chore: Bump version to 6.0.13

[wangrong1069]

As title.

Log: Bump version to 6.0.13

Summary by Sourcery

Chores:

• Update Debian packaging metadata to reflect version 6.0.13.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Bumps the Debian package changelog entry to version 6.0.13 so packaging metadata matches the new release version.

File-Level Changes

Change	Details	Files
Update Debian packaging metadata to new 6.0.13 release version.	Increment the version number in the top changelog stanza to 6.0.13. Adjust associated changelog line(s) to reflect the new release entry if present (e.g., date/maintainer line).	debian/changelog

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[github-actions]

TAG Bot

TAG: 6.0.13
EXISTED: no
DISTRIBUTION: unstable

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[deepin-ci-robot]

deepin pr auto review

这段 debian/changelog 的 diff 内容整体上遵循了 Debian 的变更日志格式规范，条目清晰，涵盖了修复、新功能、构建配置等多个方面。以下是对其语法逻辑、代码质量、代码性能和代码安全的详细审查与改进建议：

1. 语法逻辑与格式规范

• 格式正确性：
  • 该 diff 严格遵循了 Debian changelog 文件的格式要求：package (version) distribution; urgency=urgency，随后是变更条目列表，最后是维护者信息和日期。格式完全正确。
• 版本号管理：
  • 版本号从 6.0.12 升级至 6.0.13，符合语义化版本控制规范，表明这是一个包含新功能和错误修复的次版本更新。
• 变更类型标记：
  • 使用了 fix:, feat:, chore:, build(debian): 等前缀，这符合 Conventional Commits 规范，有助于快速识别变更的性质，提高了可读性。

2. 代码质量与可维护性

• 描述清晰度：
  • fix: bash command hardening：描述比较笼统。虽然指出了加固方向，但未说明具体加固了哪些命令或针对什么漏洞。
  • chore: enhance service security 和 chore: enhance D-Bus service security configuration：这两条内容存在语义重叠。D-Bus 服务安全通常属于服务安全的一部分。建议合并或明确区分。
• 分类建议：
  • build(debian): separate Qt5/Qt6 build configurations for V25/V20 support：这是一个非常具体的构建变更，分类准确。

3. 代码性能

• chore: clean up verbose debug logs in device detection：
  • 正面影响：清理冗余的调试日志可以减少 I/O 操作，尤其是在设备检测这种可能频繁触发的场景下，有助于轻微提升运行时性能。
  • 建议：确保在清理日志的同时，保留了关键错误日志，以便在出现问题时仍能进行故障排查。

4. 代码安全

• 关键安全改进：
  • fix: bash command hardening：这是最重要的安全相关条目。Bash 命令注入是常见的安全漏洞。建议确保代码中涉及 shell 调用的地方已使用参数化扩展或适当的转义，而不是简单的字符串拼接。
• 服务安全：
  • chore: enhance service security 和 chore: enhance D-Bus service security configuration：表明对服务端和 IPC 通信进行了加固。建议检查是否限制了 D-Bus 服务的权限（如使用 PolicyKit），以及是否以最小权限原则运行服务。
• 构建依赖：
  • build(debian): separate Qt5/Qt6 build configurations：虽然主要是构建变更，但支持不同版本的 Qt 也意味着需要确保新版本依赖库中没有引入已知的安全漏洞（CVE）。

综合改进建议

1. 细化变更描述：

   • 将 fix: bash command hardening 修改为更具体的描述，例如 fix: escape arguments in shell commands to prevent injection（修复：对 shell 命令中的参数进行转义以防止注入）。
   • 将 chore: enhance service security 和 chore: enhance D-Bus service security configuration 合并为一条更详细的描述，例如 security: restrict D-Bus service permissions and apply hardening flags（安全：限制 D-Bus 服务权限并应用加固标志）。

2. 日期检查：

   • diff 中的日期显示为 Thu, 29 Jan 2026。这看起来是一个未来的日期。请确认这是否为笔误（应为 2025 或更早），或者确实是计划中的未来发布时间。如果是笔误，应修正以保持记录的准确性。

3. 拼写与大小写：

   • chore: enhance 中间有两个空格，建议修正为一个空格，保持格式整洁。

修改后的示例

+deepin-boot-maker (6.0.13) unstable; urgency=medium
+
+  * security: escape arguments in shell commands to prevent injection
+  * feat: Support creating bootable USB drives from unpartitioned USB disks
+  * feat: Add Qt5 compilation compatibility
+  * security: restrict D-Bus service permissions and apply hardening flags
+  * chore: clean up verbose debug logs in device detection
+  * build(debian): separate Qt5/Qt6 build configurations for V25/V20 support
+
+ -- wangrong <wangrong@uniontech.com>  Thu, 29 Jan 2025 17:02:51 +0800
+

总结：这段 diff 展示了一个高质量的版本更新，重点在于安全加固和兼容性提升。通过细化描述和修正格式细节，可以使变更日志更加专业和易于维护。

[deepin-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: lzwind, wangrong1069

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• debian/deepin/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[deepin-bot]

TAG Bot

✅ Tag created successfully

📋 Tag Details

• Tag Name: 6.0.13
• Tag SHA: 0b909d514d1daaa29638f1cd3a68f866cd5b6a10
• Commit SHA: f7e9277ebeca8618a476689054cd70afde635416
• Tag Message:

  Release deepin-boot-maker 6.0.13
  
  

• Tagger:
  • Name: wangrong1069
• Distribution: unstable