v0.4.0

Changelog

Features

• af3c7d6: feat: Add new status command (#342) (@doanac)
• 4febe4c: feat(keys): JSON unmarshal hardening. (#275) (@Zenithar)

Bug fixes

• 9020b3c: fix: Remove typo in Alternate signing flow (#344) (@elfotografo007)
• 9334b3f: fix: Redirect passphrase output to Standard error (#343) (@elfotografo007)
• 2e6c621: fix: require length and hashes for target metadata (#345) (@asraa)
• 37601e1: fix: filesystemStore fails to prepend target file hashes on Windows (#274) (@torin-carey)
• 2b415d0: fix: update leveldb dependency (#350) (@mfmarche)
• 1b070ee: fix: add leveldb recover ability (#352) (@mfmarche)
• 64ded18: fix(verify): Fix a vulnerability in the verification of threshold signatures (due to handling of keys with multiple IDs) (#369) (@cedricvanrompay-datadog)

Others

• 529fcca: chore(deps): bump arnested/go-version-action from 1.1.3 to 1.1.4 (#334) (@dependabot[bot])
• f5f12b1: docs: Misc. docs fixes (#337) (@znewman01)
• 0f17236: docs: Add release process info for maintainers (#336) (@znewman01)
• 40b67d2: chore(deps): bump actions/setup-python from 4.0.0 to 4.1.0 (#340) (@dependabot[bot])
• 9d0031b: chore(deps): bump actions/setup-go from 3.2.0 to 3.2.1 (#339) (@dependabot[bot])
• 768b63a: chore(deps): bump actions/setup-python from 4.1.0 to 4.2.0 (#351) (@dependabot[bot])
• 8124e8a: chore!: Remove deprecated client Init() function (#353) (@znewman01)
• 8b2d2ab: ci: Fix typo in Pull Request template (#355) (@znewman01)
• f3a48f7: refactor!: rename "InitLocal" to "Init" (#354) (@znewman01)
• ebbc6b8: chore(deps): bump arnested/go-version-action from 1.1.4 to 1.1.5 (#359) (@dependabot[bot])
• 9b6c503: chore(deps): bump actions/setup-go from 3.2.1 to 3.3.0 (#361) (@dependabot[bot])
• d7ff71b: test: Update Python interop tests to python-tuf v1.0.0 (#228) (@znewman01)
• ac7b5d7: chore(deps): bump goreleaser/goreleaser-action from 3.0.0 to 3.1.0 (#366) (@dependabot[bot])
• 06ed599: build: Use Go 1.17 for golangci linting and update golangci/golangci-lint-action (#364) (@ethan-lowman-dd)