What's Changed
- publish: Sigstore-sign official package versions by @jcfischer in #192
- fix: fail fast for unsupported Sigstore publish auth by @jcfischer in #194
- fix: surface publish submission status by @jcfischer in #197
- fix: make hook registration idempotent by @jcfischer in #198
- test: cover soma tarball upgrade by @jcfischer in #200
- fix: preserve publish submissions on registration conflict by @jcfischer in #201
- fix: degrade identityless signed bundles to warn + ARC_SIGSTORE_EXPECTED_IDENTITY escape hatch by @jcfischer in #205
- fix(#204): 60s register timeout + poll submission to terminal status on abort by @jcfischer in #206
- fix(#207): attach source token to Sigstore bundle download by @jcfischer in #208
- fix(upgrade): #203 — regenerate templates for governance-overlay packages (not just type:rules) by @mellanon in #209
- fix: improve install shim path handling by @jcfischer in #211
Full Changelog: v0.30.0...v0.30.2