From c05746b00230f589b61fff4d2423311ea07ab635 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 21:43:55 +0000 Subject: [PATCH 1/2] build(deps): bump theupdateframework/tuf-conformance Bumps the action-dependencies group with 1 update: [theupdateframework/tuf-conformance](https://github.com/theupdateframework/tuf-conformance). Updates `theupdateframework/tuf-conformance` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/theupdateframework/tuf-conformance/releases) - [Commits](https://github.com/theupdateframework/tuf-conformance/compare/500c525c9ce287a472fd334fe8d885cace667d32...1bc18916ee35f753b6eb8ee19dabb98449ca7326) --- updated-dependencies: - dependency-name: theupdateframework/tuf-conformance dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: action-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/conformance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml index 86b5febc38..48eba9a4d7 100644 --- a/.github/workflows/conformance.yml +++ b/.github/workflows/conformance.yml @@ -21,6 +21,6 @@ jobs: persist-credentials: false - name: Run test suite - uses: theupdateframework/tuf-conformance@500c525c9ce287a472fd334fe8d885cace667d32 # v2.4.0 + uses: theupdateframework/tuf-conformance@1bc18916ee35f753b6eb8ee19dabb98449ca7326 # v2.5.0 with: entrypoint: ".github/scripts/conformance-client.py" From be2740182e421b5a2813440b165acd22c9f34901 Mon Sep 17 00:00:00 2001 From: Jussi Kukkonen Date: Tue, 15 Sep 2026 10:11:03 +0300 Subject: [PATCH 2/2] conformance: Enable ML-DSA support in securesystemslib Signed-off-by: Jussi Kukkonen --- .github/scripts/conformance-client.py | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/.github/scripts/conformance-client.py b/.github/scripts/conformance-client.py index 1f80ad6ce7..eb785bca3a 100755 --- a/.github/scripts/conformance-client.py +++ b/.github/scripts/conformance-client.py @@ -10,8 +10,20 @@ import shutil import sys +from securesystemslib.signer import KEY_FOR_TYPE_AND_SCHEME, SSlibKey + from tuf.ngclient import Updater +# ML-DSA is not in securesystemslib default verifiers yet in v1.5.0: +# enable it in the conformance client +KEY_FOR_TYPE_AND_SCHEME.update( + { + ("ml-dsa", "ml-dsa-44/1"): SSlibKey, + ("ml-dsa", "ml-dsa-65/1"): SSlibKey, + ("ml-dsa", "ml-dsa-87/1"): SSlibKey, + } +) + def init(metadata_dir: str, trusted_root: str) -> None: """Initialize local trusted metadata"""