💥 Breaking Changes
- feat: the CRD API version is upgraded to
config.ratify.sh/v2beta1(v2alpha1 kept as deprecated) by @fseldow in #2985- ⚠️ When upgrading via Helm, please uninstall the existing chart and re-install it rather than running an in-place
helm upgrade, so the new CRD version is applied correctly.
- ⚠️ When upgrading via Helm, please uninstall the existing chart and re-install it rather than running an in-place
🚀 Features
- feat(azure): support identity binding auth provider by @fseldow in #2839
- feat: make the provider request path observable by @charleswool in #2873
- feat: log Azure credential and ACR token acquisition by @charleswool in #2876
- feat: log registry credential cache and Key Vault access by @charleswool in #2877
- feat: add AWS ECR credential provider for Ratify v2 by @fseldow in #2940
- feat: add Alibaba Cloud ACR credential provider for Ratify v2 by @fseldow in #2941
- feat: add ratify CLI entrypoint built on ratify-go by @fseldow in #2981
🔐 Security
- chore: bump vulnerable dependencies [CVE-2026-56864, CVE-2026-56865, GO-2026-5932] by @github-actions in #2936
- chore: bump vulnerable dependencies [CVE-2026-56855, CVE-2026-78662, GO-2026-5932] by @github-actions in #2980
🧹 Maintenance
Full Changelog: v2.0.0-beta.1...v2.0.0-beta.2