changelog

webkit2gtk (2.28.2-1) UNRELEASED; urgency=medium

  * New upstream release (Closes: #956837).
  * debian/patches/fix-ftbfs-mips64el.patch:
    + Drop this patch.
  * debian/rules:
    + Don't set -Wall or -Wl,--as-needed, these are already used by
      default. Fixes the debian-rules-uses-as-needed-linker-flag lintian
      warning.
    + Include /usr/share/dpkg/buildflags.mk instead of setting the build
      flags manually.
  * debian/source/lintian-overrides:
    + Override mailing-list-obsolete-in-debian-infrastructure.

 -- Alberto Garcia <berto@igalia.com>  Fri, 24 Apr 2020 13:09:58 +0200

webkit2gtk (2.28.1-2) unstable; urgency=high

  * The WebKitGTK security advisory WSA-2020-0004 lists the following
    security fixes in the latest versions of WebKitGTK:
    + CVE-2020-11793 (fixed in 2.28.1).
  * fix-ftbfs-mips64el.patch:
    + Fix a FTBFS in mipsel64.

 -- Alberto Garcia <berto@igalia.com>  Mon, 20 Apr 2020 01:50:19 +0200

webkit2gtk (2.28.1-1) unstable; urgency=medium

  * New upstream release (Closes: #956219, #954026).
  * debian/control:
    + Remove build dependency on libx11-xcb-dev now that gstreamer depends
      on it (see #948143).
  * debian/patches/use-python3.patch:
    + Drop patch, this is now upstream.

 -- Alberto Garcia <berto@igalia.com>  Mon, 13 Apr 2020 13:08:54 +0200

webkit2gtk (2.28.0-2) unstable; urgency=high

  * The WebKitGTK security advisory WSA-2020-0003 lists the following
    security fixes in the latest versions of WebKitGTK:
    + CVE-2020-10018 (fixed in 2.28.0).
  * debian/rules:
    + Disable the WPE renderer on Ubuntu since the required backend is in
      universe (thanks, Sebastien Bacher).
  * debian/gbp.conf:
    + Update upstream branch name.

 -- Alberto Garcia <berto@igalia.com>  Thu, 12 Mar 2020 20:35:21 +0100

webkit2gtk (2.28.0-1) experimental; urgency=medium

  * New upstream release.
  * debian/watch:
    + Scan stable releases only.

 -- Alberto Garcia <berto@igalia.com>  Tue, 10 Mar 2020 14:22:29 +0100

webkit2gtk (2.27.91-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh debian/patches/dont-detect-sse2.patch.
  * debian/rules:
    + Use -mlra -fno-move-loop-invariants in sh3 and sh4 builds (thanks,
      Adrian Glaubitz) (Closes: #952482).
    + Use jdupes to remove duplicate files in libwebkit2gtk-4.0-doc.
  * debian/control:
    + Add build dependency on jdupes.
    + Update Standards-Version to 4.5.0 (no changes).
  * debian/WebKitWebDriver.1:
    + Fix grammar.
  * debian/copyright:
    + Update copyright information of all files.

 -- Alberto Garcia <berto@igalia.com>  Thu, 27 Feb 2020 16:50:58 +0100

webkit2gtk (2.27.90-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/use-python3.patch:
    + The unversioned python interpreter (i.e. Python 2) is not installed
      by default anymore, so use Python 3 instead (Closes: #948839).
  * debian/control:
    + Drop build dependency on python.
    + Mark libwebkit2gtk-4.0-doc and libwebkit2gtk-4.0-37-gtk2 as
      Multi-Arch: foreign.
  * debian/rules:
    + Don't use the Gold linker on powerpc (Closes: #949618).
    + Run dh with --builddirectory=build. Some source files are generated
      inside this directory and are later referenced from the .gir files
      so their path names should be independent from the architecture.
  * Refresh all patches.
  * debian/patches/reduce-memory-overheads.patch:
    + Reduce memory usage when not using the Gold linker
      (Closes: #949621).
  * debian/patches/fix-ftbfs-m68k.patch:
    + Bring the patch from the unstable branch.
  * Add debian/upstream/metadata.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 11 Feb 2020 00:06:15 +0100

webkit2gtk (2.27.4-1) experimental; urgency=medium

  * New upstream development release.
  * debian/control:
    + Switch build dependency from libenchant-dev to libenchant-2-dev
      (Closes: #948106).
    + Add build dependency on libx11-xcb-dev.
    + Add Rules-Requires-Root: no.
  * debian/source/lintian-overrides:
    + Update source-is-missing override.
  * debian/copyright:
    + Update copyright years.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
    + Add Build-Depends-Package field.

 -- Alberto Garcia <berto@igalia.com>  Fri, 10 Jan 2020 16:47:54 +0100

webkit2gtk (2.27.3-1) experimental; urgency=medium

  * New upstream development release.
  * Build without the bubblewrap sandbox if the required dependencies are
    not available:
    + debian/rules:
      - Pass -DENABLE_BUBBLEWRAP_SANDBOX depending on whether libseccomp
        is installed.
      - Add runtime dependencies on bubblewrap and xdg-dbus-proxy
        conditionally to the status of ENABLE_BUBBLEWRAP_SANDBOX.
    + debian/control:
      - Don't require bubblewrap, xdg-dbus-proxy or libseccomp-dev in
        alpha, ia64, m68k, riscv64, sh4 or sparc64.
  * Enable USE_WPE_RENDERER:
    + debian/control:
      - Add build dependency on libwpebackend-fdo-1.0-dev.
    + debian/rules:
      - Set USE_WPE_RENDERER depending on whether wpebackend-fdo is
        available or not (this allows disabling it by simply removing the
        build dependency).
  * debian/rules:
    + Use -g1 in all builds. The webkit2gtk debug packages are huge and
      I'm not convinced that they have been very useful for reporting
      bugs. Using -g1 is enough for a basic backtrace and it makes the
      packages easier to handle.
    + Install the NEWS file using debian/libwebkit2gtk-4.0-37.docs.
  * debian/patches/detect-woff.patch:
    + Refresh.
  * debian/control:
    + Add build dependency on python.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 26 Nov 2019 17:31:23 +0200

webkit2gtk (2.27.2-1) experimental; urgency=medium

  * New upstream development release.
  * debian/control:
    + Require bubblewrap >= 0.3.1.
    + Update Standards-Version to 4.4.1 (no changes).
    + Add Breaks for Evolution < 3.34.1 (see WebKit bug #201033).
  * debian/rules:
    + Stop building with -O1 for armhf and friends, the build seems to
      work just fine with -O2 now.
  * Drop fix-ftbfs-m68k.patch, we are not building for m68k anyway.
  * debian/source/lintian-overrides:
    + Update source-is-missing override.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 22 Oct 2019 21:33:09 +0300

webkit2gtk (2.27.1-1) experimental; urgency=medium

  * New upstream development release.
  * debian/watch, debian/gbp.conf:
    + Update for 2.27.x packages in experimental.
  * Refresh all patches.
    + Use -DWTF_CPU_ARM64_CORTEXA53=OFF to fix the arm64 build.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 08 Oct 2019 16:58:23 +0300

webkit2gtk (2.26.1-1) experimental; urgency=medium

  [ Jeremy Bicha ]
  * Suggest instead of Recommend gstreamer1.0-libav on Ubuntu

  [ Alberto Garcia ]
  * New upstream release.

 -- Alberto Garcia <berto@igalia.com>  Mon, 23 Sep 2019 15:55:10 +0300

webkit2gtk (2.26.0-1) experimental; urgency=medium

  * New upstream release.
  * debian/watch:
    + Scan stable releases only.
  * debian/copyright:
    + Remove nonexistent files.
  * Add a dummy libwebkit2gtk-4.0-37-gtk2 with a transition plan for
    people who still need to use Flash.
    + debian/control:
      - Add the package, suggest browser-plugin-freshplayer-pepperflash.
    + debian/libwebkit2gtk-4.0-37-gtk2.NEWS:
      - Add news item about the Flash transition plan.

 -- Alberto Garcia <berto@igalia.com>  Tue, 10 Sep 2019 16:22:11 +0300

webkit2gtk (2.25.92-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/source/lintian-overrides:
    + Update source-is-missing override.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 03 Sep 2019 15:14:06 +0300

webkit2gtk (2.25.4-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/source/lintian-overrides:
    + Update source-is-missing override.
  * Use the CLoop Javascript interpreter in i386 and stop telling gcc to
    use SSE2 instructions (Closes: #930935).
    + debian/rules:
      - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using
        -msse2 -mfpmath=sse.
    + debian/patches/dont-detect-sse2.patch:
      - Don't check for SSE2 support.
    + debian/NEWS:
      - Remove item about the requirement to have an SSE2-capable CPU.
  * WebKitGTK 2.25.3 no longer ships the GTK 2 plugin process:
    + debian/control:
      - Drop build dependency on libgtk2.0-dev.
      - Remove the libwebkit2gtk-4.0-37-gtk2 package.
    + debian/NEWS:
      - Add item explaining the removal of the GTK 2 plugin process.
    + debian/libwebkit2gtk-4.0-37-gtk2.install:
      - Drop this file.
  * debian/control:
    + Recommend gstreamer1.0-libav. This package allows the user to play
      most internet videos (Closes: #870814).
    + Update Standards-Version to 4.4.0 (no changes).
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Fri, 09 Aug 2019 11:52:26 +0200

webkit2gtk (2.25.2-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/webdriver-path.patch,
    debian/patches/fix-ftbfs-hurd.patch:
    + Remove.
  * debian/patches/detect-woff.patch
    + Refresh.
  * debian/rules:
    + Build with -DUSE_WPE_RENDERER=OFF.

 -- Alberto Garcia <berto@igalia.com>  Mon, 17 Jun 2019 23:39:56 +0300

webkit2gtk (2.25.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/rules:
    + Don't add -msse2 manually to CFLAGS, WebKitGTK does this automatically
      now.
  * debian/control:
    + Add build and runtime dependencies on bubblewrap, xdg-dbus-proxy and
      libseccomp-dev (ENABLE_BUBBLEWRAP_SANDBOX is now on by default).
  * debian/patches/webdriver-path.patch:
    + Fix name of the WebKitWebDriver executable.
  * debian/watch, debian/gbp.conf:
    + Update for 2.25.x packages in experimental.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Mon, 03 Jun 2019 18:35:12 +0300

webkit2gtk (2.24.2-1) unstable; urgency=medium

  * New upstream release.
    + This fixes CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615.
  * debian/patches/fix-redirected-streams.patch,
    debian/patches/fix-cjk-white-space.patch:
    + Drop these patches.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Fri, 17 May 2019 17:40:52 +0300

webkit2gtk (2.24.1-2) unstable; urgency=high

  * The WebKitGTK+ security advisory WSA-2019-0002 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2019-6201, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503,
      CVE-2019-8515 (fixed in 2.22.6).
    + CVE-2019-8518, CVE-2019-8523 (fixed in 2.22.7).
    + CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544,
      CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563,
      CVE-2019-8506 (fixed in 2.24.0).
    + CVE-2019-11070, CVE-2019-6251 (fixed in 2.24.1).
  * debian/patches/fix-redirected-streams.patch:
    + Fix playback of redirected streams (Closes: #928044).
  * debian/patches/fix-cjk-white-space.patch:
    + Fix white space rendering with noto CJK font (Closes: #926872).
  * debian/NEWS:
    + Add news item about the lack of support for pre-SSE2 i386 CPUs.

 -- Alberto Garcia <berto@igalia.com>  Fri, 10 May 2019 12:39:42 +0300

webkit2gtk (2.24.1-1) unstable; urgency=high

  * New upstream release.
    + This fixes CVE-2019-6251.
  * GTK has dropped the '+' from its name, and so has WebKitGTK, so update
    all references.
  * debian/gbp.conf:
    + Update upstream branch name.
  * debian/rules:
    + No need to chmod generate-gtkdoc anymore.
    + 32-bit x86 builds require SSE2 now.
  * debian/watch:
    + Scan stable releases only.
  * debian/patches/detect-woff.patch:
    + Refresh.

 -- Alberto Garcia <berto@igalia.com>  Tue, 09 Apr 2019 17:31:03 +0300

webkit2gtk (2.24.0-1) experimental; urgency=medium

  * New upstream release.
  * debian/copyright:
    + Remove nonexistent files.

 -- Alberto Garcia <berto@igalia.com>  Wed, 13 Mar 2019 12:12:49 +0200

webkit2gtk (2.23.92-1) experimental; urgency=medium

  [ Jeremy Bicha ]
  * debian/rules: Use --buildsystem=cmake+ninja

  [ Alberto Garcia ]
  * New upstream development release.

 -- Alberto Garcia <berto@igalia.com>  Wed, 06 Mar 2019 19:04:30 +0200

webkit2gtk (2.23.91-1) experimental; urgency=medium

  [ Alberto Garcia ]
  * New upstream development release.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

  [ Jeremy Bicha ]
  * Disable openjpeg2 support on Ubuntu since it's not in Ubuntu main yet.
    See bug 711061.
  * debian/rules:
    + Use -O1 in armhf to fix the build.

 -- Alberto Garcia <berto@igalia.com>  Wed, 20 Feb 2019 16:08:54 +0200

webkit2gtk (2.23.90-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/detect-woff.patch:
    + Refresh.
  * debian/source/lintian-overrides:
    + Update source-is-missing override.
  * debian/control:
    + Add build dependency on libopenjp2-7-dev.
  * debian/copyright:
    + Update copyright years.
  * debian/rules:
    + Stop building with ENABLE_BUBBLEWRAP_SANDBOX=OFF, this option no
      longer exists.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Thu, 14 Feb 2019 17:58:57 +0200

webkit2gtk (2.23.3-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/missing-gtkdoc-files.patch:
    + Drop this patch, it is no longer needed.
  * debian/control:
    + Set the architecture to linux-any, this package depends on the
      Linux-specific sysinfo() call.

 -- Alberto Garcia <berto@igalia.com>  Mon, 14 Jan 2019 11:51:50 +0200

webkit2gtk (2.23.2-1) experimental; urgency=medium

  * New upstream development release (Closes: #914986).
  * debian/patches/build-minibrowser.patch,
    debian/patches/detect-jit.patch,
    debian/patches/fix-ftbfs-armel.patch:
    + Remove these patches, they are now upstream.
  * debian/patches/detect-woff.patch,
    debian/patches/fix-ftbfs-m68k.patch,
    debian/patches/fix-ftbfs-x32.patch:
    + Refresh these patches.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.
  * debian/patches/missing-gtkdoc-files.patch:
    + Upstream forgot to add Tools/gtkdoc to the tarball.
  * debian/rules:
    + Make Tools/gtkdoc/generate-gtkdoc executable.
  * debian/control:
    + Update Standards-Version to 4.3.0 (no changes).

 -- Alberto Garcia <berto@igalia.com>  Tue, 08 Jan 2019 16:55:02 +0200

webkit2gtk (2.23.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.
  * debian/watch, debian/gbp.conf:
    + Update for 2.23.x packages in experimental.
  * debian/rules:
    + Build with ENABLE_BUBBLEWRAP_SANDBOX=OFF, since it requires
      xdg-dbus-proxy which is not available in Debian.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * debian/patches/build-minibrowser.patch:
    + Add missing cmake code to build the minibrowser.

 -- Alberto Garcia <berto@igalia.com>  Fri, 23 Nov 2018 16:16:56 +0200

webkit2gtk (2.22.4-1) unstable; urgency=high

  * New upstream release.
  * The WebKitGTK+ security advisory WSA-2018-0008 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2018-4373 (fixed in 2.22.0).
    + CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382,
      CVE-2018-4392 and CVE-2018-4416 (fixed in 2.22.1).
    + CVE-2018-4345 and CVE-2018-4386 (fixed in 2.22.3).
    + CVE-2018-4372 (fixed in 2.22.4).
  * debian/control:
    + libwoff-dev is now available on kfreebsd, so we can use it.

 -- Alberto Garcia <berto@igalia.com>  Thu, 22 Nov 2018 14:59:41 +0200

webkit2gtk (2.22.3-1) unstable; urgency=medium

  * New upstream release.

  [ Jeremy Bicha ]
  * Enable woff2 support in Ubuntu too.
  * Opt out of Ubuntu language packs. This package is updated too often.

  [ Alberto Garcia ]
  * debian/patches/detect-woff.patch:
    + WOFF2 is not available on all platforms, so don't abort the build if
      it's not installed. This way it's enough if we simply remove
      libwoff-dev from the Build-Depends when necessary.
  * debian/control:
    + Don't depend on libwoff-dev on kfreebsd, it's not available.

 -- Alberto Garcia <berto@igalia.com>  Mon, 29 Oct 2018 13:36:11 +0200

webkit2gtk (2.22.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/upstream/signing-key.asc:
    + Add Adrian Perez's GPG key to the keyring. He'll also be in charge
      of making upstream releases.
  * debian/patches/fix-ftbfs-x32.patch:
    + Fix the X32 build.
  * debian/patches/fix-ftbfs-armel.patch:
    + Fix the armel build.
    + debian/rules:
      - Stop passing -DENABLE_JIT=OFF manually.

 -- Alberto Garcia <berto@igalia.com>  Sat, 22 Sep 2018 00:31:55 +0300

webkit2gtk (2.22.1-1) unstable; urgency=medium

  * New upstream release.
  * debian/patches/replace-stdmax.patch:
    + Drop patch, this has been merged upstream.

 -- Alberto Garcia <berto@igalia.com>  Thu, 20 Sep 2018 11:55:58 +0300

webkit2gtk (2.22.0-2) unstable; urgency=medium

  * Upload to unstable.
  * debian/rules:
    + Disable JIT on armel, it's currently broken.
  * debian/gbp.conf:
    + Update upstream branch name.
  * debian/watch:
    + Scan stable releases only.

 -- Alberto Garcia <berto@igalia.com>  Fri, 14 Sep 2018 21:23:00 +0300

webkit2gtk (2.22.0-1) experimental; urgency=medium

  * New upstream release.
  * Drop use-wtf-cpu-mips64.patch and refresh fix-ftbfs-x86.patch.
  * debian/control:
    + Update Standards-Version to 4.2.1 (no changes).
  * debian/copyright:
    + Remove nonexistent files.
  * debian/patches/replace-stdmax.patch:
    + Don't use std::max in RegisterState.h, this causes build failures
      with some versions of libstdc++.

 -- Alberto Garcia <berto@igalia.com>  Mon, 03 Sep 2018 15:51:37 +0300

webkit2gtk (2.21.92-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/use-wtf-cpu-mips64.patch:
    + Don't use WTF_CPU_MIPS on mips64. This makes WebKit enable JIT,
      which breaks the build.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Fri, 24 Aug 2018 18:37:29 +0300

webkit2gtk (2.21.91-2) experimental; urgency=medium

  * debian/rules:
    + Pass --fail-missing to dh_missing.
  * debian/libjavascriptcoregtk-4.0-dev.install:
    + Install headers in usr/include/webkitgtk-4.0/jsc/ (Closes: #906519).
  * Install the jsc-glib and webkitdomgtk documentation.
  * debian/patches/detect-jit.patch:
    + Fix detection of when to enable the JIT and USE_SYSTEM_MALLOC.

 -- Alberto Garcia <berto@igalia.com>  Tue, 21 Aug 2018 10:47:19 +0300

webkit2gtk (2.21.91-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Refresh.
  * debian/patches/gtk-doc-build-fix.patch:
    + Remove.
  * Don't use NEWS as an upstream changelog anymore (as required by Debian
    policy 4.2.0).
  * debian/control:
    + Update Standards-Version to 4.2.0.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * debian/rules:
    + Don't pass -DENABLE_JIT=OFF manually anymore, since r232918 WebKit
      only enables JIT in the targets where it's known to work.
    + Stop passing --ddeb-migration to dh_strip, the automatic debug
      symbol migration is complete.

 -- Alberto Garcia <berto@igalia.com>  Thu, 16 Aug 2018 18:06:58 +0300

webkit2gtk (2.21.5-1) experimental; urgency=medium

  * New upstream development release.
  * debian/control:
    + Update Standards-Version to 4.1.5 (no changes needed).
  * debian/patches/detect-gstreamer-gl.patch:
    + Refresh.
  * debian/patches/gtk-doc-build-fix.patch:
    + Fix build failure when generating documentation.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Mon, 30 Jul 2018 13:58:42 +0300

webkit2gtk (2.21.4-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-ftbfs-sparc64.patch:
    + Refresh.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 12 Jun 2018 15:34:54 +0300

webkit2gtk (2.21.3-1) experimental; urgency=medium

  * New upstream development release (Closes: #899338).
  * debian/rules:
    + Build with -DRELEASE_WITHOUT_OPTIMIZATIONS if "noopt" is set.
  * debian/patches/prefer-pthread.patch:
    + Enable THREADS_PREFER_PTHREAD_FLAG. This fixes a FTBFS in riscv64
      (see Debian #895969 and WebKit #182622).

 -- Alberto Garcia <berto@igalia.com>  Mon, 28 May 2018 15:48:50 +0200

webkit2gtk (2.21.2-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-atomics-build.patch,
    debian/patches/fix-format-security.patch:
    + Remove these patches, they are now upstream.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Update.
  * debian/rules:
    + Remove compatibility with versions of debhelper < 9.20151219 in
      override_dh_strip, we require version 10 since 2.20.1-1.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Mon, 21 May 2018 11:16:26 +0300

webkit2gtk (2.21.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/patches/fix-format-security.patch:
    + Fix build with GCC due to bogus format-security error.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Fri, 20 Apr 2018 11:23:59 +0300

webkit2gtk (2.20.1-1) unstable; urgency=medium

  [ Alberto Garcia ]
  * New upstream release.
  * debian/rules:
    + Ubuntu doesn't install changelogs with dh_installchangelogs, so
      let's use dh_installdocs instead (but keep dh_installchangelogs for
      Debian).
  * debian/control:
    + Update Standards-Version to 4.1.4 (no changes needed).

  [ Jeremy Bicha ]
  * The WebKitGTK+ security advisory WSA-2018-0003 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2018-4101, CVE-2018-4113, CVE-2018-4114, CVE-2018-4117,
      CVE-2018-4118, CVE-2018-4119, CVE-2018-4120, CVE-2018-4122,
      CVE-2018-4125, CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
      CVE-2018-4133, CVE-2018-4146, CVE-2018-4161, CVE-2018-4162,
      CVE-2018-4163, CVE-2018-4165 (fixed in 2.20.0).
  * Update Vcs fields for migration to https://salsa.debian.org/
  * Enable gstreamer-gl on Ubuntu too (LP: #1752197)
  * Bump debhelper compat to 10

 -- Alberto Garcia <berto@igalia.com>  Tue, 10 Apr 2018 20:34:42 +0200

webkit2gtk (2.20.0-2) unstable; urgency=medium

  * Upload to unstable (Closes: #889659, #888543).
  * debian/gbp.conf:
    + Update upstream branch name.
  * debian/NEWS:
    + Add news item about the Gigacage feature.

 -- Alberto Garcia <berto@igalia.com>  Wed, 21 Mar 2018 14:31:13 +0200

webkit2gtk (2.20.0-1) experimental; urgency=medium

  * New upstream release.
  * debian/patches/fix-ftbfs-armel.patch:
    + Detect missing __atomic_fetch_add_8() and rename patch to
      fix-atomics-build.patch.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * debian/copyright:
    + Remove nonexistent files.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.

 -- Alberto Garcia <berto@igalia.com>  Mon, 12 Mar 2018 16:49:26 +0200

webkit2gtk (2.19.92-1) experimental; urgency=medium

  [ Alberto Garcia ]
  * New upstream development release.
  * debian/rules:
    + Don't redefine CFLAGS or LDFLAGS when calling cmake, and don't add
      CPPFLAGS to CFLAGS/CXXFLAGS. Cmake already reads all those
      environment variables.
  * Build the documentation:
    + debian/rules:
      - Support the DEB_BUILD_OPTIONS "nodoc" tag and pass -DENABLE_GTKDOC
        to CMake depending on whether it's set or not.
      - Override the dh_install rule to make sure that a dummy doc
        directory is present if "nodoc" is set.
    + debian/control:
      - Add build dependencies on libglib2.0-doc, libgtk-3-doc and
        libsoup2.4-doc.
      - Update Standards-Version to 4.1.3 (we now support "nodoc").
    + debian/libwebkit2gtk-4.0-doc.install:
      - Install the generated documentation instead of the one provided by
        upstream.
  * debian/copyright:
    + Update copyright years.

  [ Jeremy Bicha ]
  * gstreamergl has moved to gstreamer base in 1.13 so update dependencies
  * Fix Ubuntu useragent (LP: #1751484)
  * Temporarily disable WOFF2 on Ubuntu, see bug 1742743

 -- Alberto Garcia <berto@igalia.com>  Wed, 07 Mar 2018 11:18:52 +0200

webkit2gtk (2.19.91-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/rules:
    + Use -O1 in powerpc as well.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Wed, 21 Feb 2018 13:09:22 +0200

webkit2gtk (2.19.90-1) experimental; urgency=medium

  * New upstream development release.
  * debian/rules:
    + Use -O1 in sh3 and sh4 (thanks, John Paul Adrian Glaubitz).
  * Refresh all patches.

 -- Alberto Garcia <berto@igalia.com>  Mon, 05 Feb 2018 14:19:43 +0200

webkit2gtk (2.19.6-1) experimental; urgency=medium

  * New upstream development release.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Wed, 17 Jan 2018 15:55:19 +0200

webkit2gtk (2.19.5-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-ftbfs-armel.patch:
    + Refresh.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.

 -- Alberto Garcia <berto@igalia.com>  Wed, 10 Jan 2018 13:21:48 +0200

webkit2gtk (2.19.3-2) experimental; urgency=medium

  * WOFF2 is now available in Debian, so build webkit2gtk with it:
    + debian/control:
      - Add build dependency on libwoff-dev.
    + debian/rules:
      - Remove -DUSE_WOFF2=OFF.
    + debian/libwebkit2gtk-4.0-37.symbols:
      - Add new symbols.
  * Add new webkit2gtk-driver package containing the WebKitWebDriver
    binary.
    + debian/control:
      - Add the entry for the new package.
    + debian/webkit2gtk-driver.install:
      - Install the WebKitWebDriver binary.
    + debian/webkit2gtk-driver.manpages, debian/WebKitWebDriver.1:
      - Add manpage.

 -- Alberto Garcia <berto@igalia.com>  Thu, 04 Jan 2018 15:17:27 +0200

webkit2gtk (2.19.3-1) experimental; urgency=medium

  * New upstream development release (Closes: #882387).

  [ Jeremy Bicha ]
  * debian/control: Update Vcs-Git to point to correct branch.
  * Allow setting the distributor name in the User Agent string. Ubuntu
    wants this patch, but since it makes it easier to identify the user
    let's leave it disabled in Debian (Closes: #883712).
    + debian/patches/user-agent-branding.patch:
      - Patch to support updating the User-Agent string.
    + debian/rules:
      - Pass -DUSER_AGENT_GTK_DISTRIBUTOR_NAME when building for Ubuntu.

  [ Alberto Garcia ]
  * Refresh all patches.
  * Several cross-compilation fixes in debian/rules (thanks, Helmut
    Grohne).
    + Include /usr/share/dpkg/architecture.mk instead of calling
      dpkg-architecture manually to set the DEB_*_ARCH variables.
    + Use DEB_BUILD_ARCH_BITS to decide whether to pass --no-keep-memory
      to the linker.
    + Use DEB_HOST_ARCH to decide whether to use -g1 and -DENABLE_JIT=OFF.
    + Remove the --no-relax flag for alpha, this was a workaround for a 10
      year old binutils bug.

 -- Alberto Garcia <berto@igalia.com>  Wed, 13 Dec 2017 14:26:06 +0100

webkit2gtk (2.19.2-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/control:
    + Request native version of the Ruby package (thanks, Helmut Grohne)
    + Build depend on libfile-copy-recursive-perl.
  * Instead of passing -DUSE_GSTREAMER_GL=OFF explicitly, let CMake do it
    if libgstreamer-plugins-bad1.0-dev is not installed.
    + debian/patches/detect-gstreamer-gl.patch:
      - Disable USE_GSTREAMER_GL if GStreamerGL is not found.
    + debian/rules:
      - Remove the list of architectures that are not using GStreamerGL.
  * debian/control:
    + Don't require libgstreamer-plugins-bad1.0-dev in hppa, m68k,
      powerpcspe, sh4 or x32.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Tue, 21 Nov 2017 12:54:32 +0200

webkit2gtk (2.19.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/watch, debian/gbp.conf:
    + Update for 2.19.x packages in experimental.
  * debian/control:
    + Add build dependency on libupower-glib-dev.
  * debian/rules:
    + Build with -DUSE_WOFF2=OFF, this needs libwoff2dec which is still
      not available in Debian.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <berto@igalia.com>  Thu, 02 Nov 2017 16:48:14 +0200

webkit2gtk (2.18.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/control:
    + Set the minimum versions of these build dependencies: cmake >= 3.3,
      libcairo2-dev >= 1.10.2, libfontconfig1-dev >= 2.8, and
      libgcrypt20-dev >= 1.7.0, libxml2-dev >= 2.8.

 -- Alberto Garcia <berto@igalia.com>  Fri, 27 Oct 2017 15:05:15 +0200

webkit2gtk (2.18.1-1) unstable; urgency=medium

  * New upstream release.
  * The WebKitGTK+ security advisory WSA-2017-0008 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2017-7081 and CVE-2017-7142 (fixed in 2.16.1).
    + CVE-2017-7094 (fixed in 2.16.3).
    + CVE-2017-7099 (fixed in 2.16.4).
    + CVE-2017-7087, CVE-2017-7089, CVE-2017-7090, CVE-2017-7091,
      CVE-2017-7092, CVE-2017-7093, CVE-2017-7095, CVE-2017-7096,
      CVE-2017-7098, CVE-2017-7100, CVE-2017-7102, CVE-2017-7104,
      CVE-2017-7107, CVE-2017-7109, CVE-2017-7111, CVE-2017-7117,
      CVE-2017-7120 (fixed in 2.18.0).
  * debian/control:
    + Recommend the Pulseaudio or ALSA GStreamer plugins, since they're
      needed for audio playback (Closes: #877281).
  * debian/patches/fix-ftbfs-alpha.patch:
    + This patch is no longer needed, drop it.
  * Refresh all other patches.
  * debian/control:
    + Remove 'Priority: extra' fields, all packages have optional priority
      now (the 'extra' priority has been deprecated).
  * debian/copyright:
    + Use https for the Format URL.

 -- Alberto Garcia <berto@igalia.com>  Wed, 18 Oct 2017 14:36:55 +0300

webkit2gtk (2.18.0-2) unstable; urgency=medium

  * Upload to unstable.