Changelog for rekor-0.12.0-150400.4.3.1.x86_64.rpm :

* Thu Sep 15 2022 meissnerAATTsuse.com- updated to rekor 0.12.0 (jsc#SLE-23476): - check supportedVersions list rather than directly reading from version map by AATTbobcallaway in #1003 - enable blocking specific pluggable type versions from being inserted into the log by AATTbobcallaway in #1004 - api.SearchLogQueryHandler thread safety by AATTcdris in #1006 - \'docker compose\' to \'docker-compose\' by AATTbobcallaway in #1009 - Intoto v0.0.2 by AATTpxp928 in #973 - Add bounds on number of elements in api/v1/log/entries/retrieve by AATTpriyawadhwa in #1011 - Change Checkpoint origin to be \"Hostname - Tree ID\" by AATThaydentherapper in #1013 - feat: add verification functions by AATTasraa in #986 - Validate tree ID on calls to /api/v1/log/entries/retrieve by AATTpriyawadhwa in #1017 - Include checkpoint (STH) in entry upload and retrieve responses by AATThaydentherapper in #1015 - fix: use entry uuid uniformly in return responses by AATTasraa in #1012 - remove /api/v1/version endpoint by AATTbobcallaway in #1022 - Fix rekor-cli backwards incompatibility & run harness tests against HEAD by AATTpriyawadhwa in #1030 - Fix harness tests AATT main by AATTpriyawadhwa in #1038 - Fetch all tags in harness tests by AATTpriyawadhwa in #1039 - fix retrieve endpoint response code and add testing by AATTasraa in #1043- updated to rekor 0.11.0: - Add rekor harness tests by AATTpriyawadhwa in #945 - Persist and check attestations across harness tests by AATTpriyawadhwa in #952 - Add harness test for getting all entries by UUID and EntryID by AATTpriyawadhwa in #957 - api: fix inclusion proof verification flake by AATTasraa in #956 - change default value for rekor_server.hostname to server\'s hostname by AATTbobcallaway in #963 - fix nil-pointer error when artifact-hash is passed without artifact by AATTdsa0x in #965 - Add prometheus summary to track metric latency by AATTpriyawadhwa in #966 - compute payload and envelope hashes upon validating intoto proposed entries by AATTbobcallaway in #967 - update field documentation on publicKey for hashedrekord by AATTbobcallaway in #969 - Allow sharding config to be written in yaml or json by AATTpriyawadhwa in #974 - fix incorrect schema id for cose type by AATTbobcallaway in #979 - fix: make rekor verify work with sharded uuids by AATTasraa in #970 - update builder and cosign images by AATTcpanato in #981 - remove trailing slash on directories by AATTbobcallaway in #984 - add support for intersection & union in search operations by AATTdsa0x in #968 - Update scorecard-action to v2:alpha by AATTazeemshaikh38 in #987- updated to rekor 0.10.0: - reuse DSSE signature wrappers instead of a local copy by AATTbobcallaway in #912 - Updates on the release job/makefile cleanup by AATTcpanato in #914 - Return 404 if entry isn\'t found in log by AATTpriyawadhwa in #915 - Update cosign image in validate-release job by AATTpriyawadhwa in #931 - update go builder and cosign image by AATTcpanato in #934 - Drop application/yaml content type by AATThaydentherapper in #933 - Add rekor test harness to presubmit tests by AATTpriyawadhwa in #921 - sparkles Enable Scorecard badge by AATTazeemshaikh38 in #941 - update go mod in hack/tools to go1.18 by AATTcpanato in #935 - add ldflags back by AATTcpanato in #944
* Wed Jul 27 2022 meissnerAATTsuse.com- updated to rekor 0.9.1 - feat: add subject URIs to index for x509 certificates by AATTasraa in #897 - fix: sql syntax in dbcreate script by AATTxens in #903 - Switch to go 1.18 and pin release-utils to v0.7.1 by AATTsaschagrunert in #904 - Check inactive shards for UUID for /retrieve endpoint by AATTpriyawadhwa in #905 - ensure log messages have requestID where possible by AATTbobcallaway in #907 - Remove unnecessary lookup of non-existent attestations from storage layer by AATTbobcallaway in #909 - Fix bug where /retrieve endpoint returns wrong logIndex across shards by AATTpriyawadhwa in #908- updated to rekor 0.9.0 - Add COSE support to Rekor by AATTkommendorkapten in #867 - Fix intoto index keys by AATTbobcallaway in #889 - Resolve virtual log index when calling /retrieve endpoint by AATTpriyawadhwa in #894- updated to rekor 0.8.2 - collect docker-compose logs if sharding tests fail, also trim IDs by AATTbobcallaway in #869 - ensure fallback logic executes if attestation key is empty when fetching attestation by AATTbobcallaway in #878
* Wed Jun 29 2022 meissnerAATTsuse.com- rekor-zypper-verify.sh: add a small script that verifies the on-system zypper repo cache against rekor transparency log.
* Mon Jun 20 2022 meissnerAATTsuse.com- Updated to rekor 0.8.1 - Fix indexing bug for intoto attestations by AATTpriyawadhwa in #870 - Allow an expired certificate chain to be uploaded and verified by AATThaydentherapper in #873- Updated to rekor 0.8.0 - Update go-tuf and sigstore/sigstore to non-vulnerable go-tuf version. by AATTdhaus67 in #847 - Configure rekor server in e2e tests via env variable by AATTpriyawadhwa in #850 - update cross-builder image to use go1.17.11 and dockerfile base image by AATTcpanato in #860 - update go.mod to go1.17 by AATTcpanato in #861 - Improve error message when using ED25519 with HashedRekord type by AATThaydentherapper in #862 - Allow retrieving entryIDs or UUIDs via /api/v1/log/entries/retrieve endpoint by AATTpriyawadhwa in #859 - Print total tree size, including inactive shards in rekor-cli loginfo by AATTpriyawadhwa in #864- Updated to rekor 0.7.0 - remove URL fetch of keys/artifacts server-side by AATTbobcallaway in #735 - intoto: add index on materials digest of slsa provenance by AATTasraa in #793 - chore(deps): Included dependency review by AATTnaveensrinivasan in #788 - Check if intoto hash is available before accessing it as an index key by AATTpriyawadhwa in #800 - Move deprecated dependency: google/trillian/merkle to transparency-dev by AATTasraa in #807 - Retrieve shard tree length if it isn\'t provided in the config by AATTpriyawadhwa in #810 - update release builder images to use go 1.17.10 and cosign image to 1.8.0 by AATTcpanato in #820 - update go to 1.17.10 in the dockerfile by AATTcpanato in #819 - Limit the number of certificates parsed in a chain by AATThaydentherapper in #823 - Breaking change: Remove timestamping authority by AATThaydentherapper in #813 - Add back owners for rfc3161 package type by AATThaydentherapper in #833 - all: remove dependency on deprecated github.com/pkg/errors by AATTzchee in #834 - name stored attestations by digest instead of UUID by AATTbobcallaway in #769
* Tue Apr 26 2022 meissnerAATTsuse.com- Updated to rekor 0.6.0 - attempting to fix codeowners file by AATTbobcallaway in #653 - Update the warning text for the GA release. by AATTdlorenc in #654 - Add docs about API stability and deprecation policy by AATTpriyawadhwa in #661 - update cross-build and dockerfile to use go 1.17.7 by AATTcpanato in #666 - Move k8s objects out of the default namespace by AATTk4leung4 in #674 - add securityContext to deployment. by AATTk4leung4 in #678 - Add intoto type documentation by AATTjspeed-meyers in #679 - create namespace for rekor config in yaml. by AATTk4leung4 in #680 - Set rekor-cli User-Agent header on requests by AATTbobcallaway in #684 - update security process link by AATTbobcallaway in #685 - explicitly set permissions for github actions by AATTk4leung4 in #687 - Add documentation about Alpine type by AATTjspeed-meyers in #697 - Add code coverage to pull requests. by AATTk4leung4 in #676 - Consistent parenthesis use in Makefile by AATTk4leung4 in #700 - Use logRangesFlag in API, route reads based on TreeID by AATTlkatalin in #671 - Generate release yaml for non-CI builds. by AATTk4leung4 in #702 - Mirror signed release images from GCR to GHCR as part of release by AATTk4leung4 in #701 - build trillian container to existing release. by AATTk4leung4 in #715 - Make the loginfo command a bit more future/backwards proof. by AATTdlorenc in #718 - Switch to using the swag library for pointer manipulation. by AATTdlorenc in #719 - Change TreeID to be of type string instead of int64 by AATTpriyawadhwa in #712 - Add sharding e2e test to Github Actions by AATTpriyawadhwa in #714 - fix merge conflict by AATTpriyawadhwa in #720 - Clearer logging for createAndInitTree by AATTpriyawadhwa in #724 - Return virtual index when creating and getting a log entry by AATTpriyawadhwa in #725 - Fix copy/paste mistake in repo name. by AATTk4leung4 in #730 - Use reusuable release workflow in sigstore/sigstore by AATTk4leung4 in #729 - Get log proofs by Tree ID by AATTpriyawadhwa in #733 - Refactor rekor-cli loginfo by AATTpriyawadhwa in #734 - Update loginfo API endpoint to return information about inactive shards by AATTpriyawadhwa in #738 - Replace trillian_log_server.log_id_ranges flag with a config file by AATTpriyawadhwa in #742 - fix build date format for version command by AATTcpanato in #745 - Require tlog_id when log_id_ranges is passed in by AATTlkatalin in #739 - Use active tree on server startup by AATTlkatalin in #727 - Specify public key for inactive shards in shard config by AATTpriyawadhwa in #746 - Add support for providing certificate chain for X509 signature types by AATThaydentherapper in #747 - fix typo in filename by AATTbobcallaway in #758 - Update release jobs and trillian images by AATTcpanato in #756 - Add the SHA256 digest of the intoto payload into the rekor entry by AATTbobcallaway in #764 - Add index to hashed intoto envelope by AATTasraa in #761 - Fix link in types README by AATTeddiezane in #765 - set p.Block after parsing in helm provenance type by AATTbobcallaway in #759 - Fix search without sha prefix by AATTeddiezane in #767 - Add in configmap to release for sharding config by AATTpriyawadhwa in #766 - Search inactive trees for GET by UUID requests by AATTlkatalin in #750 - Create EntryID for new artifacts and return EntryID to user by AATTlkatalin in #623 - Update cloudbuild to not fail when copy the images by AATTcpanato in #773
* Fri Apr 01 2022 meissnerAATTsuse.com- Updated to rekor 0.5.0
* Highlights - Add Rekor logo to README (#650) - update API calls to v5 (#591) - Refactor helm type to remove intermediate state. (#575) - Refactor the shard map parsing so we can pass it down into the API object. (#564) - Refactor the alpine type to reduce intermediate state. (#573)
* Enhancements - Add logic to GET artifacts via old or new UUID (#587) - helpful error message for hashedrekord types (#605) - Set Accept header in dynamic counter requests (#594) - Add sharding package and update validators (#583) - rekor-cli: show the url in case of error (#581) - Enable parsing of incomplete minisign keys, to enable re-indexing. (#567) - Cleanups on the TUF pluggable type. (#563) - Refactor the RPM type to remove more intermediate state. (#566) - Do some cleanups of the jar type to remove intermediate state. (#561)
* Others - update version comments since dependabot doesn\'t do it (#617) - Use workload identity provider instead of GitHub Secret for GCR access (#600) - add OSSF scorecard action (#599) - enable the sbom for rekor releases (#586) - Point to the official website (instead of a 404) (#580) - Add a Makefile target for the \"ko apply\" step. (#572) - types/README.md: Corrected documentation link (#568)
* Thu Feb 03 2022 meissnerAATTsuse.com- enable server build too, as people might want to deploy rekor chain themselves.
* Tue Jan 25 2022 bwiedemannAATTsuse.com- Fix BUILD_DATE for reproducible build results (boo#1047218)
* Thu Jan 06 2022 meissnerAATTsuse.com- updated to 0.4.0 Highlights - Adds hashed rekord type that can be used to upload signatures along with the hashed content signed (#501)
* Wed Dec 08 2021 mrueckertAATTsuse.de- prepare building of the serve part
* Fri Nov 26 2021 mrueckertAATTsuse.de- initial package