tag:github.com,2008:https://github.com/chainloop-dev/chainloop/releases 2026-03-16T22:20:45Z tag:github.com,2008:Repository/610316941/v1.82.2 2026-03-16T23:07:46Z <h2>Chainloop Attestation</h2> <p><a href="https://app.chainloop.dev/attestation/sha256:93c3f19448dc5c1bfad553e61acf45f1c6e273eb1ca30e4e77a81c402b22568f" rel="nofollow">View the attestation of this release</a></p> <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/7eebef5c6c3a7ad24ae8f6d56355b98bf16fbe07/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/7eebef5c6c3a7ad24ae8f6d56355b98bf16fbe07"><tt>7eebef5</tt></a> fix(cli): allow equal signs in annotation values (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4084072617" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2867" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2867/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2867">#2867</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.82.1 2026-03-15T22:36:57Z <h2>Chainloop Attestation</h2> <p><a href="https://app.chainloop.dev/attestation/sha256:3bb1573ebf455bf3ad8c8215529d26dd5b6d7b03635840557920ec7f8012a4e8" rel="nofollow">View the attestation of this release</a></p> <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/26a461f459458e16fe2a3baa0bd43a934d2a8130/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/26a461f459458e16fe2a3baa0bd43a934d2a8130"><tt>26a461f</tt></a> Revert "chore(ci): migrate release workflow to GitHub keyless auth" (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4078958160" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2860" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2860/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2860">#2860</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.82.0 2026-03-14T18:09:05Z <h2>Chainloop Attestation</h2> <p><a href="https://app.chainloop.dev/attestation/sha256:8704990da8ecff01adfb20063d8938f57eda9a883263eee1d4d1e2d970b063cd" rel="nofollow">View the attestation of this release</a></p> <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/3cfc998638d790d80be2aeabb5183cbc9e33ea59/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/3cfc998638d790d80be2aeabb5183cbc9e33ea59"><tt>3cfc998</tt></a> fix: PR metadata temp file missing .json extension (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4075189291" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2846" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2846/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2846">#2846</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.81.2 2026-03-10T16:26:53Z <h2>Chainloop Attestation</h2> <p><a href="https://app.chainloop.dev/attestation/sha256:22ee712d99cab4ac4b53fb7e00384b919edbb17710f5b89c76cb017c043bb564" rel="nofollow">View the attestation of this release</a></p> <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/2f89b91634b675897612f5c4c5bb60e24cb7c6fe/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/2f89b91634b675897612f5c4c5bb60e24cb7c6fe"><tt>2f89b91</tt></a> fix(auth): improve JWT and GitHub OIDC token handling (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4048687189" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2832" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2832/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2832">#2832</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.81.1 2026-03-09T21:39:50Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/0f30a918ef2f53523c604e5096ff350bf8332956/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/0f30a918ef2f53523c604e5096ff350bf8332956"><tt>0f30a91</tt></a> fix(cli): prevent false user-attended mode warning with federated auth (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4047939773" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2829" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2829/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2829">#2829</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.81.0 2026-03-09T18:27:58Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/029e62a1200f83294ec8c9cf39eaf42a87ac88d8/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/029e62a1200f83294ec8c9cf39eaf42a87ac88d8"><tt>029e62a</tt></a> feat(cli): add OIDC federated authentication support for CI/CD runners (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4046937769" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2826" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2826/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2826">#2826</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.80.0 2026-03-04T18:25:17Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/22932b1d4be0602ee36a47d179432fc5fb509ea6/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/22932b1d4be0602ee36a47d179432fc5fb509ea6"><tt>22932b1</tt></a> feat(api-token): allow org-level tokens to manage project-scoped tokens (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4016159709" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2811" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2811/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2811">#2811</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.79.1 2026-03-02T16:11:46Z <h2>Chainloop Attestation</h2> <p><a href="https://app.chainloop.dev/attestation/sha256:c8c4479b42f696ef692470f2d161b35170f6b33e8841a67f5ef59e68157306ce" rel="nofollow">View the attestation of this release</a></p> <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/ba5b90ca406dcacb84900d447db9563f3da77fd7/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/ba5b90ca406dcacb84900d447db9563f3da77fd7"><tt>ba5b90c</tt></a> fix(cas-redirection): Avoid returning URL when CAS is not valid (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="4000489090" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2796" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2796/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2796">#2796</a>)</li> </ul> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.79.0 2026-02-27T22:09:40Z <h2>What's Changed</h2> <ul> <li>Bump Helm Chart and Dagger Version =&gt; v1.78.0 by @github-actions[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3970740515" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2766" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2766/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2766">#2766</a></li> <li>chore: add stale bot for issue and PR hygiene by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/migmartri/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/migmartri">@migmartri</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3977917850" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2772" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2772/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2772">#2772</a></li> <li>test(cli): cover attestation push policy enforcement behavior by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3979702747" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2774" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2774/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2774">#2774</a></li> <li>feat(authz): prevent non-owners from managing owner memberships by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/migmartri/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/migmartri">@migmartri</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3979859930" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2776" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2776/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2776">#2776</a></li> <li>chore: replace buf DEFAULT lint category with STANDARD by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3983889348" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2778" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2778/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2778">#2778</a></li> <li>test(controlplane): cover extractEnvVariables ordering and nil input by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3985191793" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2779" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2779/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2779">#2779</a></li> <li>chore(artifact-cas): precompile auth selector regexes in gRPC server by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3986515671" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2784" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2784/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2784">#2784</a></li> <li>feat(.claude): add dependabot-pr-automation skill by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/migmartri/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/migmartri">@migmartri</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3985864152" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2781" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2781/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2781">#2781</a></li> <li>chore(controlplane): precompile version validation regex by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3986199488" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2783" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2783/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2783">#2783</a></li> <li>fix(controlplane): use request context for CAS backend lookup in attestation init by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3986131106" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2782" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2782/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2782">#2782</a></li> <li>build(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by <a class="user-mention notranslate" data-hovercard-type="organization" data-hovercard-url="/orgs/dependabot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/dependabot">@dependabot</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3991362095" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2787" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2787/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2787">#2787</a></li> <li>chore(controlplane): precompile gRPC matcher regexes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3992658405" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2789" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2789/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2789">#2789</a></li> <li>fix(artifact-cas): return ResourceExhausted for oversized uploads by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3992597694" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2788" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2788/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2788">#2788</a></li> <li>feat(integration): show masked URL in registrations config by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/Piskoo/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/Piskoo">@Piskoo</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3998197119" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2794" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2794/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2794">#2794</a></li> <li>feat(policies): allow gate=false to override org-wide blocking by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3983635969" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2777" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2777/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2777">#2777</a></li> <li>feat(contracts): remove requirements mapping to enable automatching by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/kaysavps/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/kaysavps">@kaysavps</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3994917780" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2791" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2791/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2791">#2791</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/matiasinsaurralde/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/matiasinsaurralde">@matiasinsaurralde</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3979702747" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2774" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2774/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2774">#2774</a></li> </ul> <p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/chainloop-dev/chainloop/compare/v1.78.0...v1.79.0"><tt>v1.78.0...v1.79.0</tt></a></p> github-actions[bot] tag:github.com,2008:Repository/610316941/v1.78.0 2026-02-20T23:56:41Z <h2>Changelog</h2> <ul> <li><a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/chainloop-dev/chainloop/commit/c1c719bbd2718f29858c0a73bd1270b0d7712173/hovercard" href="https://github.com/chainloop-dev/chainloop/commit/c1c719bbd2718f29858c0a73bd1270b0d7712173"><tt>c1c719b</tt></a> feat(policies): add attestation phase lifecycle control (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3968669352" data-permission-text="Title is private" data-url="https://github.com/chainloop-dev/chainloop/issues/2765" data-hovercard-type="pull_request" data-hovercard-url="/chainloop-dev/chainloop/pull/2765/hovercard" href="https://github.com/chainloop-dev/chainloop/pull/2765">#2765</a>)</li> </ul> github-actions[bot]