diff --git a/CHANGELOG.md b/CHANGELOG.md index 5d2008be0..fbabd56e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,16 @@ +## v0.12.0 (2024-08-16) + +### Feat + +- verify npm SLSA provenance against signed npm provenance (#747) +- add a check to analyze malicious Python packages (#750) +- add support for SLSA v1 provenance with OCI build type (#778) + +### Fix + +- accept provenances that are not inferred in the provenance checks (#802) +- use artifact filenames as keys for verifying jfrog assets in provenance_witness_l1_check (#796) + ## v0.11.0 (2024-06-18) ### Feat diff --git a/pyproject.toml b/pyproject.toml index 04b181235..d739afe6a 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -136,7 +136,7 @@ version_files = [ "src/macaron/__init__.py:__version__", ] major_version_zero = true -version = "0.11.0" +version = "0.12.0" # https://github.com/pytest-dev/pytest-cov diff --git a/src/macaron/__init__.py b/src/macaron/__init__.py index d0063b48a..5084f0ce8 100644 --- a/src/macaron/__init__.py +++ b/src/macaron/__init__.py @@ -8,7 +8,7 @@ # The version of this package. There's no comprehensive, official list of other # magic constants, so we stick with this one only for now. See also this conversation: # https://stackoverflow.com/questions/38344848/is-there-a-comprehensive-table-of-pythons-magic-constants -__version__ = "0.11.0" +__version__ = "0.12.0" # The path to the Macaron package. MACARON_PATH = os.path.dirname(os.path.abspath(__file__))