devscripts (2.21.1) unstable; urgency=medium

  [ Mattia Rizzolo ]
  * setup.py:
    + Produce a __init__.py at build time, containing the Devscripts version.
  * uscan:
    + Set the umask while running `svn export`, so as to produce a
      reproducible tarball with mode=svn.
  * tests:
    + Undefine some variables that might affect the tests.
    + Run again all tests on hurd, glibc 2.31-6 fixed sem_open().
    + test_debrepro, test_uscan_ftp, test_uscan_svn: skip the tests on
      kfreebsd, as support for the required sem_open() is lacking.
    + test_uscan_mangle: do not call helperWatch multiple times in a test, to
      prevent leftover background processes.
    + test_debchange: skip Ubuntu tests when there is no known development
      release, like right after an Ubuntu release.  Closes: #958912
  * d/control:
    + Remove Pierre-Elliott Bécue from Uploaders;
      thank you for all your past contributions!
  * d/lintian-overrides:
    + Update to match the newer lintian output.
  * d/copyright:
    + Fix some issues spotted by lintian.

  [ Xavier Guimard ]
  * salsa:
    + Fix bash completion.
  * uscan:
    + Dicrease checksum message from warning to verbose.
    + Fix verbosity when USCAN_VERBOSE=yes

  [ Baptiste Beauplat ]
  * namechck:
    + Remove some dead URLs.  MR: !215

  [ Michel Le Bihan ]
  * debchange:
    + Warn when DEBEMAIL and EMAIL are not set.  Closes: #977809

  [ Johannes Schauer ]
  * debbisect (MR: !214):
    + Fix installation path of the internal scripts.
    + Use os.path.lexist instead of os.path.exist when checking symlinks.
    + Set the PATH environment variable to a sensible default if it's not set.
    + Automatically retry a download aborted by snapshot.d.o after 10 seconds.
    + Instead of appending, seek to the correct position in the output file.
  * debrebuild (MR: !212):
    + Unconditionally set Acquire::http::Dl-Limit "1000" and Acquire::Retries
      "5" to hopefully not get blocked by snapshot.debian.org.
    + Downgrades are avoided by using the last stable release.  Closes: #955307
    + There is now proper --help output and a man page.  Closes: #955049
    + Using the --timestamp option one can either manually provide the
      necessary timestamps separated by commas or use metasnap.debian.net by
      supplying the value "metasnap".
    + Add the --builder option to select the rebuilder backend. The default is
      "none" which just prints instructions.  Currently, possible values are
      sbuild, dpkg, mmdebstrap and sbuild+unshare.  Closes: #955123
      - Add the --buildresults option where the build results will be stored.
      - Compare the checksums from the input buildinfo with the built artifacts.
      - The sbuild+unshare as well as the mmdebstrap builders allow debrebuild
        to operate without any setup.  Closes: #958750
      - All builders (except the "none" builder) do download the source package
        automatically.  Closes: #961861
      - All builders now support binNMUs.  Closes: #961862

  [ Andrej Shadura ]
  * origtargz:
    + Add pristine-lfs support.

devscripts (2.20.5) unstable; urgency=medium

  [ Holger Levsen ]
  * debrebuild:
    + provide parsable output. Closes: #964733.

  [ Mattia Rizzolo ]
  * reproducible-check, sadt:
    + Fix new pylint warnings:  Closes: #971134
      W1404: implicit-str-concat, W0707: raise-missing-from,
      R1725: super-with-arguments.
  * debsign:
    + Apply patch from Bastien Roucariès to fix bash-completion failure for
      `debsign -k` if no current key was already specified.  Closes: #966358
  * debchange:
    + Bump the LTS release to 9/stretch.  Closes: #974164
  * uscan:
    + Apply patch from Unit 193 to beatify a bit the output.
  * d/control:
    + Demote `at` from Recommends to Suggests.  Closes: #975047
    + Bump Standards-Version to 4.5.1, no changes needed.
  * Update copyright file.

  [ Niels Thykier ]
  * debrebuild (MR: !202; MR: !203):
    + Pass --no-run-lintian to sbuild. Closes: #955304
    + Use autodie to check for errors instead of ignoring errors from every
      syscall like open() and close().
    + Correctly determine the name of the source package from the buildinfo.
      Previously, it would be wrong for e.g. binNMUs.  Note this does *not*
      imply that debrebuild can rebuild binNMUs (see #961862).  Closes: #961864
    + Introduce a --help/-h option, which is part of #955049.
    + Support parsing buildinfo files with an embedded signature by ignoring
      the signature.  Validation (where relevant) is still left to the user.
      Closes: #955050
    + Attempt to locate packages via more than one snapshot.d.o URL rather
      than just giving up when the first one does not work.  Closes: #969098
    + If snapshot.debian.org is needed to resolve the dependencies, set
      the apt option "Acquire::Check-Valid-Until" to "false".  Closes: #955308
    + Support fetching data via tor via the new --use-tor-proxy option.
    + Fix a bug that caused debrebuild to fail when attempting to locate a
      package from snapshot.debian.org.  It sometimes also caused a
      warning about $pkg_arch being undefined.  Closes: #969098
    + Add --respect-build-path (new default) and its counter part
      --no-respect-build-path.  These options determine whether the
      Build-Path provided by the buildinfo should be used as build
      directory.  Closes: #964722

  [ Andrius Merkys ]
  * uscan:
    + Fix typo in the manpage.  MR: !201
    + Make the tarballs exported in svn mode reproducible.
      This adds new dependencies on libfile-dirlist-perl and libfile-touch-perl.
      Closes: #968230; MR: !204

  [ Jiří Paleček ]
  * uscan:
    + Many improvements regarding the handling of relative URLs.
      Closes: #792025; MR: !192

  [ Xavier Guimard ]
  * uscan:
    + Split --debug option to add a --extra-debug option that shows remote
      HTTP content.  MR: !191
    + Add new "ctype" line option to help to find current component version
      when this one is ignored in package version. Only "nodejs" and "perl"
      values are accepted for now.  MR: !178
    + Add tests for "group" features.  MR: !180
    + Mark version 2 as deprecated.  MR: !206
    + Respect --destdir value when checking git tag signatures.
      Closes: #973374; MR: !205
    + Apply patch from Neutron Soutmun, to add an "Accept" header in
      http requests.  Closes: #971086; MR: !209
  * salsa:
    + Add --archived option to list_repos and search_projects commands.
      Closes: #966013; MR: !210
  * Update French translation

  [ Matthijs Kooijman ]
  * uscan:
    + Fix --check-direname-level/regex handling.  See #905866; MR: !193
    + Fix error handling in case of invalid changelog field.  MR: !193
    + Clarify manpage about the recursive feature of uscan.  MR: !193
    + Fix some typos in the manpage and error messages.  MR: !193

  [ Reinhard Tartler ]
  * mk-origtargz:
    + Support a new field Files-Included in d/copyright to include files
      excluded by a previous Files-Excluded.  This is useful, for example, to
      include a specific vendored lib while excluding the whole vendor/
      directory.  Closes: #829646; MR: !189

  [ Yuri Konotopov ]
  * mk-origtargz:
    + Do not try to "unpack" upstream detached signatures.
      Closes: #951789; MR: !200

  [ Simon McVittie ]
  * debdiff:
    + Clarify how --exclude works: MR: !190
      - Improve the reference on the manpage.
      - Print a warning if --exclude is used in a way that will never match.

  [ Robin Gustafsson ]
  * uscan:
    + Add a new option "gitexport" to override any "export-ignore" rule that a
      git repository might have set.  Closes: #947317; MR: !174

  [ Martin Liška ]
  * checkbashisms:
    + Add a new --early-fail option, to quit at the first error found.  MR: !208

  [ Johannes Schauer ]
  * Add a new script, "debbisect", that help to bisect snapshot.debian.org
    to find which change in the archive introduced a certain problem.  MR: !177

devscripts (2.20.4) unstable; urgency=medium

  [ Xavier Guimard ]
  * Update French translations.
  * dget:
    + Fix POD formatting.  Closes: #958940
  * salsa:
    + Fix "TOKEN missing" error message.
  * uscan:
    + Decrease pgp message level to "info" when "pgpmode=previous" is set.
    + Add ability to handle gzipped HTTP responses.  Closes: #961744; MR: !196
    + Repack component only if compression differs.  MR: !199

  [ Mattia Rizzolo ]
  * Fix some new flake8 issues.  Closes: #963329
  * sadt:
    + Also consider Build-Depends-Arch for @builddeps@.
    + Ignore udebs when computing the list of binaries produced by a package.
  * manpage-alert:
    + Fix some shellcheck warnings.
  * origtargz:
    + Add pristine-tar to Recommends.  Closes: #961532
  * build-rdeps:
    + Apply patch from Helmut Grohne to add the new options --no-arch-all and
      --no-arch-any to ignore respectively Build-Depends-Indep and
      Build-Depends-Arch.  Closes: #961545
  * reproducible-check:
    + Mention the tool in README.
  * debrebuild:
    + Mention the tool in README.
  * uscan:
    + Apply patch from Unit 193 to better align the output.

  [ Niko Tyni ]
  * debc:
    + Fix deadlock with a control file bigger than 64 KB.  Closes: #961368

  [ Lee Garrett ]
  * manpage-alert:
    + Avoid duplicate detection on usrmerged systems.  Closes: #960567; MR: !194

  [ Chris Lamb ]
  * reproducible-check:
    + Overhaul of the whole script:  MR: !197
      - Improve code style.
      - Improve caching mechanism.
      - Correct logic for checking for *reproducible* packages.  Closes: #961857
      - Don't return results for non-Debian distributions.  Closes: #961859
      - Show a warning that the data should not be treated as "official"
        or similar.  Closes: #961858

  [ Yuri Konotopov ]
  * origtargz:
    + Properly exit the program when it fails to obtain the tarball.  MR: !198

  [ Jakob Haufe ]
  * uscan:
    + Fix perl call to make_path to not create unexpected directories.
      Closes: #932715; MR: !195

devscripts (2.20.3) unstable; urgency=medium

  [ Mattia Rizzolo ]
  * uupdate:
    + Apply patch from Unit 193, adding full stops to the generated changelog.
  * uscan:
    + Apply patch from Unit 193, adding --queit to the `git clone` calls.
  * checkbashisms:
    + Improve check for `command` to properly detect options other than -p
      also when -p is not the first option.  Closes: #835498
      Thanks to Eero Vuojolahti <eero@vuojolahti.com> for the initial patch.
    + After Policy v4.1.5, the POSIX standard for shell script is
      POSIX.1-2017.  Recognize `command -v` and `command -V` as valid.
  * dget:
    + Apply patch from Bilal Muhammad to add support for scp:// and sftp://
      protocols.  Closes: #956498
  * tests:
    + test_package_lifecycle:
      - Require dpkg-dev >= 1.19.1, use Rules-Requires-Root in the test package
        and therefore drop the fakeroot Build-Depends.

  [ Andrius Merkys ]
  * uscan:
    + Fix svn mode with HTTP URLs.  Closes: #951568; MR: !173

  [ Lars Kruse ]
  * checkbashisms:
    + Remove check for "sleep" (not a shell builtin).  Closes: #843913; MR: !176

  [ Paul Wise ]
  * bts:
    + Sync the known tags with bugs.debian.org.

  [ Holger Levsen ]
  * debrebuild:
    + Stop using the reproducible-builds.org apt repo.  Closes: #955280
    + Switch to use deb.debian.org as the base apt repo.  Closes: #955298
    + Add support for Debian 12 bookworm.

  [ Antonio Terceiro ]
  * debrepro:
    + Run command before second build via `sh -c`.
    + Run command before second build in the source tree copy, to avoid
      modifying the original tree.
    + Add a new --timeout option.

  [ Simon McVittie ]
  * mass-bug:
    + Add a test.  MR: !186
    + Add a new --control option, to be able to add arbitrary
      Control: pseudo-headers.  MR: !183
  * tests:
    + test_package_lifecycle:
      + Fix test with debhelper 13.  Closes: #958350; MR: 185

  [ Jiří Paleček ]
  * uscan:
    + Fix operation with simple git branches (rather than tags).  MR: !175
  * tests:
    + test_package_lifecycle:
      - Fix test failures under non-EN locales.  Closes: #953281

  [ Alex Murray ]
  * hardening-check:
    + Change to a more reliable to way of detecting control flow protection,
      and add a new --nocfprotection flag to disable the check.  MR: !184

  [ Xavier Guimard ]
  * Reformat perl scripts with the new perltidy 20200110.
  * uscan:
    + Fix DEHS <target> output for components.  MR: !179
    + Fix --download-version with grouped packages.  MR: !156
    + Add "checksum" target to reduce grouped version size.  MR: !156
    + Add --http-header option.  Closes: #955268; MR: !181
  * Update French translation.
  * salsa:
    + Fix error when trying to display an error with "update_repo".
    + Enable "enable_ssl_verification" KGB option by default since GitLab sets
      it
    + During webhook configuration, don't fail when --no-fail is set and
      GitLab fails

devscripts (2.20.2) unstable; urgency=medium

  * d/tests/control: add missing dependency on subversion.

devscripts (2.20.1) unstable; urgency=medium

  [ Xavier Guimard ]
  * d/bug-script: fix return value if a file is empty.  MR: !148
  * Update French translation

  [ Mattia Rizzolo ]
  * test/uscan:
    + Fixup and improve the httpserver cleanup functions to prevent
      stray process to persist at the end of the build.  Closes: #933642
    + Go back to use a real temporary file instead of a named pipe in
      chronic_sh.  This should also fix the Hurd FTBFS.
  * d/control:
    + Use an alternative dependency to pylint | pylint3, to supprt backports.
    + Bump Standards-Version to 4.5.0, no changes needed.
  * Make the Python code compliant with pylint-2.4.4.  Closes: #945267
  * grep-excuses:
    + Document the --autopkgtests option also in the --help.  Closes: #941329
  * debrebuild:
    + Add a new script that accepts a .buildinfo file as input and provides
      instructions on how to drive APT (and sbuild) to perform a rebuild.
      This script is still considered WIP, and its interface will likely
      change in the future.
      Thanks to Johannes Schauer for authoring the script.  Closes: #774415

  [ Andrius Merkys ]
  * uscan:
    + Add support for direct access to Subversion repositories using a new
      mode=svn.  Closes: #939538; MR: !160

  [ Hans Jerry Illikainen ]
  * reproducible-check:
    + Consider 'FTBR' as unreproducible.  MR: !169

  [ Timo Furrer ]
  * mk-build-deps:  MR: !168
    + Document the DEB_BUILD_PROFILES environment variable.
    + Introduce a -P / --build-profiles option.

  [ Ximin Luo ]
  * mk-origtargz:
    + Restore old behaviour that skips mk-origtargz when --no-symlink is given.

  [ Nicolas Boulenguez ]
  * Improve reporting in case of --no-conf misuse for several tools.  MR: !163

devscripts (2.19.7) unstable; urgency=medium

  [ Joao Eriberto Mota Filho ]
  * debclean:
    + Allow debclean to work when in any path inside the package and
      avoid searching in .git directories.  MR: !152
  * debsnap:
    + Added a new example to manpage to show how to use --first and --last
      options.  MR: !166

  [ Xavier Guimard ]
  * Update French translation.
  * salsa:
    + Fix broken push command.  MR: !138
    + Don't fail on checkout if --no-fail is set.  MR: !151
  * bts:
    + Fix warning with "noaction" and undefined "from".
      Closes: #933607; MR: !145
  * uscan:
    + Better displayed name when using components.  MR: !146
    + Include details about the components in the dehs output.  MR: !147
    + Fix bad https verification.  MR: !150
    + Fore re-compression of components when their compression differ from the
      main tarball.  Closes: #934464; MR: !149
    + Fix git-shallow download when tag contains a "/".
      Closes: #935949; MR: !158
  * origtargz:
    + Fix incompatibility with components.  Closes: #929786; MR: !159

  [ Sean Whitton ]
  * git-deborig:
    + Print to stderr, not stdout, when appropriate.  Closes: #931509; MR: !134

  [ Simon McVittie ]
  * debi:
    + Wait for apt/dpkg child processes, fixing a regression in MR !45.
      Closes: #932896; MR: !135
    + Invoke apt or apt-get with --reinstall.
      Otherwise repeated test-builds of a package with the intended next
      version number will not replace each other since MR !45.  MR: !136
    + Don't use apt if applying neither --upgrade nor --with-depends.
      Closes: #932640; MR: !142
    + Don't use apt install ./*.changes for --with-depends --upgrade.
      Closes: #932963; MR: !143
    + Let --upgrade install new dependencies from the same source (corner
      case from #932963).  MR: !144
  * tests:
    + test_mergechanges: Fix detection of --installed option.  MR: !140
    + test_debi:
      - Add a new integration test for debi, running only as root, currently
        only in GitLab CI and autopkgtest.  MR: !141
  * Refresh formatting following the new perltidy version 20190601.  MR: !154

  [ Sven Hartge ]
  * mk-build-deps:
    + Implement parsing of Build-Depends-Arch and Build-Conflicts-Arch.
      Closes: #891664; LP: #1794314; MR: !139

  [ Mattia Rizzolo ]
  * nmudiff:
    + Document in the manpage the --no-pending and --no-dd options.
      Closes: #932848
  * debchange:
    + Document the Ubuntu special case when running --release.  Closes: #942370
  * d/bug-script:
    + Use `grep -E` instead of the non-standard `egrep`.
  * d/control:
    + Build depend on pylint, which is now python3-based, instead of pylint3.
    + Bump Standards-Version to 4.4.1, no changes needed.

  [ Mike Salvatore ]
  * hardening-check:
    + Fix possible deadlock in stdout/stderr reading.  MR: !153

  [ Christoph Berg ]
  * dcontrol:
    + Remove, the backend on qa.debian.org has not been maintained for years.

  [ Paul Wise ]
  * Avoid needing to shell quote configuration filenames by using arguments
    + Move String::ShellQuote from depends to recommends
  * chdist:
    + Allow putting the dist name before the command instead of after.
  * grep-excuses:
    + Drop duplicate aging info from excuses output

  [ Laurent Bigonville ]
  * Fix typo in the French translation.

  [ Nicolas Boulenguez ]
  * debclean, uupdate, who-uploads:
    + Add `set -e` to these shell scripts.  MR: !164

  [ Guillem Jover ]
  * deb-why-removed:
    + New tool to fetch package removal information.  Closes: #644575; MR: !107

devscripts (2.19.6) unstable; urgency=medium

  [ Christoph Berg ]
  * origtargz:
    + Support unpacking tarballs where the files are in /.

  [ Alex Murray ]
  * hardening-check:
    + Add support for detecting binaries compiled with
      -fstack-clash-protection.  LP: #1820798; MR: !121
    + Add detection for -fcf-protection.  MR: !127

  [ laokz ]
  * uscan:
    + Fix typo in documentation.  MR: !125
    + Remove redundant, misleading  string in a debug message.  MR: !126

  [ Thomas Goirand ]
  * debchange:
    + Target buster-backports with --bpo.  Closes: #931614

  [ Paul Wise ]
  * Devscripts::Config:
    + Improve handling (prevent code execution and errors with spaces and
      newlines) of the configuration files.  MR: !124
      - Move String::ShellQuote from Recommends to Depends.

  [ Xavier Guimard ]
  * Reformat code following the changes in the new perltify 20181102.  MR: !129
  * debi:
    + Replace dpkg + apt-get by "apt-get install" on .change file.
      Closes: #810294; MR: !45
  * salsa:
    + Add "join" command.  Closes: #921314;  MR: !108
    + Add "push" command.  MR: !108
    + Update doc: completion for aliases.  MR: !108
  * uscan:
    + Ignore --download-version when component is marked as "ignore".  MR: !130
    + Fix download when <base> tag is relative.  Closes: #932399; MR: !133

  [ Mattia Rizzolo ]
  * d/control:
    + Bump Standards-Version to 4.4.0, no changes needed.

  [ Nick Gerow ]
  * debchange:
    + Make sure to escape special characters in the maintainer name.  MR: !128

  [ Simon McVittie ]
  * uscan:
    + Don't recurse into directories named .git when searching for
      Debian packages.  MR: !132

  [ Unit 193 ]
  * dcmd:
    + Consider .asc files as part of the upstream orig files.
    + Also add .zst as an allowed extension for upstream orig files.

  [ Sean Whitton ]
  * git-deborig:
    + New --just-print-tag-names option.  Closes: #931180; MR: !131