What's Changed

• (kms/hashivault): add openbao support in #2303
• Fix typo in RSA PSS 4096 signature identifier in #2270
• fix: eliminate usage of text/template in #2288
• chore: mention openbao being supported as well (#2303) in #2313

Full Changelog: v1.10.4...v1.10.5

What's Changed

• Escape target name - GHSA-fcv2-xgw5-pqxf in #2265

Full Changelog: v1.10.3...v1.10.4

What's Changed

v1.10.3 adds ValidatePubKey back to the cryptoutils package to avoid a breaking API change.

• Add back ValidatePubKey as a deprecated, minimal function in #2235

Full Changelog: v1.10.2...v1.10.3

v1.10.2

Functionally equivalent to v1.10.0. v1.10.1 has been retracted to remove copied code.

v1.10.0

Breaking change

#2194 moves cryptoutils.ValidatePubKey to goodkey.ValidatePubKey to minimize the dependency tree for clients using the cryptoutils package.

Features

• feat(hashivault): token helper in #2174
• set GoogleAPIClientOption on GCP KMS provider in #2128

Refactoring

• cryptoutils: move goodkey validation to separate package in #2194
• Stop depending on golang.org/x/crypto for sha3 in #2209
• remove duplicative dependency for portable browser opener in #2178
• consolidate deep Equal usage to one library in #2177
• Drop redundant aws-sdk-go dependency in the e2e kms tests in #2172

Breaking change

#2194 moves cryptoutils.ValidatePubKey to goodkey.ValidatePubKey to minimize the dependency tree for clients using the cryptoutils package.

Features

• feat(hashivault): token helper in #2174
• set GoogleAPIClientOption on GCP KMS provider in #2128

Refactoring

• cryptoutils: move goodkey validation to separate package in #2194
• Stop depending on golang.org/x/crypto for sha3 in #2209
• remove duplicative dependency for portable browser opener in #2178
• consolidate deep Equal usage to one library in #2177
• Drop redundant aws-sdk-go dependency in the e2e kms tests in #2172

Full Changelog: v1.9.5...v1.10.0

What's Changed

• Add context from opts to Azure signer in #2070
• add RWMutex around providerMap to protect concurrent ops in #2077

Full Changelog: v1.9.4...v1.9.5

What's Changed

• Add a Name field to the TargetFile struct in #2068
• Update to use Tink v2.3.0 API in #2069

Full Changelog: v1.9.3...v1.9.4

What's Changed

• add proto hash algorithm to registry by @loosebazooka in #2048

New Contributors

• @loosebazooka made their first contribution in #2048

Full Changelog: v1.9.2...v1.9.3

What's Changed

• Add tink package by @cmurphy in #2024
• pkg/signature: add P384/P521 compatibility algo to algorithm registry by @ret2libc in #2037

New Contributors

• @cmurphy made their first contribution in #2024

Full Changelog: v1.9.1...v1.9.2

What's Changed

• Implement default signing algorithms based on the key type by @ret2libc in #2014

Full Changelog: v1.9.0...v1.9.1