v0.9.6

Changes by Kind

Bug or Regression

• Fixed RemoteTags() method (#141, @saschagrunert) [SIG Release]

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

v0.9.5

Changes by Kind

Feature

• Added github.ListIssues API. (#139, @saschagrunert) [SIG Release]
• Updated git.DefaultGitUser and git.DefaultGitEmail to be public constants. (#138, @saschagrunert) [SIG Release]

Dependencies

Added

• github.com/bwesterb/go-ristretto: v1.2.0
• github.com/cloudflare/circl: v1.1.0
• github.com/pjbgf/sha1cd: v0.2.3
• github.com/skeema/knownhosts: v1.1.0

Changed

• github.com/ProtonMail/go-crypto: 04723f9 → cf6655e
• github.com/anmitsu/go-shlex: 648efa6 → 38f4b40
• github.com/emirpasic/gods: v1.12.0 → v1.18.1
• github.com/gliderlabs/ssh: v0.2.2 → v0.3.5
• github.com/go-git/go-git-fixtures/v4: v4.2.1 → v4.3.1
• github.com/go-git/go-git/v5: v5.4.2 → v5.5.1
• github.com/imdario/mergo: v0.3.12 → v0.3.13
• github.com/kevinburke/ssh_config: 4977a11 → v1.2.0
• github.com/onsi/ginkgo/v2: v2.1.6 → v2.4.0
• github.com/onsi/gomega: v1.20.1 → v1.23.0
• github.com/xanzy/ssh-agent: v0.3.0 → v0.3.3
• golang.org/x/crypto: v0.1.0 → v0.3.0
• golang.org/x/net: v0.2.0 → 1e63c2f
• golang.org/x/oauth2: v0.2.0 → v0.3.0
• golang.org/x/sys: v0.2.0 → v0.3.0
• golang.org/x/term: v0.2.0 → v0.3.0
• golang.org/x/text: v0.4.0 → v0.5.0
• k8s.io/apimachinery: v0.25.4 → v0.26.0
• k8s.io/klog/v2: v2.70.1 → v2.80.1
• k8s.io/kube-openapi: 67bda5d → 172d655
• k8s.io/utils: ee6ede2 → 1a15be2

Removed

Nothing has changed.

v0.9.4

Changes by Kind

Feature

• Added ImagesSigned API (#123, @saschagrunert) [SIG Release]
• Added caching and VerifyImages API (#125, @saschagrunert) [SIG Release]

Dependencies

Added

• cloud.google.com/go/aiplatform: v1.24.0
• cloud.google.com/go/analytics: v0.12.0
• cloud.google.com/go/area120: v0.6.0
• cloud.google.com/go/artifactregistry: v1.7.0
• cloud.google.com/go/asset: v1.7.0
• cloud.google.com/go/assuredworkloads: v1.6.0
• cloud.google.com/go/automl: v1.6.0
• cloud.google.com/go/billing: v1.5.0
• cloud.google.com/go/binaryauthorization: v1.2.0
• cloud.google.com/go/cloudtasks: v1.6.0
• cloud.google.com/go/compute/metadata: v0.2.0
• cloud.google.com/go/containeranalysis: v0.6.0
• cloud.google.com/go/datacatalog: v1.6.0
• cloud.google.com/go/dataflow: v0.7.0
• cloud.google.com/go/dataform: v0.4.0
• cloud.google.com/go/datalabeling: v0.6.0
• cloud.google.com/go/dataqna: v0.6.0
• cloud.google.com/go/datastream: v1.3.0
• cloud.google.com/go/dialogflow: v1.16.1
• cloud.google.com/go/documentai: v1.8.0
• cloud.google.com/go/domains: v0.7.0
• cloud.google.com/go/edgecontainer: v0.1.0
• cloud.google.com/go/functions: v1.7.0
• cloud.google.com/go/gaming: v1.6.0
• cloud.google.com/go/gkeconnect: v0.6.0
• cloud.google.com/go/gkehub: v0.10.0
• cloud.google.com/go/language: v1.6.0
• cloud.google.com/go/lifesciences: v0.6.0
• cloud.google.com/go/mediatranslation: v0.6.0
• cloud.google.com/go/memcache: v1.5.0
• cloud.google.com/go/metastore: v1.6.0
• cloud.google.com/go/networkconnectivity: v1.5.0
• cloud.google.com/go/networksecurity: v0.6.0
• cloud.google.com/go/notebooks: v1.3.0
• cloud.google.com/go/osconfig: v1.8.0
• cloud.google.com/go/oslogin: v1.5.0
• cloud.google.com/go/phishingprotection: v0.6.0
• cloud.google.com/go/privatecatalog: v0.6.0
• cloud.google.com/go/recaptchaenterprise/v2: v2.2.0
• cloud.google.com/go/recommendationengine: v0.6.0
• cloud.google.com/go/recommender: v1.6.0
• cloud.google.com/go/redis: v1.8.0
• cloud.google.com/go/retail: v1.9.0
• cloud.google.com/go/scheduler: v1.5.0
• cloud.google.com/go/secretmanager: v1.6.0
• cloud.google.com/go/securitycenter: v1.14.0
• cloud.google.com/go/servicedirectory: v1.5.0
• cloud.google.com/go/speech: v1.7.0
• cloud.google.com/go/talent: v1.2.0
• cloud.google.com/go/videointelligence: v1.7.0
• cloud.google.com/go/vision/v2: v2.3.0
• cloud.google.com/go/webrisk: v1.5.0
• cloud.google.com/go/workflows: v1.7.0
• github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper: v0.2.0
• github.com/alibabacloud-go/alibabacloud-gateway-spi: v0.0.4
• github.com/alibabacloud-go/cr-20160607: v1.0.1
• github.com/alibabacloud-go/cr-20181201: v1.0.10
• github.com/alibabacloud-go/darabonba-openapi: v0.1.18
• github.com/alibabacloud-go/darabonba-string: v1.0.0
• github.com/alibabacloud-go/debug: 9472017
• github.com/alibabacloud-go/endpoint-util: v1.1.1
• github.com/alibabacloud-go/openapi-util: v0.0.11
• github.com/alibabacloud-go/tea-utils: v1.4.4
• github.com/alibabacloud-go/tea-xml: v1.1.2
• github.com/alibabacloud-go/tea: v1.1.18
• github.com/aliyun/credentials-go: v1.2.3
• github.com/arbovm/levenshtein: 48b4e1c
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.4.3
• github.com/aws/aws-sdk-go-v2/internal/v4a: v1.0.5
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.9.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.1.9
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.13.8
• github.com/aws/aws-sdk-go-v2/service/s3: v1.27.1
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6
• github.com/clbanning/mxj/v2: v2.5.6
• github.com/dgryski/trifles: dd97f9a
• github.com/google/go-github/v47: v47.1.0
• github.com/jellydator/ttlcache/v3: v3.0.0
• github.com/mozillazg/docker-credential-acr-helper: v0.3.0
• github.com/nozzle/throttler: 2ea9822
• github.com/tchap/go-patricia/v2: v2.3.1
• github.com/tjfoc/gmsm: v1.3.2
• github.com/vmihailenco/msgpack/v5: v5.3.5
• github.com/vmihailenco/tagparser/v2: v2.0.0

Changed

• bazil.org/fuse: 5883e5a → 65cc252
• cloud.google.com/go/bigquery: v1.17.0 → v1.42.0
• cloud.google.com/go/compute: v1.7.0 → v1.10.0
• cloud.google.com/go/iam: v0.3.0 → v0.5.0
• cloud.google.com/go/security: v1.4.1 → v1.8.0
• cloud.google.com/go/spanner: v1.31.0 → v1.36.0
• cloud.google.com/go/storage: v1.22.1 → v1.23.0
• cloud.google.com/go: v0.103.0 → v0.104.0
• filippo.io/edwards25519: v1.0.0-rc.1 → v1.0.0
• github.com/Azure/go-autorest/autorest/adal: v0.9.20 → v0.9.21
• github.com/Azure/go-autorest/autorest/azure/cli: v0.4.5 → v0.4.6
• github.com/BurntSushi/toml: v0.4.1 → v0.3.1
• github.com/Masterminds/goutils: v1.1.0 → v1.1.1
• github.com/Microsoft/go-winio: v0.5.2 → v0.6.0
• github.com/NYTimes/gziphandler: v1.1.1 → 56545f4
• github.com/agnivade/levenshtein: v1.0.1 → v1.1.1
• github.com/armon/go-metrics: v0.4.0 → v0.4.1
• github.com/aws/aws-sdk-go-v2/config: v1.17.1 → v1.17.8
• github.com/aws/aws-sdk-go-v2/credentials: v1.12.14 → v1.12.21
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.12 → v1.12.17
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.18 → v1.1.23
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.12 → v2.4.17
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.19 → v1.3.24
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.12 → v1.9.17
• github.com/aws/aws-sdk-go-v2/service/kms: v1.18.4 → v1.18.11
• github.com/aws/aws-sdk-go-v2/service/sso: v1.11.17 → v1.11.23
• github.com/aws/aws-sdk-go-v2/service/sts: v1.16.13 → v1.16.19
• github.com/aws/aws-sdk-go-v2: v1.16.11 → v1.16.16
• github.com/aws/aws-sdk-go: v1.44.80 → v1.44.114
• github.com/aws/smithy-go: v1.12.1 → v1.13.3
• github.com/bytecodealliance/wasmtime-go: v0.36.0 → v1.0.0
• github.com/containerd/containerd: v1.6.6 → v1.6.8
• github.com/containerd/stargz-snapshotter/estargz: v0.12.0 → v0.12.1
• github.com/coreos/go-oidc/v3: v3.2.0 → v3.4.0
• github.com/coreos/go-systemd: [e64a0ec → 95778df](https://github.com/coreos/go-systemd/compa...

v0.9.3

Changes by Kind

API Change

• Added accessor methods for Image() and File() of SignedObject. (#91, @saschagrunert) [SIG Release]

Bug or Regression

• Fixed invalid error message if branch already exists in GitHub fork. (#86, @saschagrunert) [SIG Release]

Other (Cleanup or Flake)

• Changed default sign Options.PassFunc to be nil, which acts as having no password provided at all. (#90, @saschagrunert) [SIG Release]

Dependencies

Added

• github.com/AdaLogics/go-fuzz-headers: 6c3934b
• github.com/agnivade/levenshtein: v1.0.1
• github.com/andreyvit/diff: c7f18ee
• github.com/depcheck-test/depcheck-test: 199033a
• github.com/distribution/distribution/v3: ffbd94c
• github.com/emicklei/go-restful/v3: v3.8.0
• github.com/go-logr/stdr: v1.2.2
• github.com/goadesign/goa: v2.2.5+incompatible
• github.com/gofrs/uuid: v4.0.0+incompatible
• github.com/golang-jwt/jwt: v3.2.2+incompatible
• github.com/gomodule/redigo: v1.8.2
• github.com/google/tink/go: v1.7.0
• github.com/googleapis/enterprise-certificate-proxy: v0.1.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.11.2
• github.com/intel/goresctrl: v0.2.0
• github.com/jellydator/ttlcache/v2: v2.11.1
• github.com/jhump/gopoet: v0.1.0
• github.com/jhump/goprotoc: v0.5.0
• github.com/joefitzgerald/rainbow-reporter: v0.1.0
• github.com/linuxkit/virtsock: f8cee7d
• github.com/moby/sys/signal: v0.6.0
• github.com/networkplumbing/go-nft: v0.2.0
• github.com/onsi/ginkgo/v2: v2.1.4
• github.com/phayes/freeport: 74d24b5
• github.com/prashantv/gostub: v1.1.0
• github.com/sclevine/agouti: v3.0.0+incompatible
• github.com/vektah/gqlparser/v2: v2.4.6
• github.com/withfig/autocomplete-tools/integrations/cobra: v1.2.1
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.32.0
• go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.7.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.7.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.3.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.7.0
• goa.design/goa: v2.2.5+incompatible
• oras.land/oras-go: v1.2.0

Changed

• bazil.org/fuse: 65cc252 → 5883e5a
• cloud.google.com/go/compute: v1.6.1 → v1.7.0
• cloud.google.com/go/security: v1.1.1 → v1.4.1
• cloud.google.com/go: v0.100.2 → v0.103.0
• contrib.go.opencensus.io/exporter/ocagent: 05415f1 → v0.5.0
• github.com/Azure/azure-sdk-for-go: v65.0.0+incompatible → v66.0.0+incompatible
• github.com/Azure/go-autorest/autorest/adal: v0.9.18 → v0.9.20
• github.com/Azure/go-autorest/autorest: v0.11.27 → v0.11.28
• github.com/Masterminds/goutils: v1.1.1 → v1.1.0
• github.com/Microsoft/hcsshim: v0.8.23 → v0.9.3
• github.com/NYTimes/gziphandler: 56545f4 → v1.1.1
• github.com/alexflint/go-filemutex: 72bdc8e → v1.1.0
• github.com/apache/beam: v2.32.0+incompatible → v2.28.0+incompatible
• github.com/aws/aws-sdk-go-v2/config: v1.15.10 → v1.17.1
• github.com/aws/aws-sdk-go-v2/credentials: v1.12.5 → v1.12.14
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.6 → v1.12.12
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.12 → v1.1.18
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.6 → v2.4.12
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.13 → v1.3.19
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.6 → v1.9.12
• github.com/aws/aws-sdk-go-v2/service/kms: v1.17.3 → v1.18.4
• github.com/aws/aws-sdk-go-v2/service/sso: v1.11.8 → v1.11.17
• github.com/aws/aws-sdk-go-v2/service/sts: v1.16.7 → v1.16.13
• github.com/aws/aws-sdk-go-v2: v1.16.5 → v1.16.11
• github.com/aws/aws-sdk-go: v1.44.33 → v1.44.80
• github.com/aws/smithy-go: v1.11.3 → v1.12.1
• github.com/bshuster-repo/logrus-logstash-hook: v0.4.1 → v1.0.0
• github.com/buger/jsonparser: f4dd9f5 → v1.1.1
• github.com/bytecodealliance/wasmtime-go: v0.33.1 → v0.36.0
• github.com/carolynvs/magex: v0.8.1 → v0.9.0
• github.com/cenkalti/backoff/v4: v4.1.1 → v4.1.3
• github.com/checkpoint-restore/go-criu/v5: v5.0.0 → v5.3.0
• github.com/cilium/ebpf: v0.6.2 → v0.7.0
• github.com/containerd/cgroups: v1.0.1 → v1.0.3
• github.com/containerd/console: v1.0.2 → v1.0.3
• github.com/containerd/containerd: v1.5.8 → v1.6.6
• github.com/containerd/continuity: v0.1.0 → v0.2.2
• github.com/containerd/go-cni: v1.0.2 → v1.1.6
• github.com/containerd/imgcrypt: v1.1.1 → v1.1.4
• github.com/containerd/stargz-snapshotter/estargz: v0.11.4 → v0.12.0
• github.com/containernetworking/cni: v0.8.1 → v1.1.1
• github.com/containernetworking/plugins: v0.9.1 → v1.1.1
• github.com/containers/ocicrypt: v1.1.1 → v1.1.3
• github.com/coreos/go-iptables: v0.5.0 → v0.6.0
• github.com/cyphar/filepath-securejoin: v0.2.2 → v0.2.3
• github.com/docker/cli: v20.10.16+incompatible → v20.10.17+incompatible
• github.com/docker/docker: v20.10.16+incompatible → v20.10.17+incompatible
• github.com/eggsampler/acme/v3: v3.2.1 → v3.3.0
• github.com/felixge/httpsnoop: v1.0.1 → v1.0.2
• github.com/go-ini/ini: v1.25.4 → v1.66.6
• github.com/go-logr/logr: v1.2.2 → v1.2.3
• github.com/go-openapi/analysis: [v0.21.2 → v0.21.4](https://github.com/go-openapi/analy...

v0.9.2

Changes by Kind

Bug or Regression

• Fixed broken authorization caused by httpcache. (#75, @saschagrunert) [SIG Release]

Dependencies

Added

• github.com/apache/beam/sdks/v2: ef43645
• github.com/fxamacker/cbor/v2: v2.4.0
• github.com/linkedin/goavro: v2.1.0+incompatible
• github.com/nightlyone/lockfile: v1.0.0
• github.com/prometheus/prometheus: v2.5.0+incompatible
• github.com/veraison/go-cose: v1.0.0-alpha.1
• github.com/x448/float16: v0.8.4
• gopkg.in/linkedin/goavro.v1: v1.0.5

Changed

• bitbucket.org/creachadair/shell: v0.0.6 → v0.0.7
• cloud.google.com/go/bigquery: v1.8.0 → v1.17.0
• cloud.google.com/go/datastore: v1.1.0 → v1.5.0
• cloud.google.com/go/pubsub: v1.17.1 → v1.11.0-beta.schemas
• cloud.google.com/go/spanner: v1.25.0 → v1.31.0
• contrib.go.opencensus.io/exporter/aws: c478e41 → 2befc13
• contrib.go.opencensus.io/exporter/stackdriver: v0.13.10 → v0.13.12
• contrib.go.opencensus.io/integrations/ocsql: v0.1.7 → v0.1.4
• github.com/Azure/azure-pipeline-go: v0.2.3 → v0.2.1
• github.com/Azure/azure-sdk-for-go: v63.3.0+incompatible → v65.0.0+incompatible
• github.com/Azure/azure-service-bus-go: v0.11.5 → v0.9.1
• github.com/Azure/azure-storage-blob-go: v0.14.0 → v0.8.0
• github.com/GoogleCloudPlatform/cloudsql-proxy: v1.27.0 → e802c2c
• github.com/aws/aws-sdk-go-v2/config: v1.14.0 → v1.15.10
• github.com/aws/aws-sdk-go-v2/credentials: v1.9.0 → v1.12.5
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.11.0 → v1.12.6
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.5 → v1.1.12
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.3.0 → v2.4.6
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.6 → v1.3.13
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.8.0 → v1.9.6
• github.com/aws/aws-sdk-go-v2/service/kms: v1.10.0 → v1.17.3
• github.com/aws/aws-sdk-go-v2/service/sso: v1.10.0 → v1.11.8
• github.com/aws/aws-sdk-go-v2/service/sts: v1.15.0 → v1.16.7
• github.com/aws/aws-sdk-go-v2: v1.16.4 → v1.16.5
• github.com/aws/aws-sdk-go: v1.43.45 → v1.44.33
• github.com/aws/smithy-go: v1.11.2 → v1.11.3
• github.com/coreos/go-oidc/v3: v3.1.0 → v3.2.0
• github.com/cyphar/filepath-securejoin: v0.2.3 → v0.2.2
• github.com/fullstorydev/grpcurl: v1.8.2 → v1.8.6
• github.com/gin-gonic/gin: v1.7.3 → v1.5.0
• github.com/go-kit/log: v0.1.0 → v0.2.0
• github.com/go-logfmt/logfmt: v0.5.0 → v0.5.1
• github.com/go-openapi/jsonreference: v0.19.6 → v0.20.0
• github.com/go-openapi/spec: v0.20.4 → v0.20.6
• github.com/go-openapi/validate: v0.21.0 → v0.22.0
• github.com/go-playground/validator/v10: v10.10.0 → v10.11.0
• github.com/go-rod/rod: v0.106.1 → v0.107.1
• github.com/google/go-containerregistry: v0.9.0 → v0.10.0
• github.com/google/go-github/v45: v45.1.0 → v45.2.0
• github.com/google/go-replayers/grpcreplay: v1.1.0 → v0.1.0
• github.com/google/go-replayers/httpreplay: v1.0.0 → v0.1.0
• github.com/google/trillian: v1.4.0 → v1.4.1
• github.com/hashicorp/go-hclog: v1.2.0 → v1.2.1
• github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.5 → v0.1.6
• github.com/hashicorp/vault/api: v1.5.0 → v1.7.2
• github.com/hashicorp/vault/sdk: v0.5.0 → v0.5.1
• github.com/jedisct1/go-minisign: c1f07ee → 1c139d1
• github.com/jhump/protoreflect: v1.9.0 → v1.10.3
• github.com/jonboulle/clockwork: v0.2.2 → v0.3.0
• github.com/lib/pq: v1.10.4 → v1.10.3
• github.com/mattn/go-ieproxy: v0.0.1 → 91bb50d
• github.com/mediocregopher/radix/v4: v4.0.0 → v4.1.0
• github.com/prometheus/client_golang: v1.12.1 → v1.12.2
• github.com/prometheus/common: v0.32.1 → v0.34.0
• github.com/pseudomuto/protoc-gen-doc: v1.5.0 → v1.5.1
• github.com/sigstore/cosign: v1.9.0 → 190e679
• github.com/sigstore/rekor: 23f5834 → v0.9.1
• github.com/sigstore/sigstore: 3d41663 → 9c0e2e2
• github.com/spf13/cobra: v1.4.0 → v1.5.0
• github.com/stretchr/objx: v0.3.0 → v0.4.0
• github.com/stretchr/testify: v1.7.2 → v1.8.0
• github.com/theupdateframework/go-tuf: v0.3.0 → v0.3.1
• github.com/urfave/cli: v1.22.5 → v1.22.7
• go.etcd.io/etcd/etcdctl/v3: v3.5.0 → v3.5.4
• go.etcd.io/etcd/etcdutl/v3: v3.5.0 → v3.5.4
• go.etcd.io/etcd/pkg/v3: v3.5.0 → v3.5.4
• go.etcd.io/etcd/raft/v3: v3.5.0 → v3.5.4
• go.etcd.io/etcd/server/v3: v3.5.0 → v3.5.4
• go.etcd.io/etcd/tests/v3: v3.5.0 → v3.5.4
• go.etcd.io/etcd/v3: v3.5.0 → v3.5.4
• go.opentelemetry.io/contrib: v1.3.0 → v1.6.0
• go.uber.org/multierr: v1.7.0 → v1.8.0
• golang.org/x/net: 2e3eb7b → c690dde
• golang.org/x/oauth2: 9780585 → 622c5d5
• golang.org/x/sync: 0976fa6 → 0de741c
• google.golang.org/api: v0.81.0 → v0.83.0
• google.golang.org/genproto: 3a47de7 → e326c6e
• google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.1.0 → v1.2.0
• google.golang.org/grpc: v1.46.2 → v1.47.0
• gopkg.in/ini.v1: v1.66.4 → v1.66.6
• gotest.tools/v3: v3.0.3 → v3.1.0
• k8s.io/apimachinery: v0.24.1 → v0.24.3
• sigs.k8s.io/release-utils: v0.7.0 → v0.7.2

Removed

• cloud.google.com/go/secretmanager: v1.0.0
• github.com/AdaLogics/go-fuzz-headers: f7be0cb
• github.com/Azure/azure-amqp-common-go/v3: v3.2.2
• github.com/Azure/go-amqp: v0.16.4
• github.com/agnivade/levenshtein: v1.0.1
• github.com/andreyvit/diff: c7f18ee
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.0.0
• github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.7.1
• githu...

v0.9.1

Changes by Kind

Bug or Regression

• Fixed broken authorization caused by httpcache. (#75, @saschagrunert) [SIG Release]

Dependencies

Added

• github.com/google/go-github/v45: v45.1.0

Changed

• github.com/containerd/containerd: v1.5.9 → v1.5.8
• github.com/containerd/stargz-snapshotter/estargz: v0.10.1 → v0.11.4
• github.com/cpuguy83/go-md2man/v2: v2.0.1 → v2.0.2
• github.com/docker/cli: v20.10.12+incompatible → v20.10.16+incompatible
• github.com/docker/distribution: v2.8.0+incompatible → v2.8.1+incompatible
• github.com/docker/docker: v20.10.12+incompatible → v20.10.16+incompatible
• github.com/google/go-containerregistry: a44adc3 → v0.9.0
• github.com/google/go-github/v39: v39.2.0 → v39.0.0
• github.com/klauspost/compress: v1.14.2 → v1.15.4
• github.com/stretchr/testify: v1.7.1 → v1.7.2
• gopkg.in/yaml.v3: v3.0.0 → v3.0.1
• sigs.k8s.io/release-utils: d4a2a2f → v0.7.0

Removed

Nothing has changed.

Full Changelog: v0.9.0...v0.9.1

v0.9.0

Changes by Kind

Feature

• GitHub API responses are now automatically cached, preventing getting rate-limited by GitHub in repetitive usage. (#58, @wilsonehusin) [SIG Release]

Failing Test

• Switched to go 1.18 modules as minimum requirement. (#66, @saschagrunert) [SIG Release]

Bug or Regression

• GitHub replay ListTags to return data instead of empty slice. (#60, @wilsonehusin) [SIG Release]
• The sign package now uses cosign v1.7.1 (#54, @puerco) [SIG Release]
• The signer object will now wait and retry if validating a signature fails after signing. The number of retries can be controlled with a new MaxRetries option. (#55, @puerco) [SIG Release]

Dependencies

Added

• github.com/google/gnostic: v0.5.7-v3refs
• github.com/googleapis/go-type-adapters: v1.0.0
• github.com/pelletier/go-toml/v2: v2.0.1
• github.com/transparency-dev/merkle: v0.0.1

Changed

• cloud.google.com/go/compute: v1.5.0 → v1.6.1
• cloud.google.com/go/iam: v0.1.1 → v0.3.0
• cloud.google.com/go/storage: v1.21.0 → v1.22.1
• cuelang.org/go: v0.4.2 → v0.4.3
• dmitri.shuralyov.com/gpu/mtl: 28db891 → 666a987
• github.com/Azure/azure-sdk-for-go: v63.0.0+incompatible → v63.3.0+incompatible
• github.com/Azure/go-autorest/autorest: v0.11.25 → v0.11.27
• github.com/Microsoft/go-winio: v0.5.1 → v0.5.2
• github.com/armon/go-metrics: v0.3.10 → v0.4.0
• github.com/aws/aws-sdk-go-v2: v1.14.0 → v1.16.4
• github.com/aws/aws-sdk-go: v1.43.30 → v1.43.45
• github.com/aws/smithy-go: v1.11.0 → v1.11.2
• github.com/carolynvs/magex: v0.7.1 → v0.8.1
• github.com/coreos/go-systemd: fd7a80b → e64a0ec
• github.com/dsnet/compress: v0.0.1 → f669936
• github.com/envoyproxy/go-control-plane: v0.10.1 → 49ff273
• github.com/frankban/quicktest: v1.13.0 → v1.14.3
• github.com/fsnotify/fsnotify: v1.5.1 → v1.5.4
• github.com/go-openapi/runtime: v0.23.3 → v0.24.1
• github.com/go-rod/rod: v0.104.4 → v0.106.1
• github.com/gobuffalo/attrs: v0.1.0 → a9411de
• github.com/gobuffalo/envy: v1.9.0 → v1.7.0
• github.com/gobuffalo/logger: v1.0.3 → 86e12af
• github.com/gobuffalo/packd: v1.0.0 → v0.1.0
• github.com/gobuffalo/packr/v2: v2.8.0 → v2.2.0
• github.com/google/go-cmp: v0.5.7 → v0.5.8
• github.com/google/go-containerregistry/pkg/authn/k8schain: f1fa40b → f1b065c
• github.com/googleapis/gax-go/v2: v2.2.0 → v2.4.0
• github.com/hashicorp/go-plugin: v1.4.3 → v1.4.4
• github.com/hashicorp/go-retryablehttp: v0.7.0 → v0.7.1
• github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.3 → v0.1.5
• github.com/hashicorp/go-uuid: v1.0.2 → v1.0.3
• github.com/hashicorp/go-version: v1.4.0 → v1.5.0
• github.com/hashicorp/serf: v0.9.6 → v0.9.7
• github.com/hashicorp/vault/sdk: v0.4.1 → v0.5.0
• github.com/jmoiron/sqlx: v1.3.4 → v1.2.0
• github.com/karrick/godirwalk: v1.16.1 → v1.10.3
• github.com/klauspost/pgzip: v1.2.4 → v1.2.5
• github.com/magiconair/properties: v1.8.5 → v1.8.6
• github.com/markbates/oncer: v1.0.0 → bf2de49
• github.com/mattn/go-sqlite3: v2.0.3+incompatible → v1.9.0
• github.com/mholt/archiver/v3: v3.5.0 → v3.5.1
• github.com/mitchellh/mapstructure: v1.4.3 → v1.5.0
• github.com/pelletier/go-toml: v1.9.4 → v1.9.5
• github.com/pierrec/lz4/v4: v4.0.3 → v4.1.2
• github.com/rogpeppe/go-internal: v1.8.0 → v1.8.1
• github.com/sagikazarmark/crypt: v0.4.0 → v0.6.0
• github.com/secure-systems-lab/go-securesystemslib: v0.3.1 → v0.4.0
• github.com/sigstore/cosign: v1.7.1 → v1.9.0
• github.com/sigstore/sigstore: 0e610e3 → 3d41663
• github.com/spf13/afero: v1.8.0 → v1.8.2
• github.com/spf13/cast: v1.4.1 → v1.5.0
• github.com/spf13/viper: v1.10.1 → v1.12.0
• github.com/spiffe/go-spiffe/v2: v2.0.0 → v2.1.0
• github.com/subosito/gotenv: v1.2.0 → v1.3.0
• github.com/theupdateframework/go-tuf: f0c3294 → v0.3.0
• github.com/xanzy/go-gitlab: v0.61.0 → v0.68.0
• github.com/ysmood/goob: v0.3.1 → v0.4.0
• github.com/ysmood/got: v0.19.1 → v0.15.1
• github.com/ysmood/gotrace: v0.4.0 → v0.2.2
• github.com/ysmood/gson: v0.7.0 → v0.7.1
• go.etcd.io/etcd/api/v3: v3.5.1 → v3.5.4
• go.etcd.io/etcd/client/pkg/v3: v3.5.1 → v3.5.4
• go.etcd.io/etcd/client/v2: v2.305.1 → v2.305.4
• go.etcd.io/etcd/client/v3: v3.5.0 → v3.5.4
• golang.org/x/crypto: 8634188 → 7b82a4e
• golang.org/x/mobile: e6ae53a → d2bd2a2
• golang.org/x/net: de3da57 → 2e3eb7b
• golang.org/x/oauth2: 6242fa9 → 9780585
• golang.org/x/sync: 036812b → 0976fa6
• golang.org/x/sys: d36c6a2 → bc2c85a
• golang.org/x/time: 0e9765c → 583f2d6
• golang.org/x/xerrors: 5ec99f8 → f3a8303
• google.golang.org/api: v0.74.0 → v0.81.0
• google.golang.org/genproto: acbaeb5 → 3a47de7
• google.golang.org/grpc: v1.45.0 → v1.46.2
• gopkg.in/ini.v1: v1.66.2 → v1.66.4
• gopkg.in/yaml.v3: 496545a → v3.0.0
• k8s.io/api: v0.23.5 → v0.24.0
• k8s.io/apimachinery: v0.23.5 → v0.24.1
• k8s.io/client-go: v0.23.5 → v0.24.0
• k8s.io/code-generator: v0.23.5 → v0.23.6
• k8s.io/klog/v2: 43cc75f → v2.60.1
• k8s.io/kube-openapi: 4241196 → 3ee0da9

Removed

• github.com/DATA-DOG/go-sqlmock: v1.5.0
• github.com/DataDog/zstd: v1.4.5
• github.com/facebookgo/ensure: 63f1cf6
• github.com/facebookgo/stack: 7517733
• github.com/facebookgo/subset: c811ad8
• github.com/gobuffalo/fizz: v1.10.0
• github.com/gobuffalo/genny/v2: [v2.0.5](https://github.com/gobuffalo/genny/v2/tree/...

v0.8.0

Release Notes

Changes by Kind

Feature

• Add signature image to the object (#53, @cpanato) [SIG Release]
• When signing a container image, attaching the signature by pushing it to the registry is now optional. (#48, @puerco) [SIG Release]

Bug or Regression

• Fixed a bug where image signing "failed" when trying to verify signed images that do not have their signatures attached (#49, @puerco) [SIG Release]
• Skips image verification if there are no matching signatures (#50, @palnabarun) [SIG Release]
• The sign package now uses cosign v1.7.1 (#54, @puerco) [SIG Release]

Other (Cleanup or Flake)

• Logging an info message if an unsigned images is skipped during its verification. (#51, @saschagrunert) [SIG Release]
• Removed direct github.com/pkg/errors dependency by using golang native error wrapping. (#52, @saschagrunert) [SIG Release]

Dependencies

Added

• 4d63.com/gochecknoglobals: v0.1.0
• github.com/Antonboom/errname: v0.1.5
• github.com/Antonboom/nilnil: v0.1.0
• github.com/DATA-DOG/go-sqlmock: v1.5.0
• github.com/DataDog/zstd: v1.4.5
• github.com/Djarvur/go-err113: aea10b5
• github.com/OpenPeeDeeP/depguard: v1.0.1
• github.com/StackExchange/wmi: v1.2.1
• github.com/alexkohler/prealloc: v1.0.0
• github.com/ashanbrown/forbidigo: v1.2.0
• github.com/ashanbrown/makezero: b626158
• github.com/beeker1121/goque: d618510
• github.com/bkielbasa/cyclop: v1.2.0
• github.com/blizzy78/varnamelen: v0.3.0
• github.com/bombsimon/wsl/v3: v3.3.0
• github.com/breml/bidichk: v0.1.1
• github.com/butuzov/ireturn: v0.1.1
• github.com/charithe/durationcheck: v0.0.9
• github.com/chavacava/garif: e8a0a40
• github.com/daixiang0/gci: v0.2.9
• github.com/denis-tingajkin/go-header: v0.4.2
• github.com/dgryski/go-rendezvous: 9f7001d
• github.com/eggsampler/acme/v3: v3.2.1
• github.com/esimonov/ifshort: v1.0.3
• github.com/ettle/strcase: v0.1.1
• github.com/facebookgo/clock: 600d898
• github.com/facebookgo/ensure: 63f1cf6
• github.com/facebookgo/limitgroup: 6abd8d7
• github.com/facebookgo/muster: fd3d795
• github.com/facebookgo/stack: 7517733
• github.com/facebookgo/subset: c811ad8
• github.com/fatih/structtag: v1.2.0
• github.com/fzipp/gocyclo: v0.3.1
• github.com/go-critic/go-critic: v0.6.1
• github.com/go-gorp/gorp/v3: v3.0.2
• github.com/go-ole/go-ole: v1.2.6
• github.com/go-redis/redis/v8: v8.11.4
• github.com/go-toolsmith/astcast: v1.0.0
• github.com/go-toolsmith/astcopy: v1.0.0
• github.com/go-toolsmith/astequal: v1.0.1
• github.com/go-toolsmith/astfmt: v1.0.0
• github.com/go-toolsmith/astinfo: 9809ff7
• github.com/go-toolsmith/astp: v1.0.0
• github.com/go-toolsmith/pkgload: v1.0.0
• github.com/go-toolsmith/strparse: v1.0.0
• github.com/go-toolsmith/typep: v1.0.2
• github.com/go-xmlfmt/xmlfmt: d5b6f63
• github.com/gobuffalo/fizz: v1.10.0
• github.com/gobuffalo/genny/v2: v2.0.5
• github.com/gobuffalo/github_flavored_markdown: v1.1.0
• github.com/gobuffalo/helpers: v0.6.1
• github.com/gobuffalo/nulls: v0.2.0
• github.com/gobuffalo/plush/v4: v4.0.0
• github.com/gobuffalo/pop/v5: v5.3.1
• github.com/gobuffalo/tags/v3: v3.1.0
• github.com/gobuffalo/validate/v3: v3.1.0
• github.com/gofrs/flock: v0.8.1
• github.com/gofrs/uuid: v3.2.0+incompatible
• github.com/golangci/check: cfe4005
• github.com/golangci/dupl: 3e9179a
• github.com/golangci/go-misc: 927a3d8
• github.com/golangci/gofmt: 244bba7
• github.com/golangci/golangci-lint: v1.43.0
• github.com/golangci/lint-1: 297bf36
• github.com/golangci/maligned: b1d8939
• github.com/golangci/misspell: v0.3.5
• github.com/golangci/revgrep: c22e500
• github.com/golangci/unconvert: 28b1c44
• github.com/gookit/color: v1.4.2
• github.com/gorhill/cronexpr: 88b0669
• github.com/gostaticanalysis/analysisutil: v0.7.1
• github.com/gostaticanalysis/comment: v1.4.2
• github.com/gostaticanalysis/forcetypeassert: 01d4955
• github.com/gostaticanalysis/nilerr: v0.1.1
• github.com/gostaticanalysis/testutil: v0.4.0
• github.com/honeycombio/beeline-go: v1.1.1
• github.com/honeycombio/libhoney-go: v1.15.2
• github.com/jackc/chunkreader/v2: v2.0.1
• github.com/jackc/chunkreader: v1.0.0
• github.com/jackc/pgconn: v1.6.0
• github.com/jackc/pgio: v1.0.0
• github.com/jackc/pgmock: 13a1b77
• github.com/jackc/pgpassfile: v1.0.0
• github.com/jackc/pgproto3/v2: v2.0.2
• github.com/jackc/pgproto3: v1.1.0
• github.com/jackc/pgservicefile: 3430c54
• github.com/jackc/pgtype: v1.3.0
• github.com/jackc/pgx/v4: v4.6.0
• github.com/jackc/pgx: v3.6.2+incompatible
• github.com/jackc/puddle: v1.1.0
• github.com/jgautheron/goconst: v1.5.1
• github.com/jingyugao/rowserrcheck: v1.1.1
• github.com/jirfag/go-printf-func-name: 7558a9e
• github.com/jmhodges/clock: 880ee4c
• github.com/jmoiron/sqlx: v1.3.4
• github.com/josharian/txtarfs: 0702f00
• github.com/julz/importas: 841f0c0
• github.com/k0kubun/colorstring: 9440f19
• github.com/kballard/go-shellquote: [95032a8](htt...

v0.7.0

What's Changed

• Add sign package skeleton by @saschagrunert in #19
• Split Sign API into SignImage and SignFile by @saschagrunert in #20
• Implement container image signing by @cpanato in #25
• Make signer implementation internal by @saschagrunert in #28
• Add signing timeout by @saschagrunert in #26
• Catch os.SetEnv errors by @saschagrunert in #27
• Split Verify API into VerifyImage and VerifyFile by @PushkarJ in #32
• Add initial integration tests for SignImage by @xmudrii in #31
• Add the integration tests for SignFile by @xmudrii in #35
• Move Git integration tests to the test/integration pkg by @xmudrii in #34
• Implement Image Signing Verification by @PushkarJ in #33
• Refactor COSIGN_EXPERIMENTAL into own method by @saschagrunert in #36
• github: add update issue api by @cpanato in #38
• Pull Request Template by @puerco in #40
• sign: IsImageSigned() by @puerco in #39
• sign: Use cosign's OCI Remote to check for signatures by @puerco in #41
• github: add labels to issues function by @cpanato in #43
• Signer: Support external OIDC tokens. Fail early if token missing. by @puerco in #42
• Remove log from signer impl and add it to options by @saschagrunert in #44
• deps: Update to cosign v1.5.2 by @justaugustus in #45
• Move implementation details from IsImageSignedInternal by @saschagrunert in #46
• Bump docker-distribution and image-spec deps by @saschagrunert in #47

New Contributors

• @PushkarJ made their first contribution in #32
• @xmudrii made their first contribution in #31

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• Added ListTags function by @cpanato in #17
• Added LatestReleaseBranch() and RemoteBranches() git API by @saschagrunert in #18
• Renamed default git user to k8s-release-robot by @justaugustus in #16

New Contributors

• @cpanato made their first contribution in #17

Full Changelog: v0.5.0...v0.6.0