-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 22 Oct 2026 07:38:38 +0000
Source: golang-github-theupdateframework-go-tuf
Binary: go-tuf golang-github-theupdateframework-go-tuf-dev golang-github-theupdateframework-go-tuf-v2-dev
Architecture: source amd64 all
Version: 2.4.2+0.7.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Otto Kekäläinen <otto@debian.org>
Description:
go-tuf - framework for Securing Software Update Systems (program)
golang-github-theupdateframework-go-tuf-dev - Securing software in golang (transitional package)
golang-github-theupdateframework-go-tuf-v2-dev - Securing software in golang (library)
Changes:
golang-github-theupdateframework-go-tuf (2.4.2+0.7.0-2) unstable; urgency=medium
.
[ Juan Manuel Méndez Rey ]
* Team upload.
* Rename the library package to golang-github-theupdateframework-go-tuf-v2-dev
to match the module path, and keep the old name as a transitional
package.
* Set XS-Go-Import-Path to github.com/theupdateframework/go-tuf/v2. Keep v0
installed at github.com/theupdateframework/go-tuf/v0, which sigstore
imports.
* Build-Depend and Depend on golang-github-syndtr-goleveldb-dev
(v0/client/leveldbstore) and golang-golang-x-crypto-dev
(v0/encrypted). Build-Depend on golang-github-dustin-go-humanize-dev
and golang-golang-x-term-dev (v0/cmd) and, for the tests, on
golang-github-google-gofuzz-dev and golang-gopkg-check.v1-dev. All are
imported directly but were only pulled in indirectly, and goleveldb
and gofuzz no longer are with go-containerregistry 0.22.1.
* Disable the uscan job in Salsa CI. uscan cannot match the combined
2.4.2+0.7.0 version.
Checksums-Sha1:
8349521dbb648d1ca17353d8f6ac2bff77cbc64f 3103 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.dsc
347c903457052602cecce9d1c76af5ec490286ab 645766 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0.orig.tar.gz
4eff4b17a645eadd250651acbdbe01bb502b369b 6768 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.debian.tar.xz
15242b1e46d2e7c0c7662b96821c80076cce0284 3522124 go-tuf_2.4.2+0.7.0-2_amd64.deb
14eecc9f3aeb6f1b1b3f3f73f47693ed982f31ea 4704 golang-github-theupdateframework-go-tuf-dev_2.4.2+0.7.0-2_all.deb
9306f9d8092dacf42fa66ae1356b8b9f369f11bd 209856 golang-github-theupdateframework-go-tuf-v2-dev_2.4.2+0.7.0-2_all.deb
ef90cc202af47e06b1c11fd7c569caa8833f04ca 36536 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2_amd64.buildinfo
Checksums-Sha256:
9413c8383883af2255545062ad244f4744bb89803e24b07453e9eec117ddc0e1 3103 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.dsc
cb7330d1386c27a8a6f64fa7019455ccc48dac145d792ff5da669d17db114e01 645766 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0.orig.tar.gz
5fe849a0cc50cfd54cc14e3ab340d8d3a5e46a8ef5bb44f10ca3428b39991f26 6768 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.debian.tar.xz
555f50c2a4ff3bd29a0dc14fa0ecddd83c72b93bff326e031ee3ce00b1f1ddca 3522124 go-tuf_2.4.2+0.7.0-2_amd64.deb
a3824f45f68bbda8996d0b39bd494c31e02134ab37ad2a23c0852e62194d3ac6 4704 golang-github-theupdateframework-go-tuf-dev_2.4.2+0.7.0-2_all.deb
5f24710bae27b2c114c1fa8c5fd8b03130c7e98bee5b7c5301d4dbd4dfbdad56 209856 golang-github-theupdateframework-go-tuf-v2-dev_2.4.2+0.7.0-2_all.deb
fc51ab6e1930873ded09d1039c45a1099af6aed6fdaf4387151d6768ab3fd517 36536 golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2_amd64.buildinfo
Files:
a86192748555aabe9ab6a3803c7b0364 3103 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.dsc
e4b2eac21f49fd1f2ebe3584537d682c 645766 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0.orig.tar.gz
2449c802860b8de4840a2770869b4e9a 6768 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2.debian.tar.xz
104111b725485e07f5499d5320b1fc6f 3522124 devel optional go-tuf_2.4.2+0.7.0-2_amd64.deb
5aa483d60ae1280b5ddb6cde657383b3 4704 oldlibs optional golang-github-theupdateframework-go-tuf-dev_2.4.2+0.7.0-2_all.deb
7759162fabd341c4c88d6f023c9d213f 209856 golang optional golang-github-theupdateframework-go-tuf-v2-dev_2.4.2+0.7.0-2_all.deb
364edf4bfd0ba87fc55fc15b43847392 36536 golang optional golang-github-theupdateframework-go-tuf_2.4.2+0.7.0-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=yfD3
-----END PGP SIGNATURE-----
