apt (3.3.6) unstable; urgency=medium
 .
   [ Julian Andres Klode ]
   * SECURITY UPDATE: Download verification bypass
     - methods/*.cc: Open target files exclusively
     - CVE-2026-109518
   * Out of bounds accesses
     - debDebFileParser: reject .deb without a Version field
     - solver: Ensure workLess is a strict weak ordering
   * Performance evaluation tooling
     - perf: scale multiplexed hardware counters
     - perf: set CLOEXEC on perf and output file descriptors
     - perf: make PerformanceContext non-copyable
     - perf: clean up includes, member initialization, and stub signature
   * Additional unit tests and property-based tests using Hegel
     - test: Add Hegel property-based testing support
     - test: Hegel tests for Debian version comparison
     - test: Additional tag file parser unit tests
     - test: Hegel round-trip property tests for string utilities
     - test: Hegel and more unit tests for the solver
     - test: Add ParseQuoteWord and Base64 whitespace unit tests
 .
   [ Andriy Pysyk ]
   * Update Ukrainian translation for APT 3.3.5

emacs-jabber (0.15.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version.
   * Drop upstream patch introduced in 0.15.0-2.

flam3 (3.1.1+v20260911+ds-1) unstable; urgency=medium
 .
   * New upstream version 3.1.1+v20260911+ds
   * Update standards and compat level
   * Refresh patch
   * Update copyright
   * Update watch file to Version: 5

id3 (1.1.3-1) unstable; urgency=medium
 .
   * New upstream release:
     - drop the test-genre and test-audio-scan patches; integrated upstream
     - switch to the Go implementation of id3:
       - update the build dependencies
       - misuse dh-golang horribly because the sources are not in
         the top-level directory
       - add debian/id3.install and debian/id3.manpages
     - chase the upstream test suite rewriting in Python:
       - update the build dependencies
       - update the autopkgtest
     - update the copyright file to reflect upstream's switch to
       yearless copyright notices
   * Drop the years on my debian/* copyright notice, too.

jack-audio-connection-kit (1:0.126.0-7) unstable; urgency=medium
 .
   * Team upload
   * Disable metadata support (Closes: #1119224)

libsonlib (1.1+git20220915.5cbc158+dfsg1-1) unstable; urgency=medium
 .
   * Cutest is now provided as separate package:
     - Build against libcutest-dev instead of the removed externalTools copy.
     - Stop shipping CuTest.h and cuTest.a in libsonlib-dev.
   * Redesign the autopkgtest as run-unit-test

mopidy-mpd (4.1.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * d/control: Build-depend on mopidy >= 4.0.2 and python3-rich, as
     upstream now requires.

node-mapbox-jsonlint-lines-primitives (2.0.3-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1152254)

psqlodbc (1:18.00.0006-1) unstable; urgency=medium
 .
   * New upstream version 18.00.0006.
   * Fixes CVE-2026-120057 CVE-2026-120058 CVE-2026-120059 CVE-2026-120060
     CVE-2026-120061 CVE-2026-120062 CVE-2026-120063 CVE-2026-120064
   . CVE-2026-120065 CVE-2026-120066 CVE-2026-120067.

psygnal (0.16.1-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Pieter Lenaerts ]
   * New upstream version 0.16.1 (Closes: 1147479)
   * d/patches: drop upstream applied patch
   * d/patches: add upstream patch fixing mypy 2.4 (Closes: 1150627)
   * d/patches: patch pyproject.toml to keep debug info
   * d/control: bump debhelper-compat-version to 14, remove obsolete substvars,
     remove redundant requires-root, add dh-sequence-single-binary
   * d/rules: add hardening
   * d/python3-psygnal.lintian-overrides: mypy stub modules don't use libc or
     other

pymongo (4.19.0-2) unstable; urgency=medium
 .
   * Team upload.
   * Salsa CI: test nocheck & nodoc jobs
   * Mark python3-pytest* as <!nocheck>
   * Rewrite d/watch in v5 format

python-opentelemetry-contrib (0.66b2-1) unstable; urgency=medium
 .
   * d/watch: ignore the old 1.16.0 tag.
   * New upstream version 0.66b2
   * d/patches: rebase to 0.66b2
   * d/README.Debian: add rationale for autopkgtest structure
   * Generate manual pages for opentelemetry-bootstrap and
     opentelemetry-instrument with help2man.
   * Build the python-opentelemetry-contrib-doc package, following
     python-opentelemetry-doc.
   * d/salsa-ci.yml: enable the nodoc and nocheck,nodoc build profile tests

python-tatsu-lts (5.16.0+ds-3) unstable; urgency=medium
 .
   * debian/control: Build-depend on python3-all to build and test against
     all supported Python versions.
   * debian/control: Bump Standards-Version to 4.7.4 (no changes needed).

python-testfixtures (12.4.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version 12.4.0 (Closes: #1151829)
   * Refresh patches
   * Rewrite d/rules with newer & shorter syntax
   * Add build-dep on python3-structlog & python-structlog-doc
   * Run tests against python3-loguru but python-loguru-doc is not available

qcelemental (0.51.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/patches/skip_web_using_tests.patch: Removed, no longer needed.
   * debian/patches/fix_testsuite.patch: Likewise.
   * debian/rules: Define QCELEMENTAL_SKIP_NETWORK_TESTS.