From 34af7f5aed41dd57ee4c378d43cb209867205b1d Mon Sep 17 00:00:00 2001 From: Fredrik Skogman Date: Thu, 8 Feb 2024 15:02:31 +0100 Subject: [PATCH] Prepare for a v0.3.0 release (#213) * Prepared for a v0.3.0 release Signed-off-by: Fredrik Skogman * Added more details on updates signature scheme algorithms Signed-off-by: Fredrik Skogman * Format enhancements Signed-off-by: Fredrik Skogman * Correct heading for 0.3.0 Signed-off-by: Fredrik Skogman * rebase on main Signed-off-by: Fredrik Skogman * Use past tense language Signed-off-by: Fredrik Skogman --------- Signed-off-by: Fredrik Skogman --- CHANGELOG.md | 20 ++++++++++++++++--- gen/pb-python/pyproject.toml | 2 +- .../lib/sigstore_protobuf_specs/version.rb | 4 ++-- gen/pb-rust/Cargo.lock | 2 +- gen/pb-rust/Cargo.toml | 2 +- gen/pb-typescript/package.json | 2 +- 6 files changed, 23 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index d41b6be3..5e675fa2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,13 +8,24 @@ All versions prior to 0.2.0 are untracked. ## [Unreleased] -### Added +## 0.3.0 * Options for more generic observer time ([#179](https://github.com/sigstore/protobuf-specs/pull/179)) * **BREAKING**: `VerificationMaterials.contents` now has an additional `certificate` variant, which is preferred in `0.3` bundles with the Sigstore PGI ([#191](https://github.com/sigstore/protobuf-specs/pull/191)) -* Added algorithm registry documentation and associated new `KnownSignatureAlgorithm` message - ([#194](https://github.com/sigstore/protobuf-specs/pull/194)) +* Added algorithm registry documentation and updated `PublicKeyDetails` message + ([#194](https://github.com/sigstore/protobuf-specs/pull/194), [#212](https://github.com/sigstore/protobuf-specs/pull/212)) + * Deterministic ECDSA is **deprecated** + * NIST-P384 and NIST-P521 curves **added** + * Existing (and underspecified) RSA key types are + **deprecated**. New RSA keytypes are defined that specifies size + of public modulus and hash algorithm. RSA now only supports + [PKCS#1](https://datatracker.ietf.org/doc/html/rfc8017#section-8.2) + signature scheme, and PKIX + ([SubjectPublicKeyInfo](https://datatracker.ietf.org/doc/html/rfc5280#section-4.1)) + encoding. + * Experimental support for + [LMS](https://datatracker.ietf.org/doc/html/rfc8554) key types. ### Changed @@ -22,6 +33,9 @@ All versions prior to 0.2.0 are untracked. ### Fixed +* Docs: Clarified rotation of verification materials in the trust root + ([#210](https://github.com/sigstore/protobuf-specs/pull/210) + ## 0.2.1 ### Added diff --git a/gen/pb-python/pyproject.toml b/gen/pb-python/pyproject.toml index cac2d7bb..8fc30896 100644 --- a/gen/pb-python/pyproject.toml +++ b/gen/pb-python/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "flit_core.buildapi" [project] name = "sigstore-protobuf-specs" -version = "0.3.0rc0" +version = "0.3.0" description = "A library for serializing and deserializing Sigstore messages" readme = "README.md" license = { file = "LICENSE" } diff --git a/gen/pb-ruby/lib/sigstore_protobuf_specs/version.rb b/gen/pb-ruby/lib/sigstore_protobuf_specs/version.rb index ec12cb30..2363c315 100644 --- a/gen/pb-ruby/lib/sigstore_protobuf_specs/version.rb +++ b/gen/pb-ruby/lib/sigstore_protobuf_specs/version.rb @@ -16,6 +16,6 @@ module Dev module Sigstore - VERSION = '0.2.1' + VERSION = '0.3.0' end -end \ No newline at end of file +end diff --git a/gen/pb-rust/Cargo.lock b/gen/pb-rust/Cargo.lock index bd34b916..1fb9b72d 100644 --- a/gen/pb-rust/Cargo.lock +++ b/gen/pb-rust/Cargo.lock @@ -201,7 +201,7 @@ dependencies = [ [[package]] name = "sigstore_protobuf_specs" -version = "0.1.0-rc.2" +version = "0.3.0" dependencies = [ "pretty_assertions", "schemafy", diff --git a/gen/pb-rust/Cargo.toml b/gen/pb-rust/Cargo.toml index b65ca5d2..8a169e00 100644 --- a/gen/pb-rust/Cargo.toml +++ b/gen/pb-rust/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "sigstore_protobuf_specs" -version = "0.1.0-rc.2" +version = "0.3.0" exclude = ["codegen/"] authors = ["Sigstore Authors "] edition = "2021" diff --git a/gen/pb-typescript/package.json b/gen/pb-typescript/package.json index 450abb15..047a67a7 100644 --- a/gen/pb-typescript/package.json +++ b/gen/pb-typescript/package.json @@ -1,6 +1,6 @@ { "name": "@sigstore/protobuf-specs", - "version": "0.2.1", + "version": "0.3.0", "description": "code-signing for npm packages", "main": "dist/index.js", "types": "dist/index.d.ts",