The Update Framework (TUF)
v7.0.1SecuritySep 1, 2026
A maintenance release with correctness fixes in hashing, dependency resolution, and the ngclient. It contains no stated operator configuration or security changes.
All 5 other recorded changesfixes 5
fixes (5)
- * Fix hash method on Role and DelegatedRole (#2973)
- * Fix incorrect dependency range for urllib3 (#2990)
- * ngclient: Fix connection exception handling (#2964, #2993)
- * ngclient: Fix incorrect delegation in diamond-shape case (#2978)
- * ngclient: Avoid use of symlink on Windows: it requires privileges (#2981)
Add The Update Framework (TUF) to your stack
A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.