v0.1.0

What's Changed

• Added link to GenerateKey and noted algorithm id is required by @mhutchinson in #1
• Added a section on checkpoint merging by @mhutchinson in #2
• Add CI test + coverage by @AlCutter in #3
• Add CODEOWNERS with default team assignment by @AlCutter in #4
• Added lint config and presubmit script by @mhutchinson in #5
• Format code according to go1.19rc2 by @mhutchinson in #6
• Create scorecards.yml by @AlCutter in #7
• Create codeql.yml by @AlCutter in #8
• Tighten action permissions by @AlCutter in #9
• Add dependabot.yml by @AlCutter in #10
• Pin GitHub actions to git hashes by @AlCutter in #13
• Breaking change: Change the log ID function to also include the origin string by @mhutchinson in #15
• Enable all the linters by @mhutchinson in #20
• Update go version to minimum supported version by @mhutchinson in #21
• Update the docs on Origin string re #22 by @mhutchinson in #23
• Update ecosystem -> origin. by @jiggoha in #24
• Update and rename scorecards.yml to scorecard.yml by @AlCutter in #26
• Add dns_name recommendations for the Origin by @phbnf in #25
• Update log ID to not include the public key. by @jiggoha in #27
• Added scorecard badge by @mhutchinson in #30
• Added scorecard token by @mhutchinson in #31
• Update linter action and version, and auto-update by @mhutchinson in #32
• Add a benchmark on signing/verifying by @AlCutter in #43
• Group dependabot updates by ecosystem by @AlCutter in #52
• Updated Slack channel details by @mhutchinson in #64
• Migrate signers by @AlCutter in #66
• Add support for extracting CoSigV1 timestamps from signatures by @AlCutter in #69
• Bump to go1.21 by @AlCutter in #100
• Add support for verifying Sunlight checkpoints by @AlCutter in #99
• Update dependabot weekly instead of daily by @mhutchinson in #131
• Drop dep on the certificate-transparency-go repo by @AlCutter in #125
• Update token used for scorecard by @mhutchinson in #141
• Bump to go1.22 by @AlCutter in #148
• Drop TLS dep entirely by @AlCutter in #150
• Fix cosig timestamp endianness by @AlCutter in #153
• Added test for sigsum ID by @mhutchinson in #157
• Fix typo by @phbnf in #163
• Bump go version from 1.22 to 1.23 by @roger2hk in #179
• Bump golangci lint by @AlCutter in #183
• Update slack invite link by @taknira in #197
• Added function to generate vkey from skey by @mhutchinson in #199
• Fix failed scorecard analysis by @roger2hk in #205
• Bump Go version in go test workflow by @roger2hk in #206
• Add support for native CosignatureV1 (alg 0x04) verifier keys by @AlCutter in #216

Deps

• Bump golang.org/x/mod from 0.5.1 to 0.7.0 by @dependabot[bot] in #11
• Bump github.com/google/go-cmp from 0.5.6 to 0.5.9 by @dependabot[bot] in #12
• Bump golang.org/x/mod from 0.7.0 to 0.8.0 by @dependabot[bot] in #16
• Bump golang.org/x/mod from 0.8.0 to 0.9.0 by @dependabot[bot] in #17
• Bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot[bot] in #18
• Bump golang.org/x/mod from 0.10.0 to 0.11.0 by @dependabot[bot] in #28
• Bump golang.org/x/mod from 0.11.0 to 0.12.0 by @dependabot[bot] in #29
• Bump actions/setup-go from 3.3.1 to 4.1.0 by @dependabot[bot] in #33
• Bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot[bot] in #37
• Bump ossf/scorecard-action from 2.0.6 to 2.2.0 by @dependabot[bot] in #35
• Bump codecov/codecov-action from 2.1.0 to 3.1.4 by @dependabot[bot] in #34
• Bump actions/checkout from 3.1.0 to 3.5.3 by @dependabot[bot] in #36
• Bump github/codeql-action from 2.1.27 to 2.21.4 by @dependabot[bot] in #38
• Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot[bot] in #39
• Bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot[bot] in #40
• Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot[bot] in #41
• Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot[bot] in #42
• Bump github/codeql-action from 2.21.5 to 2.21.6 by @dependabot[bot] in #44
• Bump github/codeql-action from 2.21.6 to 2.21.7 by @dependabot[bot] in #45
• Bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot[bot] in #46
• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot[bot] in #47
• Bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot[bot] in #48
• Bump golang.org/x/mod from 0.12.0 to 0.13.0 by @dependabot[bot] in #49
• Bump github/codeql-action from 2.21.9 to 2.22.0 by @dependabot[bot] in #50
• Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot[bot] in #51
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #53
• 🌱(deps): Bump the all-go-deps group with 1 update by @dependabot[bot] in #54
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #55
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #56
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #57
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #58
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #59
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #60
• 🌱(deps): Bump the all-go-deps group with 1 update by @dependabot[bot] in #61
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #62
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #63
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #65
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #67
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #68
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #70
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #71
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #72
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #73
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #74
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #75
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #76
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #77
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #78
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #79
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #80
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #81
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #82
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #83
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #84
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #85
• 🌱(deps): Bump the all-go-deps group with 1 update by @dependabot[bot] in #86
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #87
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #88
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #89
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #90
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #91
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #92
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #93
• 🌱(deps): Bump the all-go-deps group with 1 update by @dependabot[bot] in #94
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #95
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #96
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #97
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #98
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #101
• 🌱(deps): Bump golang.org/x/mod from 0.16.0 to 0.17.0 in the all-go-deps group by @dependabot[bot] in #102
• 🌱(deps): Bump github/codeql-action from 3.24.9 to 3.24.10 in the all-gha-deps group by @dependabot[bot] in #103
• 🌱(deps): Bump codecov/codecov-action from 4.2.0 to 4.3.0 in the all-gha-deps group by @dependabot[bot] in #104
• 🌱(deps): Bump github/codeql-action from 3.24.10 to 3.25.0 in the all-gha-deps group by @dependabot[bot] in #106
• 🌱(deps): Bump github/codeql-action from 3.25.0 to 3.25.1 in the all-gha-deps group by @dependabot[bot] in #107
• 🌱(deps): Bump actions/upload-artifact from 4.3.1 to 4.3.2 in the all-gha-deps group by @dependabot[bot] in #108
• 🌱(deps): Bump actions/checkout from 4.1.2 to 4.1.3 in the all-gha-deps group by @dependabot[bot] in #109
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #110
• 🌱(deps): Bump the all-gha-deps group across 1 directory with 3 updates by @dependabot[bot] in #113
• 🌱(deps): Bump codecov/codecov-action from 4.3.0 to 4.3.1 in the all-gha-deps group by @dependabot[bot] in #114
• 🌱(deps): Bump actions/setup-go from 5.0.0 to 5.0.1 in the all-gha-deps group by @dependabot[bot] in #115
• 🌱(deps): Bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 in the all-gha-deps group by @dependabot[bot] in #116
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #117
• 🌱(deps): Bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 in the all-gha-deps group by @dependabot[bot] in #118
• 🌱(deps): Bump github/codeql-action from 3.25.3 to 3.25.4 in the all-gha-deps group by @dependabot[bot] in #119
• 🌱(deps): Bump ossf/scorecard-action from 2.3.1 to 2.3.3 in the all-gha-deps group by @dependabot[bot] in #120
• 🌱(deps): Bump github/codeql-action from 3.25.4 to 3.25.5 in the all-gha-deps group by @dependabot[bot] in #121
• 🌱(deps): Bump codecov/codecov-action from 4.3.1 to 4.4.0 in the all-gha-deps group by @dependabot[bot] in #122
• 🌱(deps): Bump actions/checkout from 4.1.5 to 4.1.6 in the all-gha-deps group by @dependabot[bot] in #123
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #124
• 🌱(deps): Bump github.com/google/certificate-transparency-go from 1.1.8 to 1.2.0 in the all-go-deps group by @dependabot[bot] in #126
• 🌱(deps): Bump github.com/google/certificate-transparency-go from 1.2.0 to 1.2.1 in the all-go-deps group by @dependabot[bot] in #127
• 🌱(deps): Bump github/codeql-action from 3.25.6 to 3.25.7 in the all-gha-deps group by @dependabot[bot] in #128
• 🌱(deps): Bump golang.org/x/mod from 0.17.0 to 0.18.0 in the all-go-deps group by @dependabot[bot] in #130
• 🌱(deps): Bump github/codeql-action from 3.25.7 to 3.25.8 in the all-gha-deps group by @dependabot[bot] in #129
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #132
• 🌱(deps): Bump github/codeql-action from 3.25.10 to 3.25.11 in the all-gha-deps group by @dependabot[bot] in #133
• 🌱(deps): Bump actions/upload-artifact from 4.3.3 to 4.3.4 in the all-gha-deps group by @dependabot[bot] in #134
• 🌱(deps): Bump golang.org/x/mod from 0.18.0 to 0.19.0 in the all-go-deps group by @dependabot[bot] in #135
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #136
• 🌱(deps): Bump github/codeql-action from 3.25.12 to 3.25.13 in the all-gha-deps group by @dependabot[bot] in #137
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #138
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #139
• 🌱(deps): Bump golang.org/x/mod from 0.19.0 to 0.20.0 in the all-go-deps group by @dependabot[bot] in #140
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #142
• 🌱(deps): Bump github/codeql-action from 3.26.0 to 3.26.2 in the all-gha-deps group by @dependabot[bot] in #143
• 🌱(deps): Bump github/codeql-action from 3.26.2 to 3.26.5 in the all-gha-deps group by @dependabot[bot] in #144
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #145
• 🌱(deps): Bump golang.org/x/mod from 0.20.0 to 0.21.0 in the all-go-deps group by @dependabot[bot] in #147
• 🌱(deps): Bump github/codeql-action from 3.26.6 to 3.26.7 in the all-gha-deps group by @dependabot[bot] in #149
• 🌱(deps): Bump github/codeql-action from 3.26.7 to 3.26.8 in the all-gha-deps group by @dependabot[bot] in #151
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #152
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #154
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #155
• 🌱(deps): Bump github/codeql-action from 3.26.12 to 3.26.13 in the all-gha-deps group by @dependabot[bot] in #156
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #158
• 🌱(deps): Bump golang.org/x/mod from 0.21.0 to 0.22.0 in the all-go-deps group by @dependabot[bot] in #159
• 🌱(deps): Bump github/codeql-action from 3.27.0 to 3.27.1 in the all-gha-deps group by @dependabot[bot] in #160
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #161
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #162
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #164
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #165
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #166
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #167
• 🌱(deps): Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 in the all-gha-deps group by @dependabot[bot] in #168
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #169
• 🌱(deps): Bump github/codeql-action from 3.28.5 to 3.28.8 in the all-gha-deps group by @dependabot[bot] in #170
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #172
• 🌱(deps): Bump golang.org/x/mod from 0.22.0 to 0.23.0 in the all-go-deps group by @dependabot[bot] in #171
• 🌱(deps): Bump golangci/golangci-lint-action from 6.3.1 to 6.5.0 in the all-gha-deps group by @dependabot[bot] in #173
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #175
• 🌱(deps): Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 in the all-go-deps group by @dependabot[bot] in #174
• 🌱(deps): Bump codecov/codecov-action from 5.3.1 to 5.4.0 in the all-gha-deps group by @dependabot[bot] in #176
• 🌱(deps): Bump github/codeql-action from 3.28.10 to 3.28.11 in the all-gha-deps group by @dependabot[bot] in #178
• 🌱(deps): Bump golang.org/x/mod from 0.23.0 to 0.24.0 in the all-go-deps group by @dependabot[bot] in #177
• 🌱(deps): Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 in the all-gha-deps group by @dependabot[bot] in #180
• 🌱(deps): Bump the all-gha-deps group with 4 updates by @dependabot[bot] in #181
• 🌱(deps): Bump github/codeql-action from 3.28.12 to 3.28.13 in the all-gha-deps group across 1 directory by @dependabot[bot] in #184
• 🌱(deps): Bump github/codeql-action from 3.28.13 to 3.28.15 in the all-gha-deps group by @dependabot[bot] in #185
• 🌱(deps): Bump codecov/codecov-action from 5.4.0 to 5.4.2 in the all-gha-deps group by @dependabot[bot] in #186
• 🌱(deps): Bump github/codeql-action from 3.28.15 to 3.28.16 in the all-gha-deps group by @dependabot[bot] in #187
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #188
• 🌱(deps): Bump actions/setup-go from 5.4.0 to 5.5.0 in the all-gha-deps group by @dependabot[bot] in #189
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #190
• 🌱(deps): Bump ossf/scorecard-action from 2.4.1 to 2.4.2 in the all-gha-deps group by @dependabot[bot] in #191
• 🌱(deps): Bump golang.org/x/mod from 0.24.0 to 0.25.0 in the all-go-deps group by @dependabot[bot] in #192
• 🌱(deps): Bump github/codeql-action from 3.28.18 to 3.28.19 in the all-gha-deps group by @dependabot[bot] in #193
• 🌱(deps): Bump github/codeql-action from 3.28.19 to 3.29.0 in the all-gha-deps group by @dependabot[bot] in #194
• 🌱(deps): Bump github/codeql-action from 3.29.0 to 3.29.1 in the all-gha-deps group by @dependabot[bot] in #195
• 🌱(deps): Bump github/codeql-action from 3.29.1 to 3.29.2 in the all-gha-deps group by @dependabot[bot] in #196
• 🌱(deps): Bump golang.org/x/mod from 0.25.0 to 0.26.0 in the all-go-deps group by @dependabot[bot] in #198
• 🌱(deps): Bump github/codeql-action from 3.29.2 to 3.29.4 in the all-gha-deps group by @dependabot[bot] in #200
• 🌱(deps): Bump github/codeql-action from 3.29.4 to 3.29.5 in the all-gha-deps group by @dependabot[bot] in #201
• 🌱(deps): Bump golang.org/x/mod from 0.26.0 to 0.27.0 in the all-go-deps group by @dependabot[bot] in #202
• 🌱(deps): Bump the all-gha-deps group across 1 directory with 2 updates by @dependabot[bot] in #204
• 🌱(deps): Bump github/codeql-action from 3.29.8 to 3.29.9 in the all-gha-deps group by @dependabot[bot] in #207
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #208
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #210
• 🌱(deps): Bump golang.org/x/mod from 0.27.0 to 0.28.0 in the all-go-deps group by @dependabot[bot] in #209
• 🌱(deps): Bump github/codeql-action from 3.30.1 to 3.30.3 in the all-gha-deps group by @dependabot[bot] in #211
• 🌱(deps): Bump github/codeql-action from 3.30.3 to 3.30.5 in the all-gha-deps group by @dependabot[bot] in #212
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #213
• 🌱(deps): Bump golang.org/x/mod from 0.28.0 to 0.29.0 in the all-go-deps group by @dependabot[bot] in #214
• 🌱(deps): Bump github/codeql-action from 3.30.6 to 4.30.8 in the all-gha-deps group by @dependabot[bot] in #215
• 🌱(deps): Bump github/codeql-action from 4.30.8 to 4.30.9 in the all-gha-deps group by @dependabot[bot] in #217
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #218
• 🌱(deps): Bump github/codeql-action from 4.31.0 to 4.31.2 in the all-gha-deps group by @dependabot[bot] in #219
• 🌱(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 in the all-gha-deps group by @dependabot[bot] in #220
• 🌱(deps): Bump golang.org/x/mod from 0.29.0 to 0.30.0 in the all-go-deps group by @dependabot[bot] in #221
• 🌱(deps): Bump the all-gha-deps group with 4 updates by @dependabot[bot] in #222
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #223
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #225
• 🌱(deps): Bump golang.org/x/mod from 0.30.0 to 0.31.0 in the all-go-deps group by @dependabot[bot] in #224
• 🌱(deps): Bump github/codeql-action from 4.31.8 to 4.31.9 in the all-gha-deps group by @dependabot[bot] in #226
• 🌱(deps): Bump golang.org/x/mod from 0.31.0 to 0.32.0 in the all-go-deps group by @dependabot[bot] in #227
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #230
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #231
• 🌱(deps): Bump github/codeql-action from 4.31.11 to 4.32.0 in the all-gha-deps group by @dependabot[bot] in #232
• 🌱(deps): Bump github/codeql-action from 4.32.0 to 4.32.2 in the all-gha-deps group by @dependabot[bot] in #233

New Contributors

• @mhutchinson made their first contribution in #1
• @AlCutter made their first contribution in #3
• @dependabot[bot] made their first contribution in #11
• @jiggoha made their first contribution in #24
• @phbnf made their first contribution in #25
• @roger2hk made their first contribution in #179
• @taknira made their first contribution in #197

Full Changelog: https://github.com/transparency-dev/formats/commits/v0.1.0