Repository navigation
Conversation
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
2 times, most recently
from
August 25, 2026 08:45
013c4f3 to
cb4256a
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 25, 2026 09:53
cb4256a to
a9377a0
Compare
mosuem
marked this pull request as draft
August 25, 2026 10:49
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 25, 2026 15:41
a9377a0 to
563ea5c
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 25, 2026 16:11
563ea5c to
a09615a
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 26, 2026 11:06
a09615a to
272841a
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 27, 2026 08:08
272841a to
d293adb
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 27, 2026 08:17
d293adb to
f5e7af3
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 27, 2026 09:15
f5e7af3 to
30070e0
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 27, 2026 12:07
30070e0 to
c536061
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 27, 2026 12:22
c536061 to
303e5eb
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 27, 2026 12:37
303e5eb to
6fcf5fe
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
2 times, most recently
from
August 28, 2026 11:14
840696e to
e7ba6ef
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 28, 2026 12:13
e7ba6ef to
5aa9ebd
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 31, 2026 13:58
a37cda3 to
17376b0
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
2 times, most recently
from
August 31, 2026 14:16
5dad0d9 to
9097a02
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
August 31, 2026 15:07
9097a02 to
11c946d
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
October 7, 2026 13:29
11c946d to
f0b58c7
Compare
mosuem
changed the title
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
2 times, most recently
from
October 12, 2026 10:08
b975114 to
b5a892a
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
2 times, most recently
from
October 12, 2026 12:06
14ac953 to
20517ed
Compare
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
from
October 12, 2026 12:18
20517ed to
3a06c2b
Compare
sigurdm
force-pushed
the
refresh-sigstore-trusted-root
branch
from
October 12, 2026 14:02
3a06c2b to
478d1cd
Compare
sigurdm
removed this pull request from stack #4904
October 12, 2026 14:16
sigurdm
added this pull request to stack #4944
October 12, 2026 14:16
mosuem
force-pushed
the
refresh-sigstore-trusted-root
branch
2 times, most recently
from
October 12, 2026 14:50
56cfc6b to
d627b7c
Compare
…pgrade - Adds `sigstoreTufCacheDir` getter to `SystemCache`. - In `UpgradeCommand`, attempts to refresh the trusted root from Sigstore's TUF CDN before dependency resolution when online. - Caches verified `trusted_root.json` in `$PUB_CACHE/sigstore/` using TUF verification. - Falls back to package:sigstore embedded production root if cache is absent or offline.
sigurdm
force-pushed
the
refresh-sigstore-trusted-root
branch
from
October 20, 2026 09:39
d627b7c to
67e8924
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR was generated by an AI coding agent (Jetski) on behalf of @mosuem.
Replaces PR #4877 which GitHub automatically closed as merged when the branch temporarily aligned with base during rebasing.
sigstoreTufCacheDirgetter toSystemCachepointing to$PUB_CACHE/sigstore/tuf/.GetCommand(dart pub get), triggers a lazy TUF refresh (refreshTrustedRootIfNeeded) whenever$PUB_CACHE/sigstore/tuf/or$PUB_CACHE/sigstore/trusted_root.jsonis missing or expired (signed.expires).UpgradeCommand(dart pub upgrade), refreshes the trusted root from Sigstore's TUF CDN before dependency resolution when online (force: true).readMaxTufRootVersion): refuses to downgrade below the highest TUF root version already cached on disk in$PUB_CACHE/sigstore/tuf/and never silently falls back to the older bundledtrusted_root.jsononce TUF root state exists on disk.