v0.0.12

What's Changed

• Add support for multiple attestations at once by @jonjohnsonjr in #76

Full Changelog: v0.0.11...v0.0.12

v0.0.11

What's Changed

• Bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #61
• Bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0 by @dependabot in #62
• Bump github.com/hashicorp/terraform-plugin-framework from 1.3.3 to 1.3.5 by @dependabot in #63
• Bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 by @dependabot in #64
• Wire up ggcr logs warning and debug logs by @jonjohnsonjr in #67
• Bump actions/checkout from 3.5.3 to 4.0.0 by @dependabot in #70
• Bump goreleaser/goreleaser-action from 4.4.0 to 4.6.0 by @dependabot in #71
• Allow disabling signing/attesting with env var. by @mattmoor in #73

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• Revert annotations to be nil by @jonjohnsonjr in #56
• Push rate limiting down into rekor client by @jonjohnsonjr in #60

Full Changelog: v0.0.9...v0.0.10

v0.0.9

What's Changed

• Rate limit down to 5 QPS by @jonjohnsonjr in #55

Full Changelog: v0.0.8...v0.0.9

v0.0.8

What's Changed

• Add client-side rate limiting for rekor ops by @jonjohnsonjr in #54

Full Changelog: v0.0.7...v0.0.8

v0.0.7

What's Changed

• Bump github.com/sigstore/policy-controller from 0.7.1-0.20230531003549-4f2910d2088e to 0.8.0 by @dependabot in #39
• Bump github.com/sigstore/cosign/v2 from 2.0.3-0.20230616210745-14b767493186 to 2.1.1 by @dependabot in #42
• Bump github.com/hashicorp/terraform-plugin-go from 0.16.0 to 0.17.0 by @dependabot in #44
• Bump github.com/hashicorp/terraform-plugin-framework from 1.3.1 to 1.3.2 by @dependabot in #45
• Bump github.com/hashicorp/terraform-plugin-go from 0.17.0 to 0.18.0 by @dependabot in #47
• Bump github.com/sigstore/policy-controller from 0.8.0 to 0.8.1 by @dependabot in #50
• Bump github.com/hashicorp/terraform-plugin-framework from 1.3.2 to 1.3.3 by @dependabot in #51
• Bump github.com/hashicorp/terraform-plugin-testing from 1.3.0 to 1.4.0 by @dependabot in #52
• Experiment with cosign fork by @jonjohnsonjr in #53

Full Changelog: v0.0.6...v0.0.7

v0.0.6

What's Changed

• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.0-20230426201150-f82273dff08e to 0.0.1 by @dependabot in #25
• Bump github.com/hashicorp/terraform-plugin-log from 0.8.0 to 0.9.0 by @dependabot in #26
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.1 to 0.0.4 by @dependabot in #27
• add cosign_copy by @imjasonh in #28
• Bump github.com/hashicorp/terraform-plugin-framework from 1.2.0 to 1.3.0 by @dependabot in #29
• Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #31
• Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0 by @dependabot in #32
• Bump github.com/hashicorp/terraform-plugin-framework from 1.3.0 to 1.3.1 by @dependabot in #34
• Take advantage of remote.Reuse by @jonjohnsonjr in #35
• Add file option to cosign_attest by @mattmoor in #36
• Bump github.com/hashicorp/terraform-plugin-go from 0.15.0 to 0.16.0 by @dependabot in #37
• Bump github.com/hashicorp/terraform-plugin-testing from 1.2.0 to 1.3.0 by @dependabot in #33

New Contributors

• @jonjohnsonjr made their first contribution in #35

Full Changelog: v0.0.5...v0.0.6

v0.0.5

What's Changed

• add resource update tests, force-new on sign, use OCI validators by @imjasonh in #17
• add source check by @cpanato in #18
• fix test job to run on push and also use git hashes for the actions by @cpanato in #19
• Add option to define fulcio and rekor url by @cpanato in #20
• Bump crazy-max/ghaction-import-gpg from 5.2.0 to 5.3.0 by @dependabot in #21
• Add an ECS example by @mattmoor in #23
• Pull in policy-controller fix by @mattmoor in #24
• Bump actions/setup-go from 4.0.0 to 4.0.1 by @dependabot in #22

New Contributors

• @cpanato made their first contribution in #18
• @dependabot made their first contribution in #21

Full Changelog: v0.0.3...v0.0.5

v0.0.4

This is to see if the Terraform Registry can pick up our releases now

v0.0.3

testing