-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 28 Jul 2026 15:04:17 +0200 Source: debsbom Architecture: source Version: 0.9.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Team <team+python@tracker.debian.org> Changed-By: Felix Moessbauer <felix.moessbauer@siemens.com> Changes: debsbom (0.9.0-1) unstable; urgency=medium . * debian: add more recommended packages * Add option to the filter command for subgraph filtering of a package * Fixed a path traversal bug with remote filenames in download command Checksums-Sha1: 524ffb184c160991570705644eb4c4c749a4218f 2698 debsbom_0.9.0-1.dsc 365c4de85c7d8144790e3b1a98c88e43fb9b4457 171804 debsbom_0.9.0.orig.tar.xz 4a73ddc21aa5209c64a858d81642bd69f330106c 8732 debsbom_0.9.0-1.debian.tar.xz f66a38937d4624a96e9331f44881baf9125171d0 9321 debsbom_0.9.0-1_amd64.buildinfo Checksums-Sha256: 202c2d4cef0b8a23baaf1238a716317ff7d03c6e259fa2196ac4bc75c26c0427 2698 debsbom_0.9.0-1.dsc 77f2c0e8850ac58becf195d7cb4d7fd4d6c05ac267865d0a0c7ec257475607e8 171804 debsbom_0.9.0.orig.tar.xz b1f8550b781552b6485095ccd4a0fcd4f98f727d3b7d8af1052da6d774cc1c45 8732 debsbom_0.9.0-1.debian.tar.xz 7478b18ff01c28b08011b943707042c9de7e5900e1fb9aa55332d6d3a51bb712 9321 debsbom_0.9.0-1_amd64.buildinfo Files: 0abd03def718f098f901afe970a1afc2 2698 python optional debsbom_0.9.0-1.dsc e9659afc2d7054d013fa3858f5755a8d 171804 python optional debsbom_0.9.0.orig.tar.xz a0ac8e88db793c1a6d4e372340f3db1f 8732 python optional debsbom_0.9.0-1.debian.tar.xz 61294b363bb8ec4b23f6b89bada84978 9321 python optional debsbom_0.9.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJRBAEBCgA7FiEEr3P271pTz+MEVp9Q5kijEfZ6UPwFAmppwAAdHGZlbGl4Lm1v ZXNzYmF1ZXJAc2llbWVucy5jb20ACgkQ5kijEfZ6UPwz3g//aKUgEKO311l/eZK8 VbsF8GQTVwcq+pHrBaoZop/arEyAZdwd3Rk4WTsRPNeDsUXvH8zcgezdYmWkRkL8 Sutamh+NWRGCkd4btGtp+hrR/aKmygekbmUAVhk3u2GZxa1aRVHhNn4gyX2HpAz1 QU9pVEUQHaGg+F2ddORfCqYund2uTnTqE24341KcqaearaaeWVSncKMzCeSabG9z 7atOqxUDQw7A2RKCzw0nMcquOQrhqDpaLfBss9Z4tIqtHLnhKY+3PPf+0BQVEGmv c7RXYE6KwL2/AGrV+pfAsYTEOGnhp7cWobXqUZB+5bWfeP8SQVReD9LPxbBcwWS6 bIdFTNWGPK7OLxtGWx6jtHhbZoVw9ax6/SMKAWZSnidds8DfS/q4CPg0YwgdlJaN AaFgPZXXAC0mqTki3Gi9dXjSBEDb9buYDcpMOQCsGnPlA5fRGH6DvKHO/bMlour4 5Y7ETTXj3zi+MK5wY2oc6k9jnTZqDH32ZdfG0iSShU7dPHB/WBGNc/TaVbGBmLPC mBHPOMRLh1KDw5RVRrYWFr+4W9VUAWouCY7dMST0BCfUTtRRr59cc1U3IsHr503m 7xdi41mZFBpPXZN1AOZQ8wIIlshXIrUzARZ+MtvmCFTOSM+MMJGBwD2o9o8EF53o 7GeXhk88kXiWnlK3T+E+AabnVl0= =lKKe -----END PGP SIGNATURE-----