Skip to content

Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 in the github-actions group across 1 directory#2339

Merged
tim-schilling merged 1 commit intomainfrom
dependabot/github_actions/github-actions-94adab0535
Apr 17, 2026
Merged

Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 in the github-actions group across 1 directory#2339
tim-schilling merged 1 commit intomainfrom
dependabot/github_actions/github-actions-94adab0535

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 6, 2026

Bumps the github-actions group with 1 update in the / directory: sigstore/gh-action-sigstore-python.

Updates sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.3.0

What's Changed

  • Dependency updates. Most importantly used sigstore-python is now version 4.2.0

Full Changelog: sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0

Commits
  • 04cffa1 build(deps): bump requests from 2.32.5 to 2.33.0 in /requirements (#342)
  • 69171e8 build(deps): bump charset-normalizer in the python-dependencies group (#340)
  • 40198d7 build(deps): bump github/codeql-action in the actions group (#338)
  • ca55bb0 build(deps): bump the python-dependencies group with 2 updates (#339)
  • 2736143 build(deps): bump the actions group with 3 updates (#335)
  • 9afbb88 build(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /requirements (#337)
  • eb907b0 build(deps): bump pyopenssl from 25.3.0 to 26.0.0 in /requirements (#334)
  • 84eaebf build(deps): bump astral-sh/setup-uv in the actions group (#331)
  • 57c12be build(deps): bump charset-normalizer in the python-dependencies group (#332)
  • 57918d7 build(deps): bump pyjwt from 2.11.0 to 2.12.0 in /requirements (#333)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 6, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Coverage report

This PR does not seem to contain any modification to coverable code.

Bumps the github-actions group with 1 update: [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python).


Updates `sigstore/gh-action-sigstore-python` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/gh-action-sigstore-python@a5caf34...04cffa1)

---
updated-dependencies:
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 in the github-actions group Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0 in the github-actions group across 1 directory Apr 13, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-94adab0535 branch from 615aa1a to bf55957 Compare April 13, 2026 01:16
Copy link
Copy Markdown
Member

@codingjoe codingjoe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only dependency updates, see also: sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0

@tim-schilling tim-schilling merged commit 7ba1094 into main Apr 17, 2026
32 checks passed
@tim-schilling tim-schilling deleted the dependabot/github_actions/github-actions-94adab0535 branch April 17, 2026 21:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants