Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
deps(deps): update module github.com/sigstore/sigstore to v1.8.7 (#212)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/sigstore/sigstore](https://togithub.com/sigstore/sigstore) | `v1.8.6` -> `v1.8.7` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>sigstore/sigstore (github.com/sigstore/sigstore)</summary> ### [`v1.8.7`](https://togithub.com/sigstore/sigstore/releases/tag/v1.8.7) [Compare Source](https://togithub.com/sigstore/sigstore/compare/v1.8.6...v1.8.7) Dependencies updates only ##### What's Changed - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1770](https://togithub.com/sigstore/sigstore/pull/1770) - build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1769](https://togithub.com/sigstore/sigstore/pull/1769) - build(deps): Bump hashicorp/vault from 1.17.0 to 1.17.1 in /test/e2e in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1767](https://togithub.com/sigstore/sigstore/pull/1767) - build(deps): Bump github.com/sigstore/sigstore from 1.8.4 to 1.8.6 in /test/fuzz in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1768](https://togithub.com/sigstore/sigstore/pull/1768) - build(deps): Bump golang.org/x/crypto from 0.24.0 to 0.25.0 in /pkg/signature/kms/azure in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1772](https://togithub.com/sigstore/sigstore/pull/1772) - build(deps): Bump the all group across 1 directory with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1776](https://togithub.com/sigstore/sigstore/pull/1776) - build(deps): Bump actions/upload-artifact from 4.3.3 to 4.3.4 in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1771](https://togithub.com/sigstore/sigstore/pull/1771) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1773](https://togithub.com/sigstore/sigstore/pull/1773) - build(deps): Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /pkg/signature/kms/gcp by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1778](https://togithub.com/sigstore/sigstore/pull/1778) - build(deps): Bump the all group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1777](https://togithub.com/sigstore/sigstore/pull/1777) **Full Changelog**: sigstore/sigstore@v1.8.6...v1.8.7 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/validator-labs/validator-plugin-oci). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjUuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQyNS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
](https://renovatebot.com){kind=link}
- Loading branch information
1 parent
be1a840
commit 21a320a