v0.13.1

What's Changed

• chore(deps): Bump the minor-patch group with 2 updates by @dependabot[bot] in #1860
• chore(deps): Bump the minor-patch group across 1 directory with 6 updates by @dependabot[bot] in #1864
• chore(deps): Bump the minor-patch group with 4 updates by @dependabot[bot] in #1866
• chore(deps): Bump the minor-patch group with 3 updates by @dependabot[bot] in #1868
• chore(deps): Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #1870
• chore(deps): Bump the minor-patch group with 4 updates by @dependabot[bot] in #1872
• chore(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #1876
• chore(deps): Bump the minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #1877
• chore(deps): Bump google-github-actions/setup-gcloud from 2.2.0 to 3.0.0 by @dependabot[bot] in #1879
• chore(deps): Bump google-github-actions/auth from 2.1.12 to 3.0.0 by @dependabot[bot] in #1880
• ignore tlog when using RFC3161Timestamp by @jkylekelly in #1874

New Contributors

• @jkylekelly made their first contribution in #1874

Full Changelog: v0.13.0...v0.13.1

v0.13.0

What's Changed

• chore(deps): Bump codecov/codecov-action from 5.4.0 to 5.4.2 in the minor-patch group by @dependabot in #1828
• pin ch/actions to a hash tag and update version comment by @cpanato in #1829
• chore(deps): Bump the minor-patch group across 1 directory with 4 updates by @dependabot in #1826
• Preserve original tag when resolving an image tag to digest by @0xiso in #1824
• Add support for Sigstore Bundle Spec by @codysoyland in #1725
• chore(deps): Bump the sigstore group with 6 updates by @dependabot in #1832
• update golangic-lint by @cpanato in #1837
• update testdata by @cpanato in #1857
• update dep review job by @cpanato in #1858
• chore(deps): Bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 by @dependabot in #1836
• chore(deps): Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 by @dependabot in #1848
• chore(deps): Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot in #1852
• chore(deps): Bump the minor-patch group across 1 directory with 9 updates by @dependabot in #1843

New Contributors

• @0xiso made their first contribution in #1824

Full Changelog: v0.12.1...v0.13.0

v0.12.1

What's Changed

• chore(deps): Bump golang.org/x/time from 0.8.0 to 0.9.0 by @dependabot in #1754
• chore(deps): Bump google.golang.org/protobuf from 1.36.1 to 1.36.2 by @dependabot in #1758
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.11 to 1.8.12 by @dependabot in #1762
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.11 to 1.8.12 by @dependabot in #1763
• chore(deps): Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3 by @dependabot in #1761
• chore(deps): Bump github.com/sigstore/sigstore from 1.8.11 to 1.8.12 by @dependabot in #1760
• chore(deps): Bump golang.org/x/net from 0.33.0 to 0.34.0 by @dependabot in #1756
• chore(deps): Bump github.com/docker/docker from 27.4.1+incompatible to 27.5.0+incompatible by @dependabot in #1765
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.0 to 1.8.1 by @dependabot in #1767
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.11 to 1.8.12 by @dependabot in #1759
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.11 to 1.8.12 by @dependabot in #1764
• chore(deps): Bump google.golang.org/protobuf from 1.36.2 to 1.36.4 by @dependabot in #1773
• chore(deps): Bump sigs.k8s.io/release-utils from 0.9.0 to 0.11.0 by @dependabot in #1781
• chore(deps): Bump github.com/sigstore/protobuf-specs from 0.3.3 to 0.4.0 by @dependabot in #1775
• chore(deps): Bump k8s.io/apimachinery from 0.32.0 to 0.32.2 by @dependabot in #1783
• chore(deps): Bump k8s.io/api from 0.32.0 to 0.32.2 by @dependabot in #1785
• chore(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by @dependabot in #1788
• chore(deps): Bump github.com/docker/docker from 27.5.0+incompatible to 28.0.0+incompatible by @dependabot in #1787
• chore(deps): Bump k8s.io/client-go from 0.32.0 to 0.32.2 by @dependabot in #1784
• Update test data by @codysoyland in #1806
• Update Dependabot config to use weekly grouped updates by @codysoyland in #1808
• Update golangci-lint config to version 2 by @codysoyland in #1813
• chore(deps): Bump golangci/golangci-lint-action from 6.1.1 to 7.0.0 by @dependabot in #1812
• chore(deps): Bump the minor-patch group across 1 directory with 13 updates by @dependabot in #1814
• chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 by @dependabot in #1793
• chore(deps): Bump the minor-patch group with 19 updates by @dependabot in #1810
• chore(deps): Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #1804
• Update sigstore/sigstore by @codysoyland in #1816
• chore(deps): Bump the sigstore group across 1 directory with 8 updates by @dependabot in #1819
• chore(deps): Bump the minor-patch group with 2 updates by @dependabot in #1823
• chore(deps): Bump the sigstore group with 5 updates by @dependabot in #1821

Full Changelog: v0.12.0...v0.12.1

v0.12.0

Changelog

• 4a12093 fix goreleaser signning part (#1753)
• c049ad9 add changelog for v0.12.0 (#1752)
• 4a8458d Merge pull request #1749 from sigstore/dependabot/go_modules/github.com/sigstore/scaffolding-0.7.18
• a992194 chore(deps): Bump github.com/sigstore/scaffolding from 0.7.17 to 0.7.18
• dda3d98 Use v0.7.18 for scaffolding, update k8s versions to test with. (#1751)
• 49860af chore(deps): Bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0 (#1750)
• cfee9bf chore(deps): Bump google.golang.org/protobuf from 1.36.0 to 1.36.1 (#1748)
• 9c37018 fix post submit job (#1747)
• 0fdb34f chore(deps): Bump golang.org/x/net from 0.32.0 to 0.33.0 (#1746)
• c7044ee chore(deps): Bump github.com/docker/docker (#1743)
• 6d45cdb drop 1.27/28 and add 1.30/31/32 k8s (#1745)
• 39d6f2a chore(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 (#1742)
• a421575 chore(deps): Bump anchore/sbom-action from 0.17.8 to 0.17.9 (#1741)
• 9137241 chore(deps): Bump k8s.io/api from 0.31.3 to 0.32.0 (#1731)
• 724984c chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#1738)
• 22772b0 chore(deps): Bump github.com/sigstore/sigstore from 1.8.10 to 1.8.11 (#1737)
• ac3e316 chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#1736)
• 1bf50c6 chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#1735)
• f245790 chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#1739)
• b20934a chore(deps): Bump github/codeql-action from 3.27.7 to 3.27.9 (#1740)
• 59bed89 chore(deps): Bump github.com/sigstore/scaffolding from 0.7.11 to 0.7.17 (#1713)
• a0d837a chore(deps): Bump k8s.io/apimachinery from 0.31.4 to 0.32.0 (#1734)
• 9d3aca9 chore(deps): Bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#1733)
• e834246 chore(deps): Bump k8s.io/apimachinery from 0.31.3 to 0.31.4 (#1730)
• 295b877 chore(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 (#1727)
• e86bafd chore(deps): Bump github/codeql-action from 3.27.6 to 3.27.7 (#1726)
• 786263a chore(deps): Bump mikefarah/yq from 4.44.5 to 4.44.6 (#1723)
• e8cd9dc chore(deps): Bump github.com/docker/docker (#1724)

Thanks to all contributors!

v0.11.0

What's Changed

• chore(deps): Bump github.com/aws/aws-sdk-go from 1.54.15 to 1.54.16 by @dependabot in #1535
• chore(deps): Bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in #1536
• chore(deps): Bump google.golang.org/grpc from 1.64.0 to 1.64.1 by @dependabot in #1537
• set to go1.22.5 by @cpanato in #1538
• chore(deps): Bump anchore/sbom-action from 0.16.0 to 0.16.1 by @dependabot in #1539
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.54.16 to 1.54.17 by @dependabot in #1541
• chore(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.3 by @dependabot in #1543
• chore(deps): Bump github.com/sigstore/scaffolding from 0.7.3 to 0.7.4 by @dependabot in #1542
• chore(deps): Bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #1540
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.54.17 to 1.54.18 by @dependabot in #1544
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.6 to 1.8.7 by @dependabot in #1546
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.6 to 1.8.7 by @dependabot in #1547
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.6 to 1.8.7 by @dependabot in #1549
• chore(deps): Bump github.com/sigstore/sigstore from 1.8.6 to 1.8.7 by @dependabot in #1550
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.6 to 1.8.7 by @dependabot in #1548
• chore(deps): Bump anchore/sbom-action from 0.16.1 to 0.17.0 by @dependabot in #1552
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.54.18 to 1.54.19 by @dependabot in #1551
• chore(deps): Bump github/codeql-action from 3.25.11 to 3.25.12 by @dependabot in #1545
• chore(deps): Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #1553
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.12.0 to 1.13.0 by @dependabot in #1554
• chore(deps): Bump k8s.io/client-go from 0.30.2 to 0.30.3 by @dependabot in #1557
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.54.19 to 1.54.20 by @dependabot in #1558
• chore(deps): Bump github/codeql-action from 3.25.12 to 3.25.13 by @dependabot in #1559
• chore(deps): Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.0+incompatible by @dependabot in #1560
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.54.20 to 1.55.0 by @dependabot in #1562
• chore(deps): Bump github.com/docker/docker from 27.1.0+incompatible to 27.1.1+incompatible by @dependabot in #1563
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.55.0 to 1.55.1 by @dependabot in #1564
• chore(deps): Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #1568
• chore(deps): Bump github/codeql-action from 3.25.13 to 3.25.15 by @dependabot in #1567
• chore(deps): Bump sigs.k8s.io/release-utils from 0.8.3 to 0.8.4 by @dependabot in #1570
• chore(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4 by @dependabot in #1572
• chore(deps): Bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 by @dependabot in #1575
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.55.1 to 1.55.4 by @dependabot in #1574
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.55.4 to 1.55.5 by @dependabot in #1576
• chore(deps): Bump actions/upload-artifact from 4.3.4 to 4.3.5 by @dependabot in #1577
• push incremental builds to GHCR instead of gcr by @bobcallaway in #1578
• chore(deps): Bump mikefarah/yq from 4.44.2 to 4.44.3 by @dependabot in #1580
• chore(deps): Bump google-github-actions/setup-gcloud from 2.1.0 to 2.1.1 by @dependabot in #1581
• chore(deps): Bump google-github-actions/auth from 2.1.3 to 2.1.4 by @dependabot in #1582
• chore(deps): Bump actions/upload-artifact from 4.3.5 to 4.3.6 by @dependabot in #1584
• chore(deps): Bump github/codeql-action from 3.25.15 to 3.26.0 by @dependabot in #1583
• chore(deps): Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #1593
• chore(deps): Bump anchore/sbom-action from 0.17.0 to 0.17.1 by @dependabot in #1594
• chore(deps): Bump github/codeql-action from 3.26.0 to 3.26.3 by @dependabot in #1596
• chore(deps): Bump anchore/sbom-action from 0.17.1 to 0.17.2 by @dependabot in #1598
• chore(deps): Bump github/codeql-action from 3.26.3 to 3.26.6 by @dependabot in #1604
• chore(deps): Bump github.com/sigstore/scaffolding from 0.7.4 to 0.7.8 by @dependabot in #1603
• chore(deps): Bump github.com/docker/docker from 27.1.1+incompatible to 27.2.0+incompatible by @dependabot in #1606
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.13.0 to 1.14.0 by @dependabot in #1605
• chore(deps): Bump actions/upload-artifact from 4.3.6 to 4.4.0 by @dependabot in #1609
• Add support for custom trusted root target path by @codysoyland in #1608
• chore(deps): Bump google-github-actions/auth from 2.1.4 to 2.1.5 by @dependabot in #1597
• chore(deps): Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #1586
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.8 to 1.8.9 by @dependabot in #1611
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.8 to 1.8.9 by @dependabot in #1614
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.8 to 1.8.9 by @dependabot in #1612
• chore(deps): Bump github.com/sigstore/sigstore from 1.8.8 to 1.8.9 by @dependabot in #1615
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.8 to 1.8.9 by @dependabot in #1613
• chore(deps): Bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #1616
• chore(deps): Bump github.com/sigstore/scaffolding from 0.7.8 to 0.7.9 by @dependabot in #1618
• chore(deps): Bump github.com/docker/docker from 27.2.0+incompatible to 27.2.1+incompatible by @dependabot in #1619
• update chainguard-dev/actions by @cpanato in #1630
• chore(deps): Bump k8s.io/client-go from 0.31.0 to 0.31.1 by @dependabot in #1620
• chore(deps): Bump github/codeql-action from 3.26.6 to 3.26.9 by @dependabot in #1632
• chore(deps): Bump github.com/open-policy-agent/opa from 0.67.0 to 0.68.0 by @dependabot in #1631
• chore(deps): Bump github.com/docker/docker from 27.2.1+incompatible to 27.3.1+incompatible by @dependabot in #1628
• chore(deps): Bump actions/checkout from 4.1.7 to 4.2.0 by @dependabot in #1634
• chore(deps): Bump github/codeql-action from 3.26.9 to 3.26.10 by @dependabot in #1636
• chore(deps): Bump codecov/codecov-action from 4.5.0 to 4.6.0 by @dependabot...

v0.9.0

What's Changed

• chore(deps): Bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in #1214
• chore(deps): Bump google-github-actions/setup-gcloud from 2.0.1 to 2.1.0 by @dependabot in #1213
• chore(deps): Bump google-github-actions/auth from 2.0.1 to 2.1.0 by @dependabot in #1215
• chore(deps): Bump k8s.io/code-generator from 0.29.0 to 0.29.1 by @dependabot in #1203
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.1 to 1.50.2 by @dependabot in #1217
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.2 to 1.50.3 by @dependabot in #1218
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.3 to 1.50.4 by @dependabot in #1222
• chore(deps): Bump codecov/codecov-action from 3.1.4 to 3.1.5 by @dependabot in #1221
• chore(deps): Bump anchore/sbom-action from 0.15.5 to 0.15.6 by @dependabot in #1223
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.4 to 1.50.5 by @dependabot in #1224
• chore(deps): Bump github.com/google/go-containerregistry from 0.18.0 to 0.19.0 by @dependabot in #1225
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.5 to 1.50.6 by @dependabot in #1226
• chore(deps): Bump codecov/codecov-action from 3.1.5 to 3.1.6 by @dependabot in #1229
• chore(deps): Bump anchore/sbom-action from 0.15.6 to 0.15.7 by @dependabot in #1230
• chore(deps): Bump anchore/sbom-action from 0.15.7 to 0.15.8 by @dependabot in #1234
• chore(deps): Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @dependabot in #1235
• chore(deps): Bump codecov/codecov-action from 3.1.6 to 4.0.0 by @dependabot in #1236
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.6 to 1.50.8 by @dependabot in #1231
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.8 to 1.50.9 by @dependabot in #1238
• chore(deps): Bump codecov/codecov-action from 4.0.0 to 4.0.1 by @dependabot in #1237
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.9 to 1.50.10 by @dependabot in #1240
• chore(deps): Bump github.com/sigstore/rekor from 1.3.4 to 1.3.5 by @dependabot in #1239
• chore(deps): Bump google-github-actions/auth from 2.1.0 to 2.1.1 by @dependabot in #1241
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.10 to 1.50.12 by @dependabot in #1244
• chore(deps): Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #1242
• chore(deps): Bump golang.org/x/net from 0.20.0 to 0.21.0 by @dependabot in #1247
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.12 to 1.50.13 by @dependabot in #1249
• chore(deps): Bump mikefarah/yq from 4.40.5 to 4.40.7 by @dependabot in #1252
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.13 to 1.50.14 by @dependabot in #1250
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.14 to 1.50.15 by @dependabot in #1253
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.15 to 1.50.16 by @dependabot in #1254
• chore(deps): Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in #1251
• chore(deps): Bump k8s.io/client-go from 0.29.1 to 0.29.2 by @dependabot in #1256
• Bump cosign to v2.2.3 by @priyawadhwa in #1270
• ci: remove support for Kubernetes v1.22.x by @hectorj2f in #1269
• chore(deps): Bump codecov/codecov-action from 4.0.1 to 4.0.2 by @dependabot in #1272
• chore(deps): Bump mikefarah/yq from 4.40.7 to 4.41.1 by @dependabot in #1262
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.16 to 1.50.25 by @dependabot in #1273
• chore(deps): Bump k8s.io/code-generator from 0.29.1 to 0.29.2 by @dependabot in #1258
• chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.2 by @dependabot in #1277
• chore(deps): Bump mikefarah/yq from 4.41.1 to 4.42.1 by @dependabot in #1275
• chore(deps): Bump google-github-actions/auth from 2.1.1 to 2.1.2 by @dependabot in #1276
• chore(deps): Bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in #1279
• chore(deps): Bump codecov/codecov-action from 4.0.2 to 4.1.0 by @dependabot in #1280
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.25 to 1.50.26 by @dependabot in #1278
• chore(deps): Bump go.uber.org/zap from 1.26.0 to 1.27.0 by @dependabot in #1266
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.1 to 1.8.2 by @dependabot in #1283
• chore(deps): Bump imranismail/setup-kustomize from a76db1c6419124d51470b1e388c4b29476f495f1 to 2ba527d4d055ab63514ba50a99456fc35684947f # v2.1.0 by @dependabot in #1274
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.1 to 1.8.2 by @dependabot in #1285
• chore(deps): Bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 by @dependabot in #1281
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.1 to 1.8.2 by @dependabot in #1284
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.26 to 1.50.29 by @dependabot in #1288
• chore(deps): Bump actions/cache from 4.0.0 to 4.0.1 by @dependabot in #1290
• chore(deps): Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #1289
• Add missing tool name in local development documentation by @malancas in #1265
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.1 to 1.8.2 by @dependabot in #1286
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.29 to 1.50.30 by @dependabot in #1291
• chore(deps): Bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #1294
• chore(deps): Bump anchore/sbom-action from 0.15.8 to 0.15.9 by @dependabot in #1293
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.30 to 1.50.31 by @dependabot in #1292
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.31 to 1.50.32 by @dependabot in #1296
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.32 to 1.50.33 by @dependabot in #1298
• chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.2 to 3.0.3 by @dependabot in #1300
• chore(deps): Bump gopkg.in/go-jose/go-jose.v2 from 2.6.2 to 2.6.3 by @dependabot in #1299
• chore(deps): Bump github.com/docker/docker from 24.0.7+incompatible to 25.0.4+incompatible by @dependabot in #1301
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.33 to 1.50.35 by @dependabot in #1302
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.35 to 1.50.36 by @dependabot in #1305
• chore(deps): Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #1304
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.50.36 to 1.50.37 by @dependabot in #1306
• chore(deps): Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in https://github.com/sigst...

v0.8.4

Changelog

• 8596f22 Merge pull request #1212 from tcnghia/update-aws-sdk

Thanks to all contributors!

v0.8.3

What's Changed

• Update link to security policy by @haydentherapper in #953
• upgrade Go to 1.21 by @cpanato in #1017
• update sigstore/rekor dependency by @k4leung4 in #1068

New Contributors

• @haydentherapper made their first contribution in #953

Full Changelog: v0.8.2...v0.8.3

v0.8.2

Changelog

• 3c52aec Merge pull request #912 from hectorj2f/bump_scaffolding

Thanks to all contributors!

What's Changed

• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.299 to 1.44.300 by @dependabot in #893
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.300 to 1.44.301 by @dependabot in #895
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.301 to 1.44.304 by @dependabot in #902
• chore(deps): Bump k8s.io/client-go from 0.27.3 to 0.27.4 by @dependabot in #900
• chore(deps): Bump sigstore/scaffolding from 0.6.4 to 0.6.5 by @dependabot in #897
• chore(deps): Bump k8s.io/code-generator from 0.26.5 to 0.27.4 by @dependabot in #898
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.304 to 1.44.305 by @dependabot in #904
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.305 to 1.44.306 by @dependabot in #905
• Add support for local registry use to the local-dev tooling by @malancas in #894
• chore(deps): Bump github.com/docker/docker from 24.0.0+incompatible to 24.0.5+incompatible by @dependabot in #907
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.306 to 1.44.307 by @dependabot in #906
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.307 to 1.44.308 by @dependabot in #908
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.308 to 1.44.309 by @dependabot in #909
• chore(deps): Bump google.golang.org/grpc from 1.56.2 to 1.57.0 by @dependabot in #910
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.309 to 1.44.311 by @dependabot in #911
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.311 to 1.44.312 by @dependabot in #913
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.312 to 1.44.313 by @dependabot in #914
• chore(deps): Bump golang.org/x/net from 0.12.0 to 0.13.0 by @dependabot in #915
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.313 to 1.44.314 by @dependabot in #916
• chore(deps): Bump go.uber.org/zap from 1.24.0 to 1.25.0 by @dependabot in #917
• chore(deps): Bump github.com/google/go-containerregistry from 0.15.3-0.20230607134719-145eebe7465d to 0.16.1 by @dependabot in #919
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.314 to 1.44.315 by @dependabot in #918
• chore(deps): Bump slsa-framework/slsa-github-generator from 1.7.0 to 1.8.0 by @dependabot in #920
• chore(deps): Bump golang.org/x/net from 0.13.0 to 0.14.0 by @dependabot in #922
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.315 to 1.44.317 by @dependabot in #923
• chore(deps): Bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #933
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.7.1 to 1.7.2 by @dependabot in #932
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.7.1 to 1.7.2 by @dependabot in #931
• chore(deps): Bump github.com/aws/aws-sdk-go from 1.44.317 to 1.44.319 by @dependabot in #934
• chore(deps): Bump github.com/sigstore/sigstore from 1.7.1 to 1.7.2 by @dependabot in #927
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.7.1 to 1.7.2 by @dependabot in #928
• chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.1 to 1.7.2 by @dependabot in #930
• Store the digest of each verified attestation in the PolicyAttestation object by @hectorj2f in #925
• chore(deps): Bump github.com/theupdateframework/go-tuf from 0.5.2 to 0.6.0 by @dependabot in #903
• chore(deps): Bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0 by @dependabot in #937
• chore(deps): Bump github.com/hashicorp/golang-lru from 0.5.4 to 1.0.2 by @dependabot in #926
• bump scaffolding version by @hectorj2f in #912

Full Changelog: v0.8.1...v0.8.2

v0.8.1

Changelog

• 45ec96c Merge pull request #892 from sigstore/dependabot/github_actions/mikefarah/yq-4.34.2

Thanks to all contributors!