Skip to content

fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 - #3285

Merged
teemow merged 3 commits into
mainfrom
renovate/github.com-giantswarm-selfupdate-cosign-0.x
Nov 6, 2026
Merged

teemow merged 3 commits into
mainfrom
renovate/github.com-giantswarm-selfupdate-cosign-0.x

Conversation

@renovate

@renovate renovate Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/giantswarm/selfupdate-cosign v0.3.21 → v0.3.22 age confidence

Release Notes

giantswarm/selfupdate-cosign (github.com/giantswarm/selfupdate-cosign)

v0.3.22

Compare Source

Fixed

Full Changelog: giantswarm/selfupdate-cosign@v0.3.21...v0.3.22


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies renovate This is an automated PR by RenovateBot labels Nov 5, 2026
@renovate
renovate Bot requested a review from a team as a code owner November 5, 2026 21:50
@renovate renovate Bot added renovate This is an automated PR by RenovateBot dependencies labels Nov 5, 2026
@renovate
renovate Bot enabled auto-merge (squash) November 5, 2026 21:50
@renovate
renovate Bot force-pushed the renovate/github.com-giantswarm-selfupdate-cosign-0.x branch 2 times, most recently from 687b68c to 6ec366b Compare November 5, 2026 23:19
@renovate
renovate Bot force-pushed the renovate/github.com-giantswarm-selfupdate-cosign-0.x branch from 6ec366b to 9214ea4 Compare November 5, 2026 23:30

@teemow teemow left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review: approved
Head reviewed: 618cadcaf0c492bf79d1a946ea7730e1400c74f6

The diff against main changes only selfupdate-cosign v0.3.21 to v0.3.22 and its two checksums.

Reviewed the complete upstream comparison: only go.mod/go.sum change, raising go-selfupdate from v1.7.1 to v1.7.4. Beekeeper already directly selects go-selfupdate v1.7.4, so minimum version selection retains the same implementation. Signature validation, installer code, Go requirement and toolchain are unchanged upstream. Checked Beekeeper internal/update validator and staged installation usage; no blocking finding.

Static review only; no local test run. CI was still pending when reviewed; this verdict does not establish green CI.

@renovate

renovate Bot commented Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

* origin/main:
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)

# Conflicts:
#	go.mod

@teemow teemow left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review: approved
Head reviewed: 4df6d35dc2a903dd52aedd74e19e1873d06ea939

No blocking findings. The merge commit has parents 618cadc (previously approved head) and 972a4c2 (main). The complete diff against main changes only go.mod:16 from selfupdate-cosign v0.3.21 to v0.3.22 and the corresponding two go.sum entries. The go-jose v4.1.9 requirement from main is preserved. Both v0.3.22 checksums match go mod download output; go.mod and go.sum are consistent for this bump. git diff --check passes.

@teemow
teemow merged commit 237943d into main Nov 6, 2026
15 checks passed
@teemow
teemow deleted the renovate/github.com-giantswarm-selfupdate-cosign-0.x branch November 6, 2026 00:42
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (42 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (148 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (42 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (42 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (152 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (42 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (148 commits)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  fix(secret): copy vault fields to repair existing items (#2387)
  fix(guard): stop refusing repository commands, accept Codex subagents (#3290)
  fix(supervisor): end review parks per pull request and read active requests first (#3281)
  test(supervisor): add isolated real-binary workflow harness (#2345)
  fix(publish): exclude base commits from the outbound scan (#3273)
  fix(gate): read merge queue with repo context and REST fallback (#3269)
  fix: combine install, board, github and note fixes onto main (#3253)
  fix: remove private names from defaults, docs and fixtures (#3267)
  fix(gate): never sign the throwaway merge-result commit (#3266)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (51 commits)
  feat: detect stalled merge and start throughput (#2338)
  fix(gate): report and retire dead detached waits (#2368)
  fix(agyhooks): accept inert hook definitions (#2500)
  fix(rules): require releasing commits for embedded skills (#2569)
  fix(gate): admit bounded merges below the reader budget floor (#2579)
  fix(brieflint): parse shell redirects in complete examples (#2592)
  fix: allow schema annotations and display merge refusals (#2596)
  fix(guard): allow read-only Docker image config formats (#2466)
  fix(guard): skip base64 image payloads during redaction (#2668)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (51 commits)
  feat: detect stalled merge and start throughput (#2338)
  fix(gate): report and retire dead detached waits (#2368)
  fix(agyhooks): accept inert hook definitions (#2500)
  fix(rules): require releasing commits for embedded skills (#2569)
  fix(gate): admit bounded merges below the reader budget floor (#2579)
  fix(brieflint): parse shell redirects in complete examples (#2592)
  fix: allow schema annotations and display merge refusals (#2596)
  fix(guard): allow read-only Docker image config formats (#2466)
  fix(guard): skip base64 image payloads during redaction (#2668)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  fix(gate): recover stale merge lane places (#2662)
  chore(deps): update gsoci.azurecr.io/giantswarm/architect docker tag to v8.6.41 (#3256)
  fix(lease): report damaged holder records in listings (#2890)
  fix(board): skip issues referenced by running session PRs (#2657)
  feat(doctor): stop orphaned stdio MCP containers (#2632)
  fix(guard): allow Docker registry metadata inspection (#2537)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (57 commits)
  feat(execution): audit resources and bound terminal log retention (#2317)
  fix(supervisor): relay reviews from execution hosts (#2318)
  fix(guard): allow inert shell arguments containing runtime expressions (#2343)
  fix(workers): retain issues until post-merge proof (#2587)
  fix(gate): show merge phases and respect progress during release waits (#2681)
  fix(worktrees): reject stale automatic cleanup decisions (#3142)
  feat: detect stalled merge and start throughput (#2338)
  fix(gate): report and retire dead detached waits (#2368)
  fix(agyhooks): accept inert hook definitions (#2500)
  fix(rules): require releasing commits for embedded skills (#2569)
  fix(gate): admit bounded merges below the reader budget floor (#2579)
  fix(brieflint): parse shell redirects in complete examples (#2592)
  fix: allow schema annotations and display merge refusals (#2596)
  fix(guard): allow read-only Docker image config formats (#2466)
  fix(guard): skip base64 image payloads during redaction (#2668)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
* origin/main: (165 commits)
  feat(execution): audit resources and bound terminal log retention (#2317)
  fix(supervisor): relay reviews from execution hosts (#2318)
  fix(guard): allow inert shell arguments containing runtime expressions (#2343)
  fix(workers): retain issues until post-merge proof (#2587)
  fix(gate): show merge phases and respect progress during release waits (#2681)
  fix(worktrees): reject stale automatic cleanup decisions (#3142)
  feat: detect stalled merge and start throughput (#2338)
  fix(gate): report and retire dead detached waits (#2368)
  fix(agyhooks): accept inert hook definitions (#2500)
  fix(rules): require releasing commits for embedded skills (#2569)
  fix(gate): admit bounded merges below the reader budget floor (#2579)
  fix(brieflint): parse shell redirects in complete examples (#2592)
  fix: allow schema annotations and display merge refusals (#2596)
  fix(guard): allow read-only Docker image config formats (#2466)
  fix(guard): skip base64 image payloads during redaction (#2668)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
…b2e8f

* origin/main: (162 commits)
  feat(execution): audit resources and bound terminal log retention (#2317)
  fix(supervisor): relay reviews from execution hosts (#2318)
  fix(guard): allow inert shell arguments containing runtime expressions (#2343)
  fix(workers): retain issues until post-merge proof (#2587)
  fix(gate): show merge phases and respect progress during release waits (#2681)
  fix(worktrees): reject stale automatic cleanup decisions (#3142)
  feat: detect stalled merge and start throughput (#2338)
  fix(gate): report and retire dead detached waits (#2368)
  fix(agyhooks): accept inert hook definitions (#2500)
  fix(rules): require releasing commits for embedded skills (#2569)
  fix(gate): admit bounded merges below the reader budget floor (#2579)
  fix(brieflint): parse shell redirects in complete examples (#2592)
  fix: allow schema annotations and display merge refusals (#2596)
  fix(guard): allow read-only Docker image config formats (#2466)
  fix(guard): skip base64 image payloads during redaction (#2668)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  ...
teemow added a commit that referenced this pull request Nov 6, 2026
…b2e8f

* origin/main: (57 commits)
  feat(execution): audit resources and bound terminal log retention (#2317)
  fix(supervisor): relay reviews from execution hosts (#2318)
  fix(guard): allow inert shell arguments containing runtime expressions (#2343)
  fix(workers): retain issues until post-merge proof (#2587)
  fix(gate): show merge phases and respect progress during release waits (#2681)
  fix(worktrees): reject stale automatic cleanup decisions (#3142)
  feat: detect stalled merge and start throughput (#2338)
  fix(gate): report and retire dead detached waits (#2368)
  fix(agyhooks): accept inert hook definitions (#2500)
  fix(rules): require releasing commits for embedded skills (#2569)
  fix(gate): admit bounded merges below the reader budget floor (#2579)
  fix(brieflint): parse shell redirects in complete examples (#2592)
  fix: allow schema annotations and display merge refusals (#2596)
  fix(guard): allow read-only Docker image config formats (#2466)
  fix(guard): skip base64 image payloads during redaction (#2668)
  fix(deps): update module github.com/giantswarm/selfupdate-cosign to v0.3.22 (#3285)
  fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.9 (#3280)
  chore(deps): update gsoci.azurecr.io/giantswarm/alpine docker tag to v3.24.4 (#3287)
  test: use shared constants for repeated cmd literals (#3291)
  feat(agents): retire ended SSH executions through one lifecycle (#3207)
  ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies renovate This is an automated PR by RenovateBot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant