Version Packages

sigstore · Jan 5, 2024 · 2801631 · 2801631
1 parent c29d6be
commit 2801631
Show file tree

Hide file tree

Showing 42 changed files with 146 additions and 141 deletions.
diff --git a/.changeset/beige-keys-appear.md b/.changeset/beige-keys-appear.md
diff --git a/.changeset/friendly-toes-end.md b/.changeset/friendly-toes-end.md
diff --git a/.changeset/fuzzy-files-cross.md b/.changeset/fuzzy-files-cross.md
diff --git a/.changeset/gold-walls-smoke.md b/.changeset/gold-walls-smoke.md
diff --git a/.changeset/healthy-walls-raise.md b/.changeset/healthy-walls-raise.md
diff --git a/.changeset/khaki-chefs-smile.md b/.changeset/khaki-chefs-smile.md
diff --git a/.changeset/lemon-eggs-admire.md b/.changeset/lemon-eggs-admire.md
diff --git a/.changeset/little-toes-live.md b/.changeset/little-toes-live.md
diff --git a/.changeset/neat-poems-itch.md b/.changeset/neat-poems-itch.md
diff --git a/.changeset/nine-donuts-marry.md b/.changeset/nine-donuts-marry.md
diff --git a/.changeset/orange-snakes-give.md b/.changeset/orange-snakes-give.md
diff --git a/.changeset/plenty-glasses-chew.md b/.changeset/plenty-glasses-chew.md
diff --git a/.changeset/popular-eagles-explain.md b/.changeset/popular-eagles-explain.md
diff --git a/.changeset/rude-meals-tap.md b/.changeset/rude-meals-tap.md
diff --git a/.changeset/selfish-ants-exercise.md b/.changeset/selfish-ants-exercise.md
diff --git a/.changeset/shaggy-hotels-cheat.md b/.changeset/shaggy-hotels-cheat.md
diff --git a/.changeset/shy-cameras-carry.md b/.changeset/shy-cameras-carry.md
diff --git a/.changeset/slimy-apricots-look.md b/.changeset/slimy-apricots-look.md
diff --git a/.changeset/spicy-kiwis-scream.md b/.changeset/spicy-kiwis-scream.md
diff --git a/.changeset/swift-balloons-pay.md b/.changeset/swift-balloons-pay.md
diff --git a/.changeset/tasty-years-sneeze.md b/.changeset/tasty-years-sneeze.md
diff --git a/.changeset/tough-adults-sing.md b/.changeset/tough-adults-sing.md
diff --git a/.changeset/tricky-mails-shop.md b/.changeset/tricky-mails-shop.md
diff --git a/.changeset/tricky-mirrors-itch.md b/.changeset/tricky-mirrors-itch.md
diff --git a/.changeset/tricky-owls-relax.md b/.changeset/tricky-owls-relax.md
diff --git a/.changeset/wicked-tools-shop.md b/.changeset/wicked-tools-shop.md
diff --git a/packages/bundle/CHANGELOG.md b/packages/bundle/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @sigstore/bundle
 
+## 2.1.1
+
+### Patch Changes
+
+- 57bec90: Update `bundleFromJSON` to perform full bundle validation
+
 ## 2.1.0
 
 ### Minor Changes

diff --git a/packages/bundle/package.json b/packages/bundle/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/bundle",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Sigstore bundle type",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @sigstore/cli
 
+## 0.6.0
+
+### Minor Changes
+
+- c949aa7: Add most verify options to `sigstore verify` subcommand
+
+### Patch Changes
+
+- 9318c9c: Bump openid-client from 5.6.1 to 5.6.2
+- Updated dependencies [af76b1d]
+- Updated dependencies [34c3856]
+  - sigstore@2.1.1
+
 ## 0.5.0
 
 ### Minor Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/cli",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Sigstore CLI",
   "author": "Brian DeHamer @bdehamer",
   "license": "Apache-2.0",
@@ -37,7 +37,7 @@
     "@oclif/plugin-help": "^6",
     "open": "^8.4.2",
     "openid-client": "^5.6.2",
-    "sigstore": "^2.1.0"
+    "sigstore": "^2.1.1"
   },
   "devDependencies": {
     "make-fetch-happen": "^13.0.0",

diff --git a/packages/client/CHANGELOG.md b/packages/client/CHANGELOG.md
@@ -1,5 +1,29 @@
 # sigstore
 
+## 2.1.1
+
+### Patch Changes
+
+- af76b1d: Integrate `@sigstore/verify` package
+- 34c3856: Integrate `@sigstore/core` package
+- Updated dependencies [bf1d432]
+- Updated dependencies [6cdf7ef]
+- Updated dependencies [6869511]
+- Updated dependencies [6a6bfbc]
+- Updated dependencies [57bec90]
+- Updated dependencies [34c3856]
+- Updated dependencies [29a25e5]
+- Updated dependencies [afb08f6]
+- Updated dependencies [45903bc]
+- Updated dependencies [6f9c662]
+- Updated dependencies [922a1be]
+- Updated dependencies [34c3856]
+- Updated dependencies [e5f1875]
+  - @sigstore/verify@0.1.0
+  - @sigstore/core@0.2.0
+  - @sigstore/bundle@2.1.1
+  - @sigstore/sign@2.2.1
+
 ## 2.1.0
 
 ### Minor Changes

diff --git a/packages/client/package.json b/packages/client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "sigstore",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "code-signing for npm packages",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,17 +29,17 @@
   "devDependencies": {
     "@sigstore/rekor-types": "^2.0.0",
     "@sigstore/jest": "^0.0.0",
-    "@sigstore/mock": "^0.6.0",
+    "@sigstore/mock": "^0.6.3",
     "@tufjs/repo-mock": "^2.0.0",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
-    "@sigstore/bundle": "^2.1.0",
-    "@sigstore/core": "^0.1.0",
+    "@sigstore/bundle": "^2.1.1",
+    "@sigstore/core": "^0.2.0",
     "@sigstore/protobuf-specs": "^0.2.1",
-    "@sigstore/sign": "^2.1.0",
+    "@sigstore/sign": "^2.2.1",
     "@sigstore/tuf": "^2.2.0",
-    "@sigstore/verify": "^0.0.0"
+    "@sigstore/verify": "^0.1.0"
   },
   "engines": {
     "node": "^16.14.0 || >=18.0.0"

diff --git a/packages/conformance/CHANGELOG.md b/packages/conformance/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @sigstore/conformance
 
+## 0.2.0
+
+### Minor Changes
+
+- 8af9f04: Updates the `verify-bundle` subcommand with support for a new `--trusted-root` flag
+
+### Patch Changes
+
+- Updated dependencies [bf1d432]
+- Updated dependencies [57bec90]
+- Updated dependencies [29a25e5]
+- Updated dependencies [afb08f6]
+- Updated dependencies [45903bc]
+- Updated dependencies [af76b1d]
+- Updated dependencies [6f9c662]
+- Updated dependencies [34c3856]
+- Updated dependencies [e5f1875]
+  - @sigstore/verify@0.1.0
+  - @sigstore/bundle@2.1.1
+  - sigstore@2.1.1
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/conformance/package.json b/packages/conformance/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/conformance",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "private": "true",
   "description": "Sigstore Conformance Test CLI",
   "bin": {
@@ -18,10 +18,10 @@
   },
   "dependencies": {
     "@oclif/core": "^3",
-    "@sigstore/bundle": "^2.1.0",
+    "@sigstore/bundle": "^2.1.1",
     "@sigstore/protobuf-specs": "^0.2.1",
-    "@sigstore/verify": "^0.0.0",
-    "sigstore": "^2.0.0"
+    "@sigstore/verify": "^0.1.0",
+    "sigstore": "^2.1.1"
   },
   "devDependencies": {
     "oclif": "^4",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @sigstore/core
 
+## 0.2.0
+
+### Minor Changes
+
+- 6869511: Add support for parsing RFC3161 signed timestamps
+- 34c3856: add `encoding` and `dsse` utility modules
+
+### Patch Changes
+
+- 6cdf7ef: Bug fix for parsing ASN.1 date/time values which include milliseconds
+- 6a6bfbc: Add more checks to the `RFC3161Timestamp.verify` method
+- 922a1be: Ensure the `isCA` value for the `X509BasicConstraintsExtension` defaults to `false` if no other value is present
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/core",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Base library for Sigstore",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

diff --git a/packages/mock/CHANGELOG.md b/packages/mock/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @sigstore/mock
 
+## 0.6.3
+
+### Patch Changes
+
+- 123389f: Introduce intermediate certificate for issuing RFC3161 timestamps
+- 8cbcd04: Bump @peculiar/x509 from 1.9.5 to 1.9.6
+- 2dd55a0: Remove extra level of OCTET STRING nesting in mocked RFC3161 timestamp response
+- 9318c9c: Bump jose from 5.1.3 to 5.2.0
+- 123389f: Fix encoding for TSA-issued timestamps
+
 ## 0.6.2
 
 ### Patch Changes

diff --git a/packages/mock/package.json b/packages/mock/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/mock",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "Mocked version of the Sigstore services",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

diff --git a/packages/sign/CHANGELOG.md b/packages/sign/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @sigstore/sign
 
+## 2.2.1
+
+### Patch Changes
+
+- 34c3856: Integrate `@sigstore/core` package
+- Updated dependencies [6cdf7ef]
+- Updated dependencies [6869511]
+- Updated dependencies [6a6bfbc]
+- Updated dependencies [57bec90]
+- Updated dependencies [34c3856]
+- Updated dependencies [922a1be]
+  - @sigstore/core@0.2.0
+  - @sigstore/bundle@2.1.1
+
 ## 2.2.0
 
 ### Minor Changes