python-git (2.1.8-1ubuntu0.1~esm4) bionic-security; urgency=medium

  * SECURITY UPDATE: Path traversal during Git reference resolution
    - debian/patches/CVE-2023-41040_1.patch: Reject up-level references in
      git/refs/symbolic.py
    - debian/patches/CVE-2023-41040_2.patch: Add regression tests in
      git/test/test_refs.py
    - CVE-2023-41040
  * SECURITY UPDATE: Unsafe option injection in Git operation kwargs
    - debian/patches/CVE-2026-42215_1.patch: Canonicalize unsafe option names
      in git/cmd.py
    - debian/patches/CVE-2026-42215_2.patch: Format unsafe option errors in
      git/cmd.py
    - debian/patches/CVE-2026-42215_3.patch: Harden unsafe option
      canonicalization in git/cmd.py
    - CVE-2026-42215
  * SECURITY UPDATE: Path Traversal during Git reference manipulation
    - debian/patches/CVE-2026-44243_1.patch: Validate reference filesystem
      paths in git/refs/log.py, git/refs/remote.py, git/refs/symbolic.py
    - debian/patches/CVE-2026-44243_2.patch: Prevalidate remote reference
      deletion paths in git/refs/log.py, git/refs/remote.py
    - CVE-2026-44243
  * SECURITY UPDATE: Configuration injection during Git config value writing
    - debian/patches/CVE-2026-44244.patch: Reject control characters in config
      values in git/config.py, add relevant tests in test/test_config.py
    - CVE-2026-44244

 -- Shafayat Hossain Majumder <shafayat.majumder@canonical.com>  Fri, 22 May 2026 16:42:13 -0400

python-git (2.1.8-1ubuntu0.1~esm2) bionic-security; urgency=medium

  * SECURITY UPDATE: RCE due to improper user input validation
    - debian/patches/CVE-2023-40267.patch: Block insecure non-multi
      options in clone/clone_from.
    - CVE-2023-40267

 -- Fabian Toepfer <fabian.toepfer@canonical.com>  Wed, 30 Aug 2023 17:29:33 +0200

python-git (2.1.8-1ubuntu0.1~esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: RCE due to improper user input validation
    - debian/patches/CVE-2022-24439.patch: Forbid unsafe protocol URLs and
      options by default.
    - CVE-2022-24439

 -- Fabian Toepfer <fabian.toepfer@canonical.com>  Wed, 15 Mar 2023 13:12:43 +0100

python-git (2.1.8-1) unstable; urgency=medium

  * New upstream version 2.1.8 (Closes: #880446)
    - Fix "Incompatible with git 2.15?" (Closes: #879452)
  * debian/control: Replace python3-sphinx instead of python2-sphinx
  * delete debian/patches/0001-recognize-the-new-packed-ref-header-format.patch
    Upstream merged

 -- TANIGUCHI Takaki <takaki@debian.org>  Sat, 20 Jan 2018 18:48:00 +0900

python-git (2.1.7-1) unstable; urgency=medium

  * New upstream release

 -- Yaroslav Halchenko <debian@onerussian.com>  Mon, 06 Nov 2017 21:44:22 -0500

python-git (2.1.6-1) unstable; urgency=medium

  * New upstream release
    - fixes for submodules with names consisting of numbers and bools
    - worktree support

 -- Yaroslav Halchenko <debian@onerussian.com>  Tue, 26 Sep 2017 09:13:09 -0400

python-git (2.1.5-1) unstable; urgency=medium

  * New upstream version 2.1.5
  * Bump Standards-Verision to 4.0.0 (without changes). 

 -- TANIGUCHI Takaki <takaki@debian.org>  Tue, 27 Jun 2017 18:49:38 +0900

python-git (2.1.3-1) experimental; urgency=medium

  * Fresh bugfix upstream release
    - upstreamed debian/patches/exe_exception.patch

 -- Yaroslav Halchenko <debian@onerussian.com>  Mon, 05 Jun 2017 22:11:58 -0400

python-git (2.1.1-2) unstable; urgency=medium

  * debian/patches/exe_exception.patch: Fix "import of git can cause import
    failures of unrelated modules due to undefined variable" (Closes: #857171)

 -- TANIGUCHI Takaki <takaki@debian.org>  Thu, 09 Mar 2017 11:37:28 +0900

python-git (2.1.1-1) unstable; urgency=medium

  * New upstream version 2.1.1

 -- TANIGUCHI Takaki <takaki@debian.org>  Thu, 02 Feb 2017 17:15:45 +0900

python-git (2.1.0-1) unstable; urgency=medium

  * Fresh upstream release (necessary for upcoming release of datalad)
  * Require smmap and gitdb >= 2
  * Enable build-time testing back while building NeuroDebian backports

 -- Yaroslav Halchenko <debian@onerussian.com>  Wed, 02 Nov 2016 08:13:11 -0400

python-git (2.0.9-1) unstable; urgency=medium

  [ Yaroslav Halchenko ]
  * debian/TODO to reincarnate testing

  [ TANIGUCHI Takaki ]
  * New upstream version 2.0.9

 -- TANIGUCHI Takaki <takaki@debian.org>  Mon, 17 Oct 2016 19:46:52 +0900

python-git (2.0.8-1) unstable; urgency=medium

  * New upstream version
  * No custom patches any longer -- absorbed upstream

 -- Yaroslav Halchenko <debian@onerussian.com>  Thu, 22 Sep 2016 16:09:21 -0400

python-git (2.0.5-1) unstable; urgency=medium

  * Team upload.
  * New upstream version.
  * d/patches/issue470-safe-decode.patch: Added as a proposed fix for
    upstream issue #470.

 -- Barry Warsaw <barry@debian.org>  Wed, 15 Jun 2016 06:59:02 -0400

python-git (2.0.2-1) unstable; urgency=medium

  * Team upload
  * New upstream version (note: 2.0.2 was not recorded with git-dpm)
  * debian/control
    - suggest python-git-doc in python{,3}-git pkgs (Closes: #811922)
    - added myself to uploaders since did a few already
    - boosted policy to 3.9.8

 -- Yaroslav Halchenko <debian@onerussian.com>  Thu, 28 Apr 2016 11:25:09 -0400

python-git (1.0.1+git137-gc8b8379-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add python 3 support (Closes: #774903):
    - Applied patch from the BTS.
    - Added --with python3 in debian/rules.
    - Added override_dh_auto_install to also install in Py3.
  * Using a separate package for -doc, now using override_dh_sphinxdoc and
    generating the html docs properly with sphinx-build.
  * Uncommented rm -rf build in auto_clean to allow double builds.
  * Bumped compat level to 7 (as lintian is not happy...).
  * Removed X-Python-Version: >= 2.7 (as even old-stable has 2.7 by default)
    and removed obsolete debian/pycompat file.

 -- Thomas Goirand <zigo@debian.org>  Tue, 05 Jan 2016 11:07:29 +0000

python-git (1.0.1+git137-gc8b8379-2) unstable; urgency=medium

  [ SVN-Git Migration ]
  * Update Vcs fields for git migration

  [ Stefano Rivera ]
  * git-dpm tag config

  [ TANIGUCHI Takaki ]
  * debian/watch: Switch to pypy.debian.net.
  * debian/rules:
    + remove target override_dh_auto_clean
    + remove target override_dh_auto_test (Closes: #805535)
  * debian/copyright: Update Source.

 -- TANIGUCHI Takaki <takaki@debian.org>  Sun, 29 Nov 2015 17:17:50 +0900

python-git (1.0.1+git137-gc8b8379-1) unstable; urgency=medium

  * Fresh snapshot post upstream release -- mainly bugfixes discovered
    after release. Upload to unstable (Closes: #790068)
  * debian/control
    - X-Python-Version: >= 2.7  to avoid problems on wheezy with 2.6 supported
      and then needing python-ordereddict
  * debian/rules
    - set LC_ALL=C.UTF-8 while running tests

 -- Yaroslav Halchenko <debian@onerussian.com>  Mon, 17 Aug 2015 17:56:44 -0400

python-git (0.3.6+git28-g88f3dc2-1) experimental; urgency=medium

  * Fresh upstream snapshot with a variety of bugs fixed, e.g.
    running hooks from cwd which caused problems with annex repos
    - all up_* patches were adopted upstream, thus dropped here

 -- Yaroslav Halchenko <debian@onerussian.com>  Fri, 06 Mar 2015 23:00:41 -0500

python-git (0.3.6+git5-gd8bbfea-1) experimental; urgency=medium

  * New post-release snapshot with some fixes (Closes: #769595)
    - detects untracked files correctly now (Closes: #739898)
    - includes debian/patches/dont-choke-on-rc-version.patch
  * debian/control
    - bump Standards-Version to 3.9.6
    - added python-smmap (>= 0.8.3) to Build-Depends and Suggests:
      used for testing
    - needs gitdb >= 0.6.4 -- adjusted version in *Depends
  * debian/rules
    - enable build-time testing if available on network and capable of
      cloning original GitPython repository

 -- Yaroslav Halchenko <debian@onerussian.com>  Thu, 05 Feb 2015 18:44:46 -0500

python-git (0.3.2~RC1-3) unstable; urgency=low

  * Update Homepage to a working URL.
  * Bump Standards-Version to 3.9.5.
  * Correctly parses `git --version` when not all components are
    numeric. Closes: #722481.

 -- Vincent Bernat <bernat@debian.org>  Sat, 02 Nov 2013 01:27:18 +0100

python-git (0.3.2~RC1-2) unstable; urgency=low

  [ Jakub Wilk ]
  * Use canonical URIs for Vcs-* fields.

  [ TANIGUCHI Takaki ]
  * debian/control: Change Maintainer to Python Module Team. (Closes: #705279)
    + Remove "Daniel Watkins <daniel@daniel-watkins.co.uk>" from Maintainer. 

 -- TANIGUCHI Takaki <takaki@debian.org>  Mon, 13 May 2013 10:10:01 +0900

python-git (0.3.2~RC1-1) unstable; urgency=low

  * Team upload.
  * New upstream release
  * Add myself to Uploaders.
  * Bump Standards-Version to 3.9.3.
    + debian/copyright: copyright-format 1.0
  * Add python-gitdb to Depends:.

 -- TANIGUCHI Takaki <takaki@debian.org>  Sun, 08 Apr 2012 21:12:50 +0900

python-git (0.3.1~beta2-1) unstable; urgency=low

  [ Andreas Noteng ]
  * Team upload.
  * Update git dependency. (Closes: #600237, #568583)
  * New upstream release. (Closes: #579553)
  * Add upstream documentation. (Closes: #523881)
  * Change source format to 3.0 (quilt)
  * Bump Standards-Version to 3.9.2
    - Remove deprecated /usr/share/common-licenses/BSD link from copyright
  * Change to DEP5 copyright

  [ Vincent Bernat ]
  * Add myself as uploader

 -- Vincent Bernat <bernat@debian.org>  Thu, 05 May 2011 23:48:19 +0200

python-git (0.1.6-1) unstable; urgency=low

  * New upstream release. (Closes: #512584)
  * Changed licensing of packaging to match upstream's license.

 -- Daniel Watkins <daniel@daniel-watkins.co.uk>  Sat, 07 Feb 2009 12:10:15 +0100

python-git (0.1.5-1) unstable; urgency=low

  * New upstream release. (Closes: #501211, #507276)
  * Added Debian Python Modules Team to Uploaders field.
  * Updated Vcs-* fields to reflect the use of the DPMT Subversion repository.
  * Removed all patches merged upstream.
  * Converted debian/rules to use debhelper 7.

 -- Daniel Watkins <daniel@daniel-watkins.co.uk>  Wed, 07 Jan 2009 14:04:00 +0000

python-git (0.1.4.1-2) unstable; urgency=low

  * Fixed the synopsis to work as an appositive clause in a sentence, as per
    Section 6.2.2 of the Developer Reference.
  * Added patch so that git.Repo.create and git.Repo.init_bare now create a
    bare repository, as intended. (Closes: #494581)
  * Added Vcs-Bzr control field.

 -- Daniel Watkins <daniel@daniel-watkins.co.uk>  Mon, 18 Aug 2008 19:50:22 +0100

python-git (0.1.4.1-1) unstable; urgency=low

  * Initial release. (Closes: #492520)

 -- Daniel Watkins <daniel@daniel-watkins.co.uk>  Sat, 26 Jul 2008 20:48:13 +0100
