Change logs for devscripts source package in Cosmic

  • devscripts (2.18.4ubuntu1) cosmic; urgency=medium
    
      * debsign: revert 37b5cc1e5; using short key IDs is not unsafe for
        private keys.  Closes: #909810.
    
     -- Steve Langasek <email address hidden>  Fri, 28 Sep 2018 17:37:23 -0700
  • devscripts (2.18.4) unstable; urgency=medium
    
      [ Mattia Rizzolo ]
      * debchange:
        + Replace implicit boolean evaluation of a Dpkg::Version object by
          Dpkg::Version::is_valid().  Closes: #900703
      * bts:
        + Add the new 'ftbfs' tag to the list of known tags.  Closes: #900963
      * grep-excuses:
        + Avoid unintended blessing during YAML loading.
          Thanks to Ansgar Burchardt <email address hidden> for reporting and
          providing a patch.  Closes: #902409; CVE-2018-13043
      * uscan:
        + Remove wrong information about GitHub releases.  Closes: #902842
      * test/test_uscan_ftp:
        + Skip test on hurd-i386, hurd is missing a required feature.  MR: !23
      * test/pylint:
        + Temporarily disable the test, as pylist is currently uninstallable,
          see #902631.
      * debian/control:
        + Comment-out build-dependency on pylint3.
        + Bump Standards-Version to 4.2.1, no changes needed.
    
      [ Shengjing Zhu ]
      * uscan:
        + Fix wrong git log command in manpage.  MR:!16
    
      [ Simon McVittie ]
      * tests/test_package_lifecycle:
        + Don't load ~/.devscripts while calling debdiff.  MR: !17
      * sadt:
        + Implement new restrictions from autopkgtest git master.  MR: !18
          - 'flaky': if this test fails, the failure is logged but is not
            counted as a failure.
          - 'skippable': if this test exits 77, it counts as skipped,
            not failed (even if it wrote to stderr).
      * uscan:
        + Handle absolute USCAN_DESTDIR correctly in git mode.
          Closes: #895279; MR: !14
    
      [ Sean Whitton ]
      * git-deborig:  MR !19
        + When suggesting the user run git-deborig again with more arguments,
          include all the arguments the user originally passed in the
          suggestion.
    
      [ James McCoy ]
      * grep-excuses:
        + Strip all HTML tags, not just anchors, from excuses.  MR !20
      * debsnap:
        + Disable explicit validity checking in Dpkg::Version constructor so
          there's an actual object to call is_valid() on.  Closes: #903479
    
      [ Ian Jackson ]
      * grep-excuses:
        + Add --autopkgtest option to show autopkgtest failures in the target
          package which are caused by new versions of other packages.  MR !21
    
      [ Lev Lazinskiy ]
      * uscan:
        + Handle --copy argument.  Closes: #895209; MR !22
    
      [ Translation updates ]
      * French, thanks to jean-pierre giraud.  Closes: #902815
    
      [ Kees Cook ]
      * hardening-check:
        + Drain both stdout/stderr while waiting for readelf to exit to prevent
          readelf from getting blocked on a full pipe.  Closes: #903482
    
      [ Christoph Berg ]
      * namecheck: Drop code.google.com, it's down.
    
      [ Adam D. Barratt ]
      * bts:
        + Support fetching bugs from debbugs.gnu.org:  Closes: #904432
          - Force CGI URL to be "/cgi/" rather than "/cgi-bin/" when using
            the gnu.org server.
          - Match both "/cgi/" and "/cgi-bin/" when rewriting URLs in cache
            files.
          - Allow links to mbox files to contain additional HTML attributes.
        + Pre-emptively support HTTPS URLs when parsing release-critical pages.
        + Really use HTTPS by default for bugs.debian.org.
    
      [ Guillem Jover ]
      * debsnap:
        + Switch to HTTPS for connections to snapshot.debian.org.  Closes: #904659
    
      [ Agustin Henze ]
      * uscan:
        + Use stricter match to find href attribute to avoid invalid URLs.
          Closes: #904578; MR !25
    
      [ Jakub Wilk ]
      * rmadison:
        + Fix error handling to avoid having all curl/wget errors to be treated
          as SSL errors.  Closes: #907683
    
      [ Javi Sabalete ]
      * debcommit:
        + Always use annotate tags with git.  MR: !24
    
     -- Mattia Rizzolo <email address hidden>  Mon, 03 Sep 2018 22:30:44 +0200
  • devscripts (2.18.3ubuntu2) cosmic; urgency=medium
    
      * debian/rules: disable tests until pylint works with Python 3.7.
    
     -- Marc Deslauriers <email address hidden>  Tue, 17 Jul 2018 13:36:01 -0400
  • devscripts (2.18.3ubuntu1) cosmic; urgency=medium
    
      * SECURITY UPDATE: Code execution through unsafe YAML loading
        - CVE-2018-13043
    
     -- <email address hidden> (Leonidas S. Barbosa)  Thu, 05 Jul 2018 14:00:53 -0300
  • devscripts (2.18.3) unstable; urgency=medium
    
      [ Maximiliano Curia ]
      * dpkg-depcheck:
        + Also trace openat syscall.  Closes: #898418; MR: !11
    
      [ Sean Whitton ]
      * git-deborig:
        + Now works in a git worktree.
          Closes: #897050; MR: !12
    
      [ Pierre-Elliott Bécue ]
      * rmadison:
        + Make it verbose when the failure is due to a SSL CACERT check failure,
          either from wget or from curl.
          Closes: #882347
    
      [ Mattia Rizzolo ]
      * test/test_uscan_ftp:
        + Handle errors coming from the ftpserver.py subprocess to avoid possible
          endless loops.  Closes: #898370
      * d/tests/control:
        + Add missing test-dep on python3-pyftpdlib.  Closes: #898450
    
      [ Antonio Terceiro ]
      * sadt: Several improvements from MR: !13 and MR: !15
        + Support comma-separated restrictions.
        + support comma-separated tests.  Closes: #881825
        + Split features by commas or whitespace.
        + Recognize (and ignore) the needs-recommends restriction.
        + Improve output:
          - Display output of commands in verbose output.
          - Improve organization of verbose output.  Closes: #748852
          - Print extra separator at the end of test log.
        + Add support for Test-Command: in debian/tests/control.  Closes: #781963
      * test:
        + test_debrepro: extract helper functions into test_helper.sh.
        + Makefile: remove trailing tabs, and sort.
        + sadt: add basic tests.
      * debrepro:
        + Cleanup files if package is reproducible.
    
      [ Paul Wise ]
      * wrap-and-sort: allow using --dry-run without --verbose
    
     -- Mattia Rizzolo <email address hidden>  Wed, 23 May 2018 13:32:26 +0200
  • devscripts (2.18.2ubuntu1) cosmic; urgency=medium
    
      * debian/tests/control: Depend on python3-pyftpdlib for the ftp tests.
    
     -- Adam Conrad <email address hidden>  Thu, 03 May 2018 15:18:46 -0600
  • devscripts (2.18.2) unstable; urgency=medium
    
      [ Daniel Kahn Gillmor ]
      * uscan:
        + Add short archive extensions (tbz, txz, tgz) in the @ARCHIVE_EXT@
          regexp.  Closes: #823624
    
      [ Ben Finney ]
      * suspicious-source:
        + Correct "preferred form of the work for making modifications to it".
          Closes: #859617
    
      [ Nish Aravamudan ]
      * dep3changelog:
        + Make parsing less strict about blank lines.
          Closes: #858287; LP: #1673292
    
      [ Ben Wiederhake ]
      * wrap-and-sort:
        + Add a dry-run option.  Closes: #808574
    
      [ Hilko Bengen ]
      * debsnap:
        + Complain about existing destdir only when it is created.
          Closes: #884177
    
      [ Mònica Ramírez Arceda ]
      * nmudiff:
        + Add a template argument to provide a different email from the one in the
          script.  Closes: #555863
    
      [ Pierre-Elliott Bécue ]
      * d/control:
        + Add myself to uploaders.
      * wrap-and-sort:
        + Tweak the way files are handled, and print the modified file list in
          also in non-dry-run-mode when verbosity is enabled.
        + Remove empty lines at the beginning of a file.
      * nmudiff:
        + Add a no-pending option to not add the pending tag if needed.
        + Add a non-dd option to ask for a sponsor in the email.
          Closes: #662794
    
      [ Mattia Rizzolo ]
      * mk-origtargz:
        + Deal with Hurd where `getconf ARG_MAX` returns "undefined".
      * Fix some pylint issues that are reported only by stretch's pylint.
      * d/control:
        + Bump Standards-Version to 4.1.4, no changes needed.
      * test_package_lifecycle:
        + Don't depend on /usr/share/doc being available on the build host.
      * sadt:
        + Fixup the check_depends() caching functionality.  MR: !9
    
      [ Adam D. Barratt ]
      * debdiff:
        + Sort shlibs files before comparing. The order of entries is not
          significant.
    
      [ Paul Wise ]
      * chdist, cowpoke:
        + Default to deb.debian.org instead.
    
      [ Antonio Terceiro ]
      * uscan:
        + Redirect Alioth's gemwatch to gemwatch.debian.net.  MR: !2
      * debrepro:
        + Vary between timezones that are more than 1 day apart.  MR: !3
        + Add a --before-second-build option, to inject extra command before
          the second build runs.  MR: !4
        + Add a testcase.  MR: !8
    
      [ Chris Lamb ]
      * debsign:
        + To prevent collision attacks, refuse to sign with short key IDs (eg.
          0xCAFEBABE) and warn when not using full GPG fingerprint.  MR: !1
    
      [ Dmitry Shachnev ]
      * sadt:
        + Set AUTOPKGTEST_TMP environment variable.  MR: !5
    
      [ Sean Whitton ]
      * git-deborig:  MR: !7
        + New --just-print option.
          - Add recommends and build-depends on libstring-shellquote-perl.
        + New --version option.
        + New --force alias for -f.
        + Correct terminology ref->committish (see gitglossary(7)).
        + Add to the manpage details about gitattributes(5) manipulation.
    
     -- Mattia Rizzolo <email address hidden>  Mon, 23 Apr 2018 00:33:07 +0200
  • devscripts (2.17.12ubuntu1) bionic; urgency=medium
    
      * test/test_debchange: Explicitly set --vendor Debian, to fix test suite
        compatibility with Ubuntu.
    
     -- Steve Langasek <email address hidden>  Tue, 02 Jan 2018 21:03:46 -0800