aio-libs
janus
Blog
Docs
Changelog
Blog
Docs
Changelog
Overview
Branches
Benchmarks
Runs
Performance History
Latest Results
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
8 hours ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
1 day ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
2 days ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
3 days ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
4 days ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
5 days ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
6 days ago
Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#774) Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.0.0 to 3.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgraded to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md">sigstore/gh-action-sigstore-python's changelog</a>.</em></p> <blockquote> <h2>[3.0.1]</h2> <h3>Changed</h3> <ul> <li>The minimum Python version supported by this action is now 3.9 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/155">#155</a>)</li> <li>The action's Python dependencies are now fully pinned to specific versions (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/165">#165</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>The <code>rfc3161-client</code> dependency has been upgrades to <code>1.0.3</code> to resolve a security vulnerability (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/pull/182">#182</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f7ad0af51a5648d09a20d00370f0a91c3bdf8f84"><code>f7ad0af</code></a> chore: prep 3.0.1 (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/183">#183</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/7dad330b7cc00877fda38e8ac56c7d69e20bd080"><code>7dad330</code></a> build(deps): bump rfc3161-client from 1.0.2 to 1.0.3 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/182">#182</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/deae7b09039836f94c5a183a266f8cd31bd769a6"><code>deae7b0</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/181">#181</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/f38fa95e2fe947a0827cf83585e9cd65f6107d5a"><code>f38fa95</code></a> build(deps): bump urllib3 from 2.4.0 to 2.5.0 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/180">#180</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/6409abb6b6aa159c173b7ccfc47078bec5735676"><code>6409abb</code></a> build(deps): bump the actions group with 2 updates (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/178">#178</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/d7c8f99cb60c12cfbcea09cfb344ed5a108c84b6"><code>d7c8f99</code></a> build(deps): bump softprops/action-gh-release in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/177">#177</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/e346064a371a9668bb0943cbbfd9d285feabfd06"><code>e346064</code></a> build(deps): bump requests from 2.32.3 to 2.32.4 in /requirements (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/176">#176</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/cbd4d80b10f2b708b7be83cdf2318a15ae9cf632"><code>cbd4d80</code></a> Update Python dependencies (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/174">#174</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/250d1740e0d24c4565c8a5b94f10a952e06e9063"><code>250d174</code></a> build(deps): bump github/codeql-action in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/172">#172</a>)</li> <li><a href="https://github.com/sigstore/gh-action-sigstore-python/commit/42bbcff08f93bc51a1e4b48a19b633ab975d10a6"><code>42bbcff</code></a> build(deps): bump astral-sh/setup-uv in the actions group (<a href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/171">#171</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.0.0...v3.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
master
7 days ago
Active Branches
Refactor notifiers
last run
6 months ago
#725
CodSpeed Performance Gauge
-2%
Fix event loop binding
last run
6 months ago
#727
CodSpeed Performance Gauge
0%
© 2025 CodSpeed Technology
Home
Terms
Privacy
Docs