python-tuf

python-tuf copied to clipboard

update container annotations

1

Once #2721 is merged, we could require python 3.8 and use the nicer annotations and features. Known improvements: * annotations for standard collections: `dict` instead of `typing.Dict` * dict unions...

jku

Python upgrade: Stop testing 3.8, start testing 3.13

2

We don't strictly require 3.9 yet but likely should soon as the container annotation features are nice. I'll file an issue on those annotations

jku

build(deps): bump the test-and-lint-dependencies group with 2 updates

3

Bumps the test-and-lint-dependencies group with 2 updates: [coverage](https://github.com/nedbat/coveragepy) and [mypy](https://github.com/python/mypy). Updates `coverage` from 7.6.1 to 7.6.3 Changelog Sourced from coverage's changelog. Version 7.6.3 — 2024-10-13 Fix: nested context managers could...

dependabot[bot]

Investigate/test fetcher retries

1

I'm expecting urllib3 to retry 3 times on common http failures when using urllib3fetcher There's an interesting failure in [sigstore-probers](https://github.com/sigstore/sigstore-probers/actions/runs/15604452814/job/43950565778) where this does not seem to happen: ``` Traceback (most...

jku

ngclient: Be better with concurrent instances

3

Users may run multiple updaters at the same time -- it's not useful but it can happen with longer dependency chains like https://github.com/sigstore/sigstore-python/issues/1403: model-signing uses sigstore-python which uses python-tuf... Currently...

jku