v1.3.0

See CHANGELOG.md for more details.

New Feature

• Add support for verifying dsse-intoto by @loosebazooka in #855

What's Changed

• Update bouncycastle to v1.79 by @renovate in #864
• Update actions/setup-java action to v4.5.0 by @renovate in #863
• Update protobuf_grpc by @renovate in #861
• Update sigstore/community digest to ee857ea by @renovate in #841
• Update dependency com.google.http-client:google-http-client-bom to v1.45.1 by @renovate in #860
• Add tests for downloadTarget by @loosebazooka in #854
• Update sigstore/sigstore-conformance action to v0.0.13 by @renovate in #862
• Import dsse/hashrekord types from rekor by @loosebazooka in #867
• Parse DSSE bundles and Intoto payloads by @loosebazooka in #868
• Update conformance to 0.0.14 by @loosebazooka in #869
• Reorganize message signature checks by @loosebazooka in #872
• Change payload type to byte[] by @loosebazooka in #873
• Update dependency com.code-intelligence:jazzer-api to v0.23.0 by @renovate in #879
• Update actions/setup-go action to v5.2.0 - autoclosed by @renovate in #877
• Update dependency org.junit:junit-bom to v5.11.4 by @renovate in #876
• Update dependency com.google.http-client:google-http-client-bom to v1.45.3 by @renovate in #875
• Update sigstore/community digest to 859cddd by @renovate in #874
• Update actions/setup-java action to v4.6.0 by @renovate in #878
• Update gradle/actions action to v4.2.2 by @renovate in #883
• Update dependency org.assertj:assertj-core to v3.27.2 by @renovate in #882
• Update protobuf_grpc by @renovate in #884
• Update softprops/action-gh-release action to v2.2.0 by @renovate in #885
• Update dependency com.google.guava:guava to v33.4.0-jre by @renovate in #880
• Update dependency com.google.oauth-client:google-oauth-client-bom to v1.37.0 by @renovate in #881
• Update sigstore/sigstore-conformance action to v0.0.16 by @renovate in #891
• address CI issues reported by zizmor by @bobcallaway in #892
• Update sigstore/community digest to 9ce4322 by @renovate in #886
• Update dependency commons-codec:commons-codec to v1.17.2 - autoclosed by @renovate in #887
• Update dependency dev.sigstore:protobuf-specs to v0.3.3 by @renovate in #888
• Update dependency org.assertj:assertj-core to v3.27.3 by @renovate in #889
• Update protobuf_grpc by @renovate in #890
• Update actions/setup-go action to v5.3.0 by @renovate in #896
• Update actions/setup-java action to v4.7.0 by @renovate in #897
• Update bouncycastle to v1.80 by @renovate in #898
• Update dependency com.code-intelligence:jazzer-api to v0.24.0 by @renovate in #899
• Update dependency com.google.code.gson:gson to v2.12.1 by @renovate in #900
• Update dependency com.google.http-client:google-http-client-bom to v1.46.1 by @renovate in #901
• Doc should say .sigstore.json instead of .sigstore.java by @thomasleplus in #906

New Contributors

• @thomasleplus made their first contribution in #906

Full Changelog: v1.2.0...v1.3.0