How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

v3.0.6

calendar_today April 6, 2026 person sigstore-bot domain cosign

Changelog v3.0.6 resolves GHSA-w6c6-c85g-mmv6 . This release also adds support for signing with OpenBao-managed keys. f1ad3ee Fix DSSE predicate check ( GHSA-w6c6-c85g-mmv6 ) ( #4801 ) a09afa9 Handle whitespace-only certificate annotation ( #4760 ) 5a38a6d fix(sign): closing SignerVerifier too early when signing with a security key ( #4761 ) 2290a59 Disallow –new-bundle-format and –rfc3161-timestamp ( #4762 ) 36f4008 support managed keys in conformance testing ( #4728 ) 3274cf9 Add support for GCE metadata server env var ( #4732 ) 2e9754a fix: preserve per-layer annotations in WriteAttestati

open_in_new Read original post