 -- Pierre Gruet <pgt@debian.org>  Sat, 21 Mar 2026 21:31:06 +0100

libpf4j-java (3.13.0+dfsg-1) unstable; urgency=medium

  * New upstream version 3.13.0+dfsg
  * Refreshing patches
  * Raising Standards version to 4.7.2 (no change)
  * Updating B-D list, removing mark !nocheck for mockito
    Closes: #1116775
  * Bumping copyright years

 -- Pierre Gruet <pgt@debian.org>  Wed, 01 Oct 2025 23:54:25 +0200

libpf4j-java (3.12.0+dfsg-1) unstable; urgency=medium

  * New upstream version 3.12.0+dfsg
  * Refreshing patches
  * Updating copyright years
  * Raising Standards version to 4.7.0
  * Adding a versioned B-D on libsemver-java
  * Repacking with the gradle dir but without its jar
  * Skipping one more test file that requires google.testing.compile classes
  * Skipping a test that requires unpackaged mockito classes
  * Ignoring more unpackaged Maven artifacts

 -- Pierre Gruet <pgt@debian.org>  Mon, 30 Sep 2024 23:31:16 +0200

libpf4j-java (3.10.0+dfsg-1) unstable; urgency=medium

  * New upstream version 3.10.0+dfsg
  * Refreshing patches
  * Bringing in some classes needed for the tests thanks to libguava-java
  * Updating the patch to skip tests relying on unpackaged
    com.google.testing.compile

 -- Pierre Gruet <pgt@debian.org>  Tue, 13 Feb 2024 22:25:27 +0100

libpf4j-java (3.9.0+dfsg-2) unstable; urgency=medium

  * Team upload.
  * Add upstream patch to address:
    CVE-2023-40826 CVE-2023-40827 CVE-2023-40828 (Closes: #1050834)

 -- tony mancill <tmancill@debian.org>  Wed, 30 Aug 2023 15:18:17 -0700

libpf4j-java (3.9.0+dfsg-1) unstable; urgency=medium

  * New upstream version 3.9.0+dfsg
  * Removing an unused Lintian override

 -- Pierre Gruet <pgt@debian.org>  Sun, 18 Jun 2023 15:24:25 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libpf4j-java`.
