v2.9.0
This release adds support for digital signature data objects in Dead Simple Signing Envelope (DSSE) format. This adds support for digital signatures that use non-PGP key material sources.
Specifically, the following APIs have been added:
- func OptSignWithSigner: use a signature.Signer as key material when calling NewSigner.
- func OptVerifyWithVerifier: use one or more signature.Verifier as key material when calling NewVerifier.
- func (VerifyResult) Keys: get the public key(s) used to verify a signature.
What's Changed
- Rename PGP test files by @tri-adam in #243
- DSSE support by @tri-adam in #228
- build(deps): bump github.com/sigstore/sigstore from 1.4.5 to 1.4.6 by @dependabot in #246
- Expose non-PGP digital signature support by @tri-adam in #245
- chore: bump node version by @tri-adam in #247
Full Changelog: v2.8.3...v2.9.0