Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the gomod group with 3 updates in the / directory: golangci/golangci-lint-action, sigstore/cosign-installer and anchore/sbom-action.
Updates
golangci/golangci-lint-action
from 6.0.1 to 6.1.0Release notes
Sourced from golangci/golangci-lint-action's releases.
Commits
aaa42aa
feat: allow to skip golangci-lint installation (#1079)9ec8973
build(deps): bump@types/node
from 20.14.11 to 22.0.0 in the dependencies gro...58838cf
build(deps-dev): bump the dev-dependencies group with 3 updates (#1077)9f3ba2c
build(deps): bump@types/node
from 20.14.10 to 20.14.11 in the dependencies g...2bd7a04
build(deps-dev): bump the dev-dependencies group with 3 updates (#1074)db819a1
build(deps-dev): bump the dev-dependencies group with 3 updates (#1073)d09fb08
build(deps): bump@types/node
from 20.14.9 to 20.14.10 in the dependencies gr...605617a
build(deps-dev): bump the dev-dependencies group with 4 updates (#1071)66f63c7
chore: generate2c01d26
fix: home dir on WindowsUpdates
sigstore/cosign-installer
from 3.5.0 to 3.6.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
4959ce0
update readme for new release (#170)45ffe83
bump default version to v2.4.0 release (#168)7e1d9c1
pin public key used for verification (#169)cc23fe1
Bump actions/setup-go from 5.0.1 to 5.0.2 (#167)b235ed9
Bump actions/checkout from 4.1.6 to 4.1.7 (#166)b49ef6b
Bump actions/checkout from 4.1.5 to 4.1.6 (#165)7a59e5a
Bump actions/checkout from 4.1.4 to 4.1.5 (#164)8d927bd
Bump actions/setup-go from 5.0.0 to 5.0.1 (#163)8c9caa0
Bump actions/checkout from 4.1.3 to 4.1.4 (#162)19351d0
Bump actions/checkout from 4.1.2 to 4.1.3 (#161)Updates
anchore/sbom-action
from 0.17.0 to 0.17.2Release notes
Sourced from anchore/sbom-action's releases.
Commits
61119d4
chore(deps): update Syft to v1.11.1 (#485)ab9d16d
chore(deps): update Syft to v1.11.0 (#483)fe5e7c3
doc: Updates for the Slack to Discourse migration (#484)f2d02cb
chore: Create issue template (#481)ca15f99
docs: CODE_OF_CONDUCT.md (#480)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show