From 6754f5aa8f6e9268d622584125d5829986220f46 Mon Sep 17 00:00:00 2001 From: Fredrik Skogman Date: Wed, 22 Nov 2023 11:05:36 +0100 Subject: [PATCH 1/2] Added changelog for v0.3.0 release --- docs/CHANGELOG.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 144cad5f..22ab733b 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -1,5 +1,22 @@ # Changelog +## v0.3.0 + +NOTE: This is a major API break, users should **not** just upgrade the action versions but +should replace their `publish.yml` workflow with the new workflow from tuf-on-ci-template. + +Release contains: +* New KMS support: AWS KMS (#120) +* Bugix: When publish after online signing, in very rare conditions + the wrong version could be published due to a race condition (#127) + +Upgrade instructions from v0.2.0: +* When the Dependabot PR is created, update the PR to include the + updated `publish.yml` from `tuf-on-ci-template` repository. Then the + PR can be approved and merged without breaking any workflows. + +Thanks to Jonny Stoten, a new contributor + ## v0.2.0 * GitHub actions now output step summaries: these are visible in workflow From 7ee6ee7f98a7768ab0814a2651894498422a7f11 Mon Sep 17 00:00:00 2001 From: Fredrik Skogman Date: Wed, 22 Nov 2023 11:08:59 +0100 Subject: [PATCH 2/2] Updated version for published packages --- repo/pyproject.toml | 2 +- signer/pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/repo/pyproject.toml b/repo/pyproject.toml index 23b96d9f..bd4e684e 100644 --- a/repo/pyproject.toml +++ b/repo/pyproject.toml @@ -8,7 +8,7 @@ allow-direct-references = true [project] name = "tuf-on-ci" -version = "0.2.0" +version = "0.3.0" description = "TUF-on-CI repository tools, intended to be executed on a CI system" readme = "README.md" dependencies = [ diff --git a/signer/pyproject.toml b/signer/pyproject.toml index b3141715..bdecf2be 100644 --- a/signer/pyproject.toml +++ b/signer/pyproject.toml @@ -8,7 +8,7 @@ allow-direct-references = true [project] name = "tuf-on-ci-sign" -version = "0.2.0" +version = "0.3.0" description = "Signing tools for TUF-on-CI" readme = "README.md" dependencies = [