v0.6.0
NOTE: please see upgrade instructions below.
Changes
- Signing events now happen in GitHub pull requests
- Signer now probes for PKCS11 module: configuring that is no longer required, as long as as the module is in one of the expected locations.
Upgrade instructions
- As usual we recommend copying your workflows from https://github.com/theupdateframework/tuf-on-ci-template/.
- signing event action no longer needs
issues: write
permission but instead requirespull-requests: write
- signing event action no longer needs
- Custom token users need to create a new token with an additional permission
Pull requests: write
- Settings->Actions->General->Allow GitHub Actions to create and approve pull requests needs to be enabled in repository settings
(not required if a custom token is used)