vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit e30119f8c65e5b085383346008a89f708acf902e
Author: Jonathan McDowell <noodles@earth.li>
Date: Thu May 28 22:19:05 2026 +0100
Correctly end transactions in the stacked backend
Our backend stacking failed to end transactions, instead starting a new
transaction again (and no doubt failing). Correct this cut&paste error.
commit c600f63019360ff49b437420c2e550f5bad3eabd
Author: Jonathan McDowell <noodles@earth.li>
Date: Thu May 28 22:17:15 2026 +0100
Fix RSA-SHA2-384 DER prefix
There was a cut&paste error that had truncated the final byte, so it
ended up as 0x3 instead of 0x30. This would have caused verification of
RSA-SHA2-384 signatures to fail.
commit 9fbe40c3972bf0fa82a2eecc5e3755bf51b811fe
Author: Jonathan McDowell <noodles@earth.li>
Date: Thu May 28 09:08:07 2026 +0100
Fix unescape_url to prevent potential read beyond the end of the input
If we hit a % escape at the last, or second last, character in the input
string then we'll try to read beyond the end to decode the complete hex
character. Check to make sure we have enough input characters left
before we attempt the decode.
commit 8a945279e299ff273d3fcceb6d9d3ed28784030d
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 22:02:25 2026 +0100
Fix up log formatting strings
The GitHub code scanning tooling is complaining the calls to logthing()
aren't always using the correct format strings. None of this looks
critical - it's logging sizes - but fix it up anyway for correctness.
commit b20f9b41d2a1190150a964c3faa7642853190a1e
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 21:48:25 2026 +0100
Try to fix GitHub workflow permissions
Apparently we should limit the permissions of the workflow. All we're
trying to do is test builds, so hopefully read permission does the
trick.
commit 6e8fa9a074e763da766c676ac982e4c4164c3e8f
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 21:42:21 2026 +0100
Drop spurious extra "return" in keyd code
We've returned 2 lines earlier, so this is just dead code.
commit e149ff83f06a52acd538c3a32b0c24786572ca70
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 21:40:43 2026 +0100
Switch from malloc to calloc to avoid potential overflow
We shouldn't be dealing with values large enough here that we'll
overflow a 32 bit calculation, but this is logically better so change
over.
commit 79b5d20aa8771147eb3936c6b4e422bafa3f0085
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 21:38:01 2026 +0100
Fix parsing of new config details for DB parameters
We didn't put the hostname/username/password in the right structure
elements. This is only going to have affected PostgreSQL (really need to
get some automated testing of that) thankfully.
commit 86a182849b4315a80a04286dbddfa1ae74368c44
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 21:37:14 2026 +0100
Fix migration of bools from old to new config style
Correctly use the truth value, rather than the name, and avoid always
setting these variables to true in a migration.
commit e7938547e48981b724356a509853302684f1e1d6
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed May 27 21:36:15 2026 +0100
Fix decoding of v2/3 signature creation times
We were resetting the creation details with each byte, rather than
correctly adding and shifting. v2/3 key support should really be dead,
but fix it anyway.
commit 2c35d9cfce27df8de1abde8d5a01ef01d64dd39a
Author: Jonathan McDowell <noodles@earth.li>
Date: Sun Nov 2 17:41:29 2025 +0000
Handle failures in maxpath more gracefully
If we don't have the initial seed key, or we can't find a max path to
anywhere (e.g. just a single key is present), then detect that and
output a suitable error rather than crashing.
commit d8014158df323cb419b7979dc4f744ae44de695c
Author: Jonathan McDowell <noodles@earth.li>
Date: Sun Nov 2 17:10:31 2025 +0000
Fix sixdegrees parsing of keyids with high bit set
Key IDs are 64-bit unsigned values, so use strtoull so we correctly
parse keys that have their high bit set.
commit 9774af4358e653111ea37a331a93249aede3eb3d
Author: Jonathan McDowell <noodles@earth.li>
Date: Fri Oct 31 19:05:59 2025 +0000
Make DB4 backend quieter when num_keydb file is missing
This file tells us how many DB4 files we're sharding across for actual
key storage. If it's not found, we create it. Only log an error if it's
not that the file doesn't exist.
commit 4dc6eae2858230e1ac89a08fc32b3c15c213f7ce
Author: Jonathan McDowell <noodles@earth.li>
Date: Fri Oct 31 18:40:48 2025 +0000
Add a generic key deletion test case
Our existing deletion tests look for artefacts in the key database
directory. We can also generically check that a key is no longer found
after being deleted.
commit aa301e6537ef6ba67efd76b493779e9798f8ec42
Author: Jonathan McDowell <noodles@earth.li>
Date: Fri Oct 31 15:22:49 2025 +0000
Add a dummy skeleton keydb backend
We want to add Lightning Memory-Mapped DB + SQLite3 backends, so let's
start by added a skeleton we can work from.
commit 8fa7fc4f9494e30508152e14f657ffd0413ffe36
Author: Jonathan McDowell <noodles@earth.li>
Date: Fri Oct 31 14:32:28 2025 +0000
CMake: Configure to export compilation commands
Create a compile_commands.json file listing the compilation commands,
allowing for LSP tools like ccls to correctly navigate their way around
the code.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/o/onak.png){kind=link}