- chore(deps): Update oci-distribution requirement from 0.10 to 0.11 by @dependabot in sigstore#343
- verify: init by @jleightcap in sigstore#311
- chore(deps): Update rstest requirement from 0.18.1 to 0.19.0 by @dependabot in sigstore#351
- chore(deps): Bump actions/checkout from 4.1.2 to 4.1.5 by @dependabot in sigstore#360
- fix linter warning by @flavio in sigstore#361
- chore(deps): Update cached requirement from 0.49.2 to 0.51.3 by @dependabot in sigstore#362
- chore(deps): Update webbrowser requirement from 0.8.12 to 1.0.1 by @dependabot in sigstore#359
- chore(deps): Bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in sigstore#363
- chore(deps): Update testcontainers requirement from 0.15 to 0.16 by @dependabot in sigstore#355
- chore(deps): change provider of cargo-audit GH action by @flavio in sigstore#364
- fix docs by @flavio in sigstore#366
- fix: allow ManualTrustRoot to have multiple rekor keys by @flavio in sigstore#365
- build(deps): update testcontainers requirement from 0.16 to 0.17 by @dependabot in sigstore#368
- build(deps): update rstest requirement from 0.19.0 to 0.21.0 by @dependabot in sigstore#370
- build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in sigstore#372
- build(deps): update testcontainers requirement from 0.17 to 0.18 by @dependabot in sigstore#371
- Signed Certificate Timestamp verification by @tnytown in sigstore#326
- transparency: pull OID constants from
const-oidby @tnytown in sigstore#374 - build(deps): update testcontainers requirement from 0.18 to 0.19 by @dependabot in sigstore#375
- build(deps): update cached requirement from 0.51.3 to 0.52.0 by @dependabot in sigstore#377
- build(deps): update testcontainers requirement from 0.19 to 0.20 by @dependabot in sigstore#376
- build(deps): update cached requirement from 0.52.0 to 0.53.1 by @dependabot in sigstore#379
- build(deps): update rstest requirement from 0.21.0 to 0.22.0 by @dependabot in sigstore#383
- build(deps): update testcontainers requirement from 0.20 to 0.21 by @dependabot in sigstore#382
- build(deps): update testcontainers requirement from 0.21 to 0.22 by @dependabot in sigstore#386
- fix: Allow empty passwords for encrypted pem files by @gmpinder in sigstore#381
- build(deps): update tough requirement from 0.17.1 to 0.18.0 by @dependabot in sigstore#389
- dependency cleanup by @flavio in sigstore#390
- chore: update cargo audit ignore list by @flavio in sigstore#387
- @tnytown made their first contribution in sigstore#326
- @gmpinder made their first contribution in sigstore#381
Full Changelog: https://github.com/sigstore/sigstore-rs/compare/v0.9.0...v0.10.0
- sign: init by @jleightcap in sigstore#310
- cargo audit: ignore RUSTSEC-2023-0071 by @jleightcap in sigstore#321
- chore(deps): Update json-syntax requirement from 0.9.6 to 0.10.0 by @dependabot in sigstore#319
- chore(deps): Update cached requirement from 0.46.0 to 0.47.0 by @dependabot in sigstore#323
- chore(deps): Update serial_test requirement from 2.0.0 to 3.0.0 by @dependabot in sigstore#322
- dep: update rustls-webpki, fold in pki_types by @jleightcap in sigstore#324
- chore(deps): Update cached requirement from 0.47.0 to 0.48.0 by @dependabot in sigstore#325
- chore(deps): Update json-syntax requirement from 0.10.0 to 0.11.1 by @dependabot in sigstore#327
- chore(deps): Update cached requirement from 0.48.0 to 0.49.2 by @dependabot in sigstore#329
- chore(deps): Update json-syntax requirement from 0.11.1 to 0.12.2 by @dependabot in sigstore#330
- lint: fix lint error of chrono and tokio by @Xynnn007 in sigstore#334
- chore(deps): Update base64 requirement from 0.21.0 to 0.22.0 by @dependabot in sigstore#332
- The
Repositorytrait andManualRepositorystruct no longer require a feature flag by @tannaurus in sigstore#331 - chore(deps): Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in sigstore#336
- chore(deps): Update reqwest requirement from 0.11 to 0.12 by @dependabot in sigstore#341
- update tough dep by @astoycos in sigstore#340
- Tag the 0.9.0 release by @flavio in sigstore#342
- @tannaurus made their first contribution in sigstore#331
- @astoycos made their first contribution in sigstore#340
Full Changelog: https://github.com/sigstore/sigstore-rs/compare/v0.8.0...v0.9.0
- chore(deps): Update rstest requirement from 0.17.0 to 0.18.1 by @dependabot in sigstore#282
- chore(deps): do not enable default features of chrono by @flavio in sigstore#286
- chore(deps): Update pem requirement from 2.0 to 3.0 by @dependabot in sigstore#289
- conformance: add conformance CLI and action by @jleightcap in sigstore#287
- chore: fix clippy warnings by @flavio in sigstore#292
- chore(deps): Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in sigstore#291
- chore(deps): Update tough requirement from 0.13 to 0.14 by @dependabot in sigstore#290
- chore(deps): update to latest version of picky by @flavio in sigstore#293
- chore(deps): Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in sigstore#294
- chore: add repository link to Cargo metadata by @flavio in sigstore#297
- chore(deps): Update cached requirement from 0.44.0 to 0.45.1 by @dependabot in sigstore#298
- chore(deps): Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in sigstore#302
- chore(deps): Update cached requirement from 0.45.1 to 0.46.0 by @dependabot in sigstore#301
- chore(deps): Update testcontainers requirement from 0.14 to 0.15 by @dependabot in sigstore#303
- chore(deps): Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in sigstore#304
- cosign/tuf: use trustroot by @jleightcap in sigstore#305
- Fix broken tests, update deps by @flavio in sigstore#313
- @jleightcap made their first contribution in sigstore#287
Full Changelog: https://github.com/sigstore/sigstore-rs/compare/v0.7.2...v0.8.0
- chore(deps): Update cached requirement from 0.42.0 to 0.44.0 by @dependabot in sigstore#277
- chore(deps): Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in sigstore#278
- chore(deps): update picky dependency by @flavio in sigstore#279
Full Changelog: https://github.com/sigstore/sigstore-rs/compare/v0.7.1...v0.7.2
- fix: ensure cosign client can be sent between threads by @flavio in sigstore#275
Full Changelog: https://github.com/sigstore/sigstore-rs/compare/v0.7.0...v0.7.1
- Fix typo in SignatureLayer::new doc comment by @danbev in sigstore#170
- feat: replace example dependency docker_credential by @Xynnn007 in sigstore#172
- Clean up readme by @lukehinds in sigstore#173
- chore(deps): Update rstest requirement from 0.15.0 to 0.16.0 by @dependabot in sigstore#174
- Fix typo in simple_signing.rs by @danbev in sigstore#175
- Introduce SignedArtifactBundle by @danbev in sigstore#171
- chore(deps): Update base64 requirement from 0.13.0 to 0.20.0 by @dependabot in sigstore#177
- chore(deps): Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in sigstore#180
- chore(deps): Update serial_test requirement from 0.9.0 to 0.10.0 by @dependabot in sigstore#182
- chore(deps): Update cached requirement from 0.40.0 to 0.41.0 by @dependabot in sigstore#181
- Fix typo in SecretBoxCipher doc comment by @danbev in sigstore#179
- chore(deps): Update cached requirement from 0.41.0 to 0.42.0 by @dependabot in sigstore#185
- chore(deps): Bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in sigstore#183
- chore(deps): Update base64 requirement from 0.20.0 to 0.21.0 by @dependabot in sigstore#184
- Add cosign verify-bundle example by @danbev in sigstore#186
- Fix incorrect base64_signature doc comment by @danbev in sigstore#188
- Fix typos in tuf/mod.rs by @danbev in sigstore#195
- chore(deps): Update serial_test requirement from 0.10.0 to 1.0.0 by @dependabot in sigstore#200
- fix: show actual response status field by @ctron in sigstore#197
- Update target -> target_name for consistency by @danbev in sigstore#196
- fix: make the fields accessible by @ctron in sigstore#202
- Add verify-bundle example to README.md by @danbev in sigstore#203
- fix: make fields of hash accessible by @ctron in sigstore#205
- Improve public key output and add file output by @Gronner in sigstore#194
- Add TokenProvider::Static doc comment by @danbev in sigstore#208
- Changed the type of LogEntry.body from String to Body by @Neccolini in sigstore#207
- Fix errors/warnings reported by clippy by @danbev in sigstore#210
- Add fine-grained features to control the compilation by @Xynnn007 in sigstore#189
- fix: bring tuf feature out of rekor and add related docs by @Xynnn007 in sigstore#211
- chore: update crypto deps by @flavio in sigstore#204
- Replace
x509-parserwithx509-certby @Xynnn007 in sigstore#212 - Fix: Wrong parameter order inside documentation example. by @vembacher in sigstore#215
- Remove lines about timestamp in lib.rs by @naveensrinivasan in sigstore#213
- Fix ed25519 version conflict by @vembacher in sigstore#223
- Support compiling to wasm32 architectures by @lulf in sigstore#221
- Fix link to contributor doc in readme by @oliviacrain in sigstore#225
- refactor: derive
Clonetrait by @flavio in https://gitub.com/sigstore/sigstore-rs/pull/227 - fix: correct typo in verify/main.rs by @danbev in sigstore#228
- chore(deps): Update tough requirement from 0.12 to 0.13 by @dependabot in sigstore#237
- chore(deps): Bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in sigstore#240
- dep: update picky version to git rid of
ringby @Xynnn007 in sigstore#226 - chore(deps): Bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in sigstore#245
- fix: make LogEntry Body an enum by @danbev in sigstore#244
- Add verify-blob example by @danbev in sigstore#239
- Introduce Newtype
OciReferenceinto API for OCI image references. by @vembacher in sigstore#216 - Swap over to using CDN to fetch TUF metadata by @haydentherapper in sigstore#251
- chore(deps): Bump actions/checkout from 3.5.0 to 3.5.2 by @dependabot in sigstore#252
- upgrade 'der' to 0.7.5 by @dmitris in sigstore#257
- remove unused 'clock' feature for chrono by @dmitris in sigstore#258
- update pkcs1 from 0.4.0 to 0.7.5 by @dmitris in sigstore#260
- use 2021 Rust edition by @dmitris in sigstore#261
- chore(deps): Update serial_test requirement from 1.0.0 to 2.0.0 by @dependabot in sigstore#264
- update scrypt to 0.11.0, adapt for API change (fix #231) by @dmitris in sigstore#268
- upgrade ed25519-dalek to 2.0.0-rc.2 by @dmitris in sigstore#263
- chore(deps): Update openidconnect requirement from 2.3 to 3.0 by @dependabot in sigstore#265
- chore(deps): Update rstest requirement from 0.16.0 to 0.17.0 by @dependabot in sigstore#271
- Update crypto deps by @flavio in sigstore#269
- Update create_log_entry example to create key pair. by @jvanz in sigstore#206
- @ctron made their first contribution in sigstore#197
- @Gronner made their first contribution in sigstore#194
- @Neccolini made their first contribution in sigstore#207
- @vembacher made their first contribution in sigstore#215
- @naveensrinivasan made their first contribution in sigstore#213
- @lulf made their first contribution in sigstore#221
- @oliviacrain made their first contribution in sigstore#225
- @haydentherapper made their first contribution in sigstore#251
- @dmitris made their first contribution in sigstore#257
- @jvanz made their first contribution in sigstore#206
Full Changelog: https://github.com/sigstore/sigstore-rs/compare/v0.6.0...v0.7.0h
- Fix typo in cosign/mod.rs doc comment by @danbev in sigstore#148
- Fix typo in KeyPair trait doc comment by @danbev in sigstore#149
- Update cached requirement from 0.39.0 to 0.40.0 by @dependabot in sigstore#154
- Fix typos in PublicKeyVerifier doc comments by @danbev in sigstore#155
- Fix: CI error for auto deref by @Xynnn007 in sigstore#160
- Fix typo and grammar in signature_layers.rs by @danbev in sigstore#161
- Remove unused imports in examples/rekor by @danbev in sigstore#162
- Update link to verification example by @danbev in sigstore#156
- Fix typos in from_encrypted_pem doc comments by @danbev in sigstore#164
- Fix typos in doc comments by @danbev in sigstore#163
- Update path to fulcio-cert in verify example by @danbev in sigstore#168
- Add getter functions for LogEntry fields by @lkatalin in sigstore#147
- Add TreeSize alias to Rekor by @avery-blanchard in sigstore#151
- Updates for parsing hashedrekord LogEntry by @lkatalin in sigstore#152
- Add certificate based verification by @flavio in sigstore#159
- Add support for OCI Image signing (spec v1.0) by @Xynnn007 in sigstore#158
- Avery Blanchard (@avery-blanchardmade)
- Daniel Bevenius (@danbev)
- Flavio Castelli (@flavio)
- Lily Sturmann (@lkatalin)
- Xynnn (@Xynnn007)
- rustls should not require openssl by (sigstore#146)
- Rework Rekor module structure and enable doc tests (sigstore#145)
- Flavio Castelli (@flavio)
- Lily Sturmann (@lkatalin)
- Address compilation error (sigstore#143)
- Flavio Castelli (@flavio)
- fix verification of signatures produced with PKI11 (sigstore#142)
- Update rsa dependency to stable version 0.7.0 (sigstore#141)
- Bump actions/checkout from 3.0.2 to 3.1.0 (sigstore#140)
- Flavio Castelli (@flavio)
- Xynnn (@Xynnn007)
- update user-agent value to be specific to sigstore-rs (sigstore#122)
- remove /api/v1/version from client by (sigstore#121)
- crate async fulcio client (sigstore#132)
- Removed ring dependency (sigstore#127)
- Update dependencies
- Refactoring and examples for key interface (sigstore#123)
- Fix doc test failures (sigstore#136)
- Bob Callaway (@bobcallaway)
- Bob McWhirter (@bobmcwhirter)
- Flavio Castelli (@flavio)
- Luke Hinds (@lukehinds)
- Xynnn (@Xynnn007)
- feat: from and to interface for signing and verification keys (https://github.com/sigstore/sigstore-rs/pulls/115)
- Refactor examples to support subfolder execution (https://github.com/sigstore/sigstore-rs/pulls/111)
- Integrate Rekor with Sigstore-rs (https://github.com/sigstore/sigstore-rs/pulls/88)
- feat: add example case and docs for key interface (https://github.com/sigstore/sigstore-rs/pulls/99)
- feat: add signing key module (https://github.com/sigstore/sigstore-rs/pulls/87)
- Update readme to include new features (https://github.com/sigstore/sigstore-rs/pulls/113)
- bump crate version (https://github.com/sigstore/sigstore-rs/pulls/118)
- Add RUSTSEC-2021-0139 to audit.toml (https://github.com/sigstore/sigstore-rs/pulls/112)
- Update xsalsa20poly1305 requirement from 0.7.1 to 0.9.0 (https://github.com/sigstore/sigstore-rs/pulls/101)
- ignore derive_partial_eq_without_eq (https://github.com/sigstore/sigstore-rs/pulls/102)
- fix clippy lints (https://github.com/sigstore/sigstore-rs/pulls/98)
- Carlos Tadeu Panato Junior (@cpanato)
- Flavio Castelli (@flavio)
- Jyotsna (@jyotsna-penumaka)
- Lily Sturmann (@lkatalin)
- Luke Hinds (@lukehinds)
- Tony Arcieri (@tarcieri)
- Xynnn_ (@Xynnn007)