dns-root-data (2024041802) unstable; urgency=medium

  * Stop installing root.hints.sig, since no package actually uses the file.
  * Stop the package from FTBFS in the periods between when root-anchors.xml
    is updated and the new root KSK is actually published in the DNS.

 -- Marco d'Itri <md@linux.it>  Sun, 18 Aug 2024 02:18:32 +0200

dns-root-data (2024041801) unstable; urgency=medium

  * Add myself to the Uploaders field, as discussed with Ondřej.
  * Fix the package description. (Closes: #1064829)
  * Update the expired Verisign GRS PGP key.
  * Update the root hints file to version 2024041801, with:
    + updated A and AAAA records for B. (Closes: #1054393)

 -- Marco d'Itri <md@linux.it>  Tue, 21 May 2024 16:25:44 +0200

dns-root-data (2023010101) unstable; urgency=medium

  * merge current root hints and signatures (same contents as before)
  * d/copyright: bump to 2023

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 11 Jan 2023 10:00:11 -0500

dns-root-data (2022120101) unstable; urgency=medium

  * Updated upstream root data (same contents as before)
  * d/copyright: update for 2022
  * Standards-Version: bump to 4.6.1 (no changes needed)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Tue, 20 Dec 2022 18:51:44 -0500

dns-root-data (2021011101) unstable; urgency=medium

  * updated upstream root data (same contents as before)
  * wrap-and-sort -ast
  * improve autopkgtest (Closes: #979840)
  * move to dh 13
  * Standards-Version: bump to 4.5.1 (no changes needed)

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Fri, 12 Feb 2021 20:54:19 -0500

dns-root-data (2019052802) unstable; urgency=medium

  * use https for data.iana.org
  * update root data to 2019052802

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 29 May 2019 13:05:03 -0400

dns-root-data (2019031302) unstable; urgency=medium

  * cryptographically verify root.hints
  * get_orig_source: refresh root-anchors.{xml,p7s} as well
  * update root data to 2019031302
  * standards-version: bump to 4.3.0 (no changes needed)
  * parse-root-anchors.sh: account for validity windows
  * check: deliberately skip the TTL generated by ldns-key2ds
  * dns-root-data is Multi-Arch: foreign

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Sat, 23 Mar 2019 15:33:17 +0100

dns-root-data (2018091102) unstable; urgency=medium

  * new upstream version of root.hints, 2018091102
  * use DEP-14 branches
  * Standards-Version: 4.2.1 (no changes needed)
  * add Rules-Requires-Root: no
  * add baseline autopkgtest

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Mon, 15 Oct 2018 13:45:59 -0400

dns-root-data (2018013001) unstable; urgency=medium

  * new upstream version of root.hints, 2018013001
  * use wrap-and-sort -ast
  * added myself to uploaders
  * d/control: use dns-root-data@packages.debian.org as Maintainer
  * Standards-Version: bump to 4.1.3 (no changes needed)
  * d/control: move Vcs-* to salsa.debian.org
  * move to debhelper 11
  * d/rules: clean up get_orig_source
  * sort generated .ds files by key tag
  * d/rules: trim trailing whitespace
  * d/copyright: Format: use https
  * d/copyright: add my own copyright to debian/*
  * d/copyright: name upstream data grant "ICANN-Public"
  * d/copyright: Source: use https:
  * update README.source to cover the different origins of the data
  * Update order of root.key to follow output of unbound-anchor

 -- Daniel Kahn Gillmor <dkg@fifthhorseman.net>  Wed, 31 Jan 2018 23:02:05 -0500

dns-root-data (2017072601) unstable; urgency=medium

  * Update root.hints to 2017072601 version

 -- Ondřej Surý <ondrej@debian.org>  Wed, 23 Aug 2017 08:45:33 +0200

dns-root-data (2017071401) unstable; urgency=medium

  * Update the root.hints to 2017060102 version
  * Change the state of KSK-2017 to VALID

 -- Ondřej Surý <ondrej@debian.org>  Fri, 14 Jul 2017 14:12:52 +0200

dns-root-data (2017041102) unstable; urgency=high

  [ Robert Edmonds ]
  * Change DS creation to omit TTL and use spaces instead of tabs
    (Closes: #864016)

 -- Ondřej Surý <ondrej@debian.org>  Tue, 06 Jun 2017 12:54:28 +0200

dns-root-data (2017041101) unstable; urgency=medium

  * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
  * Update to 2017041101 version of root zone
  * Remove timestamps from root.key to make the build reproducible
  * Shell syntax cleanup

 -- Ondřej Surý <ondrej@debian.org>  Mon, 29 May 2017 14:05:37 +0200

dns-root-data (2017020200) unstable; urgency=medium

  * Update to 2016102001 version of the root.zone
  * Add KSK-2017 (valid from 2017-02-02) into root.key file
  * Reduce number of IANA files as they don't exist at upstream anymore
  * draft-icann-dnssec-trust-anchor is now RFC 7958
  * Update all other IANA DNSSEC files to 2017-02-02 versions
  * Strip the GPG verification as IANA doesn't provide the GPG signatures
    anymore
  * Rewrite DS creation check to xml2 and ldnsutils, as neither xmllint
    nor bind9utils handle multiple DNSKEY in one file correctly

 -- Ondřej Surý <ondrej@debian.org>  Wed, 22 Mar 2017 09:06:08 +0100

dns-root-data (2015052300+h+1) unstable; urgency=medium

  * Update root.hints to 2015052300 version
  * Move the package under Debian DNS Maintainers umbrella
  * Implement the H.ROOT-SERVERS.NET IP addresses changes
    that's scheduled for December 1st, but operational now

 -- Ondřej Surý <ondrej@debian.org>  Tue, 01 Sep 2015 13:32:02 +0200

dns-root-data (2014060201+2) unstable; urgency=medium

  * Use full path for dnssec-dsfromkey (Closes: #760103)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 04 Sep 2014 13:12:40 +0200

dns-root-data (2014060201+1) unstable; urgency=low

  * Add Robert Edmonds as co-maintainer
  * Don't install root zone (it changes too often) and install static data
    into /usr/share/dns/
  * Also install dnssec-trust-anchor documentation into the package
  * Strip unbound-anchor metadata from root.key when fetching new root.key

 -- Ondřej Surý <ondrej@debian.org>  Mon, 30 Jun 2014 10:42:07 +0200

dns-root-data (2014060201) unstable; urgency=low

  * Initial release (Closes: #752745)

 -- Ondřej Surý <ondrej@debian.org>  Thu, 26 Jun 2014 10:46:45 +0200
