v0.3.9

go-api-signature 0.3.9 (2025-10-08)

Welcome to the v0.3.9 release of go-api-signature!

Please try out the release binaries and report any issues at
https://github.com/siderolabs/go-api-signature/issues.

Contributors

• Dmitriy Matrenichev
• Utku Ozdemir
• Andrey Smirnov
• Oguz Kilcan
• Artem Chernyshev
• Andrey Smirnov
• Noel Georgi

Changes

29 commits

• 184f94d chore: rekres and bump go to 1.25.2
• 68478e2 fix: return invalid signature error when a signature is required
• d22e33d feat: clarify fallback logic for fallback capable key provider
• dea3048 feat: allow configuring the provider with fallback location
• 8807c5e fix: account for time truncation to a second resolution
• 1b35ea8 chore: bump deps and fix data race
• 4bf0f02 fix: get rid of data race in the key sign interceptor
• 782aac0 chore: bump deps
• cf2bd06 chore: bump dependencies
• 370cebf fix: always print the login URL on key renew flow
• d28609a feat: move in the cli grpc interceptor logic, support service account in env
• 4602acc chore: add a dummy workflow
• cfd21b6 fix: support validating signatures generated with the time in the future
• 74dd3dc chore: bump deps
• d78bedb chore: bump deps
• a034e9f feat: replace scopes with roles
• 5b4f3bb chore: run rekres
• 9dba116 chore: remove time.Sleep hack
• e84e686 chore: bump dependencies
• 8baaf8a chore: bump deps
• 5f27e1e chore: add renovate bot and bump deps
• 69886dc feat: allow custom validations on PGP key
• 63d4da3 fix: limit clock skew for short-lived keys
• cdb9722 feat: add support for +-5 min clock skew
• 7b80a50 refactor: use options pattern in RegisterPGPPublicKey
• c647861 feat: add scopes to RegisterPublicKeyRequest
• 5d3647e feat: provide more client PGP functions
• 2b682ec feat: initial version
• a4c2943 chore: initial commit

Changes since v0.3.8

1 commit

• 184f94d chore: rekres and bump go to 1.25.2

Dependency Changes

This release has no dependency changes