v0.0.11

The action now supports testing against Sigstore staging infrastructure: if your Sigstore client can be used with staging, please enable this by adding a second step to your workflow: see README

What's Changed

• feat:checking that the client is allowed to run against staging by @javanlacerda in #124
• Improve dev experience by @jku in #125
• sigstore-python-conformance: Handle --staging by @jku in #126
• Add staging to selftest by @jku in #127
• Tweak staging invocation by @jku in #131
• requirements: bump sigstore-protobuf-specs by @woodruffw in #132
• update d.txt bundles w/ cert containing legacy ext by @bdehamer in #129
• README: prep 0.0.11 by @woodruffw in #133

New Contributors

• @javanlacerda made their first contribution in #124

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• Add v0.2 bundle tests by @bdehamer in #112
• Supply the correct artifact for the new bundle tests by @steiza in #114
• Simplify DSSE bundle tests by @bdehamer in #115
• add RFC3161 timestamp tests by @bdehamer in #116
• fix encoding of RFC3161 timestamps by @bdehamer in #118
• README: prep 0.0.10 by @woodruffw in #120

New Contributors

• @bdehamer made their first contribution in #112

Full Changelog: v0.0.9...v0.0.10

v0.0.9

What's Changed

• Add opt-in support for tests that include providing a custom trust root by @steiza in #101
• README: prep 0.0.9 by @woodruffw in #111

Full Changelog: v0.0.8...v0.0.9

v0.0.8

What's Changed

• Improve unexpected success handling by @jku in #108
• assets: bump invalid_inclusion_proof to 0.2 bundle by @woodruffw in #109
• README: prep 0.0.8 by @woodruffw in #110

Full Changelog: v0.0.7...v0.0.8

v0.0.7

What's Changed

• action, conftest: initial xfail support by @woodruffw in #95
• Add bundle tests to increase coverage of tlog entries by @steiza in #98
• Make it easier to run verification test locally by @steiza in #100
• Allow multiple artifacts to exist by @jku in #102
• README: prep 0.0.7 by @woodruffw in #106

New Contributors

• @jku made their first contribution in #102

Full Changelog: v0.0.6...v0.0.7

v0.0.6

What's Changed

• action: invoke pytest through python by @woodruffw in #89
• Change bundle verification test to not depend on signing by @steiza in #82
• cli: move oidc token into pytest by @jleightcap in #91
• Fix typo to reference skip-signing input; mark additional test as using signing by @steiza in #93
• README: prep 0.0.6 by @woodruffw in #92

New Contributors

• @jleightcap made their first contribution in #91

Full Changelog: v0.0.5...v0.0.6

v0.0.5

What's Changed

• README: Remove deprecated guidance about using ambient credentials by @tetsuo-cpp in #77
• Basic bundle tests by @tnytown in #69
• conftest: Add --identity-token option back by @tetsuo-cpp in #80
• build(deps): bump requests from 2.28.2 to 2.31.0 by @dependabot in #79
• test, tools: init bundle cert chain tests by @tnytown in #78
• Add several bundle tests by @steiza in #84
• sigstore-python-conformance: Update wrapper by @tetsuo-cpp in #85
• README: prep 0.0.5 by @tetsuo-cpp in #86

New Contributors

• @steiza made their first contribution in #84

Full Changelog: v0.0.4...v0.0.5

v0.0.4

What's Changed

• action: restrict label check to third-party PRs by @woodruffw in #62
• conformance: QOL improvements by @woodruffw in #63
• Bundle creation and consumption specs by @tnytown in #67
• workflows: pin python version to 3.11 by @tnytown in #68
• Update README.md to reflect new github org by @bobcallaway in #70
• workflows: Add OIDC token generation workflow by @tetsuo-cpp in #71
• Give the OIDC broadcaster a scary name by @woodruffw in #72
• workflows: remove broadcaster workflow by @woodruffw in #73
• treewide: Use OIDC beacon instead of ambient credentials by @tetsuo-cpp in #74
• Fix our use of GITHUB_TOKEN by @woodruffw in #75
• README: prep 0.0.4 by @tetsuo-cpp in #76

New Contributors

• @tnytown made their first contribution in #67
• @bobcallaway made their first contribution in #70

Full Changelog: v0.0.3...v0.0.4

Release 0.0.3

What's Changed

• README: Elaborate on what we aim to achieve with CLI testing by @tetsuo-cpp in #57
• Support conformance testing on third-party PRs by @tetsuo-cpp in #60

Full Changelog: v0.0.2...v0.0.3

Release 0.0.2

What's Changed

• test: Add more verification tests by @tetsuo-cpp in #50
• cli_protocol: change --certificate-email to --certificate-identity by @woodruffw in #54

Full Changelog: v0.0.1...v0.0.2