v0.6.0

As folks use sigstore-go in more cases, we continue to make fixes and do some minor API interface changes.

Because we are pre-1.0.0 these were made as breaking changes. After 1.0.0 we will provide deprecation notices and smoother migration paths. There may be more minor interface changes between now and v1.0.0.

Breaking Changes

• In pkg/bundle/bundle.go
  • ProtobufBundle is now Bundle
  • NewProtobufBundle is now NewBundle
• In pkg/bundle/signature_content.go
  • Use Statement() type was from github.com/in-toto/in-toto-golang/in_toto now comes from github.com/in-toto/attestation/go/v1

What's Changed

• feat: add support for additional transparency log key types by @vishal-chdhry in #197
• feat: use GetLogEntryByIndex to query rekor by @vishal-chdhry in #188
• feat: add validation of required fields in the bundle by @vishal-chdhry in #189
• Rename ProtobufBundle to Bundle by @codysoyland in #251
• Fix verify DSSE bundles (after signing) by @steiza in #258
• Fix crash with missing checkpoint by @haydentherapper in #260
• Add file pattern to CODEOWNERS by @codysoyland in #269
• Use example.com and remove trademark from tests by @codysoyland in #267
• Add deprecation message for ProtobufBundle by @codysoyland in #271
• Switch in-toto library to github.com/in-toto/attestation by @codysoyland in #274

Full Changelog: v0.5.1...v0.6.0