Prepare for a v0.3.0 release (#213)

* Prepared for a v0.3.0 release Signed-off-by: Fredrik Skogman <[email protected]> * Added more details on updates signature scheme algorithms Signed-off-by: Fredrik Skogman <[email protected]> * Format enhancements Signed-off-by: Fredrik Skogman <[email protected]> * Correct heading for 0.3.0 Signed-off-by: Fredrik Skogman <[email protected]> * rebase on main Signed-off-by: Fredrik Skogman <[email protected]> * Use past tense language Signed-off-by: Fredrik Skogman <[email protected]> --------- Signed-off-by: Fredrik Skogman <[email protected]>
sigstore · Feb 8, 2024 · 34af7f5 · 34af7f5
1 parent a9d8b69
commit 34af7f5
Show file tree

Hide file tree

Showing 6 changed files with 23 additions and 9 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,20 +8,34 @@ All versions prior to 0.2.0 are untracked.
 
 ## [Unreleased]
 
-### Added
+## 0.3.0
 
 * Options for more generic observer time ([#179](https://github.com/sigstore/protobuf-specs/pull/179))
 * **BREAKING**: `VerificationMaterials.contents` now has an additional `certificate` variant,
   which is preferred in `0.3` bundles with the Sigstore PGI ([#191](https://github.com/sigstore/protobuf-specs/pull/191))
-* Added algorithm registry documentation and associated new `KnownSignatureAlgorithm` message
-  ([#194](https://github.com/sigstore/protobuf-specs/pull/194))
+* Added algorithm registry documentation and updated `PublicKeyDetails` message
+  ([#194](https://github.com/sigstore/protobuf-specs/pull/194), [#212](https://github.com/sigstore/protobuf-specs/pull/212))
+    * Deterministic ECDSA is **deprecated**
+    * NIST-P384 and NIST-P521 curves **added**
+    * Existing (and underspecified) RSA key types are
+      **deprecated**. New RSA keytypes are defined that specifies size
+      of public modulus and hash algorithm. RSA now only supports
+      [PKCS#1](https://datatracker.ietf.org/doc/html/rfc8017#section-8.2)
+      signature scheme, and PKIX
+      ([SubjectPublicKeyInfo](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1))
+      encoding.
+    * Experimental support for
+      [LMS](https://datatracker.ietf.org/doc/html/rfc8554) key types.
 
 ### Changed
 
 * Deprecated support for detached SCTs ([#188](https://github.com/sigstore/protobuf-specs/pull/188))
 
 ### Fixed
 
+* Docs: Clarified rotation of verification materials in the trust root
+  ([#210](https://github.com/sigstore/protobuf-specs/pull/210)
+
 ## 0.2.1
 
 ### Added

diff --git a/gen/pb-python/pyproject.toml b/gen/pb-python/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "flit_core.buildapi"
 
 [project]
 name = "sigstore-protobuf-specs"
-version = "0.3.0rc0"
+version = "0.3.0"
 description = "A library for serializing and deserializing Sigstore messages"
 readme = "README.md"
 license = { file = "LICENSE" }

diff --git a/gen/pb-ruby/lib/sigstore_protobuf_specs/version.rb b/gen/pb-ruby/lib/sigstore_protobuf_specs/version.rb
@@ -16,6 +16,6 @@
 
 module Dev
   module Sigstore
-    VERSION = '0.2.1'
+    VERSION = '0.3.0'
   end
-end
+end
diff --git a/gen/pb-rust/Cargo.lock b/gen/pb-rust/Cargo.lock
diff --git a/gen/pb-rust/Cargo.toml b/gen/pb-rust/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "sigstore_protobuf_specs"
-version = "0.1.0-rc.2"
+version = "0.3.0"
 exclude = ["codegen/"]
 authors = ["Sigstore Authors <[email protected]>"]
 edition = "2021"

diff --git a/gen/pb-typescript/package.json b/gen/pb-typescript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sigstore/protobuf-specs",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "code-signing for npm packages",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",