cloud-hypervisor (54.0-0ubuntu1) tenacious; urgency=medium

  * New upstream release v54.0; refresh vendored Rust dependencies.
    (LP: #2172170)
  * d/rules: enable SEV-SNP support on amd64. (LP: #2161951)
  * Move vendored dependencies to d/rust-vendor so they can be updated in
    the Debian tarball without repacking the upstream orig tarball. Update
    the Cargo source configuration, vendoring and copyright generation,
    preserve vendored Cargo.toml.orig files during cleaning, and remove
    the obsolete vendor diff-ignore from d/source/options. Rename the
    vendoring target to "vendor" to reflect the directory-based workflow.
  * d/rules, d/vendor-dependencies.py: restrict vendoring to normal and build
    dependencies of cloud-hypervisor for each supported GNU/Linux target
    and its package features, including SEV-SNP/IGVM on amd64. Merge the
    per-target selections to work around cargo-vendor-filterer's
    multi-platform dependency-kind filtering, retaining resolution stubs
    for unused dependencies. Document the process in d/README.source.
  * d/rules: exclude unused test data, examples, prebuilt objects and VCS
    metadata during vendoring. Update Cargo checksums when filtering to
    keep the unpacked source buildable after dpkg-source's exclusions.
  * d/source/include-binaries: allow the DER-encoded algorithm identifiers
    and PKCS#8 key templates embedded by rustls-pki-types and ring.
  * d/gen-copyright.py, d/copyright: audit and refresh vendor licensing and
    attributions, including the zstd crates' change to BSD-3-Clause:
    - Collect copyright notices from license files and source headers,
      including standalone copyright symbols, and discard placeholders.
    - Correct per-file license overrides, including Unicode, spin and
      virtio-queue, and omit overrides for files removed by filtering.
    - Include the Unicode-3.0 license text.

 -- Gauthier Jolly <gauthier.jolly@canonical.com>  Sun, 25 Oct 2026 15:00:05 +0100

cloud-hypervisor (53.0-0ubuntu1) stonking; urgency=medium

  * Release v53.0.
  * d/rules: drop tdx support as upstream marked it as broken and the build
    fails if TDX is enabled.
  * d/gen-copyright.py: fix upstream license to Apache-2.0 AND BSD-3-Clause
    (not OR) and add separate paragraphs for CC-BY-4.0 docs and
    Apache-2.0-only scripts/configs, matching .reuse/dep5 and regenerate
    d/copyright.
  * d/rules: exclude bundled C sources from vendor tarball via
    --exclude-crate-path for libssh2-sys#libssh2, openssl-src#openssl,
    zstd-sys#zstd, and libz-sys#src to avoid carrying extra license
    obligations (BSD-3-Clause, Zlib, etc.) from bundled C libraries.
  * d/rules: set ZSTD_SYS_USE_PKG_CONFIG=1 to link against system libzstd
    instead of compiling bundled sources.
  * d/control: add libzstd-dev to Build-Depends.
  * d/patches: drop all the patches that are now upstreamed in v53.0.

 -- Gauthier Jolly <gauthier.jolly@canonical.com>  Wed, 15 Jul 2026 10:22:40 +0200

cloud-hypervisor (52.0-0ubuntu1) stonking; urgency=medium

  * Initial release. (LP: #2158959)
  * New upstream release v52.0.
  * Vendor all Rust dependencies in a separate orig tarball.
  * Build for amd64, arm64, and riscv64.
  * d/p/0001-arch-vmm-fix-riscv64-build-gaps.patch: cherry-pick upstream
    commit 1e18716fbdc0 to fix riscv64 build.
  * d/p/0002-vmm-allow-riscv64-path-syscalls-in-seccomp-filters.patch:
    cherry-pick upstream commit 7d1321515cac to fix riscv64 seccomp filters.
  * d/p/0003-riscv64-clamp-AIA-SRCS-to-KVM-device-capacity.patch:
    cherry-pick upstream commits 085642dd423e and 649ca23345cc to clamp AIA
    interrupt sources to KVM device capacity, fixing EINVAL on riscv64
    platforms with smaller IMSIC capacity.
  * d/p/0004-hypervisor-riscv64-drop-Irqchip-and-IrqRouting-cap-c.patch:
    drop Cap::Irqchip and Cap::IrqRouting from riscv64 KVM capability
    checks; these capabilities are not exposed by RISC-V KVM, which uses
    AIA instead of the in-kernel irqchip, causing an unconditional panic
    at VM creation.

 -- Gauthier Jolly <gauthier.jolly@canonical.com>  Wed, 01 Jul 2026 11:00:17 +0200
