Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #2942 from jku/release-prep
Some checks are pending
CI / test (push) Waiting to run
Details
CI / test-with-sslib-main (push) Waiting to run
Details
CodeQL Analysis / Analyze (push) Waiting to run
Details
Conformance / conformance (push) Waiting to run
Details
Scorecards analysis / Scorecards analysis (push) Waiting to run
Details

Browse source 
Prepare 7.0 release
This commit is contained in:
Jussi Kukkonen 2026-05-18 10:58:45 +03:00 committed by GitHub
commit 353bdb767d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 16 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
docs/CHANGELOG.md
View file

@ -2,11 +2,23 @@
## Unreleased
## v7.0.0
This is a major release only because of a minor ngclient API tweak: there
are no large functional changes.
### Fixed
* Fix [GHSA-qp9x-wp8f-qgjj](https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-qp9x-wp8f-qgjj):
Incorrect delegation path matching on Windows
* Various documentation fixes (#2812, #2922, #2923)
### Changed
* ngclient: `Updater()` now requires an explicit `bootstrap` argument
* This is a breaking change: callers must pass `bootstrap=<root_bytes>` or `bootstrap=None`
* `bootstrap=None` explicitly opts into using cached `root.json` as trust anchor
* ngclient: `Updater()` now requires the named bootstrap argument to make it
clearer that providing one is strongly recommended: previous default
functionality can be reproduced with `bootstrap=None` (#2903)
* Prepare for removal of securesystemslib.hash (#2815)
## v6.0.0

2
tuf/__init__.py
View file

@ -4,4 +4,4 @@
"""TUF."""
# This value is used in the ngclient user agent.
__version__ = "6.0.0"
__version__ = "7.0.0"