v0.5.0

What's Changed

• Bump google.golang.org/api from 0.77.0 to 0.78.0 by @dependabot in #556
• Bump github.com/googleapis/api-linter from 1.31.1 to 1.31.2 in /hack/tools by @dependabot in #557
• Add new Issuer and Principal abstractions by @nsmith5 in #558
• Add timeout to OIDC discovery by @nsmith5 in #560
• Refactor x509 extension embedding logic by @nsmith5 in #561
• Add client options testing by @nsmith5 in #562
• Bump google.golang.org/api from 0.78.0 to 0.79.0 by @dependabot in #566
• Bump github/codeql-action from 2.1.9 to 2.1.10 by @dependabot in #565
• update go to 1.17.10 by @cpanato in #567
• Remove unused Subject field from CodeSigningCertificate by @nsmith5 in #568
• Use GenerateSerialNumber from cryptoutils by @nsmith5 in #571
• Bump github.com/googleapis/api-linter from 1.31.2 to 1.32.0 in /hack/tools by @dependabot in #575
• Bump github.com/coreos/go-oidc/v3 from 3.1.0 to 3.2.0 by @dependabot in #574
• Update to use go1.18 by @cpanato in #576
• Small ca refactor by @nsmith5 in #569
• Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 by @dependabot in #573
• Bump github/codeql-action from 75b4f1c4669133dc294b06c2794e969efa2e5316 to 2.1.10 by @dependabot in #572
• googleca: Don't log all identities by @nsmith5 in #577
• Consume identity.Principal in CA abstraction by @nsmith5 in #570
• challenges: remove ParseCSR by @nsmith5 in #578
• identity: improve the documentation for Principal.Name() by @nsmith5 in #579
• Bump actions/dependency-review-action from 3f943b86c9a289f4e632c632695e2e0898d9d67d to 1 by @dependabot in #581
• Add some tests for challenges by @nsmith5 in #583
• Bump actions/setup-go from 3.0.0 to 3.1.0 by @dependabot in #582
• Bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 by @dependabot in #584
• Bump google.golang.org/grpc from 1.46.0 to 1.46.2 by @dependabot in #585
• Bump github.com/google/certificate-transparency-go from 1.1.2 to 1.1.3 by @dependabot in #586
• Skip tests that require network access with HERMETIC=true by @haydentherapper in #587
• Refactor challenge verification by @nsmith5 in #580
• Correct SPIFFE trust domain checking by @nsmith5 in #588
• Validate SPIFFE IDs and trust domains via library by @haydentherapper in #592
• Move domain validation checks for URI/Username to service startup by @haydentherapper in #590
• Bump google.golang.org/api from 0.79.0 to 0.80.0 by @dependabot in #595
• Bump go.step.sm/crypto from 0.16.1 to 0.16.2 by @dependabot in #594
• Bump github/codeql-action from 2.1.10 to 2.1.11 by @dependabot in #593
• Bump github.com/googleapis/api-linter from 1.32.0 to 1.32.1 in /hack/tools by @dependabot in #597
• cmd/app: remove dependency on deprecated github.com/pkg/errors by @zchee in #598
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.0 to 2.10.1 by @dependabot in #600
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.0 to 2.10.1 in /hack/tools by @dependabot in #601
• Added additional tests for CA implementations and OIDC by @haydentherapper in #602
• Bump actions/upload-artifact from 3.0.0 to 3.1.0 by @dependabot in #603
• Restict issuer claim mapping to email issuers by @nsmith5 in #606
• Add e2e test that tests IssuerClaim by @haydentherapper in #605
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.1 to 2.10.2 in /hack/tools by @dependabot in #611
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.1 to 2.10.2 by @dependabot in #610
• Bump actions/dependency-review-action from 1.0.1 to 1.0.2 by @dependabot in #609
• Bump google.golang.org/api from 0.80.0 to 0.81.0 by @dependabot in #614
• Bump cloud.google.com/go/security from 1.3.0 to 1.4.0 by @dependabot in #613
• Move github principal to its own package by @nsmith5 in #599
• Split pkg/server from pkg/api by @mtrmac in #616
• Bump ossf/scorecard-action from 1.0.4 to 1.1.0 by @dependabot in #618
• Update sigstore to pull in go-tuf security fixes by @haydentherapper in #617
• Move SPIFFE principal to its own package by @nsmith5 in #604
• Bump github.com/spf13/viper from 1.11.0 to 1.12.0 by @dependabot in #622
• Bump actions/setup-go from 3.1.0 to 3.2.0 by @dependabot in #621
• Move kubernetes principal to package by @nsmith5 in #619
• Bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 by @dependabot in #623
• Make prometheus port configurable by @nsmith5 in #625
• Move email principal to package by @nsmith5 in #620
• Bump google.golang.org/grpc from 1.46.2 to 1.47.0 by @dependabot in #627
• Final challenge result removal 🎉 by @nsmith5 in #626
• Add API for fetching Fulcio configuration by @haydentherapper in #608
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.2 to 2.10.3 in /hack/tools by @dependabot in #633
• Bump golang from 1.18.2 to 1.18.3 by @dependabot in #628
• Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.2 to 2.10.3 by @dependabot in #632
• Bump google.golang.org/api from 0.81.0 to 0.82.0 by @dependabot in #631
• typo: Github -> GitHub by @imjasonh in #636
• update cross-builder image to use go1.18.3 by @cpanato in #635
• Bump ossf/scorecard-action from 1.1.0 to 1.1.1 by @dependabot in #630
• Bump github/codeql-action from 2.1.11 to 2.1.12 by @dependabot in #629
• Doc cleanup by @haydentherapper in #640
• add changelog for release v0.5.0 by @cpanato in #637

New Contributors

• @zchee made their first contribution in #598
• @mtrmac made their first contribution in #616

Full Changelog: v0.4.1...v0.5.0

Thanks for all contributors!