sigstore / cosign

Code signing and transparency for containers and binaries
Apache License 2.0
4.23k stars 505 forks source link

chore(deps): bump go.step.sm/crypto from 0.46.0 to 0.47.0 #3723

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps go.step.sm/crypto from 0.46.0 to 0.47.0.

Commits
  • 3048556 Merge pull request #519 from smallstep/mariano/mackms-ecdh
  • bbba371 Add support for ECDH exchange using MacKMS
  • 06565ee Merge pull request #517 from smallstep/dependabot/go_modules/github.com/aws/a...
  • 1ce4712 Bump github.com/aws/aws-sdk-go-v2/config from 1.27.16 to 1.27.17
  • e9e2754 Merge pull request #516 from smallstep/dependabot/go_modules/google.golang.or...
  • 867d479 Merge pull request #518 from smallstep/dependabot/go_modules/github.com/aws/a...
  • ab9ef12 Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.32.1 to 1.32.2
  • 725fc4f Bump google.golang.org/api from 0.181.0 to 0.182.0
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
cpanato commented 3 weeks ago

@dependabot rebase