sigstore / gitsign

Keyless Git signing using Sigstore
Other
937 stars 61 forks source link

Bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1 #486

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 6 months ago

Bumps github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1.

Changelog

Sourced from github.com/sigstore/protobuf-specs's changelog.

0.3.1

  • Added client configuration message for signing (#277)
  • Added a new format for the media type that is compatible with OCI registries (#279)
  • Added events.proto for Ruby package (#264)
  • Targeted Node16 for Typescript package (#230)

Changed

  • Docs: Removed timestamp from checkpoint (#247)
  • Remove EXPERIMENTAL prefix from LMS schemes (#214)

Fixed

  • Docs: Clarified trust anchor in chain (#245
Commits
  • 1d62444 Bump versions for v0.3.1 (#283)
  • 6a776ff Add CHANGELOG for v0.3.1 (#281)
  • 58ba3ec trustroot: initial client config messages (#277)
  • 0d09353 Updated media type to a format compatible with OCI registries (#279)
  • 0473f83 build(deps): bump the protobuf group in /java with 2 updates (#280)
  • ca6a4a0 build(deps): bump actions/setup-python from 5.0.0 to 5.1.0 (#278)
  • a8fec2c build(deps): bump the protobuf group in /java with 3 updates (#275)
  • efbd865 Update java build (#276)
  • a631049 build(deps): bump com.google.api.grpc:proto-google-common-protos (#269)
  • 8644adf Update dependabot.yml (#274)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
cpanato commented 6 months ago

@dependabot rebase