defenseunicorns / uds-package-sigstore

šŸ­ UDS Sigstore Zarf Package
GNU Affero General Public License v3.0
1 stars 0 forks source link

chore(deps): update sigstore package dependencies #20

Closed renovate[bot] closed 2 weeks ago

renovate[bot] commented 3 months ago

This PR contains the following updates:

Package Update Change
curlimages/curl minor 8.9.1 -> 8.10.1
docker.io/curlimages/curl minor 8.9.1 -> 8.10.1
docker.io/openbao/openbao patch 2.0.0 -> 2.0.2
gcr.io/projectsigstore/fulcio minor v1.5.1 -> v1.6.5
ghcr.io/sigstore/helm-charts/ctlog patch 0.2.55 -> 0.2.57
ghcr.io/sigstore/helm-charts/rekor (source) minor 1.4.7 -> 1.5.1
ghcr.io/sigstore/helm-charts/trillian (source) patch 0.2.26 -> 0.2.28
ghcr.io/sigstore/helm-charts/tsa patch 1.0.5 -> 1.0.6
ghcr.io/sigstore/helm-charts/tuf (source) patch 0.1.16 -> 0.1.19
ghcr.io/sigstore/scaffolding/createcerts patch v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/createctconfig patch v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/createtree patch v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/ct_server patch v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/server patch v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/trillian_log_server patch v1.6.0 -> v1.6.1
ghcr.io/sigstore/scaffolding/trillian_log_signer patch v1.6.0 -> v1.6.1
ghcr.io/sigstore/timestamp-server patch v1.2.2 -> v1.2.3
openbao minor 0.4.0 -> 0.6.0

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

curl/curl-container (curlimages/curl) ### [`v8.10.1`](https://redirect.github.com/curl/curl-container/blob/HEAD/CHANGELOG.md#8101---2024-09-18) [Compare Source](https://redirect.github.com/curl/curl-container/compare/8.10.0...8.10.1) ##### Changed - bump to curl 8.10.1 ### [`v8.10.0`](https://redirect.github.com/curl/curl-container/blob/HEAD/CHANGELOG.md#8100---2024-09-11) [Compare Source](https://redirect.github.com/curl/curl-container/compare/8.9.1...8.10.0) ##### Changed - bump to curl 8.10.0 - bump to alpine:3.20.3
openbao/openbao (docker.io/openbao/openbao) ### [`v2.0.2`](https://redirect.github.com/openbao/openbao/releases/tag/v2.0.2) [Compare Source](https://redirect.github.com/openbao/openbao/compare/v2.0.1...v2.0.2) Note: - This release does not ship with the UI enabled. The UI will be available in the future. [#​129](https://redirect.github.com/openbao/openbao/issues/129) - OpenBao does not provide support for Vault Enterprise features. If there is an enterprise feature you would like to see added to the project, please open a feature request. - OpenBao is fully API compatible with Vault 1.14.9, and seal compatible with the plugins the project supports. Plugin support for OpenBao can be found [here](https://redirect.github.com/orgs/openbao/discussions/64). ##### Changelog - [`f4a5e78`](https://redirect.github.com/openbao/openbao/commit/f4a5e780ecd7cd7b24c3f59ada747e23a9410e60): Bump to go 1.22.8 ([#​588](https://redirect.github.com/openbao/openbao/issues/588)) ([@​cipherboy](https://redirect.github.com/cipherboy)) - [`372d0b6`](https://redirect.github.com/openbao/openbao/commit/372d0b6c25f492bb68d9754147dd6508d24c3818): Correctly handle IPv6 for HTTP-01 ([#​559](https://redirect.github.com/openbao/openbao/issues/559)) ([@​cipherboy](https://redirect.github.com/cipherboy)) - [`e426bb6`](https://redirect.github.com/openbao/openbao/commit/e426bb68205460f57bb5598089fe7ed54785bab6): Deny empty valid_principals during SSH issuance ([#​561](https://redirect.github.com/openbao/openbao/issues/561)) ([@​cipherboy](https://redirect.github.com/cipherboy) ) - [`1e52cfa`](https://redirect.github.com/openbao/openbao/commit/1e52cfa8dad9208fb82d26553ec4d7f9cd23ad18): Fix aliasNameFromLoginRequest panic ([#​512](https://redirect.github.com/openbao/openbao/issues/512)) ([@​cipherboy](https://redirect.github.com/cipherboy) ) - [`2ce2e84`](https://redirect.github.com/openbao/openbao/commit/2ce2e845acd286636999b7462708571d10a8e2f2): Fix k8s registration variables ([#​527](https://redirect.github.com/openbao/openbao/issues/527)) ([@​cipherboy](https://redirect.github.com/cipherboy) ) - [`500d2a2`](https://redirect.github.com/openbao/openbao/commit/500d2a2817eae85b55cf34434b51f7c89bb22618): add vault symlink to Docker images ([#​548](https://redirect.github.com/openbao/openbao/issues/548)) ([@​JanMa](https://redirect.github.com/JanMa)) - [`2bd8a0a`](https://redirect.github.com/openbao/openbao/commit/2bd8a0a9d17dc02f347983ffb6499b82c0552ca0): fix command `vault print token` to `bao print token` in curl string generated by `buildCurlString()` ([#​511](https://redirect.github.com/openbao/openbao/issues/511)) ([@​Btijmen](https://redirect.github.com/Btijmen) ) - [`d7abf40`](https://redirect.github.com/openbao/openbao/commit/d7abf404f9f928a64b53fa2ff9192e00a9449b0a): release: v2.0.2 ([#​586](https://redirect.github.com/openbao/openbao/issues/586)) ([@​JanMa](https://redirect.github.com/JanMa)) - [`96853bb`](https://redirect.github.com/openbao/openbao/commit/96853bb4de27ab8ffd1b0c2898c691460d43edeb): use correct Alpine version ([#​589](https://redirect.github.com/openbao/openbao/issues/589)) ([@​cipherboy](https://redirect.github.com/cipherboy)) ### [`v2.0.1`](https://redirect.github.com/openbao/openbao/blob/HEAD/CHANGELOG.md#201) [Compare Source](https://redirect.github.com/openbao/openbao/compare/v2.0.0...v2.0.1) #### 2.0.1
sigstore/scaffolding (ghcr.io/sigstore/helm-charts/tuf) ### [`v0.1.19`](https://redirect.github.com/sigstore/scaffolding/releases/tag/v0.1.19) [Compare Source](https://redirect.github.com/sigstore/scaffolding/compare/v0.1.18...v0.1.19) Stop releasing ARM artifacts as they are no longer necessary. ### [`v0.1.18`](https://redirect.github.com/sigstore/scaffolding/releases/tag/v0.1.18) [Compare Source](https://redirect.github.com/sigstore/scaffolding/compare/v0.1.17...v0.1.18) Use the CI version of the trillian db which has schema already in it, so no need for createdb job anymore. ### [`v0.1.17`](https://redirect.github.com/sigstore/scaffolding/releases/tag/v0.1.17) [Compare Source](https://redirect.github.com/sigstore/scaffolding/compare/v0.1.16...v0.1.17) Add more configurability.
openbao/openbao-helm (openbao) ### [`v0.6.0`](https://redirect.github.com/openbao/openbao-helm/blob/HEAD/CHANGELOG.md#060-June-3rd-2020) [Compare Source](https://redirect.github.com/openbao/openbao-helm/compare/openbao-0.5.1...openbao-0.6.0) Features: - Added `extraInitContainers` to define init containers for the Vault cluster [GH-258](https://redirect.github.com/hashicorp/vault-helm/pull/258) - Added `postStart` lifecycle hook allowing users to configure commands to run on the Vault pods after they're ready [GH-315](https://redirect.github.com/hashicorp/vault-helm/pull/315) - Beta: Added OpenShift support [GH-319](https://redirect.github.com/hashicorp/vault-helm/pull/319) Improvements: - Server configs can now be defined in YAML. Multi-line string configs are still compatible [GH-213](https://redirect.github.com/hashicorp/vault-helm/pull/213) - Removed IPC_LOCK privileges since swap is disabled on containers \[[GH-198](https://redirect.github.com/hashicorp/vault-helm/pull/198)] - Use port names that map to vault.scheme \[[GH-223](https://redirect.github.com/hashicorp/vault-helm/pull/223)] - Allow both yaml and multi-line string annotations \[[GH-272](https://redirect.github.com/hashicorp/vault-helm/pull/272)] - Added configurable to set the Raft node name to hostname \[[GH-269](https://redirect.github.com/hashicorp/vault-helm/pull/269)] - Support setting priorityClassName on pods \[[GH-282](https://redirect.github.com/hashicorp/vault-helm/pull/282)] - Added support for ingress apiVersion `networking.k8s.io/v1beta1` \[[GH-310](https://redirect.github.com/hashicorp/vault-helm/pull/310)] - Added configurable to change service type for the HA active service [GH-317](https://redirect.github.com/hashicorp/vault-helm/pull/317) Bugs: - Fixed default ingress path \[[GH-224](https://redirect.github.com/hashicorp/vault-helm/pull/224)] - Fixed annotations for HA standby/active services \[[GH-268](https://redirect.github.com/hashicorp/vault-helm/pull/268)] - Updated some value defaults to match their use in templates \[[GH-309](https://redirect.github.com/hashicorp/vault-helm/pull/309)] - Use active service on ingress when ha \[[GH-270](https://redirect.github.com/hashicorp/vault-helm/pull/270)] - Fixed bug where pull secrets weren't being used for injector image [GH-298](https://redirect.github.com/hashicorp/vault-helm/pull/298) ### [`v0.5.1`](https://redirect.github.com/openbao/openbao-helm/releases/tag/openbao-0.5.1) [Compare Source](https://redirect.github.com/openbao/openbao-helm/compare/openbao-0.5.0...openbao-0.5.1) Official OpenBao Chart #### What's Changed - Use the CSI agent image registry from configuration by [@​thefinn93](https://redirect.github.com/thefinn93) in [https://github.com/openbao/openbao-helm/pull/17](https://redirect.github.com/openbao/openbao-helm/pull/17) #### New Contributors - [@​thefinn93](https://redirect.github.com/thefinn93) made their first contribution in [https://github.com/openbao/openbao-helm/pull/17](https://redirect.github.com/openbao/openbao-helm/pull/17) **Full Changelog**: https://github.com/openbao/openbao-helm/compare/openbao-0.5.0...openbao-0.5.1 ### [`v0.5.0`](https://redirect.github.com/openbao/openbao-helm/blob/HEAD/CHANGELOG.md#050-April-9th-2020) [Compare Source](https://redirect.github.com/openbao/openbao-helm/compare/openbao-0.4.0...openbao-0.5.0) Features: - Added Raft support for HA mode \[[GH-228](https://redirect.github.com/hashicorp/vault-helm/pull/229)] - Now supports Vault Enterprise \[[GH-250](https://redirect.github.com/hashicorp/vault-helm/pull/250)] - Added K8s Service Registration for HA modes \[[GH-250](https://redirect.github.com/hashicorp/vault-helm/pull/250)] - Option to set `AGENT_INJECT_VAULT_AUTH_PATH` for the injector \[[GH-185](https://redirect.github.com/hashicorp/vault-helm/pull/185)] - Added environment variables for logging and revocation on Vault Agent Injector \[[GH-219](https://redirect.github.com/hashicorp/vault-helm/pull/219)] - Option to set environment variables for the injector deployment \[[GH-232](https://redirect.github.com/hashicorp/vault-helm/pull/232)] - Added affinity, tolerations, and nodeSelector options for the injector deployment \[[GH-234](https://redirect.github.com/hashicorp/vault-helm/pull/234)] - Made all annotations multi-line strings \[[GH-227](https://redirect.github.com/hashicorp/vault-helm/pull/227)]

Configuration

šŸ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

šŸš¦ Automerge: Disabled by config. Please merge this manually once you are satisfied.

ā™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

šŸ‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.