Skip to content

Commit d7e6423

Browse files
committed
Mention remove GPG signature support
Signed-off-by: hi-rustin <[email protected]>
1 parent 1845eb8 commit d7e6423

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ The headlines for this release are:
1111
be proxied to the rust-analyzer component for the current toolchain.
1212
2. Bump the [clap] dependency from 2.x to 3.x. It's a major version bump, so there are some
1313
help text changes, but the command line interface is unchanged.
14+
3. Remove GPG signature support, which will result in the removal of the `rustup show keys` command.
15+
This change is necessary because the use of SHA-1 for signature verification is [no longer secure], as it has been found to be vulnerable to attacks. However, rest assured that rustup remains safe to use, as we still have checksum verification in place. We plan to reintroduce signature support as soon as we have a more secure solution.
1416

1517
In addition to a lot of work on the codebase itself, due to the length of time since the last
1618
release this one has a record number of contributors and we thank you all for your efforts and time.
@@ -32,6 +34,8 @@ please review the repository.
3234
### Changed
3335

3436
- Bump the `clap` dependency from 2.x to 3.x [pr#3064]
37+
- Remove GPG signature support [pr#3277]
38+
- Don't add toolchain bin to PATH on Windows [pr#3178]
3539
- Remove use of hard links to symlinks on macOS [pr#3137]
3640
- Avoid deduplicate PATH entries added during build [pr#2848]
3741
- The toolchain name cannot be left blank [pr#2993]
@@ -44,6 +48,7 @@ please review the repository.
4448

4549
[rust-analyzer]: https://github.com/rust-lang/rust-analyzer
4650
[proxy]: https://rust-lang.github.io/rustup/concepts/proxies.html
51+
[no longer secure]: https://sequoia-pgp.org/blog/2023/02/01/202302-happy-sha1-day
4752
[clap]: https://crates.io/crates/clap
4853
[pr#3022]: https://github.com/rust-lang/rustup/pull/3022
4954
[pr#3047]: https://github.com/rust-lang/rustup/pull/3047
@@ -53,6 +58,8 @@ please review the repository.
5358
[pr#3089]: https://github.com/rust-lang/rustup/pull/3089
5459
[pr#3209]: https://github.com/rust-lang/rustup/pull/3209
5560
[pr#3064]: https://github.com/rust-lang/rustup/pull/3064
61+
[pr#3277]: https://github.com/rust-lang/rustup/pull/3277
62+
[pr#3178]: https://github.com/rust-lang/rustup/pull/3178
5663
[pr#3137]: https://github.com/rust-lang/rustup/pull/3137
5764
[pr#2848]: https://github.com/rust-lang/rustup/pull/2848
5865
[pr#2993]: https://github.com/rust-lang/rustup/pull/2993
@@ -94,6 +101,7 @@ Thanks go to:
94101
- Daniel Brotsky (brotskydotcom)
95102
- zohnannor (zohnannor)
96103
- Joshua Nelson (jyn514)
104+
- Prikshit Gautam (gautamprikshit1)
97105
- Renovate Bot (renovate-bot)
98106

99107
## [1.25.2] - 2023-02-01

0 commit comments

Comments
 (0)