subversion (1.14.5-3) unstable; urgency=medium

  * Backport upstream patch to fix Python 3 compatibility in svnperms.py hook
    script (Closes: #1101306)
  * Force -std=gnu17 until ruby bindings are fixed to work with c23 semantics
    (Closes: #1097945)
  * Drop last-changed-date-charset patch since it was rejected upstream and
    returns an incompatible type in an error scenario.

 -- James McCoy <jamessan@debian.org>  Sun, 06 Apr 2025 12:59:00 -0400

subversion (1.14.5-2) unstable; urgency=medium

  * Add salsa-ci config
  * Run davautocheck as part of the build time tests

 -- James McCoy <jamessan@debian.org>  Fri, 03 Jan 2025 21:05:20 -0500

subversion (1.14.5-1) unstable; urgency=medium

  * Update to new upstream version 1.14.5.
    + Security fixes:
      - CVE-2024-46901: mod_dav_svn denial-of-service via control characters
        in paths

 -- James McCoy <jamessan@debian.org>  Mon, 09 Dec 2024 14:32:14 -0500

subversion (1.14.4-2) unstable; urgency=medium

  * Set SWIG_PY_PYTHON to the versioned python binary name so the correct
    Python version is used when multiple Python versions are supported at
    once. (Closes: #1085100)

 -- James McCoy <jamessan@debian.org>  Wed, 23 Oct 2024 23:16:59 -0400

subversion (1.14.4-1) unstable; urgency=medium

  * Update to new upstream version 1.14.4.
  * Drop backported swig-rb patches
  * Fix typo in svn-clean documentation

 -- James McCoy <jamessan@debian.org>  Sat, 12 Oct 2024 10:24:07 -0400

subversion (1.14.3-3) unstable; urgency=medium

  * Disable java on hurd-amd64.
    Thanks to Samuel Thibault for the patch (Closes: #1076288)
  * Use kfreebsd-any wildcard for existing kfreebsd architecture exclusions
  * Disable kwallet support on alpha, m68k, and sparc64
  * Declare compliance with Policy 4.7.0, no changes needed
  * Use sysconfig directly instead of distutils' version of it
    (Closes: #1080807)

 -- James McCoy <jamessan@debian.org>  Mon, 09 Sep 2024 13:27:25 -0400

subversion (1.14.3-2) unstable; urgency=medium

  * Backport patches to fix building with gcc-14 (Closes: #1075543)
    + swig-rb: Fix condition to check that apr_hash_t * type value
    + swig-rb: Add type casting for some generic function pointers

 -- James McCoy <jamessan@debian.org>  Sat, 06 Jul 2024 11:09:12 -0400

subversion (1.14.3-1) unstable; urgency=medium

  * Update to new upstream version 1.14.3.

 -- James McCoy <jamessan@debian.org>  Mon, 01 Jan 2024 12:21:16 -0500

subversion (1.14.2-5) unstable; urgency=medium

  * Add future=+lfs build options to ensure use of 64-bit filesystem APIs
  * Add commented example for SVNListParentPath in dav_svn.conf
    (Closes: #1031229)
  * Remove BUILD directory and other detritus during clean (Closes: #1046849)
  * Backport upstream patch to fix missing version in pkg-config files
    (Closes: #1055242)
    + autogen.sh: export environment variable "PYTHON", for autoheader and autoconf
  * Skip dh_autoreconf, since we already call autogen.sh

 -- James McCoy <jamessan@debian.org>  Fri, 03 Nov 2023 19:34:37 -0400

subversion (1.14.2-4) unstable; urgency=medium

  * Backport patch to fix building with swig 4.1 (Closes: #1023529)

 -- James McCoy <jamessan@debian.org>  Sat, 12 Nov 2022 15:30:30 -0500

subversion (1.14.2-3) unstable; urgency=medium

  * Re-enable the ability to store plaintext passwords (Closes: #995692)
  * Bump debhelper-compat to 13
  * Adjust lacks-unversioned-link-to-shared-library overrides
  * Adjust package-contains-upstream-installation-documentation override
  * Document uninstalled files in debian/not-installed

 -- James McCoy <jamessan@debian.org>  Tue, 12 Jul 2022 10:03:54 -0400

subversion (1.14.2-2) unstable; urgency=medium

  * Skip building java bindings on kfreebsd-*. Thanks to Laurent Bigonville
    for the suggestion (Closes: #1012379)
  * Skip building ruby bindings on ia64 and kfreebsd-*
  * Disable kwallet support on kfreebsd-*
  * Use autogen-swig-{pl,py,rb} targets instead of autogen-swig
    (Closes: #986174)
  * Declare compliance with Policy 4.6.1, no changes needed
  * Fix handling of verbose/terse build logs

 -- James McCoy <jamessan@debian.org>  Mon, 06 Jun 2022 20:42:25 -0400

subversion (1.14.2-1) unstable; urgency=high

  * Update to new upstream version 1.14.2.
    + Security Fixes:
      - CVE-2021-28544: Don't show unreadable copyfrom paths in 'svn log -v'
      - CVE-2022-24070: Fix issue #4880 "Use-after-free of object-pools when
        used as httpd module"
  * libsvn1: Add wildcard to symbols-declares-dependency-on-other-package override
  * subversion-tools: Adjust wildcards for ruby-script-but-no-ruby-dep
  * Declare compliance with Policy 4.6.0, no changes needed
  * Update upstream signing keys
  * Re-enable testCrash_RequestChannel_nativeRead_AfterException, fixed
    upstream

 -- James McCoy <jamessan@debian.org>  Tue, 12 Apr 2022 08:38:19 -0400

subversion (1.14.1-3) unstable; urgency=medium

  * Correctly disable testCrash_RequestChannel_nativeRead_AfterException
    (Closes: #982684)

 -- James McCoy <jamessan@debian.org>  Wed, 17 Feb 2021 21:52:03 -0500

subversion (1.14.1-2) unstable; urgency=medium

  * Temporarily disable testCrash_RequestChannel_nativeRead_AfterException
    (Closes: #982684)
  * rules: Remove clean from .PHONY

 -- James McCoy <jamessan@debian.org>  Wed, 17 Feb 2021 07:46:16 -0500

subversion (1.14.1-1) unstable; urgency=high

  * Update to new upstream version 1.14.1.
    + Fix FTBFS with OpenJDK 17 (Closes: #982084)
    + Security fix:
      - CVE-2020-17525: Remote unauthenticated denial-of-service in Subversion
        mod_authz_svn  (Closes: #982464)

 -- James McCoy <jamessan@debian.org>  Wed, 10 Feb 2021 21:17:14 -0500

subversion (1.14.0-3) unstable; urgency=medium

  * Rename python suffixes to the versioned python suffix.
    Thanks to Matthias Klose for the patch (Closes: #972197)
  * Rename python-script-but-no-python-dep override to python3 version

 -- James McCoy <jamessan@debian.org>  Sat, 31 Oct 2020 20:44:20 -0400

subversion (1.14.0-2) unstable; urgency=medium

  * Backport patch from upstream to fix FTBFS (Closes: #966989)
    - Fix crash in JavaHL JNI wrapper caused by object lifetimes
  * svn_load_dirs.1: Use correct groff macro for single-quote
  * Update lintian overrides to account for renamed tags

 -- James McCoy <jamessan@debian.org>  Mon, 17 Aug 2020 13:01:19 -0400

subversion (1.14.0-1) unstable; urgency=medium

  * Update to new upstream version 1.14.0.
  * Install NOTICE as required by Apache license
  * rules: Disable dh_auto_test for Arch: all builds

 -- James McCoy <jamessan@debian.org>  Wed, 03 Jun 2020 22:21:57 -0400

subversion (1.14.0~rc2-3) experimental; urgency=medium

  * copyright: Add details for build/ac-macros/ax_boost_*
  * Stop installing NOTICE, since debian/copyright has all the information

 -- James McCoy <jamessan@debian.org>  Wed, 22 Apr 2020 07:57:45 -0400

subversion (1.14.0~rc2-2) experimental; urgency=medium

  * Ship svnshell as an example, not under /usr/bin/
  * Switch to using dh instead of plain debhelper
  * Fix an error leak in debian/patches/last-changed-date-charset.  Thanks to
    Daniel Shahaf for the patch.  (Closes: #956921)

 -- James McCoy <jamessan@debian.org>  Tue, 21 Apr 2020 23:05:17 -0400

subversion (1.14.0~rc2-1) experimental; urgency=medium

  * Update to new upstream version 1.14.0~rc2.
    + Fix crash when using git-svn with kwallet.  (Closes: #945443)
    + Escape filenames when invoking $SVN_EDITOR.  (Closes: #577118)
    + Transition Python bindings from python 2 to python 3.  (Closes: #739790, #938578)
  * Remove python-subversion from subversion-tool's Recommends, since nothing
    uses the Python bindings.
  * Replace python-subversion with python3-subversion
    + Build-Depend on swig (>= 3.0.10), instead of swig3.0 (Closes: #954866)
    + Add new Build-Depends on py3c
    + Build-Depend on python3-all-dev instead of python-all-dev
  * rules: Run tests in parallel according to DEB_BUILD_OPTIONS setting
  * libsvn1.symbols: Update for 1.14 API changes
  * Add support for pkg.subversion.noruby Build-Profile
  * Build-Conflict against incompatible libsvn1/libsvn-dev
  * lintian: Override concatenated-upstream-signatures
  * Update release notes for 1.9 - 1.13 and add 1.14

 -- James McCoy <jamessan@debian.org>  Sun, 12 Apr 2020 15:37:14 -0400

subversion (1.13.0-4) unstable; urgency=medium

  * Disable building python-subversion if SWIG 4.0 is installed
    (Closes: #954866)
  * Remove python-subversion from subversion-tool's Recommends

 -- James McCoy <jamessan@debian.org>  Sat, 25 Apr 2020 08:58:28 -0400

subversion (1.13.0-3) unstable; urgency=medium

  [ James McCoy ]
  * rules: Use "pyversions -s" instead of "pyversions -i"
  * Build with swig3.0 to fix FTBFS with swig4.0 (Closes: #951893)
  * Declare compliance with Policy 4.5.0, no changes needed
  * Build-Depend on debhelper-compat (= 12)

  [ Dimitri John Ledkov ]
  * swig.m4: Do not include ruby include subdir

 -- James McCoy <jamessan@debian.org>  Tue, 24 Mar 2020 08:33:36 -0400

subversion (1.13.0-2) unstable; urgency=medium

  [ James McCoy ]
  * gbp.conf: Do not number patches

  [ Steve Langasek ]
  * use python2 as the interpreter now for tests, not python (Closes: #948770)

 -- James McCoy <jamessan@debian.org>  Sun, 19 Jan 2020 08:59:14 -0500

subversion (1.13.0-1) unstable; urgency=medium

  * New upstream release
  * debian/watch:
    + Monitor 1.13.x versions
  * Update upstream signing keys
  * debian/control:
    + Bump minimum jdk version to 1.8
    + Switch to junit4 for Java tests
    + Bump libsvn-dev Build-Conflicts to << 1.13~
    + Remove obsolete Build-Depends on apache2-dev
    + Fix a typos in the pkg.subversion.nokde profile name
  * Declare compliance with Policy 4.4.1, no changes needed
  * Fix FTBFS on certain archs due to PIC/PIE interaction.
    Thanks to Thorsten Glaser for the patch (Closes: #942798)
  * libsvn1.symbols:
    + Mark private/experimental symbols as optional
    + Update symbols for 1.11, 1.12, and 1.13
  * debian/tests:
    + Replace $ADTTMP with $AUTOPKGTEST_TMP
  * Add fetch-keys script to update/minimize signing-key.asc
  * Add a pkg.subversion.nojava build profile

 -- James McCoy <jamessan@debian.org>  Thu, 28 Nov 2019 22:11:05 -0500

subversion (1.10.6-1) unstable; urgency=medium

  * Update to new upstream version 1.10.6.
    + Security fix
      - CVE-2018-11782: Remotely triggerable DoS vulnerability in svnserve
        'get-deleted-rev'
      - CVE-2019-0203: Remote unauthenticated denial-of-service in Subversion
        svnserve
  * Support a pkg.subversion.nokde build profile.
    Thanks to Jason Duerstock for the patch (Closes: #929326)

 -- James McCoy <jamessan@debian.org>  Wed, 31 Jul 2019 07:01:38 -0400

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libsvn1`.
