v1.7.0

What's Changed

• Update Azure Key Vault client by @malancas in #1170
• kms: split KMS providers into separate Go modules by @imjasonh in #1115
• have submodules specify real s/s releases by @imjasonh in #1178
• Update go.mod and dependabot config by @cpanato in #1184
• Add Cosign.ClaimedIdentity API by @saschagrunert in #1166
• build(deps): bump github.com/aws/aws-sdk-go from 1.44.274 to 1.44.275 in /pkg/signature/kms/aws by @dependabot in #1199
• Azure KMS: Infer hash function from key by @codysoyland in #1149
• update golang.org/x/crypto to v0.10.0 and golang.org/x/oauth2 v0.9.0 by @cpanato in #1225

New Contributors

• @saschagrunert made their first contribution in #1166

Full Changelog: v1.6.4...v1.7.0

v1.6.5

What's Changed

• Update Azure Key Vault client by @malancas in #1170
• kms: split KMS providers into separate Go modules by @imjasonh in #1115
• have submodules specify real s/s releases by @imjasonh in #1178

Full Changelog: v1.6.4...v1.6.5

v1.6.4

What's Changed

• break out e2e test images into Dockerfiles so dependabot will work by @bobcallaway in #1116
• remove trailing slash in dependabot cfg by @bobcallaway in #1117
• chore: remove leftover TUF code - policy.go and signer.go by @rdimitrov in #1128

Full Changelog: v1.6.3...v1.6.4

v1.6.3

What's Changed

• Fix error condition for ssh by @haydentherapper in #1103
• map GCS HTTP endpoints to new CDN for sigstore public-good production TUF root by @bobcallaway in #1108
• build(deps): bump github.com/jellydator/ttlcache/v2 from 2.11.1 to 3.0.1 by @siretart in #1099

New Contributors

• @rdimitrov made their first contribution in #1085
• @clfs made their first contribution in #1064
• @siretart made their first contribution in #1099

Full Changelog: v1.6.2...v1.6.3

v1.6.2

What's Changed

• swap from GCS directly to use CDN by @bobcallaway in #1089

Full Changelog: v1.6.1...v1.6.2

v1.6.1

What's Changed

• Add additional EC algorithms supported by Azure KMS by @malancas in #1054
• bump versions of docker containers used in e2e tests by @bobcallaway in #1069
• use provided context when signing and verifying via DSSE adapters by @bobcallaway in #1068

Full Changelog: v1.6.0...v1.6.1

v1.6.0

What's Changed

• build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.4.0 to 0.5.0 by @dependabot in #973
  Fixed dependency upgrade which had some breaking changes

Full Changelog: v1.5.2...v1.6.0

v1.5.2

What's Changed

• Add oid-info.md + Rekor OID by @wlynch in #914
• Migrate from gopkg.in/square/go-jose.v2 to github.com/go-jose/go-jose/v3 by @mtrmac in #969
• update to use go1.20 by @cpanato in #962
• Disable GHAs for codecov by @haydentherapper in #978

Full Changelog: v1.5.1...v1.5.2

v1.5.1

What's Changed

• Add @znewman01 to reusable-release by @znewman01 in #878
• Improve the "Sigstore Auth Successful" page by @julienv3 in #876
• Add scorecard analysis workflow by @gabibguti in #919
• Allow Initialize/NewFromEnv to reinitialize metadata if timestamp expired by @haydentherapper in #893

New Contributors

• @julienv3 made their first contribution in #876
• @gabibguti made their first contribution in #919

Full Changelog: v1.5.0...v1.5.1

v1.5.0

What's Changed

• Move OtherName and SANS functions to s/s by @haydentherapper in #825
• Update README to describe purpose of s/s by @znewman01 in #817
• Update Azure KMS client to handle HSM backed keys by @malancas in #850

New Contributors

• @malancas made their first contribution in #850

Full Changelog: v1.4.6...v1.5.0