Skip to content

v3.6.2

Latest
Latest
Compare
Choose a tag to compare
@jku jku released this 14 Apr 07:42
· 10 commits to main since this release
v3.6.2
6937b05
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Fixed issue where a trust root with multiple rekor keys was not considered valid: Now any rekor key listed in the trust root is considered good to verify entries #1350

Changed

  • Upgraded python-tuf dependency to 6.0: Connections to TUF repository now use system certificates (instead of certifi) and have automatic retries
  • Updated the embedded TUF root to version 12

Full Changelog: v3.6.1...v3.6.2

Assets 4
Loading