Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to tuf 4.0 (or cap securesystemslib version) #133

Closed
jku opened this issue Apr 4, 2024 · 2 comments · Fixed by #135
Closed

Upgrade to tuf 4.0 (or cap securesystemslib version) #133

jku opened this issue Apr 4, 2024 · 2 comments · Fixed by #135
Assignees
Labels
maintenance This is a maintenance task

Comments

@jku
Copy link

jku commented Apr 4, 2024

Hi,

I suggest updating your tuf dependency to 4.x:

  • python-tuf did not cap the securesystemslib dependency before this release (sorry about that)
  • we know there will be incompatible API changes in securesystemslib in future as we get closer to securesystemslib 1.0

So ideally python-tuf users make releases that require (or at least allow) tuf 4.x before securesystemslib makes their next release (secure-systems-lab/securesystemslib#767). If you don't want to bump tuf version you could alternatively cap securesystemslib to < 0.32 yourself: this would be the minimal change that should prevent future breakage.

@jku jku changed the title Upgrade to tuf 4.0 Upgrade to tuf 4.0 (or cap securesystemslib version) Apr 4, 2024
@dennisvang
Copy link
Owner

@jku Thanks for the warning. I'll have a look at it a.s.a.p.

@dennisvang dennisvang added the maintenance This is a maintenance task label Apr 4, 2024
@dennisvang
Copy link
Owner

@jku Our latest v0.8.0 release now includes the upgraded tuf 4.0 dependency.

Sorry this took so long, I haven't had much time lately.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
maintenance This is a maintenance task
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants