v0.3.0

What's Changed

• Fix linter errors for the template by @shafeeqes in #151
• upgrade go to 1.22 / general housekeeping and lint fixes by @cpanato in #172
• run attest in prs to test the entire release flow by @cpanato in #179
• Add support for Golang GO-* vulnerability identifier by @ferozsalam in #182
• update installation methods with homebrew by @stephengroat in #205
• fix(create): support multiple --product flags by @felipecruz91 in #216
• Add support to vulnerability aliases by @macedogm in #220
• Fix Copyright in Boilerplates by @puerco in #223
• Improve the generated template README by @macedogm in #224
• Update go.mod and golanci-lint by @cpanato in #229
• Fix OCI repository URL resolution by @knqyf263 in #235

New Contributors

• @shafeeqes made their first contribution in #151
• @stephengroat made their first contribution in #205
• @felipecruz91 made their first contribution in #216
• @macedogm made their first contribution in #220
• @knqyf263 made their first contribution in #235

Full Changelog: v0.2.6...v0.3.0

v0.2.6

What's Changed

• revamp release job, cleanups and add snapshot job by @cpanato in #138
• Bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 by @dependabot in #140
• Move release actions to kubernetes-sigs by @puerco in #141
• Bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 by @dependabot in #142
• Update examples to v0.2.0 by @puerco in #145
• Fix bug when updating documents in place. by @puerco in #144
• Bump github.com/sigstore/cosign/v2 from 2.2.1 to 2.2.2 by @dependabot in #146
• Fix keyless verification of openvex attesatations by @puerco in #147
• Bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #148
• Bump sigstore/cosign-installer from 3.2.0 to 3.3.0 by @dependabot in #149
• vexctl generate by @puerco in #150

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• Update vexctl to spec v0.2.0 by @puerco in #92
• show subcommand creation for review by @brandtkeller in #115
• Refactor commands and CLI options by @puerco in #110
• Update SARIF filtering examples by @puerco in #109
• upgrade to go1.21 by @cpanato in #121
• vexctl add subcommand by @puerco in #111
• Update README examples to v0.2.0 by @puerco in #127
• Update vexctl attest by @puerco in #126

New Contributors

• @brandtkeller made their first contribution in #115

Full Changelog: v0.2.3...v0.2.5

v0.2.3

What's Changed

• Add ko installer to release workflow by @puerco in #97
• Updates by @cpanato in #98

Full Changelog: v0.2.2...v0.2.3

v0.2.0

What's Changed

• vexctl: Forked repo kickstart by @puerco in #1
• Break dependency on old chainguard/vex module by @puerco in #2
• switch CVE to official 'sample' ID by @attritionorg in #5
• Restore attestation capability after repo split by @puerco in #6
• Update import paths to openvex/go-vex by @puerco in #7

New Contributors

• @puerco made their first contribution in #1
• @attritionorg made their first contribution in #5

Full Changelog: v0.1.0...v0.2.0