Hi,

The migration of `apt` was blocked because of apparent regressions in
ca-certificates-java. The test can-install-jre tries to install all
available jre-headless packages, regardless of pinning, so it will try
to install versions only available in unstable. It's discouraged to use
apt inside the test [1], but if you really want to test all versions
(instead of only the default via a test Depends), please make the test
honor differences between source and target suite, i.e. only test
versions from the target suite unless apt-pinning asks explicitly for
versions from the source suite.

Paul

[1] https://wiki.debian.org/ContinuousIntegration/AutopkgtestBestPractices