Dist::Zilla::Plugin::SignReleaseNotes is a perl module to automatically create and gpg sign release notes as part of a Dist::Zilla release flow.

The release notes include all of the commits between the most recent tags in your git repository. It assumes that your Dist::Zilla flow is tagging the repo as part of the release process.

The produced Release-{version} file is created in the root of the module directory and includes the sha-256 hash of the file that is released to CPAN.

The use case is to simplify creating release notes on github and similar and to have a developer certified (via a gpg signature) sha256 hash of the file as it was uploaded to cpan. There has been more attention being paid to ensuring the authenticity of releases and this module is my way of helping that (but mostly simplifying my release process).

The following is a sample of the release notes created:

`
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Dist::Zilla::Plugin::SignReleaseNotes

Release 0.0006

Change Log

• 1e5d7ed v0.0006
• dd458e2 Update version
• 3249fd6 Fix typo in sample

SHA256 hash of CPAN release

0266e366e2c975adc03a4de9109d80cb9aac8fc897419e8f3a72d54c60fb3a0b *Dist-Zilla-Plugin-SignReleaseNotes-0.0006.tar.gz

-----BEGIN PGP SIGNATURE-----
iQIzBAEBAwAdFiEEMguXHBCUSzAt6mNu1fh7LgYGpfkFAmH/6XAACgkQ1fh7LgYG
pflnUA/+LzT9YMkjNebM3TP2SAAxl4tYbOi/WvE8ipOLq1LLnIihjEvRL+ajtfGP
F75MwkjZvy8FpDZXYUKt5JQykT9aqvB9zVb2IoqOCcUOp3OZKefMZbHQzDfckaSC
H7O65bAXWM6AVCmXr6OmHegvbODi92DAB7YPDoWEVl5OT29hIhmBeK3QwFi/cnJo
7k/le8AcarxXCnRMNMs8Tr9yCYjHyExMyhEPkk6TzHVyFerFV12S57X2yKR5gk/H
XO1r+K3vCow68Q3TcxRcM1K7eJ0pr+gdulvZImy+12OhVddTkeZ3UEDIjSdRI4Av
hFT8PahaINgif0KAMJovwlwolX3T06cHMTgo4CdQPm/wCgYaU5twAUKv+KesgakR
8KKESMqO8EJBm7ig2WIBqUS2NZEel7Q4DEqlG6qQKh4WDiNs+IgyEfxssuh5CKAq
Edat5YN4reQxrLDNNkrzdHGKemM6PEb4GZeK9o9ougQv3rwV+D8XZuz3bO8HlurN
cIpby/5kZXveAypOf34p98612YmjN800t3UDeeNsvzM9eqolDPycfCljHEB4Vp3I
y35xT3+tnbn0I3TFZfz/O7AZh4/0ELgWeBAK5VltqyXL2BVd3u1DcP4m4DtYVxhy
G2uKvRgZI3PfbtrDUQj3VGG5Vb8wj3L9PNKghhLmm3hR3gV8m9o=
=UGb3
-----END PGP SIGNATURE-----
`