On Fri, Oct 25, 2024 at 5:57 AM Simon Josefsson <si...@josefsson.org> wrote:
> Status update:
>
> - I've canceled the TUF *-v2 NEW package, prefering your advice to
> upgrade the existing package from v0.
>
> - Upstream for rekor + sigstore-sigstore replied quickly that TUF v0 is
> deprecated for those projects, so we can patch it out.
>
> - I've uploaded sigstore-sigstore 1.8.10-2 to drop TUF.
>
> - I've uploaded rekor 1.3.6-2 to drop TUF.
>
> - I've uploaded golang-github-containers-image 5.32.2-5 to drop TUF.
>
> - Now nothing remains in Debian unstable that refers to TUF v0 any more,
> so I have uploaded TUF 2.0.2-1 to unstable (which will be needed by
> sigstore-go, and maybe other future packages).
>
> Let's hope this gently trickle down into testing so we are done with
> this migration... again, thanks for feedback and advice.
>
That's great, thanks for the update.
I'll keep an eye on potential package build failure and promise to assist
with issues!
-rt
--
regards,
Reinhard
