Added
- Add signatures subcommand (#229 by casey)
- Add
filepack beck32mfor converting between bech32m and hex (#181 by casey) - Add
filepack containssubcommand (#175 by casey)
Changed
- Always respect
$XDG_DATA_DIR(#186 by casey) - Encode public keys, private keys, and signature as bech32m (#177 by casey)
Misc
- Deny unreachable-pub lint (#234 by casey)
- Use compact fingerprint serialization (#233 by casey)
- Make private keys begin with public key (#232 by casey)
- Rename signature time to timestamp (#231 by casey)
- Always verify manifest signatures on load (#230 by casey)
- Use seconds for signature timestamp (#228 by casey)
- Make signature time field optional (#227 by casey)
- Sign message fingerprint (#226 by casey)
- Include message in signature (#225 by casey)
- Include public key in signature (#224 by casey)
- Test bech32 decoder errors (#223 by casey)
- Remove static GPG and SSH test files (#222 by casey)
- Remove message subcommand (#221 by casey)
- Remove PGP and SSH signature support (#220 by casey)
- Generate and verify SSH and GPG signatures in integration tests (#219 by casey)
- Bech32 prefix instead of Bech32m (#218 by casey)
- Remove bech32m payload struct (#217 by casey)
- Use more flexible bech32m decoder (#216 by casey)
- Test padding errors with prefix (#215 by casey)
- Test bech32m padding errors (#214 by casey)
- Test signatures generated with ssh-key (#213 by casey)
- Test overlong PGP signature suffix error (#212 by casey)
- Add and remove multi-character bech32m prefix strings (#211 by casey)
- Add signature hash algorithm character (#210 by casey)
- Disable doctests (#209 by casey)
- Convert SSH signature tests to use pre-generated key and signature (#208 by casey)
- Update DESIGN.md (#207 by casey)
- Resolve signature scheme reuse open question (#206 by casey)
- Use pre-generated files for GPG signature test (#205 by casey)
- Add message subcommand (#204 by casey)
- Add bech32m type enum (#203 by casey)
- Avoid allocating when formatting bech32m strings (#202 by casey)
- Rename bech32m data to body (#201 by casey)
- Add signature round trip and error display tests (#200 by casey)
- Move signature payload generation into signature scheme (#199 by casey)
- Add signature scheme type (#198 by casey)
- Add signature scheme versioning (#197 by casey)
- Add PGP signature scheme (#196 by casey)
- Add SSH signature verification integration test (#195 by casey)
- Add SSH signature scheme (#194 by casey)
- Add signature schemes (#193 by casey)
- Add profile recipe (#192 by casey)
- Remove dependency on executable-path (#191 by casey)
- Remove release commit message template (#190 by casey)
- Forbid non-zero padding in bech32m strings (#189 by casey)
- Use
filepack infoin data dir tests (#188 by casey) - Only use fingerprint type for package fingerprints (#187 by casey)
- Use "package fingerprint" instead "manifest fingerprint" (#185 by casey)
- Don't hash message before signing (#184 by casey)
- Use version character
afor bech32m strings (#183 by casey) - Open question: bech32m version characters (#182 by casey)
- Use bech32m for package fingerprints (#180 by casey)
- Resolve some open questions in DESIGN.md (#179 by casey)
- Pretty print manifest (#178 by casey)
- Add
--filetofilepack contains(#176 by casey) - Update DESIGN.md (#174 by casey)
- Require lowercase hashes (#173 by casey)
- Note that fingerprint is globally unique identifier (#172 by casey)
- Forbid using
--manifestwith manifest in package (#171 by casey) - Fix release workflow manifest creation (#170 by casey)
- Add workflows to readme (#169 by casey)