Last release today
26 Aug 2026
Ships fairly regularly
a new release about every 2 weeks
Nearly every release is documented
notes for 44 of 45 stable releases
Nothing withdrawn
no release was ever pulled
5 years old
1070 releases · first in 2021
Release timeline
1070 releases since 2021Releases
- v0.5.4-0.20220826090531-1ec7a668fa3c26 Aug 2022pre-release
Nothing published for this version
- v0.5.4-0.20220823075038-35e443aed39023 Aug 2022pre-release
Nothing published for this version
- v0.5.321 Aug 2022
Release notes2 sources agree
Open source →Bug Fixes
- Clean up unix socket (https://github.com/sigstore/fulcio/pull/739)
- address Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (https://github.com/sigstore/fulcio/pull/735)
- fix example to explicitly set port for gRPC call (https://github.com/sigstore/fulcio/pull/732)
Documentation
- Create certificate specification (https://github.com/sigstore/fulcio/pull/703)
- Add documentation for SCT formats (https://github.com/sigstore/fulcio/pull/718)
- Update certificate issuance documentation (https://github.com/sigstore/fulcio/pull/702)
Miscellaneous
- Bump actions/dependency-review-action from 2.0.4 to 2.1.0 (https://github.com/sigstore/fulcio/pull/744)
- Update scorecard-action to v2:alpha (https://github.com/sigstore/fulcio/pull/746)
- update builder and cosign images (https://github.com/sigstore/fulcio/pull/743)
- Bump google.golang.org/api from 0.92.0 to 0.93.0 (https://github.com/sigstore/fulcio/pull/741)
- Bump go.step.sm/crypto from 0.17.1 to 0.17.2 (https://github.com/sigstore/fulcio/pull/742)
- update github.com/google/tink/go to 1.7.0 and fix deprecation (https://github.com/sigstore/fulcio/pull/736)
- Bump go.step.sm/crypto from 0.17.0 to 0.17.1 (https://github.com/sigstore/fulcio/pull/737)
- Bump google.golang.org/api from 0.91.0 to 0.92.0 (https://github.com/sigstore/fulcio/pull/733)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/731)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/722)
- Bump go.uber.org/zap from 1.21.0 to 1.22.0 (https://github.com/sigstore/fulcio/pull/730)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.2 in /hack/tools (https://github.com/sigstore/fulcio/pull/726)
- install protobuff 3.20.1 (https://github.com/sigstore/fulcio/pull/728)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.1 to 2.11.2 (https://github.com/sigstore/fulcio/pull/724)
- Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (https://github.com/sigstore/fulcio/pull/725)
- Bump github/codeql-action from 2.1.17 to 2.1.18 (https://github.com/sigstore/fulcio/pull/721)
- Bump google.golang.org/api from 0.90.0 to 0.91.0 (https://github.com/sigstore/fulcio/pull/720)
- Bump golang from 1.18.4 to 1.18.5 (https://github.com/sigstore/fulcio/pull/717)
- Bump golang from
6e10f44to8a62670(https://github.com/sigstore/fulcio/pull/713) - Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.11.0 to 2.11.1 (https://github.com/sigstore/fulcio/pull/714)
- Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 (https://github.com/sigstore/fulcio/pull/710)
- Bump github/codeql-action from 2.1.16 to 2.1.17 (https://github.com/sigstore/fulcio/pull/709)
- Bump google.golang.org/api from 0.89.0 to 0.90.0 (https://github.com/sigstore/fulcio/pull/711)
- Bump golang from
f3d3d69to6e10f44(https://github.com/sigstore/fulcio/pull/708) - Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 in /hack/tools (https://github.com/sigstore/fulcio/pull/712)
- Enable Scorecard badge (https://github.com/sigstore/fulcio/pull/706)
- Bump golang from
9349ed8tof3d3d69(https://github.com/sigstore/fulcio/pull/707) - Bump imjasonh/setup-ko from 0.4 to 0.5 (https://github.com/sigstore/fulcio/pull/704)
- Bump google.golang.org/api from 0.88.0 to 0.89.0 (https://github.com/sigstore/fulcio/pull/705)
Contributors
- Azeem Shaikh (@azeemshaikh38)
- Bob Callaway (@bobcallaway)
- Carlos Tadeu Panato Junior (@cpanato)
- Hayden Blauzvern (@haydentherapper)
- Paul Thomson (@pauldthomson)
- v0.5.3-0.20220819071600-d7f6bbea4fe519 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220818161100-db44841e50c318 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220817070246-59ed1dd73f3b17 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220812155731-29c2b20a9cb512 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220811073001-15cff3effa4111 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220808140732-141aa44d194e8 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220805012333-dcdf60c5bd325 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220803144650-ab2538a129ff3 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220802151325-1504b5add7222 Aug 2022pre-release
Nothing published for this version
- v0.5.3-0.20220729080517-4b5fdf01cb8629 Jul 2022pre-release
Nothing published for this version
- v0.5.3-0.20220727063816-b5000354e75227 Jul 2022pre-release
Nothing published for this version
- v0.5.225 Jul 2022
Release notes2 sources agree
Open source →Bug Fixes
- Ensure GetTrustBundle returns array of strings instead of a single string with newlines (https://github.com/sigstore/fulcio/pull/690)
Miscellaneous
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 in /hack/tools (https://github.com/sigstore/fulcio/pull/696)
- Bump google.golang.org/api from 0.87.0 to 0.88.0 (https://github.com/sigstore/fulcio/pull/694)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.3 to 2.11.0 (https://github.com/sigstore/fulcio/pull/https://github.com/sigstore/fulcio/pull/695)
- bump cosign to v1.9.0 (https://github.com/sigstore/fulcio/pull/692)
- Bump go.step.sm/crypto from 0.16.2 to 0.17.0 (https://github.com/sigstore/fulcio/pull/688)
- Bump actions/dependency-review-action from 2.0.2 to 2.0.4 (https://github.com/sigstore/fulcio/pull/686)
- Bump github.com/prometheus/common from 0.36.0 to 0.37.0 (https://github.com/sigstore/fulcio/pull/687)
- Bump golang from 1.18.3 to 1.18.4 (https://github.com/sigstore/fulcio/pull/683)
- Bump github/codeql-action from 2.1.15 to 2.1.16 (https://github.com/sigstore/fulcio/pull/684)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/https://github.com/sigstore/fulcio/pull/85)
- Bump google.golang.org/grpc from 1.47.0 to 1.48.0 (https://github.com/sigstore/fulcio/pull/682)
- Bump google.golang.org/api from 0.86.0 to 0.87.0 (https://github.com/sigstore/fulcio/pull/680)
- Bump cloud.google.com/go/security from 1.4.0 to 1.4.1 (https://github.com/sigstore/fulcio/pull/681)
- Bump github.com/prometheus/common from 0.35.0 to 0.36.0 (https://github.com/sigstore/fulcio/pull/678)
- Bump actions/setup-go from 3.2.0 to 3.2.1 (https://github.com/sigstore/fulcio/pull/677)
Contributors
- Bob Callaway (@bobcallaway)
- v0.5.2-0.20220720172116-91dddddd64ba20 Jul 2022pre-release
Nothing published for this version
- v0.5.2-0.20220715073139-8010171c9af615 Jul 2022pre-release
Nothing published for this version
- v0.5.2-0.20220712031608-700a3bbc18c312 Jul 2022pre-release
Nothing published for this version
- v0.5.18 Jul 2022
Release notes2 sources agree
Open source →Enhancements
- pipe all log messages to stdout for dev logger (https://github.com/sigstore/fulcio/pull/673)
- Add CORS support to HTTP endpoint (https://github.com/sigstore/fulcio/pull/670)
- generate OpenAPI documents from protobuf (https://github.com/sigstore/fulcio/pull/666)
- Add Tink signing backend (https://github.com/sigstore/fulcio/pull/645)
- Refactor in-memory signing CAs to use a single implementation (https://github.com/sigstore/fulcio/pull/644)
- change grpc response logger to debug level instead of error (https://github.com/sigstore/fulcio/pull/648)
- Add interface for certs/signer fetching to remove mutex (https://github.com/sigstore/fulcio/pull/643)
Miscellaneous
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/674)
- Update sigstore to pull in fixes (https://github.com/sigstore/fulcio/pull/671)
- Bump github.com/spiffe/go-spiffe/v2 from 2.1.0 to 2.1.1 (https://github.com/sigstore/fulcio/pull/668)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/669)
- add dependabot hack to monitor for new protoc releases (https://github.com/sigstore/fulcio/pull/667)
- Bump github/codeql-action from 2.1.14 to 2.1.15 (https://github.com/sigstore/fulcio/pull/663)
- Bump google.golang.org/api from 0.85.0 to 0.86.0 (https://github.com/sigstore/fulcio/pull/664)
- Bump ossf/scorecard-action from 1.1.1 to 1.1.2 (https://github.com/sigstore/fulcio/pull/662)
- Bump golang from
957001etoa452d62(https://github.com/sigstore/fulcio/pull/661) - Bump golang from
1c3d22fto957001e(https://github.com/sigstore/fulcio/pull/660) - Bump github/codeql-action from 2.1.13 to 2.1.14 (https://github.com/sigstore/fulcio/pull/659)
- Bump github/codeql-action from 2.1.12 to 2.1.13 (https://github.com/sigstore/fulcio/pull/656)
- Bump google.golang.org/api from 0.84.0 to 0.85.0 (https://github.com/sigstore/fulcio/pull/657)
- Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 (https://github.com/sigstore/fulcio/pull/658)
- Bump github.com/prometheus/common from 0.34.0 to 0.35.0 (https://github.com/sigstore/fulcio/pull/655)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/653)
- Bump actions/dependency-review-action from 2.0.1 to 2.0.2 (https://github.com/sigstore/fulcio/pull/652)
- Bump golang from
b203dc5to1c3d22f(https://github.com/sigstore/fulcio/pull/649) - Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/651)
- Bump actions/dependency-review-action from 1.0.2 to 2.0.1 (https://github.com/sigstore/fulcio/pull/650)
- Bump google.golang.org/api from 0.83.0 to 0.84.0 (https://github.com/sigstore/fulcio/pull/647)
- Bump google.golang.org/api from 0.82.0 to 0.83.0 (https://github.com/sigstore/fulcio/pull/642)
Contributors
- Bob Callaway (@bobcallaway)
- Hayden Blauzvern (@haydentherapper)
- v0.5.1-0.20220701100720-5a9480e371e71 Jul 2022pre-release
Nothing published for this version
- v0.5.1-0.20220630055527-ee8e8f9f5e0230 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220629171616-559f9037969429 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220627074607-d5b1c80b968527 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220624071000-2fd57621150224 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220622072733-45222257b97122 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220617075632-003e6cb7c2b817 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220615160614-ce8d2fb8473515 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220615061317-fcd895c2c4b615 Jun 2022pre-release
Nothing published for this version
- v0.5.1-0.20220608071109-30dba00dd6868 Jun 2022pre-release
Nothing published for this version
- v0.5.06 Jun 2022
Release notes2 sources agree
Open source →Enhancements
- code refactor (https://github.com/sigstore/fulcio/pull/626 / https://github.com/sigstore/fulcio/pull/620 / https://github.com/sigstore/fulcio/pull/625 / https://github.com/sigstore/fulcio/pull/619 / https://github.com/sigstore/fulcio/pull/604 / https://github.com/sigstore/fulcio/pull/599 / https://github.com/sigstore/fulcio/pull/590 / https://github.com/sigstore/fulcio/pull/580 / https://github.com/sigstore/fulcio/pull/561 / https://github.com/sigstore/fulcio/pull/558)
- Add API for fetching Fulcio configuration (https://github.com/sigstore/fulcio/pull/608)
- Split pkg/server from pkg/api (https://github.com/sigstore/fulcio/pull/616)
- Restict issuer claim mapping to email issuers (https://github.com/sigstore/fulcio/pull/606)
- Validate SPIFFE IDs and trust domains via library (https://github.com/sigstore/fulcio/pull/592)
- Use principal in CA abstraction (https://github.com/sigstore/fulcio/pull/570)
- googleca: Don't log all identities (https://github.com/sigstore/fulcio/pull/577)
- Small
carefactor (https://github.com/sigstore/fulcio/pull/569) - Remove unused Subject field from code signing certificate (https://github.com/sigstore/fulcio/pull/568)
- Add client options testing (https://github.com/sigstore/fulcio/pull/562)
- Add timeout to OIDC discovery (https://github.com/sigstore/fulcio/pull/560)
Bug Fixes
- spiffe: correct trust domain checking (https://github.com/sigstore/fulcio/pull/588)
- fix the digest image (https://github.com/sigstore/fulcio/pull/555)
Documentation
- identity: improve the documentation for Principal.Name() (https://github.com/sigstore/fulcio/pull/579)
Miscellaneous
- Use GenerateSerialNumber from cryptoutils (https://github.com/sigstore/fulcio/pull/571)
- challenges: remove ParseCSR (https://github.com/sigstore/fulcio/pull/578)
- Bump github/codeql-action from 2.1.11 to 2.1.12 (https://github.com/sigstore/fulcio/pull/629)
- Bump ossf/scorecard-action from 1.1.0 to 1.1.1 (https://github.com/sigstore/fulcio/pull/630)
- update cross-builder image to use go1.18.3 (https://github.com/sigstore/fulcio/pull/635)
- typo: Github -> GitHub (https://github.com/sigstore/fulcio/pull/636)
- Bump google.golang.org/api from 0.81.0 to 0.82.0 (https://github.com/sigstore/fulcio/pull/631)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.2 to 2.10.3 (https://github.com/sigstore/fulcio/pull/632)
- Bump golang from 1.18.2 to 1.18.3 (https://github.com/sigstore/fulcio/pull/628)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 in /hack/tools (https://github.com/sigstore/fulcio/pull/633)
- Bump google.golang.org/grpc from 1.46.2 to 1.47.0 (https://github.com/sigstore/fulcio/pull/627)
- Bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 (https://github.com/sigstore/fulcio/pull/623)
- Bump actions/setup-go from 3.1.0 to 3.2.0 (https://github.com/sigstore/fulcio/pull/621)
- Bump github.com/spf13/viper from 1.11.0 to 1.12.0 (https://github.com/sigstore/fulcio/pull/622)
- Update sigstore to pull in go-tuf security fixes (https://github.com/sigstore/fulcio/pull/617)
- Bump ossf/scorecard-action from 1.0.4 to 1.1.0 (https://github.com/sigstore/fulcio/pull/618)
- Bump cloud.google.com/go/security from 1.3.0 to 1.4.0 (https://github.com/sigstore/fulcio/pull/613)
- Bump google.golang.org/api from 0.80.0 to 0.81.0 (https://github.com/sigstore/fulcio/pull/614)
- Bump actions/dependency-review-action from 1.0.1 to 1.0.2 (https://github.com/sigstore/fulcio/pull/609)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.1 to 2.10.2 (https://github.com/sigstore/fulcio/pull/610)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 in /hack/tools (https://github.com/sigstore/fulcio/pull/611)
- Add e2e test that tests IssuerClaim (https://github.com/sigstore/fulcio/pull/605)
- Bump actions/upload-artifact from 3.0.0 to 3.1.0 (https://github.com/sigstore/fulcio/pull/603)
- Added additional tests for CA implementations and OIDC (https://github.com/sigstore/fulcio/pull/602)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 in /hack/tools (https://github.com/sigstore/fulcio/pull/601)
- Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.0 to 2.10.1 (https://github.com/sigstore/fulcio/pull/600)
- cmd/app: remove dependency on deprecated github.com/pkg/errors (https://github.com/sigstore/fulcio/pull/598)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/597)
- Bump github/codeql-action from 2.1.10 to 2.1.11 (https://github.com/sigstore/fulcio/pull/593)
- Bump go.step.sm/crypto from 0.16.1 to 0.16.2 (https://github.com/sigstore/fulcio/pull/594)
- Bump google.golang.org/api from 0.79.0 to 0.80.0 (https://github.com/sigstore/fulcio/pull/595)
- Skip tests that require network access with HERMETIC=true (https://github.com/sigstore/fulcio/pull/587)
- Bump github.com/google/certificate-transparency-go from 1.1.2 to 1.1.3 (https://github.com/sigstore/fulcio/pull/586)
- Bump google.golang.org/grpc from 1.46.0 to 1.46.2 (https://github.com/sigstore/fulcio/pull/585)
- Bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 (https://github.com/sigstore/fulcio/pull/584)
- Bump actions/setup-go from 3.0.0 to 3.1.0 (https://github.com/sigstore/fulcio/pull/582)
- Add some tests for challenges (https://github.com/sigstore/fulcio/pull/583)
- Bump actions/dependency-review-action (https://github.com/sigstore/fulcio/pull/581)
- Bump github/codeql-action (https://github.com/sigstore/fulcio/pull/572)
- Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (https://github.com/sigstore/fulcio/pull/573)
- Update to use go1.18 (https://github.com/sigstore/fulcio/pull/576)
- Bump github.com/coreos/go-oidc/v3 from 3.1.0 to 3.2.0 (https://github.com/sigstore/fulcio/pull/574)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/575)
- update go to 1.17.10 (https://github.com/sigstore/fulcio/pull/567)
- Bump github/codeql-action from 2.1.9 to 2.1.10 (https://github.com/sigstore/fulcio/pull/565)
- Bump google.golang.org/api from 0.78.0 to 0.79.0 (https://github.com/sigstore/fulcio/pull/566)
- Bump github.com/googleapis/api-linter in /hack/tools (https://github.com/sigstore/fulcio/pull/557)
- Bump google.golang.org/api from 0.77.0 to 0.78.0 (https://github.com/sigstore/fulcio/pull/556)
- update go builder image and cosign image (https://github.com/sigstore/fulcio/pull/554)
- add changelog for 0.4.1 release (https://github.com/sigstore/fulcio/pull/553)
Contributors
- Carlos Tadeu Panato Junior (@cpanato)
- Hayden Blauzvern (@haydentherapper)
- Jason Hall (@imjasonh)
- Koichi Shiraishi (@zchee)
- Miloslav Trmač (@mtrmac)
- Nathan Smith (@nsmith5)
- v0.4.2-0.20220606200537-89540b4c94096 Jun 2022pre-release
Nothing published for this version
- v0.4.2-0.20220606043949-4451cba41b2b6 Jun 2022pre-release
Nothing published for this version
- v0.4.2-0.20220602163710-e022fcd4b1b52 Jun 2022pre-release
Nothing published for this version
- v0.4.2-0.20220601160918-509c789258791 Jun 2022pre-release
Nothing published for this version
- v0.4.2-0.20220531170627-fa41bd92794231 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220530055222-f0642f0cb5a130 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220527154710-f1a874dcc2fa27 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220526204213-7022d19bbe8926 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220526120039-6ac6b8c94c3e26 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220525163924-beca298db7a425 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220524082212-ed8f6492479d24 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220523224008-49429f0cb78523 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220523071420-6bf9d30b5c6623 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220520062554-985ba2045df320 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220519213706-00d7e666629419 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220519055924-ef606aa83d7519 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220518105910-2cd60e164da118 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220517235344-331874d90cd317 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220517194835-f334c15ea13217 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220517015859-c041c98bb0d917 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220516161500-fdaedd62f94b16 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220516124745-564aff911c6616 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220513041540-ffd323d4061c13 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220512233103-8e2f0e1815c112 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220512181743-8d307b598a7212 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220511235148-1ec90415f42211 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220511182321-b3d4f575494111 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220511131640-4ebe2873435211 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220510025247-3eec2b025af310 May 2022pre-release
Nothing published for this version
- v0.4.2-0.20220507112741-969e796c411d7 May 2022pre-release
Nothing published for this version