From c5acf6602eea7b3cf26873fae53eb7782b515e56 Mon Sep 17 00:00:00 2001 From: "Jeromy Statia (from Dev Box)" Date: Tue, 7 Apr 2026 14:15:34 -0700 Subject: [PATCH 1/2] fix: repair release workflow, cumulative changelog, supply chain MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Eliminate all third-party GitHub Actions to contain the supply chain. Only official actions/* and the pre-installed gh CLI are used now. Supply chain cleanup: - Remove tj-actions/github-changelog-generator — replaced with gh API (repos/generate-notes) plus gh release list/view for cumulative history - Remove softprops/action-gh-release — replaced with gh release create - Remove svenstaro/upload-release-action — replaced with gh release upload Action version upgrades: - actions/checkout: v3/v4 -> v6 - actions/setup-dotnet: v3 -> v5 - actions/upload-artifact and download-artifact remain at v4 (latest) Bug fixes: - Filter tags with grep to only match well-formed vX.Y.Z(-preN) format, fixing the sort that returned malformed tag 'v.1.5.5' instead of v1.7.6 - Replace all deprecated '::set-output' with GITHUB_OUTPUT - Remove unused upload_url output Changelog is now cumulative: each release body includes the delta for the current release (via GitHub generate-notes API) plus the full body text of all previous releases. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/workflows/dotnet.yml | 131 ++++++++++++++++++++++------------- 1 file changed, 83 insertions(+), 48 deletions(-) diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml index f00b62fd..9ce6d35e 100644 --- a/.github/workflows/dotnet.yml +++ b/.github/workflows/dotnet.yml @@ -43,10 +43,10 @@ jobs: dir_command: ls -a -R steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup .NET - uses: actions/setup-dotnet@v3 + uses: actions/setup-dotnet@v5 with: dotnet-version: 8.0.x @@ -83,26 +83,65 @@ jobs: # Changelog generation. # On pull requests: passes without action — changelog is generated at release time. - # On push to main: generates the changelog as an artifact for the create_release job. + # On push to main: generates a cumulative changelog as an artifact for the create_release job. # The changelog is NOT committed to the repo because the org-level branch protection # ruleset blocks direct pushes to main (even from GITHUB_TOKEN). + # The generated changelog is cumulative — it contains entries for ALL releases, not just + # the latest one, so each release body includes the full project history. create_changelog: runs-on: ubuntu-latest permissions: contents: read steps: - - name: Checkout code + - name: Generate cumulative changelog if: ${{ github.event_name == 'push' }} - uses: actions/checkout@v4 - with: - ref: main + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: | + echo "# Changelog" > CHANGELOG.md + echo "" >> CHANGELOG.md + + # Find the latest release tag via the GitHub API (no local tags needed). + PREVIOUS_TAG=$(gh release list --limit 1 --json tagName --jq '.[0].tagName' 2>/dev/null || echo "") + echo "Previous tag: $PREVIOUS_TAG" + + # Generate delta release notes for the current (upcoming) release using GitHub's API. + if [ -n "$PREVIOUS_TAG" ]; then + NOTES=$(gh api repos/${{ github.repository }}/releases/generate-notes \ + -f tag_name="pending" \ + -f target_commitish="${{ github.sha }}" \ + -f previous_tag_name="$PREVIOUS_TAG" \ + --jq '.body' 2>/dev/null || echo "") + else + NOTES=$(gh api repos/${{ github.repository }}/releases/generate-notes \ + -f tag_name="pending" \ + -f target_commitish="${{ github.sha }}" \ + --jq '.body' 2>/dev/null || echo "") + fi - - name: Generate changelog - if: ${{ github.event_name == 'push' }} - uses: tj-actions/github-changelog-generator@v1.19 - with: - output: CHANGELOG.md - token: ${{ secrets.GITHUB_TOKEN }} + if [ -n "$NOTES" ]; then + echo "$NOTES" >> CHANGELOG.md + echo "" >> CHANGELOG.md + fi + + # Append the body text from all previous releases (newest first) to make it cumulative. + echo "---" >> CHANGELOG.md + echo "" >> CHANGELOG.md + echo "## Previous Releases" >> CHANGELOG.md + echo "" >> CHANGELOG.md + + gh release list --limit 50 --json tagName --jq '.[].tagName' | while read -r TAG; do + BODY=$(gh release view "$TAG" --json body --jq '.body' 2>/dev/null || echo "") + if [ -n "$BODY" ]; then + echo "### $TAG" >> CHANGELOG.md + echo "" >> CHANGELOG.md + echo "$BODY" >> CHANGELOG.md + echo "" >> CHANGELOG.md + fi + done + + echo "Generated cumulative CHANGELOG.md:" + wc -l CHANGELOG.md - name: Upload changelog artifact if: ${{ github.event_name == 'push' }} @@ -138,14 +177,13 @@ jobs: security-events: write statuses: write outputs: - upload_url: ${{ steps.create_release.outputs.upload_url }} tag_name: ${{ steps.output_tag_name.outputs.tag_name }} steps: # Checkout the main branch and fetch tags. - name: Checkout code if: ${{ github.event_name == 'push' }} - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history needed for tag discovery. @@ -163,7 +201,9 @@ jobs: if: ${{ github.event_name == 'push' }} id: new-tag # Output: ${{ steps.new-tag.outputs.newtag }} run: | - CURRENT_TAG=$(git tag | sort --version-sort | tail -n1) + # Filter to only well-formed tags (vX.Y.Z or vX.Y.Z-preN) to avoid malformed tags + # like "v.1.5.5" or "1.6.2" breaking the version sort. + CURRENT_TAG=$(git tag | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+(-pre[0-9]+)?$' | sort --version-sort | tail -n1) echo "Current tag is $CURRENT_TAG" if [[ $CURRENT_TAG =~ ^v([0-9]+\.[0-9]+\.[0-9]+)(-pre([0-9]+))?$ ]]; then BASE_VERSION=${BASH_REMATCH[1]} @@ -196,39 +236,32 @@ jobs: fi done - echo "::set-output name=newtag::$NEW_TAG" + echo "newtag=$NEW_TAG" >> "$GITHUB_OUTPUT" else - echo "Invalid tag format" + echo "Invalid tag format: '$CURRENT_TAG'" exit 1 fi # Create the release. This should generate a release event, which will trigger the release_assets job. - name: Create Release if: ${{ github.event_name == 'push' }} - id: create_release - uses: actions/create-release@v1 env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - with: - # Get the tag name and release name from the previous step. - tag_name: ${{ steps.new-tag.outputs.newtag }} - release_name: Release ${{ steps.new-tag.outputs.newtag }} - - # Generate release text from changelog. - body_path: ./CHANGELOG.md - - # Always use prerelease for automated releases. Official releases are created manually. - prerelease: true + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: | + gh release create "${{ steps.new-tag.outputs.newtag }}" \ + --title "Release ${{ steps.new-tag.outputs.newtag }}" \ + --notes-file ./CHANGELOG.md \ + --prerelease # Output the semver tag if it's a push event, or the most recent tag if it's a release event. - name: Output tag name id: output_tag_name run: | if [ "${{ github.event_name }}" == "push" ]; then - echo "::set-output name=tag_name::${{ steps.new-tag.outputs.newtag }}" + echo "tag_name=${{ steps.new-tag.outputs.newtag }}" >> "$GITHUB_OUTPUT" echo "Generated semver tag is ${{ steps.new-tag.outputs.newtag }}." else - echo "::set-output name=tag_name::${{ github.event.release.tag_name }}" + echo "tag_name=${{ github.event.release.tag_name }}" >> "$GITHUB_OUTPUT" echo "Current release tag is ${{ github.event.release.tag_name }}." fi @@ -277,7 +310,7 @@ jobs: steps: # Checkout the branch. - name: Checkout code again - uses: actions/checkout@v3 + uses: actions/checkout@v6 # Restore all projects including plugins. # Plugin projects are not direct ProjectReferences of CoseSignTool — they are discovered @@ -478,21 +511,23 @@ jobs: # Upload the zipped assets to the release. - name: Upload binary archives - uses: svenstaro/upload-release-action@v2 - with: - repo_token: ${{ secrets.GITHUB_TOKEN }} - file: ./published/CoseSignTool-*.zip - file_glob: true - overwrite: true - tag: ${{ needs.create_release.outputs.tag_name }} + env: + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + run: | + for f in ./published/CoseSignTool-*.zip; do + echo "Uploading $f..." + gh release upload "${{ needs.create_release.outputs.tag_name }}" "$f" --clobber + done + shell: bash # Commented out until we decide to support publishing of nuget packages. # Upload the NuGet packages to the release (commented out for now) # - name: Upload NuGet packages - # uses: svenstaro/upload-release-action@v2 - # with: - # repo_token: ${{ secrets.GITHUB_TOKEN }} - # file: ./published/packages/*.nupkg - # file_glob: true - # overwrite: true - # tag: ${{ needs.create_release.outputs.tag_name }} + # env: + # GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} + # run: | + # for f in ./published/packages/*.nupkg; do + # echo "Uploading $f..." + # gh release upload "${{ needs.create_release.outputs.tag_name }}" "$f" --clobber + # done + # shell: bash From 3360c3f54f72400e6a4bc617d2290cbf8836e727 Mon Sep 17 00:00:00 2001 From: "Jeromy Statia (from Dev Box)" Date: Tue, 7 Apr 2026 14:25:45 -0700 Subject: [PATCH 2/2] docs: replace CHANGELOG.md with pointer to Releases page MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The changelog is now generated at release time via the GitHub API and stored in each release body. The committed file is no longer needed as the source of truth — point readers to the Releases page instead. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- CHANGELOG.md | 800 +-------------------------------------------------- 1 file changed, 3 insertions(+), 797 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 915130e5..4248d2b8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,800 +1,6 @@ # Changelog -## [v1.7.2](https://github.com/microsoft/CoseSignTool/tree/v1.7.2) (2026-02-17) +The changelog for CoseSignTool is generated automatically at release time and published to the +[Releases](https://github.com/microsoft/CoseSignTool/releases) page. -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.7.2-pre1...v1.7.2) - -## [v1.7.2-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.7.2-pre1) (2026-02-17) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.7.1...v1.7.2-pre1) - -**Merged pull requests:** - -- Fix release workflow: restore plugin projects before publish [\#165](https://github.com/microsoft/CoseSignTool/pull/165) ([JeromySt](https://github.com/JeromySt)) - -## [v1.7.1](https://github.com/microsoft/CoseSignTool/tree/v1.7.1) (2026-02-14) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.7.0...v1.7.1) - -**Merged pull requests:** - -- User feedback: PEM support, CLI standardization, and transparency service refactor [\#160](https://github.com/microsoft/CoseSignTool/pull/160) ([JeromySt](https://github.com/JeromySt)) - -## [v1.7.0](https://github.com/microsoft/CoseSignTool/tree/v1.7.0) (2026-01-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.9...v1.7.0) - -**Merged pull requests:** - -- Users/jstatia/fix plugin switch mappings [\#159](https://github.com/microsoft/CoseSignTool/pull/159) ([JeromySt](https://github.com/JeromySt)) -- Add --payload-location option for IndirectSignature [\#158](https://github.com/microsoft/CoseSignTool/pull/158) ([JeromySt](https://github.com/JeromySt)) -- Enabled CodeQL scans [\#156](https://github.com/microsoft/CoseSignTool/pull/156) ([NN2000X](https://github.com/NN2000X)) - -## [v1.6.9](https://github.com/microsoft/CoseSignTool/tree/v1.6.9) (2025-12-17) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.8...v1.6.9) - -**Merged pull requests:** - -- Remove preview feature opt-in [\#155](https://github.com/microsoft/CoseSignTool/pull/155) ([JeromySt](https://github.com/JeromySt)) - -## [v1.6.8](https://github.com/microsoft/CoseSignTool/tree/v1.6.8) (2025-12-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.7...v1.6.8) - -**Merged pull requests:** - -- Remove System.Text.Json dependency from CoseSign1.Headers library [\#153](https://github.com/microsoft/CoseSignTool/pull/153) ([JeromySt](https://github.com/JeromySt)) -- Multi-target libraries for netstandard2.0 and net8.0 [\#152](https://github.com/microsoft/CoseSignTool/pull/152) ([JeromySt](https://github.com/JeromySt)) -- Rename Azure CTS to Microsoft's Signing Transparency \(MST\) [\#151](https://github.com/microsoft/CoseSignTool/pull/151) ([JeromySt](https://github.com/JeromySt)) - -## [v1.6.7](https://github.com/microsoft/CoseSignTool/tree/v1.6.7) (2025-12-10) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.6...v1.6.7) - -**Merged pull requests:** - -- Ensure CoseSign1 always adds CWTClaims header when using certificate signing key provider [\#150](https://github.com/microsoft/CoseSignTool/pull/150) ([JeromySt](https://github.com/JeromySt)) - -## [v1.6.6](https://github.com/microsoft/CoseSignTool/tree/v1.6.6) (2025-11-25) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.5...v1.6.6) - -**Merged pull requests:** - -- Users/jstatia/azure trusted signing [\#148](https://github.com/microsoft/CoseSignTool/pull/148) ([JeromySt](https://github.com/JeromySt)) -- Users/jstatia/package upgrades [\#145](https://github.com/microsoft/CoseSignTool/pull/145) ([JeromySt](https://github.com/JeromySt)) - -## [v1.6.5](https://github.com/microsoft/CoseSignTool/tree/v1.6.5) (2025-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.4...v1.6.5) - -## [v1.6.4](https://github.com/microsoft/CoseSignTool/tree/v1.6.4) (2025-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.3...v1.6.4) - -## [v1.6.3](https://github.com/microsoft/CoseSignTool/tree/v1.6.3) (2025-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.4-pre4...v1.6.3) - -## [v1.5.4-pre4](https://github.com/microsoft/CoseSignTool/tree/v1.5.4-pre4) (2025-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/1.6.2...v1.5.4-pre4) - -**Merged pull requests:** - -- Remove 'v' prefix from VERSION for VersionNgt property in publish steps [\#143](https://github.com/microsoft/CoseSignTool/pull/143) ([JeromySt](https://github.com/JeromySt)) - -## [1.6.2](https://github.com/microsoft/CoseSignTool/tree/1.6.2) (2025-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.4-pre3...1.6.2) - -## [v1.5.4-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.5.4-pre3) (2025-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.1...v1.5.4-pre3) - -**Merged pull requests:** - -- Move to central package management in the repo, also tabs to spaces [\#142](https://github.com/microsoft/CoseSignTool/pull/142) ([JeromySt](https://github.com/JeromySt)) - -## [v1.6.1](https://github.com/microsoft/CoseSignTool/tree/v1.6.1) (2025-07-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.4-pre2...v1.6.1) - -## [v1.5.4-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.5.4-pre2) (2025-07-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.6.0...v1.5.4-pre2) - -**Merged pull requests:** - -- Implement IndirectSignatures through CoseSignTool Plugin and iterate plugin architecture. [\#140](https://github.com/microsoft/CoseSignTool/pull/140) ([JeromySt](https://github.com/JeromySt)) - -## [v1.6.0](https://github.com/microsoft/CoseSignTool/tree/v1.6.0) (2025-07-18) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.7...v1.6.0) - -**Merged pull requests:** - -- This PR introduces a plug-in model to CoseSignTool and adds the code transparency service plug-in as the first plug-in [\#139](https://github.com/microsoft/CoseSignTool/pull/139) ([JeromySt](https://github.com/JeromySt)) -- BugFix: Include Exception in Verbose Out [\#134](https://github.com/microsoft/CoseSignTool/pull/134) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.5.7](https://github.com/microsoft/CoseSignTool/tree/v1.5.7) (2025-07-17) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.6...v1.5.7) - -**Merged pull requests:** - -- Enhance PFX certificate handling in SignCommand and update documentation [\#138](https://github.com/microsoft/CoseSignTool/pull/138) ([JeromySt](https://github.com/JeromySt)) -- Migrate from VSTest to MTP [\#124](https://github.com/microsoft/CoseSignTool/pull/124) ([Youssef1313](https://github.com/Youssef1313)) - -## [v1.5.6](https://github.com/microsoft/CoseSignTool/tree/v1.5.6) (2025-07-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v.1.5.5...v1.5.6) - -## [v.1.5.5](https://github.com/microsoft/CoseSignTool/tree/v.1.5.5) (2025-07-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.4-pre1...v.1.5.5) - -## [v1.5.4-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.5.4-pre1) (2025-07-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.4...v1.5.4-pre1) - -**Merged pull requests:** - -- Add KeyChain property to ICoseSigningKeyProvider and implement related concrete implementations and tests [\#136](https://github.com/microsoft/CoseSignTool/pull/136) ([JeromySt](https://github.com/JeromySt)) - -## [v1.5.4](https://github.com/microsoft/CoseSignTool/tree/v1.5.4) (2025-06-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.3-pre2...v1.5.4) - -## [v1.5.3-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.5.3-pre2) (2025-06-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.3-pre1...v1.5.3-pre2) - -**Merged pull requests:** - -- BugFix: Normalize CommonName Checks [\#132](https://github.com/microsoft/CoseSignTool/pull/132) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.5.3-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.5.3-pre1) (2025-06-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.3...v1.5.3-pre1) - -**Merged pull requests:** - -- Add unit tests for CoseSign1MessageExtensions and enhance Certificate… [\#133](https://github.com/microsoft/CoseSignTool/pull/133) ([JeromySt](https://github.com/JeromySt)) - -## [v1.5.3](https://github.com/microsoft/CoseSignTool/tree/v1.5.3) (2025-05-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.2-pre1...v1.5.3) - -## [v1.5.2-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.5.2-pre1) (2025-05-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.2...v1.5.2-pre1) - -**Merged pull requests:** - -- Add optional header extender support to IndirectSignatureFactory methods [\#131](https://github.com/microsoft/CoseSignTool/pull/131) ([JeromySt](https://github.com/JeromySt)) - -## [v1.5.2](https://github.com/microsoft/CoseSignTool/tree/v1.5.2) (2025-05-29) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.1-pre1...v1.5.2) - -## [v1.5.1-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.5.1-pre1) (2025-05-29) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.0-pre1...v1.5.1-pre1) - -**Merged pull requests:** - -- feat: Add header extender support to IndirectSignatureFactory [\#130](https://github.com/microsoft/CoseSignTool/pull/130) ([JeromySt](https://github.com/JeromySt)) - -## [v1.5.0-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.5.0-pre1) (2025-05-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.1...v1.5.0-pre1) - -## [v1.5.1](https://github.com/microsoft/CoseSignTool/tree/v1.5.1) (2025-05-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.5.0...v1.5.1) - -**Merged pull requests:** - -- Allow beta version of Azure.Security.CodeTransparency [\#129](https://github.com/microsoft/CoseSignTool/pull/129) ([lemccomb](https://github.com/lemccomb)) - -## [v1.5.0](https://github.com/microsoft/CoseSignTool/tree/v1.5.0) (2025-04-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.4.0-pre1...v1.5.0) - -## [v1.4.0-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.4.0-pre1) (2025-04-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.3.0-pre5...v1.4.0-pre1) - -**Merged pull requests:** - -- Added support for Transparency to CoseSign1 libraries to leverage services such as Azure Code Transparency Service [\#127](https://github.com/microsoft/CoseSignTool/pull/127) ([JeromySt](https://github.com/JeromySt)) - -## [v1.3.0-pre5](https://github.com/microsoft/CoseSignTool/tree/v1.3.0-pre5) (2025-03-18) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.4.0...v1.3.0-pre5) - -## [v1.4.0](https://github.com/microsoft/CoseSignTool/tree/v1.4.0) (2025-03-18) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.3.0-pre4...v1.4.0) - -**Merged pull requests:** - -- Add support for CoAP preimage content type parsing for validation [\#126](https://github.com/microsoft/CoseSignTool/pull/126) ([JeromySt](https://github.com/JeromySt)) - -## [v1.3.0-pre4](https://github.com/microsoft/CoseSignTool/tree/v1.3.0-pre4) (2025-03-13) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.3.0-pre3...v1.3.0-pre4) - -**Merged pull requests:** - -- Add support for CoseHashEnvelope [\#125](https://github.com/microsoft/CoseSignTool/pull/125) ([JeromySt](https://github.com/JeromySt)) - -## [v1.3.0-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.3.0-pre3) (2024-12-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.3.0-pre2...v1.3.0-pre3) - -**Merged pull requests:** - -- Remove Weak Algorithms [\#123](https://github.com/microsoft/CoseSignTool/pull/123) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.3.0-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.3.0-pre2) (2024-11-20) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.3.0-pre1...v1.3.0-pre2) - -**Merged pull requests:** - -- set shell in publish step [\#121](https://github.com/microsoft/CoseSignTool/pull/121) ([lemccomb](https://github.com/lemccomb)) - -## [v1.3.0-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.3.0-pre1) (2024-11-20) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.0.0-Test1...v1.3.0-pre1) - -**Merged pull requests:** - -- Set file versions in release workflow [\#120](https://github.com/microsoft/CoseSignTool/pull/120) ([lemccomb](https://github.com/lemccomb)) - -## [v0.0.0-Test1](https://github.com/microsoft/CoseSignTool/tree/v0.0.0-Test1) (2024-10-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre7...v0.0.0-Test1) - -## [v1.2.8-pre7](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre7) (2024-10-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre6...v1.2.8-pre7) - -**Merged pull requests:** - -- Adds CLI install instructions [\#116](https://github.com/microsoft/CoseSignTool/pull/116) ([ivarprudnikov](https://github.com/ivarprudnikov)) - -## [v1.2.8-pre6](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre6) (2024-10-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.3.0...v1.2.8-pre6) - -## [v1.3.0](https://github.com/microsoft/CoseSignTool/tree/v1.3.0) (2024-10-30) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre5...v1.3.0) - -**Merged pull requests:** - -- .NET 8 Revocation and Root Trust Bugfix [\#118](https://github.com/microsoft/CoseSignTool/pull/118) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.2.8-pre5](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre5) (2024-10-21) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre4...v1.2.8-pre5) - -**Merged pull requests:** - -- Update dependencies [\#115](https://github.com/microsoft/CoseSignTool/pull/115) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.8-pre4](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre4) (2024-10-16) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre3...v1.2.8-pre4) - -**Merged pull requests:** - -- Update command line usage [\#114](https://github.com/microsoft/CoseSignTool/pull/114) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.8-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre3) (2024-10-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre1...v1.2.8-pre3) - -**Merged pull requests:** - -- Increase timeout for checking for empty streams [\#113](https://github.com/microsoft/CoseSignTool/pull/113) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.8-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre1) (2024-09-25) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8-pre2...v1.2.8-pre1) - -## [v1.2.8-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.2.8-pre2) (2024-09-25) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.6-pre2...v1.2.8-pre2) - -**Merged pull requests:** - -- Make the advanced stream handling optional. Use simple retry instead. [\#112](https://github.com/microsoft/CoseSignTool/pull/112) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.6-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.2.6-pre2) (2024-09-23) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.8...v1.2.6-pre2) - -## [v1.2.8](https://github.com/microsoft/CoseSignTool/tree/v1.2.8) (2024-09-23) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.6-pre1...v1.2.8) - -**Merged pull requests:** - -- Allow outdated and cert chain bug fixes [\#109](https://github.com/microsoft/CoseSignTool/pull/109) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.2.6-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.6-pre1) (2024-08-26) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.6...v1.2.6-pre1) - -**Merged pull requests:** - -- rerelease workflow [\#108](https://github.com/microsoft/CoseSignTool/pull/108) ([lemccomb](https://github.com/lemccomb)) -- Fix rerelease workflow again [\#107](https://github.com/microsoft/CoseSignTool/pull/107) ([lemccomb](https://github.com/lemccomb)) -- User/lemccomb/re release workflow3 [\#106](https://github.com/microsoft/CoseSignTool/pull/106) ([lemccomb](https://github.com/lemccomb)) -- experiment [\#104](https://github.com/microsoft/CoseSignTool/pull/104) ([lemccomb](https://github.com/lemccomb)) -- Create rerelease.yml [\#103](https://github.com/microsoft/CoseSignTool/pull/103) ([lemccomb](https://github.com/lemccomb)) -- Fix slashes [\#102](https://github.com/microsoft/CoseSignTool/pull/102) ([lemccomb](https://github.com/lemccomb)) -- Publish self-contained [\#101](https://github.com/microsoft/CoseSignTool/pull/101) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.6](https://github.com/microsoft/CoseSignTool/tree/v1.2.6) (2024-08-19) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.5-pre2...v1.2.6) - -**Merged pull requests:** - -- Add support for protected and unprotected headers [\#100](https://github.com/microsoft/CoseSignTool/pull/100) ([msftsettiy](https://github.com/msftsettiy)) - -## [v1.2.5-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.2.5-pre2) (2024-08-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.5-pre1...v1.2.5-pre2) - -**Merged pull requests:** - -- Fix typos on README.md [\#95](https://github.com/microsoft/CoseSignTool/pull/95) ([Jaxelr](https://github.com/Jaxelr)) - -## [v1.2.5-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.5-pre1) (2024-08-14) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.5...v1.2.5-pre1) - -**Merged pull requests:** - -- Update package dependencies [\#99](https://github.com/microsoft/CoseSignTool/pull/99) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.5](https://github.com/microsoft/CoseSignTool/tree/v1.2.5) (2024-08-06) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.4-pre3...v1.2.5) - -## [v1.2.4-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.2.4-pre3) (2024-08-06) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.4-pre2...v1.2.4-pre3) - -**Merged pull requests:** - -- Update docs, consolidate usings, code cleanup [\#98](https://github.com/microsoft/CoseSignTool/pull/98) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.4-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.2.4-pre2) (2024-08-05) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.4-pre1...v1.2.4-pre2) - -**Merged pull requests:** - -- Enabled optional time validation in ChainTrustVaildator [\#97](https://github.com/microsoft/CoseSignTool/pull/97) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.4-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.4-pre1) (2024-07-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.4...v1.2.4-pre1) - -**Merged pull requests:** - -- User/lemccomb/fileread [\#94](https://github.com/microsoft/CoseSignTool/pull/94) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.4](https://github.com/microsoft/CoseSignTool/tree/v1.2.4) (2024-06-14) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre7...v1.2.4) - -## [v1.2.3-pre7](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre7) (2024-06-14) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre6...v1.2.3-pre7) - -**Merged pull requests:** - -- Migrate from nuspec to package references [\#93](https://github.com/microsoft/CoseSignTool/pull/93) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.3-pre6](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre6) (2024-06-13) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre5...v1.2.3-pre6) - -**Merged pull requests:** - -- Adjusted file paths in CoseSignTool.nuspec [\#92](https://github.com/microsoft/CoseSignTool/pull/92) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.3-pre5](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre5) (2024-06-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre4...v1.2.3-pre5) - -**Merged pull requests:** - -- Overhaul nuget packaging [\#91](https://github.com/microsoft/CoseSignTool/pull/91) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.3-pre4](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre4) (2024-06-11) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre3...v1.2.3-pre4) - -**Merged pull requests:** - -- Fix license filename in nuspecs [\#90](https://github.com/microsoft/CoseSignTool/pull/90) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.3-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre3) (2024-06-01) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre2...v1.2.3-pre3) - -## [v1.2.3-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre2) (2024-05-31) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3-pre1...v1.2.3-pre2) - -## [v1.2.3-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.3-pre1) (2024-05-31) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.3...v1.2.3-pre1) - -**Merged pull requests:** - -- upgrade to .NET 8, add docs to package, add retry loop for revocation server [\#89](https://github.com/microsoft/CoseSignTool/pull/89) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.3](https://github.com/microsoft/CoseSignTool/tree/v1.2.3) (2024-03-20) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.2-pre1...v1.2.3) - -## [v1.2.2-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.2-pre1) (2024-03-20) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.1-pre2...v1.2.2-pre1) - -**Merged pull requests:** - -- Make CodeQL run on push as well as PR [\#87](https://github.com/microsoft/CoseSignTool/pull/87) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.1-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.2.1-pre2) (2024-03-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.2...v1.2.1-pre2) - -**Merged pull requests:** - -- more granular error codes [\#86](https://github.com/microsoft/CoseSignTool/pull/86) ([lemccomb](https://github.com/lemccomb)) - -## [v1.2.2](https://github.com/microsoft/CoseSignTool/tree/v1.2.2) (2024-03-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.1-pre1...v1.2.2) - -## [v1.2.1-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.1-pre1) (2024-03-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.1...v1.2.1-pre1) - -**Merged pull requests:** - -- Revert "Add .exe to CoseSignTool NuGet" [\#83](https://github.com/microsoft/CoseSignTool/pull/83) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.2.1](https://github.com/microsoft/CoseSignTool/tree/v1.2.1) (2024-03-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.0-pre1...v1.2.1) - -## [v1.2.0-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.2.0-pre1) (2024-03-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.exeTest...v1.2.0-pre1) - -**Merged pull requests:** - -- Add .exe to CoseSignTool NuGet [\#81](https://github.com/microsoft/CoseSignTool/pull/81) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.2.exeTest](https://github.com/microsoft/CoseSignTool/tree/v1.2.exeTest) (2024-03-06) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.8-pre1...v1.2.exeTest) - -## [v1.1.8-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.8-pre1) (2024-03-04) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.2.0...v1.1.8-pre1) - -## [v1.2.0](https://github.com/microsoft/CoseSignTool/tree/v1.2.0) (2024-03-04) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.7-pre3...v1.2.0) - -**Merged pull requests:** - -- Update Nuspec for CoseIndirectSignature [\#80](https://github.com/microsoft/CoseSignTool/pull/80) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.7-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.1.7-pre3) (2024-03-02) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.8...v1.1.7-pre3) - -## [v1.1.8](https://github.com/microsoft/CoseSignTool/tree/v1.1.8) (2024-03-02) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.7-pre2...v1.1.8) - -**Merged pull requests:** - -- Implement Cose\_Hash\_V support [\#77](https://github.com/microsoft/CoseSignTool/pull/77) ([JeromySt](https://github.com/JeromySt)) - -## [v1.1.7-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.1.7-pre2) (2024-03-01) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.7-pre1...v1.1.7-pre2) - -**Merged pull requests:** - -- Update codeql.yml [\#79](https://github.com/microsoft/CoseSignTool/pull/79) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.7-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.7-pre1) (2024-02-14) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.6-pre1...v1.1.7-pre1) - -**Merged pull requests:** - -- Command Line Validation of Indirect Signatures [\#78](https://github.com/microsoft/CoseSignTool/pull/78) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.6-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.6-pre1) (2024-02-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.7...v1.1.6-pre1) - -## [v1.1.7](https://github.com/microsoft/CoseSignTool/tree/v1.1.7) (2024-02-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.6...v1.1.7) - -**Merged pull requests:** - -- Action Permission Changes [\#76](https://github.com/microsoft/CoseSignTool/pull/76) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.6](https://github.com/microsoft/CoseSignTool/tree/v1.1.6) (2024-02-07) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.5...v1.1.6) - -**Merged pull requests:** - -- Only hit iterator once [\#75](https://github.com/microsoft/CoseSignTool/pull/75) ([JeromySt](https://github.com/JeromySt)) - -## [v1.1.5](https://github.com/microsoft/CoseSignTool/tree/v1.1.5) (2024-01-31) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.4-pre1...v1.1.5) - -## [v1.1.4-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.4-pre1) (2024-01-31) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.3-pre1...v1.1.4-pre1) - -**Merged pull requests:** - -- write validation output to standard out [\#74](https://github.com/microsoft/CoseSignTool/pull/74) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.3-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.3-pre1) (2024-01-26) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.4...v1.1.3-pre1) - -## [v1.1.4](https://github.com/microsoft/CoseSignTool/tree/v1.1.4) (2024-01-26) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.3...v1.1.4) - -**Merged pull requests:** - -- Adding Validation Option to Output Certificate Chain [\#73](https://github.com/microsoft/CoseSignTool/pull/73) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.3](https://github.com/microsoft/CoseSignTool/tree/v1.1.3) (2024-01-24) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.2-pre1...v1.1.3) - -## [v1.1.2-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.2-pre1) (2024-01-24) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.1-pre2...v1.1.2-pre1) - -**Merged pull requests:** - -- Updating snk for internal package compatibility [\#72](https://github.com/microsoft/CoseSignTool/pull/72) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.1-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.1.1-pre2) (2024-01-18) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.2...v1.1.1-pre2) - -## [v1.1.2](https://github.com/microsoft/CoseSignTool/tree/v1.1.2) (2024-01-18) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.1-pre1...v1.1.2) - -**Merged pull requests:** - -- Add logging for failure paths as well as some various improvements to the code base. [\#71](https://github.com/microsoft/CoseSignTool/pull/71) ([JeromySt](https://github.com/JeromySt)) - -## [v1.1.1-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.1-pre1) (2024-01-17) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre7...v1.1.1-pre1) - -**Merged pull requests:** - -- Move CreateChangelog to after build in PR build [\#70](https://github.com/microsoft/CoseSignTool/pull/70) ([lemccomb](https://github.com/lemccomb)) - -## [v1.1.0-pre7](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre7) (2024-01-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.1...v1.1.0-pre7) - -## [v1.1.1](https://github.com/microsoft/CoseSignTool/tree/v1.1.1) (2024-01-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre6...v1.1.1) - -**Merged pull requests:** - -- Revert use of primary constructor for CoseValidationError [\#69](https://github.com/microsoft/CoseSignTool/pull/69) ([lemccomb](https://github.com/lemccomb)) - -## [v1.1.0-pre6](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre6) (2024-01-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre5...v1.1.0-pre6) - -**Merged pull requests:** - -- Fix missing Microsoft.Bcl.Hash reference [\#68](https://github.com/microsoft/CoseSignTool/pull/68) ([lemccomb](https://github.com/lemccomb)) - -## [v1.1.0-pre5](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre5) (2024-01-12) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre4...v1.1.0-pre5) - -**Merged pull requests:** - -- Fixing Command Line False Positives [\#67](https://github.com/microsoft/CoseSignTool/pull/67) ([elantiguamsft](https://github.com/elantiguamsft)) - -## [v1.1.0-pre4](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre4) (2023-11-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre3...v1.1.0-pre4) - -**Merged pull requests:** - -- update moq dependency to 4.18.4 [\#61](https://github.com/microsoft/CoseSignTool/pull/61) ([JeromySt](https://github.com/JeromySt)) - -## [v1.1.0-pre3](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre3) (2023-11-15) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre2...v1.1.0-pre3) - -**Merged pull requests:** - -- Make sure new version number not already in use [\#60](https://github.com/microsoft/CoseSignTool/pull/60) ([lemccomb](https://github.com/lemccomb)) -- fix nuspec location [\#59](https://github.com/microsoft/CoseSignTool/pull/59) ([JeromySt](https://github.com/JeromySt)) - -## [v1.1.0-pre2](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre2) (2023-11-10) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0-pre1...v1.1.0-pre2) - -**Merged pull requests:** - -- Pull CoseDetachedSignatures into a dedicated project [\#58](https://github.com/microsoft/CoseSignTool/pull/58) ([JeromySt](https://github.com/JeromySt)) - -## [v1.1.0-pre1](https://github.com/microsoft/CoseSignTool/tree/v1.1.0-pre1) (2023-11-03) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v1.1.0...v1.1.0-pre1) - -**Merged pull requests:** - -- Cleanup comments, remove dead code [\#56](https://github.com/microsoft/CoseSignTool/pull/56) ([lemccomb](https://github.com/lemccomb)) -- Update dotnet.yml [\#55](https://github.com/microsoft/CoseSignTool/pull/55) ([lemccomb](https://github.com/lemccomb)) -- Replace semver action with manual steps [\#54](https://github.com/microsoft/CoseSignTool/pull/54) ([lemccomb](https://github.com/lemccomb)) -- DetachedSignatureFactory accepts pre-hashed content as payload [\#53](https://github.com/microsoft/CoseSignTool/pull/53) ([elantiguamsft](https://github.com/elantiguamsft)) -- Add password support for certificate files [\#52](https://github.com/microsoft/CoseSignTool/pull/52) ([lemccomb](https://github.com/lemccomb)) - -## [v1.1.0](https://github.com/microsoft/CoseSignTool/tree/v1.1.0) (2023-10-10) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.10...v1.1.0) - -## [v0.3.1-pre.10](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.10) (2023-10-10) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.9...v0.3.1-pre.10) - -**Merged pull requests:** - -- Correct folder mapping, update Nuget packages, fix for ADO compatibility [\#51](https://github.com/microsoft/CoseSignTool/pull/51) ([lemccomb](https://github.com/lemccomb)) -- Port CoseHandler to .NET Standard 2.0 [\#48](https://github.com/microsoft/CoseSignTool/pull/48) ([lemccomb](https://github.com/lemccomb)) -- implement detached signature factory, tests and helper extension methods. [\#47](https://github.com/microsoft/CoseSignTool/pull/47) ([JeromySt](https://github.com/JeromySt)) -- Port changes from ADO repo to GitHub repo [\#46](https://github.com/microsoft/CoseSignTool/pull/46) ([lemccomb](https://github.com/lemccomb)) -- Re-enable CodeQL [\#45](https://github.com/microsoft/CoseSignTool/pull/45) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.9](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.9) (2023-09-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.2...v0.3.1-pre.9) - -## [v0.3.2](https://github.com/microsoft/CoseSignTool/tree/v0.3.2) (2023-09-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.8...v0.3.2) - -**Merged pull requests:** - -- Make sure we send the correct tag [\#44](https://github.com/microsoft/CoseSignTool/pull/44) ([lemccomb](https://github.com/lemccomb)) -- User/lemccomb/tagfix2 [\#43](https://github.com/microsoft/CoseSignTool/pull/43) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.8](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.8) (2023-09-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.7...v0.3.1-pre.8) - -**Merged pull requests:** - -- don't specify tag to upload-release-action [\#42](https://github.com/microsoft/CoseSignTool/pull/42) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.7](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.7) (2023-09-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.5...v0.3.1-pre.7) - -**Merged pull requests:** - -- Git rid of the generated "main" tag [\#41](https://github.com/microsoft/CoseSignTool/pull/41) ([lemccomb](https://github.com/lemccomb)) -- see if commit from web is more reliable [\#40](https://github.com/microsoft/CoseSignTool/pull/40) ([lemccomb](https://github.com/lemccomb)) -- another release test [\#39](https://github.com/microsoft/CoseSignTool/pull/39) ([lemccomb](https://github.com/lemccomb)) -- build and test only on PR [\#38](https://github.com/microsoft/CoseSignTool/pull/38) ([lemccomb](https://github.com/lemccomb)) -- another release test [\#37](https://github.com/microsoft/CoseSignTool/pull/37) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.5](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.5) (2023-09-28) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.4...v0.3.1-pre.5) - -**Merged pull requests:** - -- release tests [\#36](https://github.com/microsoft/CoseSignTool/pull/36) ([lemccomb](https://github.com/lemccomb)) -- Testing release job [\#35](https://github.com/microsoft/CoseSignTool/pull/35) ([lemccomb](https://github.com/lemccomb)) -- Update dotnet.yml [\#34](https://github.com/microsoft/CoseSignTool/pull/34) ([lemccomb](https://github.com/lemccomb)) -- restore missing checkout step [\#33](https://github.com/microsoft/CoseSignTool/pull/33) ([lemccomb](https://github.com/lemccomb)) -- User/lemccomb/tidy2 [\#32](https://github.com/microsoft/CoseSignTool/pull/32) ([lemccomb](https://github.com/lemccomb)) -- Update docs [\#31](https://github.com/microsoft/CoseSignTool/pull/31) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.4](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.4) (2023-09-27) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.3...v0.3.1-pre.4) - -**Merged pull requests:** - -- Final workflow cleanup [\#30](https://github.com/microsoft/CoseSignTool/pull/30) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.3](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.3) (2023-09-27) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.2...v0.3.1-pre.3) - -**Merged pull requests:** - -- Move upload\_assets to happen on release [\#29](https://github.com/microsoft/CoseSignTool/pull/29) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.2](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.2) (2023-09-27) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1-pre.1...v0.3.1-pre.2) - -**Merged pull requests:** - -- adjust fiel paths [\#28](https://github.com/microsoft/CoseSignTool/pull/28) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1-pre.1](https://github.com/microsoft/CoseSignTool/tree/v0.3.1-pre.1) (2023-09-27) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/v0.3.1...v0.3.1-pre.1) - -**Merged pull requests:** - -- Add workflow for manually created releases [\#27](https://github.com/microsoft/CoseSignTool/pull/27) ([lemccomb](https://github.com/lemccomb)) -- Test publish [\#26](https://github.com/microsoft/CoseSignTool/pull/26) ([lemccomb](https://github.com/lemccomb)) -- Enable official releases [\#25](https://github.com/microsoft/CoseSignTool/pull/25) ([lemccomb](https://github.com/lemccomb)) -- checkout from main instead of current branch to get semver [\#24](https://github.com/microsoft/CoseSignTool/pull/24) ([lemccomb](https://github.com/lemccomb)) -- Update dotnet.yml with missing pipe [\#23](https://github.com/microsoft/CoseSignTool/pull/23) ([lemccomb](https://github.com/lemccomb)) -- Test semver creation via git commands [\#22](https://github.com/microsoft/CoseSignTool/pull/22) ([lemccomb](https://github.com/lemccomb)) -- Attempt to get semver step working again [\#21](https://github.com/microsoft/CoseSignTool/pull/21) ([lemccomb](https://github.com/lemccomb)) -- move create\_changelog to before build [\#20](https://github.com/microsoft/CoseSignTool/pull/20) ([lemccomb](https://github.com/lemccomb)) -- Try release [\#19](https://github.com/microsoft/CoseSignTool/pull/19) ([lemccomb](https://github.com/lemccomb)) -- try release [\#18](https://github.com/microsoft/CoseSignTool/pull/18) ([lemccomb](https://github.com/lemccomb)) -- Add license text to code files [\#17](https://github.com/microsoft/CoseSignTool/pull/17) ([lemccomb](https://github.com/lemccomb)) -- Add usage instructions [\#15](https://github.com/microsoft/CoseSignTool/pull/15) ([lemccomb](https://github.com/lemccomb)) -- Auto-build and upload on release [\#14](https://github.com/microsoft/CoseSignTool/pull/14) ([lemccomb](https://github.com/lemccomb)) - -## [v0.3.1](https://github.com/microsoft/CoseSignTool/tree/v0.3.1) (2023-08-04) - -[Full Changelog](https://github.com/microsoft/CoseSignTool/compare/171c25c3ada781341ce98149bf0d98794c2c8b68...v0.3.1) - -**Merged pull requests:** - -- Add publish step [\#13](https://github.com/microsoft/CoseSignTool/pull/13) ([lemccomb](https://github.com/lemccomb)) -- Port from internal ADO repo [\#9](https://github.com/microsoft/CoseSignTool/pull/9) ([lemccomb](https://github.com/lemccomb)) -- updates from internal repo, compatibility with non-windows [\#7](https://github.com/microsoft/CoseSignTool/pull/7) ([elantiguamsft](https://github.com/elantiguamsft)) -- Delete unused files [\#5](https://github.com/microsoft/CoseSignTool/pull/5) ([JoeBussell](https://github.com/JoeBussell)) -- Create a GitHub action that will be used to build on PR to main. [\#4](https://github.com/microsoft/CoseSignTool/pull/4) ([JoeBussell](https://github.com/JoeBussell)) -- Replaced internal package feed with NuGet.org. [\#3](https://github.com/microsoft/CoseSignTool/pull/3) ([JoeBussell](https://github.com/JoeBussell)) -- Updating readme to highlight the tool first, then the library. [\#2](https://github.com/microsoft/CoseSignTool/pull/2) ([JoeBussell](https://github.com/JoeBussell)) -- Initial code submission [\#1](https://github.com/microsoft/CoseSignTool/pull/1) ([JoeBussell](https://github.com/JoeBussell)) - - - -\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)* +Each release includes a cumulative changelog with the full project history. \ No newline at end of file