transparency-exchange-api revision history

docs: use example.com for example API hostslatestno API changesDocs a31ee8c2026-09-30 08:49
Merge pull request #381 from relizaio/2026-09-auth-normative-optionalno API changesDocs faee30e2026-09-24 14:23
docs: make authentication optional, with requirements only for servers that use itno API changesDocs 70653a92026-09-24 14:15
Fix artifact version incrementation textno API changesDocs 2e6b0f62026-09-24 14:13
docs: align collection revision wording and artifact required fieldsno API changesDocs 79bf47d2026-09-24 11:38
Merge pull request #364 from Mehrn0ush/docs/uuid-unique-per-api-baseno API changesDocs 7e312ce2026-09-23 18:04
docs: state release UUID uniqueness on the API base (#363)no API changesDocs 18f19102026-09-23 16:31
docs: scope UUID uniqueness to the API base (#363)8Docs 4f2b405 2026-09-23 15:44
Change detail
8 changes across 4 operations
- GET/artifact/{uuid}/{artifactVersion}/signature/download
  warning
  the optional response header Content-Encoding removed for the status 200
  warning
  the optional response header Repr-Digest removed for the status 200
  warning
  the optional response header Vary removed for the status 200
- GET/artifact/{uuid}/latest/signature/download
  warning
  the optional response header Content-Encoding removed for the status 200
  warning
  the optional response header Repr-Digest removed for the status 200
  warning
  the optional response header Vary removed for the status 200
- GET/artifact/{uuid}/{artifactVersion}/download
  warning
  the optional response header Content-Encoding removed for the status 200
- GET/artifact/{uuid}/latest/download
  warning
  the optional response header Content-Encoding removed for the status 200
docs: wrap the redirect sentence and name the server on .gz artifacts (#349)no API changesDocs 5dfbed82026-09-23 16:03
docs: separate artifact checksums from HTTP representation validators (#349)no API changesDocs 4e565cc2026-09-23 15:01
Merge pull request #335 from Mehrn0ush/fix/url-change-bumps-revisions14Docs 8eceddf 2026-09-23 14:28
Change detail
14 changes across 7 operations
- GET/component/{uuid}/releases
  info
  api tag TEA Component Release added
  info
  api tag TEA Component removed
- GET/componentRelease/{uuid}/collection/{collectionVersion}
  info
  api tag TEA Collection added
  info
  api tag TEA Component Release removed
- GET/componentRelease/{uuid}/collection/latest
  info
  api tag TEA Collection added
  info
  api tag TEA Component Release removed
- GET/componentRelease/{uuid}/collections
  info
  api tag TEA Collection added
View all changes (14)
docs: increment collection versions by 1 (#330)no API changesDocs d0203bc2026-09-23 14:21
docs: classify vulnerability artifacts as VEX_UPDATED (#330)no API changesDocs 349b41a2026-09-23 14:02
docs: require checksums for external artifact URLs (#330)24Docs 2dec6c3 2026-09-23 13:34
Change detail
24 changes across 11 operations
- GET/componentRelease/{uuid}/collection/{collectionVersion}
  info
  api tag TEA Component Release added
  info
  api tag TEA Collection removed
  info
  the /// response property dependentRequired was added for the status : when url is present, checksums are required
- GET/componentRelease/{uuid}/collection/latest
  info
  api tag TEA Component Release added
  info
  api tag TEA Collection removed
  info
  the /// response property dependentRequired was added for the status : when url is present, checksums are required
- GET/componentRelease/{uuid}/collections
  info
  api tag TEA Component Release added
View all changes (24)
refactor: tag operations by the resource they return16Docs eb95f00 2026-09-22 16:56
Change detail
16 changes across 8 operations
- GET/component/{uuid}/releases
  info
  api tag TEA Component Release added
  info
  api tag TEA Component removed
- GET/componentRelease/{uuid}/collection/{collectionVersion}
  info
  api tag TEA Collection added
  info
  api tag TEA Component Release removed
- GET/componentRelease/{uuid}/collection/latest
  info
  api tag TEA Collection added
  info
  api tag TEA Component Release removed
- GET/componentRelease/{uuid}/collections
  info
  api tag TEA Collection added
View all changes (16)
refactor: tag /product/{uuid}/releases as TEA Product2Docs 0e52d2e 2026-09-22 15:15
Change detail
2 changes across 1 operation
- GET/product/{uuid}/releases
  info
  api tag TEA Product added
  info
  api tag TEA Product Release removed
refactor: group paths, tags and token schemas by resource (#313)no API changesDocs f2642892026-09-22 15:06
Merge pull request #334 from relizaio/2026-09-operationidsno API changesDocs fbc1c462026-09-22 13:20
refactor: harmonise operationIds and add operation summaries (#312)21Docs 23e9d60 2026-09-21 19:25
docs: restore narrow PR/CR UUID rule and clarify collection versions (#329)no API changesDocs 6b021c42026-09-21 19:23
docs: require domain-wide UUID uniqueness except release/collection (#329)no API changesDocs f581e912026-09-21 16:52
docs: use ISO shall wording for UUID reuse rule (#329)no API changesDocs 55a50722026-09-21 16:29
docs: forbid Product/Component Release UUID reuse (#329)no API changesDocs 88a69592026-09-21 16:09
docs: label the Windows distribution as .exe, not MSIno API changesDocs a90aacd2026-09-20 20:03
refactor: make internal component keys consistent (#311)7Docs 9dd33db 2026-09-20 19:59
docs: exempt withdrawn events from the component-wide retention ruleno API changesDocs 16a95512026-09-20 17:46
docs: let release endpoints omit released events for other versionsno API changesDocs 7ce683e2026-09-20 17:13
fix: close example cross-references and align 304 header proseno API changesDocs 8b780fa2026-09-20 15:25
docs: define which CLE events a TEA endpoint returnsno API changesDocs 3836f462026-09-20 12:53
fix: resolve internal inconsistencies in openapi.yaml228Docs 861872d 2026-09-20 12:26
feat: make the "with collection" schemas subtypes of the release schemas942Docs 3547bb2 2026-09-20 11:01
Merge pull request #310 from oej/spdx-identifierno API changesDocs c25bf3f2026-09-20 06:04
Merge pull request #309 from Mehrn0ush/fix/artifact-download-contractno API changesDocs f0f4fe32026-09-20 05:48
Address #309 review: */* bodies, shared 304, drop duplicate ETags.64Docs 3027817 2026-09-18 18:56
Address download-contract review: HEAD, ETag, Vary, and media-type matching.242Docs 76d56ef 2026-09-18 17:02
Complete artifact download contract: negotiation, Content-Location, and 304.210Docs 3db9884 2026-09-18 16:25
Merge pull request #260 from oej/doc-updateno API changesDocs d27f7452026-09-20 05:48
Merge pull request #305 from Mehrn0ush/fix/error-response-coverage1081Docs 15ecf15 2026-09-18 15:39
docs: finish discovery handoff and align 404 wording (#279)no API changesDocs 06dc2d72026-09-18 14:25
docs: clarify discovery cardinality, response shape, and PURL (#279)no API changesDocs ca5720e2026-09-17 19:56
Merge pull request #303 from Mehrn0ush/fix/cle-tea-projection-and-40444Docs b3b44a0 2026-09-18 14:47
docs: publish full CLE as OTHER artifact, not compliance doc72737Docs 44d0165 2026-09-18 14:21
Merge pull request #307 from Mehrn0ush/fix/https-base-url-structure43Docs 7e3efa0 2026-09-18 12:34
fix: tighten http local-test guard and base URL pattern (#288)1Docs 5cf9331 2026-09-18 04:03
fix: tighten TEA API base URLs and TLS identity (#288)737Docs d3dbe0c 2026-09-17 20:16
Merge pull request #306 from Mehrn0ush/fix/release-always-has-collection36Docs 99526fc 2026-09-18 12:34
fix: align collection example and version-1 prose (#286)no API changesDocs f5f03572026-09-18 04:07
fix: require a collection for every release (#286)43Docs 873c5e7 2026-09-17 20:10
fix: require UTC Z timestamps via shared date-time (#266)36Docs 05e3ce7 2026-09-17 19:39
Merge pull request #300 from Mehrn0ush/docs/latest-and-presigned-url-wordingno API changesDocs 53398752026-09-17 15:18

Show older

Change detail

Change detail

Change detail

Change detail

Change detail