Changelog

• 7c83add add changelog for v1.4.1 release (#2597)
• 978d430 build(deps): Bump google.golang.org/api from 0.246.0 to 0.248.0 (#2595)
• 692a2aa build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#2596)
• 04cf79c build(deps): Bump the all group with 2 updates (#2593)
• f6e19d8 build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
• d34ab93 build(deps): Bump go.step.sm/crypto from 0.69.0 to 0.70.0
• ee8f373 build(deps): Bump google.golang.org/protobuf in the all group
• 1fcc0a6 build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.0
• 8038b35 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 7b8da09 build(deps): Bump actions/checkout from 4.3.0 to 5.0.0
• ec92ffe build(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1
• 96937bf build(deps): Bump github.com/go-viper/mapstructure/v2
• 907cc31 build(deps): Bump github.com/go-viper/mapstructure/v2 in /hack/tools
• cdd9572 use less expensive gRPC call to implement GetLeafAndProofByHash (#2581)
• 97e8521 move to per-shard trillian client manager (#2564)
• 9ea5d3a use cheaper gRPC endpoint when we already have the inclusion proof (#2580)
• a776825 simplify hash and signature verification in rekord type (#2579)
• b73bee3 build(deps): Bump google.golang.org/api from 0.245.0 to 0.246.0
• c0e965a build(deps): Bump go.step.sm/crypto from 0.68.0 to 0.69.0 (#2577)
• f97155a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2572)
• 9d72099 build(deps): Bump golang.org/x/mod from 0.26.0 to 0.27.0 (#2571)
• ce64373 build(deps): Bump golang from 1.24.5 to 1.24.6 in the all group (#2568)
• 1defac6 build(deps): Bump the all group with 3 updates (#2567)
• 3764030 build(deps): Bump the all group with 2 updates (#2565)
• d2372a3 use correct type; just look for len() instead of nil check (#2576)
• 1720e3e return correct error if GetLeafAndProofByHash fails (#2574)
• 4b655cc build(deps): Bump golang.org/x/net from 0.42.0 to 0.43.0
• 2cbf2d6 add go mod updates
• 21758e0 move to v2 api
• c36cdfd build(deps): Bump cloud.google.com/go/pubsub from 1.49.0 to 1.50.0
• bdb43b8 build(deps): Bump google.golang.org/api from 0.242.0 to 0.244.0 (#2561)
• 9cf5f66 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2556)
• 0b80f3f sec(deps): update go-chi/chi to v5
• 62d4ab4 build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2
• 9b894c1 build(deps): Bump sigs.k8s.io/yaml from 1.4.0 to 1.6.0
• e131eab build(deps): Bump github.com/prometheus/client_golang
• edb7c4f build(deps): Bump github.com/redis/go-redis/v9 from 9.10.0 to 9.11.0
• ac17a05 build(deps): Bump the all group with 2 updates
• 437244a build(deps): Bump the all group with 2 updates
• 88f9fb9 build(deps): Bump golang from 14fd8a5 to ef5b4be
• ed92cb6 build(deps): Bump go.step.sm/crypto from 0.67.0 to 0.68.0
• 58962be fix incorrect client lb policy in test config (#2551)

Thanks for all contributors!

What's Changed

• fix incorrect client lb policy in test config by @bobcallaway in #2551
• build(deps): Bump go.step.sm/crypto from 0.67.0 to 0.68.0 by @dependabot[bot] in #2559
• build(deps): Bump golang from 14fd8a5 to ef5b4be by @dependabot[bot] in #2555
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2553
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2552
• build(deps): Bump github.com/redis/go-redis/v9 from 9.10.0 to 9.11.0 by @dependabot[bot] in #2558
• build(deps): Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in #2557
• build(deps): Bump sigs.k8s.io/yaml from 1.4.0 to 1.6.0 by @dependabot[bot] in #2562
• build(deps): Bump google.golang.org/grpc from 1.73.0 to 1.74.2 by @dependabot[bot] in #2560
• sec(deps): update go-chi/chi to v5 by @caarlos0 in #2563
• build(deps): Bump google.com/cloudsdktool/google-cloud-cli from 525.0.0-emulators to 532.0.0-emulators by @dependabot[bot] in #2556
• build(deps): Bump google.golang.org/api from 0.242.0 to 0.244.0 by @dependabot[bot] in #2561
• build(deps): Bump cloud.google.com/go/pubsub from 1.49.0 to 1.50.0 by @dependabot[bot] in #2554
• build(deps): Bump golang.org/x/net from 0.42.0 to 0.43.0 by @dependabot[bot] in #2570
• return correct error if GetLeafAndProofByHash fails by @bobcallaway in #2574
• use correct type; just look for len() instead of nil check by @bobcallaway in #2576
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2565
• build(deps): Bump the all group with 3 updates by @dependabot[bot] in #2567
• build(deps): Bump golang from 1.24.5 to 1.24.6 in the all group by @dependabot[bot] in #2568
• build(deps): Bump golang.org/x/mod from 0.26.0 to 0.27.0 by @dependabot[bot] in #2571
• build(deps): Bump google.com/cloudsdktool/google-cloud-cli from 532.0.0-emulators to 533.0.0-emulators by @dependabot[bot] in #2572
• build(deps): Bump go.step.sm/crypto from 0.68.0 to 0.69.0 by @dependabot[bot] in #2577
• build(deps): Bump google.golang.org/api from 0.245.0 to 0.246.0 by @dependabot[bot] in #2569
• simplify hash and signature verification in rekord type by @bobcallaway in #2579
• AddLeaf: use cheaper gRPC endpoint since we already have the inclusion proof by @bobcallaway in #2580
• move to per-shard trillian client manager by @bobcallaway in #2564
• use less expensive gRPC call to implement GetLeafAndProofByHash by @bobcallaway in #2581
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /hack/tools by @dependabot[bot] in #2584
• build(deps): Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #2585
• build(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1 by @dependabot[bot] in #2586
• build(deps): Bump actions/checkout from 4.3.0 to 5.0.0 by @dependabot[bot] in #2588
• build(deps): Bump google.com/cloudsdktool/google-cloud-cli from 533.0.0-emulators to 535.0.0-emulators by @dependabot[bot] in #2594
• build(deps): Bump google.golang.org/grpc from 1.74.2 to 1.75.0 by @dependabot[bot] in #2592
• build(deps): Bump google.golang.org/protobuf from 1.36.7 to 1.36.8 in the all group by @dependabot[bot] in #2589
• build(deps): Bump go.step.sm/crypto from 0.69.0 to 0.70.0 by @dependabot[bot] in #2590
• build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in #2591
• build(deps): Bump the all group with 2 updates by @dependabot[bot] in #2593
• build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 by @dependabot[bot] in #2596
• build(deps): Bump google.golang.org/api from 0.246.0 to 0.248.0 by @dependabot[bot] in #2595
• add changelog for v1.4.1 release by @bobcallaway in #2597

New Contributors

• @caarlos0 made their first contribution in #2563

Full Changelog: v1.4.0...v1.4.1

Changelog

• d7d31f0 changelog for v1.4.0 release (#2550)
• 455d37b enable retries and timeouts on GCP KMS calls (#2548)
• bfc05e0 allow configuring gRPC default service config for trillian client load balancing & timeouts (#2549)
• 6b4e260 remove stable checkpoint feature (#2537)
• 5d5f299 build(deps): Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0
• 9a34ce9 build(deps): Bump golang.org/x/net from 0.41.0 to 0.42.0 (#2544)
• 7d62779 build(deps): Bump the all group with 3 updates (#2545)
• e2f2f07 fix lints
• 82d7215 bump golangci-lint to v2.2.x
• 47a75e6 use go1.24.5 to build rekor
• 7fec2db build(deps): Bump google.golang.org/api from 0.238.0 to 0.242.0 (#2543)
• d5c8e57 build(deps): Bump golang.org/x/sync from 0.15.0 to 0.16.0 (#2541)
• a7a0356 build(deps): Bump github.com/spf13/pflag in the all group (#2542)
• 802db4d build(deps): Bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0
• d920fad move context handling in trillian RPC calls to be request based and idiomatic (#2536)
• 4b09ef5 build(deps): Bump github.com/go-viper/mapstructure/v2 (#2522)
• 959ea43 build(deps): Bump golang from 1.24.4 to 1.24.5 in the all group (#2534)
• 8931ff3 build(deps): Bump the all group with 2 updates (#2518)
• df0a4ce build(deps): Bump the all group with 2 updates (#2524)
• 2fab95a build(deps): Bump sigstore/scaffolding/trillian_log_server (#2527)
• 4221cb8 build(deps): Bump sigstore/scaffolding/trillian_log_signer (#2526)
• 6c27e68 build(deps): Bump github.com/go-viper/mapstructure/v2 in /hack/tools (#2523)
• 3f8d1e6 backoff pubsub emulator to last-known good (#2535)
• 422e8ec build(deps): Bump golang from db5d0af to 10c1318
• c0f3b8c build(deps): Bump sigstore/cosign-installer in the all group
• 795d4c7 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 3ef026f build(deps): Bump google.golang.org/api from 0.237.0 to 0.238.0
• 18a6ae4 build(deps): Bump go.step.sm/crypto from 0.66.0 to 0.67.0
• 1ef8b66 build(deps): Bump github/codeql-action in the all group
• 2e5d89f build(deps): Bump google.golang.org/api from 0.236.0 to 0.237.0
• fa87121 build(deps): Bump the all group with 7 updates
• 20979b6 Update GoReleaser configurations (#2511)
• 8d71b49 update builder to use go1.24.4
• 03a2874 build(deps): Bump google.golang.org/grpc from 1.72.2 to 1.73.0
• b0db66f build(deps): Bump golang.org/x/net from 0.40.0 to 0.41.0
• 7dcea62 build(deps): Bump github.com/redis/go-redis/v9 from 9.9.0 to 9.10.0
• ea15859 build(deps): Bump google.golang.org/api from 0.235.0 to 0.236.0
• 4793920 build(deps): Bump golang from 1.24.3 to 1.24.4 in the all group
• 0613f7f build(deps): Bump github.com/go-swagger/go-swagger
• bce34fc build(deps): Bump github/codeql-action in the all group
• 946bdf5 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 5c131cf build(deps): Bump github.com/google/rpmpack from 0.6.0 to 0.7.0
• 4f4dbc7 build(deps): Bump github.com/redis/go-redis/v9 from 9.8.0 to 9.9.0
• 4a3e683 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 6a0305e build(deps): Bump go.step.sm/crypto from 0.64.0 to 0.66.0
• cad3eb6 build(deps): Bump google.golang.org/api from 0.234.0 to 0.235.0
• 5097431 build(deps): Bump golang from 4c0a181 to 81bf592
• 1a4c8e5 build(deps): Bump google.golang.org/api from 0.233.0 to 0.234.0
• cc3b57c build(deps): Bump golang from 86b4cff to 4c0a181
• a695663 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• e6af2f8 build(deps): Bump google.golang.org/grpc in the all group
• aaaa2e3 build(deps): Bump go.step.sm/crypto from 0.63.0 to 0.64.0
• d4e59ed Don't initialize index storage with stable checkpoint publishing (#2486)
• 255b324 build(deps): Bump golang from 39d9e7d to 86b4cff
• c86d95f build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 90ca4b4 build(deps): Bump the all group with 2 updates
• 7d5b510 build(deps): Bump google.golang.org/api from 0.232.0 to 0.233.0
• dec7ef2 build(deps): Bump the all group with 2 updates
• 62a6617 Fix docker compose up --wait failing when Trillian server isn't healthy (#2473)
• dedb18d build(deps): Bump golang.org/x/crypto from 0.37.0 to 0.38.0 (#2477)
• a18b3a3 build(deps): Bump golang.org/x/net from 0.39.0 to 0.40.0 (#2475)
• b971ec3 build(deps): Bump golang from 1.24.2 to 1.24.3 in the all group (#2480)
• b124325 build(deps): Bump google.golang.org/api from 0.231.0 to 0.232.0
• f067e5a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2478)
• 09bb61f build(deps): Bump actions/setup-go from 5.4.0 to 5.5.0 in the all group (#2474)
• 140f622 build(deps): Bump github.com/redis/go-redis/v9 from 9.7.3 to 9.8.0 (#2470)
• 5cbfc5f build(deps): Bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 (#2471)
• 0e0e62b build(deps): Bump google.golang.org/api from 0.230.0 to 0.231.0
• 810385a build(deps): Bump go.step.sm/crypto from 0.61.0 to 0.63.0 (#2468)
• 191c5a8 build(deps): Bump github/codeql-action in the all group (#2467)
• cc70ac7 build(deps): Bump golang from d9db321 to 30baaea (#2469)
• 7b8fd2e build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2466)
• 09ef86a build(deps): Bump the all group with 2 updates
• 78c929a build(deps): Bump google.golang.org/api from 0.229.0 to 0.230.0
• 2f76aea build(deps): Bump the all group with 3 updates
• 6ad185a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2462)
• fef9f71 Bump sigstore/sigstore, use shared Tink library (#2461)
• 5361696 better mysql healthcheck (#2459)
• 1f43fb5 build(deps): Bump sigs.k8s.io/release-utils from 0.8.4 to 0.11.1
• 7af1f88 build(deps): Bump google.golang.org/grpc from 1.71.1 to 1.72.0
• fd8ce28 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.3.0 to 2.4.0
• c571c23 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
• 578719a build(deps): Bump golang
• 0860336 build(deps): Bump codecov/codecov-action in the all group
• a365058 build(deps): Bump go.step.sm/crypto from 0.60.0 to 0.61.0
• 720ba7f build(deps): Bump golang.org/x/crypto in /hack/tools
• 456b0df update builder image to use go1.24.2
• ce01015 build(deps): Bump golang from 991aa6a to 1ecc479
• 46c694f build(deps): Bump ko-build/setup-ko from 0.8 to 0.9 in the all group
• 406f08d build(deps): Bump cloud.google.com/go/pubsub from 1.47.0 to 1.49.0
• 78161c7 build(deps): Bump github.com/prometheus/client_golang
• 159c0f2 build(deps): Bump the all group with 7 updates
• 61c39f0 build(deps): Bump github.com/spf13/viper from 1.19.0 to 1.20.1
• 9d0fbc1 Add CHANGELOG for v1.3.10 (#2439)

Thanks for all contributors!

v1.3.10

Note that Rekor v1 is in maintenance mode as we are actively developing
its successor, Rekor v2, designed to be easy to maintain and cheaper to operate. See the
README for more information.

Features

• Added --client-signing-algorithms flag (#1974)

Fixes / Misc

• emit unpopulated values when marshalling (#2438)
• pkg/api: better logs when algorithm registry rejects a key (#2429)
• chore: improve mysql readiness checks (#2397)

Thanks for all contributors!

v1.3.9

Features

• Cache checkpoint for inactive shards (#2332)
• Support per-shard signing keys (#2330)

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

New Contributors

• @sgpinkus made their first contribution in #2322
• @dnwe made their first contribution in #2325

Full Changelog: v1.3.7...v1.3.8

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

Thanks for all contributors!

v1.3.6

New Features

• Add support for IEEE P1363 encoded ECDSA signatures
• Add index performance script (#2042)
• Add support for ed25519ph user keys in hashedrekord (#1945)
• Add metrics for index insertion (#2015)
• Add TLS support for Redis Client implementation (#1998)

Bug Fixes

• fix typo in remoteIp and set full name for trace field

Full Changelog: v1.3.5...v1.3.6

Changelog

• 488eb97 v1.3.5 changelog (#1987)
• 19cd558 output trace in slog and override correlation header name (#1986)
• a0453d5 give log timestamps nanosecond precision (#1985)
• 907f2b5 bump trillian images to v1.6.0 (#1984)
• 134ef83 remove trillian images from release process (#1983)
• 9865ca9 Added support for sha384/sha512 hash algorithms in hashedrekords (#1959)
• fc28ac1 Change Redis value for locking mechanism (#1957)
• fa9ab50 Bump sigstore/sigstore version, fix deprecated func (#1936)
• 6020532 Fix panic for DSSE canonicalization (#1923)
• fe04993 Drop conditional when verifying entry checkpoint (#1917)
• a6c25cc Remove timestamp from checkpoint (#1888)
• 64ab435 Additional unique index correction (#1885)

Thanks for all contributors!

What's Changed

• Additional unique index correction by @sabre1041 in #1885
• Remove timestamp from checkpoint by @haydentherapper in #1888
• Drop conditional when verifying entry checkpoint by @haydentherapper in #1917
• Fix panic for DSSE canonicalization by @haydentherapper in #1923
• update builder to use go1.21 by @cpanato in #1956
• Change Redis value for locking mechanism by @haydentherapper in #1957
• remove trillian images from release process by @bobcallaway in #1983
• bump trillian images to v1.6.0 by @bobcallaway in #1984
• give log timestamps nanosecond precision by @bobcallaway in #1985
• output trace in slog and override correlation header name by @bobcallaway in #1986
• v1.3.5 changelog by @bobcallaway in #1987

New Contributors

• @ret2libc made their first contribution in #1959

Full Changelog: v1.3.4...v1.3.5

Changelog

• 5072901 changelog for v1.3.4 (#1868)
• 9e37c19 fix: Do not check for pubsub.topics.get on initialization (#1853)
• fb05e16 Update ranges.go (#1852)
• a7501a6 update indexstorage interface to reduce roundtrips (#1838)
• 212ebff add functional options for mysql implementation
• a9de214 s/uuids/uuid
• 014cfb1 add mysql indexstorage backend
• 0394bf7 add s3 storage for attestations
• 29220fb update builder image to use go1.21.4 and bump golangci-lint to v1.55.x (#1851)
• ff9c3b9 fix optional field in cose schema
• c3ffda6 use a single validator library in rekor-cli (#1818)
• b681a14 Remove go-playground/validator dependency from pkg/pki (#1817)

Thanks for all contributors!

New Contributors

• @steiza made their first contribution in #1817

Full Changelog: v1.3.3...v1.3.4

Changelog

• 12d546c Update signer flag description (#1804)
• 16e2323 update trillian to 1.5.3 (#1803)
• 9f49d7b adds redis_auth (#1627)
• b719942 Add method to get artifact hash for an entry (#1777)
• 05cca49 make e2e tests more usable with docker-compose (#1770)
• 6f96ee3 install go at correct version for codeql (#1762)

Thanks for all contributors!

What's Changed

• build(deps): Bump golang.org/x/net from 0.10.0 to 0.17.0 in /hack/tools by @dependabot in #1759
• build(deps): Bump google/cloud-sdk from 5499d59 to 5ae0c79 by @dependabot in #1760
• build(deps): Bump github.com/go-redis/redismock/v9 from 9.0.3 to 9.2.0 by @dependabot in #1761
• build(deps): Bump github.com/redis/go-redis/v9 from 9.1.0 to 9.2.1 by @dependabot in #1717
• install go at correct version for codeql by @bobcallaway in #1762
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.7.3 to 1.7.4 by @dependabot in #1764
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.7.3 to 1.7.4 by @dependabot in #1765
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.7.3 to 1.7.4 by @dependabot in #1763
• build(deps): Bump github.com/sigstore/sigstore from 1.7.3 to 1.7.4 by @dependabot in #1767
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.3 to 1.7.4 by @dependabot in #1769
• build(deps): Bump google/cloud-sdk from 5ae0c79 to 0bd5508 by @dependabot in #1768
• make e2e tests more usable with docker-compose by @bobcallaway in #1770
• build(deps): Bump google/cloud-sdk from 0bd5508 to 66e2681 by @dependabot in #1772
• build(deps): Bump google/cloud-sdk from 66e2681 to d2a303f by @dependabot in #1773
• build(deps): Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #1774
• build(deps): Bump google/cloud-sdk from 450.0.0 to 451.0.0 by @dependabot in #1775
• build(deps): Bump google.golang.org/grpc from 1.58.3 to 1.59.0 by @dependabot in #1776
• Add method to get artifact hash for an entry by @haydentherapper in #1777
• build(deps): Bump go.step.sm/crypto from 0.36.0 to 0.36.1 by @dependabot in #1780
• build(deps): Bump google/cloud-sdk from 4bcc272 to 1969fea by @dependabot in #1778
• build(deps): Bump cloud.google.com/go/profiler from 0.3.1 to 0.4.0 by @dependabot in #1779
• build(deps): Bump google/cloud-sdk from 451.0.0 to 451.0.1 by @dependabot in #1782
• build(deps): Bump google.golang.org/api from 0.147.0 to 0.148.0 by @dependabot in #1781
• build(deps): Bump google/cloud-sdk from d7dac1e to d01ba39 by @dependabot in #1783
• build(deps): Bump google/cloud-sdk from d01ba39 to 7edf46b by @dependabot in #1784
• build(deps): Bump google/cloud-sdk from 451.0.1 to 452.0.0 by @dependabot in #1785
• build(deps): Bump go.uber.org/goleak from 1.2.1 to 1.3.0 by @dependabot in #1787
• build(deps): Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #1786
• build(deps): Bump google.golang.org/grpc from 1.55.0 to 1.56.3 in /hack/tools by @dependabot in #1788
• build(deps): Bump google/cloud-sdk from 452.0.0 to 452.0.1 by @dependabot in #1789
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.7.4 to 1.7.5 by @dependabot in #1790
• build(deps): Bump google/cloud-sdk from 8b55497 to a7d9835 by @dependabot in #1795
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.7.4 to 1.7.5 by @dependabot in #1792
• build(deps): Bump sigs.k8s.io/release-utils from 0.7.5 to 0.7.6 by @dependabot in #1793
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.4 to 1.7.5 by @dependabot in #1791
• build(deps): Bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 by @dependabot in #1794
• build(deps): Bump google/cloud-sdk from a7d9835 to 96d437f by @dependabot in #1796
• build(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.7.4 to 1.7.5 by @dependabot in #1797
• feat: adds redis auth. by @ianhundere in #1627
• build(deps): Bump google/cloud-sdk from 96d437f to b996d57 by @dependabot in #1798
• build(deps): Bump google/cloud-sdk from 452.0.1 to 453.0.0 by @dependabot in #1800
• build(deps): Bump github.com/redis/go-redis/v9 from 9.2.1 to 9.3.0 by @dependabot in #1801
• build(deps): Bump google.golang.org/api from 0.148.0 to 0.149.0 by @dependabot in #1802
• update trillian to 1.5.3 by @k4leung4 in #1803
• Update signer flag description by @haydentherapper in #1804
• changelog for v1.3.3 by @bobcallaway in #1806

New Contributors

• @ianhundere made their first contribution in #1627

Full Changelog: v1.3.2...v1.3.3