5050570b23
Version bumped to 5.0.0 across include/zupt.h, all packaging recipes, man page, and docs. Audit fixes (pre-5.0.0 review): - src/zupt_format.c: overflow-safe bound in the solid-mode `test` path (off+sz could wrap and drive an OOB read in zupt_xxh64 on a crafted archive; the extract path was already hardened, the test path was not). - gui: run_async now marshals the completion callback onto the GUI thread with QueuedConnection (a bare functor connected DirectConnection and touched widgets off the worker thread); Extract auto-detect note survives the log clear via a new `info` param. - .github/workflows/ci.yml: trigger on `master` (was main/develop, so CI never ran); `make dist` tarball is vaptvupt-*.tar.gz not zupt-*; the ASAN PQ round-trip uses native --pq (was --pq-sdk, which fails on the source-only build and blocked the release job). Documentation: - New AUDIT.md (methodology, FIPS 203 conformance validation, findings, repro). - CHANGELOG 5.0.0 entry covers the FIPS 203 conformance fix + BREAKING note and the GUI/CLI/security/packaging work. - README "What's new in 5.0.0", download tables (incl. Windows/macOS/BSD + portable GUI), version-history row. - SECURITY.md + THREAT_MODEL.md: ML-KEM-768 documented as FIPS 203, validated byte-for-byte against OpenSSL 3.5. - Accuracy fixes: man page (--kdf default is PBKDF2 on source-only; codec 2.60.4), rpm %description, debian control/copyright, homebrew header (no vendored library on source-only builds). make check 16/16 (FIPS 203 conformance 3/3, all distro-safe checks).
16 lines
742 B
Text
16 lines
742 B
Text
<services>
|
|
<service name="tar_scm" mode="manual">
|
|
<param name="url">https://github.com/cristiancmoises/vaptvupt</param>
|
|
<param name="scm">git</param>
|
|
<param name="revision">v5.0.0</param>
|
|
<param name="versionformat">@PARENT_TAG@</param>
|
|
<param name="versionrewrite-pattern">v(.*)</param>
|
|
<param name="submodules">enable</param>
|
|
<param name="filename">vaptvupt</param>
|
|
</service>
|
|
<service name="recompress" mode="manual">
|
|
<param name="file">*.tar</param>
|
|
<param name="compression">gz</param>
|
|
</service>
|
|
<service name="set_version" mode="manual"/>
|
|
</services>
|