Accepted golang-oras-oras-go 2.6.2-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 28 Jul 2026 17:56:57 +0200
Source: golang-oras-oras-go
Architecture: source
Version: 2.6.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1142456
Changes:
 golang-oras-oras-go (2.6.2-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream (Closes: #1142456)
     - CVE-2026-48978
     - CVE-2026-50151
     - CVE-2026-50162
     - CVE-2026-50163
   * Update copyright years for recent contributors
   * Apply consistent formatting to packaging files
   * Drop redundant `Priority: optional`
   * Bump Debian Policy version to 4.7.4
   * Use dh-sequence-golang
   * Use watch v5 and pin to v2.*
   * Revert debcraft-garbled copyright line
   * Bump debian/* copyright years
   * Use gbp sign-tags and upstream-vcs-tag
   * Use compat 14
   * Breaks:golang-github-notaryproject-notation-go-dev <= 1.3.2-3
   * Trim execute_after commands (cannot reproduce need)
Checksums-Sha1:
 ebe7924dc95ee8e1bd694782f054d98f2a635859 2572 golang-oras-oras-go_2.6.2-1.dsc
 2a18468fc7210d27d7e75fce2c18e266f030434b 185892 golang-oras-oras-go_2.6.2.orig.tar.xz
 7b9d9fd15a108c6e8bd39d9e1e2ee0fdcfae935a 2596 golang-oras-oras-go_2.6.2-1.debian.tar.xz
 f48d8b07df185a9e29882419a7b9d55443ee7b57 610564 golang-oras-oras-go_2.6.2-1.git.tar.xz
 62401ba1c7c7920be98fa5fe07a9ae93d81dcbb8 17594 golang-oras-oras-go_2.6.2-1_source.buildinfo
Checksums-Sha256:
 bd2eb4bc8de880ee70c11050aebcea2f7853116e00459b8babdb96fcec1f87d9 2572 golang-oras-oras-go_2.6.2-1.dsc
 fd74088f937844755911a6989b01a5bab8b8a07e0ad3bde83fff3deb9c5df669 185892 golang-oras-oras-go_2.6.2.orig.tar.xz
 7a259aefaa2a58e95cf8d6062e91de446cbc37e0461b14fba9b5abaa581d3fc7 2596 golang-oras-oras-go_2.6.2-1.debian.tar.xz
 2d230406df116fc729fd92691c54331ab2b4b106c39c91ee5786321e5a141b57 610564 golang-oras-oras-go_2.6.2-1.git.tar.xz
 9f9de6b1c29ae129c1aa74bc8c0a2a0f0c563bc9bb4304a2e5d483111a7e37a9 17594 golang-oras-oras-go_2.6.2-1_source.buildinfo
Files:
 8b8782e0c17cf189efd6ee0a7f1ed237 2572 golang optional golang-oras-oras-go_2.6.2-1.dsc
 3c84a04740fccc1fe0e1a960107039d6 185892 golang optional golang-oras-oras-go_2.6.2.orig.tar.xz
 00e11128fe4834d2191bab0c5b2146e1 2596 golang optional golang-oras-oras-go_2.6.2-1.debian.tar.xz
 81660f25973791eb2fd3a2cf100d7c3e 610564 golang None golang-oras-oras-go_2.6.2-1.git.tar.xz
 a98e07c11d9c1825f4f6768abc250d1f 17594 golang optional golang-oras-oras-go_2.6.2-1_source.buildinfo
Git-Tag-Info: tag=6b9f3c8605e43568235a782035d1f860519a7014 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>

-----BEGIN PGP SIGNATURE-----
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=fGI6
-----END PGP SIGNATURE-----