Accepted gitsign 0.16.0-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 07 Jun 2026 21:33:24 +0200
Source: gitsign
Architecture: source
Version: 0.16.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1136789
Changes:
 gitsign (0.16.0-1) unstable; urgency=medium
 .
   * New upstream (Closes: #1136789)
     - CVE-2026-44309
     - CVE-2026-44310
   * Disable failing test
   * Bump upstream copyright years
Checksums-Sha1:
 2ba5ddf61b62202fdbe8d7134c9a09cfa340e187 2772 gitsign_0.16.0-1.dsc
 cb823fdc14250772aa04a318b488567054b3470e 259404 gitsign_0.16.0.orig.tar.xz
 ab311da37e7e767ee8ee564e1505c9ec2a860f52 4728 gitsign_0.16.0-1.debian.tar.xz
 e0e46c66951b80e7c6cccb3ed2b02e8b722be6b9 488700 gitsign_0.16.0-1.git.tar.xz
 59c135bf046f39daa9e0b994b861f22e6624d4ec 17492 gitsign_0.16.0-1_source.buildinfo
Checksums-Sha256:
 2a6574912dc15c60c01a4dd509edc33c966db2334ae7bdbd1d9929123fa434c0 2772 gitsign_0.16.0-1.dsc
 041d57fdc57d23ce2c98a5ceeedb5726e8603ff1f6787be40198f6b98c827ec2 259404 gitsign_0.16.0.orig.tar.xz
 07a318d96c8e43be7ccdbb2a604cec9135fdb7f5554b6282ab6dd772f8ec6d8b 4728 gitsign_0.16.0-1.debian.tar.xz
 f56c11c0d47a83901c914df1836a7b44e1d99ac0138af02b8eff5f6cf749eff2 488700 gitsign_0.16.0-1.git.tar.xz
 57a2f6e09e3d8e42d5d5755b2a521980045a15626ac0e722b936b653182b5da1 17492 gitsign_0.16.0-1_source.buildinfo
Files:
 6a006cdefe110e170b90c72c693cf8c9 2772 vcs optional gitsign_0.16.0-1.dsc
 506079466f835f2d50149fb9073aabd6 259404 vcs optional gitsign_0.16.0.orig.tar.xz
 67b55f8b70b98c1fc785eb870199f4a3 4728 vcs optional gitsign_0.16.0-1.debian.tar.xz
 d81e82e375087c80d5cd59a287b2c217 488700 vcs None gitsign_0.16.0-1.git.tar.xz
 abbe1a3abd1fda002c9e1a58f2a92ddb 17492 vcs optional gitsign_0.16.0-1_source.buildinfo
Git-Tag-Info: tag=5bd7bc59e909af79e6f2d279ad766fde2c23e290 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>

-----BEGIN PGP SIGNATURE-----
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=wqq2
-----END PGP SIGNATURE-----