v2.0.1

v2.0.1

This release is identical to v2.0.0, as it only contains a fix for the release pipeline.

v2.0.0 changes the default HTTP response code to 200 for timestamp responses,
which matches all other well-known TSA implementations. Sigstore clients already
handle both 200 and 201 response codes, so no changes are needed to clients.

If you need backwards compatibility, you can deploy the service with
--use-http-201.

This release also changes the format of the binary and container signature,
which is now a Sigstore bundle.
To verify a release, use the latest Cosign 3.x, verifying with
cosign verify-blob --bundle <artifact>-keyless.sigstore.json <artifact>.

Features

• changes default HTTP response code to 200 for timestamp responses (#1202)
• feat: add configurable max request body size for TSA server (#1176)

Testing

• test: Add a K6 loadtest

Documentation

• Minor improvements to documentation (#1169)

Misc

• (fix): minor gosec issues under x509.go (#1201)

Full Changelog: v1.2.9...v2.0.1