* [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0
@ 2026-10-16 21:12 Florian Larysch
2026-10-19 8:40 ` Thomas Petazzoni via buildroot
0 siblings, 1 reply; 2+ messages in thread
From: Florian Larysch @ 2026-10-16 21:12 UTC (permalink / raw)
To: buildroot; +Cc: Florian Larysch
Changelog:
https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v1.0.0/NEWS#L1-34
Note in particular that this package now requires Go version 1.27.
Signed-off-by: Florian Larysch <fl@n621.de>
---
While this nominally includes a security fix, I don't think this needs
to be backported to the stable branches because:
- The security fix only meaningfully affects log servers built on top
of this library (this is to prevent log poisoning), not the CLI tools
we build from it
- Those branches don't have Go v1.27 anyway
---
package/sigsum-go/sigsum-go.hash | 2 +-
package/sigsum-go/sigsum-go.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/sigsum-go/sigsum-go.hash b/package/sigsum-go/sigsum-go.hash
index 4e3cbeb2d2..70b0dfe67e 100644
--- a/package/sigsum-go/sigsum-go.hash
+++ b/package/sigsum-go/sigsum-go.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 01ff9b579012bd36715de96f5474c8bfe7778daf4cb04d3049004797fa6cb5e3 sigsum-go-v0.14.1-git4-go2.tar.gz
+sha256 048ec174f8fdaae3237472198ad0e4c9c81fac1d9b83a86290ab3a6c48ed8d31 sigsum-go-v1.0.0-git4-go2.tar.gz
sha256 6a1e3378dcd18baade08ac30ec4ba33b72d1b1697c00226ef85b9c9cefdb4e65 LICENSE
diff --git a/package/sigsum-go/sigsum-go.mk b/package/sigsum-go/sigsum-go.mk
index cd99e786b7..9f0176644d 100644
--- a/package/sigsum-go/sigsum-go.mk
+++ b/package/sigsum-go/sigsum-go.mk
@@ -4,7 +4,7 @@
#
################################################################################
-SIGSUM_GO_VERSION = v0.14.1
+SIGSUM_GO_VERSION = v1.0.0
SIGSUM_GO_SITE = https://git.glasklar.is/sigsum/core/sigsum-go
SIGSUM_GO_SITE_METHOD = git
SIGSUM_GO_LICENSE = BSD-2-Clause
--
2.56.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-10-19 8:40 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-10-16 21:12 [Buildroot] [PATCH 1/1] package/sigsum-go: bump version to v1.0.0 Florian Larysch
2026-10-19 8:40 ` Thomas Petazzoni via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox