This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+3 more
Summary
AI summaryAdded POST /tuf/v1/metadata/delegated/rotate to rotate delegated targets metadata.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Added POST /tuf/v1/metadata/delegated/rotate to rotate delegated targets metadata. Added POST /tuf/v1/metadata/delegated/rotate to rotate delegated targets metadata. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Added metadata_delegated_rotate_test.go covering delegated rotation staging and related error paths. Added metadata_delegated_rotate_test.go covering delegated rotation staging and related error paths. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Updated Postman collection with requests for delegated metadata rotation. Updated Postman collection with requests for delegated metadata rotation. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Dependency | Medium |
Upgraded github.com/slack-go/slack from v0.14.0 to v0.23.1. Upgraded github.com/slack-go/slack from v0.14.0 to v0.23.1. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Refactor | Medium |
Refactored TUF metadata package by moving shared helpers and rotation orchestration into metadata_utils.go. Refactored TUF metadata package by moving shared helpers and rotation orchestration into metadata_utils.go. Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
Features
- Added
POST /tuf/v1/metadata/delegated/rotateto rotate delegated targets metadata.
Maintenance
- Upgraded
github.com/slack-go/slackfrom v0.14.0 to v0.23.1. - Refactored the TUF metadata package by moving shared helpers and rotation orchestration from
metadata.gointometadata_utils.go. - Added
metadata_delegated_rotate_test.gocovering delegated rotation staging and related error paths.
API Tooling
- Updated the Postman collection with requests for delegated metadata rotation.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About FaynoSync
Self-hosted Dynamic Update Server with statistics, supporting multiple updaters. Flexible features for seamless app updates and insights.
Related context
Beta — feedback welcome: [email protected]