Breaking Changes

• Remove ParseCosCELPCR and ParseCosCELRTMR by @alexmwu in #714

What's Changed

• Add EnableRuntimeGPUAttestation opts to AttestationEvidence API by @yawangwang in #694
• [keymanager] add cloudbuild integration test flow by @atulpatildbz in #701
• Fix DHKEM labeled_extract and improve tests by @NilanjanDaw in #715
• Send SPT attestation to GCA by @yawangwang in #695
• Remove ParseCosCELPCR and ParseCosCELRTMR by @alexmwu in #714
• attestCosState to include gpu attestation information by @Sibcgh in #719
• [KeyManager] Add protobuf definitions for standardizing error handling by @NilanjanDaw in #721
• [KeyManager] Refactor workload_service APIs to use protocol buffers by @atulpatildbz in #720
• [KeyManager] End-to-end FFI error handling standardization by @NilanjanDaw in #722
• [launcher] Trim CCEL padding by @jkl73 in #725
• Directly import confidential_space proto directory by @yawangwang in #726
• Use proto request messages for the teeserver by @alexmwu in #723
• Remove verifyCS experiment usage by @mayafleischer in #728
• Add endpoint for hostattestation by @mayafleischer in #735
• Move agent from launcher to make it as a standalone module by @yawangwang in #729
• [KeyManager] KeyClaims: change expiration duration to timestamp by @atulpatildbz in #733
• [launcher] bump vg base cos image version by @jkl73 in #737
• Enable vg host attestation and add real values by @mayafleischer in #740
• docs: add blank lines around code blocks in READMEs by @brongan in #746
• [KeyManager] Protoc to Buf by @atulpatildbz in #727
• [KeyManager] Introduce KPS operation mode by @meetrajvala in #743
• Move VerifyQuote out of internal package by @jessieqliu in #724
• Add crypto agility support to measure.sh by @alexmwu in #764
• Generate SHA384 ref values as part of image build by @alexmwu in #768
• [launcher] update base image, add mask units by @jkl73 in #773
• add bc build steps to cloudbuild by @mayafleischer in #760
• [launcher] cache gpu driver installer files by @jkl73 in #774
• Update dummy host attestation by @bluegate010 in #781
• Update BC build by @mayafleischer in #783
• Update PCR index in host attestation quote from 18->19 by @bluegate010 in #784
• [launcher] bump base image version by @jkl73 in #785
• Add SHA384 support for uki image EFI Authenticode hash by @yanchengchen7 in #775
• [launcher] bump driver base image directory by @jkl73 in #787
• Adding network setup script to prioritize idpf nics and provide tap dev IP address by @gjacobwells in #786
• removing problematic tap route by @gjacobwells in #791
• Fix race condition in read_serial for concurrent tests by @susienme in #794
• Add uki image measurement. by @yanchengchen7 in #793
• [launcher] update driver install, fix image naming by @jkl73 in #801
• Dynamically fetch GPU drivers and vmlinux artifacts based on base ima… by @mayafleischer in #789
• bc launcher updates by @mayafleischer in #790
• Skip gpu installation in bc mode by @mayafleischer in #808
• Add experiment retry by @mayafleischer in #799
• [launcher] update base image by @jkl73 in #814
• Fix AR, GCR domain check by @susienme in #810
• Add acpi to endpoint by @mayafleischer in #813
• Address conflicting routes and apply network optimizations by @gjacobwells in #806
• Integrate Launcher with new Key Protection Module server by @meetrajvala in #798
• Add support for measuring nested VM images in host images by @yanchengchen7 in #817
• [launcher] update swiotlb by @jkl73 in #818
• Rebind idpf devices to resolve renaming failures by @gjacobwells in #819
• [launcher] network optimization by @jkl73 in #820
• fix optimizations crashing with 1460mtu by @gjacobwells in #824

New Contributors

• @brongan made their first contribution in #746
• @bluegate010 made their first contribution in #781
• @gjacobwells made their first contribution in #786
• @susienme made their first contribution in #794

Full Changelog: v0.4.8...v0.4.9