Sigsum-announce

Download

sigsum-announce@lists.sigsum.org

June 2026

1 participants
1 discussions

ANNOUNCE: sigsum-go v0.14.1
by Niels Möller 09 Jun '26

09 Jun '26

The Sigsum team is happy to announce a new version of the Sigsum tools, v0.14.1. The source code for the release can be checked out using git clone -b v0.14.1 https://git.glasklar.is/sigsum/core/sigsum-go.git or installed using go install sigsum.org/sigsum-go/cmd/...@v0.14.1 The v0.14.1 tag is signed using the key ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ/xZ+v5e435605MS4BYE89PLcgk8DT5PvuoM2oASnuk This is the same release key also published for nisse(a)glasklarteknik.se at https://www.system-transparency.org/keys/allowed-ST-release-signers. See the NEWS file https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v0.14.1/NEWS or the excerpt below for the changes since v0.13.1. For further documentation and project information, see: https://www.sigsum.org/ /The Sigsum team NEWS for Sigsum tools, v0.14.1 This release fixes bugs and adds a few new library features. Incompatible changes: * Building now requires go version 1.25 or later. * In Sigsum policy files, the special name "none" can no longer be used as a group member. See https://git.glasklar.is/sigsum/core/sigsum-go/-/work_items/170. Bug fixes: * sigsum-monitor: Fix handling of DeadlineExceeded errors, see https://git.glasklar.is/sigsum/core/sigsum-go/-/work_items/179. * Fix panic when parsing certain invalid public key files. See https://git.glasklar.is/sigsum/core/sigsum-go/-/merge_requests/301. * Fix broken handling of i/o errors when reading policy files and for sigsum-submit --leaf-hash. New features: * pkg/key: New functions ParsePublicKeys and ParsePublicKeysWithPolicy. * pkg/policy: New method Policy.ProcessQuorum, for depth-first processing of the groups and witnesses defining the quorum.

1 0