twitter-bootstrap4 (4.6.1+dfsg1-5) unstable; urgency=high

  * Team upload
  * Fix CVE-2024-6531 (XSS vulnerability):
    An anchor element (<a>), when used for carousel navigation
    with a data-slide attribute, can contain an href attribute
    value that is not subject to proper content sanitization.
    Improper extraction of the intended target carousel’s
    #id from the href attribute can lead to use cases where
    the click event’s preventDefault()
    is not applied and the href is evaluated and executed.
    As a result, restrictions are not applied to the data
    that is evaluated, which can lead to potential
    XSS vulnerabilities.
    (Closes: #1084059)

 -- Bastien Roucariès <rouca@debian.org>  Sun, 13 Apr 2025 13:42:02 +0200

twitter-bootstrap4 (4.6.1+dfsg1-4) unstable; urgency=medium

  * Team upload
  * Declare compliance with policy 4.6.1
  * Add symlink from sass/bootstrap to nodejs/bootstrap/scss
    (Closes: #1024779)

 -- Yadd <yadd@debian.org>  Fri, 25 Nov 2022 06:37:10 +0100

twitter-bootstrap4 (4.6.1+dfsg1-3) unstable; urgency=medium

  * Team upload
  * Back to unstable (Closes: #1011807)

 -- Yadd <yadd@debian.org>  Fri, 17 Jun 2022 14:05:55 +0200

twitter-bootstrap4 (4.6.1+dfsg1-2) experimental; urgency=medium

  * Team upload
  * Replace custom postcss.js by use of node-postcss-cli (Closes: #1011807)

 -- Yadd <yadd@debian.org>  Sat, 04 Jun 2022 11:19:52 +0200

twitter-bootstrap4 (4.6.1+dfsg1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 4.6.1+dfsg1 (Closes: #1008258)

 -- Yadd <yadd@debian.org>  Fri, 25 Mar 2022 15:13:46 +0100

twitter-bootstrap4 (4.6.0+dfsg1-4) unstable; urgency=medium

  * Team upload
  * Update standards version to 4.6.0, no changes needed.
  * Add missing .map files (Closes: #991939)

 -- Yadd <yadd@debian.org>  Wed, 22 Dec 2021 12:09:52 +0100

twitter-bootstrap4 (4.6.0+dfsg1-3) unstable; urgency=medium

  * team upload

  * use and build-depend on terser (not uglifyjs.terser)

 -- Jonas Smedegaard <dr@jones.dk>  Thu, 02 Dec 2021 21:52:13 +0100

twitter-bootstrap4 (4.6.0+dfsg1-2) UNRELEASED; urgency=medium

  [ Yadd ]
  * Update excluded files

 -- Yadd <yadd@debian.org>  Fri, 30 Jul 2021 06:48:35 +0200

twitter-bootstrap4 (4.6.0+dfsg1-1) experimental; urgency=medium

  * Ignore beta versions
  * New upstream version 4.6.0+dfsg1 (Closes: #983300)
  * Update doc

 -- Yadd <yadd@debian.org>  Tue, 23 Feb 2021 05:57:14 +0100

twitter-bootstrap4 (4.5.2+dfsg1-8) unstable; urgency=medium

  * Add missing .map files (Closes: #991939)

 -- Yadd <yadd@debian.org>  Sat, 07 Aug 2021 07:07:47 +0200

twitter-bootstrap4 (4.5.2+dfsg1-7) unstable; urgency=medium

  [ Pirate Praveen ]
  * Don't check for caniuse-lite updates during build (Closes: #991651)

  [ Yadd ]
  * Fix install after previous change

 -- Yadd <yadd@debian.org>  Fri, 30 Jul 2021 06:53:34 +0200

twitter-bootstrap4 (4.5.2+dfsg1-6) unstable; urgency=medium

  * Duplicate symlink_to_dir command for stable update (Closes: #980546)

 -- Xavier Guimard <yadd@debian.org>  Fri, 22 Jan 2021 10:02:59 +0100

twitter-bootstrap4 (4.5.2+dfsg1-5) unstable; urgency=medium

  * Fix build link to @rollup/plugin-babel (Closes: #980665)

 -- Xavier Guimard <yadd@debian.org>  Thu, 21 Jan 2021 19:57:46 +0100

twitter-bootstrap4 (4.5.2+dfsg1-4) unstable; urgency=medium

  * Fix update break introduced in 4.5.2+dfsg1-2: replacing a symlink by a
    directory requires a mainscript file (Closes: #977864)
  * Set upstream metadata fields: Security-Contact.
  * Declare compliance with policy 4.5.1

 -- Xavier Guimard <yadd@debian.org>  Tue, 22 Dec 2020 06:26:58 +0100

twitter-bootstrap4 (4.5.2+dfsg1-3) unstable; urgency=medium

  * Team upload.

  * fix symlink paths

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 22 Dec 2020 01:23:38 +0100

twitter-bootstrap4 (4.5.2+dfsg1-2) unstable; urgency=medium

  * Team upload.

  * link eack file (not dir)
    to ease use e.g. with apt-file or dh-linktree

 -- Jonas Smedegaard <dr@jones.dk>  Mon, 21 Dec 2020 22:52:36 +0100

twitter-bootstrap4 (4.5.2+dfsg1-1) unstable; urgency=medium

  * Back to unstable
  * Bump debhelper compatibility level to 13
  * Use dh-sequence-nodejs
  * New upstream version 4.5.2+dfsg1
  * Refresh patches
  * Update build dependencies

 -- Xavier Guimard <yadd@debian.org>  Sat, 10 Oct 2020 10:17:20 +0200

twitter-bootstrap4 (4.5.0+dfsg1-1) experimental; urgency=medium

  * New upstream version 4.5.0+dfsg1
  * Update docs
  * Add fix for rollup
  * Update build (Closes: #922824)
  * Use pkg-js-tools
  * Build with node-babel 7.9.6 instead of buble
  * Add pkg-js-tools hooks

 -- Xavier Guimard <yadd@debian.org>  Tue, 19 May 2020 14:58:24 +0200

twitter-bootstrap4 (4.4.1+dfsg1-2) unstable; urgency=medium

  * Update sassc use: replace "-m auto" by "--sourcemap=auto" (Closes: #954694)
  * Declare compliance with policy 4.5.0

 -- Xavier Guimard <yadd@debian.org>  Sun, 22 Mar 2020 20:45:44 +0100

twitter-bootstrap4 (4.4.1+dfsg1-1) unstable; urgency=medium

  * New upstream version 4.4.1+dfsg1
  * Refresh patches
  * Update docs

 -- Xavier Guimard <yadd@debian.org>  Sun, 08 Dec 2019 08:58:15 +0100

twitter-bootstrap4 (4.3.1+dfsg2-4) unstable; urgency=medium

  * Fix javascript link (fixes debci)

 -- Xavier Guimard <yadd@debian.org>  Mon, 14 Oct 2019 21:18:34 +0200

twitter-bootstrap4 (4.3.1+dfsg2-3) unstable; urgency=medium

  * Fix popper.js path and requires version 1.14.6+ds2-2

 -- Xavier Guimard <yadd@debian.org>  Thu, 10 Oct 2019 20:26:13 +0200

twitter-bootstrap4 (4.3.1+dfsg2-2) unstable; urgency=medium

  * Team Upload.

  [ Nilesh Patra ]
  * Bump debhelper compatibility level to 12
  * Declare compliance with policy 4.4.1
  * Switch to uglifyjs.terser
  * Fix install paths

  [ Xavier Guimard ]
  * Set version for node-bootstrap virtual package (Closes: #930372)

 -- Nilesh Patra <npatra974@gmail.com>  Mon, 30 Sep 2019 14:22:41 -0400

twitter-bootstrap4 (4.3.1+dfsg2-1) unstable; urgency=medium

  [ Xavier Guimard ]
  * Filter upstream .gitignore
  * New upstream version 4.3.1+dfsg2. Fixes: CVE-2019-8331
  * Update d/copyright
  * Update doc install

  [ Jonas Smedegaard ]
  * Remove myself as uploader.

  [ Xavier Guimard ]
  * Genarate all sources maps
  * Change build-dep from node-popper.js to libjs-popper.js

 -- Xavier Guimard <yadd@debian.org>  Thu, 21 Feb 2019 16:55:38 +0100

twitter-bootstrap4 (4.2.1+dfsg2-2) unstable; urgency=medium

  * Add patch to avoid copyright year update during build

 -- Xavier Guimard <yadd@debian.org>  Thu, 07 Feb 2019 07:21:41 +0100

twitter-bootstrap4 (4.2.1+dfsg2-1) unstable; urgency=medium

  [ Xavier Guimard ]
  * Add libjs-popper.js in dependencies (Closes: #920188)
  * Declare compliance with policy 4.3.0
  * Disable require test due to upstream error
  * Update debian/copyright
  * Generate CSS files with sassc and postcss+autoprefixer

  [ Jérémy Lal ]
  * Patch to build js using buble instead of babel
  * Build-Depends rollup, buble and resolver plugin
  * Build-Depends node-popper.js
  * Build bundles using rollup
  * Files-Excluded: dist/* and js/dist/* (Closes: #920858)
  * Build plugins to js/dist/

  [ Jonas Smedegaard ]
  * Optimize CSS with sassc (not cssmin).
    Stop build-depend on cssmin.
  * Install more of documentation:
    No longer infested by pre-generated code.

 -- Xavier Guimard <yadd@debian.org>  Thu, 31 Jan 2019 13:13:06 +0100

twitter-bootstrap4 (4.2.1+dfsg1-1) unstable; urgency=medium

  * Fix override (not extend) dh_auto_build.
  * Provide Sassy SCSS files.
    Provide package sass-stylesheets-bootstrap, and enhance sass.
  * Update copyright info:
    + Fix exclude all minified convenience code copies
      when repackaging source.
    + Fix mention reasons for repackaging in Source field.
    + Stop exclude git and travis hint files when repackaging source.
    + Add Files section for packaging,
      and corresponding License section.
  * Update watch file:
    + Bump watch file format version to 4.
    + Add usage comment.
    + Use substitution strings.
    + Track tags (not releases).
    + Drop unneeded uversionmangle.
    + Generalize dversionmangle.
    + Bump repacksuffix.
  * Add git-buildpackage configfile:
    + Enable pristine-tar and signed tags.
    + Filter any .git* files.
  * Remove wrong lintian overrides about prebuilt code missing source.
  * Add clarifying comment to lintian overrides
    about embedding Twitter Bootstrap.
  * Repackage upstream source tarball
    to fix exclude all minified convenience code copies.
  * Add myself as uploader.
  * Add helper script to source for tracking copyright and licensing.
  * Add lintian override about license in License-Reference field.
    See bug#786450.
  * Enable autopkgtest.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 22 Jan 2019 14:48:54 +0100

twitter-bootstrap4 (4.2.1+dfsg-1) unstable; urgency=medium

  * Add Multi-Arch: foreign
  * Import upstream version 4.2.1+dfsg
  * Drop patches
  * Update lintian-overrides
  * Update doc path

 -- Xavier Guimard <yadd@debian.org>  Sat, 22 Dec 2018 10:29:31 +0100

twitter-bootstrap4 (4.1.3+dfsg-2) unstable; urgency=medium

  * Provide node-bootstrap and update files installation

 -- Xavier Guimard <yadd@debian.org>  Thu, 06 Dec 2018 06:32:40 +0100

twitter-bootstrap4 (4.1.3+dfsg-1) unstable; urgency=medium

  * Initial release (Closes: #842828)

 -- Xavier Guimard <yadd@debian.org>  Mon, 03 Dec 2018 21:51:17 +0100
