vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit 4eb7bd79db6a905ec44d6430f700608040cff3f7
Author: Guillem Jover <guillem@debian.org>
Date: Fri May 8 05:39:36 2026 +0200
build: Set TAR_OPTIONS to avoid leaking maintainer information on dist
The default tar invocation by automake leaks the user and group IDs and
names into the tarball. And while those are probably going to be easy to
infer, it is unnecessary to expose them. With the automake switch from
tar format v7 to ustar this is now worse as it used to only leak the
IDs, not the names.
We set and export TAR_OPTIONS with --owner=0 and --group=0 to neuter the
information leak. Although ideally automake would set those by default.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/d/debsig-verify.png){kind=link}