The Sigsum team is happy to announce a new version of the Sigsum tools, v0.12.0. The source code for the release can be checked out using

git clone -b v0.12.0 https://git.glasklar.is/sigsum/core/sigsum-go.git

or installed using

go install sigsum.org/sigsum-go/cmd/...@v0.12.0

See the NEWS file https://git.glasklar.is/sigsum/core/sigsum-go/-/blob/v0.12.0/NEWS or the excerpt below for the changes since v0.11.2.

For further documentation and project information, see: https://www.sigsum.org/

/The Sigsum team

NEWS for Sigsum tools, v0.12.0

The main change in this release is support for named policies.

New features:

* Support for named policies. This means that the user can optionally specify a policy name (using the -P option or directly in submitter key file) instead of specifying a policy file.

* Support for builtin policies. In this version there are two builtin policies called "sigsum-test1-2025" and "sigsum-test2-2025".

* New tool "sigsum-policy" that can be used to list and show available named policies.

Documentation improvements:

* In doc/sigsum-proof.md, document the correct keyword "size", https://git.glasklar.is/sigsum/core/sigsum-go/-/issues/135, and clarify the description of how to compute the leaf hash.

Incompatible changes:

* Building now requires go version 1.23 or later.