-
Notifications
You must be signed in to change notification settings - Fork 32
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the all group in /acceptance with 5 updates #2188
Conversation
Bumps the all group in /acceptance with 5 updates: | Package | From | To | | --- | --- | --- | | cuelang.org/go | `0.10.1` | `0.11.0` | | [github.com/enterprise-contract/enterprise-contract-controller/api](https://github.com/enterprise-contract/enterprise-contract-controller) | `0.1.66` | `0.1.68` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.3.6` | `1.3.7` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.8.9` | `1.8.10` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` | Updates `cuelang.org/go` from 0.10.1 to 0.11.0 Updates `github.com/enterprise-contract/enterprise-contract-controller/api` from 0.1.66 to 0.1.68 - [Release notes](https://github.com/enterprise-contract/enterprise-contract-controller/releases) - [Commits](enterprise-contract/enterprise-contract-controller@api/v0.1.66...api/v0.1.68) Updates `github.com/sigstore/rekor` from 1.3.6 to 1.3.7 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.6...v1.3.7) Updates `github.com/sigstore/sigstore` from 1.8.9 to 1.8.10 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.9...v1.8.10) Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.9.0...v1.10.0) --- updated-dependencies: - dependency-name: cuelang.org/go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/enterprise-contract/enterprise-contract-controller/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2188 +/- ##
=======================================
Coverage 71.22% 71.22%
=======================================
Files 88 88
Lines 7490 7490
=======================================
Hits 5335 5335
Misses 2155 2155
Flags with carried forward coverage won't be shown. Click here to find out more. |
@dependabot ignore github.com/sigstore/rekor |
OK, I won't notify you about github.com/sigstore/rekor again, unless you unignore it. |
@dependabot recreate |
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the all group in /acceptance with 5 updates:
0.10.1
0.11.0
0.1.66
0.1.68
1.3.6
1.3.7
1.8.9
1.8.10
1.9.0
1.10.0
Updates
cuelang.org/go
from 0.10.1 to 0.11.0Updates
github.com/enterprise-contract/enterprise-contract-controller/api
from 0.1.66 to 0.1.68Release notes
Sourced from github.com/enterprise-contract/enterprise-contract-controller/api's releases.
Commits
88e97ff
Merge pull request #432 from zregvart/pr/golang-version-in-schema-workflowe01c32b
Proper golang version in publish-schema workflow7b6dc49
Merge pull request #428 from zregvart/issue/42358d34a4
Merge pull request #431 from enterprise-contract/dependabot/github_actions/co...12817cd
Merge pull request #430 from enterprise-contract/dependabot/github_actions/gi...299e720
Merge pull request #429 from enterprise-contract/dependabot/github_actions/so...2c2e609
Bump codecov/codecov-action from 4.6.0 to 5.0.29823cbf
Bump github/codeql-action from 3.27.1 to 3.27.4109029e
Bump softprops/action-gh-release from 2.0.9 to 2.1.0ac7068b
DeclarevolatileConfig
as a slice instead of mapUpdates
github.com/sigstore/rekor
from 1.3.6 to 1.3.7Release notes
Sourced from github.com/sigstore/rekor's releases.
Changelog
Sourced from github.com/sigstore/rekor's changelog.
Commits
4caadbc
changelog for v1.3.7 (#2284)9fddf00
log request body on 500 error to aid debugging (#2283)92584b7
remove unneeded value in log message (#2282)56ea4b5
Add error message when computing consistency proof (#2278)3eb84f9
build(deps): Bump the all group with 2 updates28aa29c
build(deps): Bump google/cloud-sdk from 500.0.0 to 501.0.0d7e2d1d
build(deps): Bump codecov/codecov-action from 4.6.0 to 5.0.2a018e78
build(deps): Bump google.golang.org/api from 0.205.0 to 0.206.038d5f67
build(deps): Bump golang fromd56c3e0
to73f06be
ded5cd1
build(deps): Bump google.golang.org/api from 0.204.0 to 0.205.0Updates
github.com/sigstore/sigstore
from 1.8.9 to 1.8.10Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
305ff9e
bump to go 1.22.8 (#1865)d88a949
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#1860)cfde863
build(deps): Bump the gomod group across 1 directory with 3 updates (#1859)e928a84
build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#1861)66f05db
build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#1862)f0978ed
build(deps): Bump the all group with 2 updates (#1863)9398b12
build(deps): Bump the all group in /test/e2e with 2 updates (#1864)bd8ee68
Mark TUF client as deprecated (#1858)c59dfa0
build(deps): Bump golang.org/x/crypto from 0.25.0 to 0.28.0 (#1852)bde3e53
build(deps): Bump golang.org/x/term from 0.22.0 to 0.25.0 (#1851)Updates
github.com/stretchr/testify
from 1.9.0 to 1.10.0Release notes
Sourced from github.com/stretchr/testify's releases.
... (truncated)
Commits
89cbdd9
Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls07bac60
Merge pull request #1667 from sikehish/flaky716de8d
Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI118fb83
NotSame should fail if args are not pointers #1661 (#1664)7d99b2b
attempt 205f87c0
more similarea7129e
better fmta1b9c9e
Merge pull request #1663 from ybrustin/master8302de9
Merge branch 'master' into master89352f7
Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2Most Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions