Check SHA-256 of .dsc against hash from archive_query (ie projectb) rather than letti...

[dgit.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index b63b82911cd17c09d495877b17f2506a6aa7f7b8..d63f5cb75b76b8b050949e8afa2fc5add0cc2674 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -8,6 +8,11 @@ dgit (0.22~experimental1) experimental; urgency=low
     to pass -dubuntu.  Closes:#751781.
   * Use mirror.ftp-master.debian.org DNS alias rather than coccia.
     Closes:#752602.
+  * Check hashes of files ourselves rather than running dget to
+    re-retreive the .dsc.
+  * Check SHA-256 of .dsc against hash from archive_query (ie projectb)
+    rather than letting dpkg-source do a signature verification.
+    Closes:#737619.
 
   Minor improvements:
   * Include canonicalised suite name in signed tag message.
@@ -18,6 +23,7 @@ dgit (0.22~experimental1) experimental; urgency=low
   * Print better message for lack of configuration settings.
   * Document that dgit rpush needs gnupg and your public key on the build
     host.  Closes:#736529.
+  * Fix a manpage reference to `--dget=' where `--dgit=' was intended.
 
   Major new feature, currently stalled awaiting server infrastructure:
   * dgit-repos-server: New program for receiving signed-tag-based