All pull requests

Pull requests

• fix: keep authentic signed attributes when an extended attribute collides

  #1370·arpitjain099 opened Oct 14, 2026·

  ·

• feat(release): coordinate monthly Notation and library patch releases

  #1369·yizha1 opened Oct 13, 2026Contributor·

  ·
  6

• build(deps): Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.2 in /test/e2e

  dependenciesgo
  #1367·dependabot[bot] opened Sep 17, 2026Bot·

  ·
  1

• feat: make OCSP timeout configurable via --ocsp-timeout flag

  #1366·shashankvarma499 opened Sep 11, 2026·

  ·
  1

• feat: add notation policy init command

  Stale
  #1364·ChrisJr404 opened Aug 17, 2026·

  ·
  1

  1

• chore: bump oras-go from v2.6.0 to v2.6.2 (fixes #1361)

  Stale
  #1363·AruneshDwivedi opened Aug 9, 2026·

  ·
  1

  2

• Bumped up oras-go for security patches (#1361)

  Stale
  #1362·suidpit opened Aug 7, 2026·

  ·
  1

• docs: add architecture overview

  #1360·Tatsinnit opened Aug 3, 2026Contributor·

  ·
  16

• build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /test/e2e

  dependenciesgoStale
  #1358·dependabot[bot] opened Jul 10, 2026Bot·

  ·
  4

• build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /test/e2e/plugin

  dependenciesgoStale
  #1356·dependabot[bot] opened Jul 10, 2026Bot·

  ·
  4

• build(deps): Bump golang.org/x/net from 0.47.0 to 0.55.0 in /test/e2e

  dependenciesgoStale
  #1354·dependabot[bot] opened Jul 2, 2026Bot·

  ·
  4

• docs: add Long description and examples to key subcommands

  #1351·ogulcanaydogan opened Jun 11, 2026Contributor·

  ·
  7

• docs: add Long description and example to version command

  #1350·ogulcanaydogan opened Jun 11, 2026Contributor·

  ·
  7

• fix: use %w instead of %v for error wrapping in login and logout

  #1349·ogulcanaydogan opened Jun 10, 2026Contributor·

  ·
  8

• feat: add CLI option to generate dm-verity referrer objects

  Stale
  #1343·dallasd1 opened Mar 31, 2026Contributor·

  ·
  1

• build(deps): consolidate open Dependabot dependency updates

  #1341·shizhMSFT with CopilotAI opened Feb 18, 2026·

  ·
  1

  4

  

• build(deps): Bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.27.1 in /test/e2e

  dependenciesgo
  #1331·dependabot[bot] opened Oct 27, 2025Bot·

  ·
  4

• build(deps): Bump github/codeql-action from 3.29.11 to 4.31.0

  dependenciesgithub_actions
  #1330·dependabot[bot] opened Oct 27, 2025Bot·

  ·
  4

• build(deps): Bump golang.org/x/term from 0.34.0 to 0.36.0

  dependenciesgoStale
  #1328·dependabot[bot] opened Oct 13, 2025Bot·

  ·
  12

• build(deps): Bump actions/stale from 9.1.0 to 10.1.0

  dependenciesgithub_actions
  #1323·dependabot[bot] opened Oct 6, 2025Bot·

  ·
  5

• build(deps): Bump actions/cache from 4.2.4 to 4.3.0

  dependenciesgithub_actions
  #1322·dependabot[bot] opened Sep 29, 2025Bot·

  ·
  5

• build(deps): Bump github.com/spf13/pflag from 1.0.7 to 1.0.10

  dependenciesgoStale
  #1318·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  7

• build(deps): Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 in /test/e2e/plugin

  dependenciesgoStale
  #1317·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  7

• build(deps): Bump github.com/spf13/cobra from 1.9.1 to 1.10.1

  dependenciesgo
  #1316·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  6

• build(deps): Bump actions/setup-go from 5.5.0 to 6.0.0

  dependenciesgithub_actions
  #1314·dependabot[bot] opened Sep 8, 2025Bot·

  ·
  6