v1.2.0

Vote PASSED [+4 -0]: #1022

Notation v1.2.0

Notation v1.2.0 is an implementation of the Notary Project Specifications v1.1.0.

Key features

• Support OCI image-spec v1.1.0 and distribution-spec v1.1.0

  • Introduced new flag --force-referrers-tag (default to true) to the notation sign command, which allows users opt to the referrers tag schema instead of the referrers API.
  • The notation verify / list / inspect commands always attempt the referrers API first, automatically falling back to the referrers tag schema if the referrers API is not supported by the registry.

• Support for RFC 3161 compliant Timestamping

  • Introduced two new flags --timestamp-url and --timestamp-root-cert in notation sign command for signing with timestamping, see the notation sign CLI spec for more details.
  • Support a new trust store type tsa in notation certificate command.
  • Support RFC 3161 timestamp verification in the notation verify command with updated trust policy, see the notation verify CLI spec for more details.
  • Support RFC 3161 timestamp in notation inspect command's output.

• Added support for armv7 binary release.

Other changes

• Upgraded to Golang v1.23

Deprecation

• The experimental flag --allow-referrers-api is deprecated as notation follows distribution-spec v1.1.0.

What's changed since v1.2.0-rc.1

• bump: release v1.2.0-rc.1 (#1017)
• bump: bump up for v1.2.0 stable release (#1021)

Full Changelog: v1.2.0-rc.1...v1.2.0