Patch Changes

• 7d0ad01: Bump @sigstore/protobuf-specs from 0.5.0 to 0.5.2
• Updated dependencies [4188e72]
• Updated dependencies [e9864c3]
• Updated dependencies [7d0ad01]
• Updated dependencies [e77ae76]
• Updated dependencies [2af33f8]
• Updated dependencies [bc962f7]
• Updated dependencies [e08db39]
  • @sigstore/tuf@5.0.1
  • @sigstore/sign@5.1.0
  • @sigstore/bundle@5.0.1
  • @sigstore/verify@4.1.3

Patch Changes

• 7d0ad01: Bump @sigstore/protobuf-specs from 0.5.0 to 0.5.2
• 2af33f8: Harden transparency log entry verification
• Updated dependencies [7d0ad01]
  • @sigstore/bundle@5.0.1

Patch Changes

• 4188e72: Update TUF seed files
• 7d0ad01: Bump @sigstore/protobuf-specs from 0.5.0 to 0.5.2
• bc962f7: Bump tuf-js from 6.0.0 to 6.0.1
• e08db39: Bump tuf-js from 6.0.1 to 6.0.2

Minor Changes

• e9864c3: Add ambient OIDC credential detection for Buildkite jobs using the native Buildkite agent token flow.
• e77ae76: Fetch existing Rekor entries by default when a create request returns a conflict.

Patch Changes

• 7d0ad01: Bump @sigstore/protobuf-specs from 0.5.0 to 0.5.2
• Updated dependencies [7d0ad01]
  • @sigstore/bundle@5.0.1

Minor Changes

• 7ca56e9: Harden registry authentication and redirect handling. Requests now require HTTPS and public network destinations unless an origin is explicitly allowed via fetchOpts.allowedPrivateOrigins (or sigstore attach --allow-private-origin). Configured proxies remain supported; destination DNS checks apply only to direct connections.

Patch Changes

• 8fc8686: Update canonicalize to 5.1.0. Canonicalization now rejects unpaired surrogates and handles some non-JSON values differently.
• 7d0ad01: Bump @sigstore/protobuf-specs from 0.5.0 to 0.5.2
• f512dbe: Bump @peculiar/webcrypto from 1.7.1 to 2.0.0.
• 94a506b: Bump @peculiar/x509 from 2.0.0 to 2.2.0
• bfd9abe: Update @peculiar/x509 to 3.1.0 and support its ESM-only release from CommonJS.

Minor Changes

• 7ca56e9: Harden registry authentication and redirect handling. Requests now require HTTPS and public network destinations unless an origin is explicitly allowed via fetchOpts.allowedPrivateOrigins (or sigstore attach --allow-private-origin). Configured proxies remain supported; destination DNS checks apply only to direct connections.

Patch Changes

• 51b1245: Bump oclif from 4.23.29 to 6.0.15
• 1fc6056: Bump @oclif/core from 4.13.2 to 5.1.11.
• 278d844: Bump @oclif/plugin-help from 6.2.56 to 7.0.6
• 12482d1: Upgrade openid-client to v6 and migrate browser authentication while retaining PKCE, state, nonce, and ID-token signature validation. OpenID Connect issuers must now use HTTPS; localhost callback URLs continue to use HTTP.
• 94a506b: Bump open from 11.0.0 to 11.0.4
• Updated dependencies [e9864c3]
• Updated dependencies [7d0ad01]
• Updated dependencies [7ca56e9]
• Updated dependencies [e77ae76]
  • @sigstore/sign@5.1.0
  • @sigstore/bundle@5.0.1
  • sigstore@5.0.1
  • @sigstore/oci@0.8.0

Patch Changes

• 7d0ad01: Bump @sigstore/protobuf-specs from 0.5.0 to 0.5.2

Patch Changes

• e66d99f: harden pre-signature checkpoint parsing

Patch Changes

• adbe253: Deduplicate transparency-log entries before counting them toward tlogThreshold, so repeated copies of a single entry no longer over-count. This matches the existing duplicate checks for timestamps and SCTs in the same verifier.