✨ Features

• feat: make k8Secrets auth provider secret cache TTL configurable by @ramasai1 in #2906

🐛 Bug Fixes

• fix: do not compare against empty string to inject azure.workload.id/use label by @ramasai1 in #2905

🔐 Security

• chore: bump vulnerable dependencies [GO-2026-5932] by @github-actions in #2904
• chore: bump vulnerable dependencies [CVE-2026-56864, CVE-2026-56865, GO-2026-5932] by @github-actions in #2914

Full Changelog: v1.4.4...v1.4.5

💥 Breaking Changes

• chore: rename CRD group ratify.dev to ratify.sh by @fseldow in #2822
• chore: drop leftover config.ratify.deislabs.io ClusterRole rules by @fseldow in #2832

🚀 Features

• feat: support multi-tenancy via namespaced Executor CRD by @fseldow in #2862
• feat(cosign): allow key-based verification without a timestamp by @charleswool in #2753
• feat(helm): add provider.mutationExcludedNamespaces for Assign mutation webhook exclusions by @eric-nichols-cava in #2755
• feat: add liveness and readiness probes to gatekeeper provider by @charleswool in #2772
• feat: gate readiness on the executor being loaded by @charleswool in #2840
• feat: set container resource requests and limits by @charleswool in #2841
• feat: make log level configurable by @charleswool in #2846
• feat: expose provider metrics in the Helm chart by @charleswool in #2848

🐛 Bug Fixes

• fix(notation): reject leaf cert trust anchors by @fseldow in #2723
• fix(cosign): honor ignoreCTLog instead of forcing it for key-based policies by @charleswool in #2838

🔐 Security

• fix: bump google.golang.org/grpc to v1.82.1 to fix GHSA-hrxh-6v49-42gf (gRPC-Go xDS RBAC & HTTP/2 vulnerabilities) by @charleswool in #2791
• chore: bump sigstore-go to 1.2.2 to fix CVE-2026-54787 (signature timestamp not checked against signing key validity) by @dependabot in #2764

🎉 New Contributors

• @eric-nichols-cava made their first contribution in #2755

Full Changelog: v2.0.0-alpha.2...v2.0.0-beta.1

✨ Features

• feat(helm): add provider.mutationExcludedNamespaces for Assign webhook exclusions (release-1.4 backport) by @eric-nichols-cava in #2780

🔐 Security

• chore: bump vulnerable dependencies [GHSA-hrxh-6v49-42gf, GO-2026-5932] by @github-actions in #2793
• chore: bump github.com/sigstore/sigstore-go and golang.org/x/text for CVE-2026-49834 and CVE-2026-56852 by @fseldow in #2741
• chore: bump golang from 079e598 to ae5a231 in /httpserver by @dependabot in #2735

🎉 New Contributors

• @eric-nichols-cava made their first contribution in #2780

Full Changelog: v1.4.3...v1.4.4

💥 Breaking Changes

• feat!: suppport scoped executors by @binbin-li in #2302
• feat!: add v2alpha1 CRD by @binbin-li in #2310
• feat!: support providing inline certificate in CR by @binbin-li in #2312
• feat!: add keyless cosign verifier by @binbin-li in #2339
• fix!: override store scopes only when it is a single store by @binbin-li in #2388

🚀 Features

• feat: support reloading executors by CRs by @binbin-li in #2311
• feat: add native ACR auth by @binbin-li in #2323
• feat: support fetching certs from AKV by @binbin-li in #2325
• feat: add cache to registry token by @binbin-li in #2329
• feat: support private registry over TLS by @binbin-li in #2355
• feat: support concurrent executor by @binbin-li in #2420
• feat: support key-based cosign verifier by @binbin-li in #2425
• feat: add akv key provider by @binbin-li in #2432
• feat: add benchmark regression gate and executor benchmarks for Perf test by @charleswool in #2566
• feat: add stores[].plainHttp for HTTP registries by @fseldow in #2582

🐛 Bug Fixes

• fix: fix parsing policy error by @binbin-li in #2337
• fix: fix parsing numeric value from json by @binbin-li in #2338
• fix(logger): default plugin logger to stdout for info/debug/warn by @charleswool in #2521
• fix: executor template inline cert must use {certs: PEM} format by @fseldow in #2670
• fix: strip namespace prefix from artifact in executor scope matching by @fseldow in #2671

🔐 Security

• chore: bump sigstore-go to resolve vulnerability by @akashsinghal in #2448
• chore(ci): resolve scan-vulns CI failures by updating Go, deps, and Trivy by @YitongFeng-git in #2522
• chore: update signing certificate by @fseldow in #2694
• chore: bump golang.org/x/text to solve CVE-2026-56852 by @fseldow in #2740

🎉 New Contributors

• @shizhMSFT made their first contribution in #2331
• @oglok made their first contribution in #2493

Full Changelog: v2.0.0-alpha.1...v2.0.0-alpha.2

🐛 Bug Fixes

• fix: initialize registryHostGetter in MIAuthProvider to prevent nil pointer panic by @fseldow in #2509
• fix: add emptyDir for ORAS local cache to support non-root image builds by @fseldow in #2516
• fix: use tenant authority for Azure workload identity by @fseldow in #2554
• fix: repair AKS E2E validation by updating a dead URL, Key Vault principal type, and Kubernetes version by @charleswool in #2574
• fix: upgrade Helm chart version to 1.15.4 to correct the chart repository configuration by @fseldow in #2728

🔐 Security

• chore: bump Go and dependencies for the release-1.4 branch by @fseldow in #2507
• chore: bump dependencies to fix CVE-2026-32952 and CVE-2026-39984 by @fseldow in #2520
• chore: bump security and supply-chain related dependencies including sigstore/fulcio, sigstore/rekor, timestamp-authority, in-toto-golang, ORAS, OPA, Kubernetes libraries, Docker CLI, Azure SDK, AWS SDK, and go-containerregistry in #2518, #2528, #2545, #2547, #2548, #2614, #2615, #2616, #2624, #2645, #2646, #2651, #2652, #2658, #2706, #2708, #2721
• chore: update signing certificate and signature verification values by @wangxiaoxuan273 in #2684 and #2687

⚙️ CI/CD & Automation

• chore: publish Helm chart only after image publish succeeds by @fseldow in #2529
• chore: prepare v1.4.1, v1.4.3 release charts, and chart/image version updates by @fseldow in #2510, #2512, #2690
• chore: update Go builder and container images for release and httpserver builds by @fseldow and @dependabot in #2519, #2567, #2578, #2586, #2612, #2640, #2722
• ci: update AKS, E2E, Gatekeeper, Trivy, Scorecard, SBOM, and markdown link-check automation by @fseldow, @wangxiaoxuan273, and @dependabot in #2575, #2587, #2593, #2631, #2641, #2656

🎉 New Contributors

• @YitongFeng-git made their first contribution in #2555
• @charleswool made their first contribution in #2574
• @wangxiaoxuan273 made their first contribution in #2587

Full Changelog: v1.4.0...v1.4.3

🚨 Breaking Changes

• Modularization: The core workflow has been decoupled into a new standalone library, ratify-go, with a new extensible framework support implemented across all major modules: Executor, Verifier, Store, and Policy Enforcer #2231 #2235 #2237 #2238
• Key Management Changes: The Key Management Provider has been deprecated. Key configuration now resides under the verifier section. #2231
• Plugin Artifact Download Removed:Verifier plugins are no longer downloaded as artifacts #2231
• New HTTP Server & Entrypoint: A new v2 HTTP server has been introduced under the binary name ratify-gatekeeper-provider, replacing the previous ratify entrypoint.
• Helm Chart for v2: Released a new Helm chart that packages the ratify-gatekeeper-provider v2 image for streamlined deployment. #2207
• Enhanced Security Defaults: mTLS is enabled by default now. Certificate rotation is configured out of the box to strengthen security posture. #2242

🐛 Bug Fixes

• Multiple Store Config Support: Fixed a limitation in v1 to allow configuring multiple stores with different scopes. #2235
• Helmfile Compatibility: Updated Helmfile templates to use .gotmpl extension, ensuring compatibility with Helmfile v1.0.0. #2218

📄 Documentation

• New Helm Chart Docs: Added a comprehensive README.md for the new Helm chart. #2262
• v2 Development Info: Published a Ratify v2 roadmap and development notice. #2197 #2194

⚙️ CI/CD & Automation

• Automated Dev Releases: On merge to main, both the Helm chart and container image are now automatically built and published. #2288
• Updated CI Pipelines: Disabled v1 jobs and added new workflows for building and testing v2 on the main branch. #2228 #2221 #2263 #2266

🚨 Comparing v2.0.0-alpha.1 with v1.x

Notation verifier is supported in Ratify v2.0.0-alpha.1.

Some features are not yet available in this release and planned to be supported in upcoming releases. Refer to this page to track the progress: #2236

The following features in v1.x will be ported to v2.0 and future releases:

• Support for additional verifiers (e.g., Cosign, SBOM, Vulnerability Report)
• Ratify server configuration via CRDs
• Cloud provider integrations (Azure, AWS, Alibaba)
• Rego policy support

Changes:

6b583a9 chore: release v2.0.0-alpha.1
cf473a5 chore: update dev helmfile (#2289)
5e460ad ci: build and publish chart/image upon merging to main (#2288)
b82c678 chore: Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 (#2287)
cdcdbe7 chore: Bump golang from b4f875e to 68932fa (#2284)
534ed8e chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.29.15 (#2285)
f880db6 feat: watch file update on executor config (#2278)
134acce ci: add workflow_dispatch to build job (#2279)
1f8c318 chore: Bump github/codeql-action from 3.28.18 to 3.28.19 (#2275)
970cce3 chore: remove helmfile for HA (#2274)
01cfb1e chore: Bump ossf/scorecard-action from 2.4.1 to 2.4.2 (#2268)
79fbd24 fix: update registryScope for asset verification (#2273)
f3f8ade chore: Bump github.com/go-logr/logr from 1.4.2 to 1.4.3 (#2269)
b8e958f chore: Bump alpine from a8560b3 to 8a1f59f (#2270)
e09cac5 chore: Bump golang from ef18ee7 to b4f875e (#2271)
2af0fd5 ci: Disable full validation for release-2. branch* (#2266)
b8b074b ci: update publish jobs (#2263)
5f8f04e docs: add readme to helm chart (#2262)
79a5cc0 chore: update ratify-project to notaryproject (#2255)
857ef8b chore: Bump github.com/google/go-containerregistry from 0.20.3 to 0.20.5 (#2253)
53598a4 build: update module to github.com/notaryproject/ratify/v2 (#2254)
a465386 feat!: add cache to server endpoint (#2252)
7293192 feat!: support mutation webhook (#2244)
1501658 chore: Bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.7 (#2246)
35f1b01 chore: Bump k8s.io/client-go from 0.31.2 to 0.31.9 (#2247)
f9921bf chore: Bump k8s.io/api from 0.31.2 to 0.31.9 (#2248)
9aeab6e chore: Bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2 (#2249)
d862090 chore: Bump github/codeql-action from 3.28.17 to 3.28.18 (#2250)
255f58f chore: Bump distroless/static from c0f429e to 188ddfb (#2251)
0e9ed01 chore: Bump codecov/codecov-action from 5.4.2 to 5.4.3 (#2243)
ae960eb feat!: support mTLS with gatekeeper and cert rotation (#2242)
d4603e0 chore: Bump anchore/sbom-action from 0.19.0 to 0.20.0 (#2241)
0bdbc35 feat!: Add v2 helm chart (#2207)
8775b5f feat!: add v2 http server (#2239)
31b21c3 feat!: add v2 executor (#2238)
e68907c feat!: add v2 policy enforcer (#2237)
c8f8e45 feat!: add v2 store (#2235)
1d13559 feat!: add v2 verifier (#2231)
4facf0d chore: Bump github.com/open-policy-agent/opa from 1.4.0 to 1.4.2 (#2232)
c71f82b chore: Bump golang from ec5612b to 4b1ecd8 in /httpserver (#2233)
a062dbd ci: remove labeled pull_request_target (#2234)
150f286 chore: Bump actions/setup-go from 5.4.0 to 5.5.0 (#2230)
00dd0ec ci: bump up golangci-lint version (#2229)
94973b7 chore: Bump actions/setup-go from 5.4.0 to 5.5.0 (#2220)
e319efd ci: add CIs running on main branch (#2228)
d7ecf50 chore: remove .vscode folder (#2227)
15f0165 chore: reorganize project structure (#2226)
553ee02 ci: stop running full validation on main branch (#2221)
8d01234 fix: add .gotmpl file extension for go template (#2218)
652d59f chore: Bump github.com/open-policy-agent/opa from 0.68.0 to 1.4.0 (#2219)
230b2a0 chore: Bump golang from e54daaa to ec5612b in /httpserver (#2216)
aba2d9f chore: Bump github/codeql-action from 3.28.16 to 3.28.17 (#2214)
8e266c6 chore: Bump oras-project/setup-oras from 1.2.2 to 1.2.3 (#2213)
71ab65f chore: Bump github.com/notaryproject/notation-go from 1.3.1 to 1.3.2 (#2208)
42756c3 chore: Bump github.com/aliyun/credentials-go from 1.4.5 to 1.4.6 (#2209)
62148ab chore: Bump github.com/sigstore/sigstore from 1.9.3 to 1.9.4 (#2210)
b2f2a15 chore: Bump golang from 4f3bd60 to e54daaa in /httpserver (#2211)
f89c812 chore: Bump anchore/sbom-action from 0.18.0 to 0.19.0 (#2206)
1fa388e chore: Bump github/codeql-action from 3.28.15 to 3.28.16 (#2205)
3696806 chore: Bump step-security/harden-runner from 2.11.1 to 2.12.0 (#2203)
7ca8c48 chore: Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#2204)
611b2a8 chore: Bump google.golang.org/grpc from 1.71.0 to 1.71.1 (#2198)
52279a0 chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.29.10 to 1.29.14 (#2200)
3aaa44b chore: Bump github.com/sigstore/sigstore from 1.9.1 to 1.9.3 (#2201)
4a31c54 chore: Bump github.com/alibabacloud-go/darabonba-openapi/v2 from 2.0.10 to 2.0.11 (#2202)
6b20703 docs: add v2 roadmap (#2197)
fcdd325 chore: Bump golang.org/x/net from 0.37.0 to 0.38.0 (#2196)
4a22e3b build!: init ratify v2 (#2195)
013007e docs: add v2 development notice (#2194)
2a9cbc2 chore: Bump codecov/codecov-action from 5.4.0 to 5.4.2 (#2193)
c2b600e chore: Bump golang from cb45cf7 to 4f3bd60 in /httpserver (#2185)
52c8425 chore: Bump github.com/sigstore/rekor from 1.3.9 to 1.3.10 (#2189)
f8119fb chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.66 to 1.17.67 (#2190)
21a04ac chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.65 to 1.17.66 (#2186)
c60d70b fix: fix broken pipelines after switching default branch to main (#2187)
014dd41 Merge pull request #2180 from ratify-project/dev
2978dbc chore: Bump github/codeql-action from 3.28.13 to 3.28.15 (#2183)
4ac1daa chore: Bump golangci/golangci-lint-action from 6.5.2 to 7.0.0 (#2179)
c502a59 chore: Bump step-security/harden-runner from 2.11.0 to 2.11.1 (#2177)
faad0a8 chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.62 to 1.17.65 (#2171)
89fcb70 chore: Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#2170)
07e32cb chore: Bump distroless/static from b35229a to c0f429e in /httpserver (#2172)
9820e8f chore: Bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 (#2169)
b9022bf Merge pull request #2167 from ratify-project/dev
f40d736 chore: update public certs for verification (#2168)
af82b23 docs: update meeting inforamtion in README (#2166)
d9e6360 chore: Bump github/codeql-action from 3.28.12 to 3.28.13 (#2164)
0f0d189 chore: Bump vscode/devcontainers/go from 5625272 to f2d2a2b in /.devcontainer (#2163)
e8d5fe5 chore: Bump golang from dd1a8cb to cb45cf7 in /httpserver (#2162)
76c5b7e chore: Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.0 to 1.17.1 (#2161)
49b13a6 Merge pull request #2160 from ratify-project/dev
49b664d chore: Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#2159)
0976450 chore: Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#2158)
1ff8787 chore: Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#2156)
69a7263 chore: Bump actions/cache from 4.2.2 to 4.2.3 (#2155)
0fbef6f chore: Bump github/codeql-action from 3.28.11 to 3.28.12 (#2154)
32fe732 chore: Bump actions/setup-...

✨ New Features

• feat: support certificate revocation checking using Certificate Revocation List (CRL) with cache support during Notary Project signature validation. @junczhu in #1890 , #1900 , #1941
• feat: improve the Ratify out-of-box experience by incorporating additional Helm chart parameters for configuring the Notary Project trust policy by @shahramk64 in #1982
• feat: support enabled status for kmp keys/certs by @duffney in #1874
• feat: support alibaba cloud rrsa store auth provider by @DahuK in #1909

✨ Other Enhancements

• Report more debug info in external data response by @binbin-li #1697
• Make notation verifier installation optional on ratify installation by @shahramk64 #1719
• Migrate to latest Azure container registry SDK by @shahramk64 #1829
• Refactor Azure authentication support to use azidentity by @shahramk64 #1904
• Sign Ratify release assets by @akashsinghal #1947
• Update Kubernetes support matrix by @shahramk64 #2013
• Additional env vars for ratify container via helm chart by @mannbiher in #1854
• Allow service account annotations by @mannbiher in #1907
• Remove prefix from notation verifiers trustedIdentities by @shahramk64 #2057

🔐 Security

• chore: bump up golang.org/x/crypto pkg to fix vuln by @junczhu in #1981
• fix: fix vuln in /x/net pkg by @junczhu in #1993
• fix: enforce host checking before exchanging a refresh token (#2069) by @binbin-li in #2071
• chore: add more acr endpoints (#2079) by @binbin-li in #2080
• chore: bump ristretto pkg version (#2085) by @akashsinghal in #2087

📄 Documentation

• docs: add config path arg to launch.json, update instructions by @shahramk64 in #1800
• docs: some improvement in release instructions by @junczhu in #1815
• docs: add commits doc to contributing guide by @susanshi in #1844
• docs: design proposal for tag and digest co-existing [ISSUE 1657] by @emalprokt in #1793
• docs: add CRL Design by @junczhu in #1789
• docs: Create proposal for verifying 'last-n' artifacts only. by @asafalgawi in #1797
• docs: nVersionCount support for KMP design doc by @duffney in #1831
• docs: update dev image release guidance by @akashsinghal in #1974
• docs: Fix typos in CONTRIBUTING.md by @cclauss in #2005

🎉 New Contributors

• @emalprokt made their first contribution in #1793
• @asafalgawi made their first contribution in #1797
• @JoupainMD made their first contribution in #1954
• @cclauss made their first contribution in #2005
• @DahuK made their first contribution in #2012

Full Changelog: v1.3.2...v1.4.0

🔐 Security

• 84c7c48 fix: enforce host checking before exchanging a refresh token (#2069) (#2081)

Changelog

• 2d89210 chore: bump chart versions for v1.3.2 (#2083)
• 84c7c48 fix: enforce host checking before exchanging a refresh token (#2069) (#2081)

🔐 Security

• 0ec0c08 fix: enforce host checking before exchanging a refresh token (#2069) (#2072)

Changelog

• 7d1ed86 chore: bump chart versions for v1.2.3 (#2082)
• 0ec0c08 fix: enforce host checking before exchanging a refresh token (#2069) (#2072)

✨ New Features

• feat: support enabled status for kmp keys/certs by @duffney in #1874
• feat: support alibaba cloud rrsa store auth provider by @DahuK in #1909
• feat: add support for crl basic functionality with built-in cache by @junczhu in #1890
• feat: implementation of KMP CRL revocation factory with cache by @junczhu in #1900
• feat: enables CRL configuration by @junczhu in #1941
• feat: add more notation trust policy attributes to values.yaml by @shahramk64 in #1982

Other Enhancements

• Report more debug info in external data response by @binbin-li #1697
• Make notation verifier installation optional on ratify installation by @shahramk64 #1719
• Migrate to latest Azure container registry SDK by @shahramk64 #1829
• Refactor Azure authentication support to use azidentity by @shahramk64 #1904
• Sign Ratify release assets by @akashsinghal #1947
• Ratify to support out-of-box experience for typical scenarios by @shahramk64 #1982
• Update Kubernetes support matrix by @shahramk64 #2013
• Additional env vars for ratify container via helm chart by @mannbiher in #1854
• Allow service account annotations by @mannbiher in #1907

🔐 Security

• chore: bump up golang.org/x/crypto pkg to fix vuln by @junczhu in #1981
• fix: fix vuln in /x/net pkg by @junczhu in #1993

📄 Documentation

• docs: add config path arg to launch.json, update instructions by @shahramk64 in #1800
• docs: some improvement in release instructions by @junczhu in #1815
• docs: add commits doc to contributing guide by @susanshi in #1844
• docs: design proposal for tag and digest co-existing [ISSUE 1657] by @emalprokt in #1793
• docs: add CRL Design by @junczhu in #1789
• docs: Create proposal for verifying 'last-n' artifacts only. by @asafalgawi in #1797
• docs: nVersionCount support for KMP design doc by @duffney in #1831
• docs: update dev image release guidance by @akashsinghal in #1974
• docs: Fix typos in CONTRIBUTING.md by @cclauss in #2005

🎉 New Contributors

• @emalprokt made their first contribution in #1793
• @asafalgawi made their first contribution in #1797
• @JoupainMD made their first contribution in #1954
• @cclauss made their first contribution in #2005
• @DahuK made their first contribution in #2012

Changelog

• 0ee96d8 Create ratify-weekly-notes-2023-Jun-2024-Jun.md
• 3bafc56 Merge branch 'dev' into clean-package
• 581be1e Merge branch 'dev' into dependabot/docker/alpine-0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5
• 7e387db Merge branch 'dev' into dependabot/docker/dot-devcontainer/vscode/devcontainers/go-8cb4ef6
• bd2f5ca Merge branch 'dev' into dependabot/docker/dot-devcontainer/vscode/devcontainers/go-dca0f2c
• cca0a13 Merge branch 'dev' into dependabot/docker/httpserver/golang-b405b62
• 72025fb Merge branch 'dev' into dependabot/github_actions/actions/upload-artifact-4.3.4
• bb8d7f0 Merge branch 'dev' into dependabot/github_actions/actions/upload-artifact-4.3.6
• 0447079 Merge branch 'dev' into dependabot/github_actions/anchore/sbom-action-0.17.1
• e353f38 Merge branch 'dev' into dependabot/go_modules/github.com/google/go-containerregistry-0.20.2
• 6ebd6f1 Merge branch 'dev' into dependabot/go_modules/github.com/owenrumney/go-sarif/v2-2.3.3
• bb8516e Merge branch 'dev' into dependabot/go_modules/github.com/sigstore/sigstore-1.8.8
• 52f92d1 Merge branch 'dev' into dev
• 5b7c4e0 Merge branch 'dev' into error-log-message
• 220dfce Merge branch 'dev' into error-log-message
• 451390b Merge branch 'dev' into error-log-message
• 18f071a Merge branch 'dev' into fix-codecov
• 7e74e12 Merge branch 'dev' into ignore-experimental-test
• 9c534dc Merge branch 'dev' into isolate-metrics
• 4cf6b6c Merge branch 'dev' into isolate-metrics
• ec20d28 Merge branch 'dev' into isolate-metrics
• 50b334d Merge branch 'dev' into isolate-metrics
• 0b58daf Merge branch 'dev' into notes
• 4bbd9f1 Merge branch 'dev' into proposal_errorimprovements
• 8549d91 Merge branch 'dev' into ratify-err-doc
• 060c5a5 Merge branch 'dev' into ratify-err-doc
• 518ad3d Merge branch 'dev' into remove-autorest-adal
• f510dd9 Merge branch 'dev' into remove-autorest-adal
• 6f92077 Merge branch 'dev' into template-result
• e757310 Merge branch 'dev' into verification-response
• 34fbf9f Merge branch 'main' into dev
• 49201e9 Merge branch 'main' into staging
• f201712 Merge branch 'main' into staging
• 8c87951 Merge branch 'staging' into dependabot/github_actions/codecov/codecov-action-4.3.0
• 73ef709 Merge branch 'staging' into multi-tenancy-pr-2
• 6a93bbf Merge pull request #1358 from binbin-li/multi-tenancy-pr-2
• 6daec5d Merge pull request #1376 from deislabs/staging
• 9ac7d5a Merge pull request #1379 from deislabs/dependabot/github_actions/codecov/codecov-action-4.3.0
• 6a5f10c Merge pull request #1388 from deislabs/staging
• 6a26a56 Merge pull request #1424 from deislabs/dev
• 194c2aa Merge pull request #1431 from akashsinghal/akashsinghal/fixCosignConfig
• f0b1e6b Merge pull request #1444 from deislabs/dev
• d78461a Merge pull request #1480 from deislabs/dev
• c92687d Merge pull request #1499 from deislabs/dev
• 61f7c60 Merge pull request #1520 from binbin-li/isolate-metrics
• 340c4db Merge pull request #1521 from susanshi/dev
• 8a6f018 Merge pull request #1532 from binbin-li/clean-package
• b6a5701 Merge pull request #1533 from ratify-project/dev
• 6443a65 Merge pull request #1539 from binbin-li/run-scorecard-on-dev
• d9d46fe Merge pull request #1542 from binbin-li/fix-vulnerability
• 5d4720f Merge pull request #1563 from ratify-project/dependabot/go_modules/github.com/Azure/azure-sdk-for-go/sdk/azidentity-1.6.0
• 5e81022 Merge pull request #1581 from ratify-project/dev
• 9bf9232 Merge pull request #1585 from ratify-project/dev
• 47b3331 Merge pull request #1589 from ratify-project/dependabot/docker/httpserver/golang-b405b62
• e4c58e2 Merge pull request #1590 from ratify-project/dependabot/docker/alpine-b89d9c93e9ed3597455c90a0b88a8bbb5cb7188438f70953fede212a0c4394e0
• db3b86f Merge pull request #1597 from ratify-project/dev
• 7f1ecfb Merge pull request #1608 from susanshi/notes
• 357eb51 Merge pull request #1613 from ZAFT-Armored-Keeper-of-Unity/helmfile-update-1.13.2
• db7e6ee Merge pull request #1614 from ratify-project/dev
• 61e0fed Merge pull request #1621 from ratify-project/dependabot/docker/httpserver/golang-fcae9e0
• e62cd8e Merge pull request #1622 from ratify-project/dependabot/github_actions/actions/upload-artifact-4.3.4
• 9551205 Merge pull request #1624 from binbin-li/ignore-experimental-test
• 03216af Merge pull request #1628 from ratify-project/dependabot/github_actions/actions/setup-go-5.0.2
• 11a683d Merge pull request #1631 from ratify-project/dev
• 643e98a Merge pull request #1632 from ratify-project/dependabot/go_modules/github.com/owenrumney/go-sarif/v2-2.3.3
• e7aa02a Merge pull request #1634 from ratify-project/dependabot/go_modules/github.com/sigstore/sigstore-1.8.7
• 9549d66 Merge pull request #1635 from ratify-project/dependabot/go_modules/github.com/aws/aws-sdk-go-v2/config-1.27.26
• 9c9cb05 Merge pull request #1636 from ratify-project/dependabot/go_modules/github.com/aws/aws-sdk-go-v2/credentials-1.17.26
• 1d6e824 Merge pull request #1637 from ratify-project/dependabot/docker/dot-devcontainer/vscode/devcontainers/go-dca0f2c
• 089edf1 Merge pull request #1643 from ratify-project/dev
• dfe9d0a Merge pull request #1647 from ratify-project/dependabot/go_modules/github.com/aws/aws-sdk-go-v2/config-1.27.27
• 9db35b0 Merge pull request #1651 from ratify-project/dependabot/github_actions/docker/login-action-3.3.0
• b8f0e29 Merge pull request #1656 from binbin-li/template-result
• 99d5629 Merge pull request #1661 from ratify-project/dev
• 1ecd579 Merge pull request #1662 from yizha1/proposal_errorimprovements
• 3c28fd4 Merge pull request #1665 from ratify-project/dependabot/github_actions/github/codeql-action-3.25.15
• d442fad Merge pull request #1666 from ratify-project/dependabot/docker/alpine-0a4eaa0eecf5f8c050e5bba433f58c052be7587ee8af3e8b3910ef9ab5fbe9f5
• 90367de Merge pull request #1668 from binbin-li/ratify-err-doc
• 294a715 Merge pull request #1671 from binbin-li/verification-response
• b0d8a2d Merge pull request #1672 from ratify-project/dependabot/github_actions/golangci/golangci-lint-action-6.1.0
• bd87979 Merge pull request #1674 from ratify-project/dependabot/go_modules/github.com/docker/docker-26.1.4incompatible
• e8f8000 Merge pull request #1675 from binbin-li/error-log-message
• ba5638e Merg...