v0.16.0

[EthanHeilman]

A Note on Compatibility for GQ signatures

Includes security fix to GitLab-CI GQ commitment PK Tokens by updating to OpenPubkey v0.25.0. As OPKSSH does not currently support GitLab-CI, and only currently supports GitLab user OP, there should be no security impact to OPKSSH.

However this does introduce a breaking change to how GQ signatures are verified. If GitHub is being used with GQ signatures then signatures created prior to this release will not verify on OPKSSH after this change and signatures created after this release will not verify against on OPKSSH before this change.

See openpubkey/openpubkey#379

Changes

• Update to OpenPubkey v0.25.0 @EthanHeilman (Update to OpenPubkey v0.25.0 #569)
• fix(deps): Update Docker @renovate[bot] (fix(deps): Update Docker #566)
• fix(deps): Update go toolchain directive to v1.26.5 @renovate[bot] (fix(deps): Update go toolchain directive to v1.26.5 #567)
• fix(deps): Update actions/cache action to v6.1.0 @renovate[bot] (fix(deps): Update actions/cache action to v6.1.0 #556)
• feat(enforcer): add glob support to github-actions @gastmaier (feat(enforcer): add glob support to github-actions #558)
• chore(deps): bump github.com/go-chi/chi/v5 from 5.2.2 to 5.2.4 @dependabot[bot] (chore(deps): bump github.com/go-chi/chi/v5 from 5.2.2 to 5.2.4 #540)
• Imports slices rather exp/slices @EthanHeilman (Imports slices rather exp/slices #565)
• feat: produce Android binaries on CI @bltavares (feat: produce Android binaries on CI #550)
• fix(deps): Update Docker @renovate[bot] (fix(deps): Update Docker #555)
• fix(deps): Update docker/build-push-action action to v7.3.0 @renovate[bot] (fix(deps): Update docker/build-push-action action to v7.3.0 #560)
• fix(deps): Update goreleaser/goreleaser-action action to v7.2.3 @renovate[bot] (fix(deps): Update goreleaser/goreleaser-action action to v7.2.3 #557)
• fix(deps): Update release-drafter/release-drafter action to v7.5.1 @renovate[bot] (fix(deps): Update release-drafter/release-drafter action to v7.5.1 #554)
• fix(deps): Update release-drafter/release-drafter action to v7 @renovate[bot] (fix(deps): Update release-drafter/release-drafter action to v7 #551)
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 @dependabot[bot] (chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 #539)

🐛 Bug Fixes

• Fix release drafter @EthanHeilman (Fix release drafter #561)
• fix(deps): Update actions/cache action to v6 @renovate[bot] (fix(deps): Update actions/cache action to v6 #543)
• fix(deps): Update actions/checkout action to v7 @renovate[bot] (fix(deps): Update actions/checkout action to v7 #545)
• fix(deps): Update actions/setup-go action to v6.5.0 @renovate[bot] (fix(deps): Update actions/setup-go action to v6.5.0 #553)
• fix(deps): Update dependency golangci/golangci-lint to v2.12.2 @renovate[bot] (fix(deps): Update dependency golangci/golangci-lint to v2.12.2 #552)
• fix(deps): Update Docker @renovate[bot] (fix(deps): Update Docker #549)
• fix(deps): Update actions/setup-go action to v6.4.0 @renovate[bot] (fix(deps): Update actions/setup-go action to v6.4.0 #541)
• fix(deps): Update dependency golangci/golangci-lint to v2.11.4 @renovate[bot] (fix(deps): Update dependency golangci/golangci-lint to v2.11.4 #489)
• fix(deps): Update zizmorcore/zizmor-action action to v0.5.7 @renovate[bot] (fix(deps): Update zizmorcore/zizmor-action action to v0.5.7 #535)
• fix(deps): Update Docker @renovate[bot] (fix(deps): Update Docker #469)

🧰 Maintenance

• fix(deps): Update Docker @renovate[bot] (fix(deps): Update Docker #469)

---

This discussion was created from the release v0.16.0.