-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 24 Jul 2020 02:44:11 +0200
Source: roundcube
Architecture: source
Version: 1.4.7+dfsg.2-1
Distribution: unstable
Urgency: low
Maintainer: Debian Roundcube Maintainers <pkg-roundcube-maintainers@alioth-lists.debian.net>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Changes:
roundcube (1.4.7+dfsg.2-1) unstable; urgency=low
.
* d/rules: Exclude TinyMCE language Javascript packs from minification as
Roundcube and TinyMCE load $code.js files not $code.min.js.
* d/patches: Rename Use-system-JQueryUI.patch to use-system-JQueryUI.patch.
* Bundle TinyCME as secondary orig tarballs (downloaded automatically using
custom uscan(1) script) rather than in d/missing-sources. The TinyCME zip
archive we used to ship in d/missing-sources violates DFSG (since
1.3.0+dfsg.1-1), because upstream's jsdeps.json links to the so-called
"production package" which doesn't include preferred sources of
modification. This remained unnoticed because lintian doesn't inspect the
content of archives in d/missing-sources. Unfortunately Roundcube is
still too dependent on the TinyCME version for us to switch to the
packaged version (see #784351), so we use secondary tarballs (repacked to
exclude generated files such as minified JS and CSS files) for now.
* d/control: Bump minimum node-less version to 3.0.0 as for later versions
evaluation of JavaScript inline is disabled by default unless the new --js
flag is set.
* d/patches: Add Forwarded: DEP-3 headers.
Checksums-Sha1:
d51ea06b0e8f9e63a6a1d90b5c0f8e8bc4c29a0b 3078 roundcube_1.4.7+dfsg.2-1.dsc
b3a6ba08d80ad25191ab1a4966b92403713699a3 128972 roundcube_1.4.7+dfsg.2.orig-tinymce-langs.tar.xz
44825ecefd0daa1147df1d4a0e89bc60aad2b7af 891260 roundcube_1.4.7+dfsg.2.orig-tinymce.tar.xz
afc64e5946f4787f27947c698b8a511c6ae9a5ba 2934328 roundcube_1.4.7+dfsg.2.orig.tar.xz
82183e182f24117681a3bb1a9f5c545a9474fed6 74368 roundcube_1.4.7+dfsg.2-1.debian.tar.xz
b3535b9503b21bcfb9d6105fa8f68f36a9433cfe 11027 roundcube_1.4.7+dfsg.2-1_amd64.buildinfo
Checksums-Sha256:
ed6f2f9fd94ce2565a48f2a46a27ec3e20a2a407b0693ccfb5da5095c9b6c8fb 3078 roundcube_1.4.7+dfsg.2-1.dsc
82b1158f028da87975a7583a3b3321bf597b8bd6ae350cf1958e695b3c7b022e 128972 roundcube_1.4.7+dfsg.2.orig-tinymce-langs.tar.xz
ec9a9d0b289bb69fdfd47996fe23efcfd03c408d3cb4cff5f439dcb6969d18c4 891260 roundcube_1.4.7+dfsg.2.orig-tinymce.tar.xz
6939f6a24d9098e9ea44a5c3e2068da439bb118205bb56244d3c00d7ba4cd124 2934328 roundcube_1.4.7+dfsg.2.orig.tar.xz
caf9af3f31be1c254ad593962faafb3498d0ffea467cc01db2ecba79e1d3e583 74368 roundcube_1.4.7+dfsg.2-1.debian.tar.xz
83472062c7b5633d562f9584665e5fd8886bfc9eb5c800015232bc7ac5ab75a5 11027 roundcube_1.4.7+dfsg.2-1_amd64.buildinfo
Files:
d05dd02b3168b616fef2496d65d3e573 3078 web optional roundcube_1.4.7+dfsg.2-1.dsc
cbbfdf897de7b36d6992f97017ed8ce5 128972 web optional roundcube_1.4.7+dfsg.2.orig-tinymce-langs.tar.xz
75d76d56cad330f4f57a91835e449705 891260 web optional roundcube_1.4.7+dfsg.2.orig-tinymce.tar.xz
44c71657b2df808d045caeaf2a5ebb38 2934328 web optional roundcube_1.4.7+dfsg.2.orig.tar.xz
8a6886fa6700a28b00a974d2855e6ee2 74368 web optional roundcube_1.4.7+dfsg.2-1.debian.tar.xz
68c7ae2fb66034bcdcddbd00e542d892 11027 web optional roundcube_1.4.7+dfsg.2-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=WdOr
-----END PGP SIGNATURE-----
