Release 2.9.242.9.24

2 files changed, 23 insertions, 0 deletions

diff --git a/debian/NEWS b/debian/NEWS
index 5c10ff1f2..4f2c4ef50 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,15 @@
+apt (2.9.24) unstable; urgency=medium
+
+  /etc/apt/trusted.gpg is no longer trusted. Setting the Dir::Etc::trusted
+  option manually continues to work for some more time.
+
+  sources.list(5) entries without the Signed-By field are deprecated;
+  migrate any legacy entries to the deb822 .sources format. See the
+  apt-secure(7) manual page for best practices for signer configuration.
+  This deprecates the /etc/apt/trusted.gpg.d directory.
+
+ -- Julian Andres Klode <jak@debian.org>  Tue, 21 Jan 2025 12:17:36 +0100
+
 apt (2.9.19) unstable; urgency=medium
 
   This release switches to OpenSSL for hashing and TLS, replacing the
diff --git a/debian/changelog b/debian/changelog
index 1f34c6896..b1ea07a4b 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+apt (2.9.24) unstable; urgency=medium
+
+  * gitlab-ci: Use platform: linux/i386 instead of i386/debian image
+  * Warn about missing Signed-By in .list format, this deprecates
+    /etc/apt/trusted.gpg.d.
+  * Remove superseded warning about trusted.gpg fallback
+  * Unset Dir::Etc::trusted, this removes /etc/apt/trusted.gpg from
+    the trusted path.
+
+ -- Julian Andres Klode <jak@debian.org>  Tue, 21 Jan 2025 12:17:24 +0100
+
 apt (2.9.23) unstable; urgency=high
 
   [ David Kalnischkies ]