Commit 685c08c
authored
fix(deps): update go (#2338)
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/sigstore/cosign/v2](https://togithub.com/sigstore/cosign)
| require | minor | `v2.0.2` -> `v2.1.0` |
| [github.com/sigstore/sigstore](https://togithub.com/sigstore/sigstore)
| require | minor | `v1.6.4` -> `v1.7.1` |
---
### ⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>sigstore/cosign</summary>
###
[`v2.1.0`](https://togithub.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v210)
[Compare
Source](https://togithub.com/sigstore/cosign/compare/v2.0.2...v2.1.0)
**Breaking Change: The predicate is now a required flag in the attest
commands, set via the --type flag.**
#### Enhancements
- Verify sigs and attestations in parallel
([#​3066](https://togithub.com/sigstore/cosign/issues/3066))
- Deep inspect attestations when filtering download
([#​3031](https://togithub.com/sigstore/cosign/issues/3031))
- refactor bundle validation code, add support for DSSE rekor type
([#​3016](https://togithub.com/sigstore/cosign/issues/3016))
- Allow overriding remote options
([#​3049](https://togithub.com/sigstore/cosign/issues/3049))
- feat: adds no cert found on sig exit code
([#​3038](https://togithub.com/sigstore/cosign/issues/3038))
- Make predicate a required flag in attest commands
([#​3033](https://togithub.com/sigstore/cosign/issues/3033))
- Added support for attaching Time stamp authority Response in attach
command
([#​3001](https://togithub.com/sigstore/cosign/issues/3001))
- Add `sign --sign-container-identity` CLI
([#​2984](https://togithub.com/sigstore/cosign/issues/2984))
- Feature: Allow cosign to sign digests before they are uploaded.
([#​2959](https://togithub.com/sigstore/cosign/issues/2959))
- accepts `attachment-tag-prefix` for `cosign copy`
([#​3014](https://togithub.com/sigstore/cosign/issues/3014))
- Feature: adds '--allow-insecure-registry' for cosign load
([#​3000](https://togithub.com/sigstore/cosign/issues/3000))
- download attestation: support --platform flag
([#​2980](https://togithub.com/sigstore/cosign/issues/2980))
- Cleanup: Add `Digest` to the `SignedEntity` interface.
([#​2960](https://togithub.com/sigstore/cosign/issues/2960))
- verify command: support keyless verification using only a provided
certificate chain with non-fulcio roots
([#​2845](https://togithub.com/sigstore/cosign/issues/2845))
- verify: use workers to limit the paralellism when verifying images
with --max-workers flag
([#​3069](https://togithub.com/sigstore/cosign/issues/3069))
#### Bug Fixes
- Fix pkg/cosign/errors
([#​3050](https://togithub.com/sigstore/cosign/issues/3050))
- fix: update doc to refer to github-actions oidc provider
([#​3040](https://togithub.com/sigstore/cosign/issues/3040))
- fix: prefer GitHub OIDC provider if enabled
([#​3044](https://togithub.com/sigstore/cosign/issues/3044))
- Fix --sig-only in cosign copy
([#​3074](https://togithub.com/sigstore/cosign/issues/3074))
#### Documentation
- Fix links to sigstore/docs in markdown files
([#​3064](https://togithub.com/sigstore/cosign/issues/3064))
- Update release readme
([#​2942](https://togithub.com/sigstore/cosign/issues/2942))
**Thank you to our contributors!**
- Bob Callaway
- Carlos Tadeu Panato Junior
- Chok Yip Lau
- Chris Burns
- Dmitry Savintsev
- Enyinna Ochulor
- Hayden B
- Hector Fernandez
- Jakub Hrozek
- Jason Hall
- Jon Johnson
- Luiz Carvalho
- Matt Moore
- Mritunjay Kumar Sharma
- Mukuls77
- Ramkumar Chinchani
- Sascha Grunert
- Yolanda Robla Mota
- priyawadhwa
</details>
<details>
<summary>sigstore/sigstore</summary>
###
[`v1.7.1`](https://togithub.com/sigstore/sigstore/releases/tag/v1.7.1)
[Compare
Source](https://togithub.com/sigstore/sigstore/compare/v1.7.0...v1.7.1)
#### What's Changed
- Allow the user to optionally pass a Key Vault key version, update the
SDK by [@​malancas](https://togithub.com/malancas) in
[https://github.com/sigstore/sigstore/pull/1231](https://togithub.com/sigstore/sigstore/pull/1231)
- update golangci-lint to v1.53.x by
[@​cpanato](https://togithub.com/cpanato) in
[https://github.com/sigstore/sigstore/pull/1216](https://togithub.com/sigstore/sigstore/pull/1216)
**Full Changelog**:
sigstore/sigstore@v1.7.0...v1.7.1
###
[`v1.7.0`](https://togithub.com/sigstore/sigstore/releases/tag/v1.7.0)
[Compare
Source](https://togithub.com/sigstore/sigstore/compare/v1.6.5...v1.7.0)
#### What's Changed
- Update Azure Key Vault client by
[@​malancas](https://togithub.com/malancas) in
[https://github.com/sigstore/sigstore/pull/1170](https://togithub.com/sigstore/sigstore/pull/1170)
- kms: split KMS providers into separate Go modules by
[@​imjasonh](https://togithub.com/imjasonh) in
[https://github.com/sigstore/sigstore/pull/1115](https://togithub.com/sigstore/sigstore/pull/1115)
- have submodules specify real s/s releases by
[@​imjasonh](https://togithub.com/imjasonh) in
[https://github.com/sigstore/sigstore/pull/1178](https://togithub.com/sigstore/sigstore/pull/1178)
- Update go.mod and dependabot config by
[@​cpanato](https://togithub.com/cpanato) in
[https://github.com/sigstore/sigstore/pull/1184](https://togithub.com/sigstore/sigstore/pull/1184)
- Add `Cosign.ClaimedIdentity` API by
[@​saschagrunert](https://togithub.com/saschagrunert) in
[https://github.com/sigstore/sigstore/pull/1166](https://togithub.com/sigstore/sigstore/pull/1166)
- build(deps): bump github.com/aws/aws-sdk-go from 1.44.274 to 1.44.275
in /pkg/signature/kms/aws by
[@​dependabot](https://togithub.com/dependabot) in
[https://github.com/sigstore/sigstore/pull/1199](https://togithub.com/sigstore/sigstore/pull/1199)
- Azure KMS: Infer hash function from key by
[@​codysoyland](https://togithub.com/codysoyland) in
[https://github.com/sigstore/sigstore/pull/1149](https://togithub.com/sigstore/sigstore/pull/1149)
- update golang.org/x/crypto to v0.10.0 and golang.org/x/oauth2 v0.9.0
by [@​cpanato](https://togithub.com/cpanato) in
[https://github.com/sigstore/sigstore/pull/1225](https://togithub.com/sigstore/sigstore/pull/1225)
#### New Contributors
- [@​saschagrunert](https://togithub.com/saschagrunert) made their
first contribution in
[https://github.com/sigstore/sigstore/pull/1166](https://togithub.com/sigstore/sigstore/pull/1166)
**Full Changelog**:
sigstore/sigstore@v1.6.4...v1.7.0
###
[`v1.6.5`](https://togithub.com/sigstore/sigstore/releases/tag/v1.6.5)
[Compare
Source](https://togithub.com/sigstore/sigstore/compare/v1.6.4...v1.6.5)
#### What's Changed
- Update Azure Key Vault client by
[@​malancas](https://togithub.com/malancas) in
[https://github.com/sigstore/sigstore/pull/1170](https://togithub.com/sigstore/sigstore/pull/1170)
- kms: split KMS providers into separate Go modules by
[@​imjasonh](https://togithub.com/imjasonh) in
[https://github.com/sigstore/sigstore/pull/1115](https://togithub.com/sigstore/sigstore/pull/1115)
- have submodules specify real s/s releases by
[@​imjasonh](https://togithub.com/imjasonh) in
[https://github.com/sigstore/sigstore/pull/1178](https://togithub.com/sigstore/sigstore/pull/1178)
**Full Changelog**:
sigstore/sigstore@v1.6.4...v1.6.5
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-github-generator).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xMzEuMCIsInVwZGF0ZWRJblZlciI6IjM1LjEzMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Signed-off-by: Mend Renovate <bot@renovateapp.com>1 parent 15ec8ed commit 685c08c
2 files changed
Lines changed: 221 additions & 212 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
14 | | - | |
15 | | - | |
16 | | - | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
23 | 23 | | |
24 | | - | |
| 24 | + | |
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
| |||
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
38 | | - | |
| 38 | + | |
39 | 39 | | |
40 | 40 | | |
41 | 41 | | |
| |||
49 | 49 | | |
50 | 50 | | |
51 | 51 | | |
52 | | - | |
53 | | - | |
54 | | - | |
55 | | - | |
56 | | - | |
57 | | - | |
58 | | - | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
| 55 | + | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
59 | 59 | | |
60 | 60 | | |
61 | | - | |
62 | | - | |
63 | | - | |
64 | | - | |
| 61 | + | |
| 62 | + | |
| 63 | + | |
| 64 | + | |
65 | 65 | | |
66 | 66 | | |
67 | 67 | | |
68 | | - | |
| 68 | + | |
69 | 69 | | |
70 | 70 | | |
71 | 71 | | |
| |||
76 | 76 | | |
77 | 77 | | |
78 | 78 | | |
79 | | - | |
| 79 | + | |
80 | 80 | | |
81 | | - | |
| 81 | + | |
82 | 82 | | |
83 | | - | |
| 83 | + | |
84 | 84 | | |
85 | 85 | | |
86 | 86 | | |
| |||
89 | 89 | | |
90 | 90 | | |
91 | 91 | | |
92 | | - | |
93 | | - | |
| 92 | + | |
| 93 | + | |
94 | 94 | | |
95 | 95 | | |
96 | 96 | | |
| |||
104 | 104 | | |
105 | 105 | | |
106 | 106 | | |
107 | | - | |
| 107 | + | |
108 | 108 | | |
109 | | - | |
| 109 | + | |
110 | 110 | | |
111 | 111 | | |
112 | 112 | | |
113 | | - | |
114 | | - | |
| 113 | + | |
| 114 | + | |
115 | 115 | | |
116 | | - | |
| 116 | + | |
117 | 117 | | |
118 | 118 | | |
119 | 119 | | |
120 | | - | |
| 120 | + | |
121 | 121 | | |
122 | 122 | | |
123 | 123 | | |
124 | 124 | | |
125 | 125 | | |
126 | | - | |
| 126 | + | |
127 | 127 | | |
128 | 128 | | |
129 | 129 | | |
130 | 130 | | |
| 131 | + | |
| 132 | + | |
131 | 133 | | |
132 | 134 | | |
133 | 135 | | |
134 | 136 | | |
135 | 137 | | |
136 | 138 | | |
137 | 139 | | |
| 140 | + | |
138 | 141 | | |
139 | 142 | | |
140 | | - | |
| 143 | + | |
141 | 144 | | |
142 | 145 | | |
143 | | - | |
| 146 | + | |
144 | 147 | | |
145 | 148 | | |
146 | 149 | | |
147 | 150 | | |
148 | | - | |
149 | | - | |
150 | | - | |
151 | | - | |
| 151 | + | |
| 152 | + | |
| 153 | + | |
152 | 154 | | |
153 | | - | |
154 | | - | |
| 155 | + | |
| 156 | + | |
155 | 157 | | |
156 | 158 | | |
157 | | - | |
158 | | - | |
| 159 | + | |
| 160 | + | |
159 | 161 | | |
160 | 162 | | |
161 | 163 | | |
162 | 164 | | |
163 | 165 | | |
164 | 166 | | |
165 | 167 | | |
166 | | - | |
167 | | - | |
| 168 | + | |
| 169 | + | |
168 | 170 | | |
169 | 171 | | |
170 | 172 | | |
171 | | - | |
172 | | - | |
173 | | - | |
| 173 | + | |
| 174 | + | |
| 175 | + | |
| 176 | + | |
174 | 177 | | |
175 | | - | |
| 178 | + | |
176 | 179 | | |
177 | 180 | | |
178 | 181 | | |
179 | | - | |
| 182 | + | |
180 | 183 | | |
181 | | - | |
| 184 | + | |
182 | 185 | | |
183 | 186 | | |
184 | 187 | | |
185 | 188 | | |
186 | | - | |
187 | | - | |
| 189 | + | |
| 190 | + | |
188 | 191 | | |
189 | | - | |
190 | | - | |
| 192 | + | |
| 193 | + | |
191 | 194 | | |
192 | 195 | | |
193 | 196 | | |
194 | 197 | | |
195 | 198 | | |
196 | | - | |
197 | | - | |
198 | | - | |
| 199 | + | |
| 200 | + | |
| 201 | + | |
199 | 202 | | |
200 | | - | |
201 | | - | |
| 203 | + | |
| 204 | + | |
202 | 205 | | |
203 | 206 | | |
204 | 207 | | |
| |||
0 commit comments