apt, branch 2.9.25

Release 2.9.25

2025-01-22T10:57:47Z

Merge branch 'no-fail-missing-parts' into 'main'

2025-01-22T09:17:23Z

sqv, gpgv: Do not fail if Dir::Etc::Trusted is set and trusted.gpg.d is missing See merge request apt-team/apt!433

sqv, gpgv: Do not fail if Dir::Etc::Trusted is set and trusted.gpg.d is missing

2025-01-22T08:55:11Z

This should remain a warning case for now. So push the errors to a stack and see if we can find any file. Explictly warn again if Dir::Etc::trusted is set, as it is like _super_ deprecated. Reported-By: Cyril Brulebois in Bug#1032131

Release 2.9.24

2025-01-21T11:22:04Z

Merge branch 'trust-deprecation' into 'main'

2025-01-21T11:16:48Z

Warn about missing Signed-By in .list format See merge request apt-team/apt!431

Unset Dir::Etc::trusted

2025-01-21T11:16:34Z

The trusted.gpg file has been deprecated since February 2022 and can no longer be managed easily without apt-key, so we should not be falling back to it by default. We do not remove the actual code to fall back to it, such that code that passes Dir::Etc::trusted explicitly continues to work for the time being (with the warnings in update), as the overhead is now rather trivial.

Remove superseded warning about trusted.gpg fallback

2025-01-21T11:16:34Z

This warning has been superseded by the missing sources.list notice (which will also become a warning shortly) Adjust the sqv exit to avoid introducing a new spurious "No good signature" that we did not reach before. moo

Warn about missing Signed-By in .list format

2025-01-21T11:16:34Z

Warn about the missing field there and suggest the transition to deb822 .sources files if we found any non-deb822 source without signed-by.

gitlab-ci: Use platform: linux/i386 instead of i386/debian image

2025-01-20T12:41:20Z

This is more generic, allowing us to use jak's runner again.

Release 2.9.23

2025-01-17T19:42:50Z