All of lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0
@ 2026-10-16 21:12 Florian Larysch
  2026-10-19  8:40 ` Thomas Petazzoni via buildroot
  0 siblings, 1 reply; 2+ messages in thread
From: Florian Larysch @ 2026-10-16 21:12 UTC (permalink / raw)
  To: buildroot; +Cc: Florian Larysch

Changelog:
https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v1.0.0/NEWS#L1-34

Note in particular that this package now requires Go version 1.27.

Signed-off-by: Florian Larysch <fl@n621.de>
---
While this nominally includes a security fix, I don't think this needs
to be backported to the stable branches because:

 - The security fix only meaningfully affects log servers built on top
   of this library (this is to prevent log poisoning), not the CLI tools
   we build from it
 - Those branches don't have Go v1.27 anyway
---
 package/sigsum-go/sigsum-go.hash | 2 +-
 package/sigsum-go/sigsum-go.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/sigsum-go/sigsum-go.hash b/package/sigsum-go/sigsum-go.hash
index 4e3cbeb2d2..70b0dfe67e 100644
--- a/package/sigsum-go/sigsum-go.hash
+++ b/package/sigsum-go/sigsum-go.hash
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  01ff9b579012bd36715de96f5474c8bfe7778daf4cb04d3049004797fa6cb5e3  sigsum-go-v0.14.1-git4-go2.tar.gz
+sha256  048ec174f8fdaae3237472198ad0e4c9c81fac1d9b83a86290ab3a6c48ed8d31  sigsum-go-v1.0.0-git4-go2.tar.gz
 sha256  6a1e3378dcd18baade08ac30ec4ba33b72d1b1697c00226ef85b9c9cefdb4e65  LICENSE
diff --git a/package/sigsum-go/sigsum-go.mk b/package/sigsum-go/sigsum-go.mk
index cd99e786b7..9f0176644d 100644
--- a/package/sigsum-go/sigsum-go.mk
+++ b/package/sigsum-go/sigsum-go.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SIGSUM_GO_VERSION = v0.14.1
+SIGSUM_GO_VERSION = v1.0.0
 SIGSUM_GO_SITE = https://git.glasklar.is/sigsum/core/sigsum-go
 SIGSUM_GO_SITE_METHOD = git
 SIGSUM_GO_LICENSE = BSD-2-Clause
-- 
2.56.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0
  2026-10-16 21:12 [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0 Florian Larysch
@ 2026-10-19  8:40 ` Thomas Petazzoni via buildroot
  0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni via buildroot @ 2026-10-19  8:40 UTC (permalink / raw)
  To: Florian Larysch; +Cc: buildroot

On Fri, Oct 16, 2026 at 11:12:09PM +0200, Florian Larysch wrote:
> Changelog:
> https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v1.0.0/NEWS#L1-34
> 
> Note in particular that this package now requires Go version 1.27.
> 
> Signed-off-by: Florian Larysch <fl@n621.de>

Applied to master, thanks!

Best regards,

Thomas Petazzoni
-- 
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-10-19  8:40 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-16 21:12 [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0 Florian Larysch
2026-10-19  8:40 ` Thomas Petazzoni via buildroot

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.