Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

May 2026Clear ×Project: The Update Framework (TUF)Clear ×

A release focused on a security fix and API evolution. It tightens the Updater() contract and begins preparation for removal of an existing module.

Action needed (1)

Check if affected (1)

breakingThe Updater() bootstrap argument, now required
Applies if you use Updater().
In ngclient, Updater() now requires the named bootstrap argument. The previous default behavior can be reproduced with bootstrap=None.

Plan ahead (1)

deprecatedPreparation for removal of securesystemslib.hash
Applies if you use securesystemslib.hash.
The release prepares for removal of securesystemslib.hash.