Releases: sigstore/sigstore-rs
Releases · sigstore/sigstore-rs
v0.9.0
What's Changed
- sign: init by @jleightcap in #310
- cargo audit: ignore RUSTSEC-2023-0071 by @jleightcap in #321
- chore(deps): Update json-syntax requirement from 0.9.6 to 0.10.0 by @dependabot in #319
- chore(deps): Update cached requirement from 0.46.0 to 0.47.0 by @dependabot in #323
- chore(deps): Update serial_test requirement from 2.0.0 to 3.0.0 by @dependabot in #322
- dep: update rustls-webpki, fold in pki_types by @jleightcap in #324
- chore(deps): Update cached requirement from 0.47.0 to 0.48.0 by @dependabot in #325
- chore(deps): Update json-syntax requirement from 0.10.0 to 0.11.1 by @dependabot in #327
- chore(deps): Update cached requirement from 0.48.0 to 0.49.2 by @dependabot in #329
- chore(deps): Update json-syntax requirement from 0.11.1 to 0.12.2 by @dependabot in #330
- lint: fix lint error of chrono and tokio by @Xynnn007 in #334
- chore(deps): Update base64 requirement from 0.21.0 to 0.22.0 by @dependabot in #332
- The
Repositorytrait andManualRepositorystruct no longer require a feature flag by @tannaurus in #331 - chore(deps): Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #336
- chore(deps): Update reqwest requirement from 0.11 to 0.12 by @dependabot in #341
- update tough dep by @astoycos in #340
- Tag the 0.9.0 release by @flavio in #342
New Contributors
- @tannaurus made their first contribution in #331
- @astoycos made their first contribution in #340
Full Changelog: v0.8.0...v0.9.0
Contributors
flavio, Xynnn007, and 4 other contributors
Assets 2
v0.8.0
What's Changed
- chore(deps): Update rstest requirement from 0.17.0 to 0.18.1 by @dependabot in #282
- chore(deps): do not enable default features of chrono by @flavio in #286
- chore(deps): Update pem requirement from 2.0 to 3.0 by @dependabot in #289
- conformance: add conformance CLI and action by @jleightcap in #287
- chore: fix clippy warnings by @flavio in #292
- chore(deps): Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #291
- chore(deps): Update tough requirement from 0.13 to 0.14 by @dependabot in #290
- chore(deps): update to latest version of picky by @flavio in #293
- chore(deps): Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #294
- chore: add repository link to Cargo metadata by @flavio in #297
- chore(deps): Update cached requirement from 0.44.0 to 0.45.1 by @dependabot in #298
- chore(deps): Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #302
- chore(deps): Update cached requirement from 0.45.1 to 0.46.0 by @dependabot in #301
- chore(deps): Update testcontainers requirement from 0.14 to 0.15 by @dependabot in #303
- chore(deps): Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #304
- cosign/tuf: use trustroot by @jleightcap in #305
- Fix broken tests, update deps by @flavio in #313
- chore(deps): Update oci-distribution requirement from 0.9 to 0.10 by @dependabot in #316
- Release 0.8.0 by @lukehinds in #312
New Contributors
- @jleightcap made their first contribution in #287
Full Changelog: v0.7.2...v0.8.0
Contributors
flavio, lukehinds, and 2 other contributors
Assets 2
v0.7.2
What's Changed
- chore(deps): Update cached requirement from 0.42.0 to 0.44.0 by @dependabot in #277
- chore(deps): Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #278
- chore(deps): update picky dependency by @flavio in #279
- Release 0.7.2 by @flavio in #281
Full Changelog: v0.7.1...v0.7.2
Contributors
flavio and dependabot
Assets 2
sigstore-rs v0.7.1
What's Changed
- fix: ensure cosign client can be sent between threads by @flavio in #275
- Release v0.7.1 by @flavio in #276
Full Changelog: v0.7.0...v0.7.1
Contributors
flavio
Assets 2
sigstore-rs v0.7.0
What's Changed
- Fix typo in SignatureLayer::new doc comment by @danbev in #170
- feat: replace example dependency docker_credential by @Xynnn007 in #172
- Clean up readme by @lukehinds in #173
- chore(deps): Update rstest requirement from 0.15.0 to 0.16.0 by @dependabot in #174
- Fix typo in simple_signing.rs by @danbev in #175
- Introduce SignedArtifactBundle by @danbev in #171
- chore(deps): Update base64 requirement from 0.13.0 to 0.20.0 by @dependabot in #177
- chore(deps): Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in #180
- chore(deps): Update serial_test requirement from 0.9.0 to 0.10.0 by @dependabot in #182
- chore(deps): Update cached requirement from 0.40.0 to 0.41.0 by @dependabot in #181
- Fix typo in SecretBoxCipher doc comment by @danbev in #179
- chore(deps): Update cached requirement from 0.41.0 to 0.42.0 by @dependabot in #185
- chore(deps): Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #183
- chore(deps): Update base64 requirement from 0.20.0 to 0.21.0 by @dependabot in #184
- Add cosign verify-bundle example by @danbev in #186
- Fix incorrect base64_signature doc comment by @danbev in #188
- Fix typos in tuf/mod.rs by @danbev in #195
- chore(deps): Update serial_test requirement from 0.10.0 to 1.0.0 by @dependabot in #200
- fix: show actual response status field by @ctron in #197
- Update target -> target_name for consistency by @danbev in #196
- fix: make the fields accessible by @ctron in #202
- Add verify-bundle example to README.md by @danbev in #203
- fix: make fields of hash accessible by @ctron in #205
- Improve public key output and add file output by @Gronner in #194
- Add TokenProvider::Static doc comment by @danbev in #208
- Changed the type of LogEntry.body from String to Body by @Neccolini in #207
- Fix errors/warnings reported by clippy by @danbev in #210
- Add fine-grained features to control the compilation by @Xynnn007 in #189
- fix: bring tuf feature out of rekor and add related docs by @Xynnn007 in #211
- chore: update crypto deps by @flavio in #204
- Replace
x509-parserwithx509-certby @Xynnn007 in #212 - Fix: Wrong parameter order inside documentation example. by @vembacher in #215
- Remove lines about timestamp in lib.rs by @naveensrinivasan in #213
- Fix ed25519 version conflict by @vembacher in #223
- Support compiling to wasm32 architectures by @lulf in #221
- Fix link to contributor doc in readme by @oliviacrain in #225
- refactor: derive
Clonetrait by @flavio in #227 - fix: correct typo in verify/main.rs by @danbev in #228
- chore(deps): Update tough requirement from 0.12 to 0.13 by @dependabot in #237
- chore(deps): Bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #240
- dep: update picky version to git rid of
ringby @Xynnn007 in #226 - chore(deps): Bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #245
- fix: make LogEntry Body an enum by @danbev in #244
- Add verify-blob example by @danbev in #239
- Introduce Newtype
OciReferenceinto API for OCI image references. by @vembacher in #216 - Swap over to using CDN to fetch TUF metadata by @haydentherapper in #251
- chore(deps): Bump actions/checkout from 3.5.0 to 3.5.2 by @dependabot in #252
- upgrade 'der' to 0.7.5 by @dmitris in #257
- remove unused 'clock' feature for chrono by @dmitris in #258
- update pkcs1 from 0.4.0 to 0.7.5 by @dmitris in #260
- use 2021 Rust edition by @dmitris in #261
- chore(deps): Update serial_test requirement from 1.0.0 to 2.0.0 by @dependabot in #264
- update scrypt to 0.11.0, adapt for API change (fix #231) by @dmitris in #268
- upgrade ed25519-dalek to 2.0.0-rc.2 by @dmitris in #263
- chore(deps): Update openidconnect requirement from 2.3 to 3.0 by @dependabot in #265
- chore(deps): Update rstest requirement from 0.16.0 to 0.17.0 by @dependabot in #271
- Update crypto deps by @flavio in #269
- Update create_log_entry example to create key pair. by @jvanz in #206
- Release 0.7.0 by @flavio in #273
New Contributors
- @ctron made their first contribution in #197
- @Gronner made their first contribution in #194
- @Neccolini made their first contribution in #207
- @vembacher made their first contribution in #215
- @naveensrinivasan made their first contribution in #213
- @lulf made their first contribution in #221
- @oliviacrain made their first contribution in #225
- @haydentherapper made their first contribution in #251
- @dmitris made their first contribution in #257
- @jvanz made their first contribution in #206
Full Changelog: v0.6.0...v0.7.0
Contributors
lulf, flavio, and 13 other contributors
Assets 2
sigstore-rs v0.6.0
What's Changed
- Fix typo in cosign/mod.rs doc comment by @danbev in #148
- Fix typo in KeyPair trait doc comment by @danbev in #149
- Add getter functions for LogEntry fields by @lkatalin in #147
- Add TreeSize alias to Rekor by @avery-blanchard in #151
- Updates for parsing hashedrekord LogEntry by @lkatalin in #152
- Update cached requirement from 0.39.0 to 0.40.0 by @dependabot in #154
- Fix typos in PublicKeyVerifier doc comments by @danbev in #155
- Update link to verification example by @danbev in #156
- fix: CI error for auto deref by @Xynnn007 in #160
- Remove unused imports in examples/rekor by @danbev in #162
- Fix typo and grammar in signature_layers.rs by @danbev in #161
- add certificate based verification by @flavio in #159
- Fix typos in from_encrypted_pem doc comments by @danbev in #164
- Fix typos in doc comments by @danbev in #163
- Add support for OCI Image signing (spec v1.0) by @Xynnn007 in #158
- Update path to fulcio-cert in verify example by @danbev in #168
New Contributors
- @danbev made their first contribution in #148
- @avery-blanchard made their first contribution in #151
Full Changelog: v0.5.3...v0.6.0
Contributors
flavio, danbev, and 4 other contributors
Assets 2
sigstore-rs v0.5.3
Contributors
flavio and lkatalin
Assets 2
sigstore-rs v0.5.2
sigstore-rs v0.5.1
sigstore-rs v0.5.0
Enhancements
- update user-agent value to be specific to sigstore-rs (#122)
- remove /api/v1/version from client by (#121)
- crate async fulcio client (#132)
- Removed ring dependency (#127)
Others
Contributors
- Bob Callaway (@bobcallaway)
- Bob McWhirter (@bobmcwhirter)
- Flavio Castelli (@flavio)
- Luke Hinds (@lukehinds)
- Xynnn (@Xynnn007)
Contributors
bobmcwhirter, flavio, and 3 other contributors