Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0
@ 2026-10-16 21:12 Florian Larysch
  2026-10-19  8:40 ` Thomas Petazzoni via buildroot
  0 siblings, 1 reply; 2+ messages in thread
From: Florian Larysch @ 2026-10-16 21:12 UTC (permalink / raw)
  To: buildroot; +Cc: Florian Larysch

Changelog:
https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v1.0.0/NEWS#L1-34

Note in particular that this package now requires Go version 1.27.

Signed-off-by: Florian Larysch <fl@n621.de>
---
While this nominally includes a security fix, I don't think this needs
to be backported to the stable branches because:

 - The security fix only meaningfully affects log servers built on top
   of this library (this is to prevent log poisoning), not the CLI tools
   we build from it
 - Those branches don't have Go v1.27 anyway
---
 package/sigsum-go/sigsum-go.hash | 2 +-
 package/sigsum-go/sigsum-go.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/sigsum-go/sigsum-go.hash b/package/sigsum-go/sigsum-go.hash
index 4e3cbeb2d2..70b0dfe67e 100644
--- a/package/sigsum-go/sigsum-go.hash
+++ b/package/sigsum-go/sigsum-go.hash
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  01ff9b579012bd36715de96f5474c8bfe7778daf4cb04d3049004797fa6cb5e3  sigsum-go-v0.14.1-git4-go2.tar.gz
+sha256  048ec174f8fdaae3237472198ad0e4c9c81fac1d9b83a86290ab3a6c48ed8d31  sigsum-go-v1.0.0-git4-go2.tar.gz
 sha256  6a1e3378dcd18baade08ac30ec4ba33b72d1b1697c00226ef85b9c9cefdb4e65  LICENSE
diff --git a/package/sigsum-go/sigsum-go.mk b/package/sigsum-go/sigsum-go.mk
index cd99e786b7..9f0176644d 100644
--- a/package/sigsum-go/sigsum-go.mk
+++ b/package/sigsum-go/sigsum-go.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SIGSUM_GO_VERSION = v0.14.1
+SIGSUM_GO_VERSION = v1.0.0
 SIGSUM_GO_SITE = https://git.glasklar.is/sigsum/core/sigsum-go
 SIGSUM_GO_SITE_METHOD = git
 SIGSUM_GO_LICENSE = BSD-2-Clause
-- 
2.56.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0
  2026-10-16 21:12 [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0 Florian Larysch
@ 2026-10-19  8:40 ` Thomas Petazzoni via buildroot
  0 siblings, 0 replies; 2+ messages in thread
From: Thomas Petazzoni via buildroot @ 2026-10-19  8:40 UTC (permalink / raw)
  To: Florian Larysch; +Cc: buildroot

On Fri, Oct 16, 2026 at 11:12:09PM +0200, Florian Larysch wrote:
> Changelog:
> https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v1.0.0/NEWS#L1-34
> 
> Note in particular that this package now requires Go version 1.27.
> 
> Signed-off-by: Florian Larysch <fl@n621.de>

Applied to master, thanks!

Best regards,

Thomas Petazzoni
-- 
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-10-19  8:40 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-16 21:12 [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0 Florian Larysch
2026-10-19  8:40 ` Thomas Petazzoni via buildroot

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox