File _patchinfo of Package patchinfo.27049

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.27049

<patchinfo incident="27049">
  <issue tracker="jsc" id="SLE-23476"/>
  <packager>msmeissn</packager>
  <rating>moderate</rating>
  <category>recommended</category>
  <summary>Recommended update for rekor</summary>
  <description>This update for rekor fixes the following issues:

Rekor was updated to 1.0.1 (jsc#SLE-23476):

- stop inserting envelope hash for intoto:0.0.2 types into index

- build with FIPSified go1.18.

updated to rekor 1.0.0 (jsc#SLE-23476):

- add description on /api/v1/index/retrieve endpoint
- Adding e2e test coverage
- export rekor build/version information
- Use POST instead of GET for /api/log/entries/retrieve metrics.
- Search through all shards when searching
- verify: verify checkpoint's STH against the inclusion proof root hash
- add ability to enable/disable specific rekor API endpoints
- enable configurable client retries with backoff in RekorClient
- remove dead code around api-key and timestamp references
- update swagger API version to 1.0.0
- remove unused RekorVersion API definition
- install gocovmerge in hack/tools
- add retry command line flag on rekor-cli
- Add some info and debug logging to commonly used funcs

updated to rekor 0.12.2 (jsc#SLE-23476):

updated to rekor 0.12.1 (jsc#SLE-23476):

- ** Rekor ** v0.12.1 comes with a breaking change to rekor-cli v0.12.1. Users of rekor-cli MUST upgrade to the latest version
  The addition of the intotov2 created a breaking change for the rekor-cli

- What's Changed

- fix: fix harness tests with intoto v0.0.2
  - feat: add file based signer and password
  - Adds new rekor metrics for latency and QPS.
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.27049

Places