From bf6b57bc3edf8deb7e225e4dbd2d26c0d432979b Mon Sep 17 00:00:00 2001 From: Hayden B Date: Tue, 5 Dec 2023 10:59:25 -0800 Subject: [PATCH] Add changelog for v2.2.2 (#3416) Signed-off-by: Hayden Blauzvern --- CHANGELOG.md | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9adcd42b7d3..841e7e47a1b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,41 @@ +# v2.2.2 + +v2.2.2 adds a new container with a shell, `gcr.io/projectsigstore/cosign:vx.y.z-dev`, in addition to the existing +container `gcr.io/projectsigstore/cosign:vx.y.z` without a shell. + +For private deployments, we have also added an alias for `--insecure-skip-log`, `--private-infrastructure`. + +## Bug Fixes + +* chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS +* Don't require CT log keys if using a key/sk (#3415) +* Fix copy without any flag set (#3409) +* Update cosign generate cmd to not include newline (#3393) +* Fix idempotency error with signing (#3371) + +## Features + +* Add `--yes` flag `cosign import-key-pair` to skip the overwrite confirmation. (#3383) +* Use the timeout flag value in verify* commands. (#3391) +* add --private-infrastructure flag (#3369) + +## Container Updates + +* Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373) + +## Documentation + +* Update SBOM_SPEC.md (#3358) + +## Contributors + +* Carlos Tadeu Panato Junior +* Dylan Richardson +* Hayden B +* Lily Sturmann +* Nikos Fotiou +* Yonghe Zhao + # v2.2.1 **Note: This release comes with a fix for CVE-2023-46737 described in this [Github Security Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9). Please upgrade to this release ASAP**