Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 26, 2023

Bumps github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.7.4 to 1.7.5.

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.

v1.7.5

What's Changed

Full Changelog: sigstore/sigstore@v1.7.4...v1.7.5

Commits
  • 5dfaffe bump go-tuf to v0.6.1 (#1479)
  • bb50433 build(deps): bump github.com/coreos/go-oidc/v3 from 3.6.0 to 3.7.0 (#1467)
  • 5884392 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.3 (#1473)
  • 9bc58dd build(deps): bump google.golang.org/grpc in /pkg/signature/kms/aws (#1476)
  • 677bea2 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#1470)
  • 4bd1165 build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1471)
  • d4bd733 build(deps): bump hashicorp/vault from 1.15.0 to 1.15.1 in /test/e2e (#1472)
  • c95b03d build(deps): bump google.golang.org/grpc in /test/fuzz (#1474)
  • 6c6e1da build(deps): bump google.golang.org/grpc (#1475)
  • f5e3ea7 build(deps): bump google.golang.org/grpc in /pkg/signature/kms/azure (#1477)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 26, 2023
@codecov
Copy link

codecov bot commented Oct 26, 2023

Codecov Report

Merging #3326 (c9a7ba3) into main (ddb8af5) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #3326   +/-   ##
=======================================
  Coverage   30.65%   30.65%           
=======================================
  Files         155      155           
  Lines        9994     9994           
=======================================
  Hits         3064     3064           
  Misses       6474     6474           
  Partials      456      456           

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/aws-1.7.5 branch from 888aca6 to 69140e3 Compare October 26, 2023 17:09
hectorj2f
hectorj2f previously approved these changes Oct 26, 2023
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/aws-1.7.5 branch from 69140e3 to 94e65ab Compare October 26, 2023 17:58
@hectorj2f
Copy link
Contributor

@dependabot rebase

@hectorj2f hectorj2f enabled auto-merge (squash) October 26, 2023 18:42
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) from 1.7.4 to 1.7.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.7.4...v1.7.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/aws-1.7.5 branch from 94e65ab to c9a7ba3 Compare October 26, 2023 18:44
@hectorj2f hectorj2f merged commit aea520a into main Oct 26, 2023
@hectorj2f hectorj2f deleted the dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/aws-1.7.5 branch October 26, 2023 19:28
@github-actions github-actions bot added this to the v2.3.0 milestone Oct 26, 2023
@cpanato cpanato modified the milestones: v2.3.0, v2.2.1 Nov 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants