v0.4.4

What's Changed

• Bump github.com/sigstore/cosign/v2 from 2.6.0 to 2.6.1 in the all group by @dependabot[bot] in #350
• Bump the all group with 2 updates by @dependabot[bot] in #351
• Bump softprops/action-gh-release from 2.3.4 to 2.4.0 in the all group by @dependabot[bot] in #352
• Bump the all group with 2 updates by @dependabot[bot] in #353
• Bump chainguard-dev/actions from 1.5.4 to 1.5.6 in the all group by @dependabot[bot] in #354
• Bump chainguard-dev/actions from 1.5.6 to 1.5.7 in the all group by @dependabot[bot] in #356
• Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #357
• Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #355
• Bump the all group across 1 directory with 3 updates by @dependabot[bot] in #361
• Bump github.com/sigstore/rekor from 1.4.2 to 1.4.3 in the all group by @dependabot[bot] in #360
• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #363
• Bump actions/setup-go from 6.0.0 to 6.1.0 in the all group by @dependabot[bot] in #364
• Bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #365
• Bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 by @dependabot[bot] in #366
• Bump chainguard-dev/actions from 1.5.9 to 1.5.10 in the all group by @dependabot[bot] in #367
• Bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 in the all group by @dependabot[bot] in #368
• Bump softprops/action-gh-release from 2.4.2 to 2.5.0 in the all group by @dependabot[bot] in #369
• Bump actions/checkout from 6.0.0 to 6.0.1 in the all group by @dependabot[bot] in #370
• Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 in the all group by @dependabot[bot] in #371
• Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 in the all group by @dependabot[bot] in #372
• Bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #376
• Updates by @cpanato in #373
• Bump github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0 by @dependabot[bot] in #379
• Bump github.com/sigstore/sigstore from 1.9.6-0.20250729224751-181c5d3339b3 to 1.10.3 by @dependabot[bot] in #377
• Bump github.com/sigstore/fulcio from 1.7.1 to 1.8.3 by @dependabot[bot] in #374
• Bump chainguard-dev/actions from 1.5.10 to 1.5.11 in the all group by @dependabot[bot] in #380
• Bump github.com/sigstore/cosign/v2 from 2.6.1 to 2.6.2 in the all group by @dependabot[bot] in #381
• Bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 by @dependabot[bot] in #382
• Bump actions/setup-go from 6.1.0 to 6.2.0 in the all group by @dependabot[bot] in #383
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #386
• Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.4.1 by @dependabot[bot] in #392
• Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 by @dependabot[bot] in #388
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #391
• Bump chainguard-dev/actions from 1.5.13 to 1.5.14 in the all group by @dependabot[bot] in #393
• Bump chainguard-dev/actions from 1.5.14 to 1.5.16 in the all group by @dependabot[bot] in #394
• Bump chainguard-dev/actions from 1.5.16 to 1.6.0 in the all group by @dependabot[bot] in #395
• Bump chainguard-dev/actions from 1.6.0 to 1.6.1 in the all group by @dependabot[bot] in #396
• Bump chainguard-dev/actions from 1.6.1 to 1.6.2 in the all group by @dependabot[bot] in #397
• Bump chainguard-dev/actions from 1.6.2 to 1.6.4 in the all group by @dependabot[bot] in #400
• Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #401
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #404
• Bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #403
• Bump github.com/package-url/packageurl-go from 0.1.3 to 0.1.4 in the all group by @dependabot[bot] in #398
• Bump github.com/google/go-containerregistry from 0.20.7 to 0.21.0 by @dependabot[bot] in #399
• Bump chainguard-dev/actions from 1.6.5 to 1.6.6 in the all group by @dependabot[bot] in #405
• Bump the all group with 2 updates by @dependabot[bot] in #406
• Bump the all group across 1 directory with 3 updates by @dependabot[bot] in #411
• Bump the all group across 1 directory with 5 updates by @dependabot[bot] in #415
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #421
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #420
• Port to new intoto/attestation by @puerco in #417
• Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #423
• fix(add): allow add without --product flag by @ricardbejarano in #422
• Bump google.golang.org/grpc from 1.78.0 to 1.79.3 by @dependabot[bot] in #412
• Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.10.0 by @dependabot[bot] in #390
• Bump kubernetes-sigs/release-actions from 0.4.2 to 0.4.3 in the all group by @dependabot[bot] in #424
• Bump github.com/google/go-containerregistry from 0.21.3 to 0.21.4 in the all group by @dependabot[bot] in #425
• Bump actions/upload-artifact from 7.0.0 to 7.0.1 in the all group by @dependabot[bot] in #427
• Bump github.com/sigstore/cosign/v2 from 2.6.2 to 2.6.3 in the all group by @dependabot[bot] in #426
• Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @dependabot[bot] in #433
• Bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 in the all group across 1 directory by @dependabot[bot] in #432
• Bump softprops/action-gh-release from 2.6.1 to 3.0.0 by @dependabot[bot] in #431
• Bump chainguard-dev/actions from 1.6.13 to 1.6.14 in the all group by @dependabot[bot] in #430
• Bump the all group with 2 updates by @dependabot[bot] in #434
• Bump github.com/secure-systems-lab/go-securesystemslib from 0.10.0 to 0.11.0 by @dependabot[bot] in #435
• Bump github.com/package-url/packageurl-go from 0.1.5 to 0.1.6 in the all group by @dependabot[bot] in #437
• Bump the all group with 2 updates by @dependabot[bot] in #436
• Bump chainguard-dev/actions from 1.6.16 to 1.6.17 in the all group by @dependabot[bot] in #438
• Bump chainguard-dev/actions from 1.6.17 to 1.6.19 in the all group by @dependabot[bot] in #439
• Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in the all group by @dependabot[bot] in #440
• build(deps): Bump the all group across 1 directory with 2 updates by @dependabot[bot] in #443
• build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 in the all group by @dependabot[bot] in #442
• build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 in the all group by @dependabot[bot] in #445
• build(deps): Bump github.com/sigstore/rekor from 1.5.1 to 1.5.2 in the all group by @dependabot[bot] in #446
• build(deps): Bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8 in the all group by @dependabot[bot] in #447
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #448
• build(deps): Bump chainguard-dev/actions from 1.6.21 to 1.6.22 in the all group by @dependabot[bot] in #449
• build(deps): Bump chainguard-dev/actions from 1.6.22 to 1.6.23 in the all group by @dependabot[bot] in #450
• housekeeping - deps update and ci cleanup by @cpanato in #452
• fix signature duplication by @cpanato in #453

New Contributors

• @ricardbejarano made their first contribution in #422

Full Changelog: v0.4.1...v0.4.4