v0.14.0

• Add in-toto attestation to rebuilderd by @joyliu-q during Google Summer of Code
• Add experimental tails support
• Add subcommand to download attestation with rebuildctl
• Dynamically link zstd
• Arch Linux: Detect compression with tree_magic
• Change default cpu and io priority of rebuilderd-worker to idle
• Fix auth cookie discovery for docker-compose
• Bugfixes for the work-in-progress debian setup by @SantiagoTorres
• Update debrebuild flag to --buildresults=
• Convert blocking reqwest client to async

Breaking changes

• The worker keys are automatically regenerated when migrating from 0.13.0 to 0.14.0
• Authenticating by the public key alone is not allowed anymore

Thanks

This work was sponsored by Google, The Linux Foundation, and people like you and me! We'd like to thank @SantiagoTorres and @repi in particular for their support on github sponsors.