v2.16.0

This release drops support for Go 1.20.

What's Changed

• build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in #355
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #356
• chore: bump module Go version to 1.21 by @tri-adam in #351

Full Changelog: v2.15.2...v2.16.0

v2.15.2

What's Changed

• ci: start testing against Go 1.22-rc by @tri-adam in #340
• build(deps): bump github.com/sigstore/sigstore from 1.7.6 to 1.8.0 by @dependabot in #342
• build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in #343
• build(deps): bump github.com/sigstore/sigstore from 1.8.0 to 1.8.1 by @dependabot in #344
• build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #348
• build(deps): bump github.com/google/go-containerregistry from 0.17.0 to 0.19.0 by @dependabot in #349
• build(deps): bump github.com/ProtonMail/go-crypto from 0.0.0-20230923063757-afb1ddc0824c to 1.0.0 by @dependabot in #345
• ci: bump golangci-lint to v1.56 by @tri-adam in #350
• fix: remove unused params in function literals by @tri-adam in #352
• ci: test against Go 1.22 by @tri-adam in #353
• build(deps): bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 by @dependabot in #354

Full Changelog: v2.15.1...v2.15.2

v2.15.1

What's Changed

• build(deps): bump golang.org/x/net from 0.14.0 to 0.17.0 by @dependabot in #329
• build(deps): bump github.com/sigstore/sigstore from 1.7.3 to 1.7.4 by @dependabot in #330
• build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 by @dependabot in #331
• build(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in #332
• build(deps): bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 by @dependabot in #333
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #334
• build(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #335
• build(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 by @dependabot in #336
• build(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #337
• build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0 by @dependabot in #338
• build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.7.0 to 0.8.0 by @dependabot in #339
• build(deps): bump github.com/ProtonMail/go-crypto by @tri-adam in #341

Full Changelog: v2.15.0...v2.15.1

v2.15.0

What's Changed

• feat: deprecate user package by @tri-adam in #325

Full Changelog: v2.14.1...v2.15.0

v2.14.1

What's Changed

• docs: fix typo in SetMetadata by @tri-adam in #326
• fix: delete object by @wobito in #327
• refactor: simplify zero implementation by @tri-adam in #328

Full Changelog: v2.14.0...v2.14.1

v2.14.0

This release adds support for setting metadata within a SIF.

Specifically, the following API has been added:

• func (*FileImage) SetMetadata: sets the metadata of the data object with id to md, according to opts.

What's Changed

• build(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 by @dependabot in #322
• feat: add setMetadata by @wobito in #324

Full Changelog: v2.13.0...v2.14.0

v2.13.0

What's Changed

• chore: bump module Go version to 1.20 by @tri-adam in #317
• build(deps): bump github.com/ProtonMail/go-crypto by @tri-adam in #318
• ci: bump golangci-lint to v1.54 by @tri-adam in #319
• chore: remove unnecessary nolint:errorlint lines by @tri-adam in #321
• build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 by @dependabot in #320

Full Changelog: v2.12.0...v2.13.0

v2.12.0

This release adds support for accessing OCI artifacts encapsulated within a SIF.

Specifically, the following APIs have been added:

• func (Descriptor) OCIBlobDigest: returns the digest for a OCI blob.
• func WithOCIBlobDigest: selects descriptor(s) that contain a OCI blob with the specified digest.

What's Changed

• OCI data types by @wobito in #301
• build(deps): bump github.com/sigstore/sigstore from 1.6.5 to 1.7.0 by @dependabot in #305
• refactor: OCI blob digest by @tri-adam in #306
• test: add testing against Go 1.21 RC by @tri-adam in #307
• build(deps): bump github.com/sigstore/sigstore from 1.7.0 to 1.7.1 by @dependabot in #308
• test: sign/verify round trip for high level tests by @tri-adam in #310
• deps: bump github.com/ProtonMail/go-crypto by @tri-adam in #311
• build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.6.0 to 0.7.0 by @dependabot in #312
• fix: ensure hash function is available by @tri-adam in #314
• build(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 by @dependabot in #315
• build(deps): bump github.com/sigstore/sigstore from 1.7.1 to 1.7.2 by @dependabot in #316

Full Changelog: v2.11.5...v2.12.0

v2.11.5

What's Changed

• build(deps): bump github.com/sigstore/sigstore from 1.6.4 to 1.6.5 by @dependabot in #297
• ci: bump golangci-lint to v1.53 by @tri-adam in #298
• test: report file/line info for makeTestSIF errors by @tri-adam in #299
• ci: disable codecov status by @tri-adam in #302
• deps: bump github.com/ProtonMail/go-crypto by @tri-adam in #303
• ci: bump node version by @tri-adam in #304

Full Changelog: v2.11.4...v2.11.5

v2.11.4

What's Changed

• build(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.5.0 to 0.6.0 by @dependabot in #290
• build(deps): bump github.com/sigstore/sigstore from 1.6.3 to 1.6.4 by @dependabot in #292
• fix: correct error message by @tri-adam in #291
• deps: disable Dependabot on v1 branch by @tri-adam in #294
• build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in #295
• ci: disable GitHub checks for CodeCov by @tri-adam in #296

Full Changelog: v2.11.3...v2.11.4