debsbom (0.9.0-1~bpo13+1) trixie-backports; urgency=medium

  * New upstream version 0.9.0
  * debian: add more recommended packages
  * Add option to the filter command for subgraph filtering of a package
  * Fixed a path traversal bug with remote filenames in download command

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Fri, 31 Jul 2026 15:35:30 +0200

debsbom (0.8.1-1~bpo13+1) trixie-backports; urgency=medium

  * Fix a crash with packageurl-python versions <=0.17.0 when resolving packages
  * Add sec-scan command to find vulnerabilities in SBOM packages
  * Emit Static-Built-Using dependencies for packages
  * debian: remove cyclonedx from build dependencies
  * debian: add additional autopkgtest dependencies
  * New upstream version 0.8.1

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Fri, 29 May 2026 17:39:31 +0200

debsbom (0.7.1-1~bpo13+1) trixie-backports; urgency=medium

  * Rebuild for trixie-backports.

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 24 Mar 2026 10:45:54 +0100

debsbom (0.7.2-1) unstable; urgency=medium

  * New upstream version 0.7.2
  * Correctly handle paths starting at a source package trace-path
  * Duplicate root nodes are not an error when the --omit-roots option is set
    in merge command
  * Correctly handle extendes states information for arch=all packages
  * Raise an error if there is no root node in CDX SBOMs for the trace-path

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 14 Apr 2026 16:46:50 +0200

debsbom (0.7.1-1) unstable; urgency=medium

  * New upstream version 0.7.1
  * Fix checksums of source packages not being properly compared
  * Make essential property for CDX SBOMs a string instead of a boolean
  * Emit stderr for subcommands errors for the merge command
  * Properly merge external references for CDX SBOMs
  * Correctly interpret and apply --sbom-type options for multiple commands
  * Also merge license information when merging CDX SBOMs

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Fri, 20 Mar 2026 14:55:53 +0100

debsbom (0.7.0-1) unstable; urgency=medium

  * New upstream version 0.7.0
  * Add delta command to show difference between two SBOMs
  * Track Pre-Depends dependencies
  * Track which components are essential
  * Add trace-path command to analyze dependency chains
  * Mark files and directories for tab completion
  * Improve performance for copyright file parsing
  * Add --omit-roots option to merge command
  * Add filter command to allow exclusion of source or binary packages
  * Correctly split distro supplier into components for CDX SBOMs
  * Properly handle SBOMs with same root node for the merge command
  * Use correct category for distribution external package references

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 17 Mar 2026 15:12:56 +0100

debsbom (0.6.2-2) unstable; urgency=medium

  * Make d/control Vcs fields point to the debian packaging
  * debian: add recommendation for python3-apt
  * debian: add upstream/metadata
  * debian: provide debian package name in error message

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Mon, 02 Mar 2026 11:11:08 +0100

debsbom (0.6.2-1) unstable; urgency=medium

  * Initial release (Closes: #1122577)

 -- Felix Moessbauer <felix.moessbauer@siemens.com>  Tue, 10 Feb 2026 11:00:15 +0100
