Skip to content

Releases: sigstore/sigstore-js

@sigstore/tuf@4.0.2

18 Mar 19:52
@github-actions github-actions
Immutable release. Only release title and notes can be modified.
@sigstore/tuf@4.0.2
f5e74a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/tuf@4.0.2 Latest
Latest

Patch Changes

Assets 3
Loading

@sigstore/sign@4.1.1

18 Mar 19:52
@github-actions github-actions
@sigstore/sign@4.1.1
f5e74a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/sign@4.1.1

Patch Changes

  • aeb3add: Swap promise-retry library for @gar/promise-retry
  • 3ce13b5: Bump make-fetch-happen from 15.0.3 to 15.0.4
  • Updated dependencies [8f736ef]
    • @sigstore/core@3.2.0
Loading

@sigstore/oci@0.6.1

18 Mar 19:52
@github-actions github-actions
@sigstore/oci@0.6.1
f5e74a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/oci@0.6.1

Patch Changes

  • 5af92a7: Preserve orignal error as cause when throwing
  • aeb3add: Swap promise-retry library for @gar/promise-retry
  • 3ce13b5: Bump make-fetch-happen from 15.0.3 to 15.0.4
Loading

@sigstore/mock@0.12.0

18 Mar 19:52
@github-actions github-actions
@sigstore/mock@0.12.0
f5e74a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/mock@0.12.0

Minor Changes

  • bdc0c6f: Add support for mocked Rekor v2 endpoint

Patch Changes

  • 3ce13b5: Bump @peculiar/x509 from 1.14.2 to 1.14.3
Loading

@sigstore/core@3.2.0

18 Mar 19:52
@github-actions github-actions
@sigstore/core@3.2.0
f5e74a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/core@3.2.0

Minor Changes

  • 8f736ef: Update the createPublicKey function to support base64-encoded keys
Loading

@sigstore/cli@0.9.1

18 Mar 19:52
@github-actions github-actions
@sigstore/cli@0.9.1
f5e74a2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/cli@0.9.1

Patch Changes

  • 5af92a7: Preserve orignal error as cause when throwing
  • 3ce13b5: Bump make-fetch-happen from 15.0.3 to 15.0.4
  • Updated dependencies [5af92a7]
  • Updated dependencies [aeb3add]
  • Updated dependencies [3ce13b5]
    • @sigstore/oci@0.6.1
    • @sigstore/sign@4.1.1
Loading

sigstore@4.1.0

19 Dec 16:54
@github-actions github-actions
sigstore@4.1.0
c4ad614
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
sigstore@4.1.0

Minor Changes

  • eba6a52: verify(bundle[, payload][, options]) now returns a Signer object containing the public key and identity information from the verification.

Patch Changes

  • Updated dependencies [cee51c0]
  • Updated dependencies [2042aad]
  • Updated dependencies [018974e]
  • Updated dependencies [dea916f]
  • Updated dependencies [61a4f9e]
  • Updated dependencies [5ffadc0]
  • Updated dependencies [5ffadc0]
  • Updated dependencies [1663b3e]
    • @sigstore/tuf@4.0.1
    • @sigstore/verify@3.1.0
    • @sigstore/sign@4.1.0
    • @sigstore/core@3.1.0
Loading

@sigstore/sign@4.0.1

25 Sep 17:39
@github-actions github-actions
@sigstore/sign@4.0.1
83b349b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/sign@4.0.1

Patch Changes

  • 55ae624: Fix for selecting correct OIDC claim when calculating proof-of-possession for Fulcio
Loading

sigstore@4.0.0

29 Jul 23:17
@github-actions github-actions
sigstore@4.0.0
21dd66d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
sigstore@4.0.0

Major Changes

  • 383e200: Drop support for node 18

Patch Changes

  • Updated dependencies [40395f5]
  • Updated dependencies [383e200]
  • Updated dependencies [383e200]
  • Updated dependencies [383e200]
    • @sigstore/tuf@4.0.0
    • @sigstore/sign@4.0.0
    • @sigstore/bundle@4.0.0
    • @sigstore/verify@3.0.0
    • @sigstore/core@3.0.0
Loading

@sigstore/verify@3.0.0

29 Jul 23:16
@github-actions github-actions
@sigstore/verify@3.0.0
21dd66d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
@sigstore/verify@3.0.0

Major Changes

  • 383e200: Drop support for node 18

Patch Changes

  • Updated dependencies [383e200]
    • @sigstore/bundle@4.0.0
    • @sigstore/core@3.0.0
Loading