v1.3.0

See CHANGELOG.md for more details.

New Feature

• Add support for verifying dsse-intoto by @loosebazooka in #855

What's Changed

• Update bouncycastle to v1.79 by @renovate in #864
• Update actions/setup-java action to v4.5.0 by @renovate in #863
• Update protobuf_grpc by @renovate in #861
• Update sigstore/community digest to ee857ea by @renovate in #841
• Update dependency com.google.http-client:google-http-client-bom to v1.45.1 by @renovate in #860
• Add tests for downloadTarget by @loosebazooka in #854
• Update sigstore/sigstore-conformance action to v0.0.13 by @renovate in #862
• Import dsse/hashrekord types from rekor by @loosebazooka in #867
• Parse DSSE bundles and Intoto payloads by @loosebazooka in #868
• Update conformance to 0.0.14 by @loosebazooka in #869
• Reorganize message signature checks by @loosebazooka in #872
• Change payload type to byte[] by @loosebazooka in #873
• Update dependency com.code-intelligence:jazzer-api to v0.23.0 by @renovate in #879
• Update actions/setup-go action to v5.2.0 - autoclosed by @renovate in #877
• Update dependency org.junit:junit-bom to v5.11.4 by @renovate in #876
• Update dependency com.google.http-client:google-http-client-bom to v1.45.3 by @renovate in #875
• Update sigstore/community digest to 859cddd by @renovate in #874
• Update actions/setup-java action to v4.6.0 by @renovate in #878
• Update gradle/actions action to v4.2.2 by @renovate in #883
• Update dependency org.assertj:assertj-core to v3.27.2 by @renovate in #882
• Update protobuf_grpc by @renovate in #884
• Update softprops/action-gh-release action to v2.2.0 by @renovate in #885
• Update dependency com.google.guava:guava to v33.4.0-jre by @renovate in #880
• Update dependency com.google.oauth-client:google-oauth-client-bom to v1.37.0 by @renovate in #881
• Update sigstore/sigstore-conformance action to v0.0.16 by @renovate in #891
• address CI issues reported by zizmor by @bobcallaway in #892
• Update sigstore/community digest to 9ce4322 by @renovate in #886
• Update dependency commons-codec:commons-codec to v1.17.2 - autoclosed by @renovate in #887
• Update dependency dev.sigstore:protobuf-specs to v0.3.3 by @renovate in #888
• Update dependency org.assertj:assertj-core to v3.27.3 by @renovate in #889
• Update protobuf_grpc by @renovate in #890
• Update actions/setup-go action to v5.3.0 by @renovate in #896
• Update actions/setup-java action to v4.7.0 by @renovate in #897
• Update bouncycastle to v1.80 by @renovate in #898
• Update dependency com.code-intelligence:jazzer-api to v0.24.0 by @renovate in #899
• Update dependency com.google.code.gson:gson to v2.12.1 by @renovate in #900
• Update dependency com.google.http-client:google-http-client-bom to v1.46.1 by @renovate in #901
• Doc should say .sigstore.json instead of .sigstore.java by @thomasleplus in #906

New Contributors

• @thomasleplus made their first contribution in #906

Full Changelog: v1.2.0...v1.3.0

v1.2.0

See CHANGELOG.md for more details.

What's Changed

• Fix checkpoint verification 23fb488
• Update versions and changelog by @loosebazooka in #858
• Add arifactDigest as input option for conformance by @loosebazooka in #859

Full Changelog: v1.1.0...v1.2.0

v1.1.0

See CHANGELOG.md for more details.

What's Changed

• update versions after 1.0.0 by @loosebazooka in #800
• Update dependency org.eclipse.jetty:jetty-server to v11.0.24 by @renovate in #803
• Update gradle/actions action to v4.0.1 by @renovate in #804
• Update dependency com.google.errorprone:error_prone_core to v2.31.0 by @renovate in #805
• Update dependency com.google.http-client:google-http-client-bom to v1.45.0 by @renovate in #806
• Update sigstore/community digest to af27ecc by @renovate in #801
• Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v1.2.2 by @renovate in #802
• Update dependency com.google.guava:guava to v33.3.1-jre by @renovate in #815
• Update actions/checkout action to v4.2.0 by @renovate in #818
• Update actions/setup-java action to v4.4.0 by @renovate in #819
• Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v1.3.0 by @renovate in #821
• Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.7 by @renovate in #816
• Update protobuf_grpc by @renovate in #824
• Update gradle/actions action to v4.1.0 by @renovate in #823
• Update dependency org.mockito:mockito-bom to v5.14.1 by @renovate in #822
• Update sigstore/community digest to 95ef39c by @renovate in #814
• Update dependency org.junit:junit-bom to v5.11.1 by @renovate in #817
• Move known roles in TUF by @loosebazooka in #826
• Separate meta fetching from target fetching by @loosebazooka in #827
• Non inferred file names by @loosebazooka in #828
• Update actions/checkout action to v4.2.1 by @renovate in #830
• Update dependency org.junit:junit-bom to v5.11.2 by @renovate in #831
• Update dependency org.mockito:mockito-bom to v5.14.2 by @renovate in #832
• Update dependency de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin to v3.8 by @renovate in #833
• Update dependency org.junit:junit-bom to v5.11.3 by @renovate in #835
• Update dependency net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin to v4.1.0 by @renovate in #834
• Update sigstore/community digest to dcc3c01 by @renovate in #829
• Store meta state in memory by @loosebazooka in #836
• Update tuf updater api surface by @loosebazooka in #839
• More tuf updates for conformance by @loosebazooka in #840
• Start adding tuf conformance by @loosebazooka in #838
• Update protobuf_grpc by @renovate in #842
• Update softprops/action-gh-release action to v2.1.0 by @renovate in #844
• Update actions/setup-go action to v5.1.0 by @renovate in #845
• Update staging and public good embedded starter roots by @loosebazooka in #848
• Add tuf specific key/signature handlers by @loosebazooka in #847
• Use tuf verifiers in updater by @loosebazooka in #849
• Cleanup by @loosebazooka in #850
• Update actions/checkout action to v4.2.2 by @renovate in #843
• Cleanup keys parsing, caller specifies type by @loosebazooka in #851
• Handle targets with path elements by @loosebazooka in #853
• Fix test_duplicate_sig_keyids by @loosebazooka in #852
• Rekor Entries should be reconstructed and compared by @loosebazooka in #856

Full Changelog: v1.0.0...v1.1.0

v1.0.0

See CHANGELOG.md for more details.

v0.12.0

See CHANGELOG.md for more details.

v0.11.0

See CHANGELOG.md for more details.

v0.10.0

See CHANGELOG.md for more details.

v0.9.0-gradle

See CHANGELOG.md for more details.

v0.8.0-gradle

See CHANGELOG.md for more details.

v0.7.0-gradle

See CHANGELOG.md for more details.