14 files changed, 362 insertions, 222 deletions
diff --git a/doc/apt-transport-https.1.xml b/doc/apt-transport-https.1.xml
index 732320113..7be546c3a 100644
--- a/doc/apt-transport-https.1.xml
+++ b/doc/apt-transport-https.1.xml
@@ -13,7 +13,7 @@
    &apt-email;
    &apt-product;
    <!-- The last update date -->
-   <date>2018-05-11T00:00:00Z</date>
+   <date>2026-01-04T00:00:00Z</date>
  </refentryinfo>
 
  <refmeta>
diff --git a/doc/apt-verbatim.ent b/doc/apt-verbatim.ent
index c6f9a2939..3b48fb465 100644
--- a/doc/apt-verbatim.ent
+++ b/doc/apt-verbatim.ent
@@ -268,7 +268,7 @@
 ">
 
 <!-- this will be updated by 'prepare-release' -->
-<!ENTITY apt-product-version "3.1.12">
+<!ENTITY apt-product-version "3.1.13">
 
 <!-- (Code)names for various things used all over the place -->
 <!ENTITY debian-oldstable-codename "bookworm">
diff --git a/doc/apt.conf.5.xml b/doc/apt.conf.5.xml
index d2467631f..34cfe276f 100644
--- a/doc/apt.conf.5.xml
+++ b/doc/apt.conf.5.xml
@@ -19,7 +19,7 @@
    &apt-email;
    &apt-product;
    <!-- The last update date -->
-   <date>2025-06-10T00:00:00Z</date>
+   <date>2025-12-03T00:00:00Z</date>
  </refentryinfo>
  
  <refmeta>
diff --git a/doc/apt_preferences.5.xml b/doc/apt_preferences.5.xml
index c30655ed6..2ab60884f 100644
--- a/doc/apt_preferences.5.xml
+++ b/doc/apt_preferences.5.xml
@@ -13,7 +13,7 @@
    &apt-email;
    &apt-product;
    <!-- The last update date -->
-   <date>2024-12-24T00:00:00Z</date>
+   <date>2025-12-16T00:00:00Z</date>
  </refentryinfo>
 
  <refmeta>
diff --git a/doc/po/apt-doc.pot b/doc/po/apt-doc.pot
index bb8a1957d..032481640 100644
--- a/doc/po/apt-doc.pot
+++ b/doc/po/apt-doc.pot
@@ -5,9 +5,9 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: apt-doc 3.1.12\n"
+"Project-Id-Version: apt-doc 3.1.13\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -3503,12 +3503,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
@@ -3802,10 +3802,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a "
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a "
 "<literal>Acquire::Snapshots::URI::Label::<replaceable>LABEL</replaceable></literal> "
 "or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></literal> "
@@ -4590,11 +4590,11 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
 msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
@@ -7736,7 +7736,7 @@ msgid ""
 "the server certificate. An alternative certificate authority (CA) can be "
 "configured with the <literal>Acquire::https::CAInfo</literal> option and its "
 "host-specific option "
-"<literal>Acquire::https::CAInfo::<replaceable>host</replaceable></literal>.  "
+"<literal>Acquire::https::<replaceable>host</replaceable>::CAInfo</literal>.  "
 "The CAInfo option specifies a file made up of CA certificates (in PEM "
 "format)  concatenated together to create the chain which APT should use to "
 "verify the path from your self-signed root certificate. If the remote server "
@@ -7750,7 +7750,7 @@ msgstr ""
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></literal>.  "
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</literal>.  "
 "As with the previous option, a file in PEM format needs to be specified."
 msgstr ""
 
diff --git a/doc/po/de.po b/doc/po/de.po
index 7cf9e532d..885c6641c 100644
--- a/doc/po/de.po
+++ b/doc/po/de.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt 2.9.27\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2025-02-28 15:48+0100\n"
 "Last-Translator: Chris Leick <c.leick@vollbio.de>\n"
 "Language-Team: German <debian-l10n-german@lists.debian.org>\n"
@@ -5004,12 +5004,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "versucht Indexe über einen URI der aus der Hash-Summe der erwarteten Datei "
 "gebildet wurde, statt über einen gut bekannten stabilen Dateinamen "
@@ -5451,10 +5451,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6596,12 +6596,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
-msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
+msgid ""
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Führen Sie niemals ein Downgrade durch, außer wenn die Priorität verfügbarer "
 "Pakete 1000 übersteigt. (»Downgrading« ist das Installieren einer weniger "
@@ -11081,15 +11088,29 @@ msgstr "Serveranmeldedaten"
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "By default all certificates trusted by the system (see <package>ca-"
+#| "certificates</package> package) are used for the verification of the "
+#| "server certificate. An alternative certificate authority (CA) can be "
+#| "configured with the <literal>Acquire::https::CAInfo</literal> option and "
+#| "its host-specific option <literal>Acquire::https::CAInfo::"
+#| "<replaceable>host</replaceable></literal>.  The CAInfo option specifies a "
+#| "file made up of CA certificates (in PEM format)  concatenated together to "
+#| "create the chain which APT should use to verify the path from your self-"
+#| "signed root certificate. If the remote server provides the whole chain "
+#| "during the exchange, the file need only contain the root certificate. "
+#| "Otherwise, the whole chain is required. If you need to support multiple "
+#| "authorities, the only way is to concatenate everything."
 msgid ""
 "By default all certificates trusted by the system (see <package>ca-"
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -11111,10 +11132,17 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "A custom certificate revocation list (CRL) can be configured with the "
+#| "options <literal>Acquire::https::CRLFile</literal> and "
+#| "<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+#| "literal>.  As with the previous option, a file in PEM format needs to be "
+#| "specified."
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/es.po b/doc/po/es.po
index 1f984c61a..0814127f7 100644
--- a/doc/po/es.po
+++ b/doc/po/es.po
@@ -38,7 +38,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 1.0.5\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2014-07-04 01:31+0200\n"
 "Last-Translator: Omar Campagne <ocampagne@gmail.com>\n"
 "Language-Team: Debian l10n Spanish <debian-l10n-spanish@lists.debian.org>\n"
@@ -4967,12 +4967,12 @@ msgstr ""
 #| "<filename>Packages</filename> files) instead of downloading whole ones. "
 #| "True by default."
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "Intenta descargar deltas llamados <literal>PDiffs</literal> para los índices "
 "(como ficheros <filename>Packages</filename>) en lugar de descargarlos "
@@ -5390,10 +5390,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6489,12 +6489,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
-msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
+msgid ""
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Nunca instala una versión anterior de un paquete en lugar de la instalada a "
 "menos que la prioridad de la versión disponible supere 1000 («Desactualizar» "
@@ -10665,10 +10672,10 @@ msgid ""
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -10680,7 +10687,7 @@ msgstr ""
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/fr.po b/doc/po/fr.po
index 16e3d1332..2be8f8809 100644
--- a/doc/po/fr.po
+++ b/doc/po/fr.po
@@ -13,7 +13,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 2.9.14\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2025-04-15 13:14+0200\n"
 "Last-Translator: bubu <bubub@no-log.org>\n"
 "Language-Team: French <debian-l10n-french@lists.debian.org>\n"
@@ -5011,12 +5011,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "Essayer de télécharger les index avec un URI construit à partir de la somme "
 "de hachage du fichier attendu plutôt que de les télécharger à partir d'un "
@@ -5465,10 +5465,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6604,12 +6604,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
-msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
+msgid ""
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Ne jamais revenir en arrière, sauf si la priorité d'une version disponible "
 "dépasse 1000. « Revenir en arrière » signifie installer une version moins "
@@ -11049,15 +11056,29 @@ msgstr "Accréditations du serveur"
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "By default all certificates trusted by the system (see <package>ca-"
+#| "certificates</package> package) are used for the verification of the "
+#| "server certificate. An alternative certificate authority (CA) can be "
+#| "configured with the <literal>Acquire::https::CAInfo</literal> option and "
+#| "its host-specific option <literal>Acquire::https::CAInfo::"
+#| "<replaceable>host</replaceable></literal>.  The CAInfo option specifies a "
+#| "file made up of CA certificates (in PEM format)  concatenated together to "
+#| "create the chain which APT should use to verify the path from your self-"
+#| "signed root certificate. If the remote server provides the whole chain "
+#| "during the exchange, the file need only contain the root certificate. "
+#| "Otherwise, the whole chain is required. If you need to support multiple "
+#| "authorities, the only way is to concatenate everything."
 msgid ""
 "By default all certificates trusted by the system (see <package>ca-"
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -11078,10 +11099,17 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "A custom certificate revocation list (CRL) can be configured with the "
+#| "options <literal>Acquire::https::CRLFile</literal> and "
+#| "<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+#| "literal>.  As with the previous option, a file in PEM format needs to be "
+#| "specified."
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/it.po b/doc/po/it.po
index 950af95ec..93fddc9d3 100644
--- a/doc/po/it.po
+++ b/doc/po/it.po
@@ -10,7 +10,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 1.0.5\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2017-03-27 19:05+0200\n"
 "Last-Translator: Beatrice Torracca <beatricet@libero.it>\n"
 "Language-Team: Italian <debian-l10n-italian@lists.debian.org>\n"
@@ -4975,12 +4975,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "Cerca di scaricare gli indici usando un URI costruito a partire da una somma "
 "hash del file atteso invece che scaricato attraverso un nome di file stable "
@@ -5415,8 +5415,8 @@ msgstr ""
 #: apt.conf.5.xml
 #, fuzzy
 #| msgid ""
-#| "Acquiring changelogs can only be done if a URI is known from where to "
-#| "get them.  Preferable the Release file indicates this in a 'Changelogs' "
+#| "Acquiring changelogs can only be done if a URI is known from where to get "
+#| "them.  Preferable the Release file indicates this in a 'Changelogs' "
 #| "field. If this isn't available the Label/Origin field of the Release file "
 #| "is used to check if a <literal>Acquire::Changelogs::URI::Label::"
 #| "<replaceable>LABEL</replaceable></literal> or "
@@ -5441,10 +5441,10 @@ msgstr ""
 #| "be used to acquire changelog files from. Another source will be tried if "
 #| "available in this case."
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6582,12 +6582,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
-msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
+msgid ""
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Non retrocede mai ad una versione più bassa, a meno che la priorità della "
 "versione disponibile non sia maggiore di 1000. («Retrocedere» significa "
@@ -10896,10 +10903,10 @@ msgid ""
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -10911,7 +10918,7 @@ msgstr ""
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/ja.po b/doc/po/ja.po
index 8613c6595..c9f216da3 100644
--- a/doc/po/ja.po
+++ b/doc/po/ja.po
@@ -10,7 +10,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 1.4\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2017-01-06 04:50+0900\n"
 "Last-Translator: Takuma Yamada <tyamada@takumayamada.com>\n"
 "Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
@@ -4793,12 +4793,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "(<filename>Packages</filename> のような) インデックス全体をダウンロードするの"
 "ではなく、<literal>PDiffs</literal> と呼ばれる差分をダウンロードしようとしま"
@@ -5210,8 +5210,8 @@ msgstr ""
 #: apt.conf.5.xml
 #, fuzzy
 #| msgid ""
-#| "Acquiring changelogs can only be done if a URI is known from where to "
-#| "get them.  Preferable the Release file indicates this in a 'Changelogs' "
+#| "Acquiring changelogs can only be done if a URI is known from where to get "
+#| "them.  Preferable the Release file indicates this in a 'Changelogs' "
 #| "field. If this isn't available the Label/Origin field of the Release file "
 #| "is used to check if a <literal>Acquire::Changelogs::URI::Label::"
 #| "<replaceable>LABEL</replaceable></literal> or "
@@ -5236,10 +5236,10 @@ msgstr ""
 #| "be used to acquire changelog files from. Another source will be tried if "
 #| "available in this case."
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6324,12 +6324,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
-msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
+msgid ""
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "有効なバージョンの優先度が 1000 を越えない場合、決してダウングレードしませ"
 "ん。(「ダウングレード」は、現在のパッケージのバージョンよりも、小さいバージョ"
@@ -10508,10 +10515,10 @@ msgid ""
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -10523,7 +10530,7 @@ msgstr ""
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/nl.po b/doc/po/nl.po
index d032c7591..9072fcdc9 100644
--- a/doc/po/nl.po
+++ b/doc/po/nl.po
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 3.1.5\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2025-08-28 22:52+0200\n"
 "Last-Translator: Frans Spiesschaert <Frans.Spiesschaert@yucom.be>\n"
 "Language-Team: Debian Dutch l10n Team <debian-l10n-dutch@lists.debian.org>\n"
@@ -5094,12 +5094,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "Tracht indexen te downloaden via een URI die opgebouwd wordt op basis van de "
 "frommelcontrolesom van het verwachte bestand, eerder dan via een welbekende "
@@ -5551,10 +5551,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6701,12 +6701,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
 msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Nooit een downgrading uitvoeren tenzij de prioriteit van een beschikbaar "
 "pakket groter is dan 1000. (\"Downgrading\" betekent het installeren van een "
@@ -11214,15 +11221,29 @@ msgstr "Servergeloofsbrieven"
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "By default all certificates trusted by the system (see <package>ca-"
+#| "certificates</package> package) are used for the verification of the "
+#| "server certificate. An alternative certificate authority (CA) can be "
+#| "configured with the <literal>Acquire::https::CAInfo</literal> option and "
+#| "its host-specific option <literal>Acquire::https::CAInfo::"
+#| "<replaceable>host</replaceable></literal>.  The CAInfo option specifies a "
+#| "file made up of CA certificates (in PEM format)  concatenated together to "
+#| "create the chain which APT should use to verify the path from your self-"
+#| "signed root certificate. If the remote server provides the whole chain "
+#| "during the exchange, the file need only contain the root certificate. "
+#| "Otherwise, the whole chain is required. If you need to support multiple "
+#| "authorities, the only way is to concatenate everything."
 msgid ""
 "By default all certificates trusted by the system (see <package>ca-"
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -11244,10 +11265,17 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "A custom certificate revocation list (CRL) can be configured with the "
+#| "options <literal>Acquire::https::CRLFile</literal> and "
+#| "<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+#| "literal>.  As with the previous option, a file in PEM format needs to be "
+#| "specified."
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/pl.po b/doc/po/pl.po
index f74e8d9e6..0b39b52a8 100644
--- a/doc/po/pl.po
+++ b/doc/po/pl.po
@@ -11,7 +11,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 1.0.5\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2014-07-04 02:13+0200\n"
 "Last-Translator: Robert Luberda <robert@debian.org>\n"
 "Language-Team: Polish <manpages-pl-list@lists.sourceforge.net>\n"
@@ -4781,12 +4781,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
@@ -5074,10 +5074,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -5953,12 +5953,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
-msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
+msgid ""
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Nigdy nie zastępuje pakietu jego wcześniejszą wersją (tzw. \"downgrading\"), "
 "chyba że priorytet tej wcześniejszej, dostępnej wersji przekracza 1000. "
@@ -9852,10 +9859,10 @@ msgid ""
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -9867,7 +9874,7 @@ msgstr ""
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/pt.po b/doc/po/pt.po
index 970953787..af20eeffb 100644
--- a/doc/po/pt.po
+++ b/doc/po/pt.po
@@ -7,7 +7,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt 3.1.4\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2025-08-14 23:16+0100\n"
 "Last-Translator: Américo Monteiro <a_monteiro@gmx.com>\n"
 "Language-Team: Portuguese <>\n"
@@ -4971,12 +4971,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 "Tenta descarregar índices via um URL construído a partir de um sumário "
 "\"hashsum\" do ficheiro esperado, em vez de descarregar via um nome de "
@@ -5411,10 +5411,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -6525,12 +6525,19 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para><itemizedlist><listitem><simpara>
 #: apt_preferences.5.xml
+#, fuzzy
+#| msgid ""
+#| "Never downgrade unless the priority of an available version exceeds "
+#| "1000.  (\"Downgrading\" is installing a less recent version of a package "
+#| "in place of a more recent version.  Note that none of APT's default "
+#| "priorities exceeds 1000; such high priorities can only be set in the "
+#| "preferences file.  Note also that downgrading a package can be risky.)"
 msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Nunca faz downgrade a menos que uma versão disponível exceda 1000. "
 "(\"Downgrading\" é instalar uma versão menos recente de um pacote no lugar "
@@ -10941,15 +10948,29 @@ msgstr "Credenciais do Servidor"
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "By default all certificates trusted by the system (see <package>ca-"
+#| "certificates</package> package) are used for the verification of the "
+#| "server certificate. An alternative certificate authority (CA) can be "
+#| "configured with the <literal>Acquire::https::CAInfo</literal> option and "
+#| "its host-specific option <literal>Acquire::https::CAInfo::"
+#| "<replaceable>host</replaceable></literal>.  The CAInfo option specifies a "
+#| "file made up of CA certificates (in PEM format)  concatenated together to "
+#| "create the chain which APT should use to verify the path from your self-"
+#| "signed root certificate. If the remote server provides the whole chain "
+#| "during the exchange, the file need only contain the root certificate. "
+#| "Otherwise, the whole chain is required. If you need to support multiple "
+#| "authorities, the only way is to concatenate everything."
 msgid ""
 "By default all certificates trusted by the system (see <package>ca-"
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -10971,10 +10992,17 @@ msgstr ""
 
 #. type: Content of: <refentry><refsect1><refsect2><para>
 #: apt-transport-https.1.xml
+#, fuzzy
+#| msgid ""
+#| "A custom certificate revocation list (CRL) can be configured with the "
+#| "options <literal>Acquire::https::CRLFile</literal> and "
+#| "<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+#| "literal>.  As with the previous option, a file in PEM format needs to be "
+#| "specified."
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""
diff --git a/doc/po/pt_BR.po b/doc/po/pt_BR.po
index 3090492d2..440e48d1e 100644
--- a/doc/po/pt_BR.po
+++ b/doc/po/pt_BR.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: apt-doc 1.0.5\n"
 "Report-Msgid-Bugs-To: APT Development Team <deity@lists.debian.org>\n"
-"POT-Creation-Date: 2025-11-10 10:36+0000\n"
+"POT-Creation-Date: 2026-01-05 22:58+0100\n"
 "PO-Revision-Date: 2004-09-20 17:02+0000\n"
 "Last-Translator: André Luís Lopes <andrelop@debian.org>\n"
 "Language-Team: <debian-l10n-portuguese@lists.debian.org>\n"
@@ -3453,12 +3453,12 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Try to download indexes via a URI constructed from a hashsum of the "
-"expected file rather than downloaded via a well-known stable filename. True "
-"by default, but automatically disabled if the source indicates no support "
-"for it. Usage can be forced with the special value \"force\". Preferably, "
-"this can be set for specific &sources-list; entries or index files by using "
-"the <option>By-Hash</option> option there."
+"Try to download indexes via a URI constructed from a hashsum of the expected "
+"file rather than downloaded via a well-known stable filename. True by "
+"default, but automatically disabled if the source indicates no support for "
+"it. Usage can be forced with the special value \"force\". Preferably, this "
+"can be set for specific &sources-list; entries or index files by using the "
+"<option>By-Hash</option> option there."
 msgstr ""
 
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
@@ -3745,10 +3745,10 @@ msgstr ""
 #. type: Content of: <refentry><refsect1><variablelist><varlistentry><listitem><para>
 #: apt.conf.5.xml
 msgid ""
-"Like changelogs, snapshots can only be acquired if a URI is known from "
-"where to get them.  Preferable the Release file indicates this in a "
-"'Snapshots' field. If this isn't available the Label/Origin field of the "
-"Release file is used to check if a <literal>Acquire::Snapshots::URI::Label::"
+"Like changelogs, snapshots can only be acquired if a URI is known from where "
+"to get them.  Preferable the Release file indicates this in a 'Snapshots' "
+"field. If this isn't available the Label/Origin field of the Release file is "
+"used to check if a <literal>Acquire::Snapshots::URI::Label::"
 "<replaceable>LABEL</replaceable></literal> or "
 "<literal>Acquire::Snapshots::URI::Origin::<replaceable>ORIGIN</replaceable></"
 "literal> option exists and if so this value is taken. The value in the "
@@ -4581,11 +4581,11 @@ msgstr ""
 #: apt_preferences.5.xml
 #, fuzzy
 msgid ""
-"Never downgrade unless the priority of an available version exceeds 1000.  "
-"(\"Downgrading\" is installing a less recent version of a package in place "
-"of a more recent version.  Note that none of APT's default priorities "
-"exceeds 1000; such high priorities can only be set in the preferences file.  "
-"Note also that downgrading a package can be risky.)"
+"Never downgrade unless the priority of an available version is at least "
+"1000.  (\"Downgrading\" is installing a less recent version of a package in "
+"place of a more recent version.  Note that all of APT's default priorities "
+"are less than 1000; higher priorities can only be set in the preferences "
+"file.  Note also that downgrading a package can be risky.)"
 msgstr ""
 "Nunca faz um downgrade a menos que a prioridade de uma instância disponível "
 "exceda 1000. (Fazer um \"downgrade\" é instalar uma versão menos recente de "
@@ -8080,10 +8080,10 @@ msgid ""
 "certificates</package> package) are used for the verification of the server "
 "certificate. An alternative certificate authority (CA) can be configured "
 "with the <literal>Acquire::https::CAInfo</literal> option and its host-"
-"specific option <literal>Acquire::https::CAInfo::<replaceable>host</"
-"replaceable></literal>.  The CAInfo option specifies a file made up of CA "
-"certificates (in PEM format)  concatenated together to create the chain "
-"which APT should use to verify the path from your self-signed root "
+"specific option <literal>Acquire::https::<replaceable>host</"
+"replaceable>::CAInfo</literal>.  The CAInfo option specifies a file made up "
+"of CA certificates (in PEM format)  concatenated together to create the "
+"chain which APT should use to verify the path from your self-signed root "
 "certificate. If the remote server provides the whole chain during the "
 "exchange, the file need only contain the root certificate. Otherwise, the "
 "whole chain is required. If you need to support multiple authorities, the "
@@ -8095,7 +8095,7 @@ msgstr ""
 msgid ""
 "A custom certificate revocation list (CRL) can be configured with the "
 "options <literal>Acquire::https::CRLFile</literal> and "
-"<literal>Acquire::https::CRLFile::<replaceable>host</replaceable></"
+"<literal>Acquire::https::<replaceable>host</replaceable>::CRLFile</"
 "literal>.  As with the previous option, a file in PEM format needs to be "
 "specified."
 msgstr ""