vinyl-cache (9.0.1-4) unstable; urgency=medium

  * Add more Varnish compatibility:
    - enable support for the "varnish" top level command in varnishtest
    - add varnish* symlinks for all vinyl* binaries

 -- Marco d'Itri <md@linux.it>  Tue, 07 Jul 2026 15:12:18 +0200

vinyl-cache (9.0.1-3) unstable; urgency=medium

  * Rebuild for unstable.

 -- Marco d'Itri <md@linux.it>  Sun, 05 Jul 2026 22:21:26 +0200

vinyl-cache (9.0.1-2) experimental; urgency=medium

  * Enable again the test suite by depending on the new vtest2-source
    package.

 -- Marco d'Itri <md@linux.it>  Wed, 01 Jul 2026 15:05:49 +0200

vinyl-cache (9.0.1-1) experimental; urgency=medium

  * New upstream release.

 -- Marco d'Itri <md@linux.it>  Mon, 25 May 2026 02:26:21 +0200

vinyl-cache (9.0.0+20260429-3) experimental; urgency=medium

  * New upstream snapshot.

 -- Marco d'Itri <md@linux.it>  Sun, 03 May 2026 23:08:39 +0200

vinyl-cache (9.0.0-1) UNRELEASED; urgency=medium

  * New upstream release.
  * New name: Varnish Cache is now Vinyl Cache. For details please see:
    + https://vinyl-cache.org/organization/20-years.html
    + https://vinyl-cache.org/organization/on_vinyl_cache_and_varnish_cache.html
  * Versions of the varnish package older than 7.7.0 MUST be purged before
    installing this package.
  * Fix dh_vinylabi to stop always depending on the strict ABI.
  * Install some files typical of the Varnish development environment, to
    be able to build the vmods that have not yet been ported to Vinyl Cache.

 -- Marco d'Itri <md@linux.it>  Wed, 29 Apr 2026 16:24:02 +0200

varnish (8.0.1-1) UNRELEASED; urgency=medium

  * New upstream release.

 -- Marco d'Itri <md@linux.it>  Sun, 26 Apr 2026 01:07:58 +0200

varnish (8.0.0-1) UNRELEASED; urgency=medium

  * New upstream release.
  * Add the temp_ignore_tests Debian patch to not use the missing vtest2.
    This causes the generated documentation to be incomplete.

 -- Marco d'Itri <md@linux.it>  Sun, 26 Apr 2026 00:55:41 +0200

varnish (7.7.3-3) unstable; urgency=medium

  * Fix the VSV00019 (CVE-2025-8671) request smuggling vulnerability.
    (Closes: #1138778)

 -- Marco d'Itri <md@linux.it>  Wed, 03 Jun 2026 18:31:54 +0200

varnish (7.7.3-2) unstable; urgency=medium

  * Temporarily stop build-depending on nghttp2-client because its newer
    release broke test a02022.vtc. (Closes: #1129193)
  * Use Type=forking again for varnishncsa.service, or else a reload
    would kill the program. (Closes: #1118046)

 -- Marco d'Itri <md@linux.it>  Tue, 17 Mar 2026 15:27:52 +0100

varnish (7.7.3-1) unstable; urgency=medium

  * New upstream release. Fixes the fix introduced in 7.7.2.

 -- Marco d'Itri <md@linux.it>  Sun, 24 Aug 2025 23:22:30 +0200

varnish (7.7.2-2) unstable; urgency=medium

  * Fix the r04036 test on ppc64el.

 -- Marco d'Itri <md@linux.it>  Sun, 17 Aug 2025 09:05:55 +0200

varnish (7.7.2-1) unstable; urgency=medium

  * New upstream release. Fixes:
    - the VSV00017 denial of service vulnerability.
  * Skip most autopkgtests on riscv64 because they are unreliable.
    (Closes: #1108389)

 -- Marco d'Itri <md@linux.it>  Wed, 13 Aug 2025 22:49:24 +0200

varnish (7.7.1-1) experimental; urgency=medium

  * New upstream release. Fixes:
    - FTBFS with GCC-15. (Closes: #1098056)

 -- Marco d'Itri <md@linux.it>  Fri, 20 Jun 2025 05:16:33 +0200

varnish (7.7.0-3) unstable; urgency=medium

  * Depend on binutils because triplet-gcc calls the plain as(1) due to
    #1083135. (Closes: #1107510)

 -- Marco d'Itri <md@linux.it>  Sun, 08 Jun 2025 13:43:35 +0200

varnish (7.7.0-2) unstable; urgency=medium

  * Fix the VSV00016 request smuggling vulnerability.

 -- Marco d'Itri <md@linux.it>  Tue, 13 May 2025 01:15:16 +0200

varnish (7.7.0-1) unstable; urgency=medium

  * New upstream release.

 -- Marco d'Itri <md@linux.it>  Tue, 18 Mar 2025 18:16:09 +0100

varnish (7.6.1-3) unstable; urgency=medium

  * Require the tests to succeed on amd64.
  * dh_varnishabi: implement --strict.

 -- Marco d'Itri <md@linux.it>  Fri, 14 Mar 2025 00:48:07 +0100

varnish (7.6.1-2) unstable; urgency=medium

  * Fix dh_varnishabi to actually recognize all Varnish modules.

 -- Marco d'Itri <md@linux.it>  Fri, 29 Nov 2024 12:43:56 +0100

varnish (7.6.1-1) experimental; urgency=medium

  * New upstream release.
  * Disable LTO, because enabling it disables jemalloc.
  * Set TasksMax and LimitCORE to infinity.
  * Enable HTTP/2 by default.

 -- Marco d'Itri <md@linux.it>  Mon, 18 Nov 2024 23:47:16 +0100

varnish (7.6.0-2) unstable; urgency=medium

  * Introduce the dh_varnishabi debhelper helper, to be used by varnish
    modules packages to automatically add the dependency on varnishabi-*.
  * Stop depending on adduser, which is not used anymore since 7.5.0-1.

 -- Marco d'Itri <md@linux.it>  Thu, 24 Oct 2024 22:17:43 +0200

varnish (7.6.0-1) unstable; urgency=medium

  * New upstream release.

 -- Marco d'Itri <md@linux.it>  Fri, 20 Sep 2024 11:34:45 +0200

varnish (7.5.0-3) unstable; urgency=medium

  * Remove the -j option from the varnishd command line.
    It is not clear why it was added to varnish.service in commit
    1c9881bb6f436f9c4e4ed4e96893b6de2f3cb805 from 2015, but it caused to
    have both the management and the worker processes to run as user vcache.
    The default is to have the management process use user varnish, for
    better separation of privileges.
    This should not require any changes on upgrades.
  * Install builtin.vcl as documentation.
  * Do not install the varnishstat_help_gen program, which is only useful
    at boot time.
  * Enable again the test suite, but allow the tests to fail.
    In the future they will be enforced for supported architectures.
  * debian/control: remove Emanuele Rocca from the Uploaders, as agreed
    with him.

 -- Marco d'Itri <md@linux.it>  Sat, 20 Jul 2024 00:15:47 +0200

varnish (7.5.0-2) unstable; urgency=medium

  * debian/rules: act on varnish-doc only if it has been built.

 -- Marco d'Itri <md@linux.it>  Tue, 02 Jul 2024 15:20:32 +0200

varnish (7.5.0-1) unstable; urgency=medium

  * New upstream release. Fixes:
    + HTTP/2 Rapid Reset Attack (CVE-2023-44487, VSV00013).
      (Closes: #1056156)
    + HTTP/2 Broke Window Attack (CVE-2024-30156, VSV00014).
      (Closes: #1068455)
  * Remove the unmaintained init scripts.
    (Closes: #657449, #659005, #737528, #881056, #934278, #961750)
  * Make all daemons Restart=on-failure.
  * Switch to systemd-tmpfiles and systemd-sysusers.
  * Stop creating /var/lib/varnish/$HOSTNAME/, which is not used anymore
    by modern Varnish.
  * Create /var/lib/varnish/CACHEDIR.TAG to signal that the directory
    content should not be backed up.
  * Replace more embedded Javascript with libjs-sphinxdoc.

 -- Marco d'Itri <md@linux.it>  Tue, 02 Jul 2024 13:59:11 +0200

varnish (7.1.1-1.2) unstable; urgency=medium

  [ Marco d'Itri ]
  * Non-maintainer upload.
  * Import the precedent non-maintainer upload.

  [ Helmut Grohne ]
  * Install the systemd units using dh_installsystemd only.
    (Closes: #1054484)

 -- Marco d'Itri <md@linux.it>  Mon, 01 Apr 2024 18:06:43 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libvinylapi3`.
