Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 (#175)
Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.8.3 to 1.8.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/sigstore/releases">github.com/sigstore/sigstore's releases</a>.</em></p> <blockquote> <h2>v1.8.4</h2> <h2>What's Changed</h2> <ul> <li>finish move of reusable-release to sigstore/community by <a href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1699">sigstore/sigstore#1699</a></li> <li>update Makefile so CodeQL covers all go files by <a href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1700">sigstore/sigstore#1700</a></li> <li>bump go to 1.21 by <a href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1701">sigstore/sigstore#1701</a></li> <li>pin container images to quiet scorecard alert by <a href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1709">sigstore/sigstore#1709</a></li> <li>set gh action perms by <a href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1710">sigstore/sigstore#1710</a></li> <li>tuf: Remove debug metadata downloads by <a href="https://github.com/jku"><code>@jku</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1717">sigstore/sigstore#1717</a></li> <li>Fix Hashicorp Vault KMS to use PKCS1 v1.5 by <a href="https://github.com/berkitamas"><code>@berkitamas</code></a> in <a href="https://redirect.github.com/sigstore/sigstore/pull/1736">sigstore/sigstore#1736</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jku"><code>@jku</code></a> made their first contribution in <a href="https://redirect.github.com/sigstore/sigstore/pull/1717">sigstore/sigstore#1717</a></li> <li><a href="https://github.com/berkitamas"><code>@berkitamas</code></a> made their first contribution in <a href="https://redirect.github.com/sigstore/sigstore/pull/1736">sigstore/sigstore#1736</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/sigstore/compare/v1.8.3...v1.8.4">https://github.com/sigstore/sigstore/compare/v1.8.3...v1.8.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/sigstore/commit/5cd937f302b7fbf551a642300d78ea90fcbc40dc"><code>5cd937f</code></a> build(deps): Bump github.com/hashicorp/vault/api</li> <li><a href="https://github.com/sigstore/sigstore/commit/96fc144b696ee6fea3704b13b69eb2efc4328dab"><code>96fc144</code></a> build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates</li> <li><a href="https://github.com/sigstore/sigstore/commit/2b99005ddbe724c46927977c6332c7cc7ac54bbe"><code>2b99005</code></a> build(deps): Bump the all group in /pkg/signature/kms/aws with 3 updates</li> <li><a href="https://github.com/sigstore/sigstore/commit/fa5d64b6a5e8bbbfb19bdddb22ec5d90cfd25e54"><code>fa5d64b</code></a> sync go mod</li> <li><a href="https://github.com/sigstore/sigstore/commit/186a1e520885e989b2babc444c4558c78d67119f"><code>186a1e5</code></a> build(deps): Bump the all group across 1 directory with 4 updates</li> <li><a href="https://github.com/sigstore/sigstore/commit/1ba2030650587ad3930d8d253c5f9ecebf861a5d"><code>1ba2030</code></a> Fix Hashicorp Vault KMS to use PKCS1 v1.5</li> <li><a href="https://github.com/sigstore/sigstore/commit/ec88c0b4251d00f87fa3778b871fe13055c42f94"><code>ec88c0b</code></a> ---</li> <li><a href="https://github.com/sigstore/sigstore/commit/bbe51a75caadc4d5b339ed4ecddfc0f4818b47b2"><code>bbe51a7</code></a> ---</li> <li><a href="https://github.com/sigstore/sigstore/commit/1d8a8744ce036c09c5884accfa0b80c5cf08209a"><code>1d8a874</code></a> ---</li> <li><a href="https://github.com/sigstore/sigstore/commit/acb4db4653e26f0d1be78313eda912904378e62b"><code>acb4db4</code></a> build(deps): Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/sigstore/compare/v1.8.3...v1.8.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information
1 parent
329b53b
commit d46ca6c