What's Changed
Support for Cosign signatures has been removed from this release. The checksums.txt.keyless.sig and checksums.txt.pem will not be included in the release.
These files are not used in normal use cases, so in most cases this will not affect you, but if you are affected, you can use Artifact Attestations instead.
Enhancements
Chores
- Bump google.golang.org/api from 0.250.0 to 0.251.0 by @dependabot[bot] in #461
- Bump google.golang.org/api from 0.251.0 to 0.252.0 by @dependabot[bot] in #462
- Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #463
- Drop support for Cosign signatures by @wata727 in #466
Full Changelog: v0.36.0...v0.37.1