Skip to content

chore(deps): bump github.com/sigstore/sigstore-go from 1.2.2 to 1.3.0 - #802

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/sigstore/sigstore-go-1.3.0
Open

chore(deps): bump github.com/sigstore/sigstore-go from 1.2.2 to 1.3.0#802
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/sigstore/sigstore-go-1.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/sigstore/sigstore-go from 1.2.2 to 1.3.0.

Release notes

Sourced from github.com/sigstore/sigstore-go's releases.

v1.3.0

What's Changed

New Contributors

Full Changelog: sigstore/sigstore-go@v1.2.2...v1.3.0

Commits
  • 22d3691 Bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#667)
  • 41fe108 Bump linter, disable goconst, run go fix (#664)
  • ba85fa8 verify: stop materializing in-toto predicates the verifier never reads (#666)
  • 96c07cb Handle 409s from Rekor v1 by fetching the entry (#647)
  • 85e559c Bump the minor-patch group across 1 directory with 2 updates (#662)
  • fe6a5a5 Bump actions/checkout from 7.0.0 to 7.0.1 (#663)
  • fc71b2a fix(verify): prevent nil-pointer panic in TLogEntries (#658)
  • 444ecf7 Bump the minor-patch group across 1 directory with 6 updates (#660)
  • 96894f5 Bump actions/setup-go from 6.5.0 to 7.0.0 (#659)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 3, 2026 01:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk medium github.com/sigstore/sigstore-go v1.3.0
Release Age 82h Released 82 hours ago
Ownership third-party External dependency
Dependency Usage 10 repos Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=medium, review=success, ownership=third-party, release_age=82h.

@trevor-vaughan
trevor-vaughan force-pushed the dependabot/go_modules/github.com/sigstore/sigstore-go-1.3.0 branch from b564e18 to 6f6258e Compare August 3, 2026 13:58

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=medium, review=success, ownership=third-party, release_age=95h.

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk medium github.com/sigstore/sigstore-go v1.3.0
Release Age 95h Released 95 hours ago
Ownership third-party External dependency
Dependency Usage 10 repos Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@yvonnedevlinrh yvonnedevlinrh left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@yvonnedevlinrh

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@yvonnedevlinrh

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) from 1.2.2 to 1.3.0.
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](sigstore/sigstore-go@v1.2.2...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sigstore/sigstore-go-1.3.0 branch from 6f6258e to ad18100 Compare August 4, 2026 10:13
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk medium github.com/sigstore/sigstore-go v1.3.0
Release Age 115h Released 115 hours ago
Ownership third-party External dependency
Dependency Usage 10 repos Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=medium, review=success, ownership=third-party, release_age=115h.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant