Accepted cosign 3.0.6-1~exp0 (source) into experimental

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 13 Apr 2026 08:28:11 +0200
Source: cosign
Architecture: source
Version: 3.0.6-1~exp0
Distribution: experimental
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1133005
Changes:
 cosign (3.0.6-1~exp0) experimental; urgency=medium
 .
   * New upstream version
     - Fixes CVE-2026-39395 (Closes: #1133005)
   * Standards-Version: 4.7.4
   * Bump Breaks for v3 transition
   * Bump upstream copyright years
   * Improve lrc.config
Checksums-Sha1:
 a2f3690cfa8c7499368830851e0ec2af7c605bf7 4142 cosign_3.0.6-1~exp0.dsc
 1ad97fc08f415482f4c9fb11ea1dbd519f19ecd0 697780 cosign_3.0.6.orig.tar.xz
 abc27b3d8b3d1366ed83b57cfaa1940c8c40a89f 5176 cosign_3.0.6-1~exp0.debian.tar.xz
 8be077edc8519c937132345fda978714cad3f572 2106192 cosign_3.0.6-1~exp0.git.tar.xz
 6423e92b2d2621eb62190354736a5ca075b94687 17350 cosign_3.0.6-1~exp0_source.buildinfo
Checksums-Sha256:
 c5770d9a95f5407f7f099f6e61262e632bccd4a41ca61c77e7a61f91e34297ae 4142 cosign_3.0.6-1~exp0.dsc
 cc0547e36d70da7932612601385ffd886380805c0622a4ccbcb7ce9e564a3452 697780 cosign_3.0.6.orig.tar.xz
 15e36417dbf0f8e728207c8b569883a7066c967a8c02993e3aed220a7959f58a 5176 cosign_3.0.6-1~exp0.debian.tar.xz
 162aae2aa3d82343f42e9117bc586b92d6d7974a174b078a2a3140610bf1122f 2106192 cosign_3.0.6-1~exp0.git.tar.xz
 8d9b479cdb0a9ed24ea4b74f84dd95826f96fe1ca0f98eac893da75d7818d901 17350 cosign_3.0.6-1~exp0_source.buildinfo
Files:
 b7535356c27de8a9511a09ff154ecccf 4142 golang optional cosign_3.0.6-1~exp0.dsc
 92e0805b2e588e6c6fc78276ac55ce7c 697780 golang optional cosign_3.0.6.orig.tar.xz
 5be1c91d4aabae5d6d198aa66bbe8a79 5176 golang optional cosign_3.0.6-1~exp0.debian.tar.xz
 be54d1fa893bd96d5bf42b15a7165f07 2106192 golang None cosign_3.0.6-1~exp0.git.tar.xz
 aab9413603fd309c78f0fd813894f5b1 17350 golang optional cosign_3.0.6-1~exp0_source.buildinfo
Git-Tag-Info: tag=3e55f38b130072f2988341b9f2379596d25747d1 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>

-----BEGIN PGP SIGNATURE-----
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=oYz0
-----END PGP SIGNATURE-----