v0.0.68

no release notes available

v0.0.66

[component-spec]

⚠️ Breaking Changes

• [DEVELOPER] Upgrade logr dependency to v1.2.3 (gardener/component-spec#79, @Diaphteiros)

v0.0.65

[component-spec]

📰 Noteworthy

• [USER] pass in hash function in rsa.Sign() and rsa.Verify() calls instead of passing in 0. this will apply EMSA-PKCS1-v1_5 encoding (https://datatracker.ietf.org/doc/html/rfc3447#section-9.2) before signing the data, which is part of standard RSASSA-PKCS1-v1_5 (https://datatracker.ietf.org/doc/html/rfc3447#section-8.2). (!) Attention: this change will break existing signatures. (gardener/component-spec#76, @jschicktanz)

v0.0.64

[component-spec]

📰 Noteworthy

• [USER] adds configurable media type to rsa signer (allows to write signatures in pem format to component descriptors) (gardener/component-spec#75, @jschicktanz)
  • renames some signature-related constants

v0.0.63

[component-spec]

⚠️ Breaking Changes

• [DEVELOPER] update go version to 1.18 (gardener/component-spec#69, @jschicktanz)

🏃 Others

• [DEVELOPER] component-descriptor validation now validates against json schema (gardener/component-spec#72, @enrico-kaack-comp)

v0.0.62

[component-spec]

🏃 Others

• [USER] adds cosign signature resource type (gardener/component-spec#67, @jschicktanz)

v0.0.61

[component-spec]

🏃 Others

• [USER] signature verify: improves internal verification handling coding (gardener/component-spec#66, @enrico-kaack-comp)

v0.0.60

[component-spec]

🏃 Others

• [USER] BREAKING: CD normalisation algorithm now contains more attributes. Already created signatures have to be recreated. (gardener/component-spec#63, @enrico-kaack-comp)
  • BREAKING: Special Digest annotation can be set to exclude a resource from signing.
  • BREAKING: renaming some constants

v0.0.59

no release notes available

v0.0.58

[component-spec]

🏃 Others

• [USER] first version for OCM specification (gardener/component-spec#59, @achimweigel)
• [OPERATOR] adds media type field to a signature (gardener/component-spec#58, @jschicktanz)
  • adds support for signatures in pem format in rsa verifier