[gnutls-help] guile-gnutls-5.0.0 released [stable]

[Simon Josefsson]

This is to announce guile-gnutls-5.0.0, a stable release.

Guile-GnuTLS provides Guile bindings for the GnuTLS library.

There have been 41 commits by 4 people in the 35 weeks since 4.0.1.

See the NEWS below for a brief summary.

Thanks to everyone who has contributed!
The following people contributed changes to this release:

  Dariqq (4)
  Helmut Grohne (1)
  Simon Josefsson (35)
  Vivien Kraus (1)

Happy Hacking,
Simon
==================================================================

Here is the GNU guile-gnutls home page:
  https://codeberg.org/guile-gnutls/guile-gnutls/

The release is available here:
  https://codeberg.org/guile-gnutls/guile-gnutls/releases/tag/v5.0.0

Here are the compressed sources and a GPG detached signature:
  https://ftp.gnu.org/gnu/gnutls/guile-gnutls-5.0.0.tar.gz
  https://ftp.gnu.org/gnu/gnutls/guile-gnutls-5.0.0.tar.gz.sig

Here is minimal source-only "git archive" sources:
  https://ftp.gnu.org/gnu/gnutls/guile-gnutls-v5.0.0-src.tar.gz
  https://ftp.gnu.org/gnu/gnutls/guile-gnutls-v5.0.0-src.tar.gz.sig

Here are Sigsum Proofs:
  https://ftp.gnu.org/gnu/gnutls/guile-gnutls-5.0.0.tar.gz.proof
  https://ftp.gnu.org/gnu/gnutls/guile-gnutls-v5.0.0-src.tar.gz.proof

Use a mirror for higher download bandwidth:
  https://www.gnu.org/order/ftp.html

Here are the SHA1 and SHA256 checksums:

  d11213282d49147ab15f930e5a0a33c934eb9e2d  guile-gnutls-5.0.0.tar.gz
  oCCUCphahPqvQjuKN7tj5pczYEUPaO9TcTz7AxVAw3M=  guile-gnutls-5.0.0.tar.gz

  76f2dffe735899efadfcf772df2ccae306126f55  guile-gnutls-v5.0.0-src.tar.gz
  hWspJe4AjI5uKuobHnv/iyFY/1NWGgqh8olSBJpmSDg=  guile-gnutls-v5.0.0-src.tar.gz

Verify the base64 SHA256 checksum with cksum -a sha256 --check
from coreutils-9.2 or OpenBSD's cksum since 2007.

Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify guile-gnutls-5.0.0.tar.gz.sig

The signature should match the fingerprint of the following key:

  pub   ed25519 2019-03-20 [SC]
        B1D2 BD13 75BE CB78 4CF4  F8C4 D73C F638 C53C 06BE
  uid   Simon Josefsson <simon at josefsson.org>

If that command fails because you don't have the required public key,
or that public key has expired, try the following commands to retrieve
or refresh it, and then rerun the 'gpg --verify' command.

  gpg --locate-external-key simon at josefsson.org

  gpg --recv-keys 51722B08FE4745A2

As a last resort to find the key, you can try the official GNU
keyring:

  wget -q https://ftp.gnu.org/gnu/gnu-keyring.gpg
  gpg --keyring gnu-keyring.gpg --verify guile-gnutls-5.0.0.tar.gz.sig

This release is based on the guile-gnutls git repository, available as

  git clone https://codeberg.org/guile-gnutls/guile-gnutls.git

with commit 110dc4e52728ff782ba5647a690fc7e5f5bd23f5 tagged as v5.0.0.

For a summary of changes and contributors, see:

  https://codeberg.org/guile-gnutls/guile-gnutls/compare/v4.0.1...v5.0.0

or run this command from a git-cloned guile-gnutls directory:

  git shortlog v4.0.1..v5.0.0

This release was bootstrapped with the following tools:
  Autoconf 2.71
  Automake 1.16.5
  Makeinfo 7.1.1
  Libtoolize 2.4.7
  Gnulib 2025-02-01 c89cd2fbd3b9f3d7c5a146247256599714c91ec7

NEWS

* Noteworthy changes in release 5.0.0 (2025-07-12) [stable]

** Guile-GnuTLS moved to https://codeberg.org/guile-gnutls/guile-gnutls
GitLab is still used for CI/CD: https://gitlab.com/gsasl/guile-gnutls

** Fix GnuTLS 3.8.9+ compilation due to new MLDSA/MLKEM1024 support.

** Fix GnuTLS 3.8.7+ compilation due to new MLKEM768 support.

** EdDSA curve manipulation should use #f for the y parameter of the public-key.

** The release tarball is now reproducible.

** We publish a minimal source-only tarball generated by 'git archive'.

** The release tarball uses tar --format=ustar.

** SRP is now disable by default, similar to GnuTLS.

** Update gnulib files and various build/maintenance fixes.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1251 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnutls-help/attachments/20250713/090f6d0a/attachment.sig>