Patch Changes

• e66d99f: harden pre-signature checkpoint parsing

Patch Changes

• adbe253: Deduplicate transparency-log entries before counting them toward tlogThreshold, so repeated copies of a single entry no longer over-count. This matches the existing duplicate checks for timestamps and SCTs in the same verifier.

Patch Changes

• b855f46: Select Docker registry credentials by exact host match instead of substring match to avoid sending credentials to an unintended registry

Patch Changes

• 0dd1cb5: Update @oclif/plugin-help from 6.2.55 to 6.2.56.

Patch Changes

• 3a83271: Bump @oclif/core from 4.11.11 to 4.13.2 and @oclif/plugin-help from 6.2.53 to 6.2.55.
• 132ad51: Bump @oclif/plugin-help from 6.2.52 to 6.2.53
• Updated dependencies [b855f46]
  • @sigstore/oci@0.7.2

Minor Changes

• 754e2a3: Support verification of DSSE bundles with a Rekor v2 hashedrekord transparency log entry, where the entry's digest is computed over the DSSE pre-authentication encoding (PAE) rather than the envelope payload

Patch Changes

• Updated dependencies [04ea25a]
  • @sigstore/core@4.0.1

Patch Changes

• 85c5838: Select Docker registry credentials by exact host match instead of substring match to avoid sending credentials to an unintended registry

Patch Changes

• 04ea25a: ASN.1 parser hardening

Patch Changes

• 440ef7b: Bump @oclif/plugin-help from 6.2.49 to 6.2.50
• Updated dependencies [85c5838]
  • @sigstore/oci@0.7.1

Major Changes

• 46c00b3: Drop support for Node 20

Patch Changes

• Updated dependencies [7db2666]
• Updated dependencies [74eda7a]
• Updated dependencies [46c00b3]
• Updated dependencies [46c00b3]
• Updated dependencies [46c00b3]
• Updated dependencies [46c00b3]
  • @sigstore/tuf@5.0.0
  • @sigstore/bundle@5.0.0
  • @sigstore/verify@4.0.0
  • @sigstore/core@4.0.0
  • @sigstore/sign@5.0.0