chore: bump version to 0.5.0 #33
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
New features in this release: - SLSA-aware policy engine for supply chain verification - Example policies (development, production, slsa-l3) - Loom integration documentation - Trusted publishing workflow for crates.io - Security fix for OOM vulnerability in certificate chain parsing
The ATECC608 secure element code was half-implemented with critical issues: - Used P-256 ECDSA but main codebase uses Ed25519 (incompatible) - sign() returned mock data (all zeros) - get_public_key() always returned an error Removed: - src/lib/src/platform/secure_element/atecc608.rs (563 lines) - atecc608 feature flag Kept: - Well-designed SecureKeyProvider trait hierarchy - I2C bus abstraction traits - KeySlot and SlotConfig types - Placeholder stubs for future hardware support (SE050, TPM2, etc.) The platform module now clearly documents what's working (software keys) vs what's planned (hardware backends).
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Version bump to 0.5.0 for the new policy engine release.
New features in this release
Test plan
cargo checkpasses