v3.57.0

v3.57.0 (2023-10-19)

Full Changelog

Added

• Experimental: Signed Pipelines
  • Signing build matrices #2440 #2429 #2426 #2425 #2391 #2395 (@DrJosh9000)
  • Add debug logs for job verification #2439 (@DrJosh9000)
  • Reduce information in verification errors #2431 (@DrJosh9000)
  • Separate step/pipeline env vars for job validation #2428 (@DrJosh9000)
  • Signing config cleanup #2420 #2427 (@moskyb)
  • Fix verifying jobs with no plugins #2419 (@DrJosh9000)
  • Use canonicalised JSON as signature payload #2416 (@DrJosh9000)
  • Add utility for generating signing and verification keys #2415 #2422 (@moskyb)

Changed

• Revert "Upgrade pre-installed packages in docker images" and Pin docker images by digest #2430 (@triarius)

Internal

• Use docker image bases from ECR public gallery #2423 #2424 (@triarius + @moskyb)
• Add CODEOWNERS file #2444 (@moskyb)
• Push agent packages to Packagecloud #2438 #2441 #2443 #2442 (@sj26)
• Test clicommand config completeness #2414 (@moskyb)
• As always, the cosmic background radiation of dependabot updates. Thanks dependabot! #2435 #2434 #2433 #2432 #2421 #2418 #2417 (@dependabot[bot])