v0.2.6

What's Changed

• revamp release job, cleanups and add snapshot job by @cpanato in #138
• Bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #140
• Move release actions to kubernetes-sigs by @puerco in #141
• Bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 by @dependabot in #142
• Update examples to v0.2.0 by @puerco in #145
• Fix bug when updating documents in place. by @puerco in #144
• Bump github.com/sigstore/cosign/v2 from 2.2.1 to 2.2.2 by @dependabot in #146
• Fix keyless verification of openvex attesatations by @puerco in #147
• Bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #148
• Bump sigstore/cosign-installer from 3.2.0 to 3.3.0 by @dependabot in #149
• vexctl generate by @puerco in #150

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• Update vexctl to spec v0.2.0 by @puerco in #92
• show subcommand creation for review by @brandtkeller in #115
• Refactor commands and CLI options by @puerco in #110
• Update SARIF filtering examples by @puerco in #109
• upgrade to go1.21 by @cpanato in #121
• vexctl add subcommand by @puerco in #111
• Update README examples to v0.2.0 by @puerco in #127
• Update vexctl attest by @puerco in #126

New Contributors

• @brandtkeller made their first contribution in #115

Full Changelog: v0.2.3...v0.2.5

v0.2.3

What's Changed

• Add ko installer to release workflow by @puerco in #97
• Updates by @cpanato in #98

Full Changelog: v0.2.2...v0.2.3

v0.2.0

What's Changed

• vexctl: Forked repo kickstart by @puerco in #1
• Break dependency on old chainguard/vex module by @puerco in #2
• switch CVE to official 'sample' ID by @attritionorg in #5
• Restore attestation capability after repo split by @puerco in #6
• Update import paths to openvex/go-vex by @puerco in #7

New Contributors

• @puerco made their first contribution in #1
• @attritionorg made their first contribution in #5

Full Changelog: v0.1.0...v0.2.0