expat (2.10.0-1) unstable; urgency=high
 .
   * New upstream release:
     - fixes CVE-2026-113351: denial of service with function XML_ParserReset()
       (closes: #1151840),
     - fixes CVE-2026-115506: denial of service from variations of billion
       laughs attacks and parameter laughs attacks (closes: #1151841),
     - fixes CVE-2026-117610: denial of service or more from issues with
       initial non-final empty subparser parse calls (closes: #1152343),
     - fixes CVE-2026-118370: signed integer overflow in function storeAtts()
       (closes: #1152337).

fonts-hosny-amiri (1.003-8) unstable; urgency=medium
 .
   * Team upload
   * Restore original fonts independently of running tests
   * Reference OFL by file name

gcc-16 (16.2.0-4) unstable; urgency=medium
 .
   * Update to git 20261024 from the gcc-16 branch.
     - Fix PR ada/120106, PR target/127843 (PA), PR target/128105 (x86),
       PR target/127692 (S390), PR target/127851 (x86),
       PR tree-optimization/127357, PR tree-optimization/127916,
       PR tree-optimization/126462, PR target/127393 (AArch64),
       PR target/127393 (AArch64), PR tree-optimization/127382,
       PR target/125060 (PPC),  PR target/127553 (RISCV),
       PR tree-optimization/127687, PR middle-end/127517, PR middle-end/127492,
       PR target/127498 (x86), PR middle-end/127378, PR target/127352 (x86),
       PR middle-end/127336, PR tree-optimization/127149, PR target/127482 (AVR),
       PR middle-end/127474, PR target/127650 (x86), PR target/126096 (AArch64),
       PR tree-optimization/127579, PR target/107549 (xtensa),
       PR target/126629 (AArch64), PR tree-optimization/127571,
       PR rtl-optimization/127367, PR target/127500 (x86),
       PR target/127461 (x86), PR ada/128044, PR ada/127994, PR ada/127974,
       PR ada/127994, PR ada/127880, PR ada/127759, PR ada/126448, PR ada/126125,
       PR ada/127756, PR c/127383, PR c++/127232, PR c++/126794, PR c++/127749,
       PR c++/126680, PR c++/125536, PR c++/127493, PR c++/127276,
       PR c++/127109, PR c++/126922, PR c++/122774, PR c++/127707,
       PR c++/127672, PR c++/126654, PR c++/127643, PR fortran/110421,
       PR fortran/127683, PR fortran/127187, PR fortran/125324,
       PR preprocessor/121508, PR preprocessor/123339, PR fortran/127845,
       PR fortran/127846, PR other/116547, PR libstdc++/127757,
       PR libstdc++/115955, PR libstdc++/124370, PR libstdc++/125785,
       PR libstdc++/127666, PR libstdc++/126364, PR libstdc++/114400,
       PR libstdc++/127656, PR libstdc++/123409, PR libstdc++/126786.
 .
   [ Matthias Klose ]
   * Update libstdc++ (all archs) and libgcc (armhf, arm64) symbols files.
 .
   [ Nicolas Boulenguez ]
   * Ada: fix GNATMAKE_FOR_BUILD in ada-gnat-name.diff. Closes: #1136069.
     Build gnat with gnat-16 again.
     Refresh and apply ada-gcc-name.diff.
     Report a source diff when the alihash changes. Closes: #1115882.
     Refresh the PR ada/114065 time_t64 patches. Closes: #1108322.
   * Compute the libgnat alihash with crc32 instead of xor.

harfbuzz (14.4.0+ds-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream release (Closes: #1143466)
   * Add new symbols
   * d/copyright: Add info from new release
harfbuzz (14.2.1+ds-1) experimental; urgency=medium
 .
   * Team upload
   * Team-maintain according to the Vcs fields
   * New upstream release (Closes: #1131351)
   * Move from freedesktop to GitHub
   * Exclude Ubuntu Font (Closes: #1151016)
   * Hide internal C++ template instantiation symbols
   * d/copyright: Add missing info, exclude more files
 .
   [ أحمد المحمودي (Ahmed El-Mahmoudy) ]
   * Add libharfbuzz-{vector,raster,gpu}0 binary packages
   * Update symbols
   * d/t/control: change pkg-config dep to pkgconf
   * d/control: add libpng-dev & zlib1g-dev to build-deps
   * d/control: bump standards version to 4.7.4

mapproxy (8.1.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.
mapproxy (8.0.1+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.
mapproxy (8.0.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream release.
   * Refresh patches.

ndcube (2.4.3-1) unstable; urgency=medium
 .
   * New upstream version 2.4.3
   * Rediff patches

quickjs-ng (0.18.0-1) unstable; urgency=medium
 .
   * New upstream version 0.18.0
   * Add copyright for upstream build of libunicode-table.h
   * Update symbols (two new).

uharfbuzz (0.56.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
uharfbuzz (0.55.0-1) experimental; urgency=medium
 .
   * New upstream release.
   * debian/control: Require libharfbuzz-dev (>= 14.2.1) for the new APIs
     and bump Standards-Version to 4.7.4.
   * debian/gbp.conf: Use the debian/experimental packaging branch.
   * debian/patches:
     + 0001-Fix-test_set_axis_range-passing-int-where-Cython-exp.patch:
       Remove patch applied upstream.