Go modules · #2689 by repository stars

github.com/notaryproject/notation

v1.3.2notaryproject/notation ↗

Last release 1 years ago
27 Apr 2025
Release timing varies
gaps range from 8 days to 2 months
Most releases are documented
notes for 6 of 9 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
165 releases · first in 2021

Release timeline

165 releases since 2021

20222023202420252026

20212026

Releases

v1.3.3-0.20250427031825-facb58ce161527 Apr 2025pre-release
Nothing published for this version
v1.3.224 Apr 2025
Release notes
Vote PASSED [+4 -0]: #1268

Update
- Dependency updates
- Code and documentation enhancements
What's Changed since v1.3.1
- bump: release v1.3.1 by @Two-Hearts in #1186
- CVE-2025-30204: update golang-jwt by @artem-panchenko in #1249
- backport: from main to release-1.3 branch by @Two-Hearts in #1267
New Contributors
- @artem-panchenko made their first contribution in #1249
Full Changelog: v1.3.1...v1.3.2
Open source →
Additional notes
v1.3.2 Latest

Latest

Compare

Choose a tag to compare

Open source →
v1.3.121 Feb 2025
Release notes
Vote PASSED [+5 -0]: #1186

Bug Fix
- Updated the notation-go library to v1.3.1. This update removes the timestamp check against signing time during authentic timestamp verification due to potential time skew and the unauthenticated nature of signing time field.
What's changed since v1.3.0
- bb571dd bump: release v1.3.1
- 1557a44 bump: bump up dependencies for release-1.3 branch (#1184)
- 198c822 Merge pull request #1149 from Two-Hearts/release-1.3
Full Changelog: v1.3.0...v1.3.1
Open source →
Additional notes
- bump: release v1.3.1 by @Two-Hearts in #1186
- CVE-2025-30204 : update golang-jwt by @artem-panchenko in #1249
- backport: from main to release-1.3 branch by @Two-Hearts in #1267
Open source →
v1.3.016 Jan 2025
Release notes
Notation v1.3.0

Notation v1.3.0 is an implementation of Notary Project Specifications v1.1.0.

Key features
- Support of CRL revocation check with built-in file cache. See more details here.
Other changes

-Timestamping enhancements. Enabled timestamping certificate chain revocation check after signing.

What's Changed since v1.3.0-rc.2
- bump: release v1.3.0-rc.2 by @Two-Hearts in #1130
- cherry-pick: cherry pick from main to release-1.3 branch by @Two-Hearts in #1147
- bump: bump up dependencies and workflows by @Two-Hearts in #1148
Full Changelog: v1.3.0-rc.2...v1.3.0

Vote PASSED [+5 -0]: #1149
Open source →
Additional notes
- bb571dd bump: release v1.3.1
- 1557a44 bump: bump up dependencies for release-1.3 branch ( #1184 )
- 198c822 Merge pull request #1149 from Two-Hearts/release-1.3
Full Changelog : v1.3.0...v1.3.1

Assets 9 Loading

Uh oh!

There was an error while loading. Please reload this page .

All reactions
Open source →
v1.3.0-rc.230 Dec 2024pre-release
Release notes
Vote PASSED [+4 -0]: #1130

Changes
1. Enabled timestamping certificate chain revocation check after signing.
2. Enhanced CRL cache with logs.
3. Bumped up dependencies and other minor fixes.
What's changed since v1.3.0-rc.1
- bump: release v1.3.0-rc.1 by @Two-Hearts in #1056
- fix: cherry pick minor fixes from main to release-1.3 by @Two-Hearts in #1110
- bump: bump up dependencies for release-1.3 branch by @Two-Hearts in #1109
- backport: CRL cache with log and E2E tests from main to release-1.3 by @Two-Hearts in #1117
- fix: fix context and bump up golang.org/x/net for release-1.3 branch by @Two-Hearts in #1120
- backport: timestamping cert chain revocation check during signing from main to release-1.3 branch by @Two-Hearts in #1121
Full Changelog: v1.3.0-rc.1...v1.3.0-rc.2
Open source →
Additional notes
- bump: release v1.3.0-rc.2 by @Two-Hearts in #1130
- cherry-pick: cherry pick from main to release-1.3 branch by @Two-Hearts in #1147
- bump: bump up dependencies and workflows by @Two-Hearts in #1148
Full Changelog : v1.3.0-rc.2...v1.3.0

Vote PASSED [+5 -0]: #1149

Assets 9 Loading

Uh oh!

There was an error while loading. Please reload this page .

All reactions
Open source →
v1.3.0-rc.18 Oct 2024pre-release
Release notes
Vote PASSED [+4 -0]: #1056

New Features
- Support of CRL revocation check with built-in file cache. See more details here.
Changelog
- 0d9ceac bump: release v1.3.0-rc.1
- 2819637 refactor!: remove blob sign/verify for v1.3.0-rc.1 release (#1045)
- 4c0a3da feat: crl with file cache (#1043)
- c2cff5b build(deps): Bump github.com/notaryproject/notation-core-go from 1.1.0-rc.1 to 1.1.0 in /test/e2e (#1037)
- a109519 build(deps): Bump golang.org/x/net from 0.28.0 to 0.29.0 (#1034)
- 3bb6ef7 build(deps): Bump github.com/notaryproject/notation-core-go from 1.1.0-rc.1 to 1.1.0 in /test/e2e/plugin (#1038)
- 687d29e build(deps): Bump oras.land/oras-go/v2 from 2.4.0 to 2.5.0 in /test/e2e (#1035)
- 1ab2505 build(deps): Bump github/codeql-action from 3.26.6 to 3.26.8 (#1044)
- 8f8f8c9 build(deps): Bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.20.2 in /test/e2e (#1036)
- 9283467 build(deps): Bump golang.org/x/term from 0.23.0 to 0.24.0 (#1033)
- 1af69fc chore: updated dependabot.yml to cover test/e2e (#1030)
- e8f37d0 build(deps): Bump github.com/notaryproject/notation-core-go from 1.1.0-rc.1 to 1.1.0 (#1024)
- b620496 build(deps): Bump github/codeql-action from 3.26.0 to 3.26.6 (#1026)
- 780df48 build(deps): Bump actions/upload-artifact from 4.3.6 to 4.4.0 (#1025)
- 83ade99 bump: upgrade golang version to v1.23 (#1019)
- b683029 build(deps): Bump github/codeql-action from 3.25.15 to 3.26.0 (#1010)
- fe327c7 build(deps): Bump actions/upload-artifact from 4.3.4 to 4.3.6 (#1009)
- 3a35b3b build(deps): Bump golang.org/x/net from 0.27.0 to 0.28.0 (#1007)
Full changelog: v1.2.0...v1.3.0-rc.1
Open source →
Additional notes
- bump: release v1.3.0-rc.1 by @Two-Hearts in #1056
- fix: cherry pick minor fixes from main to release-1.3 by @Two-Hearts in #1110
- bump: bump up dependencies for release-1.3 branch by @Two-Hearts in #1109
- backport: CRL cache with log and E2E tests from main to release-1.3 by @Two-Hearts in #1117
- fix: fix context and bump up golang.org/x/net for release-1.3 branch by @Two-Hearts in #1120
- backport: timestamping cert chain revocation check during signing from main to release-1.3 branch by @Two-Hearts in #1121
Full Changelog : v1.3.0-rc.1...v1.3.0-rc.2

Assets 9 Loading

Uh oh!

There was an error while loading. Please reload this page .

🎉 1 JeyJeyGao reacted with hooray emoji All reactions
- 🎉 1 reaction
1 person reacted
Open source →
v1.2.029 Aug 2024
Release notes
Vote PASSED [+4 -0]: #1022

Notation v1.2.0

Notation v1.2.0 is an implementation of the Notary Project Specifications v1.1.0.

Key features
- Support OCI image-spec v1.1.0 and distribution-spec v1.1.0
  - Introduced new flag --force-referrers-tag (default to true) to the notation sign command, which allows users opt to the referrers tag schema instead of the referrers API.
  - The notation verify / list / inspect commands always attempt the referrers API first, automatically falling back to the referrers tag schema if the referrers API is not supported by the registry.
- Support for RFC 3161 compliant Timestamping
  - Introduced two new flags --timestamp-url and --timestamp-root-cert in notation sign command for signing with timestamping, see the notation sign CLI spec for more details.
  - Support a new trust store type tsa in notation certificate command.
  - Support RFC 3161 timestamp verification in the notation verify command with updated trust policy, see the notation verify CLI spec for more details.
  - Support RFC 3161 timestamp in notation inspect command's output.
- Added support for armv7 binary release.
Other changes
- Upgraded to Golang v1.23
Deprecation
- The experimental flag --allow-referrers-api is deprecated as notation follows distribution-spec v1.1.0.
What's changed since v1.2.0-rc.1
- bump: release v1.2.0-rc.1 (#1017)
- bump: bump up for v1.2.0 stable release (#1021)
Full Changelog: v1.2.0-rc.1...v1.2.0
Open source →
Additional notes
v1.2.0

Compare

Choose a tag to compare

Open source →
v1.2.0-rc.120 Aug 2024pre-release
Release notes
Vote PASSED [+4 -0]: #1017

Changes
1. Added support for armv7 binary release.
2. Updated notation inspect command with RFC 3161 timestamp in the output.
What's Changed
- build: add support for armv7 binary release by @lmussier in #956
- chore: move tsa url print out behind -v flag by @Two-Hearts in #996
- feat: update inspect command with timestamping by @Two-Hearts in #998
- build(deps): Bump golang.org/x/net from 0.23.0 to 0.27.0 by @dependabot in #999
- build(deps): Bump ossf/scorecard-action from 2.3.3 to 2.4.0 by @dependabot in #1000
- build(deps): Bump github/codeql-action from 3.25.13 to 3.25.15 by @dependabot in #1001
- refactor: update verifier by @Two-Hearts in #1002
- refactor!: remove blob sign/verify related contents by @Two-Hearts in #1011
- bump: bump up dependencies for release-1.2 by @Two-Hearts in #1014
New Contributors
- @lmussier made their first contribution in #956
Full Changelog: v1.2.0-beta.1...v1.2.0-rc.1
Open source →
Additional notes
- bump: release v1.2.0-rc.1 ( #1017 )
- bump: bump up for v1.2.0 stable release ( #1021 )
Full Changelog : v1.2.0-rc.1...v1.2.0

Assets 9 Loading

Uh oh!

There was an error while loading. Please reload this page .

🎉 1 iamsamirzon reacted with hooray emoji All reactions
- 🎉 1 reaction
1 person reacted
Open source →
v1.2.0-beta.1.0.20250221102902-5dd2ccf1af9621 Feb 2025pre-release
Nothing published for this version
v1.2.0-beta.1.0.20250116013527-61bef0fb7dc816 Jan 2025pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241231012620-cb10be5eb64931 Dec 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241206004331-1cc2f10c12c06 Dec 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241127145718-1a4ed5f5206a27 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241114191213-b2d5facf72ae14 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241113025539-b7d829f2db0f13 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241112082218-79d0a7c62efb12 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241112011011-72b87d9f2f1f12 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241111175019-6745543d69cb11 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241105065823-83c6c8919c455 Nov 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241014235946-fa81e791276f14 Oct 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241008165426-6f2860aada3b8 Oct 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20241008030352-0d9ceacde56c8 Oct 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20240906205721-1af69fc9e1846 Sept 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20240827050339-83ade999094b27 Aug 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20240820001829-b806f58f501620 Aug 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20240818172456-b683029733bd18 Aug 2024pre-release
Nothing published for this version
v1.2.0-beta.1.0.20240724175707-9c15eec4d2bb24 Jul 2024pre-release
Nothing published for this version
v1.2.0-beta.123 Jul 2024pre-release
Release notes
Vote PASSED [+4 -0]: #995

New Features
- Support for RFC 3161 compliant Timestamping
  - Introduce two new flags --timestamp-url and --timestamp-root-cert in notation sign command for signing with timestamping, see the notation sign CLI spec for more details.
  - Support a new trust store type tsa in notation certificate command.
  - Support RFC 3161 timestamp verification in the notation verify command with updated trust policy, see the notation verify CLI spec for more details.
Detailed Commits
- 787665f Merge pull request #995 from Two-Hearts/release
- 00af3ce bump: release v1.2.0-beta.1
- bbeb75d bump: bump up dependencies for v1.2.0-beta.1 (#994)
- e604a4f build(deps): Bump golang.org/x/net from 0.22.0 to 0.23.0 (#993)
- a034721 feat: Timestamp (#978)
- 26c0b36 build(deps): Bump github/codeql-action from 3.25.11 to 3.25.13 (#991)
- d8c77d1 build(deps): Bump actions/setup-go from 5.0.1 to 5.0.2 (#986)
- cab4fef docs: update RELEASE_CHECKLIST.md (#713)
- c6636ca build(deps): Bump github/codeql-action from 3.25.8 to 3.25.11 (#980)
- e9ed3d5 build(deps): Bump actions/add-to-project from 1.0.1 to 1.0.2 (#981)
- 214b0b2 build(deps): Bump golang.org/x/term from 0.21.0 to 0.22.0 (#982)
- 2de7110 build(deps): Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#983)
- acf54be build(deps): Bump codecov/codecov-action from 4.4.1 to 4.5.0 (#972)
- ae6ff01 build(deps): Bump actions/checkout from 4.1.6 to 4.1.7 (#970)
- 944c661 build(deps): Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#969)
- 626002a Merge pull request #967 from JeyJeyGao/vote/v1.2.0-alpha.1
Full Changelog: v1.2.0-alpha.1...v1.2.0-beta.1
Open source →
Additional notes
v1.2.0-beta.1 Pre-release

Pre-release

Compare

Choose a tag to compare

Open source →
v1.2.0-alpha.1.0.20240723021626-787665fca2c723 Jul 2024pre-release
Nothing published for this version
v1.2.0-alpha.1.0.20240612085210-626002abac5a12 Jun 2024pre-release
Nothing published for this version
v1.2.0-alpha.112 Jun 2024pre-release
Nothing published for this version
v1.1.29 Oct 2024
Release notes
Bug Fixes
- Fixed debug log to show correct notation-go signingAgent.
- Removed the blob signing related documents as they were not implemented yet.
Other Changes
- Updated dependencies with highlights below
  - Update to Golang v1.23
  - Update to notation-go v1.1.2
What's Changed since v1.1.1
- bump: bump up and vote notation v1.1.1 by @JeyJeyGao in #963
- fix(docs): remove blob signing docs for release-1.1 branch by @JeyJeyGao in #1013
- bump: update notation-go v1.1.2 by @JeyJeyGao in #1041
- bump: dependencies for release-1.1 branch by @JeyJeyGao in #1057
Full Changelog: v1.1.1...v1.1.2
Open source →
Additional notes
v1.1.2

Compare

Choose a tag to compare

Open source →
v1.1.112 Jun 2024
Release notes
- bump: bump up and vote notation v1.1.1 by @JeyJeyGao in #963
- fix(docs): remove blob signing docs for release-1.1 branch by @JeyJeyGao in #1013
- bump: update notation-go v1.1.2 by @JeyJeyGao in #1041
- bump: dependencies for release-1.1 branch by @JeyJeyGao in #1057
Full Changelog : v1.1.1...v1.1.2

Contributors
JeyJeyGao

Assets 8 Loading

Uh oh!

There was an error while loading. Please reload this page .

All reactions
Open source →
v1.1.1-0.20240522171217-3c218d950aae22 May 2024pre-release
Nothing published for this version
v1.1.1-0.20240418165255-fd3f69f6a6d018 Apr 2024pre-release
Nothing published for this version
v1.1.1-0.20240402162011-fa0f5baba9352 Apr 2024pre-release
Nothing published for this version
v1.1.1-0.20240318175438-1c08c65770b318 Mar 2024pre-release
Nothing published for this version
v1.1.1-0.20240312033957-6216aaad069f12 Mar 2024pre-release
Nothing published for this version
v1.1.1-0.20240308195100-ba28208524cc8 Mar 2024pre-release
Nothing published for this version
v1.1.1-0.20240306174846-6fe29f46ec936 Mar 2024pre-release
Nothing published for this version
v1.1.1-0.20240229064606-c7809456f27529 Feb 2024pre-release
Nothing published for this version
v1.1.1-0.20240222093233-38df9059e28e22 Feb 2024pre-release
Nothing published for this version
v1.1.1-0.20240206190008-c96d7e8ce6236 Feb 2024pre-release
Nothing published for this version
v1.1.1-0.20240202023342-9d9c13f980732 Feb 2024pre-release
Nothing published for this version
v1.1.1-0.20240130170429-afa9e25b008730 Jan 2024pre-release
Nothing published for this version
v1.1.1-0.20240125035922-31c3fe10cd4725 Jan 2024pre-release
Nothing published for this version
v1.1.025 Jan 2024
Nothing published for this version
v1.0.16 Nov 2023
Nothing published for this version
v1.0.1-0.20240116062535-ee723943a24f16 Jan 2024pre-release
Nothing published for this version
v1.0.1-0.20240115154751-3a18af48009115 Jan 2024pre-release
Nothing published for this version
v1.0.1-0.20240104072700-e8a112b31b284 Jan 2024pre-release
Nothing published for this version
v1.0.1-0.20231104011449-2c8e22b6117d4 Nov 2023pre-release
Nothing published for this version
v1.0.1-0.20230825053104-87abc2d2934525 Aug 2023pre-release
Nothing published for this version
v1.0.1-0.20230821054409-842c1f678c4221 Aug 2023pre-release
Nothing published for this version
v1.0.08 Aug 2023
Nothing published for this version
v1.0.0-rc.7.0.20230705083623-a685f69a931f5 Jul 2023pre-release
Nothing published for this version
v1.0.0-rc.7.0.20230606065410-651412a0cd986 Jun 2023pre-release
Nothing published for this version
v1.0.0-rc.7.0.20230605165205-86f01b7982645 Jun 2023pre-release
Nothing published for this version
v1.0.0-rc.7.0.20230605004138-e090aa9b29ed5 Jun 2023pre-release
Nothing published for this version
v1.0.0-rc.726 May 2023pre-release
Nothing published for this version

github.com/notaryproject/notation

Release timeline

Releases

Update

What's Changed since v1.3.1

New Contributors

Choose a tag to compare

Bug Fix

What's changed since v1.3.0

Notation v1.3.0

Key features

Other changes

What's Changed since v1.3.0-rc.2

Uh oh!

Changes

What's changed since v1.3.0-rc.1

Uh oh!

New Features

Changelog

Uh oh!

Notation v1.2.0

Key features

Other changes

Deprecation

What's changed since v1.2.0-rc.1

Choose a tag to compare

Changes

What's Changed

New Contributors

Uh oh!

New Features

Detailed Commits

Choose a tag to compare

Bug Fixes

Other Changes

What's Changed since v1.1.1

Choose a tag to compare

Contributors

Uh oh!