Bongo rebuilds Debian Trixie's libspf2 1.2.10 source with its maintained RFC 7208 compatibility and hardening patch. Public headers and the existing shared-library ABI remain compatible with other libspf2 consumers.

Source inputs

Download these files from https://deb.debian.org/debian/pool/main/libs/libspf2/:

File	SHA-256
`libspf2_1.2.10.orig.tar.gz`	`d91e3de81ae287a2976c44f60283bd3000d720e6a112dc7142eedf1831b821c9`
`libspf2_1.2.10-8.3.debian.tar.xz`	`93bafe87a7cd8d4a194c54abb75f35b1f6d81148c71fb30616754590826105cd`
`libspf2_1.2.10-8.3.dsc`	`8a1e838866a5d6bde2e3668adc19ef502287e578efe18c3c912f38cf55bcbdf5`

The workflow verifies these hashes before extraction.

The official Debian binary-package split is retained: the rebuilt source still produces libspf2-2t64, libspf2-dev, spfquery, and libmail-spf-xs-perl (plus automatic debug-symbol packages). All freshly built packages go into the release ZIP; Bongo's installer selects only the runtime library.

Patch order

After dpkg-source -x libspf2_1.2.10-8.3.dsc, install 0001-rfc7208-hardening.patch as the final quilt patch and apply 0002-debian-trixie.patch directly to the Debian packaging. The latter adds only the IDN2 build dependency required by the source change and identifies the rebuilt package as 1.2.10-8.3+bongo1. It does not alter any binary package stanza, package name, install list, dependency split, or ABI package name from Debian Trixie.

The source patch enforces RFC 7208 lookup and recursion limits, preserves temporary versus permanent DNS failures, selects TXT records, hardens request state and allocations, and accepts internationalised input through IDNA while retaining the old C API.

Build and verification

Build both source and binary artifacts on Trixie:

dpkg-buildpackage -us -uc -S
dpkg-buildpackage -us -uc -b

Compile and run tests/rfc7208-regression.c against the newly built library. The release ZIP contains the complete rebuilt source package and its binary packages. Bongo must link to libspf2-2t64 version 1.2.10-8.3+bongo1, not the runner's distribution copy.