ruby-actionpack-3.2 (3.2.16-3) unstable; urgency=medium

  * Fix invalid gemspec data in patch (again)
    debian/patches/0001-loosen_sprockets_dependency.patch: the problem was
    that when 2.2.1 is replaced by 2.2, the YAML parser thinks that 2.2 is a
    floating point number, but version numbers are supposed to be strings!  So
    the fix is to put quote around the 2.2 ('2.2'), forcing it to be parsed
    as a string.
    Closes: #732805
  * debian/patches/0004-allow_newer_versions.patch: refresh

 -- Antonio Terceiro <terceiro@debian.org>  Wed, 18 Dec 2013 18:01:29 -0300

ruby-actionpack-3.2 (3.2.16-2) unstable; urgency=high

  * Allow to depend on ruby-rack (<< 1.4) to make backports easier

 -- Ondřej Surý <ondrej@debian.org>  Fri, 06 Dec 2013 10:55:12 +0100

ruby-actionpack-3.2 (3.2.16-1) unstable; urgency=high

  * New upstream version 3.2.16
  * Update debian/control to rails release 3.2.16

 -- Ondřej Surý <ondrej@debian.org>  Wed, 04 Dec 2013 17:40:28 +0100

ruby-actionpack-3.2 (3.2.13-9) unstable; urgency=low

  * Tighten rack dependency to 1.4 only. (Closes: #711236)

 -- Christian Hofstaedtler <zeha@debian.org>  Mon, 02 Dec 2013 23:17:48 +0100

ruby-actionpack-3.2 (3.2.13-8) unstable; urgency=low

  Team upload.

  [ Praveen Arimbrathodiyil ]
  * require minitest instead of test/unit
    debian/patches/port-to-minitest.patch

  [ Antonio Terceiro ]
  * Bump debian revision number
  * Fix test session to work with Rack 1.5
  * Add proper headers to rack 1.5 patch

  [ Praveen Arimbrathodiyil ]
  * port to minitest

  [ Christian Hofstaedtler ]
  * Add alternative dependency on ruby-rack1.4
  * Update Standards-Version to 3.9.5 (no changes)

 -- Christian Hofstaedtler <zeha@debian.org>  Mon, 02 Dec 2013 21:31:36 +0100

ruby-actionpack-3.2 (3.2.13-7) unstable; urgency=low

  [ Christian Hofstaedtler ]
  * Bump journey, sprockets dependency to match gem metadata
  * Allow newer versions of various dependencies
  * Fix format of debian-copyright (missing-license-paragraph-in-dep5-copyright)

 -- Antonio Terceiro <terceiro@debian.org>  Mon, 03 Jun 2013 22:06:15 -0300

ruby-actionpack-3.2 (3.2.13-6) unstable; urgency=low

  * Bump Standards-Version to 3.9.4; no changes needed.
  * update debian/control.in to reflect changes in debian/control
  * Fix invalid gemspec data in patch
    debian/patches/0001-loosen_sprockets_dependency.patch: the problem was
    that when 2.2.1 is replaced by 2.2, the YAML parser thinks that 2.2 is a
    floating point number, but version numbers are supposed to be strings!  So
    the fix is to put quote around the 2.2 ('2.2'), forcing it to be parsed
    as a string. (Closes: #710819)

 -- Antonio Terceiro <terceiro@debian.org>  Sun, 02 Jun 2013 17:14:18 -0300

ruby-actionpack-3.2 (3.2.13-5) unstable; urgency=low

  * Upload to unstable.

 -- Ondřej Surý <ondrej@debian.org>  Thu, 23 May 2013 11:10:30 +0200

ruby-actionpack-3.2 (3.2.13-4) experimental; urgency=low

  * Remove all unneeded ruby/rails build dependencies, and drop
    ${shlib:Depends}.

 -- Ondřej Surý <ondrej@debian.org>  Fri, 22 Mar 2013 14:28:35 +0100

ruby-actionpack-3.2 (3.2.13-3) experimental; urgency=low

  * Loosen install time dependencies to allow faster builds

 -- Ondřej Surý <ondrej@debian.org>  Thu, 21 Mar 2013 15:15:28 +0100

ruby-actionpack-3.2 (3.2.13-2) unstable; urgency=low

  * Pull fix for a speed regression from
    https://github.com/rails/rails/issues/9803

 -- Ondřej Surý <ondrej@debian.org>  Wed, 20 Mar 2013 18:49:16 +0100

ruby-actionpack-3.2 (3.2.13-1) unstable; urgency=low

  * Imported Upstream version 3.2.13
  * Update debian/control to rails release 3.2.13
  * Update patches for 3.2.13 release

 -- Ondřej Surý <ondrej@debian.org>  Tue, 19 Mar 2013 10:18:44 +0100

ruby-actionpack-3.2 (3.2.12-1) unstable; urgency=low

  * Imported Upstream version 3.2.12
  * Update debian/control to rails release 3.2.12

 -- Ondřej Surý <ondrej@debian.org>  Tue, 12 Feb 2013 17:39:14 +0100

ruby-actionpack-3.2 (3.2.11-1) unstable; urgency=low

  * Imported Upstream version 3.2.11

 -- Ondřej Surý <ondrej@debian.org>  Tue, 15 Jan 2013 14:41:49 +0100

ruby-actionpack-3.2 (3.2.8-1) unstable; urgency=low

  * Imported Upstream version 3.2.8
  * Loosen sprockets dependency to ~> 2.1

 -- Ondřej Surý <ondrej@debian.org>  Fri, 12 Oct 2012 12:53:20 +0200

ruby-actionpack-3.2 (3.2.6-6) unstable; urgency=high

  * [CVE-2013-1855]: Fix XSS vulnerability in sanitize_css in Action Pack
  * [CVE-2013-1857]: Fix XSS Vulnerability in the sanitize helper of Ruby on Rails

 -- Ondřej Surý <ondrej@debian.org>  Tue, 19 Mar 2013 09:45:34 +0100

ruby-actionpack-3.2 (3.2.6-5) unstable; urgency=high

  * debian/patches/CVE-2013-0155.patch: fix Unsafe Query Generation Risk
    [CVE-2013-0155] (Closes: #697802)

 -- Antonio Terceiro <terceiro@debian.org>  Wed, 09 Jan 2013 18:25:45 -0300

ruby-actionpack-3.2 (3.2.6-4) unstable; urgency=high

  * Add patches for security problems (Closes: #684454):
    + CVE-2012-3463 - Ruby on Rails Potential XSS Vulnerability in select_tag
      prompt
    + CVE-2012-3465 - XSS Vulnerability in strip_tags
    + Both patches were edited from their original versions in two ways:
      - the leading a/ and b/ from the filenames were stripped
      - changes over test files were removed, since the Debian package
        contains no test files.

 -- Antonio Terceiro <terceiro@debian.org>  Fri, 10 Aug 2012 13:08:08 -0300

ruby-actionpack-3.2 (3.2.6-3) unstable; urgency=high

  * Add patch by Aaron Patterson for CVE-2012-3424 (Closes: #683370)

 -- Antonio Terceiro <terceiro@debian.org>  Sat, 04 Aug 2012 09:28:12 -0300

ruby-actionpack-3.2 (3.2.6-2) unstable; urgency=low

  * Bump build dependency to gem2deb >= 0.3.0~

 -- Antonio Terceiro <terceiro@debian.org>  Sun, 24 Jun 2012 19:06:43 -0300

ruby-actionpack-3.2 (3.2.6-1) unstable; urgency=low

  * New upstream release.
  * debian/control:
    + review short description
    + add myself to Uploaders:

 -- Antonio Terceiro <terceiro@debian.org>  Sat, 16 Jun 2012 21:15:28 -0300

ruby-actionpack-3.2 (3.2.3-2) unstable; urgency=low

  * Add Conflict with ruby-actionpack-2.3 (Closes: #673737)
  * B-D ruby-activerecord-3.2 and ruby-activesupport-3.2 are already
    in unstable (Closes: #671986)

 -- Ondřej Surý <ondrej@debian.org>  Wed, 23 May 2012 13:03:07 +0200

ruby-actionpack-3.2 (3.2.3-1) unstable; urgency=low

  * Initial release

 -- Ondřej Surý <ondrej@debian.org>  Wed, 25 Apr 2012 09:14:01 +0000
