v1.1.5

Key management

• If a public key has been configured for a log, check that it is consistent with the private key by @robstradling in #1044
• Don't allow the same private key to be used by more than one configured log by @robstradling in #1046

Log list

• Remove v2 log list package files by @roger2hk in #1004
• Delete v1 and v2 log list testdata by @roger2hk in #1003
• Fix broken tests due to deleted v1 log list in testdata by @roger2hk in #1007

Vulnerability management

• Replace Travis build status with CodeQL workflow in README.md by @roger2hk in #1057
• Create codeql.yml by @AlCutter in #996
• Fix CodeQL warnings by @AlCutter in #997
• Configure OSSF scorecard security scanner by @AlCutter in #995
• Pin GitHub actions to git hashes by @AlCutter in #1005

Fixes

• client/ctclient: Fix doubled https in --log_name by @acohn in #990
• Fix typo in comment by @AlCutter in #1013
• Fix the missing exit code when go test is failed in presubmit script by @roger2hk in #1008
• [Scanner] Retry on errors fetching updated STHs by @AlCutter in #1022
• Fix go gen race condition in Cloud Build for master branch by @roger2hk in #1024
• Remove flaky ratelimiter by @roger2hk in #1015

Cleanups

• Update CHANGELOG.md for v1.1.3 and v1.1.4 releases by @roger2hk in #991
• Clean up Travis related content by @roger2hk in #1058
• Add missing package docs by @AlCutter in #1012
• Regenerate proto go files with protoc by @roger2hk in #1010
• Downgrade fetcher logging to verbose 1 by @mhutchinson in #1031
• Send CloudBuild logs to logging bucket by @AlCutter in #998
• Revert exclude package-comments in golangci-lint by @roger2hk in #1011
• Add Go 1.20 Compatibility by @roger2hk in #1035

Dependency updates

• Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 by @dependabot in #992
• Bump github.com/mattn/go-sqlite3 from 1.14.15 to 1.14.16 by @dependabot in #993
• Bump go.etcd.io/etcd/v3 from 3.5.5 to 3.5.6 by @dependabot in #1001
• Upgrade golangci-lint from 1.48.0 to 1.50.1 by @roger2hk in #1006
• Update the version of golangci-lint and protoc in README.md by @roger2hk in #1009
• Update to Trillian v1.5.1 by @AlCutter in #1014
• Bump golang.org/x/net from 0.3.0 to 0.4.0 by @dependabot in #1016
• Bump github.com/rs/cors from 1.8.2 to 1.8.3 by @dependabot in #1018
• Bump Go version from 1.17 to 1.19 by @roger2hk in #1017
• Bump golang.org/x/crypto from 0.4.0 to 0.5.0 by @dependabot in #1020
• Bump golang.org/x/net from 0.5.0 to 0.7.0 by @dependabot in #1036
• Bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 by @dependabot in #1025
• Bump github.com/sergi/go-diff from 1.2.0 to 1.3.1 by @dependabot in #1023
• Bump go.etcd.io/etcd/v3 from 3.5.6 to 3.5.7 by @dependabot in #1026
• Bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in #1034
• Bump golang.org/x/time from 0.0.0-20220922220347-f3bd1da661af to 0.3.0 by @dependabot in #1038
• Bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in #1040
• Bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 by @dependabot in #1041
• Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #1050
• Bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #1048
• Bump github.com/rs/cors from 1.8.3 to 1.9.0 by @dependabot in #1052
• Bumped etcd deps from v3.5.7 to v3.5.8 by @mhutchinson in #1055

New Contributors

• @acohn made their first contribution in #990
• @robstradling made their first contribution in #1044

Full Changelog: v1.1.4...v1.1.5