Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot]
commented
2 months ago
Bumps the actions-updates group with 3 updates in the / directory: actions/upload-artifact, sigstore/cosign-installer and docker/setup-buildx-action.
Updates
actions/upload-artifactfrom 4.3.4 to 4.3.6Release notes
Sourced from actions/upload-artifact's releases.
Commits
834a144Merge pull request #594 from actions/robherley/4.3.6134dcf3v4.3.673a0b9crevert back to@actions/artifact2.1.889ef406Merge pull request #588 from actions/robherley/4.3.523d796dlicense updatese445c64bump@actions/artifactto v2.1.9Updates
sigstore/cosign-installerfrom 3.5.0 to 3.6.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
4959ce0update readme for new release (#170)45ffe83bump default version to v2.4.0 release (#168)7e1d9c1pin public key used for verification (#169)cc23fe1Bump actions/setup-go from 5.0.1 to 5.0.2 (#167)b235ed9Bump actions/checkout from 4.1.6 to 4.1.7 (#166)b49ef6bBump actions/checkout from 4.1.5 to 4.1.6 (#165)7a59e5aBump actions/checkout from 4.1.4 to 4.1.5 (#164)8d927bdBump actions/setup-go from 5.0.0 to 5.0.1 (#163)8c9caa0Bump actions/checkout from 4.1.3 to 4.1.4 (#162)19351d0Bump actions/checkout from 4.1.2 to 4.1.3 (#161)Updates
docker/setup-buildx-actionfrom 3.5.0 to 3.6.1Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
988b5a0Merge pull request #347 from crazy-max/skip-malformed-context2c21562chore: update generated content3382292check for malformed docker context3d68780Merge pull request #341 from crazy-max/docker-context-tlsd069e98chore: update generated content8b850f8create docker context if default one has TLS data loadedDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show