Accepting request 966624 from security

- Updated to rekor 0.5.0
  * Highlights
    - Add Rekor logo to README (#650)
    - update API calls to v5 (#591)
    - Refactor helm type to remove intermediate state. (#575)
    - Refactor the shard map parsing so we can pass it down into the API object. (#564)
    - Refactor the alpine type to reduce intermediate state. (#573)
  * Enhancements
    - Add logic to GET artifacts via old or new UUID (#587)
    - helpful error message for hashedrekord types (#605)
    - Set Accept header in dynamic counter requests (#594)
    - Add sharding package and update validators (#583)
    - rekor-cli: show the url in case of error (#581)
    - Enable parsing of incomplete minisign keys, to enable re-indexing. (#567)
    - Cleanups on the TUF pluggable type. (#563)
    - Refactor the RPM type to remove more intermediate state. (#566)
    - Do some cleanups of the jar type to remove intermediate state. (#561)
  * Others
    - update version comments since dependabot doesn't do it (#617)
    - Use workload identity provider instead of GitHub Secret for GCR access (#600)
    - add OSSF scorecard action (#599)
    - enable the sbom for rekor releases (#586)
    - Point to the official website (instead of a 404) (#580)
    - Add a Makefile target for the "ko apply" step. (#572)
    - types/README.md: Corrected documentation link (#568)

- enable server build too, as people might want to deploy rekor chain
  themselves. (forwarded request 966623 from msmeissn)

OBS-URL: https://build.opensuse.org/request/show/966624
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rekor?expand=0&rev=4

rekor-0.4.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:19c369f88d846098fb3895948af493f73c97f7211fd1714f9f77ab4395beef4d
-size 635955

rekor-0.5.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3d235cc16df95c4fffc674ec968d301d351bc167ba197bd75f39679aec8f7bc5
+size 675400

rekor.changes

@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Fri Apr  1 15:13:27 UTC 2022 - Marcus Meissner <meissner@suse.com>
+
+- Updated to rekor 0.5.0
+  * Highlights
+    - Add Rekor logo to README (#650)
+    - update API calls to v5 (#591)
+    - Refactor helm type to remove intermediate state. (#575)
+    - Refactor the shard map parsing so we can pass it down into the API object. (#564)
+    - Refactor the alpine type to reduce intermediate state. (#573)
+  * Enhancements
+    - Add logic to GET artifacts via old or new UUID (#587)
+    - helpful error message for hashedrekord types (#605)
+    - Set Accept header in dynamic counter requests (#594)
+    - Add sharding package and update validators (#583)
+    - rekor-cli: show the url in case of error (#581)
+    - Enable parsing of incomplete minisign keys, to enable re-indexing. (#567)
+    - Cleanups on the TUF pluggable type. (#563)
+    - Refactor the RPM type to remove more intermediate state. (#566)
+    - Do some cleanups of the jar type to remove intermediate state. (#561)
+  * Others
+    - update version comments since dependabot doesn't do it (#617)
+    - Use workload identity provider instead of GitHub Secret for GCR access (#600)
+    - add OSSF scorecard action (#599)
+    - enable the sbom for rekor releases (#586)
+    - Point to the official website (instead of a 404) (#580)
+    - Add a Makefile target for the "ko apply" step. (#572)
+    - types/README.md: Corrected documentation link (#568)
+
+-------------------------------------------------------------------
+Thu Feb  3 09:46:25 UTC 2022 - Marcus Meissner <meissner@suse.com>
+
+- enable server build too, as people might want to deploy rekor chain
+  themselves.
+
 -------------------------------------------------------------------
 Tue Jan 25 08:32:11 UTC 2022 - Bernhard Wiedemann <bwiedemann@suse.com>
 

rekor.spec

@@ -16,12 +16,12 @@
 #
 
 
-%define apps cli
+%define apps cli server
 
 Name:           rekor
-Version:        0.4.0
+Version:        0.5.0
 Release:        0
-%define revision 5025a24e2861d1876d67a09cf6bfad0ee76d64c8
+%define revision 09ecf71dff57de24ec5e779b4077b187956edf0e
 Summary:        Supply Chain Transparency Log
 License:        Apache-2.0
 URL:            https://github.com/sigstore/rekor

vendor.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:184e5a0d55c2ca5ca71502585aba184c5838e719391550558ebd01fd060ad99c
-size 4176580
+oid sha256:ba8de32dd5059e900a43f2fadd56faf62ff70469abfca81c37c210b953fdca21
+size 5714607