apt/apt-pkg, branch 2.9.8

Merge branch 'main' into 'main'

2024-08-12T14:07:11Z

Do not return error if `Signed-By` value in source list is empty See merge request apt-team/apt!364

Fix obsoleted-by handling for experimental

2024-08-12T14:05:54Z

Basically this boils down to checking that the priority of the source candidate candidate is higher or equal than the priority of the package's candidate that is being under consideration. It stands to reason if we maybe we should actually calculate a source candidate version; this will look similar but may perhaps perform slightly different.

Merge branch 'deprecate-pubkey-algos' into 'main'

2024-07-30T04:18:02Z

Only revoke weak RSA keys now, add 'next' and 'future' levels See merge request apt-team/apt!365

solver3: Refactor Reason.Pkg()/Reason.Ver() use with iterator

2024-07-16T11:55:07Z

Only revoke weak RSA keys for now, add 'next' and 'future' levels

2024-07-15T17:17:55Z

Algorithms not in the next level give a warning, algorithms in not in the future level introduce an audit message for the --audit flag. next: >=rsa2048,ed25519,ed448,nistp256,nistp384,nistp512 future: >=rsa3072,ed25519,ed448 LP: #2073126

gpgv: Add IsAssertedPubKeyAlgo() function

2024-07-15T17:17:20Z

This checks whether a public key algorithm is asserted.

worker: Add an audit level to log audit messages

2024-07-15T17:16:27Z

Do not return error if `Signed-By` value in source list is empty

2024-07-12T03:28:47Z

Signed-off-by: Aristo Chen

solver3: Formatting cleanup

2024-07-02T18:10:33Z

Run clang-format

solver3: Only demote obsolete packages in choices for upgrades

2024-07-02T18:10:33Z

If we are not upgraded, we should continue to keep the installed package installed if possible.