-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 23 Oct 2026 22:38:00 +0000 Binary: cosign cosign-dbgsym golang-github-sigstore-cosign-dev golang-github-sigstore-cosign-v3-dev Source: cosign Architecture: all amd64 source Version: 3.1.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Reinhard Tartler <siretart@tauware.de> Closes: 1148510 Description: cosign - Code signing/transparency for containers and binaries (program) golang-github-sigstore-cosign-dev - Code signing/transparency for containers and binaries (transition golang-github-sigstore-cosign-v3-dev - Code signing/transparency for containers and binaries (library) Changes: cosign (3.1.1-2) unstable; urgency=medium . * Team Upload * Tighten Build-Depends and Depends on golang-github-open-policy-agent-opa-dev (>= 1.4.2+ds1-3~) (Closes: #1148510) * Transition library package to golang-github-sigstore-cosign-v3-dev: - Update XS-Go-Import-Path to github.com/sigstore/cosign/v3. - Provide golang-github-sigstore-cosign-dev transitional package in oldlibs. - Scope debian/watch to v3.x series. - Drop redundant Section field inherited from source paragraph. Checksums-Sha1: d78c4eeac044a5e63777337b2b66dd05d506432d 4003 cosign_3.1.1-2.dsc cc246e8b66d612dd1cee6cc1b840d8cd776db637 6012 cosign_3.1.1-2.debian.tar.xz b42fc204ef0b0d08890e5a6ceaec4638218583c5 21494016 cosign-dbgsym_3.1.1-2_amd64.deb 613b8ba0bc0651474936af13732f86effde25734 41018 cosign_3.1.1-2_amd64.buildinfo e98be968c1a97bbeace148c417c99f3e6e928af1 17676136 cosign_3.1.1-2_amd64.deb 147286c5592dd4968f6d660dbe218eb0b147fbdb 38260 golang-github-sigstore-cosign-dev_3.1.1-2_all.deb 367c5052f89da3696ad8fe1e7b14bfc04fa1bf73 386712 golang-github-sigstore-cosign-v3-dev_3.1.1-2_all.deb Checksums-Sha256: 1714878275a92a1bdd62d03ee44e553f8cb26071def84ad56bcc313d96cd03c8 4003 cosign_3.1.1-2.dsc 392b0535f6dd0c6bacdbcae818408dd5867aeeb66a812051a0c66008125f93fd 6012 cosign_3.1.1-2.debian.tar.xz b699708bd96330200c1d92df37748efdc8cae02b9834fe9308303aca9b339c1f 21494016 cosign-dbgsym_3.1.1-2_amd64.deb 4d1438411270aa73ffb0b534ab0c3d4f605a04a68a8d92b5c7f9299d28bfb930 41018 cosign_3.1.1-2_amd64.buildinfo d8622ebffce1d69197288fc030ff06a4c247af5507107f85c5a878870b686b23 17676136 cosign_3.1.1-2_amd64.deb abb56f2e08c29eb2897523a0016e7da16477378cbca0603427ded7a3cae73a17 38260 golang-github-sigstore-cosign-dev_3.1.1-2_all.deb 363a3ea776e696cd8ecddf1e5fc1f95d6371e719eef51c59a710c7b82f87941b 386712 golang-github-sigstore-cosign-v3-dev_3.1.1-2_all.deb Files: d0f99aebaf60fb08108271e69f1a00e7 4003 golang optional cosign_3.1.1-2.dsc 8aa5a89b27d59cb60fbc33845d77b904 6012 golang optional cosign_3.1.1-2.debian.tar.xz 21633937b33f9d0da32080df8ecb0406 21494016 debug optional cosign-dbgsym_3.1.1-2_amd64.deb d20147f5dfe4b9d1c6f3c352cf81663a 41018 golang optional cosign_3.1.1-2_amd64.buildinfo 3fce852c9ed714130590a7dce2796210 17676136 golang optional cosign_3.1.1-2_amd64.deb 57142f0da6965634a4d3a3adf5aa5f83 38260 oldlibs optional golang-github-sigstore-cosign-dev_3.1.1-2_all.deb 5f7553d9dd8880a181a6564f16b42fca 386712 golang optional golang-github-sigstore-cosign-v3-dev_3.1.1-2_all.deb -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmrcfrAUHHNpcmV0YXJ0 QHRhdXdhcmUuZGUACgkQSadpd5QoJsuA/A//Toorc+3gVerK0rZuTUWM93b890+I cHiRwj/VpUFVAPOMmF6j6c5x6YRgniOcDCvKeflU8xwsAYVsQuTYWNVmeQ7tidHp 5H7t0PSTpayg5W2jnRm+KL1OV1VgBXTyqEsfdHc/7oWih+gQaOPryGwlqNH8SLxI N99RdVbKG1rEs+RgMIKdfay1Rcce2dLVYoNGZHvq5w88wPT3xoxoLJqE0q/algQu L5Gmzw7E/xKIp4tIEX1usAPDmltiFCaGgoUsyqYZ46o6xQNWrMvpxlHiRLwvFKb8 8oCGyEJzCxLYRz4oJG5Rd4EjRjt86iHK/Glo+ws4PO3CwZDLeuLrrDBSnzccVgm1 QenmuMJQxplBbLlD8aPkBqL2jBEYClmF6+lQ0x9Vzny1jDWr91jkdqJ5aGUDRbSJ +CyExkUaB66eQyedVY0Y3pSn5SnP9emCEfhfLoWBbqyj2aex2AwRfpO8uR4aW4ck fqSAhPGE42PDHAc5+bqWLgnYVrCMkB1ajQQ82Anpy9xrOxoMHd4whhrK3ML/ThK1 ovopD7Cjo71ZXDdIkjKPm+GkzPE8QotFh8A2Vm3zEPTyYv4+De1N+mkAol9y+PNb RbpW7YvKLLoDD+8AuseexdFhChy7Q3bqZbYlKqiwESZURc9R9qBplZJTgjnQg0hr 55PCU26Tt38THHw= =4aKM -----END PGP SIGNATURE-----
