v2.4.0

tuf-conformance GitHub action now publishes test results as a GitHub artifact: The tuf-conformance project can collect these results into a report: https://theupdateframework.github.io/tuf-conformance/

Note: Users are requested to schedule a weekly run of tuf-conformance to ensure that up-to-date results are available for the report. Thanks for the help!

Changes

• Publish the test results as GitHub artifact (#322)
• Add missing test for snapshot hashes (#306)
• Dependency updates

v2.3.0

Changelog

New tests

• test_faketime verifies client is compatible with test suites time faking approach
• test_static_repository[sigstore-root-signing]: Sigstore TUF repo added as static test
• test_artifact_cache: verifies that client caches artifacts. Artifact caching is not required by specification so clients should mark this one expected to fail if they do not support caching

Internal changes

• Fake time implementation was refactored
• Static test repositories can now set a fake time (to enable static repositories with short expiries)
• All test suite infrastructure code was moved to a sub directory: test code should be easier to browse now

v2.2.0

This release contains no new tests. Test results are not expected to change, except in one case: If test_root_rotation or
test_non_root_rotations are marked as "Expected To Fail" because of the non-default keytype, this expectation can now be removed: these tests now use the default keytype (ecdsa).

• local testing: "make dev" now checks for faketime binary to enable failing early (#240)
• Failure output was improved (#239)
• Tests now use default keytype whenever possible: In practice test_non_root_rotations() and test_root_rotation() switched from ed25519 to the default ecdsa key (#238)
• Expected failures are now documented better (#233)

v2.1.0

• 4 new tests
• Fixed keyid calculation issue (#219)
• Fixed workflow failure when project is not a python project (#217)
• Default keytype switched back to ecdsa (#211)

v2.0.0

What's Changed

• BREAKING: expected-failures input was removed from the GitHub action: Use a .xfail file instead as described in README
• Many tests have been added

Details in git log.

v1.1.0

• This release contains 34 new tests, most importantly a set of delegation & targetpath search tests
• Multiple bugs were also fixed, most importantly within "metafile hash" support

v1.0.0

🎉 tuf-conformance v1.0.0 🎉

This is the initial release of tuf-conformance, a TUF client conformance test suite implemented as a GitHub action. See README for details.