v1.4.0

What's Changed

🥳 This release is the first Generally Available version of the Container Generator workflow. The Container Generator workflow is now considered stable and can be included in your production GitHub Actions workflows 🥳

🎉 This is also the first release (technically the second) with support for the generally available version of sigstore!! 🎉
We hope to have fewer issues with sigstore infrastructure moving forward.

Generic Generator

Bug fixes

1. Allow users of the Generic Generator to generate provenance for artifacts created in a project subdirectory (#1225)

Go Builder

Bug fixes

1. Allow environment variables to contain '=' characters in the Go builder (#1231)

New Contributors

• @cfergeau made their first contribution in #1232
• @DanAlbert made their first contribution in #1239
• @gal-legit made their first contribution in #1252

Full Changelog

v1.2.2...v1.4.0

• Update references to main after v1.2.2 release by @ianlewis in #1228
• [generic] fix attestation file creation when subject names are in subdirectories by @asraa in #1226
• Update docs to use v1.2.2 by @ianlewis in #1229
• Update RELEASE docs by @ianlewis in #1227
• chore(deps): update npm dev to v5.43.0 by @renovate-bot in #1230
• builder: go: Allow equal signs in env vars by @cfergeau in #1232
• Ko example by @ianlewis in #951
• docs(generic-generator): clarify that created provenance is encapsulated by @diogoteles08 in #1235
• Fix semver regex in actions pre-submit by @ianlewis in #1233
• Fix typo in doc. by @DanAlbert in #1239
• Fix reference Gradle workflow. by @DanAlbert in #1240
• Start code freeze for v1.3.0 by @ianlewis in #1248
• Undo the v1.3.0 freeze by @ianlewis in #1260
• Badges and README updates by @ianlewis in #1263
• Fix docs for goreleaser with the generic generator to include docker di… by @gal-legit in #1252
• Fix grep by @ianlewis in #1249
• Exclude go from renovate PR grouping by @ianlewis in #1268
• chore(deps): update npm dev by @renovate-bot in #1243
• Fix permissions in doc by @ianlewis in #1247
• chore(deps): update github-actions by @renovate-bot in #1242
• Update GHA token permissions for generic container workflow by @ianlewis in #1258
• fix(deps): update go by @renovate-bot in #1205
• Update references check to support pre-release by @ianlewis in #1270
• Restore compile-builder pre-submit by @ianlewis in #1272
• Code freeze v1.4.0 rc.0 by @ianlewis in #1271
• undo freeze by @ianlewis in #1284
• Revert package perms by @ianlewis in #1283
• Code freeze for v1.4.0-rc.1 by @ianlewis in #1285
• Undo freeze for v1.4.0-rc.1 by @ianlewis in #1288
• Update generate-builder tag check to support pre-releases by @ianlewis in #1287
• refactor: Update refs to v1.4.0-rc.2 by @ianlewis in #1290