v1.5.4

Changelog

• a36bd71 add changelog for v1.5.4 release (#2944)
• 705fc05 Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#2945)
• 5789c38 build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /hack/tools in the all group across 1 directory (#2840)
• 7dd85d3 better handle connection issues (#2931)
• a8544a8 build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4.0 (#2939)
• ee19b41 remove repetitive viper lookups from api endpoints (#2922)
• f3441b5 move CI containers to GHCR (#2943)
• d53aa51 build(deps): Bump the all group across 1 directory with 3 updates (#2942)
• 7af1d7c build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)
• ed250aa build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)
• 78ba595 build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0 (#2940)
• 6a6443e build(deps): Bump the all group with 4 updates (#2941)
• a64a345 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2935)
• f6fa665 build(deps): Bump golang from 1.26.5 to 1.26.6 in the all group (#2934)
• 2309dab fix pprof arg (#2932)
• 5a1909a build(deps): Bump the all group across 1 directory with 6 updates (#2925)
• d979072 build(deps): Bump golang from 3aff665 to 2005724 (#2924)
• e1564dc build(deps): Bump github.com/prometheus/client_golang (#2928)
• a497c02 build(deps): Bump the all group with 4 updates (#2930)
• aea3064 build(deps): Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#2926)
• 5486dda build(deps): Bump go.step.sm/crypto from 0.85.0 to 0.87.0 (#2927)
• ebd7339 build(deps): Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.22.0 (#2929)
• d543a4a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2923)
• eaa6d5b build(deps): upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)
• 1665651 build(deps): Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)
• 24394e3 remove unused semver type version map (#2918)
• 3a9dba1 build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 (#2823)
• c4d4150 separate read/write sql traffic for indexservice into separate pools (#2914)
• 99f7844 test against valkey (#2916)
• aef6385 Change default CLI upload type to hashedrekord (#2885)
• 1be154f fix shadowed err, wrong err label (#2907)
• 2cdf437 build(deps): Bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 (#2910)
• e7730e0 build(deps): Bump golang.org/x/mod from 0.37.0 to 0.38.0 (#2911)
• df58502 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2909)
• 730fa37 build(deps): Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1 (#2912)
• ace8820 build(deps): Bump the all group with 4 updates (#2913)
• dfe5a1c alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)
• a8f4a17 Remove unmaintained scripts/createdb.sh dev helper (#2905)
• 9573f1b test mysql with production dsn strings (#2906)
• f3299aa build(deps): Bump golang.org/x/crypto in /hack/tools (#2882)
• cc5737e build(deps): Bump the all group across 1 directory with 6 updates (#2898)
• 8485b5d build(deps): Bump cloud.google.com/go/pubsub from 1.50.2 to 1.51.0 (#2899)
• 3d80df7 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2897)
• 09bf9ca create interface for TrillianClient (#2896)
• 671e78b build(deps): Bump the all group with 5 updates (#2900)
• a00d60e build(deps): Bump go.step.sm/crypto from 0.77.7 to 0.85.0 (#2901)
• ea4ed74 build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 (#2902)
• bde4e86 use more efficient table schema for indexes (#2903)
• 27f1199 return a 400 error for invalid TreeID (#2895)
• 6335172 build(deps): Bump the all group across 1 directory with 3 updates (#2889)
• 0b37bb8 build(deps): Bump the all group across 1 directory with 3 updates (#2893)
• b953a43 build(deps): Bump the all group across 1 directory with 8 updates (#2894)
• 39fd538 build(deps): Bump github.com/cloudflare/circl from 1.6.2 to 1.6.3
• d2ca1f9 build(deps): Bump Homebrew/actions/setup-homebrew (#2890)
• 86e0055 Migrate off deprecated golang.org/x/crypto/openpgp (#2883)
• 0a635ec minimize duplicative JSON parsing while handling entries (#2880)
• 75d61c1 search: add subject field for SAN-based lookup (#2850)
• 1de1764 remove duplicative log entry (#2881)
• 70a2666 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 85b8436 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.6.0 to 2.7.0
• 7ce85c8 build(deps): Bump the all group with 5 updates
• 5cdf941 optimize DSSE memory and cpu while parsing and verifying envs (#2879)
• d750c04 docs(cli): add usage examples to rekor-cli commands (#2851)
• 4c65be7 Return the file error instead of the URL error for a missing artifact path (#2872)
• 2c9a403 update builder to use go1.26.4 (#2873)

Thanks for all contributors!

v1.5.3

Changelog

• 7d9dcff Changelog for v1.5.3 (#2871)
• f230638 Use bytes.Equal for inclusion proof root hash comparison (#2861)
• 7472268 return 499 if client disconnects instead of 500 (#2870)
• 792221b build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.82.0 (#2859)
• 912dda3 build(deps): Bump the all group across 1 directory with 7 updates (#2869)
• 0f9921d Change max upperbound on latency metrics (#2868)
• 322a3f2 build(deps): Bump golang from 87a41d2 to f96cc55 (#2855)
• e997a8a build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 (#2857)
• 4444582 build(deps): Bump golang.org/x/net from 0.52.0 to 0.55.0 in /hack/tools (#2866)
• f81061c Move fuzz into its own workflow (#2865)
• 1a2f3f2 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2862)
• cf8f143 build(deps): Bump the all group with 2 updates (#2863)
• 4e6fd60 build(deps): Bump the all group across 1 directory with 11 updates
• 088835b build(deps): Bump golang in the all group across 1 directory
• 37eb424 build(deps): Bump the all group across 1 directory with 2 updates
• bbc0f78 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 32e6868 build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0
• 400f8d5 build(deps): Bump github.com/go-openapi/loads from 0.23.3 to 0.24.0
• a2d42d5 build(deps): Bump github.com/redis/go-redis/v9 from 9.18.0 to 9.20.0
• e1e207b build(deps): Bump github.com/go-openapi/runtime from 0.29.4 to 0.32.2
• 128ebab build(deps): Bump golang from 313faae to 2d6c802
• 6c9dd72 build(deps): Bump golang.org/x/net from 0.53.0 to 0.55.0
• 65c104c build(deps): Bump the all group across 1 directory with 4 updates
• 6e4daae build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• adebc68 update builder to use go1.26.3

Thanks for all contributors!

v1.5.2

Changelog

• 759b98e alpine: Enforce max size limit on decompression (#2831)
• c7e77ee Support restricting kinds on insertion (#2814)
• a10818a fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#2812)
• 8a2f3a2 add checks to ensure returned entries match client inputs to rekor-cli (#2799)
• 0e88bac add nil pointer check to resolve fuzzing crash (#2807)
• 93da954 client: surface last-response details after retries are exhausted (#2796)
• 4d67ecd Fix internal error detail leakage in 500 responses (#2801)
• b34ca94 add defensive check to ensure tid is in config ahead of getting client (#2795)
• 656c832 restapi: include inactiveShards in the homepage total count (#2797)

Thanks for all contributors!

v1.5.1

Changelog

• 2d46808 optimize memory for DSSE v0.0.1 processing (#2766)
• 6de110d return correct errors in rare failure situations (#2753)
• 7ff7c69 raise error if decoding hash fails during inclusion proof (#2754)

Thanks for all contributors!

v1.5.0

v1.5.0

This release fixes GHSA-273p-m2cw-6833 and GHSA-4c4x-jm2x-pf9j. Note that this
drops support for fetching public keys via URL when querying the search API.

Vulnerability Fixes

• Handle malformed COSE and DSSE entries (#2729)
• Drop support for fetching public keys by URL in the search index (#2731)

Features

• Add support for a custom TLS config for clients (#2709)

v1.4.3

v1.4.3

This release reduces dependencies for a number of exported packages.

This release also changes the format of the binary and container signature, which is now a
Sigstore bundle. To verify a release, use the
latest Cosign 3.x, verifying with
cosign verify-blob --bundle <artifact>-keyless.sigstore.json <artifact>.

Improvements

• use interruptable context to elegantly handle signals in rekor-cli (#2681)
• restapi: Don't log client errors as errors (#2680)
• pkg: separate pki types from implementations (#2668)
• e2e: don't mix e2e and regular utilities (#2672)
• pkg: remove viper config from spec definitions (#2669)
• log: remove zap & go-chi dependecy from pkg/types (#2667)
• chore: update go-openapi/runtime to v0.29.0 (#2670)
• chore: remove double imported mapstructure pkg (#2671)
• remove archived dependency and use stdlib slices (#2650)

Documentation

• (docs): guard unsafe int/uint conversions flagged by gosec (#2679)

Contributors

• AdamKorcz
• Bob Callaway
• Jussi Kukkonen
• Sachin Sampras M
• Tõnis Tiigi

v1.4.2

What's Changed

• build(deps): Bump google-github-actions/auth from 2.1.12 to 3.0.0 by @dependabot[bot] in #2601
• build(deps): Bump github/codeql-action from 3.29.11 to 3.30.0 in the all group by @dependabot[bot] in #2602
• build(deps): Bump the all group with 3 updates by @dependabot[bot] in #2599
• optimize performance of regex operations by @bobcallaway in #2603
• move to direct decoding instead of mapstructure by @bobcallaway in #2598
• build(deps): Bump github.com/go-openapi/swag from 0.23.1 to 0.24.1 by @dependabot[bot] in #2600
• build(deps): Bump golang from 1.24.6 to 1.25.0 in the all group by @dependabot[bot] in #2587
• process type contents serially by @bobcallaway in #2604
• use pubsub client to check IAM permissions by @bobcallaway in #2605
• add changelog for v1.4.2 by @bobcallaway in #2606

Full Changelog: v1.4.1...v1.4.2

v1.4.1

Changelog

• 7c83add add changelog for v1.4.1 release (#2597)
• 978d430 build(deps): Bump google.golang.org/api from 0.246.0 to 0.248.0 (#2595)
• 692a2aa build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#2596)
• 04cf79c build(deps): Bump the all group with 2 updates (#2593)
• f6e19d8 build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
• d34ab93 build(deps): Bump go.step.sm/crypto from 0.69.0 to 0.70.0
• ee8f373 build(deps): Bump google.golang.org/protobuf in the all group
• 1fcc0a6 build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.0
• 8038b35 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 7b8da09 build(deps): Bump actions/checkout from 4.3.0 to 5.0.0
• ec92ffe build(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1
• 96937bf build(deps): Bump github.com/go-viper/mapstructure/v2
• 907cc31 build(deps): Bump github.com/go-viper/mapstructure/v2 in /hack/tools
• cdd9572 use less expensive gRPC call to implement GetLeafAndProofByHash (#2581)
• 97e8521 move to per-shard trillian client manager (#2564)
• 9ea5d3a use cheaper gRPC endpoint when we already have the inclusion proof (#2580)
• a776825 simplify hash and signature verification in rekord type (#2579)
• b73bee3 build(deps): Bump google.golang.org/api from 0.245.0 to 0.246.0
• c0e965a build(deps): Bump go.step.sm/crypto from 0.68.0 to 0.69.0 (#2577)
• f97155a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2572)
• 9d72099 build(deps): Bump golang.org/x/mod from 0.26.0 to 0.27.0 (#2571)
• ce64373 build(deps): Bump golang from 1.24.5 to 1.24.6 in the all group (#2568)
• 1defac6 build(deps): Bump the all group with 3 updates (#2567)
• 3764030 build(deps): Bump the all group with 2 updates (#2565)
• d2372a3 use correct type; just look for len() instead of nil check (#2576)
• 1720e3e return correct error if GetLeafAndProofByHash fails (#2574)
• 4b655cc build(deps): Bump golang.org/x/net from 0.42.0 to 0.43.0
• 2cbf2d6 add go mod updates
• 21758e0 move to v2 api
• c36cdfd build(deps): Bump cloud.google.com/go/pubsub from 1.49.0 to 1.50.0
• bdb43b8 build(deps): Bump google.golang.org/api from 0.242.0 to 0.244.0 (#2561)
• 9cf5f66 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2556)
• 0b80f3f sec(deps): update go-chi/chi to v5
• 62d4ab4 build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2
• 9b894c1 build(deps): Bump sigs.k8s.io/yaml from 1.4.0 to 1.6.0
• e131eab build(deps): Bump github.com/prometheus/client_golang
• edb7c4f build(deps): Bump github.com/redis/go-redis/v9 from 9.10.0 to 9.11.0
• ac17a05 build(deps): Bump the all group with 2 updates
• 437244a build(deps): Bump the all group with 2 updates
• 88f9fb9 build(deps): Bump golang from 14fd8a5 to ef5b4be
• ed92cb6 build(deps): Bump go.step.sm/crypto from 0.67.0 to 0.68.0
• 58962be fix incorrect client lb policy in test config (#2551)

Thanks for all contributors!

What's Changed

• fix incorrect client lb policy in test config by @bobcallaway in #2551
• build(deps): Bump go.step.sm/crypto from 0.67.0 to 0.68.0 by @dependabot[bot] in #2559
• build(deps): Bump golang from 14fd8a5 to ef5b4be by @dependabot[bot] in #2555
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2553
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2552
• build(deps): Bump github.com/redis/go-redis/v9 from 9.10.0 to 9.11.0 by @dependabot[bot] in #2558
• build(deps): Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in #2557
• build(deps): Bump sigs.k8s.io/yaml from 1.4.0 to 1.6.0 by @dependabot[bot] in #2562
• build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @dependabot[bot] in #2560
• sec(deps): update go-chi/chi to v5 by @caarlos0 in #2563
• build(deps): Bump google.com/cloudsdktool/google-cloud-cli from 525.0.0-emulators to 532.0.0-emulators by @dependabot[bot] in #2556
• build(deps): Bump google.golang.org/api from 0.242.0 to 0.244.0 by @dependabot[bot] in #2561
• build(deps): Bump cloud.google.com/go/pubsub from 1.49.0 to 1.50.0 by @dependabot[bot] in #2554
• build(deps): Bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2570
• return correct error if GetLeafAndProofByHash fails by @bobcallaway in #2574
• use correct type; just look for len() instead of nil check by @bobcallaway in #2576
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2565
• build(deps): Bump the all group with 3 updates by @dependabot[bot] in #2567
• build(deps): Bump golang from 1.24.5 to 1.24.6 in the all group by @dependabot[bot] in #2568
• build(deps): Bump golang.org/x/mod from 0.26.0 to 0.27.0 by @dependabot[bot] in #2571
• build(deps): Bump google.com/cloudsdktool/google-cloud-cli from 532.0.0-emulators to 533.0.0-emulators by @dependabot[bot] in #2572
• build(deps): Bump go.step.sm/crypto from 0.68.0 to 0.69.0 by @dependabot[bot] in #2577
• build(deps): Bump google.golang.org/api from 0.245.0 to 0.246.0 by @dependabot[bot] in #2569
• simplify hash and signature verification in rekord type by @bobcallaway in #2579
• AddLeaf: use cheaper gRPC endpoint since we already have the inclusion proof by @bobcallaway in #2580
• move to per-shard trillian client manager by @bobcallaway in #2564
• use less expensive gRPC call to implement GetLeafAndProofByHash by @bobcallaway in #2581
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /hack/tools by @dependabot[bot] in #2584
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #2585
• build(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1 by @dependabot[bot] in #2586
• build(deps): Bump actions/checkout from 4.3.0 to 5.0.0 by @dependabot[bot] in #2588
• build(deps): Bump google.com/cloudsdktool/google-cloud-cli from 533.0.0-emulators to 535.0.0-emulators by @dependabot[bot] in #2594
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #2592
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in the all group by @dependabot[bot] in #2589
• build(deps): Bump go.step.sm/crypto from 0.69.0 to 0.70.0 by @dependabot[bot] in #2590
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #2591
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2593
• build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in #2596
• build(deps): Bump google.golang.org/api from 0.246.0 to 0.248.0 by @dependabot[bot] in #2595
• add changelog for v1.4.1 release by @bobcallaway in #2597

New Contributors

• @caarlos0 made their first contribution in #2563

Full Changelog: v1.4.0...v1.4.1

v1.4.0

Changelog

• d7d31f0 changelog for v1.4.0 release (#2550)
• 455d37b enable retries and timeouts on GCP KMS calls (#2548)
• bfc05e0 allow configuring gRPC default service config for trillian client load balancing & timeouts (#2549)
• 6b4e260 remove stable checkpoint feature (#2537)
• 5d5f299 build(deps): Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0
• 9a34ce9 build(deps): Bump golang.org/x/net from 0.41.0 to 0.42.0 (#2544)
• 7d62779 build(deps): Bump the all group with 3 updates (#2545)
• e2f2f07 fix lints
• 82d7215 bump golangci-lint to v2.2.x
• 47a75e6 use go1.24.5 to build rekor
• 7fec2db build(deps): Bump google.golang.org/api from 0.238.0 to 0.242.0 (#2543)
• d5c8e57 build(deps): Bump golang.org/x/sync from 0.15.0 to 0.16.0 (#2541)
• a7a0356 build(deps): Bump github.com/spf13/pflag in the all group (#2542)
• 802db4d build(deps): Bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0
• d920fad move context handling in trillian RPC calls to be request based and idiomatic (#2536)
• 4b09ef5 build(deps): Bump github.com/go-viper/mapstructure/v2 (#2522)
• 959ea43 build(deps): Bump golang from 1.24.4 to 1.24.5 in the all group (#2534)
• 8931ff3 build(deps): Bump the all group with 2 updates (#2518)
• df0a4ce build(deps): Bump the all group with 2 updates (#2524)
• 2fab95a build(deps): Bump sigstore/scaffolding/trillian_log_server (#2527)
• 4221cb8 build(deps): Bump sigstore/scaffolding/trillian_log_signer (#2526)
• 6c27e68 build(deps): Bump github.com/go-viper/mapstructure/v2 in /hack/tools (#2523)
• 3f8d1e6 backoff pubsub emulator to last-known good (#2535)
• 422e8ec build(deps): Bump golang from db5d0af to 10c1318
• c0f3b8c build(deps): Bump sigstore/cosign-installer in the all group
• 795d4c7 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 3ef026f build(deps): Bump google.golang.org/api from 0.237.0 to 0.238.0
• 18a6ae4 build(deps): Bump go.step.sm/crypto from 0.66.0 to 0.67.0
• 1ef8b66 build(deps): Bump github/codeql-action in the all group
• 2e5d89f build(deps): Bump google.golang.org/api from 0.236.0 to 0.237.0
• fa87121 build(deps): Bump the all group with 7 updates
• 20979b6 Update GoReleaser configurations (#2511)
• 8d71b49 update builder to use go1.24.4
• 03a2874 build(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0
• b0db66f build(deps): Bump golang.org/x/net from 0.40.0 to 0.41.0
• 7dcea62 build(deps): Bump github.com/redis/go-redis/v9 from 9.9.0 to 9.10.0
• ea15859 build(deps): Bump google.golang.org/api from 0.235.0 to 0.236.0
• 4793920 build(deps): Bump golang from 1.24.3 to 1.24.4 in the all group
• 0613f7f build(deps): Bump github.com/go-swagger/go-swagger
• bce34fc build(deps): Bump github/codeql-action in the all group
• 946bdf5 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 5c131cf build(deps): Bump github.com/google/rpmpack from 0.6.0 to 0.7.0
• 4f4dbc7 build(deps): Bump github.com/redis/go-redis/v9 from 9.8.0 to 9.9.0
• 4a3e683 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 6a0305e build(deps): Bump go.step.sm/crypto from 0.64.0 to 0.66.0
• cad3eb6 build(deps): Bump google.golang.org/api from 0.234.0 to 0.235.0
• 5097431 build(deps): Bump golang from 4c0a181 to 81bf592
• 1a4c8e5 build(deps): Bump google.golang.org/api from 0.233.0 to 0.234.0
• cc3b57c build(deps): Bump golang from 86b4cff to 4c0a181
• a695663 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• e6af2f8 build(deps): Bump google.golang.org/grpc in the all group
• aaaa2e3 build(deps): Bump go.step.sm/crypto from 0.63.0 to 0.64.0
• d4e59ed Don't initialize index storage with stable checkpoint publishing (#2486)
• 255b324 build(deps): Bump golang from 39d9e7d to 86b4cff
• c86d95f build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 90ca4b4 build(deps): Bump the all group with 2 updates
• 7d5b510 build(deps): Bump google.golang.org/api from 0.232.0 to 0.233.0
• dec7ef2 build(deps): Bump the all group with 2 updates
• 62a6617 Fix docker compose up --wait failing when Trillian server isn't healthy (#2473)
• dedb18d build(deps): Bump golang.org/x/crypto from 0.37.0 to 0.38.0 (#2477)
• a18b3a3 build(deps): Bump golang.org/x/net from 0.39.0 to 0.40.0 (#2475)
• b971ec3 build(deps): Bump golang from 1.24.2 to 1.24.3 in the all group (#2480)
• b124325 build(deps): Bump google.golang.org/api from 0.231.0 to 0.232.0
• f067e5a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2478)
• 09bb61f build(deps): Bump actions/setup-go from 5.4.0 to 5.5.0 in the all group (#2474)
• 140f622 build(deps): Bump github.com/redis/go-redis/v9 from 9.7.3 to 9.8.0 (#2470)
• 5cbfc5f build(deps): Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 (#2471)
• 0e0e62b build(deps): Bump google.golang.org/api from 0.230.0 to 0.231.0
• 810385a build(deps): Bump go.step.sm/crypto from 0.61.0 to 0.63.0 (#2468)
• 191c5a8 build(deps): Bump github/codeql-action in the all group (#2467)
• cc70ac7 build(deps): Bump golang from d9db321 to 30baaea (#2469)
• 7b8fd2e build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2466)
• 09ef86a build(deps): Bump the all group with 2 updates
• 78c929a build(deps): Bump google.golang.org/api from 0.229.0 to 0.230.0
• 2f76aea build(deps): Bump the all group with 3 updates
• 6ad185a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2462)
• fef9f71 Bump sigstore/sigstore, use shared Tink library (#2461)
• 5361696 better mysql healthcheck (#2459)
• 1f43fb5 build(deps): Bump sigs.k8s.io/release-utils from 0.8.4 to 0.11.1
• 7af1f88 build(deps): Bump google.golang.org/grpc from 1.71.1 to 1.72.0
• fd8ce28 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.3.0 to 2.4.0
• c571c23 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 578719a build(deps): Bump golang
• 0860336 build(deps): Bump codecov/codecov-action in the all group
• a365058 build(deps): Bump go.step.sm/crypto from 0.60.0 to 0.61.0
• 720ba7f build(deps): Bump golang.org/x/crypto in /hack/tools
• 456b0df update builder image to use go1.24.2
• ce01015 build(deps): Bump golang from 991aa6a to 1ecc479
• 46c694f build(deps): Bump ko-build/setup-ko from 0.8 to 0.9 in the all group
• 406f08d build(deps): Bump cloud.google.com/go/pubsub from 1.47.0 to 1.49.0
• 78161c7 build(deps): Bump github.com/prometheus/client_golang
• 159c0f2 build(deps): Bump the all group with 7 updates
• 61c39f0 build(deps): Bump github.com/spf13/viper from 1.19.0 to 1.20.1
• 9d0fbc1 Add CHANGELOG for v1.3.10 (#2439)

Thanks for all contributors!

v1.3.10

v1.3.10

Note that Rekor v1 is in maintenance mode as we are actively developing
its successor, Rekor v2, designed to be easy to maintain and cheaper to operate. See the
README for more information.

Features

• Added --client-signing-algorithms flag (#1974)

Fixes / Misc

• emit unpopulated values when marshalling (#2438)
• pkg/api: better logs when algorithm registry rejects a key (#2429)
• chore: improve mysql readiness checks (#2397)

Thanks for all contributors!