chore(deps): Bump the sigstore group with 9 updates #1855
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependabot
bot
added
dependencies
Member
|
@dependabot rebase |
dependabot
bot
force-pushed
the
dependabot/go_modules/sigstore-1a6693d8aa
branch
2 times, most recently
from
7e7d8c4 to
d2e576e
Compare
Member
|
@dependabot rebase |
Bumps the sigstore group with 9 updates: | Package | From | To | | --- | --- | --- | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.5.0` | `2.5.2` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.9.4` | `1.9.5` | | [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) | `0.4.1` | `0.4.3` | | [github.com/sigstore/scaffolding](https://github.com/sigstore/scaffolding) | `0.7.22` | `0.7.24` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `0.7.2` | `1.0.0` | | [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.9.4` | `1.9.5` | | [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.9.4` | `1.9.5` | | [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.9.4` | `1.9.5` | | [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.9.4` | `1.9.5` | Updates `github.com/sigstore/cosign/v2` from 2.5.0 to 2.5.2 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.5.0...v2.5.2) Updates `github.com/sigstore/sigstore` from 1.9.4 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.4...v1.9.5) Updates `github.com/sigstore/protobuf-specs` from 0.4.1 to 0.4.3 - [Release notes](https://github.com/sigstore/protobuf-specs/releases) - [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md) - [Commits](sigstore/protobuf-specs@v0.4.1...v0.4.3) Updates `github.com/sigstore/scaffolding` from 0.7.22 to 0.7.24 - [Release notes](https://github.com/sigstore/scaffolding/releases) - [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md) - [Commits](sigstore/scaffolding@v0.7.22...v0.7.24) Updates `github.com/sigstore/sigstore-go` from 0.7.2 to 1.0.0 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v0.7.2...v1.0.0) Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.9.4 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.4...v1.9.5) Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.9.4 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.4...v1.9.5) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.9.4 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.4...v1.9.5) Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.9.4 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.4...v1.9.5) --- updated-dependencies: - dependency-name: github.com/sigstore/cosign/v2 dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/sigstore dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/protobuf-specs dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/scaffolding dependency-version: 0.7.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: sigstore - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: sigstore ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/go_modules/sigstore-1a6693d8aa
branch
from
d2e576e to
b7af737
Compare
Contributor
Author
|
Superseded by #1859. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the sigstore group with 9 updates:
2.5.02.5.21.9.41.9.50.4.10.4.30.7.220.7.240.7.21.0.01.9.41.9.51.9.41.9.51.9.41.9.51.9.41.9.5Updates
github.com/sigstore/cosign/v2from 2.5.0 to 2.5.2Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
Commits
af5a988Add changelog for v2.5.2 (#4253)2eb0d91chore(deps): bump the gomod group across 1 directory with 11 updates (#4252)dbbe60echore(deps): bump gitlab.com/gitlab-org/api/client-go (#4246)a71cb51chore(deps): bump chainguard-dev/actions in the actions group (#4249)b126109Do not load trusted root when CT env key is set19ef59ddocs: improve doc for --no-upload option (#4206)6839e63Add CHANGELOG for v2.5.1 (#4245)a7345fbAdd Rekor v2 support for trusted-root create (#4242)3df894eAdd baseUrl and Uri to trusted-root create commandfb26ffdupdate builder to use go1.24.4 (#4241)Updates
github.com/sigstore/sigstorefrom 1.9.4 to 1.9.5Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
75efc00build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)32d462fbuild(deps): Bump the all group in /test/e2e with 3 updates (#2091)007cd79build(deps): Bump the all group in /test/e2e with 3 updates (#2074)bbd546bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)540126bbuild(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)0996ba4build(deps): Bump actions/dependency-review-action in the all group (#2085)7eafe24build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)d771343build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)1b0bd69build(deps): Bump the all group with 2 updates (#2078)e2f3b71build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)Updates
github.com/sigstore/protobuf-specsfrom 0.4.1 to 0.4.3Changelog
Sourced from github.com/sigstore/protobuf-specs's changelog.
Commits
eede12fv0.4.3 release (#668)1ab1275Update rekor/v2/*.proto to 0.1.5 (#665)b7e49beSync rekor-tiles protos into protobuf-specs (#661)a259f66Run build checks by default (#663)f490137workflows: Update python versions to currently supported (#662)c5e04c7build(deps): bump prost-build from 0.13.4 to 0.13.5 in /gen/pb-rust (#654)e3f20aebuild(deps): bump distroless/base-debian12 in /protoc-builder (#658)677752eUpdate release-checklist.md and README.md for service builder (#648)9912203Fix the tag on service-builder container (#647)711b4eeRelease container builder from its own tag (#645)Updates
github.com/sigstore/scaffoldingfrom 0.7.22 to 0.7.24Release notes
Sourced from github.com/sigstore/scaffolding's releases.
... (truncated)
Commits
819d566Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.2 (#1611)dfd237fBump go.step.sm/crypto from 0.66.0 to 0.67.0 (#1607)6a51664Bump k8s.io/client-go from 0.33.1 to 0.33.2 (#1610)43334eeBump github.com/hashicorp/go-retryablehttp from 0.7.7 to 0.7.8 (#1608)d29bb27Bump k8s.io/code-generator from 0.33.0 to 0.33.2 (#1613)22ae32fBump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#1614)c11cfa4Bump k8s.io/api from 0.33.1 to 0.33.2 (#1609)e069d09Use service URLs and server name in trusted root (#1606)69aa90dBump github.com/sigstore/sigstore from 1.9.4 to 1.9.5 (#1601)53e96c8Bump github.com/google/certificate-transparency-go from 1.3.1 to 1.3.2 (#1602)Updates
github.com/sigstore/sigstore-gofrom 0.7.2 to 1.0.0Release notes
Sourced from github.com/sigstore/sigstore-go's releases.
Commits
cedac1bUpdate README for 1.0.0 release. (#480)48df3a9Bump the minor-patch group across 2 directories with 3 updates (#479)fed666aBump actions/setup-go from 5.4.0 to 5.5.0 (#478)6392d0eDeprecate and rename VerifyTimestampAuthority/VerifyArtifactTransparencyLog (...b47323bRename and deprecate SignedEntityVerifier in favor of Verifier (#476)d1f9d7fUse repository.Type from go-tuf in tests (#475)94bb81bAdd verification errors to output of VerifyTimestampAuthority (#473)2bb86a1Update theupdateframework/go-tuf to v2.1.0 and copy in unexported repo type f...6207d62Prevent duplicate timestamps from same TSA (#472)8dff965Disable TUF timestamping when TUF cache disabled (#470)Updates
github.com/sigstore/sigstore/pkg/signature/kms/awsfrom 1.9.4 to 1.9.5Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.
Commits
75efc00build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)32d462fbuild(deps): Bump the all group in /test/e2e with 3 updates (#2091)007cd79build(deps): Bump the all group in /test/e2e with 3 updates (#2074)bbd546bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)540126bbuild(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)0996ba4build(deps): Bump actions/dependency-review-action in the all group (#2085)7eafe24build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)d771343build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)1b0bd69build(deps): Bump the all group with 2 updates (#2078)e2f3b71build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)Updates
github.com/sigstore/sigstore/pkg/signature/kms/azurefrom 1.9.4 to 1.9.5Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.
Commits
75efc00build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)32d462fbuild(deps): Bump the all group in /test/e2e with 3 updates (#2091)007cd79build(deps): Bump the all group in /test/e2e with 3 updates (#2074)bbd546bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)540126bbuild(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)0996ba4build(deps): Bump actions/dependency-review-action in the all group (#2085)7eafe24build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)d771343build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)1b0bd69build(deps): Bump the all group with 2 updates (#2078)e2f3b71build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)Updates
github.com/sigstore/sigstore/pkg/signature/kms/gcpfrom 1.9.4 to 1.9.5Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.
Commits
75efc00build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)32d462fbuild(deps): Bump the all group in /test/e2e with 3 updates (#2091)007cd79build(deps): Bump the all group in /test/e2e with 3 updates (#2074)bbd546bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)540126bbuild(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)0996ba4build(deps): Bump actions/dependency-review-action in the all group (#2085)7eafe24build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)d771343build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)1b0bd69build(deps): Bump the all group with 2 updates (#2078)e2f3b71build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)Updates
github.com/sigstore/sigstore/pkg/signature/kms/hashivaultfrom 1.9.4 to 1.9.5Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases.
Commits
75efc00build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)32d462fbuild(deps): Bump the all group in /test/e2e with 3 updates (#2091)007cd79build(deps): Bump the all group in /test/e2e with 3 updates (#2074)bbd546bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)540126bbuild(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)0996ba4build(deps): Bump actions/dependency-review-action in the all group (#2085)7eafe24build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)d771343build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)1b0bd69build(deps): Bump the all group with 2 updates (#2078)e2f3b71build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions