v1.3.10

v1.3.10

Note that Rekor v1 is in maintenance mode as we are actively developing
its successor, Rekor v2, designed to be easy to maintain and cheaper to operate. See the
README for more information.

Features

• Added --client-signing-algorithms flag (#1974)

Fixes / Misc

• emit unpopulated values when marshalling (#2438)
• pkg/api: better logs when algorithm registry rejects a key (#2429)
• chore: improve mysql readiness checks (#2397)

Thanks for all contributors!

v1.3.9

v1.3.9

Features

• Cache checkpoint for inactive shards (#2332)
• Support per-shard signing keys (#2330)

v1.3.8

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

New Contributors

• @sgpinkus made their first contribution in #2322
• @dnwe made their first contribution in #2325

Full Changelog: v1.3.7...v1.3.8

v1.3.7

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

Thanks for all contributors!

v1.3.6

v1.3.6

New Features

• Add support for IEEE P1363 encoded ECDSA signatures
• Add index performance script (#2042)
• Add support for ed25519ph user keys in hashedrekord (#1945)
• Add metrics for index insertion (#2015)
• Add TLS support for Redis Client implementation (#1998)

Bug Fixes

• fix typo in remoteIp and set full name for trace field

Full Changelog: v1.3.5...v1.3.6

v1.3.5

Changelog

• 488eb97 v1.3.5 changelog (#1987)
• 19cd558 output trace in slog and override correlation header name (#1986)
• a0453d5 give log timestamps nanosecond precision (#1985)
• 907f2b5 bump trillian images to v1.6.0 (#1984)
• 134ef83 remove trillian images from release process (#1983)
• 9865ca9 Added support for sha384/sha512 hash algorithms in hashedrekords (#1959)
• fc28ac1 Change Redis value for locking mechanism (#1957)
• fa9ab50 Bump sigstore/sigstore version, fix deprecated func (#1936)
• 6020532 Fix panic for DSSE canonicalization (#1923)
• fe04993 Drop conditional when verifying entry checkpoint (#1917)
• a6c25cc Remove timestamp from checkpoint (#1888)
• 64ab435 Additional unique index correction (#1885)

Thanks for all contributors!

What's Changed

• Additional unique index correction by @sabre1041 in #1885
• Remove timestamp from checkpoint by @haydentherapper in #1888
• Drop conditional when verifying entry checkpoint by @haydentherapper in #1917
• Fix panic for DSSE canonicalization by @haydentherapper in #1923
• update builder to use go1.21 by @cpanato in #1956
• Change Redis value for locking mechanism by @haydentherapper in #1957
• remove trillian images from release process by @bobcallaway in #1983
• bump trillian images to v1.6.0 by @bobcallaway in #1984
• give log timestamps nanosecond precision by @bobcallaway in #1985
• output trace in slog and override correlation header name by @bobcallaway in #1986
• v1.3.5 changelog by @bobcallaway in #1987

New Contributors

• @ret2libc made their first contribution in #1959

Full Changelog: v1.3.4...v1.3.5

v1.3.4

Changelog

• 5072901 changelog for v1.3.4 (#1868)
• 9e37c19 fix: Do not check for pubsub.topics.get on initialization (#1853)
• fb05e16 Update ranges.go (#1852)
• a7501a6 update indexstorage interface to reduce roundtrips (#1838)
• 212ebff add functional options for mysql implementation
• a9de214 s/uuids/uuid
• 014cfb1 add mysql indexstorage backend
• 0394bf7 add s3 storage for attestations
• 29220fb update builder image to use go1.21.4 and bump golangci-lint to v1.55.x (#1851)
• ff9c3b9 fix optional field in cose schema
• c3ffda6 use a single validator library in rekor-cli (#1818)
• b681a14 Remove go-playground/validator dependency from pkg/pki (#1817)

Thanks for all contributors!

New Contributors

• @steiza made their first contribution in #1817

Full Changelog: v1.3.3...v1.3.4

v1.3.3

Changelog

• 12d546c Update signer flag description (#1804)
• 16e2323 update trillian to 1.5.3 (#1803)
• 9f49d7b adds redis_auth (#1627)
• b719942 Add method to get artifact hash for an entry (#1777)
• 05cca49 make e2e tests more usable with docker-compose (#1770)
• 6f96ee3 install go at correct version for codeql (#1762)

Thanks for all contributors!

What's Changed

• build(deps): Bump golang.org/x/net from 0.10.0 to 0.17.0 in /hack/tools by @dependabot in #1759
• build(deps): Bump google/cloud-sdk from 5499d59 to 5ae0c79 by @dependabot in #1760
• build(deps): Bump github.com/go-redis/redismock/v9 from 9.0.3 to 9.2.0 by @dependabot in #1761
• build(deps): Bump github.com/redis/go-redis/v9 from 9.1.0 to 9.2.1 by @dependabot in #1717
• install go at correct version for codeql by @bobcallaway in #1762
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.7.3 to 1.7.4 by @dependabot in #1764
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.7.3 to 1.7.4 by @dependabot in #1765
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.7.3 to 1.7.4 by @dependabot in #1763
• build(deps): Bump github.com/sigstore/sigstore from 1.7.3 to 1.7.4 by @dependabot in #1767
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.3 to 1.7.4 by @dependabot in #1769
• build(deps): Bump google/cloud-sdk from 5ae0c79 to 0bd5508 by @dependabot in #1768
• make e2e tests more usable with docker-compose by @bobcallaway in #1770
• build(deps): Bump google/cloud-sdk from 0bd5508 to 66e2681 by @dependabot in #1772
• build(deps): Bump google/cloud-sdk from 66e2681 to d2a303f by @dependabot in #1773
• build(deps): Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #1774
• build(deps): Bump google/cloud-sdk from 450.0.0 to 451.0.0 by @dependabot in #1775
• build(deps): Bump google.golang.org/grpc from 1.58.3 to 1.59.0 by @dependabot in #1776
• Add method to get artifact hash for an entry by @haydentherapper in #1777
• build(deps): Bump go.step.sm/crypto from 0.36.0 to 0.36.1 by @dependabot in #1780
• build(deps): Bump google/cloud-sdk from 4bcc272 to 1969fea by @dependabot in #1778
• build(deps): Bump cloud.google.com/go/profiler from 0.3.1 to 0.4.0 by @dependabot in #1779
• build(deps): Bump google/cloud-sdk from 451.0.0 to 451.0.1 by @dependabot in #1782
• build(deps): Bump google.golang.org/api from 0.147.0 to 0.148.0 by @dependabot in #1781
• build(deps): Bump google/cloud-sdk from d7dac1e to d01ba39 by @dependabot in #1783
• build(deps): Bump google/cloud-sdk from d01ba39 to 7edf46b by @dependabot in #1784
• build(deps): Bump google/cloud-sdk from 451.0.1 to 452.0.0 by @dependabot in #1785
• build(deps): Bump go.uber.org/goleak from 1.2.1 to 1.3.0 by @dependabot in #1787
• build(deps): Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #1786
• build(deps): Bump google.golang.org/grpc from 1.55.0 to 1.56.3 in /hack/tools by @dependabot in #1788
• build(deps): Bump google/cloud-sdk from 452.0.0 to 452.0.1 by @dependabot in #1789
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.7.4 to 1.7.5 by @dependabot in #1790
• build(deps): Bump google/cloud-sdk from 8b55497 to a7d9835 by @dependabot in #1795
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.7.4 to 1.7.5 by @dependabot in #1792
• build(deps): Bump sigs.k8s.io/release-utils from 0.7.5 to 0.7.6 by @dependabot in #1793
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.4 to 1.7.5 by @dependabot in #1791
• build(deps): Bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 by @dependabot in #1794
• build(deps): Bump google/cloud-sdk from a7d9835 to 96d437f by @dependabot in #1796
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.7.4 to 1.7.5 by @dependabot in #1797
• feat: adds redis auth. by @ianhundere in #1627
• build(deps): Bump google/cloud-sdk from 96d437f to b996d57 by @dependabot in #1798
• build(deps): Bump google/cloud-sdk from 452.0.1 to 453.0.0 by @dependabot in #1800
• build(deps): Bump github.com/redis/go-redis/v9 from 9.2.1 to 9.3.0 by @dependabot in #1801
• build(deps): Bump google.golang.org/api from 0.148.0 to 0.149.0 by @dependabot in #1802
• update trillian to 1.5.3 by @k4leung4 in #1803
• Update signer flag description by @haydentherapper in #1804
• changelog for v1.3.3 by @bobcallaway in #1806

New Contributors

• @ianhundere made their first contribution in #1627

Full Changelog: v1.3.2...v1.3.3

v1.3.2

Changelog

• 1c2ae1c changelog for v1.3.2 (#1758)
• 4d6ff8a build(deps): Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1753)
• c7647b7 build(deps): Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#1755)
• 5310881 build(deps): Bump google/cloud-sdk from 449.0.0 to 450.0.0 (#1757)
• 0a110e5 build(deps): Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#1754)
• 9310915 update Dockerfile for go 1.21.3 (#1752)
• 8052daa update builder image to use go1.21.3 (#1751)
• 49a291a build(deps): Bump google/cloud-sdk from 0c79a8f to 538c693 (#1750)
• f5c00ea add CHANGELOG for v1.3.1 (#1749)

Thanks for all contributors!

v1.3.1

v1.3.1

New Features

• enable GCP cloud profiling on rekor-server (#1746)
• move index storage into interface (#1741)
• add info to readme to denote additional documentation sources (#1722)
• Add type of ed25519 key for TUF (#1677)
• Allow parsing base64-encoded TUF metadata and root content (#1671)

Quality Enhancements

• disable quota in trillian in test harness (#1680)

Bug Fixes

• Update contact for code of conduct (#1720)
• fix: typo (#1711)
• Fix panic when parsing SSH SK pubkeys (#1712)
• Correct index creation (#1708)
• Update .ko.yaml (#1682)
• docs: fixzes a small typo on the readme (#1686)
• chore: fix backfill-redis Makefile target (#1685)

Contributors

• Andres Galante
• Andrew Block
• Appu
• Bob Callaway
• Carlos Tadeu Panato Junior
• guangwu
• Hayden B
• jonvnadelberg
• Lance Ball

New Contributors

• @lance made their first contribution in #1685
• @andresgalante made their first contribution in #1686
• @testwill made their first contribution in #1711
• @jonvnadelberg made their first contribution in #1722

Full Changelog: v1.3.0...v1.3.1