Bookworm side is ready: all 8 CVEs backported and verified (build + lintian clean, full patch series re-applied to a fresh checkout to confirm it composes correctly as a set).
MR: https://salsa.debian.org/go-team/packages/caddy/-/merge_requests/3 Bastian, thanks again for the trixie catch - I'll follow up separately here once I've got that prepared too (same 2.6.2 base, so the fixes should carry over directly, just against a different revision). Ivo
