The ST team is happy to announce a new collection release: st-1.0.0. The tar archive and a corresponding signature can be downloaded at
https://dist.system-transparency.org/
Authoritative ST release signing keys are published at
https://www.system-transparency.org/keys/
The signature can be verified using the command
ssh-keygen -Y verify -n file \ -f allowed-ST-release-signers \ -I releases@system-transparency.org \ -s st-1.0.0.tar.gz.sig < st-1.0.0.tar.gz
The NEWS file in the tar archive summarizes changes since the previous release. An excerpt from the latest NEWS-file entry is included below for convenience.
The tar archive also includes documentation that gets rendered at
https://docs.system-transparency.org/st-1.0.0/
If you find any bugs, please file issues in the affected component repositories or report them on the System Transparency discuss list.
https://lists.system-transparency.org/mailman3/postorius/lists/st-discuss.li...
Cheers, The ST team
NEWS for st-1.0.0
This is the first stable collection release of System Transparency. By "stable", we mean that subsequent releases within the same major version will be backwards compatible. The ST version 1 collection is supported for at least one year, until 2025-06-01.
For information on how releases are made in System Transparency, see https://git.glasklar.is/system-transparency/project/docs/-/tree/main/content....
The included components and their versions are specified in the collection's manifest file. Documentation for the collection can be generated from the included components, see docs. Documentation is also published at https://docs.system-transparency.org/st-1.0.0/.
Compared to previous System Transparency releases that were more experimental, this collection release includes components with a few new features, improved backwards compatibility with systems provisioned using older tools and conventions, and much improved documentation. Some obsolete features with no known usage have been deleted. See the NEWS files of each component for details.