Skip to content

Release v0.40

Compare
Choose a tag to compare
@github-actions github-actions released this 22 Dec 15:29
v0.40
Features:

* Support TUF signature re-signing for active waves on TUF key rotations.
  This feature actually consists of several related improvements:

  - Allow rotating offline TUF targets signing key when there are active waves.
  - Allow rotating online TUF signing keys when there are active waves.
  - Allow changing TUF targets signature threshold when there are active waves.
  - Allow staring a new wave when there are any of the above TUF root updates in progress.
  - Automatically re-sign wave targets when one of the offline TUF keys (used to sign them) is being rotated.
    This improvement covers the `fioctl keys tuf updates rotate-offline-key` command.
  - Automatically re-sign wave targets when one of the online TUF keys is being rotated.
    This improvement covers the `fioctl keys tuf updates rotate-online-key` command.
  - Allow manually (re-)signing wave targets during TUF root updates.
    This improvement covers the `fioctl keys tuf updates sign-prod-targets` command.

* Support filtering waves by status and/or tag in `fioctl waves list`.

Fixes:

* Show user who created the config in `fioctl [device] config show`.
* Properly clean up signing key owners in TUF root when the key is deleted or rotated out.

Changes:

* Support loading oauth-url from the config file.
* Support absolute executable path for docker-credential-helper.