The v1.1.0 minor release generalizes the semantics of the DigestSet field type to support any type of immutable identifier. This change is backwards compatible because cryptographic digests are strongly recommended to achieve immutability, so any implementations that only support cryptographic DigestSet still meet the modified semantics. The _type of a Statement is still https://in-toto.io/Statement/v1
build(deps): Bump github.com/aws/aws-sdk-go from 1.53.10 to 1.53.14 in /pkg/signature/kms/aws in the all group by @dependabot in sigstore/sigstore#1740
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1755
build(deps): Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /pkg/signature/kms/hashivault by @dependabot in sigstore/sigstore#1766
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1762
build(deps): Bump github.com/aws/aws-sdk-go from 1.53.10 to 1.53.14 in /pkg/signature/kms/aws in the all group by @dependabot in sigstore/sigstore#1740
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1755
build(deps): Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /pkg/signature/kms/hashivault by @dependabot in sigstore/sigstore#1766
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1762
build(deps): Bump github.com/aws/aws-sdk-go from 1.53.10 to 1.53.14 in /pkg/signature/kms/aws in the all group by @dependabot in sigstore/sigstore#1740
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1755
build(deps): Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /pkg/signature/kms/hashivault by @dependabot in sigstore/sigstore#1766
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1762
build(deps): Bump github.com/aws/aws-sdk-go from 1.53.10 to 1.53.14 in /pkg/signature/kms/aws in the all group by @dependabot in sigstore/sigstore#1740
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1755
build(deps): Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /pkg/signature/kms/hashivault by @dependabot in sigstore/sigstore#1766
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 in /pkg/signature/kms/azure in the all group by @dependabot in sigstore/sigstore#1762
I'm waiting for a tektoncd member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.
Once the patch is verified, the new status will be reflected by the ok-to-test label.
Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
This pull-request has been approved by:
To complete the pull request process, please assign chitrangpatel after the PR has been reviewed.
You can assign the PR to them by writing /assign @chitrangpatel in a comment when ready.
The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
- **[OWNERS](https://github.com/tektoncd/chains/blob/main/OWNERS)**
Approvers can indicate their approval by writing `/approve` in a comment
Approvers can cancel approval by writing `/approve cancel` in a comment
Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository.
Bumps the all group with 11 updates in the / directory:
1.40.01.42.01.57.21.59.10.19.10.19.21.0.11.1.01.8.31.8.61.8.31.8.61.8.31.8.61.8.31.8.61.8.31.8.62.2.02.3.00.58.00.61.0Updates
cloud.google.com/go/storagefrom 1.40.0 to 1.42.0Commits
22e90d9chore(main): release spanner 1.42.0 (#7130)2552e09fix(spanner): fallback to check grpc error message if ResourceType is nil for...6bb95effeat(spanner): add database roles (#5701)f2b1f1bchore(bigquery/storage/managedwriter): internal refactor (flow controller, id...bcc9fcdtest(bigtable): expand integration tests for read stats (#7143)ab332cefix(internal/gapicgen): disable rest for non-rest APIs (#7157)dc89409chore(main): release pubsublite 1.6.0 (#7129)5fa8555feat(pubsublite): create/update export subscriptions (#6885)176f533feat(pubsublite): unload idle partition publishers (#7105)28f3572feat(all): enable REGAPIC and REST numeric enums (#6999)Updates
github.com/golangci/golangci-lintfrom 1.57.2 to 1.59.1Release notes
Sourced from github.com/golangci/golangci-lint's releases.
... (truncated)
Changelog
Sourced from github.com/golangci/golangci-lint's changelog.
... (truncated)
Commits
1a55854build(deps): bump github.com/golangci/misspell from 0.5.1 to 0.6.0 (#4804)aaff918build(deps): bump github.com/sashamelentyev/usestdlibvars from 1.25.0 to 1.26...327a78abuild(deps): bump golang.org/x/tools from 0.21.0 to 0.22.0 (#4802)02740eaintrange: add style preset (#4797)4e53f51docs: update revive configuration (#4790)839b9d7chore: improve issue templatesa7817a1chore: improve issue templatesd3a0412dev: improve issue templates44b3cddbuild(deps): bump github.com/go-viper/mapstructure/v2 from 2.0.0-alpha.1 to 2...615b873unparam: bump to HEAD (#4786)Updates
github.com/google/go-containerregistryfrom 0.19.1 to 0.19.2Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
1b4e407Add -O shorthand for --omit-digest-tags to crane. (#1958)3764db2Fix windows race condition when writing image with duplicate layers (#1921)39d1148Add Context support to auth methods (#1949)ff385a9feat: mutate platform (#1919)98dd3e9Support podman auth file REGISTRY_AUTH_FILE. (#1914)051d642registry: Implement Range requests for blobs (#1917)0309184Add JSON marshalling funcs for Digest. (#1915)Updates
github.com/in-toto/attestationfrom 1.0.1 to 1.1.0Release notes
Sourced from github.com/in-toto/attestation's releases.
Commits
36c1129Merge pull request #359 from marcelamelara/update-versioninga62b90aMake linter happy4adf92eAdd examples of different tagged release scenariosc1af60dAdd tagged release process to specb382eb5Update link in README to 1.1 (#357)bbbfea7Merge pull request #358 from in-toto/actions-regenerate-attestation-libraries241d47fRegenerate attestation librariesd6e910aMerge pull request #356 from in-toto/dependabot/go_modules/google.golang.org/...a8fc604Bump google.golang.org/protobuf from 1.34.0 to 1.34.106eafe3Clarify that digests don't have to be cryptographic ones. (#338)Updates
github.com/sigstore/sigstorefrom 1.8.3 to 1.8.6Release notes
Sourced from github.com/sigstore/sigstore's releases.
... (truncated)
Commits
5d4e11eBump goodkey, fix breakage (#1761)63cab17sync go mod115c2b2build(deps): Bump the all group across 1 directory with 6 updates8503e22build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity39973a8build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates58a8301build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates71ace11build(deps): Bump github.com/hashicorp/go-retryablehttpb777e4bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity5ea648cbuild(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updatesa3666d9build(deps): Bump the all group in /test/e2e with 2 updatesUpdates
github.com/sigstore/sigstore/pkg/signature/kms/awsfrom 1.8.3 to 1.8.6Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.
... (truncated)
Commits
5d4e11eBump goodkey, fix breakage (#1761)63cab17sync go mod115c2b2build(deps): Bump the all group across 1 directory with 6 updates8503e22build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity39973a8build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates58a8301build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates71ace11build(deps): Bump github.com/hashicorp/go-retryablehttpb777e4bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity5ea648cbuild(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updatesa3666d9build(deps): Bump the all group in /test/e2e with 2 updatesUpdates
github.com/sigstore/sigstore/pkg/signature/kms/azurefrom 1.8.3 to 1.8.6Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.
... (truncated)
Commits
5d4e11eBump goodkey, fix breakage (#1761)63cab17sync go mod115c2b2build(deps): Bump the all group across 1 directory with 6 updates8503e22build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity39973a8build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates58a8301build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates71ace11build(deps): Bump github.com/hashicorp/go-retryablehttpb777e4bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity5ea648cbuild(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updatesa3666d9build(deps): Bump the all group in /test/e2e with 2 updatesUpdates
github.com/sigstore/sigstore/pkg/signature/kms/gcpfrom 1.8.3 to 1.8.6Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.
... (truncated)
Commits
5d4e11eBump goodkey, fix breakage (#1761)63cab17sync go mod115c2b2build(deps): Bump the all group across 1 directory with 6 updatesHi @dependabot[bot]. Thanks for your PR.
I'm waiting for a tektoncd member to verify that this patch is reasonable to test. If it is, they should reply with
/ok-to-teston its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.Once the patch is verified, the new status will be reflected by the
ok-to-testlabel.I understand the commands that are listed here.
[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: To complete the pull request process, please assign chitrangpatel after the PR has been reviewed. You can assign the PR to them by writing
/assign @chitrangpatelin a comment when ready.The full list of commands accepted by this bot can be found here.
@dependabot[bot]: The following test failed, say
/retestto rerun all failed tests or/retest-requiredto rerun all mandatory failed tests:/test pull-tekton-chains-build-testsFull PR test history. Your PR dashboard.
@dependabot: PR needs rebase.
@dependabot rebase
Looks like these dependencies are updatable in another way, so this is no longer needed.