Skip to content

v0.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 21:08
· 810 commits to main since this release
v0.7.0
This tag was signed with the committer’s verified signature.
adityasaky Aditya Sirish
GPG key ID: B83110D012545604
Verified
Learn about vigilant mode.
8525e2e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This release includes experimental support for signing gittuf metadata with Sigstore! To try it out, set GITTUF_DEV=1.

Changelog

  • Added support for metadata signing using Sigstore (currently GITTUF_DEV only)
  • Removed use of legacy custom securesystemslib key formats in gittuf's tests
  • Removed vendored signerverifier library
  • Unified SSH signature verification for Git commits and tags
  • Refactored policy and tuf packages to support versioning policy metadata
  • Updated various dependencies and CI workflows

Contributors

This release includes work by @wlynch, @patzielinski, and @adityasaky. Dependency updates courtesy of @dependabot.

Contributors

wlynch, adityasaky, and 2 other contributors
Assets 51
Loading