ruby-kramdown (1.17.0-4ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: arbitrary class generation issue when specifying custom
    Rouge formatters.
    - debian/patches/CVE-2021-28834.patch: enforce custom Rouge formatters to
      be in the Rouge::Formatters namespace. 
    - CVE-2021-28834

 -- Evan Caville <evan.caville@canonical.com>  Wed, 04 Oct 2023 12:18:54 +1000

ruby-kramdown (1.17.0-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Unintended read access
    - debian/patches/CVE-2020-14001.patch: Add option
      forbidden_inline_options. By default, the template option is now
      forbidden.
    - CVE-2020-14001

 -- Mike Salvatore <mike.salvatore@canonical.com>  Wed, 30 Sep 2020 15:11:49 -0400

ruby-kramdown (1.17.0-4) unstable; urgency=medium

  * Team upload.
  * Ship gemspec once again (Closes: #950107)

 -- Chris Hofstaedtler <zeha@debian.org>  Thu, 30 Jan 2020 17:34:20 +0000

ruby-kramdown (1.17.0-3) unstable; urgency=medium

  * Team upload.
  * Update debian/copyright.

  [ Helmut Grohne ]
  * Split kramdown command into a separate Multi-Arch: foreign package
    (Closes: #907344)

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 20 Jan 2020 07:34:20 +0000

ruby-kramdown (1.17.0-2) unstable; urgency=medium

  * Team upload.

  [ Utkarsh Gupta ]
  * Add salsa-ci.yml

  [ Debian Janitor ]
  * Use secure copyright file specification URI.
  * Use secure URI in Homepage field.
  * Update standards version to 4.2.1, no changes needed.
  * Bump debhelper from old 11 to 12.

  [ Chris Hofstaedtler ]
  * Bump Standards Version to 4.4.1

 -- Chris Hofstaedtler <zeha@debian.org>  Mon, 20 Jan 2020 07:17:37 +0000

ruby-kramdown (1.17.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.17.0
  * Use salsa.debian.org in Vcs-* fields
  * Move debian/watch to gemwatch.debian.net
  * Bump Standards-Version to 4.2.0 (no changes needed)
  * Bump debhelper compatibility level to 11
  * Refresh fix_manpage_warnings.patch
  * Refresh skip_missing_math_engines.patch

 -- Cédric Boutillier <boutil@debian.org>  Sun, 19 Aug 2018 16:08:26 +0200

ruby-kramdown (1.15.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.15.0
    * Add full support for ruby-rouge >= 2 in tests (Closes: #877320)
  * Drop rouge2.patch, not needed any more
  * Bump Standards-Version to 4.1.1 (no changes needed)

 -- Cédric Boutillier <boutil@debian.org>  Sun, 01 Oct 2017 15:38:06 +0200

ruby-kramdown (1.14.0-1) unstable; urgency=medium

  * New upstream version 1.14.0
  * Refresh patches
  * Add patch: replase Unicode char to ASCII
  * Bump Standard Version: 4.0.0

 -- Youhei SASAKI <uwabami@gfd-dennou.org>  Thu, 03 Aug 2017 20:33:35 +0900

ruby-kramdown (1.12.0-1) unstable; urgency=medium

  * Team upload
  * New upstream version 1.12.0
  * Refresh skip_missing_math_engines.patch
  * Remove fix-datadir-path.patch, applied upstream
  * Modify rouge2.patch to put rouge 2.x syntax-highlighter in legacy mode for
    compatibility, and incidentally restore pre tag around code blocks
    (Closes: #833788)

 -- Cédric Boutillier <boutil@debian.org>  Sat, 27 Aug 2016 11:39:34 +0200

ruby-kramdown (1.11.1-3) unstable; urgency=medium

  * Team upload
  * Depend on ruby-rouge >= 2
  * Add rouge2.patch to adapt tests to new ruby-rouge major version

 -- Cédric Boutillier <boutil@debian.org>  Mon, 04 Jul 2016 00:08:28 +0200

# For older changelog entries, run 'apt-get changelog ruby-kramdown'
