golang-github-sigstore-cosign-v2 (2.6.3-2) unstable; urgency=medium

  * Use /v2 import path (Closes: #1133216)
  * Don't use DH_GOLANG_BUILDPKG

 -- Simon Josefsson <simon@josefsson.org>  Tue, 14 Apr 2026 15:02:57 +0200

golang-github-sigstore-cosign-v2 (2.6.3-1) unstable; urgency=medium

  * New upstream version
    - Fixes CVE-2026-39395

 -- Simon Josefsson <simon@josefsson.org>  Mon, 13 Apr 2026 06:33:42 +0200

golang-github-sigstore-cosign-v2 (2.6.2-1) unstable; urgency=medium

  * Forked from golang-github-sigstore-cosign v2.6.2-1
    - The v2 branch is needed by the go-witness eco-system
    - Dropped binary 'cosign'

 -- Simon Josefsson <simon@josefsson.org>  Thu, 02 Apr 2026 08:38:43 +0200