Bump the all group with 12 updates #915
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the all group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/grafeas/grafeas](https://github.com/grafeas/grafeas) | `0.2.2` | `0.2.3` | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.1.1` | `2.2.0` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.2.2` | `1.3.0` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.7.2` | `1.7.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.7.2` | `1.7.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.7.2` | `1.7.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.7.2` | `1.7.3` | | [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.7.2` | `1.7.3` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.50.1` | `0.51.0` | | [gocloud.dev/docstore/mongodocstore](https://github.com/google/go-cloud) | `0.33.0` | `0.34.0` | | [gocloud.dev/pubsub/kafkapubsub](https://github.com/google/go-cloud) | `0.33.0` | `0.34.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.12.0` | `0.13.0` | Updates `github.com/grafeas/grafeas` from 0.2.2 to 0.2.3 - [Release notes](https://github.com/grafeas/grafeas/releases) - [Changelog](https://github.com/grafeas/grafeas/blob/master/CHANGELOG.md) - [Commits](grafeas/grafeas@v0.2.2...v0.2.3) Updates `github.com/sigstore/cosign/v2` from 2.1.1 to 2.2.0 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.1.1...v2.2.0) Updates `github.com/sigstore/rekor` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.2.2...v1.3.0) Updates `github.com/sigstore/sigstore` from 1.7.2 to 1.7.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.7.2...v1.7.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.7.2 to 1.7.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.7.2...v1.7.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.7.2 to 1.7.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.7.2...v1.7.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.7.2 to 1.7.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.7.2...v1.7.3) Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.7.2 to 1.7.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.7.2...v1.7.3) Updates `github.com/tektoncd/pipeline` from 0.50.1 to 0.51.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.50.1...v0.51.0) Updates `gocloud.dev/docstore/mongodocstore` from 0.33.0 to 0.34.0 - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](google/go-cloud@v0.33.0...v0.34.0) Updates `gocloud.dev/pubsub/kafkapubsub` from 0.33.0 to 0.34.0 - [Release notes](https://github.com/google/go-cloud/releases) - [Commits](google/go-cloud@v0.33.0...v0.34.0) Updates `golang.org/x/crypto` from 0.12.0 to 0.13.0 - [Commits](golang/crypto@v0.12.0...v0.13.0) --- updated-dependencies: - dependency-name: github.com/grafeas/grafeas dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/cosign/v2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/sigstore dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: gocloud.dev/docstore/mongodocstore dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: gocloud.dev/pubsub/kafkapubsub dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
ok-to-test
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a tektoncd member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
tekton-robot
added
the
size/XL
|
@dependabot[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 12 updates:
0.2.20.2.32.1.12.2.01.2.21.3.01.7.21.7.31.7.21.7.31.7.21.7.31.7.21.7.31.7.21.7.30.50.10.51.00.33.00.34.00.33.00.34.00.12.00.13.0Updates
github.com/grafeas/grafeasfrom 0.2.2 to 0.2.3Release notes
Sourced from github.com/grafeas/grafeas's releases.
Changelog
Sourced from github.com/grafeas/grafeas's changelog.
Commits
9879ecaMerge pull request #602 from wkozlik/master9f3420dRelease v0.2.31fe2449Merge pull request #599 from yeshwanth1993/master2c5c15cAdd vulnerabilityId field to the VexAssessment Note and VexAssessment proto i...d273654Merge pull request #598 from sherzberg-1/sbom5ee9a40More test updates.8c2079fFix test description8d48f5bFix failing test420da5cAdd intotslsaprovenancev1 to the build proto.fe5c9c1Merge pull request #597 from sherzberg-1/sbomUpdates
github.com/sigstore/cosign/v2from 2.1.1 to 2.2.0Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
Commits
546f1c5add changelog for v2.2.0 (#3198)126474cadd mTLS to TSA for sign-blob command (#3200)5f747c2chore(deps): bump github.com/buildkite/agent/v3 from 3.52.0 to 3.52.1 (#3204)2c5efb8chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#3203)d557f47Add SECURITY.md file (#3201)1e9bac4chore(deps): bump github.com/sigstore/timestamp-authority (#3199)beefa3bDocs/update links (#3196)b6c986fchore(deps): bump go.step.sm/crypto from 0.34.0 to 0.35.0 (#3194)8df14d8chore(deps): bump google.golang.org/api from 0.137.0 to 0.138.0 (#3195)fdb1496chore(deps): bump github.com/buildkite/agent/v3 from 3.51.0 to 3.52.0 (#3193)Updates
github.com/sigstore/rekorfrom 1.2.2 to 1.3.0Release notes
Sourced from github.com/sigstore/rekor's releases.
... (truncated)
Changelog
Sourced from github.com/sigstore/rekor's changelog.
Commits
ed3d0b1changelog for v1.3.0 (#1657)f0fe617Update openapi.yaml (#1655)be96b95build(deps): Bump google/cloud-sdk from4769605to648eb94(#1656)a0a4820build(deps): Bump google/cloud-sdk fromf656d61to4769605(#1654)4c6df3epass transient errors through retrieveLogEntry (#1653)f3d6483return full entryID on HTTP 409 responses (#1650)2934605set min go version to 1.21 (#1651)a9f538dbuild(deps): Bump github.com/go-playground/validator/v10 (#1648)3a89ae4build(deps): Bump google/cloud-sdk from 443.0.0 to 444.0.0 (#1647)6208b39build(deps): Bump google.golang.org/api from 0.135.0 to 0.138.0 (#1646)Updates
github.com/sigstore/sigstorefrom 1.7.2 to 1.7.3Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
e759e0fbuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1371)c6f738bbuild(deps): bump hashicorp/vault from 1.14.1 to 1.14.2 in /test/e2e (#1370)74a4c9aadd VerifySignature test, cleanup other tests and print statements (#1369)01dd5d4build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1368)bf2d820build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1367)df3ca86build(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#1362)0007debbuild(deps): bump github.com/aws/aws-sdk-go-v2/config (#1364)901129ebuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1366)f3fef76build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azk...b103efebuild(deps): bump github.com/jellydator/ttlcache/v3 (#1358)Updates
github.com/sigstore/sigstore/pkg/signature/kms/awsfrom 1.7.2 to 1.7.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.
Commits
e759e0fbuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1371)c6f738bbuild(deps): bump hashicorp/vault from 1.14.1 to 1.14.2 in /test/e2e (#1370)74a4c9aadd VerifySignature test, cleanup other tests and print statements (#1369)01dd5d4build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1368)bf2d820build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1367)df3ca86build(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#1362)0007debbuild(deps): bump github.com/aws/aws-sdk-go-v2/config (#1364)901129ebuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1366)f3fef76build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azk...b103efebuild(deps): bump github.com/jellydator/ttlcache/v3 (#1358)Updates
github.com/sigstore/sigstore/pkg/signature/kms/azurefrom 1.7.2 to 1.7.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.
Commits
e759e0fbuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1371)c6f738bbuild(deps): bump hashicorp/vault from 1.14.1 to 1.14.2 in /test/e2e (#1370)74a4c9aadd VerifySignature test, cleanup other tests and print statements (#1369)01dd5d4build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1368)bf2d820build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1367)df3ca86build(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#1362)0007debbuild(deps): bump github.com/aws/aws-sdk-go-v2/config (#1364)901129ebuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1366)f3fef76build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azk...b103efebuild(deps): bump github.com/jellydator/ttlcache/v3 (#1358)Updates
github.com/sigstore/sigstore/pkg/signature/kms/gcpfrom 1.7.2 to 1.7.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.
Commits
e759e0fbuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1371)c6f738bbuild(deps): bump hashicorp/vault from 1.14.1 to 1.14.2 in /test/e2e (#1370)74a4c9aadd VerifySignature test, cleanup other tests and print statements (#1369)01dd5d4build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1368)bf2d820build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1367)df3ca86build(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#1362)0007debbuild(deps): bump github.com/aws/aws-sdk-go-v2/config (#1364)901129ebuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1366)f3fef76build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azk...b103efebuild(deps): bump github.com/jellydator/ttlcache/v3 (#1358)Updates
github.com/sigstore/sigstore/pkg/signature/kms/hashivaultfrom 1.7.2 to 1.7.3Release notes
Sourced from github.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases.
Commits
e759e0fbuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1371)c6f738bbuild(deps): bump hashicorp/vault from 1.14.1 to 1.14.2 in /test/e2e (#1370)74a4c9aadd VerifySignature test, cleanup other tests and print statements (#1369)01dd5d4build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1368)bf2d820build(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1367)df3ca86build(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#1362)0007debbuild(deps): bump github.com/aws/aws-sdk-go-v2/config (#1364)901129ebuild(deps): bump github.com/aws/aws-sdk-go in /pkg/signature/kms/aws (#1366)f3fef76build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azk...b103efebuild(deps): bump github.com/jellydator/ttlcache/v3 (#1358)Updates
github.com/tektoncd/pipelinefrom 0.50.1 to 0.51.0Release notes
Sourced from github.com/tektoncd/pipeline's releases.
... (truncated)
Commits
2299b15Bump github.com/golangci/golangci-lint from 1.54.1 to 1.54.2 in /tools445734dAdd webhook validation for remote Tasks7884311fix: refine error resean with invalid pipelinename in taskrunspecs7554dcdAdd service for Resolvers - metrics, probes and tracingfff25b1docs: Update references to examples from v1beta1 to v11335e0eBump github.com/golangci/golangci-lint from 1.54.0 to 1.54.1 in /tools6a857f7[TEP-0135] Improve workspace related documentation9698ef7Fix release pipeline (publish-to-bucket)e62bb60Bump github.com/golangci/golangci-lint from 1.53.3 to 1.54.0 in /tools6117b7afix: add taskRunTemplate field validationUpdates
gocloud.dev/docstore/mongodocstorefrom 0.33.0 to 0.34.0Release notes
Sourced from gocloud.dev/docstore/mongodocstore's releases.
Commits
22c0c79all: prelease (#3308)55ed7f7aws/rds: Switch AWS RDS CA bundle to the officially documented URL (#3307)d6f90a4Clean up deployment instructions a bit moredfd6143Update website deployment instructions62841e7blob/gcsblob: Don't hard-fail if no DefaultCredentials are found (#3306)1b4bd15blob/s3blob: Fix example (#3305)7298f99all: update to go 1.21 (#3301)dee61a5blob/fileblob: Fix for URL parameter for no_tmp_dir option. (#3300)cfe20cablob/fileblob: Add docstring about tempdirs (#3296)9b62f46blob/fileblob: Add an option to avoid using os.TempDir for temp files (#3295)Updates
gocloud.dev/pubsub/kafkapubsubfrom 0.33.0 to 0.34.0Release notes
Sourced from gocloud.dev/pubsub/kafkapubsub's releases.
Commits
22c0c79all: prelease (#3308)55ed7f7aws/rds: Switch AWS RDS CA bundle to the officially documented URL (#3307)d6f90a4Clean up deployment instructions a bit moredfd6143Update website deployment instructions62841e7blob/gcsblob: Don't hard-fail if no DefaultCredentials are found (#3306)1b4bd15blob/s3blob: Fix example (#3305)7298f99all: update to go 1.21 (#3301)dee61a5blob/fileblob: Fix for URL parameter for no_tmp_dir option. (#3300)cfe20cablob/fileblob: Add docstring about tempdirs (#3296)9b62f46blob/fileblob: Add an option to avoid using os.TempDir for temp files (#3295)Updates
golang.org/x/cryptofrom 0.12.0 to 0.13.0Commits
0d375bego.mod: update golang.org/x dependenciesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions