Closed dependabot[bot] closed 4 months ago
Dependabot couldn't find a package.json. Because of this, Dependabot cannot update this pull request.
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure ignore rules in dependabot.yml
Bumps the prod-deps group with 2 updates: @actions/attest and @sigstore/oci.
Updates
@actions/attest
from 1.1.0 to 1.2.1Changelog
Sourced from
@actions/attest
's changelog.Commits
Updates
@sigstore/oci
from 0.2.0 to 0.3.1Release notes
Sourced from
@sigstore/oci
's releases.Commits
08ac1f1
Version Packages (#1121)88e91c7
fix retry bug when calling external apis (#1148)9d300e8
Bump the prod-deps group across 1 directory with 3 updates (#1149)c8d67bb
Bump the dev-deps group across 1 directory with 2 updates (#1147)554f3cd
Bump actions/checkout from 4.1.4 to 4.1.5 in the minor-patch group (#1146)19b5169
Bump the dev-deps group with 2 updates (#1141)49b1e0c
Bump the minor-patch group across 1 directory with 2 updates (#1136)c5456c5
Bump the dev-deps group with 3 updates (#1139)6308110
update to lockfile version 3 (#1138)18e9222
Bump the dev-deps group with 2 updates (#1133)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show