Releases: sigstore/sigstore
Releases · sigstore/sigstore
v1.9.4
v1.9.3
What's Changed
- add proto hash algorithm to registry by @loosebazooka in #2048
New Contributors
- @loosebazooka made their first contribution in #2048
Contributors
loosebazooka
Assets 2
v1.9.2
Contributors
ret2libc and cmurphy
Assets 2
v1.9.1
What's Changed
Full Changelog: v1.9.0...v1.9.1
Contributors
ret2libc
Assets 2
v1.9.0
What's Changed
- Update KMS policy for new plugin interface by @haydentherapper in #1987
- Update TUF root to latest v12 root by @haydentherapper in #1988
- build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in #1994
- upgrade go-jose to v4 by @cpanato in #2000
- pkg/signature: expose Algorithm Details information by @ret2libc in #2001
Full Changelog: v1.8.15...v1.9.0
Contributors
ret2libc, cpanato, and 2 other contributors
Assets 2
v1.8.15
What's Changed
- pkg/signature: fix RSA PSS 3072 key size in algorithm registry in #1981
- check concrete type for non-nil to stop fuzzing crash in #1983
- fix: cliplugin: return ErrorProviderNotFound when calling Get with a path in #1982
Full Changelog: v1.8.14...v1.8.15
v1.8.14
What's Changed
This is the same content as v1.8.13, with a CI/CD fix.
- add initial plugin support for KMSs in #1901
- cliplugin: add mocks and serialization testing in #1918
- kms plugin: add SignMessage in #1919
- cliplugin: add VerifySignature in #1944
- cliplugin: add windows ci testing in #1951
- Create Algorithm Registry API in #1601
- cliplugin: add SupportedAlgorithms(), PublicKey(), and CryptoSigner(). in #1946
- cliplugin: use caller contexts in #1947
- cliplugin: semver, add tests for hash func encoding in #1948
- cliplugin: lint fixes in #1958
- cliplugin: convert module to package only in #1956
v1.8.13
What's Changed
- add initial plugin support for KMSs in #1901
- cliplugin: add mocks and serialization testing in #1918
- kms plugin: add SignMessage in #1919
- cliplugin: add VerifySignature in #1944
- cliplugin: add windows ci testing in #1951
- Create Algorithm Registry API in #1601
- cliplugin: add SupportedAlgorithms(), PublicKey(), and CryptoSigner(). in #1946
- cliplugin: use caller contexts in #1947
- cliplugin: semver, add tests for hash func encoding in #1948
- cliplugin: lint fixes in #1958
- cliplugin: convert module to package only in #1956
Full Changelog: v1.8.12...v1.8.13
v1.8.12
What's Changed
- build(deps): Bump google.golang.org/api from 0.210.0 to 0.212.0 in /pkg/signature/kms/gcp by @dependabot in #1912
- build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 in /pkg/signature/kms/gcp by @dependabot in #1911
- build(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 in the all group by @dependabot in #1909
- build(deps): Bump google.golang.org/api from 0.212.0 to 0.214.0 in /pkg/signature/kms/gcp by @dependabot in #1917
- build(deps): Bump hashicorp/vault from 1.18.2 to 1.18.3 in /test/e2e in the all group by @dependabot in #1915
- build(deps): Bump the gomod group across 2 directories with 5 updates by @dependabot in #1916
- build(deps): Bump cloud.google.com/go/kms from 1.20.3 to 1.20.4 in /pkg/signature/kms/gcp in the gomod group across 1 directory by @dependabot in #1920
- build(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 by @dependabot in #1924
- build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @dependabot in #1921
- build(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 by @dependabot in #1922
- build(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @dependabot in #1923
- build(deps): Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in /test/fuzz by @dependabot in #1908
- build(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8.0 to 0.9.0 by @dependabot in #1910
- build(deps): Bump the tools group across 1 directory with 2 updates by @dependabot in #1913
- cleanup ci by @cpanato in #1927
Full Changelog: v1.8.11...v1.8.12
Contributors
cpanato and dependabot
Assets 2
v1.8.11
Contributors
dnwe and malancas