v0.0.14

What's Changed

• Remove conformance tests that use detached materials by @steiza in #173
• Get ready for 0.0.14 release by @steiza in #174

Full Changelog: v0.0.13...v0.0.14

v0.0.13

What's Changed

• Add more hashedrekord tlog matching testcases by @loosebazooka in #168
• Add a bundle test for a dsse envelope containing an in-toto statement by @segiddins in #159
• test: don't assume GITHUB_WORKSPACE by @woodruffw in #169
• add skip-cpython-release-tests by @woodruffw in #170
• README: prep 0.0.13 by @woodruffw in #171

Full Changelog: v0.0.12...v0.0.13

v0.0.12

What's Changed

• Don't require a GitHub token by @jku in #134
• Add a .gitignore based on sigstore-python by @segiddins in #137
• Add a test for verifying v0.3 bundles by @segiddins in #138
• Add failure cases for checkpoints by @loosebazooka in #139
• Capture stdout & stderr separately by @segiddins in #135
• dev-requirements: enforce sigstore ~= 2.0 by @woodruffw in #136
• Use .sigstore.json as bundle extension by @loosebazooka in #142
• Isolate staging/production self tests from eachother by @loosebazooka in #143
• Fix lint issues by @jku in #147
• build(deps): bump requests from 2.31.0 to 2.32.0 by @dependabot in #146
• dev-requirements: switch to sigstore-python 3.x by @woodruffw in #152
• Cache ID token only as long as it is valid by @segiddins in #154
• Support verifying digests in addition to artifacts by @facutuesca in #158
• Conformance tests for CPython release signatures by @woodruffw in #156
• Remove --verify-digest flag by @loosebazooka in #162
• action: bump cpython-release-tracker ref by @woodruffw in #160
• cli_protocol: clarify FILE_OR_DIGEST by @woodruffw in #163
• Bump cpython artifacts by @woodruffw in #164
• Test fail on mismatched hashrekord by @loosebazooka in #166
• README: prep 0.0.12 by @woodruffw in #167

New Contributors

• @segiddins made their first contribution in #137
• @loosebazooka made their first contribution in #139
• @facutuesca made their first contribution in #158

Full Changelog: v0.0.11...v0.0.12

v0.0.11

The action now supports testing against Sigstore staging infrastructure: if your Sigstore client can be used with staging, please enable this by adding a second step to your workflow: see README

What's Changed

• feat:checking that the client is allowed to run against staging by @javanlacerda in #124
• Improve dev experience by @jku in #125
• sigstore-python-conformance: Handle --staging by @jku in #126
• Add staging to selftest by @jku in #127
• Tweak staging invocation by @jku in #131
• requirements: bump sigstore-protobuf-specs by @woodruffw in #132
• update d.txt bundles w/ cert containing legacy ext by @bdehamer in #129
• README: prep 0.0.11 by @woodruffw in #133

New Contributors

• @javanlacerda made their first contribution in #124

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• Add v0.2 bundle tests by @bdehamer in #112
• Supply the correct artifact for the new bundle tests by @steiza in #114
• Simplify DSSE bundle tests by @bdehamer in #115
• add RFC3161 timestamp tests by @bdehamer in #116
• fix encoding of RFC3161 timestamps by @bdehamer in #118
• README: prep 0.0.10 by @woodruffw in #120

New Contributors

• @bdehamer made their first contribution in #112

Full Changelog: v0.0.9...v0.0.10

v0.0.9

What's Changed

• Add opt-in support for tests that include providing a custom trust root by @steiza in #101
• README: prep 0.0.9 by @woodruffw in #111

Full Changelog: v0.0.8...v0.0.9

v0.0.8

What's Changed

• Improve unexpected success handling by @jku in #108
• assets: bump invalid_inclusion_proof to 0.2 bundle by @woodruffw in #109
• README: prep 0.0.8 by @woodruffw in #110

Full Changelog: v0.0.7...v0.0.8

v0.0.7

What's Changed

• action, conftest: initial xfail support by @woodruffw in #95
• Add bundle tests to increase coverage of tlog entries by @steiza in #98
• Make it easier to run verification test locally by @steiza in #100
• Allow multiple artifacts to exist by @jku in #102
• README: prep 0.0.7 by @woodruffw in #106

New Contributors

• @jku made their first contribution in #102

Full Changelog: v0.0.6...v0.0.7

v0.0.6

What's Changed

• action: invoke pytest through python by @woodruffw in #89
• Change bundle verification test to not depend on signing by @steiza in #82
• cli: move oidc token into pytest by @jleightcap in #91
• Fix typo to reference skip-signing input; mark additional test as using signing by @steiza in #93
• README: prep 0.0.6 by @woodruffw in #92

New Contributors

• @jleightcap made their first contribution in #91

Full Changelog: v0.0.5...v0.0.6

v0.0.5

What's Changed

• README: Remove deprecated guidance about using ambient credentials by @tetsuo-cpp in #77
• Basic bundle tests by @tnytown in #69
• conftest: Add --identity-token option back by @tetsuo-cpp in #80
• build(deps): bump requests from 2.28.2 to 2.31.0 by @dependabot in #79
• test, tools: init bundle cert chain tests by @tnytown in #78
• Add several bundle tests by @steiza in #84
• sigstore-python-conformance: Update wrapper by @tetsuo-cpp in #85
• README: prep 0.0.5 by @tetsuo-cpp in #86

New Contributors

• @steiza made their first contribution in #84

Full Changelog: v0.0.4...v0.0.5