From f7bc65499097ae3f737204b795370211a3d894a2 Mon Sep 17 00:00:00 2001 From: Hayden B Date: Thu, 21 Mar 2024 14:44:19 -0700 Subject: [PATCH 1/2] Update CHANGELOG for v1.13.5 Signed-off-by: Hayden B --- CHANGELOG.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 12b80e6f667..4919fc109fd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -549,6 +549,24 @@ Critical breaking changes include: * asraa * priyawadhwa +# v1.13.5 + +_Note: v1.13.3 and v1.13.4 were skipped due to issues in the release pipeline_ + +This release backports support for the latest TUF specification. We encourage users to upgrade to Cosign v2. + +## Updates +* V1 go tuf update (#3598) +* Update cloud build script to latest for v1.13.x (#3615) + +# v1.13.2 + +This release backports a security fix. We encourage users to upgrade to Cosign v2. + +## Updates +* [release-1.13] update builder image that uses go 1.19.4 (#2521) +* Backport GHSA-vfp6-jrw2-99g9 in (#3364) + # v1.13.1 ## Enhancements From 044d7247054f2a58ca87e3df728fcc7a81134a13 Mon Sep 17 00:00:00 2001 From: Hayden B Date: Thu, 21 Mar 2024 15:08:57 -0700 Subject: [PATCH 2/2] Bump release Signed-off-by: Hayden B --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4919fc109fd..f54389329b5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -549,9 +549,9 @@ Critical breaking changes include: * asraa * priyawadhwa -# v1.13.5 +# v1.13.6 -_Note: v1.13.3 and v1.13.4 were skipped due to issues in the release pipeline_ +_Note: v1.13.3, .4, and .5 were skipped due to issues in the release pipeline_ This release backports support for the latest TUF specification. We encourage users to upgrade to Cosign v2.