Rekor Updates

Latest: v1.5.4 · 20 Aug 2026 - Changelog a36bd71 add changelog for v1.5.4 release ( #2944 ) 705fc05 Apply proactive hardening against malformed requests (GHSA-843x-px86-vq42) ( #2945 ) 5789c38 build(deps): Bump github.com/go-swagger/go-swagger from 0.33.2 to 0.36.4 in /hack/tools in the all group across 1 directory ( #2840 ) 7dd85d3 better handle connection issues ( #2931 ) a8544a8 build(deps): Bump github.com/tink-crypto/tink-go-gcpkms/v2 from 2.2.0 to 2.4.0 ( #2939 ) ee19b41 remove repetitive viper lookups from api endpoints ( #2922 ) f3441b5 move CI containers to GHCR ( #2943 ) d53aa51 build(deps): Bump the all group across 1 directory with 3 updates ( #2942 ) 7af1d7c build(deps): Bump golang.org/x/crypto from 0.54.0 to 0.55.0 ( #2938 ) ed250aa build(deps): Bump cloud.google.com/go/iam from 1.11.0 to 1.13.0 ( #2937 ) 78ba595 build(deps): Bump gocloud.dev from 0.45.0 to 0.46.0 ( #2940 ) 6a6443e build(deps): Bump the all group with 4 updates ( #2941 ) a64a345 build(deps): Bump google.com/cloudsdktool/google-cloud-cli ( #2935 ) f6fa665 build(deps): Bump golang from 1.26.5 to 1.26.6 in the all group ( #2934 ) 2309dab fix pprof arg ( #2932 ) 5a1909a build(deps): Bump the all group across 1 directory with 6 updates ( #2925 ) d979072 build(deps): Bump golang from 3aff665 to 2005724 ( #2924 ) e1564dc build(deps): Bump github.com/prometheus/client_golang ( #2928 ) a497c02 build(deps): Bump the all group with 4 updates ( #2930 ) aea3064 build(deps): Bump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 ( #2926 ) 5486dda build(deps): Bump go.step.sm/crypto from 0.85.0 to 0.87.0 ( #2927 ) ebd7339 build(deps): Bump github.com/redis/go-redis/v9 from 9.20.1 to 9.22.0 ( #2929 ) d543a4a build(deps): Bump google.com/cloudsdktool/google-cloud-cli ( #2923 ) eaa6d5b build(deps): upgrade grpc-ecosystem/go-grpc-middleware to v2 ( #2921 ) 1665651 build(deps): Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml ( #2919 ) 24394e3 remove unused semver type version map ( #2918 ) 3a9dba1 build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 ( #2823 ) c4d4150 separate read/write sql traffic for indexservice into separate pools ( #2914 ) 99f7844 test against valkey ( #2916 ) aef6385 Change default CLI upload type to hashedrekord ( #2885 ) 1be154f fix shadowed err, wrong err label ( #2907 ) 2cdf437 build(deps): Bump github.com/go-openapi/swag/conv from 0.27.3 to 0.28.0 ( #2910 ) e7730e0 build(deps): Bump golang.org/x/mod from 0.37.0 to 0.38.0 ( #2911 ) df58502 build(deps): Bump google.com/cloudsdktool/google-cloud-cli ( #2909 ) 730fa37 build(deps): Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.1 ( #2912 ) ace8820 build(deps): Bump the all group with 4 updates ( #2913 ) dfe5a1c alpine: hash only the bytes read when computing the control.tar.gz digest ( #2908 ) a8f4a17 Remove unmaintained scripts/createdb.sh dev helper ( #2905 ) 9573f1b test mysql with production dsn strings ( #2906 ) f3299aa build(deps): Bump golang.org/x/crypto in /hack/tools ( #2882 ) cc5737e build(deps): Bump the all group across 1 directory with 6 updates ( #2898 ) 8485b5d build(deps): Bump cloud.google.com/go/pubsub from 1.50.2 to 1.51.0 ( #2899 ) 3d80df7 build(deps): Bump google.com/cloudsdktool/google-cloud-cli ( #2897 ) 09bf9ca create interface for TrillianClient ( #2896 ) 671e78b build(deps): Bump the all group with 5 updates ( #2900 ) a00d60e build(deps): Bump go.step.sm/crypto from 0.77.7 to 0.85.0 ( #2901 ) ea4ed74 build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 ( #2902 ) bde4e86 use more efficient table schema for indexes ( #2903 ) 27f1199 return a 400 error for invalid TreeID ( #2895 ) 6335172 build(deps): Bump the all group across 1 directory with 3 updates ( #2889 ) 0b37bb8 build(deps): Bump the all group across 1 directory with 3 updates ( #2893 ) b953a43 build(deps): Bump the all group across 1 directory with 8 updates ( #2894 ) 39fd538 build(deps): Bump github.com/cloudflare/circl from 1.6.2 to 1.6.3 d2ca1f9 build(deps): Bump Homebrew/actions/setup-homebrew ( #2890 ) 86e0055 Migrate off deprecated golang.org/x/crypto/openpgp ( #2883 ) 0a635ec minimize duplicative JSON parsing while handling entries ( #2880 ) 75d61c1 search: add subject field for SAN-based lookup ( #2850 ) 1de1764 remove duplicative log entry ( #2881 ) 70a2666 build(deps): Bump google.com/cloudsdktool/google-cloud-cli 85b8436 build(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.6.0 to 2.7.0 7ce85c8 build(deps): Bump the all group with 5 updates 5cdf941 optimize DSSE memory and cpu while parsing and verifying envs ( #2879 ) d750c04 docs(cli): add usage examples to rekor-cli commands ( #2851 ) 4c65be7 Return the file error instead of the URL error for a missing artifact path ( #2872 ) 2c9a403 update builder to use go1.26.4 ( #2873 ) Thanks for all contributors!