From 72e8cbd2dbe102dcdf702e4cdff4ed20eecf3b26 Mon Sep 17 00:00:00 2001
From: CyberMind-FR <gandalf@Gk2.net>
Date: Sat, 27 Jun 2026 08:02:45 +0200
Subject: [PATCH] =?UTF-8?q?release(toolbox-ng):=200.1.23=20=E2=80=94=20reb?=
 =?UTF-8?q?uild=20master=20(#751=20nonce-CSP)=20+=20SBX=5FDEBUG=5FCSP?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 packages/secubox-toolbox-ng/debian/changelog | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/packages/secubox-toolbox-ng/debian/changelog b/packages/secubox-toolbox-ng/debian/changelog
index 9a04ba68..4b2883a8 100644
--- a/packages/secubox-toolbox-ng/debian/changelog
+++ b/packages/secubox-toolbox-ng/debian/changelog
@@ -1,3 +1,14 @@
+secubox-toolbox-ng (0.1.23-1~bookworm1) bookworm; urgency=medium
+
+  * #751 rebuild from master: the deployed 0.1.22 binary was STALE and lacked
+    the working #728 nonce-CSP borrow, so the transparency banner was blocked on
+    nonce-CSP sites (x.com) — the inline <script> got no nonce. A fresh master
+    build restores the nonce-borrow (banner renders on x.com + news). Adds the
+    SBX_DEBUG_CSP opt-in diagnostic (logs per-injected-response CSP visibility +
+    borrow decision; off by default, zero cost when unset).
+
+ -- Gerald KERMA <devel@cybermind.fr>  Sat, 27 Jun 2026 06:30:00 +0000
+
 secubox-toolbox-ng (0.1.22-1~bookworm1) bookworm; urgency=medium
 
   * media catcher: ship a tmpfiles.d entry so /run/secubox/media-catch.jsonl is