@sigstore/sign@2.2.1

Patch Changes

• 34c3856: Integrate @sigstore/core package
• Updated dependencies [6cdf7ef]
• Updated dependencies [6869511]
• Updated dependencies [6a6bfbc]
• Updated dependencies [57bec90]
• Updated dependencies [34c3856]
• Updated dependencies [922a1be]
  • @sigstore/core@0.2.0
  • @sigstore/bundle@2.1.1

@sigstore/mock@0.6.3

Patch Changes

• 123389f: Introduce intermediate certificate for issuing RFC3161 timestamps
• 8cbcd04: Bump @peculiar/x509 from 1.9.5 to 1.9.6
• 2dd55a0: Remove extra level of OCTET STRING nesting in mocked RFC3161 timestamp response
• 9318c9c: Bump jose from 5.1.3 to 5.2.0
• 123389f: Fix encoding for TSA-issued timestamps

@sigstore/core@0.2.0

Minor Changes

• 6869511: Add support for parsing RFC3161 signed timestamps
• 34c3856: add encoding and dsse utility modules

Patch Changes

• 6cdf7ef: Bug fix for parsing ASN.1 date/time values which include milliseconds
• 6a6bfbc: Add more checks to the RFC3161Timestamp.verify method
• 922a1be: Ensure the isCA value for the X509BasicConstraintsExtension defaults to false if no other value is present

@sigstore/cli@0.6.0

Minor Changes

• c949aa7: Add most verify options to sigstore verify subcommand
• 4089730: Add tuf-force-cache flag to verify command
• 4089730: Add cache-path flag to initialize command

Patch Changes

• bfa5eeb: Bump openid-client from 5.6.2 to 5.6.4
• 9318c9c: Bump openid-client from 5.6.1 to 5.6.2
• Updated dependencies [4089730]
• Updated dependencies [af76b1d]
• Updated dependencies [34c3856]
  • sigstore@2.2.0

@sigstore/bundle@2.1.1

Patch Changes

• 57bec90: Update bundleFromJSON to perform full bundle validation

@sigstore/mock@0.6.2

Patch Changes

• 84bc758: Bump jose from 5.1.0 to 5.1.1

• 5957b94: Bump jose from 5.0.1 to 5.0.2

• 532612c: Bump jose from 5.0.2 to 5.1.0

• b7c386e: Bump dependencies:

  • nock from 13.3.4 to 13.3.6

• fe1530d: Bump dependencies:

  • jose from 5.1.1 to 5.1.2
  • nock from 13.3.8 to 13.4.0

• 82d3150: Bump jose from 4.15.4 to 5.0.1

• b1c3f06: Bump nock from 13.3.6 to 13.3.8

• f68e429: Bump jose from 5.1.2 to 5.1.3

@sigstore/core@0.1.0

Minor Changes

• 5fbbe86: Extract common code into core package

@sigstore/sign@2.2.0

Minor Changes

• c0a43d5: Expose entryType option on RekorWitness constructor

@sigstore/mock@0.6.1

Patch Changes

• 69fdfdd: Bump dependencies:

  • nock from 13.3.3 to 13.3.4
  • jose from 4.15.2 to 4.15.4

@sigstore/cli@0.5.0

Minor Changes

• 4cd344d: Drop support for node 16

Patch Changes

• 69fdfdd: Bump dependencies:

  • openid-client from 5.6.0 to 5.6.1

• 97516ef: Bump @oclif/plugin-help from 5.2.20 to 6.0.3

• cb81e53: Bump dependencies:

  • @oclif/color from 1.0.12 to 1.0.13