@sigstore/[email protected]

Patch Changes

• 43cf328: Bump dependencies:

  • @peculiar/x509 from 1.9.6 to 1.9.7
  • jose from 5.2.0 to 5.2.1

• 8237a21: Bump dependencies:

  • nock from 13.5.0 to 13.5.1
  • @peculiar/webcrypto from 1.4.3 to 1.4.5

• b2e6bed: Bump nock from 13.4.0 to 13.5.0

@sigstore/[email protected]

Major Changes

• 7d90262: Promote to 1.0.0

[email protected]

Minor Changes

• 4089730: Add tufForceCache flag to VerifyOptions type

Patch Changes

• af76b1d: Integrate @sigstore/verify package
• 34c3856: Integrate @sigstore/core package
• Updated dependencies [ca658dc]
• Updated dependencies [bf1d432]
• Updated dependencies [6cdf7ef]
• Updated dependencies [6869511]
• Updated dependencies [6a6bfbc]
• Updated dependencies [57bec90]
• Updated dependencies [08b7957]
• Updated dependencies [34c3856]
• Updated dependencies [f603e11]
• Updated dependencies [29a25e5]
• Updated dependencies [afb08f6]
• Updated dependencies [45903bc]
• Updated dependencies [4471a4d]
• Updated dependencies [6f9c662]
• Updated dependencies [922a1be]
• Updated dependencies [34c3856]
• Updated dependencies [e5f1875]
• Updated dependencies [da83e69]
  • @sigstore/[email protected]
  • @sigstore/[email protected]
  • @sigstore/[email protected]
  • @sigstore/[email protected]
  • @sigstore/[email protected]

@sigstore/[email protected]

Minor Changes

• bf1d432: Export VerificationPolicy type
• 08b7957: Enable verification of RFC3161 timestamps
• afb08f6: Add support for verifying identity of certificate issuer
• 6f9c662: Extract verification code into dedicated package

Patch Changes

• 29a25e5: Read RFC3161 timestamps during verification
• 45903bc: Expose public signature property on SignatureContent interface
• e5f1875: Fix logic to extract issuer from Fulcio certificate
• Updated dependencies [6cdf7ef]
• Updated dependencies [6869511]
• Updated dependencies [6a6bfbc]
• Updated dependencies [57bec90]
• Updated dependencies [34c3856]
• Updated dependencies [922a1be]
  • @sigstore/[email protected]
  • @sigstore/[email protected]

@sigstore/[email protected]

Minor Changes

• f603e11: Expose forceCache option for TUF client
• 4471a4d: Add support for caching metadata from multiple TUF repositories

Patch Changes

• ca658dc: Update TUF seed files
• da83e69: Move TUF seeds into JSON file

@sigstore/[email protected]

Patch Changes

• 34c3856: Integrate @sigstore/core package
• Updated dependencies [6cdf7ef]
• Updated dependencies [6869511]
• Updated dependencies [6a6bfbc]
• Updated dependencies [57bec90]
• Updated dependencies [34c3856]
• Updated dependencies [922a1be]
  • @sigstore/[email protected]
  • @sigstore/[email protected]

@sigstore/[email protected]

Patch Changes

• 123389f: Introduce intermediate certificate for issuing RFC3161 timestamps
• 8cbcd04: Bump @peculiar/x509 from 1.9.5 to 1.9.6
• 2dd55a0: Remove extra level of OCTET STRING nesting in mocked RFC3161 timestamp response
• 9318c9c: Bump jose from 5.1.3 to 5.2.0
• 123389f: Fix encoding for TSA-issued timestamps

@sigstore/[email protected]

Minor Changes

• 6869511: Add support for parsing RFC3161 signed timestamps
• 34c3856: add encoding and dsse utility modules

Patch Changes

• 6cdf7ef: Bug fix for parsing ASN.1 date/time values which include milliseconds
• 6a6bfbc: Add more checks to the RFC3161Timestamp.verify method
• 922a1be: Ensure the isCA value for the X509BasicConstraintsExtension defaults to false if no other value is present

@sigstore/[email protected]

Minor Changes

• c949aa7: Add most verify options to sigstore verify subcommand
• 4089730: Add tuf-force-cache flag to verify command
• 4089730: Add cache-path flag to initialize command

Patch Changes

• bfa5eeb: Bump openid-client from 5.6.2 to 5.6.4
• 9318c9c: Bump openid-client from 5.6.1 to 5.6.2
• Updated dependencies [4089730]
• Updated dependencies [af76b1d]
• Updated dependencies [34c3856]
  • [email protected]

@sigstore/[email protected]

Patch Changes

• 57bec90: Update bundleFromJSON to perform full bundle validation