Chainloop Attestation

View the attestation of this release

Changelog

• 7eebef5 fix(cli): allow equal signs in annotation values (#2867)

Chainloop Attestation

View the attestation of this release

Changelog

• 26a461f Revert "chore(ci): migrate release workflow to GitHub keyless auth" (#2860)

Chainloop Attestation

View the attestation of this release

Changelog

• 3cfc998 fix: PR metadata temp file missing .json extension (#2846)

Chainloop Attestation

View the attestation of this release

Changelog

• 2f89b91 fix(auth): improve JWT and GitHub OIDC token handling (#2832)

Changelog

• 0f30a91 fix(cli): prevent false user-attended mode warning with federated auth (#2829)

Changelog

• 029e62a feat(cli): add OIDC federated authentication support for CI/CD runners (#2826)

Changelog

• 22932b1 feat(api-token): allow org-level tokens to manage project-scoped tokens (#2811)

Chainloop Attestation

View the attestation of this release

Changelog

• ba5b90c fix(cas-redirection): Avoid returning URL when CAS is not valid (#2796)

What's Changed

• Bump Helm Chart and Dagger Version => v1.78.0 by @github-actions[bot] in #2766
• chore: add stale bot for issue and PR hygiene by @migmartri in #2772
• test(cli): cover attestation push policy enforcement behavior by @matiasinsaurralde in #2774
• feat(authz): prevent non-owners from managing owner memberships by @migmartri in #2776
• chore: replace buf DEFAULT lint category with STANDARD by @matiasinsaurralde in #2778
• test(controlplane): cover extractEnvVariables ordering and nil input by @matiasinsaurralde in #2779
• chore(artifact-cas): precompile auth selector regexes in gRPC server by @matiasinsaurralde in #2784
• feat(.claude): add dependabot-pr-automation skill by @migmartri in #2781
• chore(controlplane): precompile version validation regex by @matiasinsaurralde in #2783
• fix(controlplane): use request context for CAS backend lookup in attestation init by @matiasinsaurralde in #2782
• build(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in #2787
• chore(controlplane): precompile gRPC matcher regexes by @matiasinsaurralde in #2789
• fix(artifact-cas): return ResourceExhausted for oversized uploads by @matiasinsaurralde in #2788
• feat(integration): show masked URL in registrations config by @Piskoo in #2794
• feat(policies): allow gate=false to override org-wide blocking by @matiasinsaurralde in #2777
• feat(contracts): remove requirements mapping to enable automatching by @kaysavps in #2791

New Contributors

• @matiasinsaurralde made their first contribution in #2774

Full Changelog: v1.78.0...v1.79.0

Changelog

• c1c719b feat(policies): add attestation phase lifecycle control (#2765)