Repository navigation
Re-pin to macula-go v0.29.0, the release that carries A0 #21
Description
Purpose (reliability): a .NET application built on this SDK recovers from a sealed_required refusal by resealing to the key the refusal carries, instead of failing for 5 to 10 minutes on a stale keyless candidate.
macula-go v0.29.0 (9f84784a773914ccb419eb928f78ff7fe12599e4) is the release that carries release A0's reading side (macula-io/macula-go#43): a caller that a keyed provider refuses sealed_required reads seal.kem_key from the refusal's signed tbs, reseals to it, and is answered; a clear client stream that wrote before the refusal replays its writes in order under the sealed reopen. That repo proves it in CI on the released sha, and the release carries the run as sealed-interop-v0.29.0.log.
This SDK pins macula-go v0.27.0-rc.3 today, which predates A0, so it cannot inherit any of that.
Scope
- Pin
libmacula.versionfromv0.27.0-rc.3tov0.29.0/9f84784a773914ccb419eb928f78ff7fe12599e4. - Nothing else changes: no API, no docs beyond the pin line and any version string that names it, no version bump of this package, no tag.
- Run the full suite and this repo's sealed interop against the new pin.
Done when
- CI on the exact tip of the re-pin PR is green, with the interop passing in both profiles.
- The pin line names both the tag and the commit, as it does today.
Refs macula-io/macula-go#43.
Activity
rgfaber commentedon Oct 28, 2026
Landed.
libmacula.versionis nowv0.29.0, which resolves to9f84784a773914ccb419eb928f78ff7fe12599e4.798e778df8..265cd6ed81(PR pin macula-go v0.29.0, the release that carries A0 #22, MERGEABLE/CLEAN; base was the default-branch tip at the push).teston ubuntu-24.04, ubuntu-24.04-arm, macos-15 and windows-2025, docs snippets, structural floors and advisories, all green.Two corrections to this issue's own text, recorded rather than silently met:
v0.27.0, notv0.27.0-rc.3(the diff is-v0.27.0/+v0.29.0).libmacula.versionis read as a release tag byscripts/fetch_libmacula.sh,scripts/interop/*.shandtests/Macula.Tests/TestStations.cs(tr -d '[:space:]'straight into a GitHub release lookup). The tagv0.29.0is the pin here, and it points at the commit above.Also, as with ts and py: no sealed-interop job runs in this repo's CI, so A0 is not exercised end to end here;
tests/Macula.Tests/SealingTests.csruns against the pin, and the released behaviour is proven in macula-go'ssealed-interop-v0.29.0.log.Purpose met at the pin, with the two text corrections above.
Refs macula-io/macula-go#43.