# TRILLIAN Changelog

## HEAD

## v1.7.3

* Recommended go version for development: 1.25
  * This is the version used by the cloudbuild presubmits. Using a
    different version can lead to presubmits failing due to unexpected
    diffs.

### Storage

* PostgreSQL quota manager: Use SELECT(*) instead of ANALYZE up to 10,000 rows instead of 1,000 by @robstradling in https://github.com/google/trillian/pull/3813

* Add TLS support for PostgreSQL by @fghanmi in https://github.com/google/trillian/pull/3831
  * `--postgresql_tls_ca`: users can provide a CA certificate, that is used to establish a secure communication with PostgreSQL server. 
  * `--postgresql_verify_full`: users can enable full TLS verification for PostgreSQL (sslmode=verify-full). If false, only sslmode=verify-ca is used.
* CloudSpanner: Many storage-specific options are deprecated and have likely been ineffective for some time in https://github.com/google/trillian/pull/3860

### Election system

* Ensure leader resignation on shutdown by @osmman in https://github.com/google/trillian/pull/3790

### Documentation

* [Claimant Model] New intro by @mhutchinson in https://github.com/google/trillian/pull/3804
* Refresh README by @roger2hk in https://github.com/google/trillian/pull/3865

### Misc

* add optional gRPC max message size limit to trillian logserver and logsigner by @fghanmi in https://github.com/google/trillian/pull/3801
* Updated slack invite link by @mhutchinson in https://github.com/google/trillian/pull/3791
* Update transparency-dev slack invite link by @taknira in https://github.com/google/trillian/pull/3796
* Delete k8s CI steps by @mhutchinson in https://github.com/google/trillian/pull/3838
* Deleted gcb2slack by @mhutchinson in https://github.com/google/trillian/pull/3849

### Dependency update

* Bump @google-cloud/functions-framework from 3.5.1 to 4.0.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3780
* Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3781
* Bump github/codeql-action from 3.28.15 to 3.28.16 in the github-actions-deps group by @dependabot[bot] in https://github.com/google/trillian/pull/3782
* Bump the docker-deps group across 7 directories with 6 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3787
* update golangci-lint to v2.1.6 by @phbnf in https://github.com/google/trillian/pull/3788
* Bump the github-actions-deps group with 4 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3786
* Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3792
* Bump github/codeql-action from 3.28.18 to 3.29.2 in the github-actions-deps group by @dependabot[bot] in https://github.com/google/trillian/pull/3795
* Bump google-auth-library from 9.15.1 to 10.1.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3793
* Bump form-data from 4.0.2 to 4.0.4 in /scripts/gcb2slack in the npm_and_yarn group by @dependabot[bot] in https://github.com/google/trillian/pull/3797
* Bump the docker-deps group across 7 directories with 6 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3800
* Bump google-auth-library from 10.1.0 to 10.2.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3799
* Bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions-deps group by @dependabot[bot] in https://github.com/google/trillian/pull/3798
* Bump the go-deps group across 1 directory with 24 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3794
* Bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible in the go_modules group by @dependabot[bot] in https://github.com/google/trillian/pull/3802
* Bump google-auth-library from 10.2.0 to 10.3.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3808
* Bump the github-actions-deps group with 2 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3807
* Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3811
* Bump the go-deps group with 17 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3809
* Bump @slack/webhook from 7.0.5 to 7.0.6 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3810
* Bump axios from 1.11.0 to 1.12.1 in /scripts/gcb2slack in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/google/trillian/pull/3812
* Bump the github-actions-deps group with 3 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3819
* Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3822
* Bump google-auth-library from 10.3.0 to 10.4.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3820
* Bump the go-deps group with 20 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3821
* Bump the docker-deps group across 7 directories with 6 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3827
* Bump the go-deps group with 9 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3826
* Bump google-auth-library from 10.4.0 to 10.5.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3824
* Bump the github-actions-deps group with 2 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3825
* Bump @google-cloud/functions-framework from 4.0.0 to 4.0.1 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3833
* Bump jws from 4.0.0 to 4.0.1 in /scripts/gcb2slack in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/google/trillian/pull/3836
* Bump the github-actions-deps group with 4 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3834
* Bump the go-deps group with 15 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3835
* Bump the docker-deps group across 5 directories with 3 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3832
* Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3843
* Bump qs from 6.14.0 to 6.14.1 in /scripts/gcb2slack in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/google/trillian/pull/3839
* Bump @google-cloud/functions-framework from 4.0.1 to 5.0.0 in /scripts/gcb2slack by @dependabot[bot] in https://github.com/google/trillian/pull/3840
* Bump the go-deps group with 21 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3842
* Bump the github-actions-deps group with 4 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3841
* Bump the go-deps group with 9 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3847
* Bump the github-actions-deps group with 3 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3846
* Bump the docker-deps group across 7 directories with 6 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3848
* Bump golang.org/x/tools from 0.40.0 to 0.41.0 in the go-deps group by @dependabot[bot] in https://github.com/google/trillian/pull/3851
* Bump the docker-deps group across 4 directories with 2 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3850
* Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @dependabot[bot] in https://github.com/google/trillian/pull/3854
* Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in https://github.com/google/trillian/pull/3855
* Bump the github-actions-deps group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3856
* Bumped go/x/net to fix GO-2026-4559 by @mhutchinson in https://github.com/google/trillian/pull/3859
* Bump the go-deps group across 1 directory with 17 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3860
* Bump google.golang.org/grpc from 1.79.1 to 1.79.3 by @dependabot[bot] in https://github.com/google/trillian/pull/3863
* Bump go.etcd.io/etcd/v3 from 3.6.8 to 3.6.9 by @dependabot[bot] in https://github.com/google/trillian/pull/3864
* Bump the github-actions-deps group with 2 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3868
* Bump the docker-deps group across 6 directories with 5 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3867
* Bump the go-deps group with 15 updates by @dependabot[bot] in https://github.com/google/trillian/pull/3869

## v1.7.2

* Recommended go version for development: 1.23
  * This is the version used by the cloudbuild presubmits. Using a
    different version can lead to presubmits failing due to unexpected
    diffs.

### Storage

* Fix error checking for QueueLeaves and AddSequencedLeaves in the PostgreSQL storage backend by @robstradling in https://github.com/google/trillian/pull/3752
* Add an optimized QueueLeaves implementation for single-leaf batches in the PostgreSQL storage backend by @robstradling in https://github.com/google/trillian/pull/3769
* Improve PostgreSQL functions by @robstradling in https://github.com/google/trillian/pull/3770
* PostgreSQL is now in beta mode by @robstradling in https://github.com/google/trillian/pull/3772

### Election system

* Add `--election_system` parameter to allow selection of the election system by @osmman in https://github.com/google/trillian/pull/3721
* Add Kubernetes-based leader election system by @osmman in https://github.com/google/trillian/pull/3721

### Misc

* Update README.md by @AlCutter in https://github.com/google/trillian/pull/3725
* Ignore ErrTxDone when closing transactions by @mhutchinson in https://github.com/google/trillian/pull/3738
* Add metric tracking queued/skipped leaves by @AlCutter in https://github.com/google/trillian/pull/3751
* Friendlier intro/discussion for the Claimant Model by @mhutchinson in https://github.com/google/trillian/pull/2980
* Trust dependabot prs by @patflynn in https://github.com/google/trillian/pull/3771
* Fix spelling on claimant model landing page by @haydentherapper in https://github.com/google/trillian/pull/3777

### Dependency update

* Bump @google-cloud/functions-framework from 3.4.3 to 3.4.5 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3712
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3715
* Bump the docker-deps group across 3 directories with 2 updates by @dependabot in https://github.com/google/trillian/pull/3717
* Bump the go-deps group with 5 updates by @dependabot in https://github.com/google/trillian/pull/3716
* Bump the docker-deps group across 4 directories with 2 updates by @dependabot in https://github.com/google/trillian/pull/3720
* Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3718
* Bump the go-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3719
* Bump mysql from `106d519` to `1d967fb` in /examples/deployment/docker/db_server in the docker-deps group across 1 directory by @dependabot in https://github.com/google/trillian/pull/3723
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3724
* Bump google-auth-library from 9.15.0 to 9.15.1 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3728
* Bump github/codeql-action from 3.28.6 to 3.28.8 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3727
* Add kubernetes election module by @osmman in https://github.com/google/trillian/pull/3721
* Bump the docker-deps group across 6 directories with 4 updates by @dependabot in https://github.com/google/trillian/pull/3731
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3730
* go update to 1.23 by @phbnf in https://github.com/google/trillian/pull/3733
* Bump the go-deps group across 1 directory with 21 updates, and update protoc-gen-go by @dependabot in https://github.com/google/trillian/pull/3732
* Bump the docker-deps group across 6 directories with 4 updates by @dependabot in https://github.com/google/trillian/pull/3737
* Bump the go-deps group across 1 directory with 7 updates by @dependabot in https://github.com/google/trillian/pull/3739
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3736
* Bump the github-actions-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3741
* Bump postgres from 17.3 to 17.4 in /examples/deployment/docker/db_server/postgresql in the docker-deps group across 1 directory by @dependabot in https://github.com/google/trillian/pull/3742
* Bump the go-deps group with 8 updates by @dependabot in https://github.com/google/trillian/pull/3740
* Bump nick-fields/retry from 3.0.1 to 3.0.2 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3745
* Bump google.golang.org/api from 0.222.0 to 0.223.0 in the go-deps group by @dependabot in https://github.com/google/trillian/pull/3744
* Bump the docker-deps group across 4 directories with 2 updates by @dependabot in https://github.com/google/trillian/pull/3743
* Bump @google-cloud/functions-framework from 3.4.5 to 3.4.6 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3746
* Bump the go-deps group with 13 updates by @dependabot in https://github.com/google/trillian/pull/3749
* Bump the docker-deps group across 3 directories with 1 update by @dependabot in https://github.com/google/trillian/pull/3747
* Bump github/codeql-action from 3.28.10 to 3.28.11 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3748
* Bump axios from 1.7.9 to 1.8.2 in /scripts/gcb2slack in the npm_and_yarn group by @dependabot in https://github.com/google/trillian/pull/3750
* Bump the go-deps group with 6 updates by @dependabot in https://github.com/google/trillian/pull/3755
* Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3753
* Bump mysql from `0917ecc` to `0f775a9` in /examples/deployment/docker/db_server in the docker-deps group across 1 directory by @dependabot in https://github.com/google/trillian/pull/3756
* Bump @slack/webhook from 7.0.4 to 7.0.5 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3754
* Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 in the go_modules group by @dependabot in https://github.com/google/trillian/pull/3759
* Bump the docker-deps group across 4 directories with 3 updates by @dependabot in https://github.com/google/trillian/pull/3761
* Bump the github-actions-deps group with 4 updates plus newly required lint fixes by @dependabot in https://github.com/google/trillian/pull/3762
* Move dependabot to monthly cadence by @mhutchinson in https://github.com/google/trillian/pull/3767
* Bump @google-cloud/functions-framework from 3.4.6 to 3.5.1 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3764
* Bump the docker-deps group across 6 directories with 5 updates by @dependabot in https://github.com/google/trillian/pull/3774
* Bump github/codeql-action from 3.28.13 to 3.28.15 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3773
* Bump golang.org/x/net from 0.37.0 to 0.38.0 in the go_modules group by @dependabot in https://github.com/google/trillian/pull/3776

## v1.7.1

### Storage

* For PostgreSQL, explicitly create index on SequencedLeafData(TreeId, LeafIdentityHash) by @robstradling in https://github.com/google/trillian/pull/3695

### Misc

* Relaxed go.mod version requirements to `1.22.x`

## v1.7.0

### Storage

* Add PostgreSQL quota manager and storage backend by @robstradling in https://github.com/google/trillian/pull/3644
* PostgreSQL deployment example by @robstradling in https://github.com/google/trillian/pull/3675
* PostgreSQL documentation / consistency fixes by @robstradling in https://github.com/google/trillian/pull/3676
* Use a PostgreSQL service container in the GitHub workflow by @robstradling in https://github.com/google/trillian/pull/3680
* Correct hostname and 'root' user in PostgreSQL deployment example by @robstradling in https://github.com/google/trillian/pull/3682

### Misc

* Updated batchmap docs by @mhutchinson in https://github.com/google/trillian/pull/3649
* Documented using the Prism runner by @mhutchinson in https://github.com/google/trillian/pull/3656
* [Dependabot] Use multi-directory config for docker by @mhutchinson in https://github.com/google/trillian/pull/3671
* Removed unused/unreferenced Dockerfile by @mhutchinson in https://github.com/google/trillian/pull/3674
* Control included quota and storage providers via build tags by @robstradling in https://github.com/google/trillian/pull/3664
* Pin Docker container images by hash by @roger2hk in https://github.com/google/trillian/pull/3678
* Add postgresql Docker image to Dependabot by @roger2hk in https://github.com/google/trillian/pull/3677
* Sensible default quota and storage systems when MySQL support unavailable by @robstradling in https://github.com/google/trillian/pull/3679

### Dependency updates

* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3610
* Bump go from 1.22.6 to 1.22.7 by @roger2hk in https://github.com/google/trillian/pull/3618
* Bump golang from 1.23.0-bookworm to 1.23.1-bookworm in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3614
* Bump google-auth-library from 9.14.0 to 9.14.1 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3611
* Bump the npm_and_yarn group in /scripts/gcb2slack with 2 updates by @dependabot in https://github.com/google/trillian/pull/3619
* Bump the go-deps group across 1 directory with 9 updates by @dependabot in https://github.com/google/trillian/pull/3617
* Bump alpine from `0a4eaa0` to `beefdbd` in /examples/deployment/docker/envsubst in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3615
* Bump the docker-deps group in /examples/deployment/docker/log_server with 2 updates by @dependabot in https://github.com/google/trillian/pull/3616
* Bump golang from 1.23.0-bookworm to 1.23.1-bookworm in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3613
* Bump the docker-deps group in /examples/deployment/docker/log_signer with 2 updates by @dependabot in https://github.com/google/trillian/pull/3612
* Bump the npm_and_yarn group in /scripts/gcb2slack with 2 updates by @dependabot in https://github.com/google/trillian/pull/3623
* Bump body-parser from 1.20.2 to 1.20.3 in /scripts/gcb2slack in the npm_and_yarn group by @dependabot in https://github.com/google/trillian/pull/3624
* Bump the go-deps group with 7 updates by @dependabot in https://github.com/google/trillian/pull/3621
* Bump github/codeql-action from 3.26.6 to 3.26.7 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3620
* Bump the go-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3625
* Bump github/codeql-action from 3.26.7 to 3.26.8 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3626
* Bump distroless/base-debian12 from `c925d12` to `88e0a2a` in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3627
* Bump distroless/base-debian12 from `c925d12` to `88e0a2a` in /examples/deployment/docker/log_signer in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3629
* Bump ubuntu from `adbb901` to `58b8789` in /examples/deployment/kubernetes/mysql/image in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3628
* Bump google.golang.org/grpc from 1.66.2 to 1.67.0 in the go-deps group by @dependabot in https://github.com/google/trillian/pull/3630
* Bump the go-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3635
* Bump the docker-deps group in /examples/deployment/docker/log_signer with 2 updates by @dependabot in https://github.com/google/trillian/pull/3632
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3633
* Bump the docker-deps group in /examples/deployment/docker/log_server with 2 updates by @dependabot in https://github.com/google/trillian/pull/3631
* Bump golang from `1a5326b` to `dba79eb` in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3634
* Bump golang from `1a5326b` to `dba79eb` in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3636
* Bump the github-actions-deps group with 5 updates by @dependabot in https://github.com/google/trillian/pull/3641
* Bump golang from 1.23.1-bookworm to 1.23.2-bookworm in /examples/deployment/docker/log_signer in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3638
* Bump golang from 1.23.1-bookworm to 1.23.2-bookworm in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3639
* Bump golang from 1.23.1-bookworm to 1.23.2-bookworm in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3642
* Bump the npm_and_yarn group in /scripts/gcb2slack with 2 updates by @dependabot in https://github.com/google/trillian/pull/3645
* Bump golang from 1.23.1-bookworm to 1.23.2-bookworm in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3640
* Bump the go-deps group with 6 updates by @dependabot in https://github.com/google/trillian/pull/3643
* Bump the go-deps group with 5 updates by @dependabot in https://github.com/google/trillian/pull/3647
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3646
* Bump google-auth-library from 9.14.1 to 9.14.2 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3648
* Bump golang from `18d2f94` to `2341ddf` in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3650
* Bump the go-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3655
* Bump golang from `18d2f94` to `2341ddf` in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3654
* Bump golang from `18d2f94` to `2341ddf` in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3651
* Bump the go-deps group with 4 updates by @dependabot in https://github.com/google/trillian/pull/3658
* Bump distroless/base-debian12 from `6ae5fe6` to `8fe31fb` in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3660
* Bump ubuntu from `58b8789` to `0e5e4a5` in /examples/deployment/kubernetes/mysql/image in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3652
* Bump the docker-deps group across 1 directory with 2 updates by @dependabot in https://github.com/google/trillian/pull/3661
* Bump the github-actions-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3659
* Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in the go_modules group by @dependabot in https://github.com/google/trillian/pull/3663
* Bump golang from 1.23.2-bookworm to 1.23.3-bookworm in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3665
* Bump golang from 1.23.2-bookworm to 1.23.3-bookworm in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3666
* Bump the github-actions-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3670
* Bump golang from 1.23.2-bookworm to 1.23.3-bookworm in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3668
* Bump the docker-deps group across 5 directories with 2 updates by @dependabot in https://github.com/google/trillian/pull/3672
* Bump the go-deps group across 1 directory with 10 updates by @dependabot in https://github.com/google/trillian/pull/3669
* Bump github/codeql-action from 3.27.1 to 3.27.2 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3673
* Bump github/codeql-action from 3.27.2 to 3.27.4 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3685
* Bump google-auth-library from 9.14.2 to 9.15.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3683
* Bump the docker-deps group across 3 directories with 2 updates by @dependabot in https://github.com/google/trillian/pull/3686
* Bump the go-deps group with 10 updates by @dependabot in https://github.com/google/trillian/pull/3684
* Bump github/codeql-action from 3.27.4 to 3.27.5 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3688
* Bump the go-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3687

## v1.6.1

* Recommended go version for development: 1.22
  * This is the version used by the cloudbuild presubmits. Using a
    different version can lead to presubmits failing due to unexpected
    diffs.

### MySQL

* Add TLS support for MySQL by @fghanmi in https://github.com/google/trillian/pull/3593
  * `--mysql_tls_ca`: users can provide a CA certificate, that is used to establish a secure communication with MySQL server. 
  * `--mysql_server_name`: users can provide the name of the MySQL server to be used as the Server Name in the TLS configuration.
* dedup leafidentityhash values ahead of SQL lookup of existing leaves by @bobcallaway in https://github.com/google/trillian/pull/3607

### Documentation

* Add instructions for using docker to regen derived files by @mhutchinson in https://github.com/google/trillian/pull/3489

### Misc

* Fix invalid Go toolchain version by @roger2hk in https://github.com/google/trillian/pull/3491
* Replace deprecated `prune-whitelist` flag with `prune-allowlist` for `kubectl` command by @roger2hk in https://github.com/google/trillian/pull/3307
* Remove @pphaneuf from CODEOWNERS by @roger2hk in https://github.com/google/trillian/pull/3516
* Don't bump to MySQL 9 until we explicitly choose to by @mhutchinson in https://github.com/google/trillian/pull/3560
* Don't update to MySQL 9.0 by @mhutchinson in https://github.com/google/trillian/pull/3584

### Dependency updates
* Bump google.golang.org/api from 0.155.0 to 0.156.0 by @dependabot in https://github.com/google/trillian/pull/3290
* Bump golang from `688ad7f` to `cbee5d2` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3286
* Bump golang from `688ad7f` to `cbee5d2` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3287
* Bump golang from `688ad7f` to `cbee5d2` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3289
* Bump golang from `688ad7f` to `cbee5d2` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3288
* Bump actions/upload-artifact from 4.0.0 to 4.1.0 by @dependabot in https://github.com/google/trillian/pull/3292
* Bump golang.org/x/tools from 0.16.1 to 0.17.0 by @dependabot in https://github.com/google/trillian/pull/3291
* Bump go 1.20 -> 1.21 by @mhutchinson in https://github.com/google/trillian/pull/3293
* Bump github.com/apache/beam/sdks/v2 from 2.52.0 to 2.53.0 by @dependabot in https://github.com/google/trillian/pull/3281
* Bump CockroachDB to 22.2.17 by @roger2hk in https://github.com/google/trillian/pull/3301
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.3.5 to 2.3.6 by @dependabot in https://github.com/google/trillian/pull/3305
* Bump actions/upload-artifact from 4.1.0 to 4.2.0 by @dependabot in https://github.com/google/trillian/pull/3302
* Bump k8s.io/klog/v2 from 2.120.0 to 2.120.1 by @dependabot in https://github.com/google/trillian/pull/3303
* Bump google.golang.org/api from 0.156.0 to 0.157.0 by @dependabot in https://github.com/google/trillian/pull/3304
* Bump golang from `cbee5d2` to `c4b696f` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3298
* Bump ubuntu from `6042500` to `e6173d4` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3299
* Bump golang from `cbee5d2` to `c4b696f` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3295
* Bump golang from `cbee5d2` to `c4b696f` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3297
* Bump golang from `cbee5d2` to `c4b696f` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3296
* Bump mysql from 8.2 to 8.3 in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3306
* Bump golang from `c4b696f` to `d8c365d` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3308
* Bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in https://github.com/google/trillian/pull/3309
* Bump golang from `c4b696f` to `d8c365d` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3310
* Bump golang from `c4b696f` to `d8c365d` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3311
* Bump golang from `c4b696f` to `d8c365d` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3312
* Bump google.golang.org/grpc from 1.60.1 to 1.61.0 by @dependabot in https://github.com/google/trillian/pull/3314
* Bump google.golang.org/api from 0.157.0 to 0.158.0 by @dependabot in https://github.com/google/trillian/pull/3315
* Bump google-auth-library from 9.4.2 to 9.5.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3316
* Bump google.golang.org/api from 0.158.0 to 0.159.0 by @dependabot in https://github.com/google/trillian/pull/3317
* Bump google-auth-library from 9.5.0 to 9.6.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3319
* Bump google.golang.org/api from 0.159.0 to 0.160.0 by @dependabot in https://github.com/google/trillian/pull/3320
* Bump alpine from `51b6726` to `c5b1261` in /examples/deployment/docker/envsubst by @dependabot in https://github.com/google/trillian/pull/3321
* Bump cloud.google.com/go/spanner from 1.55.0 to 1.56.0 by @dependabot in https://github.com/google/trillian/pull/3322
* Bump go.etcd.io/etcd/v3 from 3.5.11 to 3.5.12 by @dependabot in https://github.com/google/trillian/pull/3327
* Bump google.golang.org/api from 0.160.0 to 0.161.0 by @dependabot in https://github.com/google/trillian/pull/3323
* Bump nick-fields/retry from 2.9.0 to 3.0.0 by @dependabot in https://github.com/google/trillian/pull/3328
* Bump golang from `d8c365d` to `3efef61` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3329
* Bump golang from `d8c365d` to `3efef61` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3331
* Bump golang from `d8c365d` to `3efef61` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3330
* Bump golang from `d8c365d` to `3efef61` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3332
* Bump google-auth-library from 9.6.0 to 9.6.1 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3333
* Bump google-auth-library from 9.6.1 to 9.6.2 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3334
* Bump ubuntu from `e6173d4` to `e9569c2` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3335
* Bump distroless/base-debian12 from `0a93daa` to `f47fa3d` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3336
* Bump distroless/base-debian12 from `0a93daa` to `f47fa3d` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3337
* Bump google.golang.org/api from 0.161.0 to 0.162.0 by @dependabot in https://github.com/google/trillian/pull/3340
* Bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in https://github.com/google/trillian/pull/3342
* Bump kaniko to v1.20.0 to fix #3338 by @AlCutter in https://github.com/google/trillian/pull/3339
* Bump golang.org/x/crypto from 0.18.0 to 0.19.0 by @dependabot in https://github.com/google/trillian/pull/3347
* Bump golang from 1.21.6-bookworm to 1.22.0-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3346
* Bump google-auth-library from 9.6.2 to 9.6.3 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3352
* Bump golang from 1.21.6-bookworm to 1.22.0-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3351
* Bump golang from 1.21.6-bookworm to 1.22.0-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3350
* Bump golang from 1.21.6-bookworm to 1.22.0-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3349
* Bump golangci/golangci-lint-action from 3.7.0 to 3.7.1 by @dependabot in https://github.com/google/trillian/pull/3354
* Bump google.golang.org/api from 0.162.0 to 0.163.0 by @dependabot in https://github.com/google/trillian/pull/3353
* Bump distroless/base-debian12 from `f47fa3d` to `2102ce1` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3355
* Bump distroless/base-debian12 from `f47fa3d` to `2102ce1` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3356
* Bump golang from `874c267` to `925fe3f` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3361
* Bump cloud.google.com/go/spanner from 1.56.0 to 1.57.0 by @dependabot in https://github.com/google/trillian/pull/3358
* Bump github.com/apache/beam/sdks/v2 from 2.53.0 to 2.54.0 by @dependabot in https://github.com/google/trillian/pull/3365
* Bump google.golang.org/api from 0.163.0 to 0.165.0 by @dependabot in https://github.com/google/trillian/pull/3366
* Bump golang from `874c267` to `925fe3f` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3357
* Bump golang from `874c267` to `925fe3f` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3362
* Bump golang.org/x/tools from 0.17.0 to 0.18.0 by @dependabot in https://github.com/google/trillian/pull/3360
* Bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in https://github.com/google/trillian/pull/3364
* Bump golang from `874c267` to `925fe3f` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3363
* Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by @dependabot in https://github.com/google/trillian/pull/3367
* Bump ubuntu from `e9569c2` to `f9d633f` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3368
* Bump golang/govulncheck-action from 1.0.1 to 1.0.2 by @dependabot in https://github.com/google/trillian/pull/3369
* Bump google.golang.org/api from 0.165.0 to 0.166.0 by @dependabot in https://github.com/google/trillian/pull/3370
* Bump google.golang.org/grpc from 1.61.1 to 1.62.0 by @dependabot in https://github.com/google/trillian/pull/3371
* Bump google.golang.org/api from 0.166.0 to 0.167.0 by @dependabot in https://github.com/google/trillian/pull/3374
* Bump distroless/base-debian12 from `2102ce1` to `5eae9ef` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3373
* Bump distroless/base-debian12 from `2102ce1` to `5eae9ef` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3372
* Bump golang.org/x/crypto from 0.19.0 to 0.20.0 by @dependabot in https://github.com/google/trillian/pull/3375
* Bump distroless/base-debian12 from `5eae9ef` to `f9b0e86` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3377
* Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 by @dependabot in https://github.com/google/trillian/pull/3376
* Bump distroless/base-debian12 from `f9b0e86` to `5eae9ef` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3379
* Bump golang.org/x/crypto from 0.20.0 to 0.21.0 by @dependabot in https://github.com/google/trillian/pull/3380
* Bump google.golang.org/api from 0.167.0 to 0.168.0 by @dependabot in https://github.com/google/trillian/pull/3382
* Bump go-version-input from 1.21.6 to 1.21.8 in govulncheck and bump google.golang.org/protobuf from 1.32.0 to 1.33.0 and bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @roger2hk in https://github.com/google/trillian/pull/3393
* Bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in https://github.com/google/trillian/pull/3385
* Bump golang.org/x/tools from 0.18.0 to 0.19.0 by @dependabot in https://github.com/google/trillian/pull/3383
* Bump cloud.google.com/go/spanner from 1.57.0 to 1.58.0 by @dependabot in https://github.com/google/trillian/pull/3391
* Bump golang from 1.22.0-bookworm to 1.22.1-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3389
* Bump ubuntu from `f9d633f` to `77906da` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3392
* Bump golang from 1.22.0-bookworm to 1.22.1-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3387
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.3.6 to 2.3.7 by @dependabot in https://github.com/google/trillian/pull/3390
* Bump golang from 1.22.0-bookworm to 1.22.1-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3388
* Bump golang from 1.22.0-bookworm to 1.22.1-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3386
* Bump google.golang.org/api from 0.168.0 to 0.169.0 by @dependabot in https://github.com/google/trillian/pull/3394
* Bump distroless/base-debian12 from `5eae9ef` to `28a7f1f` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3396
* Bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.0 by @dependabot in https://github.com/google/trillian/pull/3395
* Bump distroless/base-debian12 from `5eae9ef` to `28a7f1f` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3397
* Bump github.com/jackc/pgx/v4 from 4.18.1 to 4.18.2 by @dependabot in https://github.com/google/trillian/pull/3398
* Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in https://github.com/google/trillian/pull/3401
* Bump golang from `6699d28` to `d996c64` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3399
* Bump golang from `6699d28` to `d996c64` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3403
* Bump golang from `6699d28` to `d996c64` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3402
* Bump golang from `6699d28` to `d996c64` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3400
* Bump google-auth-library from 9.6.3 to 9.7.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3404
* Bump cloud.google.com/go/spanner from 1.58.0 to 1.59.0 by @dependabot in https://github.com/google/trillian/pull/3405
* Bump google.golang.org/api from 0.169.0 to 0.170.0 by @dependabot in https://github.com/google/trillian/pull/3406
* Bump follow-redirects from 1.15.4 to 1.15.6 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3407
* Bump cloud.google.com/go/spanner from 1.59.0 to 1.60.0 by @dependabot in https://github.com/google/trillian/pull/3408
* Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in https://github.com/google/trillian/pull/3409
* Bump google.golang.org/api from 0.170.0 to 0.171.0 by @dependabot in https://github.com/google/trillian/pull/3410
* Bump github.com/go-sql-driver/mysql from 1.8.0 to 1.8.1 by @dependabot in https://github.com/google/trillian/pull/3412
* Bump express from 4.18.2 to 4.19.2 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3413
* Bump github.com/apache/beam/sdks/v2 from 2.54.0 to 2.55.0 by @dependabot in https://github.com/google/trillian/pull/3411
* Bump go.etcd.io/etcd/v3 from 3.5.12 to 3.5.13 by @dependabot in https://github.com/google/trillian/pull/3415
* Bump google.golang.org/api from 0.171.0 to 0.172.0 by @dependabot in https://github.com/google/trillian/pull/3414
* Bump distroless/base-debian12 from `28a7f1f` to `611d30d` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3419
* Bump distroless/base-debian12 from `28a7f1f` to `611d30d` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3420
* Bump golang from 1.22.1-bookworm to 1.22.2-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3421
* update govulncheck go version from 1.21.8 to 1.21.9 and bump golang.org/x/net from v0.22.0 to v0.23.0 by @phbnf in https://github.com/google/trillian/pull/3427
* Bump golang from 1.22.1-bookworm to 1.22.2-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3426
* Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 by @dependabot in https://github.com/google/trillian/pull/3422
* Bump golang.org/x/sys from 0.18.0 to 0.19.0 by @dependabot in https://github.com/google/trillian/pull/3428
* Bump golang from 1.22.1-bookworm to 1.22.2-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3424
* Bump golang from 1.22.1-bookworm to 1.22.2-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3425
* Bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @dependabot in https://github.com/google/trillian/pull/3429
* Bump golang.org/x/tools from 0.19.0 to 0.20.0 by @dependabot in https://github.com/google/trillian/pull/3432
* Bump github.com/apache/beam/sdks/v2 from 2.55.0 to 2.55.1 by @dependabot in https://github.com/google/trillian/pull/3433
* Bump google.golang.org/grpc from 1.62.1 to 1.63.2 by @dependabot in https://github.com/google/trillian/pull/3434
* Bump golang from `48b942a` to `3c7ad81` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3437
* Bump golang from `48b942a` to `3c7ad81` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3435
* Bump golang from `48b942a` to `3c7ad81` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3436
* Bump golang from `48b942a` to `fb54c61` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3439
* Bump golang from `3c7ad81` to `b03f3ba` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3440
* Bump golang from `3c7ad81` to `b03f3ba` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3442
* Bump golang from `3c7ad81` to `b03f3ba` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3441
* Bump golang from `fb54c61` to `b03f3ba` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3443
* Bump google-auth-library from 9.7.0 to 9.8.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3444
* Bump google.golang.org/api from 0.172.0 to 0.173.0 by @dependabot in https://github.com/google/trillian/pull/3445
* Bump ubuntu from `77906da` to `1b8d8ff` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3446
* Bump google.golang.org/api from 0.173.0 to 0.174.0 by @dependabot in https://github.com/google/trillian/pull/3447
* Bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in https://github.com/google/trillian/pull/3448
* Bump google.golang.org/api from 0.174.0 to 0.175.0 by @dependabot in https://github.com/google/trillian/pull/3449
* Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in https://github.com/google/trillian/pull/3450
* Bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in https://github.com/google/trillian/pull/3451
* Bump google.golang.org/api from 0.175.0 to 0.176.0 by @dependabot in https://github.com/google/trillian/pull/3452
* Bump google.golang.org/api from 0.176.0 to 0.176.1 by @dependabot in https://github.com/google/trillian/pull/3453
* Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in https://github.com/google/trillian/pull/3455
* Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in https://github.com/google/trillian/pull/3460
* Bump google-auth-library from 9.8.0 to 9.9.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3456
* Bump golang from `b03f3ba` to `d0902ba` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3454
* Bump golang from `b03f3ba` to `d0902ba` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3457
* Bump ubuntu from `1b8d8ff` to `6d7b5d3` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3461
* Bump golang from `b03f3ba` to `d0902ba` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3459
* Bump golang from `b03f3ba` to `d0902ba` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3458
* Bump distroless/base-debian12 from `611d30d` to `d8d01e2` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3463
* Bump distroless/base-debian12 from `611d30d` to `d8d01e2` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3464
* Bump cloud.google.com/go/spanner from 1.60.0 to 1.61.0 by @dependabot in https://github.com/google/trillian/pull/3468
* Bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @dependabot in https://github.com/google/trillian/pull/3462
* Bump @google-cloud/functions-framework from 3.3.0 to 3.4.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3465
* Bump mysql from 8.3 to 8.4 in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3469
* Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in https://github.com/google/trillian/pull/3470
* Bump ubuntu from `6d7b5d3` to `a6d2b38` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3471
* Bump github.com/apache/beam/sdks/v2 from 2.55.1 to 2.56.0 by @dependabot in https://github.com/google/trillian/pull/3472
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.3.7 to 2.3.8 by @dependabot in https://github.com/google/trillian/pull/3473
* Bump distroless/base-debian12 from `d8d01e2` to `786007f` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3474
* Bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 by @dependabot in https://github.com/google/trillian/pull/3479
* Bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @dependabot in https://github.com/google/trillian/pull/3476
* Bump distroless/base-debian12 from `d8d01e2` to `786007f` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3480
* Bump golang from 1.22.2-bookworm to 1.22.3-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3482
* Bump golang from 1.22.2-bookworm to 1.22.3-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3481
* Bump `go-version-input` to 1.21.10 in govulncheck.yml by @roger2hk in https://github.com/google/trillian/pull/3488
* Bump google.golang.org/protobuf from 1.33.0 to 1.34.1 by @dependabot in https://github.com/google/trillian/pull/3475
* Bump google.golang.org/api from 0.176.1 to 0.178.0 by @dependabot in https://github.com/google/trillian/pull/3484
* Bump github.com/fullstorydev/grpcurl from 1.8.9 to 1.9.1 by @dependabot in https://github.com/google/trillian/pull/3438
* Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in https://github.com/google/trillian/pull/3478
* Bump golang.org/x/tools from 0.20.0 to 0.21.0 by @dependabot in https://github.com/google/trillian/pull/3485
* Bump golang from 1.22.2-bookworm to 1.22.3-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3487
* Bump golang from 1.22.2-bookworm to 1.22.3-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3483
* Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 by @dependabot in https://github.com/google/trillian/pull/3490
* Bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in https://github.com/google/trillian/pull/3492
* Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in https://github.com/google/trillian/pull/3493
* Bump google.golang.org/api from 0.178.0 to 0.180.0 by @dependabot in https://github.com/google/trillian/pull/3494
* Bump google-auth-library from 9.9.0 to 9.10.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3495
* Bump golang from `6d71b7c` to `c2bc4ef` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3496
* Bump golang from `6d71b7c` to `c2bc4ef` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3497
* Bump golang from `6d71b7c` to `c2bc4ef` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3498
* Bump golang from `6d71b7c` to `c2bc4ef` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3499
* Bump golang from `c2bc4ef` to `ef27a3c` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3501
* Bump golang from `c2bc4ef` to `ef27a3c` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3500
* Bump golang from `c2bc4ef` to `ef27a3c` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3505
* Bump golang from `c2bc4ef` to `ef27a3c` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3502
* Bump cloud.google.com/go/spanner from 1.61.0 to 1.62.0 by @dependabot in https://github.com/google/trillian/pull/3504
* Bump google.golang.org/api from 0.180.0 to 0.181.0 by @dependabot in https://github.com/google/trillian/pull/3506
* Bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in https://github.com/google/trillian/pull/3508
* Bump golang from `ef27a3c` to `5c56bd4` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3507
* Bump golang from `ef27a3c` to `5c56bd4` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3510
* Bump golang from `ef27a3c` to `5c56bd4` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3511
* Bump github/codeql-action from 2.13.4 to 3.25.5 by @dependabot in https://github.com/google/trillian/pull/3512
* Bump golang from `ef27a3c` to `5c56bd4` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3509
* Bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in https://github.com/google/trillian/pull/3513
* Bump alpine from 3.19 to 3.20 in /examples/deployment/docker/envsubst by @dependabot in https://github.com/google/trillian/pull/3514
* Bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @dependabot in https://github.com/google/trillian/pull/3503
* Bump cloud.google.com/go/spanner from 1.62.0 to 1.63.0 by @dependabot in https://github.com/google/trillian/pull/3515
* Bump google.golang.org/api from 0.181.0 to 0.182.0 by @dependabot in https://github.com/google/trillian/pull/3517
* Bump go.etcd.io/etcd/v3 from 3.5.13 to 3.5.14 by @dependabot in https://github.com/google/trillian/pull/3520
* Bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in https://github.com/google/trillian/pull/3523
* Bump golang/govulncheck-action from 1.0.2 to 1.0.3 by @dependabot in https://github.com/google/trillian/pull/3524
* Bump the version of go used by the vuln scanner by @mhutchinson in https://github.com/google/trillian/pull/3536
* Group dependabot updates together by @mhutchinson in https://github.com/google/trillian/pull/3535
* Bump ubuntu from `a6d2b38` to `19478ce` in /examples/deployment/kubernetes/mysql/image in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3537
* Bump the go-deps group with 8 updates by @dependabot in https://github.com/google/trillian/pull/3538
* Bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in https://github.com/google/trillian/pull/3534
* Bump golang from 1.22.3-bookworm to 1.22.4-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3533
* Bump golang from 1.22.3-bookworm to 1.22.4-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3526
* Bump golang from 1.22.3-bookworm to 1.22.4-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3528
* Bump golang from 1.22.3-bookworm to 1.22.4-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3527
* Bump golang from `aec4784` to `9678844` in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3545
* Bump golang from `aec4784` to `9678844` in /examples/deployment/docker/log_signer in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3544
* Bump golang from `aec4784` to `9678844` in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3543
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3540
* Bump google-auth-library from 9.10.0 to 9.11.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3539
* Bump golang from `aec4784` to `9678844` in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3542
* Bump alpine from `77726ef` to `b89d9c9` in /examples/deployment/docker/envsubst in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3546
* Bump the go-deps group across 1 directory with 7 updates by @dependabot in https://github.com/google/trillian/pull/3547
* Bump the go-deps group with 5 updates by @dependabot in https://github.com/google/trillian/pull/3550
* Bump github/codeql-action from 3.25.10 to 3.25.11 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3549
* Bump the version of go, and make vuln check share version by @mhutchinson in https://github.com/google/trillian/pull/3551
* Bump golang from 1.22.4-bookworm to 1.22.5-bookworm in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3552
* Bump actions/upload-artifact from 4.3.3 to 4.3.4 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3556
* Bump golang from 1.22.4-bookworm to 1.22.5-bookworm in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3559
* Bump the docker-deps group in /examples/deployment/docker/log_signer with 2 updates by @dependabot in https://github.com/google/trillian/pull/3554
* Bump ubuntu from `19478ce` to `340d9b0` in /examples/deployment/kubernetes/mysql/image in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3558
* Bump the docker-deps group in /examples/deployment/docker/log_server with 2 updates by @dependabot in https://github.com/google/trillian/pull/3555
* Bump the go-deps group with 5 updates by @dependabot in https://github.com/google/trillian/pull/3557
* Bump the go-deps group with 4 updates by @dependabot in https://github.com/google/trillian/pull/3564
* Bump @google-cloud/functions-framework from 3.4.0 to 3.4.1 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3563
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3562
* Bump the go-deps group with 7 updates by @dependabot in https://github.com/google/trillian/pull/3565
* Bump alpine from `b89d9c9` to `a59bbcb` in /examples/deployment/docker/envsubst in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3567
* Bump github/codeql-action from 3.25.12 to 3.25.13 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3566
* Bump golang from `6c27802` to `af9b40f` in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3569
* Bump golang from `6c27802` to `af9b40f` in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3576
* Bump alpine from `a59bbcb` to `0a4eaa0` in /examples/deployment/docker/envsubst in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3571
* Bump golang from `6c27802` to `af9b40f` in /examples/deployment/docker/log_signer in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3573
* Bump the go-deps group with 3 updates by @dependabot in https://github.com/google/trillian/pull/3568
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3572
* Bump @google-cloud/functions-framework from 3.4.1 to 3.4.2 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3574
* Bump golang from `6c27802` to `af9b40f` in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3570
* Bump google-auth-library from 9.11.0 to 9.12.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3575
* Upgrade to go-licenses v2 by @mhutchinson in https://github.com/google/trillian/pull/3578
* Bump github.com/docker/docker from 25.0.5+incompatible to 25.0.6+incompatible in the go_modules group by @dependabot in https://github.com/google/trillian/pull/3579
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3582
* Bump google-auth-library from 9.12.0 to 9.13.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3583
* Bump the go-deps group with 6 updates by @dependabot in https://github.com/google/trillian/pull/3580
* Bump golang from 1.22.5-bookworm to 1.22.6-bookworm in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3586
* Bump the go-deps group with 6 updates by @dependabot in https://github.com/google/trillian/pull/3590
* Bump golang from 1.22.5-bookworm to 1.22.6-bookworm in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3588
* Bump the github-actions-deps group with 2 updates by @dependabot in https://github.com/google/trillian/pull/3587
* Bump golang from 1.22.5-bookworm to 1.22.6-bookworm in /examples/deployment/docker/log_signer in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3589
* Bump golang from 1.22.5-bookworm to 1.22.6-bookworm in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3591
* Bump ubuntu from `340d9b0` to `adbb901` in /examples/deployment/kubernetes/mysql/image in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3595
* Bump golang from 1.22.6-bookworm to 1.23.0-bookworm in /integration/cloudbuild/testbase in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3601
* Bump golang from 1.22.6-bookworm to 1.23.0-bookworm in /examples/deployment/docker/db_client in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3594
* Bump @slack/webhook from 7.0.2 to 7.0.3 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3596
* Bump github/codeql-action from 3.26.0 to 3.26.3 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3599
* Bump golang from 1.22.6-bookworm to 1.23.0-bookworm in /examples/deployment/docker/log_server in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3598
* Bump golang from 1.22.6-bookworm to 1.23.0-bookworm in /examples/deployment/docker/log_signer in the docker-deps group by @dependabot in https://github.com/google/trillian/pull/3600
* Bump the go-deps group with 4 updates by @dependabot in https://github.com/google/trillian/pull/3597
* Bump go version to 1.22.6 by @roger2hk in https://github.com/google/trillian/pull/3602
* Bump the go-deps group with 6 updates by @dependabot in https://github.com/google/trillian/pull/3606
* Bump google-auth-library from 9.13.0 to 9.14.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3604
* Bump github/codeql-action from 3.26.3 to 3.26.5 in the github-actions-deps group by @dependabot in https://github.com/google/trillian/pull/3605

## v1.6.0 (Jan 2024)

### MySQL: Changes to Subtree Revisions

Support for skipping subtree revisions to increase read performance and reduce disk usage: added in #3201

TL;DR: existing trees will continue to be stored and queried as they were before, but new trees
created with the MySQL storage layer will be stored and queried in a way that uses less space
and allows for simpler and faster queries. No schema changes are required by log operators.

The Trillian MySQL implementation stores the internal state of the log as Subtrees in the database.
These are essentially tiles as described by [tlog: Tiling a log](https://research.swtch.com/tlog).
Trees created with previous versions of Trillian stored a different revision of each Subtree when
the tree was updated. This is somewhat redundant for append-only logs because an earlier version
of a Subtree can always be derived from a later one by simply removing entries from the right of
the Subtree. PR #3201 removes this Subtree revision history, and updates Subtrees in place when
they are updated.

Measurements from @n-canter show that revisionless storage saves around 75% storage costs for the
Subtree table, and queries over this table are more than 15% faster.

The same schema is used for both revisioned and unrevisioned subtrees. The difference is that we
always write a revision of 0 in the unrevisioned case, which still means that there will only be
a single entry per subtree.

Support is maintained for the old way of revisioning Subtrees in order to avoid breaking changes
to existing trees. There is no simple code change that would safely allow a previously revisioned
tree to start becoming a revisionless tree. This new revisionless Subtree feature is only available
for trees created with new versions of Trillian.

Users with legacy revisioned trees that wish to take advantage of smaller storage costs and faster
queries of the new revisionless storage should come speak to us on
[transparency-dev Slack](https://join.slack.com/t/transparency-dev/shared_invite/zt-27pkqo21d-okUFhur7YZ0rFoJVIOPznQ).
The safest option we have available is to use [migrillian](https://github.com/google/certificate-transparency-go/tree/master/trillian/migrillian) to create a new copy of trees, but this will be quite a manual
process and will only work for CT logs.
Other migration options are conceivable and we're eager to work with the community to develop
and test tools for upgrading trees in place.

## Notable Changes

* CI now runs with MySQL 8.2 instead of MySQL 5.7
* Bump golangci-lint from 1.51.1 to 1.55.1 (developers should update to this version)

## All Changes (ignoring dependabot)

* Strip unused docker image manipulation from cloudbuild by @mhutchinson in https://github.com/google/trillian/pull/3278
* Switch from using unmaintained Google Cloud mysql db image to dockerhub official image by @patflynn in https://github.com/google/trillian/pull/3272
* Disable the OS package patches to bypass the mysql8 gpg key rotation issue by @roger2hk in https://github.com/google/trillian/pull/3270
* Disable race condition checking for beam code by @mhutchinson in https://github.com/google/trillian/pull/3249
* Make uninitializedBegin test accurately test its intention by @mhutchinson in https://github.com/google/trillian/pull/3244
* Fix deadlock in log_client by @n-canter in https://github.com/google/trillian/pull/3236
* Bump go-version-input from 1.20.11 to 1.20.12 in govulncheck.yml by @roger2hk in https://github.com/google/trillian/pull/3237
* Inlined storage/sql.go into both implementations that use it by @mhutchinson in https://github.com/google/trillian/pull/3235
* Support for skipping subtree revisions to increase read performance and reduce disk usage by @mhutchinson in https://github.com/google/trillian/pull/3201
* Updated Slack channel details by @mhutchinson in https://github.com/google/trillian/pull/3214
* Skip SELECTing revision that isn't used by @mhutchinson in https://github.com/google/trillian/pull/3207
* Increase some timeouts in integration tests by @mhutchinson in https://github.com/google/trillian/pull/3203
* Do vuln scanning with a version of Go not subject to GO-2023-2185 by @mhutchinson in https://github.com/google/trillian/pull/3202
* Bump MariaDB image from 10.3 to 11.1 in Cloud Build by @roger2hk in https://github.com/google/trillian/pull/3189
* Move golangci-lint from Cloud Build to GitHub Action by @roger2hk in https://github.com/google/trillian/pull/3188
* Updated all MySQL deps to 8.0 #3182 by @mhutchinson in https://github.com/google/trillian/pull/3183
* Bump golangci-lint from 1.51.1 to 1.55.1 by @roger2hk in https://github.com/google/trillian/pull/3177

The above was generated with the following command:
```bash
gh pr list -s closed -S "NOT dependabot" --json url,title,author  -t '{{range .}}* {{.title}} by @{{.author.login}} in {{.url}}
{{end}}'
```

## v1.5.3

* Recommended go version for development: 1.20
  * This is the version used by the cloudbuild presubmits. Using a
    different version can lead to presubmits failing due to unexpected
    diffs.

### Storage

#### MySQL

* mysql: check for error when getting subtrees by @jsha in https://github.com/google/trillian/pull/3173

### Documentation

* Added comments to show how snippets were generated by @mhutchinson in https://github.com/google/trillian/pull/3048

### Misc

* Export logserver read counter metric together with logIDs by @phbnf in https://github.com/google/trillian/pull/3077
* Register DoFns by @AlCutter in https://github.com/google/trillian/pull/3083
* Add docker package-ecosystem to Dependabot config by @roger2hk in https://github.com/google/trillian/pull/3038
* Fix CVE vulnerabilities in mysql base Docker image by @roger2hk in https://github.com/google/trillian/pull/3037
* Fix db_server Docker image vulnerabilities by @roger2hk in https://github.com/google/trillian/pull/3049
* Add missing docker and npm Dependabot configs by @roger2hk in https://github.com/google/trillian/pull/3062
* Add govulncheck GitHub action by @roger2hk in https://github.com/google/trillian/pull/3089
* Pin Dockerfile base images by hash by @roger2hk in https://github.com/google/trillian/pull/3090
* Pin golang/govulncheck-action by hash by @roger2hk in https://github.com/google/trillian/pull/3091
* Pin Dockerfile base images by hash by @roger2hk in https://github.com/google/trillian/pull/3093
* Add top level read-only permission in govulncheck.yml by @roger2hk in https://github.com/google/trillian/pull/3092

### Dependency updates

* Bump go.etcd.io/etcd/etcdctl/v3 from 3.5.8 to 3.5.9 by @dependabot in https://github.com/google/trillian/pull/3003
* Bump google.golang.org/api from 0.121.0 to 0.122.0 by @dependabot in https://github.com/google/trillian/pull/3006
* Bump golang.org/x/tools from 0.8.0 to 0.9.1 by @dependabot in https://github.com/google/trillian/pull/3005
* Bump github.com/apache/beam/sdks/v2 from 2.47.0-RC3 to 2.47.0 by @dependabot in https://github.com/google/trillian/pull/3000
* Bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in https://github.com/google/trillian/pull/3007
* Bump go.etcd.io/etcd/v3 from 3.5.8 to 3.5.9 by @dependabot in https://github.com/google/trillian/pull/3004
* Bump actions/setup-go from 4.0.0 to 4.0.1 by @dependabot in https://github.com/google/trillian/pull/3008
* Bump google.golang.org/api from 0.122.0 to 0.123.0 by @dependabot in https://github.com/google/trillian/pull/3010
* Bump github/codeql-action from 2.3.3 to 2.3.5 by @dependabot in https://github.com/google/trillian/pull/3013
* Bump github/codeql-action from 2.3.5 to 2.3.6 by @dependabot in https://github.com/google/trillian/pull/3020
* Bump golang.org/x/tools from 0.9.1 to 0.9.3 by @dependabot in https://github.com/google/trillian/pull/3016
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.3.3 to 2.3.4 by @dependabot in https://github.com/google/trillian/pull/3017
* Bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by @dependabot in https://github.com/google/trillian/pull/3021
* Bump golang.org/x/sys from 0.8.0 to 0.9.0 by @dependabot in https://github.com/google/trillian/pull/3025
* Bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by @dependabot in https://github.com/google/trillian/pull/3027
* Bump github/codeql-action from 2.3.6 to 2.13.4 by @dependabot in https://github.com/google/trillian/pull/3026
* Bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in https://github.com/google/trillian/pull/3028
* Bump golang.org/x/tools from 0.9.3 to 0.10.0 by @dependabot in https://github.com/google/trillian/pull/3029
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.3.4 to 2.3.5 by @dependabot in https://github.com/google/trillian/pull/3035
* Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 by @dependabot in https://github.com/google/trillian/pull/3030
* Update mysql Dockerfile base image from ubuntu:trusty to ubuntu:jammy by @roger2hk in https://github.com/google/trillian/pull/3036
* Bump golang.org/x/tools from 0.10.0 to 0.11.0 by @dependabot in https://github.com/google/trillian/pull/3044
* Bump ossf/scorecard-action from 2.1.3 to 2.2.0 by @dependabot in https://github.com/google/trillian/pull/3039
* Bump google.golang.org/protobuf from 1.30.0 to 1.31.0 by @dependabot in https://github.com/google/trillian/pull/3041
* Bump golang.org/x/tools from 0.11.0 to 0.12.0 by @dependabot in https://github.com/google/trillian/pull/3055
* Bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in https://github.com/google/trillian/pull/3059
* Bump google-auth-library from 8.7.0 to 9.0.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3069
* Bump golang from 1.19-buster to 1.20-buster in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3064
* Bump alpine from 3.8 to 3.18 in /examples/deployment/docker/envsubst by @dependabot in https://github.com/google/trillian/pull/3067
* Bump golang from 1.19-buster to 1.20-buster in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3065
* Bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in https://github.com/google/trillian/pull/3063
* Bump golang from 1.19-buster to 1.20-buster in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3066
* Bump golang from 1.19-buster to 1.20-buster in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3071
* Bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in https://github.com/google/trillian/pull/3076
* Bump go from 1.19 to 1.20 by @mhutchinson in https://github.com/google/trillian/pull/3080
* Bump golang.org/x/sys from 0.11.0 to 0.12.0 by @dependabot in https://github.com/google/trillian/pull/3081
* Bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in https://github.com/google/trillian/pull/3082
* Bump golang.org/x/crypto from 0.12.0 to 0.13.0 by @dependabot in https://github.com/google/trillian/pull/3084
* Bump golang.org/x/tools from 0.12.0 to 0.13.0 by @dependabot in https://github.com/google/trillian/pull/3086
* Bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in https://github.com/google/trillian/pull/3085
* Bump Go version in Docker base images to 1.20.8-bookworm by @roger2hk in https://github.com/google/trillian/pull/3094
* Bump golang from 1.20.8-bookworm to 1.21.1-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3100
* Bump gcr.io/kaniko-project/executor from 1.6.0 to 1.15.0 by @roger2hk in https://github.com/google/trillian/pull/3095
* Bump golang from 1.20.8-bookworm to 1.21.1-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3098
* Bump golang from 1.20.8-bookworm to 1.21.1-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3097
* Bump golang from 1.20.8-bookworm to 1.21.1-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3099
* Bump golang from `d3114db` to `a0b3bc4` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3104
* Bump golang from `d3114db` to `a0b3bc4` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3105
* Bump golang from `d3114db` to `a0b3bc4` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3106
* Bump golang from `d3114db` to `a0b3bc4` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3107
* Bump golang from `e06b3a4` to `114b9cc` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3108
* Bump trillian-opensource-ci/mysql5 from `51cc6df` to `edf7def` in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3110
* Bump golang from `a0b3bc4` to `114b9cc` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3109
* Bump golang from `a0b3bc4` to `114b9cc` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3111
* Bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in https://github.com/google/trillian/pull/3117
* Bump golang from `114b9cc` to `9c7ea4a` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3116
* Bump golang from `114b9cc` to `9c7ea4a` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3114
* Bump golang from `114b9cc` to `9c7ea4a` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3115
* Bump nick-fields/retry from 2.8.3 to 2.9.0 by @dependabot in https://github.com/google/trillian/pull/3119
* Bump trillian-opensource-ci/mysql5 from `edf7def` to `f45c849` in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3120
* Bump golang from `9c7ea4a` to `61f84bc` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3121
* Bump golang from `9c7ea4a` to `61f84bc` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3124
* Bump golang from `9c7ea4a` to `61f84bc` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3122
* Bump alpine from `7144f7b` to `eece025` in /examples/deployment/docker/envsubst by @dependabot in https://github.com/google/trillian/pull/3125
* Bump golang from `9c7ea4a` to `61f84bc` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3123
* Bump ubuntu from `aabed32` to `9b8dec3` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3127
* Bump distroless/base-debian12 from `d64f548` to `cc22d6d` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3128
* Bump distroless/base-debian12 from `d64f548` to `cc22d6d` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3129
* Bump golang from 1.21.1-bookworm to 1.21.2-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3134
* Bump golang from 1.21.1-bookworm to 1.21.2-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3135
* Bump golang from 1.21.1-bookworm to 1.21.2-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3136
* Bump golang from `0bd76fd` to `a44d05d` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3137
* Bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @dependabot in https://github.com/google/trillian/pull/3139
* Bump golang from 1.21.1-bookworm to 1.21.2-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3138
* Bump distroless/base-debian12 from `cc22d6d` to `5be49de` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3141
* Bump distroless/base-debian12 from `cc22d6d` to `5be49de` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3142
* Bump trillian-opensource-ci/mysql5 from `f45c849` to `99d6043` in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3143
* Bump golang from 1.21.2-bookworm to 1.21.3-bookworm in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3147
* Bump golang from 1.21.2-bookworm to 1.21.3-bookworm in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3145
* Bump golang from 1.21.2-bookworm to 1.21.3-bookworm in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3148
* Bump golang from 1.21.2-bookworm to 1.21.3-bookworm in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3144
* Bump go-version-input from 1.20.8 to 1.20.10 in govulncheck by @roger2hk in https://github.com/google/trillian/pull/3151
* Bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in https://github.com/google/trillian/pull/3150
* Bump @slack/webhook from 5.0.4 to 7.0.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3130
* Bump google-auth-library from 9.0.0 to 9.1.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3126
* Bump golang from `efde471` to `5cc7ddc` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3156
* Bump golang from `efde471` to `5cc7ddc` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3155
* Bump golang from `efde471` to `20f9ab5` in /examples/deployment/docker/db_client by @dependabot in https://github.com/google/trillian/pull/3152
* Bump golang from `efde471` to `20f9ab5` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3154
* Bump golang from `5cc7ddc` to `20f9ab5` in /integration/cloudbuild/testbase by @dependabot in https://github.com/google/trillian/pull/3158
* Bump ubuntu from `9b8dec3` to `2b7412e` in /examples/deployment/kubernetes/mysql/image by @dependabot in https://github.com/google/trillian/pull/3157
* Bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in https://github.com/google/trillian/pull/3160
* Bump ossf/scorecard-action from 2.3.0 to 2.3.1 by @dependabot in https://github.com/google/trillian/pull/3164
* Bump google.golang.org/grpc to 1.59.0 fixing CVE-2023-44487 (https://github.com/advisories/GHSA-qppj-fm5r-hxr3) by @cpanato in https://github.com/google/trillian/pull/3166
* Bump distroless/base-debian12 from `5be49de` to `1dfdb5e` in /examples/deployment/docker/log_server by @dependabot in https://github.com/google/trillian/pull/3167
* Bump google-auth-library from 9.1.0 to 9.2.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3168
* Bump distroless/base-debian12 from `5be49de` to `1dfdb5e` in /examples/deployment/docker/log_signer by @dependabot in https://github.com/google/trillian/pull/3169
* Bump trillian-opensource-ci/mysql5 from `99d6043` to `c079e4e` in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3161
* Bump github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible by @dependabot in https://github.com/google/trillian/pull/3170
* Bump trillian-opensource-ci/mysql5 from `c079e4e` to `3f355be` in /examples/deployment/docker/db_server by @dependabot in https://github.com/google/trillian/pull/3171
* Bump @slack/webhook from 7.0.0 to 7.0.1 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3172
* Bump @google-cloud/functions-framework from 1.3.2 to 3.3.0 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/3072

## v1.5.2

* Recommended go version for development: 1.19
  * This is the version used by the cloudbuild presubmits. Using a
    different version can lead to presubmits failing due to unexpected
    diffs.

### Storage

#### CloudSpanner

* Removed use of the `--cloudspanner_write_sessions` flag.
  This was related to preparing some fraction of CloudSpanner sessionpool entries with
  Read/Write transactions, however this functionality is no longer supported by the client
  library.

### Repo config
* Enable all lint checks in trillian repo by @mhutchinson in https://github.com/google/trillian/pull/2979

### Dependency updates

* Bump contrib.go.opencensus.io/exporter/stackdriver from 0.13.12 to 0.13.14 by @samuelattwood in https://github.com/google/trillian/pull/2950
* Bump Go version from 1.17 to 1.19.
* Updated golangci-lint to v1.51.1 (developers should update to this version)
* Update transparency-dev/merkle to v0.0.2

## v1.5.1

### Storage

* A new storage driver for CockroachDB has been added. It's currently in alpha stage 
  with support provided by Equinix Metal.

### Misc

* Fix log server not exiting properly on SIGINT

### Dependency updates

* Switch from glog to klog by @jdolitsky in https://github.com/google/trillian/pull/2787
* Bump google.golang.org/api from 0.92.0 to 0.93.0 by @dependabot in https://github.com/google/trillian/pull/2800
* Bump cloud.google.com/go/spanner from 1.36.0 to 1.37.0 by @dependabot in https://github.com/google/trillian/pull/2803
* Bump google.golang.org/grpc from 1.48.0 to 1.49.0 by @dependabot in https://github.com/google/trillian/pull/2804
* Bump google.golang.org/api from 0.93.0 to 0.94.0 by @dependabot in https://github.com/google/trillian/pull/2802
* Bump cloud.google.com/go/spanner from 1.37.0 to 1.38.0 by @dependabot in https://github.com/google/trillian/pull/2806
* Bump k8s.io/klog/v2 from 2.70.1 to 2.80.0 by @dependabot in https://github.com/google/trillian/pull/2807
* Bump k8s.io/klog/v2 from 2.80.0 to 2.80.1 by @dependabot in https://github.com/google/trillian/pull/2808
* Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in https://github.com/google/trillian/pull/2809
* Bump google.golang.org/api from 0.94.0 to 0.95.0 by @dependabot in https://github.com/google/trillian/pull/2810
* Bump go.etcd.io/etcd/etcdctl/v3 from 3.5.4 to 3.5.5 by @dependabot in https://github.com/google/trillian/pull/2812
* Bump go.etcd.io/etcd/v3 from 3.5.4 to 3.5.5 by @dependabot in https://github.com/google/trillian/pull/2816
* Bump google.golang.org/api from 0.95.0 to 0.96.0 by @dependabot in https://github.com/google/trillian/pull/2813
* Bump google.golang.org/api from 0.96.0 to 0.97.0 by @dependabot in https://github.com/google/trillian/pull/2819
* Bump cloud.google.com/go/spanner from 1.38.0 to 1.39.0 by @dependabot in https://github.com/google/trillian/pull/2818
* Bump google.golang.org/api from 0.97.0 to 0.98.0 by @dependabot in https://github.com/google/trillian/pull/2820
* Bump google.golang.org/grpc from 1.49.0 to 1.50.0 by @dependabot in https://github.com/google/trillian/pull/2821
* Bump google.golang.org/grpc from 1.50.0 to 1.50.1 by @dependabot in https://github.com/google/trillian/pull/2823
* Bump google.golang.org/api from 0.98.0 to 0.99.0 by @dependabot in https://github.com/google/trillian/pull/2822
* Bump google.golang.org/api from 0.99.0 to 0.100.0 by @dependabot in https://github.com/google/trillian/pull/2824
* Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2825
* Bump golang.org/x/tools from 0.1.12 to 0.2.0 by @dependabot in https://github.com/google/trillian/pull/2826
* Bump google.golang.org/api from 0.100.0 to 0.101.0 by @dependabot in https://github.com/google/trillian/pull/2827
* Bump github.com/prometheus/client_golang from 1.13.0 to 1.13.1 by @dependabot in https://github.com/google/trillian/pull/2828
* Bump golang.org/x/sys from 0.1.0 to 0.2.0 by @dependabot in https://github.com/google/trillian/pull/2829
* Bump google.golang.org/api from 0.101.0 to 0.102.0 by @dependabot in https://github.com/google/trillian/pull/2830
* Bump go.opencensus.io from 0.23.0 to 0.24.0 by @dependabot in https://github.com/google/trillian/pull/2832
* Bump cloud.google.com/go/spanner from 1.39.0 to 1.40.0 by @dependabot in https://github.com/google/trillian/pull/2831
* Bump github.com/prometheus/client_golang from 1.13.1 to 1.14.0 by @dependabot in https://github.com/google/trillian/pull/2838
* Bump google.golang.org/api from 0.102.0 to 0.103.0 by @dependabot in https://github.com/google/trillian/pull/2839
* Bump golang.org/x/crypto from 0.1.0 to 0.2.0 by @dependabot in https://github.com/google/trillian/pull/2841
* Bump golang.org/x/tools from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2840
* Dependabot: Also keep GitHub actions up-to-date by @JAORMX in https://github.com/google/trillian/pull/2842
* Bump actions/upload-artifact from 3.1.0 to 3.1.1 by @dependabot in https://github.com/google/trillian/pull/2843
* Bump golang.org/x/crypto from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2847
* Bump google.golang.org/grpc from 1.50.1 to 1.51.0 by @dependabot in https://github.com/google/trillian/pull/2845
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.2.16 to 2.2.18 by @dependabot in https://github.com/google/trillian/pull/2846
* Bump go.etcd.io/etcd/v3 from 3.5.5 to 3.5.6 by @dependabot in https://github.com/google/trillian/pull/2849
* Bump github.com/cockroachdb/cockroach-go/v2 from 2.2.18 to 2.2.19 by @dependabot in https://github.com/google/trillian/pull/2856
* Bump golang.org/x/sys from 0.2.0 to 0.3.0 by @dependabot in https://github.com/google/trillian/pull/2858
* Bump cloud.google.com/go/spanner from 1.40.0 to 1.41.0 by @dependabot in https://github.com/google/trillian/pull/2857
* Bump actions/setup-go from 3.3.1 to 3.4.0 by @dependabot in https://github.com/google/trillian/pull/2862
* Bump github/codeql-action from 2.1.34 to 2.1.35 by @dependabot in https://github.com/google/trillian/pull/2861
* Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 by @dependabot in https://github.com/google/trillian/pull/2860
* Bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.0 by @dependabot in https://github.com/google/trillian/pull/2859
* Bump qs, body-parser and express in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2867
* Bump minimist from 1.2.0 to 1.2.7 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2864
* Bump axios and @slack/webhook in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2868
* Bump json-bigint and google-auth-library in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2869
* Bump node-fetch from 2.6.0 to 2.6.7 in /scripts/gcb2slack by @dependabot in https://github.com/google/trillian/pull/2866
* Bump golang.org/x/tools from 0.3.0 to 0.4.0 by @dependabot in https://github.com/google/trillian/pull/2870
* Bump github/codeql-action from 2.1.35 to 2.1.36 by @dependabot in https://github.com/google/trillian/pull/2874
* Bump actions/checkout from 3.1.0 to 3.2.0 by @dependabot in https://github.com/google/trillian/pull/2873
* Bump golang.org/x/crypto from 0.3.0 to 0.4.0 by @dependabot in https://github.com/google/trillian/pull/2872
* Bump google.golang.org/api from 0.103.0 to 0.104.0 by @dependabot in https://github.com/google/trillian/pull/2871
* Bump cloud.google.com/go/spanner from 1.41.0 to 1.42.0 by @dependabot in https://github.com/google/trillian/pull/2877


## v.1.5.0

### Storage

* Ephemeral nodes are no-longer written for any tree by default (and have not been read since the v1.4.0 release), the corresponding `--tree_ids_with_no_ephemeral_nodes` flag is now deprecated (and will be removed in a future release).
  
### Cleanup
* Format code according to go1.19rc2 by @mhutchinson in https://github.com/google/trillian/pull/2785
* Delete merkle package, use [github.com/transparency-dev/merkle](https://pkg.go.dev/github.com/transparency-dev/merkle) instead.

### Misc
* Fix order-dependent test by @hickford in https://github.com/google/trillian/pull/2792

### Dependency updates
* Updated golangci-lint to v1.47.3 (developers should update to this version) by @mhutchinson in https://github.com/google/trillian/pull/2791
* Bump google.golang.org/api from 0.87.0 to 0.88.0 by @dependabot in https://github.com/google/trillian/pull/2783
* Bump cloud.google.com/go/spanner from 1.35.0 to 1.36.0 by @dependabot in https://github.com/google/trillian/pull/2784
* Bump google.golang.org/api from 0.88.0 to 0.90.0 by @dependabot in https://github.com/google/trillian/pull/2789
* Bump golang.org/x/tools from 0.1.11 to 0.1.12 by @dependabot in https://github.com/google/trillian/pull/2790
* Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 by @dependabot in https://github.com/google/trillian/pull/2788
* Bump google.golang.org/api from 0.90.0 to 0.91.0 by @dependabot in https://github.com/google/trillian/pull/2796
* Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 by @dependabot in https://github.com/google/trillian/pull/2795
* Bump github.com/fullstorydev/grpcurl from 1.8.6 to 1.8.7 by @dependabot in https://github.com/google/trillian/pull/2794
* Bump google.golang.org/api from 0.91.0 to 0.92.0 by @dependabot in https://github.com/google/trillian/pull/2798

## v1.4.2

* #2568: Allow disabling the writes of ephemeral nodes to storage via the
  `--tree_ids_with_no_ephemeral_nodes` flag to the sequencer.
* #2748: `--cloudspanner_max_burst_sessions` deprecated (it hasn't had any
  effect for a while, now it's more explicit)
* #2768: update go.mod to use 1.17 compatibility from 1.13.

### Dependency updates

* Updated golangci-lint to v1.46.1 (developers should update to this version)
* Removed dependency on certificate-transparency-go

### Developer updates

* #2765 copies the required protos from `googleapis` into `third_party` in this
  repository. This simplifies the preconditions in order to compile the proto
  definitions, and removes a big dependency on `$GOPATH/src` which was archaic;
  `$GOPATH/src/github.com/googleapis/googleapis` is no longer required.

## v1.4.1

* `countFromInformationSchema` function to add support for MySQL 8.

### Removals

 * #2710: Unused `storage/tools/dumplib` was removed. The useful storage format
  regression test moved to `integration/format`.
 * #2711: Unused `storage/tools/hasher` removed.
 * #2715: Packages under `merkle` are deprecated and to be removed. Use
   https://github.com/transparency-dev/merkle instead.

### Misc improvements

 * #2712: Fix MySQL world-writable config warning.
 * #2726: Check the tile height invariant stricter. No changes required.

### Dependency updates
 * #2731: Update `protoc` from `v3.12.4` to `v3.20.1`

## v1.4.0

* Recommended go version for development: 1.17
  * This is the version used by the cloudbuild presubmits. Using a
    different version can lead to presubmits failing due to unexpected
    diffs.
* GCP terraform script updated. GKE 1.19 and updated CPU type to E2

### Dependency updates
Many dep updates, including:
 * Upgraded to etcd v3 in order to allow grpc to be upgraded (#2195)
   * etcd was `v0.5.0-alpha.5`, now `v3.5.0`
 * grpc upgraded from `v1.29.1` to `v1.40.0`
 * certificate-transparency-go from `v1.0.21` to
   `v1.1.2-0.20210512142713-bed466244fa6`
 * protobuf upgraded from `v1` to `v2`
 * MySQL driver from `1.5.0` to `1.6.0`

### Cleanup
 * **Removed signatures from LogRoot and EntryTimestamps returned by RPCs** (reflecting that
   there should not be a trust boundary between Trillian and the personality.)
 * Removed the deprecated crypto.NewSHA256Signer function.
 * Finish removing the `LogMetadata.GetUnsequencedCounts()` method.
 * Removed the following APIs:
   - `TrillianLog.GetLeavesByHash`
   - `TrillianLog.GetLeavesByIndex`
   - `TrillianLog.QueueLeaves`
 * Removed the incomplete Postgres storage backend (#1298).
 * Deprecated `LogRootV1.Revision` field.
 * Moved `rfc6962` hasher one directory up to eliminate empty leftover package.
 * Removed unused `log_client` tool.
 * Various tidyups and improvements to merke & proof generation code.
 * Remove some remnants of experimental map.

### Storage refactoring
 * `NodeReader.GetMerkleNodes` does not accept revisions anymore. The
   implementations must use the transaction's `ReadRevision` instead.
 * `TreeStorage` migrated to using `compact.NodeID` type suitable for logs.
 * Removed the tree storage `ReadRevision` and `WriteRevision` methods.
   Revisions are now an implementation detail of the current storages. The
   change allows log implementations which don't need revisions.
 * Removed `Rollback` methods from storage interfaces, as `Close` is enough to
   cover the use-case.
 * Removed the unused `IsOpen` and `IsClosed` methods from transaction
   interfaces.
 * Removed the `ReadOnlyLogTX` interface, and put its only used
   `GetActiveLogIDs` method to `LogStorage`.
 * Inlined the `LogMetadata` interface to `ReadOnlyLogStorage`.
 * Inlined the `TreeStorage` interfaces to `LogStorage`.
 * Removed the need for the storage layer to return ephemeral node hashes. The
   application layer always requests for complete subtree nodes comprising the
   compact ranges corresponding to the requests.
 * Removed the single-tile callback from `SubtreeCache`, it uses only
   `GetSubtreesFunc` now.
 * Removed `SetSubtreesFunc` callback from `SubtreeCache`. The tiles should be
   written by the caller now, i.e. the caller must invoke the callback.

## v1.3.13
[Published 2021-02-16](https://github.com/google/trillian/releases/tag/v1.3.13)

### Cleanup
 * Removed the experimental map API.

## v1.3.12
[Published 2021-02-16](https://github.com/google/trillian/releases/tag/v1.3.12)

### Misc improvements

 * Removed unused `PeekTokens` method from the `quota.Manager` interface.
 * Ensure goroutines never block in the subtree cache (#2272).
 * Breaking unnecessary dependencies for Trillian clients:
   * Moved verifiers from `merkle` into `merkle/{log,map}verifier`sub-pacakges,
     reducing the amount of extra baggage inadvertently pulled in by clients.
  * Concrete hashers have been moved into subpackages, separating them from their
    registration code, allowing clients to directly pull just the hasher they're
    interested in and avoid the Trillian/hasher registry+protobuf deps.
 * Moved some packages intended for internal-only use into `internal` packages:
   * InMemoryMerkleTree (indended to only be used by Trillian tests)
 * Removed wrapper for etcd client (#2288).
 * Moved `--quota_system` and `--storage_system` flags to `main.go` so that they
   are initialised properly. It might break depending builds relying on these
   flags. Suggested fix: add the flags to `main.go`.
 * Made signer tolerate mastership election failures [#1150].
 * `testdb` no longer accepts the `--test_mysql_uri` flag, and instead honours the
   `TEST_MYSQL_URI` ENV var. This makes it easier to blanket configure tests to use a
   specific test DB instance.
 * Removed experimental Skylog folder (#2297).
 * Fixed a race condition in the operation manager that should only affect tests
   (#2302).
 * Run gofumpt formatter on the whole repository (#2315).
 * Refactor signer operation loop (#2294).

### Upgrades
 * Dockerfiles are now based on Go 1.13 image.
 * The etcd is now pinned to v3.4.12.
 * The golangci-lint suite is now at v1.36.0.
 * CI/CD has migrated from Travis to Google Cloud Build.
 * prometheus from 1.7.1 to 1.9.0 (#2239, #2270).
 * go-cmp from 0.5.2 to 0.5.4 (#2262).
 * apache/beam from 2.26.0+incompatible to 2.27.0+incompatible (#2273).
 * lib/pq from 1.8.0 to 1.9.0 (#2264).
 * go-redis from 6.15.8+incompatible to 6.15.9+incompatible (#2215).


### Process
 * Recognise that we do not follow strict semantic versioning practices.

## v1.3.11
[Published 2020-10-06](https://github.com/google/trillian/releases/tag/v1.3.11)

### Documentation

Added docs which describe the Claimant Model of transparency, a useful
framework for reasoning about the design and architecture of transparent
systems.

### Misc improvements

 * Fixed int to string conversion warnings for golang 1.15
 * Metric improvements for fetched leaf counts
 * Move tools.go into its own directory to help with dependencies

### Dependency updates
 * go-grpc-middleware from 1.2.0 to 1.2.2 (#2219, #2229)
 * stackdriver from 0.13.2 to 0.13.4 (#2220, #2223)
 * Google api from 0.28.0 to 0.29.0 (#2193)


## v1.3.10
[Published 2020-07-02](https://github.com/google/trillian/releases/tag/v1.3.10)

### Storage

The StorageProvider type and helpers have been moved from the server package to
storage. Aliases for the old types/functions are created for backward
compatibility, but the new code should not use them as we will remove them with
the next major version bump. The individual storage providers have been moved to
the corresponding packages, and are now required to be imported explicitly by
the main file in order to be registered. We are including only MySQL and
cloudspanner providers by default, since these are the ones that we support.

The cloudspanner storage is supported for logs only, while the Map storage API
is being polished and decoupled from the log storage API. We may return the
support when the new API is tested.

Support for storage of Ed25519 signatures has been added to the mysql and
postgres storage drivers (only applicable in new installations) and bugs
preventing correct usage of that algorithm have been fixed.

#### Storage TX Interfaces
- `QueueLeaves` has been removed from the `LogTreeTX` interface because
  `QueueLeaves` is not transactional.  All callers use the
  `QueueLeaves` function in the `LogStorage` interface.
- `AddSequencedLeaves` has been removed from the `LogTreeTX`.


### Log Changes

#### Monitoring & Metrics

The `queued_leaves` metric is removed, and replaced by `added_leaves` which
covers both `QueueLeaves` and `AddSequencedLeaves`, and is labeled by log ID.

#### MySQL Dequeueing Change #2159
mysql will now remove leaves from the queue inside of `UpdateLeaves` rather
than directly inside of `Dequeue`.
This change brings the behavior of the mysql storage implementation into line
with the spanner implementation and makes consistent testing possible.


### Map Changes

**The verifiable map is still experimental.**
APIs, such as SetLeaves, have been deprecated and will be deleted in the near
future. The semantics of WriteLeaves have become stricter: now it always
requires the caller to specify the write revision. These changes will not
affect the Trillian module semantic version due to the experimental status of
the Map.

Map API has been extended with Layout, GetTiles and SetTiles calls which allow
for more direct processing of sparse Merkle tree tiles in the application layer.
Map storage implementations are simpler, and no longer use the SubtreeCache.

The map client has been updated so that GetAndVerifyMapLeaves and
GetAndVerifyMapLeavesByRevision return the MapRoot for the revision at which the
leaves were fetched. Without this callers of GetAndVerifyMapLeaves in particular
were unable to reason about which map revision they were seeing. The
SetAndVerifyMapLeaves method was deleted.



## v1.3.9
[Published 2020-06-22](https://github.com/google/trillian/releases/tag/v1.3.9)

### Selected Dependency Updates
* etcd from v3.3.18 to 3.4.7 (#2090)
* etcd-operator from v0.9.1 to v0.9.4
* upgraded protoc version to latest (#2088)
* github.com/golang/protobuf to v1.4.1 (#2111)
* google.golang.org/grpc from v1.26 to 1.29.1 (#2108)


## v1.3.8
[Published 2020-05-12](https://github.com/google/trillian/releases/tag/v1.3.8)

### HTTP APIs

The HTTP/JSON APIs have been removed in favor of a pure gRPC intereface.
[grpcurl](https://github.com/fullstorydev/grpcurl) is the recommended way
of interacting with the gRPC API from the commandline.


## v1.3.7
[Published 2020-05-12](https://github.com/google/trillian/releases/tag/v1.3.7)

### Server Binaries

The `trillian_log_server`, `trillian_log_signer` and `trillian_map_server`
binaries have moved from `github.com/google/trillian/server/` to
`github.com/google/trillian/cmd`. A subset of the `server` package has also
moved and has been split into `cmd/internal/serverutil`, `quota/etcd` and
`quota/mysqlqm` packages.


## v1.3.6
[Published 2020-05-12](https://github.com/google/trillian/releases/tag/v1.3.6)

### Deployments

The Kubernetes configs will now provision 5 nodes for Trillian's Etcd cluster,
instead of 3 nodes.
[This makes the Etcd cluster more resilient](https://etcd.io/docs/v3.2.17/faq/#what-is-failure-tolerance)
to nodes becoming temporarily unavailable, such as during updates (it can now
tolerate 2 nodes being unavailable, instead of just 1).

### Monitoring & Metrics

A count of the total number of individual leaves the logserver attempts to
fetch via the GetEntries.* API methods has been added.


## v1.3.5
[Published 2020-05-12](https://github.com/google/trillian/releases/tag/v1.3.5)

### Log Changes

#### Potential sequencer hang fixed
A potential deadlock condition in the log sequencer when the process is
attempting to exit has been addressed.

### Quota

#### New Features

An experimental Redis-based `quota.Manager` implementation has been added.

#### Behaviour Changes

Quota used to be refunded for all failed requests. For uses of quota that were
to protect against abuse or fair utilization, this could allow infinite QPS in
situations that really should have the requests throttled. Refunds are now only
performed for tokens in `Global` buckets, which prevents tokens being leaked if
duplicate leaves are queued.

### Tools

The `licenses` tool has been moved from "scripts/licenses" to [a dedicated
repository](https://github.com/google/go-licenses).

### Bazel Changes

Python support is disabled unless we hear that the community cares about this
being re-enabled. This was broken by a downstream change and without a signal
from the Trillian community to say this is needed, the pragmatic action is to
not spend time investigating this issue.


## v1.3.4 - Invalid release, do not use.
[Published 2020-05-12](https://github.com/google/trillian/releases/tag/v1.3.4)


## v1.3.3 - Module fixes

Published 2019-10-31 17:30:00 +0000 UTC

Patch release to address Go Module issue. Removes `replace` directives in our
go.mod file now that our dependencies have fixed their invalid pseudo-version
issues.

## v1.3.2 - Module fixes

Published 2019-09-05 17:30:00 +0000 UTC

Patch release to address Go Module issue. Some dependencies use invalid pseudo-
versions in their go.mod files that Go 1.13 rejects. We've added `replace`
directives to our go.mod file to fix these invalid pseudo-versions.

## v1.3.1 - Module and Bazel fixes

Published 2019-08-16 15:00:00 +0000 UTC

Patch release primarily to address Go Module issue. v1.3.0 declared a dependency
on github.com/russross/blackfriday/v2 v2.0.1+incompatible which made downstream
dependencies suffer.

## v1.3.0

Published 2019-07-17 15:00:00 +0000 UTC

### Storage APIs GetSignedLogRoot / SetSignedLogRoot now take pointers

This at the storage layer and does not affect the log server API.
This is part of work to fix proto buffer usages where they are passed
by value or compared by generic code like `reflect.DeepEquals()`. Passing
them by value creates shallow copies that can share internal state. As the
generated structs contain additional exported `XXX_` fields generic
comparisons using all fields can produce incorrect results.

### Storage Commit takes context.Context

To support passing a context down to `NodeStorage.SetLeaves`, and remove various `context.TODO()`s,
the following functions have been modified to accept a `context.Context` parameter:

- `storage/cache.NodeStorage.SetLeaves`
- `storage/cache.SetSubtreesFunc`
- `storage/cache.SubtreeCache.Flush`
- `storage.ReadonlyLogTX.Commit`

### Go Module Support

Go Module support has been enabled. Please use GO111MODULE=on to build Trillian.
Updating dependencies no longer requires updating the vendor directory.

### TrillianMapWrite API
New API service for writing to the Trillian Map. This allows APIs such as
GetLeavesByRevisionNoProof to be removed from the read API, and these methods to
be tuned & provisioned differently for read vs write performance.

### GetLeavesByRevisionNoProof API
Allow map clients to forgo fetching inclusion proofs.
This dramatically speeds things up for clients that don't need verifiability.
This situation occurs in some situation where a Trillian personality is
interacting directly with the Trillian Map.

### GetMapLeafByRevision API
New GetMapLeafByRevision API for fetching a single map leaf. This allows there
to be a separate API end point for fetching a single leaf vs. the batch
GetMapLeavesByRevision API which is much slower when many leaves are requested.
This supports separate monitoring and alerting for different traffic patterns.

### Add Profiling Flags to Binaries

The `trillian_log_server`, `trillian_log_signer` and `trillian_map_server`
binaries now have CPU and heap profiling flags. Profiling is off by default.
For more details see the
[Go Blog](https://blog.golang.org/profiling-go-programs).
### Map performance tweaks

The map mode has had some performance tweaks added:
* A workaround for locking issues which affect the map when it's used in
  single-transaction mode.

### Introduce BatchInclusionProof function

Added a batch version of the Merkle Tree InclusionProof function.

Updated the map RPC for getLeaves to use the new batch function to improve
efficiency.

### Google Cloud Spanner support

Google Cloud Spanner is now a supported storage backend for maps.

The admin API calls to list trees backed by Cloud Spanner trees are fixed.

### RPC Server Transaction Leaks Fixed

There were some cases where the Log RPC server could leak storage transactions
in error situations. These have now been fixed. If you have a custom storage
implementation review the fixes made to the MySQL Log storage to see if they
need to be applied to your code (`storage/mysql/log_storage.go`). The Map
server had similar issues but these were fixed without requiring changes to
storage code.

### GetLatestSignedLogRoot With Consistency Proof

`GetLatestSignedLogRoot` in the LogServer will return a consistency proof if
`first_tree_size` > 0. This reduces the number of RPC calls from logClient from
2 to 1 in `client.getAndVerifyLatestRoot`.

### Testing

Support has been added for testing against a locally running mysql docker image,
in addition to a locally running mysql instance.

### Deprecated Fields Removed From SignedLogRoot Proto

*Important Note*: For use in Certificate Transparency this version of the
logserver binary won't work properly with an older CTFE. Make sure to update the
CTFE servers to a current version (built from a git checkout after March 20th
2019) before deploying logservers that include this change or deploy them
together with this release. Failure to do this can result in 5XX errors being
returned to clients when the old handler code tries to access fields in
responses that no longer exist.

All the fields marked as deprecated in this proto have been removed. All the
same fields are available via the TLS marshalled log root in the proto. Updating
affected code is straightforward.

Normally, clients will want to verify that the signed root is correctly signed.
This is the preferred way to interact with the root data.

There is a utility function provided that will verify the signature and unpack
the TLS data. It works well in conjunction with a `LogVerifier`. The public key
of the server is required.

```go
verifier := client.NewLogVerifier(rfc6962.DefaultHasher, pk, crypto.SHA256)
root, err := crypto.VerifySignedLogRoot(verifier.PubKey, verifier.SigHash, resp.SignedLogRoot)
if err != nil {
  // Signature verified and unmarshalled correctly. The struct may now
  // be used.
  if root.TreeSize > 0 {
    // Non empty tree.
  }
}
```

### MySQL changes

#### Configurable number of connections for MySQL

Two new flags have been added that limit connections to MySQL database servers:

-   `--mysql_max_conns` - limits the total number of database connections
-   `--mysql_max_idle_conns` - limits the number of idle database connections

By default, there is no maximum number of database connections. However, the
database server will likely impose limits on the number of connections. The
default limit on idle connections is controlled by
[Go's `sql` package](https://golang.org/pkg/database/sql/#DB.SetMaxIdleConns).

#### Enfored no concurrent use of MySQL tx

Concurrently using a single MySQL transaction can cause the driver to error
out, so we now attempt to prevent this from happening.

### Removal of length limits for a tree's `display_name` and `description`

Previously, these were restricted to 20 bytes and 200 bytes respectively. These
limits have been removed. However, the underlying storage implementation may
still impose its own limitations.

### Server validation of leaf hashes

The log server now checks that leaf hashes are the correct length and returns
an InvalidArgument error if they are not. Previously, GetLeavesByHash would
simply not return any matching leaves for invalid hashes, and
GetInclusionProofByHash would return a NotFound error.

### Map client

A [MapClient](client/map_client.go) has been added to simplify interacting with
the map server.

### Database Schema

This version includes a change to the MySQL and Postgres database schemas to add
an index on the `SequencedLeafData` table. This improves performance for
inclusion proof queries.

### Deployments

The Trillian Docker images now accept GOFLAGS and GO111MODULE arguments
and set them as environment variables inside the Docker container.

The [db\_server Docker image](examples/deployment/docker/db_server/Dockerfile)
is now based on
[the MySQL 5.7 image from the Google Cloud Marketplace](https://console.cloud.google.com/marketplace/details/google/mysql5),
rather than the [official MySQL 5.7 image](https://hub.docker.com/_/mysql).
This Dockerfile supercedes Dockerfile.db, which has been removed.

There is now a [mysql.cnf file](examples/deployment/docker/db_server/mysql.cnf)
alongside the Dockerfile that makes it easy to build the image with a custom
configuration, e.g. to allow MySQL to use more memory.

The `trillian-log-service` and `trillian-log-signer` Kubernetes services will
now have load balancers configured for them that expose those services outside
of the Kubernetes cluster. This makes it easier to access their APIs. When
deployed on Google Cloud, these will be
[Internal Load Balancers](https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing).
Note that this change **cannot be applied to an existing deployment**; delete
the existing Kubernetes services and redeploy them, otherwise you'll see an
error similar to `The Service "trillian-log-service" is invalid: spec.clusterIP:
Invalid value: "": field is immutable`.

A working [Docker Compose](https://docs.docker.com/compose/) configuration is
now available and can be used to bring up a local Trillian deployment for
testing and experimental purposes:

```shell
docker-compose -f examples/deployment/docker-compose.yml up
```

Docker Compose v3.1 or higher is required.

The Terraform, Kubernetes and Docker configuration files, as well as various
scripts, all now use the same, consistently-named environment variables for
MySQL-related data (e.g. `MYSQL_DATABASE`). The variable names are based on
those for the
[MySQL Docker image](https://hub.docker.com/_/mysql#environment-variables).

Docker images have been upgraded from Go 1.9 to 1.11. They now use ["Distroless"
base images](https://github.com/GoogleContainerTools/distroless).

### Dropped metrics

Quota metrics with specs of the form `users/<user>/read` and
`users/<user>/write` are no longer exported by the Trillian binaries (as they
lead to excessive storage requirements for Trillian metrics).

### Resilience improvements in `log_signer`

#### Add timeout to sequencing loop

Added a timeout to the context in the sequencing loop, with a default of 60s.

#### Fix Operation Loop Hang

Resolved a bug that would hide errors and cause the `OperationLoop` to hang
until process exit if any error occurred.

### Linting toolchain migration

gometalinter has been replaced with golangci-lint for improved performance and
Go module support.

### Compact Merkle tree data structures

`CompactMerkleTree` has been removed from `github.com/google/trillian/merkle`,
and a new package `github.com/google/trillian/merkle/compact` was introduced.  A
new powerful data structure named "compact range" has been added to that
package, and is now used throughout the repository instead of the compact tree.
It is a generalization of the previous structure, as it allows manipulating
arbitrary sub-ranges of leaves rather than only prefixes.

### Storage API changes

The internal storage API is modified so that the ReadOnlyTreeTX.ReadRevision and
TreeWriter.WriteRevision entrypoints take a context.Context parameter and return
an optional error.

The `SubtreeCache.GetNodeHash()` method is no longer exported.

The memory storage provider has been refactored to make it more consistent with
the other storage providers.

The `LogMetadata.GetUnsequencedCounts()` method has been removed.

`NodeReader.GetMerkleNodes` now must return `Node` objects in the same order as
node IDs requested. Storage implementations known to us already adhere to this
requirement.

### Maphammer improvements

The maphammer test tool for the experimental Trillian Map has been enhanced.

### Default values changed for some signer flags

The following flags for the signer have new default values:

-   `--sequencer_interval`: changed from 10 seconds to 100 milliseconds
-   `--batch_size`: changed from 50 to 1000

These changes improve the signer's throughput and latency under typical
conditions.

### Master election refactoring

The `--resign_odds` flag in `logsigner` is removed, in favor of a more generic
`--master_hold_jitter` flag. Operators using this flag are advised to set the
jitter to `master_check_interval * resign_odds * 2` to achieve similar behavior.

The `--master_check_interval` flag is removed from `logsigner`.

`logsigner` switched to using a new master election interface contained in
`util/election2` package. The interfaces in `util/election` are removed.

### `CONIKS_SHA256` hash strategy added

Support has been added for a CONIKS sparse tree hasher with SHA256 as the hash
algorithm. Set a tree's `hash_strategy` to `CONIKS_SHA256` to use it.

### Performance

The performance of `SetLeaves` requests on the Map has been slightly improved.
The performance of `GetConsistencyProof` requests has been improved when using
MySQL.

### Logging

Some warning-level logging has been removed from the sequencer in favour of
returning the same information via the returned error. The caller may still
choose to log this information. This allows storage implementations that retry
transactions to suppress warnings when a transaction initially fails but a retry
succeeds.

Some incorrectly-formatted log messages have been fixed.

### Documentation

[API documentation in Markdown format](docs/api.md) is now available.

### Other

The `TimeSource` type (and other time utils) moved to a separate `util/clock`
package, extended with a new `Timer` interface that allows mocking `time.Timer`.

The `Sequencer.SignRoot()` method has been removed.

## v1.2.1 - Map race fixed. TLS client support. LogClient improvements

Published 2018-08-20 10:31:00 +0000 UTC

### Servers

A race condition was fixed that affected sparse Merkle trees as served by the
map server.

### Utilities / Binaries

The `maphammer` uses a consistent empty check, fixing spurious failures in some
tests.

The `createtree` etc. set of utilities now support TLS via the `-tls-cert-file`
flag. This support is also available as a client module.

### Log Client

`GetAndVerifyInclusionAtIndex` no longer updates the clients root on every
access as this was an unexpected side effect. Clients now have explicit control
of when the root is updated by calling `UpdateRoot`.

A root parameter is now required when log clients are constructed.

The client will now only retry requests that fail with the following errors:

-   Aborted
-   DeadlineExceeded
-   ResourceExhausted
-   Unavailable

There is one exception - it will also retry InitLog/InitMap requests that fail
due to a FailedPrecondition error.

### Other

The Travis build script has been updated for newer versions of MySQL (5.7
through MySQL 8) and will no longer work with 5.6.

Commit
[f3eaa887163bb4d2ea4b4458cb4e7c5c2f346bc6](https://api.github.com/repos/google/trillian/commits/f3eaa887163bb4d2ea4b4458cb4e7c5c2f346bc6)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.2.1)

## v1.2.0 - Signer / Quota fixes. Error mapping fix. K8 improvements

Published 2018-06-25 10:42:52 +0000 UTC

The Log Signer now tries to avoid creating roots older than ones that already
exist. This issue has been seen occurring on a test system. Important note: If
running this code in production allowing clocks to drift out of sync between
nodes can cause other problems including for clustering and database
replication.

The Log Signer now publishes metrics for the logs that it is actively signing.
In a clustered environment responsibility can be expected to move around between
signer instances over time.

The Log API now allows personalities to explicitly list a vector of identifiers
which should be charged for `User` quota. This allows a more nuanced application
of request rate limiting across multiple dimensions. Some fixes have also been
made to quota handling e.g. batch requests were not reserving the appropriate
quota. Consult the corresponding PRs for more details.

For the log RPC server APIs `GetLeavesByIndex` and `GetLeavesByRange` MySQL
storage has been modified to return status codes that match CloudSpanner.
Previously some requests with out of range parameters were receiving 5xx error
status rather than 4xx when errors were mapped to the HTTP space by CTFE.

The Kubernetes deployment scripts continue to evolve and improve.

Commit
[aef10347dba1bd86a0fcb152b47989d0b51ba1fa](https://api.github.com/repos/google/trillian/commits/aef10347dba1bd86a0fcb152b47989d0b51ba1fa)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.2.0)

## v1.1.1 - CloudSpanner / Tracing / Health Checks

Published 2018-05-08 12:55:34 +0000 UTC

More improvements have been made to the CloudSpanner storage code. CloudSpanner
storage has now been tested up to ~3.1 billion log entries.

Explicit health checks have been added to the gRPC Log and Map servers (and the
log signer). The HTTP endpoint must be enabled and the checks will serve on
`/healthz` where a non 200 response means the server is unhealthy. The example
Kubernetes deployment configuration has been updated to include them. Other
improvements have been made to the Kubernetes deployment scripts and docs.

The gRPC Log and Map servers have been instrumented for tracing with
[OpenCensus](https://opencensus.io/). For GCP it just requires the `--tracing`
flag to be added and results will be available in the GCP console under
StackDriver -> Trace.

Commit
[3a68a845f0febdd36937c15f1d97a3a0f9509440](https://api.github.com/repos/google/trillian/commits/3a68a845f0febdd36937c15f1d97a3a0f9509440)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.1.1)

## v1.1.0 - CloudSpanner Improvements & Log Root structure changes etc.

Published 2018-04-17 08:02:50 +0000 UTC

Changes are in progress (e.g. see #1037) to rework the internal signed root
format used by the log RPC server to be more useful / interoperable. Currently
they are mostly internal API changes to the log and map servers. However, the
`signature` and `log_id` fields in SignedLogRoot have been deleted and users
must unpack the serialized structure to access these now. This change is not
backwards compatible.

Changes have been made to log server APIs and CT frontends for when a request
hits a server that has an earlier version of the tree than is needed to satisfy
the request. In these cases the log server used to return an error but now
returns an empty proof along with the current STH it has available. This allows
clients to detect these cases and handle them appropriately.

The CloudSpanner schema has changed. If you have a database instance you'll need
to recreate it with the new schema. Performance has been noticeably improved
since the previous release and we have tested it to approx one billion log
entries. Note: This code is still being developed and further changes are
possible.

Support for `sqlite` in unit tests has been removed because of ongoing issues
with flaky tests. These were caused by concurrent accesses to the same database,
which it doesn't support. The use of `sqlite` in production has never been
supported and it should not be used for this.

Commit
[9a5dc6223bab0e1061b66b49757c2418c47b9f29](https://api.github.com/repos/google/trillian/commits/9a5dc6223bab0e1061b66b49757c2418c47b9f29)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.1.0)

## v1.0.8 - Docker Updates / Freezing Logs / CloudSpanner Options

Published 2018-03-08 13:42:11 +0000 UTC

The Docker image files have been updated and the database has been changed to
`MariaDB 10.1`.

A `ReadOnlyStaleness` option has been added to the experimental CloudSpanner
storage. This allows for tuning that might increase performance in some
scenarios by issuing read transactions with the `exact_staleness` option set
rather than `strong_read`. For more details see the
[CloudSpanner TransactionOptions](https://cloud.google.com/spanner/docs/reference/rest/v1/TransactionOptions)
documentation.

The `LogVerifier` interface has been removed from the log client, though the
functionality is still available. It is unlikely that there were implementations
by third-parties.

A new `TreeState DRAINING` has been added for trees with `TreeType LOG`. This is
to support logs being cleanly frozen. A log tree in this state will not accept
new entries via `QueueLeaves` but will continue to integrate any that were
previously queued. When the queue of pending entries has been emptied the tree
can be set to the `FROZEN` state safely. For MySQL storage this requires a
schema update to add `'DRAINING'` to the enum of valid states.

A command line utility `updatetree` has been added to allow tree states to be
changed. This is also to support cleanly freezing logs.

A 'howto' document has been added that explains how to freeze a log tree using
the features added in this release.

Commit
[0e6d950b872d19e42320f4714820f0fe793b9913](https://api.github.com/repos/google/trillian/commits/0e6d950b872d19e42320f4714820f0fe793b9913)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.8)

## v1.0.7 - Storage API Changes, Schema Tweaks

Published 2018-03-01 11:16:32 +0000 UTC

Note: A large number of storage related API changes have been made in this
release. These will probably only affect developers writing their own storage
implementations.

A new tree type `ORDERED_LOG` has been added for upcoming mirror support. This
requires a schema change before it can be used. This change can be made when
convenient and can be deferred until the functionality is available and needed.
The definition of the `TreeType` column enum should be changed to `ENUM('LOG',
'MAP', 'PREORDERED_LOG') NOT NULL`

Some storage interfaces were removed in #977 as they only had one
implementation. We think this won't cause any impact on third parties and are
willing to reconsider this change if it does.

The gRPC Log and Map server APIs have new methods `InitLog` and `InitMap` which
prepare newly created trees for use. Attempting to use trees that have not been
initialized will return the `FAILED_PRECONDITION` error
`storage.ErrTreeNeedsInit`.

The gRPC Log server API has new methods `AddSequencedLeaf` and
`AddSequencedLeaves`. These are intended to support mirroring applications and
are not yet implemented.

Storage APIs have been added such as `ReadWriteTransaction` which allows the
underlying storage to manage the transaction and optionally retry until success
or timeout. This is a more natural fit for some types of storage API such as
[CloudSpanner](https://cloud.google.com/spanner/docs/transactions) and possibly
other environments with managed transactions.

The older `BeginXXX` methods were removed from the APIs. It should be fairly
easy to convert a custom storage implementation to the new API format as can be
seen from the changes made to the MySQL storage.

The `GetOpts` options are no longer used by storage. This fixed the strange
situation of storage code having to pass manufactured dummy instances to
`GetTree`, which was being called in all the layers involved in request
processing. Various internal APIs were modified to take a `*trillian.Tree`
instead of an `int64`.

A new storage implementation has been added for CloudSpanner. This is currently
experimental and does not yet support Map trees. We have also added Docker
examples for running Trillian in Google Cloud with CloudSpanner.

The maximum size of a `VARBINARY` column in MySQL is too small to properly
support Map storage. The type has been changed in the schema to `MEDIUMBLOB`.
This can be done in place with an `ALTER TABLE` command but this could very be
slow for large databases as it is a change to the physical row layout. Note:
There is no need to make this change to the database if you are only using it
for Log storage e.g. for Certificate Transparency servers.

The obsolete programs `queue_leaves` and `fetch_leaves` have been deleted.

Commit
[7d73671537ca2a4745dc94da3dc93d32d7ce91f1](https://api.github.com/repos/google/trillian/commits/7d73671537ca2a4745dc94da3dc93d32d7ce91f1)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.7)

## v1.0.6 - GetLeavesByRange. 403 Permission Errors. Signer Metrics.

Published 2018-02-05 16:00:26 +0000 UTC

A new log server RPC API has been added to get leaves in a range. This is a more
natural fit for CT type applications as it more closely follows the CT HTTP API.

The server now returns 403 for permission denied where it used to return 500
errors. This follows the behaviour of the C++ implementation.

The log signer binary now reports metrics for the number it has signed and the
number of errors that have occurred. This is intended to give more insight into
the state of the queue and integration processing.

Commit
[b20b3109af7b68227c83c5d930271eaa4f0be771](https://api.github.com/repos/google/trillian/commits/b20b3109af7b68227c83c5d930271eaa4f0be771)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.6)

## v1.0.5 - TLS, Merge Delay Metrics, Easier Admin Tests

Published 2018-02-07 09:41:08 +0000 UTC

The API protos have been rebuilt with gRPC 1.3.

Timestamps have been added to the log leaves in the MySQL database. Before
upgrading to this version you **must** make the following schema changes:

*   Add the following column to the `LeafData` table. If you have existing data
    in the queue you might have to remove the NOT NULL clause:
    `QueueTimestampNanos BIGINT NOT NULL`

*   Add the following column to the `SequencedLeafData` table:
    `IntegrateTimestampNanos BIGINT NOT NULL`

The above timestamps are used to export metrics via monitoring that give the
merge delay for each tree that is in use. This is a good metric to use for
alerting on.

The Log and Map RPC servers now support TLS.

AdminServer tests have been improved.

Commit
[dec673baf984c3d22d7b314011d809258ec36821](https://api.github.com/repos/google/trillian/commits/dec673baf984c3d22d7b314011d809258ec36821)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.5)

## v1.0.4 - Fix election issue. Large vendor updates.

Published 2018-02-05 15:42:25 +0000 UTC

An issue has been fixed where the master for a log could resign from the
election while it was in the process of integrating a batch of leaves. We do not
believe this could cause any issues with data integrity because of the versioned
tree storage.

This release includes a large number of vendor commits merged to catch up with
etcd 3.2.10 and gRPC v1.3.

Commit
[1713865ecca0dc8f7b4a8ed830a48ae250fd943b](https://api.github.com/repos/google/trillian/commits/1713865ecca0dc8f7b4a8ed830a48ae250fd943b)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.4)

## v1.0.3 - Auth API. Interceptor fixes. Request validation + More

Published 2018-02-05 15:33:08 +0000 UTC

An authorization API has been added to the interceptors. This is intended for
future development and integration.

Issues where the interceptor would not time out on `PutTokens` have been fixed.
This should make the quota system more robust.

A bug has been fixed where the interceptor did not pass the context deadline
through to other requests it made. This would cause some failing requests to do
so after longer than the deadline with a misleading reason in the log. It did
not cause request failures if they would otherwise succeed.

Metalinter has been added and the code has been cleaned up where appropriate.

Docker and Kubernetes scripts have been available and images are now built with
Go 1.9.

Sqlite has been introduced for unit tests where possible. Note that it is not
multi threaded and cannot support all our testing scenarios. We still require
MySQL for integration tests. Please note that Sqlite **must not** be used for
production deployments as RPC servers are multi threaded database clients.

The Log RPC server now applies tighter validation to request parameters than
before. It's possible that some requests will be rejected. This should not
affect valid requests.

The admin server will only create trees for the log type it is hosted in. For
example the admin server running in the Log server will not create Map trees.
This may be reviewed in future as applications can legitimately use both tree
types.

Commit
[9d08b330ab4270a8e984072076c0b3e84eb4601b](https://api.github.com/repos/google/trillian/commits/9d08b330ab4270a8e984072076c0b3e84eb4601b)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.3)

## v1.0.2 - TreeGC, Go 1.9, Update Private Keys.

Published 2018-02-05 15:18:40 +0000 UTC

Go 1.9 is required.

It is now possible to update private keys via the admin API and this was added
to the available field masks. The key storage format has not changed so we
believe this change is transparent.

Deleted trees are now garbage collected after an interval. This hard deletes
them and they cannot be recovered. Be aware of this before upgrading if you have
any that are in a soft deleted state.

The Admin RPC API has been extended to allow trees to be undeleted - up to the
point where they are hard deleted as set out above.

Commit
[442511ad82108654033c9daa4e72f8a79691dd32](https://api.github.com/repos/google/trillian/commits/442511ad82108654033c9daa4e72f8a79691dd32)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.2)

## v1.0.1 - Batched Queue Option Added

Published 2018-02-05 14:49:33 +0000 UTC

Apart from fixes this release includes the option for a batched queue. This has
been reported to allow faster sequencing but is not enabled by default.

If you want to switch to this you must build the code with the `--tags
batched_queue` option. You must then also apply a schema change if you are
running with a previous version of the database. Add the following column to the
`Unsequenced` table:

`QueueID VARBINARY(32) DEFAULT NULL`

If you don't plan to switch to the `batched_queue` mode then you don't need to
make the above change.

Commit
[afd178f85c963f56ad2ae7d4721d139b1d6050b4](https://api.github.com/repos/google/trillian/commits/afd178f85c963f56ad2ae7d4721d139b1d6050b4)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0.1)

## v1.0 - First Log version we believe was ready for use. To support CT.

Published 2018-02-05 13:51:55 +0000 UTC

Quota metrics published. Quota admin api + server implemented. Improvements to
local / AWS deployment. Map fixes and further development. ECDSA key handling
improvements. Key factory improvements. Code coverage added. Quota integration
test added. Etcd quota support in log and map connected up. Incompatibility with
C++ code fixed where consistency proof requests for first == second == 0 were
rejected.

Commit
[a6546d092307f6e0d396068066033b434203824d](https://api.github.com/repos/google/trillian/commits/a6546d092307f6e0d396068066033b434203824d)
Download [zip](https://api.github.com/repos/google/trillian/zipball/v1.0)