Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
deps(deps): update module github.com/sigstore/cosign/v2 to v2.4.2 (#370)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/sigstore/cosign/v2](https://redirect.github.com/sigstore/cosign) | `v2.4.1` -> `v2.4.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>sigstore/cosign (github.com/sigstore/cosign/v2)</summary> ### [`v2.4.2`](https://redirect.github.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v242) [Compare Source](https://redirect.github.com/sigstore/cosign/compare/v2.4.1...v2.4.2) #### Features - Updated open-policy-agent to 1.1.0 library ([#​4036](https://redirect.github.com/sigstore/cosign/issues/4036)) - Note that only Rego v0 policies are supported at this time - Add UseSignedTimestamps to CheckOpts, refactor TSA options ([#​4006](https://redirect.github.com/sigstore/cosign/issues/4006)) - Add support for verifying root checksum in cosign initialize ([#​3953](https://redirect.github.com/sigstore/cosign/issues/3953)) - Detect if user supplied a valid protobuf bundle ([#​3931](https://redirect.github.com/sigstore/cosign/issues/3931)) - Add a log message if user doesn't provide `--trusted-root` ([#​3933](https://redirect.github.com/sigstore/cosign/issues/3933)) - Support mTLS towards container registry ([#​3922](https://redirect.github.com/sigstore/cosign/issues/3922)) - Add bundle create helper command ([#​3901](https://redirect.github.com/sigstore/cosign/issues/3901)) - Add trusted-root create helper command ([#​3876](https://redirect.github.com/sigstore/cosign/issues/3876)) #### Bug Fixes - fix: set tls config while retaining other fields from default http transport ([#​4007](https://redirect.github.com/sigstore/cosign/issues/4007)) - policy fuzzer: ignore known panics ([#​3993](https://redirect.github.com/sigstore/cosign/issues/3993)) - Fix for multiple WithRemote options ([#​3982](https://redirect.github.com/sigstore/cosign/issues/3982)) - Add nightly conformance test workflow ([#​3979](https://redirect.github.com/sigstore/cosign/issues/3979)) - Fix copy --only for signatures + update/align docs ([#​3904](https://redirect.github.com/sigstore/cosign/issues/3904)) #### Documentation - Remove usage.md from spec, point to client spec ([#​3918](https://redirect.github.com/sigstore/cosign/issues/3918)) - move reference from gcr to ghcr ([#​3897](https://redirect.github.com/sigstore/cosign/issues/3897)) #### Contributors - AdamKorcz - Aditya Sirish - Bob Callaway - Carlos Tadeu Panato Junior - Cody Soyland - Colleen Murphy - Hayden B - Jussi Kukkonen - Marco Franssen - Nianyu Shen - Slavek Kabrda - Søren Juul - Warren Hodgkinson - Zach Steindler </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/validator-labs/validator-plugin-oci). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNDUuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE0NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnbyJdfQ==--> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
- Loading branch information
1 parent
3f4cd8b
commit 4c341cf