diff --git a/debian/changelog b/debian/changelog
index ad27a02..6f6e3d9 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+sorl-thumbnail (12.9.0-2) UNRELEASED; urgency=medium
+
+ * Update renamed lintian tag names in lintian overrides.
+ * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse.
+ * Update standards version to 4.2.1, no changes needed.
+
+ -- Debian Janitor <janitor@jelmer.uk> Mon, 19 Jun 2023 18:24:36 -0000
+
sorl-thumbnail (12.9.0-1) unstable; urgency=medium
* New release
diff --git a/debian/control b/debian/control
index 768049c..6cecb22 100644
--- a/debian/control
+++ b/debian/control
@@ -19,7 +19,7 @@ Build-Depends: debhelper-compat (= 13),
python3-setuptools-scm,
python3-sphinx (>= 1.0.7+dfsg)
Build-Conflicts: locales-all (<< 2.21-1)
-Standards-Version: 4.2.0
+Standards-Version: 4.2.1
Rules-Requires-Root: no
Homepage: https://github.com/jazzband/sorl-thumbnail
Vcs-Git: https://salsa.debian.org/python-team/packages/sorl-thumbnail.git
diff --git a/debian/source/lintian-overrides b/debian/source/lintian-overrides
index 361049e..3b3da66 100644
--- a/debian/source/lintian-overrides
+++ b/debian/source/lintian-overrides
@@ -1,2 +1,2 @@
# Upstream does not provide PGP signatures for their release tarballs.
-sorl-thumbnail source: debian-watch-may-check-gpg-signature
+sorl-thumbnail source: debian-watch-does-not-check-openpgp-signature
diff --git a/debian/upstream/metadata b/debian/upstream/metadata
new file mode 100644
index 0000000..0c3039e
--- /dev/null
+++ b/debian/upstream/metadata
@@ -0,0 +1,4 @@
+---
+Bug-Database: https://github.com/jazzband/sorl-thumbnail/issues
+Bug-Submit: https://github.com/jazzband/sorl-thumbnail/issues/new
+Repository-Browse: https://github.com/jazzband/sorl-thumbnail
