Adam Perry @ OpenAI 9100b9c3d3 Pin Linux artifact signing to Cosign v3.1.4 (#56288) ...

## Why

Existing release consumers verify v2 signature bundles, so the Cosign upgrade must preserve that format.

## What changed

- Upgrade `sigstore/cosign-installer` to `v4.1.2` and explicitly install Cosign `v3.1.4`.
- Provide a pinned Sigstore trusted root for offline installer verification.
- Check the installed Cosign version before signing and disable the new bundle format and signing configuration.

GitOrigin-RevId: c54578c904ed890d013d79169164e662b57d3ee5

2026-10-22 23:05:16 +00:00

..

actions

Pin Linux artifact signing to Cosign v3.1.4 (#56288)

2026-10-22 23:05:16 +00:00

codex

Fix minor typos in comments and documentation (#10287)

2026-01-30 22:11:02 -08:00

ISSUE_TEMPLATE

feat(cli): add codex doctor diagnostics (#22336)

2026-05-13 21:23:19 +00:00

scripts

Consolidate Bazel CI setup into prepare-bazel-ci (#56222)

2026-10-22 17:09:38 +00:00

workflows

Bump uv to 0.13.5 in CI and release workflows (#56248)

2026-10-22 19:42:33 +00:00

blob-size-allowlist.txt

Add GPT-6-Astra to the bundled model catalog (#42607)

2026-09-03 20:05:58 +00:00

CODEOWNERS

Expand agent core ownership (#31675)

2026-07-08 18:04:44 -07:00

codex-cli-splash.png

Replaced user documentation with links to developers docs site (#8662)

2026-01-02 13:01:53 -07:00

dependabot.yaml

Remove the repository devcontainer configurations (#43915)

2026-09-08 21:19:02 +00:00

dotslash-argument-comment-lint-config.json

Publish runnable DotSlash package for argument-comment lint (#15198)

2026-03-19 18:59:02 +00:00

dotslash-config.json

Include the Windows sandbox service in release artifacts (#44694)

2026-09-11 01:09:50 +00:00

dotslash-provisioned-config.json

Publish opt-in provisioned macOS packages with Rust releases (#45345)

2026-09-14 04:37:04 +00:00