Release debhelper version 13.24.1+apertis2

Signed-off-by: Walter Lozano <walter.lozano@collabora.com>

debian/changelog

+debhelper (13.24.1+apertis2) apertis; urgency=medium
+
+  * dh_setup_copyright: Rework to improve metadata.
+    The inclusion of the package metadata provides useful information, however,
+    its format and data does not cover all the needs.
+    First, we need a reliable way of mapping compilation units to source files,
+    since the each package does its own tweaks to build binaries causing debug
+    information to report not very useful paths.
+    Second, having a map from external sources to packages is useful, but we need
+    to identify the file in the source tree to as well to be able to extract
+    license and copyright information.
+    And last but not least, the format of the metadata does not align with the
+    SBOM reports we generate, as for each use case new metadata was added,
+    without trying to provide more value.
+    For these reasons, rework the code to provide a new metadata format which
+    aligns with the SBOM generated at image build time, listing each artifact
+    and the sources used to build them.
+  * dh_setup_copyright: Add copyright information.
+    The computation of the license and copyright information is done at
+    image build time, which seemed good enough in early times, and gave
+    us the flexibility to improve the logic in the image pipeline which
+    runs on daily basis instead of at package build time. Unfortunately,
+    through time, we understood that this approach had its limitations.
+    First, compilation units provide information which we needed to map
+    to files in the source tree. To overcome this difficulty, some
+    workarounds were placed but those were not perfect.
+    Second, when Rust and Go packages were supported it was clear that
+    we needed to propagate lots of information to the image pipeline,
+    such as copyright reports of the build dependencies and mappings
+    between files and packages.
+    Now, that additional support was added to allow improving the
+    metadata, with information about non binary artifacts and shared
+    libraries there is no point in propagating all the data to the image
+    pipeline. Under these circumstances it is better to also compute
+    the license and copyright information at build time. This also aligns
+    well with the idea of having a SBOM at package level, which can
+    be useful.
+
+ -- Walter Lozano <walter.lozano@collabora.com>  Mon, 24 Feb 2025 11:24:09 +0100
+
 debhelper (13.24.1+apertis1) apertis; urgency=medium
 
   * Rebase on top of debian/trixie