moraine (0.2.0-2) unstable; urgency=medium

  * Add debian/upstream/metadata (DEP-12: repository and bug-tracker
    URLs).
  * Set AppStream metadata_license to MIT for consistency with
    debian/copyright (appstream-metadata-license.patch).

 -- Jonaz Thern <info@thern.io>  Sat, 11 Jul 2026 13:40:00 +0200

moraine (0.2.0-1) unstable; urgency=medium

  * New upstream release 0.2.0.

 -- Jonaz Thern <info@thern.io>  Sat, 11 Jul 2026 13:31:41 +0200

moraine (0.1.22-1) unstable; urgency=medium

  * GUI: in-app "Check for updates" (startup banner + Settings button), using
    GitHub Releases so it works for every install method, not just APT.
  * GUI: system-tray icon (StatusNotifierItem) with show/quit; autostart starts
    hidden in the tray; the window's X asks minimize-to-tray or quit.
  * GUI: set the window icon explicitly so X11 shows the real Moraine mark.
  * GUI: Settings "Website" link now points to moraine.thern.io.

 -- Jonaz Thern <info@thern.io>  Sun, 05 Jul 2026 22:08:36 +0200

moraine (0.1.17-1) unstable; urgency=medium

  * Add Arch Linux/AUR packaging (packaging/aur/PKGBUILD).

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 20:00:00 +0200

moraine (0.1.16-1) unstable; urgency=medium

  * Maintenance release: version bump only.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 19:00:00 +0200

moraine (0.1.15-1) unstable; urgency=medium

  * Settings → About: rename the personal link to "Website".

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 18:00:00 +0200

moraine (0.1.14-1) unstable; urgency=medium

  * Config import: clear error when the file isn't an encrypted config
    (was gpg's cryptic "Unknown system error"); dialog defaults to *.gpg.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 17:00:00 +0200

moraine (0.1.13-1) unstable; urgency=medium

  * Test connection: a missing local source no longer reads as
    "connection FAILED"; it's reported distinctly with a clear hint.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 16:00:00 +0200

moraine (0.1.12-1) unstable; urgency=medium

  * Restore destination defaults to the sources' original location
    (common parent), still editable.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 15:00:00 +0200

moraine (0.1.11-1) unstable; urgency=medium

  * Restore tab auto-loads snapshots; selective file/folder restore now
    tracks the selection in state (survives navigation, no unsafe pointer).

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 14:00:00 +0200

moraine (0.1.10-1) unstable; urgency=medium

  * Sources: one Browse… button with multi-select Files…/Folders… pickers
    (add many sources in one sweep).

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 13:00:00 +0200

moraine (0.1.9-1) unstable; urgency=medium

  * Sources can be individual files (new File… picker); rclone uses copyto
    for file sources so they aren't nested under a same-named directory.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 12:00:00 +0200

moraine (0.1.8-1) unstable; urgency=medium

  * Maintenance release: version bump only.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 11:00:00 +0200

moraine (0.1.7-1) unstable; urgency=medium

  * Fix stale restore listing on fast target switches; crontab uninstall
    matches only '# moraine:' lines; reject duplicate source base names.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 10:00:00 +0200

moraine (0.1.6-1) unstable; urgency=medium

  * Fix: rclone --copy-dest lookup runs after the VPN is up, so VPN-only
    remotes stay incremental instead of falling back to a full copy.

 -- Jonaz Thern <info@thern.io>  Fri, 03 Jul 2026 09:00:00 +0200

moraine (0.1.5-1) unstable; urgency=medium

  * Security: reject argv-injection in key/host/user; '--' before positional
    paths in rsync/rclone; private-only askpass dir; bounded worker channel.
  * Fix: GUI can't persist an unloadable config; IPv6 FTP hosts; empty-dest
    guard; atomic history compaction; run-guard during rclone prep.

 -- Jonaz Thern <info@thern.io>  Thu, 02 Jul 2026 23:00:00 +0200

moraine (0.1.4-1) unstable; urgency=medium

  * FTP credentials via RCLONE_FTP_* environment (not argv).
  * Optional strict SSH host-key checking (strict_host_key).
  * Form validation feedback; schedule range validation; skip schedules
    with missing targets on install.

 -- Jonaz Thern <info@thern.io>  Thu, 02 Jul 2026 21:00:00 +0200

moraine (0.1.3-1) unstable; urgency=medium

  * Security: validate target names (path traversal, FTP option injection),
    sanitize server-supplied restore trees, owner-only init/export files,
    nmcli id argument, SOURCE_DATE_EPOCH support.
  * Fix schedule-creation crash, SSH restore tree parsing, incremental
    rclone backups in the GUI, failure logging, prune concurrency guard.

 -- Jonaz Thern <info@thern.io>  Thu, 02 Jul 2026 16:00:00 +0200

moraine (0.1.2-1) unstable; urgency=medium

  * Per-target VPN, start-at-login, GTK theming fixes.
  * Security hardening: owner-only config/log (0600), private SSH_ASKPASS
    dir, no secrets in argv, rsync --protect-args, injection-safe scheduling.

 -- Jonaz Thern <info@thern.io>  Thu, 02 Jul 2026 12:00:00 +0200

moraine (0.1.1-1) unstable; urgency=medium

  * Initial release. (Closes: #1141131)

 -- Jonaz Thern <info@thern.io>  Tue, 30 Jun 2026 20:21:35 +0200
