Sigstore Versions Save

Common go library shared across sigstore services and clients

v1.4.6

1 year ago

What's Changed

manually upgrade deps by @dekkagaijin in https://github.com/sigstore/sigstore/pull/808
update import due to deprecation by @cpanato in https://github.com/sigstore/sigstore/pull/822
several dependencies updates

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.5...v1.4.6

v1.4.5

1 year ago

What's Changed

fulcioroots: Allow appended Fulcio roots to an existing CertPool. by @wlynch in https://github.com/sigstore/sigstore/pull/749

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.4...v1.4.5

v1.4.4

1 year ago

NOTE: Fixed TUF root initialization with GCS bucket. This affects anyone who uses their own TUF root hosted on GCS, and specifies the GCS bucket only by name and not by HTTP path.

What's Changed

Fix remoteFromMirror with GCS bucket by @haydentherapper in https://github.com/sigstore/sigstore/pull/734

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.3...v1.4.4

v1.4.3

1 year ago

What's Changed

Add support for file based remote stores for airgap mode. by @vaikas in https://github.com/sigstore/sigstore/pull/715
Handle invalid elliptic curve gracefully when verifying signature by @haydentherapper in https://github.com/sigstore/sigstore/pull/728
tuf: fix on-disk cache when writing targets in subfolders by @asraa in https://github.com/sigstore/sigstore/pull/729

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.2...v1.4.3

v1.4.2

1 year ago

What's Changed

Package descriptions for all TODOs by @haydentherapper in https://github.com/sigstore/sigstore/pull/685
add package docs, fix deprecated linter by @bobcallaway in https://github.com/sigstore/sigstore/pull/673
oauthflow/interactive: Fix oob flow by @wlynch in https://github.com/sigstore/sigstore/pull/698
Handle certificates that end in newline by @haydentherapper in https://github.com/sigstore/sigstore/pull/699
deps: bump go-tuf to main to avoid excessive logging by @asraa in https://github.com/sigstore/sigstore/pull/701

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.1...v1.4.2

v1.4.1

1 year ago

What's Changed

Fix: support certificate pem type by @k4leung4 in https://github.com/sigstore/sigstore/pull/633
Revert "Fix: support certificate pem type (#633)" by @k4leung4 in https://github.com/sigstore/sigstore/pull/634
Add support for parsing PKCS#1 priv/pub keys, SEC1 priv keys by @haydentherapper in https://github.com/sigstore/sigstore/pull/638
Fix : Failing Fuzz tests for FuzzRSAPSSSignerVerfier by @naveensrinivasan in https://github.com/sigstore/sigstore/pull/664
bump: update go-tuf to pull in compatibility fix by @asraa in https://github.com/sigstore/sigstore/pull/672
fix lints and remove ioutils deprecations by @cpanato in https://github.com/sigstore/sigstore/pull/681
test: Add a test in the TUF client pkg for the hex to ECDSA key format migration by @asraa in https://github.com/sigstore/sigstore/pull/676

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.4.0...v1.4.1

v1.4.0

1 year ago

What's Changed

Bump github/codeql-action from 2.1.16 to 2.1.17 by @dependabot in https://github.com/sigstore/sigstore/pull/582
Bump github.com/aws/aws-sdk-go from 1.44.63 to 1.44.64 by @dependabot in https://github.com/sigstore/sigstore/pull/583
Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 by @dependabot in https://github.com/sigstore/sigstore/pull/584
ci: enable gofumpt with extra by @Dentrax in https://github.com/sigstore/sigstore/pull/278
Bump github.com/aws/aws-sdk-go from 1.44.64 to 1.44.65 by @dependabot in https://github.com/sigstore/sigstore/pull/586
Bump google.golang.org/api from 0.89.0 to 0.90.0 by @dependabot in https://github.com/sigstore/sigstore/pull/585
add pkce values to device code flow by @bobcallaway in https://github.com/sigstore/sigstore/pull/516
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.18.0 to 1.18.1 by @dependabot in https://github.com/sigstore/sigstore/pull/591
Bump github.com/aws/aws-sdk-go from 1.44.65 to 1.44.67 by @dependabot in https://github.com/sigstore/sigstore/pull/588
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.14 to 1.15.15 by @dependabot in https://github.com/sigstore/sigstore/pull/590
Bump github.com/aws/aws-sdk-go from 1.44.67 to 1.44.68 by @dependabot in https://github.com/sigstore/sigstore/pull/593
Bump github/codeql-action from 2.1.17 to 2.1.18 by @dependabot in https://github.com/sigstore/sigstore/pull/595
Bump google.golang.org/api from 0.90.0 to 0.91.0 by @dependabot in https://github.com/sigstore/sigstore/pull/596
Bump github.com/go-rod/rod from 0.108.1 to 0.108.2 by @dependabot in https://github.com/sigstore/sigstore/pull/597
Bump github.com/aws/aws-sdk-go from 1.44.68 to 1.44.70 by @dependabot in https://github.com/sigstore/sigstore/pull/598
Bump actions/cache from 3.0.5 to 3.0.6 by @dependabot in https://github.com/sigstore/sigstore/pull/599
Fix issue #600. When using StaticTokenGetter do not make network calls. by @vaikas in https://github.com/sigstore/sigstore/pull/601
Bump github.com/aws/aws-sdk-go from 1.44.70 to 1.44.71 by @dependabot in https://github.com/sigstore/sigstore/pull/603
Bump github.com/aws/aws-sdk-go-v2 from 1.16.8 to 1.16.9 by @dependabot in https://github.com/sigstore/sigstore/pull/604
Use well-known OIDC config for device endpoints by @bobcallaway in https://github.com/sigstore/sigstore/pull/602
Migrate to go 1.18 for Fuzzing by @naveensrinivasan in https://github.com/sigstore/sigstore/pull/592
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.18.1 to 1.18.2 by @dependabot in https://github.com/sigstore/sigstore/pull/606
Bump github.com/aws/aws-sdk-go from 1.44.71 to 1.44.72 by @dependabot in https://github.com/sigstore/sigstore/pull/605
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.15 to 1.15.17 by @dependabot in https://github.com/sigstore/sigstore/pull/608
Bump github.com/aws/aws-sdk-go from 1.44.72 to 1.44.73 by @dependabot in https://github.com/sigstore/sigstore/pull/610
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.18.2 to 1.18.4 by @dependabot in https://github.com/sigstore/sigstore/pull/616
Bump github.com/go-rod/rod from 0.108.2 to 0.109.0 by @dependabot in https://github.com/sigstore/sigstore/pull/618
Bump google.golang.org/api from 0.91.0 to 0.92.0 by @dependabot in https://github.com/sigstore/sigstore/pull/613
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.17 to 1.16.1 by @dependabot in https://github.com/sigstore/sigstore/pull/620
Bump actions/cache from 3.0.6 to 3.0.7 by @dependabot in https://github.com/sigstore/sigstore/pull/611
Bump github.com/aws/aws-sdk-go from 1.44.73 to 1.44.76 by @dependabot in https://github.com/sigstore/sigstore/pull/621
Bump github.com/aws/aws-sdk-go-v2/config from 1.16.1 to 1.17.0 by @dependabot in https://github.com/sigstore/sigstore/pull/625
Bump github.com/go-rod/rod from 0.109.0 to 0.109.1 by @dependabot in https://github.com/sigstore/sigstore/pull/626
Add a more friendly error in pubkey failure by @rikatz in https://github.com/sigstore/sigstore/pull/623
remove old swagger commands from Makefile and fix typo by @bobcallaway in https://github.com/sigstore/sigstore/pull/624

New Contributors

@vaikas made their first contribution in https://github.com/sigstore/sigstore/pull/601
@rikatz made their first contribution in https://github.com/sigstore/sigstore/pull/623

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.3.1...v1.4.0

v1.3.1

1 year ago

What's Changed

oauthflow: Fix recursive call for GetOutput. by @wlynch in https://github.com/sigstore/sigstore/pull/527
Bump github.com/aws/aws-sdk-go from 1.44.41 to 1.44.42 by @dependabot in https://github.com/sigstore/sigstore/pull/531
Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 by @dependabot in https://github.com/sigstore/sigstore/pull/530
Bump github.com/go-rod/rod from 0.107.2 to 0.107.3 by @dependabot in https://github.com/sigstore/sigstore/pull/532
Bump github.com/aws/aws-sdk-go from 1.44.42 to 1.44.43 by @dependabot in https://github.com/sigstore/sigstore/pull/533
Bump github.com/aws/aws-sdk-go from 1.44.43 to 1.44.44 by @dependabot in https://github.com/sigstore/sigstore/pull/534
Bump google.golang.org/api from 0.85.0 to 0.86.0 by @dependabot in https://github.com/sigstore/sigstore/pull/535
Keep calm and don't panic: enable and apply forcetypeassert lint rules by @Dentrax in https://github.com/sigstore/sigstore/pull/522
Bump github.com/aws/aws-sdk-go from 1.44.44 to 1.44.45 by @dependabot in https://github.com/sigstore/sigstore/pull/538
Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 by @dependabot in https://github.com/sigstore/sigstore/pull/539
Bump github/codeql-action from 2.1.14 to 2.1.15 by @dependabot in https://github.com/sigstore/sigstore/pull/537
Bump github.com/aws/aws-sdk-go-v2 from 1.16.5 to 1.16.6 by @dependabot in https://github.com/sigstore/sigstore/pull/542
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.11 to 1.15.12 by @dependabot in https://github.com/sigstore/sigstore/pull/540
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.17.3 to 1.17.4 by @dependabot in https://github.com/sigstore/sigstore/pull/541
Remove err from type cast failures by @mtrmac in https://github.com/sigstore/sigstore/pull/536
Bump github.com/aws/aws-sdk-go from 1.44.45 to 1.44.46 by @dependabot in https://github.com/sigstore/sigstore/pull/543
Bump github.com/aws/aws-sdk-go from 1.44.46 to 1.44.47 by @dependabot in https://github.com/sigstore/sigstore/pull/545
Bump github.com/aws/aws-sdk-go from 1.44.47 to 1.44.48 by @dependabot in https://github.com/sigstore/sigstore/pull/547
Bump github.com/theupdateframework/go-tuf from 0.3.0 to 0.3.1 by @dependabot in https://github.com/sigstore/sigstore/pull/546
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.12 to 1.15.13 by @dependabot in https://github.com/sigstore/sigstore/pull/550
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.17.4 to 1.17.5 by @dependabot in https://github.com/sigstore/sigstore/pull/549
Bump github.com/aws/aws-sdk-go from 1.44.48 to 1.44.49 by @dependabot in https://github.com/sigstore/sigstore/pull/551
Bump github.com/aws/aws-sdk-go from 1.44.49 to 1.44.51 by @dependabot in https://github.com/sigstore/sigstore/pull/553
Bump github.com/go-rod/rod from 0.107.3 to 0.108.1 by @dependabot in https://github.com/sigstore/sigstore/pull/552
Bump github.com/aws/aws-sdk-go from 1.44.51 to 1.44.52 by @dependabot in https://github.com/sigstore/sigstore/pull/556
Bump actions/setup-go from 3.2.0 to 3.2.1 by @dependabot in https://github.com/sigstore/sigstore/pull/555
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.13 to 1.15.14 by @dependabot in https://github.com/sigstore/sigstore/pull/557
Bump google.golang.org/api from 0.86.0 to 0.87.0 by @dependabot in https://github.com/sigstore/sigstore/pull/558
Bump github.com/aws/aws-sdk-go from 1.44.52 to 1.44.53 by @dependabot in https://github.com/sigstore/sigstore/pull/559
tuf: remove test that targets list is complete by @asraa in https://github.com/sigstore/sigstore/pull/554
Bump actions/cache from 3.0.4 to 3.0.5 by @dependabot in https://github.com/sigstore/sigstore/pull/560
Bump github/codeql-action from 2.1.15 to 2.1.16 by @dependabot in https://github.com/sigstore/sigstore/pull/561
Bump github.com/aws/aws-sdk-go from 1.44.53 to 1.44.54 by @dependabot in https://github.com/sigstore/sigstore/pull/564
Bump actions/dependency-review-action from 2.0.2 to 2.0.4 by @dependabot in https://github.com/sigstore/sigstore/pull/563
Bump github.com/aws/aws-sdk-go from 1.44.54 to 1.44.55 by @dependabot in https://github.com/sigstore/sigstore/pull/565
Bump github.com/aws/aws-sdk-go from 1.44.55 to 1.44.56 by @dependabot in https://github.com/sigstore/sigstore/pull/566
fix gosec lint G112 errors by @dekkagaijin in https://github.com/sigstore/sigstore/pull/571
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.17.5 to 1.18.0 by @dependabot in https://github.com/sigstore/sigstore/pull/568
Bump github.com/aws/aws-sdk-go from 1.44.56 to 1.44.59 by @dependabot in https://github.com/sigstore/sigstore/pull/569
Bump github.com/google/go-containerregistry from 0.10.0 to 0.11.0 by @dependabot in https://github.com/sigstore/sigstore/pull/572
Bump google.golang.org/api from 0.87.0 to 0.88.0 by @dependabot in https://github.com/sigstore/sigstore/pull/570
update deps by @dekkagaijin in https://github.com/sigstore/sigstore/pull/573
Bump github.com/aws/aws-sdk-go from 1.44.60 to 1.44.61 by @dependabot in https://github.com/sigstore/sigstore/pull/575
Bump github.com/aws/aws-sdk-go from 1.44.61 to 1.44.62 by @dependabot in https://github.com/sigstore/sigstore/pull/577
Bump github.com/Azure/go-autorest/autorest from 0.11.27 to 0.11.28 by @dependabot in https://github.com/sigstore/sigstore/pull/578
Bump google.golang.org/api from 0.88.0 to 0.89.0 by @dependabot in https://github.com/sigstore/sigstore/pull/579
Bump github.com/aws/aws-sdk-go from 1.44.62 to 1.44.63 by @dependabot in https://github.com/sigstore/sigstore/pull/580
update dependencies that was not bumped by the bot by @cpanato in https://github.com/sigstore/sigstore/pull/576
Add oncall members to list of people who can kick off releases by @priyawadhwa in https://github.com/sigstore/sigstore/pull/581

New Contributors

@mtrmac made their first contribution in https://github.com/sigstore/sigstore/pull/536
@asraa made their first contribution in https://github.com/sigstore/sigstore/pull/554

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.3.0...v1.3.1

v1.3.0

1 year ago

What's Changed

Bump github.com/aws/aws-sdk-go from 1.43.24 to 1.43.26 by @dependabot in https://github.com/sigstore/sigstore/pull/349
Bump github.com/hashicorp/vault/api from 1.4.1 to 1.5.0 by @dependabot in https://github.com/sigstore/sigstore/pull/348
Add method to validate public key by @haydentherapper in https://github.com/sigstore/sigstore/pull/344
Makefile: Install golangci lint by @hectorj2f in https://github.com/sigstore/sigstore/pull/350
Bump github.com/go-rod/rod from 0.104.1 to 0.104.2 by @dependabot in https://github.com/sigstore/sigstore/pull/352
Bump github.com/aws/aws-sdk-go from 1.43.26 to 1.43.27 by @dependabot in https://github.com/sigstore/sigstore/pull/351
Bump github.com/Azure/azure-sdk-for-go from 62.3.0+incompatible to 63.0.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/354
Bump github.com/aws/aws-sdk-go from 1.43.27 to 1.43.28 by @dependabot in https://github.com/sigstore/sigstore/pull/355
Bump github.com/go-rod/rod from 0.104.2 to 0.104.4 by @dependabot in https://github.com/sigstore/sigstore/pull/358
Bump github/codeql-action from 1.1.5 to 2.1.6 by @dependabot in https://github.com/sigstore/sigstore/pull/356
Bump actions/cache from 3.0.0 to 3.0.1 by @dependabot in https://github.com/sigstore/sigstore/pull/357
oidc: set the redirect url if needed by @hectorj2f in https://github.com/sigstore/sigstore/pull/353
Fix regex for matching GCP KMS key by @haydentherapper in https://github.com/sigstore/sigstore/pull/359
Bump github.com/aws/aws-sdk-go from 1.43.28 to 1.43.29 by @dependabot in https://github.com/sigstore/sigstore/pull/360
Bump github.com/aws/aws-sdk-go from 1.43.29 to 1.43.30 by @dependabot in https://github.com/sigstore/sigstore/pull/363
Bump github.com/Azure/go-autorest/autorest from 0.11.24 to 0.11.25 by @dependabot in https://github.com/sigstore/sigstore/pull/362
update boulder dependency to remove some syslog dependencies that affect windows build by @cpanato in https://github.com/sigstore/sigstore/pull/364
Add fake signer that implements KMS interface by @haydentherapper in https://github.com/sigstore/sigstore/pull/361
fix if check in the release job by @cpanato in https://github.com/sigstore/sigstore/pull/365
fix missing curly brackets by @cpanato in https://github.com/sigstore/sigstore/pull/366
Bump github.com/aws/aws-sdk-go from 1.43.30 to 1.43.31 by @dependabot in https://github.com/sigstore/sigstore/pull/367
chore: set redirect URL in doOobFlow by @hectorj2f in https://github.com/sigstore/sigstore/pull/368
Bump github.com/aws/aws-sdk-go from 1.43.31 to 1.43.33 by @dependabot in https://github.com/sigstore/sigstore/pull/373
Bump github/codeql-action from 2.1.6 to 2.1.7 by @dependabot in https://github.com/sigstore/sigstore/pull/372
Bump google-github-actions/auth from 0.6.0 to 0.7.0 by @dependabot in https://github.com/sigstore/sigstore/pull/371
Bump github.com/Azure/azure-sdk-for-go from 63.0.0+incompatible to 63.1.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/369
Bump github.com/aws/aws-sdk-go from 1.43.33 to 1.43.34 by @dependabot in https://github.com/sigstore/sigstore/pull/375
Bump github.com/aws/aws-sdk-go from 1.43.34 to 1.43.36 by @dependabot in https://github.com/sigstore/sigstore/pull/379
Bump github/codeql-action from 2.1.7 to 2.1.8 by @dependabot in https://github.com/sigstore/sigstore/pull/378
Bump github.com/go-rod/rod from 0.104.4 to 0.105.0 by @dependabot in https://github.com/sigstore/sigstore/pull/377
Update to go 1.17 / 1.18 by @lukehinds in https://github.com/sigstore/sigstore/pull/374
Bump github.com/aws/aws-sdk-go from 1.43.36 to 1.43.37 by @dependabot in https://github.com/sigstore/sigstore/pull/382
Bump github.com/go-rod/rod from 0.105.0 to 0.105.1 by @dependabot in https://github.com/sigstore/sigstore/pull/383
Bump github.com/Azure/azure-sdk-for-go from 63.1.0+incompatible to 63.2.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/385
Bump actions/cache from 3.0.1 to 3.0.2 by @dependabot in https://github.com/sigstore/sigstore/pull/381
run tests with go1.17 and go1.18 by @cpanato in https://github.com/sigstore/sigstore/pull/380
Bump github.com/aws/aws-sdk-go from 1.43.37 to 1.43.39 by @dependabot in https://github.com/sigstore/sigstore/pull/387
Bump github.com/aws/aws-sdk-go from 1.43.39 to 1.43.40 by @dependabot in https://github.com/sigstore/sigstore/pull/389
Bump actions/checkout from 3.0.0 to 3.0.1 by @dependabot in https://github.com/sigstore/sigstore/pull/388
Bump github.com/go-rod/rod from 0.105.1 to 0.106.0 by @dependabot in https://github.com/sigstore/sigstore/pull/390
Bump github.com/aws/aws-sdk-go from 1.43.40 to 1.43.41 by @dependabot in https://github.com/sigstore/sigstore/pull/391
Bump github.com/Azure/azure-sdk-for-go from 63.2.0+incompatible to 63.3.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/393
Bump github.com/Azure/go-autorest/autorest from 0.11.25 to 0.11.26 by @dependabot in https://github.com/sigstore/sigstore/pull/392
Bump github.com/go-rod/rod from 0.106.0 to 0.106.1 by @dependabot in https://github.com/sigstore/sigstore/pull/395
Add a helper method to parse a PEM-encoded CSR by @haydentherapper in https://github.com/sigstore/sigstore/pull/394
Bump github.com/aws/aws-sdk-go from 1.43.41 to 1.43.43 by @dependabot in https://github.com/sigstore/sigstore/pull/398
Add method for generating certificate serial number by @haydentherapper in https://github.com/sigstore/sigstore/pull/399
Bump github.com/aws/aws-sdk-go from 1.43.43 to 1.43.44 by @dependabot in https://github.com/sigstore/sigstore/pull/402
Bump actions/checkout from 3.0.1 to 3.0.2 by @dependabot in https://github.com/sigstore/sigstore/pull/401
make target integration by @sallyom in https://github.com/sigstore/sigstore/pull/400
Bump github.com/Azure/go-autorest/autorest from 0.11.26 to 0.11.27 by @dependabot in https://github.com/sigstore/sigstore/pull/404
Bump github.com/aws/aws-sdk-go from 1.43.44 to 1.43.45 by @dependabot in https://github.com/sigstore/sigstore/pull/405
Add error type for kms.Get when provider not found by @znewman01 in https://github.com/sigstore/sigstore/pull/407
Bump github.com/Azure/azure-sdk-for-go from 63.3.0+incompatible to 63.4.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/409
Bump github.com/aws/aws-sdk-go from 1.43.45 to 1.44.0 by @dependabot in https://github.com/sigstore/sigstore/pull/410
Bump google-github-actions/auth from 0.7.0 to 0.7.1 by @dependabot in https://github.com/sigstore/sigstore/pull/408
Bump github.com/aws/aws-sdk-go from 1.44.0 to 1.44.1 by @dependabot in https://github.com/sigstore/sigstore/pull/412
Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 by @dependabot in https://github.com/sigstore/sigstore/pull/411
Bump github.com/aws/aws-sdk-go from 1.44.1 to 1.44.2 by @dependabot in https://github.com/sigstore/sigstore/pull/413
Bump github.com/go-rod/rod from 0.106.1 to 0.106.2 by @dependabot in https://github.com/sigstore/sigstore/pull/414
Bump github/codeql-action from 2.1.8 to 2.1.9 by @dependabot in https://github.com/sigstore/sigstore/pull/415
Bump github.com/go-rod/rod from 0.106.2 to 0.106.4 by @dependabot in https://github.com/sigstore/sigstore/pull/417
Bump github.com/aws/aws-sdk-go from 1.44.2 to 1.44.3 by @dependabot in https://github.com/sigstore/sigstore/pull/416
Bump github.com/aws/aws-sdk-go from 1.44.2 to 1.44.4 by @dependabot in https://github.com/sigstore/sigstore/pull/418
chore(deps): Included dependency review by @naveensrinivasan in https://github.com/sigstore/sigstore/pull/406
Call ValidReference in all KMS cases by @imjasonh in https://github.com/sigstore/sigstore/pull/419
Bump github.com/aws/aws-sdk-go from 1.44.4 to 1.44.5 by @dependabot in https://github.com/sigstore/sigstore/pull/420
Bump github.com/go-rod/rod from 0.106.4 to 0.106.5 by @dependabot in https://github.com/sigstore/sigstore/pull/421
Bump github.com/aws/aws-sdk-go from 1.44.5 to 1.44.7 by @dependabot in https://github.com/sigstore/sigstore/pull/422
Bump github.com/aws/aws-sdk-go from 1.44.7 to 1.44.8 by @dependabot in https://github.com/sigstore/sigstore/pull/423
Bump github.com/aws/aws-sdk-go from 1.44.8 to 1.44.9 by @dependabot in https://github.com/sigstore/sigstore/pull/424
Remove copy of OAuth success HTML by @imjasonh in https://github.com/sigstore/sigstore/pull/425
Bump github.com/go-rod/rod from 0.106.5 to 0.106.6 by @dependabot in https://github.com/sigstore/sigstore/pull/427
Bump github.com/aws/aws-sdk-go from 1.44.9 to 1.44.10 by @dependabot in https://github.com/sigstore/sigstore/pull/428
Bump github.com/Azure/azure-sdk-for-go from 63.4.0+incompatible to 64.0.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/429
Bump github.com/aws/aws-sdk-go from 1.44.10 to 1.44.11 by @dependabot in https://github.com/sigstore/sigstore/pull/432
Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 by @dependabot in https://github.com/sigstore/sigstore/pull/433
Bump github.com/aws/aws-sdk-go from 1.44.11 to 1.44.12 by @dependabot in https://github.com/sigstore/sigstore/pull/434
Bump github/codeql-action from 2.1.9 to 2.1.10 by @dependabot in https://github.com/sigstore/sigstore/pull/431
Bump github.com/coreos/go-oidc/v3 from 3.1.0 to 3.2.0 by @dependabot in https://github.com/sigstore/sigstore/pull/437
Add method to unmarshal certificates with a limit by @haydentherapper in https://github.com/sigstore/sigstore/pull/430
Add unsafe verifier to verify signatures with SHA1 digests by @haydentherapper in https://github.com/sigstore/sigstore/pull/441
Bump github.com/aws/aws-sdk-go from 1.44.12 to 1.44.13 by @dependabot in https://github.com/sigstore/sigstore/pull/440
Bump github/codeql-action from 75b4f1c4669133dc294b06c2794e969efa2e5316 to 2.1.10 by @dependabot in https://github.com/sigstore/sigstore/pull/439
Bump actions/setup-go from 3.0.0 to 3.1.0 by @dependabot in https://github.com/sigstore/sigstore/pull/438
Bump github.com/aws/aws-sdk-go from 1.44.13 to 1.44.14 by @dependabot in https://github.com/sigstore/sigstore/pull/443
Bump actions/dependency-review-action from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1 by @dependabot in https://github.com/sigstore/sigstore/pull/442
Remove dependency on deprecated github.com/pkg/errors by @imjasonh in https://github.com/sigstore/sigstore/pull/444
Bump google-github-actions/auth from 0.7.1 to 0.7.2 by @dependabot in https://github.com/sigstore/sigstore/pull/446
Bump github.com/aws/aws-sdk-go from 1.44.14 to 1.44.15 by @dependabot in https://github.com/sigstore/sigstore/pull/447
Bump github.com/Azure/azure-sdk-for-go from 64.0.0+incompatible to 64.1.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/445
Bump github/codeql-action from 2.1.10 to 2.1.11 by @dependabot in https://github.com/sigstore/sigstore/pull/448
Bump github.com/aws/aws-sdk-go from 1.44.15 to 1.44.16 by @dependabot in https://github.com/sigstore/sigstore/pull/449
Bump github.com/go-rod/rod from 0.106.6 to 0.106.7 by @dependabot in https://github.com/sigstore/sigstore/pull/450
Bump github.com/google/go-containerregistry from 0.8.0 to 0.9.0 by @dependabot in https://github.com/sigstore/sigstore/pull/451
Bump github.com/aws/aws-sdk-go from 1.44.16 to 1.44.17 by @dependabot in https://github.com/sigstore/sigstore/pull/453
Bump google-github-actions/auth from 0.7.2 to 0.7.3 by @dependabot in https://github.com/sigstore/sigstore/pull/452
Bump github.com/go-rod/rod from 0.106.7 to 0.106.8 by @dependabot in https://github.com/sigstore/sigstore/pull/454
Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @dependabot in https://github.com/sigstore/sigstore/pull/456
Bump github.com/aws/aws-sdk-go from 1.44.17 to 1.44.18 by @dependabot in https://github.com/sigstore/sigstore/pull/455
Bump github.com/aws/aws-sdk-go from 1.44.18 to 1.44.19 by @dependabot in https://github.com/sigstore/sigstore/pull/457
Bump github.com/aws/aws-sdk-go from 1.44.19 to 1.44.20 by @dependabot in https://github.com/sigstore/sigstore/pull/461
Bump github.com/Azure/azure-sdk-for-go from 64.1.0+incompatible to 65.0.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/460
Bump actions/dependency-review-action from 1.0.1 to 1.0.2 by @dependabot in https://github.com/sigstore/sigstore/pull/459
Bump google-github-actions/auth from 0.7.3 to 0.8.0 by @dependabot in https://github.com/sigstore/sigstore/pull/458
Bump github.com/aws/aws-sdk-go from 1.44.20 to 1.44.21 by @dependabot in https://github.com/sigstore/sigstore/pull/464
Bump github.com/hashicorp/vault/api from 1.5.0 to 1.6.0 by @dependabot in https://github.com/sigstore/sigstore/pull/463
Bump github.com/aws/aws-sdk-go from 1.44.21 to 1.44.22 by @dependabot in https://github.com/sigstore/sigstore/pull/465
Update go-tuf to pick up security fixes by @haydentherapper in https://github.com/sigstore/sigstore/pull/462
Export providerInit type by @imjasonh in https://github.com/sigstore/sigstore/pull/466
Bump actions/setup-go from 3.1.0 to 3.2.0 by @dependabot in https://github.com/sigstore/sigstore/pull/469
Bump github.com/aws/aws-sdk-go from 1.44.22 to 1.44.23 by @dependabot in https://github.com/sigstore/sigstore/pull/470
Bump github.com/go-rod/rod from 0.106.8 to 0.107.0 by @dependabot in https://github.com/sigstore/sigstore/pull/471
update error message for pkg/signature/ecdsa.go when checking the VerifyASN1 by @cpanato in https://github.com/sigstore/sigstore/pull/473
Bump github.com/aws/aws-sdk-go from 1.44.23 to 1.44.24 by @dependabot in https://github.com/sigstore/sigstore/pull/474
Allow passing options to GCP's LoadSignVerifier. by @mattmoor in https://github.com/sigstore/sigstore/pull/468
Migrate AWK KMS to use the v2 SDK. by @mattmoor in https://github.com/sigstore/sigstore/pull/475
Bump google.golang.org/api from 0.75.0 to 0.81.0 by @dependabot in https://github.com/sigstore/sigstore/pull/476
fix uppercase err msgs to quiet golangci-lint by @bobcallaway in https://github.com/sigstore/sigstore/pull/477
Bump actions/cache from 3.0.2 to 3.0.3 by @dependabot in https://github.com/sigstore/sigstore/pull/478
Bump github.com/secure-systems-lab/go-securesystemslib from 0.3.1 to 0.4.0 by @dependabot in https://github.com/sigstore/sigstore/pull/482
Bump github.com/aws/aws-sdk-go from 1.44.24 to 1.44.26 by @dependabot in https://github.com/sigstore/sigstore/pull/481
Bump github/codeql-action from 2.1.11 to 2.1.12 by @dependabot in https://github.com/sigstore/sigstore/pull/480
Bump google.golang.org/api from 0.81.0 to 0.82.0 by @dependabot in https://github.com/sigstore/sigstore/pull/483
Autoclose OAuth success page after 5 seconds. by @wlynch in https://github.com/sigstore/sigstore/pull/484
Bump github.com/aws/aws-sdk-go from 1.44.26 to 1.44.27 by @dependabot in https://github.com/sigstore/sigstore/pull/485
Add a warning when using WithDigest with ECDSA by @haydentherapper in https://github.com/sigstore/sigstore/pull/487
Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 by @dependabot in https://github.com/sigstore/sigstore/pull/489
Bump github.com/go-rod/rod from 0.107.0 to 0.107.1 by @dependabot in https://github.com/sigstore/sigstore/pull/488
Bump google.golang.org/api from 0.82.0 to 0.83.0 by @dependabot in https://github.com/sigstore/sigstore/pull/495
Bump github.com/aws/aws-sdk-go-v2 from 1.16.4 to 1.16.5 by @dependabot in https://github.com/sigstore/sigstore/pull/491
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.9 to 1.15.10 by @dependabot in https://github.com/sigstore/sigstore/pull/494
Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.17.2 to 1.17.3 by @dependabot in https://github.com/sigstore/sigstore/pull/493
Bump actions/cache from 3.0.3 to 3.0.4 by @dependabot in https://github.com/sigstore/sigstore/pull/490
Bump github.com/aws/aws-sdk-go from 1.44.27 to 1.44.29 by @dependabot in https://github.com/sigstore/sigstore/pull/492
Bump github.com/hashicorp/vault/api from 1.6.0 to 1.7.1 by @dependabot in https://github.com/sigstore/sigstore/pull/496
Bump github.com/aws/aws-sdk-go from 1.44.29 to 1.44.30 by @dependabot in https://github.com/sigstore/sigstore/pull/497
Bump github.com/aws/aws-sdk-go from 1.44.30 to 1.44.31 by @dependabot in https://github.com/sigstore/sigstore/pull/498
Bump github.com/hashicorp/vault/api from 1.7.1 to 1.7.2 by @dependabot in https://github.com/sigstore/sigstore/pull/499
Move fulcioroots and tuf packages from cosign by @imjasonh in https://github.com/sigstore/sigstore/pull/435
Bump github.com/aws/aws-sdk-go from 1.44.31 to 1.44.32 by @dependabot in https://github.com/sigstore/sigstore/pull/501
Bump github.com/aws/aws-sdk-go from 1.44.32 to 1.44.33 by @dependabot in https://github.com/sigstore/sigstore/pull/504
Lock TUF client during target loading operations by @puerco in https://github.com/sigstore/sigstore/pull/503
Bump google.golang.org/api from 0.83.0 to 0.84.0 by @dependabot in https://github.com/sigstore/sigstore/pull/507
Bump github.com/aws/aws-sdk-go from 1.44.33 to 1.44.34 by @dependabot in https://github.com/sigstore/sigstore/pull/506
Bump github.com/aws/aws-sdk-go from 1.44.33 to 1.44.35 by @dependabot in https://github.com/sigstore/sigstore/pull/508
Bump actions/dependency-review-action from 1.0.2 to 2.0.1 by @dependabot in https://github.com/sigstore/sigstore/pull/505
Bump actions/dependency-review-action from 2.0.1 to 2.0.2 by @dependabot in https://github.com/sigstore/sigstore/pull/509
Bump github.com/aws/aws-sdk-go from 1.44.35 to 1.44.36 by @dependabot in https://github.com/sigstore/sigstore/pull/510
Bump github.com/aws/aws-sdk-go-v2/config from 1.15.10 to 1.15.11 by @dependabot in https://github.com/sigstore/sigstore/pull/511
Bump github.com/go-rod/rod from 0.107.1 to 0.107.2 by @dependabot in https://github.com/sigstore/sigstore/pull/512
Bump github.com/aws/aws-sdk-go from 1.44.36 to 1.44.37 by @dependabot in https://github.com/sigstore/sigstore/pull/513
Bump github.com/aws/aws-sdk-go from 1.44.37 to 1.44.38 by @dependabot in https://github.com/sigstore/sigstore/pull/517
Bump github.com/stretchr/testify from 1.7.2 to 1.7.3 by @dependabot in https://github.com/sigstore/sigstore/pull/518
Bump github.com/stretchr/testify from 1.7.3 to 1.7.4 by @dependabot in https://github.com/sigstore/sigstore/pull/520
Bump github.com/aws/aws-sdk-go from 1.44.38 to 1.44.39 by @dependabot in https://github.com/sigstore/sigstore/pull/521
Bump github/codeql-action from 2.1.12 to 2.1.13 by @dependabot in https://github.com/sigstore/sigstore/pull/519
Revert "Autoclose OAuth success page after 5 seconds. (#484)" by @wlynch in https://github.com/sigstore/sigstore/pull/502
oauthflow/interactive: Make input/output configurable. by @wlynch in https://github.com/sigstore/sigstore/pull/514
Bump google.golang.org/api from 0.84.0 to 0.85.0 by @dependabot in https://github.com/sigstore/sigstore/pull/523
Bump github.com/aws/aws-sdk-go from 1.44.39 to 1.44.40 by @dependabot in https://github.com/sigstore/sigstore/pull/524
Bump github.com/Azure/azure-sdk-for-go from 65.0.0+incompatible to 66.0.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/526
add check if transit return nil data by @Dentrax in https://github.com/sigstore/sigstore/pull/515
Bump github.com/google/go-containerregistry from 0.9.0 to 0.10.0 by @dependabot in https://github.com/sigstore/sigstore/pull/525
Bump github.com/aws/aws-sdk-go from 1.44.40 to 1.44.41 by @dependabot in https://github.com/sigstore/sigstore/pull/529
Bump github/codeql-action from 2.1.13 to 2.1.14 by @dependabot in https://github.com/sigstore/sigstore/pull/528

New Contributors

@hectorj2f made their first contribution in https://github.com/sigstore/sigstore/pull/350
@sallyom made their first contribution in https://github.com/sigstore/sigstore/pull/400
@znewman01 made their first contribution in https://github.com/sigstore/sigstore/pull/407
@mattmoor made their first contribution in https://github.com/sigstore/sigstore/pull/468
@wlynch made their first contribution in https://github.com/sigstore/sigstore/pull/484
@puerco made their first contribution in https://github.com/sigstore/sigstore/pull/503

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.2.0...v1.3.0

v1.2.0

2 years ago

What's Changed

Moved dsse to fuzz dir by @naveensrinivasan in https://github.com/sigstore/sigstore/pull/214
Bump github.com/Azure/azure-sdk-for-go from 60.3.0+incompatible to 61.0.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/215
Fuzz - Fixed the panic that was caused by incorrect data by @naveensrinivasan in https://github.com/sigstore/sigstore/pull/213
Bump github.com/aws/aws-sdk-go from 1.42.25 to 1.42.26 by @dependabot in https://github.com/sigstore/sigstore/pull/216
Bump github.com/aws/aws-sdk-go from 1.42.26 to 1.42.27 by @dependabot in https://github.com/sigstore/sigstore/pull/217
Bump github.com/aws/aws-sdk-go from 1.42.27 to 1.42.28 by @dependabot in https://github.com/sigstore/sigstore/pull/219
Bump github.com/Azure/azure-sdk-for-go from 61.0.0+incompatible to 61.1.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/218
Bump github.com/aws/aws-sdk-go from 1.42.28 to 1.42.29 by @dependabot in https://github.com/sigstore/sigstore/pull/220
Bump github.com/aws/aws-sdk-go from 1.42.29 to 1.42.31 by @dependabot in https://github.com/sigstore/sigstore/pull/222
pin actions by digest; update chrome install to use signed repo by @bobcallaway in https://github.com/sigstore/sigstore/pull/225
Bump github.com/aws/aws-sdk-go from 1.42.31 to 1.42.32 by @dependabot in https://github.com/sigstore/sigstore/pull/224
Bump github.com/aws/aws-sdk-go from 1.42.32 to 1.42.33 by @dependabot in https://github.com/sigstore/sigstore/pull/227
Bump github/codeql-action from 300c8b6dcbaf905eb250b06113e2e62c340a2d20 to 1.0.27 by @dependabot in https://github.com/sigstore/sigstore/pull/226
Fix: verify with HashiVault KMS by @blz-ea in https://github.com/sigstore/sigstore/pull/229
Bump github.com/aws/aws-sdk-go from 1.42.33 to 1.42.34 by @dependabot in https://github.com/sigstore/sigstore/pull/230
Bump github.com/Azure/azure-sdk-for-go from 61.1.0+incompatible to 61.2.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/231
KMS: Change how the Azure authentication method is handled by @simongottschlag in https://github.com/sigstore/sigstore/pull/228
Bump github.com/aws/aws-sdk-go from 1.42.34 to 1.42.35 by @dependabot in https://github.com/sigstore/sigstore/pull/232
Bump github.com/Azure/go-autorest/autorest from 0.11.22 to 0.11.24 by @dependabot in https://github.com/sigstore/sigstore/pull/233
Drop SHA1, SHA224 for RSA-PSS/PKCS#1, enforce for RSA-PKCS#1 by @haydentherapper in https://github.com/sigstore/sigstore/pull/234
Bump github/codeql-action from 1.0.27 to 1.0.28 by @dependabot in https://github.com/sigstore/sigstore/pull/236
Bump github.com/aws/aws-sdk-go from 1.42.35 to 1.42.36 by @dependabot in https://github.com/sigstore/sigstore/pull/235
Bump github.com/google/go-cmp from 0.5.6 to 0.5.7 by @dependabot in https://github.com/sigstore/sigstore/pull/237
Bump github.com/aws/aws-sdk-go from 1.42.36 to 1.42.37 by @dependabot in https://github.com/sigstore/sigstore/pull/238
Bump github.com/Azure/azure-sdk-for-go from 61.2.0+incompatible to 61.3.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/239
Fix minor typos for HashiCorp by @jbayer in https://github.com/sigstore/sigstore/pull/240
Bump github.com/aws/aws-sdk-go from 1.42.37 to 1.42.38 by @dependabot in https://github.com/sigstore/sigstore/pull/242
Bump github/codeql-action from 1.0.28 to 1.0.29 by @dependabot in https://github.com/sigstore/sigstore/pull/241
Add subject key ID calculation from public key by @haydentherapper in https://github.com/sigstore/sigstore/pull/243
Bump github.com/aws/aws-sdk-go from 1.42.38 to 1.42.39 by @dependabot in https://github.com/sigstore/sigstore/pull/245
Bump github/codeql-action from 1.0.29 to 1.0.30 by @dependabot in https://github.com/sigstore/sigstore/pull/244
Bump github.com/aws/aws-sdk-go from 1.42.39 to 1.42.40 by @dependabot in https://github.com/sigstore/sigstore/pull/248
Wire up html page passed in for interactive OIDC callback server by @n3wscott in https://github.com/sigstore/sigstore/pull/247
Bump github.com/aws/aws-sdk-go from 1.42.40 to 1.42.41 by @dependabot in https://github.com/sigstore/sigstore/pull/250
Bump github.com/aws/aws-sdk-go from 1.42.41 to 1.42.42 by @dependabot in https://github.com/sigstore/sigstore/pull/251
Bump github.com/aws/aws-sdk-go from 1.42.42 to 1.42.43 by @dependabot in https://github.com/sigstore/sigstore/pull/252
Add oidc login to vault by @sudo-bmitch in https://github.com/sigstore/sigstore/pull/249
Bump github/codeql-action from 1.0.30 to 1.0.31 by @dependabot in https://github.com/sigstore/sigstore/pull/253
Bump github.com/aws/aws-sdk-go from 1.42.43 to 1.42.44 by @dependabot in https://github.com/sigstore/sigstore/pull/254
Bump github.com/Azure/azure-sdk-for-go from 61.3.0+incompatible to 61.4.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/255
Skip strict check on PKCE discovery claim on Azure by @bobcallaway in https://github.com/sigstore/sigstore/pull/246
Add ability to specify key version for Hashivault by @bobcallaway in https://github.com/sigstore/sigstore/pull/256
update deps by @dekkagaijin in https://github.com/sigstore/sigstore/pull/257
Bump github.com/aws/aws-sdk-go from 1.42.45 to 1.42.46 by @dependabot in https://github.com/sigstore/sigstore/pull/258
Bump cloud.google.com/go/kms from 1.1.0 to 1.2.0 by @dependabot in https://github.com/sigstore/sigstore/pull/259
return version of Vault key via functional option by @bobcallaway in https://github.com/sigstore/sigstore/pull/260
Bump github/codeql-action from 1.0.31 to 1.0.32 by @dependabot in https://github.com/sigstore/sigstore/pull/261
Bump github.com/aws/aws-sdk-go from 1.42.46 to 1.42.47 by @dependabot in https://github.com/sigstore/sigstore/pull/262
Bump github.com/aws/aws-sdk-go from 1.42.47 to 1.42.48 by @dependabot in https://github.com/sigstore/sigstore/pull/264
Bump github.com/go-rod/rod from 0.101.8 to 0.102.0 by @dependabot in https://github.com/sigstore/sigstore/pull/265
Bump github.com/aws/aws-sdk-go from 1.42.48 to 1.42.49 by @dependabot in https://github.com/sigstore/sigstore/pull/267
Bump actions/setup-go from 2.1.5 to 2.2.0 by @dependabot in https://github.com/sigstore/sigstore/pull/266
Bump github.com/aws/aws-sdk-go from 1.42.49 to 1.42.50 by @dependabot in https://github.com/sigstore/sigstore/pull/268
Bump github.com/go-rod/rod from 0.102.0 to 0.102.1 by @dependabot in https://github.com/sigstore/sigstore/pull/271
Bump github.com/aws/aws-sdk-go from 1.42.50 to 1.42.51 by @dependabot in https://github.com/sigstore/sigstore/pull/270
Bump github/codeql-action from 1.0.32 to 1.1.0 by @dependabot in https://github.com/sigstore/sigstore/pull/269
Bump github.com/aws/aws-sdk-go from 1.42.51 to 1.42.52 by @dependabot in https://github.com/sigstore/sigstore/pull/272
Bump github.com/Azure/azure-sdk-for-go from 61.4.0+incompatible to 61.5.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/273
Bump cloud.google.com/go/kms from 1.2.0 to 1.3.0 by @dependabot in https://github.com/sigstore/sigstore/pull/274
Bump github.com/aws/aws-sdk-go from 1.42.52 to 1.42.53 by @dependabot in https://github.com/sigstore/sigstore/pull/275
Bump github.com/aws/aws-sdk-go from 1.42.53 to 1.43.0 by @dependabot in https://github.com/sigstore/sigstore/pull/281
Bump github/codeql-action from 1.1.0 to 1.1.2 by @dependabot in https://github.com/sigstore/sigstore/pull/280
pkg/signature/kms doesn't depend on kms impls by @imjasonh in https://github.com/sigstore/sigstore/pull/276
remove unmaintained test dependency with invalid license by @bobcallaway in https://github.com/sigstore/sigstore/pull/279
move e2e tests inline with various implementation packages by @bobcallaway in https://github.com/sigstore/sigstore/pull/282
feat(kms): add supported providers func by @Dentrax in https://github.com/sigstore/sigstore/pull/277
Bump github.com/aws/aws-sdk-go from 1.43.0 to 1.43.1 by @dependabot in https://github.com/sigstore/sigstore/pull/283
Bump github.com/Azure/azure-sdk-for-go from 61.5.0+incompatible to 61.6.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/284
Bump github.com/aws/aws-sdk-go from 1.43.1 to 1.43.2 by @dependabot in https://github.com/sigstore/sigstore/pull/285
Bump github.com/aws/aws-sdk-go from 1.43.2 to 1.43.3 by @dependabot in https://github.com/sigstore/sigstore/pull/286
Bump github.com/aws/aws-sdk-go from 1.43.3 to 1.43.4 by @dependabot in https://github.com/sigstore/sigstore/pull/287
Permit usage of signing keys with aws-us-gov arn partitions by @chaospuppy in https://github.com/sigstore/sigstore/pull/289
Bump github/codeql-action from 1.1.2 to 1.1.3 by @dependabot in https://github.com/sigstore/sigstore/pull/291
Bump github.com/aws/aws-sdk-go from 1.43.4 to 1.43.5 by @dependabot in https://github.com/sigstore/sigstore/pull/292
update permissions for codeql by @bobcallaway in https://github.com/sigstore/sigstore/pull/293
Bump github.com/aws/aws-sdk-go from 1.43.5 to 1.43.6 by @dependabot in https://github.com/sigstore/sigstore/pull/295
Bump golangci/golangci-lint-action from 2.5.2 to 3 by @dependabot in https://github.com/sigstore/sigstore/pull/294
Bump hashicorp vault to 1.4.0. by @dlorenc in https://github.com/sigstore/sigstore/pull/297
Bump github.com/hashicorp/vault/api from 1.4.0 to 1.4.1 by @dependabot in https://github.com/sigstore/sigstore/pull/298
Explicitly run the go setup action. by @dlorenc in https://github.com/sigstore/sigstore/pull/299
Bump github.com/secure-systems-lab/go-securesystemslib from 0.3.0 to 0.3.1 by @dependabot in https://github.com/sigstore/sigstore/pull/304
Bump golangci/golangci-lint-action from 3.0.0 to 3.1.0 by @dependabot in https://github.com/sigstore/sigstore/pull/300
Bump actions/setup-go from 2.2.0 to 3 by @dependabot in https://github.com/sigstore/sigstore/pull/301
Bump github.com/aws/aws-sdk-go from 1.43.6 to 1.43.7 by @dependabot in https://github.com/sigstore/sigstore/pull/302
Bump github.com/Azure/azure-sdk-for-go from 61.6.0+incompatible to 62.0.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/303
Bump github.com/aws/aws-sdk-go from 1.43.7 to 1.43.8 by @dependabot in https://github.com/sigstore/sigstore/pull/307
Bump actions/checkout from 2.4.0 to 3 by @dependabot in https://github.com/sigstore/sigstore/pull/306
Bump github.com/aws/aws-sdk-go from 1.43.8 to 1.43.9 by @dependabot in https://github.com/sigstore/sigstore/pull/309
Bump actions/upload-artifact from 2.3.1 to 3 by @dependabot in https://github.com/sigstore/sigstore/pull/310
Bump cloud.google.com/go/kms from 1.3.0 to 1.4.0 by @dependabot in https://github.com/sigstore/sigstore/pull/311
Bump github.com/aws/aws-sdk-go from 1.43.9 to 1.43.10 by @dependabot in https://github.com/sigstore/sigstore/pull/312
Bump github.com/go-rod/rod from 0.102.1 to 0.103.0 by @dependabot in https://github.com/sigstore/sigstore/pull/313
Bump github.com/aws/aws-sdk-go from 1.43.10 to 1.43.11 by @dependabot in https://github.com/sigstore/sigstore/pull/314
Bump github.com/aws/aws-sdk-go from 1.43.11 to 1.43.12 by @dependabot in https://github.com/sigstore/sigstore/pull/316
Bump github.com/Azure/azure-sdk-for-go from 62.0.0+incompatible to 62.1.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/317
Bump github.com/aws/aws-sdk-go from 1.43.12 to 1.43.13 by @dependabot in https://github.com/sigstore/sigstore/pull/319
Bump github/codeql-action from 1.1.3 to 1.1.4 by @dependabot in https://github.com/sigstore/sigstore/pull/318
Bump github.com/aws/aws-sdk-go from 1.43.13 to 1.43.14 by @dependabot in https://github.com/sigstore/sigstore/pull/321
Enable the same golangci-lint rules as cosign by @dekkagaijin in https://github.com/sigstore/sigstore/pull/322
Bump github.com/aws/aws-sdk-go from 1.43.14 to 1.43.15 by @dependabot in https://github.com/sigstore/sigstore/pull/323
Initial introduction and implementation of oidc.IDTokenSource by @dekkagaijin in https://github.com/sigstore/sigstore/pull/320
Update CODEOWNERS by @endorama in https://github.com/sigstore/sigstore/pull/315
Bump github.com/aws/aws-sdk-go from 1.43.15 to 1.43.16 by @dependabot in https://github.com/sigstore/sigstore/pull/324
Add a reusuable GitHub Action workflow for cutting releases. by @k4leung4 in https://github.com/sigstore/sigstore/pull/325
return immediately, without waiting for the operation in progress to complete by @cpanato in https://github.com/sigstore/sigstore/pull/326
Bump github.com/aws/aws-sdk-go from 1.43.16 to 1.43.17 by @dependabot in https://github.com/sigstore/sigstore/pull/327
Bump github.com/Azure/azure-sdk-for-go from 62.1.0+incompatible to 62.2.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/328
Bump github.com/aws/aws-sdk-go from 1.43.17 to 1.43.18 by @dependabot in https://github.com/sigstore/sigstore/pull/329
Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 by @dependabot in https://github.com/sigstore/sigstore/pull/332
Included OpenSSF Best Practices badge by @naveensrinivasan in https://github.com/sigstore/sigstore/pull/333
Bump github.com/aws/aws-sdk-go from 1.43.18 to 1.43.19 by @dependabot in https://github.com/sigstore/sigstore/pull/331
fix lints found by golangci-lint by @cpanato in https://github.com/sigstore/sigstore/pull/334
Bump github.com/aws/aws-sdk-go from 1.43.19 to 1.43.20 by @dependabot in https://github.com/sigstore/sigstore/pull/335
Bump github.com/aws/aws-sdk-go from 1.43.20 to 1.43.21 by @dependabot in https://github.com/sigstore/sigstore/pull/336
Bump github/codeql-action from 1.1.4 to 1.1.5 by @dependabot in https://github.com/sigstore/sigstore/pull/330
Make tag,key_ring,key optional for release workflow. by @k4leung4 in https://github.com/sigstore/sigstore/pull/338
Bump github.com/go-rod/rod from 0.103.0 to 0.104.1 by @dependabot in https://github.com/sigstore/sigstore/pull/341
Bump github.com/Azure/azure-sdk-for-go from 62.2.0+incompatible to 62.3.0+incompatible by @dependabot in https://github.com/sigstore/sigstore/pull/342
Bump github.com/aws/aws-sdk-go from 1.43.21 to 1.43.22 by @dependabot in https://github.com/sigstore/sigstore/pull/340
Bump actions/cache from 2.1.7 to 3 by @dependabot in https://github.com/sigstore/sigstore/pull/339
Bump google.golang.org/protobuf from 1.27.1 to 1.28.0 by @dependabot in https://github.com/sigstore/sigstore/pull/343
Bump github.com/aws/aws-sdk-go from 1.43.22 to 1.43.24 by @dependabot in https://github.com/sigstore/sigstore/pull/345
Add utilities to parse Oauth2 access token HTTP responses by @dekkagaijin in https://github.com/sigstore/sigstore/pull/337
Add method to check for public key equality by @haydentherapper in https://github.com/sigstore/sigstore/pull/346

New Contributors

@blz-ea made their first contribution in https://github.com/sigstore/sigstore/pull/229
@simongottschlag made their first contribution in https://github.com/sigstore/sigstore/pull/228
@haydentherapper made their first contribution in https://github.com/sigstore/sigstore/pull/234
@jbayer made their first contribution in https://github.com/sigstore/sigstore/pull/240
@n3wscott made their first contribution in https://github.com/sigstore/sigstore/pull/247
@sudo-bmitch made their first contribution in https://github.com/sigstore/sigstore/pull/249
@imjasonh made their first contribution in https://github.com/sigstore/sigstore/pull/276
@Dentrax made their first contribution in https://github.com/sigstore/sigstore/pull/277
@chaospuppy made their first contribution in https://github.com/sigstore/sigstore/pull/289
@endorama made their first contribution in https://github.com/sigstore/sigstore/pull/315
@k4leung4 made their first contribution in https://github.com/sigstore/sigstore/pull/325

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.1.0...v1.2.0