-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 Jul 2026 10:17:49 -0300 Source: prometheus Architecture: source Version: 3.5.3+ds1-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1135260 1135999 1138247 Changes: prometheus (3.5.3+ds1-1) unstable; urgency=medium . * Team upload. * New upstream release 3.5.3. (Closes: #1138247) - Fixes CVE-2026-42151 and CVE-2026-42154. (Closes: #1135999) - Fixes flaky tests. (Closes: #1135260) * Refresh patches. * Drop web UI due to missing dependencies in Debian (rust-rolldown). * Drop obsolete UI dependencies (fonts, libjs) from debian/control. * Drop legacy UTF-8 label validation patches to fix test panics and restore test coverage. * Add comprehensive autopkgtest for Prometheus systemd service. Checksums-Sha1: 204071420470747a055b2f4778510238a1164a0b 4873 prometheus_3.5.3+ds1-1.dsc 3adc4411c506c14c50ca52e4579571b37d70f623 2005108 prometheus_3.5.3+ds1.orig.tar.xz 86f6c0206454134cfe3686debd7dcee8b600bfc7 78980 prometheus_3.5.3+ds1-1.debian.tar.xz Checksums-Sha256: 188182e4314ed6da141e40da6b72697c0fa3099aeac40cb4b9a4c147203d3011 4873 prometheus_3.5.3+ds1-1.dsc 271a91b47e6ff9e507bf94e8c9eb76005ff24afd07a713bd1345a4b98e3add1c 2005108 prometheus_3.5.3+ds1.orig.tar.xz def2b7a7f02c22ee669497ef9b9e7de91e33e4497144f1332f13e8ba14b0d721 78980 prometheus_3.5.3+ds1-1.debian.tar.xz Files: 863f23f0679947b3b4f2144d3cbabc36 4873 golang optional prometheus_3.5.3+ds1-1.dsc 5375a4d3c60f768f92a6a47535d9d380 2005108 golang optional prometheus_3.5.3+ds1.orig.tar.xz 2fe2c37ac7f75edcc2b7492e8d30c7bb 78980 golang optional prometheus_3.5.3+ds1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmpirbMUHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJstYPRAAjUutk9meph4Jz/emDA/Z3O0aqwk3 Ox65CUBYQ+mZPpUiM392Y1Q/CO3A6bTwexsGgQjvh9Mb7OS3BKHWqtvSyf6CIlUt 3OS1Z5dpSRWTxdd8PueKHUbomeBnTyVyQxwKRd4KTHPY8MxNf0rKI7Tt4gQSQPJ1 YZD/5xgskPXuYcVP9+RMW8p4nldAGZpn/2OAlsepAmAofmazbCCvBWN0UUc7+rRv qZNXcj2u/nrWjKPPlgW/mbzU1ce4aC/hw8p3/Mcwygmc8PStFEu8nR7JtwP/yPly S4WaZXLMHHLGDECSHxhhzf+YZZYGog3luJD1fbiPfSLMPgZw5zGFGrxmEG//2tzw VqE+rCpjmIXvHx5uGbU6IAq1nCZPjxyo3Ppu6duJHuwsMBANsnA37QtDFUfRJoh1 neTEnPmr5YxNSgTLxbq2SUcjEUoNRezJWWZ4PnIcWZ9zLU0UHf6XI9uvX7544Ek5 g70ewKR5znDrPVuCIx+Obk/DrLuobRwDBoBspbEjf0KRC5+TUmGzeh9OgRnrpRtn ELSTUuXizM+o9erdwDQzaRsbJZhd1DmUzs5NTcuJCeJbdEHemSD2u/x/rAH/j0Xb IUv5co83IDqo4+51OurDzx+bxDXio83H52CQzpaLhZAmYR5nOBWfskMbW4n8c299 2Y8W9MNYKiptPmE= =B1fi -----END PGP SIGNATURE-----
