pyjwt (2.6.0-1+deb12u1) bookworm-security; urgency=high

  * Team upload.
  * Fix CVE-2026-32597: PyJWT did not validate the crit (Critical) Header
    Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit
    array listing extensions that PyJWT does not understand, the library
    accepts the token instead of rejecting it. This violates the MUST
    requirement in the RFC. (Closes: #1130662)

 -- Jochen Sprickerhof <jspricke@debian.org>  Tue, 28 Apr 2026 16:47:59 +0200

pyjwt (2.6.0-1) unstable; urgency=medium

  * New upstream version 2.6.0
  * debian/control
    - Add python3-exceptiongroup and python3-tomli to Build-Depends.
  * debian/copyright
    - Update copyright years.
  * debian/tests/control
    - Add python3-exceptiongroup and python3-tomli to Depends.

 -- Daniele Tricoli <eriol@debian.org>  Tue, 03 Jan 2023 03:04:35 +0100

pyjwt (2.4.0-2) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster

 -- Jelmer Vernooĳ <jelmer@debian.org>  Mon, 17 Oct 2022 02:46:25 +0100

pyjwt (2.4.0-1) unstable; urgency=medium

  * New upstream version 2.4.0
    - Fixes CVE-2022-29217 (Closes: #1011747)
  * Enable salsa pipelines.
  * Fix typo on debian/NEWS.
  * debian/control
    - Bump Standards-Version to 4.6.1 (no changes needed).
  * debian/copyright
    - Update copyright years.

 -- Daniele Tricoli <eriol@debian.org>  Mon, 11 Jul 2022 17:16:24 +0200

pyjwt (2.3.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.

 -- Thomas Goirand <zigo@debian.org>  Wed, 16 Feb 2022 09:33:52 +0100

pyjwt (2.1.0-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/control: Update Maintainer field with new Debian Python Team
    contact address.
  * d/control: Update Vcs-* fields with new Debian Python Team Salsa
    layout.

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Update standards version to 4.5.0, no changes needed.

  [ Daniele Tricoli ]
  * New upstream version 2.1.0. (Closes: #989637)
  * Drop man page since upstream dropped CLI entrypoint.
  * debian/changelog
    - Format changelog to not go over 80 columns.
  * debian/control
    - Bump debhelper compatibility to 13.
    - Bump Standards-Version to 4.5.1 (no changes needed).
  * debian/copyright
    - Update copyright years.
  * debian/NEWS
    - Add news entry about dropped CLI.
  * debian/tests/python3-jwt
    - Use supported python versions during tests.
  * debian/watch
    - Bump d/watch version to 4.

 -- Daniele Tricoli <eriol@debian.org>  Fri, 20 Aug 2021 02:13:42 +0200

pyjwt (1.7.1-2) unstable; urgency=medium

  * Team upload.
  * Drop python2 support; Closes: #937463

 -- Sandro Tosi <morph@debian.org>  Sat, 26 Oct 2019 20:17:32 -0400

pyjwt (1.7.1-1) unstable; urgency=medium

  [ Ondřej Nový ]
  * Use debhelper-compat instead of debian/compat.

  [ Daniele Tricoli ]
  * New upstream release. (Closes: #942241)
  * Use my Debian email address.
  * debian/control
    - Bump debhelper-compat to 12.
    - Bump Standards-Version to 4.4.1 (no changes needed).
  * debian/copyright
    - Update copyright years.
  * debian/patches/0001-Fix-tests-to-work-with-pytest-3.9.0.patch
    - Drop since no needed anymore.

 -- Daniele Tricoli <eriol@debian.org>  Tue, 22 Oct 2019 02:58:08 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog python3-jwt`.
