v1.4.4

What's Changed

• Bump predicate action from 1.1.3 to 1.1.4 by @bdehamer in #310
  • Bump @actions/core from 1.10.1 to 1.11.1 by @dependabot in #275
  • Bump @actions/attest from 1.4.2 to 1.5.0 by @bdehamer in #309
    • Fix SLSA provenance bug related to workflow_ref OIDC token claims containing the "@" symbol in the tag name (actions/toolkit#1863)

Full Changelog: v1.4.3...v1.4.4

v1.4.3

What's Changed

• Bump predicate from 1.1.2 to 1.1.3 by @bdehamer in #226
  • Bump @actions/attest from 1.3.1 to 1.4.1 by @dependabot in #212
  • Bump @actions/attest from 1.4.1 to 1.4.2 by @bdehamer in #225
  • Fix bug w/ customized OIDC issuer URL for enterprise accounts (#222)

Full Changelog: v1.4.2...v1.4.3

v1.4.2

What's Changed

• Bump actions/attest from 1.4.0 to 1.4.1 by @bdehamer in #209
  • Includes bug fix for issue with authenticated proxies (actions/toolkit#1798)

Full Changelog: v1.4.1...v1.4.2

v1.4.1

What's Changed

• Update predicate action to 1.1.2 by @bdehamer in #197
  • Dynamic construction of oidc issuer by @bdehamer in #195

Full Changelog: v1.4.0...v1.4.1

v1.4.0

What's Changed

• Bump predicate action from 1.1.0 to 1.1.1 by @bdehamer in #182
  • Fix for JWKS proxy bug
• Bump actions/attest from 1.3.3 to 1.4.0 by @bdehamer in #183
  • Add show-summary input
  • Format summary output as list

Full Changelog: v1.3.3...v1.4.0

v1.3.3

What's Changed

• Bump actions/attest from 1.3.2 to 1.3.3 by @bdehamer in #152
  • Bugfix for properly handling glob exclusion patterns in subject-path input

Full Changelog: v1.3.2...v1.3.3

v1.3.2

What's Changed

• Bump actions/attest from 1.3.1 to 1.3.2 by @bdehamer in #123
  • Increase timeout for OCI operations

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Bump actions/attest from 1.3.0 to 1.3.1 by @bdehamer in #117
  • Bugfix when detecting support for the referrers API with OCI registries

Full Changelog: v1.3.0...v1.3.1

v1.3.0

What's Changed

• Bump actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0 by @bdehamer in #116
  • Switch to new GH provenance build type
• Bump actions/attest from 1.2.0 to 1.3.0 by @bdehamer in #116
  • Dynamic construction of GitHub API URLs based on GITHUB_SERVER_URL
  • Improved handling of Rekor 409 responses
  • Bugfix - detection of registries with support for the OCI referrers API

Full Changelog: v1.2.0...v1.3.0

v1.2.0

What's Changed

• Bump actions/attest from 1.1.2 to 1.2.0 by @bdehamer in #101
  • Batch processing w/ exponential backoff
  • Bugfix when pushing attestation to OCI registry

Full Changelog: v1.1.2...v1.2.0