sigstore-java

sigstore-java copied to clipboard

Allow harshedrekord to use plain publickey (not certificate)

1

See: https://github.com/sigstore/sigstore-java/pull/23/files#r879740933

loosebazooka

https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_bundle.proto#L145

loosebazooka

https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_bundle.proto#L108 https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_common.proto#L141

loosebazooka

[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | sigstore/community | action | digest | `86192d7` -> `8acdf58` | ---...

renovate[bot]

A release checklist template for maintainers

loosebazooka

Release 0.11.0

1

This is the first release that also releases sigstore-maven-plugin. And hopefully is our last release before 1.0.0 - [x] tag 0.11.0 (https://github.com/sigstore/sigstore-java/releases/tag/v0.11.0) - [x] build and release to maven central:...

loosebazooka

ref: https://github.com/apache/maven-gpg-plugin/pull/109 After: Jan 1, 2025

loosebazooka

add another grpc dep to grpc group

loosebazooka

[](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [gradle](https://gradle.org) ([source](https://togithub.com/gradle/gradle)) | minor | `8.7` -> `8.9` | --- ### Release Notes...

renovate[bot]

Avoid rebuilding sigstore/protobuf-specs every time

1

Currently, sigstore-java rebuilds `sigstore/protobuf-specs` every time which seems wasteful, and it makes imports like `import dev.sigstore.proto.` invalid on the first project import. We should use `implementation("dev.sigstore:protobuf-specs:0.3.2")` rather than `protobuf("dev.sigstore:protobuf-specs:0.3.2")` https://github.com/sigstore/protobuf-specs/issues/341...

vlsi