Skip to content

v0.6.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 01 Oct 01:55
· 85 commits to main since this release
v0.6.0
This tag was signed with the committer’s verified signature.
stormer78 Glenn Gore
SSH Key Fingerprint: VROPvVixx7zeE871NHBRY+tl/3wDaahD6tC3Xw0KgFc
Verified
Learn about vigilant mode.
6035c67
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • fix(verify-trust): sign only with assertionMethod keys, and drop every gpgsig header like git by @stormer78 in #102
  • fix: harden the VTA URL check, legacy resources, the bridge listener and image by @stormer78 in #103
  • fix(verify-trust): a deactivated did:webvh signer no longer verifies by @stormer78 in #104
  • fix(vgi-bridge): verify platform-signed merges from the fetch, not the bridge's working directory by @stormer78 in #106
  • chore: scan dependencies for advisories in CI, and bound did-git-sign's input by @stormer78 in #107
  • fix(vgi-bridge): the container image builds again, and CI builds it by @stormer78 in #108
  • chore(deps)!: vta-sdk 0.58, tdk 0.21, trust-tasks 0.25, trql-client 0.21; release 0.6.0 by @stormer78 in #110

Full Changelog: v0.5.2...v0.6.0

Contributors

stormer78
Assets 10
Loading