v0.9.0

0.9.0 (2026-05-15)

This is the very first official release of httpsig. Recent changes included in this release compared to the previous nonofficial versions can be found below.

A huge thank you to @mariusor for the updates!

⚠ BREAKING CHANGES

• have nonce checker make decisions on absence of nonces in signature (#107)

Bug Fixes

• have nonce checker make decisions on absence of nonces in signature (#107) by @mariusor (25f319d)
• Minor typos in the errors for missing created and updated parameters (#113) by @mariusor (a1ae2ef)
• NonceChecker adapter function fixed (#118) (aeed528)
• Recompute Content-Digest header value when signing content-digest component (#116) (ebd49e0)
• Rejecting duplicate component identifier as required by the RFC (#119) (f7873db)
• Rejecting malformed ECDSA signatures (#114) (44be3a6)

Documentation

• Document Content-Digest body handling and resource limits (#117) (762a89c)