search

sigstore / gitsign

Keyless Git signing using Sigstore
Other
950 stars 63 forks source link

Bump github.com/sigstore/fulcio from 1.4.5 to 1.5.1 #541

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps github.com/sigstore/fulcio from 1.4.5 to 1.5.1.

Release notes

Sourced from github.com/sigstore/fulcio's releases.

v1.5.1

Bug Fixes

Full Changelog: https://github.com/sigstore/fulcio/compare/v1.5.0...v1.5.1

v1.5.0

Features

  • Add Chainguard OIDC provider. (#1703)
  • Adding support for configuration from yaml file (#1687)
  • Upgrade go to 1.22 (#1625)

Documentation

  • oid-info: fix table render (#1662)
  • docs: Fix extensions for digest values requiring a type prefix (#1661)

Contributors

  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Facundo Tuesca
  • Javan Lacerda
  • Matt Moore
  • Tomas Turek
  • William Woodruff
Changelog

Sourced from github.com/sigstore/fulcio's changelog.

v1.5.1

Bug Fixes

  • Surface the right Name() from our principal. (#1726)

Contributors

  • Matt Moore

v1.5.0

Features

  • Add Chainguard OIDC provider. (#1703)
  • Adding support for configuration from yaml file (#1687)
  • Upgrade go to 1.22 (#1625)

Documentation

  • oid-info: fix table render (#1662)
  • docs: Fix extensions for digest values requiring a type prefix (#1661)

Contributors

  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Facundo Tuesca
  • Javan Lacerda
  • Matt Moore
  • Tomas Turek
  • William Woodruff
Commits
  • f11344b Revert "CiProvider as a new OIDCIssuer type (#1679)" (#1727)
  • d16be8d Surface the right Name() from our principal. (#1726)
  • 9f49a8b Bump google.golang.org/grpc in the go_modules group (#1724)
  • 66485b6 CiProvider as a new OIDCIssuer type (#1679)
  • 781fb65 Add changelog for v1.5.0 (#1723)
  • 93664b4 Bump actions/upload-artifact from 4.3.3 to 4.3.4 in the all group
  • b5358c7 Bump golang from 1.22.4 to 1.22.5 in the all group
  • 07b19da Update main.yml
  • b13cbef Bump protocolbuffers/protobuf from 27.1 to 27.2 in the all group
  • acebf8b Bump github.com/prometheus/common from 0.54.0 to 0.55.0
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
wlynch commented 4 months ago

@dependabot rebase

cpanato commented 4 months ago

@dependabot rebase