-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 12 Jan 2025 21:43:14 -0800 Source: gh Architecture: source Version: 2.46.0-3 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Otto Kekäläinen <otto@debian.org> Closes: 1088808 1089120 Changes: gh (2.46.0-3) unstable; urgency=medium . [ Loren M. Lang ] * Apply patch to fix CVE-2024-54132 (Closes: #1089120) * Apply patch to fix CVE-2024-53858 (Closes: #1088808) * Don't let $GH_TOKEN from the build environment break the test * Fixed a build error introduced in a recent test change * Fixed an issue with flaky download tests * Enabled Salsa CI for packaging repository for improved quality assurance before uploads to Debian archives . [ Otto Kekäläinen ] * Update copyright and uploaders metadata to match current maintainers Checksums-Sha1: cc09057dc3f4512d8e5b7952987a092ff08623f0 4094 gh_2.46.0-3.dsc fe8f64312c61d929f65c3e2c3aba289aa03a7d96 951940 gh_2.46.0-3.debian.tar.xz 6ac5fd246aaced6cc2e0d9cf07dfd6f7ea048405 15648 gh_2.46.0-3_source.buildinfo Checksums-Sha256: d876ca5e3cdeb7351fe9fc779f98b35bb9afa6daa93d0c7423df3c08ea59ee59 4094 gh_2.46.0-3.dsc 811799eb01b3f1f02f8d3875093d073ed94163411efac93c258aa32c470b948c 951940 gh_2.46.0-3.debian.tar.xz 88a203a15fbe3e6b687064121cba398dfece6a9168b4b03073e5d491ef678ae6 15648 gh_2.46.0-3_source.buildinfo Files: b32aa56089219ef5d106bc42592f85d7 4094 golang optional gh_2.46.0-3.dsc ee9caab8c0641eaf59fb1c02f33b4929 951940 golang optional gh_2.46.0-3.debian.tar.xz 4b7077fd46f151791cc83d3bf2f76ae7 15648 golang optional gh_2.46.0-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbRSsR88dMO0U+RvvthEn87o2ogFAmeEvQ8ACgkQvthEn87o 2oitBhAAkA1uP3CqX5mvOTss3l+i9EWwqV/226jkgKjvCxK2bnHQi4ypHfIMfFx1 tdoEK71P775Am+x+X1z5GqaDsV81K5E8rPc3hDY3T5BA187bwc8ZkNLCcDNmJQOK aF1rI6VzDsR/xB5RcKdBA4hsTc70jCTgf/QoAGZIM5Ekxx+9PfPBn97BOxopG9vb Rf+QEIl/IoehBnhU9G5USIny8CYBAVmRCrFmc1jSPpLKymsT+xJYpl3+OnimDnNf CiXadCCeQLj0PM7E0ERomztRHdicRImvgrNLoHGbTXo6QxilR7KUFJfApLVBxH21 HMFjczYMT6BuQhUb/2tMdV4ewpWyD5hgHSiIuHWayg+b/baL8vC2GIbOnuT55b3p YMD91t+Vh50AeEQMHzwuoP50Dc55sWtcoD/h+mj5LoMOT8mxuhNuzlDUfVxNW550 Y7dXpgncUEVp9R2tmLiznRoCHJeh7UvmDKwlHTRBoXL7NYvaSXpHRbMEdlRuvR+I 4jYeVqJZr/eqpuY633r/bn2POuEL0Nu/OqM45ckmb6ARoQIHkuOONgidwaK3COmp Ejy8JiU7oS9MmgSVIpT8l/FDDtojKfd7I0ZNJ9hBflIZz+18EyfE86rbMICao3Ea oeff3iizW10TISfhh7BXiK1KubpVBvUDdbe1NQ0ApbiPv2XI5Gs= =SMBw -----END PGP SIGNATURE-----