1 Release published by 1 person

• v3.6.2

  published Apr 14, 2025

18 Pull requests merged by 4 people

• Specify sha256 in TSA request

  #1373 merged May 9, 2025

• More proto updates

  #1358 merged May 9, 2025

• build(deps): bump platformdirs from 4.3.7 to 4.3.8

  #1374 merged May 8, 2025

• make TSA validity end optional

  #1368 merged May 8, 2025

• no trailing slash for post to /entries

  #1366 merged May 8, 2025

• build(deps): bump cryptography from 44.0.2 to 44.0.3

  #1362 merged May 2, 2025

• build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 in the actions group

  #1361 merged May 2, 2025

• build(deps): update ruff requirement from <0.11.8 to <0.11.9

  #1360 merged May 1, 2025

• build(deps): bump sigstore/sigstore-conformance from 0.0.17 to 0.0.18 in the actions group

  #1357 merged Apr 28, 2025

• build(deps): update ruff requirement from <0.11.7 to <0.11.8

  #1355 merged Apr 25, 2025

• build(deps): bump the actions group with 2 updates

  #1356 merged Apr 25, 2025

• build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 in the actions group

  #1354 merged Apr 23, 2025

• build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 in the actions group

  #1353 merged Apr 21, 2025

• build(deps): update ruff requirement from <0.11.6 to <0.11.7

  #1352 merged Apr 18, 2025

• Update pinned requirements for v3.6.2

  #1351 merged Apr 14, 2025

• prep 3.6.2

  #1346 merged Apr 14, 2025

• _internal/trust: Fix bug in rekor key lookup

  #1350 merged Apr 11, 2025

• build(deps): update ruff requirement from <0.11.5 to <0.11.6

  #1348 merged Apr 10, 2025

5 Pull requests opened by 3 people

• Use trust config everywhere

  #1363 opened May 5, 2025

• improve KindVersion compatibility

  #1370 opened May 7, 2025

• Add support for ed25519 keys

  #1377 opened May 9, 2025

• build(deps): update ruff requirement from <0.11.9 to <0.11.10

  #1379 opened May 9, 2025

• Verify artifact signing time against all timestamps

  #1381 opened May 9, 2025

4 Issues closed by 1 person

• TSA request message digest defaults to sha256

  #1372 closed May 9, 2025

• Support timestamp validity periods without end dates

  #1367 closed May 8, 2025

• Trailing slash in "/entries" path

  #1365 closed May 8, 2025

• multiple rekor keys should be allowed

  #1349 closed Apr 11, 2025

9 Issues opened by 3 people

• Verifying Signature time when no inclusion promise or integrated time

  #1380 opened May 9, 2025

• Brittle TSA tests

  #1378 opened May 9, 2025

• Add support for ed25519 keys

  #1376 opened May 9, 2025

• TSA verification only works for sha256

  #1375 opened May 9, 2025

• OIDC URL is ignored in SigningConfig

  #1371 opened May 7, 2025

• Parsing KindVersion in rekor V2

  #1369 opened May 7, 2025

• rekor: Use checkpoint_key_id when possible

  #1364 opened May 5, 2025

• Use trustconfig throughout the project

  #1359 opened Apr 30, 2025

• Use signingconfig from "--trust-config"

  #1347 opened Apr 10, 2025

1 Unresolved conversation

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Support rekor v2

  #1340 commented on May 7, 2025 • 0 new comments