v3.57.0 (2023-10-19)
Added
- Experimental: Signed Pipelines
- Signing build matrices #2440 #2429 #2426 #2425 #2391 #2395 (@DrJosh9000)
- Add debug logs for job verification #2439 (@DrJosh9000)
- Reduce information in verification errors #2431 (@DrJosh9000)
- Separate step/pipeline env vars for job validation #2428 (@DrJosh9000)
- Signing config cleanup #2420 #2427 (@moskyb)
- Fix verifying jobs with no plugins #2419 (@DrJosh9000)
- Use canonicalised JSON as signature payload #2416 (@DrJosh9000)
- Add utility for generating signing and verification keys #2415 #2422 (@moskyb)
Changed
- Revert "Upgrade pre-installed packages in docker images" and Pin docker images by digest #2430 (@triarius)
Internal
- Use docker image bases from ECR public gallery #2423 #2424 (@triarius + @moskyb)
- Add CODEOWNERS file #2444 (@moskyb)
- Push agent packages to Packagecloud #2438 #2441 #2443 #2442 (@sj26)
- Test clicommand config completeness #2414 (@moskyb)
- As always, the cosmic background radiation of dependabot updates. Thanks dependabot! #2435 #2434 #2433 #2432 #2421 #2418 #2417 (@dependabot[bot])