microsoft/scitt-ccf-ledger 0.17.0

0.17.0

Repository: microsoft/scitt-ccf-ledger

Tag: 0.17.0

Published: 2026-03-24T20:25:47Z

Prerelease: no

Release notes:

What's Changed

• Add support for Rego registration policies (rego-cpp 1.2.0) by @achamayou in https://github.com/microsoft/scitt-ccf-ledger/pull/338
• Update cryptography package version to 46.* in tests by @achamayou in https://github.com/microsoft/scitt-ccf-ledger/pull/366
• Update load test include docker cpu and mem by @ivarprudnikov in https://github.com/microsoft/scitt-ccf-ledger/pull/357
• Replace custom LRU cache with CCF's set_soft_cache_limit() by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/365
• Add configurable maxSignedStatementBytes to SCITT configuration by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/364
• improve error in the case of an empty or nil payload within the cose by @ivarprudnikov in https://github.com/microsoft/scitt-ccf-ledger/pull/370
• Migrate CCF governance API calls to versioned API 2024-07-01 by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/368
• Print issuer for each verified receipt in scitt validate by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/369
• Update detached/empty payload error message in COSE decoder by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/371
• Add PPE CSS testcase by @achamayou in https://github.com/microsoft/scitt-ccf-ledger/pull/376
• Bump black from 26.1.0 to 26.3.1 in /test in the pip group across 1 directory by @dependabot[bot] in https://github.com/microsoft/scitt-ccf-ledger/pull/378
• Bump azurelinux/base/core from 3.0.20260204 to 3.0.20260304 in /docker by @dependabot[bot] in https://github.com/microsoft/scitt-ccf-ledger/pull/379
• Remove retry-after header which slows down some clients who wait for a sec to retry by @ivarprudnikov in https://github.com/microsoft/scitt-ccf-ledger/pull/383
• Update CCF version from 6.0.23 to 6.0.26 by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/384
• Change operations removal from indexing strategy log from INFO to DEBUG by @andpiccione in https://github.com/microsoft/scitt-ccf-ledger/pull/386
• Update sample CSS policy to handle multiple products and allow higher TCB values by @achamayou in https://github.com/microsoft/scitt-ccf-ledger/pull/380
• Evict entries from cache after they were used to prevent cache from growing and depending on LRU eviction by @ivarprudnikov in https://github.com/microsoft/scitt-ccf-ledger/pull/381
• Drop hardcoded HISTORICAL_CACHE_SOFT_LIMIT, document CCF node config option by @Copilot in https://github.com/microsoft/scitt-ccf-ledger/pull/385
• revert early cache cleanup and update local load test scripts to measure e2e latency by @ivarprudnikov in https://github.com/microsoft/scitt-ccf-ledger/pull/387

Full Changelog: https://github.com/microsoft/scitt-ccf-ledger/compare/0.16.5...0.17.0