tag:github.com,2008:https://github.com/sigstore/sigstore-java/releases
Release notes from sigstore-java
2025-11-20T20:21:44Z
tag:github.com,2008:Repository/460184708/v2.0.0
2025-11-21T16:37:34Z
v2.0.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Add repo info to create release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2879283514" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/908" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/908/hovercard" href="https://github.com/sigstore/sigstore-java/pull/908">#908</a></li>
<li>Update dependency dev.sigstore:protobuf-specs to v0.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2843543948" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/903" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/903/hovercard" href="https://github.com/sigstore/sigstore-java/pull/903">#903</a></li>
<li>Update after v1.3.0 release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2879448840" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/909" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/909/hovercard" href="https://github.com/sigstore/sigstore-java/pull/909">#909</a></li>
<li>Update conformance.yml to 0.0.17 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2885587516" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/910" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/910/hovercard" href="https://github.com/sigstore/sigstore-java/pull/910">#910</a></li>
<li>Update dependency commons-codec:commons-codec to v1.18.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2843543339" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/902" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/902/hovercard" href="https://github.com/sigstore/sigstore-java/pull/902">#902</a></li>
<li>Update sigstore/community digest to f1c21e9 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841118452" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/894" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/894/hovercard" href="https://github.com/sigstore/sigstore-java/pull/894">#894</a></li>
<li>Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v1.3.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841118492" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/895" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/895/hovercard" href="https://github.com/sigstore/sigstore-java/pull/895">#895</a></li>
<li>Update actions/upload-artifact action to v4.6.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2889967454" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/911" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/911/hovercard" href="https://github.com/sigstore/sigstore-java/pull/911">#911</a></li>
<li>Update dependency com.google.oauth-client:google-oauth-client-bom to v1.38.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2890255480" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/913" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/913/hovercard" href="https://github.com/sigstore/sigstore-java/pull/913">#913</a></li>
<li>Update dependency com.google.http-client:google-http-client-bom to v1.46.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2889967518" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/912" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/912/hovercard" href="https://github.com/sigstore/sigstore-java/pull/912">#912</a></li>
<li>chore: bump junit to 5.12 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2890332545" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/915" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/915/hovercard" href="https://github.com/sigstore/sigstore-java/pull/915">#915</a></li>
<li>Update dependency org.junit:junit-bom to v5.12.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2890255601" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/914" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/914/hovercard" href="https://github.com/sigstore/sigstore-java/pull/914">#914</a></li>
<li>chore(deps): update gradle/actions action to v4.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891153496" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/916" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/916/hovercard" href="https://github.com/sigstore/sigstore-java/pull/916">#916</a></li>
<li>fix(deps): update dependency com.diffplug.spotless:com.diffplug.spotless.gradle.plugin to v7 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891724158" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/919" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/919/hovercard" href="https://github.com/sigstore/sigstore-java/pull/919">#919</a></li>
<li>fix(deps): update dependency org.jetbrains.dokka:org.jetbrains.dokka.gradle.plugin to v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2892007173" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/921" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/921/hovercard" href="https://github.com/sigstore/sigstore-java/pull/921">#921</a></li>
<li>chore(deps): update dependency gradle to v8.13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2513864991" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/807" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/807/hovercard" href="https://github.com/sigstore/sigstore-java/pull/807">#807</a></li>
<li>Gradle plugin: Replace findProperty with Isolated Project compatible … by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/hfhbd/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/hfhbd">@hfhbd</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2554947957" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/811" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/811/hovercard" href="https://github.com/sigstore/sigstore-java/pull/811">#811</a></li>
<li>fix: add workaround for providers.gradleProperty for pre-7.4 Gradle versions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2900458308" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/924" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/924/hovercard" href="https://github.com/sigstore/sigstore-java/pull/924">#924</a></li>
<li>Make token string oidc client available outside of cli by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2908070306" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/925" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/925/hovercard" href="https://github.com/sigstore/sigstore-java/pull/925">#925</a></li>
<li>chore: use Gradle Java toolchains for the build and test execution by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2900209672" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/923" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/923/hovercard" href="https://github.com/sigstore/sigstore-java/pull/923">#923</a></li>
<li>tuf: use cached targets when available by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2908815559" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/926" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/926/hovercard" href="https://github.com/sigstore/sigstore-java/pull/926">#926</a></li>
<li>chore: do not require Java 17 for launching Gradle yet by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2909427323" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/927" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/927/hovercard" href="https://github.com/sigstore/sigstore-java/pull/927">#927</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.36.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2556994709" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/820" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/820/hovercard" href="https://github.com/sigstore/sigstore-java/pull/820">#820</a></li>
<li>fix(deps): update dependency org.mockito:mockito-bom to v5.16.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891723945" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/918" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/918/hovercard" href="https://github.com/sigstore/sigstore-java/pull/918">#918</a></li>
<li>chore(deps): update theupdateframework/tuf-conformance action to v2.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891153694" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/917" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/917/hovercard" href="https://github.com/sigstore/sigstore-java/pull/917">#917</a></li>
<li>chore(deps): update sigstore/community digest to 61b77fe by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2941904026" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/928" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/928/hovercard" href="https://github.com/sigstore/sigstore-java/pull/928">#928</a></li>
<li>fix(deps): update dependency org.junit:junit-bom to v5.12.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942795290" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/932" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/932/hovercard" href="https://github.com/sigstore/sigstore-java/pull/932">#932</a></li>
<li>fix(deps): update dependency org.mockito:mockito-bom to v5.16.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942795464" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/933" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/933/hovercard" href="https://github.com/sigstore/sigstore-java/pull/933">#933</a></li>
<li>chore(deps): update actions/upload-artifact action to v4.6.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2941904106" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/929" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/929/hovercard" href="https://github.com/sigstore/sigstore-java/pull/929">#929</a></li>
<li>chore(deps): update dependency go to 1.24.x by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942919243" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/935" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/935/hovercard" href="https://github.com/sigstore/sigstore-java/pull/935">#935</a></li>
<li>fix(deps): update dependency com.google.guava:guava to v33.4.6-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942146907" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/930" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/930/hovercard" href="https://github.com/sigstore/sigstore-java/pull/930">#930</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.37.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2943921182" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/936" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/936/hovercard" href="https://github.com/sigstore/sigstore-java/pull/936">#936</a></li>
<li>fix(deps): update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2944644437" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/938" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/938/hovercard" href="https://github.com/sigstore/sigstore-java/pull/938">#938</a></li>
<li>fix(deps): update dependency com.google.oauth-client:google-oauth-client-bom to v1.39.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2943921390" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/937" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/937/hovercard" href="https://github.com/sigstore/sigstore-java/pull/937">#937</a></li>
<li>chore(deps): update actions/setup-go action to v5.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942919069" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/934" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/934/hovercard" href="https://github.com/sigstore/sigstore-java/pull/934">#934</a></li>
<li>chore(deps): update sigstore/community digest to b9f2e38 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991690973" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/939" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/939/hovercard" href="https://github.com/sigstore/sigstore-java/pull/939">#939</a></li>
<li>chore(deps): update actions/setup-java action to v4.7.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991691060" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/940" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/940/hovercard" href="https://github.com/sigstore/sigstore-java/pull/940">#940</a></li>
<li>fix(deps): update dependency com.google.guava:guava to v33.4.8-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2992974778" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/943" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/943/hovercard" href="https://github.com/sigstore/sigstore-java/pull/943">#943</a></li>
<li>fix(deps): update dependency dev.sigstore:protobuf-specs to v0.4.1 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2994297588" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/944" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/944/hovercard" href="https://github.com/sigstore/sigstore-java/pull/944">#944</a></li>
<li>fix(deps): update dependency org.junit:junit-bom to v5.12.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2994299578" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/945" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/945/hovercard" href="https://github.com/sigstore/sigstore-java/pull/945">#945</a></li>
<li>fix(deps): update dependency com.diffplug.spotless:com.diffplug.spotless.gradle.plugin to v7.0.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991989859" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/942" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/942/hovercard" href="https://github.com/sigstore/sigstore-java/pull/942">#942</a></li>
<li>chore(deps): update gradle/actions action to v4.3.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991989737" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/941" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/941/hovercard" href="https://github.com/sigstore/sigstore-java/pull/941">#941</a></li>
<li>chore(deps): update dependency gradle to v8.14 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038657981" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/949" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/949/hovercard" href="https://github.com/sigstore/sigstore-java/pull/949">#949</a></li>
<li>chore(deps): update sigstore/sigstore-conformance action to v0.0.18 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038507401" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/947" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/947/hovercard" href="https://github.com/sigstore/sigstore-java/pull/947">#947</a></li>
<li>chore(deps): update sigstore/community digest to ab62b20 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038507320" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/946" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/946/hovercard" href="https://github.com/sigstore/sigstore-java/pull/946">#946</a></li>
<li>fix(deps): update dependency net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin to v4.2.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3040181911" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/955" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/955/hovercard" href="https://github.com/sigstore/sigstore-java/pull/955">#955</a></li>
<li>fix(deps): update dependency de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin to v3.9 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3039312460" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/953" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/953/hovercard" href="https://github.com/sigstore/sigstore-java/pull/953">#953</a></li>
<li>fix(deps): update dependency com.google.http-client:google-http-client-bom to v1.47.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3039312290" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/952" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/952/hovercard" href="https://github.com/sigstore/sigstore-java/pull/952">#952</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.38.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038749744" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/951" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/951/hovercard" href="https://github.com/sigstore/sigstore-java/pull/951">#951</a></li>
<li>fix(deps): update dependency com.google.code.gson:gson to v2.13.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038749623" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/950" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/950/hovercard" href="https://github.com/sigstore/sigstore-java/pull/950">#950</a></li>
<li>Add signing config parsers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3052988526" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/956" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/956/hovercard" href="https://github.com/sigstore/sigstore-java/pull/956">#956</a></li>
<li>Update google-java-format to 1.24.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3058004073" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/957" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/957/hovercard" href="https://github.com/sigstore/sigstore-java/pull/957">#957</a></li>
<li>Allow targetStore to return input streams by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3067277475" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/962" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/962/hovercard" href="https://github.com/sigstore/sigstore-java/pull/962">#962</a></li>
<li>chore: migrate to Kotlin Dokka 2.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3069205197" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/964" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/964/hovercard" href="https://github.com/sigstore/sigstore-java/pull/964">#964</a></li>
<li>Use SigstoreConfigurationException more widely by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3069187494" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/963" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/963/hovercard" href="https://github.com/sigstore/sigstore-java/pull/963">#963</a></li>
<li>Add timestamp client and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3064016629" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/960" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/960/hovercard" href="https://github.com/sigstore/sigstore-java/pull/960">#960</a></li>
<li>Consume signing_config v0.2 from TUF repo if availalbe. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3074813324" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/965" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/965/hovercard" href="https://github.com/sigstore/sigstore-java/pull/965">#965</a></li>
<li>ignoreUnknownFields when parsing json by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3084502065" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/966" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/966/hovercard" href="https://github.com/sigstore/sigstore-java/pull/966">#966</a></li>
<li>chore(deps): update dependency gradle to v8.14.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3089798734" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/969" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/969/hovercard" href="https://github.com/sigstore/sigstore-java/pull/969">#969</a></li>
<li>chore(deps): update actions/setup-go action to v5.5.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3090152537" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/971" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/971/hovercard" href="https://github.com/sigstore/sigstore-java/pull/971">#971</a></li>
<li>chore(deps): update gradle/actions action to v4.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3091117269" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/972" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/972/hovercard" href="https://github.com/sigstore/sigstore-java/pull/972">#972</a></li>
<li>chore(deps): update sigstore/community digest to 55b19bf by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3089786367" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/968" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/968/hovercard" href="https://github.com/sigstore/sigstore-java/pull/968">#968</a></li>
<li>Add providers for signing config and legacy helper by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3087139660" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/967" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/967/hovercard" href="https://github.com/sigstore/sigstore-java/pull/967">#967</a></li>
<li>Update Examples action to run on Windows, MacOs, and Linux by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/keastrid/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/keastrid">@keastrid</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3098171684" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/974" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/974/hovercard" href="https://github.com/sigstore/sigstore-java/pull/974">#974</a></li>
<li>Use Sigstore staging TSA in timestamp client by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3111034565" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/975" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/975/hovercard" href="https://github.com/sigstore/sigstore-java/pull/975">#975</a></li>
<li>Run dev/release examples in separate jobs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3111148831" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/976" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/976/hovercard" href="https://github.com/sigstore/sigstore-java/pull/976">#976</a></li>
<li>Add artifact validation and staging tests to timestamp verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3111249182" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/977" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/977/hovercard" href="https://github.com/sigstore/sigstore-java/pull/977">#977</a></li>
<li>Add RFC3161 timestamps to bundle reader and writer by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3114965187" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/978" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/978/hovercard" href="https://github.com/sigstore/sigstore-java/pull/978">#978</a></li>
<li>Add RFC3161 timestamps to keyless signer and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3118622438" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/979" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/979/hovercard" href="https://github.com/sigstore/sigstore-java/pull/979">#979</a></li>
<li>Push signing config through all our clients by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3119007327" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/981" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/981/hovercard" href="https://github.com/sigstore/sigstore-java/pull/981">#981</a></li>
<li>Add support for ED25519 in trusted_root by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125577871" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/983" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/983/hovercard" href="https://github.com/sigstore/sigstore-java/pull/983">#983</a></li>
<li>Use service helper to create temp services by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125591008" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/984" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/984/hovercard" href="https://github.com/sigstore/sigstore-java/pull/984">#984</a></li>
<li>Reduce redundant action runs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125706131" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/985" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/985/hovercard" href="https://github.com/sigstore/sigstore-java/pull/985">#985</a></li>
<li>use main on concurrency checks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125776498" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/986" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/986/hovercard" href="https://github.com/sigstore/sigstore-java/pull/986">#986</a></li>
<li>Update protobuf-specs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3131629696" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/988" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/988/hovercard" href="https://github.com/sigstore/sigstore-java/pull/988">#988</a></li>
<li>fix concurrency by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3131650839" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/989" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/989/hovercard" href="https://github.com/sigstore/sigstore-java/pull/989">#989</a></li>
<li>Update dependency org.apache.maven:maven-core to v3.9.10 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148709635" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/995" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/995/hovercard" href="https://github.com/sigstore/sigstore-java/pull/995">#995</a></li>
<li>Extract inclusion proof verifier into a new library by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3150890616" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/998" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/998/hovercard" href="https://github.com/sigstore/sigstore-java/pull/998">#998</a></li>
<li>Update dependency org.apache.maven:maven-plugin-api to v3.9.10 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3150103968" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/996" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/996/hovercard" href="https://github.com/sigstore/sigstore-java/pull/996">#996</a></li>
<li>Add support for Ed25519 signatures by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3150989235" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1000" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1000/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1000">#1000</a></li>
<li>group maven in renovate.json by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3157962779" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1003" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1003/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1003">#1003</a></li>
<li>Update maven build by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3158120725" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1004" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1004/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1004">#1004</a></li>
<li>Avoid having users look at ImmutableHttpParams by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3169346200" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1006" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1006/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1006">#1006</a></li>
<li>Add Rekor v2 client and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3137108038" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/990" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/990/hovercard" href="https://github.com/sigstore/sigstore-java/pull/990">#990</a></li>
<li>Allow RekorEntry to be built from TransparencyLogEntry by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3212876239" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1013" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1013/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1013">#1013</a></li>
<li>Add Rekor v2 staging URI to LegacySigningConfig by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3213053631" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1014" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1014/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1014">#1014</a></li>
<li>Unify Rekor v1 and v2 verifiers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3213255609" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1016" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1016/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1016">#1016</a></li>
<li>Add Rekor v2 support to bundle reader and writer by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3213612946" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1017" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1017/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1017">#1017</a></li>
<li>Fix check for empty SET in RekorVerifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3236838501" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1020" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1020/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1020">#1020</a></li>
<li>Move TLogEntry-to-RekorEntry converter to ProtoMutators by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3237122492" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1021" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1021/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1021">#1021</a></li>
<li>Add Rekor v2 support to keyless signer and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3169388513" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1008" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1008/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1008">#1008</a></li>
<li>fix(test): Update TUF client test for public good signing config v0.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3249029853" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1025" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1025/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1025">#1025</a></li>
<li>fix: Re-add timestamp verification in KeylessVerifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3248910956" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1024" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1024/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1024">#1024</a></li>
<li>Match signer chosing to algorithm registry by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3253030675" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1027" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1027/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1027">#1027</a></li>
<li>fix(deps): update dependency com.google.http-client:google-http-client-bom to v1.47.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3207388535" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1009" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1009/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1009">#1009</a></li>
<li>Require signing config from TUF and remove legacy fallback by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3254344622" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1028" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1028/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1028">#1028</a></li>
<li>Add DSSE envelope checks for Rekor v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3257456513" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1031" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1031/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1031">#1031</a></li>
<li>Replace LegacySigningConfig with TUF signing config by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3260366006" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1032" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1032/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1032">#1032</a></li>
<li>fix: Get Rekor v2 from signing config if enabled by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3264461140" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1035" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1035/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1035">#1035</a></li>
<li>fix(test): Verify signing result for Rekor v1 vs. v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3270329325" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1037" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1037/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1037">#1037</a></li>
<li>Get Rekor v2 service from TUF signing config by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3289896042" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1040" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1040/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1040">#1040</a></li>
<li>fix(deps): update dependency com.diffplug.spotless:com.diffplug.spotless.gradle.plugin to v7.2.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148382476" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/993" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/993/hovercard" href="https://github.com/sigstore/sigstore-java/pull/993">#993</a></li>
<li>chore(deps): update sigstore/community digest to 74d6625 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148382360" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/992" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/992/hovercard" href="https://github.com/sigstore/sigstore-java/pull/992">#992</a></li>
<li>chore(deps): update gradle/actions action to v4.4.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3207780199" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1011" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1011/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1011">#1011</a></li>
<li>chore(deps): update plugin org.gradlex.maven-plugin-development to v1.0.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3267956559" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1036" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1036/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1036">#1036</a></li>
<li>fix(deps): update dependency org.eclipse.jetty:jetty-server to v11.0.25 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942147070" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/931" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/931/hovercard" href="https://github.com/sigstore/sigstore-java/pull/931">#931</a></li>
<li>Add option to use conformance token by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3290011646" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1041" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1041/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1041">#1041</a></li>
<li>Use HTTP server for conformance testing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3278166302" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1038" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1038/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1038">#1038</a></li>
<li>chore(deps): update dependency gradle to v8.14.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148709505" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/994" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/994/hovercard" href="https://github.com/sigstore/sigstore-java/pull/994">#994</a></li>
<li>Configure maven central publishing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3297879188" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1042" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1042/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1042">#1042</a></li>
<li>Apply httpparams more universally by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3318982841" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1046" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1046/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1046">#1046</a></li>
<li>URL -> URI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3319829907" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1047" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1047/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1047">#1047</a></li>
<li>prepare for 2.0.0-rc1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3322896514" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1048" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1048/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1048">#1048</a></li>
<li>Updates after 2.0.0-rc1 release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3323560947" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1050" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1050/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1050">#1050</a></li>
<li>Update README.md by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3325654336" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1051" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1051/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1051">#1051</a></li>
<li>Update google-github-actions/get-secretmanager-secrets action to v2.2.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329757956" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1057" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1057/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1057">#1057</a></li>
<li>Update dependency org.assertj:assertj-core to v3.27.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329757700" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1056" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1056/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1056">#1056</a></li>
<li>Update dependency com.github.autostyle:com.github.autostyle.gradle.plugin to v4.0.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329208115" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1054" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1054/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1054">#1054</a></li>
<li>Update sigstore/community digest to ff42fd8 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3328835711" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1053" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1053/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1053">#1053</a></li>
<li>Update dependency com.gradleup.nmcp:com.gradleup.nmcp.gradle.plugin to v1.0.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329208233" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1055" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1055/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1055">#1055</a></li>
<li>Update google-github-actions/auth digest to dac4e13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3328835653" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1052" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1052/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1052">#1052</a></li>
<li>Group gradleup.nmcp in renovate.json by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3335430467" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1058" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1058/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1058">#1058</a></li>
<li>Update conformance with new xfail by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3352012590" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1060" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1060/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1060">#1060</a></li>
<li>tuf Updater: fix snapshot version rollback case by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jku/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jku">@jku</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3371288666" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1061" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1061/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1061">#1061</a></li>
<li>cli: Add working directory and enable Rekor v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3380258165" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1062" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1062/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1062">#1062</a></li>
<li>Use HTTP server for TUF conformance testing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3305396967" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1045" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1045/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1045">#1045</a></li>
<li>ref: Simplify hashedrekord and DSSE parsing exceptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3385293013" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1064" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1064/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1064">#1064</a></li>
<li>fix: Reject unsupported DSSE version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3385223427" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1063" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1063/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1063">#1063</a></li>
<li>Fix userAgent string in requests by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3388428398" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1066" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1066/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1066">#1066</a></li>
<li>Add Rekor v2 types to RekorTypes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3395090976" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1073" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1073/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1073">#1073</a></li>
<li>Handle null inputs parsing rekor entry by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3403044932" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1074" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1074/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1074">#1074</a></li>
<li>Catch json parse error from gson by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3411431097" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1075" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1075/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1075">#1075</a></li>
<li>chore(deps): update sigstore/community digest to d7264e2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392320114" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1067" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1067/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1067">#1067</a></li>
<li>chore(deps): update google-github-actions/auth action to v2.1.13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392320221" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1068" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1068/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1068">#1068</a></li>
<li>chore(deps): update gradle/actions action to v4.4.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392697697" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1070" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1070/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1070">#1070</a></li>
<li>chore(deps): update google-github-actions/get-secretmanager-secrets action to v2.2.5 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392697525" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1069" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1069/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1069">#1069</a></li>
<li>chore(deps): update sigstore/sigstore-conformance action to v0.0.20 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3393860321" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1071" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1071/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1071">#1071</a></li>
<li>fix(deps): update jetty monorepo to v11.0.26 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3393861179" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1072" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1072/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1072">#1072</a></li>
<li>chore(deps): update sigstore/sigstore-conformance action to v0.0.21 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3462807750" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1078" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1078/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1078">#1078</a></li>
<li>chore(deps): update sigstore/community digest to f539f57 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3462807669" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1077" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1077/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1077">#1077</a></li>
<li>fix(deps): update dependency com.google.code.gson:gson to v2.13.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3463344256" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1079" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1079/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1079">#1079</a></li>
<li>fix(deps): update dependency org.assertj:assertj-core to v3.27.6 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3463344390" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1080" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1080/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1080">#1080</a></li>
<li>chore(deps): update actions/checkout action to v4.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3464455270" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1081" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1081/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1081">#1081</a></li>
<li>chore(deps): update dependency go to 1.25.x by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3464455658" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1082" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1082/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1082">#1082</a></li>
<li>remove oidc config from gradle plugin by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3450495220" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1076" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1076/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1076">#1076</a></li>
<li>fix(deps): update dependency com.google.guava:guava to v33.5.0-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531538995" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1090" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1090/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1090">#1090</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.42.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531538725" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1089" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1089/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1089">#1089</a></li>
<li>fix(deps): update bouncycastle to v1.82 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531072710" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1087" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1087/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1087">#1087</a></li>
<li>chore(deps): update sigstore/community digest to f09be1d by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3530804899" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1085" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1085/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1085">#1085</a></li>
<li>chore(deps): update gradle/actions action to v4.4.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3530805033" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1086" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1086/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1086">#1086</a></li>
<li>fix(deps): update dependency com.code-intelligence:jazzer-api to v0.26.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531072861" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1088" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1088/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1088">#1088</a></li>
<li>Update after 2.0.0-rc2 release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3537176669" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1092" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1092/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1092">#1092</a></li>
<li>Update conformance.yml by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3601088442" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1093" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1093/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1093">#1093</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.44.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3606260026" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1096" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1096/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1096">#1096</a></li>
<li>chore(deps): update theupdateframework/tuf-conformance action to v2.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3605779069" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1095" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1095/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1095">#1095</a></li>
<li>chore(deps): update sigstore/community digest to 816d0b6 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3605778985" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1094" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1094/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1094">#1094</a></li>
<li>fix(deps): update dependency dev.sigstore:protobuf-specs to v0.5.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3606492043" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1100" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1100/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1100">#1100</a></li>
<li>fix(deps): update dependency de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin to v3.10 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3606491804" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1099" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1099/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1099">#1099</a></li>
<li>fix(deps): update dependency org.jetbrains.dokka-javadoc:org.jetbrains.dokka-javadoc.gradle.plugin to v2.1.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3606937525" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1102" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1102/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1102">#1102</a></li>
<li>fix(deps): update dependency net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin to v4.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3606937277" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1101" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1101/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1101">#1101</a></li>
<li>chore: use Java 21 for building sigstore-java by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3299181772" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1044" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1044/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1044">#1044</a></li>
<li>test: improve Gradle compatibility matrix by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3613153902" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1107" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1107/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1107">#1107</a></li>
<li>Fixes after java 21 update by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3612924346" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1106" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1106/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1106">#1106</a></li>
<li>fix(deps): update dependency org.junit:junit-bom to v5.14.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3608291714" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1103" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1103/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1103">#1103</a></li>
<li>fix(deps): update dependency org.mockito:mockito-bom to v5.20.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3608292029" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1104" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1104/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1104">#1104</a></li>
<li>Add support for creating and uploading DSSE attestations by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3511338669" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1084" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1084/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1084">#1084</a></li>
<li>Update conformance.yml by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3639093559" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1113" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1113/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1113">#1113</a></li>
<li>fix(deps): Migrate conformance servers from Jetty 11 to Jetty 12 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3626389420" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1111" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1111/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1111">#1111</a></li>
<li>workflows: Run conformance suites in parallel by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jku/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jku">@jku</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3625452080" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1109" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1109/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1109">#1109</a></li>
<li>docs: Update Maven Central badge URL in README by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3643470416" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1114" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1114/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1114">#1114</a></li>
<li>Wrap json operations for checked exceptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3644020409" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1115" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1115/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1115">#1115</a></li>
<li>fix(deps): update maven by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3207388624" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1010" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1010/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1010">#1010</a></li>
<li>Prepare for 2.0.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3648781319" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1117" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1117/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1117">#1117</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/hfhbd/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/hfhbd">@hfhbd</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2554947957" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/811" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/811/hovercard" href="https://github.com/sigstore/sigstore-java/pull/811">#811</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3064016629" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/960" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/960/hovercard" href="https://github.com/sigstore/sigstore-java/pull/960">#960</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/keastrid/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/keastrid">@keastrid</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3098171684" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/974" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/974/hovercard" href="https://github.com/sigstore/sigstore-java/pull/974">#974</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jku/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jku">@jku</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3371288666" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1061" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1061/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1061">#1061</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sigstore/sigstore-java/compare/v1.3.0...v2.0.0"><tt>v1.3.0...v2.0.0</tt></a></p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v2.0.0-rc2
2025-10-21T15:51:50Z
v2.0.0-rc2
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Updates after 2.0.0-rc1 release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3323560947" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1050" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1050/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1050">#1050</a></li>
<li>Update README.md by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3325654336" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1051" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1051/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1051">#1051</a></li>
<li>Update google-github-actions/get-secretmanager-secrets action to v2.2.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329757956" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1057" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1057/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1057">#1057</a></li>
<li>Update dependency org.assertj:assertj-core to v3.27.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329757700" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1056" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1056/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1056">#1056</a></li>
<li>Update dependency com.github.autostyle:com.github.autostyle.gradle.plugin to v4.0.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329208115" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1054" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1054/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1054">#1054</a></li>
<li>Update sigstore/community digest to ff42fd8 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3328835711" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1053" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1053/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1053">#1053</a></li>
<li>Update dependency com.gradleup.nmcp:com.gradleup.nmcp.gradle.plugin to v1.0.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3329208233" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1055" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1055/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1055">#1055</a></li>
<li>Update google-github-actions/auth digest to dac4e13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3328835653" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1052" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1052/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1052">#1052</a></li>
<li>Group gradleup.nmcp in renovate.json by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3335430467" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1058" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1058/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1058">#1058</a></li>
<li>Update conformance with new xfail by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3352012590" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1060" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1060/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1060">#1060</a></li>
<li>tuf Updater: fix snapshot version rollback case by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jku/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jku">@jku</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3371288666" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1061" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1061/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1061">#1061</a></li>
<li>cli: Add working directory and enable Rekor v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3380258165" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1062" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1062/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1062">#1062</a></li>
<li>Use HTTP server for TUF conformance testing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3305396967" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1045" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1045/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1045">#1045</a></li>
<li>ref: Simplify hashedrekord and DSSE parsing exceptions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3385293013" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1064" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1064/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1064">#1064</a></li>
<li>fix: Reject unsupported DSSE version by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3385223427" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1063" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1063/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1063">#1063</a></li>
<li>Fix userAgent string in requests by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3388428398" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1066" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1066/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1066">#1066</a></li>
<li>Add Rekor v2 types to RekorTypes by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3395090976" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1073" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1073/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1073">#1073</a></li>
<li>Handle null inputs parsing rekor entry by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3403044932" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1074" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1074/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1074">#1074</a></li>
<li>Catch json parse error from gson by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3411431097" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1075" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1075/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1075">#1075</a></li>
<li>chore(deps): update sigstore/community digest to d7264e2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392320114" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1067" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1067/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1067">#1067</a></li>
<li>chore(deps): update google-github-actions/auth action to v2.1.13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392320221" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1068" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1068/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1068">#1068</a></li>
<li>chore(deps): update gradle/actions action to v4.4.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392697697" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1070" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1070/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1070">#1070</a></li>
<li>chore(deps): update google-github-actions/get-secretmanager-secrets action to v2.2.5 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3392697525" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1069" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1069/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1069">#1069</a></li>
<li>chore(deps): update sigstore/sigstore-conformance action to v0.0.20 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3393860321" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1071" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1071/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1071">#1071</a></li>
<li>fix(deps): update jetty monorepo to v11.0.26 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3393861179" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1072" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1072/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1072">#1072</a></li>
<li>chore(deps): update sigstore/sigstore-conformance action to v0.0.21 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3462807750" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1078" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1078/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1078">#1078</a></li>
<li>chore(deps): update sigstore/community digest to f539f57 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3462807669" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1077" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1077/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1077">#1077</a></li>
<li>fix(deps): update dependency com.google.code.gson:gson to v2.13.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3463344256" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1079" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1079/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1079">#1079</a></li>
<li>fix(deps): update dependency org.assertj:assertj-core to v3.27.6 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3463344390" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1080" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1080/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1080">#1080</a></li>
<li>chore(deps): update actions/checkout action to v4.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3464455270" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1081" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1081/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1081">#1081</a></li>
<li>chore(deps): update dependency go to 1.25.x by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3464455658" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1082" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1082/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1082">#1082</a></li>
<li>remove oidc config from gradle plugin by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3450495220" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1076" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1076/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1076">#1076</a></li>
<li>fix(deps): update dependency com.google.guava:guava to v33.5.0-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531538995" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1090" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1090/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1090">#1090</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.42.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531538725" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1089" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1089/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1089">#1089</a></li>
<li>fix(deps): update bouncycastle to v1.82 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531072710" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1087" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1087/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1087">#1087</a></li>
<li>chore(deps): update sigstore/community digest to f09be1d by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3530804899" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1085" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1085/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1085">#1085</a></li>
<li>chore(deps): update gradle/actions action to v4.4.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3530805033" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1086" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1086/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1086">#1086</a></li>
<li>fix(deps): update dependency com.code-intelligence:jazzer-api to v0.26.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3531072861" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1088" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1088/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1088">#1088</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jku/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jku">@jku</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3371288666" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1061" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1061/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1061">#1061</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sigstore/sigstore-java/compare/v2.0.0-rc1...v2.0.0-rc2"><tt>v2.0.0-rc1...v2.0.0-rc2</tt></a></p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v2.0.0-rc1
2025-08-14T20:44:42Z
v2.0.0-rc1
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Add repo info to create release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2879283514" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/908" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/908/hovercard" href="https://github.com/sigstore/sigstore-java/pull/908">#908</a></li>
<li>Update dependency dev.sigstore:protobuf-specs to v0.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2843543948" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/903" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/903/hovercard" href="https://github.com/sigstore/sigstore-java/pull/903">#903</a></li>
<li>Update after v1.3.0 release by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2879448840" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/909" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/909/hovercard" href="https://github.com/sigstore/sigstore-java/pull/909">#909</a></li>
<li>Update conformance.yml to 0.0.17 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2885587516" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/910" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/910/hovercard" href="https://github.com/sigstore/sigstore-java/pull/910">#910</a></li>
<li>Update dependency commons-codec:commons-codec to v1.18.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2843543339" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/902" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/902/hovercard" href="https://github.com/sigstore/sigstore-java/pull/902">#902</a></li>
<li>Update sigstore/community digest to f1c21e9 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841118452" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/894" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/894/hovercard" href="https://github.com/sigstore/sigstore-java/pull/894">#894</a></li>
<li>Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v1.3.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841118492" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/895" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/895/hovercard" href="https://github.com/sigstore/sigstore-java/pull/895">#895</a></li>
<li>Update actions/upload-artifact action to v4.6.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2889967454" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/911" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/911/hovercard" href="https://github.com/sigstore/sigstore-java/pull/911">#911</a></li>
<li>Update dependency com.google.oauth-client:google-oauth-client-bom to v1.38.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2890255480" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/913" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/913/hovercard" href="https://github.com/sigstore/sigstore-java/pull/913">#913</a></li>
<li>Update dependency com.google.http-client:google-http-client-bom to v1.46.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2889967518" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/912" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/912/hovercard" href="https://github.com/sigstore/sigstore-java/pull/912">#912</a></li>
<li>chore: bump junit to 5.12 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2890332545" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/915" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/915/hovercard" href="https://github.com/sigstore/sigstore-java/pull/915">#915</a></li>
<li>Update dependency org.junit:junit-bom to v5.12.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2890255601" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/914" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/914/hovercard" href="https://github.com/sigstore/sigstore-java/pull/914">#914</a></li>
<li>chore(deps): update gradle/actions action to v4.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891153496" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/916" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/916/hovercard" href="https://github.com/sigstore/sigstore-java/pull/916">#916</a></li>
<li>fix(deps): update dependency com.diffplug.spotless:com.diffplug.spotless.gradle.plugin to v7 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891724158" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/919" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/919/hovercard" href="https://github.com/sigstore/sigstore-java/pull/919">#919</a></li>
<li>fix(deps): update dependency org.jetbrains.dokka:org.jetbrains.dokka.gradle.plugin to v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2892007173" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/921" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/921/hovercard" href="https://github.com/sigstore/sigstore-java/pull/921">#921</a></li>
<li>chore(deps): update dependency gradle to v8.13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2513864991" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/807" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/807/hovercard" href="https://github.com/sigstore/sigstore-java/pull/807">#807</a></li>
<li>Gradle plugin: Replace findProperty with Isolated Project compatible … by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/hfhbd/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/hfhbd">@hfhbd</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2554947957" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/811" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/811/hovercard" href="https://github.com/sigstore/sigstore-java/pull/811">#811</a></li>
<li>fix: add workaround for providers.gradleProperty for pre-7.4 Gradle versions by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2900458308" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/924" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/924/hovercard" href="https://github.com/sigstore/sigstore-java/pull/924">#924</a></li>
<li>Make token string oidc client available outside of cli by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2908070306" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/925" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/925/hovercard" href="https://github.com/sigstore/sigstore-java/pull/925">#925</a></li>
<li>chore: use Gradle Java toolchains for the build and test execution by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2900209672" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/923" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/923/hovercard" href="https://github.com/sigstore/sigstore-java/pull/923">#923</a></li>
<li>tuf: use cached targets when available by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2908815559" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/926" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/926/hovercard" href="https://github.com/sigstore/sigstore-java/pull/926">#926</a></li>
<li>chore: do not require Java 17 for launching Gradle yet by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2909427323" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/927" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/927/hovercard" href="https://github.com/sigstore/sigstore-java/pull/927">#927</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.36.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2556994709" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/820" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/820/hovercard" href="https://github.com/sigstore/sigstore-java/pull/820">#820</a></li>
<li>fix(deps): update dependency org.mockito:mockito-bom to v5.16.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891723945" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/918" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/918/hovercard" href="https://github.com/sigstore/sigstore-java/pull/918">#918</a></li>
<li>chore(deps): update theupdateframework/tuf-conformance action to v2.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2891153694" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/917" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/917/hovercard" href="https://github.com/sigstore/sigstore-java/pull/917">#917</a></li>
<li>chore(deps): update sigstore/community digest to 61b77fe by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2941904026" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/928" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/928/hovercard" href="https://github.com/sigstore/sigstore-java/pull/928">#928</a></li>
<li>fix(deps): update dependency org.junit:junit-bom to v5.12.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942795290" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/932" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/932/hovercard" href="https://github.com/sigstore/sigstore-java/pull/932">#932</a></li>
<li>fix(deps): update dependency org.mockito:mockito-bom to v5.16.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942795464" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/933" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/933/hovercard" href="https://github.com/sigstore/sigstore-java/pull/933">#933</a></li>
<li>chore(deps): update actions/upload-artifact action to v4.6.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2941904106" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/929" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/929/hovercard" href="https://github.com/sigstore/sigstore-java/pull/929">#929</a></li>
<li>chore(deps): update dependency go to 1.24.x by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942919243" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/935" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/935/hovercard" href="https://github.com/sigstore/sigstore-java/pull/935">#935</a></li>
<li>fix(deps): update dependency com.google.guava:guava to v33.4.6-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942146907" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/930" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/930/hovercard" href="https://github.com/sigstore/sigstore-java/pull/930">#930</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.37.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2943921182" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/936" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/936/hovercard" href="https://github.com/sigstore/sigstore-java/pull/936">#936</a></li>
<li>fix(deps): update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2944644437" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/938" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/938/hovercard" href="https://github.com/sigstore/sigstore-java/pull/938">#938</a></li>
<li>fix(deps): update dependency com.google.oauth-client:google-oauth-client-bom to v1.39.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2943921390" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/937" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/937/hovercard" href="https://github.com/sigstore/sigstore-java/pull/937">#937</a></li>
<li>chore(deps): update actions/setup-go action to v5.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942919069" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/934" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/934/hovercard" href="https://github.com/sigstore/sigstore-java/pull/934">#934</a></li>
<li>chore(deps): update sigstore/community digest to b9f2e38 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991690973" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/939" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/939/hovercard" href="https://github.com/sigstore/sigstore-java/pull/939">#939</a></li>
<li>chore(deps): update actions/setup-java action to v4.7.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991691060" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/940" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/940/hovercard" href="https://github.com/sigstore/sigstore-java/pull/940">#940</a></li>
<li>fix(deps): update dependency com.google.guava:guava to v33.4.8-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2992974778" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/943" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/943/hovercard" href="https://github.com/sigstore/sigstore-java/pull/943">#943</a></li>
<li>fix(deps): update dependency dev.sigstore:protobuf-specs to v0.4.1 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2994297588" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/944" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/944/hovercard" href="https://github.com/sigstore/sigstore-java/pull/944">#944</a></li>
<li>fix(deps): update dependency org.junit:junit-bom to v5.12.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2994299578" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/945" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/945/hovercard" href="https://github.com/sigstore/sigstore-java/pull/945">#945</a></li>
<li>fix(deps): update dependency com.diffplug.spotless:com.diffplug.spotless.gradle.plugin to v7.0.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991989859" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/942" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/942/hovercard" href="https://github.com/sigstore/sigstore-java/pull/942">#942</a></li>
<li>chore(deps): update gradle/actions action to v4.3.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2991989737" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/941" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/941/hovercard" href="https://github.com/sigstore/sigstore-java/pull/941">#941</a></li>
<li>chore(deps): update dependency gradle to v8.14 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038657981" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/949" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/949/hovercard" href="https://github.com/sigstore/sigstore-java/pull/949">#949</a></li>
<li>chore(deps): update sigstore/sigstore-conformance action to v0.0.18 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038507401" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/947" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/947/hovercard" href="https://github.com/sigstore/sigstore-java/pull/947">#947</a></li>
<li>chore(deps): update sigstore/community digest to ab62b20 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038507320" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/946" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/946/hovercard" href="https://github.com/sigstore/sigstore-java/pull/946">#946</a></li>
<li>fix(deps): update dependency net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin to v4.2.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3040181911" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/955" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/955/hovercard" href="https://github.com/sigstore/sigstore-java/pull/955">#955</a></li>
<li>fix(deps): update dependency de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin to v3.9 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3039312460" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/953" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/953/hovercard" href="https://github.com/sigstore/sigstore-java/pull/953">#953</a></li>
<li>fix(deps): update dependency com.google.http-client:google-http-client-bom to v1.47.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3039312290" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/952" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/952/hovercard" href="https://github.com/sigstore/sigstore-java/pull/952">#952</a></li>
<li>fix(deps): update dependency com.google.errorprone:error_prone_core to v2.38.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038749744" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/951" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/951/hovercard" href="https://github.com/sigstore/sigstore-java/pull/951">#951</a></li>
<li>fix(deps): update dependency com.google.code.gson:gson to v2.13.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3038749623" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/950" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/950/hovercard" href="https://github.com/sigstore/sigstore-java/pull/950">#950</a></li>
<li>Add signing config parsers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3052988526" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/956" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/956/hovercard" href="https://github.com/sigstore/sigstore-java/pull/956">#956</a></li>
<li>Update google-java-format to 1.24.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3058004073" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/957" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/957/hovercard" href="https://github.com/sigstore/sigstore-java/pull/957">#957</a></li>
<li>Allow targetStore to return input streams by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3067277475" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/962" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/962/hovercard" href="https://github.com/sigstore/sigstore-java/pull/962">#962</a></li>
<li>chore: migrate to Kotlin Dokka 2.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/vlsi/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/vlsi">@vlsi</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3069205197" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/964" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/964/hovercard" href="https://github.com/sigstore/sigstore-java/pull/964">#964</a></li>
<li>Use SigstoreConfigurationException more widely by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3069187494" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/963" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/963/hovercard" href="https://github.com/sigstore/sigstore-java/pull/963">#963</a></li>
<li>Add timestamp client and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3064016629" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/960" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/960/hovercard" href="https://github.com/sigstore/sigstore-java/pull/960">#960</a></li>
<li>Consume signing_config v0.2 from TUF repo if availalbe. by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3074813324" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/965" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/965/hovercard" href="https://github.com/sigstore/sigstore-java/pull/965">#965</a></li>
<li>ignoreUnknownFields when parsing json by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3084502065" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/966" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/966/hovercard" href="https://github.com/sigstore/sigstore-java/pull/966">#966</a></li>
<li>chore(deps): update dependency gradle to v8.14.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3089798734" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/969" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/969/hovercard" href="https://github.com/sigstore/sigstore-java/pull/969">#969</a></li>
<li>chore(deps): update actions/setup-go action to v5.5.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3090152537" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/971" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/971/hovercard" href="https://github.com/sigstore/sigstore-java/pull/971">#971</a></li>
<li>chore(deps): update gradle/actions action to v4.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3091117269" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/972" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/972/hovercard" href="https://github.com/sigstore/sigstore-java/pull/972">#972</a></li>
<li>chore(deps): update sigstore/community digest to 55b19bf by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3089786367" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/968" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/968/hovercard" href="https://github.com/sigstore/sigstore-java/pull/968">#968</a></li>
<li>Add providers for signing config and legacy helper by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3087139660" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/967" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/967/hovercard" href="https://github.com/sigstore/sigstore-java/pull/967">#967</a></li>
<li>Update Examples action to run on Windows, MacOs, and Linux by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/keastrid/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/keastrid">@keastrid</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3098171684" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/974" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/974/hovercard" href="https://github.com/sigstore/sigstore-java/pull/974">#974</a></li>
<li>Use Sigstore staging TSA in timestamp client by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3111034565" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/975" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/975/hovercard" href="https://github.com/sigstore/sigstore-java/pull/975">#975</a></li>
<li>Run dev/release examples in separate jobs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3111148831" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/976" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/976/hovercard" href="https://github.com/sigstore/sigstore-java/pull/976">#976</a></li>
<li>Add artifact validation and staging tests to timestamp verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3111249182" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/977" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/977/hovercard" href="https://github.com/sigstore/sigstore-java/pull/977">#977</a></li>
<li>Add RFC3161 timestamps to bundle reader and writer by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3114965187" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/978" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/978/hovercard" href="https://github.com/sigstore/sigstore-java/pull/978">#978</a></li>
<li>Add RFC3161 timestamps to keyless signer and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3118622438" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/979" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/979/hovercard" href="https://github.com/sigstore/sigstore-java/pull/979">#979</a></li>
<li>Push signing config through all our clients by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3119007327" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/981" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/981/hovercard" href="https://github.com/sigstore/sigstore-java/pull/981">#981</a></li>
<li>Add support for ED25519 in trusted_root by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125577871" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/983" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/983/hovercard" href="https://github.com/sigstore/sigstore-java/pull/983">#983</a></li>
<li>Use service helper to create temp services by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125591008" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/984" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/984/hovercard" href="https://github.com/sigstore/sigstore-java/pull/984">#984</a></li>
<li>Reduce redundant action runs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125706131" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/985" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/985/hovercard" href="https://github.com/sigstore/sigstore-java/pull/985">#985</a></li>
<li>use main on concurrency checks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3125776498" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/986" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/986/hovercard" href="https://github.com/sigstore/sigstore-java/pull/986">#986</a></li>
<li>Update protobuf-specs by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3131629696" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/988" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/988/hovercard" href="https://github.com/sigstore/sigstore-java/pull/988">#988</a></li>
<li>fix concurrency by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3131650839" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/989" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/989/hovercard" href="https://github.com/sigstore/sigstore-java/pull/989">#989</a></li>
<li>Update dependency org.apache.maven:maven-core to v3.9.10 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148709635" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/995" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/995/hovercard" href="https://github.com/sigstore/sigstore-java/pull/995">#995</a></li>
<li>Extract inclusion proof verifier into a new library by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3150890616" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/998" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/998/hovercard" href="https://github.com/sigstore/sigstore-java/pull/998">#998</a></li>
<li>Update dependency org.apache.maven:maven-plugin-api to v3.9.10 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3150103968" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/996" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/996/hovercard" href="https://github.com/sigstore/sigstore-java/pull/996">#996</a></li>
<li>Add support for Ed25519 signatures by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3150989235" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1000" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1000/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1000">#1000</a></li>
<li>group maven in renovate.json by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3157962779" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1003" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1003/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1003">#1003</a></li>
<li>Update maven build by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3158120725" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1004" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1004/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1004">#1004</a></li>
<li>Avoid having users look at ImmutableHttpParams by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3169346200" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1006" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1006/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1006">#1006</a></li>
<li>Add Rekor v2 client and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3137108038" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/990" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/990/hovercard" href="https://github.com/sigstore/sigstore-java/pull/990">#990</a></li>
<li>Allow RekorEntry to be built from TransparencyLogEntry by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3212876239" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1013" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1013/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1013">#1013</a></li>
<li>Add Rekor v2 staging URI to LegacySigningConfig by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3213053631" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1014" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1014/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1014">#1014</a></li>
<li>Unify Rekor v1 and v2 verifiers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3213255609" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1016" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1016/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1016">#1016</a></li>
<li>Add Rekor v2 support to bundle reader and writer by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3213612946" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1017" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1017/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1017">#1017</a></li>
<li>Fix check for empty SET in RekorVerifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3236838501" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1020" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1020/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1020">#1020</a></li>
<li>Move TLogEntry-to-RekorEntry converter to ProtoMutators by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3237122492" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1021" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1021/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1021">#1021</a></li>
<li>Add Rekor v2 support to keyless signer and verifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3169388513" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1008" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1008/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1008">#1008</a></li>
<li>fix(test): Update TUF client test for public good signing config v0.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3249029853" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1025" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1025/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1025">#1025</a></li>
<li>fix: Re-add timestamp verification in KeylessVerifier by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3248910956" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1024" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1024/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1024">#1024</a></li>
<li>Match signer chosing to algorithm registry by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3253030675" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1027" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1027/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1027">#1027</a></li>
<li>fix(deps): update dependency com.google.http-client:google-http-client-bom to v1.47.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3207388535" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1009" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1009/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1009">#1009</a></li>
<li>Require signing config from TUF and remove legacy fallback by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3254344622" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1028" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1028/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1028">#1028</a></li>
<li>Add DSSE envelope checks for Rekor v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3257456513" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1031" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1031/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1031">#1031</a></li>
<li>Replace LegacySigningConfig with TUF signing config by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3260366006" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1032" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1032/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1032">#1032</a></li>
<li>fix: Get Rekor v2 from signing config if enabled by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3264461140" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1035" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1035/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1035">#1035</a></li>
<li>fix(test): Verify signing result for Rekor v1 vs. v2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3270329325" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1037" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1037/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1037">#1037</a></li>
<li>Get Rekor v2 service from TUF signing config by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3289896042" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1040" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1040/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1040">#1040</a></li>
<li>fix(deps): update dependency com.diffplug.spotless:com.diffplug.spotless.gradle.plugin to v7.2.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148382476" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/993" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/993/hovercard" href="https://github.com/sigstore/sigstore-java/pull/993">#993</a></li>
<li>chore(deps): update sigstore/community digest to 74d6625 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148382360" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/992" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/992/hovercard" href="https://github.com/sigstore/sigstore-java/pull/992">#992</a></li>
<li>chore(deps): update gradle/actions action to v4.4.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3207780199" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1011" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1011/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1011">#1011</a></li>
<li>chore(deps): update plugin org.gradlex.maven-plugin-development to v1.0.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3267956559" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1036" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1036/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1036">#1036</a></li>
<li>fix(deps): update dependency org.eclipse.jetty:jetty-server to v11.0.25 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2942147070" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/931" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/931/hovercard" href="https://github.com/sigstore/sigstore-java/pull/931">#931</a></li>
<li>Add option to use conformance token by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3290011646" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1041" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1041/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1041">#1041</a></li>
<li>Use HTTP server for conformance testing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3278166302" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1038" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1038/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1038">#1038</a></li>
<li>chore(deps): update dependency gradle to v8.14.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a>[bot] in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3148709505" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/994" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/994/hovercard" href="https://github.com/sigstore/sigstore-java/pull/994">#994</a></li>
<li>Configure maven central publishing by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3297879188" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1042" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1042/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1042">#1042</a></li>
<li>Apply httpparams more universally by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3318982841" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1046" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1046/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1046">#1046</a></li>
<li>URL -> URI by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3319829907" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1047" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1047/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1047">#1047</a></li>
<li>prepare for 2.0.0-rc1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3322896514" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/1048" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/1048/hovercard" href="https://github.com/sigstore/sigstore-java/pull/1048">#1048</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/hfhbd/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/hfhbd">@hfhbd</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2554947957" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/811" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/811/hovercard" href="https://github.com/sigstore/sigstore-java/pull/811">#811</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/aaronlew02/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/aaronlew02">@aaronlew02</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3064016629" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/960" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/960/hovercard" href="https://github.com/sigstore/sigstore-java/pull/960">#960</a></li>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/keastrid/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/keastrid">@keastrid</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="3098171684" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/974" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/974/hovercard" href="https://github.com/sigstore/sigstore-java/pull/974">#974</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sigstore/sigstore-java/compare/v1.3.0...v2.0.0-rc1"><tt>v1.3.0...v2.0.0-rc1</tt></a></p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v1.3.0
2025-02-25T18:57:47Z
v1.3.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
<h2>New Feature</h2>
<ul>
<li>Add support for verifying dsse-intoto by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2680139802" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/855" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/855/hovercard" href="https://github.com/sigstore/sigstore-java/pull/855">#855</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Update bouncycastle to v1.79 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2711707929" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/864" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/864/hovercard" href="https://github.com/sigstore/sigstore-java/pull/864">#864</a></li>
<li>Update actions/setup-java action to v4.5.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2710509600" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/863" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/863/hovercard" href="https://github.com/sigstore/sigstore-java/pull/863">#863</a></li>
<li>Update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2710207239" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/861" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/861/hovercard" href="https://github.com/sigstore/sigstore-java/pull/861">#861</a></li>
<li>Update sigstore/community digest to ee857ea by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2647895705" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/841" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/841/hovercard" href="https://github.com/sigstore/sigstore-java/pull/841">#841</a></li>
<li>Update dependency com.google.http-client:google-http-client-bom to v1.45.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2710207164" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/860" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/860/hovercard" href="https://github.com/sigstore/sigstore-java/pull/860">#860</a></li>
<li>Add tests for downloadTarget by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2677048309" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/854" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/854/hovercard" href="https://github.com/sigstore/sigstore-java/pull/854">#854</a></li>
<li>Update sigstore/sigstore-conformance action to v0.0.13 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2710509513" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/862" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/862/hovercard" href="https://github.com/sigstore/sigstore-java/pull/862">#862</a></li>
<li>Import dsse/hashrekord types from rekor by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2723662965" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/867" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/867/hovercard" href="https://github.com/sigstore/sigstore-java/pull/867">#867</a></li>
<li>Parse DSSE bundles and Intoto payloads by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2723819732" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/868" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/868/hovercard" href="https://github.com/sigstore/sigstore-java/pull/868">#868</a></li>
<li>Update conformance to 0.0.14 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2736833359" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/869" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/869/hovercard" href="https://github.com/sigstore/sigstore-java/pull/869">#869</a></li>
<li>Reorganize message signature checks by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2748468397" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/872" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/872/hovercard" href="https://github.com/sigstore/sigstore-java/pull/872">#872</a></li>
<li>Change payload type to byte[] by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2748473232" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/873" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/873/hovercard" href="https://github.com/sigstore/sigstore-java/pull/873">#873</a></li>
<li>Update dependency com.code-intelligence:jazzer-api to v0.23.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2755438374" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/879" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/879/hovercard" href="https://github.com/sigstore/sigstore-java/pull/879">#879</a></li>
<li>Update actions/setup-go action to v5.2.0 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2755165439" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/877" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/877/hovercard" href="https://github.com/sigstore/sigstore-java/pull/877">#877</a></li>
<li>Update dependency org.junit:junit-bom to v5.11.4 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2755165382" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/876" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/876/hovercard" href="https://github.com/sigstore/sigstore-java/pull/876">#876</a></li>
<li>Update dependency com.google.http-client:google-http-client-bom to v1.45.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2754923237" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/875" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/875/hovercard" href="https://github.com/sigstore/sigstore-java/pull/875">#875</a></li>
<li>Update sigstore/community digest to 859cddd by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2754923190" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/874" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/874/hovercard" href="https://github.com/sigstore/sigstore-java/pull/874">#874</a></li>
<li>Update actions/setup-java action to v4.6.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2755438232" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/878" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/878/hovercard" href="https://github.com/sigstore/sigstore-java/pull/878">#878</a></li>
<li>Update gradle/actions action to v4.2.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2762637413" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/883" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/883/hovercard" href="https://github.com/sigstore/sigstore-java/pull/883">#883</a></li>
<li>Update dependency org.assertj:assertj-core to v3.27.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2762637363" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/882" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/882/hovercard" href="https://github.com/sigstore/sigstore-java/pull/882">#882</a></li>
<li>Update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2762831067" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/884" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/884/hovercard" href="https://github.com/sigstore/sigstore-java/pull/884">#884</a></li>
<li>Update softprops/action-gh-release action to v2.2.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2762831145" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/885" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/885/hovercard" href="https://github.com/sigstore/sigstore-java/pull/885">#885</a></li>
<li>Update dependency com.google.guava:guava to v33.4.0-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2762552318" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/880" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/880/hovercard" href="https://github.com/sigstore/sigstore-java/pull/880">#880</a></li>
<li>Update dependency com.google.oauth-client:google-oauth-client-bom to v1.37.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2762552374" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/881" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/881/hovercard" href="https://github.com/sigstore/sigstore-java/pull/881">#881</a></li>
<li>Update sigstore/sigstore-conformance action to v0.0.16 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2798791070" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/891" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/891/hovercard" href="https://github.com/sigstore/sigstore-java/pull/891">#891</a></li>
<li>address CI issues reported by zizmor by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bobcallaway/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bobcallaway">@bobcallaway</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2804501820" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/892" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/892/hovercard" href="https://github.com/sigstore/sigstore-java/pull/892">#892</a></li>
<li>Update sigstore/community digest to 9ce4322 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2797978285" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/886" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/886/hovercard" href="https://github.com/sigstore/sigstore-java/pull/886">#886</a></li>
<li>Update dependency commons-codec:commons-codec to v1.17.2 - autoclosed by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2797978362" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/887" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/887/hovercard" href="https://github.com/sigstore/sigstore-java/pull/887">#887</a></li>
<li>Update dependency dev.sigstore:protobuf-specs to v0.3.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2798195450" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/888" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/888/hovercard" href="https://github.com/sigstore/sigstore-java/pull/888">#888</a></li>
<li>Update dependency org.assertj:assertj-core to v3.27.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2798195539" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/889" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/889/hovercard" href="https://github.com/sigstore/sigstore-java/pull/889">#889</a></li>
<li>Update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2798790900" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/890" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/890/hovercard" href="https://github.com/sigstore/sigstore-java/pull/890">#890</a></li>
<li>Update actions/setup-go action to v5.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841345476" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/896" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/896/hovercard" href="https://github.com/sigstore/sigstore-java/pull/896">#896</a></li>
<li>Update actions/setup-java action to v4.7.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841345578" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/897" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/897/hovercard" href="https://github.com/sigstore/sigstore-java/pull/897">#897</a></li>
<li>Update bouncycastle to v1.80 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841720508" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/898" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/898/hovercard" href="https://github.com/sigstore/sigstore-java/pull/898">#898</a></li>
<li>Update dependency com.code-intelligence:jazzer-api to v0.24.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2841720669" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/899" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/899/hovercard" href="https://github.com/sigstore/sigstore-java/pull/899">#899</a></li>
<li>Update dependency com.google.code.gson:gson to v2.12.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2843008376" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/900" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/900/hovercard" href="https://github.com/sigstore/sigstore-java/pull/900">#900</a></li>
<li>Update dependency com.google.http-client:google-http-client-bom to v1.46.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2843011491" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/901" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/901/hovercard" href="https://github.com/sigstore/sigstore-java/pull/901">#901</a></li>
<li>Doc should say .sigstore.json instead of .sigstore.java by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thomasleplus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thomasleplus">@thomasleplus</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2873645012" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/906" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/906/hovercard" href="https://github.com/sigstore/sigstore-java/pull/906">#906</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/thomasleplus/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/thomasleplus">@thomasleplus</a> made their first contribution in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2873645012" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/906" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/906/hovercard" href="https://github.com/sigstore/sigstore-java/pull/906">#906</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sigstore/sigstore-java/compare/v1.2.0...v1.3.0"><tt>v1.2.0...v1.3.0</tt></a></p>
loosebazooka
tag:github.com,2008:Repository/460184708/v1.2.0
2024-12-04T21:46:36Z
v1.2.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>Fix checkpoint verification <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/sigstore/sigstore-java/commit/23fb4885e6704a5df4977f7acf253a745349edf9/hovercard" href="https://github.com/sigstore/sigstore-java/commit/23fb4885e6704a5df4977f7acf253a745349edf9"><tt>23fb488</tt></a></li>
<li>Update versions and changelog by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2684171655" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/858" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/858/hovercard" href="https://github.com/sigstore/sigstore-java/pull/858">#858</a></li>
<li>Add arifactDigest as input option for conformance by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2698966743" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/859" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/859/hovercard" href="https://github.com/sigstore/sigstore-java/pull/859">#859</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sigstore/sigstore-java/compare/v1.1.0...v1.2.0"><tt>v1.1.0...v1.2.0</tt></a></p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v1.1.0
2024-11-22T18:31:18Z
v1.1.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
<h2>What's Changed</h2>
<ul>
<li>update versions after 1.0.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2492807674" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/800" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/800/hovercard" href="https://github.com/sigstore/sigstore-java/pull/800">#800</a></li>
<li>Update dependency org.eclipse.jetty:jetty-server to v11.0.24 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2512846985" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/803" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/803/hovercard" href="https://github.com/sigstore/sigstore-java/pull/803">#803</a></li>
<li>Update gradle/actions action to v4.0.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2512847054" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/804" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/804/hovercard" href="https://github.com/sigstore/sigstore-java/pull/804">#804</a></li>
<li>Update dependency com.google.errorprone:error_prone_core to v2.31.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2513148964" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/805" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/805/hovercard" href="https://github.com/sigstore/sigstore-java/pull/805">#805</a></li>
<li>Update dependency com.google.http-client:google-http-client-bom to v1.45.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2513149131" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/806" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/806/hovercard" href="https://github.com/sigstore/sigstore-java/pull/806">#806</a></li>
<li>Update sigstore/community digest to af27ecc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2512702772" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/801" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/801/hovercard" href="https://github.com/sigstore/sigstore-java/pull/801">#801</a></li>
<li>Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v1.2.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2512702824" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/802" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/802/hovercard" href="https://github.com/sigstore/sigstore-java/pull/802">#802</a></li>
<li>Update dependency com.google.guava:guava to v33.3.1-jre by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2555239709" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/815" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/815/hovercard" href="https://github.com/sigstore/sigstore-java/pull/815">#815</a></li>
<li>Update actions/checkout action to v4.2.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2555680082" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/818" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/818/hovercard" href="https://github.com/sigstore/sigstore-java/pull/818">#818</a></li>
<li>Update actions/setup-java action to v4.4.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2555680214" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/819" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/819/hovercard" href="https://github.com/sigstore/sigstore-java/pull/819">#819</a></li>
<li>Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v1.3.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2556997279" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/821" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/821/hovercard" href="https://github.com/sigstore/sigstore-java/pull/821">#821</a></li>
<li>Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.7 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2555502033" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/816" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/816/hovercard" href="https://github.com/sigstore/sigstore-java/pull/816">#816</a></li>
<li>Update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2557741368" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/824" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/824/hovercard" href="https://github.com/sigstore/sigstore-java/pull/824">#824</a></li>
<li>Update gradle/actions action to v4.1.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2557381470" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/823" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/823/hovercard" href="https://github.com/sigstore/sigstore-java/pull/823">#823</a></li>
<li>Update dependency org.mockito:mockito-bom to v5.14.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2557346231" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/822" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/822/hovercard" href="https://github.com/sigstore/sigstore-java/pull/822">#822</a></li>
<li>Update sigstore/community digest to 95ef39c by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2555239640" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/814" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/814/hovercard" href="https://github.com/sigstore/sigstore-java/pull/814">#814</a></li>
<li>Update dependency org.junit:junit-bom to v5.11.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2555502107" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/817" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/817/hovercard" href="https://github.com/sigstore/sigstore-java/pull/817">#817</a></li>
<li>Move known roles in TUF by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2571265873" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/826" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/826/hovercard" href="https://github.com/sigstore/sigstore-java/pull/826">#826</a></li>
<li>Separate meta fetching from target fetching by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2579331355" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/827" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/827/hovercard" href="https://github.com/sigstore/sigstore-java/pull/827">#827</a></li>
<li>Non inferred file names by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2582151410" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/828" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/828/hovercard" href="https://github.com/sigstore/sigstore-java/pull/828">#828</a></li>
<li>Update actions/checkout action to v4.2.1 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2601018020" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/830" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/830/hovercard" href="https://github.com/sigstore/sigstore-java/pull/830">#830</a></li>
<li>Update dependency org.junit:junit-bom to v5.11.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2601285477" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/831" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/831/hovercard" href="https://github.com/sigstore/sigstore-java/pull/831">#831</a></li>
<li>Update dependency org.mockito:mockito-bom to v5.14.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2601285570" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/832" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/832/hovercard" href="https://github.com/sigstore/sigstore-java/pull/832">#832</a></li>
<li>Update dependency de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin to v3.8 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2601674704" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/833" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/833/hovercard" href="https://github.com/sigstore/sigstore-java/pull/833">#833</a></li>
<li>Update dependency org.junit:junit-bom to v5.11.3 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2602867662" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/835" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/835/hovercard" href="https://github.com/sigstore/sigstore-java/pull/835">#835</a></li>
<li>Update dependency net.ltgt.errorprone:net.ltgt.errorprone.gradle.plugin to v4.1.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2602694603" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/834" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/834/hovercard" href="https://github.com/sigstore/sigstore-java/pull/834">#834</a></li>
<li>Update sigstore/community digest to dcc3c01 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2601017942" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/829" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/829/hovercard" href="https://github.com/sigstore/sigstore-java/pull/829">#829</a></li>
<li>Store meta state in memory by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2612769861" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/836" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/836/hovercard" href="https://github.com/sigstore/sigstore-java/pull/836">#836</a></li>
<li>Update tuf updater api surface by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2629572224" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/839" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/839/hovercard" href="https://github.com/sigstore/sigstore-java/pull/839">#839</a></li>
<li>More tuf updates for conformance by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2633314444" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/840" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/840/hovercard" href="https://github.com/sigstore/sigstore-java/pull/840">#840</a></li>
<li>Start adding tuf conformance by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2625158780" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/838" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/838/hovercard" href="https://github.com/sigstore/sigstore-java/pull/838">#838</a></li>
<li>Update protobuf_grpc by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2647896562" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/842" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/842/hovercard" href="https://github.com/sigstore/sigstore-java/pull/842">#842</a></li>
<li>Update softprops/action-gh-release action to v2.1.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2648065984" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/844" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/844/hovercard" href="https://github.com/sigstore/sigstore-java/pull/844">#844</a></li>
<li>Update actions/setup-go action to v5.1.0 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2648294494" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/845" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/845/hovercard" href="https://github.com/sigstore/sigstore-java/pull/845">#845</a></li>
<li>Update staging and public good embedded starter roots by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2659493177" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/848" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/848/hovercard" href="https://github.com/sigstore/sigstore-java/pull/848">#848</a></li>
<li>Add tuf specific key/signature handlers by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2659287405" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/847" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/847/hovercard" href="https://github.com/sigstore/sigstore-java/pull/847">#847</a></li>
<li>Use tuf verifiers in updater by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2659516102" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/849" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/849/hovercard" href="https://github.com/sigstore/sigstore-java/pull/849">#849</a></li>
<li>Cleanup by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2659899683" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/850" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/850/hovercard" href="https://github.com/sigstore/sigstore-java/pull/850">#850</a></li>
<li>Update actions/checkout action to v4.2.2 by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/renovate/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/renovate">@renovate</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2648065793" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/843" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/843/hovercard" href="https://github.com/sigstore/sigstore-java/pull/843">#843</a></li>
<li>Cleanup keys parsing, caller specifies type by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2669271766" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/851" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/851/hovercard" href="https://github.com/sigstore/sigstore-java/pull/851">#851</a></li>
<li>Handle targets with path elements by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2669915955" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/853" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/853/hovercard" href="https://github.com/sigstore/sigstore-java/pull/853">#853</a></li>
<li>Fix test_duplicate_sig_keyids by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2669462155" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/852" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/852/hovercard" href="https://github.com/sigstore/sigstore-java/pull/852">#852</a></li>
<li>Rekor Entries should be reconstructed and compared by <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/loosebazooka/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/loosebazooka">@loosebazooka</a> in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2681494745" data-permission-text="Title is private" data-url="https://github.com/sigstore/sigstore-java/issues/856" data-hovercard-type="pull_request" data-hovercard-url="/sigstore/sigstore-java/pull/856/hovercard" href="https://github.com/sigstore/sigstore-java/pull/856">#856</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a class="commit-link" href="https://github.com/sigstore/sigstore-java/compare/v1.0.0...v1.1.0"><tt>v1.0.0...v1.1.0</tt></a></p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v1.0.0
2024-08-28T18:45:27Z
v1.0.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v0.12.0
2024-08-23T14:31:50Z
v0.12.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v0.11.0
2024-07-24T14:07:50Z
v0.11.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
github-actions[bot]
tag:github.com,2008:Repository/460184708/v0.10.0
2024-05-29T18:14:03Z
v0.10.0
<p>See <a href="https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md">CHANGELOG.md</a> for more details.</p>
github-actions[bot]