bump: release v1.3.0-rc.2

[ghost]

Release

This would mean tagging f63defd as v1.3.0-rc.2 to release.

Vote

We need at least 4 approvals from 6 maintainers to release notation-go v1.3.0-rc.2.

• Pritesh Bandi (@priteshbandi)
• Junjie Gao (@JeyJeyGao)
• Milind Gokarn (@gokarnm)
• Vani Rao (@vaninrao10)
• Shiwei Zhang (@shizhMSFT)
• Patrick Zheng (@Two-Hearts)

What's Changed

• bump: release v1.3.0-rc.1 by @Two-Hearts in bump: release v1.3.0-rc.1 #465
• test: add fuzz test by @AdamKorcz in test: add fuzz test #459
• build(deps): bump github.com/veraison/go-cose from 1.1.0 to 1.3.0 by @dependabot in build(deps): bump github.com/veraison/go-cose from 1.1.0 to 1.3.0 #467
• fix: added tsa trust store root cert validation by @Two-Hearts in fix: added tsa trust store root cert validation #471
• chore: add crl cache debug logs by @Two-Hearts in chore: add crl cache debug logs #473
• build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.27.0 to 0.28.0 #468
• build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 #474
• build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by @dependabot in build(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 #476
• fix: crl cache log and err msg by @Two-Hearts in fix: crl cache log and err msg #475
• build(deps): bump golang.org/x/mod from 0.21.0 to 0.22.0 by @dependabot in build(deps): bump golang.org/x/mod from 0.21.0 to 0.22.0 #477
• chore: Improve error message in case of plugin timeout by @priteshbandi in chore: Improve error message in case of plugin timeout #472
• fix: timestamping by @Two-Hearts in fix: timestamping #478
• fix: add warning message for non-revokable certificate by @JeyJeyGao in fix: add warning message for non-revokable certificate #479
• fix: enable timestamping cert chain revocation check during signing by @Two-Hearts in fix: enable timestamping cert chain revocation check during signing #482
• perf(log): encode objects only when logged by @JeyJeyGao in perf(log): encode objects only when logged #481
• chore: cherry pick fixes from main by @Two-Hearts in chore: cherry pick fixes from main #487
• chore: backport chore: update logs #469 for updating logs by @Two-Hearts in chore: backport #469 for updating logs #489
• bump: bump up notation-core-go for release-1.3 branch by @Two-Hearts in bump: bump up notation-core-go for release-1.3 branch #490

Full Changelog:
v1.3.0-rc.1...f63defd

Actions

Please review the PR and vote by approving.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 80.88%. Comparing base (8aaebdd) to head (f63defd).

Additional details and impacted files

@@             Coverage Diff              @@
##           release-1.3     #492   +/-   ##
============================================
  Coverage        80.88%   80.88%           
============================================
  Files               33       33           
  Lines             3066     3066           
============================================
  Hits              2480     2480           
  Misses             455      455           
  Partials           131      131           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.