v0.6.0

What's Changed

• Adjust MarshalSubjectAltName to allow SANs to be critical by @liamjm in #367
• A note for Linux clients of tpm.EKs(). Fix the doc for attest.ActivateCredentialWithEK() as well. by @zhsh in #368
• Support sha384 RSA signature by @whongda in #372
• Configured Dependabot grouped updates by @brandonweeks in #376
• Support ECC AKs on Linux by @brandonweeks in #395
• attest: Support "qualifyingData" when creating a new key. by @zhsh in #401
• attest: tpm.NewKeyCertifiedBy() that does not require an attest.AK object by @zhsh in #402
• attest: Implement discovery of supported PCR banks by @zhsh in #404
• TPM.PCRBanks() should ignore empty PCR banks. by @zhsh in #406
• Add github-actions to Dependabot config by @brandonweeks in #408
• Bump Go version to 1.24 by @brandonweeks in #411
• Fix CodeSQL permissions by @brandonweeks in #412
• Fix CodeQL permissions take 2 by @brandonweeks in #413
• Support ECDSA based AK's on Windows by @skepth in #415
• Update tpm.go docs to match implementation of AttestPlatform by @liamjm in #426
• Add oid.VerifiedTPM{Fixed,Residency} by @JasonXJ in #420
• x509ext.ParseSubjectAltName() rejects unknown otherName type ids by @JasonXJ in #419
• Make ActivationParameters.CheckAKParameters() public by @JasonXJ in #421
• As per RFC 5755, OtherObjectTypeID is optional by @sribs in #427
• Support ECDSA verification for attribute certificates by @limansa in #429
• Add support for AMD EK certificates by @Krishap-s in #380
• Add RSA package containing RSA-PSS workaround by @brandonweeks in #431
• Fix OSS-Fuzz finding by @brandonweeks in #432
• Drop TPM 1.2; sync internal changes by @brandonweeks in #430
• Remove unnecessary test helper by @brandonweeks in #433
• Add SignMsg() and Public() to AK by @JasonXJ in #434
• Clarify license and origin of attributecert.go (#440) by @jas4711 in #441
• feat: support quote for ECDSA based AK by @loicsikidi in #444
• Add negative test cases for AK signing. by @liamjm in #450
• Update README.md by @liamjm in #449
• Fix(attributecert): Use int64 for ComponentManufacturerID by @liamjm in #457
• More thorough testing of PCR banks and their hash algs by @liamjm in #455
• Define more windows erorr codes, and their description. by @liamjm in #458
• Add method to create Attribute certs by @liamjm in #453
• Typos by @liamjm in #461
• Allow rsa.PSSSaltLengthEqualsHash as option by @maraino in #361
• Replace multierr with errors.Join for error handling by @liamjm in #462
• Add helper method FromCryptoHash() to convert to HashAlg by @liamjm in #463
• Add another failure case for RSA PSS Opts by @liamjm in #464
• Fix typos in comments. by @tomfitzhenry in #466

New Contributors

• @liamjm made their first contribution in #367
• @whongda made their first contribution in #372
• @skepth made their first contribution in #415
• @JasonXJ made their first contribution in #420
• @sribs made their first contribution in #427
• @limansa made their first contribution in #429
• @Krishap-s made their first contribution in #380
• @jas4711 made their first contribution in #441
• @loicsikidi made their first contribution in #444
• @maraino made their first contribution in #361
• @tomfitzhenry made their first contribution in #466

Full Changelog: v0.5.1...v0.6.0