I'm looking at pushing a trixie fix for Archive-Tar CVE-2026-42496 in
src:perl via a point release.

As seen in https://github.com/Perl/perl5/issues/24452 the fix makes
Module-CPANTS-Analyse fail its test suite.

 not ok 13 - symlinks not listed in MANIFEST is not ignored for a non-local distribution

 #   Failed test 'symlinks not listed in MANIFEST is not ignored for a non-local distribution'
 #   at t/analyse/manifest.t line 84.

An easy way to see this is just building libmodule-cpants-analyse-perl_1.02-1 in forky or sid.

This has been fixed upstream in 1.03 with

https://github.com/cpants/Module-CPANTS-Analyse/commit/fed1a10a9d9170bce71777745d504cd427692e2d

which should works with and without the Archive-Tar fix.

Please consider supplying a point release update of
libmodule-cpants-analyse-perl with this patch to avoid a regression
in stable.