node-tar (7.5.16+~4.0.1-1) experimental; urgency=medium

  * Team upload
  * Drop component @types/tar, Embed component @isaacs/fs-minipass
  * New upstream version 7.5.16+~4.0.1 (Closes: CVE-2026-53655)
  * Patches:
    - drop all previous patches
    - do not point to (unbuilt) min bundles
    - workaround @types/node changes
    - tolerate GNU tar pax extended-header warning
  * Refresh test modules
  * Update build
  * Minimal test during build, real test during autopkgtest
  * Drop dependencies to node-mkdirp, node-safe-buffer, node-fs-minipass
  * Update copyright

 -- Xavier Guimard <yadd@debian.org>  Wed, 24 Jun 2026 15:02:58 +0200

node-tar (6.2.1+ds1+~cs6.1.13-11) unstable; urgency=medium

  * Team upload
  * Declare compliance with policy 4.7.4
  * Adapt test for tap 21

 -- Xavier Guimard <yadd@debian.org>  Mon, 22 Jun 2026 22:24:10 +0200

node-tar (6.2.1+ds1+~cs6.1.13-10) unstable; urgency=medium

  * Team upload
  * Add patches for CVE-2026-24842 and CVE-2026-31802 (both introduced into
    6.2.1+ds1+~cs6.1.13-6 with upstream patch to fix CVE-2026-23745)

 -- Xavier Guimard <yadd@debian.org>  Tue, 24 Mar 2026 12:02:57 +0100

node-tar (6.2.1+ds1+~cs6.1.13-9) unstable; urgency=medium

  * Team upload
  * Drop "Priority: optional"
  * Adapt to chownr 3 (named exports) (Closes: #1131672)

 -- Xavier Guimard <yadd@debian.org>  Mon, 23 Mar 2026 14:47:59 +0100

node-tar (6.2.1+ds1+~cs6.1.13-8) unstable; urgency=medium

  * Team upload
  * Parse root off paths before sanitizing parts (Closes: CVE-2026-29786)
  * Do not write linkpaths through symlinks (Closes: #1129378, CVE-2026-26960)

 -- Xavier Guimard <yadd@debian.org>  Sun, 08 Mar 2026 11:46:04 +0100

node-tar (6.2.1+ds1+~cs6.1.13-7) unstable; urgency=medium

  * Team upload
  * Normalize out unicode ligatures (Closes: CVE-2026-23950)

 -- Yadd <yadd@debian.org>  Thu, 22 Jan 2026 08:03:45 +0100

node-tar (6.2.1+ds1+~cs6.1.13-6) unstable; urgency=medium

  * Team upload
  * Declare compliance with policy 4.7.3
  * Drop "Rules-Requires-Root: no"
  * debian/watch version 5
  * Refresh patches
  * Sanitize absolute linkpaths properly (Closes: CVE-2026-23745)

 -- Yadd <yadd@debian.org>  Sat, 17 Jan 2026 18:55:39 +0100

node-tar (6.2.1+ds1+~cs6.1.13-5) unstable; urgency=medium

  * Require rimraf >= 4

 -- Bastien Roucariès <rouca@debian.org>  Sat, 27 Dec 2025 00:27:26 +0100

node-tar (6.2.1+ds1+~cs6.1.13-4) unstable; urgency=medium

  * Remove test that fail due to race condition

 -- Bastien Roucariès <rouca@debian.org>  Thu, 25 Dec 2025 23:25:33 +0100

node-tar (6.2.1+ds1+~cs6.1.13-3) unstable; urgency=medium

  * Fix another failure with rimraf >= 4

 -- Bastien Roucariès <rouca@debian.org>  Thu, 25 Dec 2025 10:39:57 +0100

node-tar (6.2.1+ds1+~cs6.1.13-2) unstable; urgency=medium

  * Port to rimraf >= 4

 -- Bastien Roucariès <rouca@debian.org>  Mon, 22 Dec 2025 17:28:44 +0100

node-tar (6.2.1+ds1+~cs6.1.13-1) unstable; urgency=medium

  * Drop fs-minipass and thus use +ds1 as source version.

 -- Bastien Roucariès <rouca@debian.org>  Mon, 24 Nov 2025 09:31:29 +0100

node-tar (6.2.1+~cs7.0.8-1) unstable; urgency=medium

  * New upstream version
  * Bug fix: "failed to build, breaks node-minipass", thanks to Julian
    Gilbey (Closes: #1078546).
  * Drop patches applied upstream: CVE-2024-28863 and minipass transition

 -- Bastien Roucariès <rouca@debian.org>  Mon, 12 Aug 2024 12:35:09 +0000

node-tar (6.1.13+~cs7.0.5-4) unstable; urgency=medium

  * Team upload
  * Ease transition for minipass

 -- Bastien Roucariès <rouca@debian.org>  Fri, 09 Aug 2024 19:31:58 +0000

node-tar (6.1.13+~cs7.0.5-3) unstable; urgency=medium

  * Team upload
  * Reupload to force rebuild

 -- Yadd <yadd@debian.org>  Wed, 03 Apr 2024 09:39:22 +0400

node-tar (6.1.13+~cs7.0.5-2) unstable; urgency=medium

  * Team upload
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse
  * Import security patch from upstream (Closes: CVE-2024-28863)

 -- Yadd <yadd@debian.org>  Fri, 22 Mar 2024 16:19:13 +0400

node-tar (6.1.13+~cs7.0.5-1) unstable; urgency=medium

  * Team upload
  * Update lintian override info format in d/source/lintian-overrides
    on line 4
  * Set upstream metadata fields: Security-Contact
  * Declare compliance with policy 4.6.2
  * New upstream version 6.1.13+~cs7.0.5

 -- Yadd <yadd@debian.org>  Sat, 17 Dec 2022 14:53:17 +0100

node-tar (6.1.12+~cs6.1.5-1) unstable; urgency=medium

  * Team upload

  [ Debian Janitor ]
  * Apply multi-arch hints. + node-tar: Add Multi-Arch: foreign.

  [ Yadd ]
  * Update standards version to 4.6.1, no changes needed.
  * Replace /releases by /tags in GitHub urls
  * New upstream version 6.1.12+~cs6.1.5
  * Add test dependency to node-nock
  * Use dh_nodejs_autodocs

 -- Yadd <yadd@debian.org>  Fri, 04 Nov 2022 14:43:52 +0100

node-tar (6.1.11+ds1+~cs6.0.6-2) unstable; urgency=medium

  * Team upload
  * Drop useless README.source
  * Fix test for tap >= 15 (Closes: #1009609)

 -- Yadd <yadd@debian.org>  Thu, 14 Apr 2022 05:32:48 +0200

node-tar (6.1.11+ds1+~cs6.0.6-1) unstable; urgency=medium

  * Team upload
  * Drop dependency to nodejs
  * Drop embedded minipass
  * New upstream version 6.1.11+ds1+~cs6.0.6

 -- Yadd <yadd@debian.org>  Wed, 23 Feb 2022 17:59:24 +0100

node-tar (6.1.11+~cs11.3.10-1) unstable; urgency=medium

  * Team upload
  * Declare compliance with policy 4.6.0
  * New upstream version 6.1.11+~cs11.3.10 (Closes: #993981, CVE-2021-37712)
  * Update excluded tests (need tap ≥ 14)

 -- Yadd <yadd@debian.org>  Thu, 09 Sep 2021 17:59:33 +0200

node-tar (6.1.7+~cs11.3.10-1) unstable; urgency=medium

  * Team upload
  * Back to unstable
  * New upstream version 6.1.7+~cs11.3.10
    (Closes: #992110, #992111, CVE-2021-32803 CVE-2021-32804)
  * Update disabled tests (need an updated tap)
  * Update autopkgtest files

 -- Yadd <yadd@debian.org>  Wed, 11 Aug 2021 21:30:03 +0200

node-tar (6.1.0+ds1+~cs11.3.9-1) experimental; urgency=medium

  [ Pirate Praveen ]
  * Team upload
  * Update minimum version of node-yallist to 4.0

  [ Yadd ]
  * Fix GitHub tags regex

  [ Ayoyimika Ajibade ]
  * New upstream version 6.1.0+ds1+~cs11.3.9
  * Updated patches/disable-failing-tests.diff file.
  * Upload to experimental

 -- Ayoyimika Ajibade <ayoyimikaajibade@gmail.com>  Sat, 12 Jun 2021 12:50:48 +0000

node-tar (6.0.5+ds1+~cs11.3.9-1) unstable; urgency=medium

  [ Xavier Guimard ]
  * Team upload
  * Declare compliance with policy 4.5.1
  * Modernize debian/watch
  * Add ctype=nodejs to component(s)

  [ Pirate Praveen ]
  * Add @types/tar as component
  * New upstream version 6.0.5+ds1+~cs11.3.9

 -- Pirate Praveen <praveen@debian.org>  Thu, 07 Jan 2021 14:18:29 +0530

node-tar (6.0.5+ds1-2) unstable; urgency=medium

  * Team upload
  * Back to unstable after successful tests

 -- Xavier Guimard <yadd@debian.org>  Sat, 24 Oct 2020 19:54:30 +0200

node-tar (6.0.5+ds1-1) experimental; urgency=medium

  * Team upload

  [ Debian Janitor ]
  * Update standards version to 4.4.1, no changes needed.
  * debian/copyright: use spaces rather than tabs to start continuation
    lines.
  * Remove obsolete fields Name from debian/upstream/metadata.

  [ Xavier Guimard ]
  * Bump debhelper compatibility level to 13
  * Declare compliance with policy 4.5.0
  * Add "Rules-Requires-Root: no"
  * Use dh-sequence-nodejs
  * New upstream version 6.0.5+ds1
  * Refresh patch
  * Update test modules
  * Require node-mkdirp ≥ 1

 -- Xavier Guimard <yadd@debian.org>  Thu, 22 Oct 2020 08:35:38 +0200

node-tar (4.4.10+ds1-2) unstable; urgency=medium

  * Team upload
  * Switch install to pkg-js-tools
  * Increase test timeout
  * Don't install map.js, used only for tests
  * Switch to debhelper-compat
  * Back to unstable after successful tests using ci.debian.net

 -- Xavier Guimard <yadd@debian.org>  Thu, 22 Aug 2019 08:56:57 +0200

node-tar (4.4.10+ds1-1) experimental; urgency=medium

  * Team upload
  * Bump debhelper compatibility level to 12
  * Declare compliance with policy 4.4.0
  * Move installed files to /usr/share/nodejs
  * Replace pkg-components by pkg-js-tools (Closes: #933124)
  * Exclude embedded npm from minizlib import
  * New upstream version 4.4.10+ds1
  * Clean autopkgtest
  * Install map.js
  * Enable upstream test using pkg-js-tools. This embeds chmodr for tests only
  * Disable some failing test (even with npm install)
  * Update debian/copyright
  * Drop unneeded version constraints from (build) dependencies

 -- Xavier Guimard <yadd@debian.org>  Sat, 27 Jul 2019 13:34:30 +0200

node-tar (4.4.6+ds1-3) unstable; urgency=medium

  * Team upload
  * Tighten dependencies (Closes: #910165)
  * Update copyright file (remove chownr section)
  * Add autopkgtest

 -- Pirate Praveen <praveen@debian.org>  Mon, 15 Oct 2018 22:13:56 +0530

node-tar (4.4.6+ds1-2) unstable; urgency=medium

  * Team upload
  * Drop chownr component in favor of node-chownr package

 -- Pirate Praveen <praveen@debian.org>  Fri, 28 Sep 2018 01:27:08 +0530

node-tar (4.4.6+ds1-1) unstable; urgency=medium

  * Team upload
  * New upstream version 4.4.6+ds1
  * Allow pkg-components from backports
  * Bump debhelper compatibility level to 11
  * Bump Standards-Version to 4.2.1 (no changes needed)

 -- Pirate Praveen <praveen@debian.org>  Sun, 16 Sep 2018 13:29:46 +0530

node-tar (4.4.4+ds1-2) unstable; urgency=medium

  * Team upload
  * Reupload to unstable

 -- Pirate Praveen <praveen@debian.org>  Fri, 17 Aug 2018 11:48:35 +0530

node-tar (4.4.4+ds1-1) experimental; urgency=medium

  * Properly rebuild ds1, including all tarballs

 -- Jérémy Lal <kapouer@melix.org>  Thu, 19 Jul 2018 12:23:16 +0200

node-tar (4.4.4+ds-4) experimental; urgency=medium

  * Properly build package from vcs. See README.source.

 -- Jérémy Lal <kapouer@melix.org>  Thu, 19 Jul 2018 11:37:57 +0200

node-tar (4.4.4+ds-3) experimental; urgency=medium

  * Build-Depends on some modules needed for tests
  * New upstream version 4.4.4+ds
  * Update minipass version
  * api-backward-compatibility.patch: restore capitalized methods
    names. (Closes: #900491)
  * copyright: move comment from Source into Comment
  * Improve 4.4.1 changelog entry
  * Depends pkg-components >= 0.10

 -- Jérémy Lal <kapouer@melix.org>  Fri, 08 Jun 2018 09:31:29 +0200

node-tar (4.4.1+ds-2) experimental; urgency=medium

  * Call dh-components using dh_override_install/clean,
    because default hook is only after dh_install.

 -- Jérémy Lal <kapouer@melix.org>  Mon, 23 Apr 2018 13:43:58 +0200

node-tar (4.4.1+ds-1) experimental; urgency=medium

  * New upstream version 4.4.1+ds
  * Section javascript
  * Priority optional
  * Vcs salsa
  * Remove Testsuite field
  * Exclude benchmarks modules and repack
  * Standards-Version 4.1.4
  * Drop useless patch
  * Update Depends
  * Bundle these modules:
    + chownr (ITP #863985)
    + minipass
    + fs-minipass
    + minizlib
    using salsa:kapouer/pkg-components#f8714364 (see also
    #896608) which makes them easy to maintain using
    uscan-components and dh-components.
    Bundling criterions:
    - small source and same(ish) upstream author as main package
    - or not actively maintained and small number of potential
      reverse dependencies.
   * Run package tests
   * Add patch to avoid dependency on chmodr for running tests
     (node-chmodr is not available at the moment)

 -- Jérémy Lal <kapouer@melix.org>  Mon, 23 Apr 2018 01:14:10 +0200

node-tar (2.2.1-1) unstable; urgency=medium

  [ Bas Couwenberg ]
  * Remove myself from Uploaders.

  [ Jérémy Lal ]
  * Imported Upstream version 2.2.1
  * Run tests in autopkgtest
  * Move build-deps to test deps
  * Upstream license moved to ISC
  * Secure Vcs url
  * Standards-Version 3.9.8
  * Add patch fixing test
  * Tighten dependency on node-fstream 1.0.10
  * Override lintian error about missing source for test data

 -- Jérémy Lal <kapouer@melix.org>  Fri, 18 Nov 2016 09:52:18 +0100

node-tar (1.0.3-2) unstable; urgency=medium

  * Merge changes from previous releases.

 -- Bas Couwenberg <sebastic@debian.org>  Sun, 15 Mar 2015 22:59:07 +0100

node-tar (1.0.3-1) unstable; urgency=low

  * Initial release (Closes: #780440)

 -- Bas Couwenberg <sebastic@debian.org>  Sat, 14 Mar 2015 01:29:10 +0100

node-tar (0.1.18-1) unstable; urgency=low

  * Upstream update
  * control:
    + tighten dependency on node-inherits (>= 2)
    + canonicalize Vcs fields
    + Standards-Version 3.9.4

 -- Jérémy Lal <kapouer@melix.org>  Thu, 15 Aug 2013 16:06:15 +0200

node-tar (0.1.17-1) experimental; urgency=low

  * Upstream update.
  * Use github url in watch file.
  * Use dh_installexamples instead of dh_installdocs.

 -- Jérémy Lal <kapouer@melix.org>  Fri, 22 Mar 2013 10:18:26 +0100

node-tar (0.1.13-1) unstable; urgency=low

  * Initial release (Closes: #664719)

 -- Jérémy Lal <kapouer@melix.org>  Sat, 17 Mar 2012 23:37:48 +0100
