v0.16.0-rc3

Changelog

• a8a5f31 fix: validate dependencies after download to prevent cache inconsistency

v0.16.0-rc2

Changelog

• 0881f7b chore: apply suggestions about .Debug()
• 22e01fe chore: fix formatting and clarify observability docs
• 6571234 chore: lint and format OpenTelemetry code
• 3327487 chore: remove leeway-dev.sh helper script
• 67a035a feat(build): implement dependency-aware download scheduling
• a2b7bfa feat: add OpenTelemetry tracing with build and package spans
• 7076f89 feat: add TLS configuration and fix version retrieval for OTel
• 18421a6 feat: add docker-in-docker to devcontainer
• c7ced70 fix(sbom): use determineDockerExportMode for consistent export mode detection
• 7db83ae fix(tests): use fast latency for performance tests in CI
• 916eb9f fix: enable mock for unit tests that use dummy docker
• 682d659 fix: extract container files from OCI tar instead of Docker daemon
• 9ba4bce fix: properly shutdown OpenTelemetry tracer after build completes
• 9886d85 fix: replace for cycle with faster (O(n log n)) stable slice sorting algorithm from Go stdlib
• 8d9394a fix: resolve variable shadowing and add path structure docs
• e1a2536 fix: respect Docker export mode in SBOM generation
• 9971a07 fix: skip vulnerability scanning for packages that failed to build
• b246f9f perf(cache): optimize S3 cache with batch operations and increased workers
• dda4fb7 refactor(cache): remove pointless processPackages wrapper
• ed21cab refactor: add CleanupFunc type alias and address review feedback
• c2ec571 refactor: improve OTLP endpoint configuration handling
• af13065 refactor: reuse extractTarToDir in extractTar
• 53461e3 style: apply gofmt formatting

v0.15.1-rc5

Changelog

• 123132f fix: skip vulnerability scanning for packages that failed to build

v0.15.1-rc4

Changelog

• d998ff0 Fix SBOM generation to respect Docker export mode

v0.15.1-rc2

Changelog

• 9a7c4df fix: enable mock for unit tests that use dummy docker
• e0bd445 fix: extract container files from OCI tar instead of Docker daemon

v0.16.0-rc1

Changelog

• e7fd814 chore: fix formatting and clarify observability docs
• 7a9f91c chore: lint and format OpenTelemetry code
• 19f9e7d chore: remove leeway-dev.sh helper script
• aa8c20c feat: add OpenTelemetry tracing with build and package spans
• a64253c feat: add TLS configuration and fix version retrieval for OTel
• 14a1ae2 feat: add docker-in-docker to devcontainer
• 9da6e65 fix: properly shutdown OpenTelemetry tracer after build completes
• a00a84e refactor: improve OTLP endpoint configuration handling

v0.15.1-rc1

Changelog

• 1eae92f fix: correct build summary counts for packages built after verification failure

v0.15.0

What's Changed

• feat!: store in-toto provenance outside tar.gz by @leodido in #283
• feat: export SOURCE_DATE_EPOCH for build commands by @leodido in #284
• fix: pass SOURCE_DATE_EPOCH as build arg (+ fix timestamp in export metadata) for deterministic docker images by @leodido in #285
• build(deps): Bump golang.org/x/crypto from 0.42.0 to 0.45.0 by @dependabot[bot] in #287
• feat(docker): use OCI layout for deterministic image caching by @leodido in #286
• fix: extract digest from OCI layout for SLSA provenance by @leodido in #289
• fix: support container extraction with OCI layout export by @leodido in #290
• fix: support SBOM generation with OCI layout export by @leodido in #291
• fix: upload and download provenance bundles in S3 cache by @leodido in #292
• fix: move test coverage collection before packaging phase by @leodido in #294

Full Changelog: v0.14.0...v0.15.0

v0.15.0-rc7

Changelog

• ba0d150 fix: add backward compatibility for missing provenance bundles
• c103fb2 fix: add git initialization to TestDockerPackage_ExportToCache_Integration
• 61f08fe fix: extract digest from OCI layout for SLSA provenance
• d5d6983 fix: move test coverage collection before packaging phase
• f98b2e8 fix: support SBOM generation with OCI layout export
• d0c01ae fix: support container extraction with OCI layout export
• c875b21 fix: upload and download provenance bundles in S3 cache
• fa7e0fe refactor: add dedicated helpers for provenance bundle operations

v0.15.0-rc6

Changelog

Full Changelog: v0.15.0-rc5...v0.15.0-rc6