Merge branch 'master' into JustinCappos-threshold-must-be-positive

Signed-off-by: Justin Cappos <justincappos@gmail.com>

Author: JustinCappos

.github/workflows/draft.yml

@@ -12,7 +12,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
       with:
-        python-version: '3.10'
+        python-version: '3.14'
         cache: pip
 
     - name: Clone

.github/workflows/pr.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   main:
     name: Sanity checks before a PR merge
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
@@ -16,7 +16,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
         with:
-          python-version: '3.10'
+          python-version: '3.14'
           cache: pip
 
       - name: Ensure changes build

.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
       if: steps.getver.outputs.spec_version != steps.prevver.outputs.prev_version
       uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
       with:
-        python-version: '3.10'
+        python-version: '3.14'
         cache: 'pip'
 
     - name: Make release

tuf-spec.md

@@ -3,7 +3,7 @@ Title: The Update Framework Specification
 Shortname: TUF
 Status: LS
 Abstract: A framework for securing software update systems.
-Date: 2026-01-19
+Date: 2026-01-22
 Editor: Justin Cappos, NYU
 Editor: Trishank Karthik Kuppusamy, Apple
 Editor: Joshua Lock, Verizon
@@ -996,7 +996,7 @@ as is described for the <a>root.json</a> file.
     as key and <a>HASH</a> as defined for <a>METAFILES</a>.  For example:
     `{ "sha256": HASH, ... }`.
 
-  : <dfn>CUSTOM</a>
+  : <dfn>CUSTOM</dfn>
   ::
     An object.  If defined, the elements and values of the <a>CUSTOM</a> object
     will be made available to the client application.  The format of the
@@ -1271,7 +1271,7 @@ as is described for the <a>root.json</a> file.
     A string giving the location from which to retrieve metadata files.
     <a for="mirrors">METAPATH</a> will be a relative path to <a>URLBASE</a>.
 
-  : <dfn>TARGETSPATH</a>
+  : <dfn>TARGETSPATH</dfn>
   ::
     A string giving the location from which to retrieve target files.
     <a>TARGETSPATH</a> will be a relative path to <a>URLBASE</a>.