Accepted cosign 2.6.3-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 13 Apr 2026 06:27:47 +0200
Source: cosign
Architecture: source
Version: 2.6.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1133005
Changes:
 cosign (2.6.3-1) unstable; urgency=medium
 .
   * New upstream version
     - Fixes CVE-2026-39395 (Closes: #1133005)
   * Standards-Version: 4.7.4
Checksums-Sha1:
 5fb6fea64a9456d888577079677a3cc33e968915 4076 cosign_2.6.3-1.dsc
 6908f635506f15edf23ff9ff03034862fb717d02 677968 cosign_2.6.3.orig.tar.xz
 21aa5dc5ad04851c6d942142de32f8cc90f67860 5988 cosign_2.6.3-1.debian.tar.xz
 906a79da23208093ff6a82f4471c0a03da4aa6aa 2019304 cosign_2.6.3-1.git.tar.xz
 b02b329114083e44e6c3e1837219139c68bfb8dd 17330 cosign_2.6.3-1_source.buildinfo
Checksums-Sha256:
 09866bee5e15bf1d1debcc468a07c99d6a292e4f4f7dbc8e5657a4fd5419ec0f 4076 cosign_2.6.3-1.dsc
 e8056fef84658e8ea8473d0e2342d25db12cb2994444da2b77bcb09cff369068 677968 cosign_2.6.3.orig.tar.xz
 540fc7d011b2bcac4d78048f10c197125ee1c6540ae04ebf38b7c2d7cecc5c00 5988 cosign_2.6.3-1.debian.tar.xz
 951dbfc16fcc893387cd6b3f3d17d9febee98043ec30d70c07b38cbd15ed6c19 2019304 cosign_2.6.3-1.git.tar.xz
 c7c430e60af2ffe89d0d0e17a5289797b2fba94e7c943a5f5eeda878c43a604e 17330 cosign_2.6.3-1_source.buildinfo
Files:
 4af28985098550becd5315d9f6ceb379 4076 golang optional cosign_2.6.3-1.dsc
 39e82e0878560e71095e2bd7ee0014f9 677968 golang optional cosign_2.6.3.orig.tar.xz
 dea2f930b230a12ff7f051df8f04a883 5988 golang optional cosign_2.6.3-1.debian.tar.xz
 b572bf90f6f417a8f7b513f927387133 2019304 golang None cosign_2.6.3-1.git.tar.xz
 2f6e5990a03c0ac57aff5d0e1b1af640 17330 golang optional cosign_2.6.3-1_source.buildinfo
Git-Tag-Info: tag=da5a59ce2490252f07fb6e6a43d351bf15c594f5 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>

-----BEGIN PGP SIGNATURE-----
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=ICRr
-----END PGP SIGNATURE-----