v0.6.7

What's New

This is a minor release intended to ship the bumped sigstore roots.

What's Changed

• Cut patch release by @puerco in #204
• Bump SLSA source action to v0.2.0 by @puerco in #205
• Issue instead of attempting to PR when roots change by @puerco in #206
• Refresh embedded sigstore roots by @puerco in #208

Full Changelog: v0.6.6...v0.6.7

Release v0.6.6

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

Release v0.6.5

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

Release v0.6.4

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

v0.6.3

📢 What's New

This release is the first release of the signer library under the new @ossf Policy Labs project 🎉

What's Changed

• Fix staticcheck deprecations for Go 1.26 by @puerco in #164
• Bump golang.org/x/term from 0.45.0 to 0.46.0 by @dependabot[bot] in #167
• Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.12.2 to 6.13.0 by @dependabot[bot] in #166
• Surface the certificate's build config URI in sigstore identities by @puerco in #168
• Bump the actions group with 2 updates by @dependabot[bot] in #169
• Bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #170
• Move module to github.com/policylabs/signer by @puerco in #176
• Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.13.0 to 6.14.0 by @dependabot[bot] in #175
• Bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 by @dependabot[bot] in #174
• Bump sigs.k8s.io/release-utils from 0.12.4 to 0.12.5 in the gomod group by @dependabot[bot] in #177

Full Changelog: v0.6.2...v0.6.3

Release v0.6.2

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature

v0.6.1

📢 What's New

This patch release adds impersonation support to the GCP STS provider

What's Changed

• Cut minor release by @puerco in #157
• Add impersonation capabilities to GCP STS provider by @puerco in #158

Full Changelog: v0.6.0...v0.6.1

Release v0.6.0

Cut by miniprow from a minor release request.

Policies verified:
- gitsign-commit-signature

v0.5.4

v0.5.4

Release v0.5.3

Cut by miniprow from a patch release request.

Policies verified:
- gitsign-commit-signature