-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Nov 2026 07:37:29 +0100 Source: dpkg Architecture: source Version: 1.23.12 Distribution: unstable Urgency: medium Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org> Changed-By: Guillem Jover <guillem@debian.org> Closes: 1016143 1079138 1137427 1149150 1151270 1152021 1152228 1152941 1153538 1153834 Changes: dpkg (1.23.12) unstable; urgency=medium . [ Guillem Jover ] * dpkg-source: Handle --help and --version as commands. * dpkg-source: Add support for --robot for --version output. * dpkg: Add minimal database structure audit support. * dpkg: Add support for auditing the database contents. Closes: #1016143 * dpkg: Deprecate ancient alias for --selected-only. * dpkg: Parse the --*-avail arguments before initializing the database. * dpkg-name: Honor --overwrite with --symlink. * dpkg: Use "installed" instead of "old" for maintscript error with no "new". Closes: #1151270 * dpkg-buildpackage: Fix --sign-pause long option name. Thanks to Cheng Li <shiptux@gmail.com>. * dpkg-buildpackage: Accept --sign-command auto and none arguments. Reported by Cheng Li <shiptux@gmail.com>. See #1061450. * dpkg-deb: Check for directory traversal symlinks in control.tar deb member. Reported by Thai Duong <thai@calif.io>. * Output messages: - Move program synopsis from --version to a new field in --help output. - Add missing program synopsis to new field in --help output. - dpkg-ar: Add missing paragraph separator in --help output. - dpkg: Print only the package name in --audit and --yet-to-unpack. - dpkg: Indent package names in --audit and --yet-to-unpack with two spaces. - dpkg-source: Clarify warning about duplicate address in Uploader field. * Perl modules: - Dpkg::Getopt: Add a function to print the version in robot format. - Dpkg::Getopt: Add print_synopsis() function. - Test::Dpkg: Add completion/bash directories to all_shell_files. Reported by Cheng Li <shiptux@gmail.com>. See #1061450. - Dpkg::OpenPGP: Remove unused Dpkg::IPC import. - Dpkg::Source::Package::V3::Git: Use spawn() instead of qx(). - Dpkg::Source::Package::V3::Git: Fix chdir usage. Closes: #1152228 - Dpkg::Source::Package::V2: Move tar options into a variable. - Dpkg::Source::Package::V2: Pass the same tar exclusion options for debian.tar. Reported by Thai Duong <thai@calif.io>. Analysis by Anthropic LLM, verified by humans at Calif.io. - Dpkg::Source::Package::V3::Quilt: Remove database dir on unpack. Reported by Thai Duong <thai@calif.io>. * Shell completion: - Add quotes around variable expansion. * Documentation: - man: Fix format of some "since version" sentences. - man: Document backport markers handling in dpkg-mergechangelogs(1). Closes: #1079138 - man: Rename "old-postinst" to "postinst" for abort-remove in deb-postinst(5). * Code internals: - libdpkg: Add missing included header. Thanks to Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>. - libdpkg: Add print_version() function. - libdpkg: Add print_synopsis() function. - Switch to libdpkg print_version(). - Split dselect methods libdir macro usage from database dir macro. - libdpkg: Move database pathname macros to dpkg-db.h. - libdpkg: Rename and namespace database file and directory macros. - dpkg: Split database audit code into its own module. - dpkg-query: Move list_format_init() outside of the pkg_array visitor. - libdpkg: Change pkg_array_visitor_func() to pkg_visitor_func(). - libdpkg: Move pkg function typedefs to pkg.h. - libdpkg: Refactor files list file loading from a package array visitor function. - dpkg: Rename yet-to-unpack functions. - dpkg: Make execbackend() static and move it to its declaration location. - dpkg: Refactor db_available_check_access() function. - dpkg: Split available db update and clear actions into different functions. - scripts: Remove /o modifier from regular expressions. - scripts: Explicitly import Dpkg::Control::Types module. - scripts: Remove redundant imports. - libdpkg: Make sure we do not overflow when growing command argv. - dpkg-name: Rename move() function to rename_archive(). - scripts: Use Perl functions instead of simple ln, cp, mv commands. - scripts: Use spawn() instead of system() when not needing a shell. - perl: Switch directory from within the spawn() call. * Build system: - Bump -Wstrict-overflow from level 2 to 3. - Anchor .gitignore entries for generated files. Thanks to Cheng Li <shiptux@gmail.com>. See #1061450. * Test suite: - Skip hop 0.26.1 from tests as it was a buggy release. * Localization: - Update Dutch translations. Closes: #1152941, #1153834 Thanks to Frans Spiesschaert <Frans.Spiesschaert@yucom.be>. - Update Portuguese man pages translation. Closes: #1149150 Thanks to Américo Monteiro <a_monteiro@gmx.com>. - Update Ukrainian translations. Closes: #1137427, #1152021, #1153538 Thanks to Andriy Pysyk <ep.nestor@gmail.com>. Checksums-Sha1: a80ca2081fb9a5a17b96d84bba968635bc76021e 3510 dpkg_1.23.12.dsc a8c3923f9d0d4eeceb395cee23eb56f228354b5f 5889132 dpkg_1.23.12.tar.xz 089ea8c4e56602cb237c64f95b8e3e567b80345c 8074 dpkg_1.23.12_amd64.buildinfo Checksums-Sha256: 3b864baca694e1a4f0358ebc1e6923153579f4e6fd4e321ee1e6c9b7bfe1a14f 3510 dpkg_1.23.12.dsc 829e7a454f61232b33372c1564b803ab16cfc98e08bd2ec1e2b94bdb1fb97502 5889132 dpkg_1.23.12.tar.xz 84ddd1a12fb1f6a0ddcbfc64c4c0f463f718cfde9c2ecd528360111c8bdc56ce 8074 dpkg_1.23.12_amd64.buildinfo Files: 3dbfe9124494b88ec92d6fef9e12c886 3510 admin required dpkg_1.23.12.dsc 72841b6c15a085f78c0b5fb412801fa4 5889132 admin required dpkg_1.23.12.tar.xz 6622696de2861aaa9e074784e051971c 8074 admin required dpkg_1.23.12_amd64.buildinfo -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJq9rS6CRC5cr8+pK5Xo0cUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmen9+j2tWXJWdu1d8mmF5fNsm+FD8cqdYy66Mb2aeae RhYhBE8+dPQ2BQwQ9WlldLlyvz6krlejAACAAw//fPUeXynrNjdAITVJmp8n6Y6f vKXqcW0jGGZpybMHeREnIEUYTF4pyf8DbMh0boLlMRG5iDoxiaXQfmjFOipK+zn6 W76Rbjc/raQa8AJR19D9oUsIvd8hXiLyj42L9VQdbD0AYrOUmkuo9PMmdF59wVa2 iF45TaRwop2Aeaq9/tgSp5jLu0ofDVH6vjBmkDSMmYjlVu41fcf7dCGoB78R4hk6 lg6OeJHOpPnN6i8Hbd8DJZMMaECzOQjCgwgxCM59l+LA7SzLLAJ7MbfuG/tdk1hG fFUnx7Da8r/hZZ3/gWfRWTfRjVw0k9KwdG2iBkdTQ8ExIVWUpXF46Db8cW/sBlOs 2/5GAo52ENFaZdJ0gHnb/Ti3zpU+FRdHKLWTbF2BKYi28ZDIyyf8OEqb60VR+wR1 m3hDT5oSP994Ka3ZLQxx+evV1ewpTeeMviQHjzWWwc3IR6J4/Kxz+N2EAp+Bxd5M oZA/RE9tgUxX+ZyfU58CLg0xbqNHohRy/W0aotdw/w53d58TzAL8LnoiWnu8/LAZ 1GvoJKiUwNvYgRX0p5dyN7ScG/EwIQuZiz4BoWFFuyBHcyxalKvhLKcbvsbCe2i8 4+ygbHlfBVWkpBUK4YltYOk7JQgA7FjOcauVKCACZD6d8s3kwx6BilpPxw0/ZnIM uXRI+8XBJF4jR+nEPCQ= =t04I -----END PGP SIGNATURE-----