A Note on Compatibility for GQ signatures
Includes security fix to GitLab-CI GQ commitment PK Tokens by updating to OpenPubkey v0.25.0. As OPKSSH does not currently support GitLab-CI, and only currently supports GitLab user OP, there should be no security impact to OPKSSH.
However this does introduce a breaking change to how GQ signatures are verified. If GitHub is being used with GQ signatures then signatures created prior to this release will not verify on OPKSSH after this change and signatures created after this release will not verify against on OPKSSH before this change.
Changes
- Update to OpenPubkey v0.25.0 @EthanHeilman (#569)
- fix(deps): Update Docker @renovate[bot] (#566)
- fix(deps): Update go toolchain directive to v1.26.5 @renovate[bot] (#567)
- fix(deps): Update actions/cache action to v6.1.0 @renovate[bot] (#556)
- feat(enforcer): add glob support to github-actions @gastmaier (#558)
- chore(deps): bump github.com/go-chi/chi/v5 from 5.2.2 to 5.2.4 @dependabot[bot] (#540)
- Imports slices rather exp/slices @EthanHeilman (#565)
- feat: produce Android binaries on CI @bltavares (#550)
- fix(deps): Update Docker @renovate[bot] (#555)
- fix(deps): Update docker/build-push-action action to v7.3.0 @renovate[bot] (#560)
- fix(deps): Update goreleaser/goreleaser-action action to v7.2.3 @renovate[bot] (#557)
- fix(deps): Update release-drafter/release-drafter action to v7.5.1 @renovate[bot] (#554)
- fix(deps): Update release-drafter/release-drafter action to v7 @renovate[bot] (#551)
- chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 @dependabot[bot] (#539)
🐛 Bug Fixes
- Fix release drafter @EthanHeilman (#561)
- fix(deps): Update actions/cache action to v6 @renovate[bot] (#543)
- fix(deps): Update actions/checkout action to v7 @renovate[bot] (#545)
- fix(deps): Update actions/setup-go action to v6.5.0 @renovate[bot] (#553)
- fix(deps): Update dependency golangci/golangci-lint to v2.12.2 @renovate[bot] (#552)
- fix(deps): Update Docker @renovate[bot] (#549)
- fix(deps): Update actions/setup-go action to v6.4.0 @renovate[bot] (#541)
- fix(deps): Update dependency golangci/golangci-lint to v2.11.4 @renovate[bot] (#489)
- fix(deps): Update zizmorcore/zizmor-action action to v0.5.7 @renovate[bot] (#535)
- fix(deps): Update Docker @renovate[bot] (#469)
🧰 Maintenance
- fix(deps): Update Docker @renovate[bot] (#469)