v0.0.2

Fuzzing

• Fuzz test for compact.RangeNodes by @hickford in #32
• Fuzz tests for inclusion and consistency proofs by @hickford in #33
• Added generated seeds for FuzzRangeNodes by @mhutchinson in #35
• ClusterFuzzLite integration and GitHub Actions by @hickford in #37
• Fuzz ConsistencyProof function against reference implementation by @hickford in #36
• More clusterfuzz pinning by @AlCutter in #46

Repo config

• Add CODEOWNERS with default team assignment by @AlCutter in #27
• Added lint configuration and fixed error by @mhutchinson in #28
• Added presubmit script distilled from that in trillian by @mhutchinson in #29
• Added lint as action by @mhutchinson in #30
• Create scorecards.yml by @AlCutter in #41
• Tighten action permissions by @AlCutter in #43
• Add dependabot.yml by @AlCutter in #42
• Pin GitHub actions and associated tooling to git hashes by @AlCutter in #45
• Added cloud build config for merkle by @mhutchinson in #53
• Update and rename scorecards.yml to scorecard.yml by @AlCutter in #58

Docs

• docs: Use SVG format for images by @pavelkalinnikov in #26
• docs: Data model for append-only Merkle trees by @pavelkalinnikov in #25

Misc

• Format code according to go1.19rc2 by @mhutchinson in #38
• Introduce CHANGELOG.md ahead of v0.0.2 release by @phbnf in #57
• s/1.17/1.19 by @phbnf in #59

Dependency updates

• Update to go1.17 by @mhutchinson in #34
• Bump github.com/google/go-cmp from 0.5.6 to 0.5.9 by @dependabot in #44
• Updates: go version, and use dependabot by @mhutchinson in #47
• Bump github/codeql-action from 1.1.34 to 2.3.0 by @dependabot in #52
• Bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot in #51
• Bump golangci/golangci-lint-action from 3.3.0 to 3.4.0 by @dependabot in #50
• Bump codecov/codecov-action from 2.1.0 to 3.1.3 by @dependabot in #48
• Bump actions/checkout from 2.5.0 to 3.5.2 by @dependabot in #49
• Bump ossf/scorecard-action from 2.0.6 to 2.1.3 by @dependabot in #54
• Bump actions/setup-go from 3.3.1 to 4.0.0 by @dependabot in #56
• Bump github/codeql-action from 2.3.0 to 2.3.2 by @dependabot in #55

New Contributors

• @hickford made their first contribution in #32
• @dependabot made their first contribution in #44
• @phbnf made their first contribution in #57

Full Changelog: v0.0.1...v0.0.2

v0.0.1

The initial release of the merkle module.

It implements a few basic components:

• compact ranges can be used to implement most things on Merkle trees, including Merkle trees themselves, and proof techniques
• proof package implements proof techniques similar to the ones defined in RFC 6962
• testonly package has an example Merkle tree implementation stored in memory, which can be used to compare other more complex Merkle tree data structures and systems against.

The code is production-ready, and is used to run systems like Trillian and Certificate Transparency. N.B. API changes are likely to happen; the module is still v0 intentionally to allow further refactoring before the APIs converge to their stable v1 shape. The Go Module docs are explicit that v0 comes with no semver guarantees.