crumb (1.4.1-1) unstable; urgency=medium
 .
   * New upstream release.
     - crumb acp: an Agent Client Protocol agent for editors such as Zed.
     - crumb exec: --stream-json, --resume, --model and --approvals.
   * debian/copyright: add the ACP registry icon, derived from the
     CC-BY-4.0 favicon.
   * Update the man page: version, and the new crumb acp command.

fastfetch (2.70.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 2.70.0+dfsg

groonga (16.1.5+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 16.1.5+dfsg
   * debian/rules
     debian/libgroonga-dev.install
     - Keep Multi-Arch: same (Closes: #1153208)

nginx (1.30.6-3) unstable; urgency=medium
 .
   * d/rules: write nginx-dev's conf_flags with printf instead of echo,
     thanks to Sebastien Bacher for preparing the fix (Closes: 1153098)

node-re2 (1.27.0+~cs1.8.1-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream version 1.27.0+~cs1.8.1

nodejs (24.22.2+dfsg+~cs24.19.2-1) unstable; urgency=medium
 .
   * New upstream version 24.22.2+dfsg+~cs24.19.2
   * riscv64: add missing v8 patch. Closes: #1151837.
     Thanks to Aurelien Jarno.
nodejs (24.22.1+dfsg+~cs24.19.2-1) unstable; urgency=medium
 .
   * New upstream version 24.22.1+dfsg+~cs24.19.2.
     + CVE-2026-105481 http: ensure agent data guard works without I/O
     + CVE-2026-105482 dns: validate resolve inputs for null bytes
     + CVE-2026-105483 tls: fix ip normalization regression
     + CVE-2026-106069 tls: reject non-canonical IP addresses
     + CVE-2026-106072 tls: fix certificate validation for non-canonical IPv4 hostnames
       Upstream forgot to list it in changelog, see
       https://github.com/nodejs/node/pull/66984
     + CVE-2026-106073 permission: check permission model in realpathSync
     + CVE-2026-106074 crypto: reset random caches across snapshots
     + CVE-2026-111497 src: expose `BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH`
   * B-D brotli 1.2.0-4.1 because of CVE-2026-111497 change.
nodejs (24.22.0+dfsg+~cs24.19.2-2) unstable; urgency=medium
 .
   * Bump libuv1-dev requirement >= 1.53.0
nodejs (24.22.0+dfsg+~cs24.19.2-1) unstable; urgency=medium
 .
   * New upstream version 24.22.0+dfsg+~cs24.19.2
   * Drop patch applied upstream
   * Skip failing test-perf-hooks-sliding-window-histogram

python-coverage (7.17.2-1) unstable; urgency=medium
 .
   * The “Christine Ladd-Franklin” release.
   * New upstream version.
     Highlights since previous release:
     * All upstream source is now DFSG-free.
     * Support Python version 3.11 – 3.16.
     * Work around a parser bug when `with` contexts are multiply nested.
       Closes: bug#1152622. Thanks to Colin Watson for the report.
     * Fix a resource bloat when generating text report.
   * debian/README.source:
     * Document our preferred VCS collaboration strategy.
     * Document policy on use of Generative AI.
   * debian/watch:
     * Declare that upstream releases have no OpenPGP signature.
   * debian/source/lintian-overrides:
     * Override false positive check for upstream release OpenPGP signature.