|
90 | 90 | application:
|
91 | 91 | version: 1.184.0
|
92 | 92 | new_features:
|
93 |
| - - text: Certificate chains are now automatically resolved. See the [documentation](/documentation/managing-certificates#uploading-certificates). |
| 93 | + - text: Certificate chains are now automatically resolved. See the [documentation](/managing-certificates#uploading-certificates). |
94 | 94 | issues: [SIGN-7551]
|
95 | 95 | improvements:
|
96 | 96 | - text: Uploaded X.509 certificate chains are now embedded in the signature when using the `<authenticode-sign>` directive.
|
|
110 | 110 | - text: |-
|
111 | 111 | Added support for storing and retrieving X.509 certificate chains (for e.g. certificates issued by in-house PKIs).
|
112 | 112 | issues: [SIGN-7423]
|
113 |
| - - text: Added support for `file-version`, `company-name`, `copyright`, and `original-filename` to [`<pe-file>` metadata restrictions](/documentation/artifact-configuration/reference#metadata-restrictions). |
| 113 | + - text: Added support for `file-version`, `company-name`, `copyright`, and `original-filename` to [`<pe-file>` metadata restrictions](/artifact-configuration/reference#metadata-restrictions). |
114 | 114 | issues: [SIGN-7395]
|
115 | 115 | improvements:
|
116 | 116 | - text: |-
|
|
146 | 146 | github_connector:
|
147 | 147 | version: 1.2.0
|
148 | 148 | improvements:
|
149 |
| - - text: The [SignPath GitHub App](/documentation/trusted-build-systems/github) is only required if source code and build policy verification is used. |
| 149 | + - text: The [SignPath GitHub App](/trusted-build-systems/github) is only required if source code and build policy verification is used. |
150 | 150 | issues: [SIGN-7506]
|
151 | 151 | bug_fixes:
|
152 | 152 | - text: Fixed bug for workflow runs with skipped jobs.
|
|
177 | 177 | * moved Organization ID and API token parameters to the "inner" scenario scripts
|
178 | 178 | * improved Cryptoki library discovery
|
179 | 179 | * various minor improvements
|
180 |
| - * [GPG-based hash signing](/documentation/crypto-providers/gpg): GPG public key file is now downloaded automatically. Therefore the `-GpgKeyId` parameter of the scenario scripts has been replaced with `-ProjectSlug` and `-SigningPolicySlug`. |
| 180 | + * [GPG-based hash signing](/crypto-providers/gpg): GPG public key file is now downloaded automatically. Therefore the `-GpgKeyId` parameter of the scenario scripts has been replaced with `-ProjectSlug` and `-SigningPolicySlug`. |
181 | 181 | * Changed work directory from `Samples/Scenarios/temp` to `Samples/Scenarios/Work` and logs directory to `Samples/Scenarios/Work/Logs`.
|
182 | 182 | * Added detached CMS signing sample to the OpenSSL scenario.
|
183 | 183 | issues: [SIGN-7410, SIGN-7497]
|
|
198 | 198 | version: 1.179.0
|
199 | 199 | new_features:
|
200 | 200 | - text: |-
|
201 |
| - Added support for [detached GPG file signing](/documentation/artifact-configuration/reference#create-gpg-signature). |
| 201 | + Added support for [detached GPG file signing](/artifact-configuration/reference#create-gpg-signature). |
202 | 202 | issues: [SIGN-7455]
|
203 | 203 | - text: |-
|
204 | 204 | The signing request details page now displays details of detected malware including threat names and the exact file location in container files like ZIP archives.
|
205 | 205 | issues: [SIGN-7454]
|
206 | 206 | improvements:
|
207 | 207 | - text: |-
|
208 |
| - [`<create-raw-signature>`](/documentation/artifact-configuration/reference#create-raw-signature): renamed `file-name` attribute to `output-file-name`. (`file-name` is still supported for backwards compatibility.) |
| 208 | + [`<create-raw-signature>`](/artifact-configuration/reference#create-raw-signature): renamed `file-name` attribute to `output-file-name`. (`file-name` is still supported for backwards compatibility.) |
209 | 209 | issues: [SIGN-7490]
|
210 | 210 | - text: |-
|
211 |
| - [`<create-cms-signature>`](/documentation/artifact-configuration/reference#create-cms-signature): `hash-algorithm` attribute is now optional. |
| 211 | + [`<create-cms-signature>`](/artifact-configuration/reference#create-cms-signature): `hash-algorithm` attribute is now optional. |
212 | 212 | issues: [SIGN-7507]
|
213 | 213 | bug_fixes:
|
214 | 214 | - text: |-
|
|
228 | 228 | application:
|
229 | 229 | version: 1.177.2
|
230 | 230 | new_features:
|
231 |
| - - text: Added support for [Cryptographic Message Syntax (CMS) signatures](/documentation/artifact-configuration/reference#create-cms-signature). |
| 231 | + - text: Added support for [Cryptographic Message Syntax (CMS) signatures](/artifact-configuration/reference#create-cms-signature). |
232 | 232 | issues: [SIGN-7477]
|
233 | 233 | - date: '2024-12-16'
|
234 | 234 | updates:
|
235 | 235 | github_connector:
|
236 | 236 | version: 1.1.0
|
237 | 237 | new_features:
|
238 |
| - - text: Policy checks for branch rulesets, build and build runner are supported. See the [documentation](/documentation/trusted-build-systems/github#build-and-source-code-policies). |
| 238 | + - text: Policy checks for branch rulesets, build and build runner are supported. See the [documentation](/trusted-build-systems/github#build-and-source-code-policies). |
239 | 239 | issues: [SIGN-7266, SIGN-7285, SIGN-2792, SIGN-7424, SIGN-7433, SIGN-7266, SIGN-7199, SIGN-7198]
|
240 | 240 | bug_fixes:
|
241 | 241 | - text: Fixed a bug that prevented signing requests from being submitted when the "re-run failed jobs" feature of workflows was used for workflows with multiple jobs.
|
|
248 | 248 | version: 1.177.0
|
249 | 249 | new_features:
|
250 | 250 | - text: |-
|
251 |
| - Added [GPG key management](/documentation/managing-certificates): |
| 251 | + Added [GPG key management](/managing-certificates): |
252 | 252 | * GPG keys can now be created directly in the SignPath UI.
|
253 | 253 | * They can currently be used for hash signing and `create-raw-signature`.
|
254 | 254 | issues: [SIGN-7247]
|
|
294 | 294 | version: 5.1.0
|
295 | 295 | new_features:
|
296 | 296 | - text: |-
|
297 |
| - Added support for using GPG keys generated by [SignPath certificate management](/documentation/managing-certificates): |
| 297 | + Added support for using GPG keys generated by [SignPath certificate management](/managing-certificates): |
298 | 298 | * It is no longer required to locally generate GPG keys based on backing X.509 certificates. You can create GPG keys directly in the SignPath UI.
|
299 | 299 | * Requires SignPath version 1.177 or higher.
|
300 |
| - * Adapted and simplified the Linux container samples for [GPG hash signing](/documentation/crypto-providers/gpg). |
| 300 | + * Adapted and simplified the Linux container samples for [GPG hash signing](/crypto-providers/gpg). |
301 | 301 | issues: [SIGN-7341, SIGN-7318]
|
302 | 302 | improvements:
|
303 | 303 | - text: |-
|
|
361 | 361 | jenkins_plugin:
|
362 | 362 | version: '2.1.0'
|
363 | 363 | new_features:
|
364 |
| - - text: Added support for [user-defined parameters](/documentation/artifact-configuration/syntax#parameters). |
| 364 | + - text: Added support for [user-defined parameters](/artifact-configuration/syntax#parameters). |
365 | 365 | issues: [SIGN-6986]
|
366 | 366 | improvements:
|
367 | 367 | - text: The _API Token Credential_ can now be stored either in th _System_ or a _Global_ (recommended) scope.
|
|
416 | 416 | issues: [SIGN-7248]
|
417 | 417 | new_features:
|
418 | 418 | - text: |-
|
419 |
| - ECDSA hash signing: added support for signature block format "RFC 3279 ASN.1 sequence". See [artifact format for signing hash digests](/documentation/crypto-providers/rest-api#hash-signing-payload-json). |
| 419 | + ECDSA hash signing: added support for signature block format "RFC 3279 ASN.1 sequence". See [artifact format for signing hash digests](/crypto-providers/rest-api#hash-signing-payload-json). |
420 | 420 | issues: [SIGN-7240]
|
421 | 421 | improvements:
|
422 | 422 | - text: |-
|
|
485 | 485 | github_connector:
|
486 | 486 | version: '1.0' # note is 0.8 in connectors release
|
487 | 487 | new_features:
|
488 |
| - - text: 'Initial release: GitHub.com is now available as a [Trusted Build System](/documentation/trusted-build-systems).' |
| 488 | + - text: 'Initial release: GitHub.com is now available as a [Trusted Build System](/trusted-build-systems).' |
489 | 489 | - date: '2024-08-13'
|
490 | 490 | updates:
|
491 | 491 | application:
|
|
532 | 532 | For all other `v1` APIs, `multipart/form-data` is no longer available.
|
533 | 533 | issues: [SIGN-7050]
|
534 | 534 | - text: |-
|
535 |
| - Authenticode signing now supports the following [optional attributes](/documentation/artifact-configuration/reference#authenticode-sign-attributes): |
| 535 | + Authenticode signing now supports the following [optional attributes](/artifact-configuration/reference#authenticode-sign-attributes): |
536 | 536 | * `description` and `description-url`
|
537 | 537 | * `hash-algorithm`
|
538 | 538 | issues: [SIGN-5410, SIGN-7177]
|
|
594 | 594 | version: 1.168.1
|
595 | 595 | new_features:
|
596 | 596 | - text: >-
|
597 |
| - Added support for [appending Authenticode signatures](/documentation/artifact-configuration/reference#authenticode-sign-attributes). |
| 597 | + Added support for [appending Authenticode signatures](/artifact-configuration/reference#authenticode-sign-attributes). |
598 | 598 | issues: [SIGN-7004]
|
599 | 599 | improvements:
|
600 | 600 | - text: >-
|
|
660 | 660 | * Use `SIGNPATH_LOG_CONSOLE_LEVEL=none` to opt-out from file logging.
|
661 | 661 | * Console logging (if enabled) now logs to stderr instead of stdout by default.
|
662 | 662 | * Use the new `SIGNPATH_LOG_CONSOLE_OUTPUT_STREAM` configuration to switch back to `stdout`.
|
663 |
| - * See [Crypto Provider configuration](/documentation/crypto-providers#crypto-provider-configuration) for details. |
| 663 | + * See [Crypto Provider configuration](/crypto-providers#crypto-provider-configuration) for details. |
664 | 664 | issues: [SIGN-6987]
|
665 | 665 | new_features:
|
666 | 666 | - text: |-
|
667 | 667 | The Windows Crypto Providers (incl. KSP, CSP and Cryptoki library) now are delivered with a Windows MSI installer.
|
668 | 668 |
|
669 |
| - * See [install/uninstall docs](/documentation/crypto-providers/windows#installation). This also includes unattended installation options. |
| 669 | + * See [install/uninstall docs](/crypto-providers/windows#installation). This also includes unattended installation options. |
670 | 670 | * To upgrade from a previous _manual_ installation/registration or from an `InstallCspKsp.ps1` installation:
|
671 | 671 | * Install using the new MSI
|
672 | 672 | * In case you used a `SIGNPATH_CONFIG_FILE` JSON file: copy its content to `%ProgramFiles%\SignPath\CryptoProviders\CryptoProvidersConfig.json`
|
|
739 | 739 | version: 1.163.0
|
740 | 740 | new_features:
|
741 | 741 | - text: >-
|
742 |
| - Authenticode files can now be signature _validated_ with the new [`<authenticode-verify />`](/documentation/artifact-configuration/reference#authenticode-verify) artifact configuration directive. |
| 742 | + Authenticode files can now be signature _validated_ with the new [`<authenticode-verify />`](/artifact-configuration/reference#authenticode-verify) artifact configuration directive. |
743 | 743 |
|
744 | 744 | Use to ensure that third-party components are properly signed in deep signing configurations.
|
745 | 745 | issues: [SIGN-2021]
|
|
802 | 802 | version: 1.160.1
|
803 | 803 | improvements:
|
804 | 804 | - text: |-
|
805 |
| - Artifact configuration: [`<create-raw-signature>`](/documentation/artifact-configuration/reference#create-raw-signature) supports input filename substitution via `${file.name}`. |
| 805 | + Artifact configuration: [`<create-raw-signature>`](/artifact-configuration/reference#create-raw-signature) supports input filename substitution via `${file.name}`. |
806 | 806 | issues: [SIGN-6771]
|
807 | 807 | - text: |-
|
808 | 808 | "Resubmit with current settings" now also works for signing requests which fail due to an _artifact retrieval_ error.
|
|
1193 | 1193 | version: 1.149.2
|
1194 | 1194 | new_features:
|
1195 | 1195 | - text: >-
|
1196 |
| - Added limited administrator roles: _User Administrator_, _Project Administrator_ and _Certificate Administrator. For more details, see the [user roles documentation](/documentation/users#roles). |
| 1196 | + Added limited administrator roles: _User Administrator_, _Project Administrator_ and _Certificate Administrator. For more details, see the [user roles documentation](/users#roles). |
1197 | 1197 | issues: [SIGN-6305]
|
1198 | 1198 | - text: >-
|
1199 |
| - [Select multiple files](/documentation/artifact-configuration/syntax#zip-file-element) is now generally available. |
| 1199 | + [Select multiple files](/artifact-configuration/syntax#zip-file-element) is now generally available. |
1200 | 1200 | issues: []
|
1201 |
| - - text: Added support for deep signing of APPX and MSIX files. Read more about [deep signing](https://about.signpath.io/documentation/artifact-configuration#deep-signing-of-nested-files). |
| 1201 | + - text: Added support for deep signing of APPX and MSIX files. Read more about [deep signing](https://about.signpath.io/artifact-configuration#deep-signing-of-nested-files). |
1202 | 1202 | issues: [SIGN-6150]
|
1203 | 1203 | bug_fixes:
|
1204 | 1204 | - text: Fixes incorrect display of malware scanning status for old signing requests.
|
|
1234 | 1234 | application:
|
1235 | 1235 | version: 1.148.2
|
1236 | 1236 | new_features:
|
1237 |
| - - text: Added support for personal API tokens for interactive users. See [authentication](/documentation/build-system-integration#authentication). |
| 1237 | + - text: Added support for personal API tokens for interactive users. See [authentication](/build-system-integration#authentication). |
1238 | 1238 | issues: [SIGN-6246]
|
1239 | 1239 | improvements:
|
1240 | 1240 | - text: >-
|
|
1245 | 1245 | (Existing spelling is still valid for the current schema version.)
|
1246 | 1246 | issues: [SIGN-6000]
|
1247 | 1247 | - text: >-
|
1248 |
| - The zip archive created when uploading multiple files for signing is now named `bundle.zip`. See [`ui-multifile-upload`](/documentation/artifact-configuration/syntax#zip-file-element). |
| 1248 | + The zip archive created when uploading multiple files for signing is now named `bundle.zip`. See [`ui-multifile-upload`](/artifact-configuration/syntax#zip-file-element). |
1249 | 1249 | issues: [SIGN-6271]
|
1250 | 1250 | - text: Renamed "Initial Login Email Address" of interactive users to "Account email address" in the user interface and `InteractiveUser` pre-release APIs.
|
1251 | 1251 | issues: [SIGN-6069]
|
|
1313 | 1313 | application:
|
1314 | 1314 | version: 1.146.0
|
1315 | 1315 | new_features:
|
1316 |
| - - text: Added [`ui-multifile-upload`](/documentation/artifact-configuration/syntax#zip-file-element) feature to upload multiple files in signing request web client UI (preview). |
| 1316 | + - text: Added [`ui-multifile-upload`](/artifact-configuration/syntax#zip-file-element) feature to upload multiple files in signing request web client UI (preview). |
1317 | 1317 | issues: [SIGN-5936]
|
1318 | 1318 | - text: Added "Multiple Office files with macros" default artifact configuration which allows to upload multiple Office files in the user interface.
|
1319 | 1319 | issues: [SIGN-5936]
|
|
0 commit comments