v0.5.0
What's Changed
- Bump google.golang.org/api from 0.77.0 to 0.78.0 by @dependabot in #556
- Bump github.com/googleapis/api-linter from 1.31.1 to 1.31.2 in /hack/tools by @dependabot in #557
- Add new
Issuer
andPrincipal
abstractions by @nsmith5 in #558 - Add timeout to OIDC discovery by @nsmith5 in #560
- Refactor x509 extension embedding logic by @nsmith5 in #561
- Add client options testing by @nsmith5 in #562
- Bump google.golang.org/api from 0.78.0 to 0.79.0 by @dependabot in #566
- Bump github/codeql-action from 2.1.9 to 2.1.10 by @dependabot in #565
- update go to 1.17.10 by @cpanato in #567
- Remove unused
Subject
field fromCodeSigningCertificate
by @nsmith5 in #568 - Use GenerateSerialNumber from cryptoutils by @nsmith5 in #571
- Bump github.com/googleapis/api-linter from 1.31.2 to 1.32.0 in /hack/tools by @dependabot in #575
- Bump github.com/coreos/go-oidc/v3 from 3.1.0 to 3.2.0 by @dependabot in #574
- Update to use go1.18 by @cpanato in #576
- Small
ca
refactor by @nsmith5 in #569 - Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 by @dependabot in #573
- Bump github/codeql-action from 75b4f1c4669133dc294b06c2794e969efa2e5316 to 2.1.10 by @dependabot in #572
- googleca: Don't log all identities by @nsmith5 in #577
- Consume
identity.Principal
in CA abstraction by @nsmith5 in #570 - challenges: remove ParseCSR by @nsmith5 in #578
- identity: improve the documentation for Principal.Name() by @nsmith5 in #579
- Bump actions/dependency-review-action from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1 by @dependabot in #581
- Add some tests for challenges by @nsmith5 in #583
- Bump actions/setup-go from 3.0.0 to 3.1.0 by @dependabot in #582
- Bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 by @dependabot in #584
- Bump google.golang.org/grpc from 1.46.0 to 1.46.2 by @dependabot in #585
- Bump github.com/google/certificate-transparency-go from 1.1.2 to 1.1.3 by @dependabot in #586
- Skip tests that require network access with HERMETIC=true by @haydentherapper in #587
- Refactor challenge verification by @nsmith5 in #580
- Correct SPIFFE trust domain checking by @nsmith5 in #588
- Validate SPIFFE IDs and trust domains via library by @haydentherapper in #592
- Move domain validation checks for URI/Username to service startup by @haydentherapper in #590
- Bump google.golang.org/api from 0.79.0 to 0.80.0 by @dependabot in #595
- Bump go.step.sm/crypto from 0.16.1 to 0.16.2 by @dependabot in #594
- Bump github/codeql-action from 2.1.10 to 2.1.11 by @dependabot in #593
- Bump github.com/googleapis/api-linter from 1.32.0 to 1.32.1 in /hack/tools by @dependabot in #597
- cmd/app: remove dependency on deprecated github.com/pkg/errors by @zchee in #598
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.0 to 2.10.1 by @dependabot in #600
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.0 to 2.10.1 in /hack/tools by @dependabot in #601
- Added additional tests for CA implementations and OIDC by @haydentherapper in #602
- Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @dependabot in #603
- Restict issuer claim mapping to email issuers by @nsmith5 in #606
- Add e2e test that tests IssuerClaim by @haydentherapper in #605
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.1 to 2.10.2 in /hack/tools by @dependabot in #611
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.1 to 2.10.2 by @dependabot in #610
- Bump actions/dependency-review-action from 1.0.1 to 1.0.2 by @dependabot in #609
- Bump google.golang.org/api from 0.80.0 to 0.81.0 by @dependabot in #614
- Bump cloud.google.com/go/security from 1.3.0 to 1.4.0 by @dependabot in #613
- Move github principal to its own package by @nsmith5 in #599
- Split pkg/server from pkg/api by @mtrmac in #616
- Bump ossf/scorecard-action from 1.0.4 to 1.1.0 by @dependabot in #618
- Update sigstore to pull in go-tuf security fixes by @haydentherapper in #617
- Move SPIFFE principal to its own package by @nsmith5 in #604
- Bump github.com/spf13/viper from 1.11.0 to 1.12.0 by @dependabot in #622
- Bump actions/setup-go from 3.1.0 to 3.2.0 by @dependabot in #621
- Move kubernetes principal to package by @nsmith5 in #619
- Bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 by @dependabot in #623
- Make prometheus port configurable by @nsmith5 in #625
- Move email principal to package by @nsmith5 in #620
- Bump google.golang.org/grpc from 1.46.2 to 1.47.0 by @dependabot in #627
- Final challenge result removal 🎉 by @nsmith5 in #626
- Add API for fetching Fulcio configuration by @haydentherapper in #608
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.2 to 2.10.3 in /hack/tools by @dependabot in #633
- Bump golang from 1.18.2 to 1.18.3 by @dependabot in #628
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.2 to 2.10.3 by @dependabot in #632
- Bump google.golang.org/api from 0.81.0 to 0.82.0 by @dependabot in #631
- typo: Github -> GitHub by @imjasonh in #636
- update cross-builder image to use go1.18.3 by @cpanato in #635
- Bump ossf/scorecard-action from 1.1.0 to 1.1.1 by @dependabot in #630
- Bump github/codeql-action from 2.1.11 to 2.1.12 by @dependabot in #629
- Doc cleanup by @haydentherapper in #640
- add changelog for release v0.5.0 by @cpanato in #637
New Contributors
Full Changelog: v0.4.1...v0.5.0