v1.0.0-rc.1

Notices

• BREAKING CHANGE: notation-go v1.0.0-rc.1 is not compatible with signatures signed by previous Notation releases.
• BREAKING CHANGE: artifactType in signature manifest is changed to application/vnd.cncf.notary.signature
• BREAKING CHANGE: Only support registries compliant with the OCI 1.1.0-rc2 image spec and OCI 1.1.0-rc1 distribution spec

New Features

• Store signatures using OCI Artifact Manifest associated with signing artifacts in the registries compliant with the OCI 1.1.0-rc2 image spec and OCI 1.1.0-rc1 distribution spec
• Refactored API to incorporate local verification
• Added logger package to enable logging

Other changes

• New API design

Detailed Commits

• refactor: dir package [1] by @JeyJeyGao in #179
• Remove plugin name and version from ProcessedAttributes response from… by @rgnote in #183
• refactor: config package by @JeyJeyGao in #182
• Fix VerifySignature command json marshaling by @rgnote in #188
• update: Package registry refactoring by @patrickzheng200 in #190
• feat: Added trustpolicy and truststore packages under verification by @patrickzheng200 in #192
• refactor: plugin package by @JeyJeyGao in #184
• fix: dir package userConfigDir typo by @JeyJeyGao in #196
• update: Package notation refactoring by @patrickzheng200 in #191
• refactor: update plugin for notation package by @JeyJeyGao in #199
• update: Package verification refactoring by @patrickzheng200 in #186
• feat: Added log package by @patrickzheng200 in #202
• update: updated verifier design by @patrickzheng200 in #206
• update: Package signature refactoring by @patrickzheng200 in #200
• update: upgraded to oras-go v2.0.0-rc.5 by @patrickzheng200 in #209
• update: replaced strings.Index with strings.Cut by @patrickzheng200 in #211
• Add: added set data structure by @patrickzheng200 in #210
• fix: update plugin to add ContractVersion by @JeyJeyGao in #207
• update: check SignatureMediaType in notation.Verify by @patrickzheng200 in #208
• Use minimum(user only) file permissions by @priteshbandi in #216
• update: bump up dependencies by @patrickzheng200 in #219
• feat: added tag reference log for notation.Sign and notation.Verify by @patrickzheng200 in #223
• Pass expiry to envelope-generator plugin by @priteshbandi in #222
• feat: add required log by @JeyJeyGao in #221
• Add additional header validation for payload by @jondonas in #178
• fix: optimize verification level skip check by @JeyJeyGao in #226
• update: bump up notation-core-go in notation-go by @patrickzheng200 in #227
• Improving debug log for plugin by @priteshbandi in #228
• fix: updated notation artifact type to application/vnd.cncf.notary.signature by @patrickzheng200 in #231
• build: bump up versions for rc.1 release by @yizha1 in #232

Full Changelog: v0.12.0-beta.1...v1.0.0-rc.1