Skip to content

v1.5.4

Latest
Latest

Choose a tag to compare

View all tags
@sigstore-bot sigstore-bot released this 20 Aug 17:54
· 16 commits to main since this release
v1.5.4
a36bd71
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changelog

  • a36bd71 add changelog for v1.5.4 release (#2944)
  • 705fc05 Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#2945)
  • 5789c38 build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /hack/tools in the all group across 1 directory (#2840)
  • 7dd85d3 better handle connection issues (#2931)
  • a8544a8 build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4.0 (#2939)
  • ee19b41 remove repetitive viper lookups from api endpoints (#2922)
  • f3441b5 move CI containers to GHCR (#2943)
  • d53aa51 build(deps): Bump the all group across 1 directory with 3 updates (#2942)
  • 7af1d7c build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)
  • ed250aa build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)
  • 78ba595 build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0 (#2940)
  • 6a6443e build(deps): Bump the all group with 4 updates (#2941)
  • a64a345 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2935)
  • f6fa665 build(deps): Bump golang from 1.26.5 to 1.26.6 in the all group (#2934)
  • 2309dab fix pprof arg (#2932)
  • 5a1909a build(deps): Bump the all group across 1 directory with 6 updates (#2925)
  • d979072 build(deps): Bump golang from 3aff665 to 2005724 (#2924)
  • e1564dc build(deps): Bump github.com/prometheus/client_golang (#2928)
  • a497c02 build(deps): Bump the all group with 4 updates (#2930)
  • aea3064 build(deps): Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#2926)
  • 5486dda build(deps): Bump go.step.sm/crypto from 0.85.0 to 0.87.0 (#2927)
  • ebd7339 build(deps): Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.22.0 (#2929)
  • d543a4a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2923)
  • eaa6d5b build(deps): upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)
  • 1665651 build(deps): Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)
  • 24394e3 remove unused semver type version map (#2918)
  • 3a9dba1 build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 (#2823)
  • c4d4150 separate read/write sql traffic for indexservice into separate pools (#2914)
  • 99f7844 test against valkey (#2916)
  • aef6385 Change default CLI upload type to hashedrekord (#2885)
  • 1be154f fix shadowed err, wrong err label (#2907)
  • 2cdf437 build(deps): Bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 (#2910)
  • e7730e0 build(deps): Bump golang.org/x/mod from 0.37.0 to 0.38.0 (#2911)
  • df58502 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2909)
  • 730fa37 build(deps): Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1 (#2912)
  • ace8820 build(deps): Bump the all group with 4 updates (#2913)
  • dfe5a1c alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)
  • a8f4a17 Remove unmaintained scripts/createdb.sh dev helper (#2905)
  • 9573f1b test mysql with production dsn strings (#2906)
  • f3299aa build(deps): Bump golang.org/x/crypto in /hack/tools (#2882)
  • cc5737e build(deps): Bump the all group across 1 directory with 6 updates (#2898)
  • 8485b5d build(deps): Bump cloud.google.com/go/pubsub from 1.50.2 to 1.51.0 (#2899)
  • 3d80df7 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2897)
  • 09bf9ca create interface for TrillianClient (#2896)
  • 671e78b build(deps): Bump the all group with 5 updates (#2900)
  • a00d60e build(deps): Bump go.step.sm/crypto from 0.77.7 to 0.85.0 (#2901)
  • ea4ed74 build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 (#2902)
  • bde4e86 use more efficient table schema for indexes (#2903)
  • 27f1199 return a 400 error for invalid TreeID (#2895)
  • 6335172 build(deps): Bump the all group across 1 directory with 3 updates (#2889)
  • 0b37bb8 build(deps): Bump the all group across 1 directory with 3 updates (#2893)
  • b953a43 build(deps): Bump the all group across 1 directory with 8 updates (#2894)
  • 39fd538 build(deps): Bump github.com/cloudflare/circl from 1.6.2 to 1.6.3
  • d2ca1f9 build(deps): Bump Homebrew/actions/setup-homebrew (#2890)
  • 86e0055 Migrate off deprecated golang.org/x/crypto/openpgp (#2883)
  • 0a635ec minimize duplicative JSON parsing while handling entries (#2880)
  • 75d61c1 search: add subject field for SAN-based lookup (#2850)
  • 1de1764 remove duplicative log entry (#2881)
  • 70a2666 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
  • 85b8436 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.6.0 to 2.7.0
  • 7ce85c8 build(deps): Bump the all group with 5 updates
  • 5cdf941 optimize DSSE memory and cpu while parsing and verifying envs (#2879)
  • d750c04 docs(cli): add usage examples to rekor-cli commands (#2851)
  • 4c65be7 Return the file error instead of the URL error for a missing artifact path (#2872)
  • 2c9a403 update builder to use go1.26.4 (#2873)

Thanks for all contributors!

Assets 58
Loading