bump: release 0.11.0 → 0.12.0

Automatically generated by Commitizen.

Author: behnazh-w

CHANGELOG.md

@@ -1,3 +1,16 @@
+## v0.12.0 (2024-08-16)
+
+### Feat
+
+- verify npm SLSA provenance against signed npm provenance (#747)
+- add a check to analyze malicious Python packages (#750)
+- add support for SLSA v1 provenance with OCI build type (#778)
+
+### Fix
+
+- accept provenances that are not inferred in the provenance checks (#802)
+- use artifact filenames as keys for verifying jfrog assets in provenance_witness_l1_check (#796)
+
 ## v0.11.0 (2024-06-18)
 
 ### Feat

pyproject.toml

@@ -136,7 +136,7 @@ version_files = [
     "src/macaron/__init__.py:__version__",
 ]
 major_version_zero = true
-version = "0.11.0"
+version = "0.12.0"
 
 
 # https://github.com/pytest-dev/pytest-cov

src/macaron/__init__.py

@@ -8,7 +8,7 @@
 # The version of this package. There's no comprehensive, official list of other
 # magic constants, so we stick with this one only for now. See also this conversation:
 # https://stackoverflow.com/questions/38344848/is-there-a-comprehensive-table-of-pythons-magic-constants
-__version__ = "0.11.0"
+__version__ = "0.12.0"
 
 # The path to the Macaron package.
 MACARON_PATH = os.path.dirname(os.path.abspath(__file__))