v1.0.1

This patch release includes on documentation, predicate spec and Go and Python API changes. This release also introduces new vetted predicates. Go, Python and Java APIs are not considered stable before v1.1.

What's Changed

• Update documentation: Add graphic to visualize relationships between layers by @dasiths in #166
• Add predicate specification for CycloneDX by @danbev in #129
• Remove extension fields from versioning.md by @TomHennen in #169
• Add predicate capturing results of test runs by @adityasaky in #152
• Move protos to their own directory for more consistency between different language bindings by @marcelamelara in #180
• Update SPDX predicate specification by @danbev in #187
• Update SCAI predicate to v0.2 by @marcelamelara in #170
• Link to existing predicates from predicate.md by @arewm in #195
• Autogenerate attestation libraries using protoc by @adityasaky in #192
• Update provenance.md to v1 by @trishankatdatadog in #197
• Add python bindings for protobufs by @chasen-bettinger in #172
• Enable python packaging by @adityasaky in #201
• Fix VSA dir structure and package name by @adityasaky in #204
• Add python bindings to docs by @marcelamelara in #202
• Add Java bindings by @adityasaky in #205
• Add link to SLSA/in-toto blog post by @adityasaky in #213
• Allow uses of ResourceDescriptor to require fields by @adityasaky in #211
• Use only major version for spec docs by @adityasaky in #214
• Define v0.3 of the link predicate by @adityasaky in #203
• Add governance doc by @adityasaky in #218
• Use ResourceDescriptor for statement subjects by @adityasaky in #212
• Minor typo and other fixes to SCAI predicate spec by @marcelamelara in #215
• Update Joshua's affiliation by @joshuagl in #221
• Require 'subject[*].name' to be unique for links by @adityasaky in #223
• Add Golang wrapper APIs and tests by @marcelamelara in #220
• Add proto for test result predicate by @adityasaky in #233
• Update the SLSA provenance predicate to v1 by @marcelamelara in #222
• Update supported protoc version in CI by @marcelamelara in #243
• Add SCAI predicate protobuf definition by @marcelamelara in #235
• Change annotations fields in ResourceDecriptor from objects to values by @joshuagl in #251
• fix(tests): fix go tests since #251 by @joshuagl in #259
• add missing trigger for push main branch in go-test workflow by @pxp928 in #260
• Use lower_camel_case consistently for fields in protobuf definitions by @joshuagl in #257
• Define annotations field type in ResourceDescriptor proto as Struct by @marcelamelara in #263
• Update Go tests by @adityasaky in #267
• Add Python validation APIs and unit tests by @marcelamelara in #227
• Add Go and Python bindings for SCAI predicate by @marcelamelara in #272
• vulnerability attestation: ITE-9 specification by @hectorj2f in #268
• Update vsa.md by @trishankatdatadog in #288
• Clarify specification on Bundle and Envelope media types by @marcelamelara in #283
• Add Go validator APIs for Provenance v1 predicate by @marcelamelara in #287
• in_toto_attestation/v1: fix type hints by @woodruffw in #301
• update vsa proto to v1 and update generated code by @pxp928 in #302
• Prepare python release v0.9.3 by @adityasaky in #310
• Python in CI/CD, add lintage and tests by @woodruffw in #306
• python: drop Python 3.7, run pyupgrade + isort rules by @woodruffw in #312
• update make-protos workflow to use newer version of protoc by @pxp928 in #309

New Contributors

• @dasiths made their first contribution in #166
• @danbev made their first contribution in #129
• @arewm made their first contribution in #195
• @trishankatdatadog made their first contribution in #197
• @chasen-bettinger made their first contribution in #172
• @hectorj2f made their first contribution in #268
• @woodruffw made their first contribution in #301

Full Changelog: v1.0...v1.0.1