@sigstore/[email protected]

Minor Changes

• 439343b: Use new OAuth identity provider for retrieving OIDC tokens in non-CI environments

Patch Changes

• 0d9acd4: adds OAuth identity provider in support of interactive authentication flows for the attest command
• a923d32: Bump @oclif/color from 1.0.5 to 1.0.6
• 2bd39a2: Bump @oclif/color from 1.0.4 to 1.0.5
• Updated dependencies [4fdf826]
• Updated dependencies [f72e2b2]
• Updated dependencies [5ea8b63]
• Updated dependencies [84fd931]
  • [email protected]

[email protected]

Patch Changes

• 2f89e43: Update Fulcio client to handle responses with detached SCTs

@sigstore/[email protected]

Patch Changes

• c6c0840: Export SearchLogQuery type

@sigstore/[email protected]

Patch Changes

• 45980a3: Fix support for --tlog-upload/--no-tlog-upload flag

@sigstore/[email protected]

Patch Changes

• 929d5d2: Fix to allow --tlog-upload flag to be negated with --no-tlog-upload
• Updated dependencies [2f89e43]
  • [email protected]

[email protected]

Patch Changes

• cab068e: Propagate retry/timeout options to the Timestamp Authority client

@sigstore/[email protected]

Patch Changes

• 6078e49: Initial release

@sigstore/[email protected]

Patch Changes

• e8d440e: Add missing @oclif/color dependency

@sigstore/[email protected]

Patch Changes

• 630f2fa: Initial release
• Updated dependencies [cab068e]
  • [email protected]

v1.5.0

Minor Changes

• f4c677e: Generated bundle excludes Fulcio root and intermediate certificates
• 5ca42a0: New tsaServerURL option for requesting a timestamp from a Timestamp Authority API
• 4e715c9: Exposes a new tuf.client function which returns a client for retrieving targets from the Sigstore TUF repository.
• 4b97516: New tlogUpload option for sign and attest to control signature uploads to the transparency log
• f927296: New retry and timeout options to control fetch behavior when errors occur

Patch Changes

• 2e5e733: Certificate chain verification enforces pathlen constraint for CA certs
• 3205ce9: Updates certificate verification to ignore all but the first certificate present in the bundle
• bb2006b: Updating embedded Sigstore TUF root to v7