aiongg fbada004d3 fix(sign): treat a changed trailer /Root after signing as not permitted ...

Revision checks compared objects only. A later revision that pointed the
trailer at another catalog already present in the signed file changed no
object, so the signature stayed valid while the reader showed a different
document. A /Root that differs from the signed revision's is now a
disallowed change to the document structure.

2026-10-22 12:13:16 -04:00

..

data

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

it

fix(sign): treat a changed trailer /Root after signing as not permitted

2026-10-22 12:13:16 -04:00