Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
5636 commits 28 branches 35 tags 23 MiB
Commit graph

5636 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jussi Kukkonen
c3411dc59e repository: Rename snapshot()/timestamp() 
New names:
  do_snapshot()
  do_timestamp()
This is in preparation of using the old names for another purpose.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-03-08 10:27:43 +02:00
Jussi Kukkonen
0262a8ac49 repository: Add typed edit_*() contextmanagers 
The advantage here is that code within the context can take advantage
of the correct typing. This is already visible in the example code but
is even more useful in real applications.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-03-08 10:27:43 +02:00
Jussi Kukkonen
29b14905ba
Merge pull request #2323 from theupdateframework/dependabot/pip/pylint-2.16.4 
build(deps): bump pylint from 2.16.3 to 2.16.4
 2023-03-08 10:26:45 +02:00
dependabot[bot]
2e2b55a593
build(deps): bump pylint from 2.16.3 to 2.16.4 
Bumps [pylint](https://github.com/PyCQA/pylint) from 2.16.3 to 2.16.4.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Commits](https://github.com/PyCQA/pylint/compare/v2.16.3...v2.16.4)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-08 08:20:24 +00:00
Jussi Kukkonen
96a147422e
Merge pull request #2324 from theupdateframework/dependabot/pip/mypy-1.1.1 
build(deps): bump mypy from 1.0.1 to 1.1.1
 2023-03-08 10:19:46 +02:00
dependabot[bot]
07822fb63e
build(deps): bump mypy from 1.0.1 to 1.1.1 
Bumps [mypy](https://github.com/python/mypy) from 1.0.1 to 1.1.1.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v1.0.1...v1.1.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-07 10:57:49 +00:00
Lukas Pühringer
d1597d74da
Merge pull request #2317 from shabeebk/issue-1248-2 
Moved lint to seperate job. Some refactor as well.
 2023-03-06 11:26:56 +01:00
Lukas Pühringer
90c9cef9ae
Merge pull request #2320 from theupdateframework/jku-readme-repo 
README: Update repository mention
 2023-03-06 10:42:09 +01:00
Jussi Kukkonen
203b471895 README: Update repository mention 
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-03-06 11:34:52 +02:00
Jussi Kukkonen
8b3ae17d8b
Merge pull request #2318 from theupdateframework/dependabot/pip/cryptography-39.0.2 
build(deps): bump cryptography from 39.0.1 to 39.0.2
 2023-03-04 22:24:02 +02:00
Jussi Kukkonen
0099ae99b6
Merge pull request #2319 from theupdateframework/dependabot/pip/pylint-2.16.3 
build(deps): bump pylint from 2.16.2 to 2.16.3
 2023-03-04 22:23:24 +02:00
Shabeeb Khalid
b618394c5b
Removed unwanted variable from matrix 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:33:20 -08:00
Shabeeb Khalid
f06fa9d015
Removed unwanted variable from matrix 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:33:10 -08:00
Shabeeb Khalid
ccaa98a643
Refactor 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:31:57 -08:00
Shabeeb Khalid
ce14451bdc
Pass tox environment via command line 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:30:36 -08:00
Shabeeb Khalid
55c8fe0c9d
Removed unwanted env variable 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:30:02 -08:00
Shabeeb Khalid
95226edacb
Revert comment 
Co-authored-by: Lukas Pühringer <luk.puehringer@gmail.com>
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 10:29:12 -08:00
dependabot[bot]
49d46b9bd9
build(deps): bump pylint from 2.16.2 to 2.16.3 
Bumps [pylint](https://github.com/PyCQA/pylint) from 2.16.2 to 2.16.3.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Commits](https://github.com/PyCQA/pylint/compare/v2.16.2...v2.16.3)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-03 10:59:44 +00:00
dependabot[bot]
e53dcab0f6
build(deps): bump cryptography from 39.0.1 to 39.0.2 
Bumps [cryptography](https://github.com/pyca/cryptography) from 39.0.1 to 39.0.2.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/39.0.1...39.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-03-03 10:16:34 +00:00
Lukas Pühringer
dc7216c4d0
Merge pull request #2303 from jku/upgrade-hatchling 
build: Upgrade hatchling to latest release
 2023-03-03 09:49:42 +01:00
Shabeeb Khalid
2329e33c9c
Fix: exporting the correct toxenv in lint job 
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-03 00:47:08 -08:00
Shabeeb Khalid
482802d030
Moved lint to seperate job. Some refactor as well. 
Signed-off-by: Shabeeb Khalid <convey2shabeeb@gmail.com>
 2023-03-02 11:02:02 -08:00
Lukas Pühringer
de5e8377f7
Merge pull request #2315 from lukpueh/adopt-sslib-branch-rename 
Adopt securesystemslib branch rename master-> main
 2023-03-02 11:27:04 +01:00
Lukas Puehringer
951ce045cd Adopt securesystemslib branch rename master-> main 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2023-03-02 09:35:14 +01:00
Jussi Kukkonen
dbce03c60d
Merge pull request #2313 from theupdateframework/dependabot/pip/coverage-7.2.1 
build(deps): bump coverage from 7.2.0 to 7.2.1
 2023-03-01 11:34:08 +02:00
Jussi Kukkonen
682824a0f9
Merge pull request #2314 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.5 
build(deps): bump github/codeql-action from 2.2.4 to 2.2.5
 2023-02-27 19:32:32 +02:00
dependabot[bot]
3fd56facb0
build(deps): bump github/codeql-action from 2.2.4 to 2.2.5 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.4 to 2.2.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](17573ee1cc...32dc499307)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-27 11:02:26 +00:00
dependabot[bot]
b240528686
build(deps): bump coverage from 7.2.0 to 7.2.1 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.2.0 to 7.2.1.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.2.0...7.2.1)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-27 10:58:27 +00:00
Jussi Kukkonen
8969c3d234
Merge pull request #2310 from jku/tweak-repository 
repository: Make snapshot/timetamp helpers non-abstract
 2023-02-27 10:56:47 +02:00
Jussi Kukkonen
c9c36934f2 repository: Make snapshot/timetamp helpers non-abstract 
targets_infos() and snapshot_info() are helpers used by snapshot and
timestamp. Some Repository implementations do not need
snapshot/timestamp (think e.g. a signing tool that never modifies online
roles), so the helpers should not be required.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-26 11:35:02 +02:00
Jussi Kukkonen
84b1d49c9d
Merge pull request #2306 from theupdateframework/dependabot/pip/coverage-7.2.0 
build(deps): bump coverage from 7.1.0 to 7.2.0
 2023-02-24 14:42:30 +02:00
dependabot[bot]
371db15f3d
build(deps): bump coverage from 7.1.0 to 7.2.0 
Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](https://github.com/nedbat/coveragepy/compare/7.1.0...7.2.0)

---
updated-dependencies:
- dependency-name: coverage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-23 10:16:55 +00:00
Jussi Kukkonen
0f7772aa54
Merge pull request #2305 from theupdateframework/dependabot/pip/mypy-1.0.1 
build(deps): bump mypy from 1.0.0 to 1.0.1
 2023-02-21 11:12:32 +02:00
dependabot[bot]
5c1928ba2f
build(deps): bump mypy from 1.0.0 to 1.0.1 
Bumps [mypy](https://github.com/python/mypy) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/python/mypy/releases)
- [Commits](https://github.com/python/mypy/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: mypy
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-20 10:57:49 +00:00
Jussi Kukkonen
9684fc6340 build: Upgrade hatchling to latest release 
This is not tracked by dependabot so needs manual updates.
Manually tested: no unexpected changes in the release artifacts.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-15 10:40:37 +02:00
Jussi Kukkonen
e7cc34a6a5
Merge pull request #2302 from theupdateframework/dependabot/pip/pylint-2.16.2 
build(deps): bump pylint from 2.16.1 to 2.16.2
 2023-02-15 10:25:43 +02:00
dependabot[bot]
b8149ade30
build(deps): bump pylint from 2.16.1 to 2.16.2 
Bumps [pylint](https://github.com/PyCQA/pylint) from 2.16.1 to 2.16.2.
- [Release notes](https://github.com/PyCQA/pylint/releases)
- [Commits](https://github.com/PyCQA/pylint/compare/v2.16.1...v2.16.2)

---
updated-dependencies:
- dependency-name: pylint
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-14 10:57:51 +00:00
Jussi Kukkonen
7bee53b9f0
Merge pull request #2301 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.4 
build(deps): bump github/codeql-action from 2.2.3 to 2.2.4
 2023-02-14 10:47:16 +02:00
dependabot[bot]
ed05a2c66c
build(deps): bump github/codeql-action from 2.2.3 to 2.2.4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.3 to 2.2.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8775e86802...17573ee1cc)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-13 11:05:51 +00:00
Jussi Kukkonen
bf7692072b
Merge pull request #2184 from theupdateframework/dependabot/pip/charset-normalizer-3.0.1 
build(deps): bump charset-normalizer from 2.1.1 to 3.0.1
 2023-02-10 15:11:58 +02:00
dependabot[bot]
a2c64acb7e
build(deps): bump charset-normalizer from 2.1.1 to 3.0.1 
Bumps [charset-normalizer](https://github.com/Ousret/charset_normalizer) from 2.1.1 to 3.0.1.
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/Ousret/charset_normalizer/blob/master/CHANGELOG.md)
- [Upgrade guide](https://github.com/Ousret/charset_normalizer/blob/master/UPGRADE.md)
- [Commits](https://github.com/Ousret/charset_normalizer/compare/2.1.1...3.0.1)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-10 13:07:59 +00:00
Jussi Kukkonen
26c131db79
Merge pull request #2300 from theupdateframework/dependabot/pip/requests-2.28.2 
build(deps): bump requests from 2.28.1 to 2.28.2
 2023-02-10 15:06:17 +02:00
dependabot[bot]
55374fdf8c
build(deps): bump requests from 2.28.1 to 2.28.2 
Bumps [requests](https://github.com/psf/requests) from 2.28.1 to 2.28.2.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.28.1...v2.28.2)

---
updated-dependencies:
- dependency-name: requests
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-10 10:57:08 +00:00
Jussi Kukkonen
c27af9a04d
Merge pull request #2298 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.3 
build(deps): bump github/codeql-action from 2.2.2 to 2.2.3
 2023-02-10 10:28:46 +02:00
Lukas Pühringer
2840f629b0
Merge pull request #2297 from jku/client-example-tweak 
examples: Tweak download dir creation
 2023-02-09 11:34:18 +01:00
dependabot[bot]
15c0b40dce
build(deps): bump github/codeql-action from 2.2.2 to 2.2.3 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](39d8d7e78f...8775e86802)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-09 10:03:50 +00:00
Jussi Kukkonen
b05129b244
Merge pull request #2294 from theupdateframework/dependabot/pip/mypy-1.0.0 
build(deps): bump mypy from 0.991 to 1.0.0
 2023-02-09 11:03:32 +02:00
Jussi Kukkonen
c4851b9a22
Merge pull request #2295 from theupdateframework/dependabot/github_actions/github/codeql-action-2.2.2 
build(deps): bump github/codeql-action from 2.2.1 to 2.2.2
 2023-02-09 11:03:16 +02:00
Jussi Kukkonen
1e1a504bb6 examples: Tweak download dir creation 
Create target download dir when it's needed, not during "tofu".

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
 2023-02-09 10:34:03 +02:00
Lukas Pühringer
dd855b1fca
Merge pull request #2241 from jku/repository-lib-uploader 
Examples: Add repository uploader
 2023-02-08 10:30:52 +01:00