All pull requests

Pull requests

• fix: warn about overwriting in blob sign only when the signature file exists

  #1381·RaphaelFakhri opened Nov 3, 2026·

  ·
  1

  1

• fix: do not show the password of a plugin download URL

  #1379·ogulcanaydogan opened Oct 26, 2026Contributor·

  ·
  1

  1

• fix: use %v instead of %w in logrus error messages

  #1377·ogulcanaydogan opened Oct 25, 2026Contributor·

  ·
  1

  1

• fix: reject "." and ".." as trust store names

  #1375·ogulcanaydogan opened Oct 25, 2026Contributor·

  ·
  1

  1

• fix: detect Windows drive letter in oci-layout reference with forward slashes

  #1372·arpitjain099 opened Oct 20, 2026·

  ·

• fix: print verify user metadata in key order

  #1371·arpitjain099 opened Oct 18, 2026·

  ·

• fix: keep authentic signed attributes when an extended attribute collides

  #1370·arpitjain099 opened Oct 14, 2026·

  ·

• feat(release): coordinate monthly Notation and library patch releases

  #1369·yizha1 opened Oct 13, 2026Contributor·

  ·
  6

• build(deps): Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 in /test/e2e

  dependenciesgo
  #1367·dependabot[bot] opened Sep 17, 2026Bot·

  ·
  2

• feat: make OCSP timeout configurable via --ocsp-timeout flag

  Stale
  #1366·shashankvarma499 opened Sep 11, 2026·

  ·
  1

  1

• docs: add architecture overview

  #1360·Tatsinnit opened Aug 3, 2026Contributor·

  ·
  16

• build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /test/e2e

  dependenciesgoStale
  #1358·dependabot[bot] opened Jul 10, 2026Bot·

  ·
  4

• build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /test/e2e/plugin

  dependenciesgoStale
  #1356·dependabot[bot] opened Jul 10, 2026Bot·

  ·
  4

• docs: add Long description and examples to key subcommands

  #1351·ogulcanaydogan opened Jun 11, 2026Contributor·

  ·
  7

• docs: add Long description and example to version command

  #1350·ogulcanaydogan opened Jun 11, 2026Contributor·

  ·
  7

• feat: add CLI option to generate dm-verity referrer objects

  Stale
  #1343·dallasd1 opened Mar 31, 2026Contributor·

  ·
  1

• build(deps): consolidate open Dependabot dependency updates

  #1341·shizhMSFT with CopilotAI opened Feb 18, 2026·

  ·
  1

  4

  

• build(deps): Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.27.1 in /test/e2e

  dependenciesgo
  #1331·dependabot[bot] opened Oct 27, 2025Bot·

  ·
  4

• build(deps): Bump github/codeql-action from 3.29.11 to 4.31.0

  dependenciesgithub_actions
  #1330·dependabot[bot] opened Oct 27, 2025Bot·

  ·
  4

• build(deps): Bump golang.org/x/term from 0.34.0 to 0.36.0

  dependenciesgoStale
  #1328·dependabot[bot] opened Oct 13, 2025Bot·

  ·
  12

• build(deps): Bump actions/stale from 9.1.0 to 10.1.0

  dependenciesgithub_actions
  #1323·dependabot[bot] opened Oct 6, 2025Bot·

  ·
  5

• build(deps): Bump actions/cache from 4.2.4 to 4.3.0

  dependenciesgithub_actions
  #1322·dependabot[bot] opened Sep 29, 2025Bot·

  ·
  5

• build(deps): Bump github.com/spf13/pflag from 1.0.7 to 1.0.10

  dependenciesgoStale
  #1318·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  7

• build(deps): Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /test/e2e/plugin

  dependenciesgoStale
  #1317·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  7

• build(deps): Bump github.com/spf13/cobra from 1.9.1 to 1.10.1

  dependenciesgo
  #1316·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  6