1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
-*- org -*-
#+TITLE: sequoia-git NEWS – history of user-visible changes
#+STARTUP: content hidestars
* Changes in 0.4.1
** New functionality
- New command `sq-git version` displays `sq-git`'s version
information.
* Changes in 0.4.0
** New functionality
This release adds support for RFC 9580.
* Changes in 0.3.0
** New functionality
** Notable fixes
- `sq-git policy export` now requires either `--name` or `--all`.
** Notable changes
- The help output has been improved. Like `sq`, the global options
are only showed at the top-level. When showing a subcommand's
usage, any examples are also shown.
- The subcommand structure has been aligned with `sq`. In
particular, the help subcommand has been disabled for
non-top-level subcommands.
- Change `--policy-file` from a global to a local argument that is
only available for commands that actually use it.
* Changes in 0.2.0
** New functionality
- New command `sq-git policy export` exports the certificates
associated with an entity.
- New command `sq-git policy diff` compares two policies.
- New argument `sq-git policy describe --commit` describes the
policy from an arbitrary commit.
- Align the certificate store location handling with `sq`:
- New argument `--home` specifies the Sequoia home directory.
Alternatively, the `SEQUOIA_HOME` environment variable can be
used.
- Replace the `--no-cert-store` argument with `--cert-store none`.
- Use `SEQUOIA_CERT_STORE` instead of the `SQ_CERT_STORE`
environment variable to specify the certificate store's
location.
** Notable fixes
- When authenticating a commit, `sq-git log` uses the parent
commit's policy to authenticate the new commit. If a certificate
has expired, an entity has rotated their certificate's signing
subkey, etc., then the certificate in the parent commit may no
longer be able to verify new signatures. To prevent this
situation, `sq-git` now updates certificates present in the
parent commit's policy with non-revocation updates from the child
commit. Note: only the certificates already present in the
parent commit's policy are updated; certificates added to the
child commit's policy are ignored.
- Check that keyring updates are allowed according to the policy.
- When using a policy from a file (e.g., with `--policy-file`) and
the file did not exist, we would default to an empty policy
instead of emitting an error.
- The git key for the trust root has been renamed from
`sequoia.trust-root` to `sequoia.trustRoot` to match `git`'s
naming convention.
** Notable changes
- Updated the list of keyservers that `sq-git policy sync` uses by
default.
|
