v2.0.1

What's Changed

• Deduplicate subjects before adding to statement by @bdehamer in #180

Full Changelog: v2.0.0...v2.0.1

v2.0.0

The attest action now supports attesting multiple subjects simultaneously. When identifying multiple subjects with the subject-path input a single attestation is created with references to each of the supplied subjects, rather than generating separate attestations for each artifact. This reduces the number of attestations that you need to create and manage.

What's Changed

• Bump @actions/core from 1.10.1 to 1.11.1 by @dependabot in #147
• Bump @actions/attest from 1.4.1 to 1.5.0 by @bdehamer in #162
• Bump @sigstore/oci from 0.3.7 to 0.4.0 by @bdehamer in #163
• Support multi-subject attestations by @bdehamer in #164
• Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in #169
• Bump the npm-development group with 4 updates by @dependabot in #174
• Bump csv-parse from 5.5.6 to 5.6.0 by @dependabot in #175

Full Changelog: v1.4.1...v2.0.0

v1.4.1

What's Changed

• Bump @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #125
• Bump @actions/attest from 1.3.1 to 1.4.1 by @bdehamer in #127
  • Includes bug fix for issue with authenticated proxies (actions/toolkit#1798)

Full Changelog: v1.4.0...v1.4.1

v1.4.0

What's Changed

• Format summary output as list by @bdehamer in #105
• Add show-summary input by @bdehamer in #108
• Bump @actions/attest from 1.3.0 to 1.3.1 by @bdehamer in #111

Full Changelog: v1.3.3...v1.4.0

v1.3.3

What's Changed

• Bugfix for glob exclude patterns by @bdehamer in #100

Full Changelog: v1.3.2...v1.3.3

v1.3.2

What's Changed

• Increase timeout for OCI operations by @bdehamer in #92

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• Bump @sigstore/oci from 0.3.6 to 0.3.7 by @bdehamer in #90
  • Bugfix when detecting support for the referrers API with OCI registries

Full Changelog: v1.3.0...v1.3.1

v1.3.0

What's Changed

• Bump @actions/attest from 1.2.1 to 1.3.0 by @bdehamer in #89
  • Dynamic construction of GitHub API URLs based on GITHUB_SERVER_URL
  • Improved handling of Rekor 409 responses

Full Changelog: v1.2.1...v1.3.0

v1.2.1

What's Changed

• Bump @sigstore/oci to 0.3.6 by @bdehamer in #88
  • Bugfix - detection of registries with support for the OCI referrers API

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• Bump csv-parse from 5.5.5 to 5.5.6 in the npm-production group by @dependabot in #69
• Bump @sigstore/oci from 0.3.3 to 0.3.4 by @bdehamer in #71
  • Bugfix - missing await in addArtifact
• Batch processing w/ exponential backoff by @bdehamer in #79
• Enforce 16MB limit on predicate size by @bdehamer in #80

Full Changelog: v1.1.2...v1.2.0