v1.4.2

📢 What's New

This releases ships a number of fixes and improvements, the most important one is that AMPEL now normalizes how SKIP is handled across root evaluations. When an evaluation results in skip, AMPEL now returns false across all policy material types. The verifier can be configured to return SKIP to the user and the CLI can opt to return an error code on SKIP. Thanks to @marcusburghardt for the discussion to shape the right behavior!

Two improvements to the policy runtime shipped: policies now have access to some of the verifier engine metadata such as evaluation start time, version, etc. via a new ampel. object. Additionally, code in when: conditions now can access the loaded predicates.

We also include two fixes on the VEX transformer from @arpitjain099 and pulled in fixes from the signer.

As always test it out and let us know any issues or suggestions!

What's Changed

• Pull in signer dsse fix by @puerco in #384
• Bump chainguard-dev/actions/boilerplate from 1.6.39 to 1.6.40 in the actions group across 1 directory by @dependabot[bot] in #382
• Fail Policy when its chain finds no subject by @puerco in #386
• Expose predicate data to when: environment by @puerco in #389
• Index the right list when intersecting filter results by @arpitjain099 in #387
• Accept every in-toto DigestSet algorithm as a verify subject by @puerco in #391
• Bump the actions group with 2 updates by @dependabot[bot] in #390
• Name the checks of a policy without controls by @puerco in #392
• Fail evaluations when nothing was verified by @puerco in #394
• Expose verifier engine data to CEL environment by @puerco in #395
• Do not dereference a missing date when ordering VEX statements by @arpitjain099 in #397

New Contributors

• @arpitjain099 made their first contribution in #387

Full Changelog: v1.4.1...v1.4.2

v1.4.1

Release v1.4.1

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

v1.4.0

Release v1.4.0

Cut by miniprow from a minor release request.

Policies verified:
- gitsign-commit-signature

v1.3.10

Release v1.3.10

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

v1.3.9

Release v1.3.9

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

v1.3.8

Release v1.3.8

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

v1.3.7

What's Changed

• Bump the actions group with 5 updates by @dependabot[bot] in #338
• Improve PolicyBlock success messages by @puerco in #339
• Bump chainguard-dev/actions/boilerplate from 1.6.29 to 1.6.30 in the actions group by @dependabot[bot] in #340
• Add SPDX3 support by @puerco in #341
• Bump github.com/carabiner-dev/signer from 0.5.3-0.20260728042848-608f5e258e3a to 0.5.4 in the gomod group by @dependabot[bot] in #342
• Bump github.com/google/cel-go from 0.30.0 to 0.31.0 by @dependabot[bot] in #343
• Bump chainguard-dev/actions/boilerplate from 1.6.30 to 1.6.31 in the actions group by @dependabot[bot] in #345
• Bump google.golang.org/protobuf from 1.36.11 to 1.36.12 in the gomod group by @dependabot[bot] in #344
• Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #348
• Bump github.com/carabiner-dev/osv from 0.1.1 to 0.1.2 in the gomod group by @dependabot[bot] in #346
• Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 by @dependabot[bot] in #347
• Bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in the gomod group by @dependabot[bot] in #349
• Bump chainguard-dev/actions/boilerplate from 1.6.31 to 1.6.32 in the actions group across 1 directory by @dependabot[bot] in #350
• Bump the actions group with 5 updates by @dependabot[bot] in #352
• Bump the gomod group with 3 updates by @dependabot[bot] in #351
• Bump chainguard-dev/actions/boilerplate from 1.6.32 to 1.6.33 in the actions group by @dependabot[bot] in #353
• Add owners file by @puerco in #354
• Bump the gomod group with 5 updates by @dependabot[bot] in #355

Full Changelog: v1.3.6...v1.3.7

v1.3.6

v1.3.6

v1.3.3

⭐ What's New

This is a small release to build v1.3.2 for more platforms, as of this release we will build for all the available GitHub actions runner platforms.

What's Changed

• Release binaries for all runner platforms by @puerco in #324

Full Changelog: v1.3.2...v1.3.3

v1.3.2

v1.3.2