Bump the gomod group across 1 directory with 10 updates #629
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
Bumps the gomod group with 3 updates in the / directory: [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy), [github.com/in-toto/attestation](https://github.com/in-toto/attestation) and [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign). Updates `github.com/go-git/go-billy/v5` from 5.6.1 to 5.6.2 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.1...v5.6.2) Updates `github.com/in-toto/attestation` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/in-toto/attestation/releases) - [Commits](in-toto/attestation@v1.1.0...v1.1.1) Updates `github.com/sigstore/cosign/v2` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.4.1...v2.4.2) Updates `github.com/sigstore/fulcio` from 1.6.5 to 1.6.6 - [Release notes](https://github.com/sigstore/fulcio/releases) - [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md) - [Commits](sigstore/fulcio@v1.6.5...v1.6.6) Updates `github.com/sigstore/protobuf-specs` from 0.3.2 to 0.4.0 - [Release notes](https://github.com/sigstore/protobuf-specs/releases) - [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md) - [Commits](sigstore/protobuf-specs@v0.3.2...v0.4.0) Updates `github.com/sigstore/rekor` from 1.3.7 to 1.3.9 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.7...v1.3.9) Updates `github.com/sigstore/sigstore` from 1.8.11 to 1.8.12 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.11...v1.8.12) Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.5...v1.0.6) Updates `golang.org/x/crypto` from 0.31.0 to 0.32.0 - [Commits](golang/crypto@v0.31.0...v0.32.0) Updates `google.golang.org/protobuf` from 1.36.1 to 1.36.4 --- updated-dependencies: - dependency-name: github.com/go-git/go-billy/v5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/in-toto/attestation dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/cosign/v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/fulcio dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/protobuf-specs dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/spf13/pflag dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/go_modules/gomod-e5ac419608
branch
from
18a16d3 to
e492323
Compare
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 3 updates in the / directory: github.com/go-git/go-billy/v5, github.com/in-toto/attestation and github.com/sigstore/cosign/v2.
Updates
github.com/go-git/go-billy/v5from 5.6.1 to 5.6.2Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
9f8b16dMerge pull request #103 from pjbgf/bump-deps783f58cbuild: Bump dependencies0009381Merge pull request #102 from JAORMX/iofs-extra-interfaces-v521beb15Enable theiofsadapter to also return other interfaces fromio/fsUpdates
github.com/in-toto/attestationfrom 1.1.0 to 1.1.1Release notes
Sourced from github.com/in-toto/attestation's releases.
Commits
7017ad8Regenerate attestation libraries (#435)808ca43Merge pull request #417 from kpauljoseph/in-toto-v0.2-provenance2358a9cMerge pull request #427 from puerco/expose-algos6e0b70aMerge pull request #434 from puerco/vulnsv02-proto4d9125dMerge pull request #408 from lumjjb/update-vuln-02e474a1fFix typo in vulns02 example72054e5Fix inconsistencies in vulnsv2 proto vs spec4a4ddf5add slsa provenance predicate v0.2a50a5a1Expose known algorithms11ca4fcRegenerate attestation libraries (#430)Updates
github.com/sigstore/cosign/v2from 2.4.1 to 2.4.2Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
Commits
b6df9c7update v2.4.2 changelog (#4045)ff13ba4chore(deps): bump github.com/open-policy-agent/opa from 0.68.0 to 1.1.0 (#4036)4dc18ddtest against newer k8s, scaffolding release (#4044)e4ff8e2chore(deps): bump cuelang.org/go from 0.11.2 to 0.12.0 (#4035)cced656fix warning message from golangci-lint (#4043)486937bchore(deps): move github.com/xanzy/go-gitlab to gitlab.com/gitlab-org/api/cli...9f142a5chore(deps): bump github.com/sigstore/sigstore-go (#4034)4937bcachore(deps): bump the gomod group across 1 directory with 2 updates (#4042)a71220echore(deps): bump google.golang.org/api from 0.218.0 to 0.219.0 (#4038)fcf13ebchore(deps): bump sigs.k8s.io/release-utils from 0.9.0 to 0.11.0 (#4040)Updates
github.com/sigstore/fulciofrom 1.6.5 to 1.6.6Release notes
Sourced from github.com/sigstore/fulcio's releases.
Changelog
Sourced from github.com/sigstore/fulcio's changelog.
Commits
66a8ce7Add CHANGELOG for v1.6.6, bump deps (#1920)de90178config: Add IBM OIDC provider (#1892)174991aBump google.golang.org/api from 0.216.0 to 0.217.0 (#1918)c594f3dBump go.step.sm/crypto from 0.56.0 to 0.57.0 (#1917)6c108f6Bump golang.org/x/net (#1919)e5ea663Bump github.com/tink-crypto/tink-go/v2 from 2.2.0 to 2.3.0 (#1916)38e4712Bump github.com/prometheus/common from 0.61.0 to 0.62.0 (#1915)3f8241aBump the all group with 5 updates (#1912)de4b3aeBump golang from 1.23.4 to 1.23.5 in the all group (#1913)05f5e1dBump the all group with 3 updates (#1914)Updates
github.com/sigstore/protobuf-specsfrom 0.3.2 to 0.4.0Changelog
Sourced from github.com/sigstore/protobuf-specs's changelog.
Commits
68cc7d2bump up to v0.4.0, add changelog (#506)a74d71dbuild(deps): bump actions/setup-java from 4.6.0 to 4.7.0 (#516)e9a8145automate publishing Java releases from GHA workflow (#510)d6bce61build(deps): bump actions/setup-python from 5.3.0 to 5.4.0 (#514)ec18411build(deps): bump ruby/setup-ruby from 1.213.0 to 1.214.0 (#515)c550071build(deps): bump actions/setup-node from 4.1.0 to 4.2.0 (#512)60793eabuild(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#513)675de0cbuild(deps): bump pypa/gh-action-pypi-publish from 1.12.3 to 1.12.4 (#511)ca1b624build(deps): bump serde_json from 1.0.135 to 1.0.136 in /gen/pb-rust (#505)aa9058aUpdate GOOGLEAPIS_COMMIT in versions.mk (#509)Updates
github.com/sigstore/rekorfrom 1.3.7 to 1.3.9Release notes
Sourced from github.com/sigstore/rekor's releases.
Changelog
Sourced from github.com/sigstore/rekor's changelog.
Commits
b67ee82build(deps): Bump google.golang.org/grpc from 1.69.4 to 1.70.040f29babuild(deps): Bump golang from51a6466to8c10f212497b42build(deps): Bump google/cloud-sdk from 506.0.0 to 507.0.0ac42c19build(deps): Bump google.golang.org/api from 0.217.0 to 0.218.010e8115build(deps): Bump the all group with 3 updates2f182a1build(deps): Bump google.golang.org/protobuf in the all groupf3db95bCache checkpoint for inactive shards (#2332)1cb78cabuild(deps): Bump google/cloud-sdk from 505.0.0 to 506.0.0b68f6bbbuild(deps): Bump google.golang.org/api from 0.216.0 to 0.217.015c696cbuild(deps): Bump github.com/tink-crypto/tink-go/v2 from 2.2.0 to 2.3.0Updates
github.com/sigstore/sigstorefrom 1.8.11 to 1.8.12Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
e28cdf3cleanup ci (#1927)8041221build(deps): Bump the tools group across 1 directory with 2 updates (#1913)57944cebuild(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8....99a57f3build(deps): Bump golang.org/x/crypto in /test/fuzz (#1908)125d1dcbuild(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#1923)73220abbuild(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 (#1922)cc55882build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#1921)47e3eddbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#1924)7b4f423build(deps): Bump cloud.google.com/go/kms (#1920)1f3a09ebuild(deps): Bump the gomod group across 2 directories with 5 updates (#1916)Updates
github.com/spf13/pflagfrom 1.0.5 to 1.0.6Release notes
Sourced from github.com/spf13/pflag's releases.
Commits
5ca8134Merge pull request #419 from spf13/ci100ab0edisable unsupported dependency graph for nowa0f4dddfix govetf48cbd1add github actionsd5e0c06allow for blank ip addresses (#316)85dd5c8Add IPNetSlice and unit tests (#170)6971c29remove dead code for checking error nil (#282)81378bbAdd exported functions to preservepkg/flagcompatibility (#220)Updates
golang.org/x/cryptofrom 0.31.0 to 0.32.0Commits
8929309go.mod: update golang.org/x dependencies4a75ba5all: make function and struct comments match the namesUpdates
google.golang.org/protobuffrom 1.36.1 to 1.36.4Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions