Repository navigation
fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 - #3285
Conversation
687b68c to
6ec366b
Compare
6ec366b to
9214ea4
Compare
teemow
left a comment
There was a problem hiding this comment.
Review: approved
Head reviewed: 618cadcaf0c492bf79d1a946ea7730e1400c74f6
The diff against main changes only selfupdate-cosign v0.3.21 to v0.3.22 and its two checksums.
Reviewed the complete upstream comparison: only go.mod/go.sum change, raising go-selfupdate from v1.7.1 to v1.7.4. Beekeeper already directly selects go-selfupdate v1.7.4, so minimum version selection retains the same implementation. Signature validation, installer code, Go requirement and toolchain are unchanged upstream. Checked Beekeeper internal/update validator and staged installation usage; no blocking finding.
Static review only; no local test run. CI was still pending when reviewed; this verdict does not establish green CI.
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
teemow
left a comment
There was a problem hiding this comment.
Review: approved
Head reviewed: 4df6d35dc2a903dd52aedd74e19e1873d06ea939
No blocking findings. The merge commit has parents 618cadc (previously approved head) and 972a4c2 (main). The complete diff against main changes only go.mod:16 from selfupdate-cosign v0.3.21 to v0.3.22 and the corresponding two go.sum entries. The go-jose v4.1.9 requirement from main is preserved. Both v0.3.22 checksums match go mod download output; go.mod and go.sum are consistent for this bump. git diff --check passes.
* origin/main: (42 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (148 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (42 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (42 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (152 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (42 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (148 commits) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) fix(secret): copy vault fields to repair existing items (#2387) fix(guard): stop refusing repository commands, accept Codex subagents (#3290) fix(supervisor): end review parks per pull request and read active requests first (#3281) test(supervisor): add isolated real-binary workflow harness (#2345) fix(publish): exclude base commits from the outbound scan (#3273) fix(gate): read merge queue with repo context and REST fallback (#3269) fix: combine install, board, github and note fixes onto main (#3253) fix: remove private names from defaults, docs and fixtures (#3267) fix(gate): never sign the throwaway merge-result commit (#3266) ...
* origin/main: (51 commits) feat: detect stalled merge and start throughput (#2338) fix(gate): report and retire dead detached waits (#2368) fix(agyhooks): accept inert hook definitions (#2500) fix(rules): require releasing commits for embedded skills (#2569) fix(gate): admit bounded merges below the reader budget floor (#2579) fix(brieflint): parse shell redirects in complete examples (#2592) fix: allow schema annotations and display merge refusals (#2596) fix(guard): allow read-only Docker image config formats (#2466) fix(guard): skip base64 image payloads during redaction (#2668) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) ...
* origin/main: (51 commits) feat: detect stalled merge and start throughput (#2338) fix(gate): report and retire dead detached waits (#2368) fix(agyhooks): accept inert hook definitions (#2500) fix(rules): require releasing commits for embedded skills (#2569) fix(gate): admit bounded merges below the reader budget floor (#2579) fix(brieflint): parse shell redirects in complete examples (#2592) fix: allow schema annotations and display merge refusals (#2596) fix(guard): allow read-only Docker image config formats (#2466) fix(guard): skip base64 image payloads during redaction (#2668) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) fix(gate): recover stale merge lane places (#2662) chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256) fix(lease): report damaged holder records in listings (#2890) fix(board): skip issues referenced by running session PRs (#2657) feat(doctor): stop orphaned stdio MCP containers (#2632) fix(guard): allow Docker registry metadata inspection (#2537) ...
* origin/main: (57 commits) feat(execution): audit resources and bound terminal log retention (#2317) fix(supervisor): relay reviews from execution hosts (#2318) fix(guard): allow inert shell arguments containing runtime expressions (#2343) fix(workers): retain issues until post-merge proof (#2587) fix(gate): show merge phases and respect progress during release waits (#2681) fix(worktrees): reject stale automatic cleanup decisions (#3142) feat: detect stalled merge and start throughput (#2338) fix(gate): report and retire dead detached waits (#2368) fix(agyhooks): accept inert hook definitions (#2500) fix(rules): require releasing commits for embedded skills (#2569) fix(gate): admit bounded merges below the reader budget floor (#2579) fix(brieflint): parse shell redirects in complete examples (#2592) fix: allow schema annotations and display merge refusals (#2596) fix(guard): allow read-only Docker image config formats (#2466) fix(guard): skip base64 image payloads during redaction (#2668) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) ...
* origin/main: (165 commits) feat(execution): audit resources and bound terminal log retention (#2317) fix(supervisor): relay reviews from execution hosts (#2318) fix(guard): allow inert shell arguments containing runtime expressions (#2343) fix(workers): retain issues until post-merge proof (#2587) fix(gate): show merge phases and respect progress during release waits (#2681) fix(worktrees): reject stale automatic cleanup decisions (#3142) feat: detect stalled merge and start throughput (#2338) fix(gate): report and retire dead detached waits (#2368) fix(agyhooks): accept inert hook definitions (#2500) fix(rules): require releasing commits for embedded skills (#2569) fix(gate): admit bounded merges below the reader budget floor (#2579) fix(brieflint): parse shell redirects in complete examples (#2592) fix: allow schema annotations and display merge refusals (#2596) fix(guard): allow read-only Docker image config formats (#2466) fix(guard): skip base64 image payloads during redaction (#2668) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) ...
…b2e8f * origin/main: (162 commits) feat(execution): audit resources and bound terminal log retention (#2317) fix(supervisor): relay reviews from execution hosts (#2318) fix(guard): allow inert shell arguments containing runtime expressions (#2343) fix(workers): retain issues until post-merge proof (#2587) fix(gate): show merge phases and respect progress during release waits (#2681) fix(worktrees): reject stale automatic cleanup decisions (#3142) feat: detect stalled merge and start throughput (#2338) fix(gate): report and retire dead detached waits (#2368) fix(agyhooks): accept inert hook definitions (#2500) fix(rules): require releasing commits for embedded skills (#2569) fix(gate): admit bounded merges below the reader budget floor (#2579) fix(brieflint): parse shell redirects in complete examples (#2592) fix: allow schema annotations and display merge refusals (#2596) fix(guard): allow read-only Docker image config formats (#2466) fix(guard): skip base64 image payloads during redaction (#2668) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) ...
…b2e8f * origin/main: (57 commits) feat(execution): audit resources and bound terminal log retention (#2317) fix(supervisor): relay reviews from execution hosts (#2318) fix(guard): allow inert shell arguments containing runtime expressions (#2343) fix(workers): retain issues until post-merge proof (#2587) fix(gate): show merge phases and respect progress during release waits (#2681) fix(worktrees): reject stale automatic cleanup decisions (#3142) feat: detect stalled merge and start throughput (#2338) fix(gate): report and retire dead detached waits (#2368) fix(agyhooks): accept inert hook definitions (#2500) fix(rules): require releasing commits for embedded skills (#2569) fix(gate): admit bounded merges below the reader budget floor (#2579) fix(brieflint): parse shell redirects in complete examples (#2592) fix: allow schema annotations and display merge refusals (#2596) fix(guard): allow read-only Docker image config formats (#2466) fix(guard): skip base64 image payloads during redaction (#2668) fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285) fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280) chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287) test: use shared constants for repeated cmd literals (#3291) feat(agents): retire ended SSH executions through one lifecycle (#3207) ...
This PR contains the following updates:
v0.3.21→v0.3.22Release Notes
giantswarm/selfupdate-cosign (github.com/giantswarm/selfupdate-cosign)
v0.3.22Compare Source
Fixed
Full Changelog: giantswarm/selfupdate-cosign@v0.3.21...v0.3.22
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.