dq (20241027-1) unstable; urgency=medium

  * New upstream version 20241027
  * d/copyright: bump copyright year
  * d/control: bump Standards-Version: 4.7.0, no changes
  * d/gbp.conf: dist = DEP14, debian-branch = debian/latest
  * d/gbp.conf: remove: upstream-signatures = on
  * d/control: add B-D: lib25519-dev, librandombytes-dev
  * d/t/recursive: test also encrypted queries

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Mon, 28 Oct 2024 11:32:08 +0100

dq (20240101-1) unstable; urgency=medium

  * New upstream version 20240101
  * d/control: Standards-Version: 4.6.2
  * d/watch: remove filenamemangle and use characters @ANY_VERSION@@ARCHIVE_EXT@
  * d/gbp.conf: add upstream-signatures = on, track-missing = True

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Mon, 01 Jan 2024 10:57:05 +0100

dq (20230101-1) unstable; urgency=medium

  [ Debian Janitor ]
  * Update lintian override info to new format:
    + debian/dqcache.lintian-overrides: line 2
    + debian/dq.lintian-overrides: line 2

  [ Jan Mojžíš ]
  * New upstream version 20230101
  * d/t/recursive autopkgtest added, tests recursive DNS queries
  * d/gbp.conf: debian-branch = main

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sun, 01 Jan 2023 09:36:35 +0100

dq (20220822-2) unstable; urgency=medium

  * d/watch fixed url

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Tue, 25 Oct 2022 17:26:10 +0200

dq (20220822-1) unstable; urgency=medium

  * New upstream version 20220822
  * d/control: bump Standards-Version to 4.6.1, no changes

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Mon, 22 Aug 2022 20:14:21 +0200

dq (20220101-1) unstable; urgency=medium

  [ Jan Mojžíš ]
  * New upstream version 20220101
  * d/upstream - updated minimal signing-key.asc, removed extra signatures
  * d/compat - bump debhelper compat level to 13 and use debhelper-compat
  * d/control - bump to standards version 4.6.0 (no modifications)
  * d/control - added Rules-Requires-Root: no
  * d/dqcache.service systemd hardening, CapabilityBoundingSet =
    CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_CHOWN CAP_SYS_CHROOT,
    SystemCallFilter=~ptrace,
    PrivateDevices=yes
  * d/tests/dqcachetest - added TCP test query
  * d/tests/dqcachetest - added test if dqcache runs after reboot
  * d/watch - fixed regexp
  * d/dqcache.manpages - man pages moved
    dqcache-{start,makekey}.1 -> dqcache-{start,makekey}.8
  * d/rules - fixed cross-build

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Submit.
  * Remove obsolete field Name from debian/upstream/metadata (already present in
    machine-readable debian/copyright).

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sat, 01 Jan 2022 08:50:52 +0100

dq (20181021-1) unstable; urgency=medium

  * d/control - bump to standards version 4.2.1
  * d/compat - switched to debhelper 11
  * d/upstream/signing-key.asc - added
  * d/watch - added gpg signature checking
  * d/copyright fixed url http->https
  * d/tests/dqcachetest - added simple autopkgtest
  * d/control - Vcs-* moved to salsa.debian.org
  * Convert git repository from git-dpm to gbp layout
  * d/upstream/metadata - added
  * dqcache pkg. - runs under systemd,
    dqcache-run pkg. - removed and added to
    d/control - dqcache breaks and replaces dqcache-run << 20181021-1
  * d/control - removed build dependency on libnacl-dev
  * New upstream version 20181021:
    - fixed IPSEND6/IPSEND4 env. parsing
    - randomized cached A and AAAA response
    - removed little-endian detection/optimization and added full
      processor independent implementation of poly1305,salsa20
      to fix segmentation faults on armhf architecture

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Wed, 24 Oct 2018 15:10:22 +0200

dq (20161210-1) unstable; urgency=medium

  * New upstream version 20161210:
      - dqcache: accept connections from all IP addresses,
                 when environment variable $OKCLIENT is set
      - dqcache: duplicate-query suppression, workaround for CVE-2008-4392
      - dqcache: cache servfail responses for 10 seconds
      - dqcache: caches records for at least $MINTTL seconds,
                 when environment variable $MINTTL is set
      - dqcache/dq: crypto_onetimeauth_poly1305 speedup
      - dqcache: added dqcache-start wrapper
      - dq: fixed -T arg (timeout must be an integer between 1 and 60)
  * Added lintian-override for hardening-no-fortify-functions
  * Added lintian-override for no-upstream-changelog
  * debian/rules - print debug log when compilation fails
  * Supervise directory moved /etc -> /var/lib (Closes: #834828)
  * Root directory moved /etc -> /var/lib

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Sat, 10 Dec 2016 16:28:15 +0100

dq (20160720-1) unstable; urgency=medium

  * New upstream version 20160720:
      - added strict forwardonly patch
      - removed inet_pton.* files
  * Priority: standard -> optional. (Closes: #829360)
  * dqcache-run: daemontools service renamed to dqcache

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Wed, 20 Jul 2016 10:47:33 +0200

dq (20160621-1) unstable; urgency=medium

  * Initial release. (Closes: #825174)

 -- Jan Mojžíš <jan.mojzis@gmail.com>  Wed, 22 Jun 2016 13:59:46 +0200