We're excited to announce the release of Cocos v0.8.0! This release brings significant improvements to attestation handling, enhanced security features, and better code reusability.

🌟 Highlights

Enhanced Attestation Policy

• Improved CLI attestation policy tools for better developer experience
• Updated attestation policy configurations for both AMD and Intel platforms
• Added reported TCB support to attestation policy for more comprehensive security validation
• SEV version bump ensuring compatibility with the latest security standards

Performance & Security Improvements

• VCEK caching on aTLS verification - significantly improves performance by caching VCEK certificates during attestation TLS verification
• Refactored attestation handling - renamed AttestationResult to AzureAttestationToken for better clarity and consistency

Architecture Enhancements

• Refactored HTTP and gRPC clients for improved reusability with Cube
• Enhanced aTLS and gRPC server architecture - now uses CertificateProvider interface for better abstraction and flexibility
• Updated certificate handling to align with the latest certs library changes

📦 Dependency Updates

Major Updates

• github.com/absmach/supermq: 0.16.0 → 0.18.1
• github.com/absmach/certs: 0.0.0-20250707105817 → 0.18.0
• github.com/docker/docker: 28.3.2 → 28.5.0
• google.golang.org/grpc: 1.74.2 → 1.75.0
• google.golang.org/protobuf: 1.36.6 → 1.36.10
• cloud.google.com/go/storage: 1.55.0 → 1.57.0
• sev (attestation policy): 6.2.1 → 7.0.0

Other Updates

• github.com/golang-jwt/jwt/v5: 5.2.2 → 5.3.0
• github.com/stretchr/testify: 1.10.0 → 1.11.0
• github.com/spf13/cobra: 1.9.1 → 1.10.1
• github.com/spf13/pflag: 1.0.9 → 1.0.10
• github.com/google/go-tpm: 0.9.5 → 0.9.6
• golang.org/x/term: 0.33.0 → 0.35.0

🔧 Technical Improvements

• Downgraded Golang version for HAL to improve compatibility
• Refactored codebase for better maintainability and reusability
• Enhanced attestation policy JSON configurations

👥 Contributors

A huge thank you to everyone who contributed to this release:

• @SammyOina
• @danko-miladinovic
• @jovan-djukic
• @WashingtonKK
• @dependabot[bot]

📝 Full Changelog

For a complete list of changes, see the [full changelog](v0.7.0...v0.8.0)

Ready to upgrade? Check out our documentation for migration guidelines and new feature usage examples.