python-tuf/docs/1.0.0-ANNOUNCEMENT.md
Lukas Puehringer d3ef746f7c doc: fix broken links in 1.0.0-ANNOUNCEMENT.md
The recent move of 1.0.0-ANNOUNCEMENT.md (#1732) broke the
relative links in the document.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
2021-12-22 12:28:25 +01:00

2.2 KiB
Raw Blame History

Announcing TUF 1.0.0

In the past year we have made an effort to revise, redesign and rewrite this python-tuf reference implementation, and we are very excited to announce a stable 1.0.0 release scheduled for January 2022. The release will include:

  • a modern low-level metadata API
  • a fully specification-compliant updater client, serving as a more robust and yet more flexible stand-in replacement for the legacy client updater

As discussed in ADR 2, this release will not include any legacy code, as its maintenance has become infeasible for the python-tuf team. The pre-1.0.0 deprecation strategy from ADR 2 applies as follows:

Bugs reported with tuf versions prior to 1.0.0 will likely not be addressed directly by tufs maintainers. Pull Requests to fix bugs in the last release prior to 1.0.0 will be considered, and merged (subject to normal review processes). Note that there may be delays due to the lack of developer resources for reviewing such pull requests.

For the reasons outlined in ADR 10, this release will not yet include a new repository tool. However, the new metadata API makes it easy to replicate the desired functionality tailored to the specific needs of any given repository (see Migration for details).

Migration

Given the clean cut with the legacy reference implementation, we provide the following migration support: