PackageTrack
Sign in Get early access

github.com/sigstore/rekor

v1.5.4 #1513 most downloaded on Go modules sigstore/rekor

What this package is like to depend on

Last release today

23 Aug 2026

Ships on a steady schedule

a new release about every 1 weeks

Nearly every release is documented

notes for 41 of 44 stable releases

Nothing withdrawn

no release was ever pulled

5 years old

1042 releases · first in 2021

365 releases in the last 12 months

see the full history below

Release timeline

1042 releases · Feb 2021 to Aug 2026
2022 2023 2024 2025 2026
Release Pre-release

Releases

latest 60 of 1042
  1. v1.5.5-0.20260823171452-9651c3f007a7 23 Aug 2026 pre-release

    Nothing published for this version

  2. v1.5.5-0.20260822142931-eee7d8d644f5 22 Aug 2026 pre-release

    Nothing published for this version

  3. v1.5.4 20 Aug 2026
    Release notes

    Changelog

    • a36bd71 add changelog for v1.5.4 release (#2944)
    • 705fc05 Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) (#2945)
    • 5789c38 build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /hack/tools in the all group across 1 directory (#2840)
    • 7dd85d3 better handle connection issues (#2931)
    • a8544a8 build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4.0 (#2939)
    • ee19b41 remove repetitive viper lookups from api endpoints (#2922)
    • f3441b5 move CI containers to GHCR (#2943)
    • d53aa51 build(deps): Bump the all group across 1 directory with 3 updates (#2942)
    • 7af1d7c build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#2938)
    • ed250aa build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 (#2937)
    • 78ba595 build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0 (#2940)
    • 6a6443e build(deps): Bump the all group with 4 updates (#2941)
    • a64a345 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2935)
    • f6fa665 build(deps): Bump golang from 1.26.5 to 1.26.6 in the all group (#2934)
    • 2309dab fix pprof arg (#2932)
    • 5a1909a build(deps): Bump the all group across 1 directory with 6 updates (#2925)
    • d979072 build(deps): Bump golang from 3aff665 to 2005724 (#2924)
    • e1564dc build(deps): Bump github.com/prometheus/client_golang (#2928)
    • a497c02 build(deps): Bump the all group with 4 updates (#2930)
    • aea3064 build(deps): Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 (#2926)
    • 5486dda build(deps): Bump go.step.sm/crypto from 0.85.0 to 0.87.0 (#2927)
    • ebd7339 build(deps): Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.22.0 (#2929)
    • d543a4a build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2923)
    • eaa6d5b build(deps): upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)
    • 1665651 build(deps): Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)
    • 24394e3 remove unused semver type version map (#2918)
    • 3a9dba1 build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 (#2823)
    • c4d4150 separate read/write sql traffic for indexservice into separate pools (#2914)
    • 99f7844 test against valkey (#2916)
    • aef6385 Change default CLI upload type to hashedrekord (#2885)
    • 1be154f fix shadowed err, wrong err label (#2907)
    • 2cdf437 build(deps): Bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 (#2910)
    • e7730e0 build(deps): Bump golang.org/x/mod from 0.37.0 to 0.38.0 (#2911)
    • df58502 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2909)
    • 730fa37 build(deps): Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1 (#2912)
    • ace8820 build(deps): Bump the all group with 4 updates (#2913)
    • dfe5a1c alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)
    • a8f4a17 Remove unmaintained scripts/createdb.sh dev helper (#2905)
    • 9573f1b test mysql with production dsn strings (#2906)
    • f3299aa build(deps): Bump golang.org/x/crypto in /hack/tools (#2882)
    • cc5737e build(deps): Bump the all group across 1 directory with 6 updates (#2898)
    • 8485b5d build(deps): Bump cloud.google.com/go/pubsub from 1.50.2 to 1.51.0 (#2899)
    • 3d80df7 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2897)
    • 09bf9ca create interface for TrillianClient (#2896)
    • 671e78b build(deps): Bump the all group with 5 updates (#2900)
    • a00d60e build(deps): Bump go.step.sm/crypto from 0.77.7 to 0.85.0 (#2901)
    • ea4ed74 build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 (#2902)
    • bde4e86 use more efficient table schema for indexes (#2903)
    • 27f1199 return a 400 error for invalid TreeID (#2895)
    • 6335172 build(deps): Bump the all group across 1 directory with 3 updates (#2889)
    • 0b37bb8 build(deps): Bump the all group across 1 directory with 3 updates (#2893)
    • b953a43 build(deps): Bump the all group across 1 directory with 8 updates (#2894)
    • 39fd538 build(deps): Bump github.com/cloudflare/circl from 1.6.2 to 1.6.3
    • d2ca1f9 build(deps): Bump Homebrew/actions/setup-homebrew (#2890)
    • 86e0055 Migrate off deprecated golang.org/x/crypto/openpgp (#2883)
    • 0a635ec minimize duplicative JSON parsing while handling entries (#2880)
    • 75d61c1 search: add subject field for SAN-based lookup (#2850)
    • 1de1764 remove duplicative log entry (#2881)
    • 70a2666 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
    • 85b8436 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.6.0 to 2.7.0
    • 7ce85c8 build(deps): Bump the all group with 5 updates
    • 5cdf941 optimize DSSE memory and cpu while parsing and verifying envs (#2879)
    • d750c04 docs(cli): add usage examples to rekor-cli commands (#2851)
    • 4c65be7 Return the file error instead of the URL error for a missing artifact path (#2872)
    • 2c9a403 update builder to use go1.26.4 (#2873)

    Thanks for all contributors!

    Open source →
    Release notes

    Features

    • search: add subject field for SAN-based lookup (#2850)
    • Change default CLI upload type to hashedrekord (#2885)
    • separate read/write sql traffic for indexservice into separate pools (#2914)

    Bug Fixes

    • better handle connection issues (#2931)
    • fix pprof arg (#2932)
    • fix shadowed err, wrong err label (#2907)
    • alpine: hash only the bytes read when computing the control.tar.gz digest (#2908)
    • return a 400 error for invalid TreeID (#2895)
    • Return the file error instead of the URL error for a missing artifact path (#2872)
    • Apply proactive hardening against malformed requests (#2945)

    Improvements

    • remove repetitive viper lookups from api endpoints (#2922)
    • move CI containers to GHCR (#2943)
    • remove unused semver type version map (#2918)
    • test against valkey (#2916)
    • Remove unmaintained scripts/createdb.sh dev helper (#2905)
    • test mysql with production dsn strings (#2906)
    • create interface for TrillianClient (#2896)
    • use more efficient table schema for indexes (#2903)
    • Migrate off deprecated golang.org/x/crypto/openpgp (#2883)
    • minimize duplicative JSON parsing while handling entries (#2880)
    • remove duplicative log entry (#2881)
    • optimize DSSE memory and cpu while parsing and verifying envs (#2879)
    • update builder to use go1.26.4 (#2873)
    • upgrade grpc-ecosystem/go-grpc-middleware to v2 (#2921)
    • Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#2919)
    • numerous upgraded dependencies

    Documentation

    • docs(cli): add usage examples to rekor-cli commands (#2851)

    Contributors

    • ahmagdyfb
    • Bob Callaway
    • Carlos Tadeu Panato Junior
    • Chiman Jain
    • Hayden
    • Jason Hall
    • Nikhil J
    • Ogulcan Aydogan
    • Pujitha Paladugu
    • Sueun Cho
    Open source →
  4. v1.5.4-0.20260819173130-705fc05d8397 19 Aug 2026 pre-release

    Nothing published for this version

  5. v1.5.4-0.20260819112036-5789c38f5cb2 19 Aug 2026 pre-release

    Nothing published for this version

  6. v1.5.4-0.20260818205029-7dd85d3abf00 18 Aug 2026 pre-release

    Nothing published for this version

  7. v1.5.4-0.20260818183850-a8544a8e30ac 18 Aug 2026 pre-release

    Nothing published for this version

  8. v1.5.4-0.20260818162317-ee19b41b56d1 18 Aug 2026 pre-release

    Nothing published for this version

  9. v1.5.4-0.20260818003834-f3441b54a696 18 Aug 2026 pre-release

    Nothing published for this version

  10. v1.5.4-0.20260817133017-d53aa51f4c39 17 Aug 2026 pre-release

    Nothing published for this version

  11. v1.5.4-0.20260817122511-ed250aa4865c 17 Aug 2026 pre-release

    Nothing published for this version

  12. v1.5.4-0.20260817112641-2309dab57644 17 Aug 2026 pre-release

    Nothing published for this version

  13. v1.5.4-0.20260810125915-5a1909af34d1 10 Aug 2026 pre-release

    Nothing published for this version

  14. v1.5.4-0.20260810115709-a497c02c0a0d 10 Aug 2026 pre-release

    Nothing published for this version

  15. v1.5.4-0.20260807205040-eaa6d5b3d220 07 Aug 2026 pre-release

    Nothing published for this version

  16. v1.5.4-0.20260806121242-1665651737fd 06 Aug 2026 pre-release

    Nothing published for this version

  17. v1.5.4-0.20260805152905-24394e3bb6cc 05 Aug 2026 pre-release

    Nothing published for this version

  18. v1.5.4-0.20260804202026-3a9dba1565ad 04 Aug 2026 pre-release

    Nothing published for this version

  19. v1.5.4-0.20260804175931-c4d4150e7fbd 04 Aug 2026 pre-release

    Nothing published for this version

  20. v1.5.4-0.20260804152632-99f7844c567c 04 Aug 2026 pre-release

    Nothing published for this version

  21. v1.5.4-0.20260803205044-1be154f685d6 03 Aug 2026 pre-release

    Nothing published for this version

  22. v1.5.4-0.20260803124140-2cdf437463fb 03 Aug 2026 pre-release

    Nothing published for this version

  23. v1.5.4-0.20260803120819-e7730e022c63 03 Aug 2026 pre-release

    Nothing published for this version

  24. v1.5.4-0.20260802171928-a8f4a17c5628 02 Aug 2026 pre-release

    Nothing published for this version

  25. v1.5.4-0.20260802003641-9573f1b131eb 02 Aug 2026 pre-release

    Nothing published for this version

  26. v1.5.4-0.20260728125340-f3299aac1ff4 28 Jul 2026 pre-release

    Nothing published for this version

  27. v1.5.4-0.20260728122458-671e78b6fc29 28 Jul 2026 pre-release

    Nothing published for this version

  28. v1.5.4-0.20260727225207-bde4e86e1e85 27 Jul 2026 pre-release

    Nothing published for this version

  29. v1.5.4-0.20260722150618-27f1199d35ce 22 Jul 2026 pre-release

    Nothing published for this version

  30. v1.5.4-0.20260721141805-633517270c36 21 Jul 2026 pre-release

    Nothing published for this version

  31. v1.5.4-0.20260715164520-39fd5386c9c9 15 Jul 2026 pre-release

    Nothing published for this version

  32. v1.5.4-0.20260715135536-d2ca1f98f82d 15 Jul 2026 pre-release

    Nothing published for this version

  33. v1.5.4-0.20260715135435-86e005525f81 15 Jul 2026 pre-release

    Nothing published for this version

  34. v1.5.4-0.20260710203401-0a635eca86fa 10 Jul 2026 pre-release

    Nothing published for this version

  35. v1.5.4-0.20260708184156-75d61c1c7a55 08 Jul 2026 pre-release

    Nothing published for this version

  36. v1.5.4-0.20260707163435-70a2666df5a8 07 Jul 2026 pre-release

    Nothing published for this version

  37. v1.5.4-0.20260707022029-5cdf9418b030 07 Jul 2026 pre-release

    Nothing published for this version

  38. v1.5.4-0.20260706004743-d750c04d5ab9 06 Jul 2026 pre-release

    Nothing published for this version

  39. v1.5.4-0.20260703142655-4c65be7e60f2 03 Jul 2026 pre-release

    Nothing published for this version

  40. v1.5.4-0.20260703094659-2c9a403981c1 03 Jul 2026 pre-release

    Nothing published for this version

  41. v1.5.3 01 Jul 2026
    Release notes

    Changelog

    • 7d9dcff Changelog for v1.5.3 (#2871)
    • f230638 Use bytes.Equal for inclusion proof root hash comparison (#2861)
    • 7472268 return 499 if client disconnects instead of 500 (#2870)
    • 792221b build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.82.0 (#2859)
    • 912dda3 build(deps): Bump the all group across 1 directory with 7 updates (#2869)
    • 0f9921d Change max upperbound on latency metrics (#2868)
    • 322a3f2 build(deps): Bump golang from 87a41d2 to f96cc55 (#2855)
    • e997a8a build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 (#2857)
    • 4444582 build(deps): Bump golang.org/x/net from 0.52.0 to 0.55.0 in /hack/tools (#2866)
    • f81061c Move fuzz into its own workflow (#2865)
    • 1a2f3f2 build(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2862)
    • cf8f143 build(deps): Bump the all group with 2 updates (#2863)
    • 4e6fd60 build(deps): Bump the all group across 1 directory with 11 updates
    • 088835b build(deps): Bump golang in the all group across 1 directory
    • 37eb424 build(deps): Bump the all group across 1 directory with 2 updates
    • bbc0f78 build(deps): Bump google.com/cloudsdktool/google-cloud-cli
    • 32e6868 build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0
    • 400f8d5 build(deps): Bump github.com/go-openapi/loads from 0.23.3 to 0.24.0
    • a2d42d5 build(deps): Bump github.com/redis/go-redis/v9 from 9.18.0 to 9.20.0
    • e1e207b build(deps): Bump github.com/go-openapi/runtime from 0.29.4 to 0.32.2
    • 128ebab build(deps): Bump golang from 313faae to 2d6c802
    • 6c9dd72 build(deps): Bump golang.org/x/net from 0.53.0 to 0.55.0
    • 65c104c build(deps): Bump the all group across 1 directory with 4 updates
    • 6e4daae build(deps): Bump google.com/cloudsdktool/google-cloud-cli
    • adebc68 update builder to use go1.26.3

    Thanks for all contributors!

    Open source →
    Release notes

    Features

    • return 499 when clients disconnect instead of 500 (#2870)

    Improvements

    • Change max upperbound on latency metrics (#2868)
    Open source →
  42. v1.5.3-0.20260701211451-0f9921df5439 01 Jul 2026 pre-release

    Nothing published for this version

  43. v1.5.3-0.20260701200258-f81061c497f6 01 Jul 2026 pre-release

    Nothing published for this version

  44. v1.5.3-0.20260701180845-1a2f3f22a7e4 01 Jul 2026 pre-release

    Nothing published for this version

  45. v1.5.3-0.20260616090754-4e6fd6005a6c 16 Jun 2026 pre-release

    Nothing published for this version

  46. v1.5.3-0.20260615160734-37eb42417790 15 Jun 2026 pre-release

    Nothing published for this version

  47. v1.5.3-0.20260615152412-bbc0f78d46da 15 Jun 2026 pre-release

    Nothing published for this version

  48. v1.5.3-0.20260602114954-e1e207b3a3c7 02 Jun 2026 pre-release

    Nothing published for this version

  49. v1.5.3-0.20260602103016-6c9dd721e450 02 Jun 2026 pre-release

    Nothing published for this version

  50. v1.5.3-0.20260528133421-adebc681c70e 28 May 2026 pre-release

    Nothing published for this version

  51. v1.5.2 21 May 2026
    Release notes

    Changelog

    • 759b98e alpine: Enforce max size limit on decompression (#2831)
    • c7e77ee Support restricting kinds on insertion (#2814)
    • a10818a fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#2812)
    • 8a2f3a2 add checks to ensure returned entries match client inputs to rekor-cli (#2799)
    • 0e88bac add nil pointer check to resolve fuzzing crash (#2807)
    • 93da954 client: surface last-response details after retries are exhausted (#2796)
    • 4d67ecd Fix internal error detail leakage in 500 responses (#2801)
    • b34ca94 add defensive check to ensure tid is in config ahead of getting client (#2795)
    • 656c832 restapi: include inactiveShards in the homepage total count (#2797)

    Thanks for all contributors!

    Open source →
    Release notes

    Features

    • Support restricting kinds on insertion (#2814)

    Bug Fixes

    • alpine: Enforce max size limit on decompression (#2831)
    • fix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#2812)
    • Fix internal error detail leakage in 500 responses (#2801)
    • add checks to ensure returned entries match client inputs to rekor-cli (#2799)
    • add defensive check to ensure tid is in config ahead of getting client (#2795)
    • add nil pointer check to resolve fuzzing crash (#2807)

    Improvements

    • restapi: include inactiveShards in the homepage total count (#2797)
    • client: surface last-response details after retries are exhausted (#2796)
    Open source →
  52. v1.5.2-0.20260521234121-3b75cd9c9a10 21 May 2026 pre-release

    Nothing published for this version

  53. v1.5.2-0.20260521215026-c7e77ee26edd 21 May 2026 pre-release

    Nothing published for this version

  54. v1.5.2-0.20260521044147-a10818a8778d 21 May 2026 pre-release

    Nothing published for this version

  55. v1.5.2-0.20260519063508-c31f3fc8141e 19 May 2026 pre-release

    Nothing published for this version

  56. v1.5.2-0.20260517234354-f4f91d5ca10c 17 May 2026 pre-release

    Nothing published for this version

  57. v1.5.2-0.20260511115645-9bc540f21471 11 May 2026 pre-release

    Nothing published for this version

  58. v1.5.2-0.20260505141856-cfea8cfcd8f0 05 May 2026 pre-release

    Nothing published for this version

  59. v1.5.2-0.20260504160209-dd9584b37cdd 04 May 2026 pre-release

    Nothing published for this version

  60. v1.5.2-0.20260503162158-92ebf2b47213 03 May 2026 pre-release

    Nothing published for this version

Every package, every release, already written down.

The archive is open and free. Watching your own project is what we are building next.

Browse the archive