v0.15.1-rc5

Changelog

• 123132f fix: skip vulnerability scanning for packages that failed to build

v0.15.1-rc4

Changelog

• d998ff0 Fix SBOM generation to respect Docker export mode

v0.15.1-rc2

Changelog

• 9a7c4df fix: enable mock for unit tests that use dummy docker
• e0bd445 fix: extract container files from OCI tar instead of Docker daemon

v0.16.0-rc1

Changelog

• e7fd814 chore: fix formatting and clarify observability docs
• 7a9f91c chore: lint and format OpenTelemetry code
• 19f9e7d chore: remove leeway-dev.sh helper script
• aa8c20c feat: add OpenTelemetry tracing with build and package spans
• a64253c feat: add TLS configuration and fix version retrieval for OTel
• 14a1ae2 feat: add docker-in-docker to devcontainer
• 9da6e65 fix: properly shutdown OpenTelemetry tracer after build completes
• a00a84e refactor: improve OTLP endpoint configuration handling

v0.15.1-rc1

Changelog

• 1eae92f fix: correct build summary counts for packages built after verification failure

v0.15.0

What's Changed

• feat!: store in-toto provenance outside tar.gz by @leodido in #283
• feat: export SOURCE_DATE_EPOCH for build commands by @leodido in #284
• fix: pass SOURCE_DATE_EPOCH as build arg (+ fix timestamp in export metadata) for deterministic docker images by @leodido in #285
• build(deps): Bump golang.org/x/crypto from 0.42.0 to 0.45.0 by @dependabot[bot] in #287
• feat(docker): use OCI layout for deterministic image caching by @leodido in #286
• fix: extract digest from OCI layout for SLSA provenance by @leodido in #289
• fix: support container extraction with OCI layout export by @leodido in #290
• fix: support SBOM generation with OCI layout export by @leodido in #291
• fix: upload and download provenance bundles in S3 cache by @leodido in #292
• fix: move test coverage collection before packaging phase by @leodido in #294

Full Changelog: v0.14.0...v0.15.0

v0.15.0-rc7

Changelog

• ba0d150 fix: add backward compatibility for missing provenance bundles
• c103fb2 fix: add git initialization to TestDockerPackage_ExportToCache_Integration
• 61f08fe fix: extract digest from OCI layout for SLSA provenance
• d5d6983 fix: move test coverage collection before packaging phase
• f98b2e8 fix: support SBOM generation with OCI layout export
• d0c01ae fix: support container extraction with OCI layout export
• c875b21 fix: upload and download provenance bundles in S3 cache
• fa7e0fe refactor: add dedicated helpers for provenance bundle operations

v0.15.0-rc6

Changelog

Full Changelog: v0.15.0-rc5...v0.15.0-rc6

v0.15.0-rc5

Changelog

• 72c405f fix: add backward compatibility for missing provenance bundles
• c103fb2 fix: add git initialization to TestDockerPackage_ExportToCache_Integration
• 61f08fe fix: extract digest from OCI layout for SLSA provenance
• f98b2e8 fix: support SBOM generation with OCI layout export
• d0c01ae fix: support container extraction with OCI layout export
• 3bf7c45 fix: upload and download provenance bundles in S3 cache
• 3a42cb4 refactor: add dedicated helpers for provenance bundle operations