PackageTrack

Go modules · #1954

github.com/sigstore/fulcio

v1.8.8sigstore/fulcio ↗

Release timeline

1070 releases since 2021
202120222023202420252026

Releases

  1. v1.8.415 Dec 2025
    Release notes

    Changelog

    • f5bfa34 build(deps): bump github.com/tink-crypto/tink-go/v2 from 2.5.0 to 2.6.0 (#2246)
    • 0039c98 build(deps): bump goa.design/goa/v3 from 3.22.6 to 3.23.4 (#2245)
    • 3a432f0 build(deps): bump go.step.sm/crypto from 0.74.0 to 0.75.0 (#2238)
    • f3aba4a build(deps): bump the all group across 1 directory with 4 updates (#2247)
    • e66a4c6 build(deps): bump the all group with 8 updates (#2244)
    • a846db6 build(deps): bump golang from 20b91ed to a22b2e6 (#2243)
    • 5a012f5 update Run Invocation URI for circleci (#2242)
    • 59dde0a update builder to use go1.25.5 (#2235)
    • 1a6870c build(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#2236)

    Thanks for all contributors!

    Open source →
    Additional notes2 sources agree

    Same changelog as v1.8.3, with a few dependency bumps to resolve a breaking API change

    Open source →
  2. v1.8.4-0.20251215183452-f5bfa34740fc15 Dec 2025pre-release

    Nothing published for this version

  3. v1.8.4-0.20251215171121-f3aba4a9415015 Dec 2025pre-release

    Nothing published for this version

  4. v1.8.4-0.20251215074207-a846db6473f415 Dec 2025pre-release

    Nothing published for this version

  5. v1.8.4-0.20251211005813-5a012f5e4f9611 Dec 2025pre-release

    Nothing published for this version

  6. v1.8.4-0.20251208120949-59dde0af71db8 Dec 2025pre-release

    Nothing published for this version

  7. v1.8.34 Dec 2025
    Release notes

    Changelog

    v1.8.3 fixes GHSA-f83f-xpx7-ffpw

    • 3622f6e update changelog for v1.8.3 release (#2234)
    • 765a0e5 Merge commit from fork (#2233)
    • 90f8520 build(deps): bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 (#2225)
    • d885841 build(deps): bump the all group across 1 directory with 6 updates (#2232)
    • a387888 build(deps): bump the all group with 4 updates (#2226)
    • 7b0c1a1 build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#2227)
    • f0a0d05 build(deps): bump golang from e68f6a0 to 6981837 (#2222)
    • 4ed0ea1 Switch docker env from ct_server to TesseraCT (#2210)
    • e902cf8 feat: Add support for skipping email_verified claim requirement per issuer (#2220)
    • c0fc26c Add basic E2E tests (#2230)
    • a4ee860 build(deps): bump sigstore/scaffolding/trillian_log_signer (#2228)
    • 51d916e build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#2216)
    • bd3a515 add meta-issuer circleci block (#2215)
    • c4d4789 add circleci info to fulcio (#2192)

    Thanks for all contributors!

    Open source →
    Additional notes2 sources agree

    Vulnerability Fixes

    • https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw; prevents OOM condition due to malformed OIDC token (#2233)

    Features

    • feat: Add support for skipping email_verified claim requirement per issuer (#2220)
    • add meta-issuer circleci block (#2215)
    • add circleci info to fulcio (#2192)

    Testing

    • Add basic E2E tests (#2230)
    Open source →
  8. v1.8.3-0.20251204170650-3622f6e62cf74 Dec 2025pre-release

    Nothing published for this version

  9. v1.8.3-0.20251204170031-765a0e57608b4 Dec 2025pre-release

    Nothing published for this version

  10. v1.8.3-0.20251204161559-90f8520e17544 Dec 2025pre-release

    Nothing published for this version

  11. v1.8.3-0.20251204155228-a387888860bf4 Dec 2025pre-release

    Nothing published for this version

  12. v1.8.3-0.20251204120653-7b0c1a11da324 Dec 2025pre-release

    Nothing published for this version

  13. v1.8.3-0.20251201181218-4ed0ea1b43f91 Dec 2025pre-release

    Nothing published for this version

  14. v1.8.3-0.20251130231243-e902cf880ff530 Nov 2025pre-release

    Nothing published for this version

  15. v1.8.3-0.20251130182452-c0fc26c2c1d830 Nov 2025pre-release

    Nothing published for this version

  16. v1.8.3-0.20251124034025-a4ee8608f03424 Nov 2025pre-release

    Nothing published for this version

  17. v1.8.3-0.20251120114510-51d916e1672720 Nov 2025pre-release

    Nothing published for this version

  18. v1.8.3-0.20251119234123-bd3a515d86c019 Nov 2025pre-release

    Nothing published for this version

  19. v1.8.3-0.20251119184201-c4d47896482f19 Nov 2025pre-release

    Nothing published for this version

  20. v1.8.219 Nov 2025
    Release notes

    v1.8.2

    This release also changes the format of the binary and container signature, which is now a
    Sigstore bundle. To verify a release, use the
    latest Cosign 3.x, verifying with
    cosign verify-blob --bundle <artifact>-keyless.sigstore.json <artifact>.

    Testing

    • make email address in test cases rfc822 conformant (#2205)
    Open source →
    Additional notes2 sources agree

    Testing

    • make email address in test cases rfc822 conformant (#2205)
    Open source →
  21. v1.8.2-0.20251117125111-33a0384e963d17 Nov 2025pre-release

    Nothing published for this version

  22. v1.8.2-0.20251116221141-f8ecdcb61da116 Nov 2025pre-release

    Nothing published for this version

  23. v1.8.2-0.20251116173853-e91dc16801b416 Nov 2025pre-release

    Nothing published for this version

  24. v1.8.2-0.20251114234702-bb7f782bc45514 Nov 2025pre-release

    Nothing published for this version

  25. v1.8.2-0.20251114203550-44da3570202114 Nov 2025pre-release

    Nothing published for this version

  26. v1.8.2-0.20251114195745-918c5c6de78514 Nov 2025pre-release

    Nothing published for this version

  27. v1.8.2-0.20251114171513-52d48accc57e14 Nov 2025pre-release

    Nothing published for this version

  28. v1.8.2-0.20251114151353-4266f8423c2d14 Nov 2025pre-release

    Nothing published for this version

  29. v1.8.2-0.20251113231014-aa935e1d52f613 Nov 2025pre-release

    Nothing published for this version

  30. v1.8.2-0.20251110161743-f1ecac58152510 Nov 2025pre-release

    Nothing published for this version

  31. v1.8.2-0.20251110084120-f6174abe3ff810 Nov 2025pre-release

    Nothing published for this version

  32. v1.8.17 Nov 2025
    Release notes

    v1.8.1

    Same as v1.8.0, but with a fix for the CI build pipeline.

    v1.8.0

    Bug Fixes

    • fix: K8s API does not accept unauthorized requests (#2111)
    • fix: vault for enterprise expects only the key name (#2117)
    • fix(config): respect cacert on oidc-issuers (#2098)
    • Register /healthz endpoint when listening on duplex http/grpc port (#2046)

    Features

    • feat: adds cert loading and key-match validation. (#2173)
    • expose gcp kms retry and timeout options (#2132)
    • server: Use warning log level for client errors (#2147)
    • Add workflow to periodically validate OIDC issuers (#2188)
    • Add Chainguard issuer (#2078)
    • Add logging for template error (#2194)
    • Add extension for deployment environment (#2190)

    Removal

    • Remove cmd/create_tink_keyset (#2096)

    Full Changelog: v1.7.1...v1.8.1

    Open source →
    Additional notes2 sources agree

    Same as v1.8.0, but with a fix for the CI build pipeline.

    Open source →
  33. v1.8.06 Nov 2025
    Release notes2 sources agree

    Bug Fixes

    • fix: K8s API does not accept unauthorized requests (#2111)
    • fix: vault for enterprise expects only the key name (#2117)
    • fix(config): respect cacert on oidc-issuers (#2098)
    • Register /healthz endpoint when listening on duplex http/grpc port (#2046)

    Features

    • feat: adds cert loading and key-match validation. (#2173)
    • expose gcp kms retry and timeout options (#2132)
    • server: Use warning log level for client errors (#2147)
    • Add workflow to periodically validate OIDC issuers (#2188)
    • Add Chainguard issuer (#2078)
    • Add logging for template error (#2194)
    • Add extension for deployment environment (#2190)

    Removal

    • Remove cmd/create_tink_keyset (#2096)
    Open source →
  34. v1.7.2-0.20251104192733-4a86d8bf45974 Nov 2025pre-release

    Nothing published for this version

  35. v1.7.2-0.20251103232750-8d470ad45ae83 Nov 2025pre-release

    Nothing published for this version

  36. v1.7.2-0.20251030131356-8c9fc22271d330 Oct 2025pre-release

    Nothing published for this version

  37. v1.7.2-0.20251020124720-68116d19450a20 Oct 2025pre-release

    Nothing published for this version

  38. v1.7.2-0.20251020080115-6e1f191f02c620 Oct 2025pre-release

    Nothing published for this version

  39. v1.7.2-0.20251015044445-103bfb9c154d15 Oct 2025pre-release

    Nothing published for this version

  40. v1.7.2-0.20251006065933-7d8db169279c6 Oct 2025pre-release

    Nothing published for this version

  41. v1.7.2-0.20250929085845-27167f860d5829 Sept 2025pre-release

    Nothing published for this version

  42. v1.7.2-0.20250922104804-1b7c8743c7f322 Sept 2025pre-release

    Nothing published for this version

  43. v1.7.2-0.20250922072427-b5426916af2222 Sept 2025pre-release

    Nothing published for this version

  44. v1.7.2-0.20250916150437-b706df51996a16 Sept 2025pre-release

    Nothing published for this version

  45. v1.7.2-0.20250916105122-e29c0037839116 Sept 2025pre-release

    Nothing published for this version

  46. v1.7.2-0.20250915192211-7fa6ff23d0e015 Sept 2025pre-release

    Nothing published for this version

  47. v1.7.2-0.20250910114625-bbde1a46491210 Sept 2025pre-release

    Nothing published for this version

  48. v1.7.2-0.20250908072735-18ebcfab32598 Sept 2025pre-release

    Nothing published for this version

  49. v1.7.2-0.20250901081949-8e3fff2b37f51 Sept 2025pre-release

    Nothing published for this version

  50. v1.7.2-0.20250901052756-4455b97d697c1 Sept 2025pre-release

    Nothing published for this version

  51. v1.7.2-0.20250825083311-0af081865a1225 Aug 2025pre-release

    Nothing published for this version

  52. v1.7.2-0.20250821152149-dfb6b83da3a221 Aug 2025pre-release

    Nothing published for this version

  53. v1.7.2-0.20250818165123-89f7f6b35c4e18 Aug 2025pre-release

    Nothing published for this version

  54. v1.7.2-0.20250818054437-8160bb5495ca18 Aug 2025pre-release

    Nothing published for this version

  55. v1.7.2-0.20250811063119-dd1fe1e77f8c11 Aug 2025pre-release

    Nothing published for this version

  56. v1.7.2-0.20250811050605-22f15b6f792111 Aug 2025pre-release

    Nothing published for this version

  57. v1.7.2-0.20250811042106-b4b94b7527b311 Aug 2025pre-release

    Nothing published for this version

  58. v1.7.2-0.20250804084259-5adfa90fca474 Aug 2025pre-release

    Nothing published for this version

  59. v1.7.2-0.20250804064939-8d864231d5bf4 Aug 2025pre-release

    Nothing published for this version

  60. v1.7.2-0.20250731161204-932057421ae231 Jul 2025pre-release

    Nothing published for this version