Skip to content

v2.3.0

Latest

Choose a tag to compare

@github-actions github-actions released this 10 Jun 21:54
v2.3.0
fa390b1

What's Changed

v2.3.0 drops support for the DSSE entry type. All Sigstore SDKs will now upload DSSEs as hashedrekord entries, to support uploading large DSSEs, such as signed SBOMs, for the public instance. We strongly recommend not relying on the previous DSSE type in any way, as going forward, there will only be one supported entry type.

Breaking Changes

  • Drop DSSE support in #744

Library Features

  • Add ToEntryHash and VerifyLogEntryWithHash in #787

Fixes

  • don't return full panic in user-facing error message in #707
  • ensure error can be Unwrapped in #710
  • defensive fix if err is wrapped in #708
  • Limit client response reads, set default timeouts, and validate digest sizes in #806

Full Changelog: v2.2.1...v2.3.0