Version in base suite: 3.7-2

Base version: python-markdown_3.7-2
Target version: python-markdown_3.7-2+deb13u1
Base file: /srv/ftp-master.debian.org/ftp/pool/main/p/python-markdown/python-markdown_3.7-2.dsc
Target file: /srv/ftp-master.debian.org/policy/pool/main/p/python-markdown/python-markdown_3.7-2+deb13u1.dsc

 changelog                         |    7 ++++
 gbp.conf                          |    2 -
 gitlab-ci.yml                     |    2 -
 patches/fixes_for_new_python.diff |   59 ++++++++++++++++++++++++++++++++++++++
 patches/series                    |    1 
 5 files changed, 69 insertions(+), 2 deletions(-)

dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp77bmh80q/python-markdown_3.7-2.dsc: no acceptable signature found
dpkg-source: warning: cannot verify inline signature for /srv/release.debian.org/tmp/tmp77bmh80q/python-markdown_3.7-2+deb13u1.dsc: no acceptable signature found
diff -Nru python-markdown-3.7/debian/changelog python-markdown-3.7/debian/changelog
--- python-markdown-3.7/debian/changelog	2024-12-08 14:01:11.000000000 +0000
+++ python-markdown-3.7/debian/changelog	2026-05-20 08:17:38.000000000 +0000
@@ -1,3 +1,10 @@
+python-markdown (3.7-2+deb13u1) trixie; urgency=medium
+
+  * Adapt to changes in html.parser module in the new Python, backported
+    to Trixie as part of CVE fixes (closes: #1137043).
+
+ -- Dmitry Shachnev <mitya57@debian.org>  Wed, 20 May 2026 11:17:38 +0300
+
 python-markdown (3.7-2) unstable; urgency=medium
 
   * Mark both binary packages as Multi-Arch: foreign (closes: #1078025).
diff -Nru python-markdown-3.7/debian/gbp.conf python-markdown-3.7/debian/gbp.conf
--- python-markdown-3.7/debian/gbp.conf	2024-12-08 14:01:11.000000000 +0000
+++ python-markdown-3.7/debian/gbp.conf	2026-05-20 08:17:38.000000000 +0000
@@ -1,2 +1,2 @@
 [DEFAULT]
-debian-branch=debian/master
+debian-branch=debian/trixie
diff -Nru python-markdown-3.7/debian/gitlab-ci.yml python-markdown-3.7/debian/gitlab-ci.yml
--- python-markdown-3.7/debian/gitlab-ci.yml	2024-12-08 14:01:11.000000000 +0000
+++ python-markdown-3.7/debian/gitlab-ci.yml	2026-05-20 08:17:38.000000000 +0000
@@ -3,4 +3,4 @@
   - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
 
 variables:
-  RELEASE: 'unstable'
+  RELEASE: 'trixie'
diff -Nru python-markdown-3.7/debian/patches/fixes_for_new_python.diff python-markdown-3.7/debian/patches/fixes_for_new_python.diff
--- python-markdown-3.7/debian/patches/fixes_for_new_python.diff	1970-01-01 00:00:00.000000000 +0000
+++ python-markdown-3.7/debian/patches/fixes_for_new_python.diff	2026-05-20 08:17:38.000000000 +0000
@@ -0,0 +1,59 @@
+From: Isaac Muse <faceless.shop@gmail.com>
+Date: Thu, 19 Jun 2025 09:46:13 -0600
+Subject: Fixes for Python 3.14
+
+- Fix issue with unclosed HTML tag `<foo`
+- Fix issue with unclosed comments
+
+Fixes #1537
+
+(cherry picked from commit 9980cb5b27b07ff48283178d98213e41543701ec)
+---
+ markdown/htmlparser.py | 18 +++++++++++++++++-
+ 1 file changed, 17 insertions(+), 1 deletion(-)
+
+diff --git a/markdown/htmlparser.py b/markdown/htmlparser.py
+index 33b918d..6e47155 100644
+--- a/markdown/htmlparser.py
++++ b/markdown/htmlparser.py
+@@ -89,6 +89,8 @@ class HTMLExtractor(htmlparser.HTMLParser):
+ 
+         self.lineno_start_cache = [0]
+ 
++        self.override_comment_update = False
++
+         # This calls self.reset
+         super().__init__(*args, **kwargs)
+         self.md = md
+@@ -249,8 +251,21 @@ class HTMLExtractor(htmlparser.HTMLParser):
+         self.handle_empty_tag('&{};'.format(name), is_block=False)
+ 
+     def handle_comment(self, data: str):
++        # Check if the comment is unclosed, if so, we need to override position
++        i = self.line_offset + self.offset + len(data) + 4
++        if self.rawdata[i:i + 3] != '-->':
++            self.handle_data('<')
++            self.override_comment_update = True
++            return
+         self.handle_empty_tag('<!--{}-->'.format(data), is_block=True)
+ 
++    def updatepos(self, i: int, j: int) -> int:
++        if self.override_comment_update:
++            self.override_comment_update = False
++            i = 0
++            j = 1
++        return super().updatepos(i, j)
++
+     def handle_decl(self, data: str):
+         self.handle_empty_tag('<!{}>'.format(data), is_block=True)
+ 
+@@ -300,7 +315,8 @@ class HTMLExtractor(htmlparser.HTMLParser):
+         self.__starttag_text = None
+         endpos = self.check_for_whole_start_tag(i)
+         if endpos < 0:
+-            return endpos
++            self.handle_data(self.rawdata[i:i + 1])
++            return i + 1
+         rawdata = self.rawdata
+         self.__starttag_text = rawdata[i:endpos]
+ 
diff -Nru python-markdown-3.7/debian/patches/series python-markdown-3.7/debian/patches/series
--- python-markdown-3.7/debian/patches/series	2024-12-08 14:01:11.000000000 +0000
+++ python-markdown-3.7/debian/patches/series	2026-05-20 08:17:38.000000000 +0000
@@ -1,3 +1,4 @@
 disable_directory_urls.diff
 disable_gh_links.diff
 local_inventory.diff
+fixes_for_new_python.diff