v0.1.1

What's Changed

• Implement c2sp.org/tlog-proof by @Hayden-IO in #228
• Copy witness policy file format code from Tessera by @Hayden-IO in #229
• Bump Go to 1.25.0 by @roger2hk in #242
• Add MLDSA-44 cosigner implementation by @AlCutter in #247
• Add func to generate MLDSA key pairs by @AlCutter in #249
• Better MLDSA generate func name by @AlCutter in #250
• Remove unused RSA 6962 support by @AlCutter in #256

Deps

• 🌱(deps): Bump golang.org/x/mod from 0.32.0 to 0.33.0 in the all-go-deps group by @dependabot[bot] in #235
• 🌱(deps): Bump github/codeql-action from 4.32.2 to 4.32.3 in the all-gha-deps group by @dependabot[bot] in #236
• 🌱(deps): Bump github/codeql-action from 4.32.3 to 4.32.4 in the all-gha-deps group by @dependabot[bot] in #237
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #238
• 🌱(deps): Bump github/codeql-action from 4.32.4 to 4.32.6 in the all-gha-deps group by @dependabot[bot] in #239
• 🌱(deps): Bump the all-gha-deps group with 2 updates by @dependabot[bot] in #241
• 🌱(deps): Bump golang.org/x/mod from 0.33.0 to 0.34.0 in the all-go-deps group by @dependabot[bot] in #240
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #243
• 🌱(deps): Bump actions/upload-artifact from 7.0.0 to 7.0.1 in the all-gha-deps group by @dependabot[bot] in #245
• 🌱(deps): Bump golang.org/x/mod from 0.34.0 to 0.35.0 in the all-go-deps group across 1 directory by @dependabot[bot] in #244
• 🌱(deps): Bump github/codeql-action from 4.35.1 to 4.35.2 in the all-gha-deps group by @dependabot[bot] in #246
• 🌱(deps): Bump github/codeql-action from 4.35.2 to 4.35.3 in the all-gha-deps group by @dependabot[bot] in #248
• 🌱(deps): Bump the all-go-deps group with 2 updates by @dependabot[bot] in #251
• 🌱(deps): Bump github/codeql-action from 4.35.3 to 4.35.4 in the all-gha-deps group by @dependabot[bot] in #252
• 🌱(deps): Bump github/codeql-action from 4.35.4 to 4.35.5 in the all-gha-deps group by @dependabot[bot] in #253
• 🌱(deps): Bump the all-gha-deps group with 3 updates by @dependabot[bot] in #255
• 🌱(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in the all-go-deps group across 1 directory by @dependabot[bot] in #254

New Contributors

• @Hayden-IO made their first contribution in #228

Full Changelog: v0.1.0...v0.1.1

v0.1.0

What's Changed

• Added link to GenerateKey and noted algorithm id is required by @mhutchinson in #1
• Added a section on checkpoint merging by @mhutchinson in #2
• Add CI test + coverage by @AlCutter in #3
• Add CODEOWNERS with default team assignment by @AlCutter in #4
• Added lint config and presubmit script by @mhutchinson in #5
• Format code according to go1.19rc2 by @mhutchinson in #6
• Create scorecards.yml by @AlCutter in #7
• Create codeql.yml by @AlCutter in #8
• Tighten action permissions by @AlCutter in #9
• Add dependabot.yml by @AlCutter in #10
• Pin GitHub actions to git hashes by @AlCutter in #13
• Breaking change: Change the log ID function to also include the origin string by @mhutchinson in #15
• Enable all the linters by @mhutchinson in #20
• Update go version to minimum supported version by @mhutchinson in #21
• Update the docs on Origin string re #22 by @mhutchinson in #23
• Update ecosystem -> origin. by @jiggoha in #24
• Update and rename scorecards.yml to scorecard.yml by @AlCutter in #26
• Add dns_name recommendations for the Origin by @phbnf in #25
• Update log ID to not include the public key. by @jiggoha in #27
• Added scorecard badge by @mhutchinson in #30
• Added scorecard token by @mhutchinson in #31
• Update linter action and version, and auto-update by @mhutchinson in #32
• Add a benchmark on signing/verifying by @AlCutter in #43
• Group dependabot updates by ecosystem by @AlCutter in #52
• Updated Slack channel details by @mhutchinson in #64
• Migrate signers by @AlCutter in #66
• Add support for extracting CoSigV1 timestamps from signatures by @AlCutter in #69
• Bump to go1.21 by @AlCutter in #100
• Add support for verifying Sunlight checkpoints by @AlCutter in #99
• Update dependabot weekly instead of daily by @mhutchinson in #131
• Drop dep on the certificate-transparency-go repo by @AlCutter in #125
• Update token used for scorecard by @mhutchinson in #141
• Bump to go1.22 by @AlCutter in #148
• Drop TLS dep entirely by @AlCutter in #150
• Fix cosig timestamp endianness by @AlCutter in #153
• Added test for sigsum ID by @mhutchinson in #157
• Fix typo by @phbnf in #163
• Bump go version from 1.22 to 1.23 by @roger2hk in #179
• Bump golangci lint by @AlCutter in #183
• Update slack invite link by @taknira in #197
• Added function to generate vkey from skey by @mhutchinson in #199
• Fix failed scorecard analysis by @roger2hk in #205
• Bump Go version in go test workflow by @roger2hk in #206
• Add support for native CosignatureV1 (alg 0x04) verifier keys by @AlCutter in #216

Deps

• Bump golang.org/x/mod from 0.5.1 to 0.7.0 by @dependabot[bot] in #11
• Bump github.com/google/go-cmp from 0.5.6 to 0.5.9 by @dependabot[bot] in #12
• Bump golang.org/x/mod from 0.7.0 to 0.8.0 by @dependabot[bot] in #16
• Bump golang.org/x/mod from 0.8.0 to 0.9.0 by @dependabot[bot] in #17
• Bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot[bot] in #18
• Bump golang.org/x/mod from 0.10.0 to 0.11.0 by @dependabot[bot] in #28
• Bump golang.org/x/mod from 0.11.0 to 0.12.0 by @dependabot[bot] in #29
• Bump actions/setup-go from 3.3.1 to 4.1.0 by @dependabot[bot] in #33
• Bump actions/upload-artifact from 3.1.0 to 3.1.2 by @dependabot[bot] in #37
• Bump ossf/scorecard-action from 2.0.6 to 2.2.0 by @dependabot[bot] in #35
• Bump codecov/codecov-action from 2.1.0 to 3.1.4 by @dependabot[bot] in #34
• Bump actions/checkout from 3.1.0 to 3.5.3 by @dependabot[bot] in #36
• Bump github/codeql-action from 2.1.27 to 2.21.4 by @dependabot[bot] in #38
• Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot[bot] in #39
• Bump github/codeql-action from 2.21.4 to 2.21.5 by @dependabot[bot] in #40
• Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot[bot] in #41
• Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot[bot] in #42
• Bump github/codeql-action from 2.21.5 to 2.21.6 by @dependabot[bot] in #44
• Bump github/codeql-action from 2.21.6 to 2.21.7 by @dependabot[bot] in #45
• Bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot[bot] in #46
• Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot[bot] in #47
• Bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot[bot] in #48
• Bump golang.org/x/mod from 0.12.0 to 0.13.0 by @dependabot[bot] in #49
• Bump github/codeql-action from 2.21.9 to 2.22.0 by @dependabot[bot] in #50
• Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot[bot] in #51
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #53
• 🌱(deps): Bump the all-go-deps group with 1 update by @dependabot[bot] in #54
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #55
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #56
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #57
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #58
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #59
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #60
• 🌱(deps): Bump the all-go-deps group with 1 update by @dependabot[bot] in #61
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #62
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #63
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #65
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #67
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #68
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in #70
• 🌱(deps): Bump the all-gha-deps group with 1 update by @dependabot[bot] in https://github.com/transpar...