v2.1.0

This is an un-finalized release.

See the CHANGELOG for details.

What's Changed

• chore: v2.0.0: update tags to v2.0.0 by @ramonpetgrave64 in #3584
• fix: use @sigstore/cli in e2e.sign-attestations.schedule.yml by @ramonpetgrave64 in #3572
• docs: fix broken links by @suzuki-shunsuke in #3605
• chore(setup-go): update actions/setup-go to resolve the warning by @suzuki-shunsuke in #3604
• fix: Update release docs by @ramonpetgrave64 in #3589
• docs: Add Atsign-Foundation NoPorts to the Hall of Fame by @cpswan in #3616
• docs: Add v2.0.0 to SECURITY.md by @ianlewis in #3630
• docs: Add links to CHANGELOG by @ianlewis in #3631
• ci: fix PR title checker by @ianlewis in #3632
• ci: Add issue reopener by @ianlewis in #3629
• fix: update softprops/action-gh-release to v2.0.5 by @suzuki-shunsuke in #3619
• chore(renovate): use cron syntax for schedule by @rarkins in #3638
• chore: Fix Renovate config by @ianlewis in #3635
• feat: workflow to update actions dist by @ramonpetgrave64 in #3653
• fix(deps): update dependency @sigstore/rekor-types to v2 by @renovate-bot in #3650
• chore(deps): update github-actions (major) by @renovate-bot in #3648
• fix(deps): update dependency org.json:json to v20231013 [security] by @renovate-bot in #3641
• fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] by @renovate-bot in #3640
• chore(deps): update dependency pathspec to v0.12.1 by @renovate-bot in #3644
• fix(deps): update dependency @actions/github to v6 by @renovate-bot in #3649
• fix(deps): update module golang.org/x/oauth2 to v0.20.0 by @renovate-bot in #3646
• fix(deps): update npm by @renovate-bot in #3647
• chore: formatting by @ianlewis in #3655
• chore(deps): update github-actions by @renovate-bot in #3642
• docs: Add openfga as another user of slsa-github-generator via Github Actions by @aaguiarz in #2950
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 by @renovate-bot in #3645
• chore: allow Renovate to create new config warning issues by @HonkingGoose in #3662
• chore: Fix markdown issues by @ianlewis in #3658
• chore(deps): update npm dev by @renovate-bot in #3643
• feat: Record vars in SLSA generators by @ianlewis in #3633
• chore(deps): update github-actions by @renovate-bot in #3679
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.7 by @renovate-bot in #3680
• docs: Remove expected GA for Node.js builder by @ianlewis in #3659
• ci: Add formatting pre-submit check by @ianlewis in #3654
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.8 by @renovate-bot in #3712
• chore(deps): bump the npm_and_yarn group across 10 directories with 2 updates by @dependabot in #3714
• chore(deps): update github-actions by @renovate-bot in #3711
• chore(deps): bump the go_modules group with 2 updates by @dependabot in #3715
• chore: slsa-verifier v2.6.0: Update action.yml by @ramonpetgrave64 in #3736
• fix: Update maven helper plugin build by @loosebazooka in #3746
• fix: maven e2e: remove verify job by @ramonpetgrave64 in #3748
• chore(deps): update github-actions by @renovate-bot in #3753
• chore(deps): bump github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible in the go_modules group by @dependabot in #3760
• chore(config): migrate renovate config by @renovate-bot in #3774
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.10.1 by @renovate-bot in #3758
• chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.3 by @renovate-bot in #3820
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.5 by @renovate-bot in #3757
• fix(deps): update npm by @renovate-bot in #3754
• chore: go1.23.1 golangci lint 1.6.1 by @ramonpetgrave64 in #3940
• feat: produce sigstore Bundles for generic generator and go builder workflows by @ramonpetgrave64 in #3777
• revert: "feat: produce sigstore Bundles for generic generator and go builder workflows" by @ramonpetgrave64 in #3985
• fix(deps): update go by @renovate-bot in #3930
• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.15.1 by @renovate-bot in #3929
• chore(deps): update dependency yamllint to v1.35.1 by @renovate-bot in #3838
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.9 by @renovate-bot in #4013
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.9 by @renovate-bot in #4012
• chore(deps): update github-actions by @renovate-bot in #3991
• chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.15.1 by @renovate-bot in #3821
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group by @dependabot in #3996
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in #4022
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.7 by @renovate-bot in #3992
• fix: revert softprops/action-gh-release to v2.1.0 by @ramonpetgrave64 in #4036
• chore(deps): update dependency org.sonatype.plugins:nexus-staging-maven-plugin to v1.7.0 by @renovate-bot in #4040
• chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.0 by @renovate-bot in #4039
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.2 by @renovate-bot in #4038
• fix: update pre-submit to ubuntu24 by @ramonpetgrave64 in #4080
• chore(deps): update github-actions by @renovate-bot in #4041
• fix: use node 22 by @ramonpetgrave64 in #4081
• chore(deps): bump golang.org/x/net from 0.28.0 to 0.33.0 in the go_modules group by @dependabot in #4082
• chore(deps): bump the npm_and_yarn group across 1 directory with 1...

v2.1.0-rc.3

This is an un-finalized pre-release.

See the CHANGELOG for details.

What's Changed

• chore: v2.0.0: update tags to v2.0.0 by @ramonpetgrave64 in #3584
• fix: use @sigstore/cli in e2e.sign-attestations.schedule.yml by @ramonpetgrave64 in #3572
• docs: fix broken links by @suzuki-shunsuke in #3605
• chore(setup-go): update actions/setup-go to resolve the warning by @suzuki-shunsuke in #3604
• fix: Update release docs by @ramonpetgrave64 in #3589
• docs: Add Atsign-Foundation NoPorts to the Hall of Fame by @cpswan in #3616
• docs: Add v2.0.0 to SECURITY.md by @ianlewis in #3630
• docs: Add links to CHANGELOG by @ianlewis in #3631
• ci: fix PR title checker by @ianlewis in #3632
• ci: Add issue reopener by @ianlewis in #3629
• fix: update softprops/action-gh-release to v2.0.5 by @suzuki-shunsuke in #3619
• chore(renovate): use cron syntax for schedule by @rarkins in #3638
• chore: Fix Renovate config by @ianlewis in #3635
• feat: workflow to update actions dist by @ramonpetgrave64 in #3653
• fix(deps): update dependency @sigstore/rekor-types to v2 by @renovate-bot in #3650
• chore(deps): update github-actions (major) by @renovate-bot in #3648
• fix(deps): update dependency org.json:json to v20231013 [security] by @renovate-bot in #3641
• fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] by @renovate-bot in #3640
• chore(deps): update dependency pathspec to v0.12.1 by @renovate-bot in #3644
• fix(deps): update dependency @actions/github to v6 by @renovate-bot in #3649
• fix(deps): update module golang.org/x/oauth2 to v0.20.0 by @renovate-bot in #3646
• fix(deps): update npm by @renovate-bot in #3647
• chore: formatting by @ianlewis in #3655
• chore(deps): update github-actions by @renovate-bot in #3642
• docs: Add openfga as another user of slsa-github-generator via Github Actions by @aaguiarz in #2950
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 by @renovate-bot in #3645
• chore: allow Renovate to create new config warning issues by @HonkingGoose in #3662
• chore: Fix markdown issues by @ianlewis in #3658
• chore(deps): update npm dev by @renovate-bot in #3643
• feat: Record vars in SLSA generators by @ianlewis in #3633
• chore(deps): update github-actions by @renovate-bot in #3679
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.7 by @renovate-bot in #3680
• docs: Remove expected GA for Node.js builder by @ianlewis in #3659
• ci: Add formatting pre-submit check by @ianlewis in #3654
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.8 by @renovate-bot in #3712
• chore(deps): bump the npm_and_yarn group across 10 directories with 2 updates by @dependabot in #3714
• chore(deps): update github-actions by @renovate-bot in #3711
• chore(deps): bump the go_modules group with 2 updates by @dependabot in #3715
• chore: slsa-verifier v2.6.0: Update action.yml by @ramonpetgrave64 in #3736
• fix: Update maven helper plugin build by @loosebazooka in #3746
• fix: maven e2e: remove verify job by @ramonpetgrave64 in #3748
• chore(deps): update github-actions by @renovate-bot in #3753
• chore(deps): bump github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible in the go_modules group by @dependabot in #3760
• chore(config): migrate renovate config by @renovate-bot in #3774
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.10.1 by @renovate-bot in #3758
• chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.3 by @renovate-bot in #3820
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.5 by @renovate-bot in #3757
• fix(deps): update npm by @renovate-bot in #3754
• chore: go1.23.1 golangci lint 1.6.1 by @ramonpetgrave64 in #3940
• feat: produce sigstore Bundles for generic generator and go builder workflows by @ramonpetgrave64 in #3777
• revert: "feat: produce sigstore Bundles for generic generator and go builder workflows" by @ramonpetgrave64 in #3985
• fix(deps): update go by @renovate-bot in #3930
• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.15.1 by @renovate-bot in #3929
• chore(deps): update dependency yamllint to v1.35.1 by @renovate-bot in #3838
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.9 by @renovate-bot in #4013
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.9 by @renovate-bot in #4012
• chore(deps): update github-actions by @renovate-bot in #3991
• chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.15.1 by @renovate-bot in #3821
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group by @dependabot in #3996
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in #4022
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.7 by @renovate-bot in #3992
• fix: revert softprops/action-gh-release to v2.1.0 by @ramonpetgrave64 in #4036
• chore(deps): update dependency org.sonatype.plugins:nexus-staging-maven-plugin to v1.7.0 by @renovate-bot in #4040
• chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.0 by @renovate-bot in #4039
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.2 by @renovate-bot in #4038
• fix: update pre-submit to ubuntu24 by @ramonpetgrave64 in #4080
• chore(deps): update github-actions by @renovate-bot in #4041
• fix: use node 22 by @ramonpetgrave64 in #4081
• chore(deps): bump golang.org/x/net from 0.28.0 to 0.33.0 in the go_modules group by @dependabot in #4082
• chore(deps): bump the npm_and_yarn group across 1 directory wi...

v2.1.0-rc.1

This is an un-finalized pre-release.

See the CHANGELOG for details.

What's Changed

• chore: v2.0.0: update tags to v2.0.0 by @ramonpetgrave64 in #3584
• fix: use @sigstore/cli in e2e.sign-attestations.schedule.yml by @ramonpetgrave64 in #3572
• docs: fix broken links by @suzuki-shunsuke in #3605
• chore(setup-go): update actions/setup-go to resolve the warning by @suzuki-shunsuke in #3604
• fix: Update release docs by @ramonpetgrave64 in #3589
• docs: Add Atsign-Foundation NoPorts to the Hall of Fame by @cpswan in #3616
• docs: Add v2.0.0 to SECURITY.md by @ianlewis in #3630
• docs: Add links to CHANGELOG by @ianlewis in #3631
• ci: fix PR title checker by @ianlewis in #3632
• ci: Add issue reopener by @ianlewis in #3629
• fix: update softprops/action-gh-release to v2.0.5 by @suzuki-shunsuke in #3619
• chore(renovate): use cron syntax for schedule by @rarkins in #3638
• chore: Fix Renovate config by @ianlewis in #3635
• feat: workflow to update actions dist by @ramonpetgrave64 in #3653
• fix(deps): update dependency @sigstore/rekor-types to v2 by @renovate-bot in #3650
• chore(deps): update github-actions (major) by @renovate-bot in #3648
• fix(deps): update dependency org.json:json to v20231013 [security] by @renovate-bot in #3641
• fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] by @renovate-bot in #3640
• chore(deps): update dependency pathspec to v0.12.1 by @renovate-bot in #3644
• fix(deps): update dependency @actions/github to v6 by @renovate-bot in #3649
• fix(deps): update module golang.org/x/oauth2 to v0.20.0 by @renovate-bot in #3646
• fix(deps): update npm by @renovate-bot in #3647
• chore: formatting by @ianlewis in #3655
• chore(deps): update github-actions by @renovate-bot in #3642
• docs: Add openfga as another user of slsa-github-generator via Github Actions by @aaguiarz in #2950
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 by @renovate-bot in #3645
• chore: allow Renovate to create new config warning issues by @HonkingGoose in #3662
• chore: Fix markdown issues by @ianlewis in #3658
• chore(deps): update npm dev by @renovate-bot in #3643
• feat: Record vars in SLSA generators by @ianlewis in #3633
• chore(deps): update github-actions by @renovate-bot in #3679
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.7 by @renovate-bot in #3680
• docs: Remove expected GA for Node.js builder by @ianlewis in #3659
• ci: Add formatting pre-submit check by @ianlewis in #3654
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.8 by @renovate-bot in #3712
• chore(deps): bump the npm_and_yarn group across 10 directories with 2 updates by @dependabot in #3714
• chore(deps): update github-actions by @renovate-bot in #3711
• chore(deps): bump the go_modules group with 2 updates by @dependabot in #3715
• chore: slsa-verifier v2.6.0: Update action.yml by @ramonpetgrave64 in #3736
• fix: Update maven helper plugin build by @loosebazooka in #3746
• fix: maven e2e: remove verify job by @ramonpetgrave64 in #3748
• chore(deps): update github-actions by @renovate-bot in #3753
• chore(deps): bump github.com/docker/docker from 24.0.9+incompatible to 25.0.6+incompatible in the go_modules group by @dependabot in #3760
• chore(config): migrate renovate config by @renovate-bot in #3774
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.10.1 by @renovate-bot in #3758
• chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.1.3 by @renovate-bot in #3820
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.5 by @renovate-bot in #3757
• fix(deps): update npm by @renovate-bot in #3754
• chore: go1.23.1 golangci lint 1.6.1 by @ramonpetgrave64 in #3940
• feat: produce sigstore Bundles for generic generator and go builder workflows by @ramonpetgrave64 in #3777
• revert: "feat: produce sigstore Bundles for generic generator and go builder workflows" by @ramonpetgrave64 in #3985
• fix(deps): update go by @renovate-bot in #3930
• fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.15.1 by @renovate-bot in #3929
• chore(deps): update dependency yamllint to v1.35.1 by @renovate-bot in #3838
• fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.9 by @renovate-bot in #4013
• fix(deps): update dependency org.apache.maven:maven-core to v3.9.9 by @renovate-bot in #4012
• chore(deps): update github-actions by @renovate-bot in #3991
• chore(deps): update dependency org.apache.maven.plugins:maven-plugin-plugin to v3.15.1 by @renovate-bot in #3821
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group by @dependabot in #3996
• chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group by @dependabot in #4022
• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.7 by @renovate-bot in #3992
• fix: revert softprops/action-gh-release to v2.1.0 by @ramonpetgrave64 in #4036
• chore(deps): update dependency org.sonatype.plugins:nexus-staging-maven-plugin to v1.7.0 by @renovate-bot in #4040
• chore(deps): update dependency org.apache.maven.plugins:maven-shade-plugin to v3.6.0 by @renovate-bot in #4039
• chore(deps): update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.2 by @renovate-bot in #4038
• fix: update pre-submit to ubuntu24 by @ramonpetgrave64 in #4080
• chore(deps): update github-actions by @renovate-bot in #4041
• fix: use node 22 by @ramonpetgrave64 in #4081
• chore(deps): bump golang.org/x/net from 0.28.0 to 0.33.0 in the go_modules group by @dependabot in #4082
• chore(deps): bump the npm_and_yarn group across 1 directory wi...

v2.0.0

See the CHANGELOG for details.

v2.0.0-rc.0

See the CHANGELOG for details.

v1.10.0

See the CHANGELOG for details.

v1.9.1-rc.0

See the CHANGELOG for details.

v1.9.1

This is an un-finalized release.

See the CHANGELOG for details.

v1.9.0

See the CHANGELOG for details.

v1.9.0-rc.0

This is an un-finalized pre-release.

See the CHANGELOG for details.