twitter-bootstrap4 (4.3.1+dfsg2-1+deb10u1) buster-security; urgency=medium

  * Non maintainer Upload by ELTS Team
  * Fix CVE-2024-6531 (XSS vulnerability):
    An anchor element (<a>), when used for carousel navigation
    with a data-slide attribute, can contain an href attribute
    value that is not subject to proper content sanitization.
    Improper extraction of the intended target carousel’s
    #id from the href attribute can lead to use cases where
    the click event’s preventDefault()
    is not applied and the href is evaluated and executed.
    As a result, restrictions are not applied to the data
    that is evaluated, which can lead to potential
    XSS vulnerabilities.
    (Closes: #1084059)

 -- Bastien Roucariès <rouca@debian.org>  Mon, 14 Apr 2025 19:54:54 +0200

twitter-bootstrap4 (4.3.1+dfsg2-1) unstable; urgency=medium

  [ Xavier Guimard ]
  * Filter upstream .gitignore
  * New upstream version 4.3.1+dfsg2. Fixes: CVE-2019-8331
  * Update d/copyright
  * Update doc install

  [ Jonas Smedegaard ]
  * Remove myself as uploader.

  [ Xavier Guimard ]
  * Genarate all sources maps
  * Change build-dep from node-popper.js to libjs-popper.js

 -- Xavier Guimard <yadd@debian.org>  Thu, 21 Feb 2019 16:55:38 +0100

twitter-bootstrap4 (4.2.1+dfsg2-2) unstable; urgency=medium

  * Add patch to avoid copyright year update during build

 -- Xavier Guimard <yadd@debian.org>  Thu, 07 Feb 2019 07:21:41 +0100

twitter-bootstrap4 (4.2.1+dfsg2-1) unstable; urgency=medium

  [ Xavier Guimard ]
  * Add libjs-popper.js in dependencies (Closes: #920188)
  * Declare compliance with policy 4.3.0
  * Disable require test due to upstream error
  * Update debian/copyright
  * Generate CSS files with sassc and postcss+autoprefixer

  [ Jérémy Lal ]
  * Patch to build js using buble instead of babel
  * Build-Depends rollup, buble and resolver plugin
  * Build-Depends node-popper.js
  * Build bundles using rollup
  * Files-Excluded: dist/* and js/dist/* (Closes: #920858)
  * Build plugins to js/dist/

  [ Jonas Smedegaard ]
  * Optimize CSS with sassc (not cssmin).
    Stop build-depend on cssmin.
  * Install more of documentation:
    No longer infested by pre-generated code.

 -- Xavier Guimard <yadd@debian.org>  Thu, 31 Jan 2019 13:13:06 +0100

twitter-bootstrap4 (4.2.1+dfsg1-1) unstable; urgency=medium

  * Fix override (not extend) dh_auto_build.
  * Provide Sassy SCSS files.
    Provide package sass-stylesheets-bootstrap, and enhance sass.
  * Update copyright info:
    + Fix exclude all minified convenience code copies
      when repackaging source.
    + Fix mention reasons for repackaging in Source field.
    + Stop exclude git and travis hint files when repackaging source.
    + Add Files section for packaging,
      and corresponding License section.
  * Update watch file:
    + Bump watch file format version to 4.
    + Add usage comment.
    + Use substitution strings.
    + Track tags (not releases).
    + Drop unneeded uversionmangle.
    + Generalize dversionmangle.
    + Bump repacksuffix.
  * Add git-buildpackage configfile:
    + Enable pristine-tar and signed tags.
    + Filter any .git* files.
  * Remove wrong lintian overrides about prebuilt code missing source.
  * Add clarifying comment to lintian overrides
    about embedding Twitter Bootstrap.
  * Repackage upstream source tarball
    to fix exclude all minified convenience code copies.
  * Add myself as uploader.
  * Add helper script to source for tracking copyright and licensing.
  * Add lintian override about license in License-Reference field.
    See bug#786450.
  * Enable autopkgtest.

 -- Jonas Smedegaard <dr@jones.dk>  Tue, 22 Jan 2019 14:48:54 +0100

twitter-bootstrap4 (4.2.1+dfsg-1) unstable; urgency=medium

  * Add Multi-Arch: foreign
  * Import upstream version 4.2.1+dfsg
  * Drop patches
  * Update lintian-overrides
  * Update doc path

 -- Xavier Guimard <yadd@debian.org>  Sat, 22 Dec 2018 10:29:31 +0100

twitter-bootstrap4 (4.1.3+dfsg-2) unstable; urgency=medium

  * Provide node-bootstrap and update files installation

 -- Xavier Guimard <yadd@debian.org>  Thu, 06 Dec 2018 06:32:40 +0100

twitter-bootstrap4 (4.1.3+dfsg-1) unstable; urgency=medium

  * Initial release (Closes: #842828)

 -- Xavier Guimard <yadd@debian.org>  Mon, 03 Dec 2018 21:51:17 +0100
