Release v0.4.2

Changelog

• deb7c5a Add cosign v3 bundle format with Fulcio cert caching (#514)
• b81934d chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 (#519)
• 2d5c76d bump go and golangci-lint and goreleaser deprecations (#524)

Release v0.4.1

Changelog

• bedeae9 chore: bump step-security/harden-runner to v2.19.0 (#523)
• d6b772d chore(deps): bump step-security/google-github-auth from 3.0.1 to 3.0.2 (#518)
• 202a525 chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (#516)
• 7f76f1d chore(deps): bump github.com/go-openapi/swag/conv from 0.25.5 to 0.26.0 (#517)
• 4caf152 chore(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.5 to 2.0.6 (#511)
• 28abf31 Add cooldown period to dependabot (#522)
• 4f2b0c7 chore(deps): bump github.com/chainguard-dev/terraform-provider-oci from 0.1.0 to 0.1.3 (#521)

Release v0.4.0

Changelog

• 77c69b1 feat: add configurable timeout for signing and attestation operations (#515)
• 71cc0cc chore(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 (#512)

Release v0.3.4

Changelog

• 9358102 chore(harden-runner): use audit mode for now (#510)

v0.2.7

What's Changed

• Clean up resource code: diagnostics, dead code, and comments by @k4leung4 in #487
• Fix bugs in secant library: typos, stderr, hex error handling by @k4leung4 in #486
• Improve testing: import, CheckDestroy, schema validation by @k4leung4 in #488
• Upgrade policy-controller, timestamp-authority; drop cosign/v2 by @k4leung4 in #489
• Add file size limit for predicate file reads by @k4leung4 in #476
• Guard against panic on empty statements slice by @k4leung4 in #475

Full Changelog: v0.2.6...v0.2.7

v0.2.6

What's Changed

• Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #456
• Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.42.0 by @dependabot[bot] in #465
• Bump google.golang.org/grpc from 1.79.1 to 1.79.3 by @dependabot[bot] in #464
• Bump github.com/google/go-containerregistry from 0.21.1 to 0.21.3 by @dependabot[bot] in #467
• Bump the terraform group across 1 directory with 3 updates by @dependabot[bot] in #462
• Bump step-security/harden-runner from 2.15.0 to 2.16.0 by @dependabot[bot] in #463
• Bump github.com/go-openapi/swag/conv from 0.25.4 to 0.25.5 by @dependabot[bot] in #459
• Bump github.com/go-openapi/strfmt from 0.25.0 to 0.26.1 by @dependabot[bot] in #469
• Bump golang.org/x/time from 0.14.0 to 0.15.0 by @dependabot[bot] in #461
• Bump github.com/sigstore/rekor from 1.5.0 to 1.5.1 by @dependabot[bot] in #468
• Drop EOL Terraform versions from CI test matrix by @k4leung4 in #472
• Upgrade cosign from v2 to v3 by @k4leung4 in #471
• Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.6.2 by @dependabot[bot] in #482

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• Bump step-security/harden-runner from 2.14.2 to 2.15.0 by @dependabot[bot] in #451
• Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in #452
• Bump github.com/google/certificate-transparency-go from 1.3.2 to 1.3.3 by @dependabot[bot] in #455
• Improve logging when rekor returns an error by @kevinmdavis in #454
• Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #453

Full Changelog: v0.2.4...v0.2.5

v0.2.4

What's Changed

• updates on ci, add lint job and bump go by @cpanato in #444
• bump golangci-lint by @cpanato in #445
• Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #447
• Bump github.com/google/go-containerregistry from 0.20.7 to 0.21.1 by @dependabot[bot] in #446
• Bump hashicorp/setup-terraform from 3.1.2 to 4.0.0 by @dependabot[bot] in #448
• Bump github.com/hashicorp/terraform-plugin-go from 0.29.0 to 0.30.0 in the terraform group by @dependabot[bot] in #449
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.27 to 0.0.29 by @dependabot[bot] in #450

Full Changelog: v0.2.3...v0.2.4

v0.2.3

What's Changed

• ensure ctx is plumbed to sign/attest by @joshrwolf in #443
• Bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by @dependabot[bot] in #442
• Bump step-security/harden-runner from 2.14.1 to 2.14.2 by @dependabot[bot] in #441

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• Fix silencing warnings by @jdolitsky in #440

Full Changelog: v0.2.1...v0.2.2