Release v1.13.2

Async Test Library v1.13.2

See CHANGELOG.md for what's new.

Maven

<dependency>
  <groupId>se.deversity.async-test-lib</groupId>
  <artifactId>async-test-lib</artifactId>
  <version>1.13.2</version>
  <scope>test</scope>
</dependency>

Gradle

testImplementation("se.deversity.async-test-lib:async-test-lib:1.13.2")

Verify a cosign signature

All attached jars (async-test-lib, async-test-agent, async-test-analysis) and both
CycloneDX SBOM files (bom.xml, bom.json) carry matching .sigstore.json
bundles. Verify any file by substituting its name:

cosign verify-blob --bundle async-test-lib-1.13.2.jar.sigstore.json \
  --certificate-identity-regexp 'https://github.com/PIsberg/async-test-lib' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  async-test-lib-1.13.2.jar

Verify the build provenance

Every attached artifact has SLSA build provenance, recorded in this repository's
attestations and attached as async-test-lib-1.13.2.intoto.jsonl:

gh attestation verify async-test-lib-1.13.2.jar --repo PIsberg/async-test-lib

Verify the GPG signature

gpg --verify async-test-lib-1.13.2.jar.asc async-test-lib-1.13.2.jar