Skip to content

[release/10.0] Support detached signature verification for tars and zips#16737

Merged
ellahathaway merged 7 commits intorelease/10.0from
backport/pr-16574-to-release/10.0
Apr 22, 2026
Merged

[release/10.0] Support detached signature verification for tars and zips#16737
ellahathaway merged 7 commits intorelease/10.0from
backport/pr-16574-to-release/10.0

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Backport of #16574 to release/10.0

/cc @ellahathaway

ellahathaway and others added 6 commits April 21, 2026 16:41
…verifiers

The parameter name 'supportsDetachedSignature' implied capability support,
but it actually controls whether verifiers look for a detached signature
(.sig file) instead of a non-detached signature. Rename to
'signatureIsDetached' to better reflect the semantics.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Michael Simons <msimons@microsoft.com>
Move detached signature concept out of PgpVerifier and into the
subclasses that use it (TarVerifier, ZipVerifier). Make
GetSignatureDocumentAndSignableContent abstract again, and provide
reusable helpers (VerifyDetachedSignature, GetDetachedSignatureDocument
AndSignableContent) for subclasses with detached signatures.
@ellahathaway ellahathaway enabled auto-merge (squash) April 21, 2026 16:44
@ellahathaway ellahathaway merged commit 58713cb into release/10.0 Apr 22, 2026
9 checks passed
@ellahathaway ellahathaway deleted the backport/pr-16574-to-release/10.0 branch April 22, 2026 14:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants