Sigstore Versions Save

Common go library shared across sigstore services and clients

v1.7.0

10 months ago

What's Changed

Update Azure Key Vault client by @malancas in https://github.com/sigstore/sigstore/pull/1170
kms: split KMS providers into separate Go modules by @imjasonh in https://github.com/sigstore/sigstore/pull/1115
have submodules specify real s/s releases by @imjasonh in https://github.com/sigstore/sigstore/pull/1178
Update go.mod and dependabot config by @cpanato in https://github.com/sigstore/sigstore/pull/1184
Add Cosign.ClaimedIdentity API by @saschagrunert in https://github.com/sigstore/sigstore/pull/1166
build(deps): bump github.com/aws/aws-sdk-go from 1.44.274 to 1.44.275 in /pkg/signature/kms/aws by @dependabot in https://github.com/sigstore/sigstore/pull/1199
Azure KMS: Infer hash function from key by @codysoyland in https://github.com/sigstore/sigstore/pull/1149
update golang.org/x/crypto to v0.10.0 and golang.org/x/oauth2 v0.9.0 by @cpanato in https://github.com/sigstore/sigstore/pull/1225

New Contributors

@saschagrunert made their first contribution in https://github.com/sigstore/sigstore/pull/1166

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.6.4...v1.7.0

v1.6.5

11 months ago

What's Changed

Update Azure Key Vault client by @malancas in https://github.com/sigstore/sigstore/pull/1170
kms: split KMS providers into separate Go modules by @imjasonh in https://github.com/sigstore/sigstore/pull/1115
have submodules specify real s/s releases by @imjasonh in https://github.com/sigstore/sigstore/pull/1178

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.6.4...v1.6.5

v1.6.4

11 months ago

What's Changed

break out e2e test images into Dockerfiles so dependabot will work by @bobcallaway in https://github.com/sigstore/sigstore/pull/1116
remove trailing slash in dependabot cfg by @bobcallaway in https://github.com/sigstore/sigstore/pull/1117
chore: remove leftover TUF code - policy.go and signer.go by @rdimitrov in https://github.com/sigstore/sigstore/pull/1128

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.6.3...v1.6.4

v1.6.3

1 year ago

What's Changed

Fix error condition for ssh by @haydentherapper in https://github.com/sigstore/sigstore/pull/1103
map GCS HTTP endpoints to new CDN for sigstore public-good production TUF root by @bobcallaway in https://github.com/sigstore/sigstore/pull/1108
build(deps): bump github.com/jellydator/ttlcache/v2 from 2.11.1 to 3.0.1 by @siretart in https://github.com/sigstore/sigstore/pull/1099

New Contributors

@rdimitrov made their first contribution in https://github.com/sigstore/sigstore/pull/1085
@clfs made their first contribution in https://github.com/sigstore/sigstore/pull/1064
@siretart made their first contribution in https://github.com/sigstore/sigstore/pull/1099

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.6.2...v1.6.3

v1.6.2

1 year ago

What's Changed

swap from GCS directly to use CDN by @bobcallaway in https://github.com/sigstore/sigstore/pull/1089

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.6.1...v1.6.2

v1.6.1

1 year ago

What's Changed

Add additional EC algorithms supported by Azure KMS by @malancas in https://github.com/sigstore/sigstore/pull/1054
bump versions of docker containers used in e2e tests by @bobcallaway in https://github.com/sigstore/sigstore/pull/1069
use provided context when signing and verifying via DSSE adapters by @bobcallaway in https://github.com/sigstore/sigstore/pull/1068

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.6.0...v1.6.1

v1.6.0

1 year ago

What's Changed

build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.4.0 to 0.5.0 by @dependabot in https://github.com/sigstore/sigstore/pull/973 Fixed dependency upgrade which had some breaking changes

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.5.2...v1.6.0

v1.5.2

1 year ago

What's Changed

Add oid-info.md + Rekor OID by @wlynch in https://github.com/sigstore/sigstore/pull/914
Migrate from gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v3 by @mtrmac in https://github.com/sigstore/sigstore/pull/969
update to use go1.20 by @cpanato in https://github.com/sigstore/sigstore/pull/962
Disable GHAs for codecov by @haydentherapper in https://github.com/sigstore/sigstore/pull/978

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.5.1...v1.5.2

v1.5.1

1 year ago

What's Changed

Add @znewman01 to reusable-release by @znewman01 in https://github.com/sigstore/sigstore/pull/878
Improve the "Sigstore Auth Successful" page by @julienv3 in https://github.com/sigstore/sigstore/pull/876
Add scorecard analysis workflow by @gabibguti in https://github.com/sigstore/sigstore/pull/919
Allow Initialize/NewFromEnv to reinitialize metadata if timestamp expired by @haydentherapper in https://github.com/sigstore/sigstore/pull/893

New Contributors

@julienv3 made their first contribution in https://github.com/sigstore/sigstore/pull/876
@gabibguti made their first contribution in https://github.com/sigstore/sigstore/pull/919

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.5.0...v1.5.1

v1.5.0

1 year ago

What's Changed

Move OtherName and SANS functions to s/s by @haydentherapper in https://github.com/sigstore/sigstore/pull/825
Update README to describe purpose of s/s by @znewman01 in https://github.com/sigstore/sigstore/pull/817
Update Azure KMS client to handle HSM backed keys by @malancas in https://github.com/sigstore/sigstore/pull/850

New Contributors

@malancas made their first contribution in https://github.com/sigstore/sigstore/pull/850

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.6...v1.5.0