Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: theupdateframework/go-tuf
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.3.0
Choose a base ref
...
head repository: theupdateframework/go-tuf
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.3.1
Choose a head ref
  • 9 commits
  • 8 files changed
  • 4 contributors

Commits on Dec 15, 2025

  1. chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.45.0 (#702)

    Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.40.0 to 0.45.0.
    - [Commits](golang/crypto@v0.40.0...v0.45.0)
    
    ---
    updated-dependencies:
    - dependency-name: golang.org/x/crypto
      dependency-version: 0.45.0
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Dec 15, 2025
    Configuration menu
    Copy the full SHA
    98340af View commit details
    Browse the repository at this point in the history
  2. Resolve govulncheck errors by bumping go to 1.24.11 (#707)

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    rdimitrov authored Dec 15, 2025
    Configuration menu
    Copy the full SHA
    d52793f View commit details
    Browse the repository at this point in the history
  3. chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#704)

    Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.10.1 to 1.10.2.
    - [Release notes](https://github.com/spf13/cobra/releases)
    - [Commits](spf13/cobra@v1.10.1...v1.10.2)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/spf13/cobra
      dependency-version: 1.10.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Dec 15, 2025
    Configuration menu
    Copy the full SHA
    c180bdd View commit details
    Browse the repository at this point in the history
  4. modern go (1.20+) improvements (#705)

    * use Go 1.22's range over integers
    
    Signed-off-by: udf2457 <udf2457@users.noreply.github.com>
    
    * Replace append with slices.Concat for delegations
    
    Signed-off-by: udf2457 <udf2457@users.noreply.github.com>
    
    * Improve error handling for temporary file removal
    
    Join error messages when failing to remove temporary files.
    
    Signed-off-by: udf2457 <udf2457@users.noreply.github.com>
    
    ---------
    
    Signed-off-by: udf2457 <udf2457@users.noreply.github.com>
    Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
    udf2457 and rdimitrov authored Dec 15, 2025
    Configuration menu
    Copy the full SHA
    d8fbc2c View commit details
    Browse the repository at this point in the history

Commits on Dec 16, 2025

  1. chore(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3 (#…

    …706)
    
    * chore(deps): bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3
    
    Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.9.5 to 1.10.3.
    - [Release notes](https://github.com/sigstore/sigstore/releases)
    - [Commits](sigstore/sigstore@v1.9.5...v1.10.3)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/sigstore/sigstore
      dependency-version: 1.10.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    
    * Bump go to 1.25.5
    
    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    
    ---------
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
    dependabot[bot] and rdimitrov authored Dec 16, 2025
    Configuration menu
    Copy the full SHA
    880e8da View commit details
    Browse the repository at this point in the history

Commits on Jan 12, 2026

  1. chore(deps): bump github.com/secure-systems-lab/go-securesystemslib f…

    …rom 0.9.1 to 0.10.0 (#708)
    
    chore(deps): bump github.com/secure-systems-lab/go-securesystemslib
    
    Bumps [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) from 0.9.1 to 0.10.0.
    - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
    - [Commits](secure-systems-lab/go-securesystemslib@v0.9.1...v0.10.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/secure-systems-lab/go-securesystemslib
      dependency-version: 0.10.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 12, 2026
    Configuration menu
    Copy the full SHA
    d3cdc4b View commit details
    Browse the repository at this point in the history

Commits on Jan 19, 2026

  1. Perform type assertion (#710)

    * Perform type assertion
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    
    * Correct error type
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    
    ---------
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    kommendorkapten authored Jan 19, 2026
    Configuration menu
    Copy the full SHA
    73345ab View commit details
    Browse the repository at this point in the history
  2. Add tests for failing type assertions (#711)

    Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
    rdimitrov authored Jan 19, 2026
    Configuration menu
    Copy the full SHA
    876cf2a View commit details
    Browse the repository at this point in the history
  3. Verify threshold is valid (#712)

    * Verify threshold is valid
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    
    * Updated tests
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    
    * Updated tests
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    
    ---------
    
    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    kommendorkapten authored Jan 19, 2026
    Configuration menu
    Copy the full SHA
    b38d91f View commit details
    Browse the repository at this point in the history
Loading