version in VCS is newer than in repository, is it time to upload?

package:
golang-github-go-macaron-csrf
severity:
normal
created:
2018-04-03
last updated:
2019-09-15

vcswatch reports that this package seems to have a new changelog entry (version 0.0~git20170207.0.428b7c6-5, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:
commit 5a8c46458cdcd0fa90a22e9ee01a4b8de730e5db
Author: Jelmer Vernooij <jelmer@jelmer.uk>
Date:   Fri Sep 28 08:27:04 2018 +0100

    Fix Debian QA group name.
    
    Fixes lintian: wrong-debian-qa-group-name
    See https://lintian.debian.org/tags/wrong-debian-qa-group-name.html for more details.

commit 19e5650d013c977a09be976bfdbb571cffbee88d
Author: Michael Stapelberg <stapelberg@debian.org>
Date:   Tue Apr 17 20:45:56 2018 +0000

    update debian/gitlab-ci.yml (using salsa.debian.org/go-team/ci/cmd/ci)
    
    Gbp-Dch: Ignore

commit 62771d20f75ab03ae6855622228ea42cbdfeb580
Author: aviau <alexandre@alexandreviau.net>
Date:   Mon Apr 2 16:54:07 2018 -0400

    point Vcs-* urls to salsa.debian.org


The Vcs URL is using anonscm.debian.org. Please update it for the move to salsa.debian.org.