Skip to content

Releases: sigstore/sigstore-js

Release list

@sigstore/verify@4.1.0

@sigstore/verify@4.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Jun 22:33
Immutable release. Only release title and notes can be modified.
@sigstore/verify@4.1.0
d406ea6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Minor Changes

  • 754e2a3: Support verification of DSSE bundles with a Rekor v2 hashedrekord transparency log entry, where the entry's digest is computed over the DSSE pre-authentication encoding (PAE) rather than the envelope payload

Patch Changes

  • Updated dependencies [04ea25a]
    • @sigstore/core@4.0.1
Loading

@sigstore/oci@0.7.1

@sigstore/oci@0.7.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Jun 22:33
Immutable release. Only release title and notes can be modified.
@sigstore/oci@0.7.1
d406ea6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • 85c5838: Select Docker registry credentials by exact host match instead of substring match to avoid sending credentials to an unintended registry
Loading

@sigstore/core@4.0.1

@sigstore/core@4.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Jun 22:33
Immutable release. Only release title and notes can be modified.
@sigstore/core@4.0.1
d406ea6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

Loading

@sigstore/cli@0.10.1

@sigstore/cli@0.10.1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Jun 22:33
Immutable release. Only release title and notes can be modified.
@sigstore/cli@0.10.1
d406ea6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Patch Changes

  • 440ef7b: Bump @oclif/plugin-help from 6.2.49 to 6.2.50
  • Updated dependencies [85c5838]
    • @sigstore/oci@0.7.1
Assets 3
Loading

sigstore@5.0.0

sigstore@5.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jun 21:02
Immutable release. Only release title and notes can be modified.
sigstore@5.0.0
7d2900e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major Changes

  • 46c00b3: Drop support for Node 20

Patch Changes

  • Updated dependencies [7db2666]
  • Updated dependencies [74eda7a]
  • Updated dependencies [46c00b3]
  • Updated dependencies [46c00b3]
  • Updated dependencies [46c00b3]
  • Updated dependencies [46c00b3]
    • @sigstore/tuf@5.0.0
    • @sigstore/bundle@5.0.0
    • @sigstore/verify@4.0.0
    • @sigstore/core@4.0.0
    • @sigstore/sign@5.0.0
Loading

@sigstore/verify@4.0.0

@sigstore/verify@4.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jun 21:03
Immutable release. Only release title and notes can be modified.
@sigstore/verify@4.0.0
7d2900e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major Changes

  • 46c00b3: Drop support for Node 20

Patch Changes

  • Updated dependencies [46c00b3]
    • @sigstore/bundle@5.0.0
    • @sigstore/core@4.0.0
Loading

@sigstore/tuf@5.0.0

@sigstore/tuf@5.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jun 21:03
Immutable release. Only release title and notes can be modified.
@sigstore/tuf@5.0.0
7d2900e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major Changes

  • 46c00b3: Drop support for Node 20

Patch Changes

  • 7db2666: Update TUF seed files
  • 74eda7a: Bump tuf-js from 4.x to 5.0.1
  • 46c00b3: Bump tuf-js from 5.0.1 to 6.0.0
Loading

@sigstore/sign@5.0.0

@sigstore/sign@5.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jun 21:03
Immutable release. Only release title and notes can be modified.
@sigstore/sign@5.0.0
7d2900e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major Changes

  • 46c00b3: Drop support for Node 20
  • 46c00b3: Bump make-fetch-happen from 15.x to 16.x
  • 46c00b3: Bump proc-log from 6.x to 7.x

Patch Changes

  • Updated dependencies [46c00b3]
    • @sigstore/bundle@5.0.0
    • @sigstore/core@4.0.0
Loading

@sigstore/rekor-types@5.0.0

@sigstore/rekor-types@5.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jun 21:03
Immutable release. Only release title and notes can be modified.
@sigstore/rekor-types@5.0.0
7d2900e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Major Changes

  • 46c00b3: Drop support for Node 20
Loading

@sigstore/oci@0.7.0

@sigstore/oci@0.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Jun 21:03
Immutable release. Only release title and notes can be modified.
@sigstore/oci@0.7.0
7d2900e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Minor Changes

  • 46c00b3: Drop support for Node 20
  • 46c00b3: Bump make-fetch-happen from 15.x to 16.x
  • 46c00b3: Bump proc-log from 6.x to 7.x
Loading