v1.1.0

1.1.0 (2025-10-22)

Features

• Add pko package SBOM type (3eb5f08)
• ISV-5709: implement mapping mechanism for component and parent packages (084d74a)
• ISV-5709: implement mapping mechanism for component and parent packages (8d698cc)
• ISV-5818: Attest the release-time SBOM to the registry. (bae54a9)
• ISV-5818: Attest the release-time SBOM to the registry. (138af5b)
• ISV-5820: Attest the release-time SBOM to the registry -- update Tekton tasks to use Rekor. (476a634)
• ISV-5820: Attest the release-time SBOM to the registry -- update Tekton tasks. (89be7f1)
• ISV-5820: Attest the release-time SBOM to the registry -- update Tekton tasks. (11de06c)
• ISV-5820: Attest the release-time SBOM to the registry -- update Tekton tasks. (3e6bbab)
• ISV-6069: SBOM regeneration CLI script (a4f7821)
• ISV-6069: SBOM regeneration CLI script (3ea8df0)
• ISV-6069: SBOM regeneration CLI script (add documentation) (ed76304)
• ISV-6069: SBOM regeneration CLI script (add documentation) (25ac864)
• ISV-6069: SBOM regeneration CLI script (add documentation) (c9308af)
• ISV-6069: SBOM regeneration CLI script (add logging) (51a3e13)
• ISV-6069: SBOM regeneration CLI script (additional tests, logging) (f6ed170)
• ISV-6069: SBOM regeneration CLI script (fix formatting) (b55fc4b)
• ISV-6069: SBOM regeneration CLI script (fix formatting/linter issues) (66fbc40)
• ISV-6069: SBOM regeneration CLI script (fix typo) (2c5ac80)
• ISV-6069: SBOM regeneration CLI script (remove cosign config from regeneration script) (bddde50)
• ISV-6069: SBOM regeneration CLI script (remove functionality for deleting previously generated SBOMs, since that could create potential problems with Product Security tooling) (886df22)
• ISV-6069: SBOM regeneration CLI script (remove functionality to optionally fetch from release_repo) (41262f4)
• ISV-6069: SBOM regeneration CLI script (remove no longer used cli args) (2ebc806)
• ISV-6069: SBOM regeneration CLI script (restore cosign config, ensure prov verify and attest are skipped) (9d65122)
• ISV-6069: SBOM regeneration CLI script (simplify get release id) (d9595b0)
• ISV-6199: Enable contextual SBOM in mobster (838b922)
• ISV-6199: Enable contextual SBOM in mobster - add control arguments (eaf7e1d)
• ISV-6200: Log uploaded sbom size info (e3e3cbe)
• ISV-6200: Log uploaded sbom size info (cb57560)

Bug Fixes

• addressed comments: test data clean-up, edited annotation label for grandparents, updated invalid test (b161325)
• addressed review comments (b44a332)
• enable integration tests (b9747f2)
• Fixed bug making base image annotation unique for future contextualization (5beb072)
• ISV-6373: use temporary storage for augmented/generated SBOMs (a3b754f)
• ISV-6373: use temporary storage for augmented/generated SBOMs (94ea679)
• Revert Rekor activation in Release pipeline. (9f05100)
• Revert Rekor activation in Release pipeline. (5f7a1dc)
• test related helper functions cleanup (a8c3dc3)
• Update to latest version of task to address Conforma (cadee02)
• Update to latest version of task to address Conforma (1b2d590)
• updated unit tests of the component-modification functionality (9cf8016)

v1.0.0

1.0.0 (2025-09-26)

Features

• ISV-5714: Refactor SBOM modification code to reflect mapping mechanism imperfection finding (972075e)
• ISV-5714: Refactor SBOM modification code to reflect mapping mechanism imperfection finding (b58eb7d)
• ISV-5914: utilize connection pooling in TPA client (7fdac0f)
• ISV-5914: utilize connection pooling in TPA client (63615c7)
• ISV-6223: Log S3 file uploads (c82917b)
• ISV-6223: Log S3 file uploads (34ccf2b)
• ISV-6260: Support multiple target repositories in Konflux Snapshot. (01f9cb0)
• ISV-6260: Support multiple target repositories in Konflux Snapshot. (08f3c2b)

Bug Fixes

• Add a license to the container. (2e11008)
• ISV-6219: Glob pattern updated for ignoring the "tasks" dir. (1609e42)
• ISV-6219: Glob pattern updated for ignoring the "tasks" dir. (688c71a)
• Update deprecated-image-check image ref. (ea2e36a)
• Update deprecated-image-check image ref. (533e70c)
• Update task-clair-scan image ref. (5df22fb)

Miscellaneous Chores

• release 1.0.0 (30b4299)

v0.7.0

0.7.0 (2025-09-03)

Features

• add more logging statements to Tekton scripts (9d8b880)
• add support for specifying concurrency limits in tekton tasks (22bbffd)
• address code review comments 2 (b9da650)
• address code review comments 3 (9fb6f1e)
• apply suggestions from code review (2e17f5c)
• bump memory requests to 1Gi for tekton tasks (68c4833)
• bump mobster tasks to include improved concurrency (85fcbb2)
• bump tekton task images for improved concurrency (0867189)
• Bump up Mobster image in Tekton task (a2af828)
• Bump up Mobster image in Tekton task (72c0e99)
• Fix assertion error, make Mobster log a warning instead. (b38d917)
• Fix assertion error, make Mobster log a warning instead. (0bab278)
• improve SBOM processing concurrency (63f69d9)
• increase memory requirements for Tekton tasks (3ac3da5)
• increase memory requirements for Tekton tasks (b85c1d2)
• ISV-6003: Port contextual SBOM code to Mobster. (ac2ab37)
• ISV-6003: Port contextual SBOM code to Mobster. (8019606)
• ISV-6005: Add a script to store SBOM regeneration data to S3. (eafb5f4)
• ISV-6005: Fix the integration tests. (9b86404)
• ISV-6005: Fix the integration tests. (9b86404)
• ISV-6005: Fix the rebased code changes. (9b86404)
• ISV-6005: Fix the tests. (9b86404)
• ISV-6005: Fix the tests. (9b86404)
• ISV-6005: Fix the tests. (9b86404)
• ISV-6005: Rebase the feature branch. (9b86404)
• ISV-6005: Remove the unnecessary parameter from tekton tasks. (9b86404)
• ISV-6005: Remove unnecessary code. (9b86404)
• ISV-6005: Store regeneration data in release-time SBOM Tasks. (9b86404)
• ISV-6005: Store regeneration data in release-time SBOM Tasks. (9b86404)
• ISV-6005: Update the python script to add entrypoints. (9b86404)
• ISV-6005: Update the script according recent Mobster code migration. (9b86404)
• ISV-6005: Update the script according recent Mobster code migration. (9b86404)
• ISV-6005: Update the script according recent Mobster code migration. (9b86404)
• ISV-6005: Update the script. (9b86404)
• ISV-6005: Update the script. (9b86404)
• ISV-6005: Update the script. (9b86404)
• ISV-6005: Update the script. (9b86404)
• ISV-6006: component and product SBOM creation scripts store release_id (8f31c2e)
• ISV-6006: component and product SBOM creation scripts store release_id (8f4549c)
• ISV-6014: bump tekton tasks images (b8622ca)
• ISV-6014: bump tekton tasks images (c946ddc)
• ISV-6027: Add arch identifier to image PURLs (7d8efa1)
• ISV-6027: Add arch identifier to image PURLs (f64da81)
• ISV-6032: add artifact datatype (8c7e484)
• ISV-6032: add SBOM URNs to upload report (89d8a69)
• ISV-6032: allow SBOM uploads to be verifiable in Konflux E2E (9f837f0)
• ISV-6032: bump mobster tekton task version (9ad73bd)
• ISV-6032: bump mobster tekton task version (ecd7cb2)
• ISV-6032: pass results param to tekton scripts (b75d951)
• ISV-6032: simplify tpa upload logic (24bb2fd)
• ISV-6032: tekton task scripts support writing upload results (73cdf7f)
• ISV-6053: Use cosign download attestation for SBOM download. (89e713d)
• ISV-6053: Use cosign download attestation for SBOM download. (99be1f7)
• ISV-6092: Add integration test in Konflux (36f6e91)
• ISV-6092: Add integration test in Konflux. (5c66b6e)
• ISV-6092: Make TPA a new component in Mobster. (50e29c5)
• ISV-6128: add concurrency limit to make_snapshot (009bcad)
• ISV-6128: add concurrency limit to make_snapshot (902490b)
• ISV-6128: add concurrency limit to make_snapshot (d10e09d)
• ISV-6128: bump tekton tasks (c298b1b)
• ISV-6128: bump tekton tasks (444208c)
• ISV-6129: add is_bucket_empty() method to S3 client (4b65144)
• ISV-6129: add product SBOM happypath test prototype (d8a799e)
• ISV-6129: add release id datatype (9b7ac01)
• ISV-6129: add release_id to tekton tasks (42ef7b6)
• ISV-6129: bump tekton task image tags (2901a5a)
• ISV-6129: bump tekton tas...

v0.6.0

0.6.0 (2025-07-22)

Features

• add S3 client with integration tests (c089798)
• bump tekton task image version (f5258c2)
• bump tekton task image version (64d0e14)
• clean up error handling (32ea213)
• handle testing AWS endpoint url correctly (a584cf6)
• implement async S3 directory upload in tekton scripts (aefd3ba)
• ISV-5867: Update parsing of SBOM inputs (9f1c48e)
• ISV-5867: Update parsing of SBOM inputs (6781d3b)
• ISV-6139: Mobster TPA client raises an error related to the last exception. (68baccf)
• ISV-6139: Mobster TPA client raises an error related to the last exception. (70224fc)
• limit concurrency in S3 client (0618749)
• refactor s3 client to use aioboto3 (f54409b)
• refactor tekton tasks to use python instead of bash (8ee74b5)
• remove awscli from Containerfile (8eebe5f)
• temporarily disable coverage for tekton scripts (f854ed9)
• use migrated python script in tekton tasks (c51435a)

Bug Fixes

• clarify mypy ignore type (ba9c319)
• fix typos (0be62ed)

Documentation

• add docstrings (2a474b1)

v0.5.0

0.5.0 (2025-07-14)

Features

• Add extra logging to get precise metrics (433d83c)
• Add extra logging to get precise metrics (af6a3e3)
• Add integration tests for TPA interaction (72e9444)
• add report to Tekton Atlas upload script (85ca8e4)
• add SBOM download stub (e7b2f5a)
• add stubs for the TPA client (3a52547)
• add stubs for the TPA client (691c2f6)
• add TPA container to compose (c2b5666)
• allow optionally disabling TPA auth (5b4394e)
• disable TPA auth in SBOM hack scripts (88a355b)
• ISV-5858: Implement mobster generate oci-image. (5ca11cb)
• ISV-5875: add script to mimick tekton task process (fafd8df)
• ISV-5875: create release-time SBOM augmentation task (ed4ae93)
• ISV-5875: don't embed tekton task scripts (0583930)
• ISV-5875: handle nonexistent and empty dir in upload (bdacd34)
• ISV-5875: handle retry exhaustion error separately (a5692a1)
• ISV-5875: improve exit code handling (548c9ce)
• ISV-5875: remove registry port restrictions (ef16603)
• ISV-5875: support ports in image references (5a9e258)
• ISV-5875: Tekton task scripts use long options (f012ec2)
• ISV-5875: use enum for upload exit codes (8cbf681)
• ISV-5875: use upload report for S3 retry (9bed081)
• ISV-5992: add sbom-path arg to TKN scripts (95b981b)
• ISV-5992: add tkn task for product SBOMs (3c59bc8)
• ISV-5992: create product SBOM creation task (785d33f)
• ISV-6007: Implement list and download and delete TPA commands (ee4f335)
• ISV-6007: Implement list and download and delete TPA commands (e40f37a)
• move tpa url to pytest param (9d9e7c6)
• prototype integration tests (7fce317)
• remove verbose debug logging (e00b2ce)
• Simplify the Github release process (a13409f)
• Simplify the Github release process (993046d)
• skip int tests in tox github action (1733d6b)
• specify commit digest for product task (d898189)
• specify commit digest for product task (abdc3de)
• Support multi-arch builds with all available arches (8c923b0)
• use newest commit in component tekton task (490dea7)
• use newest commit in component tekton task (41328cd)

Bug Fixes

• Add arch parameters to the right place (96d0877)
• Add arch parameters to the right place (b8df482)
• add missing arg (0732611)
• add missing upload report to atlas upload script (7d5da7c)
• ISV-5875: remove extra pass (8c94ba0)
• remove unused code branch (487e985)

Documentation

• add docs to OCI client (b43ed15)
• add docstrings (e885128)
• add integration test docs (91e495f)
• ISV-5875: expand trusted artifact references (9a693f8)
• ISV-5992: expand TA references (4a30be7)

v0.4.0

0.4.0 (2025-06-24)

Features

• add CLI arg for upload report (e1deaf4)
• Add version label to the Containerfile (8ce1c4e)
• Add version label to the Containerfile (b0c82af)
• ISV-5785: add CLI arg for upload report (e636c76)
• ISV-5860: implement generate product cmd (43d498a)
• ISV-5875: install AWS cli in mobster image (a341a17)
• ISV-5875: install AWS cli in mobster image (156aeea)
• ISV-6033: limit concurrency in SBOM augmentation (f34f457)
• ISV-6033: limit concurrency in SBOM augmentation (b64abb7)
• support symlinks in TPA upload (bd71dc4)

Bug Fixes

• Correct number of workers for TPA upload (6092bd3)
• Correct number of workers for TPA upload (bf74bf3)
• exit with correct code on sbom augment (ad7301f)
• exit with correct code on sbom augment (70d45b5)
• find SBOMs recursively (27cad8d)
• make status handling more explicit (794d0c3)
• use directory path as prefix in upload (d738aef)
• use directory path as prefix in upload (d3d5382)
• use old TypeVar syntax in merge module (277a9e3)

Documentation

• ISV-5860: add docstring to save method (816ea07)
• ISV-5860: add google style docstrings (59688ac)
• ISV-5860: fixup docstrings (d87efce)

v0.3.0

What's Changed

• doc: Update a release documentation by @Allda in #42
• fix(ISV-5982): link to arch-specific images by @jedinym in #34
• feat(ISV-5877): Implement uploading to TPA by @kosciCZ in #35
• feat(ISV-5870): Generator for oci-artifact by @Allda in #38
• fix: Properly mock OIDC responses by @kosciCZ in #49
• chore(deps): update dependency pytest to v8.4.0 by @red-hat-konflux-kflux-prd-rh02 in #47
• chore(deps): update registry.access.redhat.com/ubi9/python-312 docker digest to 9d6f32c by @red-hat-konflux-kflux-prd-rh02 in #44
• chore(deps): update pre-commit hook zricethezav/gitleaks to v8.27.0 by @red-hat-konflux-kflux-prd-rh02 in #43
• chore(main): release 0.3.0 by @BorekZnovustvoritel in #50

New Contributors

• @BorekZnovustvoritel made their first contribution in #50

Full Changelog: v0.2.1...v0.3.0

v0.2.1

What's Changed

• chore(deps): update konflux references by @red-hat-konflux-kflux-prd-rh02 in #16
• chore(deps): lock file maintenance by @red-hat-konflux-kflux-prd-rh02 in #18
• feat: break generate commands to submodules by @Allda in #20
• feat(ISV-5861): Add modelcar SBOM generator by @Allda in #22
• chore(deps): lock file maintenance by @red-hat-konflux-kflux-prd-rh02 in #21
• chore(deps): update konflux references by @red-hat-konflux-kflux-prd-rh02 in #23
• feat(ISV-5881): implement "mobster augment" command by @jedinym in #19
• feat: add modelcar main component under components by @Allda in #28
• feat(ISV-5857): Port SBOM merging helper functions by @jakubgryc in #27
• chore(deps): update dependency mypy to v1.16.0 by @red-hat-konflux-kflux-prd-rh02 in #32
• chore(deps): update dependency pytest-asyncio to v1 by @red-hat-konflux-kflux-prd-rh02 in #33
• chore(deps): update konflux references by @red-hat-konflux-kflux-prd-rh02 in #31
• chore(deps): lock file maintenance by @red-hat-konflux-kflux-prd-rh02 in #26
• feat(ISV-5882): set creationInfo when editing SBOMs by @jedinym in #29
• feat: add binaries to Containerfile by @jedinym in #30
• chore(deps): update dependency ruff to v0.11.12 by @red-hat-konflux-kflux-prd-rh02 in #24
• chore: bootstrap releases for path: . by @Allda in #39
• chore(main): release 0.2.1 by @Allda in #40

New Contributors

• @jedinym made their first contribution in #19
• @jakubgryc made their first contribution in #27

Full Changelog: v0.1.0...v0.2.1