node-tar (7.5.19+~4.0.1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 7.5.19+~4.0.1 (Closes: #1141767, CVE-2026-59871,
    CVE-2026-59873, CVE-2026-59874, CVE-2026-59875)

 -- Xavier Guimard <yadd@debian.org>  Fri, 10 Jul 2026 09:42:21 +0200

node-tar (7.5.16+~4.0.1-2) unstable; urgency=medium

  * Team upload
  * Back to unstable
  * Require tap 21 for autopkgtest

 -- Xavier Guimard <yadd@debian.org>  Wed, 24 Jun 2026 21:55:04 +0200

node-tar (7.5.16+~4.0.1-1) experimental; urgency=medium

  * Team upload
  * Drop component @types/tar, Embed component @isaacs/fs-minipass
  * New upstream version 7.5.16+~4.0.1 (Closes: CVE-2026-53655)
  * Patches:
    - drop all previous patches
    - do not point to (unbuilt) min bundles
    - workaround @types/node changes
    - tolerate GNU tar pax extended-header warning
  * Refresh test modules
  * Update build
  * Minimal test during build, real test during autopkgtest
  * Drop dependencies to node-mkdirp, node-safe-buffer, node-fs-minipass
  * Update copyright

 -- Xavier Guimard <yadd@debian.org>  Wed, 24 Jun 2026 15:02:58 +0200

node-tar (6.2.1+ds1+~cs6.1.13-11) unstable; urgency=medium

  * Team upload
  * Declare compliance with policy 4.7.4
  * Adapt test for tap 21

 -- Xavier Guimard <yadd@debian.org>  Mon, 22 Jun 2026 22:24:10 +0200

node-tar (6.2.1+ds1+~cs6.1.13-10) unstable; urgency=medium

  * Team upload
  * Add patches for CVE-2026-24842 and CVE-2026-31802 (both introduced into
    6.2.1+ds1+~cs6.1.13-6 with upstream patch to fix CVE-2026-23745)

 -- Xavier Guimard <yadd@debian.org>  Tue, 24 Mar 2026 12:02:57 +0100

node-tar (6.2.1+ds1+~cs6.1.13-9) unstable; urgency=medium

  * Team upload
  * Drop "Priority: optional"
  * Adapt to chownr 3 (named exports) (Closes: #1131672)

 -- Xavier Guimard <yadd@debian.org>  Mon, 23 Mar 2026 14:47:59 +0100

node-tar (6.2.1+ds1+~cs6.1.13-8) unstable; urgency=medium

  * Team upload
  * Parse root off paths before sanitizing parts (Closes: CVE-2026-29786)
  * Do not write linkpaths through symlinks (Closes: #1129378, CVE-2026-26960)

 -- Xavier Guimard <yadd@debian.org>  Sun, 08 Mar 2026 11:46:04 +0100

node-tar (6.2.1+ds1+~cs6.1.13-7) unstable; urgency=medium

  * Team upload
  * Normalize out unicode ligatures (Closes: CVE-2026-23950)

 -- Yadd <yadd@debian.org>  Thu, 22 Jan 2026 08:03:45 +0100

node-tar (6.2.1+ds1+~cs6.1.13-6) unstable; urgency=medium

  * Team upload
  * Declare compliance with policy 4.7.3
  * Drop "Rules-Requires-Root: no"
  * debian/watch version 5
  * Refresh patches
  * Sanitize absolute linkpaths properly (Closes: CVE-2026-23745)

 -- Yadd <yadd@debian.org>  Sat, 17 Jan 2026 18:55:39 +0100

node-tar (6.2.1+ds1+~cs6.1.13-5) unstable; urgency=medium

  * Require rimraf >= 4

 -- Bastien Roucariès <rouca@debian.org>  Sat, 27 Dec 2025 00:27:26 +0100

node-tar (6.2.1+ds1+~cs6.1.13-4) unstable; urgency=medium

  * Remove test that fail due to race condition

 -- Bastien Roucariès <rouca@debian.org>  Thu, 25 Dec 2025 23:25:33 +0100

node-tar (6.2.1+ds1+~cs6.1.13-3) unstable; urgency=medium

  * Fix another failure with rimraf >= 4

 -- Bastien Roucariès <rouca@debian.org>  Thu, 25 Dec 2025 10:39:57 +0100

node-tar (6.2.1+ds1+~cs6.1.13-2) unstable; urgency=medium

  * Port to rimraf >= 4

 -- Bastien Roucariès <rouca@debian.org>  Mon, 22 Dec 2025 17:28:44 +0100

node-tar (6.2.1+ds1+~cs6.1.13-1) unstable; urgency=medium

  * Drop fs-minipass and thus use +ds1 as source version.

 -- Bastien Roucariès <rouca@debian.org>  Mon, 24 Nov 2025 09:31:29 +0100

node-tar (6.2.1+~cs7.0.8-1) unstable; urgency=medium

  * New upstream version
  * Bug fix: "failed to build, breaks node-minipass", thanks to Julian
    Gilbey (Closes: #1078546).
  * Drop patches applied upstream: CVE-2024-28863 and minipass transition

 -- Bastien Roucariès <rouca@debian.org>  Mon, 12 Aug 2024 12:35:09 +0000

node-tar (6.1.13+~cs7.0.5-4) unstable; urgency=medium

  * Team upload
  * Ease transition for minipass

 -- Bastien Roucariès <rouca@debian.org>  Fri, 09 Aug 2024 19:31:58 +0000

node-tar (6.1.13+~cs7.0.5-3) unstable; urgency=medium

  * Team upload
  * Reupload to force rebuild

 -- Yadd <yadd@debian.org>  Wed, 03 Apr 2024 09:39:22 +0400

node-tar (6.1.13+~cs7.0.5-2) unstable; urgency=medium

  * Team upload
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse
  * Import security patch from upstream (Closes: CVE-2024-28863)

 -- Yadd <yadd@debian.org>  Fri, 22 Mar 2024 16:19:13 +0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog node-tar`.
