Skip to content

Constrain securesystemslib dependency to <0.32.0#2600

Merged
lukpueh merged 1 commit intotheupdateframework:developfrom
lukpueh:set-max-sslib-version
Apr 3, 2024
Merged

Constrain securesystemslib dependency to <0.32.0#2600
lukpueh merged 1 commit intotheupdateframework:developfrom
lukpueh:set-max-sslib-version

Conversation

@lukpueh
Copy link
Member

@lukpueh lukpueh commented Apr 3, 2024

There are several breaking changes coming up in securesystemslib on its way to 1.0.

To not disrupt tuf users this patch constrains securesystemslib to not update the current minor version..

There are several breaking changes coming up in securesystemslib on its
way to 1.0.

To not disrupt tuf users this patch constrains securesystemslib to not
update the current minor version..

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
@lukpueh lukpueh requested a review from jku April 3, 2024 15:53
@coveralls
Copy link

Pull Request Test Coverage Report for Build 8541737112

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 97.636%

Totals Coverage Status
Change from base Build 8520162567: 0.0%
Covered Lines: 1465
Relevant Lines: 1490

💛 - Coveralls

lukpueh pushed a commit to lukpueh/in-toto that referenced this pull request Apr 3, 2024
There are several breaking changes coming up in securesystemslib on its
way to 1.0.

To not disrupt in-toto users this patch pins securesystemslib to its
current minor version.

This is similar to what python-tuf and tuf-on-ci do:
- theupdateframework/python-tuf#2600
- theupdateframework/tuf-on-ci#243

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
@lukpueh
Copy link
Member Author

lukpueh commented Apr 3, 2024

with-sslib-main tests fail for unrelated reasons and will be fixed in #2599

Copy link
Member

@jku jku left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This makes sense

@lukpueh lukpueh merged commit 892c789 into theupdateframework:develop Apr 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants