chore(deps): bump the gomod group across 1 directory with 11 updates #4018
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the gomod group with 4 updates in the / directory: [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go), [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry), [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) and [github.com/sigstore/rekor](https://github.com/sigstore/rekor). Updates `github.com/google/certificate-transparency-go` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/google/certificate-transparency-go/releases) - [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md) - [Commits](google/certificate-transparency-go@v1.3.0...v1.3.1) Updates `github.com/google/go-containerregistry` from 0.20.2 to 0.20.3 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.2...v0.20.3) Updates `github.com/sigstore/protobuf-specs` from 0.3.2 to 0.3.3 - [Release notes](https://github.com/sigstore/protobuf-specs/releases) - [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md) - [Commits](sigstore/protobuf-specs@v0.3.2...v0.3.3) Updates `github.com/sigstore/rekor` from 1.3.7 to 1.3.8 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.7...v1.3.8) Updates `github.com/sigstore/sigstore` from 1.8.11 to 1.8.12 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.11...v1.8.12) Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.8.11 to 1.8.12 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.11...v1.8.12) Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.8.11 to 1.8.12 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.11...v1.8.12) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.8.11 to 1.8.12 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.11...v1.8.12) Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.8.11 to 1.8.12 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.11...v1.8.12) Updates `google.golang.org/api` from 0.214.0 to 0.216.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.214.0...v0.216.0) Updates `google.golang.org/protobuf` from 1.36.1 to 1.36.3 --- updated-dependencies: - dependency-name: github.com/google/certificate-transparency-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/google/go-containerregistry dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/protobuf-specs dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 4 updates in the / directory: github.com/google/certificate-transparency-go, github.com/google/go-containerregistry, github.com/sigstore/protobuf-specs and github.com/sigstore/rekor.
Updates
github.com/google/certificate-transparency-gofrom 1.3.0 to 1.3.1Release notes
Sourced from github.com/google/certificate-transparency-go's releases.
Changelog
Sourced from github.com/google/certificate-transparency-go's changelog.
Commits
ea0e2f4Update CHANGELOG in prep for v1.3.1 (#1644)7a59cf0Bump google.golang.org/grpc from 1.69.2 to 1.69.4 in the all-deps group (#1642)01156beBump the all-deps group with 2 updates (#1643)facd20eBump the all-deps group across 1 directory with 2 updates (#1641)dcb444aAdd TiledLogs to log list JSON (#1635)113e37fchore: relax go directive to permit 1.22.x (#1640)e63797bBump the all-deps group with 2 updates (#1637)fba5180Bump the docker-deps group across 4 directories with 1 update (#1638)77ccd13Bump the all-deps group with 2 updates (#1632)087b77fAdd AllLogListSignatureURL (#1634)Updates
github.com/google/go-containerregistryfrom 0.20.2 to 0.20.3Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c4dd792bump deps using hack/bump-deps.sh (#2042)6bce25eDetect zstd in crane append (#2023)06dcd85mutate: Create a defensive annotations copy (#2030)a9a53a8check for 406 status code when handling referrers endpoint response (#2026)4630c40don't pin chainguard-dev/actions (#2025)808e354bump actions to latest (#2011)a07d1cafix: redact.URL uses (*URL).Redacted to omit basic-auth password (#1947)00f182bExpose compare package (#2001)b8e87edremote/transport: Make bearer transport go-routine-safe (#1806)Updates
github.com/sigstore/protobuf-specsfrom 0.3.2 to 0.3.3Changelog
Sourced from github.com/sigstore/protobuf-specs's changelog.
Commits
dadc81eAdd warning when verifying with artifact digest (#461)22f84aagen: bump patch versions for v0.3.3 (#463)6ad0fadAdd changelog for v0.3.3 (#462)1e0daecbuild(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1 (#458)7d16e8cbuild(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 (#459)6d7dc79build(deps): bump com.diffplug.spotless from 7.0.0 to 7.0.1 in /java (#460)0893628build(deps): bump alpine from21dc606tob97e2a8(#456)a00cfe9build(deps): bump com.diffplug.spotless from 6.25.0 to 7.0.0 in /java (#457)e04a14bbuild(deps): bump ruby/setup-ruby from 1.206.0 to 1.207.0 (#455)27b9f3cbuild(deps): bump ruby/setup-ruby from 1.205.0 to 1.206.0 (#454)Updates
github.com/sigstore/rekorfrom 1.3.7 to 1.3.8Release notes
Sourced from github.com/sigstore/rekor's releases.
Changelog
Sourced from github.com/sigstore/rekor's changelog.
Commits
88b5ce5add changelog for v1.3.8 (#2331)1e9cdaechore: relax go directive to permit 1.22.xdcad58cbuild(deps): Bump google.golang.org/api from 0.214.0 to 0.216.0 (#2328)1082f48build(deps): Bump the all group with 11 updates (#2327)362cceabuild(deps): Bump google/cloud-sdk from 504.0.1 to 505.0.0 (#2326)c505919fetch minisign from homebrew instead of custom ppa (#2329)280c8c1fix(ci): simplify GOVERSION extraction7bf4b21chore(deps): bump actions pins to latest513c30eUpdate types.md (#2322)8f7b5a0build(deps): Bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0Updates
github.com/sigstore/sigstorefrom 1.8.11 to 1.8.12Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
e28cdf3cleanup ci (#1927)8041221build(deps): Bump the tools group across 1 directory with 2 updates (#1913)57944cebuild(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8....99a57f3build(deps): Bump golang.org/x/crypto in /test/fuzz (#1908)125d1dcbuild(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#1923)73220abbuild(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 (#1922)cc55882build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#1921)47e3eddbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#1924)7b4f423build(deps): Bump cloud.google.com/go/kms (#1920)1f3a09ebuild(deps): Bump the gomod group across 2 directories with 5 updates (#1916)Updates
github.com/sigstore/sigstore/pkg/signature/kms/awsfrom 1.8.11 to 1.8.12Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.
Commits
e28cdf3cleanup ci (#1927)8041221build(deps): Bump the tools group across 1 directory with 2 updates (#1913)57944cebuild(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8....99a57f3build(deps): Bump golang.org/x/crypto in /test/fuzz (#1908)125d1dcbuild(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#1923)73220abbuild(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 (#1922)cc55882build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#1921)47e3eddbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#1924)7b4f423build(deps): Bump cloud.google.com/go/kms (#1920)1f3a09ebuild(deps): Bump the gomod group across 2 directories with 5 updates (#1916)Updates
github.com/sigstore/sigstore/pkg/signature/kms/azurefrom 1.8.11 to 1.8.12Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.
Commits
e28cdf3cleanup ci (#1927)8041221build(deps): Bump the tools group across 1 directory with 2 updates (#1913)57944cebuild(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8....99a57f3build(deps): Bump golang.org/x/crypto in /test/fuzz (#1908)125d1dcbuild(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#1923)73220abbuild(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 (#1922)cc55882build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#1921)47e3eddbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#1924)7b4f423build(deps): Bump cloud.google.com/go/kms (#1920)1f3a09ebuild(deps): Bump the gomod group across 2 directories with 5 updates (#1916)Updates
github.com/sigstore/sigstore/pkg/signature/kms/gcpfrom 1.8.11 to 1.8.12Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.
Commits
e28cdf3cleanup ci (#1927)8041221build(deps): Bump the tools group across 1 directory with 2 updates (#1913)57944cebuild(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8....99a57f3build(deps): Bump golang.org/x/crypto in /test/fuzz (#1908)125d1dcbuild(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#1923)73220abbuild(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 (#1922)cc55882build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#1921)47e3eddbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#1924)7b4f423build(deps): Bump cloud.google.com/go/kms (#1920)1f3a09ebuild(deps): Bump the gomod group across 2 directories with 5 updates (#1916)Updates
github.com/sigstore/sigstore/pkg/signature/kms/hashivaultfrom 1.8.11 to 1.8.12Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases.
Commits
e28cdf3cleanup ci (#1927)8041221build(deps): Bump the tools group across 1 directory with 2 updates (#1913)57944cebuild(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8....99a57f3build(deps): Bump golang.org/x/crypto in /test/fuzz (#1908)125d1dcbuild(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (#1923)73220abbuild(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 (#1922)cc55882build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 (#1921)47e3eddbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 (#1924)7b4f423build(deps): Bump cloud.google.com/go/kms (#1920)1f3a09ebuild(deps): Bump the gomod group across 2 directories with 5 updates (#1916)Updates
google.golang.org/apifrom 0.214.0 to 0.216.0Release notes
Sourced from google.golang.org/api's releases.