libnet-oauth-perl (0.33-1) unstable; urgency=medium

  * Import upstream version 0.33.
    - Restrict the verification algorithm to those specified in the
      allowed_signature_methods, which is now required. This is a breaking
      change. (CVE-2026-72889)
      (Closes: #1144854)
    - HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use
      constant-time comparison (CVE-2026-75589).
      (Closes: #1144855)
    - HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank.
  * Add note about breaking change to debian/NEWS.Developer.
  * debian/libnet-oauth-perl.docs: CONTRIBUTING.md is gone.
  * Update years of upstream copyright.
  * Update debian/upstream/metadata.

 -- gregor herrmann <gregoa@debian.org>  Wed, 19 Aug 2026 17:31:51 +0200

libnet-oauth-perl (0.32-1) unstable; urgency=medium

  * Import upstream version 0.32.
    - Net::OAuth::Client no longer allows silent downgrades from
      OAuth 1.0a to 1.0 when the remote provider drops the
      oauth_verifier.  The behavior can be re-enabled with the
      allow_v1a_downgrade option. CVE-2026-72887
    - The Net::OAuth smart_require function no longer memoizes
      failures, which allowed attackers to exhaust memory with
      requests for invalid signature methods. CVE-2026-72888
    (Closes: #1144539)
  * Update upstream email addresses.
  * The upstream examples are gone.
  * Install new CONTRIBUTING.md file.
  * Drop 0001-Pin-PKCS-1-v1.5-padding-and-SHA-1-for-RSA-SHA1-signa.patch
    which was taken from upstream Git.
  * Update dependencies.

 -- gregor herrmann <gregoa@debian.org>  Sun, 16 Aug 2026 17:54:05 +0200

libnet-oauth-perl (0.31-2) unstable; urgency=medium

  * Add patch from upstream Git for compatibility with newer
    Crypt::OpenSSL::RSA. (Closes: #1142954)
  * Update years of packaging copyright.
  * Declare compliance with Debian Policy 4.7.4.
  * Remove «Rules-Requires-Root: no», which is the current default.
  * Remove «Priority: optional», which is the current default.
  * Drop unneeded version constraints from (build) dependencies.
  * Set upstream metadata fields: Security-Contact.

 -- gregor herrmann <gregoa@debian.org>  Mon, 10 Aug 2026 00:43:59 +0200

libnet-oauth-perl (0.31-1) unstable; urgency=medium

  * Import upstream version 0.31.
  * Install new SECURITY.md file.
  * Remove libmodule-build-perl from Build-Depends.
  * Remove test and runtime dependency on libdigest-hmac-perl.
  * Declare compliance with Debian Policy 4.7.2.

 -- gregor herrmann <gregoa@debian.org>  Sat, 12 Apr 2025 15:58:29 +0200

libnet-oauth-perl (0.30-1) unstable; urgency=medium

  * Import upstream version 0.30.
    - Net::OAuth::Client uses a better source of randomness for generating the
      nonce

    [SECURITY] CVE-2025-22376:
    Default nonce for Net::OAuth package for perl is not cryptographically
    strong.

    Closes: #1092056

  * Add test and runtime dependency on libcrypt-urandom-perl as part of
    the fix for #1092056 / CVE-2025-22376.
  * Update build/test/runtime dependencies.
  * Drop patches, both applied upstream.
  * Update years of upstream and packaging copyright.
  * Update Upstream-Contact.
  * Add debian/upstream/metadata.
  * Declare compliance with Debian Policy 4.7.0.

 -- gregor herrmann <gregoa@debian.org>  Sat, 04 Jan 2025 21:08:16 +0100

libnet-oauth-perl (0.28-4) unstable; urgency=medium

  * Team upload

  [ gregor herrmann ]
  * debian/watch: use uscan version 4.

  [ Debian Janitor ]
  * Trim trailing whitespace.
  * Bump debhelper from old 10 to 12.
  * Set debhelper-compat version in Build-Depends.

  [ Damyan Ivanov ]
  * Declare compliance with Debian Policy 4.6.1.
  * Set Rules-Requires-Root: no.
  * Bump debhelper-compat to 13.
  * Annotate test-only build dependencies with <!nocheck>.

 -- Damyan Ivanov <dmn@debian.org>  Sun, 29 May 2022 07:52:56 +0000

libnet-oauth-perl (0.28-3) unstable; urgency=medium

  [ Salvatore Bonaccorso ]
  * debian/control: Use HTTPS transport protocol for Vcs-Git URI

  [ gregor herrmann ]
  * debian/copyright: change Copyright-Format 1.0 URL to HTTPS.
  * Remove Brian Cassidy from Uploaders. Thanks for your work!
  * Remove Jonathan Yu from Uploaders. Thanks for your work!
  * Remove Jotam Jr. Trejo from Uploaders. Thanks for your work!
  * Remove Nathan Handler from Uploaders. Thanks for your work!
  * Remove AGOSTINI Yves from Uploaders. Thanks for your work!

  [ Salvatore Bonaccorso ]
  * Update Vcs-* headers for switch to salsa.debian.org

  [ gregor herrmann ]
  * Patch rsa test for compatibility with Crypt::OpenSSL::RSA >= 0.29_01.
    Thanks to Paul Gevers for forwarding the ci.debian.net failure.
    (Closes: #898198)
  * Add a spelling patch.
  * Update years of packaging copyright.
  * Declare compliance with Debian Policy 4.1.4.
  * Drop unversioned perl from Depends, already covered by
    ${perl:Depends}.
  * Bump debhelper compatibility level to 10.

 -- gregor herrmann <gregoa@debian.org>  Tue, 08 May 2018 18:31:50 +0200

libnet-oauth-perl (0.28-2) unstable; urgency=low

  * Team upload

  [ gregor herrmann ]
  * debian/control: update {versioned,alternative} (build) dependencies.

  [ Nathan Handler ]
  * Email change: Nathan Handler -> nhandler@debian.org

  [ Salvatore Bonaccorso ]
  * Change Vcs-Git to canonical URI (git://anonscm.debian.org)
  * Change search.cpan.org based URIs to metacpan.org based URIs

  [ Axel Beckert ]
  * debian/copyright: migrate pre-1.0 format to 1.0 using "cme fix dpkg-
    copyright"

  [ gregor herrmann ]
  * Strip trailing slash from metacpan URLs.

  [ Salvatore Bonaccorso ]
  * Update Vcs-Browser URL to cgit web frontend

  [ Damyan Ivanov ]
  * Mark package as autopkgtestable
  * Declare compliance with Debian Policy 3.9.6
  * Add explicit build dependency on libmodule-build-perl

 -- Damyan Ivanov <dmn@debian.org>  Tue, 09 Jun 2015 14:17:18 +0000

libnet-oauth-perl (0.28-1) unstable; urgency=low

  * Imported Upstream version 0.28
  * debian/control:
    + add dependency on libwww-perl to Depends and B-D-I
    + add the OAuth protocol version (1.0) on the short description
  * debian/copyright:
    + update DEP 5 format specification
    + update upstream copyright years
  * debian/libnet-oauth-perl.examples: update the demo folder
  * debian/rules: change the override to be aware of the new files
  * Add myself to Uploaders and Copyright

 -- Jotam Jr. Trejo <jotamjr@debian.org.sv>  Mon, 09 Jan 2012 22:51:05 -0600

libnet-oauth-perl (0.27-2) unstable; urgency=low

  * Team upload

  [ Ansgar Burchardt ]
  * debian/control: Convert Vcs-* fields to Git.

  [ Salvatore Bonaccorso ]
  * debian/control:
    - Drop (Build-)Depends(-Indep) on libdigest-sha1-perl.
    - Bump versioned Build-Depends on debhelper (>= 8).
  * debian/copyright:
    - Replace DEP5 Format-Specification URL from svn.debian.org to
      anonscm.debian.org URL.
    - Update revision of Format-Specification to revision 135.
    - Refer to Debian systems in general instead of only Debian GNU/Linux
      systems.
    - Explicitly point to GPL-1 license text in common-licenses.
  * Bump Standards-Version to 3.9.2.
  * Bump Debhelper compat level to 8.

 -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 06 Aug 2011 19:58:25 +0200

libnet-oauth-perl (0.27-1) unstable; urgency=low

  * New upstream release.
  * New build dependency: libtest-warn-perl.

 -- gregor herrmann <gregoa@debian.org>  Sat, 19 Jun 2010 01:31:00 +0200

libnet-oauth-perl (0.25-1) unstable; urgency=low

  [ Jonathan Yu ]
  * New upstream release 0.23

  [ gregor herrmann ]
  * New upstream release 0.25.
  * Remove (build) dependency on libuniversal-require-perl.
  * Convert to source format 3.0 (quilt).

 -- gregor herrmann <gregoa@debian.org>  Sun, 28 Mar 2010 20:19:47 +0200

libnet-oauth-perl (0.22-1) unstable; urgency=low

  * New upstream release
  * Use new DEP5 copyright format
  * Update years of copyright
  * Standards-Version 3.8.4 (no changes)
  * Add a command to fix shebangs for examples

 -- Jonathan Yu <jawnsy@cpan.org>  Fri, 12 Mar 2010 07:24:44 -0500

libnet-oauth-perl (0.20-1) unstable; urgency=low

  [ Jonathan Yu ]
  * New upstream release
  * Add myself to Uploaders and Copyright
  * Standards-Version 3.8.3 (no changes)

  [ gregor herrmann ]
  * debian/control: Changed: (build-)depend on perl instead of perl-
    modules.
  * debian/control: (build) depend on perl 5.10.1 to get the required
    Encode 2.35.

 -- Jonathan Yu <jawnsy@cpan.org>  Tue, 17 Nov 2009 08:28:58 -0500

libnet-oauth-perl (0.19-1) unstable; urgency=low

  * New upstream release.

 -- gregor herrmann <gregoa@debian.org>  Mon, 29 Jun 2009 18:06:46 +0200

libnet-oauth-perl (0.18-1) unstable; urgency=low

  * New upstream release.

 -- gregor herrmann <gregoa@debian.org>  Fri, 26 Jun 2009 16:15:51 +0200

libnet-oauth-perl (0.16-1) unstable; urgency=low

  [ Nathan Handler ]
  * New upstream release
  * debian/watch:
    - Update to ignore development releases.
    - Remove comments
  * debian/control:
    - Add myself to list of Uploaders
    - Bump Standards-Version to 3.8.2

  [ gregor herrmann ]
  * debian/copyright: update years of upstream copyright.

 -- Nathan Handler <nhandler@ubuntu.com>  Fri, 19 Jun 2009 03:35:34 +0000

libnet-oauth-perl (0.15-1) unstable; urgency=low

  * New upstream release.
  * Set Standards-Version to 3.8.1 (no changes).
  * debian/control:
    - mention module name in long description
    - bump debhelper dependency to get the --skipdeps feature
    - B-D: add perl-modules (>= 5.10) to libmodule-build-perl
  * Adjust debian/libnet-oauth-perl.examples and debian/rules to the new
    structure of the demos.
  * Minimize debian/rules.
  * debian/copyright: update format.

 -- gregor herrmann <gregoa@debian.org>  Fri, 05 Jun 2009 14:41:49 +0200

libnet-oauth-perl (0.14-1) unstable; urgency=low

  [ Brian Cassidy ]
  * New upstream release
  * debian/control: Added myself to Uploaders

  [ gregor herrmann ]
  * debian/copyright: copyright holders for debian/* are the contributors, and
    not the group.

 -- Brian Cassidy <brian.cassidy@gmail.com>  Mon, 15 Dec 2008 10:59:34 -0400

libnet-oauth-perl (0.13-1) unstable; urgency=low

  * debian/control: Changed: Switched Vcs-Browser field to ViewSVN
    (source stanza).
  * New upstream release.
  * Set debhelper compatibility level to 7; adapt
    debian/{control,compat,rules}.
  * Add /me to Uploaders.

 -- gregor herrmann <gregoa@debian.org>  Sat, 22 Nov 2008 17:59:03 +0100

libnet-oauth-perl (0.12-1) unstable; urgency=low

  * Initial Release. (Closes: #490931)

 -- AGOSTINI Yves <agostini@univ-metz.fr>  Tue, 15 Jul 2008 14:41:28 +0200
