v1.3.1

Vote PASSED [+5 -0]: #517

Bug fix

• This patch release removes the timestamp check against signing time during authentic timestamp verification due to potential time skew and the unauthenticated nature of signing time field.

What's Changed

• bump: release v1.3.0 by @Two-Hearts in #507
• fix: remove signing time check during authenticTimestamp by @Two-Hearts in #514
• bump: bump up dependencies for release-1.3 branch by @Two-Hearts in #516

Full Changelog: v1.3.0...v1.3.1

v1.3.0

Key Features and updates

• CRL revocation check with cache support.
• Fixes and enhancements of timestamping.

What's Changed since v1.3.0-rc.2

• bump: release v1.3.0-rc.2 by @Two-Hearts in #495
• cherry-pick: cherry pick from main to release-1.3 branch by @Two-Hearts in #505
• bump: bump up dependencies for release-1.3 branch by @Two-Hearts in #506

Full Changelog: v1.3.0-rc.2...v1.3.0

Vote PASSED [+4 -0]: #507

v1.3.0-rc.2

Vote PASSED [+4 -0]: #495

What's Changed

• bump: release v1.3.0-rc.1 by @Two-Hearts in #465
• chore: cherry pick fixes from main by @Two-Hearts in #487
• chore: backport #469 for updating logs by @Two-Hearts in #489
• bump: bump up notation-core-go for release-1.3 branch by @Two-Hearts in #490
• bump: bump up crypto for release-1.3 branch by @Two-Hearts in #493
• fix: cherry pick fix of plugin output size (#484) to release-1.3 branch by @Two-Hearts in #494

Full Changelog: v1.3.0-rc.1...v1.3.0-rc.2

v1.3.0-rc.1

Vote PASSED [+4 -0]: #465

What's Changed

• build(deps): bump golang.org/x/mod from 0.19.0 to 0.20.0 by @dependabot in #433
• build(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in #434
• bump: upgrade golang to v1.22 by @Two-Hearts in #440
• docs: create release checklist on main by @Two-Hearts in #443
• bump: bump up notation-core-go and signingAgent by @Two-Hearts in #444
• fix: dir no longer panics when HOME and XDG_CONFIG_HOME are not set by @JasonTheDeveloper in #449
• bump: update golang version to v1.22.0 by @Two-Hearts in #457
• feat: crl support by @JeyJeyGao in #458
• build(deps): bump golang.org/x/crypto from 0.26.0 to 0.27.0 by @dependabot in #455
• feat: crl cache by @Two-Hearts in #462

New Contributors

• @JasonTheDeveloper made their first contribution in #449

Full Changelog: v1.2.1...v1.3.0-rc.1

v1.1.2

Vote PASSED [+4 -0]: #456

Fix

• When HOME and XDG_CONFIG_HOME are not set, default to the current directory.
• signingAgent is updated to be "notation-go/1.1.2"

Other changes

• Upgraded to Golang v1.22
• Updated dependencies in #448

What's Changed

• fix&bump: maintenance update for branch release-1.1 by @JeyJeyGao in #448
• fix: dir no longer panics when HOME and XDG_CONFIG_HOME are not set (#449) by @JeyJeyGao in #450
• bump: release v1.1.2 by @JeyJeyGao in #453

Full Changelog: v1.1.1...v1.1.2

v1.2.1

Vote PASSED [+4 -0]: #452

Fix

• When HOME and XDG_CONFIG_HOME are not set, default to the current directory.

What's Changed

• bump: release v1.2.0 by @Two-Hearts in #445
• Cherry-picked from #449, fix: dir no longer panics when HOME and XDG_CONFIG_HOME are not set by @Two-Hearts in #451

New Contributor

• @JasonTheDeveloper made their first contribution in #449.

Full Changelog: v1.2.0...v1.2.1

v1.2.0

Vote PASSED [+4 -0]: #445

What's Changed

• bump: bump up for v1.2.0 release by @Two-Hearts in #442

Full Changelog: v1.2.0-rc.1...v1.2.0

v1.2.0-rc.1

Vote PASSED [+4 -0]: #439

What's Changed

• fix: improve error message for plugin by @JeyJeyGao in #406
• feat: support distinguished name state(S) by @JeyJeyGao in #432
• refactor!: update revocation based on notation-core-go by @Two-Hearts in #429
• refactor!: remove blob sign/verify related code by @Two-Hearts in #437

Full Changelog: v1.2.0-beta.1...v1.2.0-rc.1

v1.2.0-beta.1

Vote PASSED [+4 -0]: #427

What's Changed

• fix: update error message by @JeyJeyGao in #380
• bump: bump up oras-go and image-spec by @Two-Hearts in #381
• chore: start using plugin-framework package by @priteshbandi in #372
• build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #383
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in #385
• build(deps): bump golang.org/x/mod from 0.14.0 to 0.15.0 by @dependabot in #384
• chore: updated/added deprecation message by @priteshbandi in #382
• build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in #387
• feat: add support for signing blob by @priteshbandi in #379
• chore: add GitHub action for stale issues and PRs by @yizha1 in #365
• build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 by @dependabot in #389
• build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 by @dependabot in #388
• fix: Add contract version to plugin sign request and plugin verify request by @priteshbandi in #390
• bump: bump golang and dependency versions by @Two-Hearts in #392
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #391
• Moved org maintainers to emeritus by @toddysm in #393
• build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 by @dependabot in #397
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 by @dependabot in #395
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 by @dependabot in #399
• build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in #396
• build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #403
• test: improve test coverage to 80% by @JeyJeyGao in #405
• fix: error message for dangling reference index by @JeyJeyGao in #402
• bump: bump up notation-core-go v1.0.3 by @JeyJeyGao in #407
• ci: enable ci for release branch by @JeyJeyGao in #409
• build(deps): bump golang.org/x/mod from 0.17.0 to 0.18.0 by @dependabot in #413
• build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 by @dependabot in #414
• feat: Implements VerifyBlob functionality by @priteshbandi in #394
• fix(ci): pass CODECOV_TOKEN to reusable-build.yml by @JeyJeyGao in #419
• build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 by @dependabot in #421
• build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #420
• feat: Timestamp by @Two-Hearts in #418
• chore: fix logs by @Two-Hearts in #417
• fix: fix usage of SignerInfo.AuthenticSigningTime by @Two-Hearts in #424
• bump: bump up notation-core-go by @Two-Hearts in #426

Full Changelog: v1.1.0...v1.2.0-beta.1

v1.1.1

Vote PASSED [+4 -0]: #412

What's Changed

• fix: update error message by @JeyJeyGao in #380
• bump: bump up oras-go and image-spec by @Two-Hearts in #381
• chore: start using plugin-framework package by @priteshbandi in #372
• build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #383
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in #385
• build(deps): bump golang.org/x/mod from 0.14.0 to 0.15.0 by @dependabot in #384
• chore: updated/added deprecation message by @priteshbandi in #382
• build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in #387
• feat: add support for signing blob by @priteshbandi in #379
• chore: add GitHub action for stale issues and PRs by @yizha1 in #365
• build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 by @dependabot in #389
• build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 by @dependabot in #388
• fix: Add contract version to plugin sign request and plugin verify request by @priteshbandi in #390
• bump: bump golang and dependency versions by @Two-Hearts in #392
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #391
• Moved org maintainers to emeritus by @toddysm in #393
• build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 by @dependabot in #397
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 by @dependabot in #395
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 by @dependabot in #399
• build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in #396
• build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #403
• test: improve test coverage to 80% by @JeyJeyGao in #405
• fix: error message for dangling reference index by @JeyJeyGao in #402
• bump: bump up notation-core-go v1.0.3 by @JeyJeyGao in #407
• ci: enable ci for release branch by @JeyJeyGao in #409
• revert: "feat: add support for signing blob (#379)" by @JeyJeyGao in #411

Full Changelog: v1.1.0...v1.1.1