chore(release): 1.50.4

Author: Kevin Westphal

CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+<a id='changelog-1.50.4'></a>
+
+## 1.50.4 — 2026-05-07
+
+### Fixed
+
+- `ggshield plugin install --allow-unsigned` and `ggshield plugin update --allow-unsigned` now verify plugin signatures using the embedded / cached sigstore trust root instead of refreshing it over the network, so plugins can still be installed when the sigstore TUF endpoints are unreachable.
+
 <a id='changelog-1.50.3'></a>
 
 ## 1.50.3 — 2026-04-30

actions/secret/action.yml

@@ -16,7 +16,7 @@ inputs:
 
 runs:
   using: 'docker'
-  image: 'docker://gitguardian/ggshield:v1.50.3'
+  image: 'docker://gitguardian/ggshield:v1.50.4'
   entrypoint: '/app/docker/actions-secret-entrypoint.sh'
   args:
     - ${{ inputs.args }}

changelog.d/20260507_6d7a_skip_tuf_update_on_allow_unsigned.md

@@ -1 +1 @@
-__version__ = "1.50.3"
+__version__ = "1.50.4"