Go modules · #2450 by repository stars

github.com/chainloop-dev/chainloop

v1.114.0chainloop-dev/chainloop ↗New releases in your daily digest, changelog included.

Last release 2 days ago
02 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Most releases are documented
notes for 40 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
4 years old
1099 releases · first in 2023

Release timeline

1099 releases since 2023

2023202420252026

20232026

One column per quarter.

Releases

v1.108.6-0.20260908100248-1008f8216a9e8 Sept 2026pre-release
Nothing published for this version
v1.108.58 Sept 2026
View the attestation of this release
Chainloop Attestation

View the attestation of this release

Changelog

0a3859a fix(controlplane): cap the policy evaluations inlined by the workflow-run View API (#3408)
Open source →
Additional notes
v1.108.5

Compare

Choose a tag to compare

Open source →

v1.108.5-0.20260907200522-195701189daa7 Sept 2026pre-release

Nothing published for this version

v1.108.5-0.20260907075857-d88df06c810b7 Sept 2026pre-release

Nothing published for this version

v1.108.5-0.20260904230718-06f5466266374 Sept 2026pre-release

Nothing published for this version

v1.108.5-0.20260904222114-39ede64f2c264 Sept 2026pre-release

Nothing published for this version

v1.108.44 Sept 2026

Bump Helm Chart and Dagger Version => v1.108.3 by @github-actions[bot] in #3399

What's Changed

Bump Helm Chart and Dagger Version => v1.108.3 by @github-actions[bot] in #3399
fix(controlplane): enforce project RBAC on CAS download redirect lookups by @migmartri in #3400
fix(controlplane): enforce project-scoped RBAC on AttestationService/GetContract by @migmartri in #3401

Full Changelog: v1.108.3...v1.108.4

Open source →

Additional notes

v1.108.4

Compare

Choose a tag to compare

Open source →

v1.108.4-0.20260904163747-e2dde78e4de94 Sept 2026pre-release

Nothing published for this version

v1.108.4-0.20260904160027-d2c4dd0d62564 Sept 2026pre-release

Nothing published for this version

v1.108.34 Sept 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

4afdffb fix(cli): fail attestation verify when the bundle was never verified (#3398)

Open source →

Additional notes

v1.108.3

Compare

Choose a tag to compare

Open source →

v1.108.3-0.20260901230107-809a484920ff1 Sept 2026pre-release

Nothing published for this version

v1.108.3-0.20260901181345-8ad6aa6196421 Sept 2026pre-release

Nothing published for this version

v1.108.21 Sept 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

59535d5 docs: remove Go Report Card badge from README (#3394)

Open source →

Additional notes

v1.108.2

Compare

Choose a tag to compare

Open source →

v1.108.11 Sept 2026

59535d5 docs: remove Go Report Card badge from README

Changelog

59535d5 docs: remove Go Report Card badge from README (#3394)

Open source →

Additional notes

v1.108.1

Compare

Choose a tag to compare

Open source →

v1.108.1-0.20260831195716-25d45af1812f31 Aug 2026pre-release

Nothing published for this version

v1.108.031 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

What's Changed

feat(prinfo): promote prinfo to a public package by @jiparis in #3381
docs: update material types list in README by @migmartri in #3377
chore: remove secret scan workflow as it's now a managed workflow by @jiparis in #3384
chore(devel): enable CLI telemetry in the traced sandbox kit by @migmartri in #3382
feat(controlplane): accept a workflow template reference on workflow create by @migmartri in #3386
feat(devel): allow buf.build egress in the sandbox kit by @migmartri in #3385
feat(trace): open source the chainloop trace command by @jiparis in #3388

Full Changelog: v1.107.3...v1.108.0

Open source →

Additional notes

v1.108.0

Compare

Choose a tag to compare

Open source →

v1.107.4-0.20260828121836-294cad656b3328 Aug 2026pre-release

Nothing published for this version

v1.107.4-0.20260828101131-28d5c7d65a6f28 Aug 2026pre-release

Nothing published for this version

v1.107.326 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

What's Changed

Bump Helm Chart and Dagger Version => v1.107.2 by @github-actions[bot] in #3375
chore(deps): bump the go-minor-and-patch group across 1 directory with 22 updates by @dependabot[bot] in #3371
feat(materials): add CHAINLOOP_AI_SECURITY_CONTEXT material type by @matiasinsaurralde in #3376
fix(cli): evaluate policies against the material on disk in policy devel eval by @migmartri in #3379
fix(migrations): upgrade atlas image to v1.3.2 to clear Go CVEs by @migmartri in #3378

Full Changelog: v1.107.1...v1.107.3

Open source →

Additional notes

v1.107.3

Compare

Choose a tag to compare

Open source →

v1.107.226 Aug 2026

fddf405 feat(materials): add PITEST_XML material type

Changelog

fddf405 feat(materials): add PITEST_XML material type (#3374)

Open source →

Additional notes

v1.107.2

Compare

Choose a tag to compare

Open source →

v1.107.126 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

fddf405 feat(materials): add PITEST_XML material type (#3374)

Open source →

Additional notes

v1.107.1

Compare

Choose a tag to compare

Open source →

v1.107.1-0.20260826155139-fddf4050ee9326 Aug 2026pre-release

Nothing published for this version

v1.107.1-0.20260826122614-4a6f1750c29826 Aug 2026pre-release

Nothing published for this version

v1.107.026 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

b652d2e feat(materials): add OVERSECURED_JSON material type (#3370)

Open source →

Additional notes

v1.107.0

Compare

Choose a tag to compare

Open source →

v1.106.3-0.20260825092925-e25fa85e587b25 Aug 2026pre-release

Nothing published for this version

v1.106.225 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

7880f99 perf(crafter): de-duplicate AccessChk security descriptors in the policy projection (#3364)

Open source →

Additional notes

v1.106.2

Compare

Choose a tag to compare

Open source →

v1.106.2-0.20260824181304-eb5e7384005c24 Aug 2026pre-release

Nothing published for this version

v1.106.2-0.20260821114848-40014e92b10621 Aug 2026pre-release

Nothing published for this version

v1.106.121 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

5bc93ac feat(controlplane): scope CAS mappings to products (#3360)

Open source →

Additional notes

v1.106.1

Compare

Choose a tag to compare

Open source →

v1.106.1-0.20260819181307-9e58df4d136219 Aug 2026pre-release

Nothing published for this version

v1.106.1-0.20260815011628-4a516b693f5d15 Aug 2026pre-release

Nothing published for this version

v1.106.1-0.20260814085746-3bfc2f5b265814 Aug 2026pre-release

Nothing published for this version

v1.106.013 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

02631d6 fix(crafter): release go-git packfile descriptors after repository reads (#3345)

Open source →

Additional notes

v1.106.0

Compare

Choose a tag to compare

Open source →

v1.105.10-0.20260811172456-e77e0788517711 Aug 2026pre-release

Nothing published for this version

v1.105.911 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

30c1063 fix(crafter): bound AccessChk memory use during policy evaluation (#3341)

Open source →

Additional notes

v1.105.9

Compare

Choose a tag to compare

Open source →

v1.105.9-0.20260810161019-57b43c557fdb10 Aug 2026pre-release

Nothing published for this version

v1.105.810 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

d902fb5 feat(cli): add flags to override policy inputs (replace, not append) (#3338)

Open source →

Additional notes

v1.105.8

Compare

Choose a tag to compare

Open source →

v1.105.8-0.20260807095555-e968dc5128717 Aug 2026pre-release

Nothing published for this version

v1.105.77 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

978ebd1 fix(crafter): exclude radamsa -M seed header line from RADAMSA_REPORT iteration count (#3332)

Open source →

Additional notes

v1.105.7

Compare

Choose a tag to compare

Open source →

v1.105.7-0.20260806105448-44fd0c82dbf26 Aug 2026pre-release

Nothing published for this version

v1.105.66 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

cf6bb13 Bump Helm Chart and Dagger Version => v1.105.5 (#3330)

Open source →

Additional notes

v1.105.6

Compare

Choose a tag to compare

Open source →

v1.105.56 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

58ae751 fix(controlplane): withhold org-admin-only policies from project-scoped API tokens and remove RobotAccountService (#3326)

Open source →

Additional notes

v1.105.5

Compare

Choose a tag to compare

Open source →

v1.105.44 Aug 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

682de96 feat(cli): accept an archive of -M metadata files as one RADAMSA_REPORT material (#3327)

Open source →

Additional notes

v1.105.4

Compare

Choose a tag to compare

Open source →

v1.105.4-0.20260803235451-d5fb6eed51013 Aug 2026pre-release

Nothing published for this version

v1.105.32 Aug 2026

Nothing published for this version

v1.105.3-0.20260731164836-7ee465ca30e431 Jul 2026pre-release

Nothing published for this version

v1.105.231 Jul 2026

View the attestation of this release

Chainloop Attestation

View the attestation of this release

Changelog

0f9c58f fix(ci): pin the organization on attestation init in GitHub workflows (#3318)

Open source →

Additional notes

v1.105.2

Compare

Choose a tag to compare

Open source →

v1.105.130 Jul 2026

v1.105.1 Compare # Choose a tag to compare

v1.105.1

Compare

Choose a tag to compare

Open source →

v1.105.1-0.20260728204313-3782eb76236b28 Jul 2026pre-release

Nothing published for this version

v1.105.028 Jul 2026

Nothing published for this version

v1.104.8-0.20260723114007-fdec1dc9c1b823 Jul 2026pre-release

Nothing published for this version

v1.104.723 Jul 2026

Nothing published for this version

v1.104.619 Jul 2026

Nothing published for this version

v1.104.6-0.20260717170116-deb4cb2d145017 Jul 2026pre-release

Nothing published for this version

v1.104.517 Jul 2026

Nothing published for this version

v1.104.417 Jul 2026

Nothing published for this version

v1.104.315 Jul 2026

Nothing published for this version

v1.104.3-0.20260715110903-f7a397b62d0715 Jul 2026pre-release

Nothing published for this version

v1.104.215 Jul 2026

Nothing published for this version

v1.104.114 Jul 2026

Nothing published for this version

Your coding agent can read these notes before it upgrades. Set up the MCP server →