Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
6224 commits 28 branches 35 tags 23 MiB
Commit graph

6224 commits

This branch
This branch
All branches
Author SHA1 Message Date
Shabeeb Khalid
f06fa9d015
Removed unwanted variable from matrix 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:33:10 -08:00
Shabeeb Khalid
ccaa98a643
Refactor 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:31:57 -08:00
Shabeeb Khalid
ce14451bdc
Pass tox environment via command line 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:30:36 -08:00
Shabeeb Khalid
55c8fe0c9d
Removed unwanted env variable 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:30:02 -08:00
Shabeeb Khalid
95226edacb
Revert comment 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:29:12 -08:00
dependabot[bot]
49d46b9bd9
build(deps): bump pylint from 2.16.2 to 2.16.3 
Bumps [pylint](https://github.com/PyCQA/pylint) from 2.16.2 to 2.16.3.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Commits](https://github.com/PyCQA/pylint/compare/v2.16.2...v2.16.3)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-03 10:59:44 +00:00
dependabot[bot]
e53dcab0f6
build(deps): bump cryptography from 39.0.1 to 39.0.2 
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.1 to 39.0.2.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/39.0.1...39.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-03 10:16:34 +00:00
Lukas Pühringer
dc7216c4d0
Merge pull request #2303 from jku/upgrade-hatchling 
build: Upgrade hatchling to latest release
 2023-03-03 09:49:42 +01:00
Shabeeb Khalid
2329e33c9c
Fix: exporting the correct toxenv in lint job 
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 00:47:08 -08:00
Shabeeb Khalid
482802d030
Moved lint to seperate job. Some refactor as well. 
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-02 11:02:02 -08:00
Lukas Pühringer
de5e8377f7
Merge pull request #2315 from lukpueh/adopt-sslib-branch-rename 
Adopt securesystemslib branch rename master-> main
 2023-03-02 11:27:04 +01:00
Lukas Puehringer
951ce045cd Adopt securesystemslib branch rename master-> main 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2023-03-02 09:35:14 +01:00
Jussi Kukkonen
dbce03c60d
Merge pull request #2313 from theupdateframework/dependabot/pip/coverage-7.2.1 
build(deps): bump coverage from 7.2.0 to 7.2.1
 2023-03-01 11:34:08 +02:00
Jussi Kukkonen
682824a0f9
Merge pull request #2314 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.5 
build(deps): bump github/codeql-action from 2.2.4 to 2.2.5
 2023-02-27 19:32:32 +02:00
dependabot[bot]
3fd56facb0
build(deps): bump github/codeql-action from 2.2.4 to 2.2.5 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.4 to 2.2.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](17573ee1cc...32dc499307)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-27 11:02:26 +00:00
dependabot[bot]
b240528686
build(deps): bump coverage from 7.2.0 to 7.2.1 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.2.0 to 7.2.1.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.2.0...7.2.1)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-27 10:58:27 +00:00
Jussi Kukkonen
8969c3d234
Merge pull request #2310 from jku/tweak-repository 
repository: Make snapshot/timetamp helpers non-abstract
 2023-02-27 10:56:47 +02:00
Jussi Kukkonen
c9c36934f2 repository: Make snapshot/timetamp helpers non-abstract 
targets_infos() and snapshot_info() are helpers used by snapshot and
timestamp. Some Repository implementations do not need
snapshot/timestamp (think e.g. a signing tool that never modifies online
roles), so the helpers should not be required.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-26 11:35:02 +02:00
Jussi Kukkonen
84b1d49c9d
Merge pull request #2306 from theupdateframework/dependabot/pip/coverage-7.2.0 
build(deps): bump coverage from 7.1.0 to 7.2.0
 2023-02-24 14:42:30 +02:00
dependabot[bot]
371db15f3d
build(deps): bump coverage from 7.1.0 to 7.2.0 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.1.0...7.2.0)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-23 10:16:55 +00:00
Jussi Kukkonen
0f7772aa54
Merge pull request #2305 from theupdateframework/dependabot/pip/mypy-1.0.1 
build(deps): bump mypy from 1.0.0 to 1.0.1
 2023-02-21 11:12:32 +02:00
dependabot[bot]
5c1928ba2f
build(deps): bump mypy from 1.0.0 to 1.0.1 
Bumps [mypy](https://github.com/python/mypy) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-20 10:57:49 +00:00
Jussi Kukkonen
9684fc6340 build: Upgrade hatchling to latest release 
This is not tracked by dependabot so needs manual updates.
Manually tested: no unexpected changes in the release artifacts.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-15 10:40:37 +02:00
Jussi Kukkonen
e7cc34a6a5
Merge pull request #2302 from theupdateframework/dependabot/pip/pylint-2.16.2 
build(deps): bump pylint from 2.16.1 to 2.16.2
 2023-02-15 10:25:43 +02:00
dependabot[bot]
b8149ade30
build(deps): bump pylint from 2.16.1 to 2.16.2 
Bumps [pylint](https://github.com/PyCQA/pylint) from 2.16.1 to 2.16.2.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Commits](https://github.com/PyCQA/pylint/compare/v2.16.1...v2.16.2)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-14 10:57:51 +00:00
Jussi Kukkonen
7bee53b9f0
Merge pull request #2301 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.4 
build(deps): bump github/codeql-action from 2.2.3 to 2.2.4
 2023-02-14 10:47:16 +02:00
dependabot[bot]
ed05a2c66c
build(deps): bump github/codeql-action from 2.2.3 to 2.2.4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.3 to 2.2.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8775e86802...17573ee1cc)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-13 11:05:51 +00:00
Jussi Kukkonen
bf7692072b
Merge pull request #2184 from theupdateframework/dependabot/pip/charset-normalizer-3.0.1 
build(deps): bump charset-normalizer from 2.1.1 to 3.0.1
 2023-02-10 15:11:58 +02:00
dependabot[bot]
a2c64acb7e
build(deps): bump charset-normalizer from 2.1.1 to 3.0.1 
Bumps [charset-normalizer](https://github.com/Ousret/charset_normalizer) from 2.1.1 to 3.0.1.
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Upgrade guide](https://github.com/Ousret/charset_normalizer/blob/master/UPGRADE.md)
- [Commits](https://github.com/Ousret/charset_normalizer/compare/2.1.1...3.0.1)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-10 13:07:59 +00:00
Jussi Kukkonen
26c131db79
Merge pull request #2300 from theupdateframework/dependabot/pip/requests-2.28.2 
build(deps): bump requests from 2.28.1 to 2.28.2
 2023-02-10 15:06:17 +02:00
dependabot[bot]
55374fdf8c
build(deps): bump requests from 2.28.1 to 2.28.2 
Bumps [requests](https://github.com/psf/requests) from 2.28.1 to 2.28.2.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.28.1...v2.28.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-10 10:57:08 +00:00
Jussi Kukkonen
c27af9a04d
Merge pull request #2298 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.3 
build(deps): bump github/codeql-action from 2.2.2 to 2.2.3
 2023-02-10 10:28:46 +02:00
Lukas Pühringer
2840f629b0
Merge pull request #2297 from jku/client-example-tweak 
examples: Tweak download dir creation
 2023-02-09 11:34:18 +01:00
dependabot[bot]
15c0b40dce
build(deps): bump github/codeql-action from 2.2.2 to 2.2.3 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](39d8d7e78f...8775e86802)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-09 10:03:50 +00:00
Jussi Kukkonen
b05129b244
Merge pull request #2294 from theupdateframework/dependabot/pip/mypy-1.0.0 
build(deps): bump mypy from 0.991 to 1.0.0
 2023-02-09 11:03:32 +02:00
Jussi Kukkonen
c4851b9a22
Merge pull request #2295 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.2 
build(deps): bump github/codeql-action from 2.2.1 to 2.2.2
 2023-02-09 11:03:16 +02:00
Jussi Kukkonen
1e1a504bb6 examples: Tweak download dir creation 
Create target download dir when it's needed, not during "tofu".

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-09 10:34:03 +02:00
Lukas Pühringer
dd855b1fca
Merge pull request #2241 from jku/repository-lib-uploader 
Examples: Add repository uploader
 2023-02-08 10:30:52 +01:00
Jussi Kukkonen
5a944f9ba2 examples: More tweaks to uploader README 
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-08 11:01:07 +02:00
Jussi Kukkonen
b6465ddedf examples: Add missing link in repository README 
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-08 10:53:59 +02:00
Jussi Kukkonen
26495a5d0a examples: Improve uploader docs/messages 
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-08 10:47:34 +02:00
Jussi Kukkonen
46930e56c4 examples: Improve repository README 
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-08 10:27:33 +02:00
Jussi Kukkonen
f3b0ac603e
Merge pull request #2296 from theupdateframework/dependabot/pip/requirements/cryptography-39.0.1 
build(deps): bump cryptography from 39.0.0 to 39.0.1 in /requirements
 2023-02-08 10:12:22 +02:00
dependabot[bot]
28a651f509
build(deps): bump cryptography from 39.0.0 to 39.0.1 in /requirements 
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.0 to 39.0.1.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/39.0.0...39.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-08 05:25:06 +00:00
dependabot[bot]
932d72db3a
build(deps): bump github/codeql-action from 2.2.1 to 2.2.2 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](3ebbd71c74...39d8d7e78f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-07 10:03:56 +00:00
dependabot[bot]
e4ab25be69
build(deps): bump mypy from 0.991 to 1.0.0 
Bumps [mypy](https://github.com/python/mypy) from 0.991 to 1.0.0.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v0.991...v1.0.0)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-07 10:02:00 +00:00
Lukas Pühringer
fd95d987e7
Merge pull request #2287 from theupdateframework/dependabot/pip/black-23.1.0 
build(deps): bump black from 22.12.0 to 23.1.0
 2023-02-07 09:21:54 +01:00
Jussi Kukkonen
b67b8c8ad3 Whitespace changes to make new black linter happy 
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-06 15:29:28 +02:00
dependabot[bot]
c86134134d build(deps): bump black from 21.12.0 to 23.1.0 
Bumps [black](https://github.com/psf/black) from 22.12.0 to 23.1.0.
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/22.12.0...23.1.0)

---
updated-dependencies:
- dependency-name: black
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-06 15:29:18 +02:00
Jussi Kukkonen
b15af9573a
Merge pull request #2290 from jku/release-refactor 
build: Handle GH release manually
 2023-02-06 15:09:25 +02:00