v0.0.22

What's Changed

• --rm-dist is deprecated by @joshrwolf in #268

Full Changelog: v0.0.21...v0.0.22

v0.0.21

What's Changed

• Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #157
• Bump hashicorp/setup-terraform from 3.0.0 to 3.1.0 by @dependabot in #156
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #161
• Bump github.com/hashicorp/terraform-plugin-docs from 0.19.1 to 0.19.2 in the terraform group by @dependabot in #160
• Bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #159
• Bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 by @dependabot in #162
• Bump github.com/hashicorp/terraform-plugin-go from 0.22.2 to 0.23.0 in the terraform group by @dependabot in #163
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.12 to 0.0.13 by @dependabot in #164
• Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #165
• Bump hashicorp/setup-terraform from 3.1.0 to 3.1.1 by @dependabot in #166
• Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 by @dependabot in #168
• Bump google-github-actions/auth from 2.1.2 to 2.1.3 by @dependabot in #169
• Bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #170
• Bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in #172
• Bump google-github-actions/get-secretmanager-secrets from 2.1.1 to 2.1.2 by @dependabot in #173
• Bump github.com/google/certificate-transparency-go from 1.1.8 to 1.2.0 by @dependabot in #174
• Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 by @dependabot in #175
• Bump the terraform group across 1 directory with 3 updates by @dependabot in #176
• Bump github.com/google/certificate-transparency-go from 1.2.0 to 1.2.1 by @dependabot in #178
• Bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 by @dependabot in #182
• Bump the terraform group across 1 directory with 3 updates by @dependabot in #180
• Bump google-github-actions/get-secretmanager-secrets from 2.1.2 to 2.1.3 by @dependabot in #179
• Bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @dependabot in #181
• Bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #183
• Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #185
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.6.0 in the go_modules group by @dependabot in #184
• fix goreleaser for v2 by @imjasonh in #187
• Bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #186
• Bump step-security/harden-runner from 2.8.1 to 2.9.0 by @dependabot in #197
• Bump github.com/google/go-containerregistry from 0.19.2 to 0.20.1 by @dependabot in #196
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.13 to 0.0.14 by @dependabot in #191
• Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in the go_modules group by @dependabot in #193
• Bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #194
• Bump the terraform group with 3 updates by @dependabot in #198
• Bump github.com/sigstore/fulcio from 1.4.5 to 1.5.1 by @dependabot in #199
• Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 by @dependabot in #200
• Expose secant under a pkg/private by @mattmoor in #201
• Just use an io.Reader by @mattmoor in #202
• Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.0+incompatible in the go_modules group by @dependabot in #203
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.14 to 0.0.15 by @dependabot in #204
• Switch []string to []name.Digest by @mattmoor in #205
• Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 by @dependabot in #206
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.15 to 0.0.16 by @dependabot in #207
• Bump google-github-actions/setup-gcloud from 2.1.0 to 2.1.1 by @dependabot in #208
• Bump google-github-actions/auth from 2.1.3 to 2.1.4 by @dependabot in #209
• Bump step-security/harden-runner from 2.9.0 to 2.9.1 by @dependabot in #210
• Bump google-github-actions/get-secretmanager-secrets from 2.1.3 to 2.1.4 by @dependabot in #211
• Bump github.com/sigstore/cosign/v2 from 2.3.0 to 2.4.0 by @dependabot in #215
• Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #216
• Bump github.com/sigstore/fulcio from 1.5.1 to 1.6.0 by @dependabot in #213
• Bump github.com/hashicorp/terraform-plugin-framework from 1.10.0 to 1.11.0 in the terraform group by @dependabot in #212
• Bump github.com/hashicorp/terraform-plugin-testing from 1.9.0 to 1.10.0 in the terraform group by @dependabot in #217
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.16 to 0.0.17 by @dependabot in #219
• Bump github.com/sigstore/fulcio from 1.6.0 to 1.6.1 by @dependabot in #218
• Bump github.com/sigstore/fulcio from 1.6.1 to 1.6.3 by @dependabot in #223
• Bump hashicorp/setup-terraform from 3.1.1 to 3.1.2 by @dependabot in #221
• Bump google-github-actions/auth from 2.1.4 to 2.1.5 by @dependabot in #222
• Bump github.com/sigstore/sigstore from 1.8.8 to 1.8.9 by @dependabot in #224
• Bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 by @dependabot in #225
• Bump github.com/sigstore/fulcio from 1.6.3 to 1.6.4 by @dependabot in #226
• Bump actions/checkout from 4.1.7 to 4.2.1 by @dependabot in #233
• Bump github.com/sigstore/cosign/v2 from 2.4.0 to 2.4.1 by @dependabot in #232
• Bump google-github-actions/auth from 2.1.5 to 2.1.6 by @dependabot in #231
• Bump step-security/harden-runner from 2.9.1 to 2.10.1 by @dependabot in #227
• Bump the terraform group with 2 updates by @dependabot in #228
• Bump github.com/open-policy-agent/opa from 0.68.0 to 0.69.0 in the go_modules group across 1 directory by @dependabot in #234
• Bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #238
• Bump github.com/sigstore/sigstore from 1....

v0.0.20

What's Changed

• Bump the terraform group with 1 update by @dependabot in #136
• Bump github.com/docker/docker from 25.0.4+incompatible to 25.0.5+incompatible by @dependabot in #135
• Bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3 by @dependabot in #137
• Bump github.com/sigstore/rekor from 1.3.5 to 1.3.6 by @dependabot in #138
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.10 to 0.0.11 by @dependabot in #139
• Bump github.com/sigstore/fulcio from 1.4.4 to 1.4.5 by @dependabot in #141
• Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by @dependabot in #140
• Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @dependabot in #142
• Don't rely on the cache in release workflow by @mattmoor in #145
• Limit gh token permissions by @jedsalazar in #147
• Bump golang.org/x/net from 0.22.0 to 0.23.0 in the go_modules group by @dependabot in #152
• Bump the terraform group with 3 updates by @dependabot in #151
• Bump github.com/chainguard-dev/terraform-provider-oci from 0.0.11 to 0.0.12 by @dependabot in #150
• Bump google-github-actions/get-secretmanager-secrets from 2.1.0 to 2.1.1 by @dependabot in #149
• Bump github.com/sigstore/policy-controller from 0.8.5-0.20240311173756-4c6cc845da85 to 0.9.0 by @dependabot in #146
• Bump github.com/hashicorp/terraform-plugin-docs from 0.19.0 to 0.19.1 in the terraform group by @dependabot in #155
• Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #154
• Bump github.com/docker/docker from 26.0.1+incompatible to 26.0.2+incompatible in the go_modules group by @dependabot in #153
• Enable google, envvar cosign OIDC providers. by @wlynch in #158

New Contributors

• @jedsalazar made their first contribution in #147

Full Changelog: v0.0.19...v0.0.20

v0.0.19

What's Changed

• Revert "add data source for available keyless creds (#104)" by @jonjohnsonjr in #134

Full Changelog: v0.0.18...v0.0.19

v0.0.18

What's Changed

• Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #90
• Bump hashicorp/setup-terraform from 2.0.3 to 3.0.0 by @dependabot in #94
• Bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #99
• Bump github.com/sigstore/rekor from 1.2.2 to 1.3.4 by @dependabot in #97
• Drop workflow unnecessarily under pull_request_target. by @mattmoor in #101
• build from go version in go.mod by @imjasonh in #105
• add data source for available keyless creds by @imjasonh in #104
• Bump github.com/google/uuid from 1.4.0 to 1.6.0 by @dependabot in #109
• Switch to GPG keys from GSM by @mattmoor in #112
• Bump google-github-actions/get-secretmanager-secrets from 2.0.0 to 2.1.0 by @dependabot in #114
• Bump google-github-actions/setup-gcloud from 2.0.1 to 2.1.0 by @dependabot in #113
• Bump crazy-max/ghaction-import-gpg from 6.0.0 to 6.1.0 by @dependabot in #102
• Bump github.com/sigstore/sigstore from 1.7.5 to 1.8.2 by @dependabot in #116
• Bump google-github-actions/auth from 2.1.1 to 2.1.2 by @dependabot in #115
• group hashicorp dependabot updates by @k4leung4 in #121
• Bump github.com/go-openapi/strfmt from 0.21.7 to 0.23.0 by @dependabot in #123
• Bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 by @dependabot in #124
• bump terraform deps by @k4leung4 in #126
• Bump go.uber.org/ratelimit from 0.3.0 to 0.3.1 by @dependabot in #127
• cleanup: remove pinning of deps by @k4leung4 in #129
• Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #132
• Bump github.com/go-openapi/swag from 0.22.9 to 0.23.0 by @dependabot in #131
• Bump github.com/go-openapi/runtime from 0.27.1 to 0.28.0 by @dependabot in #130
• Bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #133

Full Changelog: v0.0.17...v0.0.18

v0.0.17

What's Changed

• Add k8s filesystem OIDC token provider. by @wlynch in #91
• Add conflict to cosign_sign by @jonjohnsonjr in #92

Full Changelog: v0.0.16...v0.0.17

v0.0.16

What's Changed

• Add ability to sign with cosign locally. by @wlynch in #88
• Do not re-attest things that have not changed by @jonjohnsonjr in #89

New Contributors

• @wlynch made their first contribution in #88

Full Changelog: v0.0.15...v0.0.16

v0.0.15

What's Changed

• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #78
• Bump goreleaser/goreleaser-action from 4.6.0 to 5.0.0 by @dependabot in #74
• Bump crazy-max/ghaction-import-gpg from 5.3.0 to 6.0.0 by @dependabot in #72
• Bump github.com/hashicorp/terraform-plugin-framework-validators from 0.10.0 to 0.12.0 by @dependabot in #68
• Bump github.com/sigstore/policy-controller from 0.8.1 to 0.8.2 by @dependabot in #65
• Fork cosign's replace op stuff by @jonjohnsonjr in #87

Full Changelog: v0.0.14...v0.0.15

v0.0.14

What's Changed

• Pass remote opts into ociremote.SignedUnknown by @jonjohnsonjr in #83
• Fix duplicate attestations by @jonjohnsonjr in #82

Full Changelog: v0.0.13...v0.0.14

v0.0.13

What's Changed

• bump ggcr to pull in latest by @k4leung4 in #77
• Pass a nop verifier to dupe detection by @jonjohnsonjr in #81

New Contributors

• @k4leung4 made their first contribution in #77

Full Changelog: v0.0.12...v0.0.13