v1.1.2

Vote PASSED [+4 -0]: #456

Fix

• When HOME and XDG_CONFIG_HOME are not set, default to the current directory.
• signingAgent is updated to be "notation-go/1.1.2"

Other changes

• Upgraded to Golang v1.22
• Updated dependencies in #448

What's Changed

• fix&bump: maintenance update for branch release-1.1 by @JeyJeyGao in #448
• fix: dir no longer panics when HOME and XDG_CONFIG_HOME are not set (#449) by @JeyJeyGao in #450
• bump: release v1.1.2 by @JeyJeyGao in #453

Full Changelog: v1.1.1...v1.1.2

v1.2.1

Vote PASSED [+4 -0]: #452

Fix

• When HOME and XDG_CONFIG_HOME are not set, default to the current directory.

What's Changed

• bump: release v1.2.0 by @Two-Hearts in #445
• Cherry-picked from #449, fix: dir no longer panics when HOME and XDG_CONFIG_HOME are not set by @Two-Hearts in #451

New Contributor

• @JasonTheDeveloper made their first contribution in #449.

Full Changelog: v1.2.0...v1.2.1

v1.2.0

Vote PASSED [+4 -0]: #445

What's Changed

• bump: bump up for v1.2.0 release by @Two-Hearts in #442

Full Changelog: v1.2.0-rc.1...v1.2.0

v1.2.0-rc.1

Vote PASSED [+4 -0]: #439

What's Changed

• fix: improve error message for plugin by @JeyJeyGao in #406
• feat: support distinguished name state(S) by @JeyJeyGao in #432
• refactor!: update revocation based on notation-core-go by @Two-Hearts in #429
• refactor!: remove blob sign/verify related code by @Two-Hearts in #437

Full Changelog: v1.2.0-beta.1...v1.2.0-rc.1

v1.2.0-beta.1

Vote PASSED [+4 -0]: #427

What's Changed

• fix: update error message by @JeyJeyGao in #380
• bump: bump up oras-go and image-spec by @Two-Hearts in #381
• chore: start using plugin-framework package by @priteshbandi in #372
• build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #383
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in #385
• build(deps): bump golang.org/x/mod from 0.14.0 to 0.15.0 by @dependabot in #384
• chore: updated/added deprecation message by @priteshbandi in #382
• build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in #387
• feat: add support for signing blob by @priteshbandi in #379
• chore: add GitHub action for stale issues and PRs by @yizha1 in #365
• build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 by @dependabot in #389
• build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 by @dependabot in #388
• fix: Add contract version to plugin sign request and plugin verify request by @priteshbandi in #390
• bump: bump golang and dependency versions by @Two-Hearts in #392
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #391
• Moved org maintainers to emeritus by @toddysm in #393
• build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 by @dependabot in #397
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 by @dependabot in #395
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 by @dependabot in #399
• build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in #396
• build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #403
• test: improve test coverage to 80% by @JeyJeyGao in #405
• fix: error message for dangling reference index by @JeyJeyGao in #402
• bump: bump up notation-core-go v1.0.3 by @JeyJeyGao in #407
• ci: enable ci for release branch by @JeyJeyGao in #409
• build(deps): bump golang.org/x/mod from 0.17.0 to 0.18.0 by @dependabot in #413
• build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 by @dependabot in #414
• feat: Implements VerifyBlob functionality by @priteshbandi in #394
• fix(ci): pass CODECOV_TOKEN to reusable-build.yml by @JeyJeyGao in #419
• build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 by @dependabot in #421
• build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #420
• feat: Timestamp by @Two-Hearts in #418
• chore: fix logs by @Two-Hearts in #417
• fix: fix usage of SignerInfo.AuthenticSigningTime by @Two-Hearts in #424
• bump: bump up notation-core-go by @Two-Hearts in #426

Full Changelog: v1.1.0...v1.2.0-beta.1

v1.1.1

Vote PASSED [+4 -0]: #412

What's Changed

• fix: update error message by @JeyJeyGao in #380
• bump: bump up oras-go and image-spec by @Two-Hearts in #381
• chore: start using plugin-framework package by @priteshbandi in #372
• build(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in #383
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in #385
• build(deps): bump golang.org/x/mod from 0.14.0 to 0.15.0 by @dependabot in #384
• chore: updated/added deprecation message by @priteshbandi in #382
• build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in #387
• feat: add support for signing blob by @priteshbandi in #379
• chore: add GitHub action for stale issues and PRs by @yizha1 in #365
• build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 by @dependabot in #389
• build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 by @dependabot in #388
• fix: Add contract version to plugin sign request and plugin verify request by @priteshbandi in #390
• bump: bump golang and dependency versions by @Two-Hearts in #392
• build(deps): bump actions/stale from 8 to 9 by @dependabot in #391
• Moved org maintainers to emeritus by @toddysm in #393
• build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 by @dependabot in #397
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 by @dependabot in #395
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 by @dependabot in #399
• build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in #396
• build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in #403
• test: improve test coverage to 80% by @JeyJeyGao in #405
• fix: error message for dangling reference index by @JeyJeyGao in #402
• bump: bump up notation-core-go v1.0.3 by @JeyJeyGao in #407
• ci: enable ci for release branch by @JeyJeyGao in #409
• revert: "feat: add support for signing blob (#379)" by @JeyJeyGao in #411

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Vote PASSED [+4 -0]: #378

What's Changed

• build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 by @dependabot in #361
• build(deps): bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @dependabot in #362
• feat: add uninstall to CLIManager by @Two-Hearts in #363
• docs: update README to align with the new project brand by @FeynmanZhou in #343
• build(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0 by @dependabot in #366
• feat: add install method to plugin CLIManager by @Two-Hearts in #364
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #367
• feat: plugin install iteration 2 by @Two-Hearts in #369
• Updated CODEOWNERS and MAINTAINERS files by @toddysm in #370
• build(deps): bump golang.org/x/crypto from 0.17.0 to 0.18.0 by @dependabot in #373
• fix: improve plugin error message by @JeyJeyGao in #371
• fix: update PluginExecutableFileError type by @JeyJeyGao in #375
• bump: bump up notation-core-go by @Two-Hearts in #377

New Contributors

• @FeynmanZhou made their first contribution in #343

Full Changelog: v1.0.1...v1.1.0

v1.0.1

Vote PASSED [+4 -0]: #360

What's Changed

• build(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 by @dependabot in #344
• chore: update go version to 1.20 by @Two-Hearts in #349
• build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 by @dependabot in #350
• bump: update oras-go to v2.3.0 by @JeyJeyGao in #347
• build(deps): bump golang.org/x/mod from 0.12.0 to 0.13.0 by @dependabot in #356
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.5 to 3.4.6 by @dependabot in #351
• build(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc4 to 1.1.0-rc5 by @dependabot in #352
• build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 by @dependabot in #355
• build(deps): bump oras.land/oras-go/v2 from 2.3.0 to 2.3.1 by @dependabot in #359
• build(deps): bump github.com/notaryproject/notation-core-go from 1.0.0 to 1.0.1 by @dependabot in #358
• fix: update error message from notation-go by @Two-Hearts in #345

Full Changelog: v1.0.0...v1.0.1

v1.0.0

Vote PASSED [+5 -0]: #341

What's Changed

• chore: add issue template by @yizha1 in #293
• build(deps): bump golang.org/x/mod from 0.10.0 to 0.11.0 by @dependabot in #325
• build(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 by @dependabot in #324
• build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.4 to 3.4.5 by @dependabot in #321
• fix: fixed error messages of trust policy by @Two-Hearts in #326
• fix: update timeout for OCSP call to 2 seconds by @priteshbandi in #327
• fix: quick fix typo in error msg by @Two-Hearts in #328
• build(deps): bump oras.land/oras-go/v2 from 2.2.0 to 2.2.1 by @dependabot in #332
• build(deps): bump golang.org/x/mod from 0.11.0 to 0.12.0 by @dependabot in #333
• build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 by @dependabot in #331
• chore: add license header to files and github action workflow to check license by @Two-Hearts in #334
• fix: quick fix to use correct sign/verify plugin by @Two-Hearts in #338
• errors: add error for wild card scope validation by @sajayantony in #340
• bump: upgrade notation-core-go to v1.0.0 by @shizhMSFT in #342

New Contributors

• @sajayantony made their first contribution in #340

Full Changelog: v1.0.0-rc.6...v1.0.0

v1.0.0-rc.6

What's Changed

• chore: running some chores for notation-go by @Two-Hearts in #311
• build(deps): bump github.com/veraison/go-cose from 1.0.0 to 1.1.0 by @dependabot in #312
• chore: update account info for Patrick Zheng by @yizha1 in #310
• fix: added digest check on verify by @Two-Hearts in #313
• fix: updated error message of errExceededMaxVerificationLimit by @Two-Hearts in #314
• fix: add digest check for Sign by @byronchien in #317
• update: bump up dependencies by @Two-Hearts in #318
• feat: add validations for symlink by @priteshbandi in #316

Full Changelog: v1.0.0-rc.5...v1.0.0-rc.6