aio-libs/janus - CodSpeed

janus

Blog Docs Changelog

Performance History

Latest Results

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#853) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h2>What's Changed</h2> <ul> <li>Used <a href="https://github.com/sigstore/sigstore-python">sigstore</a> package version is now 4.3.0</li> <li>Other dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a> build(deps): bump sigstore in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a> build(deps): bump idna in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a> build(deps): bump the python-dependencies group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a> build(deps): bump the actions group across 1 directory with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a> build(deps): bump securesystemslib in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a> build(deps): bump the python-dependencies group across 1 directory with 3 upd...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a> build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the python-dependenc...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a> build(deps): bump ast-serialize in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

19 hours ago

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#853) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h2>What's Changed</h2> <ul> <li>Used <a href="https://github.com/sigstore/sigstore-python">sigstore</a> package version is now 4.3.0</li> <li>Other dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a> build(deps): bump sigstore in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a> build(deps): bump idna in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a> build(deps): bump the python-dependencies group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a> build(deps): bump the actions group across 1 directory with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a> build(deps): bump securesystemslib in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a> build(deps): bump the python-dependencies group across 1 directory with 3 upd...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a> build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the python-dependenc...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a> build(deps): bump ast-serialize in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

2 days ago

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#853) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h2>What's Changed</h2> <ul> <li>Used <a href="https://github.com/sigstore/sigstore-python">sigstore</a> package version is now 4.3.0</li> <li>Other dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a> build(deps): bump sigstore in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a> build(deps): bump idna in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a> build(deps): bump the python-dependencies group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a> build(deps): bump the actions group across 1 directory with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a> build(deps): bump securesystemslib in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a> build(deps): bump the python-dependencies group across 1 directory with 3 upd...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a> build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the python-dependenc...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a> build(deps): bump ast-serialize in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

3 days ago

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#853) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h2>What's Changed</h2> <ul> <li>Used <a href="https://github.com/sigstore/sigstore-python">sigstore</a> package version is now 4.3.0</li> <li>Other dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a> build(deps): bump sigstore in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a> build(deps): bump idna in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a> build(deps): bump the python-dependencies group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a> build(deps): bump the actions group across 1 directory with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a> build(deps): bump securesystemslib in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a> build(deps): bump the python-dependencies group across 1 directory with 3 upd...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a> build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the python-dependenc...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a> build(deps): bump ast-serialize in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

4 days ago

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#853) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h2>What's Changed</h2> <ul> <li>Used <a href="https://github.com/sigstore/sigstore-python">sigstore</a> package version is now 4.3.0</li> <li>Other dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a> build(deps): bump sigstore in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a> build(deps): bump idna in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a> build(deps): bump the python-dependencies group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a> build(deps): bump the actions group across 1 directory with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a> build(deps): bump securesystemslib in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a> build(deps): bump the python-dependencies group across 1 directory with 3 upd...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a> build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the python-dependenc...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a> build(deps): bump ast-serialize in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

5 days ago

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 (#853) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h2>What's Changed</h2> <ul> <li>Used <a href="https://github.com/sigstore/sigstore-python">sigstore</a> package version is now 4.3.0</li> <li>Other dependency updates</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a> build(deps): bump sigstore in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a> build(deps): bump idna in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a> build(deps): bump the python-dependencies group with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a> build(deps): bump the actions group across 1 directory with 3 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a> build(deps): bump securesystemslib in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a> build(deps): bump the python-dependencies group across 1 directory with 3 upd...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a> build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the python-dependenc...</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a> build(deps): bump ast-serialize in the python-dependencies group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

6 days ago

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0 Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases) - [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0) --- updated-dependencies: - dependency-name: sigstore/gh-action-sigstore-python dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot/github_actions/sigstore/gh-action-sigstore-python-3.4.0

6 days ago

Bump docutils from 0.22.4 to 0.23 (#852) > [!WARNING] > Dependabot will stop supporting `python v3.9`! > > Please upgrade to one of the following versions: `v3.9`, `v3.10`, `v3.11`, `v3.12`, `v3.13`, or `v3.14`. > Bumps [docutils](https://github.com/rtfd/recommonmark) from 0.22.4 to 0.23. <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/rtfd/recommonmark/commits">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docutils&package-manager=pip&previous-version=0.22.4&new-version=0.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

master

7 days ago

Latest Branches

-1%

Bump sigstore/gh-action-sigstore-python from 3.3.0 to 3.4.0#853

6 days ago

24a21ef

dependabot/github_actions/sigstore/gh-action-sigstore-python-3.4.0

-3%

Bump docutils from 0.22.4 to 0.23#852

21 days ago

5619fc1

dependabot/pip/docutils-0.23

-1%

Bump pytest-codspeed from 5.0.2 to 5.0.3#851

24 days ago

6e3a669

dependabot/pip/pytest-codspeed-5.0.3

© 2026 CodSpeed Technology

Home Terms Privacy Docs