v1.16.9

Changelog

• 1785568 use digest instead of tag when invoking cosign sign (#331)
• 4c5db83 Bump actions/dependency-review-action from 3.1.0 to 3.1.1 (#323)

Thanks for all contributors!

v1.16.8

Changelog

• fb90598 fix container signing (#330)

Thanks for all contributors!

v1.16.7

Changelog

• fb90598 fix container signing (#330)

Thanks for all contributors!

v1.16.6

Changelog

• 4e6671f use dockers field in goreleaser (#329)

Thanks for all contributors!

specify extended key usage attributes via x509.ExtraExtensions

specify extended key usage attributes via x509.ExtraExtensions

What's Changed

• specify extended key usage attributes via x509.ExtraExtensions by @maditya in #292
• update deps and regen proto by @maditya in #285
• Update install command in README.md by @dmitris in #281
• Go libraries updates (see the Full Changelog)

Full Changelog: v1.14.0...v1.15.0

v1.14.0

What's Changed

• Bump google.golang.org/grpc from 1.52.3 to 1.53.0 by @dependabot in #238
• Bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in #239
• Bump aquasecurity/trivy-action from 0.9.0 to 0.9.1 by @dependabot in #240
• Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.2.0 to 1.3.0 by @dependabot in #245
• Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 by @dependabot in #244
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.15.0 to 2.15.2 by @dependabot in #242
• Bump aquasecurity/trivy-action from 0.9.1 to 0.9.2 by @dependabot in #247
• Bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in #246
• Bump google.golang.org/protobuf from 1.28.1 to 1.29.1 by @dependabot in #249
• Bump actions/setup-go from 3 to 4 by @dependabot in #250
• Bump github.com/grpc-ecosystem/go-grpc-middleware from 1.3.0 to 1.4.0 by @dependabot in #251
• Bump google.golang.org/protobuf from 1.29.1 to 1.30.0 by @dependabot in #252
• Bump google.golang.org/grpc from 1.53.0 to 1.54.0 by @dependabot in #253
• Bump ossf/scorecard-action from 2.1.2 to 2.1.3 by @dependabot in #254
• Bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #256
• Bump sigstore/cosign-installer from 3.0.1 to 3.0.2 by @dependabot in #255
• cacert san field changes by @havetisyan in #205
• remove panic calls from rsa/ecdsa public key methods by @havetisyan in #257

New Contributors

• @havetisyan made their first contribution in #205

Full Changelog: v1.13.0...v1.14.0

v1.13.0

update deps and build with go 1.19

v1.12.3

worker now does the signing operation along with fetching signer from…

… the pool

v1.12.2

fix bugs causing deadlock on request timeout & make request timeout c…

…onfigurable

v1.12.1

update logging & counters on timeout