v0.7.24

Changelog

• 819d566 Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.2 (#1611)

Thanks to all contributors!

What's Changed

• Revert "Fix dependabot" by @bobcallaway in #1576
• Bump actions/setup-go from 5.4.0 to 5.5.0 by @dependabot in #1581
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #1580
• Bump github.com/sigstore/sigstore-go from 0.7.2 to 0.7.3 by @dependabot in #1579
• Bump github.com/sigstore/timestamp-authority from 1.2.6 to 1.2.7 by @dependabot in #1578
• Bump github.com/sigstore/sigstore-go from 0.7.3 to 1.0.0 by @dependabot in #1587
• Bump k8s.io/client-go from 0.33.0 to 0.33.1 by @dependabot in #1582
• Bump github/codeql-action from 3.28.17 to 3.28.18 by @dependabot in #1588
• Bump go.step.sm/crypto from 0.63.0 to 0.64.0 by @dependabot in #1589
• setup-sigstore-env: Support signingconfig 0.2 by @jku in #1590
• Bump go.step.sm/crypto from 0.64.0 to 0.66.0 by @dependabot in #1591
• Bump golang.org/x/time from 0.11.0 to 0.12.0 by @dependabot in #1598
• Bump github/codeql-action from 3.28.18 to 3.28.19 by @dependabot in #1593
• Bump github.com/sigstore/timestamp-authority from 1.2.7 to 1.2.8 by @dependabot in #1595
• Bump golang.org/x/crypto from 0.38.0 to 0.39.0 by @dependabot in #1596
• Bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot in #1594
• Bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot in #1597
• Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 by @dependabot in #1599
• Bump github.com/go-sql-driver/mysql from 1.9.2 to 1.9.3 by @dependabot in #1600
• Bump cloud-sql-connectors/cloud-sql-proxy from 2.16.0-alpine to 2.17.1-alpine by @dependabot in #1604
• Bump github/codeql-action from 3.28.19 to 3.29.0 by @dependabot in #1603
• Bump github.com/google/certificate-transparency-go from 1.3.1 to 1.3.2 by @dependabot in #1602
• Bump github.com/sigstore/sigstore from 1.9.4 to 1.9.5 by @dependabot in #1601
• Use service URLs and server name in trusted root by @cmurphy in #1606
• Bump k8s.io/api from 0.33.1 to 0.33.2 by @dependabot in #1609
• Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in #1614
• Bump k8s.io/code-generator from 0.33.0 to 0.33.2 by @dependabot in #1613
• Bump github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8 by @dependabot in #1608
• Bump k8s.io/client-go from 0.33.1 to 0.33.2 by @dependabot in #1610
• Bump go.step.sm/crypto from 0.66.0 to 0.67.0 by @dependabot in #1607
• Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.2 by @dependabot in #1611

Full Changelog: v0.7.23...v0.7.24

v0.7.23

Thanks to all contributors!

What's Changed

• have prober test use staging TSA by @bobcallaway in #1540
• Remove Terraform modules from scaffolding by @haydentherapper in #1507
• Fix dependabot by @haydentherapper in #1542
• Bump github/codeql-action from 3.28.12 to 3.28.15 by @dependabot in #1545
• Bump ko-build/setup-ko from 0.8 to 0.9 by @dependabot in #1546
• Bump golang.org/x/net from 0.37.0 to 0.39.0 by @dependabot in #1547
• Bump go.step.sm/crypto from 0.59.1 to 0.60.0 by @dependabot in #1529
• Bump github.com/go-openapi/swag from 0.23.0 to 0.23.1 by @dependabot in #1510
• Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #1549
• Bump go.step.sm/crypto from 0.60.0 to 0.61.0 by @dependabot in #1552
• Bump cloud-sql-connectors/cloud-sql-proxy from 2.15.2-alpine@sha256:ab3068069deb05806c80d9fc7e6e542853283860cf7f1e4d6fa6ddeedfdc8600 to sha256:7487d086006d4b32e489fad6098343ec23a6c03c55874f0a3e4551d4fe5fb903 by @dependabot in #1553
• feat: action for test containers by @ramonpetgrave64 in #1544
• Bump golang.org/x/crypto from 0.32.0 to 0.35.0 in /actions/setup-sigstore-env/fakeoidc by @dependabot in #1556
• Bump github.com/google/trillian from 1.7.1 to 1.7.2 by @dependabot in #1561
• Bump github/codeql-action from 3.28.15 to 3.28.16 by @dependabot in #1558
• Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by @dependabot in #1557
• Bump github.com/sigstore/sigstore from 1.9.0 to 1.9.4 by @dependabot in #1563
• Bump trillian-opensource-ci/db_server from 94a0852 to ce3a107 in /config/trillian/mysql by @dependabot in #1541
• Bump k8s.io/client-go from 0.32.2 to 0.33.0 by @dependabot in #1559
• add support for testing on k8s 1.33 by @bobcallaway in #1567
• Bump k8s.io/code-generator from 0.32.2 to 0.33.0 by @dependabot in #1565
• bump cloud-sql-proxy to v2.16.0 by @bobcallaway in #1568
• Bump github/codeql-action from 3.28.16 to 3.28.17 by @dependabot in #1575
• Bump github.com/go-sql-driver/mysql from 1.9.1 to 1.9.2 by @dependabot in #1573
• Bump github.com/golang/glog from 1.2.4 to 1.2.5 by @dependabot in #1572
• Bump github.com/sigstore/timestamp-authority from 1.2.5 to 1.2.6 by @dependabot in #1569
• Bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.0 by @dependabot in #1571
• Bump go.step.sm/crypto from 0.61.0 to 0.63.0 by @dependabot in #1570
• Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 by @dependabot in #1574

New Contributors

• @ramonpetgrave64 made their first contribution in #1544

Full Changelog: v0.7.22...v0.7.23

v0.7.22

Thanks to all contributors!

What's Changed

• Bump trillian-opensource-ci/db_server from acc3517 to 882bbd9 in /config/trillian/mysql by @dependabot in #1496
• Bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 by @dependabot in #1497
• Bump go.step.sm/crypto from 0.59.1-0.20250303235342-5e0f3ecf9547 to 0.59.1 by @dependabot in #1498
• Bump golang.org/x/net from 0.35.0 to 0.37.0 by @dependabot in #1499
• Bump github.com/sigstore/sigstore from 1.8.15 to 1.9.0 by @dependabot in #1502
• Bump github.com/hashicorp/go-secure-stdlib/parseutil from 0.1.9 to 0.2.0 by @dependabot in #1503
• Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @dependabot in #1500
• Bump golang.org/x/time from 0.10.0 to 0.11.0 by @dependabot in #1504
• Bump github/codeql-action from 3.28.10 to 3.28.11 by @dependabot in #1505
• Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #1519
• Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in #1518
• Bump github/codeql-action from 3.28.11 to 3.28.12 by @dependabot in #1520
• Bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 by @dependabot in #1521
• Bump actions/setup-go from 5.3.0 to 5.4.0 by @dependabot in #1522
• Bump github.com/go-sql-driver/mysql from 1.9.0 to 1.9.1 by @dependabot in #1525
• Bump cloud-sql-connectors/cloud-sql-proxy from 2.15.1-alpine to 2.15.2-alpine by @dependabot in #1523
• Bump docker/login-action from 3.3.0 to 3.4.0 by @dependabot in #1516
• update cloud-sql-proxy automation to match on all versions by @bobcallaway in #1526
• Bump trillian-opensource-ci/db_server from 882bbd9 to 94a0852 in /config/trillian/mysql by @dependabot in #1524
• bump c-s-p to 2.15.2 in .ko.yaml by @bobcallaway in #1527
• Bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 by @dependabot in #1532
• Update linter to v2 by @haydentherapper in #1538
• add tsa support to in-cluster prober by @bobcallaway in #1539

Full Changelog: v0.7.21...v0.7.22

v0.7.21

Thanks to all contributors!

There were tags for v0.7.19 and v0.17.20 but due to CI issues those were not formally released.

Full Changelog: v0.7.18...v0.7.21

v0.7.18

Changelog

• ac5904b bound rekor endpoint list from growing indefinitely (#1400)

Thanks to all contributors!

v0.7.17

What's Changed

• Bump github.com/hashicorp/hcl from 1.0.1-vault-6 to 1.0.1-vault-7 by @dependabot in #1340
• Bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 by @dependabot in #1335
• Bump github.com/golang/glog from 1.2.2 to 1.2.3 by @dependabot in #1338
• Bump github/codeql-action from 3.27.0 to 3.27.1 by @dependabot in #1336
• Bump golang.org/x/net from 0.30.0 to 0.31.0 by @dependabot in #1337
• Bump google.golang.org/grpc from 1.67.1 to 1.68.0 by @dependabot in #1341
• Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #1344
• Bump golang.org/x/time from 0.7.0 to 0.8.0 by @dependabot in #1342
• Bump trillian-opensource-ci/db_server from 128cd27 to 41659cc in /config/trillian/mysql by @dependabot in #1347
• Bump github/codeql-action from 3.27.1 to 3.27.4 by @dependabot in #1348
• Bump go.step.sm/crypto from 0.54.0 to 0.54.2 by @dependabot in #1346
• Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by @dependabot in #1345
• read and discard prober response body by @bobcallaway in #1349

Full Changelog: v0.7.16...v0.7.17

v0.7.16

What's Changed

• Bump the terraform group across 27 directories with 2 updates by @dependabot in #1330
• bump github.com/hashicorp/hcl from 1.0.1-vault-5 to 1.0.1-vault-6 by @dependabot in #1332
• Bump trillian-opensource-ci/db_server from 97d822e to 128cd27 in /config/trillian/mysql by @dependabot in #1331
• change in-cluster prober to read across all shards (programatically) by @bobcallaway in #1333

Full Changelog: v0.7.15...v0.7.16

v0.7.15

What's Changed

• go mod tidy by @bobcallaway in #1329

Full Changelog: v0.7.14...v0.7.15

v0.7.14

FYI

The packaging step failed for this release, please use v0.7.15 instead.

What's Changed

• Bump github/codeql-action from 3.26.12 to 3.26.13 by @dependabot in #1313
• Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5 by @dependabot in #1315
• Bump trillian-opensource-ci/db_server from 52cef10 to 4569876 in /config/trillian/mysql by @dependabot in #1316
• Bump github.com/sigstore/sigstore from 1.8.9 to 1.8.10 by @dependabot in #1314
• update terraform to 1.9.8 by @bobcallaway in #1317
• Bump k8s.io/client-go from 0.31.1 to 0.31.2 by @dependabot in #1323
• Bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot in #1320
• bump csp to v2.14.0 by @bobcallaway in #1318
• Bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot in #1321
• Bump k8s.io/code-generator from 0.31.1 to 0.31.2 by @dependabot in #1324
• Bump actions/setup-go from 5.0.2 to 5.1.0 by @dependabot in #1319
• Bump trillian-opensource-ci/db_server from 4569876 to 97d822e in /config/trillian/mysql by @dependabot in #1327
• update certificate-transparency-go to v1.2.2 by @bobcallaway in #1328

Full Changelog: v0.7.13...v0.7.14

v0.7.13

What's Changed

• Replace deprecated x509 EncryptPEMBlock function by @priyawadhwa in #1310
• Run go mod tidy by @priyawadhwa in #1311

Full Changelog: v0.7.12...v0.7.13