Bump the gomod group across 1 directory with 5 updates#818
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the gomod group across 1 directory with 5 updates#818dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the gomod group with 4 updates in the / directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt), [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) and [github.com/sigstore/rekor](https://github.com/sigstore/rekor). Updates `github.com/go-git/go-git/v5` from 5.19.0 to 5.19.1 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.0...v5.19.1) Updates `github.com/go-openapi/strfmt` from 0.26.2 to 0.26.3 - [Release notes](https://github.com/go-openapi/strfmt/releases) - [Commits](go-openapi/strfmt@v0.26.2...v0.26.3) Updates `github.com/sigstore/fulcio` from 1.8.5 to 1.8.7 - [Release notes](https://github.com/sigstore/fulcio/releases) - [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md) - [Commits](sigstore/fulcio@v1.8.5...v1.8.7) Updates `github.com/sigstore/rekor` from 1.5.1 to 1.5.2 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.5.1...v1.5.2) Updates `github.com/sigstore/sigstore` from 1.10.5 to 1.10.6 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.5...v1.10.6) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.26.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/fulcio dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: github.com/sigstore/sigstore dependency-version: 1.10.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the gomod group with 4 updates in the / directory: github.com/go-git/go-git/v5, github.com/go-openapi/strfmt, github.com/sigstore/fulcio and github.com/sigstore/rekor.
Updates
github.com/go-git/go-git/v5from 5.19.0 to 5.19.1Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
3c3be60Merge pull request #2137 from go-git/validate-v53fba897plumbing: format/packfile, cap delta chain depth in parsera97d660Merge pull request #2125 from hiddeco/v5/format-input-boundsaeaa125plumbing: format/objfile, require Header before Read1f38e17plumbing: format/packfile, bound inflate sizef7545a0plumbing: format/idxfile, bound nr by file size170b881Merge pull request #2116 from pjbgf/symlink-v57b6d994Merge pull request #2117 from hiddeco/v5/worktree-fs-mkdirall-root-noopf0709b3git: Stop validating symlink target paths776d00fgit: Allow MkdirAll on worktree-root pathsUpdates
github.com/go-openapi/strfmtfrom 0.26.2 to 0.26.3Release notes
Sourced from github.com/go-openapi/strfmt's releases.
... (truncated)
Commits
d93543fchore: prepare release v0.26.37841767build(deps): bump the other-dependencies group across 3 directories with 2 up...f041a88build(deps): bump golang.org/x/net6ac9968build(deps): bump the go-openapi-dependencies group across 2 directories with...1d31844fix(ci): monitor - work around dependabot identity requirements1531efcfix(ci): typo in shacb7dd25fix(ci): updated shared ci worflows (fix monitor-bot identity)62db01afix(ci): updated shared ci worflows (fix monitor-bot permissions)c7cf6fbfix(ci): updated shared ci worflows (fix monitor-bot filter) (#259)c2e3626doc: updated contributors fileUpdates
github.com/sigstore/fulciofrom 1.8.5 to 1.8.7Release notes
Sourced from github.com/sigstore/fulcio's releases.
Changelog
Sourced from github.com/sigstore/fulcio's changelog.
Commits
8254f95Allow directly-configured Kubernetes issuers to use in-cluster auth path (#2356)d614dd4build(deps): bump cloud.google.com/go/security from 1.19.2 to 1.24.0 (#2346)92cfd93build(deps): bump protocolbuffers/protobuf from 34.1 to 35.0 (#2351)378c654Block cross-host redirects and restrict bearer token to expected host (#2354)7a5d3e3bump builder image to use go1.26.3 (#2353)a05982ebuild(deps): bump go.step.sm/crypto from 0.75.0 to 0.81.0 (#2348)dfa63a8build(deps): bump golang from313faaeto2d6c802(#2344)7b3a344build(deps): bump google.golang.org/api from 0.279.0 to 0.280.0 (#2349)9290f7fbuild(deps): bump the all group with 2 updates (#2350)423d535build(deps): bump nginx from 1.31.0 to 1.31.1 in the all group (#2352)Updates
github.com/sigstore/rekorfrom 1.5.1 to 1.5.2Release notes
Sourced from github.com/sigstore/rekor's releases.
Commits
3b75cd9build(deps): Bump the all group across 1 directory with 7 updates (#2829)759b98ealpine: Enforce max size limit on decompression (#2831)c7e77eeSupport restricting kinds on insertion (#2814)a10818afix(trillianclient): strip dns:/// scheme from TLS ServerName in gRPC dial (#...c31f3fcbuild(deps): Bump cloud.google.com/go/profiler from 0.4.3 to 0.6.0f2a9fb0build(deps): Bump go.uber.org/zap from 1.27.1 to 1.28.0e3ba248build(deps): Bump golang in the all group across 1 directory62e5dddbuild(deps): Bump github.com/go-openapi/swag from 0.25.5 to 0.26.0f4f91d5build(deps): Bump github.com/tink-crypto/tink-go-awskms/v2 to v3 (#2827)9bc540fbuild(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2820)Updates
github.com/sigstore/sigstorefrom 1.10.5 to 1.10.6Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
311895efix: remove leftover Go template syntax from success page (#2324)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions