-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Sep 2025 18:23:08 -0400
Source: skopeo
Architecture: source
Version: 1.20.0+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Reinhard Tartler <siretart@tauware.de>
Changes:
skopeo (1.20.0+ds1-1) unstable; urgency=medium
.
* New upstream release 1.20.0
- Breaking Change: The `unshare` command now requires the `CAP_SYS_ADMIN`
capability.
- Security: GPG key handling updated to disallow weak SHA-1 signatures.
- Feature: Add initial support for Sequoia-based signing via
`--sign-by-sq-fingerprint`.
- Build: Now links dynamically against the system `sqlite3` library.
- Fix: Correctly recognize "tag not found" errors for `oci:` and
`oci-archive:` transports.
.
* New upstream release 1.19.0
- Breaking Change: `skopeo inspect` and `skopeo layers` now enforce
manifest and blob digest validation for improved integrity.
- Feature: Add shell completions for image transport names.
Checksums-Sha1:
fd069a7fd40a65a3b637e14a32d3481fdb993542 2888 skopeo_1.20.0+ds1-1.dsc
a5277f6e5f58c6b40225bf148a8def3bb3ecff62 893732 skopeo_1.20.0+ds1.orig.tar.xz
61b6a5e2370436f5dcc51c8d7de8d44a20872c20 4728 skopeo_1.20.0+ds1-1.debian.tar.xz
Checksums-Sha256:
7b6f83e8f6e5f6c775e6d443280dc48aee6cef12c8ff2d59e5c9170e9bd98d52 2888 skopeo_1.20.0+ds1-1.dsc
b7c21be63bdcf01f0a3e6cde8171a5e9b3f3fb82ca2455ed672d09c28935c5f4 893732 skopeo_1.20.0+ds1.orig.tar.xz
4cf77c44d87e78b386c4317403c7862f1ab7a84c59dd0060a340fccdc1768210 4728 skopeo_1.20.0+ds1-1.debian.tar.xz
Files:
aeb0e2575f9f27391bd738c82cdb06f4 2888 devel optional skopeo_1.20.0+ds1-1.dsc
67c0f213649d55613071af8deb897e47 893732 devel optional skopeo_1.20.0+ds1.orig.tar.xz
2bb4b9cfa043cd23cfaf5115365ce38b 4728 devel optional skopeo_1.20.0+ds1-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmjZwgEUHHNpcmV0YXJ0
QHRhdXdhcmUuZGUACgkQSadpd5QoJstu+w/+IPHdTNI72tRFOgSAd4GQaU5+7HpC
KCyl15DskaX10iWX0Mqy9b4MxCyVu11PQeOgyupTvrF+jXzjxTdyuJNfWH8rpuei
n1VsOieey+rzI+lKt0WW7IjxfWRuoYMh3UBecYGYNYhtScW34/kzpXOqjjjd60+n
ie+eejvmGAmWvYIs4fIEEv6Z1LG7SvH2xzSv1pQX7/KXH8FS1nIHaSop9xCD3Aan
poD8HAG7SaPWDNNYPdIx4sjardtvPNVyO1OcVP1gp7f4TH0xgc2rFBt5GeTx5qKb
mWy6ca2UBHpw7UZTrU7V0kw0yZ3m5Nvi/NS6MYojYrUSGjKQm8vF60imrfSMNG2V
FArWLptxqLGODzBWPS8G6jS0BWilwcHlds5/DqJ7PNCrPG0F5Sv2YY6RWb/gRTl6
tQfr0EbaAeCNSwjUI1NcmY59qihtPd5WybTPiu2hGFkgSdZyq7dKVSl9G2bmBG3y
41KPPNgnx44Zz0loaVFtlwU5BibfzWJ8saa8DqJAtAwz4V2dAPK2lp69t7lDAUjj
8OCR/RXcBicIGs7J5ajaqacIZpeEbGiJbIUPWbXtgZqk7WFiyxjx16pPAX8C5ssj
DFh6xEtZw0wV5LWzB4go0/Wig3rPnhpsNJkx/eIoluMzLokep6d2jJt3HBw94CEF
HpkhRJfUYHwsF84=
=sZR7
-----END PGP SIGNATURE-----
