.. _ch-whats-new:

What's new in Debian |RELEASE|
========================================================

The `Wiki <https://wiki.debian.org/NewInTrixie>`__ has more information about this
topic.

.. _supported-archs:

Supported architectures
----------------------------------------------

The following are the officially supported architectures for Debian
|RELEASE|:

-  64-bit PC (``amd64``)

-  64-bit ARM (``arm64``)

-  ARM EABI (``armel``)

-  ARMv7 (EABI hard-float ABI, ``armhf``)

-  64-bit little-endian PowerPC (``ppc64el``)

-  64-bit little-endian RISC-V (``riscv64``)

-  IBM System z (``s390x``)

Additionally, on 64-bit PC systems, a partial 32-bit userland (``i386``)
is available. Please see :ref:`i386_reduced_support` for details.

See :ref:`armel_last_release` for limitations on support for the ARM EABI
(``armel``) architecture.

You can read more about port status, and port-specific information for
your architecture at the `Debian port web pages <https://www.debian.org/ports/>`__.

.. _new-in-distro:

What's new in the distribution?
--------------------------------------------------------------

.. _news-from-riscv64-release:

Official support for riscv64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This release for the first time officially supports the riscv64
architecture, allowing users to run Debian on 64-bit RISC-V hardware
and benefit from all Debian 13 features.

The `Wiki <https://wiki.debian.org/RISC-V>`__ provides more details
about riscv64 support in Debian.

.. _news-from-arm64-release:

Hardening against ROP and COP/JOP attacks on amd64 and arm64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

|RELEASENAME| introduces security features on the amd64 and arm64
architectures designed to mitigate
`Return-Oriented Programming (ROP) <https://en.wikipedia.org/wiki/Return-oriented_programming>`__
exploits and Call/Jump-Oriented Programming (COP/JOP) attacks.

On amd64 this is based on Intel Control-flow Enforcement Technology (CET)
for both ROP and COP/JOP protection,
on arm64 it is based on Pointer Authentication (PAC) for ROP protection
and Branch Target Identification (BTI) for COP/JOP protection.

The features are enabled automatically if your hardware supports them.
For amd64 see the
`Linux kernel documentation <https://docs.kernel.org/next/arch/x86/shstk.html>`__
and the
`Intel documentation <https://www.intel.com/content/www/us/en/developer/articles/technical/technical-look-control-flow-enforcement-technology.html>`__,
and for arm64 see the `Wiki <https://wiki.debian.org/ToolChain/PACBTI>`__,
and the `Arm documentation <https://developer.arm.com/-/media/Arm%20Developer%20Community/PDF/Learn%20the%20Architecture/Providing%20protection%20for%20complex%20software.pdf>`__,
which have information on how to check if your processor supports CET and PAC/BTI
and how they work.

.. _http-boot-support:

HTTP Boot Support
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The Debian Installer and Debian Live Images can now be booted using "HTTP Boot" on
supported UEFI and U-Boot firmware.

On systems using `TianoCore <https://www.tianocore.org/>`__ firmware, enter the
*Device Manager* menu, then choose *Network Device List*, select the network
interface, *HTTP Boot Configuration*, and specify the full URL to the Debian ISO
to boot.

For other firmware implementations, please see the documentation for your system's hardware
and/or the firmware documentation.

.. _manpages-l10n:

Improved manual pages translations
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The `manpages-l10n` project has contributed many improved and new translations
for manual pages. Especially Romanian and Polish translations are greatly enhanced
since |OLDRELEASENAME|.

.. _qt_webengine_spell_checking_support:

Spell-checking support in Qt WebEngine web browsers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Web browsers based on Qt WebEngine, notably Privacy Browser and Falkon, now
support spell-checking using ``hunspell`` data. The data is available in the
``BDIC binary dictionary`` format shipping in each Hunspell language package for
the first time in Trixie.

More information is available in the related
`bug report <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020387>`__.

.. _time64:

64-bit time_t ABI transition
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

All architectures other than ``i386`` now use a 64-bit ``time_t`` ABI, supporting
dates beyond 2038.

On 32-bit architectures (``armel`` and ``armhf``) the ABI of many libraries
changed without changing the library "soname". On these architectures, third-party
software and packages will need to be recompiled/rebuilt, and checked for possibly
silent data loss.

The ``i386`` architecture did not participate in this transition, since its
primary function is to support legacy software.

More details can be found on the
`Debian wiki <https://wiki.debian.org/ReleaseGoals/64bit-time>`__.

.. _reproducible:

Debian progress towards reproducible builds
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Debian contributors have made significant progress toward ensuring package
builds produce byte-for-byte reproducible results. You can check the status for
packages installed on your system using the new package **debian-repro-status**,
or visit `reproduce.debian.net <https://reproduce.debian.net/>`__
for Debian's overall statistics for trixie and later.

You can contribute to these efforts by joining ``#debian-reproducible`` on IRC
to discuss fixes, or verify the statistics by installing the new **rebuilderd**
package and setting up your own instance.

.. _wcurl_and_http3_curl:

wcurl and HTTP/3 support in curl
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Both the curl CLI and libcurl now have support for HTTP/3.

HTTP/3 requests can be made with the flags ``--http3`` or ``--http3-only``.

The **curl** package now ships wcurl, a wget alternative that uses curl to
perform downloads.

Downloading files is as simple as ``wcurl URL``.

.. _bdic-support:

BDIC Binary Hunspell Dictionary Support
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Trixie ships .bdic binary dictionaries compiled from Hunspell source for the
first time in Debian.  The .bdic format was developed by Google for use in
Chromium.  It can be used by Qt WebEngine, which is derived from Chromium's
source.  Web browsers based on Qt WebEngine can take advantage of the provided
.bdic dictionaries if they have appropriate upstream support.  More information
is available in the related
`bug report <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020387>`__.

.. _major-packages:

Desktops and well known packages
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

..
   INFO: Make sure to update the package numbers in the source/conf.py file

This new release of Debian comes with a lot more software than its predecessor
|OLDRELEASENAME|; the distribution includes over |PACKAGES-NEW| new packages,
for a total of over |PACKAGES-TOTAL| packages. Most of the software in the
distribution has been updated: over |PACKAGES-UPDATED| software packages (this
is |PACKAGES-UPDATE-PERCENT| of all packages in |OLDRELEASENAME|). Also, a
significant number of packages (over |PACKAGES-REMOVED|,
|PACKAGES-REMOVED-PERCENT| of the packages in |OLDRELEASENAME|) have for
various reasons been removed from the distribution. You will not see any
updates for these packages and they will be marked as "obsolete" in package
management front-ends; see :ref:`obsolete`.

Debian again ships with several desktop applications and environments.
Among others it now includes the desktop environments GNOME 48, KDE
Plasma 6.3, LXDE 13, LXQt 2.1.0, and Xfce 4.20.

Productivity applications have also been upgraded, including the office
suites:

-  LibreOffice is upgraded to version 25;

-  GNUcash is upgraded to 5.10;

Among many others, this release also includes the following software
updates:

+----------------------+----------------------+----------------------+
| Package              | Version in           | Version in |RELEASE| |
|                      | |OLDRELEASE|         | (|RELEASENAME|)      |
|                      | (|OLDRELEASENAME|)   |                      |
+======================+======================+======================+
| Apache               | 2.4.62               | 2.4.65               |
+----------------------+----------------------+----------------------+
| Bash                 | 5.2.15               | 5.2.37               |
+----------------------+----------------------+----------------------+
| BIND DNS Server      | 9.18                 | 9.20                 |
+----------------------+----------------------+----------------------+
| Cryptsetup           | 2.6                  | 2.7                  |
+----------------------+----------------------+----------------------+
| curl/libcurl         | 7.88.1               | 8.14.1               |
+----------------------+----------------------+----------------------+
| Emacs                | 28.2                 | 30.1                 |
+----------------------+----------------------+----------------------+
| Exim (default        | 4.96                 | 4.98                 |
| email server)        |                      |                      |
+----------------------+----------------------+----------------------+
| GCC, the GNU Compiler| 12.2                 | 14.2                 |
| Collection           |                      |                      |
| (default compiler)   |                      |                      |
+----------------------+----------------------+----------------------+
| GIMP                 | 2.10.34              | 3.0.4                |
+----------------------+----------------------+----------------------+
| GnuPG                | 2.2.40               | 2.4.7                |
+----------------------+----------------------+----------------------+
| Inkscape             | 1.2.2                | 1.4                  |
+----------------------+----------------------+----------------------+
| the GNU C library    | 2.36                 | 2.41                 |
+----------------------+----------------------+----------------------+
| Linux kernel         | 6.1 series           | 6.12 series          |
+----------------------+----------------------+----------------------+
| LLVM/Clang toolchain | 13.0.1 and 14.0      | 19 (default), 17 and |
|                      | (default) and 15.0.6 | 18 available         |
+----------------------+----------------------+----------------------+
| MariaDB              | 10.11                | 11.8                 |
+----------------------+----------------------+----------------------+
| Nginx                | 1.22                 | 1.26                 |
+----------------------+----------------------+----------------------+
| OpenJDK              | 17                   | 21                   |
+----------------------+----------------------+----------------------+
| OpenLDAP             | 2.5.13               | 2.6.10               |
+----------------------+----------------------+----------------------+
| OpenSSH              | 9.2p1                | 10.0p1               |
+----------------------+----------------------+----------------------+
| OpenSSL              | 3.0                  | 3.5                  |
+----------------------+----------------------+----------------------+
| Perl                 | 5.36                 | 5.40                 |
+----------------------+----------------------+----------------------+
| PHP                  | 8.2                  | 8.4                  |
+----------------------+----------------------+----------------------+
| Postfix              | 3.7                  | 3.10                 |
+----------------------+----------------------+----------------------+
| PostgreSQL           | 15                   | 17                   |
+----------------------+----------------------+----------------------+
| Python 3             | 3.11                 | 3.13                 |
+----------------------+----------------------+----------------------+
| Qt 5                 | 5.15.8               | 5.15.15              |
+----------------------+----------------------+----------------------+
| Qt 6                 | 6.4.2                | 6.8.2                |
+----------------------+----------------------+----------------------+
| Rustc                | 1.63                 | 1.85                 |
+----------------------+----------------------+----------------------+
| Samba                | 4.17                 | 4.22                 |
+----------------------+----------------------+----------------------+
| Systemd              | 252                  | 257                  |
+----------------------+----------------------+----------------------+
| Vim                  | 9.0                  | 9.1                  |
+----------------------+----------------------+----------------------+

.. _plasma-6:

Plasma 6
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Debian |RELEASE| will be the first release of Debian shipping Plasma 6. This is
a major upgrade from Plasma 5 found in Debian |OLDRELEASE| and is built on an
entirely new stack based on Qt 6 and KDE Framework 6 libraries.

Debian |RELEASE| (|RELEASENAME|) ships:

-  Qt 6.8.2 (up from 6.4.2)
-  KDE Frameworks 6.13 (new)
-  Plasma 6.3.6 (replaces Plasma 5.27.5)
-  KDE Gear applications:

   - KDE PIM suite in version 24.12.3
   - Other Gear applications in version 25.04.3 (except Neochat, KDevelop, Partition Manager)

The details of all packages added and removed in the stack between Debian
|OLDRELEASE| and |RELEASE| can be found in the `Trixie Release Plans <https://wiki.debian.org/PkgQtKde/TrixieReleasePlans#Packages_Added_.2F_Dropped>`__
wiki page of the Qt / KDE Team.

In place upgrades of user profiles are generally supported but some
occasional issues have been reported. Issues that could not be fixed in the
distribution are being tracked in the `Plasma 6 Upgrade Quirks <https://wiki.debian.org/Plasma%206#Upgrade_Quirks>`__
wiki page alongside their workarounds.

For compatibilty with existing applications, Debian |RELEASE| also ships:

-  Qt 5.15.15 (up from 5.15.8)
-  KDE Frameworks 5.116 (up from 5.103)

Krita and a few other applications still depend on KDE Frameworks 5 but KF5 are
not developed anymore and are considered deprecated upstream. They will be
removed during the |NEXTRELEASENAME| development cycle.

.. _dummy-ch:
.. only:: fixme

	Something
	~~~~~~~~~~~~~~~~~~

	Text
