Version Packages

sigstore · Jan 11, 2024 · bca69a6 · bca69a6
1 parent da83e69
commit bca69a6
Show file tree

Hide file tree

Showing 52 changed files with 175 additions and 183 deletions.
diff --git a/.changeset/beige-keys-appear.md b/.changeset/beige-keys-appear.md
diff --git a/.changeset/friendly-toes-end.md b/.changeset/friendly-toes-end.md
diff --git a/.changeset/fuzzy-files-cross.md b/.changeset/fuzzy-files-cross.md
diff --git a/.changeset/gold-walls-smoke.md b/.changeset/gold-walls-smoke.md
diff --git a/.changeset/healthy-walls-raise.md b/.changeset/healthy-walls-raise.md
diff --git a/.changeset/khaki-chefs-smile.md b/.changeset/khaki-chefs-smile.md
diff --git a/.changeset/lemon-eggs-admire.md b/.changeset/lemon-eggs-admire.md
diff --git a/.changeset/little-toes-live.md b/.changeset/little-toes-live.md
diff --git a/.changeset/long-jobs-explain.md b/.changeset/long-jobs-explain.md
diff --git a/.changeset/neat-gorillas-eat.md b/.changeset/neat-gorillas-eat.md
diff --git a/.changeset/neat-poems-itch.md b/.changeset/neat-poems-itch.md
diff --git a/.changeset/new-birds-hide.md b/.changeset/new-birds-hide.md
diff --git a/.changeset/nine-donuts-marry.md b/.changeset/nine-donuts-marry.md
diff --git a/.changeset/orange-snakes-give.md b/.changeset/orange-snakes-give.md
diff --git a/.changeset/plenty-glasses-chew.md b/.changeset/plenty-glasses-chew.md
diff --git a/.changeset/polite-numbers-wait.md b/.changeset/polite-numbers-wait.md
diff --git a/.changeset/poor-radios-sleep.md b/.changeset/poor-radios-sleep.md
diff --git a/.changeset/popular-eagles-explain.md b/.changeset/popular-eagles-explain.md
diff --git a/.changeset/rude-meals-tap.md b/.changeset/rude-meals-tap.md
diff --git a/.changeset/selfish-ants-exercise.md b/.changeset/selfish-ants-exercise.md
diff --git a/.changeset/shaggy-hotels-cheat.md b/.changeset/shaggy-hotels-cheat.md
diff --git a/.changeset/sharp-rabbits-fix.md b/.changeset/sharp-rabbits-fix.md
diff --git a/.changeset/shy-cameras-carry.md b/.changeset/shy-cameras-carry.md
diff --git a/.changeset/slimy-apricots-look.md b/.changeset/slimy-apricots-look.md
diff --git a/.changeset/smooth-rice-remember.md b/.changeset/smooth-rice-remember.md
diff --git a/.changeset/spicy-kiwis-scream.md b/.changeset/spicy-kiwis-scream.md
diff --git a/.changeset/swift-balloons-pay.md b/.changeset/swift-balloons-pay.md
diff --git a/.changeset/tasty-years-sneeze.md b/.changeset/tasty-years-sneeze.md
diff --git a/.changeset/tough-adults-sing.md b/.changeset/tough-adults-sing.md
diff --git a/.changeset/tricky-mails-shop.md b/.changeset/tricky-mails-shop.md
diff --git a/.changeset/tricky-mirrors-itch.md b/.changeset/tricky-mirrors-itch.md
diff --git a/.changeset/tricky-owls-relax.md b/.changeset/tricky-owls-relax.md
diff --git a/.changeset/wicked-tools-shop.md b/.changeset/wicked-tools-shop.md
diff --git a/.changeset/yellow-phones-know.md b/.changeset/yellow-phones-know.md
diff --git a/packages/bundle/CHANGELOG.md b/packages/bundle/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @sigstore/bundle
 
+## 2.1.1
+
+### Patch Changes
+
+- 57bec90: Update `bundleFromJSON` to perform full bundle validation
+
 ## 2.1.0
 
 ### Minor Changes

diff --git a/packages/bundle/package.json b/packages/bundle/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/bundle",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Sigstore bundle type",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @sigstore/cli
 
+## 0.6.0
+
+### Minor Changes
+
+- c949aa7: Add most verify options to `sigstore verify` subcommand
+- 4089730: Add `tuf-force-cache` flag to `verify` command
+- 4089730: Add `cache-path` flag to `initialize` command
+
+### Patch Changes
+
+- bfa5eeb: Bump openid-client from 5.6.2 to 5.6.4
+- 9318c9c: Bump openid-client from 5.6.1 to 5.6.2
+- Updated dependencies [4089730]
+- Updated dependencies [af76b1d]
+- Updated dependencies [34c3856]
+  - sigstore@2.2.0
+
 ## 0.5.0
 
 ### Minor Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/cli",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Sigstore CLI",
   "author": "Brian DeHamer @bdehamer",
   "license": "Apache-2.0",
@@ -37,7 +37,7 @@
     "@oclif/plugin-help": "^6",
     "open": "^8.4.2",
     "openid-client": "^5.6.4",
-    "sigstore": "^2.1.0"
+    "sigstore": "^2.2.0"
   },
   "devDependencies": {
     "make-fetch-happen": "^13.0.0",

diff --git a/packages/client/CHANGELOG.md b/packages/client/CHANGELOG.md
@@ -1,5 +1,38 @@
 # sigstore
 
+## 2.2.0
+
+### Minor Changes
+
+- 4089730: Add `tufForceCache` flag to `VerifyOptions` type
+
+### Patch Changes
+
+- af76b1d: Integrate `@sigstore/verify` package
+- 34c3856: Integrate `@sigstore/core` package
+- Updated dependencies [bf1d432]
+- Updated dependencies [6cdf7ef]
+- Updated dependencies [6869511]
+- Updated dependencies [6a6bfbc]
+- Updated dependencies [57bec90]
+- Updated dependencies [08b7957]
+- Updated dependencies [34c3856]
+- Updated dependencies [f603e11]
+- Updated dependencies [29a25e5]
+- Updated dependencies [afb08f6]
+- Updated dependencies [45903bc]
+- Updated dependencies [4471a4d]
+- Updated dependencies [6f9c662]
+- Updated dependencies [922a1be]
+- Updated dependencies [34c3856]
+- Updated dependencies [e5f1875]
+- Updated dependencies [da83e69]
+  - @sigstore/verify@0.1.0
+  - @sigstore/core@0.2.0
+  - @sigstore/bundle@2.1.1
+  - @sigstore/tuf@2.3.0
+  - @sigstore/sign@2.2.1
+
 ## 2.1.0
 
 ### Minor Changes

diff --git a/packages/client/package.json b/packages/client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "sigstore",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "code-signing for npm packages",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,17 +29,17 @@
   "devDependencies": {
     "@sigstore/rekor-types": "^2.0.0",
     "@sigstore/jest": "^0.0.0",
-    "@sigstore/mock": "^0.6.0",
+    "@sigstore/mock": "^0.6.3",
     "@tufjs/repo-mock": "^2.0.0",
     "@types/make-fetch-happen": "^10.0.4"
   },
   "dependencies": {
-    "@sigstore/bundle": "^2.1.0",
-    "@sigstore/core": "^0.1.0",
+    "@sigstore/bundle": "^2.1.1",
+    "@sigstore/core": "^0.2.0",
     "@sigstore/protobuf-specs": "^0.2.1",
-    "@sigstore/sign": "^2.1.0",
-    "@sigstore/tuf": "^2.2.0",
-    "@sigstore/verify": "^0.0.0"
+    "@sigstore/sign": "^2.2.1",
+    "@sigstore/tuf": "^2.3.0",
+    "@sigstore/verify": "^0.1.0"
   },
   "engines": {
     "node": "^16.14.0 || >=18.0.0"

diff --git a/packages/conformance/CHANGELOG.md b/packages/conformance/CHANGELOG.md
@@ -1,5 +1,28 @@
 # @sigstore/conformance
 
+## 0.2.0
+
+### Minor Changes
+
+- 8af9f04: Updates the `verify-bundle` subcommand with support for a new `--trusted-root` flag
+
+### Patch Changes
+
+- Updated dependencies [bf1d432]
+- Updated dependencies [57bec90]
+- Updated dependencies [08b7957]
+- Updated dependencies [29a25e5]
+- Updated dependencies [4089730]
+- Updated dependencies [afb08f6]
+- Updated dependencies [45903bc]
+- Updated dependencies [af76b1d]
+- Updated dependencies [6f9c662]
+- Updated dependencies [34c3856]
+- Updated dependencies [e5f1875]
+  - @sigstore/verify@0.1.0
+  - @sigstore/bundle@2.1.1
+  - sigstore@2.2.0
+
 ## 0.1.0
 
 ### Minor Changes

diff --git a/packages/conformance/package.json b/packages/conformance/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/conformance",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "private": "true",
   "description": "Sigstore Conformance Test CLI",
   "bin": {
@@ -18,10 +18,10 @@
   },
   "dependencies": {
     "@oclif/core": "^3",
-    "@sigstore/bundle": "^2.1.0",
+    "@sigstore/bundle": "^2.1.1",
     "@sigstore/protobuf-specs": "^0.2.1",
-    "@sigstore/verify": "^0.0.0",
-    "sigstore": "^2.0.0"
+    "@sigstore/verify": "^0.1.0",
+    "sigstore": "^2.2.0"
   },
   "devDependencies": {
     "oclif": "^4",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @sigstore/core
 
+## 0.2.0
+
+### Minor Changes
+
+- 6869511: Add support for parsing RFC3161 signed timestamps
+- 34c3856: add `encoding` and `dsse` utility modules
+
+### Patch Changes
+
+- 6cdf7ef: Bug fix for parsing ASN.1 date/time values which include milliseconds
+- 6a6bfbc: Add more checks to the `RFC3161Timestamp.verify` method
+- 922a1be: Ensure the `isCA` value for the `X509BasicConstraintsExtension` defaults to `false` if no other value is present
+
 ## 0.1.0
 
 ### Minor Changes