Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Version Packages #880

Merged
merged 1 commit into from
Jan 12, 2024
Merged

Version Packages #880

merged 1 commit into from
Jan 12, 2024

Conversation

github-actions[bot]
Copy link
Contributor

@github-actions github-actions bot commented Dec 4, 2023

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@sigstore/cli@0.6.0

Minor Changes

  • c949aa7: Add most verify options to sigstore verify subcommand
  • 4089730: Add tuf-force-cache flag to verify command
  • 4089730: Add cache-path flag to initialize command

Patch Changes

  • bfa5eeb: Bump openid-client from 5.6.2 to 5.6.4
  • 9318c9c: Bump openid-client from 5.6.1 to 5.6.2
  • Updated dependencies [4089730]
  • Updated dependencies [af76b1d]
  • Updated dependencies [34c3856]
    • sigstore@2.2.0

sigstore@2.2.0

Minor Changes

  • 4089730: Add tufForceCache flag to VerifyOptions type

Patch Changes

  • af76b1d: Integrate @sigstore/verify package
  • 34c3856: Integrate @sigstore/core package
  • Updated dependencies [ca658dc]
  • Updated dependencies [bf1d432]
  • Updated dependencies [6cdf7ef]
  • Updated dependencies [6869511]
  • Updated dependencies [6a6bfbc]
  • Updated dependencies [57bec90]
  • Updated dependencies [08b7957]
  • Updated dependencies [34c3856]
  • Updated dependencies [f603e11]
  • Updated dependencies [29a25e5]
  • Updated dependencies [afb08f6]
  • Updated dependencies [45903bc]
  • Updated dependencies [4471a4d]
  • Updated dependencies [6f9c662]
  • Updated dependencies [922a1be]
  • Updated dependencies [34c3856]
  • Updated dependencies [e5f1875]
  • Updated dependencies [da83e69]
    • @sigstore/tuf@2.3.0
    • @sigstore/verify@0.1.0
    • @sigstore/core@0.2.0
    • @sigstore/bundle@2.1.1
    • @sigstore/sign@2.2.1

@sigstore/core@0.2.0

Minor Changes

  • 6869511: Add support for parsing RFC3161 signed timestamps
  • 34c3856: add encoding and dsse utility modules

Patch Changes

  • 6cdf7ef: Bug fix for parsing ASN.1 date/time values which include milliseconds
  • 6a6bfbc: Add more checks to the RFC3161Timestamp.verify method
  • 922a1be: Ensure the isCA value for the X509BasicConstraintsExtension defaults to false if no other value is present

@sigstore/tuf@2.3.0

Minor Changes

  • f603e11: Expose forceCache option for TUF client
  • 4471a4d: Add support for caching metadata from multiple TUF repositories

Patch Changes

  • ca658dc: Update TUF seed files
  • da83e69: Move TUF seeds into JSON file

@sigstore/verify@0.1.0

Minor Changes

  • bf1d432: Export VerificationPolicy type
  • 08b7957: Enable verification of RFC3161 timestamps
  • afb08f6: Add support for verifying identity of certificate issuer
  • 6f9c662: Extract verification code into dedicated package

Patch Changes

  • 29a25e5: Read RFC3161 timestamps during verification
  • 45903bc: Expose public signature property on SignatureContent interface
  • e5f1875: Fix logic to extract issuer from Fulcio certificate
  • Updated dependencies [6cdf7ef]
  • Updated dependencies [6869511]
  • Updated dependencies [6a6bfbc]
  • Updated dependencies [57bec90]
  • Updated dependencies [34c3856]
  • Updated dependencies [922a1be]
    • @sigstore/core@0.2.0
    • @sigstore/bundle@2.1.1

@sigstore/bundle@2.1.1

Patch Changes

  • 57bec90: Update bundleFromJSON to perform full bundle validation

@sigstore/mock@0.6.3

Patch Changes

  • 123389f: Introduce intermediate certificate for issuing RFC3161 timestamps
  • 8cbcd04: Bump @peculiar/x509 from 1.9.5 to 1.9.6
  • 2dd55a0: Remove extra level of OCTET STRING nesting in mocked RFC3161 timestamp response
  • 9318c9c: Bump jose from 5.1.3 to 5.2.0
  • 123389f: Fix encoding for TSA-issued timestamps

@sigstore/sign@2.2.1

Patch Changes

  • 34c3856: Integrate @sigstore/core package
  • Updated dependencies [6cdf7ef]
  • Updated dependencies [6869511]
  • Updated dependencies [6a6bfbc]
  • Updated dependencies [57bec90]
  • Updated dependencies [34c3856]
  • Updated dependencies [922a1be]
    • @sigstore/core@0.2.0
    • @sigstore/bundle@2.1.1

@sigstore/conformance@0.2.0

Minor Changes

  • 8af9f04: Updates the verify-bundle subcommand with support for a new --trusted-root flag

Patch Changes

  • Updated dependencies [bf1d432]
  • Updated dependencies [57bec90]
  • Updated dependencies [08b7957]
  • Updated dependencies [29a25e5]
  • Updated dependencies [4089730]
  • Updated dependencies [afb08f6]
  • Updated dependencies [45903bc]
  • Updated dependencies [af76b1d]
  • Updated dependencies [6f9c662]
  • Updated dependencies [34c3856]
  • Updated dependencies [e5f1875]
    • @sigstore/verify@0.1.0
    • @sigstore/bundle@2.1.1
    • sigstore@2.2.0

@github-actions github-actions bot requested a review from a team as a code owner December 4, 2023 21:34
@github-actions github-actions bot force-pushed the changeset-release/main branch 13 times, most recently from 2800d12 to dff38f4 Compare December 8, 2023 21:11
@github-actions github-actions bot force-pushed the changeset-release/main branch 16 times, most recently from 59db3df to 14fb511 Compare December 22, 2023 16:00
@github-actions github-actions bot force-pushed the changeset-release/main branch 16 times, most recently from 769b874 to 9a24c92 Compare January 9, 2024 14:57
@github-actions github-actions bot force-pushed the changeset-release/main branch 9 times, most recently from bca69a6 to 4588e71 Compare January 12, 2024 20:46
@github-actions github-actions bot force-pushed the changeset-release/main branch from 4588e71 to a734033 Compare January 12, 2024 20:53
@bdehamer bdehamer merged commit d9093d4 into main Jan 12, 2024
3 checks passed
@bdehamer bdehamer deleted the changeset-release/main branch January 12, 2024 20:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant