Skip to content

Conversation

@mprimeaux
Copy link
Contributor

Added

  • risk: Added signature-verify make target to verify latest release's digital signatures for the current GOOS and GOARCH combination.
  • risk: Added signature-verify-all make target to verify latest release's digital signatures for all supported GOOS and GOARCH combinations.

Changed

  • debt: Upgraded dependencies to their latest stable versions.

Fixed

  • defect: Fixed README.md instructions for verifying module checksums.

Security

  • risk: Upgraded golang.org/x/crypto to v0.45.0 to address vulnerabilities.

@mprimeaux mprimeaux self-assigned this Nov 20, 2025
@mprimeaux mprimeaux added kind: risk Exposure to a technical risk. priority: high labels Nov 20, 2025
Copy link
Contributor Author

@mprimeaux mprimeaux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Completed self-review.

@mprimeaux mprimeaux merged commit b055cde into main Nov 20, 2025
1 check passed
@mprimeaux mprimeaux deleted the risk/crypto branch November 20, 2025 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind: risk Exposure to a technical risk. priority: high

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants