diff --git a/debian/changelog b/debian/changelog
index de5feec..3c85450 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+rpi.gpio (0.7.1~a4-2) UNRELEASED; urgency=medium
+
+ * Use secure copyright file specification URI.
+ * Use secure URI in debian/watch.
+ * Bump debhelper from old 11 to 13.
+ * Set debhelper-compat version in Build-Depends.
+ * Update renamed lintian tag names in lintian overrides.
+ * Replace invalid standards version 4.3.1 with valid 4.3.0.3.
+
+ -- Debian Janitor <janitor@jelmer.uk> Wed, 28 Jun 2023 01:53:31 -0000
+
rpi.gpio (0.7.1~a4-1) unstable; urgency=medium
* New upstream version. (Closes: #976114)
diff --git a/debian/compat b/debian/compat
deleted file mode 100644
index b4de394..0000000
--- a/debian/compat
+++ /dev/null
@@ -1 +0,0 @@
-11
diff --git a/debian/control b/debian/control
index 2d32072..1d09441 100644
--- a/debian/control
+++ b/debian/control
@@ -5,12 +5,12 @@ Uploaders:
Section: python
Priority: optional
Build-Depends:
- debhelper (>= 11~),
+ debhelper-compat (= 13),
python3-all,
python3-all-dev,
python3-setuptools,
dh-python,
-Standards-Version: 4.3.1
+Standards-Version: 4.3.0.3
Homepage: http://sourceforge.net/projects/raspberry-gpio-python/
Vcs-Git: https://salsa.debian.org/raspi-team/rpi.gpio.git
Vcs-Browser: https://salsa.debian.org/raspi-team/rpi.gpio
diff --git a/debian/copyright b/debian/copyright
index 585eba3..12d475a 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -1,4 +1,4 @@
-Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: RPi.GPIO
Upstream-Contact: Ben Croston
Source: https://pypi.python.org/pypi/RPi.GPIO
diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides
index bffe4f6..2293a31 100644
--- a/debian/source/lintian-overrides
+++ b/debian/source/lintian-overrides
@@ -1,2 +1,2 @@
# upstream does not sign tarballs
-rpi.gpio source: debian-watch-may-check-gpg-signature
+rpi.gpio source: debian-watch-does-not-check-openpgp-signature
diff --git a/debian/watch b/debian/watch
index 366eabe..5e20767 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,4 +1,4 @@
# please also check http://pypi.debian.net/RPi.GPIO/watch
version=3
opts="uversionmangle=s/(rc|a|b|c)/~$1/" \
-http://pypi.debian.net/RPi.GPIO/RPi.GPIO-(.+)\.(?:zip|tgz|tbz|txz|(?:tar\.(?:gz|bz2|xz)))
+https://pypi.debian.net/RPi.GPIO/RPi.GPIO-(.+)\.(?:zip|tgz|tbz|txz|(?:tar\.(?:gz|bz2|xz)))
