From cf1d9c069f6c7665f2c72de698c3989c77e17285 Mon Sep 17 00:00:00 2001
From: Pat Zielinski <git@patzielinski.com>
Date: Thu, 22 Jan 2026 13:58:25 -0500
Subject: [PATCH 1/2] ci: Bump Ubuntu and Python versions

Signed-off-by: Pat Zielinski <git@patzielinski.com>
---
 .github/workflows/draft.yml   | 2 +-
 .github/workflows/pr.yml      | 4 ++--
 .github/workflows/release.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/draft.yml b/.github/workflows/draft.yml
index f00ada8..ff9ef55 100644
--- a/.github/workflows/draft.yml
+++ b/.github/workflows/draft.yml
@@ -12,7 +12,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
       with:
-        python-version: '3.10'
+        python-version: '3.14'
         cache: pip
 
     - name: Clone
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index ad58505..2d396f5 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -7,7 +7,7 @@ on:
 jobs:
   main:
     name: Sanity checks before a PR merge
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac
         with:
@@ -16,7 +16,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
         with:
-          python-version: '3.10'
+          python-version: '3.14'
           cache: pip
 
       - name: Ensure changes build
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 97e8937..fc097d9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,7 +32,7 @@ jobs:
       if: steps.getver.outputs.spec_version != steps.prevver.outputs.prev_version
       uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
       with:
-        python-version: '3.10'
+        python-version: '3.14'
         cache: 'pip'
 
     - name: Make release

From f4910dac403593c32ad78bf4bb882f3a3523aeb9 Mon Sep 17 00:00:00 2001
From: Pat Zielinski <git@patzielinski.com>
Date: Thu, 22 Jan 2026 14:57:38 -0500
Subject: [PATCH 2/2] spec: Fix open dfn tags

Signed-off-by: Pat Zielinski <git@patzielinski.com>
---
 tuf-spec.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tuf-spec.md b/tuf-spec.md
index 1eda0da..f58e9a9 100644
--- a/tuf-spec.md
+++ b/tuf-spec.md
@@ -3,7 +3,7 @@ Title: The Update Framework Specification
 Shortname: TUF
 Status: LS
 Abstract: A framework for securing software update systems.
-Date: 2023-04-14
+Date: 2026-01-22
 Editor: Justin Cappos, NYU
 Editor: Trishank Karthik Kuppusamy, Datadog
 Editor: Joshua Lock, Verizon
@@ -997,7 +997,7 @@ as is described for the <a>root.json</a> file.
     as key and <a>HASH</a> as defined for <a>METAFILES</a>.  For example:
     `{ "sha256": HASH, ... }`.
 
-  : <dfn>CUSTOM</a>
+  : <dfn>CUSTOM</dfn>
   ::
     An object.  If defined, the elements and values of the <a>CUSTOM</a> object
     will be made available to the client application.  The format of the
@@ -1265,7 +1265,7 @@ as is described for the <a>root.json</a> file.
     A string giving the location from which to retrieve metadata files.
     <a for="mirrors">METAPATH</a> will be a relative path to <a>URLBASE</a>.
 
-  : <dfn>TARGETSPATH</a>
+  : <dfn>TARGETSPATH</dfn>
   ::
     A string giving the location from which to retrieve target files.
     <a>TARGETSPATH</a> will be a relative path to <a>URLBASE</a>.