v1.2.0-rc.1

[susanshi]

🚨 Deprecations

• CertificateStore is deprecated in favor of KeyManagementProvider. Please migrate to KeyManagementProvider by following guide here. Support will be removed in Ratify v2.0.0

✨ New Features

• Cosign Verifier enhancements:

  • feat: move cosign to be a built in verifier by @akashsinghal in feat: move cosign to be a built in verifier #1343
  • feat: add key support to key management provider by @akashsinghal in feat: add key support to key management provider #1333
  • feat: add cosign trust policies by @akashsinghal in feat: add cosign trust policies #1381

• Kubernetes multi-tenancy support:

  • feat: refactor CertStore and KMP Crd to support multi-tenancy by @binbin-li in feat: refactor certStore and KMP to support multi-tenancy [multi-tenancy PR 10] #1423
  • feat: add NamespacedPolicy, NamespacedStore, NamespacedVerifier CRD by @binbin-li in feat: add NamespacedPolicy CRD [multi-tenancy PR 7] #1402, feat: add NamespacedStore CRD [multi-tenancy PR 8] #1413
  • feat: add cache isolation by @binbin-li in feat: add cache isolation #1213
  • feat: add Verifiers, policyManager , ReferrerStoreManagers, certStoreManager interface by @binbin-li in feat: add verifiers interface to wrap up operations on namespaced verifiers [multi-tenancy PR 2] #1358 , feat: add PolicyManager interface to wrap operations on namespaced policies [multi-tenancy PR 3] #1359, feat: add ReferrerStoreManager interface to wrap operations on namespaced stores [multi-tenancy PR 4] #1380, feat: add certStoreManager interface to wrap operations on namespaced certStores [multi-tenancy PR 5] #1382

• CRD improvements:

  • feat: add version to CRD spec by @susanshi in feat: add version to CRD spec #1215
  • feat: validate plugin name on CR create by @susanshi in feat: validate plugin name on CR create #1265
  • feat: add key management provider resource by @akashsinghal in feat: add key management provider resource #1293
  • feat: add NamespacedKMP and switch KMP scope to cluster [multi-tenancy PR 9] by @binbin-li in feat: add NamespacedKMP and switch KMP scope to cluster [multi-tenancy PR 9] #1422

📄 Documentation

• docs: add roadmap by @yizha1 in docs: add roadmap #1344
• docs: updated docs with the latest verifier report format by @junczhu in docs: updated docs with the latest verifier report format #1236
• docs: add multi-tenancy support discussions by @binbin-li in docs: add multi-tenancy support discussions #1175
• docs: Update log format in doc by @junczhu in docs: Update log format in doc #1240
• docs: update COC and add adopters.md by @FeynmanZhou in docs: update COC and add adopters.md #1360
• fix: updated community meeting time to UTC by @susanshi in fix: updated community meeting time to UTC #1364
• build: update Bridge to Kubernetes debugging steps by @akashsinghal in build: update Bridge to Kubernetes debugging steps #1384
• docs: cosign upgrade design document by @akashsinghal in docs: cosign upgrade design document #1246
• docs: Create BREAKING_CHANGE_AND_DEPRECATION.md by @susanshi in docs: Create BREAKING_CHANGE_AND_DEPRECATION.md #1399

🎉 New Contributors

• @duffney made their first contribution in Issue 1022 support plugin logging #1254
• @mannbiher made their first contribution in fix: Set IdleTimeout for http.Server #1418

🐛 🩹 Bug Fixes

• fix: surface plugin error in exec.go by @susanshi in fix: surface plugin error in exec.go #1228
• fix: SBOM verifier license match support for deprecated license by @susanshi in fix: SBOM verifier license match support for deprecated license #1230
• fix: update constraint templates to work with new type field by @akashsinghal in fix: update constraint templates to work with new type field #1217
• fix: improve vuln report verifier report messages by @akashsinghal in fix: improve vuln report verifier report messages #1238
• fix: dynamic plugin should support pulling image with digest by @susanshi in fix: dynamic plugin should support pulling image with digest #1280
• fix: add missing CRD conversion methods by @binbin-li in fix: add missing CRD conversion methods #1289
• fix: fix unit tests that fail in local environment by @binbin-li in fix: fix unit tests that fail in local environment #1292
• fix: add check for disabled keys from azure key vault by @akashsinghal in fix: add check for disabled keys from azure key vault #1474
• fix: update azure tenantId casing by @akashsinghal in fix: update azure tenantId casing #1385
• fix: rename staging to dev branch by @susanshi in fix: rename staging to dev branch #1401
• fix: update ReferrerNotFound error to be more accurate by @binbin-li in fix: update ReferrerNotFound error to be more accurate #1408
• fix: add top-level read permission by @binbin-li in fix: add top-level read permission #1419
• fix: add akv keys check on cosign-verifier by @binbin-li in fix: add akv keys check on cosign-verifier #1427
• fix: handle empty trust policies by @akashsinghal in fix: handle empty trust policies #1431
• fix: fix missing separator in helm template by @binbin-li in fix: fix missing separator in helm template #1463
• fix: check label value on pull_request_target by @binbin-li in fix: check label value on pull_request_target #1471
• fix: DecodeCertificates cert length check by @susanshi in fix: DecodeCertificates cert length check #1470
• fix: update cosign chart and remove extra logs by @akashsinghal in fix: update cosign chart and remove extra logs #1475

What's Changed

• fix: bump dev helmfile ratify chart versions by @akashsinghal in fix: bump dev helmfile ratify chart versions #1216
• feat: add namespace to external data request key by @binbin-li in feat: add namespace to external data request key #1201
• chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.9 to 1.16.12 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.9 to 1.16.12 #1224
• chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.0 to 1.9.1 by @dependabot in chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.0 to 1.9.1 #1225
• chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.25.11 to 1.25.12 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.25.11 to 1.25.12 #1226
• build: bump up upload-artifact action to v4.0.0 by @binbin-li in build: bump up upload-artifact action to v4.0.0 #1227
• chore: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in chore: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #1229
• feat: add version to CRD spec by @susanshi in feat: add version to CRD spec #1215
• fix: surface plugin error in exec.go by @susanshi in fix: surface plugin error in exec.go #1228
• chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.12 to 1.16.13 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.12 to 1.16.13 #1235
• chore: Bump k8s.io/client-go from 0.28.4 to 0.28.5 by @dependabot in chore: Bump k8s.io/client-go from 0.28.4 to 0.28.5 #1232
• chore: Bump apache/skywalking-eyes from ee81ff786927ea6ffa48b1e29c48e5289f4753aa to ed436a5593c63a25f394ea29da61b0ac3731a9fe by @dependabot in chore: Bump apache/skywalking-eyes from ee81ff786927ea6ffa48b1e29c48e5289f4753aa to ed436a5593c63a25f394ea29da61b0ac3731a9fe #1231
• feat: add cache isolation by @binbin-li in feat: add cache isolation #1213
• chore: update codecov config by @junczhu in chore: update codecov config #1237
• docs: updated docs with the latest verifier report format by @junczhu in docs: updated docs with the latest verifier report format #1236
• fix: SBOM verifier license match support for deprecated license by @susanshi in fix: SBOM verifier license match support for deprecated license #1230
• docs: add multi-tenancy support discussions by @binbin-li in docs: add multi-tenancy support discussions #1175
• fix: differentiate aks logs from e2e log by @susanshi in fix: differentiate aks logs from e2e log  #1243
• ci: add cache cleanup post merge by @akashsinghal in ci: add cache cleanup post merge #1242
• docs: Update log format in doc by @junczhu in docs: Update log format in doc #1240
• ci: switch to fail-fast from continue-on-error by @binbin-li in ci: switch to fail-fast from continue-on-error #1245
• ci: add dev helm chart publishing workflow by @akashsinghal in ci: add dev helm chart publishing workflow #1209
• fix: update constraint templates to work with new type field by @akashsinghal in fix: update constraint templates to work with new type field #1217
• fix: improve vuln report verifier report messages by @akashsinghal in fix: improve vuln report verifier report messages #1238
• feat: improve plugin config dependency by @junczhu in feat: improve plugin config dependency #1223
• chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.13 to 1.16.14 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.13 to 1.16.14 #1250
• chore: Bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.2.0 to 1.2.1 by @dependabot in chore: Bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.2.0 to 1.2.1 #1252
• chore: Bump github.com/cloudflare/circl from 1.3.5 to 1.3.7 by @dependabot in chore: Bump github.com/cloudflare/circl from 1.3.5 to 1.3.7 #1253
• chore: Bump azure/login from 1.5.1 to 1.6.0 by @dependabot in chore: Bump azure/login from 1.5.1 to 1.6.0 #1255
• chore: rename func for readability by @junczhu in chore: rename func for readability #1257
• chore: Bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in chore: Bump actions/upload-artifact from 4.0.0 to 4.1.0 #1261
• chore: Bump azure/login from 1.6.0 to 1.6.1 by @dependabot in chore: Bump azure/login from 1.6.0 to 1.6.1 #1266
• chore: Bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in chore: Bump actions/upload-artifact from 4.1.0 to 4.2.0 #1270
• chore: Bump k8s.io/client-go from 0.28.5 to 0.28.6 by @dependabot in chore: Bump k8s.io/client-go from 0.28.5 to 0.28.6 #1273
• chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.14 to 1.16.16 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.14 to 1.16.16 #1275
• chore: Bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc6 by @dependabot in chore: Bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc6 #1271
• chore: Bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in chore: Bump actions/upload-artifact from 4.2.0 to 4.3.0 #1279
• chore: Bump codecov/codecov-action from 3.1.4 to 3.1.5 by @dependabot in chore: Bump codecov/codecov-action from 3.1.4 to 3.1.5 #1281
• chore: Bump github.com/docker/cli from 24.0.7+incompatible to 24.0.8+incompatible by @dependabot in chore: Bump github.com/docker/cli from 24.0.7+incompatible to 24.0.8+incompatible #1282
• chore: Bump github.com/notaryproject/notation-core-go from 1.0.1 to 1.0.2 by @dependabot in chore: Bump github.com/notaryproject/notation-core-go from 1.0.1 to 1.0.2 #1283
• chore: bump to go 1.21 by @akashsinghal in chore: bump to go 1.21 #1276
• fix: dynamic plugin should support pulling image with digest by @susanshi in fix: dynamic plugin should support pulling image with digest #1280
• feat: validate plugin name on CR create by @susanshi in feat: validate plugin name on CR create #1265
• chore: Bump codecov/codecov-action from 3.1.5 to 3.1.6 by @dependabot in chore: Bump codecov/codecov-action from 3.1.5 to 3.1.6 #1288
• fix: add missing CRD conversion methods by @binbin-li in fix: add missing CRD conversion methods #1289
• fix: fix unit tests that fail in local environment by @binbin-li in fix: fix unit tests that fail in local environment #1292
• chore: Bump codecov/codecov-action from 3.1.6 to 4.0.0 by @dependabot in chore: Bump codecov/codecov-action from 3.1.6 to 4.0.0 #1291
• chore: Bump codecov/codecov-action from 4.0.0 to 4.0.1 by @dependabot in chore: Bump codecov/codecov-action from 4.0.0 to 4.0.1 #1298
• chore: Bump github.com/sigstore/cosign/v2 from 2.2.2 to 2.2.3 by @dependabot in chore: Bump github.com/sigstore/cosign/v2 from 2.2.2 to 2.2.3 #1301
• chore: Bump github.com/docker/cli from 24.0.8+incompatible to 24.0.9+incompatible by @dependabot in chore: Bump github.com/docker/cli from 24.0.8+incompatible to 24.0.9+incompatible #1302
• feat: handle stderr and stdout messages from plugins by @duffney in feat: handle stderr and stdout messages from plugins #1258
• chore: Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in chore: Bump actions/upload-artifact from 4.3.0 to 4.3.1 #1303
• chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.1 to 1.9.2 by @dependabot in chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.1 to 1.9.2 #1306
• chore: Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in chore: Bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 #1307
• chore: Bump k8s.io/client-go from 0.28.6 to 0.28.7 by @dependabot in chore: Bump k8s.io/client-go from 0.28.6 to 0.28.7 #1309
• chore: Bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 by @dependabot in chore: Bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 #1312
• chore: Bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in chore: Bump google.golang.org/grpc from 1.61.0 to 1.61.1 #1313
• chore: Bump codecov/codecov-action from 4.0.1 to 4.0.2 by @dependabot in chore: Bump codecov/codecov-action from 4.0.1 to 4.0.2 #1316
• chore: Bump codecov/codecov-action from 4.0.2 to 4.1.0 by @dependabot in chore: Bump codecov/codecov-action from 4.0.2 to 4.1.0 #1317
• chore: Bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.2.1 to 1.2.2 by @dependabot in chore: Bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.2.1 to 1.2.2 #1315
• chore: Bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 by @dependabot in chore: Bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 #1325
• feat: add debug logs to k8s secret and docker config auth providers by @akashsinghal in feat: add debug logs to k8s secret and docker config auth providers #1319
• build: update deployment template azure workload identity annotation by @akashsinghal in build: update deployment template azure workload identity annotation #1320
• chore: Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in chore: Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 #1328
• chore: Bump github.com/go-jose/go-jose/v3 from 3.0.2 to 3.0.3 by @dependabot in chore: Bump github.com/go-jose/go-jose/v3 from 3.0.2 to 3.0.3 #1329
• chore: Bump azure/login from 1.6.1 to 2.0.0 by @dependabot in chore: Bump azure/login from 1.6.1 to 2.0.0 #1330
• chore: Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in chore: Bump github.com/golang/protobuf from 1.5.3 to 1.5.4 #1331
• chore: Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in chore: Bump actions/checkout from 4.1.1 to 4.1.2 #1332
• chore: Bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in chore: Bump docker/login-action from 3.0.0 to 3.1.0 #1335
• chore: update to support GK 3.15 & remove support for GK 3.12 by @akashsinghal in chore: update to support GK 3.15 & remove support for GK 3.12 #1318
• ci: update and cleanup CI tools used by @akashsinghal in ci: update and cleanup CI tools used #1326
• fix: update hard coded test registry reference by @akashsinghal in fix: update hard coded test registry reference #1336
• chore: Bump k8s.io/client-go from 0.28.7 to 0.28.8 by @dependabot in chore: Bump k8s.io/client-go from 0.28.7 to 0.28.8 #1339
• chore: Bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in chore: Bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 #1338
• chore: Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in chore: Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible #1345
• chore: update the image tag of dev container by @junczhu in chore: update the image tag of dev container #1347
• chore: Bump apache/skywalking-eyes from ed436a5593c63a25f394ea29da61b0ac3731a9fe to e6d1ce46901c759d9d9f84f8bcb97ad028cd5f88 by @dependabot in chore: Bump apache/skywalking-eyes from ed436a5593c63a25f394ea29da61b0ac3731a9fe to e6d1ce46901c759d9d9f84f8bcb97ad028cd5f88 #1348
• chore: Bump github.com/owenrumney/go-sarif/v2 from 2.3.0 to 2.3.1 by @dependabot in chore: Bump github.com/owenrumney/go-sarif/v2 from 2.3.0 to 2.3.1 #1349
• ci: update license check exclusion version by @akashsinghal in ci: update license check exclusion version #1351
• feat: add key management provider resource by @akashsinghal in feat: add key management provider resource #1293
• chore: Bump codecov/codecov-action from 4.1.0 to 4.1.1 by @dependabot in chore: Bump codecov/codecov-action from 4.1.0 to 4.1.1 #1354
• feat: move cosign to be a built in verifier by @akashsinghal in feat: move cosign to be a built in verifier #1343
• chore: Bump apache/skywalking-eyes from e6d1ce46901c759d9d9f84f8bcb97ad028cd5f88 to 97538682f556b56cc7422ece660d8d7e6c4fb013 by @dependabot in chore: Bump apache/skywalking-eyes from e6d1ce46901c759d9d9f84f8bcb97ad028cd5f88 to 97538682f556b56cc7422ece660d8d7e6c4fb013 #1355
• chore: Bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3 by @dependabot in chore: Bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3 #1357
• feat: add GetNamespace utils method for context [multi-tenancy PR 1] by @binbin-li in feat: add GetNamespace utils method for context [multi-tenancy PR 1] #1356
• chore: Bump apache/skywalking-eyes from 97538682f556b56cc7422ece660d8d7e6c4fb013 to 6753eaeab2d30d8b777f33637bf48794f70888d0 by @dependabot in chore: Bump apache/skywalking-eyes from 97538682f556b56cc7422ece660d8d7e6c4fb013 to 6753eaeab2d30d8b777f33637bf48794f70888d0 #1362
• chore: Bump codecov/codecov-action from 4.1.1 to 4.2.0 by @dependabot in chore: Bump codecov/codecov-action from 4.1.1 to 4.2.0 #1363
• docs: update COC and add adopters.md by @FeynmanZhou in docs: update COC and add adopters.md #1360
• feat: run full validation on staging by @susanshi in feat: run full validation on staging #1361
• chore: Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in chore: Bump actions/checkout from 4.1.1 to 4.1.2 #1365
• chore: Bump apache/skywalking-eyes from ed436a5593c63a25f394ea29da61b0ac3731a9fe to 6753eaeab2d30d8b777f33637bf48794f70888d0 by @dependabot in chore: Bump apache/skywalking-eyes from ed436a5593c63a25f394ea29da61b0ac3731a9fe to 6753eaeab2d30d8b777f33637bf48794f70888d0 #1366
• chore: Bump google.golang.org/grpc from 1.61.1 to 1.61.2 by @dependabot in chore: Bump google.golang.org/grpc from 1.61.1 to 1.61.2 #1367
• chore: Bump apache/skywalking-eyes from 6753eaeab2d30d8b777f33637bf48794f70888d0 to cd7b195c51fd3d6ad52afceb760719ddc6b3ee91 by @dependabot in chore: Bump apache/skywalking-eyes from 6753eaeab2d30d8b777f33637bf48794f70888d0 to cd7b195c51fd3d6ad52afceb760719ddc6b3ee91 #1370
• fix: updated community meeting time to UTC by @susanshi in fix: updated community meeting time to UTC #1364
• chore: Bump actions/checkout from 4.1.1 to 4.1.2 by @susanshi in chore: Bump actions/checkout from 4.1.1 to 4.1.2 #1368
• docs: add roadmap by @yizha1 in docs: add roadmap #1344
• Revert "chore: Bump actions/checkout from 4.1.1 to 4.1.2" by @susanshi in Revert "chore: Bump actions/checkout from 4.1.1 to 4.1.2" #1372
• build: Add codecov token by @binbin-li in build: Add codecov token #1373
• build: Add codecov token (build: Add codecov token #1373) by @binbin-li in build: Add codecov token (#1373) #1376
• feat: add verifiers interface to wrap up operations on namespaced verifiers [multi-tenancy PR 2] by @binbin-li in feat: add verifiers interface to wrap up operations on namespaced verifiers [multi-tenancy PR 2] #1358
• chore: Bump codecov/codecov-action from 4.2.0 to 4.3.0 by @dependabot in chore: Bump codecov/codecov-action from 4.2.0 to 4.3.0 #1379
• feat: add key support to key management provider by @akashsinghal in feat: add key support to key management provider #1333
• fix: enable workflow for staging by @susanshi in fix: enable workflow for staging #1369
• feat: add PolicyManager interface to wrap operations on namespaced policies [multi-tenancy PR 3] by @binbin-li in feat: add PolicyManager interface to wrap operations on namespaced policies [multi-tenancy PR 3] #1359
• feat: add ReferrerStoreManager interface to wrap operations on namespaced stores [multi-tenancy PR 4] by @binbin-li in feat: add ReferrerStoreManager interface to wrap operations on namespaced stores [multi-tenancy PR 4] #1380
• fix: update azure tenantId casing by @akashsinghal in fix: update azure tenantId casing #1385
• chore: Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @dependabot in chore: Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 #1383
• build: update Bridge to Kubernetes debugging steps by @akashsinghal in build: update Bridge to Kubernetes debugging steps #1384
• chore: Bump github.com/aws/aws-sdk-go-v2 from 1.26.0 to 1.26.1 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2 from 1.26.0 to 1.26.1 #1394
• chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.9 to 1.17.11 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.9 to 1.17.11 #1393
• chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.5.2 by @dependabot in chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.5.2 #1392
• chore: Bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @dependabot in chore: Bump google.golang.org/grpc from 1.62.1 to 1.62.2 #1391
• chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.27.9 to 1.27.11 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.27.9 to 1.27.11 #1390
• feat: merge from staging to main by @binbin-li in feat: merge from staging to main #1388
• chore: bump oras go to 2.5.0 by @akashsinghal in chore: bump oras go to 2.5.0 #1389
• feat: add certStoreManager interface to wrap operations on namespaced certStores [multi-tenancy PR 5] by @binbin-li in feat: add certStoreManager interface to wrap operations on namespaced certStores [multi-tenancy PR 5] #1382
• chore: Bump azure/login from 2.0.0 to 2.1.0 by @dependabot in chore: Bump azure/login from 2.0.0 to 2.1.0 #1400
• fix: rename staging to dev branch by @susanshi in fix: rename staging to dev branch #1401
• chore: Bump k8s.io/apimachinery from 0.28.8 to 0.28.9 by @dependabot in chore: Bump k8s.io/apimachinery from 0.28.8 to 0.28.9 #1405
• chore: Bump k8s.io/api from 0.28.8 to 0.28.9 by @dependabot in chore: Bump k8s.io/api from 0.28.8 to 0.28.9 #1404
• chore: Bump k8s.io/client-go from 0.28.8 to 0.28.9 by @dependabot in chore: Bump k8s.io/client-go from 0.28.8 to 0.28.9 #1406
• chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.11.0 to 1.11.1 by @dependabot in chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.11.0 to 1.11.1 #1407
• chore: Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.4 by @dependabot in chore: Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.4 #1403
• chore: Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in chore: Bump actions/upload-artifact from 4.3.1 to 4.3.2 #1410
• fix: update ReferrerNotFound error to be more accurate by @binbin-li in fix: update ReferrerNotFound error to be more accurate #1408
• chore: Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in chore: Bump actions/checkout from 4.1.2 to 4.1.3 #1411
• chore: Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in chore: Bump actions/upload-artifact from 4.3.2 to 4.3.3 #1412
• feat: add cosign trust policies by @akashsinghal in feat: add cosign trust policies #1381
• docs: cosign upgrade design document by @akashsinghal in docs: cosign upgrade design document #1246
• chore: Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in chore: Bump actions/checkout from 4.1.3 to 4.1.4 #1414
• chore: Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in chore: Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 #1415
• feat: add compatibility check in KMP while fetching certs/keys [multi-tenancy PR 6] by @binbin-li in feat: add compatibility check in KMP while fetching certs/keys [multi-tenancy PR 6] #1395
• fix: add top-level read permission by @binbin-li in fix: add top-level read permission #1419
• feat: add NamespacedPolicy CRD [multi-tenancy PR 7] by @binbin-li in feat: add NamespacedPolicy CRD [multi-tenancy PR 7] #1402
• build: ignore CVE-2022-48174 by @binbin-li in build: ignore CVE-2022-48174 #1421
• build: fix unpinned images by @binbin-li in build: fix unpinned images #1420
• feat: add NamespacedStore CRD [multi-tenancy PR 8] by @binbin-li in feat: add NamespacedStore CRD [multi-tenancy PR 8] #1413
• fix: Set IdleTimeout for http.Server by @mannbiher in fix: Set IdleTimeout for http.Server #1418
• test: fix cosign CR filename by @binbin-li in test: fix cosign CR filename #1425
• ci: bump k8s versions by @akashsinghal in ci: bump k8s versions #1417
• chore: Bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @dependabot in chore: Bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 #1426
• fix: add akv keys check on cosign-verifier by @binbin-li in fix: add akv keys check on cosign-verifier #1427
• chore: merging dev into main 04-30-2024 by @susanshi in chore: merging dev into main 04-30-2024 #1424
• fix: handle empty trust policies by @akashsinghal in fix: handle empty trust policies #1431
• feat: add NamespacedKMP and switch KMP scope to cluster [multi-tenancy PR 9] by @binbin-li in feat: add NamespacedKMP and switch KMP scope to cluster [multi-tenancy PR 9] #1422
• chore: bump ratify version for 1.1.1 patch release by @akashsinghal in chore: bump ratify version for 1.1.1 patch release #1434
• feat: refactor certStore and KMP to support multi-tenancy [multi-tenancy PR 10] by @binbin-li in feat: refactor certStore and KMP to support multi-tenancy [multi-tenancy PR 10] #1423
• chore: Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in chore: Bump actions/setup-go from 5.0.0 to 5.0.1 #1438
• feat: add NamespacedVerifier CRD [multi-tenancy PR 11] by @binbin-li in feat: add NamespacedVerifier CRD [multi-tenancy PR 11] #1428
• chore: Bump codecov/codecov-action from 4.3.0 to 4.3.1 by @dependabot in chore: Bump codecov/codecov-action from 4.3.0 to 4.3.1 #1433
• chore: Bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 by @dependabot in chore: Bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 #1440
• test: add e2e tests for multi-tenancy [multi-tenancy PR 12] by @binbin-li in test: add e2e tests for multi-tenancy [multi-tenancy PR 12] #1429
• chore: Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in chore: Bump actions/checkout from 4.1.4 to 4.1.5 #1447
• chore: Bump golangci/golangci-lint-action from 5.3.0 to 6.0.0 by @dependabot in chore: Bump golangci/golangci-lint-action from 5.3.0 to 6.0.0 #1446
• chore: use semantic version for go install pkg by @binbin-li in chore: use semantic version for go install pkg #1448
• fix: fix AKS test by switching to cluster-wide KMP by @binbin-li in fix: fix AKS test by switching to cluster-wide KMP #1455
• chore: merge dev into main 05-07-2024 by @susanshi in chore: merge dev into main 05-07-2024  #1444
• test: add unit tests for KMP and CertStore controllers by @binbin-li in test: add unit tests for KMP and CertStore controllers #1439
• ci: update azure SP federated credentials by @akashsinghal in ci: update azure SP federated credentials #1442
• chore: Bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 by @dependabot in chore: Bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 #1457
• docs: Create BREAKING_CHANGE_AND_DEPRECATION.md by @susanshi in docs: Create BREAKING_CHANGE_AND_DEPRECATION.md #1399
• chore: Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in chore: Bump ossf/scorecard-action from 2.3.1 to 2.3.3 #1462
• fix: fix missing separator in helm template by @binbin-li in fix: fix missing separator in helm template #1463
• chore: Bump vscode/devcontainers/go from c23be6b to 0ea3913 in /.devcontainer by @dependabot in chore: Bump vscode/devcontainers/go from c23be6b to 0ea3913 in /.devcontainer #1465
• chore: Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 by @dependabot in chore: Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 #1466
• fix: check label value on pull_request_target by @binbin-li in fix: check label value on pull_request_target #1471
• chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.27.11 to 1.27.13 by @dependabot in chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.27.11 to 1.27.13 #1467
• chore: Bump golang from d83472f to 392d2b6 in /httpserver by @dependabot in chore: Bump golang from d83472f to 392d2b6 in /httpserver #1469
• fix: DecodeCertificates cert length check by @susanshi in fix: DecodeCertificates cert length check #1470
• chore: update dev helmfiles to clean up namespaced resources by @akashsinghal in chore: update dev helmfiles to clean up namespaced resources #1476
• chore: Bump codecov/codecov-action from 4.3.1 to 4.4.0 by @dependabot in chore: Bump codecov/codecov-action from 4.3.1 to 4.4.0 #1477
• fix: update cosign chart and remove extra logs by @akashsinghal in fix: update cosign chart and remove extra logs #1475
• chore: update cert value in sample CRs by @binbin-li in chore: update cert value in sample CRs #1479
• fix: add check for disabled keys from azure key vault by @akashsinghal in fix: add check for disabled keys from azure key vault #1474
• chore: merge dev into main 5-16-24 by @akashsinghal in chore: merge dev into main 5-16-24 #1480
• chore: prepare for release 1.2-rc.1 by @susanshi in chore: prepare for release 1.2-rc.1 #1481

Full Changelog: v1.1.0...v1.2.0-rc.1

---

This discussion was created from the release v1.2.0-rc.1.