opendkim-ng (3.0.0~beta3-ng1) unstable; urgency=medium

  * Hotfix: Fix SigningTable validation

 -- Edmund Lodewijks <edmund@proteamail.com>  Tue, 12 May 2026 12:02:00 +0200

opendkim-ng (3.0.0~beta2-ng1) unstable; urgency=medium

  * Fix Lua 5.4 C API: correct version guards (== 502 → >= 502) across
  all hook functions (setup, screen, final, db)
  * Fix Lua 5.4 C API: remove unguarded lua_load/lua_dump compat shims
  * Fix Lua 5.4 C API: add missing strip argument to lua_dump call sites
  * Fix Lua 5.4 C API: remove stale lua_pop() after luaL_newlib/lua_setglobal
  * Fix signtable validation walk in dkimf_config_load(): missing KeyTable
  entries were not being caught due to datasplit OPTIONAL flag bug
  * Port integration tests to CMake out-of-source build layout
  * Fix miltertest: connect-failure returns nil instead of throwing
  * Fix miltertest: add expect_exit option to startfilter for conf-check tests
  * Disable integration tests for permanently removed features:
  t-lua-rbl, t-sign-atps, t-verify-ss-atps, t-verify-ss-rep,
  t-sign-ss-replace

 -- Edmund Lodewijks <edmund@proteamail.com>  Sat, 09 May 2026 21:58:00 +0200

opendkim-ng (3.0.0~beta1-ng1) unstable; urgency=medium

  * Initial release of the opendkim-ng modernisation fork.
  * Updated library SOVERSION to 13 to reflect OpenSSL 3 EVP port.
  * Migrated build system to CMake for improved maintainability.
  * Implemented Ed25519-SHA256 signing and verification (RFC 8463).
  * Hardened security: Removed RSA-SHA1 and deprecated GnuTLS code paths.
  * Fixed critical memory safety bugs in dkim_qp_decode (buffer overflow/NUL).
  * LMDB implemented as the primary high-performance backend.
  * Cleaned and modernised test suite: SHA256 as default for all tests.

 -- Edmund Lodewijks <edmund@proteamail.com>  Sun, 03 May 2026 21:00:00 +0200
