cosign (3.0.6-1~exp0) experimental; urgency=medium

  * New upstream version
    - Fixes CVE-2026-39395 (Closes: #1133005)
  * Standards-Version: 4.7.4
  * Bump Breaks for v3 transition
  * Bump upstream copyright years
  * Improve lrc.config

 -- Simon Josefsson <simon@josefsson.org>  Mon, 13 Apr 2026 08:28:11 +0200

cosign (3.0.5-1~exp0) experimental; urgency=medium

  * New upstream (Closes: #1121251)
    - Fix CVE-2026-24122 (Closes: #1128652)
  * Make d/watch look for non-v2
  * Use gbp debian-branch debian/experimental
  * Refresh patches

 -- Simon Josefsson <simon@josefsson.org>  Sun, 15 Mar 2026 13:00:18 +0100

cosign (2.6.2-1) unstable; urgency=medium

  * Run wrap-and-sort -satbk
  * Add lrc.config

 -- Simon Josefsson <simon@josefsson.org>  Wed, 18 Feb 2026 22:07:39 +0100

cosign (2.6.2-1~exp0) experimental; urgency=medium

  * New upstream version
    - Fixes CVE-2026-22703 (Closes: #1126764)
  * Use watch v5 tracking git and pinning at v2
  * Use gbp upstream-vcs-tag
  * Refresh patches
  * Add new build deps
  * Bump sigstore-go to >=1.1.4
  * Drop Priority: optional
  * Drop Rules-Requires-Root: no
  * Standards-Version: 4.7.3
  * Modernize Salsa CI
  * Drop lintian field-too-long for Static-Built-Using
  * Bump copyright years
  * Breaks gitsign<=0.13.0-3

 -- Simon Josefsson <simon@josefsson.org>  Wed, 18 Feb 2026 11:21:05 +0100

cosign (2.5.0-2) unstable; urgency=medium

  * Upload to unstable.

 -- Simon Josefsson <simon@josefsson.org>  Sat, 12 Apr 2025 08:48:04 +0200

cosign (2.5.0-1) experimental; urgency=medium

  * New upstream version 2.5.0
  * Use wildcard for lintian field-too-long.
  * d/salsa-ci: Fail on lintian warnings.

 -- Simon Josefsson <simon@josefsson.org>  Thu, 10 Apr 2025 11:20:13 +0200

cosign (2.4.3-2) unstable; urgency=medium

  * Migrate to golang-gitlab-gitlab-org-api-client-go-dev
    from golang-github-xanzy-go-gitlab-dev.
  * cosign: Add Static-Built-Using.

 -- Simon Josefsson <simon@josefsson.org>  Wed, 09 Apr 2025 17:35:23 +0200

cosign (2.4.3-1) unstable; urgency=medium

  * New upstream version 2.4.3
  * Refresh disable-credhelper.patch.
  * salsa-ci: Rebuild reverse dependencies.
  * Need sigstore-go >= 0.7.0.
  * Use xanzy gitlab for now.
  * Fix cosign lintian override for Built-Using.
  * Improve man page building.
  * Standards-Version: 4.7.2.

 -- Simon Josefsson <simon@josefsson.org>  Mon, 17 Mar 2025 00:04:29 +0100

cosign (2.4.1-2) unstable; urgency=medium

  * Upload to unstable.
  * d/salsa-ci.yml: Drop local apt repos.
  * Add manpage.
  * Use dh-sequence-golang.
  * d/salsa-ci.yml: Tighten Salsa autopkgtest checks.
  * Override lintian error for cosign's Built-Using.
  * Bump d/* copyright years.
  * DEP3ify patches.
  * Clean test wasm file.

 -- Simon Josefsson <simon@josefsson.org>  Mon, 20 Jan 2025 00:53:18 +0100

cosign (2.4.1-1) experimental; urgency=medium

  * Initial release (Closes: #1061446)

 -- Simon Josefsson <simon@josefsson.org>  Sun, 01 Dec 2024 13:53:40 +0100
