incus (6.0.4-2+deb13u2) trixie-security; urgency=high

  * Backport upstream fix for GHSA-56mx-8g9f-5crf

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 10 Nov 2025 13:32:56 +0000

incus (6.0.4-2+deb13u1) trixie-security; urgency=high

  * Backport fixes for the following security issues:
    - CVE-2025-54293 / GHSA-472f-vmf2-pr3h
    - CVE-2025-54287 / GHSA-w2hg-2v4p-vmh6
    - CVE-2025-54288 / GHSA-7232-97c6-j525
    - CVE-2025-54286 / GHSA-p8hw-rfjg-689h
    - CVE-2025-54290 / GHSA-p3x5-mvmp-5f35
    - CVE-2025-54291 / GHSA-xch9-h8qw-85c7
    - CVE-2025-54289 / GHSA-3g72-chj4-2228

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 02 Oct 2025 15:51:07 +0000

incus (6.0.4-2) unstable; urgency=medium

  * Fix inadvertent policy violation where build created files in HOME
    (Closes: #1103554)
  * Cherry-pick upstream fixes:
    - Cleanup old qemu sockets
    - Retry agent mounts
    - USB hotplugging
  * d/control:
    - Add back Build-Using stanzas
    - Add squashfs-tools-ng to incus-base Required packages
    - Have incus-client Suggest "spice-client-gtk | virt-viewer"
  * Update systemd service to wait long enough for Incus to correctly shutdown
  * Update systemd and sysv init scripts to use `incusd waitready`

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 27 Apr 2025 14:45:33 +0000

incus (6.0.4-1) unstable; urgency=medium

  * New upstream release
    - Rebase patches and drop upstream cherry-picked commits
  * d/control:
    - Update Build-Depends and Depends
    - Add lego to list of Suggested packages for incus-base

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 04 Apr 2025 02:43:07 +0000

incus (6.0.3-5) unstable; urgency=medium

  [ Martin Steigerwald ]
  * Runit support for Incus (Closes: #1084990)

  [ Mathias Gibbens ]
  * d/control:
    - Apply hack for /usr-move (Closes: #1099444; DEP17 P1 M7)
    - Update minimum required version of lxcfs to ensure its runit scripts
      will be available
    - Set minimum version of apparmor
    - Replace Built-Using with Static-Built-Using
  * Add apparmor 4.x userns patch
  * Cherry-pick upstream commit for selecting SecureBoot capable OVMF
  * Cherry-pick upstream fix for qemu 10
  * Update d/README.Debian to reflect addition of runit scripts
  * Fix lintian warning old-fsf-address-in-copyright-file in d/copyright

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 31 Mar 2025 22:36:28 +0000

incus (6.0.3-4) unstable; urgency=medium

  * d/control:
    - Update Standards-Version to 4.7.2 (no changes needed)
    - Limit virtiofsd dependency to 64bit architectures
    - Set minimum required version of qemu
  * Cherry-pick upstream fix to allow virtiofsd on non-x86 architectures

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 02 Mar 2025 23:07:28 +0000

incus (6.0.3-3) unstable; urgency=medium

  * Update organization of binary packages:
    - bin:incus provides all dependencies to run both containers and VMs
    - bin:incus-base has just what is necessary for running containers
    - bin:incus-tools and bin:incus-migrate combined into bin:incus-extra

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 01 Mar 2025 17:16:21 +0000

incus (6.0.3-2) unstable; urgency=medium

  [ Kwok Guy ]
  * Initial SysV init scripts for incus

  [ Mathias Gibbens ]
  * Update years in d/copyright
  * Update d/README.Debian
  * Cherry-pick upstream fix to remove virtfs-proxy-helper dependency
  * Cherry-pick upstream fix for qemu device_id warning
  * Add startup wrapper script to allow directing logging to syslog
  * Add a patch to adjust the MinIO client's binary name to reflect Debian
    packaging

 -- Mathias Gibbens <gibmat@debian.org>  Sun, 26 Jan 2025 01:19:17 +0000

incus (6.0.3-1) unstable; urgency=medium

  * New upstream release (Closes: #1090375)
    - Includes fix for CVE-2024-6156
    - Rebase d/p/002-adjust-import-paths.patch
  * d/control:
    - Set minimum required version of golang-starlark-dev
    - Adjust recommended and suggested packages
  * Mention the swtpm-tools package in d/README.Debian

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 20 Dec 2024 02:44:01 +0000

incus (6.0.2-1) unstable; urgency=medium

  * New upstream release
    - Rebase d/p/002-adjust-import-paths.patch
  * d/control:
    - Bump minimum required version of golang-any to 1.22 per go.mod
    - Set minimum required version of golang-github-openfga-go-sdk

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 19 Sep 2024 03:05:28 +0000

incus (6.0.1-3) unstable; urgency=medium

  * Team upload.
  * Upload to unstable

 -- Reinhard Tartler <siretart@tauware.de>  Sat, 17 Aug 2024 07:21:34 -0400

incus (6.0.1-2) experimental; urgency=medium

  * Team upload.
  * Compile against go-criu v7, Closes: #1078217

 -- Reinhard Tartler <siretart@tauware.de>  Thu, 08 Aug 2024 19:01:26 -0400

incus (6.0.1-1) unstable; urgency=medium

  * New upstream release
    - Rebase d/p/002-adjust-import-paths.patch
  * d/control:
    - Update Build-Depends and Depends
    - Add minio-client to the list of incus' Recommended packages
  * Update d/watch for upstream's LTS tagging convention

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 29 Jun 2024 02:08:43 +0000

incus (6.0.0-1) unstable; urgency=medium

  * New upstream release
    - Ship shell completions for bash, fish, and zsh
  * d/control:
    - Update minimum major version of golang-github-zitadel-oidc
    - Update Standards-Version to 4.7.0 (no changes needed)

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 11 Apr 2024 01:01:17 +0000

incus (0.7-1) unstable; urgency=medium

  * New upstream release
    - Update Build-Depends and Depends
    - Package incus-simplestreams in bin:incus-tools
    - Don't build tls2jwt test binary
  * Sync incus-agent scripts with upstream (See #1064213)

 -- Mathias Gibbens <gibmat@debian.org>  Tue, 26 Mar 2024 23:03:26 +0000

incus (0.6-2) unstable; urgency=medium

  * Fix incus-agent injection if $PATH is set in /etc/environment
    (Closes: #1065174)
  * d/control:
    - Add Depends on iproute2 (Closes: #1064852)
    - Suggest bash-completion in incus-client
    - Set minimum version of golang to aid backporting
  * d/rules:
    - Remove unneeded override of dh_installinit
  * Don't print install message on upgrades

 -- Mathias Gibbens <gibmat@debian.org>  Wed, 06 Mar 2024 02:48:38 +0000

incus (0.6-1) unstable; urgency=medium

  * New upstream release
    - Update Build-Depends and Depends

 -- Mathias Gibbens <gibmat@debian.org>  Thu, 22 Feb 2024 23:24:32 +0000

incus (0.5.1-3) unstable; urgency=medium

  * Source-only upload for migration
  * Drop lintian overrides for removed tag
    package-supports-alternative-init-but-no-init.d-script

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 12 Feb 2024 10:34:51 +0000

incus (0.5.1-2) unstable; urgency=medium

  * Add a golang-github-lxc-incus-dev package

 -- Mathias Gibbens <gibmat@debian.org>  Sat, 03 Feb 2024 14:34:36 +0000

incus (0.5.1-1) unstable; urgency=medium

  * New upstream release

 -- Mathias Gibbens <gibmat@debian.org>  Mon, 29 Jan 2024 20:31:42 +0000

incus (0.5-1) unstable; urgency=medium

  * New upstream release:
    - Drop patches applied upstream
    - Drop patch that disabled Loki integration and update d/README.debian
    - Update Build-Depends and Depends
  * Update years in d/copyright
  * d/rules:
    - Update list of files and directories set in DH_GOLANG_INSTALL_EXTRA
    - Set HOME environment variable for all manpage generation commands
  * Rename d/README.debian -> d/README.Debian

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 26 Jan 2024 01:06:09 +0000

incus (0.4-1) unstable; urgency=medium

  * Initial release (Closes: #1042989)

 -- Mathias Gibbens <gibmat@debian.org>  Fri, 12 Jan 2024 17:21:36 +0000
