Skip to content

Commit

Permalink
Update sigstore/cosign-installer action to v3.3.0 (#9)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | action | minor | `v3.1.1` -> `v3.3.0` |

---

### Release Notes

<details>
<summary>sigstore/cosign-installer (sigstore/cosign-installer)</summary>

### [`v3.3.0`](https://github.com/sigstore/cosign-installer/releases/tag/v3.3.0)

[Compare Source](sigstore/cosign-installer@v3.2.0...v3.3.0)

#### What's Changed

-   Bump actions/setup-go from 4.1.0 to 5.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in sigstore/cosign-installer#152
-   update action to use latest cosign v2.2.2 by [@&#8203;cpanato](https://github.com/cpanato) in sigstore/cosign-installer#153

**Full Changelog**: sigstore/cosign-installer@v3.2.0...v3.3.0

### [`v3.2.0`](https://github.com/sigstore/cosign-installer/releases/tag/v3.2.0)

[Compare Source](sigstore/cosign-installer@v3.1.2...v3.2.0)

**Note: This release comes with a fix for CVE-2023-46737 described in this [Github Security Advisory](GHSA-vfp6-jrw2-99g9). Please upgrade to this release ASAP**

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

#### What's Changed

-   Support the runner context of gitea act by [@&#8203;josedev-union](https://github.com/josedev-union) in sigstore/cosign-installer#147
-   bump cosign to v2.2.1 by [@&#8203;cpanato](https://github.com/cpanato) in sigstore/cosign-installer#148
-   test with latest go version by [@&#8203;bobcallaway](https://github.com/bobcallaway) in sigstore/cosign-installer#150

#### New Contributors

-   [@&#8203;josedev-union](https://github.com/josedev-union) made their first contribution in sigstore/cosign-installer#147

**Full Changelog**: sigstore/cosign-installer@v3...v3.2.0

### [`v3.1.2`](https://github.com/sigstore/cosign-installer/releases/tag/v3.1.2)

[Compare Source](sigstore/cosign-installer@v3.1.1...v3.1.2)

#### What's Changed

-   Fix build and push step Readme missing id by [@&#8203;hbenali](https://github.com/hbenali) in sigstore/cosign-installer#138
-   bump cosign to v2.2.0 by [@&#8203;cpanato](https://github.com/cpanato) in sigstore/cosign-installer#142

#### New Contributors

-   [@&#8203;hbenali](https://github.com/hbenali) made their first contribution in sigstore/cosign-installer#138

**Full Changelog**: sigstore/cosign-installer@v3...v3.1.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNDEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE0MS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Reviewed-on: https://gitea.int.magicalinternetbox.net/joel/rhel-wireguard/pulls/9
Co-authored-by: Renovate Bot <renovatebot-gitea@talktojoel.me>
Co-committed-by: Renovate Bot <renovatebot-gitea@talktojoel.me>
  • Loading branch information
Renovate Bot authored and JoelDewey committed Jan 22, 2024
1 parent a063e63 commit f2c1b78
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/docker-publish.yml
Expand Up @@ -41,7 +41,7 @@ jobs:
# https://github.com/sigstore/cosign-installer
- name: Install cosign
if: github.event_name != 'pull_request'
uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0
with:
cosign-release: 'v2.1.1'

Expand Down

0 comments on commit f2c1b78

Please sign in to comment.