v2.3.0
Summary
Initial support was added to the verify-npm-package
command for the Node.js builder.
What's Changed
- docs: remove duplicated table of contents by @asraa in #557
- docs: Update docs for 2.2.0 release. by @ianlewis in #556
- fix: Slack badge by @ianlewis in #558
- chore(deps): update github-actions by @renovate-bot in #560
- chore(deps): update golang:1.19 docker digest to 9f2dd04 by @renovate-bot in #516
- chore(deps): update gcr.io/distroless/base:nonroot docker digest to 42311d8 by @renovate-bot in #504
- fix(deps): update github.com/sigstore/protobuf-specs digest to b6d2576 by @renovate-bot in #559
- feat: support for BYOB verification by @laurentsimon in #562
- fix: Read newer attestation file format by @ianlewis in #564
- chore(deps): update github/codeql-action action to v2.3.2 by @renovate-bot in #569
- fix(deps): update github.com/sigstore/protobuf-specs digest to 13e09aa by @renovate-bot in #578
- feat: npm: Make package name and version mandatory for verification by @laurentsimon in #576
- chore(deps): update npm dev by @renovate-bot in #568
- feat: Use low-perms delegator for Node.js builder by @ianlewis in #577
- docs(gh-action): update actions installer path by @sunnyyip in #581
- chore: update slsa provenance to v1 by @asraa in #579
- fix(deps): update github.com/sigstore/protobuf-specs digest to 91485b4 by @renovate-bot in #584
- chore(deps): update github/codeql-action action to v2.3.3 by @renovate-bot in #585
- feat: verify claims in provenance match the certificate by @laurentsimon in #572
- docs: Add docs for npm package verification by @ianlewis in #587
- chore(deps): update npm dev by @renovate-bot in #586
New Contributors
Full Changelog: v2.2.0...v2.3.0