v0.93.1

Changelog

Bug fixes

• f913691: fix: spored installs in all regions, robust sig-aware fallback (#440) (#441) (@scttfrdmn)

Others

• 3824c10: chore(release): spawn v0.93.1 (@scttfrdmn)

v0.93.0

Changelog

Bug fixes

• 02e9620: fix(dns): surface DNS registration failures instead of swallowing them (#435, #434) (#436) (@scttfrdmn)
• f7c9aa4: fix(spored): log when DNS registration is skipped for no configured name (#435) (#437) (@scttfrdmn)

Others

• 3e8914d: chore(release): spawn v0.93.0 (@scttfrdmn)
• 8c0a014: feat(ttl-reaper): DNS reconciliation sweep for orphaned records (#438) (#439) (@scttfrdmn)

v0.92.0

Changelog

Features

• 2e81183: feat(status): show a Lifecycle protection summary (#429-review) (#431) (@scttfrdmn)

Bug fixes

• 8da4de5: fix(ci): restore GoReleaser env block (cosign PR misplaced it) (@scttfrdmn)

Others

• ae3e92d: chore(release): spawn v0.92.0 (@scttfrdmn)
• 4349598: security: bump grpc to 1.82.1 (GHSA-hrxh-6v49-42gf) (#432) (@scttfrdmn)
• 687c6c0: security: sign CLI release artifacts with keyless cosign + SLSA (#430) (#433) (@scttfrdmn)

v0.91.1

Changelog

Others

• 70c36e3: chore(release): spawn v0.91.1 (@scttfrdmn)
• 95d7235: docs(changelog): note the release-signing fix under Unreleased (#440) (@scttfrdmn)

v0.91.0

Changelog

Features

• 668d3d5: feat(security): activate spored signature verification (#440) (#428) (@scttfrdmn)

Bug fixes

• fe61ef7: fix(release): sign spored digest, not the raw binary (KMS 200KB cap) (#440) (#429) (@scttfrdmn)

Others

• 37198ed: chore(release): spawn v0.91.0 (@scttfrdmn)

v0.90.0

Changelog

Features

• 2f1230d: feat(security): sign spored binaries + verify at boot (#440) (#427) (@scttfrdmn)
• 651211b: feat: add 'spawn doctor' preflight command (spore-host#444) (#426) (@scttfrdmn)

Others

• c1b449b: chore(release): spawn v0.90.0 (@scttfrdmn)

v0.89.0

Changelog

Features

• 71d9eef: feat(plugin): expose {{ instance.login_user }} template variable (#425) (@scttfrdmn)

Others

• 7f42ebc: chore(release): spawn v0.89.0 (@scttfrdmn)

v0.88.0

Changelog

Features

• c945e02: feat(plugin): require signatures for official plugin releases (spore-plugins#8) (#424) (@scttfrdmn)

Others

• 171a885: chore(release): spawn v0.88.0 (@scttfrdmn)

v0.87.0

Changelog

Features

• 4d1c73d: feat(plugin): 'plugin validate --strict' permission/step consistency check (spore-plugins#8) (#423) (@scttfrdmn)
• 8560b5c: feat(plugin): record installed-plugin provenance on the instance (spore-plugins#8) (#422) (@scttfrdmn)

Bug fixes

• a54d5d1: fix(plugin): clear error on cosign legacy-bundle signatures (spore-plugins#8) (#421) (@scttfrdmn)

Others

• 9a48e2e: chore(release): spawn v0.87.0 (@scttfrdmn)

v0.86.0

Changelog

Features

• f43fc57: feat(plugin): optional sha256: on fetch steps, verified by spored (spore-plugins#8) (#418) (@scttfrdmn)
• 76e58b0: feat(plugin): verify keyless cosign signatures on official releases (#420) (@scttfrdmn)
• 2e52ff2: feat(plugin): verify official installs against a release checksum manifest (#419) (@scttfrdmn)

Others

• 7ecfb8e: chore(release): spawn v0.86.0 (@scttfrdmn)