v1.1.0

Vote PASSED [+4 -0]: #876

New Features

• Added new command notation plugin install. Users are now able to install a notation plugin directly from a URL or from their file system. Supported plugin installation formats are .zip, .tar.gz, and single plugin executable file.
• Added new command notation plugin uninstall. Users are now able to uninstall a notation plugin by providing the plugin name.
• Added NOTATION_CONFIG and NOTATION_LIBEXEC environment variables. Users are now able to override the default Notation configuration and plugins directory with these two variables.

Other changes

• Improved UX and error messages.
• Improved documentation.
• Updated dependencies
  • Update to Golang 1.21
  • Update to notation-go v1.1.0
  • Update to notation-core-go v1.0.2
  • Update to oras-go v2.3.1

Detailed Commits

• feat: update notation cert list command output by @Two-Hearts in #798
• fix: fix the license check by @Two-Hearts in #826
• bump: bump up to go version 1.21 by @Two-Hearts in #833
• doc: update plugin spec by @FeynmanZhou in #809
• build(deps): Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #823
• build(deps): Bump github/codeql-action from 2.22.5 to 2.22.7 by @dependabot in #835
• Correct broken link to quick start guide by @rcrozean in #831
• chore: update tag to digest by @yizha1 in #837
• feat: add notation plugin uninstall command by @Two-Hearts in #842
• chore: update references with the tag version by @yizha1 in #836
• build(deps): Bump golang.org/x/term from 0.13.0 to 0.15.0 by @dependabot in #843
• build(deps): Bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #845
• build(deps): Bump github/codeql-action from 2.22.7 to 2.22.9 by @dependabot in #846
• build(deps): Bump golang.org/x/crypto from 0.15.0 to 0.17.0 by @dependabot in #850
• build(deps): Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /test/e2e/plugin by @dependabot in #849
• build(deps): Bump github/codeql-action from 2.22.9 to 3.22.11 by @dependabot in #847
• build(deps): Bump actions/upload-artifact from 3.1.3 to 4.0.0 by @dependabot in #848
• feat: notation plugin install command by @Two-Hearts in #827
• feat: add notation config environment variable by @JeyJeyGao in #821
• fix: fix bug in SetHTTPDebugLog by @Two-Hearts in #857
• fix: notation plugin install error messages and tests by @Two-Hearts in #855
• build(deps): Bump github/codeql-action from 3.22.11 to 3.22.12 by @dependabot in #854
• Updated CODEOWNERS and MAINTAINERS files by @toddysm in #862
• build(deps): Bump golang.org/x/term from 0.15.0 to 0.16.0 by @dependabot in #860
• bump: bump up notation-go by @Two-Hearts in #863
• build(deps): Bump actions/cache from 3.3.2 to 3.3.3 by @dependabot in #866
• build(deps): Bump github/codeql-action from 3.22.12 to 3.23.0 by @dependabot in #865
• build(deps): Bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in #864
• fix: improve error message for plugin by @JeyJeyGao in #870
• build(deps): Bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in #872
• build(deps): Bump actions/cache from 3.3.3 to 4.0.0 by @dependabot in #873
• build(deps): Bump github/codeql-action from 3.23.0 to 3.23.1 by @dependabot in #874
• bump: bump up notation-go and notation-core-go including e2e tests by @Two-Hearts in #875

New Contributors

• @rcrozean made their first contribution in #831

Full Changelog: v1.0.0...v1.1.0