gittuf: baixar versions anteriors

This release addresses a performance issue with verification of data signed with
Sigstore, ships an experimental new go-git storage backend that is significantly
faster, and makes various improvements across gittuf. This release also includes
a security fix, see the repository's GitHub advisories for more.
Changelog
Added
- Added support for application-defined custom fields in the RSL
- Added an experimental, significantly faster go-git storage backend
(currently GITTUF_DEV only)
- Added a clear upgrade message when the RSL contains an entry type or the policy
metadata uses a schema version this client does not implement
- Added end-to-end testing framework
Updated
- Optimized Sigstore metadata fetch process
- Improved support for custom metadata containing the = character (e.g., base64, etc.)
- Improved support for GPG keys on Windows
- Fixed removal of SSH keys from root and top-level policy
- Updated internal parsing of file names for non-ASCII characters
- Various improvements to metadata manipulation and attestation commands
- Various updates to the TUI
- Various updates to documentation
- Updated various dependencies and CI workflows
Removed
- Removed gittuf native hooks
- Removed persistent cache
- Moved git-remote-gittuf to its own repository
(see https://github.com/gittuf/git-remote-gittuf)

This release adds support for SHA-256 Git repositories and reworks gittuf's
storage interface to enable compatibility with server repositories that do not
use the Git binary as their storage backend. This release also fixes a security
vulnerability, see the advisory on GitHub for more information.
Changelog
Added
- Significant functionality upgrades in the TUI
- Inspection commands for both root of trust and policy file metadata (improved
from previously-removed root inspection command)
- WithRecordSigningKeyBytes and WithAnnotateSigningKeyBytes added to the API
Updated
- Fixed HTTP connection not being closed after querying Fulcio
- Fixed prioritization of global rules during verification
- Reworked storage backend with new Storer interface
- Exported RSL API for integration with forges and other systems
- Updated various CLI docstrings and tests
- Significant testing improvements
- Significant updates to the TUI
- Updated various dependencies and CI workflows

This release contains performance and significant testing improvements across
the codebase, and includes improvements for the gittuf transport. A new TUI is
also included, and is a work-in-progress.
Changelog
Added
- The TUI has been refreshed with a new coat of paint
- go-git has been upgraded to v6
Updated
- Improved bounds checking for git-remote-gittuf
- Improved RSL entry parsing
- Increased testing coverage across multiple packages
- Fixed test various failures on Windows
- Fixed Git config issues in various tests
- Updated various dependencies and CI workflows
Removed
- Removed gittuf dev CLI commands

This release ships some small improvements, and fixes security vulnerabilities
in dependencies. See the release notes on GitHub for more information.
Changelog
Added
- Added unit tests for the TUI
Updated
- Increased testing coverage for remote policy synchronization and gitinterface
- Fixed issue with git-remote-gittuf and pruning remote branches
- Updated various dependencies

This release improves our testing coverage, makes various improvements across
the codebase, and removes support for the legacy securesystemslib key format.
This release also fixes security vulnerabilities, see the advisories on GitHub
for more information.
Changelog
Added
- Added support for filtering the RSL by target reference of entries
- Added testing for gittuf in CI on FreeBSD
- Added fixes to prevent policy rollback attacks via RSL
- Added missing validation when loading first policy state
Updated
- Improved checks for invalid thresholds
- Improved reliability of integration with the gittuf GitHub app
- Improved CLI documentation
- Increased testing coverage significantly across multiple packages
- Updated various dependencies and CI workflows
Removed
- Removed support for legacy securesystemslib key formats, used in early alpha
builds of gittuf

This release is a follow-up to `v0.13.0`, with artifacts now being built properly.
Starting from this release, we now ship both attested SBOMs and build provenance. See https://github.com/gittuf/gittuf/attestations/.
Functionally, this release is identical to `v0.13.0`, with a few small internal updates.
Changelog
Updated
- Updated a test for invalid RSL recovery
- Updated various dependencies and CI workflows

This release fixes a bug in the verification and recovery workflow that incorrectly prevents verification from continuing even after a policy violation has been fixed.
Changelog
Added
Added CLI documentation for various commands
Added support for updating propagation directives
Added support for updating persons in gittuf metadata
Added support for resetting gittuf's persistent cache
Updated
Moved various functionality out of developer mode
Fixed issue with gittuf verification and propagation entries
Fixed color gittuf output in some environments
Updated various dependencies and CI workflows

This release includes improved documentation of various gittuf commands, new verification capabilities for gittuf's experimental multi-repository support, and more.
Changelog
Added
-Added support for verifying policy status of repository's network for a controller
-Added long descriptions for various gittuf CLI commands
-Added support for shallow fetches in gitinterface
-Added support for propagating specified subtree from upstream repository
-Added CI workflow to verify repository's gittuf policy
Updated
-Improved test coverage for GitHub attestations
-Moved persistent caching out of developer mode
-Updated security insights documentation with project's dependency policy
-Updated documentation to indicate promotion to incubating status
-Updated documentation to indicate Go setup requirements
-Updated various dependencies and CI workflows

This is a patch release with an update to how gittuf handles the GitHub API client and the token required to authenticate with the API.
Changelog
Updated
- Updated how GitHub API tokens are loaded to prevent issues with expiry
- Updated release workflow to replace deprecated option

This is a patch release for the changes merged since our beta release.
Changelog
Added
- Added a `HasPolicy` API to check if a repository has gittuf policy defined
- Added documentation on how to inspect gittuf metadata
- Added `gittuf trust inspect-root` to pretty-print repository's root of trust
metadata
- Added long documentation for some gittuf commands
- Added global rules support to TUI
Updated
- Updated tests and generic set implementation used internally
- Updated documentation with typo fixes and Slack information
- Updated release workflow to automatically bump gittuf's Winget package
- Updated various dependencies and CI workflows

This release includes multiple quality-of-life improvements as well as changes to support gittuf policies that work across multiple repositories. This is possibly our last alpha minor version!
Changelog
Added
- Added a terminal UI (TUI) to enable managing gittuf policy interactively
- Added global rules to set thresholds and prohibit force pushes to help set security baselines in repositories with gittuf
- Added workflows to support synchronizing/propagating policy and RSL changes across multiple repositories
- Added local persistent cache functionality to reduce the time taken for verification of a repository after successful initial verification
- Added functionality to set a repository's canonical location in gittuf metadata
- Added a control for RSL recording to skip checking for duplicates
- Added the gittuf Augmentation Process (GAP) for formalizing changes to gittuf
- Added color output for various gittuf logging flows
- Added functionality to discard currently staged changes to policy
- Added functionality to remove principals and keys no longer used by rules in the metadata
Updated
- Updated RSL printing to now use buffered output, improving performance
- Improved testing coverage of gitinterface
- Updated the design document for clarity and to reflect recent changes to gittuf
- Updated various dependencies and CI workflows
Contributors
This release includes work by @haotran-california, @fr0m-scratch, @yongjae354, @Raghava-Gatadi, @Horiodino, @patzielinski, @JustinCappos, and @adityasaky, with dependency updates courtesy of @dependabot.