From 13a8472f94ecd41a48b04c8ae750e32857872165 Mon Sep 17 00:00:00 2001 From: Steven Enamakel Date: Fri, 14 Aug 2026 09:33:32 +0300 Subject: [PATCH] chore(tinybus): advance to the attestation-capable bus Picks up confidential messages (#10), lazy modules (#12), confidential stream refusal (#13), and the pinned-release attestation (#15). #15 is the one that matters for this module. Attestation was previously written only from a `modules.toml` beside the artifact; a module loaded from a GitHub release extracts into a fresh temporary directory that has no such file, so it was never attested and every confidential call to it was refused. This module ships exactly that way, so a build against the old bus can never be sent key material however the host is configured. Co-authored-by: Medulla --- vendor/tinybus | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vendor/tinybus b/vendor/tinybus index 6ca0b0b..c35105f 160000 --- a/vendor/tinybus +++ b/vendor/tinybus @@ -1 +1 @@ -Subproject commit 6ca0b0b6739a49396e36be21d450f07cf85b9de2 +Subproject commit c35105f95b5efd49f63aec3f82f8bc2154694977