Securesystemslib API is now considered stable. The core functionality is
provided in the Signer interface and the half a dozen integrated Signer
implementations that can be found in the signer module. Smaller helper
modules dsse, formats, hash and storage are also part of the API.
Several legacy modules have been removed.
Added
Signer: add public_key attribute to interface (#756)
VaultSigner: Signer implementation for HashiCorp Vault (#800)
CryptoSigner: support ecdsa keytype that is no longer in spec (#711)
We’ve just uploaded mypy 1.10 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.
Support TypeIs (PEP 742)
Mypy now supports TypeIs (PEP 742), which allows
functions to narrow the type of a value, similar to isinstance(). Unlike TypeGuard,
TypeIs can narrow in both the if and else branches of an if statement:
Securesystemslib API is now considered stable. The core functionality is
provided in the Signer interface and the half a dozen integrated Signer
implementations that can be found in the signer module. Smaller helper
modules dsse, formats, hash and storage are also part of the API.
Several legacy modules have been removed.
Added
Signer: add public_key attribute to interface (#756)
VaultSigner: Signer implementation for HashiCorp Vault (#800)
CryptoSigner: support ecdsa keytype that is no longer in spec (#711)
We’ve just uploaded mypy 1.10 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.
Support TypeIs (PEP 742)
Mypy now supports TypeIs (PEP 742), which allows
functions to narrow the type of a value, similar to isinstance(). Unlike TypeGuard,
TypeIs can narrow in both the if and else branches of an if statement:
Updates the requirements on securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore], tuf, mypy, ruff, grpcio-status, protobuf, securesystemslib, sigstore-rekor-types and securesystemslib[awskms,azurekms,gcpkms,hsm,sigstore] to permit the latest version. Updates
securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore]
to 1.0.0Release notes
Sourced from securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore]'s releases.
Changelog
Sourced from securesystemslib[awskms,azurekms,gcpkms,pynacl,sigstore]'s changelog.
... (truncated)
Commits
1092ac6
Merge pull request #807 from lukpueh/release-1.0.0fe34bac
Update v1.0.0 entry in CHANGELOGc682259
Release 1.0.05789578
Merge pull request #800 from lukpueh/vault-signeracae70a
Add VaultSigner and tests66a56cb
Merge pull request #804 from secure-systems-lab/dependabot/pip/dependencies-9...c48a451
Merge pull request #803 from secure-systems-lab/dependabot/pip/test-and-lint-...557378e
Merge pull request #806 from lukpueh/rm-stray-globals6975b81
Remove 3 stray global key type constants402c898
Merge pull request #802 from lukpueh/rm-stability-disclaimersUpdates
tuf
from 3.1.1 to 4.0.0Release notes
Sourced from tuf's releases.
Changelog
Sourced from tuf's changelog.
Commits
2d6fc74
Merge pull request #2601 from jku/release-v4928702a
Release v4.0.0892c789
Merge pull request #2600 from lukpueh/set-max-sslib-versionbc3ebd8
Constrain securesystemslib dependency to <0.32.05947bd0
Merge pull request #2594 from theupdateframework/dependabot/pip/build-and-rel...afa4619
Merge pull request #2596 from theupdateframework/dependabot/github_actions/ac...7c5cae3
Merge pull request #2595 from theupdateframework/dependabot/pip/test-and-lint...ad2c98a
Merge pull request #2593 from theupdateframework/dependabot/pip/dependencies-...6cd2d22
build(deps): bump the dependencies group with 1 update9f4906b
build(deps): bump the test-and-lint-dependencies group with 1 updateUpdates
mypy
from 1.9.0 to 1.10.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
3faf0fc
Remove +dev for version for release 1.10a5998d2
Update CHANGELOG.md (#17159)62ea5b0
Various updates to changelog for 1.10 (#17158)2f0864c
Update CHANGELOG.md with draft for release 1.10 (#17150)e1443bb
fix: incorrect returned type of access descriptors on unions of types (#16604)5161ac2
Sync typeshed (#17124)e2fc1f2
Fix crash when expanding invalid Unpack in aCallable
alias (#17028)3ff6e47
Docs: docstrings in checker.py, ast_helpers.py (#16908)732d98e
Fix string formatting for string enums (#16555)8019010
Narrow individual items when matching a tuple to a sequence pattern (#16905)Updates
ruff
from 0.3.5 to 0.4.3Release notes
Sourced from ruff's releases.
... (truncated)
Changelog
Sourced from ruff's changelog.
... (truncated)
Commits
1e91a09
Bump version to v0.4.3 (#11274)d0f51c6
Remove remainingruff_shrinking
references (#11272)8dd3811
Use function range forreimplemented-operator
diagnostics (#11271)894cd13
[refurb
] Ignore methods inreimplemented-operator
(FURB118
) (#11270)f3284fd
Remove unnecessary check for RUF020 enabled (#11268)82dd5e6
[red-knot] resolve class members (#11256)6a1e555
Upgrade to Rust 1.78 (#11260)349a4cf
Remove trailing reference section (#11257)dfbeca5
ruff server
no longer hangs after shutdown (#11222)9e69cd6
Rephrase rationale forpytest-incorrect-pytest-import
(#11255)Updates
grpcio-status
from 1.62.2 to 1.63.0Updates
protobuf
from 4.25.3 to 5.26.1Commits
2434ef2
Updating version.json and repo version numbers to: 26.149253b1
Merge pull request #16308 from protocolbuffers/cp-26x-39bf69ec
Fix validateFeatures to be called after resolved features are actually set to...b752bc2
Merge pull request #16307 from protocolbuffers/cp-26x-2f7d2326
Merge pull request #16309 from protocolbuffers/cp-26x-42e51ff6
Cherry-pick required label handling in JRuby field descriptor from https://gi...a2f5303
Update cmake stalenes6a177d2
Merge branch '26.x' into cp-26x-42d3d8ba
Expand cpp_features_proto_srcs visibilitye1092ee
Merge pull request #16294 from protocolbuffers/cp-26xUpdates
securesystemslib
from 0.31.0 to 1.0.0Release notes
Sourced from securesystemslib's releases.
Changelog
Sourced from securesystemslib's changelog.
Commits
1092ac6
Merge pull request #807 from lukpueh/release-1.0.0fe34bac
Update v1.0.0 entry in CHANGELOGc682259
Release 1.0.05789578
Merge pull request #800 from lukpueh/vault-signeracae70a
Add VaultSigner and tests66a56cb
Merge pull request #804 from secure-systems-lab/dependabot/pip/dependencies-9...c48a451
Merge pull request #803 from secure-systems-lab/dependabot/pip/test-and-lint-...557378e
Merge pull request #806 from lukpueh/rm-stray-globals6975b81
Remove 3 stray global key type constants402c898
Merge pull request #802 from lukpueh/rm-stability-disclaimersUpdates
sigstore-rekor-types
from 0.0.11 to 0.0.13Release notes
Sourced from sigstore-rekor-types's releases.
Commits
cb51dc2
rekor_types: 0.0.130bbbec8
bump rekor to 1.3.6 (#26)7637117
build(deps): bump actions/deploy-pages from 4.0.4 to 4.0.5 (#37)86ca37e
build(deps-dev): update ruff requirement from <0.3.4 to <0.3.5 (#38)a1fa8f3
build(deps-dev): update ruff requirement from <0.3.3 to <0.3.4 (#36)734dd39
build(deps-dev): update ruff requirement from <0.3.1 to <0.3.3 (#34)dcd6305
build(deps): bump pypa/gh-action-pypi-publish from 1.8.12 to 1.8.14 (#35)b5391b1
build(deps-dev): update ruff requirement from <0.2.3 to <0.3.1 (#32)8d5a1c2
build(deps): bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.12 (#33)2ef01cc
build(deps-dev): update ruff requirement from <0.2.2 to <0.2.3 (#31)Updates
tuf
to 4.0.0Release notes
Sourced from tuf's releases.
Changelog
Sourced from tuf's changelog.
Commits
2d6fc74
Merge pull request #2601 from jku/release-v4928702a
Release v4.0.0892c789
Merge pull request #2600 from lukpueh/set-max-sslib-versionbc3ebd8
Constrain securesystemslib dependency to <0.32.05947bd0
Merge pull request #2594 from theupdateframework/dependabot/pip/build-and-rel...afa4619
Merge pull request #2596 from theupdateframework/dependabot/github_actions/ac...7c5cae3
Merge pull request #2595 from theupdateframework/dependabot/pip/test-and-lint...ad2c98a
Merge pull request #2593 from theupdateframework/dependabot/pip/dependencies-...6cd2d22
build(deps): bump the dependencies group with 1 update9f4906b
build(deps): bump the test-and-lint-dependencies group with 1 updateUpdates
mypy
from 1.9.0 to 1.10.0Changelog
Sourced from mypy's changelog.
... (truncated)
Commits
3faf0fc
Remove +dev for version for release 1.10a5998d2
Update CHANGELOG.md (#17159)62ea5b0
Various updates to changelog for 1.10 (#17158)2f0864c
Update CHANGELOG.md with draft for release 1.10 (#17150)e1443bb
fix: incorrect returned type of access descriptors on unions of types (#16604)5161ac2
Sync typeshed (#17124)e2fc1f2
Fix crash when expanding invalid Unpack in aCallable
alias (#17028)3ff6e47
Docs: docstrings in checker.py, ast_helpers.py (#16908)732d98e
Fix string formatting for string enums (#16555)8019010
Narrow individual items when matching a tuple to a sequence pattern (#16905)Updates
ruff
from 0.3.5 to 0.4.3Release notes
Sourced from ruff's releases.
Looks like these dependencies are updatable in another way, so this is no longer needed.