[wolfv]

🤖 New release

• sigstore-types: 0.15.0 -> 0.15.1
• sigstore-crypto: 0.15.0 -> 0.15.1
• sigstore-merkle: 0.15.0 -> 0.15.1 (✓ API compatible changes)
• sigstore-tsa: 0.15.0 -> 0.15.1 (✓ API compatible changes)
• sigstore-tuf: 0.15.0 -> 0.15.1
• sigstore-trust-root: 0.15.0 -> 0.15.1 (✓ API compatible changes)
• sigstore-bundle: 0.15.0 -> 0.15.1
• sigstore-rekor: 0.15.0 -> 0.15.1
• sigstore-oidc: 0.15.0 -> 0.15.1
• sigstore-fulcio: 0.15.0 -> 0.15.1
• sigstore-verify: 0.15.0 -> 0.15.1
• sigstore-sign: 0.15.0 -> 0.15.1

Changelog

sigstore-types

0.15.0 - 2026-10-13

Added

• (sign) attestation subjects with any in-toto digest (#268)

Other

• [breaking] final API naming polish before 1.0 (#325)
• (types) remove duplicated constructor doc lines (#318)
• [breaking] document every public item, enforce missing_docs (#271)

sigstore-crypto

0.15.0 - 2026-10-13

Other

• (crypto) fix boring_provider build after sha384 returns Sha384Hash (#332)
• [breaking] final API naming polish before 1.0 (#325)
• Crypto agility (#326)
• [breaking] document every public item, enforce missing_docs (#271)

sigstore-merkle

0.15.1 - 2026-10-23

Other

• update Cargo.toml dependencies

sigstore-tsa

0.15.1 - 2026-10-23

Fixed

• (tsa) verify response messageImprint matches request (#340)

sigstore-tuf

0.15.0 - 2026-10-13

Other

• Crypto agility (#326)
• consolidate feature and dependency checks into check-features.py (#320)
• (tuf) use sigstore-crypto for hashing instead of sha2 (#327)
• (tuf) [breaking] stabilize the sigstore-tuf API for 1.0 (#317)

sigstore-trust-root

0.15.1 - 2026-10-23

Other

• refresh embedded TUF data (#342)

sigstore-bundle

0.15.0 - 2026-10-13

Other

• [breaking] final API naming polish before 1.0 (#325)
• Crypto agility (#326)
• (deps) remove unused dependencies and features across workspace (#329)
• [breaking] consistent function and feature names before 1.0 (#319)
• [breaking] document every public item, enforce missing_docs (#271)

sigstore-rekor

0.15.0 - 2026-10-13

Fixed

• (tsa,rekor) no dead-code warnings without the client feature (#265)

Other

• Crypto agility (#326)
• [breaking] consistent function and feature names before 1.0 (#319)
• [breaking] document every public item, enforce missing_docs (#271)
• (rekor) [breaking] opaque request types (#266)

sigstore-oidc

0.15.0 - 2026-10-13

Other

• Crypto agility (#326)
• [breaking] consistent function and feature names before 1.0 (#319)
• (deps) update rust crate rand to 0.10.0 (#309)
• [breaking] document every public item, enforce missing_docs (#271)

sigstore-fulcio

0.15.0 - 2026-10-13

Other

• Crypto agility (#326)
• [breaking] document every public item, enforce missing_docs (#271)

sigstore-verify

0.15.0 - 2026-10-13

Fixed

• (verify) verify RFC 3161 timestamps with managed keys, earliest integrated time (#269)

Other

• [breaking] final API naming polish before 1.0 (#325)
• Crypto agility (#326)
• (deps) remove unused dependencies and features across workspace (#329)
• (verify) [breaking] collapse verification entry points (#316)
• (verify) pass the signing certificate chain to chain verification (#315)
• (verify) remove unit test from verify_bundle example (#314)
• [breaking] document every public item, enforce missing_docs (#271)
• (interop) Make interop tests use conformance test token (#303)
• (verify) [breaking] categorized, matchable verification errors (#264)

sigstore-sign

0.15.0 - 2026-10-13

Added

• (sign) attestation subjects with any in-toto digest (#268)

Other

• Crypto agility (#326)
• (deps) remove unused dependencies and features across workspace (#329)
• [breaking] consistent function and feature names before 1.0 (#319)
• [breaking] document every public item, enforce missing_docs (#271)
• (rekor) [breaking] opaque request types (#266)
• (sign) [breaking] structured signing errors (#267)

---

This PR was generated with release-plz.