ecflow (5.15.0-1) unstable; urgency=medium . * New upstream release mobilitydb (1.3.0~alpha-3) unstable; urgency=medium . [ Christoph Berg ] * Drop bogus postgresql-17-postgis-3 from test dependencies; the package itself already depends on postgis. (Closes: #1117729) . [ Chris Lamb ] * mobilitydb/datagen/CMakeLists.txt: Use time zone UTC. (Closes: #1117742) mobilitydb (1.3.0~alpha-2) unstable; urgency=medium . * Upload for PostgreSQL 18. (Closes: #1117268) * Add ${postgresql:Breaks}. * debian/tests: Depend on postgresql-common-dev instead of 'make'. pgrouting (3.8.0-2) unstable; urgency=medium . [ Bas Couwenberg ] * Update lintian overrides. . [ Christoph Berg ] * Team upload for PostgreSQL 18. * debian/tests: Depend on postgresql-common-dev. postgis (3.6.0+dfsg-2) unstable; urgency=medium . * Update lintian overrides. * Drop Rules-Requires-Root: no, default since dpkg 1.22.13. * Update packaging for postgresql-18. snapd (2.71-3) unstable; urgency=medium . * Set nooptee build tag to disable OP-TEE support snapd (2.71-2) unstable; urgency=medium . * Cherry pick a fix for unit test * Depend on libcap2-bin for setcap snapd (2.71-1) unstable; urgency=medium . [ Ernest Lotter ] * New upstream release, LP: #2118396 - FDE: auto-repair when recovery key is used - FDE: revoke keys on shim update - FDE: revoke old TPM keys when dbx has been updated - FDE: do not reseal FDE hook keys every time - FDE: store keys in the kernel keyring when installing from initrd - FDE: allow disabled DMA on Core - FDE: snap-bootstrap: do not check for partition in scan-disk on CVM - FDE: support secboot preinstall check for 25.10+ hybrid installs via the /v2/system/{label} endpoint - FDE: support generating recovery key at install time via the /v2/systems/{label} endpoint - FDE: update passphrase quality check at install time via the /v2/systems/{label} endpoint - FDE: support replacing recovery key at runtime via the new /v2/system-volumes endpoint - FDE: support checking recovery keys at runtime via the /v2/system- volumes endpoint - FDE: support enumerating keyslots at runtime via the /v2/system- volumes endpoint - FDE: support changing passphrase at runtime via the /v2/system- volumes endpoint - FDE: support passphrase quality check at runtime via the /v2/system-volumes endpoint - FDE: update secboot to revision 3e181c8edf0f - Confdb: support lists and indexed paths on read and write - Confdb: alias references must be wrapped in brackets - Confdb: support indexed paths in confdb-schema assertion - Confdb: make API errors consistent with options - Confdb: fetch confdb-schema assertion on access - Confdb: prevent --previous from being used in read-side hooks - Components: fix snap command with multiple components - Components: set revision of seed components to x1 - Components: unmount extra kernel-modules components mounts - AppArmor Prompting: add lifespan "session" for prompting rules - AppArmor Prompting: support restoring prompts after snapd restart - AppArmor Prompting: limit the extra information included in probed AppArmor features and system key - Notices: refactor notice state internals - SELinux: look for restorecon/matchpathcon at all known locations rather than current PATH - SELinux: update policy to allow watching cgroups (for RAA), and talking to user session agents (service mgmt/refresh) - Refresh App Awareness: Fix unexpected inotify file descriptor cleanup - snap-confine: workaround for glibc fchmodat() fallback and handle ENOSYS - snap-confine: add support for host policy for limiting users able to run snaps - LP: #2114923 Reject system key mismatch advise when not yet seeded - Use separate lanes for essential and non-essential snaps during seeding and allow non-essential installs to retry - Fix bug preventing remodel from core18 to core18 when snapd snap is unchanged - LP: #2112551 Make removal of last active revision of a snap equal to snap remove - LP: #2114779 Allow non-gpt in fallback mode to support RPi - Switch from using systemd LogNamespace to manually controlled journal quotas - Change snap command trace logging to only log the command names - Grant desktop-launch access to /v2/snaps - Update code for creating the snap journal stream - Switch from using core to snapd snap for snap debug connectivity - LP: #2112544 Fix offline remodel case where we switched to a channel without an actual refresh - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed tarball - LP: #1952500 Fix snap command progress reporting - LP: #1849346 Interfaces: kerberos-tickets | add new interface - Interfaces: u2f | add support for Thetis Pro - Interfaces: u2f | add OneSpan device and fix older device - Interfaces: pipewire, audio-playback | support pipewire as system daemon - Interfaces: gpg-keys | allow access to GPG agent sockets - Interfaces: usb-gadget | add new interface - Interfaces: snap-fde-control, firmware-updater-support | add new interfaces to support FDE - Interfaces: timezone-control | extend to support timedatectl varlink - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and procfs directories - Interfaces: microstack-support | allow SR-IOV attachments - Interfaces: modify AppArmor template to allow snaps to read their own systemd credentials - Interfaces: posix-mq | allow stat on /dev/mqueue - LP: #2098780 Interfaces: log-observe | add capability dac_read_search - Interfaces: block-devices | allow access to ZFS pools and datasets - LP: #2033883 Interfaces: block-devices | opt-in access to individual partitions - Interfaces: accel | add new interface to support accel kernel subsystem - Interfaces: shutdown | allow client to bind on its side of dbus socket - Interfaces: modify seccomp template to allow pwritev2 - Interfaces: modify AppArmor template to allow reading /proc/sys/fs/nr_open - Packaging: drop snap.failure service for openSUSE - Packaging: add SELinux support for openSUSE - Packaging: disable optee when using nooptee build tag - Packaging: add support for static PIE builds in snapd.mk, drop pie.patch from openSUSE - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04 - Packaging: use snapd.mk for packaging on Fedora - Packaging: exclude .git directory - Packaging: fix DPKG_PARSECHANGELOG assignment - Packaging: fix building on Fedora with dpkg installed . [ Zygmunt Krynicki ] * Remove auth_requestor.go (secboot) * Rebase and re-export patches * Fix typo and clarify what core means * Remove transitional ubuntu-core-launcher package * Remove transitional snap-confine package * Simplify Conflicts: snap to exclude ubuntu version * Expand the description of golang-github-snapcore-snapd-dev * Rewrite summary of golang-github-snapcore-snapd-dev * Move golang-github-snapcore-snapd-dev to golang section * Update lintian overrides * Add Static-Built-Using to snapd * Use Breaks: snap, instead of Conflicts: snap * Do not ship snapd.recovery-chooser-trigger.service * Add manual page for snapd.apparmor.service * Add manual page for snapd.seeded.service * Add manual page for snapd.service * Update standards-version to 4.7.2 REMOVED: performous 1.3.1+ds-1 REMOVED: shepherd 1.0.7-1 REMOVED: acm 6.0+20200416-1.2