Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/sigstore
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.8.6
Choose a base ref
...
head repository: sigstore/sigstore
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.8.7
Choose a head ref
  • 11 commits
  • 14 files changed
  • 2 contributors

Commits on Jul 2, 2024

  1. build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates

    Bumps the all group in /pkg/signature/kms/gcp with 2 updates: [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).
    
    
    Updates `cloud.google.com/go/kms` from 1.18.0 to 1.18.1
    - [Release notes](https://github.com/googleapis/google-cloud-go/releases)
    - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
    - [Commits](googleapis/google-cloud-go@kms/v1.18.0...kms/v1.18.1)
    
    Updates `google.golang.org/api` from 0.185.0 to 0.186.0
    - [Release notes](https://github.com/googleapis/google-api-go-client/releases)
    - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
    - [Commits](googleapis/google-api-go-client@v0.185.0...v0.186.0)
    
    ---
    updated-dependencies:
    - dependency-name: cloud.google.com/go/kms
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    - dependency-name: google.golang.org/api
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 2, 2024
    Configuration menu
    Copy the full SHA
    8831273 View commit details
    Browse the repository at this point in the history
  2. build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates

    Bumps the all group in /pkg/signature/kms/aws with 4 updates: [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go), [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) and [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2).
    
    
    Updates `github.com/aws/aws-sdk-go` from 1.54.6 to 1.54.11
    - [Release notes](https://github.com/aws/aws-sdk-go/releases)
    - [Commits](aws/aws-sdk-go@v1.54.6...v1.54.11)
    
    Updates `github.com/aws/aws-sdk-go-v2` from 1.30.0 to 1.30.1
    - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
    - [Commits](aws/aws-sdk-go-v2@v1.30.0...v1.30.1)
    
    Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.21 to 1.27.23
    - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
    - [Commits](aws/aws-sdk-go-v2@config/v1.27.21...config/v1.27.23)
    
    Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.34.1 to 1.35.1
    - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
    - [Commits](aws/aws-sdk-go-v2@service/s3/v1.34.1...service/fms/v1.35.1)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/aws/aws-sdk-go
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    - dependency-name: github.com/aws/aws-sdk-go-v2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    - dependency-name: github.com/aws/aws-sdk-go-v2/config
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 2, 2024
    Configuration menu
    Copy the full SHA
    51d791e View commit details
    Browse the repository at this point in the history
  3. build(deps): Bump hashicorp/vault in /test/e2e in the all group

    Bumps the all group in /test/e2e with 1 update: hashicorp/vault.
    
    
    Updates `hashicorp/vault` from 1.17.0 to 1.17.1
    
    ---
    updated-dependencies:
    - dependency-name: hashicorp/vault
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 2, 2024
    Configuration menu
    Copy the full SHA
    8243831 View commit details
    Browse the repository at this point in the history
  4. build(deps): Bump github.com/sigstore/sigstore

    Bumps the all group in /test/fuzz with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).
    
    
    Updates `github.com/sigstore/sigstore` from 1.8.4 to 1.8.6
    - [Release notes](https://github.com/sigstore/sigstore/releases)
    - [Commits](v1.8.4...v1.8.6)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/sigstore/sigstore
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 2, 2024
    Configuration menu
    Copy the full SHA
    016e2e3 View commit details
    Browse the repository at this point in the history

Commits on Jul 9, 2024

  1. build(deps): Bump golang.org/x/crypto

    Bumps the all group in /pkg/signature/kms/azure with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).
    
    
    Updates `golang.org/x/crypto` from 0.24.0 to 0.25.0
    - [Commits](golang/crypto@v0.24.0...v0.25.0)
    
    ---
    updated-dependencies:
    - dependency-name: golang.org/x/crypto
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    aeb9782 View commit details
    Browse the repository at this point in the history
  2. build(deps): Bump the all group across 1 directory with 2 updates

    Bumps the all group with 2 updates in the /pkg/signature/kms/aws directory: [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) and [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2).
    
    
    Updates `github.com/aws/aws-sdk-go` from 1.54.11 to 1.54.16
    - [Release notes](https://github.com/aws/aws-sdk-go/releases)
    - [Commits](aws/aws-sdk-go@v1.54.11...v1.54.16)
    
    Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.23 to 1.27.24
    - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
    - [Commits](aws/aws-sdk-go-v2@config/v1.27.23...config/v1.27.24)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/aws/aws-sdk-go
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    - dependency-name: github.com/aws/aws-sdk-go-v2/config
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    ec4bc1a View commit details
    Browse the repository at this point in the history
  3. build(deps): Bump actions/upload-artifact in the all group

    Bumps the all group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).
    
    
    Updates `actions/upload-artifact` from 4.3.3 to 4.3.4
    - [Release notes](https://github.com/actions/upload-artifact/releases)
    - [Commits](actions/upload-artifact@6546280...0b2256b)
    
    ---
    updated-dependencies:
    - dependency-name: actions/upload-artifact
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    aebd23d View commit details
    Browse the repository at this point in the history
  4. build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates

    Bumps the all group in /pkg/signature/kms/gcp with 2 updates: [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).
    
    
    Updates `cloud.google.com/go/kms` from 1.18.1 to 1.18.2
    - [Release notes](https://github.com/googleapis/google-cloud-go/releases)
    - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
    - [Commits](googleapis/google-cloud-go@kms/v1.18.1...kms/v1.18.2)
    
    Updates `google.golang.org/api` from 0.186.0 to 0.187.0
    - [Release notes](https://github.com/googleapis/google-api-go-client/releases)
    - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
    - [Commits](googleapis/google-api-go-client@v0.186.0...v0.187.0)
    
    ---
    updated-dependencies:
    - dependency-name: cloud.google.com/go/kms
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    - dependency-name: google.golang.org/api
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 9, 2024
    Configuration menu
    Copy the full SHA
    f6b4bb5 View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2024

  1. build(deps): Bump google.golang.org/grpc in /pkg/signature/kms/gcp

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.64.0 to 1.64.1.
    - [Release notes](https://github.com/grpc/grpc-go/releases)
    - [Commits](grpc/grpc-go@v1.64.0...v1.64.1)
    
    ---
    updated-dependencies:
    - dependency-name: google.golang.org/grpc
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    9a70270 View commit details
    Browse the repository at this point in the history

Commits on Jul 11, 2024

  1. build(deps): Bump the all group across 1 directory with 4 updates

    Bumps the all group with 2 updates in the / directory: [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) and [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).
    
    
    Updates `github.com/coreos/go-oidc/v3` from 3.10.0 to 3.11.0
    - [Release notes](https://github.com/coreos/go-oidc/releases)
    - [Commits](coreos/go-oidc@v3.10.0...v3.11.0)
    
    Updates `github.com/google/go-containerregistry` from 0.19.2 to 0.20.0
    - [Release notes](https://github.com/google/go-containerregistry/releases)
    - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
    - [Commits](google/go-containerregistry@v0.19.2...v0.20.0)
    
    Updates `golang.org/x/crypto` from 0.24.0 to 0.25.0
    - [Commits](golang/crypto@v0.24.0...v0.25.0)
    
    Updates `golang.org/x/term` from 0.21.0 to 0.22.0
    - [Commits](golang/term@v0.21.0...v0.22.0)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/coreos/go-oidc/v3
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    - dependency-name: github.com/google/go-containerregistry
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    - dependency-name: golang.org/x/crypto
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    - dependency-name: golang.org/x/term
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    dependabot[bot] authored and cpanato committed Jul 11, 2024
    Configuration menu
    Copy the full SHA
    2506e5d View commit details
    Browse the repository at this point in the history
  2. sync go mod

    Signed-off-by: cpanato <ctadeu@gmail.com>
    cpanato committed Jul 11, 2024
    Configuration menu
    Copy the full SHA
    cb8b4bb View commit details
    Browse the repository at this point in the history
Loading